Function at 0x419547
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edi
push ecx
jmp 0x418e16
call 0x418e26
add byte [ebx + 0x40], cl
aas
dec ebx
xor ecx, dword [ecx + 0x4d]
dec ebp
inc ecx
add esp, 4
jmp 0x418e2e
pop ecx
jmp 0x419062
push ebx
push eax
add esp, 4
or ebx, 0x10ca1
jmp 0x419073
pop ebx
push edi
push edx
add esp, 4
jmp 0x419081
sub edi, 0x566b
xor edi, 0xf522
or edi, 0x956b
pop edi
mov dword [ebp - 0xab8], 0
push ecx
and ecx, 0x17644
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x1b4a
jmp 0x4190b8
call 0x4190c6
add byte [ebx], dh
inc edi
xor bh, byte [esi]
cmp byte [esp + esi + 0x4b], cl
add esp, 4
add ecx, 0x5d79
pop ecx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push eax
add eax, 0x4531
pop eax
push ecx
jmp 0x419132
jmp 0x41913a
call 0x41914a
add byte [ebx], dh
dec eax
cmp eax, 0x43413d3a
cmp eax, dword [edi + 0x4d]
add esp, 4
pop ecx
push edx
sub edx, 0x9123
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push edx
and edx, 0x5b93
and edx, 0x16151
and edx, 0x128e1
pop edx
push edx
push eax
add esp, 4
and edx, 0x1530
xor edx, 0xa1bf
and edx, 0x59cd
and edx, 0xe3ea
pop edx
push ecx
jmp 0x41922a
sub ecx, 0x16dbf
and ecx, 0x5bb8
pop ecx
push esi
and esi, 0x13b81
pop esi
push edi
and edi, 0xd947
and edi, 0xda4c
or edi, 0xc1fe
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push esi
sub esi, 0x7cf0
add esi, 0x13890
add esi, 0xb5bc
xor esi, 0x12a3d
pop esi
push eax
push edx
add esp, 4
or eax, 0x3e29
and eax, 0x12f6
sub eax, 0x10cba
pop eax
cmp dword [ebp - 0x15d8], 0
jne 0x4192c5
mov dword [ebp - 0x31c], 0
jmp 0x419581
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push ecx
push edx
add esp, 4
call 0x4192ea
add byte [esi], bh
dec edi
cmp cl, byte [ebp + 0x4f]
cmp esi, dword [0x4c48342]
sub ecx, 0x386e
call 0x4192ff
add byte [esi], dh
aaa
inc eax
aas
dec ebp
inc edi
add esp, 4
or ecx, 0x9815
pop ecx
cmp dword [ebp - 0xc98], 0
jne 0x419321
mov dword [ebp - 0x31c], 0
jmp 0x419581
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push edx
push ebx
add esp, 4
sub edx, 0x334
or edx, 0x30d
xor edx, 0x7521
pop edx
push edi
sub edi, 0x11885
and edi, 0x1005
xor edi, 0x17389
and edi, 0x1141a
pop edi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push esi
xor esi, 0x14bbe
xor esi, 0xea
sub esi, 0x7ca5
jmp 0x4193a5
pop esi
push eax
push edi
add esp, 4
xor eax, 0x104af
sub eax, 0xd2e
sub eax, 0xa270
pop eax
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push eax
push edi
add esp, 4
call 0x419429
add byte [ecx + ecx*2], bh
cmp dword [esi + 0x3d], ecx
xor al, 0x83
les eax, [ecx + eax*4]
enter 0xfffffffffffffffa, 0
add byte [eax + 0x53], bl
push eax
add esp, 4
xor ebx, 0xa9fe
jmp 0x419443
xor ebx, 0xfb55
pop ebx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x41946d
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x4194d0
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x41938c
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x41938c
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4194ba
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x4194c4
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x419519
push eax
and eax, 0x11b8c
add eax, 0x13b54
pop eax
push edi
push ebx
add esp, 4
jmp 0x4194f2
call 0x419501
add byte [eax], bh
inc edi
cmp eax, 0x41404d48
cmp dh, byte [esi]
add esp, 4
jmp 0x41950a
pop edi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x419581
push ecx
push eax
add esp, 4
jmp 0x419526
or ecx, 0x15859
and ecx, 0x19e6
or ecx, 0x7ce1
pop ecx
push edi
call 0x419547
add byte [esp + ecx*2 + 0x4f], cl
xor eax, 0x83473a32
les eax, [edi + ebx*2]
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x419577
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x41932d
mov dword [ebp - 0x31c], 0
push edi
and edi, 0x12ee6
add edi, 0x157f7
and edi, 0x7753
or edi, 0x104b4
pop edi
push ebx
push esi
add esp, 4
or ebx, 0x5c8f
pop ebx
push esi
push edx
add esp, 4
sub esi, 0x29f8
pop esi
cmp dword [ebp - 0x31c], 0
jne 0x419ecc
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push ebx
add ebx, 0x3c40
and ebx, 0x1dbe
xor ebx, 0x18387
add ebx, 0x322
pop ebx
push edx
push ecx
add esp, 4
or edx, 0x10ba6
or edx, 0x6733
add edx, 0x13247
pop edx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push esi
push edi
add esp, 4
or esi, 0x180e9
pop esi
push edi
sub edi, 0xcd4e
pop edi
push eax
push edi
add esp, 4
xor eax, 0x5038
pop eax
push eax
push edx
add esp, 4
and eax, 0x4f5a
xor eax, 0x10c0c
pop eax
cmp dword [ebp - 0x15e4], 0
jne 0x419757
mov dword [ebp - 0x750], 0
jmp 0x419a13
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push esi
and esi, 0xbb54
sub esi, 0x15efd
pop esi
push edi
xor edi, 0x451
pop edi
push edi
or edi, 0x138f2
or edi, 0x5e5c
add edi, 0x16aec
jmp 0x41979a
pop edi
cmp dword [ebp - 0xca4], 0
jne 0x4197b3
mov dword [ebp - 0x750], 0
jmp 0x419a13
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push ecx
and ecx, 0x7f63
pop ecx
push ebx
call 0x4197d5
add byte [ebx + 0x3e], al
dec ebp
push eax
cmp eax, 0xc483463c
add al, 0x81
jmp 0x41982f
push edx
push eax
add esp, 4
call 0x419830
add byte [edi], bh
dec eax
cmp dword [esi + 0x3b], eax
dec esi
xor al, 0x83
les eax, [edx + ebx*2]
push eax
call 0x419844
add byte [ebp + 0x47], al
inc edi
xor al, 0x46
aaa
dec edi
dec esi
dec ebp
add esp, 4
pop eax
push ebx
and ebx, 0x168e3
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push ecx
push edx
add esp, 4
sub ecx, 0x8d45
pop ecx
push edx
call 0x4198c6
add byte [edi], bh
aaa
inc ecx
inc ebx
dec ecx
dec edx
inc ebx
inc esp
inc edi
add esp, 4
call 0x4198d8
add byte [ebp + 0x34], cl
aas
push eax
cmp al, 0x48
cmp al, byte [edx + 0x44]
add esp, 4
pop edx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x4198ff
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x419962
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x41981e
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x41981e
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x41994c
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x419956
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x4199ab
push ebx
push eax
add esp, 4
and ebx, 0xa000
sub ebx, 0x16879
or ebx, 0x15bee
pop ebx
push edi
xor edi, 0x16b25
xor edi, 0xf348
add edi, 0xd077
and edi, 0x6ac1
pop edi
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x419a13
push ebx
jmp 0x4199b5
jmp 0x4199bc
pop ebx
push edx
add edx, 0x2b1e
xor edx, 0xe048
call 0x4199d9
add byte [ecx + 0x3b], cl
inc ebx
aas
dec ebx
dec esi
add esp, 4
pop edx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x419a09
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x4197bf
mov dword [ebp - 0x750], 0
push edi
push ebx
add esp, 4
or edi, 0x8327
xor edi, 0x13e5c
sub edi, 0x131b7
pop edi
push ebx
sub ebx, 0x736e
xor ebx, 0xb839
or ebx, 0x1d98
or ebx, 0x12ab6
pop ebx
cmp dword [ebp - 0x750], 0
jne 0x419a8f
push ecx
and ecx, 0x118c3
sub ecx, 0xb795
xor ecx, 0x13898
pop ecx
push edx
push eax
add esp, 4
or edx, 0x13e2b
add edx, 0x158d7
pop edx
push eax
push edx
add esp, 4
and eax, 0xaf70
pop eax
mov dword [ebp - 0x79c], 0
jmp 0x41a5b6
push ecx
push ecx
add esp, 4
call 0x419aa2
add byte [eax + eax*2 + 0x4c], al
inc ebp
inc ecx
inc ebx
add esp, 4
add ecx, 0x572e
pop ecx
push esi
call 0x419abd
add byte [edi], bh
dec esp
aas
cmp dword [ebx + 0x3b], eax
inc esp
inc ebx
push eax
xor al, byte [ebx - 0x74a1fb3c]
test dword [eax - 0x74000008], esi
dec eax
sbb byte [ecx - 0x31f73], cl
inc edi
test dword [eax + 0xfffff8], esp
add byte [eax], al
add byte [ebx - 0x31f6b], cl
dec dword [ecx - 0x15ef6b]
inc dword [ebx - 0x15ef43]
inc dword [eax]
jne 0x419b00
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x419df1
mov ecx, dword [ebp - 0x15f0]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f4], edx
jne 0x419b28
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x419df1
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15f4]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f8], ecx
cmp dword [ebp - 0x15f8], 0
jne 0x419b5a
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
jmp 0x419df1
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x754], eax
jne 0x419b7f
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x419df1
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
invalid