Function at 0x401fb0
Capabilities:
Access peb ldr_data
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
push ebx
push esi
push edi
movss xmm0, dword [0x4102ac]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x41036c]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4103bc]
movss dword [ebp - 8], xmm0
movss xmm0, dword [ebp - 8]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40200f
movss xmm0, dword [0x410238]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4103e0]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x41023c]
movss dword [ebp - 8], xmm0
movss xmm0, dword [ebp - 8]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402048
movss xmm0, dword [0x41028c]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4101ec]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4101dc]
movss dword [ebp - 8], xmm0
movss xmm0, dword [ebp - 8]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402081
movss xmm0, dword [0x4103b0]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4103d4]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x410260]
movss dword [ebp - 8], xmm0
movss xmm0, dword [ebp - 8]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4020ba
movss xmm0, dword [0x4103dc]
movss dword [ebp - 8], xmm0
movss xmm0, dword [str.e___]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x4101f4]
movss dword [ebp - 8], xmm0
movss xmm0, dword [ebp - 8]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4020f3
movss xmm0, dword [0x410200]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x410284]
movss dword [ebp - 8], xmm0
movss xmm0, dword [0x410214]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x4103b8]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x410374]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402146
movss xmm0, dword [0x410268]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x4103d8]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x41020c]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40217f
movss xmm0, dword [0x410244]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x410310]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x41039c]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4021b8
movss xmm0, dword [0x410258]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x410278]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x4102c4]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4021f1
movss xmm0, dword [0x410224]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x4101f8]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x41022c]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [ebp - 0xc]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40222a
movss xmm0, dword [0x410350]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x4102f0]
movss dword [ebp - 0xc], xmm0
movss xmm0, dword [0x41029c]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x4102f8]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x4102c0]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x10]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40227d
movss xmm0, dword [0x4103c8]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x41027c]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x410288]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x10]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4022b6
movss xmm0, dword [0x41031c]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x410204]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x4102a0]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x10]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4022ef
movss xmm0, dword [0x4102fc]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x410298]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x410220]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x10]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402328
movss xmm0, dword [0x4101d0]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x4103a8]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x410270]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [ebp - 0x10]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402361
movss xmm0, dword [0x4102a8]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x4101f0]
movss dword [ebp - 0x10], xmm0
movss xmm0, dword [0x41035c]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x4101d8]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410368]
movss dword [ebp - 4], xmm0
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4023b4
movss xmm0, dword [0x4103ec]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410370]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410254]
movss dword [ebp - 4], xmm0
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4023ed
movss xmm0, dword [0x4103a0]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410380]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x4103e8]
movss dword [ebp - 4], xmm0
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402426
movss xmm0, dword [0x4103c4]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x41030c]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x4102bc]
movss dword [ebp - 4], xmm0
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40245f
movss xmm0, dword [0x41032c]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410294]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410320]
movss dword [ebp - 4], xmm0
movss xmm0, dword [ebp - 4]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402498
movss xmm0, dword [0x410230]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x410248]
movss dword [ebp - 4], xmm0
movss xmm0, dword [0x41025c]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x4102b0]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x410354]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4024eb
movss xmm0, dword [0x41021c]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x410340]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x410250]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402524
movss xmm0, dword [0x410330]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x4101fc]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x41026c]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40255d
movss xmm0, dword [0x4102d0]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x4102a4]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x410280]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402596
movss xmm0, dword [0x410344]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x410274]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [str.E_bPj]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [ebp - 0x14]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4025cf
movss xmm0, dword [0x410398]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x41024c]
movss dword [ebp - 0x14], xmm0
movss xmm0, dword [0x4101e4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x4102d4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410358]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x18]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402622
movss xmm0, dword [0x41037c]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410360]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410210]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x18]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40265b
movss xmm0, dword [0x4102f4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410364]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x4103c0]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x18]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402694
movss xmm0, dword [0x410390]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x4103cc]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x4102d8]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x18]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4026cd
movss xmm0, dword [0x4103a4]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410304]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410240]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [ebp - 0x18]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402706
movss xmm0, dword [0x4102ec]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410328]
movss dword [ebp - 0x18], xmm0
movss xmm0, dword [0x410338]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x4102cc]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410234]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402759
movss xmm0, dword [0x410290]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x4103b4]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410388]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402792
movss xmm0, dword [0x410324]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410394]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410208]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4027cb
movss xmm0, dword [0x4102c8]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410384]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x4103d0]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402804
movss xmm0, dword [0x4101d4]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x4102e4]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410378]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [ebp - 0x1c]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40283d
movss xmm0, dword [0x4102dc]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x410308]
movss dword [ebp - 0x1c], xmm0
movss xmm0, dword [0x41034c]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x410318]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4101e8]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402890
movss xmm0, dword [0x41033c]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x41038c]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x410264]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x4028c9
movss xmm0, dword [0x4103e4]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4102b8]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x410300]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402902
movss xmm0, dword [0x410218]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4102e8]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4102b4]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x40293b
movss xmm0, dword [0x410348]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x4101e0]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x410334]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x20]
ucomiss xmm0, dword [0x4101cc]
lahf
test ah, 0x44
jnp 0x402974
movss xmm0, dword [0x410228]
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [0x410314]
movss dword [ebp - 0x20], xmm0
dec ebx
or edx, 0x12
neg eax
and edi, 6
neg ebx
dec edi
rcr edi, 0x45
ror eax, 0x15
sub edx, 0x3a
sub edx, 0x59
sbb esi, 0x7a
or edx, 0x60
not edx
rcr eax, 0x26
or ebx, 0x39
neg edx
sbb edi, 0xed
not eax
inc eax
sub edi, 0x73
and edx, 0xd
dec ebx
inc eax
rol edi, 0xb2
inc esi
ror eax, 0xc
sbb ebx, 0x38
and eax, 0x5f
dec esi
and edi, 0xf0
rcr edx, 0x5e
rol edi, 0x1c
bswap ebx
and eax, 0x10
rol eax, 0x20
bswap esi
add esi, 0xed
bswap ebx
sbb ebx, 0x96
imul esi
and edx, 5
dec ebx
dec eax
dec edi
neg esi
add eax, 0xa3
ror esi, 0x42
bswap edi
bswap edx
ror esi, 0xdf
push 0x2b200
push str..data_r
call fcn.00401c00
add esp, 8
mov dword [ebp + 8], str..data_r
rcl eax, 0x75
dec esi
or esi, 7
neg ebx
imul edi
neg ebx
inc edi
rcl edi, 0x66
rol esi, 0xb7
sbb edx, 0x1b
imul edx
imul esi
rcr edx, 0x29
inc edx
dec edx
not edi
imul edi
rol edi, 0x7a
bswap eax
not edx
dec edi
add edi, 0x62
mov edx, 0x8f
rcr eax, 0xdc
neg edx
and eax, 0xda
sub eax, 0x95
dec edx
rcr eax, 0x66
inc ebx
or eax, 0xb1
sbb edi, 0xd3
sbb eax, 0x32
dec edx
not edx
imul ebx
sbb eax, 0x16
dec esi
mov edi, 0x6f
ror edx, 0xc4
mov eax, 0xaa
or ebx, 0xa7
sbb esi, 0x86
dec ebx
add esi, 0x10
sub ebx, 0x52
inc esi
imul esi
inc eax
not esi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0x4550
je 0x402ac3
mov eax, 1
jmp 0x40340a
mov ecx, 8
imul edx, ecx, 5
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + edx + 0x78]
mov edx, dword [eax + edx + 0x7c]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0
je 0x402aee
mov dword [ebp - 0x70], 0
jmp 0x402af7
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax + 0x34]
mov dword [ebp - 0x70], ecx
push 4
push 0x3000
mov edx, dword [ebp - 0x28]
mov eax, dword [edx + 0x50]
push eax
mov ecx, dword [ebp - 0x70]
push ecx
call dword [0x410014]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x80], 0
jne 0x402b2d
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp eax, dword [edx + 0x34]
je 0x402b2d
mov eax, 2
jmp 0x40340a
inc eax
inc ebx
mov ebx, 0xae
bswap edx
dec ebx
bswap edi
not eax
and esi, 0x3f
neg edx
imul esi
rcr edi, 0x80
imul edx
inc esi
and esi, 0x99
neg ebx
rol edi, 0x5c
mov ebx, 0x75
and edi, 0x55
and edx, 0x85
bswap esi
bswap edx
or edx, 0x19
neg esi
add eax, 0x19
inc esi
rol ebx, 0xac
inc ebx
or edi, 0x7b
imul esi
neg ebx
rol ebx, 0x98
not edi
imul esi
sub edi, 0x2c
bswap ebx
bswap edi
neg edi
sub edi, 0xd1
rol esi, 0xbc
neg ebx
dec edx
or eax, 0x68
inc eax
dec esi
ror ebx, 0xa9
neg eax
rcr edi, 0xbf
ror eax, 0x47
neg esi
bswap edi
push 0x400
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
call fcn.00404610
add esp, 0xc
bswap edi
dec edi
not eax
ror eax, 0xbb
or edi, 0xc
bswap eax
bswap edi
inc edi
neg ebx
sbb ebx, 0x5d
sub edi, 0x41
rol eax, 0x46
ror ebx, 0x22
neg ebx
sub edi, 0xc8
and eax, 0xbb
add ebx, 0xef
neg edx
ror eax, 0xf0
rcr esi, 0x73
inc edx
rcr esi, 0x51
bswap ebx
neg esi
sbb edx, 0xc1
and esi, 0x41
rcl eax, 4
rol edi, 0xe9
dec edx
not esi
bswap esi
neg ebx
rcr edx, 0x62
rcl edx, 0x7d
mov eax, 0xc
add edx, 0x72
sub ebx, 0x25
sub ebx, 0
neg edi
sub esi, 0x90
imul edi
sbb edi, 0xa9
sbb eax, 0xbd
and edi, 0x3d
dec edi
dec eax
dec edx
imul edi
rcr ebx, 0xcc
not eax
and ebx, 0xb1
sub esi, 0xf3
or ebx, 0x7b
mov ebx, 0x7e
rcl ebx, 0xf6
and edx, 0xbc
rcl ebx, 0x27
not eax
mov esi, 0x4f
neg ebx
imul edi
ror edi, 0xb5
inc eax
ror edx, 0xb7
sub edi, 0xd2
dec ebx
sbb edx, 0x68
and ebx, 0x9c
inc eax
inc esi
ror esi, 0xf
imul ebx
sub edi, 0x63
inc edi
not edi
ror edi, 0x28
sbb edi, 0xce
sbb eax, 0x28
not ebx
or esi, 0x98
imul ebx
sbb esi, 0x21
imul edx
imul edi
not eax
neg edx
inc edx
mov esi, 0x49
dec edx
not esi
not edx
imul edi
bswap ebx
bswap ebx
sbb edi, 0xae
and edx, 0x41
not edi
inc ebx
neg eax
bswap esi
mov eax, dword [ebp - 0x28]
movzx ecx, word [eax + 0x14]
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x18]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0
jmp 0x402cff
mov ecx, dword [ebp - 0x34]
add ecx, 1
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x34], eax
jge 0x402d3f
imul ecx, dword [ebp - 0x34], 0x28
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx + 0x10]
push eax
imul ecx, dword [ebp - 0x34], 0x28
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp + 8]
add eax, dword [edx + ecx + 0x14]
push eax
imul ecx, dword [ebp - 0x34], 0x28
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
add eax, dword [edx + ecx + 0xc]
push eax
call fcn.00404610
add esp, 0xc
jmp 0x402cf6
inc esi
rcr esi, 0x54
add esi, 5
dec eax
add edx, 0xeb
neg eax
inc eax
sub edx, 0x1c
mov ebx, 0x17
not ebx
dec ebx
dec edi
not eax
bswap edx
or esi, 0x4e
rcr edx, 0xf2
add eax, 0x7f
bswap eax
inc eax
inc ebx
not ebx
imul ebx
neg esi
sub edi, 0x6d
rcr ebx, 0x3d
or ebx, 0x1c
rcl ebx, 0xce
rcr ebx, 0xe5
imul esi
imul edx
inc eax
rcr edi, 0
imul ebx
dec edx
imul ebx
rcr eax, 0x57
rcl edx, 0xa2
rcl edx, 0x45
inc esi
bswap edi
not esi
mov eax, 0x68
dec esi
rcr eax, 0x2d
bswap eax
sub esi, 0xd9
neg edx
neg eax
not eax
rol edi, 0xcf
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
cmp edx, dword [ecx + 0x34]
je 0x402e8f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x84]
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x80]
jae 0x402e8f
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x24]
add edx, dword [ecx]
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + 4]
sub ecx, 8
shr ecx, 1
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x4c]
add edx, 8
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x5c], 0
jmp 0x402e2b
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x5c]
cmp ecx, dword [ebp - 0x100]
jge 0x402e78
mov edx, dword [ebp - 0x38]
movzx eax, word [edx]
sar eax, 0xc
and eax, 3
je 0x402e6d
mov ecx, dword [ebp - 0x38]
movzx edx, word [ecx]
and edx, 0xfff
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax + edx]
add ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x38]
movzx eax, word [edx]
and eax, 0xfff
mov edx, dword [ebp - 0x74]
mov dword [edx + eax], ecx
mov eax, dword [ebp - 0x38]
add eax, 2
mov dword [ebp - 0x38], eax
jmp 0x402e22
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x60]
add edx, dword [ecx + 4]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
jmp 0x402de8
mov ecx, 8
shl ecx, 0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
add eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], 0
jmp 0x402eb6
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
imul edx, dword [ebp - 0x3c], 0x14
mov eax, dword [ebp - 0x54]
cmp dword [eax + edx + 0x10], 0
je 0x402f88
imul ecx, dword [ebp - 0x3c], 0x14
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
push ecx
call dword [0x410024]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x402ef4
jmp 0x402ead
imul edx, dword [ebp - 0x3c], 0x14
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x40], 0
jmp 0x402f17
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x64]
cmp dword [ecx + eax*4], 0
je 0x402f83
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x110], ecx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0x68]
push edx
call dword [0x410020]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x402f6a
mov eax, dword [ebp - 0x110]
add eax, 2
push eax
mov ecx, dword [ebp - 0x68]
push ecx
call dword [0x410020]
mov dword [ebp - 0x6c], eax
imul edx, dword [ebp - 0x3c], 0x14
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x6c]
mov dword [ecx + edx*4], eax
jmp 0x402f0e
jmp 0x402ead
mov dword [ebp - 0x44], 0
jmp 0x402f9a
mov ecx, dword [ebp - 0x44]
add ecx, 1
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x28]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x44], eax
jge 0x403068
mov dword [ebp - 0x50], 0x40
imul ecx, dword [ebp - 0x44], 0x28
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
and ecx, 0x40000000
je 0x402fe8
mov edx, dword [ebp - 0x30]
and edx, 0x80000000
je 0x402fe8
mov eax, dword [ebp - 0x30]
and eax, 0x20000000
je 0x402fe8
mov dword [ebp - 0x50], 0x40
jmp 0x403037
mov ecx, dword [ebp - 0x30]
and ecx, 0x40000000
je 0x403007
mov edx, dword [ebp - 0x30]
and edx, 0x80000000
je 0x403007
mov dword [ebp - 0x50], 4
jmp 0x403037
mov eax, dword [ebp - 0x30]
and eax, 0x40000000
je 0x403025
mov ecx, dword [ebp - 0x30]
and ecx, 0x20000000
je 0x403025
mov dword [ebp - 0x50], 0x20
jmp 0x403037
mov edx, dword [ebp - 0x30]
and edx, 0x40000000
je 0x403037
mov dword [ebp - 0x50], 2
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
imul edx, dword [ebp - 0x44], 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax + edx + 8]
push ecx
imul edx, dword [ebp - 0x44], 0x28
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + edx + 0xc]
push ecx
call dword [0x410018]
jmp 0x402f91
mov edx, dword fs:[0x30]
mov dword [ebp - 0x78], edx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x24]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x7c]
add edx, 0x24
mov dword [ebp - 0x58], edx
mov eax, 0x43
mov word [ebp - 0xf8], ax
mov ecx, 0x3a
mov word [ebp - 0xf6], cx
mov edx, 0x5c
mov word [ebp - 0xf4], dx
mov eax, 0x5c
mov word [ebp - 0xf2], ax
mov ecx, 0x57
mov word [ebp - 0xf0], cx
mov edx, 0x69
mov word [ebp - 0xee], dx
mov eax, 0x6e
mov word [ebp - 0xec], ax
mov ecx, 0x64
mov word [ebp - 0xea], cx
mov edx, 0x6f
mov word [ebp - 0xe8], dx
mov eax, 0x77
add byte [esi - 0x77], ah
test dword [edx], ebx
invalid
invalid
invalid
mov ecx, 0x73
mov word [ebp - 0xe4], cx
mov edx, 0x5c
mov word [ebp - 0xe2], dx
mov eax, 0x4d
mov word [ebp - 0xe0], ax
mov ecx, 0x69
mov word [ebp - 0xde], cx
mov edx, 0x63
mov word [ebp - 0xdc], dx
mov eax, 0x72
mov word [ebp - 0xda], ax
mov ecx, 0x6f
mov word [ebp - 0xd8], cx
mov edx, 0x73
mov word [ebp - 0xd6], dx
mov eax, 0x6f
mov word [ebp - 0xd4], ax
mov ecx, 0x66
mov word [ebp - 0xd2], cx
mov edx, 0x74
mov word [ebp - 0xd0], dx
mov eax, 0x2e
mov word [ebp - 0xce], ax
mov ecx, 0x4e
mov word [ebp - 0xcc], cx
mov edx, 0x45
mov word [ebp - 0xca], dx
mov eax, 0x54
mov word [ebp - 0xc8], ax
mov ecx, 0x5c
mov word [ebp - 0xc6], cx
mov edx, 0x46
mov word [ebp - 0xc4], dx
mov eax, 0x72
mov word [ebp - 0xc2], ax
mov ecx, 0x61
mov word [ebp - 0xc0], cx
mov edx, 0x6d
mov word [ebp - 0xbe], dx
mov eax, 0x65
mov word [ebp - 0xbc], ax
mov ecx, 0x77
mov word [ebp - 0xba], cx
mov edx, 0x6f
mov word [ebp - 0xb8], dx
mov eax, 0x72
mov word [ebp - 0xb6], ax
mov ecx, 0x6b
mov word [ebp - 0xb4], cx
mov edx, 0x5c
mov word [ebp - 0xb2], dx
mov eax, 0x76
mov word [ebp - 0xb0], ax
mov ecx, 0x34
mov word [ebp - 0xae], cx
mov edx, 0x2e
mov word [ebp - 0xac], dx
mov eax, 0x30
mov word [ebp - 0xaa], ax
mov ecx, 0x2e
mov word [ebp - 0xa8], cx
mov edx, 0x33
mov word [ebp - 0xa6], dx
mov eax, 0x30
mov word [ebp - 0xa4], ax
mov ecx, 0x33
mov word [ebp - 0xa2], cx
mov edx, 0x31
mov word [ebp - 0xa0], dx
mov eax, 0x39
mov word [ebp - 0x9e], ax
mov ecx, 0x5c
mov word [ebp - 0x9c], cx
mov edx, 0x53
mov word [ebp - 0x9a], dx
mov eax, 0x79
mov word [ebp - 0x98], ax
mov ecx, 0x73
mov word [ebp - 0x96], cx
mov edx, 0x74
mov word [ebp - 0x94], dx
mov eax, 0x65
mov word [ebp - 0x92], ax
mov ecx, 0x6d
mov word [ebp - 0x90], cx
mov edx, 0x2e
mov word [ebp - 0x8e], dx
mov eax, 0x64
mov word [ebp - 0x8c], ax
mov ecx, 0x6c
mov word [ebp - 0x8a], cx
mov edx, 0x6c
mov word [ebp - 0x88], dx
xor eax, eax
mov word [ebp - 0x86], ax
mov ecx, 8
imul edx, ecx, 0xe
mov eax, dword [ebp - 0x28]
cmp dword [eax + edx + 0x78], 0
je 0x403375
mov byte [ebp - 0x2a], 1
jmp 0x403379
mov byte [ebp - 0x2a], 0
mov cl, byte [ebp - 0x2a]
mov byte [ebp - 0x29], cl
movzx edx, byte [ebp - 0x29]
test edx, edx
je 0x4033bd
push 8
mov eax, dword [ebp - 0x58]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call fcn.00404610
add esp, 0xc
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0xf8]
mov dword [edx + 4], eax
lea ecx, [ebp - 0xf8]
push ecx
call dword [0x410028]
shl eax, 1
mov edx, dword [ebp - 0x58]
mov word [edx], ax
push 0xffffffffffffffff
push 0
push 0
push 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x28]
push ecx
push 0
push 0
call dword [0x410010]
push eax
call dword [0x410004]
movzx edx, byte [ebp - 0x29]
test edx, edx
je 0x403408
push 0x3e8
call dword [0x41000c]
push 8
lea eax, [ebp - 0x11c]
push eax
mov ecx, dword [ebp - 0x58]
push ecx
call fcn.00404610
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret