Function at 0x457fc2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x486f75
call fcn.00486b34
sub esp, 0x33c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc0], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
push 0x4940ac
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x5c]
call fcn.00403d39
pop ecx
push dword [ebp + 0xc]
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x28]
call fcn.00403ab7
lea esi, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae esi, dword [ebp - 0x28]
mov cl, 0xf
mov dword [ebp - 0x9a], 0x7d6a440f
mov dword [ebp - 0x96], 0x3c636a61
mov dword [ebp - 0x92], 0x636b213d
mov word [ebp - 0x8e], 0x63
mov eax, ebx
mov dword [ebp - 0xa8], eax
cmp eax, 0xc
jae 0x45805e
xor byte [ebp + eax - 0x99], cl
inc eax
mov dword [ebp - 0xa8], eax
mov cl, byte [ebp - 0x9a]
jmp 0x458043
mov byte [ebp - 0x8d], bl
lea eax, [ebp - 0x99]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
jne 0x458079
mov eax, ebx
jmp 0x458085
mov edx, str.FindFirstFileA
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x208]
push ecx
push esi
call eax
mov edi, eax
lea ecx, [ebp - 0x28]
call fcn.00403b2e
lea ecx, [ebp - 0x5c]
call fcn.00403b2e
cmp edi, 0xffffffff
je 0x45826b
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x28]
call fcn.00403ae8
test byte [ebp - 0x208], 0x10
jne 0x4581f6
push 0x4940ac
mov esi, dword [ebp + 0x10]
mov edx, esi
lea ecx, [ebp - 0xa4]
call fcn.00403d39
pop ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x74]
call fcn.00403ab7
push 0x4940ac
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x8c]
call fcn.00403d39
pop ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x5c]
call fcn.00403ab7
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.00401bbb
lea ecx, [ebp - 0x5c]
call fcn.00403b2e
lea ecx, [ebp - 0x8c]
call fcn.00403b2e
lea ecx, [ebp - 0x74]
call fcn.00403b2e
lea ecx, [ebp - 0xa4]
call fcn.00403b2e
cmp byte [ebp + 0x14], bl
je 0x4581f6
push 0x4940ac
mov edx, esi
lea ecx, [ebp - 0x74]
call fcn.00403d39
pop ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x5c]
call fcn.00403ab7
lea esi, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
cmovae esi, dword [ebp - 0x5c]
mov cl, 0x7b
mov dword [ebp - 0x36], 0x91e307b
mov dword [ebp - 0x32], 0x48171e15
mov dword [ebp - 0x2e], 0x171f5549
mov word [ebp - 0x2a], 0x17
mov eax, ebx
mov dword [ebp - 0xac], eax
cmp eax, 0xc
jae 0x4581bd
xor byte [ebp + eax - 0x35], cl
inc eax
mov dword [ebp - 0xac], eax
mov cl, byte [ebp - 0x36]
jmp 0x4581a8
mov byte [ebp - 0x29], bl
lea eax, [ebp - 0x35]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
jne 0x4581d2
mov eax, ebx
jmp 0x4581de
mov edx, str.SetFileAttributesA
mov ecx, eax
call fcn.00401390
push 0x80
push esi
call eax
lea ecx, [ebp - 0x5c]
call fcn.00403b2e
lea ecx, [ebp - 0x74]
call fcn.00403b2e
lea ecx, [ebp - 0x28]
call fcn.00403b2e
mov cl, 0x20
mov dword [ebp - 0x44], 0x52456b20
mov dword [ebp - 0x40], 0x134c454e
mov dword [ebp - 0x3c], 0x4c440e12
mov word [ebp - 0x38], 0x4c
mov eax, ebx
mov dword [ebp - 0xb0], eax
cmp eax, 0xc
jae 0x458238
xor byte [ebp + eax - 0x43], cl
inc eax
mov dword [ebp - 0xb0], eax
mov cl, byte [ebp - 0x44]
jmp 0x458223
mov byte [ebp - 0x37], bl
lea eax, [ebp - 0x43]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
jne 0x45824d
mov eax, ebx
jmp 0x458259
mov edx, 0x4940d0
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x208]
push ecx
push edi
call eax
test eax, eax
jne 0x4580aa
push 0x12
pop ecx
mov byte [ebp - 0x82], cl
mov dword [ebp - 0x81], 0x7c607759
mov dword [ebp - 0x7d], 0x20217e77
mov dword [ebp - 0x79], 0x7e7e763c
mov byte [ebp - 0x75], bl
mov eax, ebx
mov dword [ebp - 0xb4], eax
cmp eax, 0xc
jae 0x4582b2
xor byte [ebp + eax - 0x81], cl
inc eax
mov dword [ebp - 0xb4], eax
mov cl, byte [ebp - 0x82]
jmp 0x458297
mov byte [ebp - 0x75], bl
lea eax, [ebp - 0x81]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
jne 0x4582ca
mov eax, ebx
jmp 0x4582d6
mov edx, 0x4940e0
mov ecx, eax
call fcn.00401390
push edi
call eax
cmp byte [ebp + 0x18], bl
je 0x45850f
mov cl, 0x6f
mov dword [ebp + 0x14], 0x45336f
mov eax, ebx
mov dword [ebp - 0xb8], eax
cmp eax, 2
jae 0x458308
xor byte [ebp + eax + 0x15], cl
inc eax
mov dword [ebp - 0xb8], eax
mov cl, byte [ebp + 0x14]
jmp 0x4582f3
mov byte [ebp + 0x17], bl
lea eax, [ebp + 0x15]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
call fcn.00403d39
pop ecx
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x458325
mov esi, dword [esi]
mov cl, 0x4d
mov dword [ebp - 0x6a], 0x3f28064d
mov dword [ebp - 0x66], 0x7e212823
mov dword [ebp - 0x62], 0x2129637f
mov word [ebp - 0x5e], 0x21
mov eax, ebx
mov dword [ebp - 0xbc], eax
cmp eax, 0xc
jae 0x45835f
xor byte [ebp + eax - 0x69], cl
inc eax
mov dword [ebp - 0xbc], eax
mov cl, byte [ebp - 0x6a]
jmp 0x45834a
mov byte [ebp - 0x5d], bl
lea eax, [ebp - 0x69]
push eax
mov edi, dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
call edi
test eax, eax
jne 0x458376
mov eax, ebx
jmp 0x458382
mov edx, str.FindFirstFileA
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x348]
push ecx
push esi
call eax
mov esi, eax
lea ecx, [ebp - 0x28]
call fcn.00403b2e
cmp esi, 0xffffffff
je 0x4584ab
lea eax, [ebp - 0x31c]
push eax
lea ecx, [ebp - 0x28]
call fcn.00403ae8
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 1
jne 0x4583c4
cmp byte [eax], 0x2e
je 0x45843a
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
cmovae eax, dword [ebp - 0x28]
cmp dword [ebp - 0x18], 2
jne 0x4583df
mov ecx, 0x2e2e
cmp word [eax], cx
je 0x45843a
test byte [ebp - 0x348], 0x10
je 0x45843a
push 0x4940ac
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x8c]
call fcn.00403d39
pop ecx
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x74]
call fcn.00403ab7
push ebx
push ebx
push dword [ebp + 0x10]
push dword [ebp + 0xc]
lea eax, [ebp - 0x74]
push eax
mov ecx, dword [ebp - 0xc0]
call fcn.00457fc2
lea ecx, [ebp - 0x74]
call fcn.00403b2e
lea ecx, [ebp - 0x8c]
call fcn.00403b2e
lea ecx, [ebp - 0x28]
call fcn.00403b2e
mov cl, 2
mov dword [ebp - 0x52], 0x70674902
mov dword [ebp - 0x4e], 0x316e676c
mov dword [ebp - 0x4a], 0x6e662c30
mov word [ebp - 0x46], 0x6e
mov eax, ebx
mov dword [ebp - 0xc4], eax
cmp eax, 0xc
jae 0x45847c
xor byte [ebp + eax - 0x51], cl
inc eax
mov dword [ebp - 0xc4], eax
mov cl, byte [ebp - 0x52]
jmp 0x458467
mov byte [ebp - 0x45], bl
lea eax, [ebp - 0x51]
push eax
call edi
test eax, eax
jne 0x45848d
mov eax, ebx
jmp 0x458499
mov edx, 0x4940d0
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x348]
push ecx
push esi
call eax
test eax, eax
jne 0x45839f
mov cl, 0x50
mov dword [ebp - 0x1e], 0x22351b50
mov dword [ebp - 0x1a], 0x633c353e
mov dword [ebp - 0x16], 0x3c347e62
mov word [ebp - 0x12], 0x3c
mov eax, ebx
mov dword [ebp - 0xc8], eax
cmp eax, 0xc
jae 0x4584e5
xor byte [ebp + eax - 0x1d], cl
inc eax
mov dword [ebp - 0xc8], eax
mov cl, byte [ebp - 0x1e]
jmp 0x4584d0
mov byte [ebp - 0x11], bl
lea eax, [ebp - 0x1d]
push eax
call edi
test eax, eax
je 0x458500
mov edx, 0x4940e0
mov ecx, eax
call fcn.00401390
mov ebx, eax
push esi
call ebx
jmp 0x45850f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 0x14