Function at 0x403133
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 4], 0
mov dword [ebp - 8], esp
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
nop
nop
cmp dword [ebp - 8], esp
je 0x40316c
push 0x19
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098ad], eax
mov dword [ebp - 8], esp
push 0x497b05
xor eax, eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
nop
nop
cmp dword [ebp - 8], esp
je 0x40319f
push 0x46
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098b1], eax
mov dword [ebp - 8], esp
push str.GlobalAlloc
push dword [0x6098b1]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 8], esp
je 0x4031d8
push 0x85
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098b5], eax
mov dword [ebp - 8], esp
push str.GlobalFree
push dword [0x6098b1]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 8], esp
je 0x403211
push 0xca
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098b9], eax
mov dword [0x6098bd], 0x3a8
call fcn.0040344d
mov dword [0x6098c1], eax
call fcn.0040367d
mov dword [0x6098c5], eax
call fcn.004036a1
mov dword [0x6098c9], eax
call fcn.004036c5
mov dword [0x6098cd], eax
call fcn.004036e9
mov dword [0x6098d1], eax
mov dword [ebp - 8], esp
xor eax, eax
call dword [0x609995]
nop
nop
cmp dword [ebp - 8], esp
je 0x40327b
push 0x21b
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098d5], eax
mov dword [ebp - 8], esp
push str.ntdll.dll
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
nop
nop
cmp dword [ebp - 8], esp
je 0x4032ae
push 0x248
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [ebp - 4], eax
mov dword [ebp - 8], esp
push str.RtlAllocateHeap
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 8], esp
je 0x4032e2
push 0x28d
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098d9], eax
mov dword [ebp - 8], esp
push str.RtlReAllocateHeap
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 8], esp
je 0x403318
push 0x2e3
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098dd], eax
mov dword [ebp - 8], esp
push str.RtlFreeHeap
push dword [ebp - 4]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 8], esp
je 0x40334e
push 0x337
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098e1], eax
mov dword [ebp - 8], esp
push 0x497b05
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
nop
nop
cmp dword [ebp - 8], esp
je 0x403381
push 0x39b
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], esp
push str.GetProcessHeap
push dword [ebp - 0xc]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
nop
nop
cmp dword [ebp - 0x10], esp
je 0x4033b5
push 0x39b
push 0x40251ad
push 6
call fcn.00483259
add esp, 0xc
mov dword [0x6098e5], eax
push 0
mov ebx, pe_nt_image_headers32
call fcn.00484030
add esp, 4
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], 0
push 0
push dword [ebp - 0xc]
mov dword [ebp - 0x10], 0
push 0
push dword [ebp - 0x10]
mov eax, str..exe
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 8]
push eax
call fcn.00403740
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x40340f
push ebx
call fcn.00483253
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40341f
push ebx
call fcn.00483253
add esp, 4
cmp dword [ebp - 0x18], 0xffffffff
jle 0x40343f
call fcn.00403f71
mov dword [ebp - 8], 0
push 0
push dword [ebp - 8]
call fcn.00404447
mov eax, 0
jmp 0x403449
mov esp, ebp
pop ebp
ret