Function at 0x4934a5
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
mov edx, dword [ebp - 0x4ac]
add edx, 1
mov dword [ebp - 0x4ac], edx
push edx
push eax
add esp, 4
sub edx, 0x8fca
or edx, 0xf97a
or edx, 0x131ca
pop edx
push edx
push edx
add esp, 4
sub edx, 0x13856
pop edx
push edi
or edi, 0xe51a
xor edi, 0xd5c8
pop edi
mov eax, dword [ebp - 0x4ac]
sub eax, dword [ebp - 0x3c8]
cmp eax, 0xffffffff
jb 0x492e33
push edi
or edi, 0x817c
add edi, 0x15e17
xor edi, 0x5292
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0x1825c
add ecx, 0x9598
pop ecx
push edi
push edi
add esp, 4
and edi, 0xec97
pop edi
jmp 0x493061
mov dword [ebp - 0xc4c], 7
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp - 0xa34], ecx
push ecx
and ecx, 0x16983
add ecx, 0x3974
and ecx, 0x122f9
and ecx, 0xfc51
pop ecx
push ebx
push ebx
add esp, 4
xor ebx, 0x17337
add ebx, 0x10a83
or ebx, 0x12096
pop ebx
mov edx, dword [ebp - 0x1510]
mov dword [ebp - 0xa38], edx
mov dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x4ac]
cmp eax, dword [ebp - 0x1510]
jne 0x492ee2
push ecx
or ecx, 0xb296
call fcn.00492eb6
add byte [0x38394a3e], bh
xor al, 0x35
xor edi, dword [edx]
add esp, 4
xor ecx, 0x11c86
call 0x492ecd
add byte [esi + ecx*2], bh
dec ebx
inc edx
inc esp
cmp eax, 0xc4834035
add al, 0x59
mov ecx, dword [ebp - 0xc50]
mov dword [ebp - 0x1518], ecx
jmp 0x493013
cmp dword [ebp - 0xc4c], 0
jle 0x493007
push edx
push ebx
add esp, 4
sub edx, 0x857e
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x3ea
pop ebx
push edx
and edx, 0x8985
and edx, 0xd1a
add edx, 0x1383d
add edx, 0x2a9f
pop edx
mov edx, dword [ebp - 0xa34]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa38]
movzx edx, byte [ecx]
cmp eax, edx
je 0x492fa3
push ecx
add ecx, 0xba9b
pop ecx
push edi
sub edi, 0x37e5
jmp 0x492f4c
pop edi
push ecx
push ecx
add esp, 4
or ecx, 0x54c4
call 0x492f65
add byte [eax + 0x34], dl
aaa
dec ecx
push eax
cmp eax, 0x4c48338
pop ecx
mov eax, dword [ebp - 0xa34]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa38]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x492f8b
mov dword [ebp - 0x1514], 1
jmp 0x492f95
mov dword [ebp - 0x1514], 0xffffffff
mov ecx, dword [ebp - 0x1514]
mov dword [ebp - 0xc50], ecx
jmp 0x493007
push edi
or edi, 0xa1e4
pop edi
push edi
push ebx
add esp, 4
xor edi, 0xc0b3
add edi, 0x16672
pop edi
push esi
push ebx
add esp, 4
sub esi, 0x2b38
xor esi, 0xe4a1
add esi, 0x1752d
pop esi
mov edx, dword [ebp - 0xc4c]
sub edx, 1
mov dword [ebp - 0xc4c], edx
mov eax, dword [ebp - 0xa34]
add eax, 1
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0xa38]
add ecx, 1
mov dword [ebp - 0xa38], ecx
jmp 0x492ee2
mov edx, dword [ebp - 0xc50]
mov dword [ebp - 0x1518], edx
cmp dword [ebp - 0x1518], 0
jne 0x49305c
push ebx
push edx
add esp, 4
xor ebx, 0xfb7a
xor ebx, 0x6cc8
sub ebx, 0xd0e5
or ebx, 0x11f56
pop ebx
push edx
push ecx
add esp, 4
or edx, 0x16708
jmp 0x49304d
pop edx
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x394], eax
jmp 0x49309d
jmp 0x492daa
push ecx
call 0x493072
add byte [edx + 0x44], cl
dec esi
inc ebx
dec edx
cmp ecx, dword [edx + ecx*2 + 0x38]
inc ecx
add esp, 4
jmp 0x49307b
add ecx, 0x974e
pop ecx
push edi
add edi, 0x3119
jmp 0x493092
pop edi
mov dword [ebp - 0x394], 0
push edi
jmp 0x4930a4
pop edi
push ebx
jmp 0x4930af
pop ebx
push ecx
push edi
add esp, 4
and ecx, 0x18686
sub ecx, 0x56df
jmp 0x4930c8
sub ecx, 0x12544
pop ecx
push eax
call 0x4930dd
add byte [esi], dh
xor al, 0x50
inc edx
inc esp
dec edi
inc ebx
add esp, 4
call 0x4930ef
add byte [edi + 0x43], cl
dec edi
push eax
inc eax
dec ebp
aas
xor eax, 0x4c48348
pop eax
push edi
xor edi, 0x383d
and edi, 0x148d1
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb6c]
mov dword [ebp - 0x151c], eax
push eax
call 0x493123
add byte [ebp + 0x3b], al
inc ecx
xor dh, byte [0x4c48344]
xor eax, 0x9508
pop eax
push eax
push ebx
add esp, 4
or eax, 0x15260
call 0x493144
add byte [ecx*2 + 0x43414939], dh
add esp, 4
pop eax
mov dword [ebp - 0x1ff8], 0xffffffff
push ecx
sub ecx, 0x1862f
jmp 0x49315f
pop ecx
push esi
push esi
add esp, 4
sub esi, 0x1852b
pop esi
push edx
push esi
add esp, 4
sub edx, 0x12def
sub edx, 0x8b17
or edx, 0x14722
pop edx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x4b0], ecx
jmp 0x4931a1
mov edx, dword [ebp - 0x4b0]
add edx, 1
mov dword [ebp - 0x4b0], edx
push ebx
push ebx
add esp, 4
sub ebx, 0x178d9
pop ebx
push ecx
or ecx, 0xf0d2
and ecx, 0xc870
pop ecx
push ebx
push edx
add esp, 4
sub ebx, 0x13360
or ebx, 0x6dc6
sub ebx, 0xdd82
pop ebx
mov eax, dword [ebp - 0x4b0]
sub eax, dword [ebp - 0x3c8]
cmp eax, 0xffffffff
jb 0x49321b
push esi
push ebx
add esp, 4
xor esi, 0x3b56
pop esi
push esi
sub esi, 0x9b5d
and esi, 0x15430
pop esi
push edx
push edx
add esp, 4
or edx, 0x14984
sub edx, 0x66f9
and edx, 0x1287c
pop edx
jmp 0x493449
mov dword [ebp - 0xc54], 7
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0xa3c], ecx
push ebx
push ebx
add esp, 4
or ebx, 0xb9cf
sub ebx, 0x118ff
and ebx, 0x15c70
pop ebx
push eax
xor eax, 0x12fd1
or eax, 0x121d9
and eax, 0x15df7
add eax, 0xc200
pop eax
mov edx, dword [ebp - 0x151c]
mov dword [ebp - 0xa40], edx
mov dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x4b0]
cmp eax, dword [ebp - 0x151c]
jne 0x4932ca
push ebx
jmp 0x49328f
and ebx, 0x7e86
pop ebx
push ebx
or ebx, 0x4843
sub ebx, 0x23fa
xor ebx, 0x11e
call 0x4932b5
add byte [ecx], bh
inc edx
cmp byte [ebx + 0x47], al
xor eax, dword [ebx - 0x74a4fb3c]
lea ebp, [eax - 0x7600000d]
invalid
cmp dword [ebp - 0xc54], 0
jle 0x4933ef
push eax
push ecx
add esp, 4
add eax, 0xaa57
pop eax
push ecx
or ecx, 0x4779
or ecx, 0x58b8
call 0x4932ff
add byte [edi], dh
xor al, byte [ecx + ecx*2 + 0x3a]
cmp edi, dword [eax]
dec edx
inc eax
add esp, 4
add ecx, 0x54b3
pop ecx
mov edx, dword [ebp - 0xa3c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa40]
movzx edx, byte [ecx]
cmp eax, edx
je 0x49338b
push ebx
push esi
add esp, 4
and ebx, 0x2ccc
pop ebx
push esi
add esi, 0xa92b
and esi, 0xf86b
add esi, 0x1747c
pop esi
push ebx
push ebx
add esp, 4
sub ebx, 0x11841
and ebx, 0x12708
pop ebx
mov eax, dword [ebp - 0xa3c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa40]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x493373
mov dword [ebp - 0x1520], 1
jmp 0x49337d
mov dword [ebp - 0x1520], 0xffffffff
mov ecx, dword [ebp - 0x1520]
mov dword [ebp - 0xc58], ecx
jmp 0x4933ef
push ecx
jmp 0x493393
jmp 0x49339b
add ecx, 0x1684d
jmp 0x4933aa
pop ecx
push ebx
push edi
add esp, 4
and ebx, 0x2b4f
xor ebx, 0x17463
pop ebx
mov edx, dword [ebp - 0xc54]
sub edx, 1
mov dword [ebp - 0xc54], edx
mov eax, dword [ebp - 0xa3c]
add eax, 1
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0xa40]
add ecx, 1
mov dword [ebp - 0xa40], ecx
jmp 0x4932ca
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x1524], edx
cmp dword [ebp - 0x1524], 0
jne 0x493444
push eax
xor eax, 0xfc66
add eax, 0x60f3
pop eax
push eax
or eax, 0x57c7
pop eax
push eax
push edi
add esp, 4
call 0x49342c
or byte [eax], al
add byte [eax], al
add byte [edx + esi], bh
aaa
cmp al, 0x3e
xor al, 0x3a
add esp, 4
or eax, 0x14126
pop eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xa44], eax
jmp 0x493485
jmp 0x493192
push edx
push ebx
add esp, 4
add edx, 0xbcc1
pop edx
push esi
and esi, 0x15c9d
pop esi
push ebx
push ebx
add esp, 4
add ebx, 0xe27a
sub ebx, 0xa6dc
xor ebx, 0x1680d
add ebx, 0x44b8
pop ebx
mov dword [ebp - 0xa44], 0
push edi
push edi
add esp, 4
call 0x493496
add byte [eax + 0x3e], al
dec ebx
cmp al, byte [ebp + 0x3e]
add esp, 4
call 0x4934a5
add byte [edi + 0x49], al
xor eax, 0x8338434c
les eax, [ecx + eax*4]
add edi, 0x15b40
pop edi
push ebx
and ebx, 0x15bc3
pop ebx
mov byte [ebp - 0x808], 0x45
mov byte [ebp - 0x807], 0x78
mov byte [ebp - 0x806], 0x69
mov byte [ebp - 0x805], 0x74
mov byte [ebp - 0x804], 0x50
invalid
invalid