Function at 0x48648a
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
jmp 0x485a00
add dword [eax], eax
add byte [0x44f3644b], al
imul ecx, dword [ebp - 0xa10], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1d60]
imul eax, dword [ebp - 0xa10]
imul edx, dword [ebp - 0xa10], 0x138
sub eax, edx
mov dword [ebp - 0xa14], eax
push edx
push esi
add esp, 4
add edx, 0xd4f3
sub edx, 0x11a7e
sub edx, 0x13526
pop edx
push ecx
push ebx
add esp, 4
or ecx, 0x440f
or ecx, 0x453e
pop ecx
push eax
add eax, 0xc87d
pop eax
push edx
sub edx, 0x11bdc
pop edx
push edi
push ecx
add esp, 4
or edi, 0x116a7
pop edi
push edi
push ebx
add esp, 4
or edi, 0x16ffd
pop edi
push edi
push edx
add esp, 4
and edi, 0x19bf
add edi, 0x687
pop edi
mov dword [ebp - 0x2d0], 1
push ebx
xor ebx, 0x143a8
or ebx, 0x1839d
add ebx, 0xd667
pop ebx
push eax
push esi
add esp, 4
and eax, 0x1550f
call 0x485acf
add byte [edi], dh
xor bh, byte [esp + esi]
dec ecx
inc eax
dec ecx
dec ebp
add esp, 4
pop eax
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2d0]
imul edx, dword [ebp - 0x2d0], 0x138
sub eax, edx
mov dword [ebp - 0x2d4], eax
push ebx
or ebx, 0x16040
sub ebx, 0x5ef2
or ebx, 0x13737
pop ebx
push ebx
add ebx, 0x13ba8
sub ebx, 0x77c1
call 0x485b38
add byte [edi + ecx*2 + 0x34], cl
aas
dec esp
dec ecx
cmp eax, 0x5b04c483
mov eax, dword [ebp - 0x928]
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], ecx
jmp 0x485d2a
push eax
call 0x485d3a
add byte [edx + 0x3d], cl
cmp byte [ebp + 0x49], cl
inc esi
cmp eax, dword [edx + 0x3c]
add esp, 4
or eax, 0x11a58
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x62bd
add ebx, 0x1477e
and ebx, 0x170a8
pop ebx
mov ecx, dword [ebp - 0x254]
add ecx, 0x138
imul edx, dword [ebp - 0x250], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x250], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x250]
mov dword [ebp - 0x1d70], ecx
mov ecx, dword [ebp - 0x1d70]
mov dword [ebp - 0x1d74], ecx
cmp dword [ebp - 0x1d74], 0
jbe 0x4862a0
push edi
push esi
add esp, 4
or edi, 0x5db4
xor edi, 0x14538
call 0x485dcb
add byte [ebp + 0x4f], cl
dec eax
xor eax, 0x41383f41
add esp, 4
call 0x485dda
add byte [ebx + esi], bh
inc edi
cmp byte ss:[edi - 0x7d], cl
les eax, [edi + ebx*2]
mov edx, dword [ebp - 0x254]
add edx, 0x138
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x250]
mov dword [ebp - 0x1d78], edx
mov dl, ah
invalid
dec dword [ebx - 0x1d776b]
dec dword [ecx - 0x1d836b]
call dword [edx - 0x7f]
fsubr dword [edi + 1]
add byte [ecx + 0xd92fe2], al
add byte [ecx + 0x2542ca], al
add byte [edx + 0x51], bl
push esi
add esp, 4
add ecx, 0xef64
pop ecx
push edx
push ebx
add esp, 4
xor edx, 0x76df
add edx, 0x125ea
pop edx
mov eax, dword [ebp - 0xa0c]
add eax, 0x138
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa08]
mov dword [ebp - 0x1d7c], eax
mov eax, dword [ebp - 0x1d7c]
mov dword [ebp - 0x1d80], eax
mov ecx, dword [ebp - 0x14a4]
imul ecx, dword [ebp - 0x1d80]
cmp dword [ebp - 0x1d84], ecx
jne 0x486023
push ebx
push ebx
add esp, 4
or ebx, 0x1575b
pop ebx
push ecx
xor ecx, 0x1740c
sub ecx, 0x60f1
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0xb35
xor ebx, 0x3d04
add ebx, 0x18584
pop ebx
push edx
or edx, 0x40c9
call 0x485ef5
add byte [edx], dh
cmp edx, dword [eax + 0x3f]
inc ecx
dec edi
cmp al, 0x46
add esp, 4
or edx, 0x1557c
pop edx
push eax
push eax
add esp, 4
xor eax, 0x17d59
or eax, 0x3679
pop eax
mov edx, dword [ebp - 0x2d4]
add edx, 0x138
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1d88], edx
mov edx, dword [ebp - 0x1d88]
mov dword [ebp - 0x1d8c], edx
mov eax, dword [ebp - 0x1d8c]
sub eax, 1
mov dword [ebp - 0x1d90], eax
mov dword [ebp - 0xfbc], 1
push eax
push edx
add esp, 4
xor eax, 0x83c2
sub eax, 0x11142
xor eax, 0x1109f
or eax, 0x11ef9
pop eax
push ecx
and ecx, 0xa702
or ecx, 0x8b04
add ecx, 0x1a8b
pop ecx
imul ecx, dword [ebp - 0xfbc], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfbc], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d90]
imul ecx, dword [ebp - 0xfbc]
imul eax, dword [ebp - 0xfbc], 0x138
sub ecx, eax
mov dword [ebp - 0xfc0], ecx
mov ecx, dword [ebp - 0xfc0]
mov edx, dword [ebp - 0xfbc]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], edx
push ebx
push edi
add esp, 4
or ebx, 0xa6b6
and ebx, 0x6eda
jmp 0x486008
pop ebx
push eax
xor eax, 0x5397
pop eax
push edx
push edi
add esp, 4
xor edx, 0xe1ad
xor edx, 0x138dd
pop edx
push ebx
push edi
add esp, 4
call 0x486035
add byte [0x33404a3b], dh
inc ebx
inc ecx
add esp, 4
pop ebx
push edx
add edx, 0x6f3a
pop edx
push edx
jmp 0x486048
add edx, 0x10a75
xor edx, 0x18403
pop edx
mov eax, dword [ebp - 0x254]
add eax, 0x138
imul ecx, dword [ebp - 0x250], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x250], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x1da0], eax
push ecx
push eax
add esp, 4
sub ecx, 0xbe65
xor ecx, 0x9d0c
pop ecx
push esi
jmp 0x4860b0
xor esi, 0x147cf
sub esi, 0x363c
pop esi
push esi
push ebx
add esp, 4
or esi, 0xd5de
pop esi
mov ecx, dword [ebp - 0xa14]
add ecx, 0x138
imul edx, dword [ebp - 0xa10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xa10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xa10]
mov dword [ebp - 0x1d98], ecx
mov ecx, dword [ebp - 0x1d98]
mov dword [ebp - 0x1d9c], ecx
mov edx, dword [ebp - 0x14a4]
imul edx, dword [ebp - 0x1d9c]
cmp dword [ebp - 0x1da0], edx
jne 0x48629b
push edx
sub edx, 0xd98e
add edx, 0x1151c
sub edx, 0xb83b
pop edx
push eax
jmp 0x48613f
pop eax
push eax
or eax, 0x143f
jmp 0x486150
add eax, 0x10385
pop eax
push edx
push esi
add esp, 4
sub edx, 0xd895
sub edx, 0x307a
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0xd10d
jmp 0x486179
xor ecx, 0x5771
jmp 0x486188
pop ecx
mov eax, dword [ebp - 0x2d4]
add eax, 0x138
imul ecx, dword [ebp - 0x2d0], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2d0], 0x138
sub ecx, edx
push edx
add edx, 0xa53e
pop edx
push ecx
and ecx, 0xecfd
sub ecx, 0x82c9
xor ecx, 0xf46b
add ecx, 0x275a
pop ecx
push eax
sub eax, 0x135aa
pop eax
push esi
sub esi, 0x185f2
pop esi
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1f0c], ecx
mov dword [ebp - 0x1f08], edx
lea eax, [ebp - 0x1f0c]
mov dword [ebp - 0x1db0], eax
mov ecx, dword [ebp - 0x1db0]
mov dword [ebp - 0xa74], ecx
push edx
push esi
add esp, 4
and edx, 0x7e4e
xor edx, 0x14b47
pop edx
push edi
and edi, 0x94f0
pop edi
push edi
push ecx
add esp, 4
xor edi, 0x68ff
jmp 0x48632d
xor edi, 0x3332
pop edi
mov edx, dword [ebp - 0xa74]
mov eax, dword [edx]
add eax, 0x138
mov ecx, dword [ebp - 0xa74]
imul edx, dword [ecx + 4], 0x138
add edx, 0x44f3644b
mov ecx, dword [ebp - 0xa74]
imul ecx, dword [ecx + 4], 0x138
sub edx, ecx
xor eax, edx
mov edx, dword [ebp - 0xa74]
imul eax, dword [edx + 4]
mov dword [ebp - 0x1db4], eax
mov eax, dword [ebp - 0x1db4]
mov dword [ebp - 0x1dbc], eax
mov ecx, dword [ebp - 0x1db8]
sub ecx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x1dc0], ecx
mov dword [ebp - 0xfcc], 1
push ebx
sub ebx, 0xbbcb
pop ebx
push esi
push eax
add esp, 4
add esi, 0x8d17
and esi, 0x14199
pop esi
push ebx
push edi
add esp, 4
sub ebx, 0x14814
and ebx, 0x110ae
add ebx, 0x945
pop ebx
imul edx, dword [ebp - 0xfcc], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xfcc], 0x138
sub edx, eax
xor edx, dword [ebp - 0x1dc0]
imul edx, dword [ebp - 0xfcc]
imul ecx, dword [ebp - 0xfcc], 0x138
sub edx, ecx
mov dword [ebp - 0xfd0], edx
mov edx, dword [ebp - 0xfd0]
mov eax, dword [ebp - 0xfcc]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push ebx
xor ebx, 0x14ded
and ebx, 0x111df
or ebx, 0x57aa
and ebx, 0xc113
pop ebx
push ecx
push ebx
add esp, 4
sub ecx, 0x7618
pop ecx
push esi
push edi
add esp, 4
or esi, 0x1677d
pop esi
push esi
push ebx
add esp, 4
xor esi, 0x91af
and esi, 0xab26
jmp 0x486468
jmp 0x48646d
pop esi
push ebx
push ebx
add esp, 4
add ebx, 0x10b81
sub ebx, 0x590e
pop ebx
mov ecx, dword [ebp - 0x14]
add ecx, 0x138
imul edx, dword [ebp - 0x10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1dc4], ecx
mov ecx, dword [ebp - 0x1dc4]
mov dword [ebp - 0x1e30], ecx
lea edx, [ebp - 0x930]
mov dword [ebp - 0x3b4], edx
mov eax, dword [ebp - 0x3b4]
mov dword [eax + 4], 1
push ecx
xor ecx, 0x1c5b
or ecx, 0x180c4
call 0x4864ec
add byte [ecx + 0x3d], al
xor al, 0x45
xor cl, byte ds:[edi + 0x3c]
dec eax
add esp, 4
pop ecx
push edx
push esi
add esp, 4
or edx, 0x8353
sub edx, 0x11faf
pop edx
mov ecx, dword [ebp - 0x3b4]
imul edx, dword [ecx + 4], 0x138
add edx, 0x44f3644b
mov eax, dword [ebp - 0x3b4]
imul ecx, dword [eax + 4], 0x138
sub edx, ecx
xor edx, 0x19
mov eax, dword [ebp - 0x3b4]
imul edx, dword [eax + 4]
mov ecx, dword [ebp - 0x3b4]
imul eax, dword [ecx + 4], 0x138
sub edx, eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ecx], edx
mov edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x1f70], edx
push esi
and esi, 0x26a1
pop esi
push edi
push ebx
add esp, 4
and edi, 0xf4ad
or edi, 0xd4f8
and edi, 0x5312
and edi, 0x77a7
pop edi
push ebx
push edx
add esp, 4
add ebx, 0x9e65
pop ebx
mov dword [ebp - 0x14ac], 1
push eax
push ebx
add esp, 4
call 0x4865a3
add byte [esi], bh
cmp al, byte [esi + 0x43]
dec ebp
aaa
push eax
cmp eax, 0xeb04c483
add al, 0x36
cmp al, 0x41
inc edx
or eax, 0xce6b
jmp 0x4865b9
pop eax
push esi
sub esi, 0x2fa9
pop esi
mov dword [ebp - 0x1f74], 0x38
mov dword [ebp - 0x1f78], 0xe6
mov dword [ebp - 0x1f7c], 0x6e
mov dword [ebp - 0x1f80], 0x6e
mov dword [ebp - 0x1f84], 0x78
mov dword [ebp - 0x1540], 1
push esi
push ebx
add esp, 4
sub esi, 0x145e5
pop esi
push edi
push esi
add esp, 4
xor edi, 0x11344
and edi, 0x4fff
pop edi
push esi
xor esi, 0xfe25
sub esi, 0x9ced
or esi, 0x139b8
pop esi
imul eax, dword [ebp - 0x1540], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x1540], 0x138
sub eax, ecx
xor eax, 0xe6
imul eax, dword [ebp - 0x1540]
imul edx, dword [ebp - 0x1540], 0x138
add byte [ebx], ch
ret 0x8589
mov esp, 0x50ffffea
push ecx
add esp, 4
and eax, 0x12226
sub eax, 0xd01c
add eax, 0xc683
and eax, 0x17bee
pop eax
push eax
add eax, 0x12fc6
xor eax, 0xa316
sub eax, 0x11901
pop eax
push edi
push ebx
add esp, 4
xor edi, 0x6c21
add edi, 0x73a2
and edi, 0x1379f
pop edi
push ebx
xor ebx, 0x1698e
pop ebx
push ebx
push eax
add esp, 4
xor ebx, 0xb072
xor ebx, 0x679c
pop ebx
mov eax, dword [ebp - 0x930]
add eax, 0x138
imul ecx, dword [ebp - 0x92c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x92c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x92c]
mov dword [ebp - 0x1dc8], eax
mov eax, dword [ebp - 0x1dc8]
mov dword [ebp - 0x1dcc], eax
mov ecx, dword [ebp - 0x1dcc]
sub ecx, 0x6e
mov dword [ebp - 0x1dd0], ecx
mov dword [ebp - 0xa18], 1
push ebx
and ebx, 0x76f2
or ebx, 0x7dca
call 0x486744
add byte [edi + 0x33], al
inc edi
xor eax, dword [edx + 0x4c]
dec edi
dec edi
xor eax, 0x8104c483
ret