Function at 0x494f9a
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop eax
cmp dword [ebp - 0x1660], 0
jne 0x494c0d
mov dword [ebp - 0x2d0], 0
jmp 0x494eb4
mov ecx, dword [ebp - 0x1660]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd18], eax
push edi
push ebx
add esp, 4
add edi, 0x110b9
xor edi, 0xa858
call 0x494c3c
add byte [edi], dh
dec ecx
aaa
inc esi
dec edi
inc eax
add esp, 4
call 0x494c4d
add byte [eax + 0x3c], cl
cmp bh, byte [esi]
cmp dword [esi], edi
xor eax, dword [ecx - 0x7d]
les eax, [edi + ebx*2]
cmp dword [ebp - 0xd18], 0
jne 0x494c69
mov dword [ebp - 0x2d0], 0
jmp 0x494eb4
mov ecx, dword [ebp - 0xd18]
mov dword [ebp - 0x518], ecx
push eax
jmp 0x494c7f
pop eax
push ecx
add ecx, 0x16ae2
sub ecx, 0x10deb
sub ecx, 0x5bd3
pop ecx
push edi
push ecx
add esp, 4
and edi, 0x4424
sub edi, 0x910f
add edi, 0x5f25
xor edi, 0x2cdf
neg edi
sub al, 0
add byte [edi - 0x7d], bl
mov ebp, 0xfffffd30
add byte [edi], cl
test eax, edi
or byte [eax], al
invalid
mov eax, 0x6b
mov word [ebp - 0x1830], ax
mov ecx, 0x65
mov word [ebp - 0x182e], cx
mov edx, 0x72
mov word [ebp - 0x182c], dx
mov eax, 0x6e
mov word [ebp - 0x182a], ax
mov ecx, 0x65
mov word [ebp - 0x1828], cx
mov edx, 0x6c
mov word [ebp - 0x1826], dx
mov eax, 0x33
mov word [ebp - 0x1824], ax
mov ecx, 0x32
mov word [ebp - 0x1822], cx
mov edx, 0x2e
mov word [ebp - 0x1820], dx
mov eax, 0x64
mov word [ebp - 0x181e], ax
mov ecx, 0x6c
mov word [ebp - 0x181c], cx
mov edx, 0x6c
mov word [ebp - 0x181a], dx
xor eax, eax
mov word [ebp - 0x1818], ax
push eax
call 0x494f9a
add byte [ebp + 0x4e], al
dec ecx
dec esi
inc edi
inc edx
cmp eax, 0x8104c483
loopne 0x495010
retf
call dword [edi - 0x3a]
test dword [edi + esi*8 - 1], ebp
inc dword [eax]
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a28], ecx
mov edx, dword [ebp - 0x1a28]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a2c], eax
mov ecx, dword [ebp - 0x1a2c]
mov dword [ebp - 0x166c], ecx
push edi
add edi, 0xddbf
pop edi
push ecx
call 0x495058
add byte [ecx + 0x38], cl
inc esp
aas
cmp eax, dword [edi + 0x4d]
inc eax
add esp, 4
pop ecx
push ebx
push edi
add esp, 4
call 0x49506f
add byte [edx], bh
dec ebx
cmp dword [esi + 0x38], ecx
dec esi
xor al, 0x4c
add esp, 4
pop ebx
cmp dword [ebp - 0x166c], 0
jne 0x49508b
mov dword [ebp - 0x768], 0
jmp 0x495332
mov edx, dword [ebp - 0x166c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd24], ecx
push edx
push esi
add esp, 4
or edx, 0x18513
pop edx
push ecx
or ecx, 0x1607
add ecx, 0x83c
or ecx, 0x1735d
xor ecx, 0x8ab2
pop ecx
push eax
push ecx
add esp, 4
or eax, 0xcd10
pop eax
cmp dword [ebp - 0xd24], 0
jne 0x4950e7
mov dword [ebp - 0x768], 0
jmp 0x495332
mov edx, dword [ebp - 0xd24]
mov dword [ebp - 0x51c], edx
push edi
push edi
add esp, 4
jmp 0x495101
add edi, 0x9eb5
or edi, 0x53ee
jmp 0x495112
pop edi
push eax
push eax
add esp, 4
and eax, 0x4fbd
xor eax, 0x3197
pop eax
lea eax, [ebp - 0x1830]
mov dword [ebp - 0xd20], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd1c], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
or edx, 0xf333
sub edx, 0x15983
and edx, 0x12211
pop edx
push edx
push edi
add esp, 4
and edx, 0xcf8e
add edx, 0xfc22
or edx, 0x17f35
add edx, 0x16968
pop edx
mov edx, dword [ebp - 0xd1c]
mov ax, word [edx]
mov word [ebp - 0x1092], ax
mov ecx, dword [ebp - 0xd1c]
add ecx, 2
mov dword [ebp - 0xd1c], ecx
mov dx, word [ebp - 0x1092]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xd20]
mov cx, word [eax]
mov word [ebp - 0x1094], cx
mov edx, dword [ebp - 0xd20]
add edx, 2
mov dword [ebp - 0xd20], edx
mov ax, word [ebp - 0x1094]
mov word [ebp - 0x3c], ax
push edx
or edx, 0x7177
or edx, 0x5c46
pop edx
push edx
call 0x4951f3
add byte [ebx + 0x46], al
inc esp
cmp byte [ecx], bh
aaa
add esp, 4
call 0x495206
add byte [edx + 0x37], al
xor dh, byte ss:[0x4349473a]
inc ebp
add esp, 4
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x495227
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x16b4], edx
jmp 0x495281
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x49514f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x49514f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x49526b
mov dword [ebp - 0x1670], 0xffffffff
jmp 0x495275
mov dword [ebp - 0x1670], 1
mov ecx, dword [ebp - 0x1670]
mov dword [ebp - 0x16b4], ecx
cmp dword [ebp - 0x16b4], 0
jne 0x4952ca
push eax
or eax, 0x14a4
pop eax
push edi
push ebx
add esp, 4
sub edi, 0x4aac
jmp 0x4952a5
add edi, 0x4c17
call 0x4952b8
add byte [ecx + ecx*2], dh
aaa
inc ebp
dec esi
inc esp
xor eax, 0x5f04c483
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x768], edx
jmp 0x495332
push eax
push edx
add esp, 4
or eax, 0x1475f
sub eax, 0x94e1
pop eax
push eax
add eax, 0x572c
sub eax, 0xea68
pop eax
push esi
push eax
add esp, 4
sub esi, 0x8bf8
and esi, 0x351e
pop esi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xd24]
je 0x495328
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x4950f3
mov dword [ebp - 0x768], 0
push edx
or edx, 0x10de3
pop edx
push edx
push ebx
add esp, 4
xor edx, 0x13a37
jmp 0x49534a
and edx, 0x1466c
xor edx, 0xb76d
pop edx
push esi
push edx
add esp, 4
jmp 0x495363
pop esi
cmp dword [ebp - 0x768], 0
jne 0x4953ae
push ebx
xor ebx, 0x3f7c
jmp 0x49537a
pop ebx
push edi
push esi
add esp, 4
and edi, 0xb0c5
add edi, 0x4732
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x159c5
and ebx, 0x13393
pop ebx
mov dword [ebp - 0xac4], 0
jmp 0x495ed6
push eax
push ebx
add esp, 4
sub eax, 0x5018
jmp 0x4953bf
add eax, 0x5f98
pop eax
push esi
sub esi, 0x16814
sub esi, 0x14203
and esi, 0x17d97
and esi, 0x10180
pop esi
mov ecx, dword [ebp - 0x768]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x324], edx
mov dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x16b8], eax
cmp dword [ebp - 0x16b8], 0
jne 0x49541f
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x495710
mov edx, dword [ebp - 0x16b8]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x16bc], eax
jne 0x495447
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x495710
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x16bc]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x16c0], edx
cmp dword [ebp - 0x16c0], 0
mov ebp, 0xffffe940
add byte [ebp + 0x11], dh
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
jmp 0x495710
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x16c0]
mov dword [ebp - 0x76c], ecx
jne 0x49549e
mov edx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], edx
jmp 0x495710
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a30], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a34], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a38], edx
mov dword [ebp - 0x770], 0
jmp 0x4954f8
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x495704
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a30]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x1a34]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a38]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a3c], ecx
mov dword [ebp - 0x19c], 0
jmp 0x495568
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x49561a
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a0]
test eax, eax
je 0x49561a
push edx
push edx
add esp, 4
or edx, 0x1088c
pop edx
push edi
push esi
add esp, 4
or edi, 0x174dc
call 0x4955b8
add byte [ebx], bh
dec eax
dec edx
dec esi
dec esi
cmp al, 0x83
les eax, [ebx + ebp*8]
add ecx, dword [ecx + 0x4c]
inc ebx
or edi, 0x15a1
pop edi
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a0]
cmp edx, ecx
je 0x49560c
mov edx, dword [ebp - 0x774]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a0]
cmp eax, edx
jne 0x495613
jmp 0x495559
jmp 0x49561a
push edi
push ecx
add esp, 4
jmp 0x495626
add edi, 0x169f1
xor edi, 0x124dd
pop edi
push esi
and esi, 0x29e5
call 0x495648
add byte [ebx], dh
xor eax, 0x364b4a33
dec eax
cmp al, byte [ebx - 0x74a1fb3c]
test dword [eax + edi*8 - 0x7afc0001], ecx
invalid
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x4957eb
push edi
add edi, 0x1861c
sub edi, 0x86b5
sub edi, 0x13915
jmp 0x495736
pop edi
push ebx
push ebx
add esp, 4
call 0x49574b
add byte [ebx + 0x46], al
dec eax
cmp eax, 0x43344632
dec edx
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x1a40], ecx
push ebx
xor ebx, 0xfda0
sub ebx, 0xd327
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0x987d
sub ecx, 0x469a
xor ecx, 0x15fd3
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x8e4e
pop ebx
mov edx, dword [ebp - 0x1a40]
mov dword [ebp - 0x1a44], edx
lea eax, [ebp - 0x1790]
push eax
call dword [ebp - 0x1a44]
test eax, eax
jne 0x4957eb
push ecx
push eax
add esp, 4
call 0x4957bc
add byte [edi], bh
aaa
xor eax, dword [esp + eax*2 + 0x42]
cmp eax, dword [ebx - 0xe7efb3c]
inc eax
cdq
add byte [eax], al
add ecx, 0x1362a
call 0x4957d8
add byte [ebx + 0x4c], al
inc ebp
dec ebx
inc ebp
dec esi
cmp eax, dword [ebx - 0x38a6fb3c]
test dword [esi*8 + 0xffff], edi
add byte [eax], al
jmp 0x495ed6
push esi
or esi, 0x10fd7
pop esi
push edi
push esi
add esp, 4
or edi, 0x8204
pop edi
push ebx
push ebx
add esp, 4
xor ebx, 0x11e67
jmp 0x495810
add ebx, 0x3334
or ebx, 0x9237
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a48], ecx
mov edx, dword [ebp - 0x1a48]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a4c], eax
mov ecx, dword [ebp - 0x1a4c]
mov dword [ebp - 0x16c8], ecx
push esi
push ebx
add esp, 4
call 0x49585a
add byte [edx], bh
cmp bh, byte [edi]
inc esi
xor eax, 0x35504541
dec esi
add esp, 4
pop esi
push edi
push ebx
add esp, 4
add edi, 0x100b
jmp 0x495870
xor edi, 0x3fc7
pop edi
cmp dword [ebp - 0x16c8], 0
jne 0x49588f
mov dword [ebp - 0x2d0], 0
jmp 0x495b36
mov edx, dword [ebp - 0x16c8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd34], ecx
push ecx
or ecx, 0x38c4
and ecx, 0x11de0
pop ecx
push ebx
push eax
add esp, 4
call 0x4958c3
add byte [edi + 0x43], al
aaa
push eax
dec eax
cmp ecx, dword [edx + eax*2 + 0x4b]
add esp, 4
or ebx, 0x17d6
xor ebx, 0x67a3
pop ebx
cmp dword [ebp - 0xd34], 0
jne 0x4958eb
mov dword [ebp - 0x2d0], 0
jmp 0x495b36
mov edx, dword [ebp - 0xd34]
mov dword [ebp - 0x520], edx
push edi
xor edi, 0x166e9
and edi, 0xbb38
call 0x495913
add byte [edi], bh
dec ebx
dec esp
inc edx
inc ebp
dec ecx
xor eax, 0xc4833c3d
add al, 0xe8
or al, byte [eax]
add byte [eax], al
add byte [esi], bh
xor bh, byte [edi + esi]
inc esp
cmp al, 0x46
xor bh, byte [edi]
add esp, 4
pop edi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xd30], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd2c], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
push esi
add esp, 4
jmp 0x495961
or edi, 0x135ef
call 0x495975
add byte [esi], bh
cmp eax, 0x3b354b3b
inc esp
dec esp
add esp, 4
pop edi
push edx
push ecx
add esp, 4
sub edx, 0x1387a
pop edx
mov edx, dword [ebp - 0xd2c]
mov ax, word [edx]
mov word [ebp - 0x1096], ax
mov ecx, dword [ebp - 0xd2c]
add ecx, 2
mov dword [ebp - 0xd2c], ecx
mov dx, word [ebp - 0x1096]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xd30]
mov cx, word [eax]
mov word [ebp - 0x1098], cx
mov edx, dword [ebp - 0xd30]
add edx, 2
mov dword [ebp - 0xd30], edx
mov ax, word [ebp - 0x1098]
mov word [ebp - 0x40], ax
push ebx
push ecx
add esp, 4
jmp 0x4959e6
pop ebx
push esi
push eax
add esp, 4
or esi, 0x1365e
call 0x4959fe
add byte [edi + 0x44], al
dec esp
inc eax
cmp al, 0x4e
add esp, 4
add esi, 0xe139
sub esi, 0x39c6
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x495a2b
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x16d0], edx
jmp 0x495a85
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
invalid
invalid
invalid
invalid