Function at 0x100c59ba
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x100c579d
push esi
xor esi, 0xb455
add esi, 0xd3b8
add esi, 0x8bc4
add esi, 0xd3a7
pop esi
push esi
push ebx
add esp, 4
add esi, 0x5b5a
add esi, 0xf55
or esi, 0xe1b9
pop esi
lea edx, [ebp - 0x1670]
mov dword [ebp - 0xc74], edx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc70], ecx
xor edx, edx
shl byte [esi - 0x77], cl
xchg ebp, eax
xor dh, bh
invalid
push dword [ebx]
invalid
mov word [ebp - 0x34], ax
push ecx
push eax
add esp, 4
and ecx, 0x166e5
or ecx, 0x81b
and ecx, 0xa383
pop ecx
push eax
push ebx
add esp, 4
sub eax, 0xf57d
pop eax
push ecx
sub ecx, 0x10c57
and ecx, 0x47bb
pop ecx
mov ecx, dword [ebp - 0xc70]
mov dx, word [ecx]
mov word [ebp - 0xff2], dx
mov eax, dword [ebp - 0xc70]
add eax, 2
mov dword [ebp - 0xc70], eax
mov cx, word [ebp - 0xff2]
mov word [ebp - 0x1d0], cx
mov edx, dword [ebp - 0xc74]
mov ax, word [edx]
mov word [ebp - 0xff4], ax
mov ecx, dword [ebp - 0xc74]
add ecx, 2
mov dword [ebp - 0xc74], ecx
mov dx, word [ebp - 0xff4]
mov word [ebp - 0x34], dx
push eax
push esi
add esp, 4
xor eax, 0xe495
call 0x100c5858
add byte [esi + 0x3d], al
aas
dec esp
inc ecx
inc ebp
inc ebx
xor edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
call fcn.100d08fd
sub eax, 0x147b7
pop eax
push edx
xor edx, 0x790f
pop edx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x100c588d
movzx ecx, word [ebp - 0x1d0]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x15cc], ecx
jmp 0x100c58e7
movzx eax, word [ebp - 0x1d0]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x100c57b5
movzx edx, word [ebp - 0x1d0]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x100c57b5
movzx ecx, word [ebp - 0x1d0]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x100c58d1
mov dword [ebp - 0x15c8], 0xffffffff
jmp 0x100c58db
mov dword [ebp - 0x15c8], 1
mov eax, dword [ebp - 0x15c8]
mov dword [ebp - 0x15cc], eax
cmp dword [ebp - 0x15cc], 0
jne 0x100c5930
push edi
and edi, 0x126c4
call 0x100c5906
add byte [esi + 0x35], al
dec edx
cmp esi, dword [edx + ecx*2]
inc ecx
dec edx
add esp, 4
pop edi
push eax
push ecx
add esp, 4
add eax, 0x3d71
xor eax, 0x8b4d
and eax, 0x2ad7
pop eax
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp - 0x2c0], ecx
jmp 0x100c5998
push edx
push ebx
add esp, 4
and edx, 0x183b1
xor edx, 0x81a2
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x13a6b
sub ebx, 0x15f2
jmp 0x100c5959
pop ebx
push eax
add eax, 0x15dbf
pop eax
mov edx, dword [ebp - 0x4e8]
mov eax, dword [edx]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x4e8]
cmp ecx, dword [ebp - 0xc78]
je 0x100c598e
mov edx, dword [ebp - 0x4e8]
cmp dword [edx + 0x30], 0
jne 0x100c5759
mov dword [ebp - 0x2c0], 0
push ecx
xor ecx, 0x1356
pop ecx
push esi
push edi
add esp, 4
sub esi, 0x17a4
call 0x100c59ba
add byte [esi], dh
xor eax, 0x3c354336
inc ebp
aaa
add esp, 4
pop esi
push eax
push esi
add esp, 4
sub eax, 0x13d1
pop eax
cmp dword [ebp - 0x2c0], 0
jne 0x100c62cf
mov eax, 0x6b
mov word [ebp - 0x16c8], ax
mov ecx, 0x65
mov word [ebp - 0x16c6], cx
mov edx, 0x72
mov word [ebp - 0x16c4], dx
mov eax, 0x6e
mov word [ebp - 0x16c2], ax
mov ecx, 0x65
mov word [ebp - 0x16c0], cx
mov edx, 0x6c
mov word [ebp - 0x16be], dx
mov eax, 0x33
mov word [ebp - 0x16bc], ax
mov ecx, 0x32
mov word [ebp - 0x16ba], cx
mov edx, 0x2e
mov word [ebp - 0x16b8], dx
