I got this fake-av sample , and I want to reverse it . But the problem is that it exits after few commands . Here are the steps :When loaded in Ollydbg it pauses at:00401000 > $  8D9404 7713210>LEA EDX,DWORD PTR SS:[ESP+EAX+0x211377]00401007   . /E9 CF020000    JMP setup.004012DB then : 004012DB   > \BA 0C000000    MOV EDX,0xC004012E0   .  8B4C24 1C      MOV ECX,DWORD PTR SS:[ESP+0x1C]004012E4   .  41             INC ECX004012E5   .  09C9           OR ECX,ECX004012E7   .  75 0C          JNZ SHORT setup.004012F5004012E9   .  0F2ECF         UCOMISS XMM1,XMM7004012EC   .  74 13          JE SHORT setup.00401301and :00401301   >  89E5           MOV EBP,ESP00401303   .  C3             RETNthen it exits :7C81776F    50               PUSH EAX7C817770    E8 8349FFFF      CALL kernel32.ExitThreadWhat exactly happens here , I guess it has to do with the line UCOMISS XMM1,XMM7 but I have no clue what it does ?
Trouble analyzing a ransomware
disassembly;malware;binary analysis