Function at 0x40129b
Capabilities:
Link many functions at runtime

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3e0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0xa0], 0xb7d9b8d3
mov dword [ebp - 0x9c], 0xd7e4e7b8
lea edi, [ebp - 0x15]
mov dword [ebp - 0x98], 0xadb8e2d3
xor eax, eax
mov dword [ebp - 0x94], 0xd7c8d7db
mov dword [ebp - 0x90], 0xd0ebe1e3
mov byte [ebp - 0x8c], 0x57
mov dword [ebp - 0x8b], ebx
mov dword [ebp - 0x87], 0xcad7b8c6
mov dword [ebp - 0x83], 0xd4cbb5b1
mov dword [ebp - 0x7f], 0xbaebd3d3
mov dword [ebp - 0x7b], 0xbda9d2af
mov dword [ebp - 0x77], 0xbcc8dde1
mov dword [ebp - 0x73], 0xc5c6d7da
mov dword [ebp - 0x6f], 0xd9b8d364
mov dword [ebp - 0x6b], 0xc7cba9b8
mov dword [ebp - 0x67], 0xb8e0e1d6
mov dword [ebp - 0x63], 0xadb0d8b0
mov dword [ebp - 0x5f], 0xd7c8d7db
mov dword [ebp - 0x5b], 0xcedbe1e3
mov dword [ebp - 0x57], 0xb5c373d8
mov dword [ebp - 0x53], 0xd9d5c6d7
mov dword [ebp - 0x4f], 0xdcd2b7b7
mov dword [ebp - 0x4b], 0xbcb9d9e3
mov dword [ebp - 0x47], 0xc5c6d7da
mov byte [ebp - 0x43], 0x64
mov dword [ebp - 0x42], ebx
mov dword [ebp - 0x3e], 0xacc70000
mov dword [ebp - 0x3a], 0xe7b8b7d9
mov dword [ebp - 0x36], 0xe2d3d7e4
mov dword [ebp - 0x32], 0xd7dabcc8
mov word [ebp - 0x2e], 0xc5c6
mov byte [ebp - 0x2c], 0x64
mov dword [ebp - 0x2b], ebx
mov dword [ebp - 0x27], ebx
mov dword [ebp - 0x23], 0xe3e8c8d3
mov dword [ebp - 0x1f], 0xb8d2d3d5
mov dword [ebp - 0x1b], 0xc6d7dabc
mov word [ebp - 0x17], 0x64c5
stosd dword es:[edi], eax
push str.KERNEL32
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push dword [ebp + 0x14]
mov dword [ebp - 0xc4], eax
push str.Unable_to_insert__s__DLL_not_found_or_LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR_not_available_n
call fcn.0040301d
push dword [ebp + 0x18]
push str.Could_not_load_the_function:__s
lea edi, [eax + 1]
call fcn.0040301d
add esp, 0x10
lea esi, [eax + 1]
push edi
call fcn.00403a78
mov edi, eax
push esi
mov dword [ebp - 0xc8], edi
call fcn.00403a78
mov byte [ebp - 1], pe_nt_image_headers32
mov edx, ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0x108], ebx
mov bl, byte [ebp - 1]
mov dword [ebp - 0xb0], eax
sub byte [ebp + edx - 0xa0], bl
mov bl, byte [ebp + edx - 0xa0]
inc edx
movzx eax, bl
movsx ecx, byte [ebp + edx - 0xa0]
sub ecx, eax
jne 0x401428
sub byte [ebp + edx - 0xa0], bl
xor edx, edx
mov byte [ebp - 1], pe_nt_image_headers32
mov bl, byte [ebp - 1]
sub byte [ebp + edx - 0x87], bl
mov bl, byte [ebp + edx - 0x87]
inc edx
movzx eax, bl
movsx ecx, byte [ebp + edx - 0x87]
sub ecx, eax
jne 0x401456
sub byte [ebp + edx - 0x87], bl
xor edx, edx
mov byte [ebp - 1], pe_nt_image_headers32
mov bl, byte [ebp - 1]
sub byte [ebp + edx - 0x6e], bl
mov bl, byte [ebp + edx - 0x6e]
inc edx
movzx eax, bl
movsx ecx, byte [ebp + edx - 0x6e]
sub ecx, eax
jne 0x401484
sub byte [ebp + edx - 0x6e], bl
xor edx, edx
mov byte [ebp - 1], pe_nt_image_headers32
mov bl, byte [ebp - 1]
sub byte [ebp + edx - 0x3c], bl
mov bl, byte [ebp + edx - 0x3c]
inc edx
movzx eax, bl
movsx ecx, byte [ebp + edx - 0x3c]
sub ecx, eax
jne 0x4014a6
sub byte [ebp + edx - 0x3c], bl
xor edx, edx
mov ebx, pe_nt_image_headers32
sub byte [ebp + edx - 0x23], bl
mov bl, byte [ebp + edx - 0x23]
inc edx
movzx eax, bl
mov bh, byte [ebp + edx - 0x23]
movsx ecx, bh
sub ecx, eax
jne 0x4014c6
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub bh, bl
mov byte [ebp + edx - 0x23], bh
mov ebx, dword [ebp - 0xc4]
push str.GetCurrentDirectoryW
push ebx
mov dword [ebp - 0x110], esi
call esi
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0xa0]
push eax
push ebx
call esi
push str.LoadLibraryW
push ebx
mov dword [ebp - 0xdc], eax
call esi
push str.LoadLibraryExW
push ebx
mov dword [ebp - 0x114], eax
call esi
push 0x4062ec
push ebx
mov dword [ebp - 0xe8], eax
call esi
push str.ExitThread
push ebx
mov dword [ebp - 0xb8], eax
call esi
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0x87]
push eax
push ebx
call esi
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x6e]
push eax
push ebx
call esi
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x3c]
push eax
push ebx
call esi
lea eax, [ebp - 0x23]
push eax
push ebx
call esi
xor ecx, ecx
mov ebx, pe_nt_image_headers32
mov dl, bl
cmp byte [ebp - 0xa0], cl
je 0x4015aa
add byte [ebp + ecx - 0xa0], dl
mov al, byte [ebp + ecx - 0xa0]
sub al, dl
inc ecx
mov dl, al
cmp byte [ebp + ecx - 0xa0], 0
jne 0x40158d
add byte [ebp + ecx - 0xa0], dl
xor ecx, ecx
mov dl, bl
cmp byte [ebp - 0x87], cl
je 0x4015da
add byte [ebp + ecx - 0x87], dl
mov al, byte [ebp + ecx - 0x87]
sub al, dl
inc ecx
mov dl, al
cmp byte [ebp + ecx - 0x87], 0
jne 0x4015bd
add byte [ebp + ecx - 0x87], dl
xor ecx, ecx
mov dl, bl
cmp byte [ebp - 0x6e], cl
je 0x4015fe
add byte [ebp + ecx - 0x6e], dl
mov al, byte [ebp + ecx - 0x6e]
sub al, dl
inc ecx
mov dl, al
cmp byte [ebp + ecx - 0x6e], 0
jne 0x4015ea
add byte [ebp + ecx - 0x6e], dl
xor ecx, ecx
mov dl, bl
cmp byte [ebp - 0x3c], cl
je 0x40161f
add byte [ebp + ecx - 0x3c], dl
mov al, byte [ebp + ecx - 0x3c]
sub al, dl
inc ecx
mov dl, al
cmp byte [ebp + ecx - 0x3c], 0
jne 0x40160b
add byte [ebp + ecx - 0x3c], dl
xor ecx, ecx
mov dl, bl
cmp byte [ebp - 0x23], cl
je 0x401640
add byte [ebp + ecx - 0x23], dl
mov al, byte [ebp + ecx - 0x23]
sub al, dl
inc ecx
mov dl, al
cmp byte [ebp + ecx - 0x23], 0
jne 0x40162c
push dword [ebp + 0x14]
add byte [ebp + ecx - 0x23], dl
push str.Unable_to_insert__s__DLL_not_found_or_LOAD_LIBRARY_SEARCH_DLL_LOAD_DIR_not_available_n
push edi
call fcn.0040303e
push dword [ebp + 0x18]
mov esi, dword [ebp - 0xb0]
push str.Could_not_load_the_function:__s
push esi
call fcn.0040303e
add esp, 0x18
cmp dword [ebp + 0x10], 0
jne 0x401676
mov esi, 0x800
jmp 0x4016ae
push esi
call fcn.0040378e
push edi
mov esi, eax
call fcn.0040378e
push dword [ebp + 0x10]
add esi, eax
call fcn.0040378e
push dword [ebp + 0x14]
add esi, eax
call fcn.0040378e
push dword [ebp + 0x18]
add esi, eax
call fcn.0040378e
add eax, esi
add eax, dword [ebp + 0x20]
lea esi, [eax*2 + 0x80a]
mov eax, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push esi
push 8
mov dword [ebp - 0x10c], eax
call eax
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
push 0x20
push 0x3000
push esi
mov edi, eax
mov eax, dword [ebp + 8]
push 0
push eax
mov dword [ebp - 0xa4], edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
lea ecx, [edi + 4]
mov dword [ebp - 8], eax
mov edi, eax
sub edi, dword [ebp - 0xa4]
push str.user32.dll
mov dword [ebp - 0xc0], edi
lea eax, [edi + ecx]
add ecx, 4
mov dword [ebp - 0xd4], eax
lea eax, [edi + ecx]
add ecx, 4
mov dword [ebp - 0xf4], eax
push ecx
lea eax, [edi + ecx]
mov dword [ebp - 0x104], eax
call fcn.00401e16
mov esi, eax
pop ecx
pop ecx
push str.MessageBoxW
