Function at 0x4184ac
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
push 0
push dword [ebp - 0x34]
call fcn.00401028
push 0x6d5268
mov ebx, dword [ebp + 0x10]
push dword [ebx]
call fcn.00401238
add esp, 8
cmp eax, 0
je 0x418615
push reloc.oleaut32.dll_SysReAllocString
push 0
push 0
push 0
push 0
push 0
push OleUIBusyA
push 0
push 0x6eb210
push OleUIBusyA
push 0
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x418568
mov eax, 0x6d5268
push eax
push 4
mov ebx, 0x4802f0
call fcn.0047f8ff
add esp, 0x34
mov dword [ebp - 0x34], eax
push OleUIBusyA
push 0
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
test eax, eax
jne 0x418593
mov eax, 0x6d5268
push eax
push 1
mov ebx, 0x47fe20
call fcn.0047f8ff
add esp, 0x10
cmp dword [ebp - 0x34], eax
mov eax, 0
sete al
test eax, eax
je 0x4185c3
mov eax, 0x6d5268
jmp 0x4185c8
mov eax, 0x6eb210
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push dword [ebp - 0x40]
mov ebx, dword [ebp + 0x10]
push dword [ebx]
mov ecx, 3
call fcn.00401bb0
add esp, 0xc
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x4185f8
push ebx
call fcn.0047f8ed
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41860c
push ebx
call fcn.0047f8ed
add esp, 4
pop eax
mov dword [ebp - 4], eax
jmp 0x41866f
push 0
mov ebx, 0x47fe60
call fcn.0047f8ff
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp + 0xc]
push dword [ebx]
push 0x6eb210
push dword [ebp - 0x34]
mov ecx, 3
call fcn.00401bb0
add esp, 0xc
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418657
push ebx
call fcn.0047f8ed
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x41866b
push ebx
call fcn.0047f8ed
add esp, 4
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 4]
call sub.KERNEL32.dll_GetModuleHandleA_1
cmp dword [ebp - 0x34], esp
je 0x418696
push 0x1c4
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4186ab
mov eax, dword [ebp - 8]
jmp 0x418f4d
lea eax, [ebp - 0x14]
push eax
push dword [ebp + 8]
call fcn.00418f68
cdq
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x10], 0
jne 0x4186c8
cmp dword [ebp - 0xc], 0
jne 0x4186d8
mov eax, 0
jmp 0x418f4d
mov dword [ebp - 0x34], esp
push 0x40
push 0x1000
push 0x200
push 0
call sub.KERNEL32.dll_VirtualAlloc_1
cmp dword [ebp - 0x34], esp
je 0x418710
push 0x33d
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x418727
mov eax, 0
jmp 0x418f4d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], esp
push 0x6ebfc4
call sub.KERNEL32.dll_LoadLibraryA_1
cmp dword [ebp - 0x34], esp
je 0x418756
push 0x450
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x38], eax
mov eax, 0x934ccc
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x38]
call fcn.00418fc0
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x418780
push ebx
call fcn.0047f8ed
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], esp
push 0x6ebf88
call sub.KERNEL32.dll_LoadLibraryA_1
cmp dword [ebp - 0x34], esp
je 0x4187af
push 0x4b6
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x38], eax
mov eax, 0x934cdc
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x38]
call fcn.00418fc0
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4187d9
push ebx
call fcn.0047f8ed
add esp, 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], esp
push dword [0xab1664]
mov eax, 0x18
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x41880e
push 0x513
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
cmp dword [0xab1780], 0
je 0x418879
mov dword [ebp - 0x34], esp
call sub.KERNEL32.dll_GetProcessHeap_1
cmp dword [ebp - 0x34], esp
je 0x41883f
push 0x5c0
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], esp
push dword [0xab1780]
push 0
push dword [ebp - 0x38]
mov eax, 0x19
call fcn.0047f905
cmp dword [ebp - 0x3c], esp
je 0x418879
push 0x5c0
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
push dword [ebp - 4]
push 0x934cec
mov ecx, 2
call fcn.00401bb0
add esp, 8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0
push 0
push dword [ebp - 0x38]
push 0xab1784
lea eax, [ebp - 0x34]
push eax
call fcn.004190b4
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4188be
push ebx
call fcn.0047f8ed
add esp, 4
mov eax, dword [ebp - 0x3c]
mov dword [0xab1780], eax
mov eax, dword [ebp + 0x18]
mov dword [0xab1788], eax
lea eax, [ebp - 0x18]
push eax
push 0x419fea
mov eax, 0x934cf4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1668
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418900
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x41890f
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a10a
mov eax, 0x934d0c
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1670
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418941
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418950
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a1a7
mov eax, 0x934d18
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1674
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418982
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418991
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a27b
mov eax, str.NtMapViewOfSection
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1678
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4189c3
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x4189d2
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a2fe
mov eax, 0x934d3c
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab167c
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418a04
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418a13
jmp 0x418e6d
cmp dword [ebp + 0x18], 0
je 0x418b9c
lea eax, [ebp - 0x18]
push eax
push 0x41a486
mov eax, str.NtCreateFile
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab166c
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418a4f
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418a5e
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a5aa
mov eax, 0x934d54
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1680
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418a90
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418a9f
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a796
mov eax, str.NtQueryInformationFile
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1684
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418ad1
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418ae0
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41a8ca
mov eax, str.NtSetInformationFile
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab1688
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418b12
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418b21
jmp 0x418e6d
lea eax, [ebp - 0x18]
push eax
push 0x41aa6a
mov eax, 0x934da4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 0xab168c
call fcn.004192a8
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x418b53
push ebx
call fcn.0047f8ed
add esp, 4
cmp dword [ebp - 0x38], 0
jne 0x418b62
jmp 0x418e6d
push dword [ebp + 8]
call fcn.00419ac8
mov dword [0xab178c], eax
push reloc.WS2_32.dll_getpeername
push 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
test eax, eax
jne 0x418b84
mov eax, 0x6d53c0
push eax
push 1
mov ebx, 0x47fe40
call fcn.0047f8ff
add esp, 0x10
mov dword [0xab1790], eax
mov ebx, dword [0xab1674]
add ebx, 4
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x10]
push eax
call fcn.00419a28
mov dword [ebp - 0x38], eax
push 0
push 0x8000000
push 0x40
push dword [ebp - 0x38]
push 0
push 0xe
push 0xab1794
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00419aec
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x418bf1
jmp 0x418e6d
mov eax, dword [ebp - 0x14]
mov dword [0xab1798], eax
mov dword [0xab179c], 0
mov ebx, dword [0xab1678]
add ebx, 4
mov dword [ebp - 0x34], ebx
push 0x40
push 0
push 2
push 0xab179c
push 0
push 0
push 0
push 0xab1798
push 0xffffffff
push dword [0xab1794]
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00419b0c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xc0000018
jne 0x418cb2
mov dword [0xab1798], 0
mov ebx, dword [0xab1678]
add ebx, 4
mov dword [ebp - 0x34], ebx
push 0x40
push 0
push 2
push 0xab179c
push 0
push 0
push 0
push 0xab1798
push 0xffffffff
push dword [0xab1794]
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00419b0c
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x418cdd
mov ebx, dword [0xab167c]
add ebx, 4
mov dword [ebp - 0x34], ebx
push dword [0xab1794]
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00419b2c
jmp 0x418e6d
push dword [ebp - 0x24]
push dword [ebp - 0x20]
push dword [0xab1798]
push dword [ebp + 8]
call fcn.004198e0
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x418d53
mov ebx, dword [0xab167c]
add ebx, 4
mov dword [ebp - 0x34], ebx
push dword [0xab1794]
mov ebx, dword [ebp - 0x34]
push dword [ebx]
call fcn.00419b2c
mov dword [ebp - 0x34], esp
push dword [0xab1798]
push 0xffffffff
mov eax, 0x1a
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x418d4e
push 0x1059
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
jmp 0x418e6d
mov dword [ebp - 0x34], esp
push dword [ebp - 4]
lea eax, [ebp - 0x30]
push eax
mov eax, 0x1b
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x418d83
push 0x10e5
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
test eax, eax
je 0x418e0e
cmp dword [ebp + 0x20], 0
je 0x418d9f
mov eax, 2
jmp 0x418da4
mov eax, 0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
mov eax, 0x1c
call fcn.0047f905
cmp dword [ebp - 0x38], esp
je 0x418de1
push 0x1122
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x34], esp
lea eax, [ebp - 0x30]
push eax
mov eax, 0x1d
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x418e0e
push 0x115d
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
cmp dword [ebp - 8], 0
jne 0x418e2c
cmp dword [0xab1798], 0
je 0x418e2c
mov eax, 1
jmp 0x418e31
mov eax, 0
test eax, eax
je 0x418e6d
mov dword [ebp - 0x34], esp
push dword [0xab1798]
push 0xffffffff
mov eax, 0x1a
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x418e6d
push 0x1231
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [0xab1794], 0
push 0xab1668
call fcn.00419b4c
push 0xab1670
call fcn.00419b4c
push 0xab1674
call fcn.00419b4c
push 0xab1678
call fcn.00419b4c
push 0xab167c
call fcn.00419b4c
cmp dword [ebp + 0x18], 0
je 0x418ee5
push 0xab166c
call fcn.00419b4c
push 0xab1680
call fcn.00419b4c
push 0xab1684
call fcn.00419b4c
push 0xab1688
call fcn.00419b4c
push 0xab168c
call fcn.00419b4c
mov dword [ebp - 0x34], esp
push dword [0xab1664]
mov eax, 0x1e
call fcn.0047f905
cmp dword [ebp - 0x34], esp
je 0x418f14
push 0x1418
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov dword [ebp - 0x34], esp
push 0x8000
push 0
push dword [ebp - 0x1c]
call sub.KERNEL32.dll_VirtualFree_1
cmp dword [ebp - 0x34], esp
je 0x418f45
push 0x144e
push 0x401978a
push 6
call fcn.0047f8f3
add esp, 0xc
mov eax, dword [ebp - 8]
jmp 0x418f4d
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x418f5e
push ebx
call fcn.0047f8ed
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x20