Function at 0x4038a0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x425793
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x228
mov eax, dword [0x44e040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
mov dword [ebp - 0x21c], 0x44eacc
push 0x44eacc
mov dword [ebp - 0x48], eax
call fcn.004087fe
add esp, 4
test eax, eax
jne 0x4048ac
mov eax, dword [0x44eaf8]
cmp eax, 0x7fffffff
je 0x4048b3
mov dword [ebp - 4], 0
mov eax, dword fs:[0x2c]
mov edi, dword [eax]
mov eax, dword [0x44fef0]
cmp eax, dword [edi + 4]
jle 0x403b31
push 0x44fef0
call fcn.004090ba
add esp, 4
cmp dword [0x44fef0], 0xffffffff
jne 0x403b31
mov byte [ebp - 4], 1
xor eax, eax
movups xmm0, xmmword [0x44ad88]
xor ecx, ecx
mov dword [ebp - 0x68], 0
movaps xmm1, xmmword [0x44af10]
xorps xmm1, xmm0
mov word [ebp - 0xa0], ax
mov byte [ebp - 0x9e], al
lea edx, [eax + 3]
movups xmmword [ebp - 0xb0], xmm1
nop word [eax + eax]
mov al, byte [ecx + 0x44ad98]
lea ecx, [ecx + 1]
xor al, 7
mov byte [ebp + ecx - 0xa1], al
sub edx, 1
jne 0x403990
movups xmm0, xmmword [ebp - 0xb0]
mov byte [ebp - 0x9d], dl
lea ecx, [ebp - 0x60]
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0xf0]
push 0x528b0207
movups xmmword [ebp - 0xf0], xmm0
mov dword [ebp - 0xe0], eax
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 2
lea esi, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0xc0], xmm0
cmova esi, dword [ebp - 0x60]
xor ecx, ecx
mov dword [ebp - 0xb8], 0
mov byte [ebp - 0xb4], 0
nop word [eax + eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0xc0], al
inc ecx
cmp ecx, 0xc
jb 0x403a10
movq xmm0, qword [ebp - 0xc0]
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xb8]
xor cl, cl
mov byte [ebp - 0xc4], cl
lea ecx, [ebp - 0xb0]
push 0x528b0207
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], eax
call fcn.00402fe0
mov eax, 0x9000
add esp, 4
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 3
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0xf
lea ecx, [ebp - 0x68]
push esi
cmova eax, dword [ebp - 0xb0]
push eax
call fcn.00404b60
call eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x9c]
mov dword [0x44fef8], eax
cmp ecx, 0xf
jbe 0x403ad1
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403ac7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0xf
jbe 0x403b24
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403b1a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
push 0x44fef0
call fcn.00409069
add esp, 4
mov eax, dword [0x44fefc]
cmp eax, dword [edi + 4]
jle 0x403d14
push 0x44fefc
call fcn.004090ba
add esp, 4
cmp dword [0x44fefc], 0xffffffff
jne 0x403d14
mov byte [ebp - 4], 4
lea edx, [ebp - 0x18c]
movups xmm0, xmmword [0x44adac]
lea ecx, [ebp - 0x60]
mov byte [ebp - 0xe0], 0
movaps xmm1, xmmword [0x44af10]
xorps xmm1, xmm0
mov word [ebp - 0xe0], 0x74
mov ax, word [ebp - 0xe0]
push 0x528b0207
mov dword [ebp - 0x68], 0
movups xmmword [ebp - 0x18c], xmm1
mov word [ebp - 0x17c], ax
call fcn.00402fe0
mov edi, dword [ebp - 0x48]
add esp, 4
or edi, 0x4000
mov byte [ebp - 4], 5
lea esi, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0xc0], xmm0
cmova esi, dword [ebp - 0x60]
xor ecx, ecx
mov dword [ebp - 0xb8], 0
mov byte [ebp - 0xb4], 0
nop dword [eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0xc0], al
inc ecx
cmp ecx, 0xc
jb 0x403bf0
movq xmm0, qword [ebp - 0xc0]
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0xb8]
xor cl, cl
mov byte [ebp - 0xc4], cl
lea ecx, [ebp - 0xb0]
push 0x528b0207
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], eax
call fcn.00402fe0
or edi, 0x2000
add esp, 4
mov dword [ebp - 0x48], edi
mov byte [ebp - 4], 6
lea eax, [ebp - 0xb0]
cmp dword [ebp - 0x9c], 0xf
lea ecx, [ebp - 0x68]
push esi
cmova eax, dword [ebp - 0xb0]
push eax
call fcn.00404b60
call eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x9c]
mov dword [0x44fef4], eax
cmp ecx, 0xf
jbe 0x403cb2
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403ca8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c5
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0xf
jbe 0x403d05
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403cfb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c5
push ecx
push edx
call fcn.0040900d
add esp, 8
push 0x44fefc
call fcn.00409069
add esp, 4
jmp 0x403d17
mov edi, dword [ebp - 0x48]
xorps xmm0, xmm0
lea ecx, [ebp - 0x40]
movups xmmword [ebp - 0x40], xmm0
movups xmmword [ebp - 0x30], xmm0
call fcn.00406140
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xf8], eax
mov esi, dword [eax]
cmp esi, eax
je 0x404877
mov eax, dword [esi + 8]
cmp eax, dword [0x44fef8]
je 0x404865
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
movq qword [ebp - 0x108], xmm0
xor ecx, ecx
mov dword [ebp - 0x100], 0
mov al, byte [ecx + str.OpenProcess]
xor al, 7
mov byte [ebp + ecx - 0x108], al
inc ecx
cmp ecx, 0xb
jb 0x403d71
movq xmm0, qword [ebp - 0x108]
lea edx, [ebp - 0x228]
mov byte [ebp - 0xfd], 0
lea ecx, [ebp - 0x1bc]
mov eax, dword [ebp - 0x100]
push 0x528b0207
movq qword [ebp - 0x228], xmm0
mov dword [ebp - 0x220], eax
call fcn.00402fe0
or edi, 0x100
add esp, 4
mov dword [ebp - 0x48], edi
mov byte [ebp - 4], 8
lea edi, [ebp - 0x1bc]
cmp dword [ebp - 0x1a8], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0x138], xmm0
cmova edi, dword [ebp - 0x1bc]
xor ecx, ecx
mov dword [ebp - 0x130], 0
mov byte [ebp - 0x12c], 0
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0x138], al
inc ecx
cmp ecx, 0xc
jb 0x403e01
movq xmm0, qword [ebp - 0x138]
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x130]
xor cl, cl
mov byte [ebp - 0x1c0], cl
lea ecx, [ebp - 0x1a4]
push 0x528b0207
movq qword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1c4], eax
call fcn.00402fe0
mov eax, dword [ebp - 0x48]
add esp, 4
or eax, 0x200
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0x1a4]
cmp dword [ebp - 0x190], 0xf
lea ecx, [ebp - 0xf4]
push edi
cmova eax, dword [ebp - 0x1a4]
push eax
call fcn.00404b60
push dword [esi + 8]
push 0
push 0x440
call eax
mov byte [ebp - 4], 8
mov edi, eax
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x68], edi
cmp ecx, 0xf
jbe 0x403ed2
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403ec8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
cmp ecx, 0xf
jbe 0x403f2b
mov edx, dword [ebp - 0x1bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x403f21
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
test edi, edi
je 0x404865
mov edx, edi
lea ecx, [ebp - 0x20]
call fcn.004033a0
mov byte [ebp - 4], 0xa
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0xd8], eax
cmp edi, eax
je 0x404654
movups xmm0, xmmword [str.NtDuplicateObject]
lea edx, [ebp - 0xac]
mov byte [ebp - 0xe0], 0
movaps xmm1, xmmword [0x44af10]
lea ecx, [ebp - 0x88]
xorps xmm1, xmm0
mov word [ebp - 0xe0], 0x73
movzx eax, word [ebp - 0xe0]
push 0x528b0207
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0xac], xmm1
mov word [ebp - 0x9c], ax
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 0xb
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
lea edx, [ebp - 0x218]
mov dword [ebp - 0x98], 0x6b637369
lea ecx, [ebp - 0x60]
cmova edi, dword [ebp - 0x88]
mov dword [ebp - 0x94], 0x6b63296b
movq xmm0, qword [ebp - 0x98]
mov word [ebp - 0x90], 0x6b
movzx eax, word [ebp - 0x90]
push 0x528b0207
movq qword [ebp - 0x218], xmm0
mov word [ebp - 0x210], ax
call fcn.00402fe0
or dword [ebp - 0x48], 0xc
add esp, 4
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
lea ecx, [ebp - 0x6c]
push edi
cmova eax, dword [ebp - 0x60]
push eax
call fcn.00404b60
push 0
push 0
push 0x400
lea ecx, [ebp - 0x44]
push ecx
mov ecx, dword [ebp - 0x70]
push dword [0x44fef4]
push dword [ecx]
push dword [ebp - 0x68]
call eax
mov byte [ebp - 4], 0xb
mov edi, eax
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0xf
jbe 0x4040aa
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4040a0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp ecx, 0xf
jbe 0x4040f7
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4040ed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
test edi, edi
js 0x40463c
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movq qword [ebp - 0x148], xmm0
xor ecx, ecx
mov dword [ebp - 0x140], 0
mov byte [ebp - 0x13c], 0
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ecx + str.GetProcessId]
xor al, 7
mov byte [ebp + ecx - 0x148], al
inc ecx
cmp ecx, 0xc
jb 0x404130
movq xmm0, qword [ebp - 0x148]
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 0x140]
xor cl, cl
mov byte [ebp - 0x1d0], cl
lea ecx, [ebp - 0x88]
push 0x528b0207
movq qword [ebp - 0x1dc], xmm0
mov dword [ebp - 0x1d4], eax
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 0xd
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0x158], xmm0
cmova edi, dword [ebp - 0x88]
xor ecx, ecx
mov dword [ebp - 0x150], 0
mov byte [ebp - 0x14c], 0
nop word [eax + eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0x158], al
inc ecx
cmp ecx, 0xc
jb 0x4041c0
movq xmm0, qword [ebp - 0x158]
lea edx, [ebp - 0x1ec]
mov eax, dword [ebp - 0x150]
xor cl, cl
mov byte [ebp - 0x1e0], cl
lea ecx, [ebp - 0x60]
push 0x528b0207
movq qword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1e4], eax
call fcn.00402fe0
or dword [ebp - 0x48], 0x30
add esp, 4
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
lea ecx, [ebp - 0x6c]
push edi
cmova eax, dword [ebp - 0x60]
push eax
call fcn.00404b60
push dword [ebp - 0x44]
call eax
cmp eax, dword [0x44fef8]
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x4c]
sete byte [ebp - 0x61]
cmp ecx, 0xf
jbe 0x404273
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404269
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp ecx, 0xf
jbe 0x4042c0
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4042b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
cmp byte [ebp - 0x61], 0
je 0x40448a
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
movups xmmword [ebp - 0xf0], xmm0
xor ecx, ecx
nop dword [eax]
mov al, byte [ecx + str.DuplicateHandle]
xor al, 7
mov byte [ebp + ecx - 0xf0], al
inc ecx
cmp ecx, 0xf
jb 0x4042e0
mov byte [ebp - 0xe1], 0
lea edx, [ebp - 0xec]
movups xmm0, xmmword [ebp - 0xf0]
push 0x528b0207
lea ecx, [ebp - 0x88]
movups xmmword [ebp - 0xec], xmm0
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 0xf
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0x168], xmm0
cmova edi, dword [ebp - 0x88]
xor ecx, ecx
mov dword [ebp - 0x160], 0
mov byte [ebp - 0x15c], 0
nop word [eax + eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0x168], al
inc ecx
cmp ecx, 0xc
jb 0x404360
movq xmm0, qword [ebp - 0x168]
lea edx, [ebp - 0x1fc]
mov eax, dword [ebp - 0x160]
xor cl, cl
mov byte [ebp - 0x1f0], cl
lea ecx, [ebp - 0x60]
push 0x528b0207
movq qword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1f4], eax
call fcn.00402fe0
or dword [ebp - 0x48], 0xc00
add esp, 4
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
lea ecx, [ebp - 0x6c]
push edi
cmova eax, dword [ebp - 0x60]
push eax
call fcn.00404b60
mov edi, dword [ebp - 0x70]
push 1
push 0
push 0
push 0
push 0
push dword [edi]
push dword [ebp - 0x68]
call eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0xd4], eax
cmp ecx, 0xf
jbe 0x404421
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404417
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp ecx, 0xf
jbe 0x40446e
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404464
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
cmp dword [ebp - 0xd4], 0
je 0x40448a
push dword [edi + 0xc]
push dword [esi + 8]
push str.Close_handle_from:__d___x_n
call fcn.00402fb0
add esp, 0xc
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0
movq qword [ebp - 0x118], xmm0
xor eax, eax
mov dword [ebp - 0x110], 0
nop dword [eax + eax]
mov cl, byte [eax + 0x44ae1c]
xor cl, 7
mov byte [ebp + eax - 0x118], cl
inc eax
cmp eax, 0xb
jb 0x4044b0
movq xmm0, qword [ebp - 0x118]
lea edx, [ebp - 0x234]
mov byte [ebp - 0x10d], 0
lea ecx, [ebp - 0x88]
mov eax, dword [ebp - 0x110]
push 0x528b0207
movq qword [ebp - 0x234], xmm0
mov dword [ebp - 0x22c], eax
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 0x11
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0x178], xmm0
cmova edi, dword [ebp - 0x88]
xor ecx, ecx
mov dword [ebp - 0x170], 0
mov byte [ebp - 0x16c], 0
nop word [eax + eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0x178], al
inc ecx
cmp ecx, 0xc
jb 0x404540
movq xmm0, qword [ebp - 0x178]
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x170]
xor cl, cl
mov byte [ebp - 0x200], cl
lea ecx, [ebp - 0x60]
push 0x528b0207
movq qword [ebp - 0x20c], xmm0
mov dword [ebp - 0x204], eax
call fcn.00402fe0
or dword [ebp - 0x48], 0xc0
add esp, 4
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
lea ecx, [ebp - 0xd4]
push edi
cmova eax, dword [ebp - 0x60]
push eax
call fcn.00404b60
push dword [ebp - 0x44]
call eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0xf
jbe 0x4045ef
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4045e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp ecx, 0xf
jbe 0x40463c
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404632
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov eax, dword [ebp - 0x70]
add eax, 0x1c
mov dword [ebp - 0x70], eax
cmp eax, dword [ebp - 0xd8]
jne 0x403f73
mov edi, dword [ebp - 0x20]
mov byte [ebp - 4], 7
test edi, edi
je 0x4046bd
mov ecx, dword [ebp - 0x18]
mov eax, 0x92492493
sub ecx, edi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov eax, edi
shl ecx, 2
cmp ecx, 0x1000
jb 0x40469e
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edi
call fcn.0040900d
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
xorps xmm0, xmm0
mov dword [ebp - 0xd8], 0
movq qword [ebp - 0x128], xmm0
xor ecx, ecx
mov dword [ebp - 0x120], 0
nop
mov al, byte [ecx + 0x44ae1c]
xor al, 7
mov byte [ebp + ecx - 0x128], al
inc ecx
cmp ecx, 0xb
jb 0x4046e0
movq xmm0, qword [ebp - 0x128]
lea edx, [ebp - 0xc0]
mov byte [ebp - 0x11d], 0
lea ecx, [ebp - 0x88]
mov eax, dword [ebp - 0x120]
push 0x528b0207
movq qword [ebp - 0xc0], xmm0
mov dword [ebp - 0xb8], eax
call fcn.00402fe0
add esp, 4
mov byte [ebp - 4], 0x13
lea edi, [ebp - 0x88]
cmp dword [ebp - 0x74], 0xf
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
cmova edi, dword [ebp - 0x88]
xor ecx, ecx
mov dword [ebp - 0xc8], 0
mov byte [ebp - 0xc4], 0
nop dword [eax]
nop dword [eax + eax]
mov al, byte [ecx + str.kernel32.dll]
xor al, 7
mov byte [ebp + ecx - 0xd0], al
inc ecx
cmp ecx, 0xc
jb 0x404770
movq xmm0, qword [ebp - 0xd0]
lea edx, [ebp - 0x188]
mov eax, dword [ebp - 0xc8]
xor cl, cl
mov byte [ebp - 0x17c], cl
lea ecx, [ebp - 0x60]
push 0x528b0207
movq qword [ebp - 0x188], xmm0
mov dword [ebp - 0x180], eax
call fcn.00402fe0
or dword [ebp - 0x48], 3
add esp, 4
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x60]
cmp dword [ebp - 0x4c], 0xf
lea ecx, [ebp - 0xd8]
push edi
cmova eax, dword [ebp - 0x60]
push eax
call fcn.00404b60
push dword [ebp - 0x68]
call eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0xf
jbe 0x40481c
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x404812
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
cmp ecx, 0xf
jbe 0x404865
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40485b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4048c0
push ecx
push edx
call fcn.0040900d
add esp, 8
mov esi, dword [esi]
cmp esi, dword [ebp - 0xf8]
je 0x404877
mov edi, dword [ebp - 0x48]
jmp 0x403d41
lea ecx, [ebp - 0x40]
call fcn.004048e0
push 0x44eacc
call fcn.0040880f
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00408fc5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 5
call fcn.00407430
dec eax
push 6
mov dword [0x44eaf8], eax
call fcn.00407430
call fcn.0040fe67
call fcn.0040fe67
int3