Function at 0x416981
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
xor edx, 0x12d70
xor edx, 0x111da
or edx, 0x12331
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15bc], eax
push ebx
push esi
add esp, 4
sub ebx, 0x4412
sub ebx, 0x7d49
or ebx, 0x3edd
pop ebx
push edi
and edi, 0x5a13
sub edi, 0x15928
or edi, 0x13f1f
xor edi, 0x4f5b
pop edi
mov dword [ebp - 0x2088], 0xffffffff
push edx
push edi
add esp, 4
call 0x416298
add byte [esi + 0x3e], cl
dec ecx
inc ebp
cmp eax, dword [edx + 0x33]
inc ebx
dec eax
add esp, 4
or edx, 0x14537
pop edx
push eax
sub eax, 0x21ea
or eax, 0x7275
add eax, 0x496e
pop eax
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x4fc], ecx
jmp 0x4162d3
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push edx
push ecx
add esp, 4
xor edx, 0x170fd
xor edx, 0x38d
pop edx
push edi
push edi
add esp, 4
sub edi, 0x1ed4
add edi, 0x178bd
and edi, 0x2b30
pop edi
push edi
sub edi, 0x17074
pop edi
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x41634d
push eax
push ecx
add esp, 4
or eax, 0x110d2
add eax, 0x7628
sub eax, 0x4cb4
pop eax
push ebx
add ebx, 0x162c0
and ebx, 0x2117
pop ebx
push edi
push esi
add esp, 4
sub edi, 0xf6cb
pop edi
jmp 0x41657b
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xa60], ecx
push ebx
call 0x416373
add byte [ebx], bh
xor eax, 0x4c3b3236
dec edx
cmp eax, 0x5b04c483
push ebx
sub ebx, 0xda11
pop ebx
push edx
or edx, 0x83d7
xor edx, 0xc950
pop edx
push edx
or edx, 0x491
pop edx
mov edx, dword [ebp - 0x15bc]
mov dword [ebp - 0xac0], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15bc]
jne 0x4163fc
push edi
push eax
add esp, 4
call 0x4163cd
add byte [ebx], bh
cmp byte [esi], bh
cmp bh, byte [0x3b374a4c]
add esp, 4
and edi, 0x7ad0
pop edi
push edx
xor edx, 0x11351
jmp 0x4163e4
or edx, 0xb7bd
pop edx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], ecx
jmp 0x41652d
cmp dword [ebp - 0xc80], 0
jle 0x416521
push esi
push eax
add esp, 4
and esi, 0x170d
and esi, 0xc657
add esi, 0x16aed
pop esi
push edi
and edi, 0x756e
call 0x416437
add byte [esi + 0x3f], al
cmp al, 0x44
inc esp
dec esi
dec edx
dec edx
inc esp
add esp, 4
pop edi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xac0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4164bd
push esi
xor esi, 0x123bf
add esi, 0x13685
or esi, 0xf94e
or esi, 0x87da
pop esi
push edi
push edi
add esp, 4
sub edi, 0x13a07
xor edi, 0x5934
sub edi, 0x4c14
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4164a5
mov dword [ebp - 0x15c0], 1
jmp 0x4164af
mov dword [ebp - 0x15c0], 0xffffffff
mov ecx, dword [ebp - 0x15c0]
mov dword [ebp - 0xc84], ecx
jmp 0x416521
push ecx
push eax
add esp, 4
and ecx, 0x55f5
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x164da
pop ebx
push esi
sub esi, 0xdb3f
jmp 0x4164e2
or esi, 0x74fd
and esi, 0xc778
pop esi
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0xac0]
add ecx, 1
mov dword [ebp - 0xac0], ecx
jmp 0x4163fc
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], edx
cmp dword [ebp - 0x15c4], 0
jne 0x416576
push ecx
push ebx
add esp, 4
jmp 0x416544
xor ecx, 0x417f
xor ecx, 0x42b6
pop ecx
push eax
call 0x41655e
add byte [edi], dh
inc eax
cmp edi, dword [0xc4834132]
add al, 0x81
call fcn.00429e3a
pop eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3f8], eax
jmp 0x4165b7
jmp 0x4162c4
push ecx
push ebx
add esp, 4
call 0x41658f
add byte [ebx + 0x48], cl
xor al, 0x42
aaa
inc esi
inc edx
cmp bh, byte [ebx]
add esp, 4
xor ecx, 0x1698f
sub ecx, 0x98ab
sub ecx, 0xea3d
pop ecx
push edx
add edx, 0x12bb0
pop edx
mov dword [ebp - 0x3f8], 0
push eax
jmp 0x4165c0
pop eax
push ebx
push ecx
add esp, 4
sub ebx, 0xe73c
sub ebx, 0xc4c3
add ebx, 0x10e7c
call 0x4165e5
add byte [esi + 0x3e], cl
inc edx
inc eax
dec esi
dec edx
add esp, 4
pop ebx
push eax
push eax
add esp, 4
or eax, 0x164f1
and eax, 0x11bc2
sub eax, 0x6eba
pop eax
push eax
sub eax, 0x4a5b
sub eax, 0x243
sub eax, 0xedf7
or eax, 0x684d
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15c8], eax
push eax
sub eax, 0x17e0a
call 0x416647
add byte [0x3f4a3a46], bh
inc esi
cmp eax, dword ss:[ebp + 0x49]
add esp, 4
pop eax
push eax
push edi
add esp, 4
or eax, 0x6ed5
pop eax
push ecx
jmp 0x416661
pop ecx
mov dword [ebp - 0x208c], 0xffffffff
push esi
push ebx
add esp, 4
call 0x41667f
add byte [edx + ecx*2 + 0x3d], al
cmp dword ds:[eax + 0x44], ecx
cmp dword [ebx + 0x7e804c4], eax
add byte [eax], al
add byte [eax], al
xor bh, byte [0x4e39503e]
add esp, 4
or esi, 0x28c6
jmp 0x41669d
pop esi
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x500], ecx
jmp 0x4166bb
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push esi
push esi
add esp, 4
add esi, 0xeaa8
or esi, 0x291a
pop esi
push esi
sub esi, 0xc55
call 0x4166e3
add byte [0x44345040], dh
dec eax
inc edi
inc edx
inc edi
add esp, 4
xor esi, 0x143b
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x416735
push esi
push ebx
add esp, 4
add esi, 0xb2fd
add esi, 0xd56c
or esi, 0x7618
add esi, 0xa33
pop esi
push ebx
add ebx, 0x11b1a
and ebx, 0x92cc
xor ebx, 0x6ee
pop ebx
jmp 0x416963
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push edi
add edi, 0x30cd
pop edi
push ecx
push edx
add esp, 4
jmp 0x416761
and ecx, 0xd292
call 0x416773
add byte [edx + 0x3c], al
inc ebp
inc ebp
aaa
inc esp
add esp, 4
xor ecx, 0x96e0
pop ecx
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x4167e4
push ebx
push esi
add esp, 4
or ebx, 0xbacc
xor ebx, 0x1351
pop ebx
push esi
push edx
add esp, 4
jmp 0x4167c0
sub esi, 0xf2aa
add esi, 0x13887
and esi, 0x15869
pop esi
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x416915
cmp dword [ebp - 0xc88], 0
jle 0x416909
push ecx
xor ecx, 0x15f11
call 0x416808
add byte [eax + 0x4d], dl
cmp ecx, dword [edi + 0x4f]
inc edx
aaa
inc esp
cmp bh, byte [edx]
add esp, 4
pop ecx
push ebx
or ebx, 0xa597
xor ebx, 0x13076
pop ebx
push edi
jmp 0x416822
pop edi
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4168a5
push edx
xor edx, 0x27f4
and edx, 0x2b3f
xor edx, 0x182af
xor edx, 0x836c
pop edx
push ecx
push esi
add esp, 4
and ecx, 0x2f30
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0x7787
pop edi
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41688d
mov dword [ebp - 0x15cc], 1
jmp 0x416897
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x416909
push edi
jmp 0x4168ad
call 0x4168bc
add byte [eax], bh
xor dh, byte [ebx]
cmp dword [eax + 0x34], eax
xor esi, dword [0x4c48340]
pop edi
push ecx
xor ecx, 0xe7c2
or ecx, 0x1716
jmp 0x4168d6
pop ecx
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xab8]
add ecx, 1
mov dword [ebp - 0xab8], ecx
jmp 0x4167e4
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], edx
cmp dword [ebp - 0x15d0], 0
inc dword [eax]
jne 0x41695e
push esi
and esi, 0x14008
jmp 0x41692d
jmp 0x416934
pop esi
push edx
add edx, 0x4f9b
jmp 0x416941
pop edx
push esi
or esi, 0xe674
and esi, 0x561
pop esi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab4], eax
jmp 0x41699f
jmp 0x4166ac
push edi
jmp 0x41696d
and edi, 0x10ed9
call 0x416981
add byte [ecx], bh
inc eax
dec esi
inc esp
dec ebp
inc edi
inc eax
cmp byte [ebx - 0x107efb3c], al
jecxz 0x41691a
add byte [eax], al
pop edi
push ecx
jmp 0x416994
pop ecx
mov dword [ebp - 0xab4], 0
push esi
xor esi, 0x6976
add esi, 0xd3d2
pop esi
push ecx
push esi
add esp, 4
sub ecx, 0x143a2
jmp 0x4169be
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0xd72f
or ecx, 0x178f4
pop ecx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push edx
add edx, 0xcbdc
jmp 0x416a32
xor edx, 0xf9a6
or edx, 0xf47
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0xdd7c
add ecx, 0x9e69
and ecx, 0x162eb
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1734], cx
mov edx, 0x65
mov word [ebp - 0x1732], dx
mov eax, 0x72
mov word [ebp - 0x1730], ax
mov ecx, 0x6e
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
insb byte es:[edi], dx
add byte [eax], al
add byte [esi - 0x77], ah
xchg ebp, eax
loopne 0x416ac1
invalid
invalid
mov eax, 0x6c