Function at 0x10008560
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Get number of processors
Parse pe header

Disassembly:
push 0xffffffffffffffff
push 0x100346df
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
mov ebx, dword [esp + 0x64]
push ebp
push esi
push edi
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, 0x55555556
imul ecx
mov eax, edx
mov dword [esp + 0x18], 0
mov byte [esp + 0x1c], 0x41
mov byte [esp + 0x1d], 0x42
mov byte [esp + 0x1e], 0x43
mov byte [esp + 0x1f], 0x44
mov byte [esp + 0x20], 0x45
mov byte [esp + 0x21], 0x46
mov byte [esp + 0x22], 0x47
mov byte [esp + 0x23], 0x48
mov byte [esp + 0x24], 0x49
mov byte [esp + 0x25], 0x4a
mov byte [esp + 0x26], 0x4b
mov byte [esp + 0x27], 0x4c
mov byte [esp + 0x28], 0x4d
mov byte [esp + 0x29], 0x4e
mov byte [esp + 0x2a], 0x4f
mov byte [esp + 0x2b], 0x50
mov byte [esp + 0x2c], 0x51
mov byte [esp + 0x2d], 0x52
mov byte [esp + 0x2e], 0x53
mov byte [esp + 0x2f], 0x54
mov byte [esp + 0x30], 0x55
mov byte [esp + 0x31], 0x56
mov byte [esp + 0x32], 0x57
mov byte [esp + 0x33], 0x58
mov byte [esp + 0x34], 0x59
mov byte [esp + 0x35], 0x5a
mov byte [esp + 0x36], 0x61
mov byte [esp + 0x37], 0x62
mov byte [esp + 0x38], 0x63
mov byte [esp + 0x39], 0x64
mov byte [esp + 0x3a], 0x65
mov byte [esp + 0x3b], 0x66
mov byte [esp + 0x3c], 0x67
mov byte [esp + 0x3d], 0x68
mov byte [esp + 0x3e], 0x69
mov byte [esp + 0x3f], 0x6a
mov byte [esp + 0x40], 0x6b
mov byte [esp + 0x41], 0x6c
mov byte [esp + 0x42], 0x6d
mov byte [esp + 0x43], 0x6e
mov byte [esp + 0x44], 0x6f
mov byte [esp + 0x45], 0x70
mov byte [esp + 0x46], 0x71
mov byte [esp + 0x47], 0x72
mov byte [esp + 0x48], 0x73
mov byte [esp + 0x49], 0x74
mov byte [esp + 0x4a], 0x75
mov byte [esp + 0x4b], 0x76
mov byte [esp + 0x4c], 0x77
mov byte [esp + 0x4d], 0x78
mov byte [esp + 0x4e], 0x79
mov byte [esp + 0x4f], 0x7a
mov byte [esp + 0x50], 0x30
mov byte [esp + 0x51], 0x31
mov byte [esp + 0x52], 0x32
mov byte [esp + 0x53], 0x33
mov byte [esp + 0x54], 0x34
mov byte [esp + 0x55], 0x35
mov byte [esp + 0x56], 0x36
mov byte [esp + 0x57], 0x37
mov byte [esp + 0x58], 0x38
mov byte [esp + 0x59], 0x39
mov byte [esp + 0x5a], 0x2b
mov byte [esp + 0x5b], 0x2f
mov ebp, ebx
shr eax, 0x1f
add edx, eax
shl edx, 2
mov dword [esp + 0x14], edx
lea edi, [edx + 5]
push edi
call fcn.1002c5d7
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
mov dword [esp + 0x70], 0
and ecx, 3
rep stosb byte es:[edi], al
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, 0xaaaaaaab
mul ecx
shr edx, 1
je 0x100087a5
xor eax, eax
xor ecx, ecx
mov al, byte [ebp]
mov cl, byte [ebp + 1]
inc ebp
xor edx, edx
shl eax, 8
mov dl, byte [ebp + 1]
or eax, ecx
inc ebp
add esi, 4
shl eax, 8
or eax, edx
inc ebp
mov ecx, eax
mov edi, ebx
and ecx, 0x3f
shr eax, 6
mov dl, byte [esp + ecx + 0x1c]
mov ecx, eax
and ecx, 0x3f
mov byte [esi - 1], dl
shr eax, 6
mov dl, byte [esp + ecx + 0x1c]
mov ecx, eax
shr eax, 6
and ecx, 0x3f
mov byte [esi - 2], dl
mov al, byte [esp + eax + 0x1c]
mov dl, byte [esp + ecx + 0x1c]
mov byte [esi - 4], al
mov eax, dword [esp + 0x70]
mov byte [esi - 3], dl
inc eax
or ecx, 0xffffffff
mov dword [esp + 0x70], eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, 0xaaaaaaab
mul ecx
mov eax, dword [esp + 0x70]
shr edx, 1
cmp eax, edx
jb 0x1000872c
mov edi, ebx
or ecx, 0xffffffff
xor eax, eax
xor edx, edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov eax, ecx
mov ecx, 3
div ecx
dec edx
je 0x100087ff
dec edx
jne 0x10008824
xor eax, eax
xor edx, edx
mov al, byte [ebp]
mov dl, byte [ebp + 1]
inc ebp
mov byte [esi + 3], 0x3d
shl eax, 8
or eax, edx
shl eax, 2
mov ecx, eax
and ecx, 0x3f
shr eax, 6
mov dl, byte [esp + ecx + 0x1c]
mov ecx, eax
and ecx, 0x3f
mov byte [esi + 2], dl
shr eax, 6
mov dl, byte [esp + ecx + 0x1c]
mov al, byte [esp + eax + 0x1c]
mov byte [esi + 1], dl
mov byte [esi], al
jmp 0x10008824
xor eax, eax
mov al, byte [ebp]
shl eax, 4
mov ecx, eax
and ecx, 0x3f
shr eax, 6
mov dl, byte [esp + ecx + 0x1c]
mov al, byte [esp + eax + 0x1c]
mov byte [esi + 1], dl
mov byte [esi], al
mov al, 0x3d
mov byte [esi + 2], al
mov byte [esi + 3], al
mov ebx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
sub esi, ebx
push esi
call fcn.1002c8c0
mov edi, 1
push esi
mov dword [esp + 0x68], edi
call fcn.1002c600
mov esi, dword [esp + 0x70]
add esp, 4
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.1002c60b
mov dword [esp + 0x18], edi
lea ecx, [esp + 0x10]
mov byte [esp + 0x64], 0
call fcn.1002c896
mov ecx, dword [esp + 0x5c]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x58
ret