Function at 0x1007a690
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c76c9
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x100ed440]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x50], 0x61
mov byte [ebp - 0x4f], 0x62
mov byte [ebp - 0x4e], 0x63
mov byte [ebp - 0x4d], 0x64
mov byte [ebp - 0x4c], 0x65
mov byte [ebp - 0x4b], 0x66
mov byte [ebp - 0x4a], 0x67
mov byte [ebp - 0x49], 0x68
mov byte [ebp - 0x48], 0x69
mov byte [ebp - 0x47], 0x6a
mov byte [ebp - 0x46], 0x6b
mov byte [ebp - 0x45], 0x6c
mov byte [ebp - 0x44], 0x6d
mov byte [ebp - 0x43], 0x6e
mov byte [ebp - 0x42], 0x6f
mov byte [ebp - 0x41], 0x70
mov byte [ebp - 0x40], 0x71
mov byte [ebp - 0x3f], 0x72
mov byte [ebp - 0x3e], 0x73
mov byte [ebp - 0x3d], 0x74
mov byte [ebp - 0x3c], 0x75
mov byte [ebp - 0x3b], 0x76
mov byte [ebp - 0x3a], 0x77
mov byte [ebp - 0x39], pe_nt_image_headers32
mov byte [ebp - 0x38], 0x79
mov byte [ebp - 0x37], 0x7a
mov byte [ebp - 0x36], 0x41
mov byte [ebp - 0x35], 0x42
mov byte [ebp - 0x34], 0x43
mov byte [ebp - 0x33], 0x44
mov byte [ebp - 0x32], 0x45
mov byte [ebp - 0x31], 0x46
mov byte [ebp - 0x30], 0x47
mov byte [ebp - 0x2f], 0x48
mov byte [ebp - 0x2e], 0x49
mov byte [ebp - 0x2d], 0x4a
mov byte [ebp - 0x2c], 0x4b
mov byte [ebp - 0x2b], 0x4c
mov byte [ebp - 0x2a], 0x4d
mov byte [ebp - 0x29], 0x4e
mov byte [ebp - 0x28], 0x4f
mov byte [ebp - 0x27], 0x50
mov byte [ebp - 0x26], 0x51
mov byte [ebp - 0x25], 0x52
mov byte [ebp - 0x24], 0x53
mov byte [ebp - 0x23], 0x54
mov byte [ebp - 0x22], 0x55
mov byte [ebp - 0x21], 0x56
mov byte [ebp - 0x20], 0x57
mov byte [ebp - 0x1f], 0x58
mov byte [ebp - 0x1e], 0x59
mov byte [ebp - 0x1d], 0x5a
mov byte [ebp - 0x1c], 0x31
mov byte [ebp - 0x1b], 0x32
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0x34
mov byte [ebp - 0x18], 0x35
mov byte [ebp - 0x17], 0x36
mov byte [ebp - 0x16], 0x37
mov byte [ebp - 0x15], 0x38
mov byte [ebp - 0x14], 0x39
mov byte [ebp - 0x13], 0x30
mov byte [ebp - 0x12], 0
mov eax, dword [0x10102e74]
mov ecx, dword fs:[0x2c]
mov edx, dword [ecx + eax*4]
mov eax, dword [0x10103608]
cmp eax, dword [edx + 4]
jle 0x1007a824
push 0x10103608
call fcn.10005685
add esp, 4
cmp dword [0x10103608], 0xffffffff
jne 0x1007a824
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x50]
push ecx
mov ecx, 0x101035f0
call fcn.10006700
push 0x100c8850
call fcn.10005765
add esp, 4
mov dword [ebp - 4], 0xffffffff
push 0x10103608
call fcn.100056ff
add esp, 4
lea ecx, [ebp - 0x68]
call fcn.10007f07
mov dword [ebp - 4], 1
push 0
mov edx, dword [ebp + 0xc]
push edx
lea ecx, [ebp - 0x68]
call fcn.1000808d
nop
mov dword [ebp - 0x6c], 0
jmp 0x1007a854
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [ebp + 0xc]
jge 0x1007a894
call fcn.100afa77
mov esi, eax
mov ecx, 0x101035f0
call fcn.100111b0
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
push edx
mov ecx, 0x101035f0
call fcn.10008075
mov esi, eax
mov edx, dword [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
call fcn.10008075
mov cl, byte [esi]
mov byte [eax], cl
jmp 0x1007a84b
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp + 8]
call fcn.1000f140
mov eax, dword [ebp - 0x70]
or eax, 1
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10002d70
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10005677
mov esp, ebp
pop ebp
ret