Function at 0x4b7017
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5ab0bf
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0x290], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0x2a8]
mov dword fs:[0], eax
mov eax, ecx
mov dword [esp + 0x100], eax
mov ecx, dword [ebp + 0xc]
xor ebx, ebx
mov esi, dword [ebp + 8]
mov dword [esp + 0x260], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x258], ecx
push ecx
mov ecx, eax
mov dword [esp + 0x260], ebx
call fcn.004b4acb
test al, al
je 0x4b7ce4
push esi
lea ecx, [esp + 0x28c]
mov byte [esp + 0x1b], bl
mov dword [esp + 0x28c], ebx
call fcn.004c2785
mov dword [esp + 0x2b0], ebx
lea edi, [esp + 0x290]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, ebx
mov dword [esp + 0x290], ebx
mov dword [esp + 0x294], edi
mov dword [esp + 0x298], ebx
mov byte [esp + 0x2b0], 1
lea eax, [esp + 0x284]
push eax
push ebx
sub esp, 0xc
mov dword [esp + 0x298], ebx
mov ecx, esp
mov dword [esp + 0x2a0], ebx
lea eax, [esp + 0xd6]
mov dword [esp + 0x30], 0x52637a62
lea edx, [esp + 0x30]
mov dword [esp + 0x34], 0x7a5a6943
push ecx
push eax
push edx
mov dword [esp + 0x44], 0x78516943
mov dword [esp + 0x48], 0x756b7949
mov dword [esp + 0x4c], 0x39513241
mov dword [esp + 0x50], 0x42416e4b
mov dword [esp + 0x54], 0x44734459
mov dword [esp + 0x58], 0x50736765
mov dword [esp + 0x5c], 0x716f6e59
mov dword [esp + 0x60], 0x6a6f4250
mov dword [esp + 0x64], 0x524d6d4a
mov dword [esp + 0x68], 0x7a464750
mov dword [esp + 0x6c], 0x385a4366
mov dword [esp + 0x70], 0x68496866
mov dword [esp + 0x74], 0x644d6744
mov dword [esp + 0x78], 0x50596944
mov dword [esp + 0x7c], 0x7942694f
mov dword [esp + 0x80], 0x35304466
mov dword [esp + 0x84], 0x2b674848
mov dword [esp + 0x88], 0x57554247
mov dword [esp + 0x8c], 0x3856444f
mov dword [esp + 0x90], 0x53635749
mov dword [esp + 0x94], 0x31567942
mov dword [esp + 0x98], 0x466f414a
mov dword [esp + 0x9c], 0x63737a42
mov dword [esp + 0xa0], 0x6e594446
mov dword [esp + 0xa4], 0x4d775462
mov dword [esp + 0xa8], 0x4e775148
mov dword [esp + 0xac], 0x6651484f
mov dword [esp + 0xb0], 0x74454363
mov dword [esp + 0xb4], 0x2f494145
mov dword [esp + 0xb8], 0x6538544c
mov dword [esp + 0xbc], 0x5677694f
mov dword [esp + 0xc0], 0x4c595350
mov dword [esp + 0xc4], 0x716f424d
mov dword [esp + 0xc8], 0x41554245
mov dword [esp + 0xcc], 0x374d445a
mov dword [esp + 0xd0], 0x4f38334b
mov dword [esp + 0xd4], 0x61677a48
mov dword [esp + 0xd8], 0x6e597947
mov dword [esp + 0xdc], 0x41414141
mov word [esp + 0xe0], 0x7764
call fcn.00450208
lea ecx, [esp + 0x28c]
call fcn.004c2ee6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x2b8], 2
call fcn.00451547
push eax
lea eax, [esp + 0x294]
push eax
lea ecx, [esp + 0x294]
call fcn.004b9c2e
lea ecx, [esp + 0x278]
mov byte [esp + 0x2b0], 4
call fcn.004513e1
mov eax, dword [esp + 0x28c]
cmp dword [eax - 0xc], 0
je 0x4b76ab
lea esi, [esp + 0x14c]
lea edi, [esp + 0x24f]
push eax
lea ecx, [esp + 0x1c]
call fcn.004c2785
lea eax, [esp + 0x18]
mov byte [esp + 0x2b0], 5
push eax
lea ecx, [esp + 0x294]
call fcn.004bb16e
mov byte [esp + 0x2b0], 4
mov ecx, dword [esp + 0x18]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea eax, [esp + 0x284]
mov dword [esp + 0x14c], 0x6e457962
mov dword [esp + 0x150], 0x58385266
mov dword [esp + 0x154], 0x466b7764
mov dword [esp + 0x158], 0x775a6a65
mov dword [esp + 0x15c], 0x46416948
mov dword [esp + 0x160], 0x79775463
mov dword [esp + 0x164], 0x6655794a
mov dword [esp + 0x168], 0x786c5241
mov dword [esp + 0x16c], 0x6c735343
mov dword [esp + 0x170], 0x394d6845
mov dword [esp + 0x174], 0x39745146
mov dword [esp + 0x178], 0x6f555244
mov dword [esp + 0x17c], 0x394a5249
mov dword [esp + 0x180], 0x764d6942
mov dword [esp + 0x184], 0x346b4246
mov dword [esp + 0x188], 0x3964794d
mov dword [esp + 0x18c], 0x37644144
mov dword [esp + 0x190], 0x766f4242
mov dword [esp + 0x194], 0x2b706849
mov dword [esp + 0x198], 0x2b346d50
mov dword [esp + 0x19c], 0x6a5a434e
mov dword [esp + 0x1a0], 0x73787842
mov dword [esp + 0x1a4], 0x42597750
mov dword [esp + 0x1a8], 0x71414147
mov dword [esp + 0x1ac], 0x35555747
mov dword [esp + 0x1b0], 0x78387749
mov dword [esp + 0x1b4], 0x3641434f
mov dword [esp + 0x1b8], 0x6e345466
mov dword [esp + 0x1bc], 0x6f6f334f
mov dword [esp + 0x1c0], 0x36774341
mov dword [esp + 0x1c4], 0x324d6741
mov dword [esp + 0x1c8], 0x504d5747
mov dword [esp + 0x1cc], 0x79416a4a
mov dword [esp + 0x1d0], 0x77594846
mov dword [esp + 0x1d4], 0x5638444f
mov dword [esp + 0x1d8], 0x72596850
mov dword [esp + 0x1dc], 0x77414747
mov dword [esp + 0x1e0], 0x44385448
mov dword [esp + 0x1e4], 0x70634141
mov dword [esp + 0x1e8], 0x6b347844
mov dword [esp + 0x1ec], 0x45734443
mov dword [esp + 0x1f0], 0x4a497747
mov dword [esp + 0x1f4], 0x306f674b
mov dword [esp + 0x1f8], 0x4b49684a
mov dword [esp + 0x1fc], 0x67346a4a
mov dword [esp + 0x200], 0x4c4d514d
mov dword [esp + 0x204], 0x6b415348
mov dword [esp + 0x208], 0x6e776a41
mov dword [esp + 0x20c], 0x6f59674f
mov dword [esp + 0x210], 0x69646a43
mov dword [esp + 0x214], 0x366b7a45
mov dword [esp + 0x218], 0x4c45474b
mov dword [esp + 0x21c], 0x6e417a66
mov dword [esp + 0x220], 0x6c515445
mov dword [esp + 0x224], 0x6b466d46
mov dword [esp + 0x228], 0x4d49524b
mov dword [esp + 0x22c], 0x65593250
mov dword [esp + 0x230], 0x42775350
mov dword [esp + 0x234], 0x386f424f
mov dword [esp + 0x238], 0x7645535a
mov dword [esp + 0x23c], 0x43457946
mov dword [esp + 0x240], 0x7351324f
mov dword [esp + 0x244], 0x436f5366
mov dword [esp + 0x248], 0x41417749
mov word [esp + 0x24c], 0x4c41
mov byte [esp + 0x24e], 0x30
push eax
push ebx
sub esp, 0xc
mov ecx, esp
push ecx
push edi
push esi
call fcn.00450208
lea ecx, [esp + 0x278]
call fcn.004c2ee6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x2b8], 6
call fcn.00451547
push eax
lea eax, [esp + 0x104]
push eax
lea ecx, [esp + 0x294]
call fcn.004b9c2e
push eax
lea ecx, [esp + 0x290]
mov byte [esp + 0x2b4], 7
call fcn.004c2566
mov ecx, dword [esp + 0xfc]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea ecx, [esp + 0x264]
mov byte [esp + 0x2b0], 4
call fcn.004513e1
mov eax, dword [esp + 0x28c]
cmp dword [eax - 0xc], 0
jne 0x4b7309
mov edi, dword [esp + 0x294]
push dword [esp + 0x258]
mov ecx, dword [esp + 0x104]
mov esi, ebx
call fcn.004b4aac
sub edi, dword [esp + 0x290]
mov ecx, eax
sar edi, 2
mov edx, ebx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x284], edx
