Function at 0x500b7c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5b2ef5
mov eax, dword fs:[0]
push eax
sub esp, 0x3a8
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0x3a0], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0x3b8]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov edi, dword [ebp + 8]
mov ecx, edi
mov dword [esp + 0x368], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x36c], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x364], eax
lea eax, [esp + 0x3a8]
mov dword [esp + 0x18], ebx
and dword [esp + 0x3a8], ebx
and dword [esp + 0x3ac], ebx
push eax
call fcn.0043daf9
jmp 0x5016e5
mov esi, dword [esp + 0x3a8]
add esi, 0x18
cmp byte [esi + 8], 0
je 0x501308
mov ecx, esi
call fcn.0043d95a
test al, al
je 0x501308
push 0
sub esp, 0xc
mov dword [esp + 0x12c], 0x6a4d7a4c
mov ecx, esp
mov dword [esp + 0x130], 0x33777a4b
lea eax, [esp + 0x21c]
mov dword [esp + 0x134], 0x554d4365
lea edx, [esp + 0x12c]
mov dword [esp + 0x138], 0x37426742
push ecx
push eax
push edx
mov dword [esp + 0x148], 0x6d4a6741
mov dword [esp + 0x14c], 0x57496949
mov dword [esp + 0x150], 0x56517750
mov dword [esp + 0x154], 0x64497842
mov dword [esp + 0x158], 0x49347841
mov dword [esp + 0x15c], 0x39494744
mov dword [esp + 0x160], 0x57416d41
mov dword [esp + 0x164], 0x5245444b
mov dword [esp + 0x168], 0x4e636965
mov dword [esp + 0x16c], 0x304e5850
mov dword [esp + 0x170], 0x6d6c534e
mov dword [esp + 0x174], 0x494d6945
mov dword [esp + 0x178], 0x6d45424c
mov dword [esp + 0x17c], 0x706b5465
mov dword [esp + 0x180], 0x4a41515a
mov dword [esp + 0x184], 0x4849524c
mov dword [esp + 0x188], 0x616f4165
mov dword [esp + 0x18c], 0x776c6850
mov dword [esp + 0x190], 0x304d5345
mov dword [esp + 0x194], 0x36425344
mov dword [esp + 0x198], 0x55637841
mov dword [esp + 0x19c], 0x304a424e
mov dword [esp + 0x1a0], 0x43555445
mov dword [esp + 0x1a4], 0x5838444f
mov dword [esp + 0x1a8], 0x75775441
mov dword [esp + 0x1ac], 0x67346d4c
mov dword [esp + 0x1b0], 0x5a4d4242
mov dword [esp + 0x1b4], 0x344d7846
mov dword [esp + 0x1b8], 0x4b557946
mov dword [esp + 0x1bc], 0x744d6a48
mov dword [esp + 0x1c0], 0x36594343
mov dword [esp + 0x1c4], 0x544d4344
mov dword [esp + 0x1c8], 0x686b5447
mov dword [esp + 0x1cc], 0x6963794e
mov dword [esp + 0x1d0], 0x6a6f335a
mov dword [esp + 0x1d4], 0x4159474a
mov dword [esp + 0x1d8], 0x2f56684d
mov dword [esp + 0x1dc], 0x4e6f6d41
mov dword [esp + 0x1e0], 0x3877574f
mov dword [esp + 0x1e4], 0x37554348
mov dword [esp + 0x1e8], 0x66417844
mov dword [esp + 0x1ec], 0x48494346
mov dword [esp + 0x1f0], 0x6f674448
mov dword [esp + 0x1f4], 0x36517944
mov dword [esp + 0x1f8], 0x2b4a674e
mov dword [esp + 0x1fc], 0x7a347950
mov dword [esp + 0x200], 0x72306a46
mov dword [esp + 0x204], 0x53457846
mov dword [esp + 0x208], 0x775a794f
mov dword [esp + 0x20c], 0x31553344
mov dword [esp + 0x210], 0x30495243
mov dword [esp + 0x214], 0x5055694d
mov dword [esp + 0x218], 0x73596d4c
mov dword [esp + 0x21c], 0x77635144
mov dword [esp + 0x220], 0x4149414f
mov dword [esp + 0x224], 0x73434141
call fcn.00450208
lea ecx, [esp + 0x3a0]
call fcn.005300dd
add esp, 0xc
and dword [esp + 0x3c4], 0
or ebx, 1
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.00451547
push 0
push eax
mov ecx, esi
call fcn.0043d462
cmp byte [eax + 8], 0
je 0x501308
mov dword [esp + 0x20c], 0x6a4d7a4c
mov dword [esp + 0x210], 0x4a59774b
mov dword [esp + 0x214], 0x44515243
mov dword [esp + 0x218], 0x4a454341
mov dword [esp + 0x21c], 0x6b4d4346
mov dword [esp + 0x220], 0x4630794c
mov dword [esp + 0x224], 0x7959684d
mov dword [esp + 0x228], 0x64737844
mov dword [esp + 0x22c], 0x38687859
mov dword [esp + 0x230], 0x67784142
mov dword [esp + 0x234], 0x5a415347
mov dword [esp + 0x238], 0x57597a43
mov dword [esp + 0x23c], 0x51454247
mov dword [esp + 0x240], 0x75635348
mov dword [esp + 0x244], 0x5563444e
mov dword [esp + 0x248], 0x4f594348
mov dword [esp + 0x24c], 0x376b685a
mov dword [esp + 0x250], 0x4a636747
mov dword [esp + 0x254], 0x6d676a50
mov dword [esp + 0x258], 0x64637747
mov dword [esp + 0x25c], 0x32556741
mov dword [esp + 0x260], 0x43557a41
mov dword [esp + 0x264], 0x77686a49
mov dword [esp + 0x268], 0x6a733359
mov dword [esp + 0x26c], 0x6b56444d
mov dword [esp + 0x270], 0x5134694b
mov dword [esp + 0x274], 0x4e55784f
mov dword [esp + 0x278], 0x59344465
mov dword [esp + 0x27c], 0x756b6e42
mov dword [esp + 0x280], 0x69563250
mov dword [esp + 0x284], 0x64514347
mov dword [esp + 0x288], 0x4e6f7a43
mov dword [esp + 0x28c], 0x39554448
mov dword [esp + 0x290], 0x304e4841
mov dword [esp + 0x294], 0x67744364
mov dword [esp + 0x298], 0x4c417844
mov dword [esp + 0x29c], 0x46345759
mov dword [esp + 0x2a0], 0x72735145
mov dword [esp + 0x2a4], 0x7a517a4a
mov dword [esp + 0x2a8], 0x73556a4a
mov dword [esp + 0x2ac], 0x46454146
mov dword [esp + 0x2b0], 0x59413241
mov dword [esp + 0x2b4], 0x79455865
mov dword [esp + 0x2b8], 0x3642484b
mov dword [esp + 0x2bc], 0x4c347a4f
mov dword [esp + 0x2c0], 0x75455264
mov dword [esp + 0x2c4], 0x776f424d
mov dword [esp + 0x2c8], 0x394a524b
mov dword [esp + 0x2cc], 0x34426941
mov dword [esp + 0x2d0], 0x2f4d534c
mov dword [esp + 0x2d4], 0x47637a44
mov dword [esp + 0x2d8], 0x3567774e
mov dword [esp + 0x2dc], 0x584d4447
mov dword [esp + 0x2e0], 0x4f73334a
mov dword [esp + 0x2e4], 0x6a644444
mov dword [esp + 0x2e8], 0x394a5142
mov dword [esp + 0x2ec], 0x2f35445a
mov dword [esp + 0x2f0], 0x2b31684a
mov dword [esp + 0x2f4], 0x4555694b
mov dword [esp + 0x2f8], 0x58416a49
mov dword [esp + 0x2fc], 0x486f6a43
mov dword [esp + 0x300], 0x31346a49
mov dword [esp + 0x304], 0x5267424c
mov dword [esp + 0x308], 0x44596e64
mov dword [esp + 0x30c], 0x38496963
mov dword [esp + 0x310], 0x6e414250
mov dword [esp + 0x314], 0x66556a50
mov dword [esp + 0x318], 0x37636965
mov dword [esp + 0x31c], 0x55516842
mov dword [esp + 0x320], 0x6d46694d
mov dword [esp + 0x324], 0x596f514e
mov dword [esp + 0x328], 0x434d4341
mov dword [esp + 0x32c], 0x31316966
mov dword [esp + 0x330], 0x72674242
mov dword [esp + 0x334], 0x496b6a4e
mov dword [esp + 0x338], 0x694d7a4c
mov dword [esp + 0x33c], 0x48416d4c
mov dword [esp + 0x340], 0x6c557743
mov dword [esp + 0x344], 0x6d74784b
mov dword [esp + 0x348], 0x68456743
mov dword [esp + 0x34c], 0x354e6944
push 0
sub esp, 0xc
mov dword [esp + 0x360], 0x56457743
mov ecx, esp
mov dword [esp + 0x364], 0x4177474c
lea eax, [esp + 0x36c]
mov dword [esp + 0x368], 0x30444141
lea edx, [esp + 0x21c]
push ecx
push eax
push edx
call fcn.00450208
lea ecx, [esp + 0x388]
call fcn.005300dd
add esp, 0xc
mov dword [esp + 0x3c4], 1
or ebx, 2
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.00451547
push 0
push eax
mov ecx, esi
call fcn.0043d462
mov byte [esp + 0x17], 0
cmp byte [eax + 8], 4
je 0x50130d
mov byte [esp + 0x17], 1
test bl, 2
je 0x501321
lea ecx, [esp + 0x378]
and ebx, 0xfffffffd
call fcn.004513e1
or dword [esp + 0x3c0], 0xffffffff
test bl, 1
je 0x50133d
lea ecx, [esp + 0x390]
and ebx, 0xfffffffe
call fcn.004513e1
cmp byte [esp + 0x17], 0
jne 0x5016d9
push 0
sub esp, 0xc
mov dword [esp + 0x8c], 0x6a4d7a4c
mov ecx, esp
mov dword [esp + 0x90], 0x314d784b
lea eax, [esp + 0x12b]
mov dword [esp + 0x94], 0x326b4149
lea edx, [esp + 0x8c]
mov dword [esp + 0x98], 0x45386d4a
push ecx
push eax
push edx
mov dword [esp + 0xa8], 0x63345443
mov dword [esp + 0xac], 0x6749334e
mov dword [esp + 0xb0], 0x6d34784a
mov dword [esp + 0xb4], 0x6b455347
mov dword [esp + 0xb8], 0x61596a4e
mov dword [esp + 0xbc], 0x42635749
mov dword [esp + 0xc0], 0x374e6d45
mov dword [esp + 0xc4], 0x62676765
mov dword [esp + 0xc8], 0x6c38694a
mov dword [esp + 0xcc], 0x476b6942
mov dword [esp + 0xd0], 0x41775263
mov dword [esp + 0xd4], 0x46304866
mov dword [esp + 0xd8], 0x7251674a
mov dword [esp + 0xdc], 0x72497844
mov dword [esp + 0xe0], 0x7a46514b
mov dword [esp + 0xe4], 0x53635748
mov dword [esp + 0xe8], 0x3564424d
mov dword [esp + 0xec], 0x716f6746
mov dword [esp + 0xf0], 0x796c7966
mov dword [esp + 0xf4], 0x33525847
mov dword [esp + 0xf8], 0x574d5447
mov dword [esp + 0xfc], 0x6d34414d
mov dword [esp + 0x100], 0x73675241
mov dword [esp + 0x104], 0x4b634266
mov dword [esp + 0x108], 0x53777a42
mov dword [esp + 0x10c], 0x5834535a
mov dword [esp + 0x110], 0x39786864
mov dword [esp + 0x114], 0x7938424f
mov dword [esp + 0x118], 0x38467843
mov dword [esp + 0x11c], 0x7846794f
mov dword [esp + 0x120], 0x2f55444e
mov dword [esp + 0x124], 0x2b30774a
mov dword [esp + 0x128], 0x34684248
mov dword [esp + 0x12c], 0x63674866
mov dword [esp + 0x130], 0x41414159
mov word [esp + 0x134], 0x4741
mov byte [esp + 0x136], 0x38
call fcn.00450208
lea ecx, [esp + 0x394]
call fcn.005300dd
add esp, 0xc
mov dword [esp + 0x3c4], 2
or ebx, 4
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.00451547
push 0
push eax
mov ecx, esi
call fcn.0043d462
mov ecx, dword [esp + 0x368]
push dword [eax]
call fcn.00520f02
test eax, eax
je 0x50169d
push 0
sub esp, 0xc
mov dword [esp + 0x2c], 0x6a4d7a4c
mov ecx, esp
mov dword [esp + 0x30], 0x51597a4b
lea eax, [esp + 0x87]
mov dword [esp + 0x34], 0x47596e47
lea edx, [esp + 0x2c]
mov dword [esp + 0x38], 0x6e596766
push ecx
push eax
push edx
mov dword [esp + 0x48], 0x45495447
mov dword [esp + 0x4c], 0x705a484d
mov dword [esp + 0x50], 0x65306a44
mov dword [esp + 0x54], 0x65497965
mov dword [esp + 0x58], 0x61597749
mov dword [esp + 0x5c], 0x2f383246
mov dword [esp + 0x60], 0x4b51784d
mov dword [esp + 0x64], 0x5a517741
mov dword [esp + 0x68], 0x62415266
mov dword [esp + 0x6c], 0x51597866
mov dword [esp + 0x70], 0x714a6743
mov dword [esp + 0x74], 0x58307a4b
mov dword [esp + 0x78], 0x796b5248
mov dword [esp + 0x7c], 0x6745774c
mov dword [esp + 0x80], 0x6a455348
mov dword [esp + 0x84], 0x67597944
mov dword [esp + 0x88], 0x4e635147
mov dword [esp + 0x8c], 0x4141514c
mov word [esp + 0x90], 0x4441
mov byte [esp + 0x92], 0x77
call fcn.00450208
lea ecx, [esp + 0x3ac]
call fcn.005300dd
add esp, 0xc
mov dword [esp + 0x3c4], 3
or ebx, 8
mov ecx, eax
mov dword [esp + 0x1c], ebx
call fcn.00451547
push 0
push eax
mov ecx, esi
call fcn.0043d462
mov ecx, dword [esp + 0x36c]
push dword [eax]
call fcn.00520f02
mov byte [esp + 0x17], 0
test eax, eax
jne 0x5016a2
mov byte [esp + 0x17], 1
test bl, 8
je 0x5016b6
lea ecx, [esp + 0x39c]
and ebx, 0xfffffff7
call fcn.004513e1
or dword [esp + 0x3c0], 0xffffffff
test bl, 4
je 0x5016d2
lea ecx, [esp + 0x384]
and ebx, 0xfffffffb
call fcn.004513e1
cmp byte [esp + 0x17], 0
jne 0x501731
lea ecx, [esp + 0x3a8]
call fcn.00449fb3
lea eax, [esp + 0x370]
mov ecx, edi
push eax
call fcn.0043db2b
push eax
lea ecx, [esp + 0x3ac]
call fcn.004389b2
test al, al
je 0x500c05
xor al, al
mov ecx, dword [esp + 0x3b8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3a0]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [esp + 0x364]
mov al, 1
mov dword [ecx], esi
jmp 0x50170b