Function at 0x46d5d2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
push ebx
mov eax, 0xfff
push esi
push edi
mov word [ebp - 0x118], ax
mov word [ebp - 0x116], ax
mov word [ebp - 0x114], ax
mov word [ebp - 0x112], ax
mov word [ebp - 0x110], ax
mov word [ebp - 0x10e], ax
mov word [ebp - 0x10c], ax
mov word [ebp - 0x10a], ax
mov word [ebp - 0x108], ax
mov word [ebp - 0x106], ax
mov word [ebp - 0x104], ax
mov word [ebp - 0x102], ax
mov word [ebp - 0x100], ax
mov word [ebp - 0xfe], ax
mov word [ebp - 0xfc], ax
mov word [ebp - 0xfa], ax
mov word [ebp - 0xf8], ax
mov word [ebp - 0xf6], ax
mov word [ebp - 0xf4], ax
mov word [ebp - 0xf2], ax
mov word [ebp - 0xf0], ax
mov word [ebp - 0xee], ax
mov word [ebp - 0xec], ax
mov word [ebp - 0xea], ax
mov word [ebp - 0xe8], ax
mov word [ebp - 0xe6], 0x6b0
mov word [ebp - 0xe4], 0x650
mov word [ebp - 0xe2], 0x5f5
mov word [ebp - 0xe0], 0x5a0
mov word [ebp - 0xde], 0x54d
mov word [ebp - 0xdc], 0x501
mov word [ebp - 0xda], 0x4b9
mov word [ebp - 0xd8], 0x475
mov word [ebp - 0xd6], 0x435
mov word [ebp - 0xd4], 0x3f9
mov word [ebp - 0xd2], 0x3c1
mov word [ebp - 0xd0], 0x38b
mov word [ebp - 0xce], 0x358
mov word [ebp - 0xcc], 0x328
mov word [ebp - 0xca], 0x2fa
mov word [ebp - 0xc8], 0x2d0
mov word [ebp - 0xc6], 0x2a6
mov word [ebp - 0xc4], 0x280
mov word [ebp - 0xc2], 0x25c
mov word [ebp - 0xc0], 0x23a
mov word [ebp - 0xbe], 0x21a
mov word [ebp - 0xbc], 0x1fc
mov word [ebp - 0xba], 0x1e0
mov word [ebp - 0xb8], 0x1c5
mov word [ebp - 0xb6], 0x1ac
mov word [ebp - 0xb4], 0x194
mov word [ebp - 0xb2], 0x17d
mov word [ebp - 0xb0], 0x168
mov word [ebp - 0xae], 0x153
mov word [ebp - 0xac], 0x140
mov word [ebp - 0xaa], 0x12e
mov word [ebp - 0xa8], 0x11d
mov word [ebp - 0xa6], 0x10d
mov word [ebp - 0xa4], 0xfe
mov word [ebp - 0xa2], 0xf0
mov word [ebp - 0xa0], 0xe2
mov word [ebp - 0x9e], 0xd6
mov word [ebp - 0x9c], 0xca
mov word [ebp - 0x9a], 0xbe
mov word [ebp - 0x98], 0xb4
mov word [ebp - 0x96], 0xaa
mov word [ebp - 0x94], 0xa0
mov word [ebp - 0x92], 0x97
mov word [ebp - 0x90], 0x8f
mov word [ebp - 0x8e], 0x87
mov word [ebp - 0x8c], 0x7f
mov word [ebp - 0x8a], 0x78
mov word [ebp - 0x88], 0x71
mov word [ebp - 0x86], 0x6b
mov word [ebp - 0x84], 0x65
mov word [ebp - 0x82], 0x5f
mov word [ebp - 0x80], 0x5a
xor edi, edi
push 0x14
mov word [ebp - 0x7e], 0x55
mov word [ebp - 0x7c], 0x50
mov word [ebp - 0x7a], 0x4c
mov word [ebp - 0x78], 0x47
mov word [ebp - 0x76], 0x43
mov word [ebp - 0x74], 0x40
mov word [ebp - 0x72], 0x3c
mov word [ebp - 0x70], 0x39
mov word [ebp - 0x6e], di
mov word [ebp - 0x6c], di
mov word [ebp - 0x6a], di
mov word [ebp - 0x68], di
mov word [ebp - 0x66], di
mov word [ebp - 0x64], di
mov word [ebp - 0x62], di
mov word [ebp - 0x60], di
mov word [ebp - 0x5e], di
mov word [ebp - 0x5c], di
mov word [ebp - 0x5a], di
mov word [ebp - 0x58], di
mov word [ebp - 0x54], 0x20ab
mov word [ebp - 0x52], 0x20dd
mov word [ebp - 0x50], 0x210f
mov word [ebp - 0x4e], 0x2151
mov word [ebp - 0x4c], 0x2185
mov word [ebp - 0x4a], 0x21cb
mov word [ebp - 0x48], 0x2213
mov word [ebp - 0x46], 0x2235
mov word [ebp - 0x44], 0x1ed7
mov word [ebp - 0x42], 0x1f05
mov word [ebp - 0x40], 0x1f31
mov word [ebp - 0x3e], 0x1f6e
mov word [ebp - 0x3c], 0x1fab
mov word [ebp - 0x3a], 0x1fe9
mov word [ebp - 0x38], 0x2028
mov word [ebp - 0x36], 0x2058
mov byte [ebp - 0x1c], 0xd
mov byte [ebp - 0x1b], 0x33
mov byte [ebp - 0x1a], 0x33
mov byte [ebp - 0x19], 0xd
call dword [0x48a018]
cmp eax, edi
pop ecx
mov dword [ebp - 0x28], eax
je 0x46de4f
mov esi, 0x86
push esi
call dword [0x48a018]
mov ebx, eax
pop ecx
cmp ebx, edi
mov dword [ebp - 0x11c], ebx
je 0x46de4f
push 0x3a2
call dword [0x48a018]
cmp eax, edi
pop ecx
mov dword [ebp - 0x24], eax
je 0x46de4f
push 0x2000
call dword [0x48a018]
cmp eax, edi
pop ecx
mov dword [ebp - 0x2c], eax
je 0x46de4f
push dword [ebp + 8]
push 0x14
push 1
push dword [ebp - 0x28]
call dword [0x48a028]
add esp, 0x10
push dword [ebp + 8]
push 0x1f
push 0x1e
push dword [ebp - 0x24]
call dword [0x48a028]
add esp, 0x10
push dword [ebp + 8]
push esi
push 1
push ebx
call dword [0x48a028]
add esp, 0x10
lea esi, [ebx + 0x82]
mov dword [ebp - 8], 0xf
push 4
push str.M.K.
push esi
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46d9f5
mov dword [ebp - 8], edi
mov dword [ebp - 0x10], 4
push 4
push str.M_K_
push esi
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46da13
mov dword [ebp - 8], edi
mov dword [ebp - 0x10], 4
push 4
push str.FLT4
push esi
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46da31
mov dword [ebp - 8], edi
mov dword [ebp - 0x10], 4
push 4
push str.CD81
push esi
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46da4f
mov dword [ebp - 8], edi
mov dword [ebp - 0x10], 8
lea eax, [ebx + 0x83]
push 3
push 0x48a0b4
push eax
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46da75
movzx eax, byte [esi]
sub eax, 0x30
mov dword [ebp - 8], edi
mov dword [ebp - 0x10], eax
push 2
lea eax, [ebx + 0x84]
push 0x48a0b0
push eax
call fcn.0047c4b0
add esp, 0xc
test eax, eax
jne 0x46daa9
movzx eax, byte [esi]
movzx ecx, byte [ebx + 0x83]
lea eax, [eax + eax*4]
mov dword [ebp - 8], edi
lea eax, [ecx + eax*2 - 0x210]
mov dword [ebp - 0x10], eax
push 0xf
pop eax
cmp dword [ebp - 8], eax
je 0x46de4a
push 0x14
push dword [ebp - 0x28]
push 0x4a6e1d
call fcn.0047b420
mov al, byte [ebx]
add esp, 0xc
mov esi, pe_nt_image_headers32
add ebx, 2
push esi
dec al
push ebx
push 0x4a68ec
mov byte [0x4a6e3d], al
call fcn.0047b420
add esp, 0xc
xor eax, eax
mov dword [ebp - 8], edi
movzx ecx, byte [eax + 0x4a68ec]
cmp dword [ebp - 8], ecx
jge 0x46dafb
mov dword [ebp - 8], ecx
inc eax
cmp eax, esi
jl 0x46daec
mov eax, dword [ebp - 0x24]
inc dword [ebp - 8]
mov dword [ebp - 0x14], edi
mov esi, 0x4a66ec
lea edi, [eax + 0x17]
mov ebx, 0x109
push ebx
call dword [0x48a018]
test eax, eax
pop ecx
mov dword [esi], eax
je 0x46de4f
push ebx
push 0
push eax
call fcn.0047c450
mov eax, dword [esi]
mov cl, byte [ebp - 0x14]
add esp, 0xc
mov byte [eax], 0x49
mov eax, dword [esi]
push 0x16
mov byte [eax + 1], 0x4e
mov eax, dword [esi]
mov byte [eax + 2], 0x53
mov eax, dword [esi]
mov byte [eax + 3], 0x54
mov eax, dword [esi]
mov dword [eax + 4], 0x101
mov eax, dword [esi]
mov byte [eax + 8], cl
lea eax, [edi - 0x17]
push eax
mov eax, dword [esi]
add eax, 9
push eax
call fcn.0047b420
mov eax, dword [esi]
add esp, 0xc
add eax, 0x25
push 0x60
push 0
push eax
call fcn.0047c450
mov eax, dword [esi]
add esp, 0xc
mov byte [eax + 0x85], 1
movzx eax, byte [edi - 1]
movzx ecx, byte [edi]
shl eax, 8
add eax, ecx
mov ecx, dword [esi]
shl eax, 1
mov dword [ecx + 0xf1], eax
mov al, byte [edi + 1]
mov ecx, dword [esi]
and eax, 0xf
movzx eax, word [ebp + eax*2 - 0x54]
mov dword [ecx + 0xfd], eax
mov eax, dword [esi]
mov cl, byte [edi + 2]
mov byte [eax + 0xee], cl
movzx eax, byte [edi + 3]
movzx ecx, byte [edi + 4]
shl eax, 8
add eax, ecx
mov ecx, dword [esi]
shl eax, 1
mov dword [ecx + 0xf9], eax
mov eax, dword [esi]
mov ecx, dword [eax + 0xf9]
mov dword [eax + 0xf5], ecx
mov eax, dword [esi]
movzx ecx, byte [edi + 5]
movzx edx, byte [edi + 6]
shl ecx, 8
add ecx, edx
shl ecx, 1
add dword [eax + 0xf9], ecx
mov eax, dword [esi]
cmp dword [eax + 0xf9], 2
jbe 0x46dc0f
mov byte [eax + 0xef], 8
jmp 0x46dc16
and byte [eax + 0xef], 0
mov eax, dword [esi]
add esi, 4
add edi, 0x1e
and byte [eax + 0xf0], 0
inc dword [ebp - 0x14]
cmp esi, 0x4a6768
jl 0x46db16
and dword [ebp - 0x20], 0
cmp dword [ebp - 8], 0
jle 0x46dd8b
mov edi, 0x4a69ec
mov dword [ebp - 0x34], edi
mov ebx, dword [ebp - 0x2c]
push 0x3041
call dword [0x48a018]
mov esi, eax
pop ecx
test esi, esi
mov dword [edi], eax
je 0x46dd83
mov eax, dword [ebp - 0x10]
push dword [ebp + 8]
shl eax, 8
push eax
push 1
mov byte [esi], 0x3f
push ebx
inc esi
call dword [0x48a028]
add esp, 0x10
mov dword [ebp - 0x30], 0x40
and dword [ebp - 0x14], 0
cmp dword [ebp - 0x10], 0
jle 0x46dd4f
mov al, byte [ebx]
and byte [ebp - 1], 0
movzx di, byte [ebx + 1]
mov cl, al
and al, 0x10
and cl, 0xf
movzx cx, cl
shl ecx, 8
add edi, ecx
mov cl, byte [ebx + 2]
mov dl, cl
and cl, 0xf
shr dl, 4
add al, dl
mov byte [ebp - 0x15], cl
mov cl, byte [ebx + 3]
mov byte [ebp - 9], al
test di, di
je 0x46dce2
cmp di, 0xfff
jae 0x46dce2
inc byte [ebp - 1]
movzx eax, byte [ebp - 1]
cmp di, word [ebp + eax*2 - 0x118]
jb 0x46dcd1
mov al, byte [ebp - 0x14]
mov edx, esi
inc esi
mov byte [edx], al
mov al, byte [ebp - 0x15]
test al, al
jne 0x46dcf5
test cl, cl
je 0x46dcfe
mov byte [esi], cl
inc esi
mov byte [esi], al
inc esi
or byte [edx], 0x80
mov al, byte [ebp - 1]
test al, al
jne 0x46dd0a
cmp byte [ebp - 9], al
je 0x46dd16
mov cl, byte [ebp - 9]
mov byte [esi], cl
inc esi
mov byte [esi], al
inc esi
or byte [edx], 0x40
test byte [edx], 0xe0
je 0x46dd38
movzx eax, byte [0x4a6e47]
mov ecx, dword [ebp - 0x14]
cmp ecx, eax
jle 0x46dd31
mov byte [0x4a6e47], cl
jmp 0x46dd3a
mov byte [0x4a6e47], al
jmp 0x46dd3a
mov esi, edx
add ebx, 4
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x10]
jl 0x46dc94
mov edi, dword [ebp - 0x34]
and byte [esi], 0
inc esi
dec dword [ebp - 0x30]
jne 0x46dc86
mov eax, dword [edi]
sub esi, eax
push esi
push eax
call dword [0x48a01c]
inc dword [ebp - 0x20]
mov dword [edi], eax
mov eax, dword [ebp - 0x20]
pop ecx
add edi, 4
cmp eax, dword [ebp - 8]
pop ecx
mov dword [ebp - 0x34], edi
jl 0x46dc4a
jmp 0x46dd8b
push 0xa
pop eax
jmp 0x46de4a
mov esi, 0x4a66ec
mov eax, dword [esi]
xor ebx, ebx
cmp byte [eax + 0x85], bl
jbe 0x46ddc9
xor edi, edi
push dword [ebp + 8]
lea eax, [eax + edi + 0xc9]
push eax
call fcn.0046a570
pop ecx
test eax, eax
pop ecx
jne 0x46de4a
mov eax, dword [esi]
inc ebx
add edi, 0x40
movzx ecx, byte [eax + 0x85]
cmp ebx, ecx
jl 0x46dd9e
add esi, 4
cmp esi, 0x4a6768
jl 0x46dd90
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x46ddf0
mov ecx, eax
and ecx, 3
inc eax
cmp eax, dword [ebp - 0x10]
mov cl, byte [ebp + ecx - 0x1c]
mov byte [eax + 0x4a6e48], cl
jl 0x46dddb
push dword [ebp - 0x28]
inc byte [0x4a6e47]
mov byte [0x4a6e8e], 3
mov byte [0x4a6e89], 6
mov byte [0x4a6e8a], 0x7d
mov word [0x4a6e98], 0x716
mov word [0x4a6e9a], 0x3580
call dword [0x48a020]
pop ecx
push dword [ebp - 0x11c]
call dword [0x48a020]
pop ecx
push dword [ebp - 0x24]
call dword [0x48a020]
pop ecx
push dword [ebp - 0x2c]
call dword [0x48a020]
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
push 9
jmp 0x46dd85