Function at 0x4982d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e2c38
mov eax, dword fs:[0]
push eax
sub esp, 0x41c
mov eax, dword [0x50c7c4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
push 0x28
xor bl, bl
mov dword [ebp - 0x3ec], 0xf
push str.007790f6561dad89b0bcd85585762495e358f8a5
lea ecx, [ebp - 0x400]
mov byte [ebp - 0x419], bl
mov dword [ebp - 0x3f0], 0
mov byte [ebp - 0x400], bl
call fcn.00403860
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x3e8]
push 0x28
push str.01E88C4B67D0A17C8199DAAAFBB6E4D1C9AE078F
mov dword [ebp - 0x3d4], 0xf
mov dword [ebp - 0x3d8], 0
mov byte [ebp - 0x3e8], bl
call fcn.00403860
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3d0]
push 0x28
push str.037F4C3417A255E0D2DC49A2B6AB8F73AAC70566
mov dword [ebp - 0x3bc], 0xf
mov dword [ebp - 0x3c0], 0
mov byte [ebp - 0x3d0], bl
call fcn.00403860
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3b8]
push 0x28
push str.087c2825882a917093e485ec0d400c52c4ff7c7a
mov dword [ebp - 0x3a4], 0xf
mov dword [ebp - 0x3a8], 0
mov byte [ebp - 0x3b8], bl
call fcn.00403860
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3a0]
push 0x28
push str.0D3503BA760D79208664EB242790D908CAD94D70
mov dword [ebp - 0x38c], 0xf
mov dword [ebp - 0x390], 0
mov byte [ebp - 0x3a0], bl
call fcn.00403860
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x388]
push 0x28
push str.0d78c8e935f04e9aaf4b3b483e1dfa60ce5c4602
mov dword [ebp - 0x374], 0xf
mov dword [ebp - 0x378], 0
mov byte [ebp - 0x388], bl
call fcn.00403860
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x370]
push 0x28
push str.12d4872bc3ef019e7e0b6f132480ae29db5b1ca3
mov dword [ebp - 0x35c], 0xf
mov dword [ebp - 0x360], 0
mov byte [ebp - 0x370], bl
call fcn.00403860
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x358]
push 0x28
push str.14e9eee313c7c696fda60c03ac1e8615fbcdc1b3
mov dword [ebp - 0x344], 0xf
mov dword [ebp - 0x348], 0
mov byte [ebp - 0x358], bl
call fcn.00403860
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x340]
push 0x28
push str.194BCC554216F9E514A8C76DF4406CA01C95E6AB
mov dword [ebp - 0x32c], 0xf
mov dword [ebp - 0x330], 0
mov byte [ebp - 0x340], bl
call fcn.00403860
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x328]
push 0x28
push str.197a4aebdb25f0170079bb8c73cb2d655e0018a4
mov dword [ebp - 0x314], 0xf
mov dword [ebp - 0x318], 0
mov byte [ebp - 0x328], bl
call fcn.00403860
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x310]
push 0x28
push str.29F99406A394B3F570863BA709DBD629681019BE
mov dword [ebp - 0x2fc], 0xf
mov dword [ebp - 0x300], 0
mov byte [ebp - 0x310], bl
call fcn.00403860
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2f8]
push 0x28
push str.2cdac5a156aaeaf328a09a944e130e4c1870e6b4
mov dword [ebp - 0x2e4], 0xf
mov dword [ebp - 0x2e8], 0
mov byte [ebp - 0x2f8], bl
call fcn.00403860
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2e0]
push 0x28
push str.48e024a64dd2dd7c3a121bc03b0192d0724c148f
mov dword [ebp - 0x2cc], 0xf
mov dword [ebp - 0x2d0], 0
mov byte [ebp - 0x2e0], bl
call fcn.00403860
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c8]
push 0x28
push str.3103B8559B1F54F992E93E7E5E7F8669DD872193
mov dword [ebp - 0x2b4], 0xf
mov dword [ebp - 0x2b8], 0
mov byte [ebp - 0x2c8], bl
call fcn.00403860
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2b0]
push 0x28
push str.32F30882622B87CF8856C63DB873DF0853B4DD27
mov dword [ebp - 0x29c], 0xf
mov dword [ebp - 0x2a0], 0
mov byte [ebp - 0x2b0], bl
call fcn.00403860
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x298]
push 0x28
push str.48E024A64DD2DD7C3A121BC03B0192D0724C148F
mov dword [ebp - 0x284], 0xf
mov dword [ebp - 0x288], 0
mov byte [ebp - 0x298], bl
call fcn.00403860
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x280]
push 0x28
push str.495847a93187cfb8c71f840cb7b41497ad95c64f
mov dword [ebp - 0x26c], 0xf
mov dword [ebp - 0x270], 0
mov byte [ebp - 0x280], bl
call fcn.00403860
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x268]
push 0x28
push str.4EA167AFF233D55252BA00E88FF9686001F76C9C
mov dword [ebp - 0x254], 0xf
mov dword [ebp - 0x258], 0
mov byte [ebp - 0x268], bl
call fcn.00403860
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x250]
push 0x28
push str.4eb6d578499b1ccf5f581ead56be3d9b6744a5e5
mov dword [ebp - 0x23c], 0xf
mov dword [ebp - 0x240], 0
mov byte [ebp - 0x250], bl
call fcn.00403860
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x238]
push 0x28
push str.4ED906C8DD5648052FB2194F405506B84E9255D7
mov dword [ebp - 0x224], 0xf
mov dword [ebp - 0x228], 0
mov byte [ebp - 0x238], bl
call fcn.00403860
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x220]
push 0x28
push str.4FAC44FB51C81ADEA5EA87413657984F5D127598
mov dword [ebp - 0x20c], 0xf
mov dword [ebp - 0x210], 0
mov byte [ebp - 0x220], bl
call fcn.00403860
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x208]
push 0x28
push str.57618828FC5D838BEFC832DD5144337A35AE7421
mov dword [ebp - 0x1f4], 0xf
mov dword [ebp - 0x1f8], 0
mov byte [ebp - 0x208], bl
call fcn.00403860
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1f0]
push 0x28
push str.5c52cfda009e757a2a096f8c9dcb8f214aff794a
mov dword [ebp - 0x1dc], 0xf
mov dword [ebp - 0x1e0], 0
mov byte [ebp - 0x1f0], bl
call fcn.00403860
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1d8]
push 0x28
push str.58455389CF1D0CD6A08E3CE216F65ADFF7A86408
mov dword [ebp - 0x1c4], 0xf
mov dword [ebp - 0x1c8], 0
mov byte [ebp - 0x1d8], bl
call fcn.00403860
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1c0]
push 0x28
push str.5ea07bca7948aa8f74875f67f8a67d76cd91a3e9
mov dword [ebp - 0x1ac], 0xf
mov dword [ebp - 0x1b0], 0
mov byte [ebp - 0x1c0], bl
call fcn.00403860
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1a8]
push 0x28
push str.630105053d531f3f61e8f36dd7e22ca872d469e0
mov dword [ebp - 0x194], 0xf
mov dword [ebp - 0x198], 0
mov byte [ebp - 0x1a8], bl
call fcn.00403860
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x190]
push 0x28
push str.742C3192E607E424EB4549542BE1BBC53E6174E2
mov dword [ebp - 0x17c], 0xf
mov dword [ebp - 0x180], 0
mov byte [ebp - 0x190], bl
call fcn.00403860
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x178]
push 0x28
push str.7FB04AAAF7A289857356AE1CD5F8FE20AA9881A8
mov dword [ebp - 0x164], 0xf
mov dword [ebp - 0x168], 0
mov byte [ebp - 0x178], bl
call fcn.00403860
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x160]
push 0x28
push str.885926FD4E17BFD8FD3A9105AAC30D532D0CFDCB
mov dword [ebp - 0x14c], 0xf
mov dword [ebp - 0x150], 0
mov byte [ebp - 0x160], bl
call fcn.00403860
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x148]
push 0x28
push str.8FBE4D070EF8AB1BCCAF2A9D5CCAE7282A2C66B3
mov dword [ebp - 0x134], 0xf
mov dword [ebp - 0x138], 0
mov byte [ebp - 0x148], bl
call fcn.00403860
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x130]
push 0x28
push str.9549B6A6CC9AD86789710820F5C82CFA6CA70D32
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], bl
call fcn.00403860
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x118]
push 0x28
push str.9DC2D09D1C34A7DBB52FD459F06B6DAC949F5385
mov dword [ebp - 0x104], 0xf
mov dword [ebp - 0x108], 0
mov byte [ebp - 0x118], bl
call fcn.00403860
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x100]
push 0x28
push str.a1db6393916f17e4185509400415c70240b0ae6b
mov dword [ebp - 0xec], 0xf
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0x100], bl
call fcn.00403860
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xe8]
push 0x28
push str.B105D14DC20BD133C6F6B1A2C98545FFC80DB63F
mov dword [ebp - 0xd4], 0xf
mov dword [ebp - 0xd8], 0
mov byte [ebp - 0xe8], bl
call fcn.00403860
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xd0]
push 0x28
push str.bec66acc61a3e0fd22f70be1da74302ef42b3e84
mov dword [ebp - 0xbc], 0xf
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xd0], bl
call fcn.00403860
push str.bfa5731783161121244034554512adae0aeedcc0
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x22
call fcn.00403030
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa0]
push str.c818bcdc5fa50807ddc42480adf5c1c1189c75e2
call fcn.00403030
push str.D566EA75A379B6006AA1D102E9A81A42C9384FAC
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x24
call fcn.00403030
push str.D8FD5454A7201930810FF3E1458884037DB2DF89
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.00403030
push str.E8DB74E5FC68E47EF02EB8F575ECC9EEF255515E
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x26
call fcn.00403030
push str.fb18d839a78c599c965681fab70c2b044ef7a3f5
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x27
call fcn.00403030
mov dword [ebp - 4], 0x28
mov byte [ebp - 4], 0x29
test esi, esi
je 0x498b0c
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x28]
push eax
push dword [esi + 8]
push dword [esi + 4]
push 0
push 0x8004
push 0
call dword [sym.imp.CRYPT32.dll_CryptHashCertificate]
test eax, eax
je 0x498b0c
push dword [ebp - 0x424]
lea edx, [ebp - 0x28]
lea ecx, [ebp - 0x418]
call fcn.00498b50
add esp, 4
lea esi, [ebp - 0x400]
xor ebx, ebx
mov ecx, dword [esi + 0x14]
cmp ecx, 0x10
jb 0x498a6f
mov edi, dword [esi]
jmp 0x498a71
mov edi, esi
cmp ecx, 0x10
jb 0x498a7a
mov edx, dword [esi]
jmp 0x498a7c
mov edx, esi
mov eax, dword [esi + 0x10]
add eax, edx
cmp ecx, 0x10
jb 0x498a8a
mov edx, dword [esi]
jmp 0x498a8c
mov edx, esi
cmp edx, eax
je 0x498aa3
push ecx
push edi
push eax
lea ecx, [ebp - 0x420]
call fcn.00498d70
add esp, 0xc
jmp 0x498aa9
mov dword [ebp - 0x420], edi
push esi
lea ecx, [ebp - 0x418]
call fcn.0040f2d0
test eax, eax
je 0x498aca
inc ebx
add esi, 0x18
cmp ebx, 0x29
jl 0x498a63
mov bl, byte [ebp - 0x419]
jmp 0x498acc
mov bl, 1
cmp dword [ebp - 0x404], 0x10
jb 0x498ae3
push dword [ebp - 0x418]
call fcn.004a78e3
add esp, 4
mov dword [ebp - 0x404], 0xf
mov dword [ebp - 0x408], 0
mov byte [ebp - 0x418], 0
jmp 0x498b0c
push fcn.00403100
push 0x29
push 0x18
lea eax, [ebp - 0x400]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.004ab3b8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004a6d1e
mov esp, ebp
pop ebp
ret