Function at 0x404b70
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x428a3c
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x538
mov eax, dword [0x42f0b4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4dc], ecx
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
call fcn.0040b300
mov byte [ebp - 4], 1
push 0x42bd2c
lea ecx, [ebp - 0x6c]
call fcn.00401990
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x4dc]
mov dword [eax + 0xb8], fcn.00402a80
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0040b330
mov edx, dword [ebp - 0x4dc]
mov ecx, dword [edx + 0xb8]
mov dword [eax], ecx
mov edx, dword [ebp + 0x14]
push edx
call fcn.004103b0
add esp, 4
add eax, 1
mov dword [ebp - 0x70], eax
xor ecx, ecx
mov eax, dword [ebp - 0x70]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0040f8d0
add esp, 4
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x33c], 0x2a
push 0x42ca24
lea ecx, [ebp - 0x33c]
push ecx
call fcn.00410891
mov dword [ebp - 0x10], esp
cmp dword [ebp - 0x70], 1
jle 0x40505f
mov byte [ebp - 4], 5
mov dword [ebp - 0x340], 0x2a
push 0x42ca24
lea edx, [ebp - 0x340]
push edx
call fcn.00410891
mov dword [ebp - 0x10], esp
push 0x1c
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0040b330
mov edx, dword [eax]
call edx
add esp, 8
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e4], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x4e4]
push ecx
lea ecx, [ebp - 0xa4]
call fcn.004019d0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x35c]
call fcn.00401a10
lea ecx, [ebp - 0xa4]
call fcn.0040b250
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xac], 0
jmp 0x404d00
mov edx, dword [ebp - 0xac]
add edx, 1
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x70]
jge 0x404d27
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp - 0xac]
movsx dx, byte [ecx]
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x50]
mov word [ecx + eax*2], dx
jmp 0x404cf1
mov byte [ebp - 0x85], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0xb0], 0
jmp 0x404d50
mov edx, dword [ebp - 0xb0]
add edx, 1
mov dword [ebp - 0xb0], edx
cmp dword [ebp - 0xb0], 5
jge 0x404d85
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x84]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x50]
movzx eax, word [ecx + eax*2]
cmp eax, edx
jne 0x404d83
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
jmp 0x404d41
cmp dword [ebp - 0x80], 5
jne 0x404d92
mov byte [ebp - 0x85], 1
movzx edx, byte [ebp - 0x85]
test edx, edx
je 0x40503c
mov dword [ebp - 0x50], 0x42bd3c
push 0x1d
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x38]
call fcn.0040b330
mov edx, dword [eax]
call edx
add esp, 8
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x4ec]
push ecx
lea ecx, [ebp - 0xcc]
call fcn.004019d0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x378]
call fcn.00401a10
push 0x42bd40
lea ecx, [ebp + 0x28]
call fcn.0040b170
push 0x42bd44
lea ecx, [ebp + 0x28]
call fcn.0040b170
push 0x42bd4c
lea ecx, [ebp + 0x28]
call fcn.0040b170
mov dword [ebp - 0x37c], 0x14
mov edx, dword [ebp - 0x37c]
push edx
call fcn.0040f8d0
add esp, 4
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
je 0x404e70
mov eax, dword [ebp - 0x37c]
push eax
push 0
mov ecx, dword [ebp - 0x380]
push ecx
call fcn.00410440
add esp, 0xc
mov edx, dword [ebp - 0x380]
mov dword [ebp - 0x4f0], edx
jmp 0x404e7a
mov dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0xd0], eax
push 0xa
mov ecx, dword [ebp - 0xd0]
push ecx
call fcn.0040fdbb
cdq
mov ecx, 0x64
idiv ecx
push edx
call fcn.0041050e
add esp, 0xc
mov dword [ebp - 0xd4], eax
mov edx, dword [ebp - 0xd0]
push edx
lea ecx, [ebp + 0x28]
call fcn.0040b170
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x384], 0x2a
push 0x42ca24
lea eax, [ebp - 0x384]
push eax
call fcn.00410891
mov byte [ebp - 0xdc], 0x50
mov byte [ebp - 0xdb], 0x4c
mov byte [ebp - 0xda], 0x51
mov byte [ebp - 0xd9], 0x49
mov byte [ebp - 0xd8], 0x4d
mov byte [ebp - 0xd7], 0x41
mov byte [ebp - 0xf0], 0x4c
mov byte [ebp - 0xef], 0x32
mov byte [ebp - 0xee], 0x31
mov byte [ebp - 0xed], 0x35
mov byte [ebp - 0xec], 0x45
mov byte [ebp - 0xeb], 0x37
mov byte [ebp - 0xea], 0x57
mov byte [ebp - 0xe9], 0x46
mov byte [ebp - 0xe8], 0x53
mov byte [ebp - 0xe7], 0x47
mov byte [ebp - 0xe6], 0x34
mov byte [ebp - 0xe5], 0x4b
mov byte [ebp - 0xe4], 0x4a
mov byte [ebp - 0xe3], 0x33
mov byte [ebp - 0xe2], 0x30
mov byte [ebp - 0xe1], 0x41
mov byte [ebp - 0xe0], 0x46
mov byte [ebp - 0xf8], 0x47
mov byte [ebp - 0xf7], 0x32
mov byte [ebp - 0xf6], 0x4b
mov byte [ebp - 0xf5], 0x48
mov byte [ebp - 0xf4], 0x5a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x388], esp
lea edx, [ebp + 0x28]
push edx
call fcn.004019d0
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4f8], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xf8]
push ecx
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xdc]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x38c], esp
lea edx, [ebp - 0xcc]
push edx
call fcn.004019d0
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x4dc]
call fcn.0040ad00
mov dword [ebp - 4], 0xc
mov eax, 0x405023
ret
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa4]
call fcn.00401a10
mov dword [ebp - 4], 0xc
mov eax, 0x40505f
ret
mov dword [ebp - 4], 0xc
mov eax, 0x405073
ret