Function at 0x4956ee
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a0db1
mov eax, dword fs:[0]
push eax
sub esp, 0x124
mov eax, dword [0x4d2a20]
xor eax, ebp
mov dword [ebp - 0x28], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10c], ecx
mov ecx, dword [ebp - 0x10c]
add ecx, 8
call fcn.00420cd9
movzx eax, al
test eax, eax
je 0x495739
jmp 0x495b77
movzx eax, byte [0x4d376e]
test eax, eax
je 0x495768
mov eax, dword [ebp - 0x10c]
push dword [eax + 8]
push 0x4ba004
push 0x4ba038
push str.__s___s_cmdLine___s
push 0
push 0
call fcn.00489ffc
add esp, 0x18
mov eax, dword [ebp - 0x10c]
add eax, 8
push eax
lea ecx, [ebp - 0x24]
call fcn.00401c6b
and dword [ebp - 4], 0
push 0x22
lea ecx, [ebp - 0x24]
call fcn.00406e09
push 0
push 0x4ba074
lea ecx, [ebp - 0x24]
call fcn.00401037
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
je 0x4957e5
push dword [ebp - 0x18]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x24]
call fcn.00406eeb
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 1
push dword [ebp - 0x114]
lea ecx, [ebp - 0x24]
call fcn.00401000
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x9c]
call fcn.00406df8
lea ecx, [ebp - 0x24]
call fcn.00420cd9
movzx eax, al
test eax, eax
je 0x495805
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00406df8
jmp 0x495b77
push 0x4ba07c
lea ecx, [ebp - 0xb8]
call fcn.00406f58
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
mov byte [ebp - 4], 2
push dword [ebp - 0x11c]
push 0x4ba080
lea ecx, [ebp - 0xd4]
call fcn.00406f58
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 3
push dword [ebp - 0x124]
push 0x4ba084
lea ecx, [ebp - 0xf0]
call fcn.00406f58
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 4], 4
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x24]
call fcn.00406f21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xf4], esp
push eax
call fcn.00406f58
lea ecx, [ebp - 0x94]
call fcn.0049cb8d
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf0]
call fcn.00402f4a
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd4]
call fcn.00402f4a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb8]
call fcn.00402f4a
push 0x4ba08c
lea ecx, [ebp - 0x14]
call fcn.004018ae
mov byte [ebp - 4], 9
push 0x4ba094
lea ecx, [ebp - 0x20]
call fcn.004018ae
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x98], 2
and dword [ebp - 0x10], 0
push 0x4ba09c
lea ecx, [ebp - 0x1c]
call fcn.004018ae
mov byte [ebp - 4], 0xb
push str.showui
lea ecx, [ebp - 0xf8]
call fcn.004018ae
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0049d2f4
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf8]
call fcn.00406df8
push str.showtips
lea ecx, [ebp - 0xfc]
call fcn.004018ae
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0049d2f4
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xfc]
call fcn.00406df8
push str.supplyid
lea ecx, [ebp - 0x100]
call fcn.004018ae
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0049d110
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x100]
call fcn.00406df8
push str.startmode
lea ecx, [ebp - 0x104]
call fcn.004018ae
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.0049d110
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x104]
call fcn.00406df8
push str.toolplugin
lea ecx, [ebp - 0x108]
call fcn.004018ae
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0049d2f4
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x108]
call fcn.00406df8
push 0x4ba108
lea ecx, [ebp - 0x14]
call fcn.00401019
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 0x3c], eax
push 0x4ba110
lea ecx, [ebp - 0x20]
call fcn.00401019
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x10]
mov dword [eax + 0x44], ecx
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x98]
mov dword [eax + 0x38], ecx
push 0x4ba118
lea ecx, [ebp - 0x20]
call fcn.00401019
neg eax
sbb eax, eax
inc eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx + 0x48], eax
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x38], 1
jb 0x495ad9
mov eax, dword [ebp - 0x10c]
cmp dword [eax + 0x38], 2
jbe 0x495ae6
mov eax, dword [ebp - 0x10c]
mov dword [eax + 0x38], 2
movzx eax, byte [0x4d376e]
test eax, eax
je 0x495b30
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x44]
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x40]
mov eax, dword [ebp - 0x10c]
push dword [eax + 0x3c]
push str.CQMAppBase::ParseCmdLine
push 0x4ba154
push str.__s___s_m_bNoUI:_d_m_bNeedShowTips:_d_m_dwSupplyId:_d_m_dwStarMode:_d
push 0
push 0
call fcn.00489ffc
add esp, 0x24
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
call fcn.00406df8
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20]
call fcn.00406df8
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.00406df8
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x94]
call fcn.0049d0d2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.00406df8
xor eax, eax
jne 0x49571f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x28]
xor ecx, ebp
call fcn.0047676d
leave
ret