Function at 0x4f20e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
lea edx, [ebp - 0x2ac]
lea edi, [ebp - 0x201]
sub esp, 0x2e4
mov dword [ebp - 0x2d0], ecx
mov dword [esp], edx
mov dword [ebp - 0x284], esp
mov dword [ebp - 0x294], 0x595d20
mov dword [ebp - 0x290], 0x598798
mov dword [ebp - 0x28c], ebp
mov dword [ebp - 0x288], 0x4f258c
call fcn.0057d6b0
mov dword [esp], 0x5aa240
mov ecx, edi
mov dword [ebp - 0x2a8], 0xffffffff
call fcn.004e3f70
mov ecx, edi
sub esp, 4
mov dword [esp], str.TERANM
call fcn.004e42e0
movsx eax, word [0x5b44ef]
mov ecx, edi
sub esp, 4
mov dword [esp], eax
call fcn.004e4320
mov ecx, edi
sub esp, 4
mov dword [esp], str..RES
call fcn.004e42e0
sub esp, 4
mov dword [esp], edi
lea edi, [ebp - 0x138]
mov dword [esp + 4], 1
mov ecx, edi
call fcn.00423b00
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x250], 0x20202020
mov dword [ebp - 0x24c], 0x20202020
sub esp, 8
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x25c], 0x20202020
mov dword [ebp - 0x258], 0x20202020
test eax, eax
jle 0x4f2578
mov dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x2b4], 0
add eax, 0x168
mov dword [ebp - 0x2c8], eax
jmp 0x4f22bf
cmp byte [ebp - 0x250], 0x20
je 0x4f2217
mov eax, dword [ebp - 0x2bc]
test eax, eax
jne 0x4f2368
mov eax, dword [ebp - 0x274]
mov ecx, 0x10
lea edi, [ebp - 0x244]
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x248], eax
xor eax, eax
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x26c]
mov ecx, 0x5ba360
mov dword [esp + 4], 2
mov dword [esp], eax
mov dword [ebp - 0x2a8], 1
call fcn.00499c60
mov edi, dword [ebp - 0x2b8]
sub esp, 8
mov dword [ebp + eax*4 - 0x248], edi
mov edi, dword [ebp - 0x2c4]
cmp dword [ebp - 0x2b4], edi
je 0x4f2448
add dword [ebp - 0x2b4], 1
mov eax, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x2a8], 1
mov dword [esp], eax
call fcn.00423c50
mov edx, dword [eax]
sub esp, 4
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x274], edx
mov edx, dword [eax + 4]
mov dword [ebp - 0x270], edx
mov edx, dword [eax + 8]
mov dword [ebp - 0x26c], edx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x268], edx
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x264], edx
mov eax, dword [eax + 0x14]
mov dword [esp], eax
mov dword [ebp - 0x260], eax
call fcn.004bf150
mov dword [ebp - 0x2b8], eax
sub esp, 4
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x274], eax
jne 0x4f2200
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x270], eax
jne 0x4f2200
add dword [ebp - 0x2bc], 1
jmp 0x4f2278
mov edi, dword [ebp - 0x2d0]
movsx eax, word [edi]
test ax, ax
jle 0x4f2217
mov dword [ebp - 0x2c0], 0
mov edx, dword [ebp - 0x2bc]
lea ecx, [edx*4]
mov edx, dword [edi + 8]
mov dword [ebp - 0x2d4], ecx
lea eax, [edx + eax*8]
mov dword [ebp - 0x2b0], edx
mov dword [ebp - 0x2cc], eax
jmp 0x4f23d0
add dword [ebp - 0x2b0], 8
mov eax, dword [ebp - 0x2b0]
add dword [ebp - 0x2c0], 0x1c
cmp dword [ebp - 0x2cc], eax
je 0x4f2217
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x25c]
cmp dword [eax], ecx
jne 0x4f23b0
mov ecx, dword [ebp - 0x258]
cmp dword [eax + 4], ecx
jne 0x4f23b0
mov edx, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2c0]
add eax, dword [edx + 4]
mov edx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2d8], eax
mov dword [eax + 0x14], edx
mov dword [esp], ecx
call sub.msvcrt.dll_malloc
mov edi, dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2d4]
mov dword [edi + 0x18], eax
lea edi, [ebp - 0x244]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
jmp 0x4f23b0
mov eax, dword [ebp - 0x2d0]
cmp byte [ebp - 0x250], 0x20
mov ecx, dword [eax + 8]
mov dword [ebp - 0x2c0], ecx
jne 0x4f24a0
mov eax, dword [ebp - 0x2c0]
mov dword [esp], eax
call fcn.00565f80
mov eax, dword [ebp - 0x2d0]
lea ecx, [ebp - 0x138]
mov dword [eax + 8], 0
call fcn.00423970
lea eax, [ebp - 0x2ac]
mov dword [esp], eax
call fcn.0057d740
mov edi, dword [ebp - 4]
leave
ret
movsx eax, word [eax]
test ax, ax
jle 0x4f2460
mov edi, dword [ebp - 0x2bc]
lea eax, [ecx + eax*8]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2b8], eax
lea edx, [edi*4]
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2c4], edx
jmp 0x4f2500
add dword [ebp - 0x2b0], 8
mov eax, dword [ebp - 0x2b0]
add dword [ebp - 0x2b4], 0x1c
cmp eax, dword [ebp - 0x2b8]
je 0x4f2460
mov eax, dword [ebp - 0x2b0]
mov edi, dword [ebp - 0x25c]
cmp dword [eax], edi
jne 0x4f24e0
mov edi, dword [ebp - 0x258]
cmp dword [eax + 4], edi
jne 0x4f24e0
mov edi, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x2bc]
mov eax, dword [ebp - 0x2b4]
add eax, dword [edi + 4]
mov dword [eax + 0x14], ecx
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp - 0x2c8], eax
mov dword [esp], ecx
call sub.msvcrt.dll_malloc
mov edi, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x2c4]
mov dword [edi + 0x18], eax
lea edi, [ebp - 0x244]
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
jmp 0x4f24e0
mov eax, dword [ebp - 0x2d0]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c0], eax
jmp 0x4f2460