Function at 0x40f7ec
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x438cb1
mov eax, dword fs:[0]
push eax
sub esp, 0x8b0
mov eax, dword [0x4444c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x404], ecx
push 0
push 0x26
lea eax, [ebp - 0x198]
push eax
call fcn.0041aee6
add esp, 0xc
and dword [ebp - 4], 0
push 0x43bb20
lea ecx, [ebp - 0x144]
call fcn.00408e1f
mov byte [ebp - 4], 1
push 0x43bb20
lea ecx, [ebp - 0x1b8]
call fcn.00408e1f
mov byte [ebp - 4], 2
push 0x43bb20
lea ecx, [ebp - 0x1f0]
call fcn.00408e1f
mov byte [ebp - 4], 3
push 0x43bb20
lea ecx, [ebp - 0x160]
call fcn.00408e1f
mov byte [ebp - 4], 4
push 0x43bb1c
lea ecx, [ebp - 0x260]
call fcn.00408e1f
mov byte [ebp - 4], 5
push 0x43bb1c
lea ecx, [ebp - 0x10c]
call fcn.00408e1f
mov byte [ebp - 4], 6
push 0x43bb1c
lea ecx, [ebp - 0x228]
call fcn.00408e1f
mov byte [ebp - 4], 7
push 0x43bb1c
lea ecx, [ebp - 0x20c]
call fcn.00408e1f
mov byte [ebp - 4], 8
push 0x43bb1c
lea ecx, [ebp - 0x1d4]
call fcn.00408e1f
mov byte [ebp - 4], 9
push str.__RegService
lea ecx, [ebp - 0xf0]
call fcn.00408e1f
mov byte [ebp - 4], 0xa
push 0x43bb20
lea ecx, [ebp - 0x27c]
call fcn.00408e1f
mov byte [ebp - 4], 0xb
push 0x43bb20
lea ecx, [ebp - 0x128]
call fcn.00408e1f
mov byte [ebp - 4], 0xc
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.00408e1f
mov byte [ebp - 4], 0xd
push 0x43bb1c
lea ecx, [ebp - 0x244]
call fcn.00408e1f
mov byte [ebp - 4], 0xe
push 0x43b782
lea ecx, [ebp - 0xd4]
call fcn.00408211
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x408], 0x43ba58
mov eax, dword [ebp - 0x408]
add eax, 2
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x408]
mov ax, word [eax]
mov word [ebp - 0x40e], ax
add dword [ebp - 0x408], 2
cmp word [ebp - 0x40e], 0
jne 0x40f979
mov eax, dword [ebp - 0x408]
sub eax, dword [ebp - 0x40c]
sar eax, 1
mov dword [ebp - 0x414], eax
push dword [ebp - 0x414]
push 0x43ba58
push 2
push 1
lea ecx, [ebp - 0x198]
call fcn.004169d7
lea ecx, [ebp - 0x198]
call fcn.00416ddb
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
add eax, 2
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x418]
mov ax, word [eax]
mov word [ebp - 0x41e], ax
add dword [ebp - 0x418], 2
cmp word [ebp - 0x41e], 0
jne 0x40f9f4
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x41c]
sar eax, 1
mov dword [ebp - 0x424], eax
push dword [ebp - 0x424]
push dword [ebp - 0x350]
lea ecx, [ebp - 0x27c]
call fcn.004073b3
mov dword [ebp - 0x428], 0x43ba2c
mov eax, dword [ebp - 0x428]
add eax, 2
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x428]
mov ax, word [eax]
mov word [ebp - 0x42e], ax
add dword [ebp - 0x428], 2
cmp word [ebp - 0x42e], 0
jne 0x40fa59
mov eax, dword [ebp - 0x428]
sub eax, dword [ebp - 0x42c]
sar eax, 1
mov dword [ebp - 0x434], eax
push dword [ebp - 0x434]
push 0x43ba2c
lea ecx, [ebp - 0x27c]
call fcn.004073b3
mov dword [ebp - 0x438], str.BigNoxProxy.exe
mov eax, dword [ebp - 0x438]
add eax, 2
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x438]
mov ax, word [eax]
mov word [ebp - 0x43e], ax
add dword [ebp - 0x438], 2
cmp word [ebp - 0x43e], 0
jne 0x40fabd
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x43c]
sar eax, 1
mov dword [ebp - 0x444], eax
push dword [ebp - 0x444]
push str.BigNoxProxy.exe
lea ecx, [ebp - 0x27c]
call fcn.004073b3
mov dword [ebp - 0x448], 0x43bb20
mov eax, dword [ebp - 0x448]
add eax, 2
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x448]
mov ax, word [eax]
mov word [ebp - 0x44e], ax
add dword [ebp - 0x448], 2
cmp word [ebp - 0x44e], 0
jne 0x40fb21
mov eax, dword [ebp - 0x448]
sub eax, dword [ebp - 0x44c]
sar eax, 1
mov dword [ebp - 0x454], eax
push dword [ebp - 0x454]
push 0x43bb20
lea ecx, [ebp - 0x27c]
call fcn.004073b3
lea ecx, [ebp - 0x198]
call fcn.00416ddb
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
add eax, 2
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x458]
mov ax, word [eax]
mov word [ebp - 0x45e], ax
add dword [ebp - 0x458], 2
cmp word [ebp - 0x45e], 0
jne 0x40fb98
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0x45c]
sar eax, 1
mov dword [ebp - 0x464], eax
push dword [ebp - 0x464]
push dword [ebp - 0x354]
lea ecx, [ebp - 0x260]
call fcn.004073b3
mov dword [ebp - 0x468], 0x43ba2c
mov eax, dword [ebp - 0x468]
add eax, 2
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x468]
mov ax, word [eax]
mov word [ebp - 0x46e], ax
add dword [ebp - 0x468], 2
cmp word [ebp - 0x46e], 0
jne 0x40fbfd
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0x46c]
sar eax, 1
mov dword [ebp - 0x474], eax
push dword [ebp - 0x474]
push 0x43ba2c
lea ecx, [ebp - 0x260]
call fcn.004073b3
mov dword [ebp - 0x478], str.NoxVMSVC.exe
mov eax, dword [ebp - 0x478]
add eax, 2
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x478]
mov ax, word [eax]
mov word [ebp - 0x47e], ax
add dword [ebp - 0x478], 2
cmp word [ebp - 0x47e], 0
jne 0x40fc61
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x47c]