mov eax, 0x64
mov word [ebp - 0x16b6], ax
mov ecx, 0x6c
mov word [ebp - 0x16b4], cx
mov edx, 0x6c
mov word [ebp - 0x16b2], dx
xor eax, eax
mov word [ebp - 0x16b0], ax
push edx
push ecx
add esp, 4
and edx, 0x17180
xor edx, 0xa8fa
or edx, 0x2d8c
pop edx
push edi
and edi, 0x103c4
sub edi, 0x12ad4
or edi, 0x16845
sub edi, 0x4e75
pop edi
mov byte [ebp - 0x880], 0x4c
mov byte [ebp - 0x87f], 0x6f
mov byte [ebp - 0x87e], 0x61
mov byte [ebp - 0x87d], 0x64
mov byte [ebp - 0x87c], 0x4c
mov byte [ebp - 0x87b], 0x69
mov byte [ebp - 0x87a], 0x62
mov byte [ebp - 0x879], 0x72
mov byte [ebp - 0x878], 0x61
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x79
mov byte [ebp - 0x875], 0x57
mov byte [ebp - 0x874], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1da8], ecx
mov edx, dword [ebp - 0x1da8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1dac], eax
mov ecx, dword [ebp - 0x1dac]
mov dword [ebp - 0x15d0], ecx
push esi
call 0x100c5b33
add byte [ecx + 0x49], al
xor edi, dword [0x83363950]
les eax, [ecx + eax*4]
out 0xcb, al
pop edx
add dword [eax], eax
pop esi
push eax
and eax, 0x13f0a
and eax, 0x106f4
sub eax, 0xb712
xor eax, 0x105b
pop eax
cmp dword [ebp - 0x15d0], 0
jne 0x100c5b6f
mov dword [ebp - 0x760], 0
jmp 0x100c5e16
mov edx, dword [ebp - 0x15d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc84], ecx
push ecx
add ecx, 0x89a8
pop ecx
push ecx
or ecx, 0x160a5
and ecx, 0x103c3
add ecx, 0x14837
jmp 0x100c5ba4
pop ecx
push ebx
sub ebx, 0xb6b2
and ebx, 0xd709
pop ebx
cmp dword [ebp - 0xc84], 0
jne 0x100c5bcb
mov dword [ebp - 0x760], 0
jmp 0x100c5e16
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x4ec], edx
push edi
sub edi, 0x81ef
jmp 0x100c5be4
or edi, 0xc2b5
jmp 0x100c5bf0
pop edi
push ebx
push eax
add esp, 4
call 0x100c5c05
add byte [esi], bh
cmp dword [0x4c3e4e3c], esi
dec edx
inc edx
add esp, 4
pop ebx
lea eax, [ebp - 0x16c8]
mov dword [ebp - 0xc80], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc7c], edx
xor eax, eax
mov word [ebp - 0x1d4], ax
xor ecx, ecx
mov word [ebp - 0x38], cx
push ecx
and ecx, 0xa486
add ecx, 0x18405
and ecx, 0x157db
and ecx, 0x15715
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x16b03
pop esi
push ecx
push esi
add esp, 4
add ecx, 0x86c9
pop ecx
mov edx, dword [ebp - 0xc7c]
mov ax, word [edx]
mov word [ebp - 0xff6], ax
mov ecx, dword [ebp - 0xc7c]
add ecx, 2
mov dword [ebp - 0xc7c], ecx
mov dx, word [ebp - 0xff6]
mov word [ebp - 0x1d4], dx
mov eax, dword [ebp - 0xc80]
mov cx, word [eax]
mov word [ebp - 0xff8], cx
mov edx, dword [ebp - 0xc80]
add edx, 2
mov dword [ebp - 0xc80], edx
mov ax, word [ebp - 0xff8]
mov word [ebp - 0x38], ax
push edx
call 0x100c5ccd
add byte [ebx], bh
dec ebx
aaa
cmp byte [edi + 0x41], cl
aas
dec eax
dec edi
add esp, 4
or edx, 0x831
and edx, 0xb4a6
pop edx
push ebx
push edx
add esp, 4
jmp 0x100c5ce7
sub ebx, 0x4557
pop ebx
movzx ecx, word [ebp - 0x38]
test ecx, ecx
jne 0x100c5d0b
movzx edx, word [ebp - 0x1d4]
movzx eax, word [ebp - 0x38]
sub edx, eax
mov dword [ebp - 0x15d8], edx
jmp 0x100c5d65
movzx ecx, word [ebp - 0x1d4]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
je 0x100c5c33
movzx eax, word [ebp - 0x1d4]
xor eax, 0x20
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x100c5c33
movzx edx, word [ebp - 0x1d4]
movzx eax, word [ebp - 0x38]
cmp edx, eax
jge 0x100c5d4f
