Function at 0x5641d0
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
mov word [ebp - 0x1748], cx
mov edx, 0x64
mov word [ebp - 0x1746], dx
mov eax, 0x6c
mov word [ebp - 0x1744], ax
mov ecx, 0x6c
mov word [ebp - 0x1742], cx
xor edx, edx
mov word [ebp - 0x1740], dx
push ecx
push edi
add esp, 4
xor ecx, 0x164e4
pop ecx
push ebx
and ebx, 0x104fa
add ebx, 0x7579
and ebx, 0x10ffc
pop ebx
push ebx
push edx
add esp, 4
add ebx, 0xa7d5
sub ebx, 0x17990
pop ebx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19c4], edx
mov eax, dword [ebp - 0x19c4]
mov dword [ebp - 0x15e8], eax
push edi
push ecx
add esp, 4
xor edi, 0xd84b
sub edi, 0xd41a
sub edi, 0x14f03
sub edi, 0x1478e
pop edi
push ecx
sub ecx, 0x153a1
add ecx, 0x10c7b
add ecx, 0x4110
pop ecx
cmp dword [ebp - 0x15e8], 0
jne 0x564302
mov dword [ebp - 0x750], 0
jmp 0x5645be
mov ecx, dword [ebp - 0x15e8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push eax
sub eax, 0x13739
or eax, 0x63a2
pop eax
push ecx
add ecx, 0xd176
pop ecx
push edi
xor edi, 0xa6c
add edi, 0x8962
add edi, 0x13bd2
pop edi
push ebx
and ebx, 0x13c3a
pop ebx
cmp dword [ebp - 0xca4], 0
jne 0x56435e
mov dword [ebp - 0x750], 0
jmp 0x5645be
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
push edi
add esp, 4
xor esi, 0x1316f
or esi, 0x8a74
sub esi, 0x10543
add esi, 0xef3d
pop esi
push edx
and edx, 0xf983
sub edx, 0xd225
and edx, 0x1440f
pop edx
lea edx, [ebp - 0x1758]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ebx
and ebx, 0x12eb5
sub ebx, 0xe783
and ebx, 0x1e75
sub ebx, 0xc467
pop ebx
push eax
push edi
add esp, 4
xor eax, 0x152ba
and eax, 0x314
and eax, 0x106aa
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push edi
push ebx
add esp, 4
call 0x564468
add byte [edi], dh
push eax
inc esp
dec ebx
cmp dword [edx - 0x7d], ecx
les eax, [ecx + eax*4]
test dword [eax - 0x17ffffb4], 7
add byte [eax + 0x44], dl
dec esi
cmp ecx, dword [ebp + 0x41]
add esp, 4
sub edi, 0xba5b
pop edi
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x5644aa
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f0], ecx
jmp 0x56450d
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x5643c9
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x5643c9
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x5644f7
mov dword [ebp - 0x15ec], 0xffffffff
jmp 0x564501
mov dword [ebp - 0x15ec], 1
mov eax, dword [ebp - 0x15ec]
mov dword [ebp - 0x15f0], eax
cmp dword [ebp - 0x15f0], 0
jne 0x564556
push edi
xor edi, 0x47b0
and edi, 0xa695
pop edi
push edi
push ebx
add esp, 4
jmp 0x564530
call 0x56453e
add byte [eax + ecx*2], dh
dec eax
cmp byte [ebx + esi + 0x47], al
xor eax, dword [ebx - 0x307efb3c]
or ah, byte [ebx]
add byte [edi - 0x75], bl
invalid
push ecx
add ecx, 0x3b48
jmp 0x564564
jmp 0x564569
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x737f
bnd jg 0x5645e6
add byte [eax], al
pop edx
push eax
push edx
add esp, 4
jmp 0x564581
xor eax, 0x4937
pop eax
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x5645b4
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x56436a
mov dword [ebp - 0x750], 0
push eax
call 0x5645cf
add byte [edi + eax*2 + 0x37], al
xor ecx, dword [esi + 0x42]
xor eax, 0x83474139