Function at 0x46c6d0
Capabilities:
Contain obfuscated stackstrings
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52609c
mov eax, dword fs:[0]
push eax
sub esp, 0x7a0
mov eax, dword [0x5770a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x770], ecx
mov eax, dword [ebp - 0x770]
and dword [eax], 0
mov byte [0x585ee0], 0
mov byte [0x585ee1], 0
mov ecx, dword [ebp - 0x770]
call fcn.0046cc22
lea ecx, [ebp - 0x640]
call fcn.0040b2fe
and dword [ebp - 4], 0
lea eax, [ebp - 0x640]
push eax
call fcn.004822ed
pop ecx
movzx eax, al
test eax, eax
je 0x46cbc9
push 0x539a0c
lea ecx, [ebp - 0x658]
call fcn.00409053
mov byte [ebp - 4], 1
push 0x5c
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x748]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x658]
call fcn.0040a62b
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
lea eax, [ebp - 0x658]
mov dword [ebp - 0x780], eax
mov byte [ebp - 4], 6
mov byte [ebp - 4], 7
mov byte [ebp - 4], 3
push 0x208
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004b0090
add esp, 0xc
lea ecx, [ebp - 0x748]
call fcn.0040a5f1
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0x539a34
push 0x539a38
push 0x539a44
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x539a34
lea eax, [ebp - 0x218]
push eax
call fcn.004b2766
pop ecx
pop ecx
test eax, eax
je 0x46c80e
mov byte [0x585ee0], 1
push 0x539a4c
lea eax, [ebp - 0x218]
push eax
call fcn.004b2766
pop ecx
pop ecx
test eax, eax
je 0x46c82c
mov byte [0x585ee1], 1
xorps xmm0, xmm0
movlpd qword [ebp - 0x778], xmm0
lea eax, [ebp - 0x778]
push eax
call fcn.004d7e48
pop ecx
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x76c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x778]
push eax
lea eax, [ebp - 0x76c]
push eax
call fcn.004d8688
pop ecx
pop ecx
test eax, eax
jne 0x46cb9a
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x730]
push eax
call fcn.004815a2
pop ecx
pop ecx
mov byte [ebp - 4], 8
push 0x539a50
lea ecx, [ebp - 0x670]
call fcn.00409053
mov byte [ebp - 4], 9
push 0x5c
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x718]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x670]
call fcn.0040a62b
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x670]
mov dword [ebp - 0x784], eax
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xb
push 0x539a58
lea ecx, [ebp - 0x688]
call fcn.00409053
mov byte [ebp - 4], 0x10
push 0x5c
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x718]
push eax
lea eax, [ebp - 0x700]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x688]
call fcn.0040a62b
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x688]
mov dword [ebp - 0x788], eax
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
mov byte [ebp - 4], 0x12
push 0x539a50
lea ecx, [ebp - 0x6a0]
call fcn.00409053
mov byte [ebp - 4], 0x17
push 0x5c
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x700]
push eax
lea eax, [ebp - 0x6e8]
push eax
call fcn.00481988
add esp, 0x10
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6a0]
call fcn.0040a62b
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x6a0]
mov dword [ebp - 0x78c], eax
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x19
push 0x410
push 0
lea eax, [ebp - 0x628]
push eax
call fcn.004b0090
add esp, 0xc
lea ecx, [ebp - 0x6e8]
call fcn.0040a5f1
mov dword [ebp - 0x77c], eax
push dword [ebp - 0x774]
push dword [ebp - 0x778]
push dword [ebp - 0x760]
mov eax, dword [ebp - 0x75c]
inc eax
push eax
mov eax, dword [ebp - 0x758]
add eax, 0x76c
push eax
push str.TCLSHost
push dword [ebp - 0x77c]
push str._s_s__d__d__d__lld.log
push 0x208
lea eax, [ebp - 0x628]
push eax
call fcn.004077b0
add esp, 0x28
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x6b8]
call fcn.00409053
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x6d0]
push eax
call fcn.004815a2
pop ecx
pop ecx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x6b8]
call fcn.0040a62b
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x6b8]
mov dword [ebp - 0x790], eax
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x20
push 1
lea eax, [ebp - 0x6d0]
push eax
call fcn.004812a5
pop ecx
pop ecx
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ecx, dword [ebp - 0x770]
mov dword [ecx], eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x6d0]
call fcn.0040a62b
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x6d0]
mov dword [ebp - 0x794], eax
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x6e8]
call fcn.0040a62b
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x6e8]
mov dword [ebp - 0x798], eax
mov byte [ebp - 4], 0x2b
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x12
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x700]
call fcn.0040a62b
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x700]
mov dword [ebp - 0x79c], eax
mov byte [ebp - 4], 0x2f
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x718]
call fcn.0040a62b
mov byte [ebp - 4], 0x32
mov byte [ebp - 4], 8
lea eax, [ebp - 0x718]
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 0x33
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 8
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x730]
call fcn.0040a62b
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 3
lea eax, [ebp - 0x730]
mov dword [ebp - 0x7a4], eax
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 3
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x748]
call fcn.0040a62b
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0
lea eax, [ebp - 0x748]
mov dword [ebp - 0x7a8], eax
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x3d
lea ecx, [ebp - 0x640]
call fcn.0040a62b
mov dword [ebp - 4], 0x3e
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x640]
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 4], 0x3f
mov dword [ebp - 4], 0x40
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ad99f
leave
ret