Function at 0x406af2
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
add eax, 0x155ee
pop eax
mov ecx, dword [ebp - 0x30]
add ecx, 0xfe
imul edx, dword [ebp - 0x2c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x2c], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x201c], ecx
push edx
sub edx, 0x127d2
daa
add dword [eax], eax
add edx, 0xa7dc
or edx, 0x18309
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x6fc
and ebx, 0x100af
add ebx, 0x2f11
sub ebx, 0x1e61
pop ebx
mov ecx, dword [ebp - 0x1770]
add ecx, 0xfe
imul edx, dword [ebp - 0x176c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x176c], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x176c]
mov dword [ebp - 0x2018], ecx
mov ecx, dword [ebp - 0x2018]
mov dword [ebp - 0x2020], ecx
mov edx, dword [ebp - 0x201c]
cmp edx, dword [ebp - 0x2020]
jae 0x4030eb
mov dword [ebp - 0x1718], 1
jmp 0x4030f5
mov dword [ebp - 0x1718], 0
mov al, byte [ebp - 0x1718]
mov byte [ebp - 0x3d9], al
movzx ecx, byte [ebp - 0x3d9]
test ecx, ecx
je 0x406169
mov dword [ebp - 0x424], 0
call 0x406178
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x424], eax
push edx
xor edx, 0xde4
or edx, 0xc32d
jmp 0x406197
pop edx
push eax
push eax
add esp, 4
add eax, 0x1f
pop eax
push edx
push edx
add esp, 4
and edx, 0xce20
sub edx, 0xe1d8
pop edx
mov edx, dword [ebp - 0x2250]
mov dword [ebp - 0x1734], edx
push ecx
and ecx, 0xa29f
or ecx, 0x971b
call 0x4061dd
add byte [edi + esi], bh
cmp dword [ebx + esi + 0x3e], ecx
inc ebx
cmp eax, dword [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
xor eax, 0x35463a40
cmp eax, 0x4e503743
add esp, 4
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0xfe
imul ecx, dword [ebp - 0x10], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x10], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x1af8], eax
mov ecx, dword [ebp - 0x1af8]
add ecx, dword [ebp - 0x1734]
mov dword [ebp - 0x424], ecx
push ebx
call 0x40624b
add byte [edi + 0x43], al
aas
aaa
inc ebp
xor esi, dword ds:[ebx]
add esp, 4
or ebx, 0x167ef
call 0x406261
add byte [edx], dh
inc ecx
dec ebp
inc esp
inc esi
aaa
inc esi
add esp, 4
jmp 0x40626d
pop ebx
mov byte [ebp - 0xc70], 0x52
mov byte [ebp - 0xc6f], 0xb9
mov byte [ebp - 0xc6e], 0x10
mov byte [ebp - 0xc6d], 0x10
mov byte [ebp - 0xc6c], 0x10
mov byte [ebp - 0xc6b], 0x10
mov byte [ebp - 0xc6a], 0x5a
push edi
push ebx
add esp, 4
or edi, 0x4a61
xor edi, 0x17715
sub edi, 0x9a90
pop edi
push edi
or edi, 0x144f2
pop edi
push edx
push edx
add esp, 4
and edx, 0x5f10
and edx, 0x8e6b
pop edx
mov byte [ebp - 0xc68], 0x52
mov byte [ebp - 0xc67], 0xb9
mov byte [ebp - 0xc66], 0x20
mov byte [ebp - 0xc65], 0x20
mov byte [ebp - 0xc64], 0x20
mov byte [ebp - 0xc63], 0x20
mov byte [ebp - 0xc62], 0x5a
push esi
push ebx
add esp, 4
xor esi, 0xfbf4
sub esi, 0x11226
call 0x406321
add byte [0x50343a37], dh
inc esi
cmp al, 0x3b
add esp, 4
pop esi
push ebx
push ecx
add esp, 4
jmp 0x406333
pop ebx
mov dword [ebp - 0x2254], 0xe
push edi
