Function at 0x4b9e00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
lea ebx, [ebp - 0x8c]
mov esi, dword fs:[0x18]
sub esp, 0xb8
mov dword [esi + 0x34], 0xdeadbeef
mov edi, dword [sym.imp.kernel32.dll_GetCurrencyFormatA]
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fa1
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x4dd
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.23_53
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x4e3
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fc2
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x4e9
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fc5
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x4ef
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fc8
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x4f5
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], str._0.1
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x4fa
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fd1
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
xor ecx, ecx
sub esp, 0x18
mov edx, eax
mov eax, 0x501
mov dword [esp + 4], str.ERROR_INSUFFICIENT_BUFFER
mov dword [esp], 0x7a
call fcn.004b49b0
mov dword [esi + 0x34], 0xdeadbeef
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x506
mov dword [esp], 0x5d9ff5
call fcn.004b9ce0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5d9fff
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x50a
mov dword [esp], str.__2_353.00_
call fcn.004b9ce0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5da011
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x50e
mov dword [esp], str._2_353.10
call fcn.004b9ce0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5da022
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x512
mov dword [esp], str._2_353.11
call fcn.004b9ce0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x5da035
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x516
mov dword [esp], str._2_353.12
call fcn.004b9ce0
xor edx, edx
xor eax, eax
mov dword [ebp + eax - 0xac], edx
add eax, 4
cmp eax, 0x20
jb 0x4ba25a
lea eax, [ebp - 0xac]
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0x80000000
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x51c
mov dword [esp + 4], str.ERROR_INVALID_FLAGS
mov dword [esp], 0x3ec
mov esi, dword fs:[0x18]
call fcn.004b49b0
lea eax, [ebp - 0xac]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0x8c], 0x73697270
mov dword [ebp - 0x88], 0x656e6974
mov byte [ebp - 0x84], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x522
mov dword [esp + 4], str.ERROR_INVALID_PARAMETER
mov dword [esp], 0x57
call fcn.004b49b0
lea eax, [ebp - 0xac]
mov dword [esi + 0x34], 0xdeadbeef
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xa0], 0x57f338
mov dword [ebp - 0x9c], 0x57f336
mov dword [ebp - 0x90], 0x57f334
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x530
mov dword [esp], 0x5da05c
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], 1
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x535
mov dword [esp], str._2353.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa4], 2
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5d9ff0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x53a
mov dword [esp], str._23_53.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa4], 3
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da073
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x53f
mov dword [esp], 0x5da077
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa4], 0x1f
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1234567890
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x543
mov dword [esp], str._1_2_3_4_5_6_7_890.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa4], 0x138
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1234567890
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x547
mov dword [esp], str._12_34_56_7_890.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa4], 0x136
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.1234567890
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x54b
mov dword [esp], str._123456_7_890.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0x98], 2
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0c0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x550
mov dword [esp], str.__235.0
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa8], 1
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0cd
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x555
xor esi, esi
mov dword [esp], str._0.5
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0d5
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x557
mov dword [esp], str._0.5
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0xa8], 0
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0d5
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x55b
mov dword [esp], 0x5da0d9
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0d5
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x55d
mov dword [esp], 0x5da0d9
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0x94], 1
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0dd
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x561
mov dword [esp], 0x5da0df
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0x94], 2
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0dd
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x565
mov dword [esp], 0x5da0e4
call fcn.004b9ce0
lea eax, [ebp - 0xac]
mov dword [ebp - 0x94], 3
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0dd
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
sub esp, 0x18
mov edx, eax
mov eax, 0x569
mov dword [esp], 0x5da0ea
call fcn.004b9ce0
lea esi, [esi]
mov dword [esp + 4], esi
mov dword [esp], 0x5d887c
call fcn.004b3b50
lea eax, [ebp - 0xac]
mov byte [ebx + 8], 0
mov dword [ebp - 0x98], esi
mov dword [ebx], 0x73697270
mov dword [ebx + 4], 0x656e6974
mov dword [esp + 0x14], pe_nt_image_headers32
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5da0f0
mov dword [esp + 4], 0
mov dword [esp], 0x409
call edi
mov ecx, ebx
mov edx, eax
mov eax, dword [esi*4 + 0x5e1660]
sub esp, 0x18
mov dword [esp], eax
mov eax, 0x572
call fcn.004b9ce0
call fcn.0057d110
mov edx, dword [eax + 0xbec]
test edx, edx
je 0x4ba8d1
sub edx, 1
mov dword [eax + 0xbec], edx
add esi, 1
cmp esi, 0x10
jne 0x4ba848
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret