Function at 0x412341
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
push edx
add esp, 4
and edx, 0xa88
or edx, 0x17741
pop edx
push ebx
push ebx
add esp, 4
jmp 0x412198
add ebx, 0x469b
call 0x4121aa
add byte [edi + 0x44334c4d], dh
add esp, 4
pop ebx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
sub esi, 0x5f0b
add esi, 0x171ff
pop esi
push ebx
push ebx
add esp, 4
xor ebx, 0x14a06
xor ebx, 0x69d9
add ebx, 0x8007
pop ebx
push edx
push esi
add esp, 4
xor edx, 0x13b84
pop edx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push esi
push ebx
add esp, 4
and esi, 0x110d0
and esi, 0xbb33
add esi, 0xaad8
pop esi
push esi
sub esi, 0xe557
pop esi
push esi
push ebx
add esp, 4
or esi, 0x9c25
or esi, 0x69c8
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4122b0
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x41230a
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x4121d8
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x4121d8
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x4122f4
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x4122fe
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x412353
push esi
push eax
add esp, 4
or esi, 0xae03
jmp 0x412323
pop esi
push edi
and edi, 0x72a0
sub edi, 0xbadc
call 0x412341
add byte [0x42363c49], dh
cmp ecx, dword [esp + esi + 0x48]
dec esi
add esp, 4
pop edi
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x4123bb
push ecx
push ecx
add esp, 4
and ecx, 0x16088
or ecx, 0x17a3b
pop ecx
push ecx
push ecx
add esp, 4
jmp 0x412372
sub ecx, 0x11e4e
or ecx, 0xe641
xor ecx, 0x16e0a
pop ecx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x4123b1
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x41217c
mov dword [ebp - 0x2fc], 0
push ebx
push eax
add esp, 4
sub ebx, 0x1029b
xor ebx, 0x19e7
add ebx, 0x903a
and ebx, 0x1dad
pop ebx
push ecx
and ecx, 0x133dd
or ecx, 0xcaeb
add ecx, 0x8fb4
pop ecx
cmp dword [ebp - 0x2fc], 0
jne 0x412cf2
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ecx
or ecx, 0x1866e
add ecx, 0x10070
call 0x4124af
add byte [eax + 0x45], cl
dec edx
inc edi
cmp cl, byte [edi + 0x50]
dec ebp
cmp al, byte [ebx - 0x167efb3c]
or ax, word [ecx]
add byte [ecx + 0x51], bl
push eax
add esp, 4
or ecx, 0x47bb
pop ecx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push edi
or edi, 0x7ad2
pop edi
push edx
push edx
add esp, 4
or edx, 0x9075
pop edx
push ecx
push ecx
add esp, 4
add ecx, 0x4f79
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x1737d
sub esi, 0x12b26
pop esi
cmp dword [ebp - 0x1620], 0
jne 0x412592
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push esi
add esi, 0x1064e
xor esi, 0x12317
xor esi, 0x4264
pop esi
push edx
push ebx
add esp, 4
add edx, 0xa835
or edx, 0xeef6
xor edx, 0x11e76
and edx, 0x11be6
pop edx
cmp dword [ebp - 0xcd0], 0
jne 0x4125ee
mov dword [ebp - 0x774], 0
jmp 0x412839
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push eax
sub eax, 0x38b8
pop eax
push ecx
push ecx
add esp, 4
add ecx, 0x11099
and ecx, 0x10677
add ecx, 0x4342
sub ecx, 0xad6a
pop ecx
push ebx
push ebx
add esp, 4
sub ebx, 0x487c
pop ebx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
push eax
add esp, 4
xor edi, 0xbf08
add edi, 0x78a4
xor edi, 0x15486
pop edi
push esi
xor esi, 0x166f0
xor esi, 0xe15b
or esi, 0x14229
add esi, 0xdb80
pop esi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edi
sub edi, 0x8eee
sub edi, 0x10077
jmp 0x4126f4
pop edi
push ecx
jmp 0x4126fe
and ecx, 0x16ca2
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x13f6a
pop ebx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x41272e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x412788
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x412656
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x412656
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x412772
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x41277c
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x4127d1
push edx
push edx
add esp, 4
and edx, 0x5e2c
xor edx, 0x11356
jmp 0x4127a8
pop edx
push ecx
xor ecx, 0x5abe
or ecx, 0x633e
or ecx, 0x11270
sub ecx, 0xe8dd
pop ecx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x412839
push edx
jmp 0x4127d9
xor edx, 0xa0c9
call 0x4127ed
add byte [esi + 0x48], al
inc esi
cmp eax, 0x34364542
add esp, 4
pop edx
push esi
push edi
add esp, 4
add esi, 0xcfcd
sub esi, 0x80f3
pop esi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x41282f
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x4125fa
mov dword [ebp - 0x774], 0
push edi
sub edi, 0x16f27
and edi, 0xc0e1
add edi, 0x914
and edi, 0x2aec
pop edi
push edx
push ecx
add esp, 4
and edx, 0x16c67
or edx, 0x49c
xor edx, 0x945f
pop edx
cmp dword [ebp - 0x774], 0
jne 0x4128b5
push edi
push ecx
add esp, 4
add edi, 0xa447
add edi, 0xf273
pop edi
push ecx
xor ecx, 0x5d74
pop ecx
push edx
push edi
add esp, 4
add edx, 0x60b5
xor edx, 0xecd1
jmp 0x4128a5
pop edx
mov dword [ebp - 0xab4], 0
jmp 0x4133dd
push esi
and esi, 0xeaa5
add esi, 0x16ed0
xor esi, 0x169a
pop esi
push edx
push edi
add esp, 4
or edx, 0x8d17
add edx, 0x11c6a
sub edx, 0x105aa
xor edx, 0x176f6
pop edx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x412926
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x412c17
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x41294e
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x412c17
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x412980
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x412c17
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x4129a5
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x412c17
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x4129ff
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x412c0b
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x412a6f
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x412b21
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x412b21
push eax
or eax, 0xad5a
add eax, 0x16f8d
add eax, 0x12078
pop eax
push ebx
push ebx
add esp, 4
jmp 0x412abe
and ebx, 0x6b9
jmp 0x412acd
pop ebx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x412b13
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x412b1a
jmp 0x412a60
jmp 0x412b21
push edi
push edi
add esp, 4
jmp 0x412b2e
or edi, 0x7ea7
call 0x412b40
add byte [esp + esi + 0x42], cl
xor cl, byte ss:[ebx + eax*4 - 0x3c]
add al, 0x5f
push edx
or edx, 0xb618
jmp 0x412b52
pop edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x412b80
mov dword [ebp - 0xcd4], 0
jmp 0x412bef
push esi
push esi
add esp, 4
xor esi, 0x6955
sub esi, 0xe70
pop esi
push edx
push edx
add esp, 4
jmp 0x412b9f
or edx, 0x1df5
sub edx, 0x5cf0
sub edx, 0x172de
pop edx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x412be5
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x412bef
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x412c06
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x3f8], edx
jmp 0x412c17
jmp 0x4129f0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x412cf2
push edx
or edx, 0x539c
add edx, 0xd2f6
add edx, 0x1073d
pop edx
push esi
push edi
add esp, 4
sub esi, 0xc4b9
add esi, 0x13652
pop esi
push ecx
push edx
add esp, 4
add ecx, 0x9aeb
pop ecx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push eax
add eax, 0x70c7
jmp 0x412c6e
add eax, 0xd4e0
sub eax, 0xdaef
pop eax
push edi
and edi, 0x11df5
or edi, 0xaef8
and edi, 0x16ef
jmp 0x412c93
pop edi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x412cf2
push eax
push edx
add esp, 4
add eax, 0x181d4
or eax, 0x3290
sub eax, 0x32bb
pop eax
push edi
xor edi, 0xee3d
and edi, 0x6a77
and edi, 0x1da
sub edi, 0x17c0b
pop edi
mov dword [ebp - 0xab4], 0
jmp 0x4133dd
push esi
push edx
add esp, 4
sub esi, 0x179d2
call 0x412d0d
add byte [edi + 0x3b], al
inc esi
dec esp
dec ebp
inc ebp
inc esi
inc esp
cmp dword ss:[ebx + 0x565e04c4], eax
or esi, 0x145b9
jmp 0x412d1d
xor esi, 0x78f4
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [ebp - 0x167c], ecx
push edi
push ebx
add esp, 4
or edi, 0xdf4b
add edi, 0x35c7
sub edi, 0x133df
pop edi
push ecx
sub ecx, 0xd838
add ecx, 0x87c0
pop ecx
push esi
push eax
add esp, 4
sub esi, 0x168e9
pop esi
cmp dword [ebp - 0x167c], 0
jne 0x412d96
mov dword [ebp - 0x2fc], 0
jmp 0x41303d
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push eax
call 0x412db6
add byte [esi], bh
cmp dword [ebx + 0x49], eax
dec ebx
inc esp
dec eax
add esp, 4
sub eax, 0x4200
or eax, 0x81fe
sub eax, 0x9291
pop eax
push eax
or eax, 0x17f7f
xor eax, 0xc609
pop eax
cmp dword [ebp - 0xce0], 0
jne 0x412df2
mov dword [ebp - 0x2fc], 0
jmp 0x41303d
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push ebx
push ebx
add esp, 4
and ebx, 0x9a08
or ebx, 0x156e3
call 0x412e1b
add byte [esi], bh
inc ecx
cmp eax, dword [ebx + edi + 0x4c]
add esp, 4
call 0x412e2c
add byte [edx + 0x3a], cl
inc edx
cmp dword [ebp + 0x4b], ecx
cmp dword [eax - 0x7d], eax
les eax, [ebx + ebx*2]
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push esi
push edi
add esp, 4
jmp 0x412e65
pop esi
push ecx
push edi
add esp, 4
sub ecx, 0x3327
and ecx, 0x10b65
pop ecx
push esi
push esi
add esp, 4
jmp 0x412e85
sub esi, 0x2047
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push ecx
or ecx, 0x2b93
or ecx, 0xf36
sub ecx, 0x14f79
jmp 0x412efd
pop ecx
push edx
or edx, 0x133f1
and edx, 0x5ac6
jmp 0x412f14
pop edx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x412f32
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x412f8c
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x412e5a
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x412e5a
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x412f76
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x412f80
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x412fd5
push edi
and edi, 0x131d9
add edi, 0x962c
pop edi
push edi
push edi
add esp, 4
xor edi, 0x7bd8
pop edi
push ecx
jmp 0x412fb9
jmp 0x412fc0
sub ecx, 0x999f
pop ecx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x41303d
push ecx
push ebx
add esp, 4
add ecx, 0x10c6
pop ecx
push ebx
or ebx, 0xa260
pop ebx
push ebx
push eax
add esp, 4
add ebx, 0x171b4
and ebx, 0xbe24
or ebx, 0xdb84
jmp 0x413006
pop ebx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x413033
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x412dfe
mov dword [ebp - 0x2fc], 0
push edx
or edx, 0x12b59
xor edx, 0xfb59
sub edx, 0x3108
pop edx
push eax
push edx
add esp, 4
call 0x413065
add byte [esi + 0x41], al
cmp eax, 0x484b4d46
inc edx
add esp, 4
add eax, 0x3f0b
pop eax
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push eax
push edi