push eax
add esp, 4
xor edi, 0x557d
pop edi
push eax
jmp 0x406352
or eax, 0x12420
add eax, 0x757f
jmp 0x406367
pop eax
push edi
sub edi, 0x4eca
pop edi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc70]
mov dword [ebp - 0x1738], ecx
push edx
sub edx, 0x569d
jmp 0x406394
add edx, 0xc3ea
pop edx
push ecx
sub ecx, 0x17206
pop ecx
push ebx
or ebx, 0x382e
add ebx, 0x10b11
xor ebx, 0xae82
pop ebx
mov dword [ebp - 0x2258], 0xffffffff
push eax
sub eax, 0x1b81
add eax, 0x14c3e
sub eax, 0x119a7
and eax, 0x1c0c
pop eax
push esi
push edx
add esp, 4
or esi, 0x3178
xor esi, 0xc2a3
or esi, 0xa0e
pop esi
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x548], edx
jmp 0x406410
mov eax, dword [ebp - 0x548]
add eax, 1
mov dword [ebp - 0x548], eax
push edi
xor edi, 0x10587
pop edi
push ecx
xor ecx, 0xa59b
or ecx, 0x15441
pop ecx
push ebx
sub ebx, 0x6eed
or ebx, 0x553
and ebx, 0x1645e
pop ebx
push esi
sub esi, 0xecc0
pop esi
mov ecx, dword [ebp - 0x548]
sub ecx, dword [ebp - 0x424]
cmp ecx, 0xffffffff
jb 0x40648a
push esi
and esi, 0xa4c3
jmp 0x406460
jmp 0x406467
add esi, 0x15014
pop esi
push eax
jmp 0x406478
and eax, 0x12f19
add eax, 0x1484f
pop eax
jmp 0x4066b8
mov dword [ebp - 0xd84], 7
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0xb48], edx
push edi
push edi
add esp, 4
xor edi, 0xe981
jmp 0x4064b0
add edi, 0x13b6e
call 0x4064c2
add byte [eax + 0x48], dl
cmp dword [esi + 0x34], ecx
dec ecx
add esp, 4
pop edi
push edi
push ebx
add esp, 4
add edi, 0xba68
pop edi
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0xb44], eax
mov dword [ebp - 0xd88], 0
mov ecx, dword [ebp - 0x548]
cmp ecx, dword [ebp - 0x1738]
jne 0x406539
push edi
sub edi, 0x6172
add edi, 0x12148
call 0x40650f
add byte [edx + 0x3f], cl
inc ecx
cmp eax, 0xc4833933
add al, 0x5f
push edx
jmp 0x40651b
xor edx, 0x17c9e
sub edx, 0x180c6
pop edx
mov edx, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], edx
jmp 0x40666a
cmp dword [ebp - 0xd84], 0
jle 0x40665e
push esi
push edx
add esp, 4
add esi, 0x13686
pop esi
push edi
xor edi, 0x6ae7
xor edi, 0xfed7
add edi, 0x10f33
pop edi
push esi
push ecx
add esp, 4
sub esi, 0x1288a
xor esi, 0x4a43
pop esi
mov eax, dword [ebp - 0xb48]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb44]
movzx eax, byte [edx]
cmp ecx, eax
je 0x4065fa
push edi
jmp 0x406596
pop edi
push edi
call 0x4065a4
add byte [edi], bh
cmp al, 0x3e
dec edx
dec esp
xor eax, 0x8104c483
out dx, eax
test byte [eax + 0x515f0000], al
push edx
add esp, 4
xor ecx, 0x1764f
or ecx, 0x443b
pop ecx
mov ecx, dword [ebp - 0xb48]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb44]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x4065e2
mov dword [ebp - 0x173c], 1
jmp 0x4065ec
mov dword [ebp - 0x173c], 0xffffffff
mov edx, dword [ebp - 0x173c]
mov dword [ebp - 0xd88], edx
jmp 0x40665e
push edi
or edi, 0x122c
sub edi, 0x33fa
pop edi
push ecx
push edx
add esp, 4
and ecx, 0xc0fa
add ecx, 0x11b96
add ecx, 0x19f1
pop ecx
push ebx
push ecx
add esp, 4
jmp 0x40662b
pop ebx
mov eax, dword [ebp - 0xd84]
sub eax, 1
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xb48]
add ecx, 1
mov dword [ebp - 0xb48], ecx
mov edx, dword [ebp - 0xb44]
add edx, 1
mov dword [ebp - 0xb44], edx
jmp 0x406539
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
jne 0x4066b3
push ebx
push esi
add esp, 4
xor ebx, 0x75d1
sub ebx, 0xa0b5
pop ebx
push esi
add esi, 0x3daa
sub esi, 0x135d8
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x101b4
add edx, 0x185c2
pop edx
mov ecx, dword [ebp - 0x548]
mov dword [ebp - 0x414], ecx
jmp 0x4066f4
jmp 0x406401
push ebx
push ecx
add esp, 4
sub ebx, 0x113bb
pop ebx
push ebx
or ebx, 0x1664b
and ebx, 0x481c
pop ebx
push esi
sub esi, 0x53af
call 0x4066e6
add byte [esi + 0x42], cl
inc ebp
xor dh, byte [ebx]
xor bh, byte [ebx]
add esp, 4
pop esi
mov dword [ebp - 0x414], 0
push ecx
sub ecx, 0x9f7d
pop ecx
push edx
push edx
add esp, 4
and edx, 0xf147
pop edx
push edi
push ebx
add esp, 4
or edi, 0x11201
call 0x406722
add byte [eax], bh
inc edx
inc ecx
inc esp
dec edx
cmp ecx, dword [esi + esi + 0x3f]
add esp, 4
pop edi
push edx
call 0x406736
add byte [ebx + 0x38], cl
cmp al, 0x35
xor dl, byte [eax + 0x36]
aaa
inc edx
add esp, 4
and edx, 0x10824
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x10ee7
add ebx, 0xb8c
xor ebx, 0x1858a
pop ebx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc68]
mov dword [ebp - 0x1744], ecx
push edx
push esi
add esp, 4
and edx, 0x23b4
pop edx
push edx
push eax
add esp, 4
xor edx, 0xac3e
pop edx
push esi
jmp 0x40678c
pop esi
push ecx
push esi
add esp, 4
sub ecx, 0xe58f
sub ecx, 0x16baf
pop ecx
mov dword [ebp - 0x225c], 0xffffffff
push esi
push eax
add esp, 4
add esi, 0x12b26
call 0x4067c0
add byte [eax], bh
cmp eax, 0x40404546
add esp, 4
sub esi, 0xbaa4
call 0x4067d7
add byte [esi], bh
inc eax
inc edx
push eax
xor eax, 0xc483404e
add al, 0x5e
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x54c], edx
jmp 0x4067f8
mov eax, dword [ebp - 0x54c]
add eax, 1
mov dword [ebp - 0x54c], eax
push edx
push esi
add esp, 4
or edx, 0x11d66
call 0x406812
add byte [ebx + ecx*2 + 0x46], al
dec ecx
xor al, byte ds:[ecx + ecx*2 + 0x4d]
add esp, 4
add edx, 0xa963
pop edx
push edi
or edi, 0x8a6e
add edi, 0xfae5
pop edi
mov ecx, dword [ebp - 0x54c]
sub ecx, dword [ebp - 0x424]
cmp ecx, 0xffffffff
jb 0x406872
push esi
push edx
add esp, 4
xor esi, 0x13df8
pop esi
push ebx
push ecx
add esp, 4
and ebx, 0xe671
pop ebx
push ecx
and ecx, 0xc7c4
or ecx, 0x781f
jmp 0x406866
sub ecx, 0xaa5d
pop ecx
jmp 0x406aa0
mov dword [ebp - 0xd8c], 7
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0xb40], edx
push ecx
xor ecx, 0xdbd8
add ecx, 0xe4bd
xor ecx, 0x2f84
call 0x4068a8
add byte [esi + 0x35], al
cmp cl, byte [ebp + 0x49]
dec ebp
xor al, 0x83
les eax, [ecx + ebx*2]
push eax
xor eax, 0x17adc
xor eax, 0x132c7
pop eax
mov eax, dword [ebp - 0x1744]
mov dword [ebp - 0xb3c], eax
mov dword [ebp - 0xd90], 0
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [ebp - 0x1744]
jne 0x406921
push esi
call 0x4068ee
add byte [edi + 0x38], cl
cmp eax, dword [esi + 0x50]
inc esi
dec ebx
cmp bh, byte [ebx]
add esp, 4
sub esi, 0x9645
jmp 0x4068fe
call 0x40690c
add byte [eax], bh
dec esp
xor cl, byte [esi + 0x45]
inc edx
xor edi, dword [esi]
add esp, 4
pop esi
mov edx, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], edx
jmp 0x406a52
cmp dword [ebp - 0xd8c], 0
jle 0x406a46
push edi
push edi
add esp, 4
sub edi, 0xba0c
or edi, 0x958a
add edi, 0x45fe
pop edi
push ecx
add ecx, 0xd4a7
and ecx, 0xb4e1
and ecx, 0xa6aa
add ecx, 0xf22d
pop ecx
mov eax, dword [ebp - 0xb40]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb3c]
movzx eax, byte [edx]
cmp ecx, eax
je 0x4069e2
push ebx
jmp 0x406980
add ebx, 0xadbe
and ebx, 0xc903
sub ebx, 0xd224
pop ebx
push esi
add esi, 0x734c
jmp 0x4069a1
and esi, 0x80a3
pop esi
mov ecx, dword [ebp - 0xb40]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb3c]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x4069ca
mov dword [ebp - 0x1748], 1
jmp 0x4069d4
mov dword [ebp - 0x1748], 0xffffffff
mov edx, dword [ebp - 0x1748]
mov dword [ebp - 0xd90], edx
jmp 0x406a46
push edx
xor edx, 0xefb8
pop edx
push ecx
call 0x4069fa
add byte [edx + 0x4e], al
inc esi
xor al, byte [edi + 0x36]
aaa
dec edx
add esp, 4
call 0x406a0a
add byte [ebx], dh
xor esi, dword [0x3f344639]
add esp, 4
and ecx, 0xa719
pop ecx
mov eax, dword [ebp - 0xd8c]
sub eax, 1
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xb40]
add ecx, 1
mov dword [ebp - 0xb40], ecx
mov edx, dword [ebp - 0xb3c]
add edx, 1
mov dword [ebp - 0xb3c], edx
jmp 0x406921
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], eax
cmp dword [ebp - 0x174c], 0
jne 0x406a9b
push esi
push eax
add esp, 4
sub esi, 0xb3ff
jmp 0x406a6c
add esi, 0xa87b
pop esi
push edi
jmp 0x406a7a
or edi, 0xbe8d
sub edi, 0x6a11
and edi, 0x12de9
pop edi
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0xb38], ecx
jmp 0x406adc
jmp 0x4067e9
push eax
xor eax, 0x10878
sub eax, 0x4709
pop eax
push edx
push edi
add esp, 4
xor edx, 0x121e4
add edx, 0x9044
and edx, 0xebea
pop edx
push ebx
push ecx
add esp, 4
add ebx, 0xec46
pop ebx
mov dword [ebp - 0xb38], 0
push edi
add edi, 0xf9d5
call 0x406af2
add byte [edi + 0x3e], cl
xor eax, dword [ecx + 0x4e]
aas
inc ebp
inc ebx
cmp al, 0x83
les eax, [edi + ebx*2]
push ecx
push edx
add esp, 4
xor ecx, 0x11a69
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x6352
pop eax
mov byte [ebp - 0x8e8], 0x45
mov byte [ebp - 0x8e7], 0x78
mov byte [ebp - 0x8e6], 0x69
mov byte [ebp - 0x8e5], 0x74
mov byte [ebp - 0x8e4], 0x50
mov byte [ebp - 0x8e3], 0x72
mov byte [ebp - 0x8e2], 0x6f
mov byte [ebp - 0x8e1], 0x63
mov byte [ebp - 0x8e0], 0x65
mov byte [ebp - 0x8df], 0x73
mov byte [ebp - 0x8de], 0x73
mov byte [ebp - 0x8dd], 0
push ebx
push edi
add esp, 4
call 0x406b76
add byte [edi + 0x44], al
cmp byte [eax], bh
dec edx
xor eax, 0x834e3f4e
les eax, [ecx + eax*4]
retf