sar eax, 1
mov dword [ebp - 0x484], eax
push dword [ebp - 0x484]
push str.NoxVMSVC.exe
lea ecx, [ebp - 0x260]
call fcn.004073b3
lea ecx, [ebp - 0x260]
call fcn.00416ddb
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
add eax, 2
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x488]
mov ax, word [eax]
mov word [ebp - 0x48e], ax
add dword [ebp - 0x488], 2
cmp word [ebp - 0x48e], 0
jne 0x40fcd8
mov eax, dword [ebp - 0x488]
sub eax, dword [ebp - 0x48c]
sar eax, 1
mov dword [ebp - 0x494], eax
push dword [ebp - 0x494]
push dword [ebp - 0x358]
lea ecx, [ebp - 0x144]
call fcn.004073b3
mov dword [ebp - 0x498], 0x43bb20
mov eax, dword [ebp - 0x498]
add eax, 2
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x498]
mov ax, word [eax]
mov word [ebp - 0x49e], ax
add dword [ebp - 0x498], 2
cmp word [ebp - 0x49e], 0
jne 0x40fd3d
mov eax, dword [ebp - 0x498]
sub eax, dword [ebp - 0x49c]
sar eax, 1
mov dword [ebp - 0x4a4], eax
push dword [ebp - 0x4a4]
push 0x43bb20
lea ecx, [ebp - 0x144]
call fcn.004073b3
lea ecx, [ebp - 0x198]
call fcn.00416ddb
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
add eax, 2
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x4a8]
mov ax, word [eax]
mov word [ebp - 0x4ae], ax
add dword [ebp - 0x4a8], 2
cmp word [ebp - 0x4ae], 0
jne 0x40fdb4
mov eax, dword [ebp - 0x4a8]
sub eax, dword [ebp - 0x4ac]
sar eax, 1
mov dword [ebp - 0x4b4], eax
push dword [ebp - 0x4b4]
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x10c]
call fcn.004073b3
mov dword [ebp - 0x4b8], 0x43ba2c
mov eax, dword [ebp - 0x4b8]
add eax, 2
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4b8]
mov ax, word [eax]
mov word [ebp - 0x4be], ax
add dword [ebp - 0x4b8], 2
cmp word [ebp - 0x4be], 0
jne 0x40fe19
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x4bc]
sar eax, 1
mov dword [ebp - 0x4c4], eax
push dword [ebp - 0x4c4]
push 0x43ba2c
lea ecx, [ebp - 0x10c]
call fcn.004073b3
mov dword [ebp - 0x4c8], str.NoxSDS.exe
mov eax, dword [ebp - 0x4c8]
add eax, 2
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4c8]
mov ax, word [eax]
mov word [ebp - 0x4ce], ax
add dword [ebp - 0x4c8], 2
cmp word [ebp - 0x4ce], 0
jne 0x40fe7d
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0x4cc]
sar eax, 1
mov dword [ebp - 0x4d4], eax
push dword [ebp - 0x4d4]
push str.NoxSDS.exe
lea ecx, [ebp - 0x10c]
call fcn.004073b3
lea ecx, [ebp - 0x10c]
call fcn.00416ddb
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
add eax, 2
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4d8]
mov ax, word [eax]
mov word [ebp - 0x4de], ax
add dword [ebp - 0x4d8], 2
cmp word [ebp - 0x4de], 0
jne 0x40fef4
mov eax, dword [ebp - 0x4d8]
sub eax, dword [ebp - 0x4dc]
sar eax, 1
mov dword [ebp - 0x4e4], eax
push dword [ebp - 0x4e4]
push dword [ebp - 0x360]
lea ecx, [ebp - 0x1b8]
call fcn.004073b3
mov dword [ebp - 0x4e8], 0x43bb20
mov eax, dword [ebp - 0x4e8]
add eax, 2
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4e8]
mov ax, word [eax]
mov word [ebp - 0x4ee], ax
add dword [ebp - 0x4e8], 2
cmp word [ebp - 0x4ee], 0
jne 0x40ff59
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x4ec]
sar eax, 1
mov dword [ebp - 0x4f4], eax
push dword [ebp - 0x4f4]
push 0x43bb20
lea ecx, [ebp - 0x1b8]
call fcn.004073b3
lea ecx, [ebp - 0x198]
call fcn.00416ddb
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
add eax, 2
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4f8]
mov ax, word [eax]
mov word [ebp - 0x4fe], ax
add dword [ebp - 0x4f8], 2
cmp word [ebp - 0x4fe], 0
jne 0x40ffd0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x4fc]
sar eax, 1
mov dword [ebp - 0x504], eax
push dword [ebp - 0x504]
push dword [ebp - 0x364]
lea ecx, [ebp - 0x228]
call fcn.004073b3
mov dword [ebp - 0x508], 0x43ba2c
mov eax, dword [ebp - 0x508]
add eax, 2
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x508]
mov ax, word [eax]
mov word [ebp - 0x50e], ax
add dword [ebp - 0x508], 2
cmp word [ebp - 0x50e], 0
jne 0x410035
mov eax, dword [ebp - 0x508]
sub eax, dword [ebp - 0x50c]
sar eax, 1
mov dword [ebp - 0x514], eax
push dword [ebp - 0x514]
push 0x43ba2c
lea ecx, [ebp - 0x228]
call fcn.004073b3
mov dword [ebp - 0x518], str.NoxVMC.dll
mov eax, dword [ebp - 0x518]
add eax, 2
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x518]
mov ax, word [eax]
mov word [ebp - 0x51e], ax
add dword [ebp - 0x518], 2
cmp word [ebp - 0x51e], 0
jne 0x410099
mov eax, dword [ebp - 0x518]
sub eax, dword [ebp - 0x51c]
sar eax, 1
mov dword [ebp - 0x524], eax
push dword [ebp - 0x524]
push str.NoxVMC.dll
lea ecx, [ebp - 0x228]
call fcn.004073b3
lea ecx, [ebp - 0x228]
call fcn.00416ddb
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
add eax, 2
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x528]
mov ax, word [eax]
mov word [ebp - 0x52e], ax
add dword [ebp - 0x528], 2
cmp word [ebp - 0x52e], 0
jne 0x410110
mov eax, dword [ebp - 0x528]
sub eax, dword [ebp - 0x52c]
sar eax, 1
mov dword [ebp - 0x534], eax
push dword [ebp - 0x534]
push dword [ebp - 0x368]
lea ecx, [ebp - 0x1f0]
call fcn.004073b3
mov dword [ebp - 0x538], 0x43bb20
mov eax, dword [ebp - 0x538]
add eax, 2
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x538]
mov ax, word [eax]
mov word [ebp - 0x53e], ax
add dword [ebp - 0x538], 2
cmp word [ebp - 0x53e], 0
jne 0x410175
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x53c]
sar eax, 1
mov dword [ebp - 0x544], eax
push dword [ebp - 0x544]
push 0x43bb20
lea ecx, [ebp - 0x1f0]
call fcn.004073b3
lea ecx, [ebp - 0x198]
call fcn.00416ddb
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
add eax, 2
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x548]
mov ax, word [eax]
mov word [ebp - 0x54e], ax
add dword [ebp - 0x548], 2
cmp word [ebp - 0x54e], 0
jne 0x4101ec
mov eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0x54c]
sar eax, 1
mov dword [ebp - 0x554], eax
push dword [ebp - 0x554]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x20c]
call fcn.004073b3
mov dword [ebp - 0x558], 0x43ba2c
mov eax, dword [ebp - 0x558]
add eax, 2
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x558]
mov ax, word [eax]
mov word [ebp - 0x55e], ax
add dword [ebp - 0x558], 2
cmp word [ebp - 0x55e], 0
jne 0x410251
mov eax, dword [ebp - 0x558]
sub eax, dword [ebp - 0x55c]
sar eax, 1
mov dword [ebp - 0x564], eax
push dword [ebp - 0x564]
push 0x43ba2c
lea ecx, [ebp - 0x20c]
call fcn.004073b3
mov dword [ebp - 0x568], str.regsvr32.exe
mov eax, dword [ebp - 0x568]
add eax, 2
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x568]
mov ax, word [eax]
mov word [ebp - 0x56e], ax
add dword [ebp - 0x568], 2
cmp word [ebp - 0x56e], 0
jne 0x4102b5
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0x56c]
sar eax, 1
mov dword [ebp - 0x574], eax
push dword [ebp - 0x574]
push str.regsvr32.exe
lea ecx, [ebp - 0x20c]
call fcn.004073b3
lea ecx, [ebp - 0x20c]
call fcn.00416ddb
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
add eax, 2
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x578]
mov ax, word [eax]
mov word [ebp - 0x57e], ax
add dword [ebp - 0x578], 2
cmp word [ebp - 0x57e], 0
jne 0x41032c
mov eax, dword [ebp - 0x578]
sub eax, dword [ebp - 0x57c]
sar eax, 1
mov dword [ebp - 0x584], eax
push dword [ebp - 0x584]
push dword [ebp - 0x370]
lea ecx, [ebp - 0x160]
call fcn.004073b3
mov dword [ebp - 0x588], 0x43bb20
mov eax, dword [ebp - 0x588]
add eax, 2
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x588]
mov ax, word [eax]
mov word [ebp - 0x58e], ax
add dword [ebp - 0x588], 2
cmp word [ebp - 0x58e], 0
jne 0x410391
mov eax, dword [ebp - 0x588]
sub eax, dword [ebp - 0x58c]
sar eax, 1
mov dword [ebp - 0x594], eax
push dword [ebp - 0x594]
push 0x43bb20
lea ecx, [ebp - 0x160]
call fcn.004073b3
mov dword [ebp - 0x598], str.__regserver
mov eax, dword [ebp - 0x598]
add eax, 2
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x598]
mov ax, word [eax]
mov word [ebp - 0x59e], ax
add dword [ebp - 0x598], 2
cmp word [ebp - 0x59e], 0
jne 0x4103f5
mov eax, dword [ebp - 0x598]
sub eax, dword [ebp - 0x59c]
sar eax, 1
mov dword [ebp - 0x5a4], eax
push dword [ebp - 0x5a4]
push str.__regserver
lea ecx, [ebp - 0x1d4]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x128]
call fcn.00407683
mov dword [ebp - 0x5a8], 0x43ba2c
mov eax, dword [ebp - 0x5a8]
add eax, 2
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5a8]
mov ax, word [eax]
mov word [ebp - 0x5ae], ax
add dword [ebp - 0x5a8], 2
cmp word [ebp - 0x5ae], 0
jne 0x410473
mov eax, dword [ebp - 0x5a8]
sub eax, dword [ebp - 0x5ac]
sar eax, 1
mov dword [ebp - 0x5b4], eax
push dword [ebp - 0x5b4]
push 0x43ba2c
lea ecx, [ebp - 0x128]
call fcn.004073b3
mov dword [ebp - 0x5b8], str.NoxVMSVC.exe
mov eax, dword [ebp - 0x5b8]
add eax, 2
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x5b8]
mov ax, word [eax]
mov word [ebp - 0x5be], ax
add dword [ebp - 0x5b8], 2
cmp word [ebp - 0x5be], 0
jne 0x4104d7
mov eax, dword [ebp - 0x5b8]
sub eax, dword [ebp - 0x5bc]
sar eax, 1
mov dword [ebp - 0x5c4], eax
push dword [ebp - 0x5c4]
push str.NoxVMSVC.exe
lea ecx, [ebp - 0x128]
call fcn.004073b3
mov dword [ebp - 0x5c8], 0x43bb20
mov eax, dword [ebp - 0x5c8]
add eax, 2
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x5c8]
mov ax, word [eax]
mov word [ebp - 0x5ce], ax
add dword [ebp - 0x5c8], 2
cmp word [ebp - 0x5ce], 0
jne 0x41053b
mov eax, dword [ebp - 0x5c8]
sub eax, dword [ebp - 0x5cc]
sar eax, 1
mov dword [ebp - 0x5d4], eax
push dword [ebp - 0x5d4]
push 0x43bb20
lea ecx, [ebp - 0x128]
call fcn.004073b3
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
mov dword [ebp - 0x5d8], str.__unregserver
mov eax, dword [ebp - 0x5d8]
add eax, 2
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5d8]
mov ax, word [eax]
mov word [ebp - 0x5de], ax
add dword [ebp - 0x5d8], 2
cmp word [ebp - 0x5de], 0
jne 0x4105b9
mov eax, dword [ebp - 0x5d8]
sub eax, dword [ebp - 0x5dc]
sar eax, 1
mov dword [ebp - 0x5e4], eax
push dword [ebp - 0x5e4]
push str.__unregserver
lea ecx, [ebp - 0x244]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x128]
call fcn.00416d98
mov dword [ebp - 0x5e8], 0x43bb20
mov eax, dword [ebp - 0x5e8]
add eax, 2
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5e8]
mov ax, word [eax]
mov word [ebp - 0x5ee], ax
add dword [ebp - 0x5e8], 2
cmp word [ebp - 0x5ee], 0
jne 0x41062a
mov eax, dword [ebp - 0x5e8]
sub eax, dword [ebp - 0x5ec]
sar eax, 1
mov dword [ebp - 0x5f4], eax
push dword [ebp - 0x5f4]
push 0x43bb20
lea ecx, [ebp - 0x128]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x128]
call fcn.00407683
mov dword [ebp - 0x5f8], 0x43ba2c
mov eax, dword [ebp - 0x5f8]
add eax, 2
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5f8]
mov ax, word [eax]
mov word [ebp - 0x5fe], ax
add dword [ebp - 0x5f8], 2
cmp word [ebp - 0x5fe], 0
jne 0x4106a8
mov eax, dword [ebp - 0x5f8]
sub eax, dword [ebp - 0x5fc]
sar eax, 1
mov dword [ebp - 0x604], eax
push dword [ebp - 0x604]
push 0x43ba2c
lea ecx, [ebp - 0x128]
call fcn.004073b3
mov dword [ebp - 0x608], str.regsvr32.exe_
mov eax, dword [ebp - 0x608]
add eax, 2
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x608]
mov ax, word [eax]
mov word [ebp - 0x60e], ax
add dword [ebp - 0x608], 2
cmp word [ebp - 0x60e], 0
jne 0x41070c
mov eax, dword [ebp - 0x608]
sub eax, dword [ebp - 0x60c]
sar eax, 1
mov dword [ebp - 0x614], eax
push dword [ebp - 0x614]
push str.regsvr32.exe_
lea ecx, [ebp - 0x128]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x618], 0x43ba2c
mov eax, dword [ebp - 0x618]
add eax, 2
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x618]
mov ax, word [eax]
mov word [ebp - 0x61e], ax
add dword [ebp - 0x618], 2
cmp word [ebp - 0x61e], 0
jne 0x4107b1
mov eax, dword [ebp - 0x618]
sub eax, dword [ebp - 0x61c]
sar eax, 1
mov dword [ebp - 0x624], eax
push dword [ebp - 0x624]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x628], str.NoxVMC.dll
mov eax, dword [ebp - 0x628]
add eax, 2
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x628]
mov ax, word [eax]
mov word [ebp - 0x62e], ax
add dword [ebp - 0x628], 2
cmp word [ebp - 0x62e], 0
jne 0x410815
mov eax, dword [ebp - 0x628]
sub eax, dword [ebp - 0x62c]
sar eax, 1
mov dword [ebp - 0x634], eax
push dword [ebp - 0x634]
push str.NoxVMC.dll
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x638], 0x43bb20
mov eax, dword [ebp - 0x638]
add eax, 2
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x638]
mov ax, word [eax]
mov word [ebp - 0x63e], ax
add dword [ebp - 0x638], 2
cmp word [ebp - 0x63e], 0
jne 0x410879
mov eax, dword [ebp - 0x638]
sub eax, dword [ebp - 0x63c]
sar eax, 1
mov dword [ebp - 0x644], eax
push dword [ebp - 0x644]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
mov dword [ebp - 0x648], 0x43bb20
mov eax, dword [ebp - 0x648]
add eax, 2
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x648]
mov ax, word [eax]
mov word [ebp - 0x64e], ax
add dword [ebp - 0x648], 2
cmp word [ebp - 0x64e], 0
jne 0x4108ea
mov eax, dword [ebp - 0x648]
sub eax, dword [ebp - 0x64c]
sar eax, 1
mov dword [ebp - 0x654], eax
push dword [ebp - 0x654]
push 0x43bb20
lea ecx, [ebp - 0x244]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
mov dword [ebp - 0x658], 0x43ba2c
mov eax, dword [ebp - 0x658]
add eax, 2
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x658]
mov ax, word [eax]
mov word [ebp - 0x65e], ax
add dword [ebp - 0x658], 2
cmp word [ebp - 0x65e], 0
jne 0x410968
mov eax, dword [ebp - 0x658]
sub eax, dword [ebp - 0x65c]
sar eax, 1
mov dword [ebp - 0x664], eax
push dword [ebp - 0x664]
push 0x43ba2c
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x668], str.regsvr32_wow64.exe_
mov eax, dword [ebp - 0x668]
add eax, 2
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x668]
mov ax, word [eax]
mov word [ebp - 0x66e], ax
add dword [ebp - 0x668], 2
cmp word [ebp - 0x66e], 0
jne 0x4109cc
mov eax, dword [ebp - 0x668]
sub eax, dword [ebp - 0x66c]
sar eax, 1
mov dword [ebp - 0x674], eax
push dword [ebp - 0x674]
push str.regsvr32_wow64.exe_
lea ecx, [ebp - 0x244]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x17c]
call fcn.00416d98
mov dword [ebp - 0x678], 0x43bb20
mov eax, dword [ebp - 0x678]
add eax, 2
mov dword [ebp - 0x67c], eax
mov eax, dword [ebp - 0x678]
mov ax, word [eax]
mov word [ebp - 0x67e], ax
add dword [ebp - 0x678], 2
cmp word [ebp - 0x67e], 0
jne 0x410a3d
mov eax, dword [ebp - 0x678]
sub eax, dword [ebp - 0x67c]
sar eax, 1
mov dword [ebp - 0x684], eax
push dword [ebp - 0x684]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x688], 0x43ba2c
mov eax, dword [ebp - 0x688]
add eax, 2
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x688]
mov ax, word [eax]
mov word [ebp - 0x68e], ax
add dword [ebp - 0x688], 2
cmp word [ebp - 0x68e], 0
jne 0x410abb
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x68c]
sar eax, 1
mov dword [ebp - 0x694], eax
push dword [ebp - 0x694]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x698], str.x86_
mov eax, dword [ebp - 0x698]
add eax, 2
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x698]
mov ax, word [eax]
mov word [ebp - 0x69e], ax
add dword [ebp - 0x698], 2
cmp word [ebp - 0x69e], 0
jne 0x410b1f
mov eax, dword [ebp - 0x698]
sub eax, dword [ebp - 0x69c]
sar eax, 1
mov dword [ebp - 0x6a4], eax
push dword [ebp - 0x6a4]
push str.x86_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x6a8], str.NoxVMC_x86.dll
mov eax, dword [ebp - 0x6a8]
add eax, 2
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6a8]
mov ax, word [eax]
mov word [ebp - 0x6ae], ax
add dword [ebp - 0x6a8], 2
cmp word [ebp - 0x6ae], 0
jne 0x410b83
mov eax, dword [ebp - 0x6a8]
sub eax, dword [ebp - 0x6ac]
sar eax, 1
mov dword [ebp - 0x6b4], eax
push dword [ebp - 0x6b4]
push str.NoxVMC_x86.dll
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x6b8], 0x43bb20
mov eax, dword [ebp - 0x6b8]
add eax, 2
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x6b8]
mov ax, word [eax]
mov word [ebp - 0x6be], ax
add dword [ebp - 0x6b8], 2
cmp word [ebp - 0x6be], 0
jne 0x410be7
mov eax, dword [ebp - 0x6b8]
sub eax, dword [ebp - 0x6bc]
sar eax, 1
mov dword [ebp - 0x6c4], eax
push dword [ebp - 0x6c4]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
push 0
lea ecx, [ebp - 0x17c]
call fcn.00416d98
mov dword [ebp - 0x6c8], str.__u__
mov eax, dword [ebp - 0x6c8]
add eax, 2
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp - 0x6c8]
mov ax, word [eax]
mov word [ebp - 0x6ce], ax
add dword [ebp - 0x6c8], 2
cmp word [ebp - 0x6ce], 0
jne 0x410c7f
mov eax, dword [ebp - 0x6c8]
sub eax, dword [ebp - 0x6cc]
sar eax, 1
mov dword [ebp - 0x6d4], eax
push dword [ebp - 0x6d4]
push str.__u__
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x6d8], 0x43ba2c
mov eax, dword [ebp - 0x6d8]
add eax, 2
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6d8]
mov ax, word [eax]
mov word [ebp - 0x6de], ax
add dword [ebp - 0x6d8], 2
cmp word [ebp - 0x6de], 0
jne 0x410cfd
mov eax, dword [ebp - 0x6d8]
sub eax, dword [ebp - 0x6dc]
sar eax, 1
mov dword [ebp - 0x6e4], eax
push dword [ebp - 0x6e4]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x6e8], str.VBoxProxyStub.dll_
mov eax, dword [ebp - 0x6e8]
add eax, 2
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6e8]
mov ax, word [eax]
mov word [ebp - 0x6ee], ax
add dword [ebp - 0x6e8], 2
cmp word [ebp - 0x6ee], 0
jne 0x410d61
mov eax, dword [ebp - 0x6e8]
sub eax, dword [ebp - 0x6ec]
sar eax, 1
mov dword [ebp - 0x6f4], eax
push dword [ebp - 0x6f4]
push str.VBoxProxyStub.dll_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
mov dword [ebp - 0x6f8], 0x43bb20
mov eax, dword [ebp - 0x6f8]
add eax, 2
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp - 0x6f8]
mov ax, word [eax]
mov word [ebp - 0x6fe], ax
add dword [ebp - 0x6f8], 2
cmp word [ebp - 0x6fe], 0
jne 0x410dd2
mov eax, dword [ebp - 0x6f8]
sub eax, dword [ebp - 0x6fc]
sar eax, 1
mov dword [ebp - 0x704], eax
push dword [ebp - 0x704]
push 0x43bb20
lea ecx, [ebp - 0x244]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
mov dword [ebp - 0x708], 0x43ba2c
mov eax, dword [ebp - 0x708]
add eax, 2
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x708]
mov ax, word [eax]
mov word [ebp - 0x70e], ax
add dword [ebp - 0x708], 2
cmp word [ebp - 0x70e], 0
jne 0x410e50
mov eax, dword [ebp - 0x708]
sub eax, dword [ebp - 0x70c]
sar eax, 1
mov dword [ebp - 0x714], eax
push dword [ebp - 0x714]
push 0x43ba2c
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x718], str.regsvr32_wow64.exe_
mov eax, dword [ebp - 0x718]
add eax, 2
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x718]
mov ax, word [eax]
mov word [ebp - 0x71e], ax
add dword [ebp - 0x718], 2
cmp word [ebp - 0x71e], 0
jne 0x410eb4
mov eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x71c]
sar eax, 1
mov dword [ebp - 0x724], eax
push dword [ebp - 0x724]
push str.regsvr32_wow64.exe_
lea ecx, [ebp - 0x244]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x17c]
call fcn.00416d98
mov dword [ebp - 0x728], str.__u__
mov eax, dword [ebp - 0x728]
add eax, 2
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x728]
mov ax, word [eax]
mov word [ebp - 0x72e], ax
add dword [ebp - 0x728], 2
cmp word [ebp - 0x72e], 0
jne 0x410f25
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x72c]
sar eax, 1
mov dword [ebp - 0x734], eax
push dword [ebp - 0x734]
push str.__u__
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x738], 0x43ba2c
mov eax, dword [ebp - 0x738]
add eax, 2
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x738]
mov ax, word [eax]
mov word [ebp - 0x73e], ax
add dword [ebp - 0x738], 2
cmp word [ebp - 0x73e], 0
jne 0x410fa3
mov eax, dword [ebp - 0x738]
sub eax, dword [ebp - 0x73c]
sar eax, 1
mov dword [ebp - 0x744], eax
push dword [ebp - 0x744]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x748], str.x86VBoxProxyStub_x86.dll_
mov eax, dword [ebp - 0x748]
add eax, 2
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x748]
mov ax, word [eax]
mov word [ebp - 0x74e], ax
add dword [ebp - 0x748], 2
cmp word [ebp - 0x74e], 0
jne 0x411007
mov eax, dword [ebp - 0x748]
sub eax, dword [ebp - 0x74c]
sar eax, 1
mov dword [ebp - 0x754], eax
push dword [ebp - 0x754]
push str.x86VBoxProxyStub_x86.dll_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0x9c4
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x144]
call fcn.00407683
mov dword [ebp - 0x374], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x280], esp
push dword [ebp - 0x374]
call fcn.00416670
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x384], eax
mov byte [ebp - 4], 0x10
push dword [ebp - 0x384]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x11
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
push 0x9c4
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00407683
mov dword [ebp - 0x388], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x284], esp
push dword [ebp - 0x388]
call fcn.00416670
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x398], eax
mov byte [ebp - 4], 0x12
push dword [ebp - 0x398]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x13
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
push 0xffffffffffffffff
mov dword [ebp - 0x760], str.__s
mov eax, dword [ebp - 0x760]
add eax, 2
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x760]
mov ax, word [eax]
mov word [ebp - 0x766], ax
add dword [ebp - 0x760], 2
cmp word [ebp - 0x766], 0
jne 0x4111a9
mov eax, dword [ebp - 0x760]
sub eax, dword [ebp - 0x764]
sar eax, 1
mov dword [ebp - 0x76c], eax
push dword [ebp - 0x76c]
push str.__s
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x39c], eax
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x1f0]
push eax
mov ecx, dword [ebp - 0x39c]
call fcn.00407683
mov dword [ebp - 0x3a0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x288], esp
push dword [ebp - 0x3a0]
call fcn.00416670
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x3b0], eax
mov byte [ebp - 4], 0x14
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x15
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
mov dword [ebp - 0x774], 0x43bb20
mov eax, dword [ebp - 0x774]
add eax, 2
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x774]
mov ax, word [eax]
mov word [ebp - 0x77a], ax
add dword [ebp - 0x774], 2
cmp word [ebp - 0x77a], 0
jne 0x4112a0
mov eax, dword [ebp - 0x774]
sub eax, dword [ebp - 0x778]
sar eax, 1
mov dword [ebp - 0x780], eax
push dword [ebp - 0x780]
push 0x43bb20
lea ecx, [ebp - 0x244]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
mov dword [ebp - 0x784], 0x43ba2c
mov eax, dword [ebp - 0x784]
add eax, 2
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x784]
mov ax, word [eax]
mov word [ebp - 0x78a], ax
add dword [ebp - 0x784], 2
cmp word [ebp - 0x78a], 0
jne 0x41131e
mov eax, dword [ebp - 0x784]
sub eax, dword [ebp - 0x788]
sar eax, 1
mov dword [ebp - 0x790], eax
push dword [ebp - 0x790]
push 0x43ba2c
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x794], str.regsvr32_wow64.exe_
mov eax, dword [ebp - 0x794]
add eax, 2
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x794]
mov ax, word [eax]
mov word [ebp - 0x79a], ax
add dword [ebp - 0x794], 2
cmp word [ebp - 0x79a], 0
jne 0x411382
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0x798]
sar eax, 1
mov dword [ebp - 0x7a0], eax
push dword [ebp - 0x7a0]
push str.regsvr32_wow64.exe_
lea ecx, [ebp - 0x244]
call fcn.004073b3
push 0
lea ecx, [ebp - 0x17c]
call fcn.00416d98
mov dword [ebp - 0x7a4], 0x43bb20
mov eax, dword [ebp - 0x7a4]
add eax, 2
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a4]
mov ax, word [eax]
mov word [ebp - 0x7aa], ax
add dword [ebp - 0x7a4], 2
cmp word [ebp - 0x7aa], 0
jne 0x4113f3
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0x7a8]
sar eax, 1
mov dword [ebp - 0x7b0], eax
push dword [ebp - 0x7b0]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x7b4], 0x43ba2c
mov eax, dword [ebp - 0x7b4]
add eax, 2
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b4]
mov ax, word [eax]
mov word [ebp - 0x7ba], ax
add dword [ebp - 0x7b4], 2
cmp word [ebp - 0x7ba], 0
jne 0x411471
mov eax, dword [ebp - 0x7b4]
sub eax, dword [ebp - 0x7b8]
sar eax, 1
mov dword [ebp - 0x7c0], eax
push dword [ebp - 0x7c0]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x7c4], str.x86_
mov eax, dword [ebp - 0x7c4]
add eax, 2
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7c4]
mov ax, word [eax]
mov word [ebp - 0x7ca], ax
add dword [ebp - 0x7c4], 2
cmp word [ebp - 0x7ca], 0
jne 0x4114d5
mov eax, dword [ebp - 0x7c4]
sub eax, dword [ebp - 0x7c8]
sar eax, 1
mov dword [ebp - 0x7d0], eax
push dword [ebp - 0x7d0]
push str.x86_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x7d4], str.NoxVMC_x86.dll
mov eax, dword [ebp - 0x7d4]
add eax, 2
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d4]
mov ax, word [eax]
mov word [ebp - 0x7da], ax
add dword [ebp - 0x7d4], 2
cmp word [ebp - 0x7da], 0
jne 0x411539
mov eax, dword [ebp - 0x7d4]
sub eax, dword [ebp - 0x7d8]
sar eax, 1
mov dword [ebp - 0x7e0], eax
push dword [ebp - 0x7e0]
push str.NoxVMC_x86.dll
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x7e4], 0x43bb20
mov eax, dword [ebp - 0x7e4]
add eax, 2
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x7e4]
mov ax, word [eax]
mov word [ebp - 0x7ea], ax
add dword [ebp - 0x7e4], 2
cmp word [ebp - 0x7ea], 0
jne 0x41159d
mov eax, dword [ebp - 0x7e4]
sub eax, dword [ebp - 0x7e8]
sar eax, 1
mov dword [ebp - 0x7f0], eax
push dword [ebp - 0x7f0]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0xffffffffffffffff
mov dword [ebp - 0x7f4], str.__s
mov eax, dword [ebp - 0x7f4]
add eax, 2
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x7f4]
mov ax, word [eax]
mov word [ebp - 0x7fa], ax
add dword [ebp - 0x7f4], 2
cmp word [ebp - 0x7fa], 0
jne 0x411603
mov eax, dword [ebp - 0x7f4]
sub eax, dword [ebp - 0x7f8]
sar eax, 1
mov dword [ebp - 0x800], eax
push dword [ebp - 0x800]
push str.__s
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x3b4], eax
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x3b4]
call fcn.00407683
mov dword [ebp - 0x3b8], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x28c], esp
push dword [ebp - 0x3b8]
call fcn.00416670
lea eax, [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0x16
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x17
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
push 0
lea ecx, [ebp - 0x17c]
call fcn.00416d98
mov dword [ebp - 0x808], 0x43bb20
mov eax, dword [ebp - 0x808]
add eax, 2
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x808]
mov ax, word [eax]
mov word [ebp - 0x80e], ax
add dword [ebp - 0x808], 2
cmp word [ebp - 0x80e], 0
jne 0x411721
mov eax, dword [ebp - 0x808]
sub eax, dword [ebp - 0x80c]
sar eax, 1
mov dword [ebp - 0x814], eax
push dword [ebp - 0x814]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x818], 0x43ba2c
mov eax, dword [ebp - 0x818]
add eax, 2
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x818]
mov ax, word [eax]
mov word [ebp - 0x81e], ax
add dword [ebp - 0x818], 2
cmp word [ebp - 0x81e], 0
jne 0x41179f
mov eax, dword [ebp - 0x818]
sub eax, dword [ebp - 0x81c]
sar eax, 1
mov dword [ebp - 0x824], eax
push dword [ebp - 0x824]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x828], str.VBoxProxyStub.dll_
mov eax, dword [ebp - 0x828]
add eax, 2
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x828]
mov ax, word [eax]
mov word [ebp - 0x82e], ax
add dword [ebp - 0x828], 2
cmp word [ebp - 0x82e], 0
jne 0x411803
mov eax, dword [ebp - 0x828]
sub eax, dword [ebp - 0x82c]
sar eax, 1
mov dword [ebp - 0x834], eax
push dword [ebp - 0x834]
push str.VBoxProxyStub.dll_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0xffffffffffffffff
mov dword [ebp - 0x838], str.__s
mov eax, dword [ebp - 0x838]
add eax, 2
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x838]
mov ax, word [eax]
mov word [ebp - 0x83e], ax
add dword [ebp - 0x838], 2
cmp word [ebp - 0x83e], 0
jne 0x411869
mov eax, dword [ebp - 0x838]
sub eax, dword [ebp - 0x83c]
sar eax, 1
mov dword [ebp - 0x844], eax
push dword [ebp - 0x844]
push str.__s
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x3cc], eax
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x3cc]
call fcn.00407683
mov dword [ebp - 0x3d0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x290], esp
push dword [ebp - 0x3d0]
call fcn.00416670
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 0x18
push dword [ebp - 0x3e0]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x19
push 0
push 1
lea ecx, [ebp - 0x9c]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
push 0
lea ecx, [ebp - 0x244]
call fcn.00416d98
mov dword [ebp - 0x84c], 0x43bb20
mov eax, dword [ebp - 0x84c]
add eax, 2
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x84c]
mov ax, word [eax]
mov word [ebp - 0x852], ax
add dword [ebp - 0x84c], 2
cmp word [ebp - 0x852], 0
jne 0x411966
mov eax, dword [ebp - 0x84c]
sub eax, dword [ebp - 0x850]
sar eax, 1
mov dword [ebp - 0x858], eax
push dword [ebp - 0x858]
push 0x43bb20
lea ecx, [ebp - 0x244]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x244]
call fcn.00407683
mov dword [ebp - 0x85c], 0x43ba2c
mov eax, dword [ebp - 0x85c]
add eax, 2
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x85c]
mov ax, word [eax]
mov word [ebp - 0x862], ax
add dword [ebp - 0x85c], 2
cmp word [ebp - 0x862], 0
jne 0x4119e4
mov eax, dword [ebp - 0x85c]
sub eax, dword [ebp - 0x860]
sar eax, 1
mov dword [ebp - 0x868], eax
push dword [ebp - 0x868]
push 0x43ba2c
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x86c], str.regsvr32_wow64.exe_
mov eax, dword [ebp - 0x86c]
add eax, 2
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x86c]
mov ax, word [eax]
mov word [ebp - 0x872], ax
add dword [ebp - 0x86c], 2
cmp word [ebp - 0x872], 0
jne 0x411a48
mov eax, dword [ebp - 0x86c]
sub eax, dword [ebp - 0x870]
sar eax, 1
mov dword [ebp - 0x878], eax
push dword [ebp - 0x878]
push str.regsvr32_wow64.exe_
lea ecx, [ebp - 0x244]
call fcn.004073b3
lea ecx, [ebp - 0x17c]
call fcn.00416735
mov dword [ebp - 0x87c], 0x43bb20
mov eax, dword [ebp - 0x87c]
add eax, 2
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x87c]
mov ax, word [eax]
mov word [ebp - 0x882], ax
add dword [ebp - 0x87c], 2
cmp word [ebp - 0x882], 0
jne 0x411ab7
mov eax, dword [ebp - 0x87c]
sub eax, dword [ebp - 0x880]
sar eax, 1
mov dword [ebp - 0x888], eax
push dword [ebp - 0x888]
push 0x43bb20
lea ecx, [ebp - 0x17c]
call fcn.0040606c
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x17c]
call fcn.00407683
mov dword [ebp - 0x88c], 0x43ba2c
mov eax, dword [ebp - 0x88c]
add eax, 2
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x88c]
mov ax, word [eax]
mov word [ebp - 0x892], ax
add dword [ebp - 0x88c], 2
cmp word [ebp - 0x892], 0
jne 0x411b35
mov eax, dword [ebp - 0x88c]
sub eax, dword [ebp - 0x890]
sar eax, 1
mov dword [ebp - 0x898], eax
push dword [ebp - 0x898]
push 0x43ba2c
lea ecx, [ebp - 0x17c]
call fcn.004073b3
mov dword [ebp - 0x89c], str.x86VBoxProxyStub_x86.dll_
mov eax, dword [ebp - 0x89c]
add eax, 2
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x89c]
mov ax, word [eax]
mov word [ebp - 0x8a2], ax
add dword [ebp - 0x89c], 2
cmp word [ebp - 0x8a2], 0
jne 0x411b99
mov eax, dword [ebp - 0x89c]
sub eax, dword [ebp - 0x8a0]
sar eax, 1
mov dword [ebp - 0x8a8], eax
push dword [ebp - 0x8a8]
push str.x86VBoxProxyStub_x86.dll_
lea ecx, [ebp - 0x17c]
call fcn.004073b3
push 0xffffffffffffffff
mov dword [ebp - 0x8ac], str.__s
mov eax, dword [ebp - 0x8ac]
add eax, 2
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8ac]
mov ax, word [eax]
mov word [ebp - 0x8b2], ax
add dword [ebp - 0x8ac], 2
cmp word [ebp - 0x8b2], 0
jne 0x411bff
mov eax, dword [ebp - 0x8ac]
sub eax, dword [ebp - 0x8b0]
sar eax, 1
mov dword [ebp - 0x8b8], eax
push dword [ebp - 0x8b8]
push str.__s
lea ecx, [ebp - 0x244]
call fcn.004073b3
mov dword [ebp - 0x3ec], eax
push dword [0x43b6a8]
push 0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x3ec]
call fcn.00407683
mov dword [ebp - 0x3f0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x294], esp
push dword [ebp - 0x3f0]
call fcn.00416670
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x404]
call fcn.0040d183
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x400], eax
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x400]
lea ecx, [ebp - 0xd4]
call fcn.00406f0c
mov byte [ebp - 4], 0x1b
push 0
push 1
lea ecx, [ebp - 0xb8]
call fcn.00402ad2
mov byte [ebp - 4], 0xf
and dword [ebp - 0x298], 0
mov byte [ebp - 4], 0x1c
push 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.00402ad2
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0x1d
push 0
push 1
lea ecx, [ebp - 0x244]
call fcn.004050af
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0x1e
push 0
push 1
lea ecx, [ebp - 0x17c]
call fcn.004050af
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0x1f
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.004050af
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0x20
push 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.004050af
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0x21
push 0
push 1
lea ecx, [ebp - 0xf0]
call fcn.004050af
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0x22
push 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.004050af
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0x23
push 0
push 1
lea ecx, [ebp - 0x20c]
call fcn.004050af
mov byte [ebp - 4], 7
mov byte [ebp - 4], 0x24
push 0
push 1
lea ecx, [ebp - 0x228]
call fcn.004050af
mov byte [ebp - 4], 6
mov byte [ebp - 4], 0x25
push 0
push 1
lea ecx, [ebp - 0x10c]
call fcn.004050af
mov byte [ebp - 4], 5
mov byte [ebp - 4], 0x26
push 0
push 1
lea ecx, [ebp - 0x260]
call fcn.004050af
mov byte [ebp - 4], 4
mov byte [ebp - 4], 0x27
push 0
push 1
lea ecx, [ebp - 0x160]
call fcn.004050af
mov byte [ebp - 4], 3
mov byte [ebp - 4], 0x28
push 0
push 1
lea ecx, [ebp - 0x1f0]
call fcn.004050af
mov byte [ebp - 4], 2
mov byte [ebp - 4], 0x29
push 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.004050af
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0x2a
push 0
push 1
lea ecx, [ebp - 0x144]
call fcn.004050af
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x2b
push 0
push 1
lea ecx, [ebp - 0x198]
call fcn.004050af
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041c438
leave
ret