Function at 0x4dcca0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x529c08
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x587978]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
mov dword [ebp - 4], edi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x164], edi
mov eax, dword [0x587944]
mov edx, dword [eax + 0xc]
mov ecx, 0x587944
mov dword [ebp - 0x160], esi
call edx
add eax, 0x10
mov dword [esi], eax
mov dword [ebp - 4], edi
mov edx, 0x1186
mov dword [ebp - 0x164], 1
mov dword [ebp - 0xa8], 0x55bb62f8
mov dword [ebp - 0xa4], 0x94fb2088
mov dword [ebp - 0xa0], 0x7165250b
mov dword [ebp - 0x9c], 0x4248fce
mov dword [ebp - 0x98], 0x885468cd
mov dword [ebp - 0x94], 0x4cdbcec0
mov dword [ebp - 0x90], 0x4e92df44
mov dword [ebp - 0x8c], 0x9890e42
mov dword [ebp - 0x88], 0x54243b60
mov dword [ebp - 0x84], 0xce6a8d07
mov dword [ebp - 0x80], 0x15d80a44
mov dword [ebp - 0x7c], 0x48b6d8d5
mov dword [ebp - 0x78], 0x15ad66c8
mov dword [ebp - 0x74], 0xab225c47
mov dword [ebp - 0x70], 0xf0c5eb54
mov dword [ebp - 0x6c], 0xbfda0d0
mov dword [ebp - 0x68], 0x90195426
mov dword [ebp - 0x64], 0xd011c097
mov dword [ebp - 0x60], 0xa75ac53d
mov dword [ebp - 0x5c], 0x4b52fc3c
mov dword [ebp - 0x58], 0x28c30059
mov dword [ebp - 0x54], 0x4a709d0c
mov dword [ebp - 0x50], 0xb2262a36
mov dword [ebp - 0x4c], 0x780a9fe7
mov dword [ebp - 0x48], 0x9e2b9f67
mov dword [ebp - 0x44], 0xa1ab00aa
mov dword [ebp - 0x40], 0xba6eebf0
mov dword [ebp - 0x3c], 0xc5b5f345
mov dword [ebp - 0x38], 0x13e0c4f5
mov dword [ebp - 0x34], 0x9fa6700e
mov dword [ebp - 0x30], 0x576a30cf
mov dword [ebp - 0x2c], 0xdf8a07ce
mov dword [ebp - 0x28], 0x3474c0ef
mov dword [ebp - 0x24], 0x8b2762cb
mov dword [ebp - 0x20], 0x3802625a
mov dword [ebp - 0x1c], 0x6ab591f6
mov dword [ebp - 0x18], 0xdddb7101
mov word [ebp - 0x14], dx
mov dword [ebp - 0x140], 0x55d462bb
mov dword [ebp - 0x13c], 0x948f20e6
mov dword [ebp - 0x138], 0x710b256e
mov dword [ebp - 0x134], 0x4098fba
mov dword [ebp - 0x130], 0x882668b9
mov dword [ebp - 0x12c], 0x4cb5cea1
mov dword [ebp - 0x128], 0x4ef4df37
mov dword [ebp - 0x124], 0x9fb0e27
mov dword [ebp - 0x120], 0x54413b4d
mov dword [ebp - 0x11c], 0xce098d69
mov dword [ebp - 0x118], 0x15bc0a2b
mov dword [ebp - 0x114], 0x48d8d8bc
mov dword [ebp - 0x110], 0x159766af
mov dword [ebp - 0x10c], 0xab405c67
mov dword [ebp - 0x108], 0xf0abeb3d
mov dword [ebp - 0x104], 0xb8fa0b1
mov dword [ebp - 0x100], 0x9045545f
mov dword [ebp - 0xfc], 0xd04dc0e5
mov dword [ebp - 0xf8], 0xa719c553
mov dword [ebp - 0xf4], 0x4b3cfc53
mov dword [ebp - 0xf0], 0x28a6002d
mov dword [ebp - 0xec], 0x4a049d62
mov dword [ebp - 0xe8], 0xb2722a1b
mov dword [ebp - 0xe4], 0x787a9f9e
mov dword [ebp - 0xe0], 0x9e119f02
mov dword [ebp - 0xdc], 0xa1ca008a
mov dword [ebp - 0xd8], 0xba1eeb80
push edi
mov edx, 0x11eb
xor eax, eax
push 0x4b
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0xd4], 0xc5dcf329
mov dword [ebp - 0xd0], 0x1381c496
mov dword [ebp - 0xcc], 0x9fcf707a
mov dword [ebp - 0xc8], 0x570430a0
mov dword [ebp - 0xc4], 0xdfe507e1
mov dword [ebp - 0xc0], 0x3400c08c
mov dword [ebp - 0xbc], 0x8b5362ae
mov dword [ebp - 0xb8], 0x38716277
mov dword [ebp - 0xb4], 0x6ac79182
mov dword [ebp - 0xb0], 0xddba7164
mov word [ebp - 0xac], dx
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x14c], edi
mov word [ebp - 0x15c], ax
call fcn.00406f50
mov edi, dword [ebp - 0x15c]
mov ebx, 8
cmp dword [ebp - 0x148], ebx
jae 0x4dcfeb
lea edi, [ebp - 0x15c]
xor eax, eax
movzx edx, ax
mov eax, edx
shl edx, 0x10
or eax, edx
mov ecx, 0x25
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x14c], 0x4b
cmp dword [ebp - 0x148], ebx
jae 0x4dd01e
lea eax, [ebp - 0x15c]
xor ecx, ecx
mov word [eax + 0x96], cx
mov dword [ebp - 4], 2
xor eax, eax
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp - 0x148], ebx
jae 0x4dd044
lea ecx, [ebp - 0x15c]
mov dx, word [ebp + eax - 0x140]
xor dx, word [ebp + eax - 0xa8]
mov word [ecx + eax], dx
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp - 0x148], ebx
jae 0x4dd06c
lea ecx, [ebp - 0x15c]
mov dx, word [ebp + eax - 0x13e]
xor dx, word [ebp + eax - 0xa6]
mov word [ecx + eax + 2], dx
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp - 0x148], ebx
jae 0x4dd095
lea ecx, [ebp - 0x15c]
mov dx, word [ebp + eax - 0x13c]
xor dx, word [ebp + eax - 0xa4]
mov word [ecx + eax + 4], dx
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp - 0x148], ebx
jae 0x4dd0be
lea ecx, [ebp - 0x15c]
mov dx, word [ebp + eax - 0x13a]
xor dx, word [ebp + eax - 0xa2]
mov word [ecx + eax + 6], dx
mov ecx, dword [ebp - 0x15c]
cmp dword [ebp - 0x148], ebx
jae 0x4dd0e7
lea ecx, [ebp - 0x15c]
mov dx, word [ebp + eax - 0x138]
xor dx, word [ebp + eax - 0xa0]
add eax, 0xa
mov word [ecx + eax - 2], dx
cmp eax, 0x96
jb 0x4dd030
cmp dword [ebp - 0x148], ebx
jb 0x4dd120
mov eax, dword [ebp - 0x15c]
mov edx, eax
test eax, eax
jne 0x4dd126
jmp 0x4dd145
lea edx, [ebp - 0x15c]
mov eax, edx
lea esi, [eax + 2]
jmp 0x4dd130
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4dd130
sub eax, esi
mov esi, dword [ebp - 0x160]
sar eax, 1
push eax
push edx
mov ecx, esi
call fcn.00407100
mov byte [ebp - 4], 0
cmp dword [ebp - 0x148], ebx
jb 0x4dd169
mov eax, dword [ebp - 0x15c]
push eax
call fcn.004eac03
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x14c], 0
mov word [ebp - 0x15c], cx
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004eb16b
mov esp, ebp
pop ebp
ret