Function at 0x476cc0
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x562f2e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
mov edi, ecx
push eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x14], edi
push ecx
push edx
mov ecx, edi
call fcn.004f7de0
lea ebp, [edi + 0xa8]
mov dword [esp + 0x1c], 0
mov ecx, ebp
call fcn.0047a520
lea ecx, [edi + 0x1d4]
mov byte [esp + 0x1c], 1
call fcn.004791b0
lea ecx, [edi + 0x54c]
mov byte [esp + 0x1c], 2
call fcn.00478240
lea ecx, [edi + 0x880]
mov byte [esp + 0x1c], 3
call fcn.0047b720
lea ecx, [edi + 0xdcc]
mov byte [esp + 0x1c], 4
call fcn.0047e890
lea esi, [edi + 0xe74]
mov byte [esp + 0x1c], 5
mov ecx, esi
call fcn.005138ea
mov dword [esi], 0x574354
lea esi, [edi + 0xeb4]
mov byte [esp + 0x1c], 6
mov ecx, esi
call fcn.005138ea
mov dword [esi], 0x5739b8
lea esi, [edi + 0xef4]
mov byte [esp + 0x1c], 7
mov ecx, esi
call fcn.005138ea
mov dword [esi], 0x57681c
lea ecx, [edi + 0xf34]
mov byte [esp + 0x1c], 8
call fcn.00513860
lea ebx, [edi + 0xf40]
mov byte [esp + 0x1c], 9
mov ecx, ebx
call fcn.005132c6
lea ecx, [edi + 0xf54]
mov byte [esp + 0x1c], 0xa
call fcn.005132c6
lea esi, [edi + 0xf68]
mov byte [esp + 0x1c], 0xb
mov ecx, esi
mov dword [esp + 0x28], esi
call fcn.005132d2
xor eax, eax
mov dword [esi + 0x20], 0x571d0c
mov dword [esi + 0x24], eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x2c], eax
mov dword [esi + 0x28], eax
mov byte [esp + 0x1c], 0xd
lea ecx, [esi + 0x34]
call fcn.004098b0
lea ecx, [esi + 0x64]
mov byte [esp + 0x1c], 0xe
call fcn.004096b0
lea ecx, [esi + 0x78]
mov byte [esp + 0x1c], 0xf
call fcn.004096b0
lea ecx, [esi + 0x8c]
mov byte [esp + 0x1c], 0x10
call fcn.004096b0
lea ecx, [esi + 0xa0]
mov byte [esp + 0x1c], 0x11
call fcn.004096b0
lea ecx, [esi + 0xb4]
mov byte [esp + 0x1c], 0x12
call fcn.00409b20
lea ecx, [esi + 0x130]
mov byte [esp + 0x1c], 0x13
call fcn.00409f50
push fcn.00409ff0
push 0x409fd0
push 6
lea eax, [esi + 0x144]
push 0x14
push eax
mov byte [esp + 0x30], 0x14
call fcn.0051451a
push fcn.004096d0
push fcn.004096b0
push 6
lea ecx, [esi + 0x1bc]
push 0x14
push ecx
mov byte [esp + 0x30], 0x15
call fcn.0051451a
lea ecx, [esi + 0x234]
mov byte [esp + 0x1c], 0x16
call fcn.0040a280
push fcn.004096d0
push fcn.004096b0
push 8
lea edx, [esi + 0x248]
push 0x14
push edx
mov byte [esp + 0x30], 0x17
call fcn.0051451a
lea ecx, [esi + 0x2e8]
mov byte [esp + 0x1c], 0x18
call fcn.0040a4d0
lea ecx, [esi + 0x2fc]
mov byte [esp + 0x1c], 0x19
call fcn.0040a700
lea ecx, [esi + 0x310]
mov byte [esp + 0x1c], 0x1a
call fcn.004096b0
lea ecx, [esi + 0x324]
mov byte [esp + 0x1c], 0x1b
call fcn.004096b0
lea ecx, [esi + 0x338]
mov byte [esp + 0x1c], 0x1c
call fcn.0040a930
lea ecx, [esi + 0x34c]
mov byte [esp + 0x1c], 0x1d
call fcn.0040ab50
lea ecx, [esi + 0x384]
mov byte [esp + 0x1c], 0x1e
call fcn.004096b0
lea ecx, [esi + 0x398]
mov byte [esp + 0x1c], 0x1f
call fcn.004096b0
lea ecx, [esi + 0x3ac]
mov byte [esp + 0x1c], 0x20
call fcn.0040abd0
lea ecx, [esi + 0x410]
mov byte [esp + 0x1c], 0x21
call fcn.004096b0
lea ecx, [esi + 0x424]
mov byte [esp + 0x1c], 0x22
call fcn.004096b0
lea ecx, [esi + 0x454]
mov byte [esp + 0x1c], 0x23
call fcn.0040ae10
lea ecx, [esi + 0x468]
mov byte [esp + 0x1c], 0x24
call fcn.004096b0
lea ecx, [esi + 0x54c]
mov byte [esp + 0x1c], 0x25
call fcn.0040b0b0
lea ecx, [esi + 0x560]
mov byte [esp + 0x1c], 0x26
call fcn.0040b330
push ebp
mov ecx, edi
mov byte [esp + 0x20], 0x27
mov dword [edi], 0x57cf40
call fcn.00513f6e
lea ecx, [esp + 0x2c]
call fcn.00411f30
push ebx
lea ecx, [esp + 0x30]
mov byte [esp + 0x20], 0x28
call fcn.00415fb0
lea eax, [edi + 0xf54]
lea ecx, [esp + 0x2c]
push eax
call fcn.00415d30
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1c], 0x27
call fcn.00411f60
mov ecx, dword [esp + 0x14]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 0xc