Function at 0x65011167
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc edi
add dword [eax], eax
call 0x65010ec1
add byte [ebp + 0x3d], al
dec ebx
dec ecx
inc edx
dec ebp
cmp al, byte [ecx - 0x7d]
les eax, [ecx + ebx*2]
mov edx, dword fs:[0x18]
mov dword [ebp - 0x200c], edx
mov eax, dword [ebp - 0x200c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1964], ecx
mov edx, dword [ebp - 0x1964]
mov dword [ebp - 0x15e0], edx
push esi
push eax
add esp, 4
and esi, 0x1497c
pop esi
push edx
push ecx
add esp, 4
xor edx, 0x56d5
xor edx, 0x864c
pop edx
push edi
push ecx
add esp, 4
or edi, 0xdb2a
jmp 0x65010f1e
pop edi
cmp dword [ebp - 0x15e0], 0
jne 0x65010f37
mov dword [ebp - 0x2d4], 0
jmp 0x650111f3
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push edx
sub edx, 0x607f
pop edx
push eax
push ecx
add esp, 4
xor eax, 0x41bf
pop eax
push esi
push ecx
add esp, 4
or esi, 0x2a2d
and esi, 0x487f
xor esi, 0x12ab0
xor esi, 0x249e
pop esi
cmp dword [ebp - 0xc9c], 0
jne 0x65010f93
mov dword [ebp - 0x2d4], 0
jmp 0x650111f3
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push ecx
push edi
add esp, 4
and ecx, 0xe175
sub ecx, 0xeaa0
jmp 0x65010fb8
pop ecx
push eax
add eax, 0xf953
jmp 0x65010fc8
jmp 0x65010fd0
pop eax
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
push eax
add esp, 4
xor edx, 0x12142
sub edx, 0xe3a4
sub edx, 0x2021
pop edx
push esi
xor esi, 0x8333
jmp 0x65011026
jmp 0x6501102f
pop esi
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push edx
push edi
add esp, 4
jmp 0x65011095
sub edx, 0xc8eb
call 0x650110a8
add byte [ebp + 0x32], al
inc esp
inc ebp
cmp bh, byte [ebx]
aaa
add esp, 4
call 0x650110b8
add byte [ebp + edi + 0x44], al
dec edi
aaa
inc ebx
inc eax
add esp, 4
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x650110df
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x65011142
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x65010ffe
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x65010ffe
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x6501112c
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x65011136
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x6501118b
push edi
or edi, 0x3d5
pop edi
push esi
push eax
add esp, 4
call 0x65011167
add byte [ecx + eax*2 + 0x44], cl
dec esi
cmp dh, byte [edi]
inc edi
cmp byte [edi], bh
add esp, 4
add esi, 0xf7b5
pop esi
push esi
push ecx
add esp, 4
add esi, 0x8898
pop esi
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x650111f3
push edi
or edi, 0x1e99
pop edi
push ecx
sub ecx, 0x151b
or ecx, 0x12f31
jmp 0x650111a8
and ecx, 0x9dee
pop ecx
push esi
and esi, 0x27f9
sub esi, 0x10896
pop esi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x650111e9
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x65010f9f
mov dword [ebp - 0x2d4], 0
push ecx
push edi
add esp, 4
sub ecx, 0x13f9b
pop ecx
push edx
sub edx, 0x13cb4
xor edx, 0xdf6c
and edx, 0xf00a
and edx, 0x14c41
pop edx
push esi
push edx
add esp, 4
jmp 0x65011224
pop esi
cmp dword [ebp - 0x2d4], 0
jne 0x65011b3e
mov edx, 0x6b
mov word [ebp - 0x1784], dx
mov eax, 0x65
mov word [ebp - 0x1782], ax
mov ecx, 0x72
mov word [ebp - 0x1780], cx
mov edx, 0x6e
mov word [ebp - 0x177e], dx
mov eax, 0x65
mov word [ebp - 0x177c], ax
mov ecx, 0x6c
mov word [ebp - 0x177a], cx
mov edx, 0x33
mov word [ebp - 0x1778], dx
mov eax, 0x32
mov word [ebp - 0x1776], ax
mov ecx, 0x2e
mov word [ebp - 0x1774], cx
mov edx, 0x64
mov word [ebp - 0x1772], dx
mov eax, 0x6c
mov word [ebp - 0x1770], ax
mov ecx, 0x6c
mov word [ebp - 0x176e], cx
xor edx, edx
mov word [ebp - 0x176c], dx
push esi
add esi, 0x8aa0
sub esi, 0x29c9
and esi, 0x15839
pop esi
push ecx
push ebx
add esp, 4
sub ecx, 0x6c42
add ecx, 0xbd08
and ecx, 0x637d
and ecx, 0x15433
pop ecx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1968], eax
mov ecx, dword [ebp - 0x1968]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x196c], edx
mov eax, dword [ebp - 0x196c]
mov dword [ebp - 0x15ec], eax
push edx
push edi
add esp, 4
xor edx, 0x744a
pop edx
push ecx
or ecx, 0x3b9f
sub ecx, 0x14a58
and ecx, 0x16bb9
add ecx, 0x229a
pop ecx
push esi
push esi
add esp, 4
add esi, 0x12e60
pop esi
cmp dword [ebp - 0x15ec], 0
jne 0x650113c9
mov dword [ebp - 0x754], 0
jmp 0x65011685
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push esi
push edx
add esp, 4
or esi, 0x13521
pop esi
push ecx
xor ecx, 0x7d70
call 0x650113fd
add byte [0x4133403a], bh
xor al, byte [edx + 0x43]
xor eax, dword [ebx - 0x167efb3c]
ljmp 0xe2c1
push eax
and eax, 0x7535
jmp 0x65011691
jmp 0x65011698
pop eax
push eax
add eax, 0x2bb5
call 0x650116ad
add byte [edi], dh
dec esi
cmp dword [esi], esi
aas
cmp dword [esi - 0x7d], eax
les eax, [ecx + eax*4]
invalid
push eax
xor eax, 0x8f03
xor eax, 0x7d21
xor eax, 0x3949
xor eax, 0x15205
pop eax
push ecx
push edi
add esp, 4
xor ecx, 0x568d
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0xfe89
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1988], eax
mov ecx, dword [ebp - 0x1988]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x198c], edx
mov eax, dword [ebp - 0x198c]
mov dword [ebp - 0x1604], eax
push ebx
add ebx, 0xfe36
add ebx, 0x3e3b
sub ebx, 0x17b5d
or ebx, 0x13af3
pop ebx
push ecx
push ebx
add esp, 4
sub ecx, 0x3a3a
sub ecx, 0x5e51
and ecx, 0x137b3
pop ecx
cmp dword [ebp - 0x1604], 0
jne 0x65011be1
mov dword [ebp - 0x2d4], 0
jmp 0x65011e88
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push ecx
call 0x65011c01
add byte [edi + 0x45], cl
xor ecx, dword [edi + 0x37]
inc ebp
add esp, 4
pop ecx
push ecx
push edi
add esp, 4
sub ecx, 0x6ddc
and ecx, 0x3faf
xor ecx, 0x14a5a
pop ecx
push ecx
or ecx, 0x127c3
pop ecx
cmp dword [ebp - 0xcb8], 0
jne 0x65011c3d
mov dword [ebp - 0x2d4], 0
jmp 0x65011e88
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push esi
sub esi, 0x55df
call 0x65011c5e
add byte [eax], bh
aas
inc ecx
inc esp
xor eax, 0x834a4f41
les eax, [ecx + eax*4]
out 0x6b, al
dec esp
add byte [eax], al
call 0x65011c77
add byte [edi + 0x3c], cl
inc eax
cmp ecx, dword [esi + 0x50]
dec edi
dec eax
cmp byte [ecx], bh
add esp, 4
pop esi
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
jmp 0x65011cac
and esi, 0xda67
xor esi, 0x87a4
add esi, 0xd9db
pop esi
push eax
push edx
add esp, 4
and eax, 0xe0fa
xor eax, 0x85b3
sub eax, 0xff58
pop eax
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb4]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcb4]
add ecx, 2
mov dword [ebp - 0xcb4], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x34], dx
push ebx
jmp 0x65011d35
call 0x65011d41
add byte [edi], dh
xor esi, dword [edi]
inc ebx
inc ebx
inc esi
add esp, 4
jmp 0x65011d4d
sub ebx, 0xb483
pop ebx
push ebx
push ebx
add esp, 4
sub ebx, 0xb58c
pop ebx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x65011d7d
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x160c], ecx
jmp 0x65011dd7
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x65011ca5
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x65011ca5
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x65011dc1
mov dword [ebp - 0x1608], 0xffffffff
jmp 0x65011dcb
mov dword [ebp - 0x1608], 1
mov eax, dword [ebp - 0x1608]
mov dword [ebp - 0x160c], eax
cmp dword [ebp - 0x160c], 0
jne 0x65011e20
push edi
sub edi, 0x13bbd
call 0x65011df7
add byte [edi + 0x4b], cl
cmp al, 0x44
inc ebx
aaa
dec ebx
cmp eax, 0x4c48341
pop edi
push ebx
push ecx
add esp, 4
call 0x65011e0e
add byte [ebp + 0x42], cl
cmp ecx, dword [esp + esi + 0x37]
dec esi
dec ebx
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x2d4], ecx
jmp 0x65011e88
push edi
push edi
add esp, 4
call 0x65011e35
add byte [esi], dh
aas
dec esi
xor eax, 0x46394439
dec eax
xor eax, dword [ebx + 0x525f04c4]
jmp 0x65011e3f
sub edx, 0xc8d9
or edx, 0x1250f
or edx, 0x197a
pop edx
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [ebp - 0xcb8]
je 0x65011e7e
mov edx, dword [ebp - 0x510]
cmp dword [edx + 0x30], 0
jne 0x65011c49
mov dword [ebp - 0x2d4], 0
push ebx
push ecx
add esp, 4
and ebx, 0xeef5
or ebx, 0x7b8d
xor ebx, 0x55ba
sub ebx, 0x6af4
pop ebx
push ecx
sub ecx, 0x2453
add ecx, 0x5376
xor ecx, 0xa202
pop ecx
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ebx
add ebx, 0x326e
jmp 0x65011ed6
add ebx, 0xfed5
add ebx, 0x1835b
pop ebx
push ecx
push edi
add esp, 4
add ecx, 0x1493a
pop ecx
push ecx
push edi
add esp, 4
sub ecx, 0x1436b
pop ecx
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x65011f2b
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x6501221c
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x65011f53
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x6501221c
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x65011f85
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x6501221c
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x65011faa
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x6501221c
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1998], ecx
mov dword [ebp - 0x76c], 0
jmp 0x65012004
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x65012210
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1990]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x1994]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1998]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d20], eax
mov dword [ebp - 0x198], 0
jmp 0x65012074
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x65012126
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x65012126
push edi
and edi, 0x4ce2
pop edi
push ecx
call 0x650120b9
add byte [ecx + 0x43], al
inc eax
inc esi
push eax
push eax
aaa
cmp dword [ebx - 0x7d], ecx
les eax, [ecx + eax*4]
ror dword [ebx + 0x79], 0
add al, ch
or byte [eax], al
add byte [eax], al
add byte [eax + 0x3a], cl
cmp edi, dword [0x834a374d]
les eax, [ecx + ebx*2]
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
cmp ecx, eax
je 0x65012118
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x6501211f
jmp 0x65012065
jmp 0x65012126
push esi
or esi, 0x10e91
or esi, 0x11e4
pop esi
push edi
jmp 0x6501213c
jmp 0x65012141
call 0x6501214f
add byte [edx], bh
inc esp
inc esi
inc ebp
cmp edi, dword [edx]
dec eax
add esp, 4
jmp 0x65012157
pop edi
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x65012185
mov dword [ebp - 0xcbc], 0
jmp 0x650121f4
push edx
push edx
add esp, 4
jmp 0x65012193
add edx, 0x3293
pop edx
push esi
and esi, 0xc434
jmp 0x650121aa
xor esi, 0x1586e
and esi, 0x10919
pop esi
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x650121ea
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x650121f4
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x6501220b
mov ecx, dword [ebp - 0x1d20]
mov dword [ebp - 0x514], ecx
jmp 0x6501221c
jmp 0x65011ff5
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push ebx
xor ebx, 0xa433
or ebx, 0x11866
or ebx, 0x313
add ebx, 0x1856e
pop ebx
push ecx
push ebx
add esp, 4
and ecx, 0xe08b
add ecx, 0xe5cc
or ecx, 0x12d6b
pop ecx
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x19e8], ecx
push esi
push edi
add esp, 4
or esi, 0x13398
or esi, 0x1019d
add esi, 0x17684
or esi, 0x14c30
pop esi
push edi
sub edi, 0xe69b
jmp 0x65012294
add edi, 0xf013
pop edi
cmp dword [ebp - 0x3e4], 0
je 0x650122ad
cmp dword [ebp - 0xac4], 0
jne 0x650122f3
push ecx
push edi
add esp, 4
jmp 0x650122b8
pop ecx
push edi
call 0x650122c8
add byte [ebx], bh
xor al, 0x46
dec ebx
cmp byte ss:[edx + 0x34], cl
add esp, 4
jmp 0x650122d2
sub edi, 0x1733f
or edi, 0x1e88
pop edi
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x199c], edx
push 0
call dword [ebp - 0x199c]
mov dword [ebp - 0x20b4], 0xa
push eax
or eax, 0xdaee
pop eax
push ecx
call 0x65012313
add byte [ebp + 0x33], cl
inc ebp
aaa
dec eax
dec edi
aas
add esp, 4
add ecx, 0x8e93
xor ecx, 0xa5b5
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0xce0f
pop edi
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push ecx
sub ecx, 0x27ab
and ecx, 0xe2c7
pop ecx
push edi
push edx
add esp, 4
sub edi, 0x24bb
xor edi, 0xd7e
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0xdeaf
xor ecx, 0x17714
pop ecx
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push eax
push esi
add esp, 4
jmp 0x65012402
and eax, 0x16954
pop eax
push ebx
push edi
add esp, 4
add ebx, 0x164e8
or ebx, 0x2ab6
pop ebx
push edx
push edi
add esp, 4
add edx, 0xa913
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0x161c], eax
push esi
sub esi, 0x1154
sub esi, 0xb0bd
pop esi
push eax
and eax, 0x64f0
or eax, 0x12a62
call 0x65012476
add byte [esi + 0x42], al
cmp byte [ecx + 0x40], al
inc ebx
xor al, byte [ebx - 0x1f7efb3c]
ret