Function at 0x48fdd2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x6adcb5
call fcn.00664608
sub esp, 0x28
push ebx
mov ebx, ecx
push esi
mov dword [ebp - 0x1c], ebx
push edi
mov dword [ebx + 4], 0x6df1d0
and dword [ebp - 4], 0
lea ecx, [ebx + 0x20]
mov dword [ebx], 0x6df634
mov dword [ebx + 4], 0x6df7d8
call fcn.0048fd6b
xor ecx, ecx
mov dword [ebx + 0x44], ecx
mov dword [ebx + 0x48], ecx
mov dword [ebx + 0x4c], ecx
fld dword [0x6e1674]
xor eax, eax
fstp dword [ebx + 0x58]
mov dword [ebx + 0x54], ecx
mov dword [ebx + 0x5c], ecx
mov dword [ebx + 0x6c], ecx
mov dword [ebx + 0x70], 7
mov word [ebx + 0x5c], ax
push 0xf
pop edi
mov dword [ebx + 0x74], ecx
mov dword [ebx + 0x84], ecx
mov dword [ebx + 0x88], edi
mov byte [ebx + 0x74], cl
mov dword [ebx + 0x8c], ecx
mov dword [ebx + 0x9c], ecx
mov dword [ebx + 0xa0], edi
mov byte [ebx + 0x8c], cl
mov word [ebx + 0xa4], 1
mov dword [ebx + 0xa8], ecx
mov dword [ebx + 0xb8], ecx
mov dword [ebx + 0xbc], edi
mov byte [ebx + 0xa8], cl
mov dword [ebx + 0xc0], ecx
mov dword [ebx + 0xc4], ecx
mov dword [ebx + 0xc8], ecx
mov dword [ebx + 0xcc], ecx
mov word [ebx + 0xd0], cx
mov dword [ebx + 0xec], ecx
lea ecx, [ebx + 0xfc]
mov byte [ebp - 4], 6
call fcn.0045ec28
and byte [ebx + 0x147], 0xef
lea esi, [ebx + 0x180]
xor ecx, ecx
mov byte [ebp - 4], 7
mov byte [ebx + 0x128], cl
mov dword [ebx + 0x130], ecx
mov dword [ebx + 0x134], ecx
mov eax, dword [0x7bb23c]
mov dword [ebx + 0x14c], eax
mov dword [ebp - 0x14], esi
push esi
mov dword [esi], ecx
mov dword [esi + 4], ecx
call fcn.0044d351
mov dword [esi], eax
lea esi, [ebx + 0x188]
mov byte [ebp - 4], 8
mov dword [ebp - 0x14], esi
and dword [esi], 0
and dword [esi + 4], 0
push esi
call fcn.004512fe
mov dword [esi], eax
xor esi, esi
mov dword [ebx + 0x190], esi
mov dword [ebx + 0x194], esi
mov dword [ebx + 0x198], esi
lea ecx, [ebx + 0x19c]
mov byte [ebp - 4], 0xa
call fcn.0044074b
lea ecx, [ebx + 0x1b4]
mov byte [ebp - 4], 0xb
call fcn.0044074b
lea ecx, [ebx + 0x1c8]
mov byte [ebp - 4], 0xc
call fcn.0044074b
mov dword [ebx + 0x1e0], esi
mov dword [ebx + 0x1e4], esi
mov dword [ebx + 0x1e8], esi
lea ecx, [ebx + 0x1ec]
mov byte [ebp - 4], 0xe
call fcn.0044074b
xor eax, eax
mov dword [ebx + 0x214], edi
mov dword [ebx + 0x200], eax
mov dword [ebx + 0x210], eax
mov byte [ebx + 0x200], al
mov dword [ebx + 0x218], eax
mov dword [ebx + 0x228], eax
mov dword [ebx + 0x22c], edi
mov byte [ebx + 0x218], al
mov dword [ebx + 0x238], eax
mov dword [ebx + 0x23c], eax
mov dword [ebx + 0x240], eax
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 0x12
lea ecx, [ebx + 0x244]
push eax
mov dword [ebp - 0x14], ecx
lea eax, [ebp - 0x14]
fldz
push eax
fstp dword [ebp - 0x14]
call fcn.00480df4
lea ecx, [ebx + 0x264]
mov byte [ebp - 4], 0x13
call fcn.0044074b
lea ecx, [ebx + 0x278]
mov byte [ebp - 4], 0x14
call fcn.0044074b
lea eax, [ebx + 0x338]
and dword [eax], esi
and dword [eax + 4], esi
lea esi, [ebx + 0x3f8]
