Function at 0x4b1280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
movabs rax, 0x2020202020202020
lea esi, [r9*8 + 8]
add esi, dword [rsp + 0xf0]
lea rdi, [rsp + 0x40]
mov r12, rcx
mov r14d, edx
mov edx, 0x3436
lea rcx, [rdi + 0x30]
mov qword [rsp + 0x40], rax
mov r13, r8
mov word [rsp + 0x44], dx
mov edx, 0xa
mov ebp, r9d
lea ebx, [rsi + 7]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
and ebx, 0xfffffff8
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov r8d, ebx
mov dword [rsp + 0x78], 0x20202020
mov dword [rsp + 0x40], 0x4d59532f
mov byte [rsp + 0x46], 0x2f
call fcn.004a6c40
test eax, eax
jne 0x4b1330
xor eax, eax
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__time64]
lea rcx, [rdi + 0x10]
lea r8, [0x0054f612]
mov r9d, eax
mov edx, 0xc
call fcn.004a6b90
lea rcx, [rdi + 0x1c]
lea r8, [0x0054f612]
xor r9d, r9d
mov edx, 6
call fcn.004a6b90
lea rcx, [rdi + 0x22]
lea r8, [0x0054f612]
xor r9d, r9d
mov edx, 6
call fcn.004a6b90
lea rcx, [rdi + 0x28]
lea r8, str.__7lo
xor r9d, r9d
mov edx, 8
call fcn.004a6b90
mov eax, 0xa60
mov r8, r12
mov edx, 0x3c
mov rcx, rdi
mov word [rsp + 0x7a], ax
call fcn.004aa260
cmp rax, 0x3c
jne 0x4b131a
lea rdi, [rsp + 0x38]
mov ecx, ebp
mov rdx, rdi
call fcn.00444480
mov r8, r12
mov edx, 8
mov rcx, rdi
call fcn.004aa260
cmp rax, 8
jne 0x4b131a
mov rax, qword [r12 + 0xe0]
test rax, rax
mov qword [rsp + 0x20], rax
je 0x4b1524
test ebp, ebp
setne al
add r14d, ebx
lea rdx, [r14 + 0x44]
xor r14d, r14d
test al, al
mov qword [rsp + 0x28], rdx
je 0x4b1524
cmp ebp, r14d
jbe 0x4b1480
mov eax, r14d
mov rdx, qword [rsp + 0x20]
lea rax, [rax + rax*2]
cmp qword [r13 + rax*8 + 8], rdx
jne 0x4b1480
lea eax, [r14 + 1]
lea rax, [rax + rax*2]
lea r15, [r13 + rax*8 + 8]
jmp 0x4b1458
add r14d, 1
cmp ebp, r14d
je 0x4b1480
add r15, 0x18
mov rax, qword [rsp + 0x20]
cmp qword [r15 - 0x18], rax
jne 0x4b1480
mov rcx, qword [rsp + 0x28]
mov rdx, rdi
call fcn.00444480
mov r8, r12
mov edx, 8
mov rcx, rdi
call fcn.004aa260
cmp rax, 8
je 0x4b1440
jmp 0x4b131a
mov rdx, qword [rsp + 0x28]
add rdx, 0x3c
test byte [r12 + 0x45], 0x10
jne 0x4b14a1
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0xc8]
add rdx, qword [rax + 8]
mov rax, rdx
shr rax, 0x3f
lea rcx, [rdx + rax]
and ecx, 1
sub rcx, rax
mov rax, rcx
add rax, rdx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x20]
mov rax, qword [rax + 0xd8]
test rax, rax
mov qword [rsp + 0x20], rax
je 0x4b14dc
cmp ebp, r14d
ja 0x4b1417
lea eax, [rbp - 1]
lea rax, [rax + rax*2 + 3]
lea r14, [r13 + rax*8]
jmp 0x4b14f9
add r13, 0x18
cmp r14, r13
je 0x4b1528
mov rax, qword [r13]
mov rbp, qword [rax]
mov rcx, rbp
call sub.msvcrt.dll_strlen
lea rdi, [rax + 1]
mov r8, r12
mov rcx, rbp
mov rdx, rdi
call fcn.004aa260
cmp rdi, rax
je 0x4b14f0
jmp 0x4b131a
test ebp, ebp
jne 0x4b14dc
sub ebx, esi
lea rdi, [0x0054f61c]
jne 0x4b153a
jmp 0x4b1555
sub ebx, 1
je 0x4b1555
mov r8, r12
mov edx, 1
mov rcx, rdi
call fcn.004aa260
cmp rax, 1
je 0x4b1535
jmp 0x4b131a
mov eax, 1
jmp 0x4b131c