Function at 0x41b826
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
call 0x41b45d
add byte [eax + 0x4c], dl
xor edi, dword [edx + ecx*2]
dec eax
inc edi
dec edx
add esp, 4
pop edi
cmp dword [ebp - 0x1b60], 0
jne 0x41b479
mov dword [ebp - 0x394], 0
jmp 0x41b720
mov eax, dword [ebp - 0x1b60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xfcc], edx
push esi
call 0x41b499
add byte [eax + eax*2 + 0x38], al
cmp dword [eax + edi + 0x3a], eax
add esp, 4
pop esi
push ecx
call 0x41b4ae
add byte [0x3d38433d], dh
cmp eax, dword [ebx + 0x47]
inc esp
inc edi
add esp, 4
jmp 0x41b4b6
xor ecx, 0xef7c
pop ecx
cmp dword [ebp - 0xfcc], 0
jne 0x41b4d5
mov dword [ebp - 0x394], 0
jmp 0x41b720
mov eax, dword [ebp - 0xfcc]
mov dword [ebp - 0x630], eax
push ebx
push edx
add esp, 4
xor ebx, 0xa7c4
add ebx, 0x57b3
pop ebx
push edi
or edi, 0x137ea
and edi, 0x992e
pop edi
push edx
push edi
add esp, 4
and edx, 0x32ba
or edx, 0x3a3
pop edx
lea ecx, [ebp - 0x1ba8]
mov dword [ebp - 0xfc8], ecx
mov edx, dword [ebp - 0x630]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xfc4], eax
xor ecx, ecx
mov word [ebp - 0x2a4], cx
xor edx, edx
mov word [ebp - 0x60], dx
push eax
push ebx
add esp, 4
and eax, 0x607f
xor eax, 0x6554
pop eax
push edx
xor edx, 0x12cd5
jmp 0x41b55b
sub edx, 0x95d4
pop edx
push edx
or edx, 0x73a4
jmp 0x41b56e
pop edx
mov eax, dword [ebp - 0xfc4]
mov cx, word [eax]
mov word [ebp - 0x140e], cx
mov edx, dword [ebp - 0xfc4]
add edx, 2
mov dword [ebp - 0xfc4], edx
mov ax, word [ebp - 0x140e]
mov word [ebp - 0x2a4], ax
mov ecx, dword [ebp - 0xfc8]
mov dx, word [ecx]
mov word [ebp - 0x1410], dx
mov eax, dword [ebp - 0xfc8]
add eax, 2
mov dword [ebp - 0xfc8], eax
mov cx, word [ebp - 0x1410]
mov word [ebp - 0x60], cx
push edx
push ebx
add esp, 4
xor edx, 0x17081
add edx, 0xf022
xor edx, 0x4bf5
sub edx, 0xeecd
pop edx
push ebx
push ebx
add esp, 4
xor ebx, 0x15f94
pop ebx
push ebx
xor ebx, 0xcdfd
pop ebx
movzx edx, word [ebp - 0x60]
test edx, edx
jne 0x41b615
movzx eax, word [ebp - 0x2a4]
movzx ecx, word [ebp - 0x60]
sub eax, ecx
mov dword [ebp - 0x1b68], eax
jmp 0x41b66f
movzx edx, word [ebp - 0x2a4]
movzx eax, word [ebp - 0x60]
cmp edx, eax
je 0x41b53d
movzx ecx, word [ebp - 0x2a4]
xor ecx, 0x20
movzx edx, word [ebp - 0x60]
cmp ecx, edx
je 0x41b53d
movzx eax, word [ebp - 0x2a4]
movzx ecx, word [ebp - 0x60]
cmp eax, ecx
jge 0x41b659
mov dword [ebp - 0x1b64], 0xffffffff
jmp 0x41b663
mov dword [ebp - 0x1b64], 1
mov edx, dword [ebp - 0x1b64]
mov dword [ebp - 0x1b68], edx
cmp dword [ebp - 0x1b68], 0
jne 0x41b6b8
push ecx
add ecx, 0x5661
or ecx, 0xfcd6
pop ecx
push edx
push edi
add esp, 4
jmp 0x41b690
call 0x41b69e
add byte [ebp + 0x4e], cl
aas
cmp dword [eax + 0x39], eax
inc edi
xor al, byte [ebx + 0x515a04c4]
or ecx, 0x2ae6
pop ecx
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x394], eax
jmp 0x41b720
push edx
and edx, 0xf115
pop edx
push edi
push esi
add esp, 4
jmp 0x41b6cc
pop edi
push ecx
add ecx, 0x1ad4
xor ecx, 0x12dce
jmp 0x41b6e3
add ecx, 0x13d32
pop ecx
mov ecx, dword [ebp - 0x630]
mov edx, dword [ecx]
mov dword [ebp - 0x630], edx
mov eax, dword [ebp - 0x630]
cmp eax, dword [ebp - 0xfcc]
je 0x41b716
mov ecx, dword [ebp - 0x630]
cmp dword [ecx + 0x30], 0
jne 0x41b4e1
mov dword [ebp - 0x394], 0
push edx
push edx
add esp, 4
or edx, 0x11d4e
xor edx, 0xd2f9
xor edx, 0x7b5a
or edx, 0x2a5c
pop edx
push eax
add eax, 0x62ef
and eax, 0xd62d
or eax, 0x98c0
pop eax
cmp dword [ebp - 0x394], 0
jne 0x41c056
mov edx, 0x6b
mov word [ebp - 0x1c54], dx
mov eax, 0x65
mov word [ebp - 0x1c52], ax
mov ecx, 0x72
mov word [ebp - 0x1c50], cx
mov edx, 0x6e
mov word [ebp - 0x1c4e], dx
mov eax, 0x65
mov word [ebp - 0x1c4c], ax
mov ecx, 0x6c
mov word [ebp - 0x1c4a], cx
mov edx, 0x33
mov word [ebp - 0x1c48], dx
mov eax, 0x32
mov word [ebp - 0x1c46], ax
mov ecx, 0x2e
mov word [ebp - 0x1c44], cx
mov edx, 0x64
mov word [ebp - 0x1c42], dx
mov eax, 0x6c
mov word [ebp - 0x1c40], ax
mov ecx, 0x6c
mov word [ebp - 0x1c3e], cx
xor edx, edx
mov word [ebp - 0x1c3c], dx
push edx
push edi
add esp, 4
and edx, 0xff41
sub edx, 0x81a9
pop edx
push ebx
jmp 0x41b814
pop ebx
push edi
call 0x41b826
add byte [edx], dh
cmp al, 0x43
dec ebp
inc eax
cmp bh, byte [edi]
dec eax
cmp dword [ebx - 0x39a0fb3c], eax
test esp, esi
hlt
push edx
call 0x41c066
add byte [ecx + eax*2], bh
dec esi
dec edi
aaa
xor cl, byte [edx + edi + 0x4b]
add esp, 4
jmp 0x41c070
and edx, 0x53a4
pop edx
push edi
call 0x41c084
add byte [0x4746373c], dh
add esp, 4
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f3c], eax
mov ecx, dword [ebp - 0x1f3c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1f40], edx
mov eax, dword [ebp - 0x1f40]
mov dword [ebp - 0x1b8c], eax
push eax
push edi
add esp, 4
call 0x41c0c0
add byte [ebx + esi + 0x3d], cl
dec esi
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
lock or dword [ebx], esp
add byte [ecx + 0x8848e8], al
add al, ch
or dword [eax], eax
add byte [eax], al
add byte [eax + 0x39], cl
cmp eax, 0x3d43363a
cmp eax, 0x5804c483
cmp dword [ebp - 0x1b8c], 0
jne 0x41c0f9
mov dword [ebp - 0x394], 0
jmp 0x41c3a0
mov ecx, dword [ebp - 0x1b8c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xfe8], eax
push ecx
push edi
add esp, 4
or ecx, 0x107d3
pop ecx
push esi
push eax
add esp, 4
or esi, 0x1164d
add esi, 0xd9c6
pop esi
push edx
push eax
add esp, 4
xor edx, 0x3051
pop edx
push eax
add eax, 0x18514
pop eax
cmp dword [ebp - 0xfe8], 0
jne 0x41c155
mov dword [ebp - 0x394], 0
jmp 0x41c3a0
mov ecx, dword [ebp - 0xfe8]
mov dword [ebp - 0x634], ecx
push edx
push edx
add esp, 4
and edx, 0x820a
jmp 0x41c175
pop edx
push ecx
add ecx, 0x11fb7
jmp 0x41c184
and ecx, 0x5140
pop ecx
push edi
and edi, 0xa384
pop edi
lea edx, [ebp - 0x1ba8]
mov dword [ebp - 0xfe4], edx
mov eax, dword [ebp - 0x634]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xfe0], ecx
xor edx, edx
mov word [ebp - 0x2ac], dx
xor eax, eax
mov word [ebp - 0x68], ax
push esi
push ecx
add esp, 4
or esi, 0x1067c
xor esi, 0xb9ae
pop esi
push eax
push ebx
add esp, 4
sub eax, 0x1eb8
or eax, 0xb2c9
xor eax, 0x10e2
jmp 0x41c1ee
pop eax
mov ecx, dword [ebp - 0xfe0]
mov dx, word [ecx]
mov word [ebp - 0x1416], dx
mov eax, dword [ebp - 0xfe0]
add eax, 2
mov dword [ebp - 0xfe0], eax
mov cx, word [ebp - 0x1416]
mov word [ebp - 0x2ac], cx
mov edx, dword [ebp - 0xfe4]
mov ax, word [edx]
mov word [ebp - 0x1418], ax
mov ecx, dword [ebp - 0xfe4]
add ecx, 2
mov dword [ebp - 0xfe4], ecx
mov dx, word [ebp - 0x1418]
mov word [ebp - 0x68], dx
push edi
and edi, 0x1670f
or edi, 0xc8fe
sub edi, 0x14ea5
xor edi, 0x60a1
pop edi
push ebx
push edx
add esp, 4
add ebx, 0x2fa8
xor ebx, 0x16ca5
and ebx, 0x13758
pop ebx
movzx eax, word [ebp - 0x68]
test eax, eax
jne 0x41c295
movzx ecx, word [ebp - 0x2ac]
movzx edx, word [ebp - 0x68]
sub ecx, edx
mov dword [ebp - 0x1b50], ecx
jmp 0x41c2ef
movzx eax, word [ebp - 0x2ac]
movzx ecx, word [ebp - 0x68]
cmp eax, ecx
je 0x41c1bd
movzx edx, word [ebp - 0x2ac]
xor edx, 0x20
movzx eax, word [ebp - 0x68]
cmp edx, eax
je 0x41c1bd
movzx ecx, word [ebp - 0x2ac]
movzx edx, word [ebp - 0x68]
cmp ecx, edx
jge 0x41c2d9
mov dword [ebp - 0x1abc], 0xffffffff
jmp 0x41c2e3
mov dword [ebp - 0x1abc], 1
mov eax, dword [ebp - 0x1abc]
mov dword [ebp - 0x1b50], eax
cmp dword [ebp - 0x1b50], 0
jne 0x41c338
push edx
push ebx
add esp, 4
add edx, 0x547e
xor edx, 0xefd9
sub edx, 0x542c
pop edx
push ecx
push eax
add esp, 4
jmp 0x41c31e
jmp 0x41c323
or ecx, 0x16781
pop ecx
mov ecx, dword [ebp - 0x634]
mov dword [ebp - 0x394], ecx
jmp 0x41c3a0
push ecx
push eax
add esp, 4
xor ecx, 0x14f08
or ecx, 0x17024
pop ecx
push edx
add edx, 0xbe03
and edx, 0x15b3
call 0x41c366
add byte [esp + edi + 0x33], cl
cmp dh, byte [0x4a453c38]
add esp, 4
pop edx
mov edx, dword [ebp - 0x634]
mov eax, dword [edx]
mov dword [ebp - 0x634], eax
mov ecx, dword [ebp - 0x634]
cmp ecx, dword [ebp - 0xfe8]
je 0x41c396
mov edx, dword [ebp - 0x634]
cmp dword [edx + 0x30], 0
jne 0x41c161
mov dword [ebp - 0x394], 0
push eax
call 0x41c3b0
add byte [ebp + 0x3b], cl
inc edi
inc ebp
cmp al, 0x35
dec ebx
inc edi
inc edi
add esp, 4
and eax, 0x6b1f
call 0x41c3c8
add byte [ebx + 0x35], cl
cmp dword [eax + 0x45], edx
cmp eax, 0x83483b4a
les eax, [ecx + eax*4]
enter 0xffffffffffffbcfd, 0
add byte [eax - 0x75], bl
test dword [esp + edi*8 - 1], ebp
dec dword [ebx - 0x7276e7b8]
xor ah, bh
invalid