mov ecx, esi
call fcn.00474d71
xor edx, edx
mov dword [esi], 0x6df5e0
mov dword [esi + 0x48], edx
push 7
pop ecx
xor eax, eax
mov dword [ebx + 0x448], edx
mov dword [ebx + 0x458], edx
mov dword [ebx + 0x45c], ecx
mov word [ebx + 0x448], ax
mov dword [ebx + 0x460], edx
mov dword [ebx + 0x470], edx
mov dword [ebx + 0x474], ecx
mov word [ebx + 0x460], ax
mov dword [ebx + 0x478], edx
mov dword [ebx + 0x488], edx
mov dword [ebx + 0x48c], ecx
mov word [ebx + 0x478], ax
mov dword [ebx + 0x490], edx
mov dword [ebx + 0x4a0], edx
mov dword [ebx + 0x4a4], ecx
mov word [ebx + 0x490], ax
mov dword [ebx + 0x4a8], edx
mov dword [ebx + 0x4b8], edx
mov dword [ebx + 0x4bc], ecx
mov word [ebx + 0x4a8], ax
mov dword [ebx + 0x4d4], edx
mov dword [ebx + 0x4e4], edx
mov dword [ebx + 0x4e8], edi
mov byte [ebx + 0x4d4], dl
mov dword [ebx + 0x4ec], edx
mov dword [ebx + 0x4fc], edx
mov dword [ebx + 0x500], edi
mov byte [ebx + 0x4ec], dl
mov dword [ebx + 0x508], edx
mov dword [ebx + 0x518], edx
mov dword [ebx + 0x51c], edi
mov byte [ebx + 0x508], dl
mov dword [ebx + 0x54c], edx
mov dword [ebx + 0x55c], edx
mov dword [ebx + 0x560], ecx
mov word [ebx + 0x54c], ax
mov dword [ebx + 0x564], edx
mov dword [ebx + 0x574], edx
mov dword [ebx + 0x578], ecx
mov word [ebx + 0x564], ax
mov dword [ebx + 0x57c], edx
mov dword [ebx + 0x58c], edx
mov dword [ebx + 0x590], edi
mov byte [ebx + 0x57c], dl
mov dword [ebx + 0x594], edx
mov dword [ebx + 0x5a4], edx
mov dword [ebx + 0x5a8], ecx
mov word [ebx + 0x594], ax
lea ecx, [ebx + 0x5f0]
mov byte [ebp - 4], 0x23
mov dword [ebx + 0x5e8], edx
call fcn.0044074b
xor esi, esi
mov byte [ebp - 4], 0x24
lea ecx, [ebx + 0x620]
mov dword [ebx + 0x61c], esi
call fcn.0048efb1
lea eax, [ebp - 0xd]
mov dword [ebx + 0x670], esi
lea ecx, [ebx + 0x688]
mov dword [ebx + 0x674], esi
push eax
mov dword [ebp - 0x14], ecx
lea eax, [ebp - 0x14]
fldz
push eax
fstp dword [ebp - 0x14]
mov dword [ebx + 0x678], esi
mov dword [ebx + 0x680], esi
call fcn.00480df4
lea ecx, [ebx + 0x6c0]
mov byte [ebp - 4], 0x25
call fcn.004bff34
xor ecx, ecx
mov dword [ebx + 0x6d8], ecx
mov dword [ebx + 0x6e8], ecx
mov dword [ebx + 0x6ec], edi
mov byte [ebx + 0x6d8], cl
xor eax, eax
mov dword [ebx + 0x6f0], ecx
mov dword [ebx + 0x700], ecx
mov dword [ebx + 0x704], 7
mov word [ebx + 0x6f0], ax
mov dword [ebx + 0x708], ecx
mov dword [ebx + 0x718], ecx
mov dword [ebx + 0x71c], 7
mov word [ebx + 0x708], ax
lea esi, [ebx + 0x720]
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x14], esi
push esi
mov dword [esi], ecx
mov dword [esi + 4], ecx
call fcn.0047f510
mov dword [esi], eax
xor edx, edx
xor eax, eax
push 7
pop ecx
mov dword [ebx + 0x728], edx
mov dword [ebx + 0x738], edx
mov dword [ebx + 0x73c], ecx
mov word [ebx + 0x728], ax
mov dword [ebx + 0x740], edx
mov dword [ebx + 0x750], edx
mov dword [ebx + 0x754], edi
mov byte [ebx + 0x740], dl
mov dword [ebx + 0x758], edx
mov dword [ebx + 0x768], edx
mov dword [ebx + 0x76c], ecx
mov word [ebx + 0x758], ax
lea ecx, [ebx + 0x7a8]
mov byte [ebp - 4], 0x2c
mov byte [ebx + 0x784], dl
mov dword [ebx + 0x788], 1
mov dword [ebx + 0x78c], edx
call fcn.0044074b
lea ecx, [ebx + 0x7bc]
mov byte [ebp - 4], 0x2d
call fcn.0044074b
xor eax, eax
mov dword [ebx + 0x7d0], eax
mov dword [ebx + 0x7d4], eax
mov dword [ebx + 0x7d8], eax
mov dword [ebx + 0x7dc], eax
mov dword [ebx + 0x7e0], eax
mov byte [ebx + 0x7e4], al
mov dword [ebx + 0x7e8], 0x6df620
mov dword [ebx + 0x7ec], ebx
push 0xa8
mov byte [ebp - 4], 0x31
call fcn.00664379
mov dword [ebp - 0x14], eax
pop ecx
test eax, eax
je 0x4902fd
push ebx
mov ecx, eax
call fcn.00490963
xor ecx, ecx
jmp 0x490301
xor ecx, ecx
mov eax, ecx
and byte [ebx + 0x147], 0xfc
mov dword [ebx + 0xc8], eax
xor eax, eax
mov word [ebx + 0x13c], ax
mov word [ebx + 0x138], ax
mov al, byte [ebx + 0x150]
and al, 0xcb
mov byte [ebx + 0x6a8], cl
or al, 8
mov dword [ebx + 0x6b0], ecx
mov dword [ebx + 0x6b4], ecx
mov dword [ebx + 0x2b8], ecx
mov dword [ebx + 0x2bc], ecx
mov dword [ebx + 0x2b0], ecx
mov dword [ebx + 0x2b4], ecx
mov dword [ebx + 0x298], ecx
mov dword [ebx + 0x29c], ecx
mov dword [ebx + 0x290], ecx
mov dword [ebx + 0x294], ecx
mov dword [ebx + 0x2a0], ecx
mov dword [ebx + 0x2a4], ecx
mov dword [ebx + 0x2a8], ecx
mov dword [ebx + 0x2ac], ecx
mov dword [ebx + 0x2c0], ecx
mov dword [ebx + 0x2c4], ecx
mov dword [ebx + 0x2c8], ecx
mov dword [ebx + 0x2cc], ecx
mov dword [ebx + 0x2d0], ecx
mov dword [ebx + 0x2d4], ecx
mov dword [ebx + 0x2d8], ecx
mov dword [ebx + 0x2dc], ecx
mov byte [ebx + 0x2e0], cl
mov byte [ebx + 0x13a], cl
mov dword [ebx + 0xf0], ecx
mov byte [ebx + 0x150], al
mov byte [ebx + 0x154], 1
mov dword [ebx + 0x160], ecx
call fcn.0067800d
cdq
mov ecx, 0xe10
idiv ecx
push 0
mov eax, edx
cdq
mov esi, eax
mov edi, edx
call fcn.0048918f
sub eax, esi
mov dword [ebx + 0x178], eax
sbb edx, edi
xor eax, eax
mov dword [ebx + 0x17c], edx
lea edi, [ebx + 0x164]
stosd dword es:[edi], eax
xor ecx, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov al, byte [ebx + 0x150]
or byte [ebx + 0x148], 2
and al, 0x3f
or al, 0x40
mov dword [ebx + 0x6b8], ecx
mov dword [ebx + 0x6bc], ecx
mov dword [ebx + 0x604], ecx
mov dword [ebx + 0x610], ecx
mov dword [ebx + 0x614], ecx
mov dword [ebx + 0x608], ecx
mov dword [ebx + 0x60c], ecx
mov byte [ebx + 0x150], al
mov dword [ebx + 0x2f0], ecx
mov word [ebx + 0x145], cx
mov dword [ebx + 0x318], ecx
mov dword [ebx + 0x31c], ecx
mov dword [ebx + 0x310], ecx
mov dword [ebx + 0x770], ecx
mov dword [ebx + 0x774], ecx
mov dword [ebx + 0x778], ecx
mov dword [ebx + 0x77c], ecx
mov dword [ebx + 0x28c], ecx
push 4
push 0x20
push 0x10
push 5
mov dword [ebx + 0x1b0], ecx
mov dword [ebx + 0x1dc], ecx
call fcn.004f3718
xor edx, edx
and byte [ebx + 0x148], 0xf3
mov dword [ebx + 0x1dc], eax
lea edi, [ebx + 0x369]
mov dword [ebx + 0x340], edx
mov dword [ebx + 0x344], edx
mov dword [ebx + 0x348], edx
mov dword [ebx + 0x34c], edx
mov dword [ebx + 0x350], edx
mov dword [ebx + 0x354], edx
mov dword [ebx + 0x358], edx
mov dword [ebx + 0x35c], edx
mov dword [ebx + 0x360], edx
mov dword [ebx + 0x364], edx
mov dword [ebx + 0x320], edx
mov dword [ebx + 0x324], edx
mov dword [ebx + 0x330], edx
mov dword [ebx + 0x334], edx
mov dword [ebx + 0xe4], edx
mov dword [ebx + 0xe8], edx
mov dword [ebx + 0x2e4], edx
mov dword [ebx + 0x2e8], edx
mov dword [ebx + 0x2ec], edx
mov dword [ebx + 0x114], edx
mov dword [ebx + 0x110], edx
mov dword [ebx + 0x11c], edx
mov dword [ebx + 0x120], edx
mov dword [ebx + 0x118], edx
mov dword [ebx + 0x124], edx
push 0x3c
pop esi
mov dword [ebx + 0x230], esi
mov eax, dword [0x791cb0]
or dword [ebx + 0x140], 0xffffffff
and byte [ebx + 0x151], 0xfc
and byte [ebx + 0x148], 0xef
mov dword [ebx + 0xf4], eax
mov al, byte [ebx + 0x147]
and al, 0x13
mov dword [ebx + 0x328], edx
or al, 0x40
mov word [ebx + 0x13e], 0x400
mov byte [ebx + 0x147], al
xor eax, eax
mov dword [ebx + 0x5d0], edx
mov byte [ebx + 0x144], dl
mov byte [ebx + 0x152], 0xd
mov byte [ebx + 0x368], dl
stosd dword es:[edi], eax
push 0x180
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov byte [ebx + 0x138], dl
mov dword [ebx + 0x504], edx
mov dword [ebx + 0x520], edx
mov byte [ebx + 0x524], dl
mov word [ebx + 0x539], dx
mov dword [ebx + 0x540], edx
mov dword [ebx + 0x544], edx
mov dword [ebx + 0x548], edx
mov dword [ebx + 0x794], edx
mov dword [ebx + 0x5ac], edx
mov dword [ebx + 0x5b0], edx
mov dword [ebx + 0x5b4], edx
mov dword [ebx + 0x5b8], edx
mov dword [ebx + 0x5bc], edx
and byte [ebx + 0x150], 0xfc
call fcn.00664379
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x32
test eax, eax
je 0x490637
push ebx
mov ecx, eax
call fcn.004f96f5
jmp 0x490639
xor eax, eax
push 0x178
mov byte [ebp - 4], 0x31
mov dword [ebx + 0xd8], eax
call fcn.00664379
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x33
test eax, eax
je 0x490665
push ebx
mov ecx, eax
call fcn.0052584d
xor edx, edx
jmp 0x490669
xor edx, edx
mov eax, edx
mov dword [ebx + 0xcc], eax
mov dword [ebx + 0xdc], edx
mov ecx, dword [ebx + 0xd8]
mov al, byte [0x791db9]
mov byte [ebp - 4], 0x31
mov byte [ebp - 0xd], 1
mov byte [ecx + 0x8a], al
mov dword [ebx + 0xe0], edx
mov dword [ebx + 0xf8], edx
mov byte [ebx + 0x153], dl
mov byte [ebx + 0x155], dl
mov dword [ebx + 0x308], edx
mov dword [ebx + 0x30c], edx
and byte [ebx + 0x6d4], 0xfe
mov dword [ebx + 0x3f0], edx
call fcn.0046bca7
lea ecx, [ebx + 0x3f8]
mov byte [ebp - 4], 0x34
call fcn.0046aac8
mov byte [ebp - 4], 0x35
call fcn.0046bce8
xor eax, eax
mov byte [ebp - 4], 0x31
mov dword [ebx + 0x3e8], eax
mov dword [ebx + 0x3ec], eax
mov dword [ebx + 0x3e0], eax
mov dword [ebx + 0x3e4], eax
mov dword [ebx + 0x158], eax
mov dword [ebx + 0x15c], CreateStatusWindowA
mov dword [ebx + 0x2f4], eax
mov dword [ebx + 0x2f8], eax
and byte [ebx + 0x2fc], 0xfe
mov byte [ebx + 0x2fd], al
mov dword [ebx + 0x4c0], eax
mov dword [ebx + 0x4c4], eax
mov dword [ebx + 0x4c8], eax
mov dword [ebx + 0x4cc], eax
call fcn.0045f33e
xor edx, edx
div esi
mov dword [ebx + 0x300], edx
call fcn.0045f33e
xor edx, edx
lea edi, [ebx + 8]
mov ecx, 0x12c
div ecx
xor eax, eax
xor ecx, ecx
mov dword [ebx + 0x304], edx
mov dword [ebx + 0x4d0], ecx
stosd dword es:[edi], eax
push 0x14
pop edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebx + 0x1c], edx
lea edi, [ebx + 0x525]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [0x791df4]
mov dword [ebx + 0x5c0], eax
mov eax, dword [0x791df0]
mov dword [ebx + 0x5c8], eax
mov eax, dword [0x791df8]
mov dword [ebx + 0x5c4], eax
mov dword [ebx + 0x5cc], ecx
and byte [ebx + 0x148], 0xfe
and byte [ebx + 0x5dc], 0xfe
mov dword [ebx + 0x5d8], ecx
mov dword [ebx + 0x5d4], ecx
mov dword [ebx + 0x5e0], ecx
mov dword [ebx + 0x5e4], ecx
mov dword [ebx + 0x5ec], ecx
mov byte [ebx + 0x618], cl
mov dword [ebx + 0x234], ecx
mov byte [ebx + 0x785], cl
mov byte [ebx + 0x790], cl
and byte [ebx + 0x151], 0xfb
push 6
pop esi
mov dword [ebx + 0x798], esi
or dword [ebx + 0x7a0], 0xffffffff
or dword [ebx + 0x7a4], 0xffffffff
and byte [ebx + 0x37d], 0xfe
and byte [ebx + 0x151], 0xf7
push edx
call fcn.00664379
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x36
test eax, eax
je 0x490836
push ebx
mov ecx, eax
call fcn.0048f74c
jmp 0x490838
xor eax, eax
push 0x20
mov byte [ebp - 4], 0x31
mov dword [ebx + 0xd4], eax
call fcn.00664379
pop ecx
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x37
test eax, eax
je 0x49085f
push ebx
mov ecx, eax
call fcn.0048f712
jmp 0x490861
xor eax, eax
push eax
mov ecx, ebx
mov byte [ebp - 4], 0x31
call fcn.004929d4
push ebx
call fcn.0052ac07
mov eax, dword [0x7ba8dc]
shr eax, 2
test al, 1
je 0x49088d
push ebx
call fcn.004b95ed
push eax
mov ecx, ebx
call fcn.004929d4
push ebx
mov ecx, 0x7920c8
call fcn.00491f05
xor eax, eax
lea edi, [ebp - 0x34]
mov byte [ebx + 0x7f0], al
mov ecx, esi
mov dword [ebx + 0x7f8], eax
mov dword [ebx + 0x7fc], eax
mov dword [ebx + 0x380], eax
mov dword [ebx + 0x384], eax
mov dword [ebx + 0x388], eax
mov dword [ebx + 0x38c], eax
mov dword [ebx + 0x390], eax
mov dword [ebx + 0x394], eax
mov dword [ebx + 0x398], eax
mov dword [ebx + 0x39c], eax
mov dword [ebx + 0x3a0], eax
mov dword [ebx + 0x3a4], eax
mov dword [ebx + 0x3a8], eax
mov dword [ebx + 0x3ac], eax
mov dword [ebx + 0x3b0], eax
mov dword [ebx + 0x3b4], eax
mov dword [ebx + 0x3b8], eax
mov dword [ebx + 0x3bc], eax
rep stosd dword es:[edi], eax
mov dword [ebx + 0x3c0], eax
lea edi, [ebx + 0x3c8]
mov dword [ebx + 0x3c4], eax
mov ecx, esi
push 0x7bb0a8
lea eax, [ebp - 0x18]
lea esi, [ebp - 0x34]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.0050f25c
push eax
lea ecx, [ebx + 0x338]
call fcn.00491b89
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x490952
call fcn.004aeb79
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret