Function at 0x459d4d
Capabilities:
Contain obfuscated stackstrings
Open clipboard

Disassembly:
push ebx
push esi
push edi
push ebp
add esp, 0xffffff84
mov ebp, ecx
mov dword [esp], edx
mov ebx, eax
mov byte [esp + 4], 0
call fcn.00406128
push eax
push 0
push 0x1f0fff
call fcn.00406268
mov esi, eax
lea eax, [esp + 0xc]
push eax
push 6
lea eax, [esp + 0x19]
push eax
push ebx
push esi
call fcn.00406278
test eax, eax
je 0x45a0f6
xor eax, eax
mov dword [esp + 0xc], eax
cmp dword [esp + 0xc], 6
ja 0x459dab
mov eax, dword [esp + 0xc]
mov al, byte [esp + eax + 0x11]
add al, 0x3e
sub al, 2
jb 0x45a0f6
mov eax, ebx
add eax, dword [esp + 0xc]
call fcn.00459048
add dword [esp + 0xc], eax
cmp dword [esp + 0xc], 6
jbe 0x459d83
mov eax, ebx
call fcn.00459278
mov edi, eax
lea eax, [esp + 0xc]
push eax
push edi
push 0x462cbc
push ebx
push esi
call fcn.00406278
test eax, eax
je 0x45a0f6
call fcn.00406120
mov edx, eax
mov eax, 0x13
call fcn.00458fd8
mov dword [esp + 0x20], eax
mov byte [esp + 0x68], 0x50
mov byte [esp + 0x69], 0xa1
mov eax, 0x462cd0
mov dword [esp + 0x6a], eax
mov byte [esp + 0x6e], 0x50
mov byte [esp + 0x6f], 0xe8
mov eax, dword [0x462ce0]
mov dword [esp + 0x70], eax
sub eax, dword [esp + 0x20]
sub eax, 0xc
mov dword [esp + 0x70], eax
mov byte [esp + 0x74], 0x58
mov byte [esp + 0x75], 0x68
xor eax, eax
mov dword [esp + 0x76], eax
mov byte [esp + 0x7a], 0xc3
lea eax, [esp + 0xc]
push eax
push 0x13
lea eax, [esp + 0x70]
push eax
mov eax, dword [esp + 0x2c]
push eax
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
call fcn.00406120
mov edx, eax
mov eax, 0x2b
call fcn.00458fd8
mov dword [esp + 0x1c], eax
mov byte [esp + 0x3d], 0x57
mov byte [esp + 0x3e], 0x50
mov byte [esp + 0x3f], 0x51
mov byte [esp + 0x3f], 0x51
mov byte [esp + 0x40], 0x8b
mov byte [esp + 0x41], 0x4c
mov byte [esp + 0x42], 0x24
mov byte [esp + 0x43], 0xc
mov byte [esp + 0x44], 0xb8
mov eax, dword [esp + 0x20]
add eax, 0xe
mov dword [esp + 0x45], eax
mov byte [esp + 0x49], 0x89
mov byte [esp + 0x4a], 8
mov byte [esp + 0x4b], 0xbf
mov eax, dword [esp + 0x20]
mov dword [esp + 0x4c], eax
mov byte [esp + 0x50], 0xa1
mov eax, 0x462cd0
mov dword [esp + 0x51], eax
mov byte [esp + 0x55], 0x50
mov byte [esp + 0x56], 0xe8
mov eax, dword [0x462ce4]
mov dword [esp + 0x57], eax
mov edx, dword [esp + 0x1c]
sub eax, edx
sub eax, 0x1e
mov dword [esp + 0x57], eax
mov dword [esp + 0x5b], 0xc247c89
mov byte [esp + 0x5f], 0x59
mov byte [esp + 0x60], 0x58
mov byte [esp + 0x61], 0x5f
mov byte [esp + 0x62], 0xe9
mov eax, dword [esp]
sub eax, edx
sub eax, 0x2a
mov dword [esp + 0x63], eax
mov byte [esp + 0x67], 0xc3
lea eax, [esp + 0xc]
push eax
push 0x2b
lea eax, [esp + 0x45]
push eax
mov eax, dword [esp + 0x28]
push eax
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [0x4613d0]
cmp byte [eax], 0
jne 0x459fc9
cmp ebx, 0x80000000
jbe 0x459fc9
call fcn.00406120
mov edx, eax
mov eax, 0x19
call fcn.00458fd8
mov dword [esp + 0x18], eax
mov byte [esp + 0x24], 0x50
mov byte [esp + 0x25], 0xe8
mov eax, dword [0x462cec]
mov dword [esp + 0x26], eax
sub eax, dword [esp + 0x18]
sub eax, 6
mov dword [esp + 0x26], eax
mov byte [esp + 0x2a], 0x3d
call fcn.00406128
mov dword [esp + 0x2b], eax
mov byte [esp + 0x2f], 0x58
mov byte [esp + 0x30], 0x75
mov byte [esp + 0x31], 5
mov byte [esp + 0x32], 0xe9
mov eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x18]
sub eax, 0x13
mov dword [esp + 0x33], eax
mov byte [esp + 0x37], 0xe9
xor eax, eax
mov dword [esp + 0x38], eax
mov byte [esp + 0x3c], 0xc3
mov eax, dword [esp + 0x18]
sub eax, ebx
sub eax, 6
mov dword [esp + 7], eax
jmp 0x459fd6
mov eax, dword [esp + 0x1c]
sub eax, ebx
sub eax, 6
mov dword [esp + 7], eax
mov byte [esp + 5], 0x64
mov byte [esp + 6], 0xe9
mov eax, dword [0x4613d0]
cmp byte [eax], 0
jne 0x459ffd
cmp ebx, 0x80000000
jbe 0x459ffd
mov edx, edi
mov eax, ebx
call fcn.00458fa0
jmp 0x45a013
mov eax, dword [0x4613d0]
cmp byte [eax], 0
je 0x45a013
push 0
push pe_nt_image_headers32
push 0xc
push ebx
call fcn.00406300
lea eax, [esp + 0xc]
push eax
push 6
lea eax, [esp + 0xd]
push eax
push ebx
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
call fcn.00406120
mov edx, eax
lea eax, [edi + 7]
call fcn.00458fd8
mov dword [ebp], eax
cmp dword [ebp], 0
je 0x45a0f6
mov eax, dword [0x4613d0]
cmp byte [eax], 0
jne 0x45a085
cmp ebx, 0x80000000
jbe 0x45a085
mov eax, dword [ebp]
sub eax, dword [esp + 0x18]
sub eax, 0x18
mov dword [esp + 0x38], eax
lea eax, [esp + 0xc]
push eax
push 0x19
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esp + 0x24]
push eax
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
mov eax, ebx
add eax, edi
mov edx, dword [ebp]
add edx, edi
sub eax, edx
sub eax, 6
mov dword [esp + 7], eax
mov byte [esp + 0x10], 0xc3
push edi
mov ecx, dword [ebp]
mov eax, 0x462cbc
mov edx, ebx
call fcn.00459294
test al, al
je 0x45a0f6
lea eax, [esp + 0xc]
push eax
push 6
lea eax, [esp + 0xd]
push eax
mov eax, dword [ebp]
add eax, edi
push eax
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
lea eax, [esp + 0xc]
push eax
push 1
lea eax, [esp + 0x18]
push eax
mov eax, dword [ebp]
add eax, edi
add eax, 6
push eax
push esi
call fcn.00406328
test eax, eax
je 0x45a0f6
push esi
call fcn.00406050
mov byte [esp + 4], 1
mov al, byte [esp + 4]
add esp, 0x7c
pop ebp
pop edi
pop esi
pop ebx
ret