lea eax, [edi + esi]
mov dword [ebp - 0xd0], eax
call fcn.0040378e
inc eax
push eax
push str.MessageBoxW
push esi
call fcn.00401eb3
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x401762
push dword [ebp + 0x10]
lea ecx, [edi + eax]
push eax
mov dword [ebp - 0xa8], ecx
call fcn.00401e16
pop ecx
pop ecx
push dword [ebp + 0x14]
lea ecx, [edi + eax]
push eax
mov dword [ebp - 0xe4], ecx
call fcn.00401e16
pop ecx
mov esi, eax
pop ecx
push dword [ebp + 0x18]
lea eax, [edi + esi]
mov dword [ebp - 0xf8], eax
call fcn.0040378e
inc eax
push eax
push dword [ebp + 0x18]
push esi
call fcn.00401eb3
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
lea ecx, [edi + eax]
push eax
mov dword [ebp - 0xb4], ecx
call fcn.00401eb3
push str.Error
push eax
lea ecx, [edi + eax]
mov dword [ebp - 0xec], ecx
call fcn.00401e16
push dword [ebp - 0xc8]
push eax
lea ecx, [edi + eax]
mov dword [ebp - 0xf0], ecx
call fcn.00401e16
push dword [ebp - 0xb0]
push eax
lea ecx, [edi + eax]
mov dword [ebp - 0xfc], ecx
call fcn.00401e16
mov edi, eax
mov esi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xc0]
add esp, 0x30
mov word [edi], 0xcccc
mov byte [edi + 2], 0xcc
add edi, 3
add eax, edi
mov dword [ebp + 0x10], eax
mov eax, dword [ebp - 0x104]
mov byte [edi], 0x68
inc edi
push 4
pop edx
mov dword [edi], eax
add edi, edx
mov eax, dword [ebp - 0x114]
mov byte [edi], 0xb8
inc edi
mov dword [edi], eax
add edi, edx
mov eax, dword [ebp - 0xd0]
mov word [edi], 0xd0ff
mov byte [edi + 2], 0x68
add edi, 3
mov dword [edi], eax
add edi, edx
mov eax, dword [ebp - 0xb8]
mov word [edi], 0xb850
add edi, 2
mov dword [edi], eax
add edi, edx
mov eax, dword [ebp - 0xa8]
mov word [edi], 0xd0ff
mov byte [edi + 2], 0xa3
add edi, 3
mov dword [edi], esi
add edi, edx
test eax, eax
je 0x4018d0
mov ecx, dword [ebp - 0xd8]
mov dword [edi], 0x6ae589
mov word [edi + 4], 0x6a
mov byte [edi + 6], 0xbe
add edi, 7
mov dword [edi], ecx
add edi, edx
mov dword [edi], 0xc189d6ff
mov dword [edi + 4], 0xe183e1d1
mov word [edi + 8], 0x83f8
mov byte [edi + 0xa], 0xc1
mov byte [edi + 0xb], dl
mov dword [edi + 0xc], 0xe389cc29
mov dword [edi + 0x10], 0xd6ff5053
mov byte [edi + 0x14], 0x68
add edi, 0x15
mov dword [edi], eax
add edi, edx
mov eax, dword [ebp - 0xdc]
mov byte [edi], 0xbe
inc edi
mov dword [edi], eax
add edi, edx
mov word [edi], 0xd6ff
add edi, 2
push dword [ebp + 0x14]
call fcn.00401de1
pop ecx
test al, al
jne 0x4018fb
cmp dword [ebp - 0xe0], 0
je 0x4018fb
mov byte [edi], 0x68
lea eax, [edi + 1]
xor edx, edx
mov word [edi + 2], 9
add edi, 4
mov byte [edi], dl
jmp 0x401905
lea eax, [edi + 1]
mov byte [edi], 0x6a
mov edi, eax
xor edx, edx
mov byte [eax], dl
mov eax, dword [ebp - 0xe4]
mov word [edi + 1], 0x6a
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xe8]
mov byte [edi + 3], 0x68
mov byte [edi + 8], 0xb8
mov dword [edi + 9], eax
mov dword [edi + 0xd], 0xc789d0ff
add edi, 0x11
cmp dword [ebp - 0xa8], 0
je 0x401947
mov dword [edi], 0x89d6ff53
mov byte [edi + 4], 0xec
add edi, 5
mov dword [edi], 0x7500ff83
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xec]
mov dword [edi + 0xd], eax
mov eax, dword [ebp - 0xbc]
mov dword [edi + 0x1d], eax
mov eax, dword [ebp - 0xf4]
mov dword [edi + 0x25], eax
mov dword [edi + 0x2a], edx
mov edx, dword [ebp - 0xb8]
mov dword [edi + 8], ecx
mov dword [edi + 0x3e], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [edi + 0x14], esi
mov dword [edi + 4], 0x68106a1e
mov byte [edi + 0xc], 0x68
mov word [edi + 0x11], 0x6a
mov byte [edi + 0x13], 0xa1
mov dword [edi + 0x18], 0x16ad0ff
mov byte [edi + 0x1c], 0xb8
mov dword [edi + 0x21], 0x3d89d0ff
mov byte [edi + 0x29], 0x68
mov word [edi + 0x2e], 0xb857
mov dword [edi + 0x30], edx
mov dword [edi + 0x34], 0xf883d0ff
mov dword [edi + 0x38], 0x6a237500
mov word [edi + 0x3c], 0x6810
mov byte [edi + 0x42], 0x68
add edi, 0x43
push 4
mov dword [edi], ecx
pop ecx
add edi, ecx
mov word [edi], 0x6a
mov byte [edi + 2], 0xa1
add edi, 3
mov dword [edi], esi
add edi, ecx
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [edi], 0x26ad0ff
mov byte [edi + 4], 0x68
add edi, 5
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 0x100]
mov byte [edi], 0xb8
inc edi
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 0xb4]
mov word [edi], 0xd0ff
mov byte [edi + 2], 0x68
add edi, 3
mov dword [edi], eax
add edi, ecx
mov eax, dword [ebp - 0xbc]
mov word [edi], 0xd0ff
add edi, 2
mov dword [ebp - 0xb4], edi
mov word [edi], 0x6a
mov byte [edi + 2], 0xb8
add edi, 3
mov dword [edi], eax
add edi, ecx
lea eax, [ebp - 0xac]
push eax
push ecx
mov byte [edi], 0xff
inc edi
mov byte [edi], 0xd0
sub edi, dword [ebp - 0xa4]
inc edi
push edi
push dword [ebp - 8]
push dword [ebp + 8]
call esi
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0xa4]
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0xac]
push edi
push dword [ebp - 8]
push dword [ebp + 8]
call esi
mov esi, dword [ebp + 8]
push edi
push dword [ebp - 8]
push esi
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push dword [ebp - 0xa4]
push 0
call dword [ebp - 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [ebp + 0xc], 0
je 0x401b3d
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x3e0], 0x10001
push eax
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edi, dword [ebp - 0x328]
mov eax, dword [ebp + 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov dword [ebp - 0x328], eax
lea eax, [ebp - 0x3e0]
push eax
push dword [ebp + 0xc]
call esi
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xb4]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00401c08
add esp, 0xc
mov dword [ebp - 0x328], edi
lea eax, [ebp - 0x3e0]
push eax
push dword [ebp + 0xc]
call esi
and dword [ebp - 0xcc], 0
jmp 0x401bc4
xor edx, edx
sub byte [ebp + edx - 0x55], bl
mov bl, byte [ebp + edx - 0x55]
inc edx
movzx eax, bl
mov bh, byte [ebp + edx - 0x55]
movsx ecx, bh
sub ecx, eax
jne 0x401b3f
lea eax, [ebp - 0x87]
sub bh, bl
push eax
mov eax, dword [ebp - 0xc4]
push eax
mov byte [ebp + edx - 0x55], bh
call dword [ebp - 0x110]
xor ecx, ecx
mov edx, eax
mov ebx, pe_nt_image_headers32
cmp byte [ebp - 0x55], cl
je 0x401b92
add byte [ebp + ecx - 0x55], bl
mov al, byte [ebp + ecx - 0x55]
sub al, bl
inc ecx
mov bl, al
cmp byte [ebp + ecx - 0x55], 0
jne 0x401b7e
add byte [ebp + ecx - 0x55], bl
xor ecx, ecx
mov eax, dword [ebp + 0x10]
push ecx
push ecx
push ecx
push eax
push ecx
push ecx
push esi
call edx
mov esi, eax
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0xcc]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 8]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push dword [ebp - 0xc8]
call fcn.00403a4f
push dword [ebp - 0xb0]
call fcn.00403a4f
mov eax, dword [ebp - 0xcc]
pop edi
pop esi
pop ebx
leave
ret