Function at 0x46d0ab
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
lea ebp, [esp - 0xb3c]
sub esp, 0xb3c
push 0xffffffffffffffff
push 0x63dcb3
mov eax, dword fs:[0]
push eax
sub esp, 0xa4
mov eax, dword [0x72af34]
xor eax, ebp
mov dword [ebp + 0xb38], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x14], ebx
and dword [ebp - 4], 0
mov dword [ebp - 0x18], ebx
and dword [ebp - 0x10], 0
mov eax, dword fs:[0x2c]
movzx esi, dx
mov ecx, dword [eax]
mov eax, dword [0x7653dc]
cmp eax, dword [ecx + 8]
jg 0x46d31d
push 0x6c7dc0
mov ecx, ebx
call fcn.0044e6a1
and dword [ebp - 4], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp + 0xb2c]
mov dword [ebp - 0x10], 1
mov edi, esi
push eax
mov dword [ebp - 0x14], edi
call fcn.0046eab1
mov eax, dword [ebp + 0xb34]
mov ecx, dword [0x765418]
cmp byte [eax + 0xd], 0
jne 0x46d156
cmp edi, dword [eax + 0x10]
jge 0x46d158
mov eax, ecx
cmp ecx, eax
je 0x46d1a7
add eax, 0x14
mov ecx, ebx
push eax
call fcn.0046c07e
push 0
push 0x20
mov edx, ebx
lea ecx, [ebp + 0xb2c]
call fcn.0048aaa1
pop ecx
pop ecx
mov dword [ebp - 4], 0x66
mov eax, dword [ebp + 0xb2c]
cmp eax, dword [ebp + 0xb30]
je 0x46d197
push eax
mov ecx, ebx
call fcn.0046c07e
lea ecx, [ebp + 0xb2c]
call fcn.0046c0e8
jmp 0x46d2f8
push ecx
lea ecx, [ebp + 0xa40]
call fcn.0046e3f7
mov edx, str.Couldnt_find_given_language_in_our_id_table__langid:
mov dword [ebp - 4], 0x67
lea ecx, [ebp + 0xa50]
call fcn.00450c80
mov edx, edi
lea ecx, [ebp + 0xb20]
mov esi, eax
call fcn.0046c83a
mov edx, eax
mov byte [ebp - 4], 0x68
mov ecx, esi
call fcn.00450e57
mov edx, str.___Defaulting_to_English
mov ecx, eax
call fcn.00450c80
lea ecx, [ebp + 0xb20]
mov byte [ebp - 4], 0x67
call fcn.0045073d
push 5
pop ecx
call fcn.00487c88
test al, al
je 0x46d2ed
push ecx
lea ecx, [ebp - 0xb0]
call fcn.0044fe3d
lea eax, [ebp + 0xb20]
mov byte [ebp - 4], 0x69
push eax
lea ecx, [ebp + 0xa58]
call fcn.00450645
mov dword [ebp - 0x10], 3
lea edx, [ebp + 0xb20]
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0xb0]
call fcn.00450e57
lea ecx, [ebp + 0xb20]
mov byte [ebp - 4], 0x69
call fcn.0045073d
lea eax, [ebp + 0xaf0]
mov ecx, 0x6ce9d4
push eax
call fcn.00455247
mov edi, eax
lea eax, [ebp + 0xb08]
mov byte [ebp - 4], 0x6b
push eax
mov ecx, str._ae_O:vb2oeT:
call fcn.0046e2b2
mov esi, eax
lea eax, [ebp + 0xb20]
mov byte [ebp - 4], 0x6c
push eax
lea ecx, [ebp - 0xac]
call fcn.00450645
mov dword [ebp - 0x10], 7
push edi
push esi
push 0x103
push 5
pop edx
lea ecx, [ebp + 0xb20]
mov byte [ebp - 4], 0x6d
call fcn.00487c50
add esp, 0xc
lea ecx, [ebp + 0xb20]
call fcn.0045073d
lea ecx, [ebp + 0xb08]
call fcn.0045073d
lea ecx, [ebp + 0xaf0]
call fcn.0045073d
lea ecx, [ebp - 0xb0]
call fcn.0044e893
lea ecx, [ebp + 0xa40]
call fcn.0046de18
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xb38]
xor ecx, ebp
call fcn.005efbff
add ebp, 0xb3c
leave
ret
push 0x7653dc
call fcn.005efd40
cmp dword [0x7653dc], 0xffffffff
pop ecx
jne 0x46d113
mov edi, str.Arabic
mov dword [ebp - 4], 1
push edi
lea ecx, [ebp + 4]
mov dword [ebp], 0x2c01
call fcn.0044e6a1
mov byte [ebp - 4], 2
lea ecx, [ebp + 0x20]
push edi
mov dword [ebp + 0x1c], 0x3401
call fcn.0044e6a1
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x3c]
push edi
mov dword [ebp + 0x38], 0x3001
call fcn.0044e6a1
mov byte [ebp - 4], 4
lea ecx, [ebp + 0x58]
push edi
mov dword [ebp + 0x54], 0x1001
call fcn.0044e6a1
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x74]
push edi
mov dword [ebp + 0x70], 0x1801
call fcn.0044e6a1
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x90]
push edi
mov dword [ebp + 0x8c], 0x2001
call fcn.0044e6a1
mov byte [ebp - 4], 7
lea ecx, [ebp + 0xac]
push edi
mov dword [ebp + 0xa8], 0x4001
call fcn.0044e6a1
mov byte [ebp - 4], 8
lea ecx, [ebp + 0xc8]
push edi
mov dword [ebp + 0xc4], 0x401
call fcn.0044e6a1
mov byte [ebp - 4], 9
lea ecx, [ebp + 0xe4]
push edi
mov dword [ebp + 0xe0], 0x2801
call fcn.0044e6a1
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x100]
push edi
mov dword [ebp + 0xfc], 0x1c01
call fcn.0044e6a1
mov byte [ebp - 4], 0xb
lea ecx, [ebp + 0x11c]
push edi
mov dword [ebp + 0x118], 0x3801
call fcn.0044e6a1
mov byte [ebp - 4], 0xc
lea ecx, [ebp + 0x138]
push edi
mov dword [ebp + 0x134], 0x2401
call fcn.0044e6a1
mov byte [ebp - 4], 0xd
lea ecx, [ebp + 0x154]
push str.Bulgarian
mov dword [ebp + 0x150], 0x402
call fcn.0044e6a1
mov byte [ebp - 4], 0xe
mov edi, str.Catalan
mov dword [ebp + 0x16c], 0x1000
push edi
lea ecx, [ebp + 0x170]
call fcn.0044e6a1
mov byte [ebp - 4], 0xf
lea ecx, [ebp + 0x18c]
push edi
mov dword [ebp + 0x188], 0x403
call fcn.0044e6a1
mov edi, str.Chinese
mov byte [ebp - 4], 0x10
push edi
lea ecx, [ebp + 0x1a8]
mov dword [ebp + 0x1a4], 0x7804
call fcn.0044e6a1
mov byte [ebp - 4], 0x11
lea ecx, [ebp + 0x1c4]
push edi
mov dword [ebp + 0x1c0], 0x804
call fcn.0044e6a1
mov byte [ebp - 4], 0x12
lea ecx, [ebp + 0x1e0]
push edi
mov dword [ebp + 0x1dc], 0x1004
call fcn.0044e6a1
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 0x1fc]
push edi
mov dword [ebp + 0x1f8], 0x7c04
call fcn.0044e6a1
mov byte [ebp - 4], 0x14
lea ecx, [ebp + 0x218]
push edi
mov dword [ebp + 0x214], 0xc04
call fcn.0044e6a1
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0x234]
push edi
mov dword [ebp + 0x230], 0x1404
call fcn.0044e6a1
mov byte [ebp - 4], 0x16
lea ecx, [ebp + 0x250]
push str.Chinese__Taiwan_
mov dword [ebp + 0x24c], 0x404
call fcn.0044e6a1
mov edi, str.Croatian
mov byte [ebp - 4], 0x17
push edi
lea ecx, [ebp + 0x26c]
mov dword [ebp + 0x268], 0x41a
call fcn.0044e6a1
mov byte [ebp - 4], 0x18
lea ecx, [ebp + 0x288]
push edi
mov dword [ebp + 0x284], 0x101a
call fcn.0044e6a1
mov byte [ebp - 4], 0x19
lea ecx, [ebp + 0x2a4]
push str.Czech
mov dword [ebp + 0x2a0], 0x405
call fcn.0044e6a1
mov byte [ebp - 4], 0x1a
lea ecx, [ebp + 0x2c0]
push str.Danish
mov dword [ebp + 0x2bc], 0x406
call fcn.0044e6a1
mov byte [ebp - 4], 0x1b
mov edi, str.Dutch
mov dword [ebp + 0x2d8], 0x413
push edi
lea ecx, [ebp + 0x2dc]
call fcn.0044e6a1
mov byte [ebp - 4], 0x1c
lea ecx, [ebp + 0x2f8]
push edi
mov dword [ebp + 0x2f4], 0x813
call fcn.0044e6a1
mov edi, str.English
mov byte [ebp - 4], 0x1d
push edi
lea ecx, [ebp + 0x314]
mov dword [ebp + 0x310], 0x409
call fcn.0044e6a1
mov byte [ebp - 4], 0x1e
lea ecx, [ebp + 0x330]
push edi
mov dword [ebp + 0x32c], 0xc09
call fcn.0044e6a1
mov byte [ebp - 4], 0x1f
lea ecx, [ebp + 0x34c]
push edi
mov dword [ebp + 0x348], 0x1009
call fcn.0044e6a1
mov byte [ebp - 4], 0x20
lea ecx, [ebp + 0x368]
push edi
mov dword [ebp + 0x364], 0x1409
call fcn.0044e6a1
mov byte [ebp - 4], 0x21
lea ecx, [ebp + 0x384]
push edi
mov dword [ebp + 0x380], 0x1809
call fcn.0044e6a1
mov byte [ebp - 4], 0x22
lea ecx, [ebp + 0x3a0]
push edi
mov dword [ebp + 0x39c], 0x1c09
call fcn.0044e6a1
mov byte [ebp - 4], 0x23
lea ecx, [ebp + 0x3bc]
push edi
mov dword [ebp + 0x3b8], 0x2009
call fcn.0044e6a1
mov byte [ebp - 4], 0x24
lea ecx, [ebp + 0x3d8]
push edi
mov dword [ebp + 0x3d4], 0x2409
call fcn.0044e6a1
mov byte [ebp - 4], 0x25
lea ecx, [ebp + 0x3f4]
push edi
mov dword [ebp + 0x3f0], 0x2809
call fcn.0044e6a1
mov byte [ebp - 4], 0x26
lea ecx, [ebp + 0x410]
push edi
mov dword [ebp + 0x40c], 0x2c09
call fcn.0044e6a1
mov byte [ebp - 4], 0x27
lea ecx, [ebp + 0x42c]
push str.English__United_Kingdom_
mov dword [ebp + 0x428], 0x809
call fcn.0044e6a1
mov byte [ebp - 4], 0x28
mov dword [ebp + 0x444], 0x40c
mov edi, str.French
lea ecx, [ebp + 0x448]
push edi
call fcn.0044e6a1
mov byte [ebp - 4], 0x29
lea ecx, [ebp + 0x464]
push edi
mov dword [ebp + 0x460], 0x80c
call fcn.0044e6a1
mov byte [ebp - 4], 0x2a
lea ecx, [ebp + 0x480]
push edi
mov dword [ebp + 0x47c], 0x100c
call fcn.0044e6a1
mov byte [ebp - 4], 0x2b
lea ecx, [ebp + 0x49c]
push edi
mov dword [ebp + 0x498], 0x140c
call fcn.0044e6a1
mov byte [ebp - 4], 0x2c
lea ecx, [ebp + 0x4b8]
push str.French__Canadian_
mov dword [ebp + 0x4b4], 0xc0c
call fcn.0044e6a1
mov edi, str.German
mov byte [ebp - 4], 0x2d
push edi
lea ecx, [ebp + 0x4d4]
mov dword [ebp + 0x4d0], 0x407
call fcn.0044e6a1
mov byte [ebp - 4], 0x2e
lea ecx, [ebp + 0x4f0]
push edi
mov dword [ebp + 0x4ec], 0xc07
call fcn.0044e6a1
mov byte [ebp - 4], 0x2f
lea ecx, [ebp + 0x50c]
push edi
mov dword [ebp + 0x508], 0x1407
call fcn.0044e6a1
mov byte [ebp - 4], 0x30
lea ecx, [ebp + 0x528]
push edi
mov dword [ebp + 0x524], 0x1007
call fcn.0044e6a1
mov byte [ebp - 4], 0x31
lea ecx, [ebp + 0x544]
push edi
mov dword [ebp + 0x540], 0x807
call fcn.0044e6a1
mov byte [ebp - 4], 0x32
lea ecx, [ebp + 0x560]
push str.Hungarian
mov dword [ebp + 0x55c], 0x40e
call fcn.0044e6a1
mov byte [ebp - 4], 0x33
lea ecx, [ebp + 0x57c]
push str.Indonesian
mov dword [ebp + 0x578], 0x421
call fcn.0044e6a1
mov edi, str.Italian
mov byte [ebp - 4], 0x34
push edi
lea ecx, [ebp + 0x598]
mov dword [ebp + 0x594], 0x410
call fcn.0044e6a1
mov byte [ebp - 4], 0x35
mov dword [ebp + 0x5b0], 0x810
push edi
lea ecx, [ebp + 0x5b4]
call fcn.0044e6a1
mov byte [ebp - 4], 0x36
lea ecx, [ebp + 0x5d0]
push str.Japanese
mov dword [ebp + 0x5cc], 0x411
call fcn.0044e6a1
mov byte [ebp - 4], 0x37
lea ecx, [ebp + 0x5ec]
push str.Korean
mov dword [ebp + 0x5e8], 0x412
call fcn.0044e6a1
mov edi, str.Norwegian
mov byte [ebp - 4], 0x38
push edi
lea ecx, [ebp + 0x608]
mov dword [ebp + 0x604], 0x414
call fcn.0044e6a1
mov byte [ebp - 4], 0x39
lea ecx, [ebp + 0x624]
push edi
mov dword [ebp + 0x620], 0x814
call fcn.0044e6a1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp + 0x640]
push str.Polish
mov dword [ebp + 0x63c], 0x415
call fcn.0044e6a1
mov edi, str.Portuguese
mov byte [ebp - 4], 0x3b
push edi
lea ecx, [ebp + 0x65c]
mov dword [ebp + 0x658], 0x416
call fcn.0044e6a1
mov byte [ebp - 4], 0x3c
lea ecx, [ebp + 0x678]
push edi
mov dword [ebp + 0x674], 0x816
call fcn.0044e6a1
mov edi, str.Romanian
mov byte [ebp - 4], 0x3d
push edi
lea ecx, [ebp + 0x694]
mov dword [ebp + 0x690], 0x418
call fcn.0044e6a1
mov byte [ebp - 4], 0x3e
lea ecx, [ebp + 0x6b0]
push edi
mov dword [ebp + 0x6ac], 0x818
call fcn.0044e6a1
mov byte [ebp - 4], 0x3f
lea ecx, [ebp + 0x6cc]
push edi
mov dword [ebp + 0x6c8], 0x417
call fcn.0044e6a1
mov edi, str.Russian
mov byte [ebp - 4], 0x40
push edi
lea ecx, [ebp + 0x6e8]
mov dword [ebp + 0x6e4], 0x419
call fcn.0044e6a1
mov byte [ebp - 4], 0x41
lea ecx, [ebp + 0x704]
push edi
mov dword [ebp + 0x700], 0x819
call fcn.0044e6a1
mov byte [ebp - 4], 0x42
mov edi, str.Serbian
mov dword [ebp + 0x71c], 0x6c1a
push edi
lea ecx, [ebp + 0x720]
call fcn.0044e6a1
mov byte [ebp - 4], 0x43
lea ecx, [ebp + 0x73c]
push edi
mov dword [ebp + 0x738], 0x1c1a
call fcn.0044e6a1
mov byte [ebp - 4], 0x44
lea ecx, [ebp + 0x758]
push edi
mov dword [ebp + 0x754], 0x301a
call fcn.0044e6a1
mov byte [ebp - 4], 0x45
lea ecx, [ebp + 0x774]
push edi
mov dword [ebp + 0x770], 0x281a
call fcn.0044e6a1
mov byte [ebp - 4], 0x46
lea ecx, [ebp + 0x790]
push edi
mov dword [ebp + 0x78c], 0xc1a
call fcn.0044e6a1
mov byte [ebp - 4], 0x47
lea ecx, [ebp + 0x7ac]
push edi
mov dword [ebp + 0x7a8], 0x701a
call fcn.0044e6a1
mov byte [ebp - 4], 0x48
lea ecx, [ebp + 0x7c8]
push edi
mov dword [ebp + 0x7c4], 0x7c1a
call fcn.0044e6a1
mov byte [ebp - 4], 0x49
lea ecx, [ebp + 0x7e4]
push edi
mov dword [ebp + 0x7e0], 0x181a
call fcn.0044e6a1
mov byte [ebp - 4], 0x4a
lea ecx, [ebp + 0x800]
push edi
mov dword [ebp + 0x7fc], 0x2c1a
call fcn.0044e6a1
mov byte [ebp - 4], 0x4b
lea ecx, [ebp + 0x81c]
push edi
mov dword [ebp + 0x818], 0x241a
call fcn.0044e6a1
mov byte [ebp - 4], 0x4c
lea ecx, [ebp + 0x838]
push edi
mov dword [ebp + 0x834], 0x81a
call fcn.0044e6a1
mov edi, str.Spanish
mov byte [ebp - 4], 0x4d
push edi
lea ecx, [ebp + 0x854]
mov dword [ebp + 0x850], 0x40a
call fcn.0044e6a1
mov byte [ebp - 4], 0x4e
lea ecx, [ebp + 0x870]
push edi
mov dword [ebp + 0x86c], 0x80a
call fcn.0044e6a1
mov byte [ebp - 4], 0x4f
mov dword [ebp + 0x888], 0xc0a
push edi
lea ecx, [ebp + 0x88c]
call fcn.0044e6a1
mov byte [ebp - 4], 0x50
lea ecx, [ebp + 0x8a8]
push edi
mov dword [ebp + 0x8a4], 0x100a
call fcn.0044e6a1
mov byte [ebp - 4], 0x51
lea ecx, [ebp + 0x8c4]
push edi
mov dword [ebp + 0x8c0], 0x140a
call fcn.0044e6a1
mov byte [ebp - 4], 0x52
lea ecx, [ebp + 0x8e0]
push edi
mov dword [ebp + 0x8dc], 0x180a
call fcn.0044e6a1
mov byte [ebp - 4], 0x53
lea ecx, [ebp + 0x8fc]
push edi
mov dword [ebp + 0x8f8], 0x1c0a
call fcn.0044e6a1
mov byte [ebp - 4], 0x54
lea ecx, [ebp + 0x918]
push edi
mov dword [ebp + 0x914], 0x200a
call fcn.0044e6a1
mov byte [ebp - 4], 0x55
lea ecx, [ebp + 0x934]
push edi
mov dword [ebp + 0x930], 0x240a
call fcn.0044e6a1
mov byte [ebp - 4], 0x56
lea ecx, [ebp + 0x950]
push edi
mov dword [ebp + 0x94c], 0x280a
call fcn.0044e6a1
mov byte [ebp - 4], 0x57
lea ecx, [ebp + 0x96c]
push edi
mov dword [ebp + 0x968], 0x2c0a
call fcn.0044e6a1
mov byte [ebp - 4], 0x58
lea ecx, [ebp + 0x988]
push edi
mov dword [ebp + 0x984], 0x300a
call fcn.0044e6a1
mov byte [ebp - 4], 0x59
lea ecx, [ebp + 0x9a4]
push edi
mov dword [ebp + 0x9a0], 0x340a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5a
lea ecx, [ebp + 0x9c0]
push edi
mov dword [ebp + 0x9bc], 0x380a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5b
lea ecx, [ebp + 0x9dc]
push edi
mov dword [ebp + 0x9d8], 0x3c0a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5c
lea ecx, [ebp + 0x9f8]
push edi
mov dword [ebp + 0x9f4], 0x400a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5d
lea ecx, [ebp + 0xa14]
push edi
mov dword [ebp + 0xa10], 0x440a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5e
lea ecx, [ebp + 0xa30]
push edi
mov dword [ebp + 0xa2c], 0x480a
call fcn.0044e6a1
mov byte [ebp - 4], 0x5f
lea ecx, [ebp + 0xa4c]
push edi
mov dword [ebp + 0xa48], 0x4c0a
call fcn.0044e6a1
mov byte [ebp - 4], 0x60
lea ecx, [ebp + 0xa68]
push edi
mov dword [ebp + 0xa64], 0x500a
call fcn.0044e6a1
mov byte [ebp - 4], 0x61
lea ecx, [ebp + 0xa84]
push str.Spanish_Latin_America
mov dword [ebp + 0xa80], 0x580a
call fcn.0044e6a1
mov edi, str.Swedish
mov byte [ebp - 4], 0x62
push edi
lea ecx, [ebp + 0xaa0]
mov dword [ebp + 0xa9c], 0x41d
call fcn.0044e6a1
mov byte [ebp - 4], 0x63
lea ecx, [ebp + 0xabc]
push edi
mov dword [ebp + 0xab8], 0x81d
call fcn.0044e6a1
mov byte [ebp - 4], 0x64
lea ecx, [ebp + 0xad8]
push str.Turkish
mov dword [ebp + 0xad4], 0x41f
call fcn.0044e6a1
lea eax, [ebp + 0xaf0]
mov byte [ebp - 4], 0x65
lea ecx, [ebp]
push eax
push ecx
call fcn.0046e15a
push 0x46de10
push 0x64
push 0x1c
lea eax, [ebp]
mov byte [ebp - 4], 1
push eax
call fcn.005efe16
push 0x6618e0
call fcn.005f0167
mov byte [ebp - 4], 0
mov dword [esp], 0x7653dc
call fcn.005efcf6
pop ecx
jmp 0x46d113