mov dword [ebp - 0x15d4], 0xffffffff
jmp 0x100c5d59
mov dword [ebp - 0x15d4], 1
mov ecx, dword [ebp - 0x15d4]
mov dword [ebp - 0x15d8], ecx
cmp dword [ebp - 0x15d8], 0
jne 0x100c5dae
push ecx
and ecx, 0x50bd
xor ecx, 0x59e7
call 0x100c5d8b
add byte [ebp + 0x38], cl
inc edi
aas
cmp eax, dword [ebx + 0x41]
xor al, 0x32
dec edi
add esp, 4
and ecx, 0x10233
pop ecx
push eax
jmp 0x100c5d9f
pop eax
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x760], edx
jmp 0x100c5e16
push eax
push edx
add esp, 4
and eax, 0x1666c
pop eax
push edx
push ebx
add esp, 4
add edx, 0x2839
add edx, 0x17286
pop edx
push esi
push edi
add esp, 4
xor esi, 0x57e9
pop esi
push esi
sub esi, 0x57de
pop esi
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc84]
je 0x100c5e0c
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x100c5bd7
mov dword [ebp - 0x760], 0
push edx
push esi
add esp, 4
sub edx, 0x4c30
jmp 0x100c5e27
xor edx, 0x12d2a
pop edx
push esi
push edi
add esp, 4
jmp 0x100c5e3b
xor esi, 0xe832
and esi, 0x7823
pop esi
cmp dword [ebp - 0x760], 0
jne 0x100c5e92
push ecx
jmp 0x100c5e5a
or ecx, 0x9c17
pop ecx
push ecx
and ecx, 0x173c
pop ecx
push ebx
and ebx, 0x171d8
add ebx, 0xd104
add ebx, 0x8676
add ebx, 0x134e2
pop ebx
mov dword [ebp - 0xa78], 0
jmp 0x100c69ba
push eax
push eax
add esp, 4
and eax, 0xaa77
sub eax, 0x4798
add eax, 0x80c0
add eax, 0x157a9
pop eax
push eax
add eax, 0x1374c
and eax, 0x1028
sub eax, 0xf4f5
pop eax
mov ecx, dword [ebp - 0x760]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x324], edx
mov dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x15dc], eax
cmp dword [ebp - 0x15dc], 0
jne 0x100c5f03
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], ecx
jmp 0x100c61f4
mov edx, dword [ebp - 0x15dc]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x15e0], eax
jne 0x100c5f2b
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], ecx
jmp 0x100c61f4
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x15e0]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x15e4], edx
cmp dword [ebp - 0x15e4], 0
jne 0x100c5f5d
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], eax
jmp 0x100c61f4
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x15e4]
mov dword [ebp - 0x764], ecx
jne 0x100c5f82
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], edx
jmp 0x100c61f4
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1db0], ecx
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1db4], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1db8], edx
mov dword [ebp - 0x768], 0
jmp 0x100c5fdc
mov eax, dword [ebp - 0x768]
add eax, 1
mov dword [ebp - 0x768], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x768]
cmp edx, dword [ecx + 0x18]
jae 0x100c61e8
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x1db0]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x1db4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1db8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1dbc], ecx
mov dword [ebp - 0x158], 0
jmp 0x100c604c
mov edx, dword [ebp - 0x158]
add edx, 1
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100c60fe
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x880]
test eax, eax
je 0x100c60fe
push edx
push ecx
add esp, 4
or edx, 0x22ba
call 0x100c6093
add byte [ecx + 0x3d], cl
xor al, byte [ebp + 0x43]
inc edx
inc esi
inc eax
dec ebp
add esp, 4
pop edx
push esi
