Function at 0x41ec80
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48e870
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x8a8
mov eax, dword [0x4b3100]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebx + 8]
lea ecx, [ebp - 0x4e4]
mov esi, dword [ebx + 0xc]
xorps xmm0, xmm0
push 3
push 0x4a3010
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x170], 0
movlpd qword [ebp - 0x64], xmm0
movups xmmword [ebp - 0x4e4], xmm0
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 0
call fcn.00409360
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 0
push ecx
lea eax, [ebp - 0x96]
mov dword [ebp - 0x9c], 0xf9058966
push eax
push ecx
lea ecx, [ebp - 0x2bc]
mov word [ebp - 0x98], 0xf
call fcn.0042e660
lea eax, [ebp - 0x4e4]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x8b8]
call fcn.00430460
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x8a0]
call fcn.0042e5f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4cc]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x4bc], 0
push 0x4a3014
movups xmmword [ebp - 0x4cc], xmm0
mov dword [ebp - 0x4b8], 0
call fcn.00409360
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 4
push ecx
lea eax, [ebp - 0xb5]
mov dword [ebp - 0xbc], 0xf90d8966
push eax
push ecx
lea ecx, [ebp - 0x2b0]
mov word [ebp - 0xb8], 0xf
mov byte [ebp - 0xb6], 0
call fcn.0042e660
lea eax, [ebp - 0x4cc]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x894]
call fcn.00430460
lea eax, [ebp - 0x2b0]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x87c]
call fcn.0042e5f0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4b4]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x4a4], 0
push 0x4a3018
movups xmmword [ebp - 0x4b4], xmm0
mov dword [ebp - 0x4a0], 0
call fcn.00409360
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 8
push ecx
lea eax, [ebp - 0xbd]
mov dword [ebp - 0xc4], 0xf9158966
push eax
push ecx
lea ecx, [ebp - 0x2a4]
mov word [ebp - 0xc0], 0xf
mov byte [ebp - 0xbe], 0
call fcn.0042e660
lea eax, [ebp - 0x4b4]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x870]
call fcn.00430460
lea eax, [ebp - 0x2a4]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x858]
call fcn.0042e5f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x49c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x48c], 0
push 0x4a301c
movups xmmword [ebp - 0x49c], xmm0
mov dword [ebp - 0x488], 0
call fcn.00409360
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0xc
push ecx
lea eax, [ebp - 0xc5]
mov dword [ebp - 0xcc], 0xf9058948
push eax
push ecx
lea ecx, [ebp - 0x298]
mov word [ebp - 0xc8], 0xf
mov byte [ebp - 0xc6], 0
call fcn.0042e660
lea eax, [ebp - 0x49c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x84c]
call fcn.00430460
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x834]
call fcn.0042e5f0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x484]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x474], 0
push 0x4a3020
movups xmmword [ebp - 0x484], xmm0
mov dword [ebp - 0x470], 0
call fcn.00409360
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x10
push ecx
lea eax, [ebp - 0xcd]
mov dword [ebp - 0xd4], 0xf91d8948
push eax
push ecx
lea ecx, [ebp - 0x28c]
mov word [ebp - 0xd0], 0xf
mov byte [ebp - 0xce], 0
call fcn.0042e660
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x828]
call fcn.00430460
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x810]
call fcn.0042e5f0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x46c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x45c], 0
push 0x4a3024
movups xmmword [ebp - 0x46c], xmm0
mov dword [ebp - 0x458], 0
call fcn.00409360
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x14
push ecx
lea eax, [ebp - 0xd5]
mov dword [ebp - 0xdc], 0xf93d8948
push eax
push ecx
lea ecx, [ebp - 0x280]
mov word [ebp - 0xd8], 0xf
mov byte [ebp - 0xd6], 0
call fcn.0042e660
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x15
push eax
lea ecx, [ebp - 0x804]
call fcn.00430460
lea eax, [ebp - 0x280]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x7ec]
call fcn.0042e5f0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x454]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x444], 0
push 0x4a3028
movups xmmword [ebp - 0x454], xmm0
mov dword [ebp - 0x440], 0
call fcn.00409360
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x18
push ecx
lea eax, [ebp - 0xdd]
mov dword [ebp - 0xe4], 0xf9158948
push eax
push ecx
lea ecx, [ebp - 0x274]
mov word [ebp - 0xe0], 0xf
mov byte [ebp - 0xde], 0
call fcn.0042e660
lea eax, [ebp - 0x454]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x7e0]
call fcn.00430460
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x7c8]
call fcn.0042e5f0
mov byte [ebp - 4], 0x1b
xorps xmm0, xmm0
push 3
push 0x4a302c
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x42c], 0
movups xmmword [ebp - 0x43c], xmm0
mov dword [ebp - 0x428], 0
call fcn.00409360
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x1c
push ecx
lea eax, [ebp - 0xa5]
mov dword [ebp - 0xac], 0xf90d8948
push eax
push ecx
lea ecx, [ebp - 0x268]
mov word [ebp - 0xa8], 0xf
mov byte [ebp - 0xa6], 0
call fcn.0042e660
lea eax, [ebp - 0x43c]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x7bc]
call fcn.00430460
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x7a4]
call fcn.0042e5f0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x424]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x414], 0
push 0x4a3030
movups xmmword [ebp - 0x424], xmm0
mov dword [ebp - 0x410], 0
call fcn.00409360
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x20
push ecx
lea eax, [ebp - 0x9d]
mov dword [ebp - 0xa4], 0xf9358948
push eax
push ecx
lea ecx, [ebp - 0x25c]
mov word [ebp - 0xa0], 0xf
mov byte [ebp - 0x9e], 0
call fcn.0042e660
lea eax, [ebp - 0x424]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x798]
call fcn.00430460
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x780]
call fcn.0042e5f0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x40c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x3fc], 0
push 0x4a3034
movups xmmword [ebp - 0x40c], xmm0
mov dword [ebp - 0x3f8], 0
call fcn.00409360
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x16c], 0xf9258948
mov word [ebp - 0x168], 0xf
mov byte [ebp - 0x166], 0
push ecx
lea eax, [ebp - 0x165]
push eax
push ecx
lea ecx, [ebp - 0x250]
call fcn.0042e660
lea eax, [ebp - 0x40c]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x774]
call fcn.00430460
lea eax, [ebp - 0x250]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x75c]
call fcn.0042e5f0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3f4]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x3e4], 0
push 0x4a3038
movups xmmword [ebp - 0x3f4], xmm0
mov dword [ebp - 0x3e0], 0
call fcn.00409360
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x28
push ecx
lea eax, [ebp - 0x15d]
mov dword [ebp - 0x164], 0xf92d8948
push eax
push ecx
lea ecx, [ebp - 0x244]
mov word [ebp - 0x160], 0xf
mov byte [ebp - 0x15e], 0
call fcn.0042e660
lea eax, [ebp - 0x3f4]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x750]
call fcn.00430460
lea eax, [ebp - 0x244]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0x738]
call fcn.0042e5f0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x3dc]
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x3cc], 0
push 0x4a303c
movups xmmword [ebp - 0x3dc], xmm0
mov dword [ebp - 0x3c8], 0
call fcn.00409360
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x2c
push ecx
lea eax, [ebp - 0xad]
mov dword [ebp - 0xb4], 0xf905894c
push eax
push ecx
lea ecx, [ebp - 0x238]
mov word [ebp - 0xb0], 0xf
mov byte [ebp - 0xae], 0
call fcn.0042e660
lea eax, [ebp - 0x3dc]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x72c]
call fcn.00430460
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 0x2e
push eax
lea ecx, [ebp - 0x714]
call fcn.0042e5f0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x3c4]
push 2
xorps xmm0, xmm0
mov dword [ebp - 0x3b4], 0
push 0x4a3040
movups xmmword [ebp - 0x3c4], xmm0
mov dword [ebp - 0x3b0], 0
call fcn.00409360
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x30
push ecx
lea eax, [ebp - 0xe5]
mov dword [ebp - 0xec], 0xf90d894c
push eax
push ecx
lea ecx, [ebp - 0x22c]
mov word [ebp - 0xe8], 0xf
mov byte [ebp - 0xe6], 0
call fcn.0042e660
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0x708]
call fcn.00430460
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0x6f0]
call fcn.0042e5f0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x3ac]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x39c], 0
push 0x4a3044
movups xmmword [ebp - 0x3ac], xmm0
mov dword [ebp - 0x398], 0
call fcn.00409360
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x34
push ecx
lea eax, [ebp - 0xed]
mov dword [ebp - 0xf4], 0xf915894c
push eax
push ecx
lea ecx, [ebp - 0x220]
mov word [ebp - 0xf0], 0xf
mov byte [ebp - 0xee], 0
call fcn.0042e660
lea eax, [ebp - 0x3ac]
mov byte [ebp - 4], 0x35
push eax
lea ecx, [ebp - 0x6e4]
call fcn.00430460
lea eax, [ebp - 0x220]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x6cc]
call fcn.0042e5f0
mov byte [ebp - 4], 0x37
xorps xmm0, xmm0
push 3
movups xmmword [ebp - 0x394], xmm0
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x380], 0
push 0x4a3048
lea ecx, [ebp - 0x394]
call fcn.00409360
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x38
push ecx
lea eax, [ebp - 0xf5]
mov dword [ebp - 0xfc], 0xf91d894c
push eax
push ecx
lea ecx, [ebp - 0x214]
mov word [ebp - 0xf8], 0xf
mov byte [ebp - 0xf6], 0
call fcn.0042e660
lea eax, [ebp - 0x394]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x6c0]
call fcn.00430460
lea eax, [ebp - 0x214]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x6a8]
call fcn.0042e5f0
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x37c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x36c], 0
push 0x4a304c
movups xmmword [ebp - 0x37c], xmm0
mov dword [ebp - 0x368], 0
call fcn.00409360
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x3c
push ecx
lea eax, [ebp - 0xfd]
mov dword [ebp - 0x104], 0xf925894c
push eax
push ecx
lea ecx, [ebp - 0x208]
mov word [ebp - 0x100], 0xf
mov byte [ebp - 0xfe], 0
call fcn.0042e660
lea eax, [ebp - 0x37c]
mov byte [ebp - 4], 0x3d
push eax
lea ecx, [ebp - 0x69c]
call fcn.00430460
lea eax, [ebp - 0x208]
mov byte [ebp - 4], 0x3e
push eax
lea ecx, [ebp - 0x684]
call fcn.0042e5f0
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x364]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x354], 0
push 0x4a3050
movups xmmword [ebp - 0x364], xmm0
mov dword [ebp - 0x350], 0
call fcn.00409360
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0x40
push ecx
lea eax, [ebp - 0x105]
mov dword [ebp - 0x10c], 0xf92d894c
push eax
push ecx
mov word [ebp - 0x108], 0xf
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 0x106], 0
call fcn.0042e660
lea eax, [ebp - 0x364]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x678]
call fcn.00430460
lea eax, [ebp - 0x1fc]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0x660]
call fcn.0042e5f0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x34c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x33c], 0
push 0x4a3054
movups xmmword [ebp - 0x34c], xmm0
mov dword [ebp - 0x338], 0
call fcn.00409360
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x44
push ecx
lea eax, [ebp - 0x10d]
mov dword [ebp - 0x114], 0xf935894c
push eax
push ecx
lea ecx, [ebp - 0x1f0]
mov word [ebp - 0x110], 0xf
mov byte [ebp - 0x10e], 0
call fcn.0042e660
lea eax, [ebp - 0x34c]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0x654]
call fcn.00430460
lea eax, [ebp - 0x1f0]
mov byte [ebp - 4], 0x46
push eax
lea ecx, [ebp - 0x63c]
call fcn.0042e5f0
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x334]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x324], 0
push 0x4a3058
movups xmmword [ebp - 0x334], xmm0
mov dword [ebp - 0x320], 0
call fcn.00409360
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x48
push ecx
lea eax, [ebp - 0x115]
mov dword [ebp - 0x11c], 0xf93d894c
push eax
push ecx
lea ecx, [ebp - 0x1e4]
mov word [ebp - 0x118], 0xf
mov byte [ebp - 0x116], 0
call fcn.0042e660
lea eax, [ebp - 0x334]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x630]
call fcn.00430460
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [ebp - 0x618]
call fcn.0042e5f0
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x31c]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x30c], 0
push 0x4a305c
movups xmmword [ebp - 0x31c], xmm0
mov dword [ebp - 0x308], 0
call fcn.00409360
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x4c
push ecx
lea eax, [ebp - 0x11d]
mov dword [ebp - 0x124], 0xf9058944
push eax
push ecx
lea ecx, [ebp - 0x1d8]
mov word [ebp - 0x120], 0xf
mov byte [ebp - 0x11e], 0
call fcn.0042e660
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0x60c]
call fcn.00430460
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x4e
push eax
lea ecx, [ebp - 0x5f4]
call fcn.0042e5f0
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x304]
push 3
xorps xmm0, xmm0
mov dword [ebp - 0x2f4], 0
push 0x4a3060
movups xmmword [ebp - 0x304], xmm0
mov dword [ebp - 0x2f0], 0
call fcn.00409360
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x50
push ecx
lea eax, [ebp - 0x125]
mov dword [ebp - 0x12c], 0xf90d8944
push eax
push ecx
lea ecx, [ebp - 0x1cc]
mov word [ebp - 0x128], 0xf
mov byte [ebp - 0x126], 0
call fcn.0042e660
lea eax, [ebp - 0x304]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x5e8]
call fcn.00430460
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x5d0]
call fcn.0042e5f0
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x2ec]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x2dc], 0
push str.r10d
movups xmmword [ebp - 0x2ec], xmm0
mov dword [ebp - 0x2d8], 0
call fcn.00409360
mov byte [ebp - 4], 0x54
mov dword [ebp - 0x134], 0xf9158944
lea ecx, [ebp - 0x134]
mov word [ebp - 0x130], 0xf
push ecx
lea eax, [ebp - 0x12d]
mov byte [ebp - 0x12e], 0
push eax
push ecx
lea ecx, [ebp - 0x1c0]
call fcn.0042e660
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 0x55
push eax
lea ecx, [ebp - 0x5c4]
call fcn.00430460
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x5ac]
call fcn.0042e5f0
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x2d4]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x2c4], 0
push str.r11d
movups xmmword [ebp - 0x2d4], xmm0
mov dword [ebp - 0x2c0], 0
call fcn.00409360
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x58
push ecx
lea eax, [ebp - 0x135]
mov dword [ebp - 0x13c], 0xf91d8944
push eax
push ecx
lea ecx, [ebp - 0x1b4]
mov word [ebp - 0x138], 0xf
mov byte [ebp - 0x136], 0
call fcn.0042e660
lea eax, [ebp - 0x2d4]
mov byte [ebp - 4], 0x59
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00430460
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x588]
call fcn.0042e5f0
mov byte [ebp - 4], 0x5b
lea ecx, [ebp - 0x2c]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
push str.r12d
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0
call fcn.00409360
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x5c
push ecx
lea eax, [ebp - 0x13d]
mov dword [ebp - 0x144], 0xf9258944
push eax
push ecx
lea ecx, [ebp - 0x1a8]
mov word [ebp - 0x140], 0xf
mov byte [ebp - 0x13e], 0
call fcn.0042e660
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x57c]
call fcn.00430460
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x5e
push eax
lea ecx, [ebp - 0x564]
call fcn.0042e5f0
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x44]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x34], 0
push str.r13d
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x30], 0
call fcn.00409360
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x60
push ecx
lea eax, [ebp - 0x145]
mov dword [ebp - 0x14c], 0xf92d8944
push eax
push ecx
lea ecx, [ebp - 0x19c]
mov word [ebp - 0x148], 0xf
mov byte [ebp - 0x146], 0
call fcn.0042e660
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 0x61
push eax
lea ecx, [ebp - 0x558]
call fcn.00430460
lea eax, [ebp - 0x19c]
mov byte [ebp - 4], 0x62
push eax
lea ecx, [ebp - 0x540]
call fcn.0042e5f0
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x5c]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
push str.r14d
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x48], 0
call fcn.00409360
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x64
push ecx
lea eax, [ebp - 0x14d]
mov dword [ebp - 0x154], 0xf9358944
push eax
push ecx
lea ecx, [ebp - 0x190]
mov word [ebp - 0x150], 0xf
mov byte [ebp - 0x14e], 0
call fcn.0042e660
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebp - 0x534]
call fcn.00430460
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x66
push eax
lea ecx, [ebp - 0x51c]
call fcn.0042e5f0
mov byte [ebp - 4], 0x67
xorps xmm0, xmm0
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x70], 0
push 4
push str.r15d
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x6c], 0
call fcn.00409360
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0x68
push ecx
lea eax, [ebp - 0x155]
mov dword [ebp - 0x15c], 0xf93d8944
push eax
push ecx
lea ecx, [ebp - 0x184]
mov word [ebp - 0x158], 0xf
mov byte [ebp - 0x156], 0
call fcn.0042e660
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp - 0x510]
call fcn.00430460
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0x6a
push eax
lea ecx, [ebp - 0x4f8]
call fcn.0042e5f0
mov byte [ebp - 4], 0x9f
lea edi, [ebp - 0x4ec]
push 0x34
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
call fcn.00460b38
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x64], eax
push edi
lea eax, [ebp - 0x8b8]
mov byte [ebp - 4], 0xa0
push eax
lea ecx, [ebp - 0x64]
call fcn.0043cd10
push fcn.00420560
push 0x1b
push 0x24
lea eax, [ebp - 0x8b8]
mov byte [ebp - 4], 0xa2
push eax
call fcn.00460b68
lea ecx, [ebp - 0x184]
call fcn.0042e510
lea ecx, [ebp - 0x80]
call fcn.00430280
lea ecx, [ebp - 0x190]
call fcn.0042e510
lea ecx, [ebp - 0x5c]
call fcn.00430280
lea ecx, [ebp - 0x19c]
call fcn.0042e510
lea ecx, [ebp - 0x44]
call fcn.00430280
lea ecx, [ebp - 0x1a8]
call fcn.0042e510
lea ecx, [ebp - 0x2c]
call fcn.00430280
lea ecx, [ebp - 0x1b4]
call fcn.0042e510
lea ecx, [ebp - 0x2d4]
call fcn.00430280
lea ecx, [ebp - 0x1c0]
call fcn.0042e510
lea ecx, [ebp - 0x2ec]
call fcn.00430280
lea ecx, [ebp - 0x1cc]
call fcn.0042e510
lea ecx, [ebp - 0x304]
call fcn.00430280
lea ecx, [ebp - 0x1d8]
call fcn.0042e510
lea ecx, [ebp - 0x31c]
call fcn.00430280
lea ecx, [ebp - 0x1e4]
call fcn.0042e510
lea ecx, [ebp - 0x334]
call fcn.00430280
lea ecx, [ebp - 0x1f0]
call fcn.0042e510
lea ecx, [ebp - 0x34c]
call fcn.00430280
lea ecx, [ebp - 0x1fc]
call fcn.0042e510
lea ecx, [ebp - 0x364]
call fcn.00430280
lea ecx, [ebp - 0x208]
call fcn.0042e510
lea ecx, [ebp - 0x37c]
call fcn.00430280
lea ecx, [ebp - 0x214]
call fcn.0042e510
lea ecx, [ebp - 0x394]
call fcn.00430280
lea ecx, [ebp - 0x220]
call fcn.0042e510
lea ecx, [ebp - 0x3ac]
call fcn.00430280
lea ecx, [ebp - 0x22c]
call fcn.0042e510
lea ecx, [ebp - 0x3c4]
call fcn.00430280
lea ecx, [ebp - 0x238]
call fcn.0042e510
lea ecx, [ebp - 0x3dc]
call fcn.00430280
lea ecx, [ebp - 0x244]
call fcn.0042e510
lea ecx, [ebp - 0x3f4]
call fcn.00430280
lea ecx, [ebp - 0x250]
call fcn.0042e510
lea ecx, [ebp - 0x40c]
call fcn.00430280
lea ecx, [ebp - 0x25c]
call fcn.0042e510
lea ecx, [ebp - 0x424]
call fcn.00430280
lea ecx, [ebp - 0x268]
call fcn.0042e510
lea ecx, [ebp - 0x43c]
call fcn.00430280
lea ecx, [ebp - 0x274]
call fcn.0042e510
lea ecx, [ebp - 0x454]
call fcn.00430280
lea ecx, [ebp - 0x280]
call fcn.0042e510
lea ecx, [ebp - 0x46c]
call fcn.00430280
lea ecx, [ebp - 0x28c]
call fcn.0042e510
lea ecx, [ebp - 0x484]
call fcn.00430280
lea ecx, [ebp - 0x298]
call fcn.0042e510
lea ecx, [ebp - 0x49c]
call fcn.00430280
lea ecx, [ebp - 0x2a4]
call fcn.0042e510
lea ecx, [ebp - 0x4b4]
call fcn.00430280
lea ecx, [ebp - 0x2b0]
call fcn.0042e510
lea ecx, [ebp - 0x4cc]
call fcn.00430280
lea ecx, [ebp - 0x2bc]
call fcn.0042e510
lea ecx, [ebp - 0x4e4]
mov byte [ebp - 4], 0xd8
call fcn.00430280
mov edi, dword [esi]
mov eax, dword [esi + 4]
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x178], eax
cmp edi, eax
je 0x420355
nop dword [eax]
nop word [eax + eax]
cmp byte [edi + 0xc0], 0
lea eax, [edi + 0x3c]
je 0x42033d
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push eax
lea ecx, [ebp - 0x64]
movq qword [ebp - 0x20], xmm0
call fcn.0042a680
mov esi, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
je 0x420010
cmp ecx, 0x7fffffff
ja 0x420554
push ecx
lea ecx, [ebp - 0x20]
call fcn.004444b0
mov edi, dword [esi + 4]
mov eax, edi
mov esi, dword [esi]
sub eax, esi
mov ecx, dword [ebp - 0x20]
push eax
push esi
push ecx
mov dword [ebp - 0x8c], ecx
call fcn.004622c0
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x8c]
sub eax, esi
mov dword [ebp - 0x8c], 0
add esp, 0xc
add eax, edi
mov dword [ebp - 0x1c], eax
call fcn.00424fe0
mov edi, dword [ebp - 0x90]
mov byte [ebp - 4], 0xd9
xor eax, eax
mov esi, dword [edi + 0x38]
xorps xmm0, xmm0
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
test esi, esi
je 0x420081
cmp esi, 0x7fffffff
ja 0x420554
push esi
lea ecx, [ebp - 0x38]
call fcn.004444b0
push dword [ebp - 0x8c]
mov eax, dword [ebp - 0x38]
add esi, eax
push 0
push eax
call fcn.00463f40
add esp, 0xc
mov dword [ebp - 0x34], esi
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x8c], 0
call fcn.00424fe0
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x84]
push ecx
push dword [edi + 0x38]
push eax
push dword [edi + 0x30]
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x4204b4
mov edx, dword [edi + 0x38]
cmp dword [ebp - 0x84], edx
jne 0x4204b4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
sub eax, ecx
mov esi, dword [edi + 0x30]
add eax, 9
add eax, edx
and esi, 0xfffff000
mov dword [ebp - 0x8c], eax
cmp esi, 0x10000
jb 0x420112
push 0x40
push 0x3000
push eax
push esi
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov edi, eax
test edi, edi
jne 0x4201b5
mov eax, dword [ebp - 0x8c]
sub esi, 0x1000
cmp esi, 0x10000
jae 0x4200d6
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x90]
mov byte [ebp - 4], 0xd9
mov edx, dword [ebp - 0x38]
test edx, edx
je 0x420162
mov ecx, dword [ebp - 0x30]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x420140
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push ecx
push edx
call fcn.00460ed3
mov ecx, dword [ebp - 0x20]
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0xd8
test ecx, ecx
je 0x42033d
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x420191
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
jmp 0x42033d
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
movq qword [ebp - 0x50], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0xdb
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
sub ecx, eax
push ecx
push eax
push 0
lea ecx, [ebp - 0x50]
call fcn.00447650
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
sub eax, ecx
push eax
push ecx
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x50]
call fcn.00447650
mov esi, dword [ebp - 0x90]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
sub eax, edi
sub eax, edx
mov byte [ebp - 0x85], 0xe9
mov ecx, dword [esi + 0x38]
add ecx, 0xfffffffb
add ecx, dword [esi + 0x30]
add eax, ecx
mov dword [ebp - 0x174], eax
cmp edx, dword [ebp - 0x48]
je 0x42023f
mov byte [edx], 0xe9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
jmp 0x420252
lea eax, [ebp - 0x85]
push eax
push edx
lea ecx, [ebp - 0x50]
call fcn.00448960
mov eax, dword [ebp - 0x4c]
push 4
lea ecx, [ebp - 0x174]
push ecx
push eax
lea ecx, [ebp - 0x50]
call fcn.00447650
mov ecx, dword [ebp - 0x4c]
lea edx, [ebp - 0x68]
mov eax, dword [ebp - 0x50]
sub ecx, eax
push edx
push ecx
push eax
push edi
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x4203b0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
cmp dword [ebp - 0x68], eax
jne 0x4203b0
push ecx
lea eax, [ebp - 0x85]
mov dword [ebp - 0x6c], 0
push eax
push dword [esi + 0x38]
xorps xmm0, xmm0
mov byte [ebp - 0x85], 0x90
lea ecx, [ebp - 0x74]
movq qword [ebp - 0x74], xmm0
call fcn.00438c60
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x68]
mov ecx, edi
sub ecx, dword [esi + 0x30]
sub ecx, 5
mov byte [eax], 0xe9
mov eax, dword [ebp - 0x74]
push edx
mov dword [eax + 1], ecx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x74]
sub ecx, eax
push ecx
push eax
push dword [esi + 0x30]
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x420397
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x74]
cmp dword [ebp - 0x68], eax
jne 0x420397
mov dword [esi + 0xb8], edi
mov dword [ebp - 0x170], edi
lea ecx, [ebp - 0x74]
call fcn.0042e510
lea ecx, [ebp - 0x50]
call fcn.0042e510
lea ecx, [ebp - 0x38]
call fcn.0042e510
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xd8
call fcn.0042e510
mov edi, dword [ebp - 0x90]
add edi, 0xcc
mov dword [ebp - 0x90], edi
cmp edi, dword [ebp - 0x178]
jne 0x41ff70
mov eax, dword [ebp - 0x64]
push dword [eax + 4]
lea eax, [ebp - 0x64]
push eax
mov ecx, eax
call fcn.00447cd0
push 0x34
push dword [ebp - 0x64]
call fcn.00460ed3
mov eax, dword [ebp - 0x170]
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00460925
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x8000
push 0
push edi
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x420313
push 0x8000
push 0
push edi
push dword [ebp - 0x94]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov byte [ebp - 4], 0xda
mov ecx, dword [ebp - 0x50]
test ecx, ecx
je 0x420411
mov edx, dword [ebp - 0x48]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4203f2
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov byte [ebp - 4], 0xd9
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x42045e
mov edx, dword [ebp - 0x30]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x42043f
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0xd8
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x420337
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x420490
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
jmp 0x420337
mov byte [ebp - 4], 0xd9
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x4204fd
mov edx, dword [ebp - 0x30]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x4204de
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov byte [ebp - 4], 0xd8
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x42033d
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x42052b
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42054f
push edx
push ecx
call fcn.00460ed3
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
jmp 0x42033d
call fcn.00474a77
call fcn.0042e6e0
int3