Function at 0x40fb70
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get kernel32 base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x480068
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0xc], edi
mov dword [edi], 0x484ad8
mov dword [esp + 0x20], 0
lea esi, [edi + 0x1e88]
mov dword [esp + 0x10], esi
lea ecx, [esi + 0x5c]
mov byte [esp + 0x20], 0xe
call fcn.0047272c
mov ecx, esi
mov byte [esp + 0x20], 0xd
call fcn.0047539c
lea esi, [edi + 0x1b64]
mov dword [esp + 0x10], esi
lea ecx, [esi + 0x2c8]
mov byte [esp + 0x20], 0x14
call fcn.0046d5f0
lea ecx, [esi + 0x210]
mov byte [esp + 0x20], 0x13
call fcn.0046c520
lea ecx, [esi + 0x158]
mov byte [esp + 0x20], 0x12
call fcn.0046c520
lea ecx, [esi + 0xa0]
mov byte [esp + 0x20], 0x11
call fcn.0046c520
lea ecx, [esi + 0x78]
mov byte [esp + 0x20], 0x10
call fcn.004634a0
lea ecx, [esi + 0x5c]
mov byte [esp + 0x20], 0xf
call fcn.004634a0
mov ecx, esi
mov byte [esp + 0x20], 0xc
call fcn.0047539c
lea esi, [edi + 0x1380]
mov dword [esp + 0x10], esi
lea ecx, [esi + 0x7e0]
mov byte [esp + 0x20], 0x28
call fcn.00475dd3
lea ecx, [esi + 0x7c0]
mov byte [esp + 0x20], 0x27
call fcn.00475dd3
lea ebp, [esi + 0x768]
mov dword [esp + 0x14], ebp
lea ecx, [ebp + 0x28]
mov byte [esp + 0x20], 0x2b
call fcn.004634a0
lea ecx, [ebp + 0x1c]
mov byte [esp + 0x20], 0x2a
call fcn.00462600
lea ecx, [ebp + 0x10]
mov byte [esp + 0x20], 0x29
call fcn.00462600
lea ecx, [ebp + 4]
mov byte [esp + 0x20], 0x26
call fcn.00462600
lea ecx, [esi + 0x708]
mov byte [esp + 0x20], 0x25
call fcn.00406350
lea ecx, [esi + 0x6c4]
mov byte [esp + 0x20], 0x24
call fcn.0047272c
lea ecx, [esi + 0x5cc]
mov byte [esp + 0x20], 0x23
call fcn.00404410
lea ecx, [esi + 0x5b0]
mov byte [esp + 0x20], 0x22
call fcn.00467d50
lea ecx, [esi + 0x548]
mov byte [esp + 0x20], 0x21
call fcn.00467e20
lea ecx, [esi + 0x4e0]
mov byte [esp + 0x20], 0x20
call fcn.00467e20
lea ecx, [esi + 0x478]
mov byte [esp + 0x20], 0x1f
call fcn.00467e20
lea ecx, [esi + 0x410]
mov byte [esp + 0x20], 0x1e
call fcn.00467e20
lea ecx, [esi + 0x3a8]
mov byte [esp + 0x20], 0x1d
call fcn.00467e20
lea ecx, [esi + 0x36c]
mov byte [esp + 0x20], 0x1c
call fcn.00401040
lea ecx, [esi + 0x330]
mov byte [esp + 0x20], 0x1b
call fcn.00401040
lea ecx, [esi + 0x2f4]
mov byte [esp + 0x20], 0x1a
call fcn.00401170
lea ecx, [esi + 0x2a4]
mov byte [esp + 0x20], 0x19
call fcn.00468300
lea ecx, [esi + 0x254]
mov byte [esp + 0x20], 0x18
call fcn.00468300
lea ecx, [esi + 0x1fc]
mov byte [esp + 0x20], 0x17
call fcn.00468790
lea ecx, [esi + 0x11c]
mov byte [esp + 0x20], 0x16
call fcn.00401400
lea ecx, [esi + 0x5c]
mov byte [esp + 0x20], 0x15
call fcn.004077d0
mov ecx, esi
mov byte [esp + 0x20], 0xb
call fcn.0047539c
lea esi, [edi + 0xabc]
mov dword [esp + 0x14], esi
lea ecx, [esi + 0x8c0]
mov byte [esp + 0x20], 0x30
call fcn.00475dd3
lea ecx, [esi + 0x864]
mov byte [esp + 0x20], 0x2f
call fcn.00405090
push fcn.0046c520
push 0xa
lea eax, [esi + 0x134]
push 0xb8
push eax
mov byte [esp + 0x30], 0x2e
call fcn.00425dfe
lea ecx, [esi + 0xc4]
mov byte [esp + 0x20], 0x2d
call fcn.00467e20
lea ecx, [esi + 0x5c]
mov byte [esp + 0x20], 0x2c
call fcn.00467e20
mov ecx, esi
mov byte [esp + 0x20], 0xa
call fcn.0047539c
lea ecx, [edi + 0xa74]
mov byte [esp + 0x20], 9
call fcn.00469800
lea ecx, [edi + 0x818]
mov byte [esp + 0x20], 8
call fcn.00469800
lea ecx, [edi + 0x810]
mov dword [esp + 0x14], ecx
mov dword [ecx], vtable.CGdiObject.0
mov byte [esp + 0x20], 0x31
call fcn.00478959
lea ecx, [edi + 0x4b8]
mov byte [esp + 0x20], 6
call fcn.0040d7c0
lea ecx, [edi + 0x370]
mov byte [esp + 0x20], 5
call fcn.0041a6b0
lea ecx, [edi + 0x2fc]
mov byte [esp + 0x20], 4
call fcn.0046cd90
lea ecx, [edi + 0x288]
mov byte [esp + 0x20], 3
call fcn.0046cd90
lea ecx, [edi + 0x214]
mov byte [esp + 0x20], 2
call fcn.0046cd90
lea ecx, [edi + 0x1c4]
mov byte [esp + 0x20], 1
call fcn.00468300
push fcn.00413370
push 4
lea ecx, [edi + 0x64]
push 0x58
push ecx
mov byte [esp + 0x30], 0
call fcn.00425dfe
mov ecx, edi
mov dword [esp + 0x20], 0xffffffff
call fcn.0047539c
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x18
ret