Function at 0x4934a8
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x4e3f
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0x2ef8
pop ebx
push esi
push ecx
add esp, 4
or esi, 0x121f3
pop esi
mov byte [ebp - 0xbf8], 0x52
mov byte [ebp - 0xbf7], 0xb9
mov byte [ebp - 0xbf6], 0x20
mov byte [ebp - 0xbf5], 0x20
mov byte [ebp - 0xbf4], 0x20
mov byte [ebp - 0xbf3], 0x20
mov byte [ebp - 0xbf2], 0x5a
push ebx
or ebx, 0x15ec6
pop ebx
push edi
push edx
add esp, 4
call 0x492cc7
add byte [edx + 0x39], cl
cmp cl, byte ss:[edx + 0x4c]
inc eax
dec edi
aas
add esp, 4
or edi, 0x977
xor edi, 0x24f9
xor edi, 0xe864
pop edi
mov dword [ebp - 0x2130], 0xe
push edx
xor edx, 0x176cc
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x154db
pop ebx
push edi
push ebx
add esp, 4
call 0x492d0f
add byte [edx + 0x42], al
push eax
cmp al, 0x3a
cmp edi, dword [eax]
inc esp
aas
add esp, 4
or edi, 0x10d16
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x1610], eax
push ecx
call 0x492d3d
add byte [0x37384a43], bh
cmp ecx, dword [esi + esi - 0x7d]
les eax, [ecx + eax*4]
loope 0x492d3c
add esp, 4
and ecx, 0x131f9
call 0x492d56
xor dword [ecx], eax
add al, ch
or eax, dword [eax]
add byte [eax], al
add byte [ebx], dh
cmp eax, dword [eax + 0x46]
inc edx
cmp eax, dword [eax + 0x50]
dec esi
inc esi
add esp, 4
and ecx, 0xfcdc
pop ecx
mov dword [ebp - 0x2134], 0xffffffff
push edi
push edx
add esp, 4
and edi, 0x1c9
add edi, 0xf00
sub edi, 0xe902
or edi, 0x12608
pop edi
push edx
or edx, 0xecdb
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x16674
pop ebx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x492db9
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edi
push edx
add esp, 4
call 0x492dcc
add byte [eax + 0x38], cl
dec esp
dec esp
xor eax, 0x834c4937
les eax, [edi + ebx*2]
push ecx
push eax
add esp, 4
jmp 0x492dde
xor ecx, 0xaef7
or ecx, 0xa629
pop ecx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x492e33
push eax
push esi
add esp, 4
xor eax, 0x589f
xor eax, 0x1743d
add eax, 0xdb26
pop eax
push edi
add edi, 0x140a9
call 0x492e2a
add byte [edx], dh
dec esp
inc ebp
xor al, 0x49
xor eax, 0x8345504d
les eax, [edi + ebx*2]
jmp 0x493061
mov dword [ebp - 0xcd4], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad4], ecx
push edi
push eax
add esp, 4
xor edi, 0x5a94
pop edi
push esi
xor esi, 0x9b80
and esi, 0xaa89
and esi, 0x85e
add esi, 0x5560
pop esi
push esi
push esi
add esp, 4
add esi, 0x17aa6
pop esi
mov edx, dword [ebp - 0x1610]
mov dword [ebp - 0xad0], edx
mov dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x1610]
jne 0x492ee2
push ecx
push edx
add esp, 4
add ecx, 0xa37
pop ecx
push edx
or edx, 0x7c90
pop edx
push ebx
push esi
add esp, 4
xor ebx, 0xbeb7
or ebx, 0x13103
sub ebx, 0x15c7f
jmp 0x492ed0
pop ebx
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1618], ecx
jmp 0x493013
cmp dword [ebp - 0xcd4], 0
jle 0x493007
push edi
jmp 0x492ef6
and edi, 0xac49
sub edi, 0x9131
pop edi
push ecx
add ecx, 0x9493
and ecx, 0x68c6
pop ecx
push ebx
jmp 0x492f1a
xor ebx, 0x4350
pop ebx
mov edx, dword [ebp - 0xad4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xad0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x492fa3
push eax
push ebx
add esp, 4
and eax, 0x3d79
jmp 0x492f48
pop eax
push eax
push ecx
add esp, 4
and eax, 0x12ab3
or eax, 0xac7d
or eax, 0x14b4b
pop eax
push ecx
and ecx, 0xece2
pop ecx
mov eax, dword [ebp - 0xad4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x492f8b
mov dword [ebp - 0x1614], 1
jmp 0x492f95
mov dword [ebp - 0x1614], 0xffffffff
mov ecx, dword [ebp - 0x1614]
mov dword [ebp - 0xcd8], ecx
jmp 0x493007
push eax
push ecx
add esp, 4
jmp 0x492faf
sub eax, 0xb1c3
jmp 0x492fbd
pop eax
push edi
add edi, 0x576a
xor edi, 0x3f35
jmp 0x492fd4
pop edi
mov edx, dword [ebp - 0xcd4]
sub edx, 1
mov dword [ebp - 0xcd4], edx
mov eax, dword [ebp - 0xad4]
add eax, 1
mov dword [ebp - 0xad4], eax
mov ecx, dword [ebp - 0xad0]
add ecx, 1
mov dword [ebp - 0xad0], ecx
jmp 0x492ee2
mov edx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1618], edx
cmp dword [ebp - 0x1618], 0
jne 0x49305c
push eax
push edi
add esp, 4
jmp 0x493029
or eax, 0xd638
and eax, 0x17592
pop eax
push edi
push esi
add esp, 4
jmp 0x493042
pop edi
push esi
push eax
add esp, 4
jmp 0x49304d
pop esi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3fc], eax
jmp 0x49309d
jmp 0x492daa
push edi
push edi
add esp, 4
or edi, 0xcf2a
call 0x49307c
add byte [edx + 0x46], cl
dec ebp
inc esi
xor ecx, dword [edx + 0x4d]
dec ebp
xor bh, byte [edi]
add esp, 4
call 0x49308f
add byte [edx], dh
inc eax
push eax
cmp al, 0x50
xor eax, 0x324e443c
add esp, 4
pop edi
mov dword [ebp - 0x3fc], 0
push ecx
jmp 0x4930a3
and ecx, 0x31ee
pop ecx
push edi
jmp 0x4930b0
pop edi
push edx
push ebx
add esp, 4
and edx, 0xfaff
pop edx
push edi
push edx
add esp, 4
or edi, 0x13788
sub edi, 0x14e35
pop edi
push esi
sub esi, 0x13b92
xor esi, 0x10670
pop esi
push esi
push ebx
add esp, 4
or esi, 0x12bfb
pop esi
push ecx
push ecx
add esp, 4
sub ecx, 0x13dee
and ecx, 0x173a0
add ecx, 0x9a75
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf8]
mov dword [ebp - 0x161c], eax
push eax
jmp 0x493120
xor eax, 0x14422
pop eax
push eax
push edx
add esp, 4
and eax, 0x77cd
or eax, 0x8c08
call 0x493144
add byte [ebx + 0x39], cl
aas
inc ebp
xor ecx, dword [ecx - 0x7d]
les eax, [eax + ebx*2]
mov dword [ebp - 0x2138], 0xffffffff
push edx
call 0x493160
add byte [eax], bh
cmp al, byte [ebx + edi + 0x34]
dec esp
inc edi
add esp, 4
or edx, 0x163e5
add edx, 0x13de4
pop edx
push edi
and edi, 0x78ce
xor edi, 0xd66
and edi, 0xf969
pop edi
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x504], ecx
jmp 0x4931a1
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push ebx
push edx
add esp, 4
call 0x4931b5
add byte [ecx], bh
dec edx
cmp dh, byte [ebx]
aas
xor al, 0x46
xor eax, 0x4c4833b
pop ebx
push ebx
xor ebx, 0x1867e
or ebx, 0x1239a
xor ebx, 0xd0ca
sub ebx, 0x25cc
pop ebx
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x49321b
push ebx
push ecx
add esp, 4
and ebx, 0xc384
xor ebx, 0x244d
or ebx, 0x13ed4
pop ebx
push ebx
xor ebx, 0x6092
add ebx, 0xcde8
jmp 0x49320f
or ebx, 0xb011
pop ebx
jmp 0x493449
mov dword [ebp - 0xcdc], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xa6c], ecx
push eax
push eax
add esp, 4
jmp 0x49323c
xor eax, 0x6d86
xor eax, 0x17dcf
or eax, 0x2c7
pop eax
push ecx
or ecx, 0xa5a2
xor ecx, 0x12a11
sub ecx, 0x15da3
pop ecx
mov edx, dword [ebp - 0x161c]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x161c]
jne 0x4932ca
push edi
and edi, 0x151c7
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xf2a9
pop ebx
push ecx
push eax
add esp, 4
add ecx, 0xea2b
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x9278
sub ecx, 0x143fd
pop ecx
mov ecx, dword [ebp - 0xce0]
mov dword [ebp - 0x1624], ecx
jmp 0x4933fb
cmp dword [ebp - 0xcdc], 0
jle 0x4933ef
push esi
and esi, 0x5353
call 0x4932eb
add byte [edi + eax*2], bh
dec ebx
xor eax, 0x834c4e3f
les eax, [esi + ebx*2]
push esi
xor esi, 0x12aa0
sub esi, 0xeacc
xor esi, 0x14cfe
add esi, 0x7db1
pop esi
mov edx, dword [ebp - 0xa6c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x49338b
push edi
or edi, 0x11bcf
xor edi, 0xf37e
sub edi, 0x127e6
and edi, 0x14130
pop edi
push edi
push ebx
add esp, 4
and edi, 0x157f8
add edi, 0x4685
or edi, 0x5085
pop edi
mov eax, dword [ebp - 0xa6c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x493373
mov dword [ebp - 0x1620], 1
jmp 0x49337d
mov dword [ebp - 0x1620], 0xffffffff
mov ecx, dword [ebp - 0x1620]
mov dword [ebp - 0xce0], ecx
jmp 0x4933ef
push edx
push edx
add esp, 4
or edx, 0x18634
add edx, 0x8fd2
or edx, 0x9de1
pop edx
push esi
push eax
add esp, 4
and esi, 0xb0
xor esi, 0xa72a
pop esi
push edx
or edx, 0x99db
pop edx
mov edx, dword [ebp - 0xcdc]
sub edx, 1
mov dword [ebp - 0xcdc], edx
mov eax, dword [ebp - 0xa6c]
add eax, 1
mov dword [ebp - 0xa6c], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x4932ca
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1624], edx
cmp dword [ebp - 0x1624], 0
jne 0x493444
push ebx
push edi
add esp, 4
jmp 0x493410
pop ebx
push ecx
call fcn.00493420
add byte [ebp + esi + 0x33], cl
inc ebp
cmp byte [edi + 0x49], cl
cmp eax, 0x8104c483
add esp, 4
sub ecx, 0x16a9d
jmp 0x493192
push edi
push edi
add esp, 4
and edi, 0x209d
pop edi
push edi
push ecx
add esp, 4
or edi, 0x1309f
sub edi, 0x2a66
xor edi, 0x1c57
pop edi
push ecx
add ecx, 0x4b9d
sub ecx, 0x3fbc
pop ecx
mov dword [ebp - 0xac8], 0
push edx
call 0x493495
add byte [ebp + 0x36], cl
cmp dword [edi + 0x37], eax
dec esi
dec ecx
cmp byte [esi], bh
add esp, 4
or edx, 0x8c28
or edx, 0x446c
add edx, 0xa3f
add byte [eax], al
pop edx
push ebx
push eax
add esp, 4
add ebx, 0x41a5
pop ebx
mov byte [ebp - 0x868], 0x45
mov byte [ebp - 0x867], 0x78
mov byte [ebp - 0x866], 0x69
mov byte [ebp - 0x865], 0x74
mov byte [ebp - 0x864], 0x50
mov byte [ebp - 0x863], 0x72
popfd
idiv edi
push dword [edx - 0x3a]
test dword [esi + 0x6ffffff7], ebx
mov byte [ebp - 0x861], 0x63
mov byte [ebp - 0x860], 0x65
mov byte [ebp - 0x85f], 0x73
mov byte [ebp - 0x85e], 0x73
mov byte [ebp - 0x85d], 0
push ebx
push ecx
add esp, 4
sub ebx, 0x1341e
xor ebx, 0x16480
xor ebx, 0x11d5a
xor ebx, 0xe325
pop ebx
push esi
xor esi, 0x16ff6
sub esi, 0x10e6c
add esi, 0xbd1d
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1790], cx
mov edx, 0x65
mov word [ebp - 0x178e], dx
mov eax, 0x72
mov word [ebp - 0x178c], ax
mov ecx, 0x6e
mov word [ebp - 0x178a], cx
mov edx, 0x65
mov word [ebp - 0x1788], dx
mov eax, 0x6c
mov word [ebp - 0x1786], ax
mov ecx, 0x33
mov word [ebp - 0x1784], cx
mov edx, 0x32
mov word [ebp - 0x1782], dx
mov eax, 0x2e
mov word [ebp - 0x1780], ax
mov ecx, 0x64
mov word [ebp - 0x177e], cx
mov edx, 0x6c
mov word [ebp - 0x177c], dx
mov eax, 0x6c
mov word [ebp - 0x177a], ax
xor ecx, ecx
mov word [ebp - 0x1778], cx
push ecx
push edi
add esp, 4
jmp 0x4935e2
jmp 0x4935e9
xor ecx, 0x83f8
jmp 0x4935f5
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x142fb
or eax, 0x161dd
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x104a8
add ebx, 0xc5c0
and ebx, 0xba93
pop ebx
push edx
push ecx
add esp, 4
and edx, 0x4f8c
pop edx
push edx
or edx, 0xdced
or edx, 0x3bd
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x206c], edx
mov eax, dword [ebp - 0x206c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2070], ecx
mov edx, dword [ebp - 0x2070]
mov dword [ebp - 0x1628], edx
push ebx
push eax
add esp, 4
jmp 0x49366f
add ebx, 0x14d78
pop ebx
push eax
push ebx
add esp, 4
add eax, 0x15dce
sub eax, 0x5b08
add eax, 0x14826
or eax, 0x121a8
pop eax
cmp dword [ebp - 0x1628], 0
jne 0x4936ac
mov dword [ebp - 0x2fc], 0
jmp 0x493968
mov eax, dword [ebp - 0x1628]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xcec], edx
push eax
push ecx
add esp, 4
or eax, 0xe150
sub eax, 0x6ab5
pop eax
push eax
push ebx
add esp, 4
add eax, 0x8ab1
or eax, 0x12956
add eax, 0x68e0
jmp 0x4936ef
pop eax
cmp dword [ebp - 0xcec], 0
jne 0x493708
mov dword [ebp - 0x2fc], 0
jmp 0x493968
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x508], eax
push ecx
push ecx
add esp, 4
call 0x493728
add byte [edi + 0x3d], al
xor dh, byte [edx]
dec ebp
cmp byte [edx], bh
cmp eax, 0x4c48350
xor ecx, 0x84b9
pop ecx
push ecx
or ecx, 0x4718
sub ecx, 0x552d
xor ecx, 0x10a38
pop ecx
lea ecx, [ebp - 0x1790]
mov dword [ebp - 0xce8], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xce4], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push esi
push esi
add esp, 4
jmp 0x493780
call 0x49378f
add byte [esi], dh
cmp al, 0x33
dec ebx
aas
xor al, byte [esi + 0x3a]
inc esp
add esp, 4
call 0x4937a1
add byte [esi], bh
inc edi
inc edi
dec edi
inc edx
cmp al, 0x3a
xor eax, 0x5e04c483
mov eax, dword [ebp - 0xce4]
mov cx, word [eax]
invalid
invalid