Function at 0x45e130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
push edi
push esi
sub esp, 0x104
movzx ebx, byte [esp + 0x118]
mov esi, dword [esp + 0x114]
mov eax, dword [0x567b10]
xor eax, esp
mov dword [esp + 0x100], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.0045c570
mov dword [esi + 0xc0], 0
cmp ebx, 4
je 0x45e3d4
cmp bl, 3
jne 0x45e3de
mov byte [esi + 0x22], 1
mov byte [esi + 0x52], 1
mov dword [esi + 0x78], 8
mov dword [esi + 0x108], 4
mov edi, 3
lea eax, [edi + 4]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x10], 0x72646e61
mov dword [esp + 0x13], 0x64696f72
mov byte [esp + 0x17], 0
lea eax, [edi + 5]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x2c], 0x7864696f
mov dword [esp + 0x28], 0x72646e61
mov byte [esp + 0x30], 0
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 3
mov dword [esp + 0x40], 0x6d6f63
lea eax, [edi + 3]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x58], 0x766c6164
mov word [esp + 0x5c], 0x6b69
mov byte [esp + 0x5e], 0
lea ebx, [edi + 2]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], 0xf
mov dword [esp + 0x70], 0x696e756a
mov word [esp + 0x74], 0x74
mov dword [esp + 0x9c], 0xf
mov dword [esp + 0x98], 3
mov byte [esp + 0x8a], 0x67
mov word [esp + 0x88], 0x726f
mov byte [esp + 0x8b], 0
mov eax, 3
add eax, 0xfffffffd
mov edx, 0xf
adc edx, 0xffffffff
lea ecx, [esp + 0xa0]
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb0], eax
mov byte [esp + 0xa0], 0
mov al, byte [esp + 0xc]
mov byte [esp + 4], al
mov dword [esp + 8], str.com.google.android.apps.chrome
mov dword [esp], 0x1e
call fcn.00404140
sub esp, 0xc
lea eax, [edi + 9]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], 0xf
mov dword [esp + 0xb8], 0x2e67726f
mov dword [esp + 0xbc], 0x6f726863
mov dword [esp + 0xc0], 0x6d75696d
mov byte [esp + 0xc4], 0
add edi, 1
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], 0xf
mov dword [esp + 0xd0], 0x6176616a
mov byte [esp + 0xd4], 0
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], 0xf
mov dword [esp + 0xe8], 0x6176616a
mov word [esp + 0xec], 0x78
lea eax, [esp + 0x100]
lea ecx, [esi + 0x110]
mov dl, byte [esp + 0xc]
mov byte [esp + 8], dl
mov dword [esp + 4], eax
lea eax, [esp + 0x10]
mov dword [esp], eax
call fcn.0046ab80
sub esp, 0xc
mov edi, 0xf0
jmp 0x45e3a6
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00533ac0
mov dword [esp + edi + 8], 0
mov dword [esp + edi + 0xc], 0xf
mov byte [esp + edi - 8], 0
add edi, 0xffffffe8
je 0x45e402
mov eax, dword [esp + edi + 0xc]
cmp eax, 0x10
jb 0x45e38c
mov ecx, dword [esp + edi - 8]
lea edx, [eax + 1]
cmp edx, 0x1000
jb 0x45e380
mov ebx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, ebx
cmp ecx, 0x20
jae 0x45e423
add eax, 0x24
mov edx, eax
mov ecx, ebx
jmp 0x45e380
mov byte [esi + 0x22], 0
mov byte [esi + 0x24], 0
jmp 0x45e409
mov byte [esi + 0x1d], 0
mov word [esi + 0x21], 3
mov byte [esi + 0x24], 0
mov byte [esi + 0x3a], 0
mov byte [esi + 0x7e], 0
cmp bl, 5
jne 0x45e409
mov dword [esi + 0x54], 0x50
jmp 0x45e409
mov byte [esi + 0x195], 1
mov ecx, dword [esp + 0x100]
xor ecx, esp
call fcn.00533ace
mov eax, esi
add esp, 0x104
pop esi
pop edi
pop ebx
ret
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3