Function at 0x413f60
Capabilities:
Encode data using xor
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x523b30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x260
push esi
mov eax, ecx
push edi
mov dword [ebp - 0x38], eax
call fcn.00413ef0
test al, al
je 0x414d62
lea ecx, [ebp - 0x74]
call fcn.00413550
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 4], 0
push 0
push 2
mov dword [ebp - 0x26c], 0x128
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov esi, eax
lea eax, [ebp - 0x26c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_Process32First]
mov edi, 0xf
cmp eax, 1
jne 0x4141c9
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
lea eax, [ebp - 0x26c]
push eax
push esi
call edi
cmp eax, 1
jne 0x4141c4
mov byte [ebp - 0x3d], 0xde
xor edx, edx
mov byte [ebp - 0x3c], 0x94
mov edi, 0xf
mov byte [ebp - 0x3b], 0x85
mov byte [ebp - 0x3a], 0x6c
mov byte [ebp - 0x39], 9
mov al, byte [ebp - 0x3d]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x3d]
mov ecx, edx
and ecx, edi
mov byte [ebp - 0xd], al
cmp ecx, edi
mov eax, 0x869892fd
mov edx, 0xc2b6c60e
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx - 3]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x3d], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 5
jb 0x414022
lea eax, [ebp - 0x3d]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004fd9b0
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
add esp, 8
test eax, eax
je 0x4141b1
mov byte [ebp - 0x43], 0xdc
xor edx, edx
mov byte [ebp - 0x42], 0xb8
mov edi, 0xf
mov byte [ebp - 0x41], 0xaf
mov byte [ebp - 0x40], 0xbf
mov byte [ebp - 0x3f], 0xb9
mov byte [ebp - 0x3e], 0xc1
mov al, byte [ebp - 0x43]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x43]
mov ecx, edx
and ecx, edi
mov byte [ebp - 0xd], al
cmp ecx, edi
mov eax, 0x6e59efbf
mov edx, 0xa07123be
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx - 0x41]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x43], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 6
jb 0x4140a4
lea eax, [ebp - 0x43]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004fd9b0
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
add esp, 8
test eax, eax
jne 0x4141b1
mov byte [ebp - 0x4b], 0xa3
xor edx, edx
mov byte [ebp - 0x4a], 0xa3
mov edi, 0xf
mov byte [ebp - 0x49], 0xbb
mov byte [ebp - 0x48], 0xb4
mov byte [ebp - 0x47], 0xb5
mov byte [ebp - 0x46], 0xa7
mov byte [ebp - 0x45], 0xac
mov byte [ebp - 0x44], 0xd2
mov al, byte [ebp - 0x4b]
mov dword [ebp - 0x14], edx
nop
mov al, byte [ebp + edx - 0x4b]
mov ecx, edx
and ecx, edi
mov byte [ebp - 0xd], al
cmp ecx, edi
mov eax, 0xc58161d7
mov edx, 0x27f75b5d
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx - 0x29]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x4b], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 8
jb 0x414130
lea eax, [ebp - 0x4b]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004fd9b0
mov edi, dword [sym.imp.KERNEL32.dll_Process32Next]
add esp, 8
test eax, eax
jne 0x4141b1
mov ecx, dword [ebp - 0x54]
cmp ecx, dword [ebp - 0x50]
je 0x4141a1
mov eax, dword [ebp - 0x264]
mov dword [ecx], eax
add ecx, 4
mov dword [ebp - 0x54], ecx
jmp 0x4141b1
lea eax, [ebp - 0x264]
push eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.00497e20
lea eax, [ebp - 0x26c]
push eax
push esi
call edi
cmp eax, 1
je 0x414001
mov edi, 0xf
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x38]
xorps xmm0, xmm0
mov ecx, esi
mov dword [ebp - 0x60], 0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4141f0
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x70]
call fcn.0040bb00
mov byte [ebp - 4], 1
xor edx, edx
mov byte [ebp - 0x23], 0x5a
mov byte [ebp - 0x22], 0x38
mov byte [ebp - 0x21], 0x60
mov al, byte [ebp - 0x23]
mov dword [ebp - 0x14], edx
nop dword [eax + eax]
mov al, byte [ebp + edx - 0x23]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x23], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x414220
sub esp, 0x18
lea ecx, [ebp - 0x23]
mov edx, esp
mov dword [ebp - 0x14], esp
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414280
sub ecx, esi
lea eax, [ebp - 0x23]
push ecx
push eax
mov ecx, edx
call fcn.0040bb00
mov byte [ebp - 4], 2
sub esp, 0x18
lea eax, [ebp - 0x70]
mov dword [ebp - 0x78], esp
mov ecx, esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.00415760
add esp, 0x30
mov byte [ebp - 4], 4
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x128]
mov esi, dword [ebp - 0x12c]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 2
jb 0x414310
lea eax, [esi + 0x18]
lea ecx, [ebp - 0x70]
cmp ecx, eax
je 0x414310
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x4142fd
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.0048a3c0
nop word [eax + eax]
mov byte [ebp - 0x16], 0x6f
xor edx, edx
mov byte [ebp - 0x15], 0x4c
mov al, byte [ebp - 0x16]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x16]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x16], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x414320
lea edx, [ebp - 0x16]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x414364
sub edx, ecx
lea eax, [ebp - 0x16]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
push edx
cmovae ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x60]
push eax
push 0
call fcn.004904a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x414573
mov byte [ebp - 0x18], 0x1c
xor edx, edx
mov byte [ebp - 0x17], 0x4c
mov al, byte [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x18]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x18], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x4143a3
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x94], 0
movups xmmword [ebp - 0xa8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414405
sub ecx, edx
lea eax, [ebp - 0x18]
push ecx
push eax
lea ecx, [ebp - 0xa8]
call fcn.0040bb00
mov byte [ebp - 4], 5
xor edx, edx
mov byte [ebp - 0x1a], 0x6f
mov byte [ebp - 0x19], 0x4c
mov al, byte [ebp - 0x1a]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x1a]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x1a], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x414432
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0x1a]
mov dword [ebp - 0x7c], 0
movups xmmword [ebp - 0x90], xmm0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414490
sub ecx, edx
lea eax, [ebp - 0x1a]
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.0040bb00
mov byte [ebp - 4], 6
lea eax, [ebp - 0xa8]
push eax
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x70]
call fcn.004114a0
add esp, 4
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0x10
jb 0x414500
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4144f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x94]
cmp ecx, 0x10
jb 0x414553
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x414549
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0xf
mov byte [ebp - 0xa8], 0
jmp 0x414310
mov byte [ebp - 0x26], 0x3c
xor edx, edx
mov byte [ebp - 0x25], 0x38
mov byte [ebp - 0x24], 0x60
mov al, byte [ebp - 0x26]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x26]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x26], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x414587
lea edx, [ebp - 0x26]
lea ecx, [edx + 1]
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4145d0
sub edx, ecx
lea eax, [ebp - 0x26]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
push edx
cmovae ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x60]
push eax
push 0
call fcn.004904a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x4147b0
mov byte [ebp - 0x1c], 0x1c
xor edx, edx
mov byte [ebp - 0x1b], 0x4c
mov al, byte [ebp - 0x1c]
mov dword [ebp - 0x14], edx
nop
mov al, byte [ebp + edx - 0x1c]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x1c], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x414610
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x130], 0
movups xmmword [ebp - 0x144], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414672
sub ecx, edx
lea eax, [ebp - 0x1c]
push ecx
push eax
lea ecx, [ebp - 0x144]
call fcn.0040bb00
mov byte [ebp - 4], 7
xor edx, edx
mov byte [ebp - 0x29], 0x3c
mov byte [ebp - 0x28], 0x38
mov byte [ebp - 0x27], 0x60
mov al, byte [ebp - 0x29]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x29]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x29], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x4146a3
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0
lea ecx, [ebp - 0x29]
mov dword [ebp - 0xac], 0
movups xmmword [ebp - 0xc0], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414705
sub ecx, edx
lea eax, [ebp - 0x29]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.0040bb00
mov byte [ebp - 4], 8
lea eax, [ebp - 0x144]
push eax
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x70]
call fcn.004114a0
add esp, 4
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xac]
cmp ecx, 0x10
jb 0x414778
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41476e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x144]
call fcn.0040b870
jmp 0x414573
mov byte [ebp - 0x2c], 0x3c
xor edx, edx
mov byte [ebp - 0x2b], 0x4b
mov byte [ebp - 0x2a], 0x60
mov al, byte [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x2c]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x2c], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x4147c4
lea edx, [ebp - 0x2c]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x414808
sub edx, ecx
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
push edx
cmovae ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x60]
push eax
push 0
call fcn.004904a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x414a30
mov byte [ebp - 0x1e], 0x1c
xor edx, edx
mov byte [ebp - 0x1d], 0x4c
mov al, byte [ebp - 0x1e]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x1e]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x1e], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x414847
xorps xmm0, xmm0
mov dword [ebp - 0xe0], 0
lea ecx, [ebp - 0x1e]
mov dword [ebp - 0xdc], 0
movups xmmword [ebp - 0xf0], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4148b0
sub ecx, edx
lea eax, [ebp - 0x1e]
push ecx
push eax
lea ecx, [ebp - 0xf0]
call fcn.0040bb00
mov byte [ebp - 4], 9
xor edx, edx
mov byte [ebp - 0x2f], 0x3c
mov byte [ebp - 0x2e], 0x4b
mov byte [ebp - 0x2d], 0x60
mov al, byte [ebp - 0x2f]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x2f]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x2f], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x4148e1
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0x2f]
mov dword [ebp - 0xc4], 0
movups xmmword [ebp - 0xd8], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414943
sub ecx, edx
lea eax, [ebp - 0x2f]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.0040bb00
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xf0]
push eax
lea edx, [ebp - 0xd8]
lea ecx, [ebp - 0x70]
call fcn.004114a0
add esp, 4
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0x10
jb 0x4149b6
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4149ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0xdc]
cmp ecx, 0x10
jb 0x414a0f
mov edx, dword [ebp - 0xf0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x414a05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0xf
mov byte [ebp - 0xf0], 0
jmp 0x4147b0
mov byte [ebp - 0x32], 0x4f
xor edx, edx
mov byte [ebp - 0x31], 0x38
mov byte [ebp - 0x30], 0x60
mov al, byte [ebp - 0x32]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x32]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x32], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x414a44
lea edx, [ebp - 0x32]
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x414a88
sub edx, ecx
lea eax, [ebp - 0x32]
cmp dword [ebp - 0x5c], 0x10
lea ecx, [ebp - 0x70]
push edx
cmovae ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x60]
push eax
push 0
call fcn.004904a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x414caf
mov byte [ebp - 0x20], 0x1c
xor edx, edx
mov byte [ebp - 0x1f], 0x4c
mov al, byte [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x20]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0xa3b47547
mov edx, 0xffe320b4
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x47]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x20], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 2
jb 0x414ac7
xorps xmm0, xmm0
mov dword [ebp - 0x110], 0
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x10c], 0
movups xmmword [ebp - 0x120], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414b30
sub ecx, edx
lea eax, [ebp - 0x20]
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.0040bb00
mov byte [ebp - 4], 0xb
xor edx, edx
mov byte [ebp - 0x37], 0x4f
mov byte [ebp - 0x36], 0x38
mov byte [ebp - 0x35], 0x60
mov al, byte [ebp - 0x37]
mov dword [ebp - 0x14], edx
mov al, byte [ebp + edx - 0x37]
mov ecx, edx
and ecx, 0xf
mov byte [ebp - 0xd], al
cmp ecx, 0xf
mov eax, 0x2f5a3361
mov edx, 0x41ef8f97
cmovae ecx, edi
shl ecx, 2
call fcn.00521900
mov edx, dword [ebp - 0x14]
and al, 0xf
lea ecx, [edx + 0x61]
xor al, cl
xor al, byte [ebp - 0xd]
mov byte [ebp + edx - 0x37], al
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 3
jb 0x414b61
xorps xmm0, xmm0
mov dword [ebp - 0xf8], 0
lea ecx, [ebp - 0x37]
mov dword [ebp - 0xf4], 0
movups xmmword [ebp - 0x108], xmm0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x414bc3
sub ecx, edx
lea eax, [ebp - 0x37]
push ecx
push eax
lea ecx, [ebp - 0x108]
call fcn.0040bb00
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x120]
push eax
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x70]
call fcn.004114a0
add esp, 4
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0xf4]
cmp ecx, 0x10
jb 0x414c36
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x414c2c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0xf
mov byte [ebp - 0x108], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x10c]
cmp ecx, 0x10
jb 0x414c8f
mov edx, dword [ebp - 0x120]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x414c85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push edx
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 0xf
mov byte [ebp - 0x120], 0
jmp 0x414a30
mov esi, dword [ebp - 0x58]
mov eax, esi
mov dword [ebp - 0x14], esi
cmp eax, dword [ebp - 0x54]
je 0x414cfb
nop dword [eax]
mov edi, dword [eax]
sub esp, 0x18
mov esi, dword [ebp - 0x74]
lea eax, [ebp - 0x70]
mov ecx, esp
mov dword [ebp - 0x78], esp
push eax
call fcn.0048a660
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 4
mov edx, esi
mov ecx, edi
call fcn.00413950
mov eax, dword [ebp - 0x14]
add esp, 0x18
add eax, 4
mov dword [ebp - 0x14], eax
cmp eax, dword [ebp - 0x54]
jne 0x414cc0
mov esi, dword [ebp - 0x58]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x12c]
call fcn.0048c6c0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.0040b870
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x414d62
mov ecx, dword [ebp - 0x50]
mov eax, esi
sub ecx, esi
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x414d43
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x414d72
push ecx
push esi
call fcn.004e62c1
add esp, 8
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.005017c0
int3