Function at 0x4b7e86
Capabilities:
Contain obfuscated stackstrings
Get geographical location
Identify system language via api

Disassembly:
push 0x5f8
mov eax, 0x50ae0d
call fcn.004fb730
mov dword [ebp - 0x5f8], ecx
mov dword [ebp - 0x5fc], ecx
mov dword [ebp - 0x604], ecx
xor esi, esi
push 7
mov dword [ebp - 0x5f4], esi
xor eax, eax
pop ebx
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], ebx
mov word [ecx], ax
mov dword [ebp - 4], esi
xor edx, edx
mov dword [ecx + 0x28], esi
mov dword [ecx + 0x2c], ebx
mov word [ecx + 0x18], dx
mov byte [ebp - 4], 1
lea eax, [ecx + 0x30]
xor ecx, ecx
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], ebx
mov word [eax], cx
mov byte [ebp - 4], 2
push 0x10
call dword [sym.imp.KERNEL32.dll_GetUserGeoID]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push 0x208
movzx edi, ax
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004d37c0
mov esi, dword [sym.imp.KERNEL32.dll_GetGeoInfoW]
lea eax, [ebp - 0x218]
add esp, 0xc
push edi
push 0x103
push eax
push 6
push ebx
call esi
lea eax, [ebp - 0x218]
push 0x104
push eax
call fcn.004e50a9
pop ecx
pop ecx
mov ecx, dword [ebp - 0x5f8]
lea eax, [ebp - 0x218]
push eax
call fcn.00455536
push edi
xor eax, eax
push 0x103
mov word [ebp - 0x218], ax
lea eax, [ebp - 0x218]
push eax
push 4
push ebx
call esi
mov edi, dword [ebp - 0x5f8]
lea eax, [ebp - 0x218]
push eax
lea esi, [edi + 0x18]
mov ecx, esi
call fcn.00455536
push 0x535418
lea ecx, [ebp - 0x5f0]
call fcn.00455432
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5d8]
push str.com.au
call fcn.00455432
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c0]
push 0x535420
call fcn.00455432
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5a8]
push str.com.br
call fcn.00455432
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x590]
push 0x535428
call fcn.00455432
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x578]
push 0x548b78
call fcn.00455432
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x560]
push 0x535430
call fcn.00455432
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x548]
push 0x548b48
call fcn.00455432
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x530]
push 0x535438
call fcn.00455432
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x518]
push 0x548b70
call fcn.00455432
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x500]
push 0x535440
call fcn.00455432
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4e8]
push 0x548b88
call fcn.00455432
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4d0]
push 0x535448
call fcn.00455432
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x4b8]
push 0x548b50
call fcn.00455432
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4a0]
push 0x535450
call fcn.00455432
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x488]
push str.co.uk
call fcn.00455432
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x470]
push 0x535458
call fcn.00455432
mov byte [ebp - 4], 0x1b
mov ebx, 0x54a324
push ebx
lea ecx, [ebp - 0x458]
call fcn.00455432
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x440]
push 0x535460
call fcn.00455432
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x428]
push 0x548b88
call fcn.00455432
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x410]
push 0x535468
call fcn.00455432
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x3f8]
push 0x54a32c
call fcn.00455432
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x3e0]
push 0x535470
call fcn.00455432
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3c8]
push 0x548b58
call fcn.00455432
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x3b0]
push 0x535478
call fcn.00455432
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x398]
push 0x54a334
call fcn.00455432
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x380]
push 0x535480
call fcn.00455432
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x368]
push 0x54a33c
call fcn.00455432
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x350]
push 0x535488
call fcn.00455432
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x338]
push str.co.nz
call fcn.00455432
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x320]
push 0x535490
call fcn.00455432
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x308]
push 0x548b88
call fcn.00455432
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x2f0]
push 0x535498
call fcn.00455432
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x2d8]
push 0x54a344
call fcn.00455432
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x2c0]
push 0x5354a0
call fcn.00455432
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x2a8]
push ebx
call fcn.00455432
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x290]
push 0x5354a8
call fcn.00455432
mov byte [ebp - 4], 0x39
mov ebx, 0x54a2fc
push ebx
lea ecx, [ebp - 0x278]
call fcn.00455432
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x260]
lea ecx, [ebp - 0x5f0]
push eax
push ecx
lea ecx, [ebp - 0x600]
call fcn.004b7e48
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x5f0]
push fcn.00455b99
push 0x13
push 0x30
push eax
call fcn.004fb86c
push esi
lea ecx, [ebp - 0x600]
call fcn.004add11
xor esi, esi
cmp eax, dword [ebp - 0x600]
je 0x4b82e1
add eax, 0x28
mov dword [ebp - 0x238], esi
push eax
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x234], esi
call fcn.00455579
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0x3e
xor ebx, ebx
inc ebx
jmp 0x4b8322
xor eax, eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], esi
lea ecx, [ebp - 0x230]
push ebx
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
call fcn.00455536
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 0x3f
push 2
pop ebx
mov dword [ebp - 0x5f4], ebx
lea ecx, [ebp - 0x260]
push eax
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x24c], esi
call fcn.00455579
mov dword [ebp - 4], 0x41
test bl, 2
je 0x4b83ad
and ebx, 0xfffffffd
mov dword [ebp - 0x5f4], ebx
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x4b8394
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b838b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b84c0
push edx
push ecx
call fcn.0047834a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x220], esi
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x42
test bl, 1
je 0x4b8417
and ebx, 0xfffffffe
mov dword [ebp - 0x5f4], ebx
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x4b83fe
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b83f5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b84c0
push edx
push ecx
call fcn.0047834a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x238], esi
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
lea eax, [ebp - 0x260]
mov edx, str.www.wildtangent.
push eax
lea ecx, [ebp - 0x248]
call fcn.004ad389
mov byte [ebp - 4], 0x43
lea ecx, [edi + 0x30]
push eax
call fcn.00458756
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x248]
call fcn.00455d7e
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x4b8489
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4b8480
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4b84c0
push edx
push ecx
call fcn.0047834a
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x600]
push eax
mov ecx, eax
call fcn.0045570a
or dword [ebp - 4], 0xffffffff
mov eax, edi
call fcn.004fb6da
ret
call fcn.004d7bfa
int3