Function at 0x405770
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
lea ebp, [esp - 0x80]
sub esp, 0x80
push 0xffffffffffffffff
push 0x45c6d4
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x4730bc]
xor eax, ebp
mov dword [ebp + 0x7c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp + 0x18], 0
mov dword [ebp - 4], 0
mov dword [ebp + 0x28], 0
mov dword [ebp + 0x2c], 0xf
mov byte [ebp + 0x18], 0
push 4
mov byte [ebp - 4], 1
call fcn.0045aab6
add esp, 4
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x4057e8
mov ecx, eax
call fcn.0040e110
push 0x1024
mov byte [ebp - 4], 1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push 0x1024
push 0
push eax
mov dword [ebp - 0x18], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x10
mov byte [0x4734a4], 0
mov ecx, 0x4734a8
push 0
push 0x45e707
call fcn.004028c0
mov dword [ebp + 0x64], 0x383b3b2c
xor ecx, ecx
mov dword [ebp + 0x68], 0x2423330e
mov word [ebp + 0x6c], 0x100
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x64], al
inc ecx
cmp ecx, 8
jb 0x405838
lea eax, [ebp - 0x11]
mov byte [ebp + 0x6d], 0
push eax
lea eax, [ebp + 0x6c]
push eax
lea eax, [ebp + 0x64]
push eax
lea ecx, [ebp + 0x44]
call fcn.004037e0
lea eax, [ebp + 0x44]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp]
push eax
call fcn.0040f490
add esp, 8
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 4
jb 0x405880
mov edx, dword [edx]
mov dword [ebp + 0x70], 0x393b2d2c
xor ecx, ecx
mov dword [ebp + 0x74], 0x1003c3e
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x70], al
inc ecx
cmp ecx, 6
jb 0x405890
push edx
lea eax, [ebp + 0x70]
mov byte [ebp + 0x77], 0
push eax
lea ecx, [ebp + 0x18]
call fcn.0040d2b0
mov ecx, dword [ebp + 0x14]
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x4058e3
mov edx, dword [ebp]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4058d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40591f
push ecx
push edx
call fcn.0045aae6
add esp, 8
mov ecx, dword [ebp + 0x58]
mov dword [ebp + 0x10], 0
mov dword [ebp + 0x14], 0xf
mov byte [ebp], 0
mov byte [ebp - 4], 1
cmp ecx, 0x10
jb 0x40592f
mov edx, dword [ebp + 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405925
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405925
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
lea eax, [ebp + 0x44]
push 0x47352c
push eax
call fcn.0040f490
add esp, 8
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 5
jb 0x40594e
mov edx, dword [edx]
mov dword [ebp + 0x70], 0x383b3b2c
xor ecx, ecx
mov dword [ebp + 0x74], 0x373b0e
mov byte [ebp + 0x78], 1
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x70], al
inc ecx
cmp ecx, 7
jb 0x405962
push edx
lea eax, [ebp + 0x70]
mov byte [ebp + 0x78], 0
push eax
lea ecx, [ebp + 0x18]
call fcn.0040d2b0
mov ecx, dword [ebp + 0x58]
mov byte [ebp - 4], 1
cmp ecx, 0x10
jb 0x4059bb
mov edx, dword [ebp + 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4059b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4059b1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x473514
call fcn.00402120
lea eax, [ebp + 0x44]
push eax
lea ecx, [ebp - 0x19]
call fcn.00411120
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x4059e4
mov edx, dword [edx]
mov dword [ebp + 0x60], 0x383b3b2c
xor ecx, ecx
mov dword [ebp + 0x64], 0x3d273c34
mov dword [ebp + 0x68], 0x31233736
mov dword [ebp + 0x6c], 0x1003436
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x60], al
inc ecx
cmp ecx, 0xe
jb 0x405a02
push edx
lea eax, [ebp + 0x60]
mov byte [ebp + 0x6f], 0
push eax
lea ecx, [ebp + 0x18]
call fcn.0040d2b0
mov ecx, dword [ebp + 0x58]
mov byte [ebp - 4], 1
cmp ecx, 0x10
jb 0x405a5b
mov edx, dword [ebp + 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405a51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405a51
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
movaps xmm0, xmmword [0x45e870]
lea ecx, [ebp + 0x18]
movups xmmword [ebp + 0x30], xmm0
push 0
movaps xmm0, xmmword [0x45e8b0]
movups xmmword [ebp + 0x40], xmm0
mov dword [ebp + 0x50], 0x19030209
mov dword [ebp + 0x54], 0xc16161f
mov dword [ebp + 0x58], 0x81f065b
mov word [ebp + 0x5c], 0x100
call fcn.0040d470
sub esp, 0x18
mov esi, eax
mov edx, esp
mov dword [ebp + 0x74], esp
mov ecx, esi
mov dword [edx], 0
mov dword [edx + 0x10], 0
lea ebx, [ecx + 1]
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x405ac0
sub ecx, ebx
push ecx
push esi
mov ecx, edx
call fcn.00401e80
mov ebx, dword [ebp - 0x18]
push ebx
sub esp, 0x18
mov byte [ebp - 4], 7
mov edx, esp
mov dword [ebp - 0x18], edx
cmp byte [ebp + 0x5d], 0
je 0x405b02
xor ecx, ecx
nop word [eax + eax]
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x30], al
inc ecx
cmp ecx, 0x2c
jb 0x405af0
mov byte [ebp + 0x5d], 0
lea eax, [ebp - 0x11]
mov ecx, edx
push eax
lea eax, [ebp + 0x5c]
push eax
lea eax, [ebp + 0x30]
push eax
call fcn.004037e0
mov byte [ebp - 4], 1
call fcn.0040aec0
movzx edx, byte [0x4734a5]
add esp, 0x38
test al, al
mov ecx, 1
cmove edx, ecx
mov byte [0x4734a5], dl
cmp dword [0x47357c], ecx
jne 0x405c30
cmp dword [0x47359c], 0xf1
jne 0x405c30
push 0x1024
movzx eax, dl
cmp ebx, str.Req_IDNF
push 0
push dword [0x473578]
cmove eax, ecx
mov byte [0x4734a5], al
call sub.VCRUNTIME140.dll_memset
mov edx, dword [0x473578]
add esp, 0xc
mov ecx, ebx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x405b82
push ebx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov ecx, edi
call fcn.00406450
mov ecx, dword [ebp + 0x2c]
cmp ecx, 0x10
jb 0x405c72
mov edx, dword [ebp + 0x18]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405c68
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x405c68
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
movaps xmm0, xmmword [0x45e8a0]
xor ecx, ecx
movups xmmword [ebp + 0x34], xmm0
mov dword [ebp + 0x54], 0x5e1d204d
movaps xmm0, xmmword [0x45e800]
movups xmmword [ebp + 0x44], xmm0
mov dword [ebp + 0x58], 0x411851
mov byte [ebp + 0x5c], 1
mov al, cl
add al, 0x4d
xor byte [ebp + ecx + 0x34], al
inc ecx
cmp ecx, 0x27
jb 0x405c03
lea eax, [ebp + 0x34]
mov byte [ebp + 0x5c], 0
push 5
push eax
call fcn.0040e5f0
add esp, 8
mov byte [0x4734a5], 1
mov eax, 0x405c72
ret
mov ecx, edi
call fcn.004080a0
mov ecx, edi
call fcn.00405770
mov ecx, dword [ebp + 0x2c]
cmp ecx, 0x10
jb 0x405c72
mov edx, dword [ebp + 0x18]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x405c68
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405bd3
push ecx
push edx
call fcn.0045aae6
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x7c]
xor ecx, ebp
call fcn.0045aaf4
lea esp, [ebp + 0x80]
pop ebp
ret