Function at 0x407974
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encrypt data using chaskey
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
test dword [esp - 0x10], 0x24c9995d
and ebx, esi
not ecx
xor eax, 0x411f4a22
rcr esi, 0x1c
adc esi, edx
clc
rol edx, 0
bt ebp, 0x1a
sub ecx, esi
sbb ebx, dword [esp - 0x10]
clc
nop
inc eax
rcl ecx, 8
or edi, dword [esp + 0xc]
shl ebx, 0x1b
shr ebp, 0x14
add eax, dword [esp]
btc edx, 8
xor edx, 0xdfeb19d9
xchg ecx, eax
xchg ebx, ebp
shl ecx, 0x14
ror esi, 3
stc
add eax, 0xcf6750e8
ror eax, 0x13
stc
nop
btc edx, 0x17
clc
cmp dword [esp], edx
cld
rcl ebp, 3
shl esi, 0xd
mov esi, esi
mov eax, dword [esp - 4]
rcl eax, 0x16
not eax
shr edi, 0x12
bt ebp, 7
sar edx, 6
btc ebx, 7
sar ecx, 0x18
rcl edx, 0x12
xchg esi, ebp
bt ebp, 0xa
stc
sbb esi, esp
stc
nop
shl ecx, 9
inc eax
inc ebp
rcl edi, 2
inc eax
rol edi, 0xb
btr ebp, 0x16
shr ebp, 6
not ebp
xchg ebx, eax
rcr esi, 0x17
sub ebp, dword [esp - 8]
btc eax, 0
sbb edi, dword [esp + 0x10]
stc
sar eax, 0x1b
mov edi, 0x6e106353
stc
sbb ecx, dword [esp - 8]
cmp dword [esp + 0x10], 0xf4513934
xchg ecx, eax
nop
and edx, dword [esp - 4]
add esi, esp
rcl ebp, 0x1a
rcr edi, 0x1d
adc ecx, eax
cmp esi, dword [esp - 4]
nop
cmc
shl ebp, 0xa
rcl ebp, 0x11
and ebx, edi
or esi, ebp
rcr esi, 0x1a
stc
not eax
ror ecx, 0x18
cmp edi, dword [esp - 0xc]
ror ecx, 3
mov edx, dword [esp - 8]
or ecx, dword [esp - 0x10]
dec eax
ror esi, 0x1d
or esi, esi
dec ebx
sbb ebp, dword [esp]
ror ebp, 0x1d
mov eax, dword [esp + 4]
rcr edi, 0x11
cmp ebp, edx
dec edx
test dword [esp - 4], 0xbd2dac07
ror ebp, 2
btr eax, 5
rcr edi, 0x19
shr edx, 0x1d
sbb edx, 0x99d436b9
sbb edx, dword [0x40cd07]
sbb edi, eax
test dword [esp - 0xc], ecx
shl ebx, 0xe
sub ebp, ecx
xchg edx, edi
xor ecx, 0xa5b84276
bts ecx, 9
cld
rcl ebx, 0xd
or edx, ecx
cld
xchg ebx, esi
xor ebp, dword [0x425efe]
shl ecx, 0x10
add esi, 0x825f495e
inc esi
nop
bts ecx, 0x15
bt edx, 0x1a
mov eax, 0x7f282ba4
ror edi, 0xb
sbb ecx, 0xaef94abe
xchg ecx, ebx
bts eax, 0xf
inc edx
sub eax, esi
xor ebx, dword [esp]
cld
and edx, dword [esp - 4]
rcr ecx, 0x18
sub edi, dword [esp + 8]
shl edx, 7
clc
shr ebp, 0xa
adc edi, dword [esp - 8]
ror ebp, 0x1c
xchg ecx, edi
xor ebx, dword [esp - 4]
add eax, dword [esp - 0x14]
shr ebp, 0x18
add ecx, eax
cmp edi, ebp
rol esi, 0x18
xchg ebx, edi
add ecx, dword [esp + 0x10]
rcl ebp, 0x1a
sar ecx, 0x17
sbb edi, dword [esp + 4]
not ebp
add ebp, 0xe126ddb
nop
cld
adc esi, dword [esp - 4]
rcl eax, 0x1f
mov edx, edi
bt edx, 0x13
add ebp, 0x61353a29
add eax, edi
nop
and ebp, edx
clc
not ebx
sar ebp, 0xe
mov ebp, 0x1b3e9b9
shl edi, 0xf
rcr eax, 0x1e
cld
not ecx
sub ebx, dword [esp - 4]
test dword [0x44941e], 0x45b1aec0
test dword [0x42e9e1], esp
cld
clc
ror ebp, 0x1e
adc ecx, dword [esp - 0xc]
cmp ebp, 0xc8ed9151
rcr edi, 0x12
bt ebp, 0x1e
not ebp
and ecx, dword [esp + 8]
btc ebx, 0x1c
add eax, dword [esp + 0x14]
btc ebp, 0x1e
xchg edx, ebx
inc ebx
xor ecx, dword [esp - 8]
not ebp
rcl edi, 0x12
cmp dword [0x434239], edx
xchg esi, eax
and ecx, esi
xchg ebx, esi
cld
shl ebp, 6
rcr edx, 1
dec ecx
shl ebp, 0x1c
cld
shl esi, 9
bts esi, 0xd
mov ecx, dword [0x44ba64]
mov ebx, dword fs:[0x30]
mov ebp, edx
shl esi, 0x1f
sub eax, 0x14d51392
mov eax, dword [esp + 8]
not ebp
btc edx, 0x12
cld
bt ebp, 5
clc
btc edx, 0x16
btr edi, 7
mov esi, dword [esp + 0xc]
adc eax, eax
mov ebp, esi
stc
sub eax, 0x4ffb514a
rcr edi, 0x17
rcl eax, 6
btc ebp, 8
sbb esi, dword [esp - 0x14]
xor ecx, esi
rcl edi, 0x14
cld
clc
not edx
clc
shl ebp, 0x1f
or ecx, dword [0x44eb64]
bt edx, 0x1f
adc edi, 0x86240b24
clc
clc
movzx ebx, byte [ebx + 2]
sar edi, 0xc
xor eax, ecx
rcl eax, 0x1c
sbb eax, eax
shl esi, 0x18
cmc
rcr edx, 0x14
cld
rcl ecx, 0x16
cld
rcl edx, 9
add edx, dword [esp + 4]
cld
sub edx, ecx
bts ebp, 0x1b
cmp eax, edi
sar esi, 0x19
inc ecx
clc
xchg ebp, edx
ror edx, 0x16
sar edx, 0x1a
test dword [0x41097e], esp
rcl edi, 0xb
rcl edx, 0x10
xor edx, dword [esp - 0xc]
rcr edi, 0x10
cld
shr ebp, 0xa
ror eax, 0x19
cld
adc edx, esi
inc ebp
shl esi, 0x1e
sar eax, 3
sar ebp, 3
add esi, dword [0x43e7dc]
bts esi, 0x1e
and ecx, ecx
xchg edi, esi
bt edi, 9
shr ecx, 5
rcl ecx, 0x14
sbb eax, dword [esp - 0x14]
nop
test ebx, ebx
jne 0x409e9c
test dword [esp], esi
sar ebx, 0x1f
and esi, esi
bt edi, 2
sbb ebp, 0x4c6bff26
inc esi
sar edx, 9
xor ebp, dword [esp - 0xc]
btc ecx, 3
rcl ecx, 0xc
sub ecx, dword [esp + 0xc]
sar ebp, 0x1c
dec edi
sbb edx, dword [0x440fd4]
sub ebx, dword [esp]
sub esi, 0xbccc3b6b
rcr ebx, 0x18
cmp dword [esp - 0x10], ecx
stc
not edx
xchg esi, ebp
bts esi, 0x19
shl edi, 7
not ebx
btr edx, 0x1f
sub ebp, ebx
not esi
xchg edi, ebx
shr eax, 0x10
rcl edx, 0x10
rol ebx, 0x10
btr ebp, 0x17
shl ecx, 3
sbb ebp, 0x4f861869
xchg edx, edx
clc
xchg edx, ecx
nop
rcr ebx, 0xd
inc edx
adc ebp, dword [esp + 0x10]
sbb edx, 0x12b9a81f
sar eax, 3
cmp dword [0x405218], 0xcfefc3de
nop
clc
stc
nop
shl edx, 0x18
rcl edi, 0x10
inc edi
xor ebx, dword [esp - 0xc]
rcr eax, 6
cmp dword [esp - 8], esp
nop
shl eax, 5
clc
xchg ebx, edx
rol edx, 8
dec ebp
btr ebp, 0xb
clc
xor eax, dword [esp - 8]
bts ecx, 0xf
nop
xor ecx, 0xd6090b66
not edx
bt ecx, 0x15
bt edx, 0x10
btc edi, 0x1a
clc
shl edi, 0x16
dec esi
nop
nop
rol esi, 0x13
inc eax
shl ebx, 1
stc
mov ebx, dword fs:[0x30]
sbb esi, dword [0x44e20c]
btc edx, 0x16
bt edx, 3
cmp dword [0x43d013], esi
cld
or ebp, ebp
stc
btc eax, 0xf
cmp dword [esp + 0x14], ecx
mov ebx, dword [ebx + 0xc]
dec esi
clc
add ebx, 0x14
dec eax
stc
btc ecx, 0xa
rcl eax, 0x11
btc ebp, 0x11
dec eax
xor edx, dword [0x424403]
bts edi, 0x1f
btr edi, 0xa
mov eax, dword [0x44d272]
mov ebx, dword [ebx]
xchg edi, ebp
inc eax
clc
shl ebp, 1
mov edx, dword [ebx + 0x28]
shr eax, 0xd
cmp dword [esp - 4], 0xb7650580
clc
shr ebp, 7
not esi
sar eax, 0x1d
mov edi, dword [esp - 0x10]
sbb esi, esp
rol eax, 3
btc ebp, 2
mov ebp, dword [esp - 0xc]
add esi, 0x695d0c8f
shr edi, 6
inc esi
shl esi, 1
shr esi, 0x15
cmp edi, dword [esp + 0x10]
btc eax, 9
cmp dword [esp - 0xc], eax
adc eax, 0xed2cb39
mov eax, 0x1a
and esi, 0x96fd31c8
stc
inc esi
inc edi
mov ebp, 0x87c2e445
not esi
sub esi, esp
shl edi, 0xf
bt esi, 0x10
dec edi
nop
shl edi, 1
sub edi, dword [esp - 0xc]
nop
bt esi, 2
xchg esi, esi
or esi, 0xfa2d1762
btr esi, 0x15
add ebp, 0x7882e43a
xchg esi, esi
clc
rcr edi, 0x1d
rcl edi, 0x15
inc ebp
rol edi, 8
xchg edi, edi
stc
cld
stc
cld
sbb edi, dword [esp + 4]
shl edi, 9
cld
sub edi, edi
dec esi
dec edi
inc edi
ror esi, 0x1e
bts edi, 0x15
bt esi, 2
add edi, dword [esp + 0x10]
mov cl, byte [edx]
not esi
rol esi, 8
shr edi, 0xa
rcl edi, 0xa
sbb esi, dword [esp - 4]
rcr esi, 5
xor esi, esi
rcr edi, 0xb
nop
rol edi, 1
inc edx
ror esi, 0x1a
cld
btr esi, 0x1f
xchg esi, esi
sub esi, dword [0x403fb4]
cmc
shl edi, 0x1c
rol edi, 8
rcl esi, 0x14
cmc
btr edi, 0x16
ror esi, 1
cld
ror esi, 0x1a
cmp cl, 0x61
jl 0x407f22
not edi
cmp dword [esp], 0xc7d5f1e7
btr esi, 2
sbb esi, dword [esp + 0x10]
sbb esi, 0x4b61a618
clc
or edi, 0x11f8802
shr edi, 7
shl edi, 0x19
shr edi, 0x14
sub cl, 0x20
cmp esi, dword [0x41756b]
inc esi
sub edi, 0xa3733269
not edi
btc esi, 4
or esi, dword [esp + 8]
inc edi
cld
clc
xor cl, 0xd5
shl esi, 0xf
bts esi, 0x11
cld
btr esi, 0x1f
rol esi, 0x15
cmp byte [ebp], cl
jne 0x407dd4
mov esi, dword [esp - 0x10]
adc esi, dword [esp + 4]
and esi, edi
xchg edi, edi
inc esi
shl edi, 0x15
dec esi
shl edi, 4
xchg esi, esi
add esi, 0xbe8c76a2
sbb esi, dword [esp + 8]
not edi
rol esi, 0x10
xor edi, dword [0x40e322]
and edi, 0x8f9f96ee
add edi, dword [0x448300]
add edi, dword [esp - 8]
stc
dec eax
jne 0x407e82
rcr edi, 0x1e
rcl edi, 0xc
shl eax, 0x13
btr ecx, 0x16
stc
mov edi, dword [0x41d0a5]
add esi, dword [esp - 4]
nop
rol esi, 0x12
and esi, esi
cld
or esi, 0xe896fa5d
or eax, 0x612c9fb6
cld
sbb ecx, dword [esp + 0x10]
ror esi, 0x14
btc edi, 0x15
nop
rcl ecx, 0xa
stc
mov ebx, dword [ebx + 0x10]
inc edi
cmc
inc ecx
shl eax, 0x1c
inc ecx
shl eax, 0x1c
cmc
bts edi, 1
rol ecx, 0x11
cmc
ror ecx, 6
shl ecx, 0x1a
stc
and esi, dword [esp - 8]
nop
add ecx, dword [esp + 0xc]
test dword [0x428edd], edi
not edx
cmp ebp, eax
cmc
btr edx, 0xe
shr eax, 3
not eax
rol edx, 0x1a
btr ecx, 0x14
xchg edi, eax
dec eax
sub ecx, esp
bt eax, 3
not edi
ror edx, 0x11
btc esi, 0x16
btr ebp, 5
shr eax, 0xa
mov ebp, esp
mov edi, dword [ebx + 0x3c]
rol eax, 0x1d
not edx
adc ebp, 0x11fa2f7
and ebp, 0xdba498b3
rcr eax, 0xb
or esi, 0x80b251a4
xchg ebp, eax
cmc
cld
bt esi, 6
not esi
add esi, dword [esp]
bts esi, 0x10
shl ebp, 9
mov ebp, 0xbc18e6e2
add edi, ebx
bts ecx, 9
stc
shl ecx, 0x14
dec edx
rcr ebp, 0x11
test dword [0x4522aa], eax
test edx, ecx
mov edi, dword [edi + 0x78]
or ecx, eax
clc
shl edx, 0xa
mov ecx, 0x6b049b
shl ecx, 0xa
shr ecx, 0x1b
btc ecx, 6
cld
inc ebp
test dword [esp + 0xc], ebp
rcr edx, 0x19
or esi, ebp
adc ebp, dword [esp + 0xc]
ror eax, 7
add edi, ebx
rcl eax, 0x17
shr eax, 6
rol eax, 0x11
dec esi
shr esi, 0x12
ror esi, 0x15
ror ebp, 0xe
btc ecx, 0x1b
shr ebp, 1
mov ecx, dword [edi + 0x18]
test dword [esp + 0x10], ebp
sbb eax, dword [esp + 0xc]
btr ebp, 0x10
mov esi, edx
sbb eax, 0xbb757f8c
bts esi, 0xe
sar eax, 0x12
shl eax, 0x12
clc
cld
ror esi, 3
rol eax, 0x11
btc edx, 3
not ebp
test dword [esp - 0xc], 0x53de962d
rol eax, 0x1f
adc ebp, dword [0x410461]
mov esi, 0xa86468b0
cmp dword [esp + 0x10], ebp
not edx
sbb eax, dword [esp + 0x14]
inc ebp
rcr ebp, 6
rcl edx, 8
add esi, 0x57e15fec
sub eax, 0x30327c77
ror eax, 0x12
inc eax
rcr edx, 0x18
xchg edx, ebp
mov dword [esi], ecx
test dword [esp + 8], esp
ror eax, 8
ror edx, 0x1c
shl edx, 9
rcl ebp, 0x16
btc eax, 0x1a
bts edx, 0x1d
cld
not edx
shl eax, 8
shr eax, 0xb
mov ecx, dword [edi + 0x20]
bts eax, 0xe
xor edx, dword [0x41d594]
sub eax, dword [esp + 0xc]
clc
bt ebp, 5
add ecx, ebx
cmp dword [0x452f2a], ebp
cmc
bt ebp, 0x1d
add esi, 4
inc edx
ror edx, 0xe
mov ebp, dword [esp - 8]
test dword [0x4499e1], 0x6722a9ef
mov ebp, edx
btr edx, 8
shr eax, 0x15
stc
inc edx
shl edx, 0x14
sub eax, dword [0x44b6e2]
shr ebp, 0x1f
cld
cld
cmp dword [0x406c98], esp
or eax, eax
rcl ebp, 0xe
shr ebp, 0
nop
sub ebp, esp
mov dword [esi], ecx
nop
cld
not edx
ror ebp, 0x19
btr edx, 6
or ebp, dword [esp]
sbb edx, 0x9e3ef8dc
shr edx, 0x13
bt edx, 2
add edx, dword [esp + 0xc]
cmc
shr edx, 0x15
shr edx, 0x13
cmp dword [0x40d39d], ebp
btc ebp, 0x12
mov ecx, dword [edi + 0x24]
shl edx, 0x18
xchg edx, edx
nop
mov ebp, dword [esp - 8]
rol edx, 0x16
cld
and edx, 0x46e475d3
bts ebp, 0xc
cmp dword [esp], 0x9f03ef
btc edx, 0xc
sbb edx, dword [esp + 8]
cmp dword [esp + 8], ebp
sbb eax, dword [esp - 0x14]
shl eax, 0x11
clc
nop
btc eax, 0x12
cld
not edx
add ecx, ebx
btc ebp, 0x1c
mov edx, 0x4bac5c59
sub edx, esp
dec edx
nop
shr eax, 0x19
btc ebp, 0xf
bts ebp, 5
xchg ebp, eax
sub eax, ebp
shl eax, 6
test dword [esp - 0x10], 0x222e6eb6
cld
clc
stc
add esi, 4
clc
bts edx, 0
rcl edx, 0xe
cmc
mov dword [esi], ecx
sbb eax, dword [esp + 0xc]
shl eax, 0x1f
sar ebp, 0xd
add eax, dword [0x40a4d3]
btc edx, 0
sub eax, ebp
mov ecx, dword [edi + 0x1c]
stc
xchg edx, ebp
btr edx, 3
add ecx, ebx
ror eax, 0x11
xchg ebp, edx
rol eax, 2
btc edx, 0x11
btr edx, 0x12
adc eax, ebp
ror edx, 5
shr edx, 0xb
cmp dword [0x4335f5], edx
add edx, dword [esp - 0x10]
dec ebp
shr ebp, 0x13
ror ebp, 0x1d
add esi, 4
stc
stc
clc
shl eax, 0
shl edx, 4
xchg edx, eax
sar edx, 0x1f
adc edx, 0x9285dabb
not eax
ror eax, 1
adc eax, 0xf24d36de
shr ebp, 5
mov edx, 0x646ae297
cld
xchg edx, ebp
ror edx, 0x1d
shl ebp, 0x18
test dword [esp + 4], 0xcf1284e1
sar eax, 0x19
mov dword [esi], ecx
or ebp, dword [esp - 8]
cmc
sub ecx, ecx
bt esi, 0x12
and edi, dword [esp + 0x10]
rcl ebp, 0xb
cmc
shl ebp, 0x1a
sub esi, 0x9f3a6a85
add edx, dword [esp - 0xc]
shr eax, 0x16
bt esi, 0x10
sub edi, 0x16628107
cmc
bts edx, 7
dec esi
btr edx, 0x1e
inc ecx
xor eax, esp
test dword [esp - 0x14], esp
dec esi
btc esi, 6
clc
shl edi, 0xf
not edx
bt eax, 0x10
bt edi, 0xe
rcr ebp, 2
ror ebp, 0x1b
bts ecx, 0x17
inc esi
not ebp
test dword [esp + 0x10], edx
xor ebp, dword [0x453315]
dec ecx
adc edx, esi
and edi, dword [0x43ffaa]
sar ecx, 0x15
not esi
nop
rcr esi, 0xd
sub edx, 0x49eea04a
test dword [esp + 4], esi
rcr esi, 0xb
btr esi, 0x1d
not eax
not edi
mov ecx, 0xd5a0337a
inc edi
test edi, esi
test dword [esp + 0xc], edi
dec ebp
bt ebp, 0x1e
rcl esi, 0x1d
shl edx, 0x1e
cld
adc edx, dword [esp - 0xc]
add ecx, 0x2aa055c2
bts ebp, 1
sbb ebp, edi
cmc
xor eax, esp
ror edi, 8
btr edi, 0x12
rol ebp, 0x19
btc eax, 4
sub edx, dword [esp + 4]
rcl eax, 4
sub esi, dword [esp - 0x10]
btr edi, 0x12
rcr ebp, 0x1c
dec edx
shl eax, 5
sub esi, dword [esp + 8]
jmp ecx
or eax, 0xe129bef3
bt edi, 6
xchg ebp, ebp
inc edx
stc
not ebp
test dword [0x444ca2], ebp
inc edi
rcr ecx, 0xf
or ebp, 0xcc7ff29a
ror edx, 0x1e
shl ecx, 0x15
dec ebp
bt esi, 6
sub ebx, ecx
mov esi, dword [esp - 0x14]
cmc
clc
test dword [esp + 0x14], ebx
sub edx, 0xb5108e25
jmp eax
mov ss, word [eax]
mov ch, 0xff
loopne 0x409e07
loopne 0x409e5a
shl edx, 0x18
sub ecx, dword [esp + 4]
ror esi, 0x1b
sub esi, 0xe928ef65
out dx, al
out dx, eax
sub cl, ch
nop
or edx, dword [esp + 0xc]
push esp
and al, 0xc
cld
clc
rcr eax, 0xf
stc
not edi
cld
shl ebx, 8
shl edx, 0xd
btc ebx, 0x1e
inc eax
bt edx, 4
xor edi, ebp
sbb ebx, dword [0x444c90]
mov ebx, esi
test esi, ebp
rcl ebx, 0x1d
nop
sub esi, esp
test dword [0x427801], eax
sub edx, dword [esp - 8]
rol esi, 0xb
clc
btr edi, 0x10
shl ebx, 5
add bl, cl
or eax, 0x345e1813
add eax, 0x2cce297a
xchg ebx, eax
or dl, cl
inc edx
mov bl, 0xd9
and al, 0x31
aas
test ebx, ebx
adc esp, edx
ja 0x409e53
mov ch, 0xe7
nop
add ch, byte [esi]
js 0x409e40
cmc
outsd dx, dword [esi]
jecxz 0x409efe
les edx, [esi]
mov ebp, 0xdde68720
adc al, 0x5a
in al, dx
call 0x7dac3edd
push 0x72d29669
outsb dx, byte [esi]
sahf
or byte [edx], ch
clc
iretd
ror ah, 0xf7
jbe 0x409f51
cmp dword [edx + ebp*4 - 0x6401203f], ebp
push ebp
jg 0x409f33
inc eax
invalid
mov bh, 0xb1
scasb al, byte es:[edi]
add eax, dword [esi + 0x37]
mov esi, 0xb4746244
and ah, al
int1
cli
invalid
leave
inc ebx
out dx, al
test al, 0xe9
adc ah, dl
mov al, 0xbb
or dword [eax - 0x59], edx
invalid
fadd st(2)
test byte [ebp - 0x1ba94dc3], cl
push ds
fimul dword [ebx - 0x38]
inc edi
fdivr st(6), st(0)
jns 0x409fbf
jl 0x409f2e
and dword [ebx - 0x6f], 0x674c60ea
xchg byte [ebp + 0x48], al
jmp 0x409f12
add byte [eax], al
add byte [eax], al
mov bl, 0xa7
out 0xc8, eax
push 0xffffffffffffff9d
movsb byte es:[edi], byte [esi]
add byte [eax], al
push esp
add byte [edi], cl
pop es
jl 0x40a019
dec ebp
jns 0x409fd6
enter 0xfffffffffffff143, 0xffffffffffffffa2
add byte [eax], al
popal
invalid
add byte [eax], al
mov bl, 0xa7
out 0xc8, eax
push 0x7e
mov word [ecx + 0x62005400], cs
mov dword [edi], eax
jl 0x40a02b
and dword [eax], eax
add al, cl
inc ebx
outsd dx, dword [esi]
mov byte [0xf0610000], al
mov bl, byte [esi - 0x5e]
jae 0x40a02f
invalid