Function at 0x407000
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
and esp, 0xfffffff8
sub esp, 0xc8
mov eax, dword [esp + 0xbc]
mov word [esp + 0xc2], 0xaf5e
mov byte [esp + 0xae], 0xb3
mov byte [esp + 0xad], 0xa0
lea ecx, [esp + 0x80]
xor eax, 0x7775e9d2
mov dl, byte [esp + 0xad]
mov dword [esp + 0xbc], eax
lea eax, [esp + 0x38]
mov byte [esp + 0x80], 0x6e
mov byte [esp + 0x81], 0x74
mov byte [esp + 0x82], 0x64
mov byte [esp + 0x83], 0x6c
mov byte [esp + 0x84], 0x6c
mov byte [esp + 0x85], 0x2e
mov esi, dword [esp + 0xb0]
mov edi, dword [esp + 0xb4]
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov byte [esp + 0x86], 0x64
mov byte [esp + 0x87], 0x6c
mov byte [esp + 0x88], 0x6c
mov byte [esp + 0x89], 0
mov byte [esp + 0x8a], 0xa9
movaps xmm0, xmmword [str.ntdll.dl]
movups xmmword [esp + 0x38], xmm0
movzx ebx, word [esp + 0xc2]
mov byte [esp + 0x23], dl
mov dx, bx
mov dword [esp + 0x1c], eax
mov eax, 0xffffafca
sub eax, ebx
mov word [esp + 0x48], ax
mov word [esp + 0x4a], 0
mov word [esp + 0x4c], 0xffa9
mov dword [esp + 0x52], 0
mov dword [esp + 0x4e], 0
mov dword [esp + 0x5a], 0
mov dword [esp + 0x56], 0
mov dword [esp + 0x62], 0
mov dword [esp + 0x5e], 0
mov dword [esp + 0x6a], 0
mov dword [esp + 0x66], 0
mov word [esp + 0x6e], 0
movsx ebx, byte [esp + 0x9c]
mov ax, bx
mov word [esp + 0x70], ax
mov al, byte [esp + 0x9d]
movsx ebx, al
mov ax, bx
mov word [esp + 0x72], ax
mov al, byte [esp + 0xae]
xor al, 0x38
mov ah, 0x19
mov bl, byte [esp + 0x23]
mov byte [esp + 0x1b], al
mov al, bl
mul ah
mov ah, byte [esp + 0x9e]
mov byte [esp + 0xaf], al
mov al, byte [esp + 0x1b]
cmp bl, al
mov dword [esp + 0x14], ecx
mov word [esp + 0x12], dx
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov byte [esp + 7], ah
jae 0x4071e6
jmp 0x4071e6
mov eax, dword [esp + 0x78]
mov eax, dword [eax]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x30], 0
cmp eax, ecx
je 0x407284
jmp 0x4072fc
mov dword [esp + 0x2c], 0
jmp 0x40729b
mov al, byte [esp + 7]
movsx ecx, al
mov dx, cx
mov word [esp + 0x74], dx
mov dx, word [esp + 0x12]
mov cx, dx
add ecx, 0xffffefff
mov si, cx
mov ah, byte [esp + 0x9f]
movsx ecx, ah
mov di, cx
mov word [esp + 0xba], si
mov word [esp + 0x76], di
mov ecx, dword fs:[0x18]
xor eax, eax
cmp ecx, 0x1000
cmovb ecx, eax
mov eax, dword [ecx + 0x30]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa4]
mov eax, dword [eax]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0x30], 0
cmp eax, ecx
je 0x407284
jmp 0x4072f1
mov eax, dword [esp + 0xa8]
mov cl, byte [esp + 0x2b]
mov dword [esp + 0x30], eax
test cl, 1
jne 0x407284
jmp 0x4071b0
mov eax, dword [esp + 0x30]
mov cl, byte [esp + 0x23]
mov byte [esp + 0xaf], cl
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x34]
mov dx, word [ecx + eax*2]
mov si, dx
add si, 0xffbf
mov di, dx
add di, 0x20
cmp si, 0x1a
cmovb dx, di
cmp word [esp + eax*2 + 0x38], dx
sete bl
and bl, 1
mov byte [esp + 0x2b], bl
add eax, 1
cmp eax, dword [esp + 0x7c]
setb bl
cmp dx, 0
setne bh
and bh, byte [esp + 0x2b]
and bl, bh
mov dword [esp + 0x2c], eax
test bl, 1
jne 0x40729b
jmp 0x40726b
mov eax, dword [esp + 0x24]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
mov cx, word [eax + 0x24]
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x78]
mov eax, dword [eax + 0x10]
mov dword [esp + 0xa8], eax
shr cx, 1
movzx eax, cx
mov dword [esp + 0x7c], eax
cmp cx, 0
je 0x4071b0
jmp 0x4071d9