Function at 0x4b622d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5aaf8c
mov eax, dword fs:[0]
push eax
sub esp, 0xc8
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0xc0], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0xd8]
mov dword fs:[0], eax
mov esi, ecx
and dword [esp + 0xa8], 0
cmp dword [esi + 8], 3
jne 0x4b65bb
xor eax, eax
lea edi, [esp + 0xbc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [esp + 0xc4], 0xfffffe00
and dword [esp + 0xc8], 0
push 2
lea eax, [esp + 0xc0]
xor ebx, ebx
push eax
push 0
sub esp, 0xc
lea eax, [esp + 0xbb]
mov ecx, esp
lea edx, [esp + 0x2c]
inc ebx
mov dword [esp + 0xf8], ebx
push ecx
push eax
push edx
mov dword [esp + 0x38], 0x366f434a
mov dword [esp + 0x3c], 0x79777a4b
mov dword [esp + 0x40], 0x7134794a
mov dword [esp + 0x44], 0x78775750
mov dword [esp + 0x48], 0x6d55434a
mov dword [esp + 0x4c], 0x6a6f534c
mov dword [esp + 0x50], 0x4c45774a
mov dword [esp + 0x54], 0x346b4241
mov dword [esp + 0x58], 0x426b6961
mov dword [esp + 0x5c], 0x67677a44
mov dword [esp + 0x60], 0x76417849
mov dword [esp + 0x64], 0x594d6749
mov dword [esp + 0x68], 0x4b387766
mov dword [esp + 0x6c], 0x76674246
mov dword [esp + 0x70], 0x4741574a
mov dword [esp + 0x74], 0x4851444e
mov dword [esp + 0x78], 0x5a41424d
mov dword [esp + 0x7c], 0x6d307847
mov dword [esp + 0x80], 0x6567674f
mov dword [esp + 0x84], 0x78416944
mov dword [esp + 0x88], 0x64634141
mov dword [esp + 0x8c], 0x6c6f7743
mov dword [esp + 0x90], 0x626b784e
mov dword [esp + 0x94], 0x4e305143
mov dword [esp + 0x98], 0x37677747
mov dword [esp + 0x9c], 0x4159414e
mov dword [esp + 0xa0], 0x4f51685a
mov dword [esp + 0xa4], 0x7534334e
mov dword [esp + 0xa8], 0x4f455145
mov dword [esp + 0xac], 0x6d46774f
mov dword [esp + 0xb0], 0x42454443
mov dword [esp + 0xb4], 0x31556841
mov dword [esp + 0xb8], 0x51494247
mov dword [esp + 0xbc], 0x4a496a64
mov dword [esp + 0xc0], 0x41416763
mov word [esp + 0xc4], 0x4641
mov byte [esp + 0xc6], 0x51
call fcn.00450208
lea ecx, [esp + 0xc4]
call fcn.004c2ee6
add esp, 0xc
mov byte [esp + 0xec], 2
mov ecx, eax
mov dword [esp + 0xb4], ebx
call fcn.00451547
push eax
mov ecx, esi
call fcn.004b66db
test al, al
je 0x4b6467
cmp byte [esp + 0xc4], 0
jne 0x4b6469
xor bl, bl
lea ecx, [esp + 0xac]
mov dword [esp + 0xe0], 1
call fcn.004513e1
test bl, bl
je 0x4b6490
mov dword [esi + 8], 2
jmp 0x4b65a7
push 1
lea eax, [esp + 0xc0]
mov dword [esp + 0x18], 0x366f434a
push eax
push 0
sub esp, 0xc
mov dword [esp + 0x30], 0x79777a4b
mov ecx, esp
mov dword [esp + 0x34], 0x7134794a
lea eax, [esp + 0x76]
mov dword [esp + 0x38], 0x78775750
lea edx, [esp + 0x2c]
mov dword [esp + 0x3c], 0x6d55434a
push ecx
push eax
push edx
mov dword [esp + 0x4c], 0x6a6f534c
mov dword [esp + 0x50], 0x3941324a
mov dword [esp + 0x54], 0x4c49684b
mov dword [esp + 0x58], 0x37454746
mov dword [esp + 0x5c], 0x45555345
mov dword [esp + 0x60], 0x64634747
mov dword [esp + 0x64], 0x47774443
mov dword [esp + 0x68], 0x32777946
mov dword [esp + 0x6c], 0x49515242
mov dword [esp + 0x70], 0x69566d43
mov dword [esp + 0x74], 0x5634534a
mov dword [esp + 0x78], 0x44497943
mov dword [esp + 0x7c], 0x41414141
mov word [esp + 0x80], 0x4149
call fcn.00450208
lea ecx, [esp + 0xc4]
call fcn.004c2ee6
add esp, 0xc
mov byte [esp + 0xec], 3
mov ecx, eax
mov dword [esp + 0xb4], 2
call fcn.00451547
push eax
mov ecx, esi
call fcn.004b66db
test al, al
je 0x4b658e
cmp byte [esp + 0xc4], 0
je 0x4b658e
mov bl, 1
jmp 0x4b6590
xor bl, bl
lea ecx, [esp + 0xac]
call fcn.004513e1
test bl, bl
je 0x4b65a7
mov dword [esi + 8], 1
or dword [esp + 0xe0], 0xffffffff
lea ecx, [esp + 0xbc]
call fcn.00439697
mov eax, dword [esi + 8]
cmp eax, 3
jne 0x4b65fe
and dword [esp + 0xb8], 0
lea eax, [esp + 0xac]
push 0x5f1974
push eax
mov dword [esp + 0xb8], 0xf
mov dword [esp + 0xbc], 0x33
mov dword [esp + 0xb4], 0x5d0d7c
call fcn.00553b2b
mov ecx, dword [esp + 0xd8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc0]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret