Function at 0x4a3040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5bb62a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1a0
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x48], 0
mov ebp, 1
push 0x618524
lea ecx, [esp + 0x1cc]
mov dword [esp + 0x1bc], ebp
call fcn.00588181
cmp eax, 0xffffffff
je 0x4a30be
push 0x618528
push 0x618524
lea ecx, [esp + 0x1d0]
call fcn.00587da8
mov esi, dword [esp + 0x1c0]
lea eax, [esp + 0x1c8]
push eax
mov ecx, esi
call fcn.0058dcb4
mov dword [esp + 0x48], ebp
jmp 0x4a39af
mov ecx, dword [esp + 0x1c8]
mov eax, dword [ecx - 8]
cmp eax, 3
jge 0x4a30ec
mov esi, dword [esp + 0x1c0]
lea edx, [esp + 0x1c8]
push edx
mov ecx, esi
call fcn.0058dcb4
mov dword [esp + 0x48], ebp
jmp 0x4a39af
mov eax, dword [0x63b4a0]
mov dword [esp + 0x24], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x58]
mov byte [esp + 0x1b8], 0xe
call fcn.0055b385
lea eax, [esp + 0x1c8]
lea ecx, [esp + 0x2c]
push eax
mov byte [esp + 0x1bc], 0xf
call fcn.0058e078
mov ecx, dword [0x651cc0]
push ecx
lea ecx, [esp + 0xa4]
call fcn.00557aba
lea edx, [esp + 0x1c8]
lea ecx, [esp + 0x10]
push edx
mov byte [esp + 0x1bc], 0x10
call fcn.0058e078
mov eax, dword [esp + 0x1c8]
mov edi, 0x64a6f0
or ecx, 0xffffffff
mov esi, dword [0x64a6ec]
mov edx, dword [eax - 8]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, esi
cmp edx, ecx
jb 0x4a3235
mov edi, 0x64a6f0
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x1d0]
call fcn.00588091
mov eax, dword [eax]
push 0x64a6f0
push eax
call fcn.00574e80
add esp, 8
lea ecx, [esp + 0x1c]
test eax, eax
sete bl
call fcn.0058df3f
test bl, bl
je 0x4a3235
mov edi, 0x64a6f0
or ecx, 0xffffffff
xor eax, eax
mov edx, dword [esp + 0x1c8]
repne scasb al, byte es:[edi]
mov edx, dword [edx - 8]
lea eax, [esp + 0x1c]
not ecx
dec ecx
sub edx, ecx
lea ecx, [esp + 0x1c8]
push edx
push eax
call fcn.00588015
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x1bc], 0x11
call fcn.0058e078
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1b8], 0x10
call fcn.0058df3f
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
mov ecx, dword [0x64a6ec]
cmp eax, ecx
jge 0x4a3259
lea edx, [esp + 0x10]
lea ecx, [esp + 0x18]
push edx
call fcn.0058e078
jmp 0x4a34ce
lea eax, [esp + 0x20]
push ebp
push eax
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x6197c0
push eax
mov byte [esp + 0x1c0], 0x12
call fcn.00568a52
add esp, 8
test eax, eax
je 0x4a32b5
lea ecx, [esp + 0x1c]
push ebp
push ecx
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x619fac
push eax
call fcn.00568a52
add esp, 8
lea ecx, [esp + 0x1c]
test eax, eax
sete bl
call fcn.0058df3f
test bl, bl
je 0x4a32b7
mov bl, 1
lea ecx, [esp + 0x20]
mov byte [esp + 0x1b8], 0x10
call fcn.0058df3f
test bl, bl
je 0x4a3496
mov edx, dword [esp + 0x10]
mov esi, 0xb
cmp dword [edx - 8], esi
jl 0x4a34ce
push ecx
lea ecx, [esp + 0x14]
mov eax, esp
mov dword [esp + 0x18], esp
push 4
push eax
call fcn.00588091
call fcn.00488c30
add esp, 4
test al, al
je 0x4a3341
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 8], esi
jle 0x4a34ce
lea edx, [esp + 0x20]
push 0xc
push edx
lea ecx, [esp + 0x18]
call fcn.00588091
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1bc], 0x13
call fcn.0058e078
mov byte [esp + 0x1b8], 0x10
lea ecx, [esp + 0x20]
jmp 0x4a34c9
lea eax, [esp + 0x14]
push 3
push eax
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x619908
push eax
mov byte [esp + 0x1c0], 0x14
call fcn.00568a52
add esp, 8
test eax, eax
je 0x4a3407
lea ecx, [esp + 0x20]
push 3
push ecx
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x619904
push eax
call fcn.00568a52
add esp, 8
lea ecx, [esp + 0x20]
test eax, eax
sete bl
call fcn.0058df3f
test bl, bl
jne 0x4a3407
lea edx, [esp + 0x1c]
push 3
push edx
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x619900
push eax
call fcn.00568a52
add esp, 8
lea ecx, [esp + 0x1c]
test eax, eax
sete bl
call fcn.0058df3f
test bl, bl
jne 0x4a3407
lea eax, [esp + 0x54]
push 3
push eax
lea ecx, [esp + 0x18]
call fcn.00588091
mov eax, dword [eax]
push 0x6198fc
push eax
call fcn.00568a52
add esp, 8
lea ecx, [esp + 0x54]
test eax, eax
sete bl
call fcn.0058df3f
test bl, bl
je 0x4a3409
mov bl, 1
lea ecx, [esp + 0x14]
mov byte [esp + 0x1b8], 0x10
call fcn.0058df3f
test bl, bl
je 0x4a3467
mov ecx, dword [esp + 0x10]
cmp dword [ecx - 8], esi
jle 0x4a3457
lea edx, [esp + 0x14]
push 0xc
push edx
lea ecx, [esp + 0x18]
call fcn.00588091
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1bc], 0x15
call fcn.0058e078
mov byte [esp + 0x1b8], 0x10
lea ecx, [esp + 0x14]
jmp 0x4a34c9
lea eax, [esp + 0x10]
lea ecx, [esp + 0x18]
push eax
call fcn.0058e078
jmp 0x4a34ce
lea ecx, [esp + 0x14]
push esi
push ecx
lea ecx, [esp + 0x18]
call fcn.00588091
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1bc], 0x16
call fcn.0058e078
mov byte [esp + 0x1b8], 0x10
lea ecx, [esp + 0x14]
jmp 0x4a34c9
mov edx, dword [0x64a6ec]
lea eax, [esp + 0x14]
push edx
push eax
lea ecx, [esp + 0x18]
call fcn.00588091
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1bc], 0x17
call fcn.0058e078
mov byte [esp + 0x1b8], 0x10
lea ecx, [esp + 0x14]
call fcn.0058df3f
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x24]
push ecx
push str.select__from_Btype_where_TEL_like____s__
push edx
call fcn.00588507
mov eax, dword [esp + 0x30]
add esp, 0xc
lea ecx, [esp + 0xa0]
push 0
push eax
push 0
call fcn.00557dcf
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x4a3896
lea ecx, [esp + 0x28]
push ecx
push str.NAME
lea ecx, [esp + 0xa8]
call fcn.0055891c
lea edx, [esp + 0x38]
lea ecx, [esp + 0xa0]
push edx
push str.FULLNAME
call fcn.0055891c
lea eax, [esp + 0x58]
push 0
push eax
push str.PARINDEX
lea ecx, [esp + 0xac]
call fcn.005587de
lea ecx, [esp + 0x4c]
push ecx
push str.COMMENT
lea ecx, [esp + 0xa8]
call fcn.0055891c
lea edx, [esp + 0x1c8]
lea ecx, [esp + 0x44]
push edx
call fcn.0058e078
lea eax, [esp + 0x3c]
lea ecx, [esp + 0xa0]
push eax
push str.AGENT
call fcn.0055891c
lea ecx, [esp + 0x50]
push ecx
push 0x630784
lea ecx, [esp + 0xa8]
call fcn.0055891c
lea edx, [esp + 0x34]
lea ecx, [esp + 0xa0]
push edx
push str.ADDRESS
call fcn.0055891c
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
push eax
push ecx
lea edx, [esp + 0x48]
push str._.0f
push edx
call fcn.00588507
add esp, 0x10
lea eax, [esp + 0x28]
lea ecx, [esp + 0x14]
push 0x619674
push eax
push ecx
call fcn.0058e1d4
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x1bc], 0x18
call fcn.0058e078
lea ecx, [esp + 0x14]
mov byte [esp + 0x1b8], 0x10
call fcn.0058df3f
lea ecx, [esp + 0xa0]
call fcn.00557ea3
mov edx, dword [esp + 0x40]
lea eax, [esp + 0x24]
push edx
push str.select__from_Btype_where_SONHEAD_in__select_LAST_from_Btype_where_PARINDEX_s__and_SONNUM_0
push eax
call fcn.00588507
mov ecx, dword [esp + 0x30]
add esp, 0xc
push 0
push ecx
push 0
lea ecx, [esp + 0xac]
call fcn.00557dcf
mov eax, dword [esp + 0x168]
test eax, eax
jne 0x4a3664
lea edx, [esp + 0x30]
lea ecx, [esp + 0xa0]
push edx
push str.FULLNAME
call fcn.0055891c
jmp 0x4a3672
push 0x645010
lea ecx, [esp + 0x34]
call fcn.0058e0c8
lea ecx, [esp + 0xa0]
call fcn.00557ea3
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 0x645010
call fcn.0058dfad
push 0
push ecx
lea eax, [esp + 0x40]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
mov byte [esp + 0x1c8], 0x19
call fcn.0058dcb4
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x645010
mov byte [esp + 0x1d0], 0x1a
call fcn.0058dfad
push ecx
mov byte [esp + 0x1d0], 0x1b
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1d4], 0x1c
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1d8], 0x1d
mov ecx, esp
mov dword [esp + 0xb8], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1dc], 0x1e
mov ecx, esp
mov dword [esp + 0xb8], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1e0], 0x1f
mov ecx, esp
mov dword [esp + 0x9c], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1e4], 0x20
mov ecx, esp
mov dword [esp + 0xb8], esp
push 0x645010
call fcn.0058dfad
push ecx
lea edx, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0xac], esp
push edx
mov byte [esp + 0x1ec], 0x21
call fcn.0058dcb4
push ecx
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0xd0], esp
mov byte [esp + 0x1ec], 0x22
push eax
call fcn.0058dcb4
push ecx
mov byte [esp + 0x1f0], 0x23
mov ecx, esp
mov dword [esp + 0xa0], esp
push 0x645010
call fcn.0058dfad
push ecx
mov byte [esp + 0x1f4], 0x24
mov ecx, esp
mov dword [esp + 0xa8], esp
push 0x645010
call fcn.0058dfad
push ecx
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0xb0], esp
push edx
mov byte [esp + 0x1fc], 0x25
call fcn.0058dcb4
push ecx
lea eax, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0xbc], esp
push eax
mov byte [esp + 0x200], 0x26
call fcn.0058dcb4
push ecx
lea edx, [esp + 0x94]
mov ecx, esp
mov dword [esp + 0xc8], esp
push edx
mov byte [esp + 0x204], 0x27
call fcn.0058dcb4
push ecx
lea eax, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0xd4], esp
push eax
mov byte [esp + 0x208], 0x28
call fcn.0058dcb4
push ecx
lea edx, [esp + 0x78]
mov ecx, esp
mov dword [esp + 0xe0], esp
push edx
mov byte [esp + 0x20c], 0x29
call fcn.0058dcb4
mov eax, dword [esp + 0x214]
mov byte [esp + 0x208], 0x10
mov ecx, eax
shl ecx, 5
add ecx, eax
lea eax, [eax + ecx*2]
lea ecx, [eax + eax*4]
shl ecx, 4
add ecx, 0x648778
call fcn.00410670
mov esi, dword [esp + 0x1c0]
lea edx, [esp + 0x2c]
push edx
mov ecx, esi
call fcn.0058dcb4
lea ecx, [esp + 0xa0]
mov dword [esp + 0x48], ebp
mov byte [esp + 0x1b8], 0xf
call fcn.00557cc6
lea ecx, [esp + 0x58]
mov byte [esp + 0x1b8], 0xe
call fcn.0055b3f5
lea ecx, [esp + 0x30]
mov byte [esp + 0x1b8], 0xd
call fcn.0058df3f
lea ecx, [esp + 0x40]
mov byte [esp + 0x1b8], 0xc
call fcn.0058df3f
lea ecx, [esp + 0x34]
mov byte [esp + 0x1b8], 0xb
call fcn.0058df3f
lea ecx, [esp + 0x50]
mov byte [esp + 0x1b8], 0xa
call fcn.0058df3f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1b8], 9
call fcn.0058df3f
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1b8], 8
call fcn.0058df3f
lea ecx, [esp + 0x44]
mov byte [esp + 0x1b8], 7
call fcn.0058df3f
lea ecx, [esp + 0x38]
mov byte [esp + 0x1b8], 6
call fcn.0058df3f
lea ecx, [esp + 0x28]
mov byte [esp + 0x1b8], 5
call fcn.0058df3f
lea ecx, [esp + 0x2c]
mov byte [esp + 0x1b8], 4
call fcn.0058df3f
lea ecx, [esp + 0x18]
mov byte [esp + 0x1b8], 3
call fcn.0058df3f
lea ecx, [esp + 0x10]
mov byte [esp + 0x1b8], 2
call fcn.0058df3f
lea ecx, [esp + 0x24]
mov byte [esp + 0x1b8], 1
call fcn.0058df3f
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x1b8], 0
call fcn.0058df3f
mov ecx, dword [esp + 0x1b0]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1ac
ret