Function at 0x4ae060
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d3a1a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
mov dword [esi], 0x5fe948
mov edi, dword [esi + 0x4a4]
xor ebx, ebx
cmp edi, ebx
mov dword [ebp - 4], 0x56
je 0x4ae0b2
mov ecx, edi
call fcn.004a50f0
push edi
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4a4], ebx
mov edi, dword [esi + 0x4a8]
cmp edi, ebx
je 0x4ae0da
lea ecx, [edi + 0x14]
call fcn.004620f0
mov ecx, edi
call fcn.004d8db0
push edi
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4a8], ebx
mov edi, dword [esi + 0x4ac]
cmp edi, ebx
je 0x4ae0fa
mov ecx, edi
call fcn.0051e350
push edi
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4ac], ebx
mov edi, dword [esi + 0x4a59c]
cmp edi, ebx
je 0x4ae11a
mov ecx, edi
call fcn.004aa060
push edi
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4a59c], ebx
mov edi, dword [esi + 0x4a5a0]
cmp edi, ebx
je 0x4ae13a
mov ecx, edi
call fcn.004350b0
push edi
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4a5a0], ebx
mov ecx, dword [0x6453c8]
cmp ecx, ebx
je 0x4ae15a
mov edi, ecx
call fcn.0046ef60
push edi
call fcn.005c88b6
add esp, 4
mov dword [0x6453c8], ebx
mov eax, dword [esi + 0x4aae8]
mov ecx, dword [eax + 4]
lea edi, [esi + 0x4aae4]
push ecx
mov ecx, edi
call fcn.004ab430
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [edi + 8], ebx
mov dword [eax], eax
mov edi, dword [edi + 4]
lea ecx, [esi + 0x4aad4]
mov dword [edi + 8], edi
call fcn.004aa060
xor eax, eax
mov dword [esi + 0x2c984], ebx
push fcn.004c99a0
mov ecx, 0x4800
lea edi, [esi + 0x2c988]
rep stosd dword es:[edi], eax
push 0x400
mov ecx, 0x68
lea edi, [esi + 0x3e988]
rep stosd dword es:[edi], eax
push 0x20
lea edx, [esi + 0x4ab90]
mov dword [esi + 0x3eb28], ebx
mov ecx, 0x19a
lea edi, [esi + 0x3eb2c]
push edx
rep stosd dword es:[edi], eax
mov byte [ebp - 4], 0x55
call fcn.005c89e7
lea ecx, [esi + 0x4ab64]
mov byte [ebp - 4], 0x54
call fcn.004067c0
lea ecx, [esi + 0x4ab34]
mov byte [ebp - 4], 0x53
call fcn.004864c0
lea ecx, [esi + 0x4ab04]
mov byte [ebp - 4], 0x52
call fcn.004864c0
mov eax, dword [esi + 0x4aaf4]
cmp eax, ebx
je 0x4ae221
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aaf4], ebx
mov dword [esi + 0x4aaf8], ebx
mov dword [esi + 0x4aafc], ebx
mov eax, dword [esi + 0x4aae8]
mov ecx, dword [eax]
lea edi, [esi + 0x4aae4]
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x50
call fcn.004abb10
mov eax, dword [edi + 4]
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x4aad4]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov byte [ebp - 4], 0x4f
call fcn.004aa060
mov eax, dword [esi + 0x4aac8]
cmp eax, ebx
je 0x4ae286
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aac8], ebx
mov dword [esi + 0x4aacc], ebx
mov dword [esi + 0x4aad0], ebx
mov eax, dword [esi + 0x4aab8]
cmp eax, ebx
je 0x4ae2ab
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aab8], ebx
mov dword [esi + 0x4aabc], ebx
mov dword [esi + 0x4aac0], ebx
mov eax, dword [esi + 0x4aaa8]
cmp eax, ebx
je 0x4ae2d0
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aaa8], ebx
mov dword [esi + 0x4aaac], ebx
mov dword [esi + 0x4aab0], ebx
mov eax, dword [esi + 0x4aa98]
cmp eax, ebx
je 0x4ae2f5
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aa98], ebx
mov dword [esi + 0x4aa9c], ebx
mov dword [esi + 0x4aaa0], ebx
mov eax, dword [esi + 0x4aa88]
cmp eax, ebx
je 0x4ae31a
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aa88], ebx
mov dword [esi + 0x4aa8c], ebx
mov dword [esi + 0x4aa90], ebx
mov eax, dword [esi + 0x4aa78]
cmp eax, ebx
je 0x4ae33f
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x4aa5c]
mov dword [esi + 0x4aa78], ebx
mov dword [esi + 0x4aa7c], ebx
mov dword [esi + 0x4aa80], ebx
mov byte [ebp - 4], 0x48
call fcn.004a6b90
lea ecx, [esi + 0x4aa4c]
mov byte [ebp - 4], 0x47
call fcn.004a6b90
lea ecx, [esi + 0x4aa3c]
mov byte [ebp - 4], 0x46
call fcn.004aa060
mov eax, dword [esi + 0x4aa20]
cmp eax, ebx
je 0x4ae391
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4aa20], ebx
mov dword [esi + 0x4aa24], ebx
mov dword [esi + 0x4aa28], ebx
mov eax, dword [esi + 0x4aa10]
cmp eax, ebx
je 0x4ae3b6
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x4a990]
mov dword [esi + 0x4aa10], ebx
mov dword [esi + 0x4aa14], ebx
mov dword [esi + 0x4aa18], ebx
mov byte [ebp - 4], 0x43
call fcn.004a7b60
lea ecx, [esi + 0x4a914]
mov byte [ebp - 4], 0x42
call fcn.004a7b60
lea ecx, [esi + 0x4a898]
mov byte [ebp - 4], 0x41
call fcn.004a7b60
lea ecx, [esi + 0x4a5e8]
mov byte [ebp - 4], pe_nt_image_headers32
call fcn.00495470
lea ecx, [esi + 0x49f90]
mov byte [ebp - 4], 0x3f
call fcn.0055e8f0
mov ecx, dword [fcn.005ea35c]
push ecx
push 0xa
lea eax, [esi + 0x49e1c]
push 0x1c
push eax
mov byte [ebp - 4], 0x3e
call fcn.005c89e7
mov edx, dword [fcn.005ea35c]
push edx
push 0xa
lea eax, [esi + 0x49cb4]
push 0x1c
push eax
mov byte [ebp - 4], 0x3d
call fcn.005c89e7
push fcn.0042f520
push 2
push 0x1b8
lea eax, [esi + 0x49944]
push eax
mov byte [ebp - 4], 0x3c
call fcn.005c89e7
push fcn.0042f520
push 2
push 0x1b8
lea ecx, [esi + 0x49420]
push ecx
mov byte [ebp - 4], 0x3b
call fcn.005c89e7
push fcn.0042f520
push 2
push 0x1b8
lea edx, [esi + 0x490ac]
push edx
mov byte [ebp - 4], 0x3a
call fcn.005c89e7
mov eax, dword [esi + 0x4909c]
cmp eax, ebx
je 0x4ae4b0
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4909c], ebx
mov dword [esi + 0x490a0], ebx
mov dword [esi + 0x490a4], ebx
mov eax, dword [esi + 0x47ff4]
mov ecx, dword [eax]
lea edi, [esi + 0x47ff0]
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x38
call fcn.004a2bf0
mov eax, dword [edi + 4]
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x47f98]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov byte [ebp - 4], 0x37
call fcn.004ac580
lea ecx, [esi + 0x47ea8]
mov byte [ebp - 4], 0x36
call fcn.00468340
lea ecx, [esi + 0x47e98]
mov byte [ebp - 4], 0x35
call fcn.004ac580
lea ecx, [esi + 0x47e2c]
mov byte [ebp - 4], 0x34
call fcn.004a5f00
lea ecx, [esi + 0x47d40]
mov byte [ebp - 4], 0x33
call fcn.00495340
lea ecx, [esi + 0x47c5c]
mov byte [ebp - 4], 0x32
call fcn.00495340
push fcn.0056a7b0
push 0xa
push 0x20
lea ecx, [esi + 0x47a80]
push ecx
mov byte [ebp - 4], 0x31
call fcn.005c89e7
lea ecx, [esi + 0x479a8]
mov byte [ebp - 4], 0x30
call fcn.00495230
lea ecx, [esi + 0x47980]
mov byte [ebp - 4], 0x2f
call dword [fcn.005ea35c]
lea ecx, [esi + 0x47960]
mov byte [ebp - 4], 0x2e
call dword [fcn.005ea35c]
lea ecx, [esi + 0x47944]
mov byte [ebp - 4], 0x2d
call dword [fcn.005ea35c]
lea ecx, [esi + 0x47928]
mov byte [ebp - 4], 0x2c
call dword [fcn.005ea35c]
push fcn.0056a7b0
push 0x10e
push pe_nt_image_headers32
lea edx, [esi + 0x435a0]
push edx
mov byte [ebp - 4], 0x2b
call fcn.005c89e7
lea ecx, [esi + 0x43574]
mov byte [ebp - 4], 0x2a
call dword [fcn.005ea35c]
lea ecx, [esi + 0x43554]
mov byte [ebp - 4], 0x29
call dword [fcn.005ea35c]
lea ecx, [esi + 0x43538]
mov byte [ebp - 4], 0x28
call dword [fcn.005ea35c]
lea ecx, [esi + 0x4351c]
mov byte [ebp - 4], 0x27
call dword [fcn.005ea35c]
push fcn.0056a7b0
mov byte [ebp - 4], 0x26
push 0x10e
push pe_nt_image_headers32
lea eax, [esi + 0x3f194]
push eax
call fcn.005c89e7
push fcn.004951b0
push 0x400
push 0xb0
lea ecx, [esi + 0x978]
push ecx
mov byte [ebp - 4], 0x25
call fcn.005c89e7
lea ecx, [esi + 0x8b0]
mov byte [ebp - 4], 0x24
call fcn.004adff0
lea ecx, [esi + 0x810]
mov byte [ebp - 4], 0x23
call fcn.004adff0
lea ecx, [esi + 0x7f4]
mov byte [ebp - 4], 0x22
call dword [fcn.005ea35c]
lea ecx, [esi + 0x7d8]
mov byte [ebp - 4], 0x21
call dword [fcn.005ea35c]
mov eax, dword [esi + 0x7c8]
cmp eax, ebx
je 0x4ae69d
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x7ac]
mov dword [esi + 0x7c8], ebx
mov dword [esi + 0x7cc], ebx
mov dword [esi + 0x7d0], ebx
mov byte [ebp - 4], 0x1f
call fcn.004a6740
lea ecx, [esi + 0x6dc]
mov byte [ebp - 4], 0x1e
call fcn.004aa940
lea ecx, [esi + 0x630]
mov byte [ebp - 4], 0x1d
call fcn.004aa940
lea ecx, [esi + 0x5d4]
mov byte [ebp - 4], 0x1c
call fcn.004a7ae0
lea ecx, [esi + 0x578]
mov byte [ebp - 4], 0x1b
call fcn.004a7ae0
mov eax, dword [esi + 0x56c]
cmp eax, ebx
je 0x4ae70d
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x56c], ebx
mov dword [esi + 0x570], ebx
mov dword [esi + 0x574], ebx
mov eax, dword [esi + 0x55c]
cmp eax, ebx
je 0x4ae732
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x55c], ebx
mov dword [esi + 0x560], ebx
mov dword [esi + 0x564], ebx
mov eax, dword [esi + 0x524]
cmp eax, ebx
je 0x4ae757
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x524], ebx
mov dword [esi + 0x528], ebx
mov dword [esi + 0x52c], ebx
mov eax, dword [esi + 0x514]
cmp eax, ebx
je 0x4ae77c
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x514], ebx
mov dword [esi + 0x518], ebx
mov dword [esi + 0x51c], ebx
mov eax, dword [esi + 0x500]
cmp eax, ebx
je 0x4ae7a1
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x500], ebx
mov dword [esi + 0x504], ebx
mov dword [esi + 0x508], ebx
mov eax, dword [esi + 0x4f0]
cmp eax, ebx
je 0x4ae7c6
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4f0], ebx
mov dword [esi + 0x4f4], ebx
mov dword [esi + 0x4f8], ebx
mov eax, dword [esi + 0x4d4]
cmp eax, ebx
je 0x4ae7eb
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x4d4], ebx
mov dword [esi + 0x4d8], ebx
mov dword [esi + 0x4dc], ebx
mov eax, dword [esi + 0x4c4]
cmp eax, ebx
je 0x4ae810
