Function at 0x4c6620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x11c]
push ebx
lea ebx, [ebp - 0x10c]
mov edi, dword fs:[0x18]
sub esp, 0x158
mov eax, dword [sym.imp.kernel32.dll_GetDateFormatA]
mov dword [edi + 0x34], 0xdeadbeef
mov dword [ebp - 0x11c], 0x2020202
mov dword [ebp - 0x118], 0x2020202
mov dword [ebp - 0x114], 0x2020202
mov dword [ebp - 0x110], 0x2020202
mov dword [ebp - 0x10c], 0x73697270
mov dword [ebp - 0x108], 0x656e6974
mov byte [ebp - 0x104], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x5dbfe0
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov dword [ebp - 0x140], eax
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x38c
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [edi + 0x34], 0xdeadbeef
mov dword [ebp - 0x11c], 0x507d2
mov dword [ebp - 0x118], 0x40003
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x5dbfe0
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x395
mov dword [esp], 0x5dbff1
call fcn.004b9ce0
mov byte [ebp - 0x104], 0
mov dword [ebp - 0x10c], 0x73697270
mov dword [ebp - 0x108], 0x656e6974
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x5dbfe0
mov dword [esp + 8], esi
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x39a
mov dword [esp + 4], str.ERROR_INVALID_FLAGS
mov dword [esp], 0x3ec
call fcn.004b49b0
mov dword [edi + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x5dbfe0
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x39f
mov dword [esp], 0x5dbff1
call fcn.004b9ce0
mov eax, 0x24
mov word [ebp - 0x114], ax
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.ddd__MMM_dd_yy
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x3a4
mov dword [esp], str.Sat__May_04_02
call fcn.004b9ce0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], str.ddd__MMM_dd_yy
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x3a8
mov dword [esp], str.Sat__May_04_02
call fcn.004b9ce0
mov byte [ebp - 0x104], 0
mov dword [ebp - 0x10c], 0x73697270
mov dword [ebp - 0x108], 0x656e6974
mov dword [esp + 0x14], 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x5dc025
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x3ae
mov dword [esp + 4], str.ERROR_INSUFFICIENT_BUFFER
mov dword [esp], 0x7a
call fcn.004b49b0
mov dword [edi + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x3b3
mov dword [esp], str.5_4_2002
call fcn.004b9ce0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], esi
mov dword [esp + 4], 0x80000002
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
sub esp, 0x18
mov dword [ebp - 0x144], eax
call fcn.0057d110
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x3b7
mov eax, dword [edi + 0x34]
mov dword [esp + 0xc], eax
mov edx, dword [ebp - 0x144]
mov dword [esp + 4], 0x5d8d94
mov dword [esp + 8], edx
mov dword [esp], edx
call fcn.004b46e0
call fcn.0057d110
mov edi, dword [sym.imp.msvcrt.dll_strcmp]
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x3b8
mov dword [esp + 4], str.Saturday__May_04__2002
mov dword [esp], ebx
call edi
mov edx, eax
mov eax, 1
test edx, edx
je 0x4c69fd
mov dword [esp + 4], str.Saturday__May_4__2002
mov dword [esp], ebx
call edi
test eax, eax
sete al
movzx eax, al
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], str.got_an_unexpected_date_string__s_n
call fcn.004b46e0
mov byte [ebp - 0x104], 0
mov dword [ebp - 0x10c], 0x73697270
mov dword [ebp - 0x108], 0x656e6974
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.ddd__MMM_dd_yy
mov dword [esp + 8], esi
mov dword [esp + 4], 0x80000008
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x3c0
mov dword [esp + 4], str.ERROR_INVALID_FLAGS
mov dword [esp], 0x3ec
call fcn.004b49b0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x144], ecx
mov dword [ecx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.m_d_y
mov dword [esp + 8], esi
mov dword [esp + 4], 0xb
mov dword [esp], 0x409
mov eax, dword [ebp - 0x140]
call eax
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x3c6
mov dword [esp + 4], str.ERROR_INVALID_FLAGS
mov dword [esp], 0x3ec
call fcn.004b49b0
mov ecx, dword [ebp - 0x144]
mov dword [ecx + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.ddMMMM
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
sub esp, 0x18
test eax, eax
je 0x4c7128
mov edx, dword [sym.imp.msvcrt.dll_strcpy]
lea eax, [ebp - 0x10a]
mov dword [esp + 4], eax
lea eax, [ebp - 0x126]
mov dword [esp], eax
mov dword [ebp - 0x14c], edx
call edx
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.MMMM
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
sub esp, 0x18
mov dword [ebp - 0x148], eax
call fcn.0057d110
mov ecx, dword [ebp - 0x144]
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x3d3
mov eax, dword [ecx + 0x34]
mov dword [esp + 0xc], eax
mov ecx, dword [ebp - 0x148]
mov dword [esp + 4], 0x5d8d94
mov dword [esp + 8], ecx
mov dword [esp], ecx
