Function at 0x443691
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push edx
push eax
add esp, 4
sub edx, 0xd737
or edx, 0x1f0
jmp 0x43fc18
or edx, 0x1d2d
pop edx
push edx
xor edx, 0x339c
xor edx, 0x1060f
pop edx
push ecx
jmp 0x43fc33
pop ecx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x43fc90
invalid
mov dword [ebp - 0x149c], 1
jmp 0x43fc9a
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x442d0d
push ebx
push esi
add esp, 4
jmp 0x43fcc1
xor ebx, 0x146e4
pop ebx
push ecx
call 0x43fcd7
add byte [esi + 0x41], cl
inc ebp
inc edx
cmp byte [edi + 0x43], al
xor eax, dword [ebx - 0x367efb3c]
jmp 0x43fc74
mov dword [ebp - 0x3c0], 0
call 0x442d1c
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push esi
call 0x442d39
add byte [0x39404838], bh
dec ecx
inc ebx
dec ecx
add esp, 4
add al, 0x81
invalid
pushal
push 0x505e0001
or eax, 0x1061d
jmp 0x442d53
and eax, 0x1336f
pop eax
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push eax
and eax, 0x102c8
call 0x442d7c
add byte [ebx + 0x43], al
dec ecx
dec ebx
cmp dword [ebx + esi + 0x3b], ecx
xor al, byte [ebx - 0x177efb3c]
sub eax, 0x58000017
push ebx
push eax
add esp, 4
xor ebx, 0x158ae
xor ebx, 0xff38
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
inc eax
cld
invalid
call dword [edx + 0x50]
add esp, 4
and edx, 0x17b9e
pop edx
push ecx
push ecx
add esp, 4
and ecx, 0xf8d2
pop ecx
push ebx
or ebx, 0xf033
sub ebx, 0x11a91
or ebx, 0x3ffb
xor ebx, 0x12774
pop ebx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push eax
or eax, 0x151d6
or eax, 0xd5bb
jmp 0x442e57
pop eax
push edi
jmp 0x442e62
xor edi, 0xe0e3
or edi, 0x7757
and edi, 0x6aaa
pop edi
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push eax
push eax
add esp, 4
and eax, 0xb0a6
xor eax, 0xacfb
sub eax, 0x13fe6
add eax, 0x5fc4
pop eax
push edi
push edi
add esp, 4
jmp 0x442ed1
and edi, 0x1162b
pop edi
mov dword [ebp - 0x1fa4], 0xe
push ebx
push esi
add esp, 4
jmp 0x442eec
jmp 0x442ef4
sub ebx, 0x86b2
pop ebx
push edx
jmp 0x442f01
add edx, 0x12319
or edx, 0x17dde
sub edx, 0x17f4a
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push edi
push ebx
add esp, 4
sub edi, 0x170fe
xor edi, 0x6955
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0x15950
add ebx, 0xf527
add ebx, 0xb06a
jmp 0x442f5a
pop ebx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
push ecx
add esp, 4
xor edx, 0x1724c
or edx, 0x1312d
add edx, 0xbee7
pop edx
push eax
push edx
add esp, 4
xor eax, 0x17398
xor eax, 0xbcea
jmp 0x442f96
pop eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x442fb4
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push eax
push esi
add esp, 4
or eax, 0x17e8
add eax, 0x6bf6
and eax, 0x15d6e
pop eax
push esi
push ebx
add esp, 4
sub esi, 0x6049
pop esi
push eax
or eax, 0x9228
sub eax, 0x17526
pop eax
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x44302e
push ebx
push edx
add esp, 4
or ebx, 0x4910
pop ebx
push edx
push esi
add esp, 4
or edx, 0x30e2
pop edx
push edi
and edi, 0x786c
add edi, 0xec46
pop edi
push edx
push ecx
add esp, 4
xor edx, 0x14d04
pop edx
jmp 0x44325c
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edi
add edi, 0x711
pop edi
push edi
call 0x44305d
add byte [edi + edi], bh
cmp dword [edx + edi], esi
inc edx
cmp byte [edx + esi + 0x33], cl
add esp, 4
call 0x44306c
add byte [ebx], bh
inc esp
aaa
aaa
inc ebp
push eax
add esp, 4
add edi, 0x6d6c
pop edi
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x4430dd
push edx
push eax
add esp, 4
and edx, 0x14870
pop edx
push esi
add esi, 0x13340
xor esi, 0x5968
pop esi
push edx
push esi
add esp, 4
or edx, 0x1320b
sub edx, 0x14c00
or edx, 0x1563f
pop edx
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x44320e
cmp dword [ebp - 0xc08], 0
jle 0x443202
push edi
or edi, 0x673f
or edi, 0x173ef
pop edi
push ecx
push edx
add esp, 4
add ecx, 0x114a2
pop ecx
push ebx
push edi
add esp, 4
and ebx, 0x1857
or ebx, 0xf22f
and ebx, 0x9d08
pop ebx
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x44319e
push ecx
add ecx, 0x20ca
pop ecx
push eax
push eax
add esp, 4
and eax, 0x16005
call 0x443152
add byte [eax + 0x4f], dl
dec eax
cmp al, byte [ebp + 0x43]
cmp eax, dword [ebx + 0x565804c4]
and esi, 0x2feb
or esi, 0xe645
pop esi
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x443186
mov dword [ebp - 0x14c0], 1
jmp 0x443190
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x443202
push edx
push edx
add esp, 4
or edx, 0x140e3
jmp 0x4431af
xor edx, 0x172ae
pop edx
push eax
add eax, 0x125c6
sub eax, 0xf7cc
or eax, 0x68f2
sub eax, 0x12ea1
pop eax
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x4430dd
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x443257
push esi
push edi
add esp, 4
sub esi, 0xb5fd
pop esi
push edx
or edx, 0x1a6
and edx, 0x4c83
add edx, 0x9803
sub edx, 0x1aaa
pop edx
push eax
push ecx
add esp, 4
jmp 0x443248
pop eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x443298
jmp 0x442fa5
push eax
push edi
add esp, 4
or eax, 0xb73e
jmp 0x443270
or eax, 0x1265c
jmp 0x44327e
pop eax
push esi
push esi
add esp, 4
jmp 0x44328d
pop esi
mov dword [ebp - 0x3cc], 0
push edx
add edx, 0xacfb
pop edx
push esi
jmp 0x4432a9
or esi, 0x112da
and esi, 0x17c20
or esi, 0x1f69
pop esi
push esi
add esi, 0x29b7
add esi, 0xfd22
pop esi
push edx
push edx
add esp, 4
add edx, 0x2ad5
or edx, 0x146f2
sub edx, 0x56c6
pop edx
push edi
sub edi, 0x54f6
or edi, 0x15e1c
and edi, 0x43ed
or edi, 0x2572
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push ecx
push esi
add esp, 4
add ecx, 0x5cb6
xor ecx, 0xe39b
jecxz 0x443321
add byte [ecx + 0xc83ac1], al
add byte [ecx + 0x51], bl
or ecx, 0x1947
and ecx, 0x169bd
add ecx, 0x1197
or ecx, 0x15d43
pop ecx
mov dword [ebp - 0x1fac], 0xffffffff
push ebx
add ebx, 0x22be
pop ebx
push ecx
push edx
add esp, 4
xor ecx, 0x5a64
and ecx, 0xeb9b
pop ecx
push esi
and esi, 0xa5f5
pop esi
push edi
xor edi, 0x974e
pop edi
push esi
and esi, 0xe6e0
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x44339c
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push ecx
xor ecx, 0x16eae
or ecx, 0x3b1b
or ecx, 0xcff5
add ecx, 0x3eef
pop ecx
push edi
push ecx
add esp, 4
and edi, 0xed5b
and edi, 0x34ce
add edi, 0x674f
pop edi
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x443416
push eax
push esi
add esp, 4
jmp 0x4433e9
xor eax, 0x121cd
call 0x4433fc
add byte [ebp + 0x49], al
inc edi
dec ebp
inc esp
dec ebp
xor eax, dword [ebx + 0x7eb04c4]
inc esi
inc ecx
dec ecx
xor al, byte [edx + 0x36]
cmp dword [eax + 0x57], ebx
and edi, 0x1752f
pop edi
jmp 0x443644
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push edi
add esp, 4
add edx, 0xad1e
and edx, 0x18460
jmp 0x443442
jmp 0x443447
pop edx
push esi
jmp 0x44344e
or esi, 0x13f31
pop esi
push ebx
jmp 0x44345d
pop ebx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x4434c5
inc ebx
push edx
push esi
add esp, 4
sub edx, 0x11c8d
jmp 0x443494
call 0x4434a2
add byte [ebx + 0x3a], al
aas
dec esp
xor edi, dword [ebx + ecx*2]
push eax
add esp, 4
pop edx
push ebx
push edx
add esp, 4
jmp 0x4434b3
pop ebx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x4435f6
cmp dword [ebp - 0xc10], 0
jle 0x4435ea
push edx
jmp 0x4434db
add edx, 0xb23d
call 0x4434ee
add byte [edi + 0x49], cl
xor eax, dword [edi + 0x42]
cmp eax, dword [edi - 0x7d]
les eax, [ecx + eax*4]
loop 0x443481
pop ecx
add dword [eax], eax
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0xaeb
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x443586
push ecx
push ecx
add esp, 4
add ecx, 0x14fbf
and ecx, 0xd5e
and ecx, 0xea08
pop ecx
push edi
xor edi, 0x4e30
xor edi, 0xdf7f
jmp 0x443545
sub edi, 0x17ca2
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x44356e
mov dword [ebp - 0x14cc], 1
jmp 0x443578
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x4435ea
push edx
push edx
add esp, 4
add edx, 0x3b2c
pop edx
push esi
push ebx
add esp, 4
and esi, 0x12361
xor esi, 0x17ede
pop esi
push esi
or esi, 0x3722
or esi, 0x12577
add esi, 0x51e7
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x4434c5
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x44363f
push ebx
jmp 0x443607
and ebx, 0x12c8c
sub ebx, 0x13ca2
pop ebx
push edx
push edi
add esp, 4
call 0x443627
add byte [eax + edx*2], bh
inc edi
inc edx
inc ecx
cmp bh, byte [ebx]
inc ebx
add esp, 4
or edx, 0x15880
pop edx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x443680
jmp 0x44338d
push ebx
jmp 0x44364b
sub ebx, 0x7907
pop ebx
push eax
push ebx
add esp, 4
xor eax, 0xf2a1
or eax, 0x4f9d
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0xf1cd
add ebx, 0x1315f
pop ebx
mov dword [ebp - 0xa5c], 0
push edi
call 0x443691
add byte [ebx + 0x42], cl
inc ecx
inc ecx
cmp al, byte [edi + 0x35]
inc ecx
xor al, 0x37
add esp, 4
and edi, 0x17809
pop edi
push esi
push edi
add esp, 4
or esi, 0x6add
jmp 0x4436ab
or esi, 0x3aba
pop esi
mov byte [ebp - 0x804], 0x45
invalid
invalid