Function at 0x40b600
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov cl, byte [0x438d60]
mov al, 1
sub esp, 0x14
test al, cl
jne 0x40b628
or cl, al
push 0x14
mov byte [0x438d60], cl
call sub.MFC42.DLL_operatornew
add esp, 4
mov dword [0x438d5c], eax
jmp 0x40b62d
mov eax, dword [0x438d5c]
xor ecx, ecx
mov edx, dword [esp + 0x18]
mov dword [eax], ecx
push esi
mov dword [eax + 4], ecx
push edi
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
lea ecx, [edx - 1]
mov eax, 0x62
cmp ecx, eax
ja case.0x40b65b.23
xor edx, edx
mov dl, byte [ecx + 0x40bf18]
jmp dword [edx*4 + 0x40bebc]
mov byte [esp + 8], al
mov al, 0x76
mov byte [esp + 0xc], al
mov byte [esp + 0x10], al
mov cl, 0x54
mov al, 0x65
mov byte [esp + 9], 0x58
mov byte [esp + 0xa], 0x6b
mov byte [esp + 0xb], 0x49
mov byte [esp + 0xd], 0x4c
mov byte [esp + 0xe], 0x67
mov byte [esp + 0xf], cl
mov byte [esp + 0x11], 0x53
mov byte [esp + 0x12], 0x6f
mov byte [esp + 0x13], 0x48
mov byte [esp + 0x14], al
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x52
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x68
mov cl, 0x4c
mov byte [esp + 8], al
mov byte [esp + 9], cl
mov byte [esp + 0xa], 0x64
mov byte [esp + 0xb], cl
mov byte [esp + 0xc], 0x65
mov byte [esp + 0xd], 0x4b
mov byte [esp + 0xe], 0x76
mov byte [esp + 0xf], 0x49
mov byte [esp + 0x10], 0x7a
mov byte [esp + 0x11], 0x4f
mov byte [esp + 0x12], 0x73
mov byte [esp + 0x13], 0x5a
mov byte [esp + 0x14], al
mov byte [esp + 0x15], 0x48
mov byte [esp + 0x16], 0x77
mov byte [esp + 0x17], 0x47
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov cl, 0x46
mov byte [esp + 8], 0x68
mov byte [esp + 9], 0x49
mov byte [esp + 0xa], 0x73
mov byte [esp + 0xb], 0x59
mov byte [esp + 0xc], 0x63
mov byte [esp + 0xd], cl
mov byte [esp + 0xe], 0x77
mov byte [esp + 0xf], cl
mov byte [esp + 0x10], 0x6e
mov byte [esp + 0x11], 0x42
mov byte [esp + 0x12], 0x72
mov byte [esp + 0x13], 0x43
mov byte [esp + 0x14], 0x76
mov byte [esp + 0x15], 0x45
mov byte [esp + 0x16], 0x65
mov byte [esp + 0x17], 0x4b
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x6f
mov cl, 0x4b
mov byte [esp + 8], al
mov byte [esp + 9], cl
mov byte [esp + 0xa], al
mov byte [esp + 0xb], 0x44
mov byte [esp + 0xc], 0x77
mov byte [esp + 0xd], 0x55
mov byte [esp + 0xe], 0x76
mov byte [esp + 0xf], cl
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x50
mov byte [esp + 0x12], 0x67
mov byte [esp + 0x13], 0x56
mov byte [esp + 0x14], 0x6b
mov byte [esp + 0x15], 0x42
mov byte [esp + 0x16], 0x7a
mov byte [esp + 0x17], 0x4f
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov byte [esp + 8], 0x68
mov byte [esp + 9], 0x41
mov byte [esp + 0xa], 0x63
mov byte [esp + 0xb], 0x45
mov byte [esp + 0xc], 0x65
mov byte [esp + 0xd], 0x44
mov byte [esp + 0xe], 0x77
mov byte [esp + 0xf], 0x55
mov byte [esp + 0x10], 0x74
mov byte [esp + 0x11], 0x46
mov byte [esp + 0x12], 0x7a
mov byte [esp + 0x13], 0x42
mov byte [esp + 0x14], 0x6a
mov byte [esp + 0x15], 0x4d
mov byte [esp + 0x16], 0x69
