Function at 0x463b20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4d987b
mov eax, dword fs:[0]
push eax
mov eax, 0x150
call fcn.00468d20
mov eax, dword [0x5808f0]
xor eax, esp
mov dword [esp + 0x14c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5808f0]
xor eax, esp
push eax
lea eax, [esp + 0x164]
mov dword fs:[0], eax
mov esi, dword [esp + 0x174]
mov al, 0x73
xor ebp, ebp
mov byte [esp + 0x120], 0xd4
mov byte [esp + 0x121], 0xc9
mov byte [esp + 0x122], 0xd9
mov byte [esp + 0x123], 2
mov byte [esp + 0x124], al
mov byte [esp + 0x125], 0x26
mov byte [esp + 0x126], 0x27
mov byte [esp + 0x127], 0x1a
mov byte [esp + 0x128], 0x89
mov byte [esp + 0x129], 0xce
mov byte [esp + 0x12a], 0x51
mov byte [esp + 0x12b], 0xfc
mov byte [esp + 0x12c], 0xaf
mov byte [esp + 0x12d], 0x32
mov byte [esp + 0x12e], 0x8e
mov byte [esp + 0x12f], 0xd6
mov byte [esp + 0x130], al
mov byte [esp + 0x131], 0xf1
mov byte [esp + 0x132], 0x7b
mov byte [esp + 0x133], 0xe3
mov byte [esp + 0x134], 0x34
mov byte [esp + 0x135], 0x69
mov byte [esp + 0x136], 0xff
mov byte [esp + 0x137], 0x97
mov byte [esp + 0x138], 0x9e
mov byte [esp + 0x139], 0x8a
mov byte [esp + 0x13a], 0xb8
mov byte [esp + 0x13b], 0xdd
mov byte [esp + 0x13c], 0x50
mov byte [esp + 0x13d], 0x1e
mov byte [esp + 0x13e], 0x66
mov byte [esp + 0x13f], 0x4f
mov ebx, 0x20
xor edi, edi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x1c], vtable.dwcl::AES.0
push ebp
push 8
lea eax, [esp + 0x1c]
push eax
push ebp
push 8
mov ecx, esi
mov dword [esp + 0x180], ebp
call fcn.00424750
push ebp
push 0x10
lea ecx, [esp + 0x158]
push ecx
push ebp
push 0x10
mov ecx, esi
call fcn.00424750
push ebp
push ebx
lea edx, [esp + 0x128]
push edx
lea ecx, [esp + 0x28]
call fcn.00401b90
cmp dword [esp + 0x28], ebp
jne 0x463cdf
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ecx, [esp + 0x1c]
call edx
push eax
call fcn.004691cd
add esp, 4
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
lea ecx, [esp + 0x1c]
call edx
mov ecx, dword [esp + 0x28]
push eax
lea eax, [esp + 0x154]
push eax
push ecx
call fcn.00468d50
add esp, 0xc
mov ecx, esi
call fcn.00424be0
cmp edi, edx
ja 0x463d6f
jb 0x463d12
cmp ebx, eax
jae 0x463d6f
push ebp
push 0x10
lea edx, [esp + 0x148]
push edx
push edi
push ebx
mov ecx, esi
call fcn.00424750
push 0x10
lea eax, [esp + 0x144]
mov ecx, eax
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.00401a30
push ebp
push 0x10
mov eax, ebx
sub eax, 0x20
lea edx, [esp + 0x148]
push edx
mov ecx, edi
sbb ecx, ebp
push ecx
push eax
mov ecx, esi
call fcn.00424860
add ebx, 0x10
mov ecx, esi
adc edi, ebp
call fcn.00424be0
cmp edi, edx
jb 0x463d12
ja 0x463d6f
cmp ebx, eax
jb 0x463d12
mov ecx, esi
call fcn.00424be0
sub eax, dword [esp + 0x14]
mov ecx, esi
sbb edx, dword [esp + 0x18]
push edx
push eax
call fcn.00424c20
mov eax, dword [esp + 0x20]
mov dword [esp + 0x1c], vtable.dwcl::AbstractCipher.0
cmp eax, ebp
je 0x463da4
push eax
call fcn.004690f0
add esp, 4
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x463db5
push eax
call fcn.004690f0
add esp, 4
mov ecx, dword [esp + 0x164]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x14c]
xor ecx, esp
call fcn.004690b5
add esp, 0x15c
ret 8