Function at 0x410c90
Capabilities:
Authenticate hmac
Check for peb ntglobalflag flag
Get number of processors

Disassembly:
or byte [eax], 0x49
push es
outsd dx, dword [esi]
dec ecx
add cl, byte [ecx]
jnp 0x410c9c
dec ecx
sbb byte [ecx], cl
jnp 0x410ca5
and al, 0
add dword [ebx + 1], edi
xor byte [ecx - 0x18], al
pop es
outsd dx, dword [esi]
dec ecx
add al, 0x49
add dword [eax], esi
inc ecx
call 0x48a7bb4
dec ecx
xchg byte [eax + 0x41064910], al
add esi, dword [eax]
dec ecx
add al, 0x22
sbb dword [ebx + 0x65], esp
jb 0x410d32
imul esp, dword [esi + 0x69], 0x69766163
js 0x410d29
jb 0x410d2a
jae 0x410d34
insb byte es:[edi], dx
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
add byte [ecx + 0x30], cl
and ah, byte [eax]
push 0x3a707474
das
das
arpl word [ebp + 0x72], sp
je 0x410d53
imul sp, word [ebx + 0x61], 0x6976
js 0x410d54
jb 0x410d55
jae 0x410d5f
insb byte es:[edi], dx
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x7b]
add al, 0x6f
dec ecx
add al, 0x49
xchg byte [eax + 0x41064910], al
add esi, dword [eax]
dec ecx
add al, 0x22
adc eax, 0x74726563
imul esp, dword [esi + 0x69], 0x73657571
push 0x61
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
dec ecx
add byte [ecx + 0x30], cl
and bl, byte [eax + ebp*2]
je 0x410da7
je 0x410da4
jo 0x410d6f
cmp ch, byte [edi]
das
das
arpl word [ebp + 0x72], sp
je 0x410da5
imul si, word [ecx + 0x75], 0x7365
push 0x61
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x7b]
add al, 0x6f
dec ecx
add al, 0x49
xchg byte [eax + 0x41064910], al
adc byte [eax], 0x49
adc byte [ecx + 6], cl
dec ecx
push es
inc ecx
add esi, dword [eax]
dec ecx
add al, 0x22
push cs
arpl word [ebp + 0x72], sp
je 0x410dcc
jb 0x410dd6
imul esp, dword [edi + 0x6e], 0x6d6f632e
outsb dx, byte [si]
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
add byte [ecx + 0x30], cl
and dl, byte [0x70747468]
cmp ch, byte [edi]
das
arpl word [ebp + 0x72], sp
je 0x410dec
outsb dx, byte [si]
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x7b]
add al, 0x6f
dec ecx
add al, 0x49
xchg byte [eax + 0x41064910], al
add esi, dword [eax]
dec ecx
add al, 0x22
adc byte [ebx + 0x65], ah
jb 0x410e16
imul ebp, dword [ecx + ebp*2 + 0x6e], 0x6f632e6b
imul ebp, dword [esi + 0x6b], 0x6d6f632e
outsb dx, byte [esi]
imul ebp, dword [esi], 0x63
outsd dx, dword [esi]
arpl word cs:[edi + 0x6d], bp
insd dword es:[edi], dx
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
add byte [ecx + 0x30], cl
and dl, byte [edi]
push 0x3a707474
das
das
arpl word [ebp + 0x72], sp
je 0x410e2e
insb byte es:[edi], dx
imul ebp, dword [esi + 0x6b], 0x6d6f632e
insd dword es:[edi], dx
bound esi, qword cs:[edx + 0x7b]
add al, 0x6f
dec ecx
add al, 0x49
xchg byte [eax + 0x41064910], al
add esi, dword [eax]
dec ecx
add al, 0x22
packsswb mm4, qword [ebp + 0x72]
je fcn.00410e50
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word cs:[edi + 0x6d], bp
outsd dx, dword [esi]
insd dword es:[edi], dx
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
add byte [ecx + 0x30], cl
and dl, byte [esi]
push 0x3a707474
das
das
arpl word [ebp + 0x72], sp
je 0x410e71
outsd dx, dword [esi]
outsb dx, byte [esi]
arpl word cs:[edi + 0x6d], bp
bound esi, qword cs:[edx + 0x7b]
add al, 0x6f
dec ecx
add al, 0x49
xchg byte [eax + 0x41064910], al
add esi, dword [eax]
dec ecx
add al, 0x22
packsswb mm4, qword [ebp + 0x72]
je 0x410e92
jae 0x410e96
jns 0x410e5b
arpl word [edi + 0x6d], bp
outsd dx, dword [esi]
insd dword es:[edi], dx
bound esi, qword cs:[edx + 0x24]
add byte [ebx], al
dec ecx
or al, 0x49
add byte [ecx + 0x30], cl
and dl, byte [esi]
push 0x3a707474
das
das
arpl word [ebp + 0x72], sp
je 0x410eb3
jae 0x410eb7
jns 0x410e7c
arpl word [edi + 0x6d], bp
adc byte [eax], 0x49
push es
inc ecx
outsd dx, dword [esi]
insd dword es:[edi], dx
bound esi, qword [edx + 0x7b]
outsd dx, dword [esi]