Function at 0x40563a
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push ecx
add ecx, 0x13c78
call 0x4051bf
add byte [ebx + 0x42], cl
cmp dword [ebp + 0x37], eax
cmp byte ss:[ebx + 0x4f], cl
dec ebp
add esp, 4
call 0x4051d0
add byte [ecx], bh
dec ebp
dec ebx
xor eax, 0x4e473d4f
add esp, 4
or ecx, 0x85fd
pop ecx
push ebx
jmp 0x4051e0
pop ebx
push eax
call 0x4051f2
add byte [ebx + 0x3b], al
inc eax
dec esp
inc ecx
cmp dl, byte [eax + 0x33]
xor esi, dword [edi]
add esp, 4
xor eax, 0x183a
pop eax
push eax
sub eax, 0x17dfb
pop eax
push esi
and esi, 0xa89c
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x19a8]
mov dword [ebp - 0x15d8], edx
push ebx
sub ebx, 0x945a
pop ebx
push edx
push edi
add esp, 4
xor edx, 0x1562
sub edx, 0x10787
and edx, 0x10bed
xor edx, 0x37f2
pop edx
push edi
push edx
add esp, 4
add edi, 0xde3b
pop edi
cmp dword [ebp - 0x15d8], 0
jne 0x40527e
mov dword [ebp - 0x31c], 0
jmp 0x40553a
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push ebx
push edi
add esp, 4
add ebx, 0xc735
pop ebx
push ecx
xor ecx, 0x12dda
sub ecx, 0xb9b5
xor ecx, 0x1867f
sub ecx, 0x14bb1
pop ecx
push edi
push ecx
add esp, 4
sub edi, 0xf101
pop edi
cmp dword [ebp - 0xc98], 0
jne 0x4052da
mov dword [ebp - 0x31c], 0
jmp 0x40553a
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ecx
push edx
add esp, 4
sub ecx, 0x17e89
pop ecx
push eax
and eax, 0x15cec
jmp 0x4052ff
add eax, 0x1535b
pop eax
push edi
push edi
add esp, 4
and edi, 0x91c2
and edi, 0x130ed
pop edi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edi
or edi, 0x15e1e
jmp 0x405351
pop edi
push edi
sub edi, 0x733
call 0x405367
add byte [0x3d344b49], bh
inc esi
cmp al, 0x34
add esp, 4
add edi, 0x1224c
sub edi, 0xcbd
pop edi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push eax
push edx
add esp, 4
or eax, 0x18473
sub eax, 0x13027
and eax, 0x194b
pop eax
push eax
add eax, 0x6d7e
sub eax, 0x52a9
sub eax, 0x272c
and eax, 0xc4e9
pop eax
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x405426
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x405489
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x405345
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x405345
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x405473
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x40547d
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x4054d2
push ebx
add ebx, 0x15b90
add ebx, 0x14ddb
xor ebx, 0x14fc7
call 0x4054b4
add byte [eax + 0x3f], al
dec edi
cmp al, 0x4f
cmp esi, dword [ebx + ecx*2]
inc esp
add esp, 4
pop ebx
push esi
push edx
add esp, 4
or esi, 0xadf4
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x40553a
push esi
push ecx
add esp, 4
sub esi, 0x2eeb
pop esi
push edx
sub edx, 0x107d4
and edx, 0x17726
jmp 0x4054f1
pop edx
push ecx
push esi
add esp, 4
xor ecx, 0xa3be
sub ecx, 0x17a21
pop ecx
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x405530
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x4052e6
mov dword [ebp - 0x31c], 0
push edx
add edx, 0x16ee8
or edx, 0x12228
pop edx
push ebx
or ebx, 0x11b23
and ebx, 0x17f7e
xor ebx, 0x8572
call 0x405568
add byte [ebx + 0x43], al
dec edi
inc ebp
inc esp
dec ecx
add esp, 4
pop ebx
cmp dword [ebp - 0x31c], 0
jne 0x405e85
mov edx, 0x6b
mov word [ebp - 0x1754], dx
mov eax, 0x65
mov word [ebp - 0x1752], ax
mov ecx, 0x72
mov word [ebp - 0x1750], cx
mov edx, 0x6e
mov word [ebp - 0x174e], dx
mov eax, 0x65
mov word [ebp - 0x174c], ax
mov ecx, 0x6c
mov word [ebp - 0x174a], cx
mov edx, 0x33
mov word [ebp - 0x1748], dx
mov eax, 0x32
mov word [ebp - 0x1746], ax
mov ecx, 0x2e
mov word [ebp - 0x1744], cx
mov edx, 0x64
mov word [ebp - 0x1742], dx
mov eax, 0x6c
mov word [ebp - 0x1740], ax
mov ecx, 0x6c
mov word [ebp - 0x173e], cx
xor edx, edx
mov word [ebp - 0x173c], dx
push edi
push eax
add esp, 4
or edi, 0xc5b7
sub edi, 0x2d5d
pop edi
push edx
add edx, 0x4ad2
call 0x40563a
add byte [edi], dh
aas
inc esp
cmp eax, 0x44474133
inc edx
add esp, 4
add edx, 0x10c8c
pop edx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19ac]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b0], edx
mov eax, dword [ebp - 0x19b0]
mov dword [ebp - 0x15e4], eax
push eax
push eax
add esp, 4
and eax, 0xf24b
add eax, 0x168bf
call 0x4056e3
add byte [edi], bh
xor eax, 0x40483f3c
add esp, 4
call 0x4056f4
add byte [edx + 0x3d], cl
inc esp
inc ebp
dec edi
dec eax
xor bh, byte [edi]
add esp, 4
pop eax
cmp dword [ebp - 0x15e4], 0
jne 0x405710
mov dword [ebp - 0x750], 0
jmp 0x4059cc
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ecx
push esi
add esp, 4
and ecx, 0x9104
pop ecx
push ebx
and ebx, 0x39c0
sub ebx, 0x104b0
xor ebx, 0x2674
and ebx, 0x6eb2
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x717c
pop edx
cmp dword [ebp - 0xca4], 0
jne 0x40576c
mov dword [ebp - 0x750], 0
jmp 0x4059cc
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push ebx
add ebx, 0xfa67
sub ebx, 0x6de9
or ebx, 0x11971
or ebx, 0x132f4
pop ebx
push edi
jmp 0x40579c
jmp 0x4057a3
add edi, 0x14805
pop edi
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ebx
sub ebx, 0x17edf
or ebx, 0x6927
sub ebx, 0xcdf4
xor ebx, 0x114ed
pop ebx
push edi
push ecx
add esp, 4
xor edi, 0x17a2e
xor edi, 0x14769
add edi, 0xaf65
pop edi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov dword [ebp - 0x214], ecx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
and eax, 0x8ae1
and eax, 0x6a1
pop eax
push eax
xor eax, 0x142ec
call 0x405885
add byte [ebp + 0x37], al
dec edi
cmp bh, byte [edx]
xor al, 0x4a
add esp, 4
add eax, 0xdced
add eax, 0x82a1
pop eax
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x4058b8
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x40591b
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x4057d7
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x4057d7
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x405905
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x40590f
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x405964
push ebx
jmp 0x40592a
add ebx, 0x5e9c
jmp 0x405936
xor ebx, 0x245b
pop ebx
push ecx
push eax
add esp, 4
sub ecx, 0x4848
jmp 0x40594f
add ecx, 0xb5cb
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x4059cc
push eax
and eax, 0x838a
sub eax, 0xf927
pop eax
push edx
push eax
add esp, 4
xor edx, 0x12b7e
sub edx, 0x15223
pop edx
push ebx
push eax
add esp, 4
jmp 0x40598f
and ebx, 0x15cbf
pop ebx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x4059c2
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x405778
mov dword [ebp - 0x750], 0
push eax
push edi
add esp, 4
xor eax, 0x12ff9
add eax, 0x16220
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0x18228
and ebx, 0x8c92
pop ebx
push ebx
push eax
add esp, 4
jmp 0x4059fd
pop ebx
cmp dword [ebp - 0x750], 0
jne 0x405a48
push edx
call 0x405a16
add byte [eax], bh
dec eax
inc edx
cmp dword [ebp + esi + 0x32], eax
add esp, 4
jmp 0x405a20
and edx, 0x115c5
or edx, 0xd919
pop edx
push ecx
push edx
add esp, 4
xor ecx, 0x3fbc
pop ecx
mov dword [ebp - 0x79c], 0
jmp 0x40656f
push ecx
push edx
add esp, 4
sub ecx, 0x81fd
call 0x405a62
add byte [ebx], bh
xor eax, 0x42403849
push eax
dec ebp
cmp byte [ebx + 0x535904c4], al
and ebx, 0xb40a
and ebx, 0x1fc2
add ebx, 0x17a8f
pop ebx
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f0], edx
cmp dword [ebp - 0x15f0], 0
jne 0x405ab9
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x405daa
mov ecx, dword [ebp - 0x15f0]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f4], edx
jne 0x405ae1
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x405daa
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15f4]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f8], ecx
cmp dword [ebp - 0x15f8], 0
jne 0x405b13
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
jmp 0x405daa
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x754], eax
jne 0x405b38
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x405daa
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19b4], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19b8], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19bc], ecx
mov dword [ebp - 0x758], 0
jmp 0x405b92
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x405d9e
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x19b4]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x19b8]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19bc]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19c0], eax
mov dword [ebp - 0x198], 0
jmp 0x405c02
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x405cb4
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x405cb4
push eax
add eax, 0x4c01
call 0x405c45
add byte [eax + 0x44], al
xor eax, 0x3b4d3f50
xor dh, byte [edx]
add esp, 4
and eax, 0xe5b4
jmp 0x405c54
pop eax
push edi
push ecx
add esp, 4
or edi, 0x2f5e
pop edi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x405ca6
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
invalid
invalid