Function at 0x100464b6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069bd6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x198
mov eax, dword [0x1200d85c]
and eax, 1
jne 0x10046508
mov eax, dword [0x1200d85c]
or eax, 1
mov dword [0x1200d85c], eax
and dword [ebp - 4], 0
mov ecx, 0x1200d8c0
call fcn.100432fc
push 0x10069f18
call fcn.1004fd57
pop ecx
or dword [ebp - 4], 0xffffffff
push dword [ebp + 8]
lea ecx, [ebp - 0x110]
call fcn.10042eb1
mov dword [ebp - 4], 1
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x110]
call fcn.10043603
push dword [eax]
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x110]
call fcn.10043617
push dword [eax]
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x110]
call fcn.10043603
push dword [eax]
mov edx, 0x10044a35
lea ecx, [ebp - 0x134]
call fcn.100493bc
add esp, 0xc
lea ecx, [ebp - 0x110]
call fcn.100449c0
mov dword [ebp - 0xc8], eax
movzx eax, byte [0x1200d749]
test eax, eax
je 0x100466da
mov ecx, 0x1200d8c0
call fcn.100491bb
movzx eax, al
test eax, eax
jne 0x100466da
mov dword [ebp - 0xf8], 0x2324
cmp dword [ebp - 0xf8], 0xae6
jge 0x10046670
lea eax, [ebp - 0xe8]
push eax
push 0x10008110
call fcn.1004f9f0
pop ecx
pop ecx
mov dword [ebp - 0x48], 1
jmp 0x100465de
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xe8]
jg 0x10046670
lea eax, [ebp - 0x1a4]
push eax
push 0x10008718
call fcn.1004f9f0
pop ecx
pop ecx
lea eax, [ebp - 0x1a4]
push eax
call fcn.1004f810
pop ecx
mov dword [ebp - 0xf4], eax
push dword [ebp - 0x48]
push 0x1000871c
call fcn.1004fd81
pop ecx
pop ecx
and dword [ebp - 0x4c], 0
jmp 0x1004662f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xf4]
jge 0x10046660
mov eax, dword [ebp - 0x4c]
movsx eax, byte [ebp + eax - 0x1a4]
sub eax, 0x40
cdq
push 0x1a
pop ecx
idiv ecx
add edx, 0x41
push edx
push 0x10008728
call fcn.1004fd81
pop ecx
pop ecx
jmp 0x10046628
push 0x1000872c
call fcn.1004fd81
pop ecx
jmp 0x100465d7
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xcc]
push eax
mov ecx, 0x1200d8c0
call fcn.100432d4
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x1200d8c0
call fcn.10029f35
push eax
lea ecx, [ebp - 0xcc]
call fcn.100432e9
movzx eax, al
test eax, eax
je 0x100466da
lea ecx, [ebp - 0xcc]
call fcn.100491c4
mov eax, dword [eax + 4]
mov dword [ebp - 0xe0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.10042f36
mov eax, dword [ebp - 0xe0]
jmp 0x10046daf
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x110]
push eax
call fcn.1004630d
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10046d52
cmp dword [0x1200d754], 0
jne 0x10046d37
mov byte [ebp - 0x3c], 9
mov byte [ebp - 0x3b], 0x2a
mov byte [ebp - 0x3a], 0xa
mov byte [ebp - 0x39], 8
mov byte [ebp - 0x38], 3
mov byte [ebp - 0x37], 2
mov byte [ebp - 0x36], 4
mov byte [ebp - 0x35], 0xb
mov byte [ebp - 0x34], 5
mov byte [ebp - 0x33], 9
mov byte [ebp - 0x32], 7
mov byte [ebp - 0x31], 0x5e
mov byte [ebp - 0x30], 0xb
mov byte [ebp - 0x2f], 0x5e
mov byte [ebp - 0x2e], 1
mov byte [ebp - 0x2d], 9
mov byte [ebp - 0x2c], 8
mov byte [ebp - 0x2b], 0x4b
mov byte [ebp - 0x2a], 2
mov byte [ebp - 0x29], 0x5c
mov byte [ebp - 0x28], 2
mov byte [ebp - 0x27], 0x6f
mov byte [ebp - 0x26], 0x42
mov byte [ebp - 0x25], 6
mov byte [ebp - 0x24], 0x41
mov byte [ebp - 0x23], 0
mov byte [ebp - 0x22], 0x78
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x3c]
or eax, 0x4e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c]
and ecx, 0x4e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x3c]
mov word [ebp + ecx*2 - 0x12c], ax
mov dword [ebp - 0x10], 2
and dword [ebp - 0x20], 0
jmp 0x100467b7
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1b
jae 0x10046882
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x3c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x100467f5
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x3c]
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x3c]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x100467af
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x3b]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x3e]
movzx ecx, word [ebp + ecx*2 - 0x12c]
add eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x3b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x3e]
movzx edx, word [ebp + edx*2 - 0x12c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x3b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x3e]
movzx edx, word [ebp + edx*2 - 0x12c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x3c]
mov word [ebp + ecx*2 - 0x12c], ax
push 0x415d
push 0
lea eax, [ebp - 0x20]
push eax
push 0xa38
push 0x6b46
call fcn.10046dbd
add esp, 0x14
jmp 0x100467af
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x12c], cx
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x170]
call fcn.1004914d
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xec], eax
mov byte [ebp - 4], 2
push dword [ebp - 0xec]
call fcn.1004630d
pop ecx
mov dword [ebp - 0xc4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x170]
call fcn.10042f36
and dword [ebp - 0x40], 0
jmp 0x100468e8
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xd
jae 0x100468fd
xor eax, eax
mov ecx, dword [ebp - 0x40]
mov word [ebp + ecx*2 - 0x12c], ax
jmp 0x100468e1
cmp dword [ebp - 0xc4], 0
je 0x10046d37
mov byte [ebp - 0xc0], 0
mov byte [ebp - 0xbf], 0x5a
mov byte [ebp - 0xbe], 0x5b
mov byte [ebp - 0xbd], 0xde
mov byte [ebp - 0xbc], 0x27
mov byte [ebp - 0xbb], 0x1f
mov byte [ebp - 0xba], 0xd3
mov byte [ebp - 0xb9], 0xed
mov byte [ebp - 0xb8], 0x14
mov byte [ebp - 0xb7], 0xaa
mov byte [ebp - 0xb6], 0x51
mov byte [ebp - 0xb5], 0xd4
mov byte [ebp - 0xb4], 5
mov byte [ebp - 0xb3], 0x8a
mov byte [ebp - 0xb2], 0x21
mov byte [ebp - 0xb1], 0xef
mov byte [ebp - 0xb0], 0x73
mov byte [ebp - 0xaf], 0x70
mov byte [ebp - 0xae], 0x1e
mov byte [ebp - 0xad], 0xbb
mov byte [ebp - 0xac], 0xf8
mov byte [ebp - 0xab], 0x91
mov byte [ebp - 0xaa], 0xd4
mov byte [ebp - 0xa9], 0x2c
mov byte [ebp - 0xa8], 0xab
mov byte [ebp - 0xa7], 0x26
mov byte [ebp - 0xa6], 0xfa
mov byte [ebp - 0xa5], 0xda
mov byte [ebp - 0xa4], 0x4f
mov byte [ebp - 0xa3], 0x5c
mov byte [ebp - 0xa2], 0xcc
mov byte [ebp - 0xa1], 0xfa
mov byte [ebp - 0xa0], 0xe1
mov byte [ebp - 0x9f], 0xcf
mov byte [ebp - 0x9e], 0
mov byte [ebp - 0x9d], 0xa
mov byte [ebp - 0x9c], 0x3b
mov byte [ebp - 0x9b], 0xad
mov byte [ebp - 0x9a], 0xac
mov byte [ebp - 0x99], 0x30
mov byte [ebp - 0x98], 0x55
mov byte [ebp - 0x97], 0x74
mov byte [ebp - 0x96], 0xcc
mov byte [ebp - 0x95], 0xcd
mov byte [ebp - 0x94], 0x70
mov byte [ebp - 0x93], 0x17
mov byte [ebp - 0x92], 0xba
mov byte [ebp - 0x91], 0x8a
mov byte [ebp - 0x90], 0xa0
mov byte [ebp - 0x8f], 0x59
mov byte [ebp - 0x8e], 0xd0
mov byte [ebp - 0x8d], 0x10
mov byte [ebp - 0x8c], 0x8a
mov byte [ebp - 0x8b], 0xbd
mov byte [ebp - 0x8a], 0x8d
mov byte [ebp - 0x89], 0xa5
mov byte [ebp - 0x88], 0x49
mov byte [ebp - 0x87], 0x53
mov byte [ebp - 0x86], 0xdf
mov byte [ebp - 0x85], 0xdc
mov byte [ebp - 0x84], 0xc8
mov byte [ebp - 0x83], 0xb6
mov byte [ebp - 0x82], 7
mov byte [ebp - 0x81], 0xd
mov byte [ebp - 0x80], 0x9e
mov byte [ebp - 0x7f], 0x25
mov byte [ebp - 0x7e], 0x17
mov byte [ebp - 0x7d], 0xbb
mov byte [ebp - 0x7c], 0x13
mov byte [ebp - 0x7b], 0xe5
mov byte [ebp - 0x7a], 0x22
mov byte [ebp - 0x79], 0x4f
mov byte [ebp - 0x78], 0x70
mov byte [ebp - 0x77], 0xeb
mov byte [ebp - 0x76], 0xe
mov byte [ebp - 0x75], 0x88
mov byte [ebp - 0x74], 0x53
mov byte [ebp - 0x73], 0x79
mov byte [ebp - 0x72], 0x8e
mov byte [ebp - 0x71], 0xae
mov byte [ebp - 0x70], 5
mov byte [ebp - 0x6f], 0x21
mov byte [ebp - 0x6e], 0xdd
mov byte [ebp - 0x6d], pe_nt_image_headers32
mov byte [ebp - 0x6c], 0x9c
mov byte [ebp - 0x6b], 0x70
mov byte [ebp - 0x6a], 0x1c
mov byte [ebp - 0x69], 0x5a
mov byte [ebp - 0x68], 0xf3
mov byte [ebp - 0x67], 0x25
mov byte [ebp - 0x66], 0xf6
mov byte [ebp - 0x65], 0xed
mov byte [ebp - 0x64], 0xa9
mov byte [ebp - 0x63], 0x2e
mov byte [ebp - 0x62], 0xb
mov byte [ebp - 0x61], 0x1b
mov byte [ebp - 0x60], 3
mov byte [ebp - 0x5f], 0x33
mov byte [ebp - 0x5e], 6
mov byte [ebp - 0x5d], 6
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x5b], 0xb
mov byte [ebp - 0x5a], 1
mov byte [ebp - 0x59], 6
mov byte [ebp - 0x58], 9
mov byte [ebp - 0x57], 0x1d
mov byte [ebp - 0x56], 7
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 8
mov byte [ebp - 0x53], 0x13
mov byte [ebp - 0x52], 2
mov byte [ebp - 0x51], 0
mov byte [ebp - 0x50], 4
mov byte [ebp - 0x4f], 0x2d
mov byte [ebp - 0x4e], 0xa
mov byte [ebp - 0x4d], 0x35
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xc0]
or eax, 0x16
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
and ecx, 0x16
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
mov byte [ebp + ecx - 0xdc], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0x1c], 0
jmp 0x10046be8
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x74
jae 0x10046cc6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10046c2f
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xc0]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xc0]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x10046be0
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xbf]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xc2]
movsx ecx, byte [ebp + ecx - 0xdc]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xc2]
movsx edx, byte [ebp + edx - 0xdc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xc2]
movsx edx, byte [ebp + edx - 0xdc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xc0]
mov byte [ebp + ecx - 0xdc], al
push 0
push 0x4a5e
lea eax, [ebp - 0x1c]
push eax
call fcn.10046de7
add esp, 0xc
jmp 0x10046be0
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0xdc], 0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x158]
call fcn.1003de3a
mov byte [ebp - 4], 3
and dword [ebp - 0x44], 0
jmp 0x10046cf7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xd
jae 0x10046d0a
mov eax, dword [ebp - 0x44]
mov byte [ebp + eax - 0xdc], 0
jmp 0x10046cf0
push 0
push 0
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0xc4]
call fcn.10047752
add esp, 0x10
mov dword [0x1200d754], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x158]
call fcn.1003dec2
cmp dword [0x1200d754], 0
je 0x10046d52
mov ecx, dword [ebp + 8]
call fcn.10049172
push eax
call dword [0x1200d754]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10046d91
movzx eax, byte [0x1200d749]
test eax, eax
je 0x10046d74
mov ecx, 0x1200d8c0
call fcn.100491bb
movzx eax, al
test eax, eax
jne 0x10046d91
lea eax, [ebp - 0xc8]
push eax
mov ecx, 0x1200d8c0
call fcn.1004917d
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov byte [0x1200d749], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.10042f36
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret