Function at 0x4702f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x484470
push 0x408890
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x486534]
xor dword [ebp - 8], eax
xor eax, ebp
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x1c], esi
xor eax, eax
lea ebx, [ebx]
and esi, eax
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 0x1f
jl 0x470330
test esi, esi
jge 0x470350
mov eax, esi
neg eax
add eax, eax
add eax, eax
sub eax, esi
mov esi, eax
mov dword [ebp - 0x1c], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xd
mov edx, esi
sub edx, ecx
jne 0x470375
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x1c], esi
xor edi, edi
mov eax, 0xaaaaaaab
mul edi
shr edx, 1
lea eax, [edx + edx*2]
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jne 0x470390
and esi, edi
jmp 0x4703a6
mov eax, 1
mov ebx, 2
mov ecx, 3
mov edx, 4
or esi, edi
mov dword [ebp - 0x1c], esi
add edi, 1
cmp edi, 5
jl 0x470377
xor ecx, ecx
xor eax, eax
mov edx, eax
not edx
xor esi, edx
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 0xf
jl 0x4703b5
cmp esi, 0xffff0001
jge 0x4703d4
lea esi, [esi + esi*2]
mov dword [ebp - 0x1c], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x4703fe
mov esi, 0xb
mov dword [ebp - 0x1c], esi
mov dword [ebp - 4], ecx
mov edi, 7
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], ecx
cmp ecx, 6
jge 0x470480
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
sub eax, edx
jne 0x470439
sub edi, 1
mov dword [ebp - 0x20], edi
mov eax, esi
cdq
idiv edi
mov esi, eax
mov dword [ebp - 0x1c], esi
add ecx, 1
jmp 0x470409
mov ebx, 0xfffffffe
mov dword [ebp - 4], ebx
xor eax, eax
lea ebx, [ebx]
mov edx, eax
not edx
xor esi, edx
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 0x14
jl 0x470490
cmp esi, 0xffff0001
jge 0x4704af
lea esi, [esi + esi*2]
mov dword [ebp - 0x1c], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
mov edx, esi
sub edx, ecx
jne 0x4704d9
mov esi, 0xb
mov dword [ebp - 0x1c], esi
xor eax, eax
jmp 0x4704e0
and esi, eax
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 0xb
jl 0x4704e0
test esi, esi
jge 0x470500
mov eax, esi
neg eax
add eax, eax
add eax, eax
sub eax, esi
mov esi, eax
mov dword [ebp - 0x1c], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xd
mov edx, esi
sub edx, ecx
jne 0x470525
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x1c], esi
xor eax, eax
and esi, eax
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 0x17
jl 0x470527
test esi, esi
jge 0x470547
mov eax, esi
neg eax
add eax, eax
add eax, eax
sub eax, esi
mov esi, eax
mov dword [ebp - 0x1c], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xd
mov edx, esi
sub edx, ecx
jne 0x47056c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
mov dword [ebp - 0x1c], esi
xor ecx, ecx
mov edi, edi
xor esi, ecx
mov dword [ebp - 0x1c], esi
jge 0x47057c
neg esi
mov dword [ebp - 0x1c], esi
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x4705a3
xor esi, esi
mov dword [ebp - 0x1c], esi
add ecx, 1
cmp ecx, 0x12
jl 0x470570
xor eax, eax
lea ecx, [ecx]
mov ecx, eax
imul esi, ecx
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 8
jl 0x4705b0
test esi, esi
jle 0x4705ca
lea esi, [esi + esi*4]
mov dword [ebp - 0x1c], esi
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax + eax*2]
mov eax, esi
sub eax, edx
jne 0x4705e9
mov esi, 0x11
mov dword [ebp - 0x1c], esi
nop
nop
nop
mov dword [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x17
jge 0x470641
mov eax, esi
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x470610
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
je 0x470639
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x47063c
xor esi, esi
mov dword [ebp - 0x1c], esi
add ecx, 1
jmp 0x4705f5
mov dword [ebp - 4], ebx
call fcn.004706a5
mov dword [ebp - 4], 2
mov edi, 7
mov dword [ebp - 0x2c], edi
xor ecx, ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0xf
jge 0x4706ec
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
sub eax, edx
jne 0x47068e
sub edi, 1
mov dword [ebp - 0x2c], edi
mov eax, esi
cdq
idiv edi
mov esi, eax
mov dword [ebp - 0x1c], esi
add ecx, 1
jmp 0x47065a
mov dword [ebp - 4], ebx
mov dword [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x34], ecx
test ecx, ecx
jge 0x470743
mov eax, esi
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x470712
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
je 0x47073b
mov eax, 0x92492493
imul esi
add edx, esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, esi
sub eax, edx
jne 0x47073e
xor esi, esi
mov dword [ebp - 0x1c], esi
add ecx, 1
jmp 0x4706f8
mov dword [ebp - 4], ebx
call fcn.004708ab
xor eax, eax
lea ecx, [ecx]
and esi, eax
mov dword [ebp - 0x1c], esi
add eax, 1
cmp eax, 4
jl 0x470750
test esi, esi
jge 0x470770
mov ecx, esi
neg ecx
add ecx, ecx
add ecx, ecx
sub ecx, esi
mov esi, ecx
mov dword [ebp - 0x1c], esi
mov eax, 0x4ec4ec4f
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov edi, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
sub esi, eax
jne 0x470793
call edi
mov dword [ebp - 0x1c], eax
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
jge 0x4707a9
mov edx, ecx
neg edx
add edx, edx
add edx, edx
sub edx, ecx
mov ecx, edx
mov dword [ebp - 0x1c], ecx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov edx, ecx
sub edx, eax
jne 0x4707ca
call edi
mov ecx, eax
mov dword [ebp - 0x1c], ecx
xor eax, eax
lea esp, [esp]
and ecx, eax
mov dword [ebp - 0x1c], ecx
add eax, 1
cmp eax, 5
jl 0x4707d0
test ecx, ecx
jge 0x4707f0
mov eax, ecx
neg eax
add eax, eax
add eax, eax
sub eax, ecx
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov edx, ecx
sub edx, eax
jne 0x470811
call edi
mov ecx, eax
mov dword [ebp - 0x1c], ecx
xor esi, esi
xor ecx, esi
mov dword [ebp - 0x1c], ecx
jge 0x47081f
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
sub eax, edx
jne 0x470846
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
add esi, 1
cmp esi, 0x10
jl 0x470813
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x38], esi
cmp esi, 2
jge 0x4708b5
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
and eax, 0x80000001
jns 0x470872
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
je 0x47089b
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, ecx
sub eax, edx
jne 0x47089e
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
add esi, 1
jmp 0x470857
mov dword [ebp - 4], ebx
call fcn.00470946
cmp ecx, 0xffff0001
jge 0x4708cb
lea ecx, [ecx + ecx*2]
mov dword [ebp - 0x1c], ecx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea edx, [eax*8]
sub edx, eax
sub ecx, edx
jne 0x4708f2
mov dword [ebp - 0x1c], 0xb
xor ecx, ecx
mov dword [ebp - 0x1c], ecx
jge 0x470908
mov eax, ecx
neg eax
add eax, eax
add eax, eax
sub eax, ecx
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0xd
mov edx, ecx
sub edx, eax
jne 0x470929
call edi
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, ecx
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret