Function at 0x413740
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x41d7ce
mov eax, dword fs:[0]
push eax
sub esp, 0x64
push ebx
push ebp
push esi
push edi
mov eax, dword [0xdb8624]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov esi, dword [0x41f438]
push 0xa
push 0x42424c
call esi
add esp, 8
mov dword [esp + 0x20], eax
push ebx
push 1
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x8c], ebx
call dword [0x41f148]
lea ecx, [esp + 0x20]
mov byte [esp + 0x80], 2
call dword [0x41f508]
push 6
push 0x424244
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x84], 3
call dword [0x41f144]
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 2
call dword [0x41f508]
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x2c]
call dword [0x41f974]
mov ebp, dword [0x41f1e4]
mov ebx, dword [0x41f4a4]
test al, al
je 0x413854
push 0x41fed0
lea ecx, [esp + 0x58]
call dword [0x41f1e8]
push 0xa
push 0x424238
mov byte [esp + 0x88], 4
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], 5
call ebp
mov byte [esp + 0x80], 4
jmp 0x4138ab
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x28]
call dword [0x41f974]
test al, al
je 0x4138c3
push 0x420490
lea ecx, [esp + 0x58]
call dword [0x41f1e8]
push 0xa
push 0x424238
mov byte [esp + 0x88], 6
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], 7
call ebp
mov byte [esp + 0x80], 6
lea ecx, [esp + 0x24]
call dword [0x41f508]
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 2
call ebx
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x34]
call dword [0x41f974]
test al, al
je 0x41391c
push 0x4201cc
lea ecx, [esp + 0x58]
call dword [0x41f1e8]
push 9
push 0x42422c
mov byte [esp + 0x88], 8
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], 9
call ebp
mov byte [esp + 0x80], 8
jmp 0x413973
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x38]
call dword [0x41f974]
test al, al
je 0x41398b
push 0x4242ac
lea ecx, [esp + 0x58]
call dword [0x41f1e8]
push 9
push 0x42422c
mov byte [esp + 0x88], 0xa
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], 0xb
call ebp
mov byte [esp + 0x80], 0xa
lea ecx, [esp + 0x24]
call dword [0x41f508]
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 2
call ebx
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + 0x10]
lea edx, [esp + 0x1c]
push edx
call dword [0x41f824]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x80], 0xc
call dword [0x41f38c]
test al, al
jne 0x4139e2
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x34]
call dword [0x41f158]
mov ecx, eax
mov byte [esp + 0x80], 0xd
mov dword [esp + 0x28], 1
call dword [0x41f368]
mov byte [esp + 0x1b], 0
test al, al
jne 0x4139e7
mov byte [esp + 0x1b], 1
test byte [esp + 0x28], 1
mov dword [esp + 0x80], 0xc
je 0x413a03
lea ecx, [esp + 0x30]
call dword [0x41f450]
cmp byte [esp + 0x1b], 0
je 0x413a57
lea edx, [esp + 0x2c]
push edx
call dword [0x41f41c]
push 0x42421c
push eax
lea eax, [esp + 0x3c]
push eax
mov byte [esp + 0x90], 0xe
call fcn.00401070
add esp, 0x10
push eax
lea ecx, [esp + 0x20]
call dword [0x41f154]
lea ecx, [esp + 0x30]
call dword [0x41f508]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0xc
call dword [0x41f508]
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x58]
call dword [0x41f334]
push 7
push 0x424224
mov byte [esp + 0x88], 0xf
call esi
add esp, 8
mov dword [esp + 0x28], eax
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x88], 0x10
call ebp
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 0xf
call dword [0x41f508]
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 0xc
call ebx
lea ecx, [esp + 0x34]
call dword [0x41f3cc]
push 8
push 0x420068
call esi
add esp, 8
mov dword [esp + 0x28], eax
push 0
push 1
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x8c], 0x11
call dword [0x41f148]
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 0x13
call dword [0x41f508]
push 8
push 0x42005c
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x84], 0x14
call dword [0x41f144]
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0x13
call dword [0x41f508]
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + 0x1c]
call dword [0x41f974]
test al, al
je 0x413e4a
push 0xe
push 0x42046c
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x34]
mov byte [esp + 0x84], 0x15
call dword [0x41f23c]
mov ecx, eax
mov byte [esp + 0x80], 0x16
call dword [0x41f238]
lea ecx, [esp + 0x30]
mov byte [esp + 0x1b], al
mov byte [esp + 0x80], 0x15
call dword [0x41f234]
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0x13
call dword [0x41f508]
cmp byte [esp + 0x1b], 0
je 0x413d54
push 0xe
push 0x42046c
call esi
add esp, 8
mov dword [esp + 0x24], eax
push 0
push 1
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 0x17
call dword [0x41f148]
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0x19
call dword [0x41f508]
push 0xa
push 0x420460
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 0x1a
call dword [0x41f144]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x19
call dword [0x41f508]
push 0x420490
lea ecx, [esp + 0x68]
call dword [0x41f1e8]
push 0xa
push 0x420454
mov byte [esp + 0x88], 0x1b
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x88], 0x1c
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x1b
call dword [0x41f508]
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 0x19
call ebx
push 0xb
push 0x420448
call esi
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x8c], 0x1d
call dword [0x41f1f0]
add esp, 0xc
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x19
call dword [0x41f508]
push 0xf
push 0x420480
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x84], 0x1e
