Function at 0x4ee380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov eax, dword [0x007efd28]
mov rsi, rcx
mov rdi, rdx
mov ebp, r8d
test eax, eax
je 0x4ee3d1
cmp qword [0x007efd20], 0
mov ebx, 0x32
je 0x4ee530
mov ecx, 0x98
call fcn.004cbbf0
mov eax, ebx
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
ret
lea r12, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rbx, [rsp + 0x40]
lea r13, [rsp + 0x20]
mov r8d, 0x10
mov dword [0x007efd28], 1
mov rcx, r12
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x51], 0x23
mov byte [rsp + 0x52], 0x45
mov byte [rsp + 0x53], 0x67
mov byte [rsp + 0x54], 0x12
mov byte [rsp + 0x55], 0x34
mov byte [rsp + 0x56], 0x56
mov byte [rsp + 0x57], 0x78
mov byte [rsp + 0x58], 0x23
mov byte [rsp + 0x59], 0x45
mov byte [rsp + 0x5a], 0x67
mov byte [rsp + 0x5b], 0x89
mov byte [rsp + 0x5c], 0x34
mov byte [rsp + 0x5d], 0x56
mov byte [rsp + 0x5e], 0x78
mov byte [rsp + 0x5f], 0x9a
mov byte [rsp + 0x20], 1
mov byte [rsp + 0x21], 0x23
mov byte [rsp + 0x22], 0x45
mov byte [rsp + 0x23], 0x67
mov byte [rsp + 0x24], 0x89
mov byte [rsp + 0x25], 0xab
mov byte [rsp + 0x26], 0xcd
mov byte [rsp + 0x27], 0xef
mov byte [rsp + 0x30], 0x23
mov byte [rsp + 0x31], 0x8b
mov byte [rsp + 0x32], 0x4f
mov byte [rsp + 0x33], 0xe5
mov byte [rsp + 0x34], 0x84
mov byte [rsp + 0x35], 0x7e
mov byte [rsp + 0x36], 0x44
mov byte [rsp + 0x37], 0xb2
call fcn.004ee380
mov r8, r13
mov rdx, rbx
mov rcx, r12
call fcn.004ed4a0
mov ecx, 0x34
call fcn.004cbbf0
lea rdx, [rsp + 0x30]
mov r8d, 8
mov rcx, rbx
call sub.msvcrt.dll_memcmp
test eax, eax
lea rdx, [0x0076a4e2]
je 0x4ee4f0
lea rcx, str.CAST5_selftest_failed___s_._n
mov qword [0x007efd20], rdx
call fcn.004cba40
jmp 0x4ee3a2
mov r8, rbx
mov rdx, rbx
mov rcx, r12
call fcn.004ed8a0
mov ecx, 0x34
call fcn.004cbbf0
mov rdx, r13
mov r8d, 8
mov rcx, rbx
call sub.msvcrt.dll_memcmp
test eax, eax
lea rdx, [0x0076a4e0]
jne 0x4ee4d3
mov qword [0x007efd20], 0
nop
cmp ebp, 0x10
mov ebx, 0x2c
jne 0x4ee3b5
movzx eax, byte [rdi]
movzx edx, byte [rdi + 1]
lea rbx, [rsp + 0x60]
lea rbp, [rsp + 0x50]
mov r8, rbx
shl edx, 0x10
shl eax, 0x18
or eax, edx
movzx edx, byte [rdi + 3]
or eax, edx
movzx edx, byte [rdi + 2]
shl edx, 8
or eax, edx
movzx edx, byte [rdi + 5]
mov dword [rsp + 0x40], eax
movzx eax, byte [rdi + 4]
shl edx, 0x10
shl eax, 0x18
or eax, edx
movzx edx, byte [rdi + 7]
or eax, edx
movzx edx, byte [rdi + 6]
shl edx, 8
or eax, edx
movzx edx, byte [rdi + 9]
mov dword [rsp + 0x44], eax
movzx eax, byte [rdi + 8]
shl edx, 0x10
shl eax, 0x18
or eax, edx
movzx edx, byte [rdi + 0xb]
or eax, edx
movzx edx, byte [rdi + 0xa]
shl edx, 8
or eax, edx
movzx edx, byte [rdi + 0xd]
mov dword [rsp + 0x48], eax
movzx eax, byte [rdi + 0xc]
shl edx, 0x10
shl eax, 0x18
or eax, edx
movzx edx, byte [rdi + 0xf]
or eax, edx
movzx edx, byte [rdi + 0xe]
lea rdi, [rsp + 0x40]
mov rcx, rdi
shl edx, 8
or eax, edx
mov rdx, rbp
mov dword [rsp + 0x4c], eax
call fcn.004edc90
xor eax, eax
nop dword [rax + rax]
mov r8d, dword [rbx + rax]
mov dword [rsi + rax], r8d
add rax, 4
cmp rax, 0x40
jne 0x4ee5f0
mov r8, rbx
mov rdx, rbp
mov rcx, rdi
call fcn.004edc90
xor eax, eax
movzx edx, byte [rbx + rax*4]
and edx, 0x1f
mov byte [rsi + rax + 0x40], dl
add rax, 1
cmp rax, 0x10
jne 0x4ee612
mov rdi, rbx
mov ecx, 8
xor al, al
mov qword [rsp + 0x40], 0
mov qword [rsp + 0x48], 0
xor ebx, ebx
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x58], 0
rep stosq qword [rdi], rax
jmp 0x4ee3b5