Function at 0x10005d89
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or ecx, 0xaf65
pop ecx
jmp 0x10005504
push ecx
push edi
add esp, 4
call 0x10005516
add byte [esi], dh
inc ecx
push eax
inc edi
inc ebx
inc ebx
add esp, 4
or ecx, 0xe9d6
call 0x1000552c
add byte [ecx + 0x43], al
xor al, 0x40
xor al, 0x32
aaa
add esp, 4
and ecx, 0xf07f
pop ecx
mov dword [ebp - 0x494], 0
push edi
or edi, 0x17ea7
pop edi
push edx
push edx
add esp, 4
jmp 0x10005553
sub edx, 0xfd76
add edx, 0x17f15
and edx, 0x8e4a
pop edx
push eax
push ecx
add esp, 4
and eax, 0x4299
pop eax
push ecx
push edx
add esp, 4
or ecx, 0x119a8
xor ecx, 0xa56b
add ecx, 0x1585d
xor ecx, 0x8244
pop ecx
push eax
push edx
add esp, 4
xor eax, 0xa5fa
pop eax
push edi
xor edi, 0xadc2
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xdd4]
mov dword [ebp - 0x18e4], eax
push ecx
xor ecx, 0x4c37
pop ecx
push eax
or eax, 0x13c11
jmp 0x100055cd
xor eax, 0xd8c6
pop eax
push ecx
push edx
add esp, 4
and ecx, 0x14d86
xor ecx, 0x7bed
jmp 0x100055ea
pop ecx
mov dword [ebp - 0x277c], 0xffffffff
push ecx
call 0x10005605
add byte [edi + 0x38], al
cmp dh, byte ss:[edx]
xor al, 0x39
dec esp
cmp dword [ebx + 0xae804c4], eax
add byte [eax], al
add byte [eax], al
dec ebx
inc edx
xor eax, 0x373b3f3f
cmp esi, dword [edi]
add esp, 4
or ecx, 0xe786
add ecx, 0x12ed7
pop ecx
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x5c0], ecx
jmp 0x10005644
mov edx, dword [ebp - 0x5c0]
add edx, 1
mov dword [ebp - 0x5c0], edx
push ebx
push ecx
add esp, 4
sub ebx, 0xdf64
pop ebx
push esi
xor esi, 0x179af
xor esi, 0x8dc0
add esi, 0x93d6
pop esi
push ecx
push ecx
add esp, 4
add ecx, 0x181bd
add ecx, 0x97d8
pop ecx
mov eax, dword [ebp - 0x5c0]
sub eax, dword [ebp - 0x488]
cmp eax, 0xffffffff
jb 0x100056be
push ebx
xor ebx, 0x73b8
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0x12dad
or ebx, 0x9ad0
pop ebx
push eax
push edx
add esp, 4
and eax, 0x7dd6
or eax, 0xfc32
and eax, 0x8d30
pop eax
jmp 0x100058ec
mov dword [ebp - 0xe88], 7
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0xc04], ecx
push ebx
push edx
add esp, 4
sub ebx, 0x124d7
jmp 0x100056e8
call 0x100056f6
add byte [ebp + 0x35], cl
dec edx
dec esp
inc esi
dec esp
dec esp
inc edx
add esp, 4
pop ebx
push edx
push eax
add esp, 4
and edx, 0x1529a
pop edx
mov edx, dword [ebp - 0x18e4]
mov dword [ebp - 0xc00], edx
mov dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x18e4]
jne 0x1000576d
push edx
jmp 0x10005733
add edx, 0xdd63
jmp 0x1000573e
pop edx
push ebx
push ebx
add esp, 4
or ebx, 0x1479d
call 0x10005758
add byte [esi + 0x41], al
cmp bh, byte [ebx]
inc ebp
xor eax, 0xc4833738
add al, 0x5b
mov ecx, dword [ebp - 0xe8c]
mov dword [ebp - 0x18b0], ecx
jmp 0x1000589e
cmp dword [ebp - 0xe88], 0
jle 0x10005892
push edi
push edi
add esp, 4
call 0x1000578e
add byte [esi], bh
cmp byte [ebx], dh
inc edi
dec esi
inc ebx
cmp edi, dword [ecx]
xor al, 0x83
les eax, [ecx + eax*4]
out dx, eax
adc eax, edx
add byte [eax], al
xor edi, 0x18488
pop edi
push edx
add edx, 0x16a88
add edx, 0x513d
pop edx
mov edx, dword [ebp - 0xc04]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xc00]
movzx edx, byte [ecx]
cmp eax, edx
je 0x1000582e
push eax
jmp 0x100057c9
pop eax
push edi
call 0x100057da
add byte [ebx + 0x3d], al
inc ebp
dec ecx
inc ecx
inc esi
cmp byte [ebp + 0x44], al
add esp, 4
jmp 0x100057e2
pop edi
push edi
call 0x100057f0
add byte [ebp + 0x33], al
dec ebp
dec esi
dec edi
xor eax, 0x5f04c483
mov eax, dword [ebp - 0xc04]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc00]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x10005816
mov dword [ebp - 0x18e8], 1
jmp 0x10005820
mov dword [ebp - 0x18e8], 0xffffffff
mov ecx, dword [ebp - 0x18e8]
mov dword [ebp - 0xe8c], ecx
jmp 0x10005892
push edx
and edx, 0x6bf2
add edx, 0x107d5
xor edx, 0x17b12
pop edx
push edx
push ebx
add esp, 4
and edx, 0x169e0
and edx, 0x11638
or edx, 0x9b4f
or edx, 0x84a5
pop edx
mov edx, dword [ebp - 0xe88]
sub edx, 1
mov dword [ebp - 0xe88], edx
mov eax, dword [ebp - 0xc04]
add eax, 1
mov dword [ebp - 0xc04], eax
mov ecx, dword [ebp - 0xc00]
add ecx, 1
mov dword [ebp - 0xc00], ecx
jmp 0x1000576d
mov edx, dword [ebp - 0xe8c]
mov dword [ebp - 0x18b0], edx
cmp dword [ebp - 0x18b0], 0
jne 0x100058e7
push edi
xor edi, 0x17f78
call 0x100058bc
add byte [edx + 0x4d], al
push eax
xor ecx, dword [esi + 0x38]
aaa
dec eax
add esp, 4
call 0x100058cf
add byte [edx + esi], bh
cmp al, 0x48
cmp dword [ebx], edi
inc edx
aaa
add esp, 4
sub edi, 0x50b
pop edi
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xbfc], eax
jmp 0x10005928
jmp 0x10005635
push eax
sub eax, 0x4a1a
pop eax
push eax
and eax, 0x14a29
add eax, 0xc823
pop eax
push edx
sub edx, 0xd8b5
xor edx, 0x3536
jmp 0x10005917
add edx, 0x4a97
pop edx
mov dword [ebp - 0xbfc], 0
push eax
push ebx
add esp, 4
or eax, 0x161d6
add eax, 0xf374
xor eax, 0x3aef
pop eax
push ebx
xor ebx, 0xdbf0
and ebx, 0x8e71
add ebx, 0xded3
or ebx, 0x32b8
pop ebx
mov byte [ebp - 0x9c0], 0x45
mov byte [ebp - 0x9bf], 0x78
mov byte [ebp - 0x9be], 0x69
mov byte [ebp - 0x9bd], 0x74
mov byte [ebp - 0x9bc], 0x50
mov byte [ebp - 0x9bb], 0x72
mov byte [ebp - 0x9ba], 0x6f
mov byte [ebp - 0x9b9], 0x63
mov byte [ebp - 0x9b8], 0x65
mov byte [ebp - 0x9b7], 0x73
mov byte [ebp - 0x9b6], 0x73
mov byte [ebp - 0x9b5], 0
push edx
xor edx, 0xfb2a
jmp 0x100059bb
pop edx
push ecx
push edx
add esp, 4
add ecx, 0xd271
xor ecx, 0x15061
add ecx, 0xba38
pop ecx
push edx
push ecx
add esp, 4
add edx, 0x14121
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1a68], cx
mov edx, 0x65
mov word [ebp - 0x1a66], dx
mov eax, 0x72
mov word [ebp - 0x1a64], ax
mov ecx, 0x6e
mov word [ebp - 0x1a62], cx
mov edx, 0x65
mov word [ebp - 0x1a60], dx
mov eax, 0x6c
mov word [ebp - 0x1a5e], ax
mov ecx, 0x33
mov word [ebp - 0x1a5c], cx
mov edx, 0x32
mov word [ebp - 0x1a5a], dx
mov eax, 0x2e
mov word [ebp - 0x1a58], ax
mov ecx, 0x64
mov word [ebp - 0x1a56], cx
mov edx, 0x6c
mov word [ebp - 0x1a54], dx
mov eax, 0x6c
mov word [ebp - 0x1a52], ax
xor ecx, ecx
mov word [ebp - 0x1a50], cx
push ebx
push esi
add esp, 4
jmp 0x10005a84
and ebx, 0x1047a
pop ebx
push ebx
sub ebx, 0x70d6
pop ebx
push ecx
push esi
add esp, 4
xor ecx, 0x3d3b
or ecx, 0x2286
and ecx, 0x3cb4
pop ecx
push edx
push ebx
add esp, 4
call 0x10005abe
add byte [eax + 0x47], cl
aas
xor edi, dword [edx]
dec esi
cmp eax, dword [edx - 0x7d]
les eax, [edx + ebx*2]
push esi
push edx
add esp, 4
add esi, 0x1866
call 0x10005ad9
add byte [ecx + 0x4d], al
aas
xor eax, 0xc4833833
add al, 0x5e
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2688], edx
mov eax, dword [ebp - 0x2688]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x268c], ecx
mov edx, dword [ebp - 0x268c]
mov dword [ebp - 0x18ec], edx
push ebx
push edx
add esp, 4
jmp 0x10005b0f
jmp 0x10005b16
xor ebx, 0x8291
pop ebx
push edi
push ecx
add esp, 4
xor edi, 0x16e13
pop edi
push edx
or edx, 0x2e00
add edx, 0xd311
pop edx
cmp dword [ebp - 0x18ec], 0
jne 0x10005b4f
mov dword [ebp - 0x398], 0
jmp 0x10005e0b
mov eax, dword [ebp - 0x18ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xe98], edx
push esi
push ebx
add esp, 4
or esi, 0xe29e
and esi, 0x4aa
pop esi
push ebx
sub ebx, 0x6717
and ebx, 0x17e25
pop ebx
push esi
push edi
add esp, 4
and esi, 0x167bf
or esi, 0x616
pop esi
cmp dword [ebp - 0xe98], 0
jne 0x10005bab
mov dword [ebp - 0x398], 0
jmp 0x10005e0b
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0x5c4], eax
push edi
sub edi, 0x13a1e
sub edi, 0x140ee
call 0x10005bd1
add byte [ebx + eax*2], bh
dec ecx
dec edi
push eax
cmp eax, 0x4c48337
and edi, 0x1205d
pop edi
push esi
or esi, 0x1354d
sub esi, 0xa1b1
pop esi
lea ecx, [ebp - 0x1a68]
mov dword [ebp - 0xe94], ecx
mov edx, dword [ebp - 0x5c4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xe90], eax
xor ecx, ecx
mov word [ebp - 0x264], cx
xor edx, edx
mov word [ebp - 0x138], dx
push edi
push ecx
add esp, 4
sub edi, 0x8184
jmp 0x10005c27
xor edi, 0xec53
and edi, 0x17f0e
pop edi
push esi
and esi, 0x11df7
pop esi
push edi
push edi
add esp, 4
add edi, 0x146c5
pop edi
mov eax, dword [ebp - 0xe90]
mov cx, word [eax]
mov word [ebp - 0x12ae], cx
mov edx, dword [ebp - 0xe90]
add edx, 2
mov dword [ebp - 0xe90], edx
mov ax, word [ebp - 0x12ae]
mov word [ebp - 0x264], ax
mov ecx, dword [ebp - 0xe94]
mov dx, word [ecx]
mov word [ebp - 0x12b0], dx
mov eax, dword [ebp - 0xe94]
add eax, 2
mov dword [ebp - 0xe94], eax
mov cx, word [ebp - 0x12b0]
mov word [ebp - 0x138], cx
push ecx
push esi
add esp, 4
add ecx, 0xb7e4
sub ecx, 0xc41a
sub ecx, 0x13c30
add ecx, 0x15c7e
pop ecx
push ecx
add ecx, 0xd40d
xor ecx, 0x2e51
xor ecx, 0x14dcf
pop ecx
movzx edx, word [ebp - 0x138]
test edx, edx
jne 0x10005cf7
movzx eax, word [ebp - 0x264]
movzx ecx, word [ebp - 0x138]
sub eax, ecx
mov dword [ebp - 0x18f4], eax
jmp 0x10005d5a
movzx edx, word [ebp - 0x264]
movzx eax, word [ebp - 0x138]
cmp edx, eax
je 0x10005c16
movzx ecx, word [ebp - 0x264]
xor ecx, 0x20
movzx edx, word [ebp - 0x138]
cmp ecx, edx
je 0x10005c16
movzx eax, word [ebp - 0x264]
movzx ecx, word [ebp - 0x138]
cmp eax, ecx
jge 0x10005d44
mov dword [ebp - 0x18f0], 0xffffffff
jmp 0x10005d4e
mov dword [ebp - 0x18f0], 1
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
cmp dword [ebp - 0x18f4], 0
jne 0x10005da3
push ecx
push ebx
add esp, 4
add ecx, 0x11953
sub ecx, 0xe3f8
add ecx, 0xfd72
call 0x10005d89
add byte [ebp + 0x41], al
dec edx
inc ecx
dec ebp
inc edi
inc esi
xor eax, dword [eax - 0x7d]
les eax, [ecx + ebx*2]
push edx
and edx, 0x2e03
pop edx
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x398], eax
jmp 0x10005e0b
push eax
push ebx
add esp, 4
xor eax, 0x17c1a
add eax, 0x10c3e
pop eax
push eax
push eax
add esp, 4
add eax, 0x1157d
sub eax, 0x1823e
pop eax
push edi
sub edi, 0x784b
add edi, 0x10c24
pop edi
mov ecx, dword [ebp - 0x5c4]
mov edx, dword [ecx]
mov dword [ebp - 0x5c4], edx
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [ebp - 0xe98]
je 0x10005e01
mov ecx, dword [ebp - 0x5c4]
cmp dword [ecx + 0x30], 0
jne 0x10005bb7
mov dword [ebp - 0x398], 0
push edx
or edx, 0x1465b
pop edx
push edx
push ecx
add esp, 4
or edx, 0xb5f2
sub edx, 0xadbc
pop edx
push edx
push ecx
add esp, 4
or edx, 0x173d6
or edx, 0x4e6f
or edx, 0x16fb7
pop edx
cmp dword [ebp - 0x398], 0
jne 0x10006756
mov edx, 0x6b
mov word [ebp - 0x1ac8], dx
mov eax, 0x65
mov word [ebp - 0x1ac6], ax
mov ecx, 0x72
mov word [ebp - 0x1ac4], cx
mov edx, 0x6e
mov word [ebp - 0x1ac2], dx
mov eax, 0x65
mov word [ebp - 0x1ac0], ax
mov ecx, 0x6c
mov word [ebp - 0x1abe], cx
mov edx, 0x33
mov word [ebp - 0x1abc], dx
mov eax, 0x32
mov word [ebp - 0x1aba], ax
mov ecx, 0x2e
mov word [ebp - 0x1ab8], cx
mov edx, 0x64
mov word [ebp - 0x1ab6], dx
mov eax, 0x6c
mov word [ebp - 0x1ab4], ax
mov ecx, 0x6c
mov word [ebp - 0x1ab2], cx
xor edx, edx
mov word [ebp - 0x1ab0], dx
push ecx
jmp 0x10005eed
sub ecx, 0xd4bf
xor ecx, 0x9b98
pop ecx
push eax
xor eax, 0x16c7d
add eax, 0x1462a
jmp 0x10005f0e
add eax, 0xb5f4
pop eax
mov byte [ebp - 0xb0c], 0x4c
mov byte [ebp - 0xb0b], 0x6f
mov byte [ebp - 0xb0a], 0x61
mov byte [ebp - 0xb09], 0x64
mov byte [ebp - 0xb08], 0x4c
mov byte [ebp - 0xb07], 0x69
mov byte [ebp - 0xb06], 0x62
mov byte [ebp - 0xb05], 0x72
mov byte [ebp - 0xb04], 0x61
mov byte [ebp - 0xb03], 0x72
mov byte [ebp - 0xb02], 0x79
mov byte [ebp - 0xb01], 0x57
mov byte [ebp - 0xb00], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x2690], eax
mov ecx, dword [ebp - 0x2690]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x2694], edx
mov eax, dword [ebp - 0x2694]
mov dword [ebp - 0x18f8], eax
push ebx
push ecx
add esp, 4
xor ebx, 0x12ad9
and ebx, 0x141d3
or ebx, 0x8894
pop ebx
push edi
push edi
add esp, 4
and edi, 0x89c8
jmp 0x10005fc2
sub edi, 0x13c9e
pop edi
cmp dword [ebp - 0x18f8], 0
jne 0x10005fe1
mov dword [ebp - 0x870], 0
jmp 0x1000629d
mov ecx, dword [ebp - 0x18f8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xea4], eax
push ebx
push esi
add esp, 4
sub ebx, 0x125ce
and ebx, 0xae2f
pop ebx
push esi
push ecx
add esp, 4
add esi, 0xfc37
and esi, 0xdae1
pop esi
push eax
sub eax, 0x30e7
xor eax, 0x185a7
pop eax
cmp dword [ebp - 0xea4], 0
jne 0x1000603d
mov dword [ebp - 0x870], 0
jmp 0x1000629d
mov ecx, dword [ebp - 0xea4]
mov dword [ebp - 0x5c8], ecx