Function at 0x1000d417
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add dword gs:[eax], eax
pop ecx
push ecx
and ecx, 0x8005
jmp 0x1000d0a2
pop ecx
push ecx
push eax
add esp, 4
sub ecx, 0x30dd
sub ecx, 0x15efe
sub ecx, 0xc3da
pop ecx
cmp dword [ebp - 0xcc8], 0
jne 0x1000d0d3
mov dword [ebp - 0x2f4], 0
jmp 0x1000d31e
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push eax
push eax
add esp, 4
jmp 0x1000d0e9
add eax, 0x31e7
jmp 0x1000d0f4
pop eax
push ebx
sub ebx, 0x4e03
add ebx, 0xdcf2
add ebx, 0xe3b1
jmp 0x1000d110
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
push ecx
add esp, 4
or edx, 0x1222d
xor edx, 0x293f
pop edx
push ebx
sub ebx, 0x1731c
pop ebx
push ebx
push eax
add esp, 4
sub ebx, 0xa184
jmp 0x1000d166
xor ebx, 0x11140
pop ebx
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push ebx
push ebx
add esp, 4
or ebx, 0x17470
pop ebx
push ecx
sub ecx, 0x13969
pop ecx
push edi
push edx
add esp, 4
call 0x1000d1ec
add byte [ebx + 0x47], al
inc esp
dec esi
cmp dword [edx], edi
cmp al, 0x34
dec eax
add esp, 4
xor edi, 0x16261
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x1000d213
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x1000d26d
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x1000d13b
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x1000d13b
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x1000d257
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x1000d261
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x1000d2b6
push ebx
push esi
add esp, 4
and ebx, 0x15a3c
add byte [ecx + 0x11727cb], al
add byte [ecx + 0x6bd5eb], al
add byte [ecx + 0x5617e3], al
add byte [ebx + 0x56], bl
and esi, 0xcf95
pop esi
push esi
push ecx
add esp, 4
or esi, 0x9da4
pop esi
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2f4], ecx
jmp 0x1000d31e
push eax
push ebx
add esp, 4
add eax, 0x103ec
pop eax
push esi
push ecx
add esp, 4
or esi, 0x1d7b
pop esi
push edx
or edx, 0x393c
and edx, 0x44b8
pop edx
push ebx
push ebx
add esp, 4
and ebx, 0x17ba2
pop ebx
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x1000d314
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x1000d0df
mov dword [ebp - 0x2f4], 0
push ebx
push edx
add esp, 4
and ebx, 0xe890
pop ebx
push edx
xor edx, 0x9330
pop edx
push ecx
push esi
add esp, 4
xor ecx, 0x4f21
pop ecx
push eax
jmp 0x1000d347
pop eax
push edi
add edi, 0x927f
pop edi
cmp dword [ebp - 0x2f4], 0
jne 0x1000dc55
mov eax, 0x6b
mov word [ebp - 0x17a0], ax
mov ecx, 0x65
mov word [ebp - 0x179e], cx
mov edx, 0x72
mov word [ebp - 0x179c], dx
mov eax, 0x6e
mov word [ebp - 0x179a], ax
mov ecx, 0x65
mov word [ebp - 0x1798], cx
mov edx, 0x6c
mov word [ebp - 0x1796], dx
mov eax, 0x33
mov word [ebp - 0x1794], ax
mov ecx, 0x32
mov word [ebp - 0x1792], cx
mov edx, 0x2e
mov word [ebp - 0x1790], dx
mov eax, 0x64
mov word [ebp - 0x178e], ax
mov ecx, 0x6c
mov word [ebp - 0x178c], cx
mov edx, 0x6c
mov word [ebp - 0x178a], dx
xor eax, eax
mov word [ebp - 0x1788], ax
push ebx
push edx
add esp, 4
sub ebx, 0x1078e
pop ebx
push ebx
or ebx, 0x4e03
call 0x1000d417
add byte [ebp + 0x35], cl
inc ebx
cmp ecx, dword [eax + ecx*2 + 0x37]
inc ecx
add esp, 4
jmp 0x1000d421
and ebx, 0xff3f
pop ebx
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x19a8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19ac]
mov dword [ebp - 0x1628], ecx
push ecx
or ecx, 0xa734
call 0x1000d4c1
add byte [edi + eax*2], bh
inc ecx
cmp eax, 0x3a444740
add esp, 4
pop ecx
push edx
call 0x1000d4d3
add byte [ebp + 0x45], al
cmp al, 0x3b
aaa
inc esi
inc edi
add esp, 4
and edx, 0x1024d
pop edx
cmp dword [ebp - 0x1628], 0
jne 0x1000d4f5
mov dword [ebp - 0x778], 0
jmp 0x1000d79c
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edx
add edx, 0xa2c0
and edx, 0x15997
pop edx
push ecx
push ebx
add esp, 4
and ecx, 0xb514
pop ecx
push eax
push edx
add esp, 4
or eax, 0x1036
add eax, 0x17be6
xor eax, 0xf83c
pop eax
cmp dword [ebp - 0xcd4], 0
jne 0x1000d551
mov dword [ebp - 0x778], 0
jmp 0x1000d79c
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push ecx
push ebx
add esp, 4
and ecx, 0x433a
add ecx, 0x1e72
sub ecx, 0x15c11
pop ecx
push esi
sub esi, 0xb10a
xor esi, 0x2d5d
add esi, 0x6789
xor esi, 0xc924
pop esi
lea eax, [ebp - 0x17a0]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
push ecx
add esp, 4
xor eax, 0x1610c
call 0x1000d5d1
add byte [esi + 0x3b], cl
cmp al, 0x4c
dec edi
xor al, 0x35
add esp, 4
pop eax
push edi
sub edi, 0x15550
jmp 0x1000d5e4
and edi, 0x2a63
pop edi
mov edx, dword [ebp - 0xccc]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xccc]
add ecx, 2
mov dword [ebp - 0xccc], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcd0]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcd0]
add edx, 2
mov dword [ebp - 0xcd0], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x3c], ax
push edx
push edx
add esp, 4
or edx, 0xe504
jmp 0x1000d653
sub edx, 0x5d5d
pop edx
push edi
push esi
add esp, 4
and edi, 0xf7ff
sub edi, 0xd4db
pop edi
push eax
add eax, 0x5c22
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x1000d691
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1670], edx
jmp 0x1000d6eb
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x1000d5b9
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x1000d5b9
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x1000d6d5
mov dword [ebp - 0x162c], 0xffffffff
jmp 0x1000d6df
mov dword [ebp - 0x162c], 1
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 0
jne 0x1000d734
push eax
or eax, 0xf820
xor eax, 0x8ce4
pop eax
push edx
push edx
add esp, 4
call 0x1000d716
add byte [esi], dh
aaa
dec esp
xor al, 0x3e
inc ecx
xor eax, 0xc4833a42
add al, 0x81
mov al, byte [0x8100013c]
retf 0x129c
push ecx
or ecx, 0x7e52
pop ecx
push esi
push ebx
add esp, 4
or esi, 0x1473a
add esi, 0x15b74
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x12a5
pop edx
push ebx
push edx
add esp, 4
jmp 0x1000d765
pop ebx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xcd4]
je 0x1000d792
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x1000d55d
mov dword [ebp - 0x778], 0
push ebx
xor ebx, 0x118f3
or ebx, 0x71be
sub ebx, 0xe5a7
pop ebx
push ecx
push edi
add esp, 4
xor ecx, 0x9b57
xor ecx, 0x13b76
and ecx, 0xa123
sub ecx, 0x183ae
pop ecx
cmp dword [ebp - 0x778], 0
jne 0x1000d818
push ecx
push edi
add esp, 4
add ecx, 0x145ef
jmp 0x1000d7e8
pop ecx
push eax
push edx
add esp, 4
add eax, 0xbc73
add eax, 0xd91e
sub eax, 0x7a94
pop eax
push ecx
sub ecx, 0x13a36
pop ecx
mov dword [ebp - 0xac0], 0
jmp 0x1000e340
push edi
xor edi, 0x14426
xor edi, 0xbd8c
sub edi, 0xe3ad
pop edi
push edx
push eax
add esp, 4
sub edx, 0xe157
or edx, 0xa3a2
or edx, 0x5402
sub edx, 0xbdc4
pop edx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x1000d889
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x1000db7a
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x1000d8b1
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x1000db7a
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x1000d8e3
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x1000db7a
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x1000d908
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x1000db7a
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19b0], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19b4], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19b8], edx
mov dword [ebp - 0x780], 0
jmp 0x1000d962