call fcn.004b46e0
lea edx, [ebp - 0x130]
mov dword [esp + 4], ebx
mov dword [esp], edx
mov edx, dword [ebp - 0x14c]
mov dword [ebp - 0x148], edx
call edx
call fcn.0057d110
lea edx, [ebp - 0x130]
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x3d5
mov dword [esp + 4], edx
lea edx, [ebp - 0x126]
mov dword [esp], edx
call edi
mov dword [esp + 4], str.Expected_different_month_forms_n
test eax, eax
setne al
movzx eax, al
mov dword [esp], eax
call fcn.004b46e0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], 0x5dc025
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
sub esp, 0x18
mov edi, eax
call fcn.0057d110
mov ecx, dword [ebp - 0x144]
mov dword [eax], 0x5d8897
mov dword [eax + 4], 0x3d8
mov eax, dword [ecx + 0x34]
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov dword [esp], edi
lea edi, [ebp - 0x13a]
mov dword [esp + 4], 0x5d8d94
call fcn.004b46e0
mov dword [esp + 4], ebx
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
call edx
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.dd_MMMMddd_dd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edi
lea edi, [ebp - 0x126]
mov dword [esp + 8], edi
lea edi, [ebp - 0x8c]
mov dword [esp], edi
mov dword [esp + 4], str.04__s_s_04
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3dd
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.MMMMddd_dd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x13a]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x130]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str._s_s_04
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3e1
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.MMMMddd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x13a]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x130]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], 0x5dc0ec
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3e5
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.MMMMdd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x126]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str._s04
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3e9
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.MMMMdd_ddd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x13a]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x126]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str._s04__s
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3ed
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.dd_dddMMMM
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x130]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x13a]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str.04__s_s
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3f1
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.dd_dddMMMM_ddd_MMMMdd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x126]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0x14], edx
lea edx, [ebp - 0x13a]
mov dword [esp + 0x10], edx
lea edx, [ebp - 0x130]
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x13a]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str.04__s_s__s__s04
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3f5
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0xc], str.ddd__MMMM_dd
mov dword [esp + 4], 0
mov dword [esp], 0x19
mov eax, dword [ebp - 0x140]
call eax
lea edx, [ebp - 0x126]
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [esp + 0xc], edx
lea edx, [ebp - 0x13a]
mov dword [esp + 8], edx
mov dword [esp], edi
mov dword [esp + 4], str._s___s_04
call fcn.004b34f0
mov dword [esp], edi
mov edx, dword [ebp - 0x148]
mov ecx, ebx
mov eax, 0x3fa
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], 4
mov dword [esp + 0xc], 0x5dc162
mov dword [esp + 4], 0
mov dword [esp], 0x411
mov edi, dword [ebp - 0x140]
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x402
mov dword [esp], 0x5dc166
call fcn.004b9ce0
mov dword [esp + 0x10], ebx
mov dword [esp + 8], esi
mov dword [esp + 0x14], 3
mov dword [esp + 0xc], 0x5dc162
mov dword [esp + 4], 0
mov dword [esp], 0x411
call edi
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x405
mov dword [esp + 4], str.ERROR_INSUFFICIENT_BUFFER
mov dword [esp], 0x7a
call fcn.004b49b0
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x10c], 0x73697270
mov dword [ebp - 0x108], 0x656e6974
mov dword [ecx + 0x34], 0xdeadbeef
mov byte [ebp - 0x104], 0
mov dword [esp + 8], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x5dc162
mov dword [esp + 4], 0
mov dword [esp], 0x411
call edi
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x40a
mov dword [esp], 0x5dc166
call fcn.004b9ce0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x3cc
call fcn.004b3be0
mov dword [esp], str.LANG_RUSSIAN_locale_data_unavailable_n
call fcn.004b46b0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret