Function at 0x4362a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c4
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x110], 0xe440e48a
mov dword [ebp - 0x10c], 0x6446efee
mov dword [ebp - 0x108], 0xd146f374
mov dword [ebp - 0x104], 0xbe4635c1
mov dword [ebp - 0x100], 0xdbcd3d6c
mov dword [ebp - 0xfc], 0xe546ff61
mov word [ebp - 0xf8], 0x71cf
mov dword [ebp - 0xb4], 0x9646c4e4
mov dword [ebp - 0xb0], 0x546efee
mov dword [ebp - 0xac], 0x1b46f374
mov dword [ebp - 0xa8], 0xbe468517
mov dword [ebp - 0xa4], 0x6d25ac6c
mov dword [ebp - 0x8c], 0xe458e3e3
mov dword [ebp - 0x88], 0x7846efee
mov dword [ebp - 0x84], 0x5b469c74
mov dword [ebp - 0x80], 0x9746f778
mov word [ebp - 0x7c], 0x401e
mov dword [ebp - 0x12c], 0xe440e48a
mov dword [ebp - 0x128], 0x6446efee
mov dword [ebp - 0x124], 0xd146f374
mov dword [ebp - 0x120], 0xbe4635f6
mov dword [ebp - 0x11c], 0x51cd3d6c
mov dword [ebp - 0x118], 0xdf46ff61
mov word [ebp - 0x114], 0x71cf
mov dword [ebp - 0x2c], 0x9e5edde3
mov dword [ebp - 0x28], 0xbe46efee
mov dword [ebp - 0x24], 0xc24874
mov dword [ebp - 0xf4], 0x8242f7e4
mov dword [ebp - 0xf0], 0x7846efee
mov dword [ebp - 0xec], 0xd1463174
mov dword [ebp - 0xe8], 0x7c464c78
mov dword [ebp - 0xe4], 0xbe46396c
mov dword [ebp - 0xe0], 0x831d3961
mov dword [ebp - 0x164], 0xbd4ee3e4
mov dword [ebp - 0x160], 0x6446efee
mov dword [ebp - 0x15c], 0xd1464d74
mov dword [ebp - 0x158], 0xa3463578
mov dword [ebp - 0x154], 0xdf463d6c
mov dword [ebp - 0x150], 0xd1467461
mov dword [ebp - 0x14c], 0x23417152
mov dword [ebp - 0xa0], 0xe458e3e3
mov dword [ebp - 0x9c], 0xa946efee
mov dword [ebp - 0x98], 0x7e464874
mov dword [ebp - 0x94], 0xdf46f778
mov word [ebp - 0x90], 0x94a4
mov dword [ebp - 0x38], 0x9e5edde3
mov dword [ebp - 0x34], 0xbe46efee
mov dword [ebp - 0x30], 0x97368174
mov dword [ebp - 0x48], 0xe45ce3f7
mov dword [ebp - 0x44], 0x546efee
mov dword [ebp - 0x40], 0x46f374
mov word [ebp - 0x3c], 0x2e5
mov dword [ebp - 0x78], 0x8a5ac9e4
mov dword [ebp - 0x74], 0x3d46efee
mov dword [ebp - 0x70], 0x7e46ce74
mov dword [ebp - 0x6c], 0xdf467978
mov dword [ebp - 0x148], 0xe440e48a
mov dword [ebp - 0x144], 0x6b46efee
mov dword [ebp - 0x140], 0x7846f374
mov dword [ebp - 0x13c], 0xbe464ebb
mov dword [ebp - 0x138], 0xb527456c
mov dword [ebp - 0x134], 0xdb46ff61
mov word [ebp - 0x130], 0x7eaa
mov dword [ebp - 0x58], 0xe45ce3f7
mov dword [ebp - 0x54], 0xfa46efee
mov dword [ebp - 0x50], 0x9746f374
mov word [ebp - 0x4c], 0xe4bb
mov dword [ebp - 0x1b8], 0x477abde4
mov dword [ebp - 0x1b4], 0xd346efee
mov dword [ebp - 0x1b0], 0xdf464d74
mov dword [ebp - 0x1ac], 0x464e78
mov dword [ebp - 0x1a8], 0x4646406c
mov dword [ebp - 0x1a4], 0xdf464461
mov eax, dword [ebp + 0x10]
inc eax
mov dword [ebp - 0x1a0], 0x1b41d952
mov dword [ebp - 0x19c], 0x7d418c46
mov dword [ebp - 0x198], 0x7416e3b
mov dword [ebp - 0x194], 0x7c41922f
mov dword [ebp - 0x190], 0xbe417e33
mov dword [ebp - 0x18c], 0x5657627
mov dword [ebp - 0x188], 0xa4768ae4
mov dword [ebp - 0x184], 0xd146efee
mov dword [ebp - 0x180], 0x7e469c74
mov dword [ebp - 0x17c], 0xc3469678
mov dword [ebp - 0x178], 0x746c66c
mov dword [ebp - 0x174], 0x64462361
mov dword [ebp - 0x170], 0xdf418852
mov dword [ebp - 0x16c], 0xbe41d246
mov dword [ebp - 0x168], 0x568963b
mov dword [ebp - 0xc8], 0x9646c4e4
mov dword [ebp - 0xc4], 0xd146efee
mov dword [ebp - 0xc0], 0x546f374
mov dword [ebp - 0xbc], 0xbe4649dc
mov dword [ebp - 0xb8], 0x56b706c
mov dword [ebp - 0xdc], 0x9646c4e4
mov dword [ebp - 0xd8], 0x7846efee
mov dword [ebp - 0xd4], 0x6446f374
mov dword [ebp - 0xd0], 0xbe4618c6
mov dword [ebp - 0xcc], 0x54cd666c
mov dword [ebp - 0x68], 0xe45ce3f7
mov dword [ebp - 0x64], 0x546efee
mov dword [ebp - 0x60], 0xa946f374
mov word [ebp - 0x5c], 0x76be
mov dword [ebp - 0x20], 0x9646c4e4
mov dword [ebp - 0x1c], 0x46efee
mov dword [ebp - 0x18], 0xa946f374
mov dword [ebp - 0x14], 0xbe464919
mov dword [ebp - 0x10], 0xfaf81e6c
cmp eax, 0x13
ja case.0x4366b0.0
jmp dword [eax*4 + 0x436834]
lea esi, [ebp - 0x110]
jmp 0x436738
lea esi, [ebp - 0xb4]
jmp 0x436738
lea esi, [ebp - 0x8c]
jmp 0x436738
lea esi, [ebp - 0x12c]
jmp 0x436738
lea esi, [ebp - 0x2c]
jmp 0x436738
lea esi, [ebp - 0xf4]
jmp 0x436738
lea esi, [ebp - 0x164]
jmp 0x436738
lea esi, [ebp - 0xa0]
jmp 0x436738
lea esi, [ebp - 0x38]
jmp 0x436738
lea esi, [ebp - 0x48]
jmp 0x436738
lea esi, [ebp - 0x78]
jmp 0x436738
lea esi, [ebp - 0x148]
jmp 0x436738
lea esi, [ebp - 0x58]
jmp 0x436738
lea esi, [ebp - 0x1b8]
jmp 0x436738
lea esi, [ebp - 0x188]
jmp 0x436738
lea esi, [ebp - 0xc8]
jmp 0x436738
lea esi, [ebp - 0xdc]
jmp 0x436738
lea esi, [ebp - 0x68]
jmp 0x436738
lea esi, [ebp - 0x20]
mov dword [ebp - 0xc], 0xe352d1e3
mov dword [ebp - 8], 0x746efee
push edi
test ecx, ecx
je 0x4367f0
cmp word [ecx], 0
je 0x4367f0
lea eax, [ebx + ebx]
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
test edi, edi
je 0x43681b
lea eax, [ebx + ebx]
push eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 0
push 0
push esi
call fcn.004201b0
mov esi, eax
push esi
push ebx
push edi
call fcn.0041ec50
push esi
test eax, eax
je 0x4367bd
call fcn.0041fc30
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.004201b0
mov esi, eax
push esi
push ebx
push edi
call fcn.0041eb80
push esi
test eax, eax
jne 0x4367ce
call fcn.0041fc30
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x43681b
call fcn.0041fc30
push dword [ebp - 0x1c0]
push ebx
push edi
call fcn.0041eb80
test eax, eax
jne 0x436802
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x43681b
push 0
push 0
push 0
push esi
call fcn.004201b0
mov edi, eax
test edi, edi
je 0x43681b
push edi
push ebx
push dword [ebp - 0x1c4]
call fcn.0041ec50
push edi
mov dword [ebp - 0x1bc], eax
call fcn.0041fc30
pop edi
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x1bc]
xor ecx, ebp
pop esi
pop ebx
call fcn.00441849
mov esp, ebp
pop ebp
ret 0x10