00754B3C    - FF25 14407500               JMP     NEAR DWORD PTR DS:[754014]            ; dumped1.0059CDF3

APIS:

0074C188	getmodulehandleA

0074C2E0		findfirstfileA

0074CADC	internetopenA


browser:
00515BB8

DWORD value 4b3d4c:
53B46D9B

GBBB:
004B3C2A

XOR EAX EAX:
00431DC6

checking call:
00538d73


final cond:

004AAE82     > \EB 00                     JMP     SHORT 004AAE84                        ;  dumped1.004AAE84

code cave
008cc000

INLINE PATCH:

008CC000      60                        		PUSHAD
008CC001      9C                        		PUSHFD
008CC002      A1 DCCA7400               		MOV     EAX, DWORD PTR DS:[74CADC]
008CC007      A3 00C18C00               		MOV     DWORD PTR DS:[8CC100], EAX
008CC00C      C705 DCCA7400 1EC08C00    	MOV     DWORD PTR DS:[74CADC], 8CC01E
008CC016      9D                        		POPFD
008CC017      61                        		POPAD
008CC018    - FF25 14407500             		JMP     NEAR DWORD PTR DS:[754014]            ; Parkan2.0059CDF3
008CC01E      60                        		PUSHAD
008CC01F      9C                        		PUSHFD
008CC020      A1 00C18C00               		MOV     EAX, DWORD PTR DS:[8CC100]
008CC025      A3 DCCA7400               		MOV     DWORD PTR DS:[74CADC], EAX
008CC02A      C605 B85B5100 32          		MOV     BYTE PTR DS:[515BB8], 32
008CC031      66:C705 2A3C4B00 B301     	MOV     WORD PTR DS:[4B3C2A], 1B3
008CC03A      66:C705 C61D4300 33C0     	MOV     WORD PTR DS:[431DC6], 0C033
008CC043      C705 78376700 9B6DB453    	MOV     DWORD PTR DS:[673778], 53B46D9B
008CC04D      A1 E0C27400               		MOV     EAX, DWORD PTR DS:[74C2E0]
008CC052      A3 04C18C00               		MOV     DWORD PTR DS:[8CC104], EAX
008CC057      C705 E0C27400 69C08C00    	MOV     DWORD PTR DS:[74C2E0], 8CC069
008CC061      9D                        		POPFD
008CC062      61                        		POPAD
008CC063    - FF25 DCCA7400             		JMP     NEAR DWORD PTR DS:[74CADC]		; WININET.InternetOpenA
008CC069      60                        		PUSHAD
008CC06A      9C                        		PUSHFD
008CC06B      A1 04C18C00               		MOV     EAX, DWORD PTR DS:[8CC104]
008CC070      A3 E0C27400               		MOV     DWORD PTR DS:[74C2E0], EAX
008CC075      C605 B85B5100 84          		MOV     BYTE PTR DS:[515BB8], 84
008CC07C      66:C705 2A3C4B00 84C0     	MOV     WORD PTR DS:[4B3C2A], 0C084
008CC085      66:C705 C61D4300 8B00    	MOV     WORD PTR DS:[431DC6], 8B
008CC08E      66:C705 82AE4A00 B004     	MOV     WORD PTR DS:[4AAE82], 4B0
008CC097      A1 88C17400               		MOV     EAX, DWORD PTR DS:[74C188]
008CC09C      A3 08C18C00               		MOV     DWORD PTR DS:[8CC108], EAX
008CC0A1      C705 88C17400 B3C08C00    	MOV     DWORD PTR DS:[74C188], 8CC0B3
008CC0AB      9D                        		POPFD
008CC0AC      61                        		POPAD
008CC0AD    - FF25 E0C27400             		JMP     NEAR DWORD PTR DS:[74C2E0]            ; kernel32.FindFirstFileA
008CC0B3      60                        		PUSHAD
008CC0B4      9C                        		PUSHFD
008CC0B5      A1 08C18C00               		MOV     EAX, DWORD PTR DS:[8CC108]
008CC0BA      A3 88C17400               		MOV     DWORD PTR DS:[74C188], EAX
008CC0BF      66:C705 82AE4A00 EB00     	MOV     WORD PTR DS:[4AAE82], 0EB
008CC0C8      9D                        		POPFD
008CC0C9      61                        		POPAD
008CC0CA    - FF25 88C17400             		JMP     NEAR DWORD PTR DS:[74C188]            ; kernel32.GetModuleHandleA

BINARY STRING:

60 9C A1 DC CA 74 00 A3 00 C1 8C 00 C7 05 DC CA 74 00 1E C0 8C 00 9D 61 FF 25 14 40 75 00 60 9C
A1 00 C1 8C 00 A3 DC CA 74 00 C6 05 B8 5B 51 00 32 66 C7 05 2A 3C 4B 00 B3 01 66 C7 05 C6 1D 43
00 33 C0 C7 05 78 37 67 00 9B 6D B4 53 A1 E0 C2 74 00 A3 04 C1 8C 00 C7 05 E0 C2 74 00 69 C0 8C
00 9D 61 FF 25 DC CA 74 00 60 9C A1 04 C1 8C 00 A3 E0 C2 74 00 C6 05 B8 5B 51 00 84 66 C7 05 2A
3C 4B 00 84 C0 66 C7 05 C6 1D 43 00 8B 00 66 C7 05 82 AE 4A 00 B0 04 A1 88 C1 74 00 A3 08 C1 8C
00 C7 05 88 C1 74 00 B3 C0 8C 00 9D 61 FF 25 E0 C2 74 00 60 9C A1 08 C1 8C 00 A3 88 C1 74 00 66
C7 05 82 AE 4A 00 EB 00 9D 61 FF 25 88 C1 74 00

