Function at 0x401050
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push edi
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40
push eax
push 0x40
push 0x22000
push 0x427390
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0x10000
push 0x44c9d0
push 0x428390
call fcn.00402ed0
push 0x7000
push 0x419890
push 0x438390
call fcn.00402ed0
push 0x4000
push 0x415890
push 0x43f390
call fcn.00402ed0
push 0x4000
push 0x422890
push 0x443390
call fcn.00402ed0
push 0x2000
push 0x420890
push 0x447390
call fcn.00402ed0
add esp, 0x3c
push 0x412e2c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x4018b8
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x412e3c
push edi
call esi
mov dword [0x4383c0], eax
test eax, eax
je 0x4018b8
push 0x412e4c
push edi
call esi
mov dword [0x4383c4], eax
test eax, eax
je 0x4018b8
push 0x412e5c
push edi
call esi
mov dword [0x4383c8], eax
test eax, eax
je 0x4018b8
push 0x412e6c
push edi
call esi
mov dword [0x4383cc], eax
test eax, eax
je 0x4018b8
push 0x412e78
push edi
call esi
mov dword [0x4383d0], eax
test eax, eax
je 0x4018b8
push 0x412e88
push edi
call esi
mov dword [0x4383d4], eax
test eax, eax
je 0x4018b8
push 0x412e94
push edi
call esi
mov dword [0x4383d8], eax
test eax, eax
je 0x4018b8
push 0x412ea8
push edi
call esi
mov dword [0x4383dc], eax
test eax, eax
je 0x4018b8
push 0x412eb4
push edi
call esi
mov dword [0x4383e0], eax
test eax, eax
je 0x4018b8
push 0x412ec4
push edi
call esi
mov dword [0x4383e4], eax
test eax, eax
je 0x4018b8
push 0x412ed8
push edi
call esi
mov dword [0x4383e8], eax
test eax, eax
je 0x4018b8
push 0x412ee8
push edi
call esi
mov dword [0x4383ec], eax
test eax, eax
je 0x4018b8
push 0x412ef8
push edi
call esi
mov dword [0x4383f0], eax
test eax, eax
je 0x4018b8
push 0x412f0c
push edi
call esi
mov dword [0x4383f4], eax
test eax, eax
je 0x4018b8
push 0x412f20
push edi
call esi
mov dword [0x4383f8], eax
test eax, eax
je 0x4018b8
push 0x412f2c
push edi
call esi
mov dword [0x4383fc], eax
test eax, eax
je 0x4018b8
push 0x412f40
push edi
call esi
mov dword [0x438400], eax
test eax, eax
je 0x4018b8
push 0x412f58
push edi
call esi
mov dword [0x438404], eax
test eax, eax
je 0x4018b8
push 0x412f80
push edi
call esi
mov dword [0x438408], eax
test eax, eax
je 0x4018b8
push 0x412f98
push edi
call esi
mov dword [0x43840c], eax
test eax, eax
je 0x4018b8
push 0x412fb0
push edi
call esi
mov dword [0x438410], eax
test eax, eax
je 0x4018b8
push 0x412fc0
push edi
call esi
mov dword [0x438414], eax
test eax, eax
je 0x4018b8
push 0x412fd0
push edi
call esi
mov dword [0x438418], eax
test eax, eax
je 0x4018b8
push 0x412fe0
push edi
call esi
mov dword [0x43841c], eax
test eax, eax
je 0x4018b8
push 0x412ff4
push edi
call esi
mov dword [0x438420], eax
test eax, eax
je 0x4018b8
push 0x413004
push edi
call esi
mov dword [0x438424], eax
test eax, eax
je 0x4018b8
push 0x413010
push edi
call esi
mov dword [0x438428], eax
test eax, eax
je 0x4018b8
push 0x41301c
push edi
call esi
mov dword [0x43842c], eax
test eax, eax
je 0x4018b8
push 0x413024
push edi
call esi
mov dword [0x438430], eax
test eax, eax
je 0x4018b8
push 0x413034
push edi
call esi
mov dword [0x438434], eax
test eax, eax
je 0x4018b8
push 0x413044
push edi
call esi
mov dword [0x438438], eax
test eax, eax
je 0x4018b8
push 0x413054
push edi
call esi
mov dword [0x43843c], eax
test eax, eax
je 0x4018b8
push 0x413068
push edi
call esi
mov dword [0x438440], eax
test eax, eax
je 0x4018b8
push 0x41307c
push edi
call esi
mov dword [0x438444], eax
test eax, eax
je 0x4018b8
push 0x41308c
push edi
call esi
mov dword [0x438448], eax
test eax, eax
je 0x4018b8
push 0x4130a8
push edi
call esi
mov dword [0x43844c], eax
test eax, eax
je 0x4018b8
push 0x4130b4
push edi
call esi
mov dword [0x438450], eax
test eax, eax
je 0x4018b8
push 0x4130c0
push edi
call esi
mov dword [0x438454], eax
test eax, eax
je 0x4018b8
push 0x4130cc
push edi
call esi
mov dword [0x438458], eax
test eax, eax
je 0x4018b8
push 0x4130dc
push edi
call esi
mov dword [0x43845c], eax
test eax, eax
je 0x4018b8
push 0x4130e8
push edi
call esi
mov dword [0x438460], eax
test eax, eax
je 0x4018b8
push 0x4130fc
push edi
call esi
mov dword [0x438464], eax
test eax, eax
je 0x4018b8
push 0x413110
push edi
call esi
mov dword [0x438468], eax
test eax, eax
je 0x4018b8
push 0x41311c
push edi
call esi
mov dword [0x43846c], eax
test eax, eax
je 0x4018b8
push 0x413138
push edi
call esi
mov dword [0x438470], eax
test eax, eax
je 0x4018b8
push 0x413154
push edi
call esi
mov dword [0x438474], eax
test eax, eax
je 0x4018b8
push 0x413164
push edi
call esi
mov dword [0x438478], eax
test eax, eax
je 0x4018b8
push 0x41316c
push edi
call esi
mov dword [0x43847c], eax
test eax, eax
je 0x4018b8
push 0x413180
push edi
call esi
mov dword [0x438480], eax
test eax, eax
je 0x4018b8
push 0x413194
push edi
call esi
mov dword [0x438484], eax
test eax, eax
je 0x4018b8
push 0x4131a0
push edi
call esi
mov dword [0x438488], eax
test eax, eax
je 0x4018b8
push 0x4131ac
push edi
call esi
mov dword [0x43848c], eax
test eax, eax
je 0x4018b8
push 0x4131b8
push edi
call esi
mov dword [0x438490], eax
test eax, eax
je 0x4018b8
push 0x4131c0
push edi
call esi
mov dword [0x438494], eax
test eax, eax
je 0x4018b8
push 0x4131d0
push edi
call esi
mov dword [0x438498], eax
test eax, eax
je 0x4018b8
push 0x4131e0
push edi
call esi
mov dword [0x43849c], eax
test eax, eax
je 0x4018b8
push 0x4131f0
push edi
call esi
mov dword [0x4384a0], eax
test eax, eax
je 0x4018b8
push 0x4131fc
push edi
call esi
mov dword [0x4384a4], eax
test eax, eax
je 0x4018b8
push 0x413208
push edi
call esi
mov dword [0x4384a8], eax
test eax, eax
je 0x4018b8
push 0x413214
push edi
call esi
mov dword [0x4384ac], eax
test eax, eax
je 0x4018b8
push 0x41322c
push edi
call esi
mov dword [0x4384b0], eax
test eax, eax
je 0x4018b8
push 0x413240
push edi
call esi
mov dword [0x4384b4], eax
test eax, eax
je 0x4018b8
push 0x413258
push edi
call esi
mov dword [0x4384b8], eax
test eax, eax
je 0x4018b8
push 0x413270
push edi
call esi
mov dword [0x4384bc], eax
test eax, eax
je 0x4018b8
push 0x413288
push edi
call esi
mov dword [0x4384c0], eax
test eax, eax
je 0x4018b8
push 0x413298
push edi
call esi
mov dword [0x4384c4], eax
test eax, eax
je 0x4018b8
push 0x4132a4
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x4018b8
push 0x4132b0
push edi
call esi
mov dword [0x4384dc], eax
test eax, eax
je 0x4018b8
push 0x4132c0
push edi
call esi
mov dword [0x4384e0], eax
test eax, eax
je 0x4018b8
push 0x4132cc
push edi
call esi
mov dword [0x4384e4], eax
test eax, eax
je 0x4018b8
push 0x4132dc
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x4018b8
push 0x4132ec
push edi
call esi
mov dword [0x438390], eax
test eax, eax
je 0x4018b8
push 0x4132fc
push edi
call esi
mov dword [0x438394], eax
test eax, eax
je 0x4018b8
push 0x41330c
push edi
call esi
mov dword [0x438398], eax
test eax, eax
je 0x4018b8
push 0x413320
push edi
call esi
mov dword [0x43839c], eax
test eax, eax
je 0x4018b8
push 0x413334
push edi
call esi
mov dword [0x4383a0], eax
test eax, eax
je 0x4018b8
push 0x413340
push edi
call esi
mov dword [0x4383a4], eax
test eax, eax
je 0x4018b8
push 0x413350
push edi
call esi
mov dword [0x4383a8], eax
test eax, eax
je 0x4018b8
push 0x413360
push edi
call esi
mov dword [0x4383ac], eax
test eax, eax
je 0x4018b8
push 0x413370
push edi
call esi
mov dword [0x4383b0], eax
test eax, eax
je 0x4018b8
push 0x413380
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
test edi, edi
je 0x4018b8
push 0x41338c
push edi
call esi
mov dword [0x4384ec], eax
test eax, eax
je 0x4018b8
push 0x41339c
push edi
call esi
mov dword [0x4384f0], eax
test eax, eax
je 0x4018b8
push 0x4133b0
push edi
call esi
mov dword [0x4384f4], eax
test eax, eax
je 0x4018b8
push 0x4133c0
push edi
call esi
mov dword [0x4384f8], eax
test eax, eax
je 0x4018b8
push 0x4133d0
push edi
call esi
mov dword [0x4384fc], eax
test eax, eax
je 0x4018b8
push 0x4133e4
push edi
call esi
mov dword [0x438500], eax
test eax, eax
je 0x4018b8
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x4133f4
call edi
test eax, eax
je 0x4018b8
push 0x115
push eax
call esi
mov dword [0x4384cc], eax
test eax, eax
je 0x4018b8
push 0x413404
call edi
test eax, eax
je 0x4018b8
push 0x413410
push eax
call esi
mov dword [0x4384d4], eax
test eax, eax
je 0x4018b8
push 0x413420
call edi
test eax, eax
je 0x4018b8
push 0x413430
push eax
call esi
mov dword [0x4383b8], eax
test eax, eax
je 0x4018b8
lea eax, [ebp - 4]
push eax
push 0x40
push 0x29ca
push section..text_1
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0
push 0x401020
push dword [0x449394]
mov eax, section..text_1
call eax
add esp, 0xc
mov dword [0x449390], 0x42d6a4
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret