Function at 0x479370
Capabilities:
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x603818
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xdc
push ebx
push ebp
push esi
push edi
push 0
mov ebx, ecx
push 0x1bf
mov dword [esp + 0xf0], ebx
call fcn.004a775e
mov dword [esp + 0xf4], 0
lea ecx, [ebx + 0x98]
mov dword [ebx], 0x65f7e8
call fcn.00404ef0
lea ecx, [ebx + 0x9c]
call fcn.00404ef0
push 0x651e48
lea ecx, [ebx + 0xa0]
mov byte [esp + 0xf8], 2
call fcn.00404720
lea ecx, [ebx + 0xa4]
call fcn.00404ef0
lea ecx, [ebx + 0xa8]
mov byte [esp + 0xf4], 4
call fcn.004358e0
lea ecx, [ebx + 0x1d0]
mov byte [esp + 0xf4], 5
call fcn.004358e0
lea ecx, [ebx + 0x2f8]
mov byte [esp + 0xf4], 6
call fcn.004358e0
lea ecx, [ebx + 0x420]
mov byte [esp + 0xf4], 7
call fcn.004358e0
lea ecx, [ebx + 0x548]
mov byte [esp + 0xf4], 8
call fcn.004358e0
lea ecx, [ebx + 0x670]
call fcn.0040d460
lea ecx, [ebx + 0x678]
mov byte [esp + 0xf4], 0xa
call fcn.0040af60
lea ecx, [ebx + 0x820]
mov byte [esp + 0xf4], 0xb
call fcn.0040af60
lea ecx, [ebx + 0x9c8]
mov byte [esp + 0xf4], 0xc
call fcn.0040d4a0
lea ecx, [ebx + 0xa3c]
mov byte [esp + 0xf4], 0xd
call fcn.0040d4a0
lea ecx, [ebx + 0xab0]
mov byte [esp + 0xf4], 0xe
call fcn.004076b0
lea ecx, [ebx + 0xb24]
mov byte [esp + 0xf4], 0xf
call fcn.00464460
mov byte [esp + 0xf4], 0x10
mov dword [esp + 0xac], 0x63002e
mov dword [esp + 0x86], 0x630065
mov dword [esp + 0x9c], 0x6e0069
mov dword [esp + 0xb6], 0x750043
mov dword [esp + 0xd4], 0x700073
mov dword [esp + 0xa4], 0x630073
mov dword [esp + 0xda], 0x43003f
mov eax, 0x61
mov dword [esp + 0x90], 0x6c002e
mov word [esp + 0xd2], ax
mov ecx, 0x43
mov eax, 0x65
mov word [esp + 0xc8], cx
mov word [esp + 0x9a], ax
lea ecx, [ebx + 0x98]
mov eax, 0x78
mov dword [esp + 0xbc], 0x6f0074
mov word [esp + 0xd8], ax
mov ebp, 0x6f
mov eax, 0x74
mov dword [esp + 0xce], 0x2e0065
mov word [esp + 0x78], ax
mov edx, 0x65
xor eax, eax
mov dword [esp + 0xb2], 0x2f006d
mov word [esp + 0xe6], ax
mov eax, 0x73
mov word [esp + 0xba], ax
lea eax, [esp + 0x74]
push eax
mov dword [esp + 0xc8], 0x2f0072
mov dword [esp + 0xe2], 0x64006f
mov dword [esp + 0xac], 0x650075
mov dword [esp + 0x9a], 0x6d0067
mov dword [esp + 0x8e], 0x720075
mov dword [esp + 0x78], 0x740068
mov dword [esp + 0x86], 0x73002f
mov dword [esp + 0xc4], 0x65006d
mov dword [esp + 0x7e], 0x730070
mov word [esp + 0x92], dx
mov dword [esp + 0xce], 0x64006f
mov dword [esp + 0xe6], 0x3d0065
mov dword [esp + 0xa4], 0x650072
mov dword [esp + 0x82], 0x2f003a
mov word [esp + 0xb4], bp
mov word [esp + 0x98], bp
call fcn.00404df0
mov eax, 0x68
mov dword [esp + 0x22], 0x630061
mov word [esp + 0x10], ax
lea esi, [ebp + 3]
mov eax, 0x63
mov dword [esp + 0x40], 0x6d006f
mov word [esp + 0x3e], ax
lea ebp, [esi - 0xd]
mov edx, 0x70
mov dword [esp + 0x3a], 0x2e006f
xor eax, eax
mov word [esp + 0x16], dx
mov ecx, 0x64
mov word [esp + 0x72], ax
mov edx, 0x2f
mov word [esp + 0x5a], cx
lea eax, [esp + 0x10]
mov word [esp + 0x6c], cx
mov dword [esp + 0x2a], 0x65006c
lea ecx, [ebx + 0x9c]
mov dword [esp + 0x5c], 0x720069
mov dword [esp + 0x30], 0x740061
mov dword [esp + 0x48], 0x700075
mov dword [esp + 0x26], 0x650063
mov dword [esp + 0x1e], 0x630070
mov dword [esp + 0x18], 0x2f003a
mov dword [esp + 0x60], 0x630065
mov dword [esp + 0x36], 0x720070
mov dword [esp + 0x12], 0x740074
mov dword [esp + 0x68], 0x6f0063
mov dword [esp + 0x6e], 0x3d0065
mov dword [esp + 0x50], 0x740072
mov dword [esp + 0x44], 0x73002f
mov word [esp + 0x2e], si
mov dword [esp + 0x4c], 0x6f0070
mov dword [esp + 0x56], 0x650072
mov word [esp + 0x34], bp
mov dword [esp + 0x64], 0x3f0074
mov word [esp + 0x1c], dx
mov word [esp + 0x54], dx
push eax
call fcn.00404df0
mov ecx, dword [esp + 0xec]
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xe8
ret 4