mov byte [esp + 0x17], 0x49
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov cl, 0x54
mov byte [esp + 8], 0x6d
mov byte [esp + 9], cl
mov byte [esp + 0xa], 0x6c
mov byte [esp + 0xb], cl
mov byte [esp + 0xc], 0x64
mov byte [esp + 0xd], 0x47
mov byte [esp + 0xe], 0x68
mov byte [esp + 0xf], 0x59
mov byte [esp + 0x10], 0x69
mov byte [esp + 0x11], 0x44
mov byte [esp + 0x12], 0x72
mov byte [esp + 0x13], 0x56
mov byte [esp + 0x14], 0x7a
mov byte [esp + 0x15], 0x5a
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x4d
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov dl, 0x51
mov cl, 0x46
mov byte [esp + 8], 0x67
mov byte [esp + 9], 0x59
mov byte [esp + 0xa], 0x64
mov byte [esp + 0xb], 0x50
mov byte [esp + 0xc], 0x70
mov byte [esp + 0xd], 0x42
mov byte [esp + 0xe], 0x69
mov byte [esp + 0xf], 0x4f
mov byte [esp + 0x10], 0x76
mov byte [esp + 0x11], dl
mov byte [esp + 0x12], 0x6e
mov byte [esp + 0x13], cl
mov byte [esp + 0x14], 0x63
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], al
mov byte [esp + 0x17], dl
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x6e
mov cl, 0x55
mov byte [esp + 8], al
mov byte [esp + 0xe], al
mov al, 0x4d
mov byte [esp + 9], 0x45
mov byte [esp + 0xa], 0x6c
mov byte [esp + 0xb], 0x48
mov byte [esp + 0xc], 0x6d
mov byte [esp + 0xd], cl
mov byte [esp + 0xf], al
mov byte [esp + 0x10], 0x72
mov byte [esp + 0x11], 0x53
mov byte [esp + 0x12], 0x63
mov byte [esp + 0x13], cl
mov byte [esp + 0x14], 0x77
mov byte [esp + 0x15], al
mov byte [esp + 0x16], 0x66
mov byte [esp + 0x17], 0x5a
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov cl, 0x73
mov byte [esp + 8], 0x72
mov byte [esp + 0xa], cl
mov byte [esp + 0xc], cl
mov cl, 0x43
mov byte [esp + 9], 0x57
mov byte [esp + 0xb], 0x56
mov byte [esp + 0xd], 0x4e
mov byte [esp + 0xe], al
mov byte [esp + 0xf], cl
mov byte [esp + 0x10], 0x6d
mov byte [esp + 0x11], 0x5a
mov byte [esp + 0x12], 0x77
mov byte [esp + 0x13], 0x49
mov byte [esp + 0x14], 0x7a
mov byte [esp + 0x15], 0x41
mov byte [esp + 0x16], al
mov byte [esp + 0x17], cl
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x6f
mov cl, 0x49
mov byte [esp + 8], al
mov byte [esp + 9], cl
mov byte [esp + 0xa], 0x6e
mov byte [esp + 0xb], 0x44
mov byte [esp + 0xc], 0x77
mov byte [esp + 0xd], cl
mov byte [esp + 0xe], 0x6b
mov byte [esp + 0xf], 0x58
mov byte [esp + 0x10], 0x79
mov byte [esp + 0x11], 0x51
mov byte [esp + 0x12], al
mov byte [esp + 0x13], 0x4b
mov byte [esp + 0x14], 0x6a
mov byte [esp + 0x15], 0x4e
mov byte [esp + 0x16], 0x65
mov byte [esp + 0x17], 0x4a
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov dl, 0x51
mov byte [esp + 8], 0x6f
mov byte [esp + 9], 0x54
mov byte [esp + 0xa], 0x79
mov byte [esp + 0xb], 0x44
mov byte [esp + 0xc], 0x72
mov byte [esp + 0xd], 0x5a
mov byte [esp + 0xe], 0x65
mov byte [esp + 0xf], 0x53
mov byte [esp + 0x10], 0x7a
mov byte [esp + 0x11], dl
mov byte [esp + 0x12], 0x6e
mov byte [esp + 0x13], dl
mov byte [esp + 0x14], 0x6c
mov byte [esp + 0x15], 0x48
mov byte [esp + 0x16], 0x76
mov byte [esp + 0x17], 0x49
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x63
mov byte [esp + 9], 0x58
mov byte [esp + 8], al
mov byte [esp + 0xc], al
mov al, 0x59
mov byte [esp + 0xa], 0x67
mov byte [esp + 0xb], 0x42
mov byte [esp + 0xd], al
mov byte [esp + 0xe], 0x75
mov byte [esp + 0xf], 0x50
mov byte [esp + 0x10], 0x64
mov byte [esp + 0x11], 0x4f
mov byte [esp + 0x12], 0x74
mov byte [esp + 0x13], 0x4e
mov byte [esp + 0x14], 0x69
mov byte [esp + 0x15], 0x45
mov byte [esp + 0x16], 0x73
mov byte [esp + 0x17], al
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov byte [esp + 8], 0x71
mov byte [esp + 9], 0x51
mov byte [esp + 0xa], 0x72
mov byte [esp + 0xb], 0x54
mov byte [esp + 0xc], 0x61
mov byte [esp + 0xd], 0x48
mov byte [esp + 0xe], 0x6f
mov byte [esp + 0xf], 0x43
mov byte [esp + 0x10], 0x63
mov byte [esp + 0x11], 0x50
mov byte [esp + 0x12], 0x6b
mov byte [esp + 0x13], 0x47
mov byte [esp + 0x14], 0x7a
mov byte [esp + 0x15], 0x4a
mov byte [esp + 0x16], 0x64
mov byte [esp + 0x17], 0x46
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov cl, 0x6b
mov byte [esp + 8], 0x76
mov byte [esp + 9], 0x52
mov byte [esp + 0xa], 0x61
mov byte [esp + 0xb], 0x4b
mov byte [esp + 0xc], 0x79
mov byte [esp + 0xd], 0x50
mov byte [esp + 0xe], cl
mov byte [esp + 0xf], 0x46
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x45
mov byte [esp + 0x12], 0x6a
mov byte [esp + 0x13], 0x4d
mov byte [esp + 0x14], 0x74
mov byte [esp + 0x15], 0x57
mov byte [esp + 0x16], cl
mov byte [esp + 0x17], 0x51
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov cl, 0x6b
mov al, 0x75
mov byte [esp + 8], 0x6d
mov byte [esp + 9], 0x43
mov byte [esp + 0xa], cl
mov byte [esp + 0xb], 0x48
mov byte [esp + 0xc], al
mov byte [esp + 0xd], 0x49
mov byte [esp + 0xe], 0x63
mov byte [esp + 0xf], 0x41
mov byte [esp + 0x10], 0x73
mov byte [esp + 0x11], 0x42
mov byte [esp + 0x12], 0x6a
mov byte [esp + 0x13], 0x53
mov byte [esp + 0x14], al
mov byte [esp + 0x15], 0x5a
mov byte [esp + 0x16], cl
mov byte [esp + 0x17], 0x4d
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov al, 0x47
mov byte [esp + 8], 0x69
mov byte [esp + 9], 0x58
mov byte [esp + 0xa], 0x74
mov byte [esp + 0xb], 0x59
mov byte [esp + 0xc], 0x66
mov byte [esp + 0xd], 0x41
mov byte [esp + 0xe], 0x68
mov byte [esp + 0xf], al
mov byte [esp + 0x10], 0x77
mov byte [esp + 0x11], 0x4d
mov byte [esp + 0x12], 0x70
mov byte [esp + 0x13], 0x44
mov byte [esp + 0x14], 0x6f
mov byte [esp + 0x15], 0x4e
mov byte [esp + 0x16], 0x72
mov byte [esp + 0x17], al
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov al, 0x67
mov cl, 0x54
mov byte [esp + 8], al
mov byte [esp + 9], 0x43
mov byte [esp + 0xa], 0x64
mov byte [esp + 0xb], 0x55
mov byte [esp + 0xc], 0x79
mov byte [esp + 0xd], 0x4b
mov byte [esp + 0xe], 0x75
mov byte [esp + 0xf], 0x45
mov byte [esp + 0x10], 0x70
mov byte [esp + 0x11], 0x41
mov byte [esp + 0x12], 0x73
mov byte [esp + 0x13], 0x48
mov byte [esp + 0x14], 0x6b
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], al
mov byte [esp + 0x17], cl
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov cl, 0x42
mov byte [esp + 8], 0x77
mov byte [esp + 9], cl
mov byte [esp + 0xa], al
mov byte [esp + 0xb], 0x4a
mov byte [esp + 0xc], 0x61
mov byte [esp + 0xd], 0x4d
mov byte [esp + 0xe], 0x73
mov byte [esp + 0xf], 0x44
mov byte [esp + 0x10], 0x67
mov byte [esp + 0x11], 0x58
mov byte [esp + 0x12], 0x74
mov byte [esp + 0x13], 0x49
mov byte [esp + 0x14], 0x63
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0x6f
mov byte [esp + 0x17], 0x59
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov al, 0x6e
mov cl, 0x44
mov byte [esp + 8], al
mov byte [esp + 0xa], al
mov byte [esp + 0x10], al
mov al, 0x76
mov dl, 0x48
mov byte [esp + 9], 0x5a
mov byte [esp + 0xb], 0x41
mov byte [esp + 0xc], 0x67
mov byte [esp + 0xd], 0x54
mov byte [esp + 0xe], 0x61
mov byte [esp + 0xf], 0x51
mov byte [esp + 0x11], cl
mov byte [esp + 0x12], al
mov byte [esp + 0x13], dl
mov byte [esp + 0x14], al
mov byte [esp + 0x15], dl
mov byte [esp + 0x16], 0x66
mov byte [esp + 0x17], cl
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be09
mov cl, 0x69
mov dl, 0x45
mov al, 0x6a
mov byte [esp + 8], cl
mov byte [esp + 9], 0x57
mov byte [esp + 0xa], 0x70
mov byte [esp + 0xb], dl
mov byte [esp + 0xc], 0x63
mov byte [esp + 0xd], 0x44
mov byte [esp + 0xe], al
mov byte [esp + 0xf], dl
mov byte [esp + 0x10], 0x66
mov byte [esp + 0x11], 0x4b
mov byte [esp + 0x12], cl
mov byte [esp + 0x13], 0x56
mov byte [esp + 0x14], 0x7a
mov byte [esp + 0x15], 0x53
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x48
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
jmp 0x40be8e
mov byte [esp + 0xa], al
mov al, 0x6a
mov cl, 0x46
mov byte [esp + 8], 0x66
mov byte [esp + 9], 0x49
mov byte [esp + 0xb], 0x4d
mov byte [esp + 0xc], 0x67
mov byte [esp + 0xd], 0x59
mov byte [esp + 0xe], al
mov byte [esp + 0xf], 0x52
mov byte [esp + 0x10], 0x7a
mov byte [esp + 0x11], 0x42
mov byte [esp + 0x12], 0x61
mov byte [esp + 0x13], cl
mov byte [esp + 0x14], al
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0x6c
mov byte [esp + 0x17], 0x4f
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, dword [0x438d5c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x438d5c]
pop edi
pop esi
add esp, 0x14
ret
mov al, 0x6e
mov cl, 0x74
mov byte [esp + 8], 0x61
mov byte [esp + 9], 0x41
mov byte [esp + 0xa], al
mov byte [esp + 0xb], 0x4e
mov byte [esp + 0xc], cl
mov byte [esp + 0xd], 0x58
mov byte [esp + 0xe], cl
mov byte [esp + 0xf], 0x49
mov byte [esp + 0x10], al
mov byte [esp + 0x11], 0x51
mov byte [esp + 0x12], 0x6f
mov byte [esp + 0x13], 0x44
mov byte [esp + 0x14], 0x65
mov byte [esp + 0x15], 0x4b
mov byte [esp + 0x16], 0x71
mov byte [esp + 0x17], 0x57
mov byte [esp + 0x18], 0
lea edi, [esp + 8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, dword [0x438d5c]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x438d5c]
pop edi
pop esi
add esp, 0x14
ret