Function at 0x498b70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x670709
call fcn.006313fc
sub esp, 0xc
push ebx
mov ebx, ecx
push ebp
push esi
push edi
mov dword [esp + 0x14], ebx
mov dword [ebx + 4], 0x6a190c
xor ebp, ebp
mov dword [ebx], 0x69d43c
lea ecx, [ebx + 0x20]
mov dword [esp + 0x24], ebp
mov dword [ebx + 4], 0x69d5e0
call fcn.00498adb
xor ecx, ecx
mov dword [ebx + 0x44], ecx
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], ecx
fld dword [0x69ef94]
xor eax, eax
fstp dword [ebx + 0x58]
mov dword [ebx + 0x54], ecx
mov dword [ebx + 0x70], 7
mov dword [ebx + 0x6c], ecx
mov word [ebx + 0x5c], ax
push 0xf
pop edi
mov dword [ebx + 0x88], edi
mov dword [ebx + 0x84], ecx
mov byte [ebx + 0x74], cl
mov dword [ebx + 0xa0], edi
mov dword [ebx + 0x9c], ecx
mov byte [ebx + 0x8c], cl
mov word [ebx + 0xa4], 1
mov dword [ebx + 0xbc], edi
mov dword [ebx + 0xb8], ecx
mov byte [ebx + 0xa8], cl
and byte [ebx + 0x133], 0xef
lea esi, [ebx + 0x16c]
mov dword [ebx + 0xc0], ecx
mov dword [ebx + 0xc4], ecx
mov dword [ebx + 0xc8], ecx
mov dword [ebx + 0xcc], ecx
mov word [ebx + 0xd0], cx
mov dword [ebx + 0xec], ecx
mov byte [ebx + 0x118], cl
mov dword [ebx + 0x11c], ecx
mov dword [ebx + 0x120], ecx
mov eax, dword [0x76420c]
mov dword [ebx + 0x138], eax
mov dword [esi], ecx
mov dword [esi + 4], ecx
mov ecx, esi
mov byte [esp + 0x24], 6
call fcn.004586a0
mov dword [esi], eax
lea esi, [ebx + 0x174]
mov byte [esp + 0x24], 7
mov ecx, esi
mov dword [esi], ebp
mov dword [esi + 4], ebp
call fcn.00506f61
mov dword [esi], eax
mov dword [ebx + 0x17c], ebp
mov dword [ebx + 0x180], ebp
mov dword [ebx + 0x184], ebp
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 9
lea ecx, [ebx + 0x188]
push eax
call fcn.004980ef
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0xa
lea ecx, [ebx + 0x1a0]
push eax
call fcn.004980ef
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0xb
lea ecx, [ebx + 0x1b4]
push eax
call fcn.004980ef
mov dword [ebx + 0x1cc], ebp
mov dword [ebx + 0x1d0], ebp
mov dword [ebx + 0x1d4], ebp
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0xd
lea ecx, [ebx + 0x1d8]
push eax
call fcn.004980ef
xor eax, eax
mov dword [ebx + 0x200], edi
mov dword [ebx + 0x1fc], eax
mov byte [ebx + 0x1ec], al
mov dword [ebx + 0x218], edi
mov dword [ebx + 0x214], eax
mov byte [ebx + 0x204], al
mov dword [ebx + 0x224], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], eax
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0x11
push eax
lea eax, [esp + 0x17]
lea ecx, [ebx + 0x230]
push eax
call fcn.00524ff3
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0x12
lea ecx, [ebx + 0x250]
push eax
call fcn.004980ef
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0x13
lea ecx, [ebx + 0x264]
push eax
call fcn.004980ef
lea esi, [ebx + 0x34c]
mov ecx, esi
call fcn.0047a5dd
xor eax, eax
mov dword [esi], 0x69d3e8
mov dword [esi + 0x3c], eax
push 7
pop edx
xor ecx, ecx
mov dword [ebx + 0x3a0], edx
mov dword [ebx + 0x39c], eax
mov word [ebx + 0x38c], cx
mov dword [ebx + 0x3b8], edx
mov dword [ebx + 0x3b4], eax
mov word [ebx + 0x3a4], cx
mov dword [ebx + 0x3d0], edx
mov dword [ebx + 0x3cc], eax
mov word [ebx + 0x3bc], cx
mov dword [ebx + 0x3e8], edx
mov dword [ebx + 0x3e4], eax
mov word [ebx + 0x3d4], cx
mov dword [ebx + 0x400], edx
mov dword [ebx + 0x3fc], eax
mov word [ebx + 0x3ec], cx
mov dword [ebx + 0x42c], edi
mov dword [ebx + 0x428], eax
mov byte [ebx + 0x418], al
mov dword [ebx + 0x444], edi
mov dword [ebx + 0x440], eax
mov byte [ebx + 0x430], al
mov dword [ebx + 0x460], edi
mov dword [ebx + 0x45c], eax
mov byte [ebx + 0x44c], al
mov dword [ebx + 0x4a0], edx
mov dword [ebx + 0x49c], eax
mov word [ebx + 0x48c], cx
mov dword [ebx + 0x4b8], edx
mov dword [ebx + 0x4b4], eax
mov word [ebx + 0x4a4], cx
mov dword [ebx + 0x4d0], edi
mov dword [ebx + 0x4cc], eax
mov byte [ebx + 0x4bc], al
mov dword [ebx + 0x4e8], edx
mov dword [ebx + 0x4e4], eax
mov word [ebx + 0x4d4], cx
mov dword [ebx + 0x528], eax
lea ecx, [ebx + 0x530]
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0x21
push eax
call fcn.004980ef
lea ecx, [ebx + 0x560]
mov byte [esp + 0x24], 0x22
mov dword [ebx + 0x55c], ebp
call fcn.0049809c
lea eax, [esp + 0x13]
mov dword [ebx + 0x5a4], ebp
push eax
lea eax, [esp + 0x17]
mov dword [ebx + 0x5a8], ebp
mov dword [ebx + 0x5ac], ebp
lea ecx, [ebx + 0x5b4]
push eax
mov dword [ebx + 0x5b0], ebp
call fcn.00524ff3
lea ecx, [ebx + 0x5e8]
mov byte [esp + 0x24], 0x23
call fcn.004c61dc
xor eax, eax
mov dword [ebx + 0x614], edi
mov dword [ebx + 0x610], eax
mov byte [ebx + 0x600], al
xor ecx, ecx
mov dword [ebx + 0x62c], 7
mov dword [ebx + 0x628], eax
mov word [ebx + 0x618], cx
mov dword [ebx + 0x644], 7
mov dword [ebx + 0x640], eax
mov word [ebx + 0x630], cx
lea esi, [ebx + 0x648]
mov byte [esp + 0x24], 0x26
mov ecx, esi
mov dword [esi], eax
mov dword [esi + 4], eax
call fcn.005123fa
mov dword [esi], eax
push 7
pop edx
xor eax, eax
mov dword [ebx + 0x664], edx
xor ecx, ecx
mov dword [ebx + 0x660], eax
mov word [ebx + 0x650], cx
mov dword [ebx + 0x67c], edi
mov dword [ebx + 0x678], eax
mov byte [ebx + 0x668], al
mov dword [ebx + 0x694], edx
mov dword [ebx + 0x690], eax
mov word [ebx + 0x680], cx
mov byte [ebx + 0x6ac], al
lea ecx, [ebx + 0x6cc]
mov dword [ebx + 0x6b4], eax
lea eax, [esp + 0x13]
push eax
mov byte [esp + 0x28], 0x2a
mov dword [ebx + 0x6b0], 1
call fcn.004980ef
lea eax, [esp + 0x13]
mov byte [esp + 0x24], 0x2b
lea ecx, [ebx + 0x6e0]
push eax
call fcn.004980ef
xor eax, eax
mov dword [ebx + 0x6f4], eax
mov dword [ebx + 0x6f8], eax
mov dword [ebx + 0x6fc], eax
mov dword [ebx + 0x700], eax
mov dword [ebx + 0x704], eax
mov byte [ebx + 0x708], al
mov dword [ebx + 0x70c], 0x69d428
mov dword [ebx + 0x710], ebx
push 0x98
mov byte [esp + 0x28], 0x2f
call fcn.00630af1
pop ecx
test eax, eax
je 0x49901b
push ebx
mov ecx, eax
call fcn.0049959f
xor ecx, ecx
jmp 0x49901f
xor ecx, ecx
mov eax, ecx
and byte [ebx + 0x133], 0xfc
mov dword [ebx + 0xc8], eax
xor eax, eax
mov word [ebx + 0x128], ax
mov word [ebx + 0x124], ax
mov al, byte [ebx + 0x13c]
and al, 0xcb
mov byte [ebx + 0x5d4], cl
or al, 8
mov dword [ebx + 0x5d8], ecx
mov dword [ebx + 0x5dc], ecx
mov dword [ebx + 0x284], ecx
mov dword [ebx + 0x288], ecx
mov dword [ebx + 0x27c], ecx
mov dword [ebx + 0x280], ecx
mov dword [ebx + 0x28c], ecx
mov dword [ebx + 0x290], ecx
mov dword [ebx + 0x294], ecx
mov dword [ebx + 0x298], ecx
mov dword [ebx + 0x29c], ecx
mov dword [ebx + 0x2a0], ecx
mov dword [ebx + 0x2a4], ecx
mov dword [ebx + 0x2a8], ecx
mov dword [ebx + 0x2ac], ecx
mov dword [ebx + 0x2b0], ecx
mov byte [ebx + 0x126], cl
mov dword [ebx + 0xf0], ecx
mov byte [ebx + 0x13c], al
mov byte [ebx + 0x140], 1
mov dword [ebx + 0x14c], ecx
call fcn.00637f73
cdq
mov ecx, 0xe10
idiv ecx
xor ebp, ebp
mov eax, edx
cdq
push ebp
mov esi, eax
mov edi, edx
call fcn.004919d8
sub eax, esi
mov dword [ebx + 0x164], eax
sbb edx, edi
xor eax, eax
mov dword [ebx + 0x168], edx
lea edi, [ebx + 0x150]
stosd dword es:[edi], eax
xor ecx, ecx
push 4
push 0x20
push 0x10
stosd dword es:[edi], eax
push 5
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov al, byte [ebx + 0x13c]
or byte [ebx + 0x134], 2
and al, 0x3f
or al, 0x40
mov dword [ebx + 0x5e0], ecx
mov dword [ebx + 0x5e4], ecx
mov dword [ebx + 0x544], ecx
mov dword [ebx + 0x550], ecx
mov dword [ebx + 0x554], ecx
mov dword [ebx + 0x548], ecx
mov dword [ebx + 0x54c], ecx
mov byte [ebx + 0x13c], al
mov dword [ebx + 0x2c0], ecx
mov word [ebx + 0x131], cx
mov dword [ebx + 0x2e4], ecx
mov dword [ebx + 0x2e8], ecx
mov dword [ebx + 0x2e0], ecx
mov dword [ebx + 0x698], ecx
mov dword [ebx + 0x69c], ecx
mov dword [ebx + 0x6a0], ecx
mov dword [ebx + 0x6a4], ecx
mov dword [ebx + 0x278], ecx
mov dword [ebx + 0x19c], ecx
mov dword [ebx + 0x1c8], ecx
call fcn.004fb5d6
xor edx, edx
and byte [ebx + 0x134], 0xf3
mov dword [ebx + 0x1c8], eax
lea edi, [ebx + 0x321]
mov dword [ebx + 0x2f8], edx
mov dword [ebx + 0x2fc], edx
mov dword [ebx + 0x300], edx
mov dword [ebx + 0x304], edx
mov dword [ebx + 0x308], edx
mov dword [ebx + 0x30c], edx
mov dword [ebx + 0x310], edx
mov dword [ebx + 0x314], edx
mov dword [ebx + 0x318], edx
mov dword [ebx + 0x31c], edx
mov dword [ebx + 0x2ec], edx
mov dword [ebx + 0x2f0], edx
mov dword [ebx + 0xe4], edx
mov dword [ebx + 0xe8], edx
mov dword [ebx + 0x2b4], edx
mov dword [ebx + 0x2b8], edx
mov dword [ebx + 0x2bc], edx
mov dword [ebx + 0x104], edx
mov dword [ebx + 0x100], edx
mov dword [ebx + 0x10c], edx
mov dword [ebx + 0x110], edx
mov dword [ebx + 0xfc], edx
mov dword [ebx + 0x108], edx
mov dword [ebx + 0x114], edx
push 0x3c
pop esi
mov dword [ebx + 0x21c], esi
mov eax, dword [0x73f988]
or dword [ebx + 0x12c], 0xffffffff
and byte [ebx + 0x13d], 0xfc
and byte [ebx + 0x134], 0xef
mov dword [ebx + 0xf4], eax
mov al, byte [ebx + 0x133]
and al, 0x13
mov dword [ebx + 0x2f4], edx
or al, 0x40
mov word [ebx + 0x12a], 0x400
mov byte [ebx + 0x133], al
xor eax, eax
mov dword [ebx + 0x510], edx
mov byte [ebx + 0x130], dl
mov byte [ebx + 0x13e], 0xd
mov byte [ebx + 0x320], dl
stosd dword es:[edi], eax
push 0x180
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and byte [ebx + 0x13c], 0xfc
mov byte [ebx + 0x124], dl
mov dword [ebx + 0x448], edx
mov dword [ebx + 0x464], edx
mov byte [ebx + 0x468], dl
mov word [ebx + 0x47d], dx
mov dword [ebx + 0x480], edx
mov dword [ebx + 0x484], edx
mov dword [ebx + 0x488], edx
mov dword [ebx + 0x6bc], edx
mov dword [ebx + 0x4ec], edx
mov dword [ebx + 0x4f0], edx
mov dword [ebx + 0x4f4], edx
mov dword [ebx + 0x4f8], edx
mov dword [ebx + 0x4fc], edx
call fcn.00630af1
pop ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], 0x30
test eax, eax
je 0x49932a
push ebx
mov ecx, eax
call fcn.004fc2a6
mov ebp, eax
jmp 0x49932c
xor ebp, ebp
push 0x15c
mov byte [esp + 0x28], 0x2f
mov dword [ebx + 0xd8], ebp
call fcn.00630af1
pop ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], 0x31
test eax, eax
je 0x49935b
push ebx
mov ecx, eax
call fcn.005250b3
xor edx, edx
jmp 0x49935f
xor edx, edx
mov eax, edx
mov dword [ebx + 0xcc], eax
mov dword [ebx + 0xdc], edx
mov ecx, dword [ebx + 0xd8]
mov al, byte [0x73fa91]
mov byte [esp + 0x24], 0x2f
mov byte [esp + 0x13], 1
mov byte [ecx + 0x8a], al
mov dword [ebx + 0xe0], edx
mov dword [ebx + 0xf8], edx
mov byte [ebx + 0x13f], dl
mov byte [ebx + 0x141], dl
mov dword [ebx + 0x2d8], edx
mov dword [ebx + 0x2dc], edx
and byte [ebx + 0x5fc], 0xfe
mov dword [ebx + 0x348], edx
call fcn.00475044
lea ecx, [ebx + 0x34c]
mov byte [esp + 0x24], 0x32
call fcn.00473e68
mov byte [esp + 0x24], 0x2f
call fcn.00475085
xor eax, eax
mov dword [ebx + 0x340], eax
mov dword [ebx + 0x344], eax
mov dword [ebx + 0x338], eax
mov dword [ebx + 0x33c], eax
mov dword [ebx + 0x144], eax
mov dword [ebx + 0x148], CreateStatusWindowA
mov dword [ebx + 0x2c4], eax
mov dword [ebx + 0x2c8], eax
and byte [ebx + 0x2cc], 0xfe
mov byte [ebx + 0x2cd], al
mov dword [ebx + 0x404], eax
mov dword [ebx + 0x408], eax
mov dword [ebx + 0x40c], eax
mov dword [ebx + 0x410], eax
call fcn.0046818d
xor edx, edx
div esi
mov dword [ebx + 0x2d0], edx
call fcn.0046818d
xor edx, edx
lea edi, [ebx + 8]
mov ecx, 0x12c
div ecx
xor eax, eax
xor ecx, ecx
mov dword [ebx + 0x2d4], edx
mov dword [ebx + 0x414], ecx
stosd dword es:[edi], eax
push 0x14
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebx + 0x1c], edx
lea edi, [ebx + 0x469]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [0x73facc]
mov dword [ebx + 0x500], eax
mov eax, dword [0x73fac8]
mov dword [ebx + 0x508], eax
mov eax, dword [0x73fad0]
mov dword [ebx + 0x504], eax
mov dword [ebx + 0x50c], ecx
and byte [ebx + 0x134], 0xfe
and byte [ebx + 0x51c], 0xfe
mov dword [ebx + 0x518], ecx
mov dword [ebx + 0x514], ecx
mov dword [ebx + 0x520], ecx
mov dword [ebx + 0x524], ecx
mov dword [ebx + 0x52c], ecx
mov byte [ebx + 0x558], cl
mov dword [ebx + 0x220], ecx
mov byte [ebx + 0x6ad], cl
mov byte [ebx + 0x6b8], cl
and byte [ebx + 0x13d], 0xfb
mov dword [ebx + 0x6c0], 6
or dword [ebx + 0x6c4], 0xffffffff
or dword [ebx + 0x6c8], 0xffffffff
and byte [ebx + 0x335], 0xfe
and byte [ebx + 0x13d], 0xf7
push edx
call fcn.00630af1
pop ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], 0x33
test eax, eax
je 0x499531
push ebx
mov ecx, eax
call fcn.00498694
xor ebp, ebp
jmp 0x499535
xor ebp, ebp
mov eax, ebp
push 0x20
mov byte [esp + 0x28], 0x2f
mov dword [ebx + 0xd4], eax
call fcn.00630af1
pop ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], 0x34
test eax, eax
je 0x49955f
push ebx
mov ecx, eax
call fcn.00498658
mov ebp, eax
push ebp
mov ecx, ebx
mov byte [esp + 0x28], 0x2f
call fcn.0049b42f
push ebx
call fcn.00529eeb
mov eax, dword [0x7639c8]
shr eax, 2
test al, 1
je 0x49958c
push ebx
call fcn.004c17b9
push eax
mov ecx, ebx
call fcn.0049b42f
mov ecx, dword [esp + 0x1c]
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
leave
ret