Function at 0x70d73b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
mov dword [ebp - 4], 0
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.007038d9
add esp, 0xc
jns 0x70d75d
add ebx, 0x1eaf
sub ebx, 0x1eaf
jbe 0x70d780
pushf
test dword [esp], ebx
jns 0x70d772
xchg edx, edx
popf
jl 0x70d778
jb 0x70d77a
lea esp, [esp]
ja 0x70d780
add eax, 0x47ec45c6
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
cld
jge 0x70d7cb
pushf
not eax
not eax
lea esp, [esp]
cmp ecx, dword [esp + 4]
popf
jns 0x70d7c4
ja 0x70d7c6
jne 0x70d7c8
jl 0x70d7cb
mov ecx, 0x80ec4d8a
jmp 0xecbe5fd5
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
call fcn.0070cc92
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x70d840
xor eax, eax
jmp 0x70da4d
ror edi, 0x1e
rol edi, 0x1e
nop
jno 0x70d868
pushf
add edi, dword [esp]
sub edi, dword [esp]
xchg esp, esp
popf
jae 0x70d857
xchg esi, eax
xchg esi, eax
lea esi, [esi + 0xa1d]
lea esi, [esi - 0xa1d]
jo 0x70d868
mov esp, 0x50ec458d
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.00702f41
mov dword [ebp - 0x18], eax
push 0xc
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.007038d9
add esp, 0xc
sub ebx, 0
add esi, dword [esp]
sub esi, dword [esp]
shl esp, 0
inc edx
dec edx
js 0x70d89d
mov ecx, ecx
jns 0x70d89d
sub eax, 0xe87d83
cmp dword [ebp - 0x18], 0
jne 0x70d8aa
xor eax, eax
jmp 0x70da4d
lea edx, [edx]
jno 0x70d8c2
pushf
xor esp, 0
jge 0x70d8b5
rol esi, 0xe
ror esi, 0xe
popf
jg 0x70d8bf
jo 0x70d8c2
mov eax, 0x50e8458b
mov eax, dword [ebp - 0x18]
push eax
call fcn.00723150
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x14]
push ecx
call fcn.007038d9
add esp, 0xc
cmp edx, dword [esp + 0x10]
xchg edi, edi
jne 0x70d8eb
jmp 0x70d8e8
je 0x70d8eb
lcall 0x45c6, 0x47ec45c6
int1
push 0xffffffffffffffc6
inc ebp
neg byte [eax - 0x3a]
inc ebp
in eax, dx
push 0xffffffffffffffc6
inc ebp
repne outsd dx, dword [esi]
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
test dword [esp + 8], edx
jne 0x70d921
jns 0x70d923
jb 0x70d92c
lea ecx, [ecx]
jae 0x70d92c
mov ecx, 0x558a13ec
in al, dx
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
add eax, 0
cld
cmp edi, dword [esp + 8]
or edi, edi
jge 0x70d9a1
nop
jnp 0x70d99a
jl 0x70d99c
jne 0x70d99e
jl 0x70d9a1
mov ecx, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x70d9cd
shr ecx, 0
lea edx, [edx + 0x5ec4]
lea edx, [edx - 0x5ec4]
jnp 0x70d9bd
jge 0x70d9ba
jp 0x70d9bd
call 0x525d274e
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00702f41
mov dword [ebp - 8], eax
call 0x70d9d2
lea esp, [esp + 4]
inc edi
dec edi
ja 0x70d9e3
jle 0x70d9dc
nop
jns 0x70d9df
jbe 0x70d9e3
add dword [ebx + 0x6a0c6a], 0x50ec458d
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.007038d9
add esp, 0xc
lea ebx, [ebx]
jo 0x70d9f7
add edi, 0
jo 0x70da01
jns 0x70d9fe
jno 0x70da01
mov ebp, 0xf87d83
cmp dword [ebp - 8], 0
je 0x70da24
ja 0x70da09
jg 0x70da0b
je 0x70da18
jae 0x70da0f
jl 0x70da11
lea esp, [esp]
jne 0x70da18
call 0xf8be6605
mov ecx, dword [ebp - 8]
push ecx
call fcn.00723150
add esp, 4
push edi
add edi, 0x1e01
ror edi, 7
pop edi
test dword [esp], ecx
jmp 0x70da34
clc
jno 0x70da42
lea eax, [eax]
xchg esi, esi
xchg edx, edi
xchg edx, edi
jo 0x70da42
call 0x527d2fd1
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8