Function at 0x409be5
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1a0], ecx
push edi
push ebx
add esp, 4
sub edi, 0xab9
and edi, 0xcf8b
pop edi
push eax
push esi
add esp, 4
sub eax, 0x145ba
pop eax
push eax
sub eax, 0x18642
and eax, 0x6610
and eax, 0xa596
pop eax
mov edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x228], 0
push ecx
call 0x4099f9
add byte [edx], dh
xor eax, 0x4f49493b
cmp dword [esi], esi
dec ebp
add esp, 4
pop ecx
push ebx
call 0x409a0b
add byte [ecx + 0x39], cl
cmp cl, byte [esi + 0x3c]
dec eax
dec ecx
add esp, 4
or ebx, 0x3320
sub ebx, 0x4ed
pop ebx
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x409a69
push edx
add edx, 0xd204
jmp 0x409a35
call 0x409a41
add byte [eax + edi], dh
inc esi
inc ebx
cmp al, byte ss:[ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
dec edi
cmp byte [esi + 0x46], cl
inc esp
cmp eax, 0x4d4f3a39
add esp, 4
pop edx
mov ecx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], ecx
jmp 0x409c01
cmp dword [ebp - 0x224], 0
jle 0x409bc3
push ecx
push esi
add esp, 4
call 0x409a8a
add byte [0x4d384040], bh
dec ebx
dec esi
dec ecx
inc ecx
add esp, 4
pop ecx
push eax
and eax, 0x7ab4
or eax, 0x106f6
sub eax, 0xf6a
xor eax, 0xfd91
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x409b2d
push ebx
jmp 0x409ac5
pop ebx
push edx
push eax
add esp, 4
xor edx, 0xe593
add edx, 0xd288
xor edx, 0x6e05
pop edx
push ebx
push esi
add esp, 4
and ebx, 0xb18
xor ebx, 0x183c8
pop ebx
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x409b12
mov dword [ebp - 0x2e4], 1
jmp 0x409b1c
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x409bc3
push edi
push edx
add esp, 4
add edi, 0x151be
sub edi, 0xb13c
sub edi, 0x185ae
sub edi, 0xfb2c
pop edi
push edx
call 0x409b5b
add byte [edi], dh
inc esp
inc edi
aaa
cmp bh, byte [0x83354742]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push edi
push ebx
add esp, 4
or edi, 0x16f58
add edi, 0x6b41
pop edi
push edx
push eax
add esp, 4
xor edx, 0x91b0
add edx, 0x348
xor edx, 0x6277
pop edx
push edi
add edi, 0xda17
pop edi
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x409a69
push edx
push eax
add esp, 4
add edx, 0x210f
pop edx
push ecx
or ecx, 0x51c3
call 0x409be5
add byte [esp + ecx*2], bh
inc eax
cmp dword ds:[ebp + 0x50], eax
dec ecx
dec eax
add esp, 4
or ecx, 0x3ed4
xor ecx, 0x124a9
pop ecx
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x409c7c
push ecx
jmp 0x409c14
jmp 0x409c1d
pop ecx
push esi
push esi
add esp, 4
and esi, 0xacac
and esi, 0x4cb7
pop esi
push edx
push edi
add esp, 4
sub edx, 0x1829f
pop edx
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
push ebx
push ebx
add esp, 4
call 0x409c56
add byte [eax + 0x47], cl
inc ebp
inc edx
dec esi
cmp eax, 0x8104c483
jmp 0x409c82
push esi
push ebx
add esp, 4
jmp 0x409c87
add al, 0x42
inc esp
inc esi
add esi, 0xfc48
pop esi
push eax
and eax, 0x482b
xor eax, 0x152cb
jmp 0x409ca1
pop eax
push ebx
push edx
add esp, 4
or ebx, 0x13424
pop ebx
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x409cc1