lea eax, [edi - 1]
mov edi, dword [esp + 0x290]
mov dword [esp + 0xfc], eax
test eax, eax
je 0x4b7812
test esi, esi
je 0x4b771a
cmp byte [esi + 8], 0
je 0x4b771a
push dword [edi + edx*4]
mov ecx, esi
call fcn.0043d7fd
test al, al
jne 0x4b7716
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
je 0x4b7cb8
mov ecx, esi
jmp 0x4b774d
cmp byte [ecx + 8], 0
je 0x4b7cb8
call fcn.0043d95a
test al, al
je 0x4b7cb8
push dword [edi + edx*4]
call fcn.0043d7fd
test al, al
jne 0x4b7749
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
je 0x4b7cb8
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x284]
push ebx
push dword [edi + eax*4]
call fcn.0043d462
mov esi, eax
cmp byte [esi + 8], 0
jne 0x4b77f0
mov eax, dword [ebp + 0x10]
cmp byte [eax], 0
je 0x4b7cb8
mov edi, dword [esp + 0x100]
mov ecx, edi
call fcn.004b6670
test al, al
je 0x4b7797
mov ecx, edi
call fcn.004b66b5
mov byte [esp + 0x17], 1
test al, al
jne 0x4b779b
mov byte [esp + 0x17], bl
push 7
lea ecx, [esp + 0x268]
call fcn.00439398
push eax
mov ecx, esi
mov byte [esp + 0x2b4], 8
call fcn.00439701
lea ecx, [esp + 0x264]
mov byte [esp + 0x2b0], 4
call fcn.00439697
mov eax, dword [esp + 0x284]
mov edi, dword [esp + 0x290]
mov ecx, dword [esp + 0x18]
push esi
push ebx
push dword [edi + eax*4]
call fcn.0043d462
mov ecx, eax
call fcn.00439701
mov edx, dword [esp + 0x284]
mov ecx, esi
inc edx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x284], edx
cmp edx, dword [esp + 0xfc]
jb 0x4b76f2
mov ecx, dword [edi + edx*4]
sub ecx, 0x10
call fcn.004c250c
lea esi, [eax + 0x10]
mov dword [esp + 0x29c], esi
push ebx
mov byte [esp + 0x2b4], 9
mov ecx, dword [esp + 0x1c]
push esi
call fcn.0043d462
mov ecx, dword [esp + 0x260]
mov edi, eax
push edi
call fcn.004397b4
test eax, eax
jne 0x4b7852
cmp byte [edi + 8], al
jne 0x4b7893
mov edi, dword [esp + 0x100]
mov ecx, edi
call fcn.004b6670
test al, al
je 0x4b7874
mov ecx, edi
call fcn.004b66b5
mov byte [esp + 0x17], 1
test al, al
jne 0x4b7878
mov byte [esp + 0x17], bl
push dword [esp + 0x260]
mov ecx, dword [esp + 0x1c]
push ebx
push esi
call fcn.0043d462
mov ecx, eax
call fcn.00439701
jmp 0x4b789a
mov edi, dword [esp + 0x100]
cmp byte [esp + 0x17], 0
je 0x4b7b33
push ebx
push ebx
sub esp, 0xc
mov dword [esp + 0x30], 0x6841534d
mov ecx, esp
mov dword [esp + 0x34], 0x69636a4f
lea eax, [esp + 0x110]
mov dword [esp + 0x38], 0x7267694f
lea edx, [esp + 0x30]
mov dword [esp + 0x3c], 0x4f414249
push ecx
push eax
push edx
mov dword [esp + 0x4c], 0x6e525463
mov dword [esp + 0x50], 0x4b734249
mov dword [esp + 0x54], 0x516f5841
mov dword [esp + 0x58], 0x366f5448
mov dword [esp + 0x5c], 0x2f5a7949
mov dword [esp + 0x60], 0x45777948
mov dword [esp + 0x64], 0x65734744
mov dword [esp + 0x68], 0x356f7a4a
mov dword [esp + 0x6c], 0x474d4147
mov dword [esp + 0x70], 0x77644341
mov dword [esp + 0x74], 0x65594144
mov dword [esp + 0x78], 0x62513346
mov dword [esp + 0x7c], 0x63515162
mov dword [esp + 0x80], 0x3435694b
mov dword [esp + 0x84], 0x2b644147
mov dword [esp + 0x88], 0x61675245
mov dword [esp + 0x8c], 0x6a553244
mov dword [esp + 0x90], 0x71454243
mov dword [esp + 0x94], 0x56456e49
mov dword [esp + 0x98], 0x72557a4b
mov dword [esp + 0x9c], 0x67736942
mov dword [esp + 0xa0], 0x53495449
mov dword [esp + 0xa4], 0x6649474c
mov dword [esp + 0xa8], 0x62556842
mov dword [esp + 0xac], 0x54636766
mov dword [esp + 0xb0], 0x556b544a
mov dword [esp + 0xb4], 0x49385447
mov dword [esp + 0xb8], 0x7a396841
mov dword [esp + 0xbc], 0x626b5165
mov dword [esp + 0xc0], 0x375a7742
mov dword [esp + 0xc4], 0x57496a4a
mov dword [esp + 0xc8], 0x78515444
mov dword [esp + 0xcc], 0x4c307a4a
mov dword [esp + 0xd0], 0x7645434e
mov dword [esp + 0xd4], 0x7a67694b
mov dword [esp + 0xd8], 0x74344447
mov dword [esp + 0xdc], 0x636b784b
mov dword [esp + 0xe0], 0x6a554142
mov dword [esp + 0xe4], 0x49595366
mov dword [esp + 0xe8], 0x33394149
mov dword [esp + 0xec], 0x6667794d
mov dword [esp + 0xf0], 0x3934514b
mov dword [esp + 0xf4], 0x42517848
mov dword [esp + 0xf8], 0x35526a48
mov dword [esp + 0xfc], 0x486b4141
mov dword [esp + 0x100], 0x4741424a
mov dword [esp + 0x104], 0x4355324d
mov dword [esp + 0x108], 0x32777a42
mov dword [esp + 0x10c], 0x39684444
mov dword [esp + 0x110], 0x504d4248
mov dword [esp + 0x114], 0x41675364
mov dword [esp + 0x118], 0x61434141
call fcn.00450208
lea ecx, [esp + 0x278]
call fcn.004c2ee6
add esp, 0xc
mov byte [esp + 0x2b8], 0xa
mov ecx, eax
mov dword [esp + 0x264], 1
call fcn.00451547
push eax
lea ecx, [esp + 0x290]
call fcn.004b9ce8
mov byte [esp + 0x17], 1
test eax, eax
jne 0x4b7b37
mov byte [esp + 0x17], bl
mov dword [esp + 0x2b0], 9
test byte [esp + 0x25c], 1
je 0x4b7b58
lea ecx, [esp + 0x264]
call fcn.004513e1
cmp byte [esp + 0x17], 0
je 0x4b7c96
push ebx
push ebx
sub esp, 0xc
mov dword [esp + 0x118], 0x366f434a
mov ecx, esp
mov dword [esp + 0x11c], 0x79777a4b
lea eax, [esp + 0x15a]
mov dword [esp + 0x120], 0x7134794a
lea edx, [esp + 0x118]
mov dword [esp + 0x124], 0x78775750
push ecx
push eax
push edx
mov dword [esp + 0x134], 0x6d55434a
mov dword [esp + 0x138], 0x6a6f534c
mov dword [esp + 0x13c], 0x426b334a
mov dword [esp + 0x140], 0x59417742
mov dword [esp + 0x144], 0x4b384242
mov dword [esp + 0x148], 0x73646865
mov dword [esp + 0x14c], 0x4a516843
mov dword [esp + 0x150], 0x45496d65
mov dword [esp + 0x154], 0x6d776965
mov dword [esp + 0x158], 0x37736846
mov dword [esp + 0x15c], 0x6b347a4d
mov dword [esp + 0x160], 0x41414141
mov word [esp + 0x164], 0x5147
call fcn.00450208
lea ecx, [esp + 0x278]
call fcn.004c2ee6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x2b8], 0xb
call fcn.00451547
push eax
lea ecx, [esp + 0x290]
call fcn.004b9ce8
push dword [esp + 0x258]
mov ecx, dword [edi + 0xc]
neg eax
sbb al, al
inc al
mov byte [esp + 0x1b], al
lea eax, [esp + 0x1b]
push eax
push dword [esp + 0x290]
call fcn.004d43ef
lea ecx, [esp + 0x264]
call fcn.004513e1
push dword [esp + 0x258]
lea eax, [esp + 0x1b]
mov byte [esp + 0x1b], 1
push eax
mov ecx, edi
call fcn.004b61ff
lea ecx, [esi - 0x10]
mov bl, 1
call fcn.00450c0a
mov ecx, dword [esp + 0x28c]
add ecx, 0xfffffff0
call fcn.00450c0a
lea ecx, [esp + 0x290]
call fcn.004bba39
mov ecx, dword [esp + 0x288]
add ecx, 0xfffffff0
call fcn.00450c0a
mov al, bl
mov ecx, dword [esp + 0x2a8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x290]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret 0x10