Function at 0x66406a28
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push eax
xor eax, 0x10e2c
call 0x664067ee
add byte [eax + eax*2 + 0x49], cl
inc ecx
inc esp
dec edx
inc esi
add esp, 4
pop eax
push eax
sub eax, 0x17a65
and eax, 0x11937
xor eax, 0x4fbc
add eax, 0xe044
pop eax
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
push ecx
and ecx, 0x1699f
xor ecx, 0x1388c
and ecx, 0x16fd7
add ecx, 0xe83c
pop ecx
push esi
push edx
add esp, 4
add esi, 0x14bb8
sub esi, 0x7902
sub esi, 0x8565
pop esi
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push eax
push eax
add esp, 4
or eax, 0x1068c
call 0x664068d9
add byte [ebx], bh
inc ebp
inc ebp
inc esi
cmp dword [eax + 0x46], ecx
cmp al, 0x4f
add esp, 4
sub eax, 0xd762
xor eax, 0xc207
pop eax
push edx
sub edx, 0x90ae
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x6640690e
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x66406968
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x66406836
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x66406836
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x66406952
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x6640695c
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x664069b1
push edi
xor edi, 0xd245
call 0x66406987
add byte [esi], bh
dec esp
cmp al, byte [ebx + edi + 0x44]
inc edi
cmp eax, dword [ebx - 0x7d]
les eax, [ecx + eax*4]
invalid
push esi
push eax
add esp, 4
and esi, 0x13cd9
add esi, 0x25da
or esi, 0xff70
pop esi
push edx
sub edx, 0x37b7
add edx, 0x10411
xor edx, 0x4646
and edx, 0x171ec
pop edx
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x66406a0f
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x664067da
mov dword [ebp - 0x2f4], 0
push edi
call 0x66406a28
add byte [ebx], dh
push eax
xor cl, byte [ebx + esi + 0x4e]
inc esp
inc ecx
add esp, 4
xor edi, 0x16f90
jmp 0x66406a38
or edi, 0x895
pop edi
push esi
push edx
add esp, 4
jmp 0x66406a4a
pop esi
cmp dword [ebp - 0x2f4], 0
jne 0x66407350
mov eax, 0x6b
mov word [ebp - 0x17a0], ax
mov ecx, 0x65
mov word [ebp - 0x179e], cx
mov edx, 0x72
mov word [ebp - 0x179c], dx
mov eax, 0x6e
mov word [ebp - 0x179a], ax
mov ecx, 0x65
mov word [ebp - 0x1798], cx
mov edx, 0x6c
mov word [ebp - 0x1796], dx
mov eax, 0x33
mov word [ebp - 0x1794], ax
mov ecx, 0x32
mov word [ebp - 0x1792], cx
mov edx, 0x2e
mov word [ebp - 0x1790], dx
mov eax, 0x64
mov word [ebp - 0x178e], ax
mov ecx, 0x6c
mov word [ebp - 0x178c], cx
mov edx, 0x6c
mov word [ebp - 0x178a], dx
xor eax, eax
mov word [ebp - 0x1788], ax
push eax
add eax, 0xb5bd
pop eax
push edi
push ecx
add esp, 4
add edi, 0x17567
pop edi
push edx
push ecx
add esp, 4
jmp 0x66406b13
jmp 0x66406b1a
jmp 0x66406b22
pop edx
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x19a8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19ac]
mov dword [ebp - 0x1628], ecx
push edi
push edi
add esp, 4
xor edi, 0x6215
or edi, 0x9cc0
or edi, 0x8b25
pop edi
push esi
push ecx
add esp, 4
xor esi, 0x1594c
pop esi
push edi
add edi, 0x1139f
or edi, 0x75f7
pop edi
cmp dword [ebp - 0x1628], 0
jne 0x66406bf0
mov dword [ebp - 0x778], 0
jmp 0x66406e97
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edi
push edi
add esp, 4
add edi, 0x1263a
jmp 0x66406c12
jmp 0x66406c1b
and edi, 0x17318
pop edi
push edi
push eax
add esp, 4
and edi, 0x16dc8
sub edi, 0x1717e
pop edi
cmp dword [ebp - 0xcd4], 0
jne 0x66406c4c
mov dword [ebp - 0x778], 0
jmp 0x66406e97
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push ebx
sub ebx, 0xc505
or ebx, 0x161ea
xor ebx, 0x1087f
pop ebx
push esi
sub esi, 0x1fba
pop esi
push esi
xor esi, 0x17e78
add esi, 0x3aaa
pop esi
push esi
sub esi, 0x4b38
pop esi
lea eax, [ebp - 0x17a0]
push ebx
push eax
add esp, 4
and ebx, 0x12b65
and ebx, 0x1474e
sub ebx, 0x208
or ebx, 0xda86
pop ebx
push edx
xor edx, 0xf0a5
and edx, 0xc563
xor edx, 0x115b
pop edx
cmp dword [ebp - 0x778], 0
jne 0x66406f13
push ebx