call dword [0x41f14c]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x20
call dword [0x41f508]
push 0xb
push 0x420448
call esi
add esp, 8
mov dword [esp + 0x30], eax
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x58]
mov byte [esp + 0x84], 0x21
call dword [0x41f230]
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x20
call dword [0x41f508]
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 0x19
call dword [0x41f1c4]
lea ecx, [esp + 0x44]
mov byte [esp + 0x80], 0x13
call dword [0x41f44c]
push 8
push 0x420068
call esi
add esp, 8
mov dword [esp + 0x30], eax
push 0
push 1
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x8c], 0x22
call dword [0x41f148]
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x24
call dword [0x41f508]
push 8
push 0x42005c
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x84], 0x25
call dword [0x41f144]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x24
call dword [0x41f508]
push 0x42047c
lea ecx, [esp + 0x68]
call dword [0x41f1e8]
push 3
push 0x420428
mov byte [esp + 0x88], 0x26
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x88], 0x27
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x26
call dword [0x41f508]
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 0x24
call ebx
lea ecx, [esp + 0x3c]
call dword [0x41f3cc]
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x1c]
mov ebx, dword [0x41fb98]
push 1
call ebx
push 0
jmp 0x414159
mov eax, dword [edi + 0x18]
mov ecx, dword [eax + 0x20]
call dword [0x41f974]
test al, al
je 0x414173
push 0xe
push 0x42046c
call esi
add esp, 8
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x84], 0x28
call dword [0x41f23c]
mov ecx, eax
mov byte [esp + 0x80], 0x29
call dword [0x41f238]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1b], al
mov byte [esp + 0x80], 0x28
call dword [0x41f234]
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x13
call dword [0x41f508]
cmp byte [esp + 0x1b], 0
je 0x414068
push 0xe
push 0x42046c
call esi
add esp, 8
mov dword [esp + 0x30], eax
push 0
push 1
lea edx, [esp + 0x38]
push edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x8c], 0x2a
call dword [0x41f148]
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x2c
call dword [0x41f508]
push 0xa
push 0x420460
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x84], 0x2d
call dword [0x41f144]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x2c
call dword [0x41f508]
push 0x41fed0
lea ecx, [esp + 0x68]
call dword [0x41f1e8]
push 0xa
push 0x420454
mov byte [esp + 0x88], 0x2e
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x64]
push ecx
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x4c]
mov byte [esp + 0x88], 0x2f
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x2e
call dword [0x41f508]
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 0x2c
call ebx
push 0xb
push 0x420448
call esi
mov dword [esp + 0x34], eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x8c], 0x30
call dword [0x41f1f0]
add esp, 0xc
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x2c
call dword [0x41f508]
push 0x10
push 0x420434
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x58]
mov byte [esp + 0x84], 0x31
call dword [0x41f14c]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x33
call dword [0x41f508]
push 0xb
push 0x420448
call esi
add esp, 8
mov dword [esp + 0x24], eax
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x58]
mov byte [esp + 0x84], 0x34
call dword [0x41f230]
lea ecx, [esp + 0x24]
mov byte [esp + 0x80], 0x33
call dword [0x41f508]
lea ecx, [esp + 0x54]
mov byte [esp + 0x80], 0x2c
call dword [0x41f1c4]
lea ecx, [esp + 0x44]
mov byte [esp + 0x80], 0x13
call dword [0x41f44c]
push 8
push 0x420068
call esi
add esp, 8
mov dword [esp + 0x30], eax
push 0
push 1
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x48]
mov byte [esp + 0x8c], 0x35
call dword [0x41f148]
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], 0x37
call dword [0x41f508]
push 8
push 0x42005c
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x84], 0x38
call dword [0x41f144]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x37
call dword [0x41f508]
push 0x42042c
lea ecx, [esp + 0x68]
call dword [0x41f1e8]
push 3
push 0x420428
mov byte [esp + 0x88], 0x39
call esi
add esp, 8
mov dword [esp + 0x2c], eax
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x88], 0x3a
call ebp
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x39
call dword [0x41f508]
lea ecx, [esp + 0x64]
mov byte [esp + 0x80], 0x37
call ebx
lea ecx, [esp + 0x3c]
call dword [0x41f3cc]
mov ecx, dword [edi + 0x18]
mov ecx, dword [ecx + 0x1c]
mov ebx, dword [0x41fb98]
push 0
call ebx
push 1
mov edx, dword [edi + 0x18]
mov ecx, dword [edx + 0x20]
call ebx
lea ecx, [esp + 0x3c]
mov byte [esp + 0x80], 0x13
call dword [0x41f44c]
lea ecx, [esp + 0x4c]
call dword [0x41f3cc]
push 0x18
push 0x424290
call esi
mov dword [esp + 0x34], eax
push 0xb
mov bl, 0x3b
push 0x424284
mov byte [esp + 0x90], bl
call esi
mov dword [esp + 0x40], eax
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x44]
push ecx
push 0
mov byte [esp + 0x9c], 0x3c
call dword [0x41f970]
add esp, 0x1c
lea ecx, [esp + 0x30]
mov byte [esp + 0x80], bl
call dword [0x41f508]
lea ecx, [esp + 0x2c]
mov byte [esp + 0x80], 0x13
call dword [0x41f508]
mov edx, dword [edi]
mov eax, dword [edx + 0xc0]
mov ecx, edi
call eax
mov esi, dword [0x41f44c]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x80], 0xc
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x80], 2
call dword [0x41f508]
lea ecx, [esp + 0x34]
mov dword [esp + 0x80], 0xffffffff
call esi
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret