Function at 0x4010e7
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get kernel32 base address
Get number of processors
Resolve function by hash

Disassembly:
xor eax, eax
mov eax, 0x1d4c0
push eax
mov eax, 0xdb2d49b0
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
nop
nop
xor edx, edx
push 0x40
push 0x1000
push 0x400
push edx
mov eax, 0x91afca54
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
push eax
mov eax, 0x7bbdc500
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
cmp al, 0
je 0x401416
xor ebx, ebx
mov bl, 0
pop eax
mov byte [eax + 3], 0x21
add bl, 0x6b
mov byte [eax + 0xa], bl
push eax
xor ecx, ecx
mov byte [eax], 0x62
add ecx, 1
cmp ecx, 0xff
jne 0x40115b
mov byte [eax + 2], 0x30
mov byte [eax + 1], 0x30
push eax
xor edx, edx
push 0x40
push 0x1000
push 0x400
push edx
mov eax, 0x91afca54
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
push eax
pop eax
mov byte [eax + 0x1e], 0x1c
mov byte [eax + 0x14], 0xeb
mov byte [eax + 0xa], 0x66
mov byte [eax + 0x15], 0xdb
ror edx, 5
mov byte [eax + 0xc], 0x9d
mov byte [eax + 0x17], 0x22
sub edx, 0x19
mov byte [eax + 0xd], 0xa6
mov byte [eax + 2], 0x8d
mov byte [eax + 0x18], 0xa5
mov byte [eax + 0x16], 0x1e
ror edx, 6
add edx, 0x20
add edx, 0x86
push eax
ror eax, 0
add eax, 0x8f
pop eax
push eax
mov eax, 0xa4
sub eax, 0xbc
pop eax
mov byte [eax + 4], 0x70
sub edx, 0x6e
mov byte [eax + 0x19], 0x4f
mov byte [eax + 7], 0x71
mov byte [eax + 1], 0xcb
mov byte [eax + 0x1d], 0x97
mov byte [eax + 0x10], 0xd6
mov byte [eax + 0x1b], 2
push eax
ror eax, 6
add eax, 0x65
pop eax
mov byte [eax + 0x11], 0xea
push eax
rol eax, 6
pop eax
mov edx, 7
add edx, 0x70
push eax
ror eax, 3
add eax, 2
pop eax
mov byte [eax + 6], 0xd1
sub edx, 0xf2
mov byte [eax + 0x13], 0x82
mov byte [eax + 5], 0x96
ror edx, 6
ror edx, 4
mov byte [eax + 3], 0xc9
sub edx, 0xbb
mov byte [eax + 0x12], 0x5e
sub edx, 0x84
sub edx, 0x72
push eax
rol eax, 6
pop eax
mov byte [eax + 0xb], 0xa7
mov byte [eax + 0x1c], 0x86
mov edx, 0xa
mov byte [eax + 8], 0x6f
mov byte [eax + 0xe], 0x24
mov byte [eax + 0x1f], 0x6c
mov byte [eax + 0x21], 0xb8
push eax
rol eax, 7
rol eax, 1
rol eax, 3
pop eax
add edx, 0x2e
mov byte [eax + 0x1a], 0xf6
push eax
rol eax, 1
rol eax, 3
rol eax, 3
pop eax
ror edx, 3
sub edx, 0x80
mov byte [eax], 0xa6
mov byte [eax + 0x20], 1
add edx, 0x80
mov byte [eax + 9], 0x97
mov byte [eax + 0xf], 0x61
push eax
ror eax, 3
add eax, 3
pop eax
push eax
ror eax, 1
add eax, 0x95
pop eax
add edx, 0xbc
xor ebx, ebx
pop ebx
push eax
mov eax, 0xcfd98161
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
mov ebx, eax
pop eax
pop ecx
xor edx, edx
mov dl, bl
add edx, 0x73
mov byte [ecx + 7], dl
xor edx, edx
mov dl, bh
add edx, 0x5d
mov byte [ecx + 8], dl
push ecx
push eax
xor edx, edx
push 0x40
push 0x1000
push 0x400
push edx
mov eax, 0x91afca54
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
push eax
push eax
mov eax, 0xb98c88cf
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
pop eax
xor ebx, ebx
pop ebx
pop ecx
push ebx
mov dx, word [eax + 2]
add edx, 0x35
mov byte [ecx + 4], dl
xor edx, edx
mov dx, word [eax + 6]
add edx, 0x29
mov byte [ecx + 5], dl
mov edx, dword fs:[0x30]
xor dl, dl
add al, byte [eax + 0x51883fc2]
or dword [ecx], esi
shl byte [esi - 0x75], cl
push eax
or byte [ebx + 0x518840c2], al
push es
xor edx, edx
push ecx
jmp 0x401379
mov ecx, eax
push ecx
xor edx, edx
push 0x40
push 0x1000
push 0x400
push edx
mov eax, 0x91afca54
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
mov byte [eax], 0x75
mov byte [eax + 1], 0x73
mov byte [eax + 2], 0x65
mov byte [eax + 3], 0x72
mov byte [eax + 4], 0x33
mov byte [eax + 5], 0x32
mov byte [eax + 6], 0x2e
mov byte [eax + 7], 0x64
mov byte [eax + 8], 0x6c
mov byte [eax + 9], 0x6c
push eax
push 0xec0e4e8e
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
mov edx, eax
pop ebx
pop eax
push 0xb
push ebx
push 0x36
push eax
call fcn.00401000
cmp byte [eax], 0x4b
jne 0x401416
cmp byte [eax + 1], 0x65
jne 0x401416
cmp byte [eax + 2], 0x79
jne 0x401416
cmp byte [eax + 3], 0x3a
jne 0x401416
push 0
push eax
push eax
push 0
push 0xbc4da2a8
push edx
call fcn.0040149d
pop edx
pop edx
call eax
jmp 0x401416
mov eax, 0x73e2d87e
push eax
call fcn.00401489
push eax
call fcn.0040149d
pop edx
pop edx
call eax
pop esi
pop ebx
mov ecx, 0
mov eax, 1
cmp eax, 1
je 0x40143e
jmp 0x401453
mov eax, 0
pop edi
xor dword [edi + ecx], ebx
add ecx, 1
cmp byte [edi + ecx], 0
push edi
je 0x401468
jmp 0x401437
mov eax, 1
pop edi
xor dword [edi + ecx], esi
add ecx, 1
cmp byte [edi + ecx], 0
push edi
je 0x401468
jmp 0x401437
pop eax
jmp 0x401376