call 0x66406ee1
add byte [ecx + 0x38], cl
cmp dh, byte [ebx]
dec ecx
dec edi
inc ecx
aas
add esp, 4
xor ebx, 0xd1fb
pop ebx
push edi
push edi
add esp, 4
xor edi, 0x1062f
jmp 0x66406efd
or edi, 0x92a9
pop edi
mov dword [ebp - 0xac0], 0
jmp 0x66407a3b
push eax
push eax
add esp, 4
sub eax, 0x6d8a
pop eax
push edi
push ebx
add esp, 4
sub edi, 0xc157
and edi, 0x526c
pop edi
push edx
add edx, 0x13241
add edx, 0x14f06
and edx, 0x14d65
pop edx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x66406f84
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x66407275
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x66406fac
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x66407275
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x66406fde
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x66407275
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x66407003
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x66407275
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19b0], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19b4], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19b8], edx
mov dword [ebp - 0x780], 0
jmp 0x6640705d
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x66407269
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19b4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19bc], ecx
mov dword [ebp - 0x19c], 0
jmp 0x664070cd
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x6640717f
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x6640717f
push esi
and esi, 0x4df6
pop esi
push eax
or eax, 0x5bb
sub eax, 0x16b8e
pop eax
push ebx
xor ebx, 0x17f34
and ebx, 0x1bcc
pop ebx
push ecx
and ecx, 0x1e75
add ecx, 0x8970
pop ecx
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
cmp edx, ecx
je 0x66407171
mov edx, dword [ebp - 0x784]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a8]
cmp eax, edx
jne 0x66407178
jmp 0x664070be
jmp 0x6640717f
push ecx
push eax
add esp, 4
sub ecx, 0x8154
jmp 0x66407192
add ecx, 0x4c41
and ecx, 0x3c34
pop ecx
push ecx
push ecx
add esp, 4
xor ecx, 0xaeb6
add ecx, 0x13da4
pop ecx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x664071de
mov dword [ebp - 0xcd8], 0
jmp 0x6640724d
push esi
push edi
add esp, 4
xor esi, 0x9889
sub esi, 0x73de
pop esi
push eax
sub eax, 0x11c93
call 0x66407206
add byte [eax + 0x42], al
cmp esi, dword [ebx]
inc ebp
inc ebx
cmp byte [ebx], bh
cmp byte [ebx + 0x4eb04c4], al
inc esi
inc esp
inc edi
xor ebx, dword [eax - 0x75]
lea edi, [eax + edi*8 - 1]
inc dword [ebx]
lea esp, [esi + edi*8 - 1]
dec dword [edi]
mov esi, 0x20ca8311
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x66407243
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x6640724d
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x66407264
mov edx, dword [ebp - 0x19bc]
mov dword [ebp - 0x3fc], edx
jmp 0x66407275
jmp 0x6640704e
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x66407350
push ecx
push edi
add esp, 4
sub ecx, 0xe39f
sub ecx, 0xd4f5
call 0x664072a2
add byte [ebp + 0x4e], al
cmp al, 0x3d
dec ebx
cmp dword [esp + esi], edi
cmp al, byte [ebx - 0x167efb3c]
xor al, 0x45
add byte [eax], al
pop ecx
push edx
add edx, 0x19e0
sbb dword [eax], eax
add byte [edx - 0x75], bl
lea eax, [esp + edi*8]
invalid
dec dword [ecx - 0x19bf73]
call dword [edx + 0x52]
add esp, 4
and edx, 0x7c6c
call 0x664072da
add byte [0x43503639], dh
dec esp
cmp eax, dword [ecx - 0x7d]
les eax, [ecx + eax*4]
loop 0x6640735d
push edx
call 0x6640735f
add byte [ebx], dh
inc edx
xor al, 0x33
dec ecx
cmp al, 0x38
cmp dword [ebx + 0x3eb04c4], eax
xor eax, 0x515a4c4a
cmp byte [ecx], bh
add esp, 4
jmp 0x66407367
pop edx
push ecx
jmp 0x6640736f
pop ecx
push ecx
push edi
add esp, 4
and ecx, 0x8efa
and ecx, 0x10e8d
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19c8], ecx
mov edx, dword [ebp - 0x19c8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19cc], eax
invalid
invalid