xor esi, 0x59cd
xor esi, 0x7fd9
jmp 0x100c60aa
pop esi
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x880]
cmp edx, ecx
je 0x100c60f0
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x158]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x158]
movsx edx, byte [ebp + ecx - 0x880]
cmp eax, edx
jne 0x100c60f7
jmp 0x100c603d
jmp 0x100c60fe
push ecx
sub ecx, 0x798c
call 0x100c6112
add byte [esi + 0x49], al
xor eax, 0x4640324e
add esp, 4
or ecx, 0x382f
and ecx, 0x4de5
pop ecx
push ebx
xor ebx, 0x14c26
add ebx, 0xd7f6
pop ebx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x158]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x158]
movsx eax, byte [ebp + edx - 0x880]
cmp ecx, eax
jne 0x100c615d
mov dword [ebp - 0xc88], 0
jmp 0x100c61cc
push edi
and edi, 0x18382
call 0x100c6172
add byte [esi], dh
dec esp
inc ecx
cmp dh, byte [edi + edi]
aaa
add esp, 4
pop edi
push ecx
and ecx, 0x105e4
sub ecx, 0x1125d
pop ecx
push eax
push esi
add esp, 4
jmp 0x100c618e
pop eax
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x158]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x158]
movsx ecx, byte [ebp + eax - 0x880]
or ecx, 0x20
cmp edx, ecx
jge 0x100c61c2
mov dword [ebp - 0xc88], 0xffffffff
jmp 0x100c61cc
mov dword [ebp - 0xc88], 1
cmp dword [ebp - 0xc88], 0
jne 0x100c61e3
mov edx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x3c4], edx
jmp 0x100c61f4
jmp 0x100c5fcd
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
je 0x100c62cf
push ecx
push ecx
add esp, 4
or ecx, 0xc710
xor ecx, 0x1425
or ecx, 0x11fa2
pop ecx
push ecx
sub ecx, 0x128
pop ecx
push edx
push ecx
add esp, 4
xor edx, 0x154b0
add edx, 0x11cd
pop edx
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp - 0x1dc0], ecx
push ecx
push esi
add esp, 4
xor ecx, 0xe7ce
pop ecx
push ebx
xor ebx, 0x15caa
pop ebx
push edi
sub edi, 0x26f8
jmp 0x100c6262
and edi, 0x164d5
pop edi
push ecx
add ecx, 0x6d03
pop ecx
mov edx, dword [ebp - 0x1dc0]
mov dword [ebp - 0x1dc4], edx
lea eax, [ebp - 0x1670]
push eax
call dword [ebp - 0x1dc4]
test eax, eax
jne 0x100c62cf
push eax
sub eax, 0x7d3b
and eax, 0xe39d
or eax, 0xbf1b
and eax, 0x4d8b
pop eax
push edi
push edx
add esp, 4
or edi, 0x6f25
or edi, 0x1113c
xor edi, 0x14ef9
pop edi
mov dword [ebp - 0xa78], 0
jmp 0x100c69ba
push eax
or eax, 0xc4cd
or eax, 0x142ae
pop eax
push eax
push edi
add esp, 4
call 0x100c62f1
add byte [edx + 0x34], cl
cmp eax, 0x32394242
aas
cmp byte [ebx - 0xf7efb3c], al
or edi, dword [edx]
add byte [ecx + 0xc13c8], al
add byte [eax + 0x64], bl
mov ecx, dword [0x18]
mov dword [ebp - 0x1dc8], ecx
mov edx, dword [ebp - 0x1dc8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1dcc], eax
mov ecx, dword [ebp - 0x1dcc]
mov dword [ebp - 0x15e8], ecx
push eax
or eax, 0x11f1b
jmp 0x100c6336
add eax, 0x13de4
pop eax
push ecx
add ecx, 0x919e
xor ecx, 0x10c4
call 0x100c6357
add byte [ecx + 0x3b], cl
inc edx
xor al, 0x3e
inc ebx
xor al, 0x83
les eax, [ecx + ebx*2]
cmp dword [ebp - 0x15e8], 0
jne 0x100c6373
mov dword [ebp - 0x2c0], 0
jmp 0x100c661a
mov edx, dword [ebp - 0x15e8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc94], ecx
push eax
call 0x100c6395
add byte [edi + eax*2], bh
cmp al, 0x47
cmp dword [edx], esi
inc esp
aaa
cmp byte [ebx + 0x515804c4], al
push eax
add esp, 4
jmp 0x100c63a6
call fcn.100c63b3
add byte [edi], bh
inc esp
aaa
dec eax
dec esi
dec edi