Function at 0x493a71
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
xchg ebp, eax
enter 0xffffffffffffffef, 0xffffffffffffffff
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push edx
xor edx, 0x834a
call 0x493818
add byte [eax + 0x50], cl
xor al, 0x48
dec ecx
inc edx
cmp cl, byte [edi + 0x50]
add esp, 4
call 0x493829
add byte [ebp + eax*2 + 0x43], cl
aas
cmp cl, byte ds:[edx + ecx*2 - 0x7d]
les eax, [ebx + ebp*8]
add eax, 0x4d4c3747
inc ebp
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x493857
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x4938ba
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x493776
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x493776
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4938a4
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x4938ae
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x493903
push ebx
push esi
add esp, 4
call 0x4938d8
add byte [eax + 0x48], al
xor eax, 0x4d343b46
cmp ecx, dword [edx + 0x40]
add esp, 4
pop ebx
push edi
push edi
add esp, 4
and edi, 0xa0ab
jmp 0x4938ee
add edi, 0xe224
pop edi
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x49396b
push ebx
jmp 0x49390a
call 0x49391a
add byte [ebx + 0x38], al
dec edi
xor ecx, dword [eax + 0x42]
inc esp
xor eax, 0xc483453a
add al, 0x81
jecxz 0x493923
movsb byte es:[edi], byte [esi]
add byte [eax], al
call 0x493931
add byte [0x4f4d4c3a], bh
xor eax, dword [esi + edi - 0x7d]
les eax, [ebx + ebx*2]
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x493961
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x493717
mov dword [ebp - 0x2d4], 0
push esi
xor esi, 0x4aed
and esi, 0x4e3e
sub esi, 0x8ef5
pop esi
push edx
push edi
add esp, 4
add edx, 0x147df
xor edx, 0x7800
and edx, 0x15247
sub edx, 0x4b8c
pop edx
cmp dword [ebp - 0x2d4], 0
jne 0x4942b6
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push edx
or edx, 0xf61d
and edx, 0x8de5
pop edx
push ecx
xor ecx, 0x125fd
or ecx, 0x1df2
pop ecx
push eax
push ecx
add esp, 4
call 0x493a71
add byte [0x3d424d45], dh
cmp byte [ecx - 0x7d], al
les eax, [eax + ebx*2]
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push ebx
or ebx, 0xf067
pop ebx
push ecx
or ecx, 0x908c
jmp 0x493b0e
jmp 0x493b17
jmp 0x493b1c
pop ecx
push ebx
push ebx
add esp, 4
xor ebx, 0xcf1a
pop ebx
cmp dword [ebp - 0x15ec], 0
jne 0x493b41
mov dword [ebp - 0x754], 0
jmp 0x493dfd
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push eax
xor eax, 0x1204e
xor eax, 0x7021
pop eax
push edx
push esi
add esp, 4
and edx, 0x12974
pop edx
push esi
push edx
add esp, 4
or esi, 0xa07f
or esi, 0xc84b
and esi, 0x13498
pop esi
cmp dword [ebp - 0xca8], 0
jne 0x493b9d
mov dword [ebp - 0x754], 0
jmp 0x493dfd
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx