Function at 0x1c9eeec
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
mov byte [ebp - 0xb0c], 0x4c
mov byte [ebp - 0xb0b], 0x6f
mov byte [ebp - 0xb0a], 0x61
mov byte [ebp - 0xb09], 0x64
mov byte [ebp - 0xb08], 0x4c
mov byte [ebp - 0xb07], 0x69
mov byte [ebp - 0xb06], 0x62
mov byte [ebp - 0xb05], 0x72
mov byte [ebp - 0xb04], 0x61
mov byte [ebp - 0xb03], 0x72
mov byte [ebp - 0xb02], 0x79
mov byte [ebp - 0xb01], 0x57
mov byte [ebp - 0xb00], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x2690], eax
mov ecx, dword [ebp - 0x2690]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x2694], edx
mov eax, dword [ebp - 0x2694]
mov dword [ebp - 0x18f8], eax
push ecx
push edi
add esp, 4
sub ecx, 0x8581
and ecx, 0x1776a
sub ecx, 0x160f0
or ecx, 0x10f60
pop ecx
push edi
and edi, 0x15979
sub edi, 0x1472a
and edi, 0x4ec4
pop edi
cmp dword [ebp - 0x18f8], 0
jne 0x1c9efbc
mov dword [ebp - 0x870], 0
jmp 0x1c9f278
mov ecx, dword [ebp - 0x18f8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xea4], eax
push edx
push edx
add esp, 4
add edx, 0x7ba9
sub edx, 0x13524
pop edx
push ebx
sub ebx, 0x6312
call 0x1c9eff6
add byte [edi + ecx*2], bh
dec eax
push eax
cmp eax, 0x3d494236
add esp, 4
xor ebx, 0x6326
pop ebx
cmp dword [ebp - 0xea4], 0
jne 0x1c9f018
mov dword [ebp - 0x870], 0
jmp 0x1c9f278
mov ecx, dword [ebp - 0xea4]
mov dword [ebp - 0x5c8], ecx
push ecx
call 0x1c9f032
add byte [eax + 0x40], dl
dec ecx
dec esp
dec ecx
dec edi
cmp dword [ebx - 0x3e7efb3c], eax
pushfd
push edi
add dword [eax], eax
pop ecx
push ecx
push eax
add esp, 4
jmp 0x1c9f049
sub ecx, 0x14fbc
add ecx, 0xb893
pop ecx
lea edx, [ebp - 0x1ac8]
mov dword [ebp - 0xea0], edx
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xe9c], ecx
xor edx, edx
mov word [ebp - 0x268], dx
xor eax, eax
mov word [ebp - 0x13c], ax
push edx
call 0x1c9f091
add byte [eax + 0x3f], al
inc ecx
dec eax
inc edx
xor al, 0x4c
add esp, 4
or edx, 0x11850
jmp 0x1c9f0a0
and edx, 0x88b1
pop edx
push edx
and edx, 0xf0e5
or edx, 0x12587
pop edx
mov ecx, dword [ebp - 0xe9c]
mov dx, word [ecx]
mov word [ebp - 0x12b2], dx
mov eax, dword [ebp - 0xe9c]
add eax, 2
mov dword [ebp - 0xe9c], eax
mov cx, word [ebp - 0x12b2]
mov word [ebp - 0x268], cx
mov edx, dword [ebp - 0xea0]
mov ax, word [edx]
mov word [ebp - 0x12b4], ax
mov ecx, dword [ebp - 0xea0]
add ecx, 2
mov dword [ebp - 0xea0], ecx
mov dx, word [ebp - 0x12b4]
mov word [ebp - 0x13c], dx
push esi
or esi, 0x14f3e
or esi, 0x16094
sub esi, 0xa3fd
pop esi
push ecx
push esi
add esp, 4
sub ecx, 0x13f89
sub ecx, 0x4d5d
pop ecx
push eax
push edi
add esp, 4
jmp 0x1c9f140
pop eax
movzx eax, word [ebp - 0x13c]
test eax, eax
jne 0x1c9f164
movzx ecx, word [ebp - 0x268]
movzx edx, word [ebp - 0x13c]
sub ecx, edx
mov dword [ebp - 0x1900], ecx
jmp 0x1c9f1c7
movzx eax, word [ebp - 0x268]
movzx ecx, word [ebp - 0x13c]
cmp eax, ecx
je 0x1c9f083
movzx edx, word [ebp - 0x268]
xor edx, 0x20
movzx eax, word [ebp - 0x13c]
cmp edx, eax
je 0x1c9f083
movzx ecx, word [ebp - 0x268]
movzx edx, word [ebp - 0x13c]
cmp ecx, edx
jge 0x1c9f1b1
mov dword [ebp - 0x18fc], 0xffffffff
jmp 0x1c9f1bb
mov dword [ebp - 0x18fc], 1
mov eax, dword [ebp - 0x18fc]
mov dword [ebp - 0x1900], eax
cmp dword [ebp - 0x1900], 0
jne 0x1c9f210
push ebx
push edi
add esp, 4
or ebx, 0xd400
jmp 0x1c9f1e4
xor ebx, 0xf5f4
pop ebx
push ebx
push esi
add esp, 4
jmp 0x1c9f1f5
add ebx, 0x268d
or ebx, 0x13485
pop ebx
mov ecx, dword [ebp - 0x5c8]
mov dword [ebp - 0x870], ecx
jmp 0x1c9f278
push eax
xor eax, 0xe76e
and eax, 0x150b1
call 0x1c9f22d
add byte [ebp + 0x42], cl
xor eax, dword [esi + 0x34]
inc edx
xor eax, dword [eax + 0x36]
inc edi
add esp, 4
call 0x1c9f23e
add byte [ebx], bh
aas
inc edi
aaa
cmp al, 0x4d
inc edi
add esp, 4
pop eax
mov edx, dword [ebp - 0x5c8]
mov eax, dword [edx]
mov dword [ebp - 0x5c8], eax
mov ecx, dword [ebp - 0x5c8]
cmp ecx, dword [ebp - 0xea4]
je 0x1c9f26e
mov edx, dword [ebp - 0x5c8]
cmp dword [edx + 0x30], 0
jne 0x1c9f024
mov dword [ebp - 0x870], 0
push ecx
add ecx, 0xacca
jmp 0x1c9f286
pop ecx
push edi
jmp 0x1c9f291
and edi, 0xfc21
or edi, 0x66c9
pop edi
push esi
push edx
add esp, 4
and esi, 0x5404
pop esi
cmp dword [ebp - 0x870], 0
jne 0x1c9f2f4
push eax
sub eax, 0x144b1
add eax, 0x20c5
jmp 0x1c9f2c9
sub eax, 0x138ac
pop eax
push ebx
push ebx
add esp, 4
call 0x1c9f2e1
add byte [eax + 0x44], dl
cmp dword [ebx], esi
xor eax, 0x4c48347
pop ebx
mov dword [ebp - 0x8bc], 0
jmp 0x1c9fe30
push ebx
push edi
add esp, 4
xor ebx, 0x1974
and ebx, 0x4bbc
and ebx, 0x14cf0
pop ebx
push ebx
xor ebx, 0xcfe
pop ebx
push ebx
push ebx
add esp, 4
sub ebx, 0x8826
add ebx, 0x117a1
pop ebx
mov eax, dword [ebp - 0x870]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x428], ecx
mov dword [ebp - 0x880], 0
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x1904], edx
cmp dword [ebp - 0x1904], 0
jne 0x1c9f365
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x48c], eax
jmp 0x1c9f656
mov ecx, dword [ebp - 0x1904]
mov edx, dword [ebp - 0x428]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1908], edx
jne 0x1c9f38d
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x48c], eax
jmp 0x1c9f656
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1908]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x190c], ecx
cmp dword [ebp - 0x190c], 0
jne 0x1c9f3bf
mov edx, dword [ebp - 0x880]
mov dword [ebp - 0x48c], edx
jmp 0x1c9f656
mov eax, dword [ebp - 0x428]
add eax, dword [ebp - 0x190c]
mov dword [ebp - 0x874], eax
jne 0x1c9f3e4
mov ecx, dword [ebp - 0x880]
mov dword [ebp - 0x48c], ecx
jmp 0x1c9f656
mov edx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x428]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x2698], eax
mov ecx, dword [ebp - 0x874]
mov edx, dword [ebp - 0x428]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x269c], edx
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x428]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x26a0], ecx
mov dword [ebp - 0x878], 0
jmp 0x1c9f43e
mov edx, dword [ebp - 0x878]
add edx, 1
