Function at 0x1000360f
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ecx
add esp, 4
or ebx, 0x16e7d
or ebx, 0x68a
or ebx, 0xbd12
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0xbde7
pop ebx
push esi
and esi, 0x1686c
or esi, 0x165a5
pop esi
cmp dword [ebp - 0x2a4], 0
jne 0x10003e45
mov edx, 0x6b
mov word [ebp - 0x1654], dx
mov eax, 0x65
mov word [ebp - 0x1652], ax
mov ecx, 0x72
mov word [ebp - 0x1650], cx
mov edx, 0x6e
mov word [ebp - 0x164e], dx
mov eax, 0x65
mov word [ebp - 0x164c], ax
mov ecx, 0x6c
mov word [ebp - 0x164a], cx
mov edx, 0x33
mov word [ebp - 0x1648], dx
mov eax, 0x32
mov word [ebp - 0x1646], ax
mov ecx, 0x2e
mov word [ebp - 0x1644], cx
mov edx, 0x64
mov word [ebp - 0x1642], dx
mov eax, 0x6c
mov word [ebp - 0x1640], ax
mov ecx, 0x6c
mov word [ebp - 0x163e], cx
xor edx, edx
mov word [ebp - 0x163c], dx
push eax
push eax
add esp, 4
and eax, 0x63db
add eax, 0x6e7d
xor eax, 0xf0da
pop eax
push esi
call 0x1000360f
add byte [ebp + 0x39], cl
dec esp
dec esi
inc esi
xor eax, 0x83373845
les eax, [ecx + eax*4]
mov byte [edx], 0xce
add byte [eax], al
pop esi
mov byte [ebp - 0x85c], 0x4c
mov byte [ebp - 0x85b], 0x6f
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c14], eax
mov ecx, dword [ebp - 0x1c14]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c18], edx
mov eax, dword [ebp - 0x1c18]
mov dword [ebp - 0x154c], eax
push eax
push edx
add esp, 4
and eax, 0xd387
jmp 0x100036ae
or eax, 0x33f9
add eax, 0xf895
pop eax
push edx
push esi
add esp, 4
and edx, 0x1698f
sub edx, 0x72d3
pop edx
cmp dword [ebp - 0x154c], 0
jne 0x100036e5
mov dword [ebp - 0x74c], 0
jmp 0x1000398c
mov ecx, dword [ebp - 0x154c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push ebx
or ebx, 0x70db
sub ebx, 0x6d88
call 0x10003711
add byte [eax + 0x38], dl
dec esi
dec esp
inc edi
aaa
xor eax, 0x5b04c483
push esi
add esi, 0xbfb5
or esi, 0x29c9
and esi, 0x27d1
pop esi
cmp dword [ebp - 0xc54], 0
jne 0x10003741
mov dword [ebp - 0x74c], 0
jmp 0x1000398c
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
push eax
and eax, 0x169c5
and eax, 0x13472
pop eax
push edi
push edx
add esp, 4
sub edi, 0x179bb
jmp 0x1000376c
pop edi
push ebx
jmp 0x10003777
jmp 0x1000377e
pop ebx
lea edx, [ebp - 0x1654]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc4c], ecx
xor edx, edx
mov word [ebp - 0x1bc], dx
xor eax, eax
mov word [ebp - 0x30], ax
push edx
call 0x100037ba
add byte [ebx + edi], dh
xor bh, byte [ecx]
xor cl, byte [eax + 0x46]
push eax
dec eax
xor eax, 0x5a04c483
push ebx
push esi
add esp, 4
or ebx, 0x366e
jmp 0x100037ce
xor ebx, 0x404a
and ebx, 0x5d28
pop ebx
mov ecx, dword [ebp - 0xc4c]
mov dx, word [ecx]
mov word [ebp - 0xfc6], dx
mov eax, dword [ebp - 0xc4c]
add eax, 2
mov dword [ebp - 0xc4c], eax
mov cx, word [ebp - 0xfc6]
mov word [ebp - 0x1bc], cx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xfc8], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xfc8]
mov word [ebp - 0x30], dx
push edx
push eax
add esp, 4
jmp 0x1000383d
and edx, 0x11b3a
pop edx
push edi
push edx
add esp, 4
and edi, 0x3463
sub edi, 0xbeb7
pop edi
push eax
xor eax, 0x247
xor eax, 0x1580b
pop eax
movzx eax, word [ebp - 0x30]
test eax, eax
jne 0x10003881
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
sub ecx, edx
mov dword [ebp - 0x1554], ecx
jmp 0x100038db
movzx eax, word [ebp - 0x1bc]
movzx ecx, word [ebp - 0x30]
cmp eax, ecx
je 0x100037a9
movzx edx, word [ebp - 0x1bc]
xor edx, 0x20
movzx eax, word [ebp - 0x30]
inc ebp
sar byte [ebx], 1
ror byte [edi], 1
test bh, bh
invalid
invalid
invalid
movzx ecx, word [ebp - 0x1bc]
movzx edx, word [ebp - 0x30]
cmp ecx, edx
jge 0x100038c5
mov dword [ebp - 0x1550], 0xffffffff
jmp 0x100038cf
mov dword [ebp - 0x1550], 1
mov eax, dword [ebp - 0x1550]
mov dword [ebp - 0x1554], eax
cmp dword [ebp - 0x1554], 0
jne 0x10003924
push edi
add edi, 0x4b8b
pop edi
push esi
push ecx
add esp, 4
xor esi, 0x3c4d
and esi, 0x37a3
call 0x1000390b
add byte [ebx], dh
cmp cl, byte [esi + 0x36]
aas
cmp byte [edi], dh
cmp byte [ebx + 0x5eb04c4], al
inc esp
aaa
dec esi
dec eax
dec esi
pop esi
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0x74c], ecx
jmp 0x1000398c
push ebx
push edi
add esp, 4
and ebx, 0x2987
pop ebx
push edx
xor edx, 0x13630
pop edx
push edi
push ecx
add esp, 4
and edi, 0x11e12
xor edi, 0x30e6
or edi, 0x155b
xor edi, 0xadd
neg ebp
or al, byte [eax]
add byte [edi - 0x75], bl
xchg ebp, eax
xor bl, bh
invalid
dec dword [ebx + 0x30858902]
xor bl, bh
invalid
dec dword [ebx - 0x4cf73]
invalid
cmp ecx, dword [ebp - 0xc54]
je 0x10003982
mov edx, dword [ebp - 0x4d0]
cmp dword [edx + 0x30], 0
jne 0x1000374d
invalid
invalid
mov dword [ebp - 0x74c], 0
push eax
call 0x1000399b
add byte [edx + 0x50], cl
cmp eax, 0x3748414f
cmp eax, 0x8104c483
invalid