Function at 0x45d0e3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x4400ec
ret
cmp dword [0x487f9a], 0xffffffff
jne 0x45b9b9
je 0x43d09c
nop
cpuid
ret
call fcn.00464eda
push 0x445b69
ret
add al, byte [eax]
test si, 0x8ce9
or ebx, ebx
add esp, 0xc
xchg cx, ax
xchg cx, ax
cmp ebx, eax
jge 0x43e6a9
jl 0x43e68d
jmp 0x6aba2da5
push 0x25
mov eax, dword [esi]
push eax
call fcn.0043b4a9
add esp, 8
pop edi
pop esi
mov bp, bp
pop ebx
mov esp, ebp
pop ebp
ret
push pe_nt_image_headers32
jno 0x453ce7
jo 0x43e6b8
cmpsd dword fs:[esi], dword es:[edi]
jo 0x453ce7
invalid
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax]
mov ebx, dword [esi + 8]
mov eax, dword [eax]
ja 0x465cff
jbe 0x43e6d6
dec edi
jl 0x43e6e6
jbe 0x465cff
xchg byte [ebx], ah
jbe 0x43e6dd
add byte [edx + 0xc768d7d], al
cmp byte [ebp - 0x73], 0x76
or al, 0x66
cmp dword [ebx + edx], eax
jge 0x43e66c
jbe 0x43e6ed
cmp word [ebx + edx], ax
jmp dword [esi]
cwde
fadd st(0)
loopne 0x43e70c
mov ebx, dword [ebp + 0x34]
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push 0x45c857
ret
pop ebp
xor al, 0x8b
push esi
or byte [ebx + 0x57680446], cl
enter 0x45, 0xffffffffffffffc3
add eax, 0x8758b05
mov si, si
mov eax, dword [esi]
push eax
call fcn.004441be
mov di, ax
mov edi, eax
add esp, 4
shr di, 0x40
mov eax, dword [esi]
push eax
call fcn.0044adb5
or ebx, ebx
add esp, 4
or al, al
test di, di
jb 0x4488f1
je 0x45859b
jne 0x43e73d
out 0xb4, eax
cmp cl, cl
cmp di, 3
xchg si, bp
xchg bp, si
je 0x45859b
jne 0x43e755
mov byte [0x36a8fcd], al
push 3
mov di, di
mov eax, dword [esi]
jmp 0x43e75d
push eax
jne 0x458583
mov dh, dh
je 0x43e76b
fdivr qword [ecx - 0x61ed7bf1]
add dword [eax], eax
je 0x458583
or byte [eax - 0x1d3fff73], 0x20
mov eax, dword [esi + 4]
push 0x4488fb
ret
mov byte [eax - 0x75], dh
inc ebp
and al, al
out dx, eax
inc eax
mov ax, ax
mov ebx, dword [esi + 4]
lea esi, [esi + 8]
imul byte [ebx]
mov dword [ebp + 0x20], eax
jmp dword [esi]
sbb eax, 0x8be488cf
pop esi
add al, 0x8b
inc ebp
and byte [ebx + 0x768d2855], cl
or byte [0], ch
imul word [ebx]
mov dword [ebp + 0x20], eax
mov dword [ebp + 0x28], edx
jmp dword [esi]
mov eax, dword [esi]
push edi
pop edi
jmp 0x451e19
push eax
call fcn.00442962
add esp, 4
test al, 1
jb 0x44028e
jne 0x43d086
shl ah, 0x20
je 0x451e3d
rol dword [edx + ebx*2 + 0x6e4de859], 0xff
inc dword [ebp + 0x5c820fc0]
in al, 0xfe
dec dword [edi]
test byte [esi], dh
mov dl, 0xfe
push dword [ebp + 4]
call 0x448c8f
test eax, eax
jb 0x4402a6
je 0x43d086
jne 0x451e56
nop
cpuid
ret 0xc166
shl bp, 0x20
push 0x26
mov eax, dword [esi]
shr si, 0x40
jmp 0x451e63
push eax
call 0x43d06b
add eax, 0x464aed80
add byte [edx - 0x35ffb99b], dl
out 0x45, eax
add byte [eax + 0x100451e], al
push eax
jle 0x451e50
invalid
mov eax, dword [esi]
push eax
lea ecx, [ebp - 0x10c]
jmp 0x453cf2
push ecx
call fcn.004630c8
add esp, 0xc
lea ecx, [ebp - 0x10c]
jmp 0x4650f2
push ecx
call 0x45d2d7
adc bh, 0xc1
loope 0x453f8e
jmp 0x453f6f
push esi
mov si, si
shr edi, 0x40
mov byte [esi + 0xbb], cl
push ebx
pop ebx
call fcn.0045e542
shr ebp, 0x40
mov dx, word [ebp + 0x10]
add ecx, 0
test bh, 0xb6
add esp, 4
mov word [esi + 0xbc], dx
mov cl, byte [ebp + 0xc]
push eax
mov byte [esi + 0xba], cl
mov ch, ch
mov byte [esi + 0xbb], 0
xchg dh, bh
shl dh, 0x20
shr bl, 0x40
xchg bh, dh
push esi
pop esi
push edi
pop edi
jmp 0x466810
add byte [eax], al
add dh, dh
invalid
je 0x451e14
jne 0x455a8e
and dword [eax + 0x4f], ecx
js 0x4578a1
jns 0x455a99
wait
stosb byte es:[edi], al
sub al, 0xf
mov dword [edx], eax
push ds
add byte [eax], al
jns 0x4578a1
xor eax, 0x15840f89
rol byte [eax], 1
add byte [ebp + 3], dh
cmp ax, 0x100
je 0x451e14
shr ah, 0x40
jne 0x4578b4
insd dword es:[edi], dx
cpuid
ret
cmp ax, 0x28
call fcn.00451e06
fisub dword [ecx]
call fcn.00442962
add esp, 4
mov ecx, dword [esi]
movzx ax, al
mov word [ebp - 8], ax
push ebx
jmp 0x4578d6
push ecx
call fcn.0043c150
add esp, 8
mov ecx, dword [esi]
jmp 0x4578e6
push ebx
push ecx
push 0x45aa88
ret
call fcn.0043b4a9
cmp si, si
add esp, 8
pop edi
pop esi
mov esp, ebp
pop ebp
ret
test ax, ax
jb 0x4488f9
jmp 0x455a83
lea esp, [esp + 4]
mov bl, bl
mov byte [esi + 0xba], cl
jne 0x43c693
je 0x45d0f9
cmp byte [edi + 0xf], al
test byte [ebp + esi*8 + 0xe82fffd], dl
mov dword [eax], ebx
inc esp
add byte [eax + 0x1f], cl
je 0x43c693
or byte [esi], 0x89
sbb byte [eax + eax + 0x48], al
pop ds
imul esi, edx, 0x45
add byte [eax], ah
add byte [eax], al
add byte [eax], ah
add byte [eax], al
add al, dh
sbb byte [ebp], al
dec ebx
mov eax, dword [0x18cd0043]
inc ebp
add byte [edi], bh
stc
inc ebp
add byte [edx + 0x2e004518], dh
rol dword [ebp], 1
or ch, bh
das
mov dl, 0x18
inc ebp
add byte [edi], bh
stc
inc ebp
add byte [0x44896695], al
sbb eax, 0xffdb8900
outsb dx, byte ss:[esi]
shr cx, 0x40
jmp 0x43e6c0
push 1
ja 0x453f63
jbe 0x4650fe
bound esi, qword [esi + 0xf]
xchg byte [edi - 0x12], bl
invalid
jbe 0x453f63
cdq
cld
invalid