Function at 0x10070aa8
Capabilities:
Check for peb beingdebugged flag
Contain obfuscated stackstrings
Get number of processors

Disassembly:
jae 0x10070aa6
jmp 0x10070aa1
call fcn.10070aa8
jae 0x10070aa1
add esp, 4
jmp 0x10070aad
dec dword [esp]
jno 0x10070ab2
jns 0x10070a9d
jp 0x10070ab6
add esp, 4
popf
jmp 0x10070abd
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10070ad6
jne 0x10070ad6
call 0x1fc73e2a
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x91], 0
xor eax, eax
mov eax, dword fs:[0x30]
mov al, byte [eax + 2]
mov byte [ebp - 0x91], al
mov byte [ebp - 0x38], 0x44
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x62
mov byte [ebp - 0x35], 0x75
mov byte [ebp - 0x34], 0x67
mov byte [ebp - 0x33], 0x67
mov byte [ebp - 0x32], 0x65
mov byte [ebp - 0x31], 0x72
mov byte [ebp - 0x30], 0x20
mov byte [ebp - 0x2f], 0x44
mov byte [ebp - 0x2e], 0x65
mov byte [ebp - 0x2d], 0x74
mov byte [ebp - 0x2c], 0x65
mov byte [ebp - 0x2b], 0x63
mov byte [ebp - 0x2a], 0x74
mov byte [ebp - 0x29], 0x65
mov byte [ebp - 0x28], 0x64
mov byte [ebp - 0x27], 0x3b
mov byte [ebp - 0x26], 0x20
mov byte [ebp - 0x25], 0x45
mov byte [ebp - 0x24], 0x72
mov byte [ebp - 0x23], 0x72
mov byte [ebp - 0x22], 0x20
mov byte [ebp - 0x21], 0x43
mov byte [ebp - 0x20], 0x6f
mov byte [ebp - 0x1f], 0x64
mov byte [ebp - 0x1e], 0x65
mov byte [ebp - 0x1d], 0x3a
mov byte [ebp - 0x1c], 0x20
mov byte [ebp - 0x1b], 0x30
mov byte [ebp - 0x1a], pe_nt_image_headers32
mov byte [ebp - 0x19], 0x39
mov byte [ebp - 0x18], 0x30
mov byte [ebp - 0x17], 0x30
mov byte [ebp - 0x16], 0x30
mov byte [ebp - 0x15], 0x30
mov byte [ebp - 0x14], 0x30
mov byte [ebp - 0x13], 0x30
mov byte [ebp - 0x12], 0x31
mov byte [ebp - 0x11], 0
mov byte [ebp - 0x64], 0x44
mov byte [ebp - 0x63], 0x65
mov byte [ebp - 0x62], 0x62
mov byte [ebp - 0x61], 0x75
mov byte [ebp - 0x60], 0x67
mov byte [ebp - 0x5f], 0x67
mov byte [ebp - 0x5e], 0x65
mov byte [ebp - 0x5d], 0x72
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x44
mov byte [ebp - 0x5a], 0x65
mov byte [ebp - 0x59], 0x74
mov byte [ebp - 0x58], 0x65
mov byte [ebp - 0x57], 0x63
mov byte [ebp - 0x56], 0x74
mov byte [ebp - 0x55], 0x65
mov byte [ebp - 0x54], 0x64
mov byte [ebp - 0x53], 0x3b
mov byte [ebp - 0x52], 0x20
mov byte [ebp - 0x51], 0x45
mov byte [ebp - 0x50], 0x72
mov byte [ebp - 0x4f], 0x72
mov byte [ebp - 0x4e], 0x20
mov byte [ebp - 0x4d], 0x43
mov byte [ebp - 0x4c], 0x6f
mov byte [ebp - 0x4b], 0x64
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x3a
mov byte [ebp - 0x48], 0x20
mov byte [ebp - 0x47], 0x30
mov byte [ebp - 0x46], pe_nt_image_headers32
mov byte [ebp - 0x45], 0x39
mov byte [ebp - 0x44], 0x30
mov byte [ebp - 0x43], 0x30
mov byte [ebp - 0x42], 0x30
mov byte [ebp - 0x41], 0x30
mov byte [ebp - 0x40], 0x30
mov byte [ebp - 0x3f], 0x30
mov byte [ebp - 0x3e], 0x31
mov byte [ebp - 0x3d], 0x2d
mov byte [ebp - 0x3c], 0x31
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x90], 0x44
mov byte [ebp - 0x8f], 0x65
mov byte [ebp - 0x8e], 0x62
mov byte [ebp - 0x8d], 0x75
mov byte [ebp - 0x8c], 0x67
mov byte [ebp - 0x8b], 0x67
mov byte [ebp - 0x8a], 0x65
mov byte [ebp - 0x89], 0x72
mov byte [ebp - 0x88], 0x20
mov byte [ebp - 0x87], 0x44
mov byte [ebp - 0x86], 0x65
mov byte [ebp - 0x85], 0x74
mov byte [ebp - 0x84], 0x65
mov byte [ebp - 0x83], 0x63
mov byte [ebp - 0x82], 0x74
mov byte [ebp - 0x81], 0x65
mov byte [ebp - 0x80], 0x64
mov byte [ebp - 0x7f], 0x3b
mov byte [ebp - 0x7e], 0x20
mov byte [ebp - 0x7d], 0x45
mov byte [ebp - 0x7c], 0x72
mov byte [ebp - 0x7b], 0x72
mov byte [ebp - 0x7a], 0x20
mov byte [ebp - 0x79], 0x43
mov byte [ebp - 0x78], 0x6f
mov byte [ebp - 0x77], 0x64
mov byte [ebp - 0x76], 0x65
mov byte [ebp - 0x75], 0x3a
mov byte [ebp - 0x74], 0x20
mov byte [ebp - 0x73], 0x30
mov byte [ebp - 0x72], pe_nt_image_headers32
mov byte [ebp - 0x71], 0x39
mov byte [ebp - 0x70], 0x30
mov byte [ebp - 0x6f], 0x30
mov byte [ebp - 0x6e], 0x30
mov byte [ebp - 0x6d], 0x30
mov byte [ebp - 0x6c], 0x30
mov byte [ebp - 0x6b], 0x30
mov byte [ebp - 0x6a], 0x31
mov byte [ebp - 0x69], 0x2d
mov byte [ebp - 0x68], 0x32
mov byte [ebp - 0x67], 0
pushf
push 0xa
jae 0x10070d2c
jmp 0x10070d27
call 0x10070d2e
jae 0x10070d27
add esp, 4
jmp 0x10070d33
dec dword [esp]
jno 0x10070d38
jns 0x10070d23
jp 0x10070d3c
add esp, 4
popf
jmp 0x10070d43
clc
jae 0x10070d48
shr dword [eax + edx*2], 0x52
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10070d61
jne 0x10070d61
sub al, 0x7c
add ebp, ebx
add ebp, dword [esp + esi*2]
sti
jl 0x10070d66
jmp 0x10070d68
je 0x10070d63
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10070d82
jne 0x10070d81
call 0x930afe09
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10070d90
jne 0x10070d90
call 0x7f8ccba3
invalid
movsx eax, byte [ebp - 0x91]
test eax, eax
je 0x10070dc0
mov ecx, dword [0x101034a8]
call fcn.10009e20
push eax
push 0
push 0x100d5193
push 1
lea ecx, [ebp - 0x38]
push ecx
mov ecx, dword [0x10103414]
call fcn.10011500
nop
pushf
push 0xa
jae 0x10070dcd
jmp 0x10070dc8
call 0x10070dcf
jae 0x10070dc8
add esp, 4
jmp 0x10070dd4
dec dword [esp]
jno 0x10070dd9
jns 0x10070dc4
jp 0x10070ddd
add esp, 4
popf
jmp 0x10070de4
clc
jae 0x10070de9
adc eax, 0x815250bb
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10070e02
jne 0x10070e02
mov ebx, 0x3eb037c
mov ebx, 0x3350fb74
ror byte [edi], 0x9b
rcl byte [edx + 0x33], 0xd0
jl 0x10070e07
jmp 0x10070e09
je 0x10070e04
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10070e23
jne 0x10070e22
call 0x930afeaa
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10070e31
jne 0x10070e31
call 0x1057f91d
add byte [ecx - 0x9b7b], cl
inc dword [ebx - 0x9b43]
inc dword [ecx]
call 0x10075f20
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jne 0x10070e6a
mov ecx, dword [0x101034a8]
call fcn.10009e20
push eax
push 0
push 0x100d51a6
push 1
lea edx, [ebp - 0x64]
push edx
mov ecx, dword [0x10103414]
call fcn.10011500
nop
jl 0x10070e6f
jmp 0x10070e71
je 0x10070e6c
xor eax, eax
test eax, eax
je 0x10070e7a
jne 0x10070e79
call 0x930aff01
rol byte [ebx + eax*4], 0xf0
add eax, 0x360273f8
or esi, dword [ebx + eax + 0x75]
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x10070e88
or esi, dword ss:[ebx + eax + 0x75]
je 0x10070e8d
jne 0x10070e8d
add dword [ebx], ecx
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x10070e9a
jmp 0x10070e95
call 0x10070e9c
jae 0x10070e95
add esp, 4
jmp 0x10070ea1
dec dword [esp]
jno 0x10070ea6
jns 0x10070e91
jp 0x10070eaa
add esp, 4
popf
jmp 0x10070eb1
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10070eca
jne 0x10070eca
call 0x1fc7421e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
cmp dword [ebp - 0x9c], 2
jne 0x10070f0c
mov ecx, dword [0x101034a8]
call fcn.10009e20
push eax
push 0
push 0x100d51a7
push 1
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [0x10103414]
call fcn.10011500
nop
pushf
push 0xa
jae 0x10070f19
jmp 0x10070f14
call 0x10070f1b
jae 0x10070f14
add esp, 4
jmp 0x10070f20
dec dword [esp]
jno 0x10070f25
jns 0x10070f10
jp 0x10070f29
add esp, 4
popf
jmp 0x10070f30
clc
jae 0x10070f35
xchg dword [edx - 0xd7eadb0], ebx
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10070f4e
jne 0x10070f4e
lcall 0x749a, 0x3eb037c
sti
jl 0x10070f53
jmp 0x10070f55
je 0x10070f50
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10070f6f
jne 0x10070f6e
call 0x930afff6
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10070f7d
jne 0x10070f7d
call fcn.10035548
invalid
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.100114e0
nop
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10005677
mov esp, ebp
pop ebp
ret