mov dword [ebp - 0x878], edx
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x878]
cmp ecx, dword [eax + 0x18]
jae 0x1c9f64a
mov edx, dword [ebp - 0x878]
mov eax, dword [ebp - 0x2698]
mov ecx, dword [ebp - 0x428]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x87c], ecx
mov edx, dword [ebp - 0x878]
mov eax, dword [ebp - 0x269c]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x26a0]
mov eax, dword [ebp - 0x428]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x26a4], eax
mov dword [ebp - 0x1d8], 0
jmp 0x1c9f4ae
mov ecx, dword [ebp - 0x1d8]
add ecx, 1
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x87c]
add edx, dword [ebp - 0x1d8]
movsx eax, byte [edx]
test eax, eax
je 0x1c9f560
mov ecx, dword [ebp - 0x1d8]
movsx edx, byte [ebp + ecx - 0xb0c]
test edx, edx
je 0x1c9f560
push ebx
add ebx, 0x1248b
call 0x1c9f4f0
add byte [ebp + 0x3c], cl
xor ecx, dword [edi + esi + 0x4e]
inc esi
cmp dword [ebx + 0xbe804c4], eax
add byte [eax], al
add byte [eax], al
inc eax
inc eax
aaa
cmp al, 0x4e
cmp dword [edx], esi
dec edi
inc ecx
inc esp
add esp, 4
jmp 0x1c9f50c
pop ebx
mov eax, dword [ebp - 0x87c]
add eax, dword [ebp - 0x1d8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1d8]
movsx eax, byte [ebp + edx - 0xb0c]
cmp ecx, eax
je 0x1c9f552
mov ecx, dword [ebp - 0x87c]
add ecx, dword [ebp - 0x1d8]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x1d8]
movsx ecx, byte [ebp + eax - 0xb0c]
cmp edx, ecx
jne 0x1c9f559
jmp 0x1c9f49f
jmp 0x1c9f560
push ecx
push eax
add esp, 4
xor ecx, 0xeb8
pop ecx
push ecx
add ecx, 0x62af
xor ecx, 0x716a
sub ecx, 0xbd35
pop ecx
push edx
push esi
add esp, 4
xor edx, 0x2fa5
or edx, 0x1096
pop edx
mov edx, dword [ebp - 0x87c]
add edx, dword [ebp - 0x1d8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1d8]
movsx edx, byte [ebp + ecx - 0xb0c]
cmp eax, edx
jne 0x1c9f5bf
mov dword [ebp - 0xea8], 0
jmp 0x1c9f62e
push eax
push edi
add esp, 4
and eax, 0x130f
pop eax
push esi
or esi, 0xaf12
pop esi
push ebx
or ebx, 0x16117
or ebx, 0x6332
pop ebx
push esi
add esi, 0x158d6
pop esi
push ebx
and ebx, 0x9124
pop ebx
mov eax, dword [ebp - 0x87c]
add eax, dword [ebp - 0x1d8]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x1d8]
movsx eax, byte [ebp + edx - 0xb0c]
or eax, 0x20
cmp ecx, eax
jge 0x1c9f624
mov dword [ebp - 0xea8], 0xffffffff
jmp 0x1c9f62e
mov dword [ebp - 0xea8], 1
cmp dword [ebp - 0xea8], 0
jne 0x1c9f645
mov ecx, dword [ebp - 0x26a4]
mov dword [ebp - 0x48c], ecx
jmp 0x1c9f656
jmp 0x1c9f42f
mov edx, dword [ebp - 0x880]
mov dword [ebp - 0x48c], edx
cmp dword [ebp - 0x48c], 0
je 0x1c9f731
push edi
push esi
add esp, 4
call 0x1c9f675
add byte [eax + 0x4d], dl
dec esi
inc ebp
inc ebp
aaa
xor eax, 0x8104c483
out 0xf9, eax
xchg edi, eax
add byte [eax], al
pop edi
push edx
jmp 0x1c9f688
pop edx
push ecx
push eax
add esp, 4
or ecx, 0x3f8f
pop ecx
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x26a8], eax
push ebx
call 0x1c9f6b0
add byte [0x3239354c], dh
dec ecx
dec esp
cmp al, 0x83
les eax, [ecx + eax*4]
retf