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x47c]
mov dword [esi + 0x4c4], ebx
mov dword [esi + 0x4c8], ebx
mov dword [esi + 0x4cc], ebx
mov byte [ebp - 4], 0x14
call dword [fcn.005ea35c]
mov eax, dword [esi + 0x460]
cmp eax, ebx
je 0x4ae845
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x460], ebx
mov dword [esi + 0x464], ebx
mov dword [esi + 0x468], ebx
mov eax, dword [esi + 0x434]
cmp eax, ebx
je 0x4ae86a
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x434], ebx
mov dword [esi + 0x438], ebx
mov dword [esi + 0x43c], ebx
mov eax, dword [esi + 0x424]
cmp eax, ebx
je 0x4ae88f
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x424], ebx
mov dword [esi + 0x428], ebx
mov dword [esi + 0x42c], ebx
mov eax, dword [esi + 0x3f0]
cmp eax, ebx
je 0x4ae8b4
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x3f0], ebx
mov dword [esi + 0x3f4], ebx
mov dword [esi + 0x3f8], ebx
mov eax, dword [esi + 0x3dc]
cmp eax, ebx
je 0x4ae8d9
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x3dc], ebx
mov dword [esi + 0x3e0], ebx
mov dword [esi + 0x3e4], ebx
mov eax, dword [esi + 0x3cc]
cmp eax, ebx
je 0x4ae8fe
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x3cc], ebx
mov dword [esi + 0x3d0], ebx
mov dword [esi + 0x3d4], ebx
mov eax, dword [esi + 0x3bc]
cmp eax, ebx
je 0x4ae923
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x3bc], ebx
mov dword [esi + 0x3c0], ebx
mov dword [esi + 0x3c4], ebx
mov eax, dword [esi + 0x3a4]
cmp eax, ebx
je 0x4ae948
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x3a4], ebx
mov dword [esi + 0x3a8], ebx
mov dword [esi + 0x3ac], ebx
mov eax, dword [esi + 0x38c]
mov ecx, dword [eax]
lea edi, [esi + 0x388]
push eax
push ecx
lea edx, [ebp - 0x14]
push edx
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.0048f6c0
mov eax, dword [edi + 4]
push eax
call fcn.005c88b6
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov eax, dword [esi + 0x37c]
add esp, 4
cmp eax, ebx
je 0x4ae99e
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x37c], ebx
mov dword [esi + 0x380], ebx
mov dword [esi + 0x384], ebx
mov eax, dword [esi + 0x368]
cmp eax, ebx
je 0x4ae9c3
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x368], ebx
mov dword [esi + 0x36c], ebx
mov dword [esi + 0x370], ebx
mov eax, dword [esi + 0x358]
cmp eax, ebx
je 0x4ae9e8
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x358], ebx
mov dword [esi + 0x35c], ebx
mov dword [esi + 0x360], ebx
mov eax, dword [esi + 0x348]
cmp eax, ebx
je 0x4aea0d
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x348], ebx
mov dword [esi + 0x34c], ebx
mov dword [esi + 0x350], ebx
mov eax, dword [esi + 0x338]
cmp eax, ebx
je 0x4aea32
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x338], ebx
mov dword [esi + 0x33c], ebx
mov dword [esi + 0x340], ebx
mov eax, dword [esi + 0x324]
cmp eax, ebx
je 0x4aea57
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x324], ebx
mov dword [esi + 0x328], ebx
mov dword [esi + 0x32c], ebx
mov eax, dword [esi + 0x314]
cmp eax, ebx
je 0x4aea7c
push eax
call fcn.005c88b6
add esp, 4
mov dword [esi + 0x314], ebx
mov dword [esi + 0x318], ebx
mov dword [esi + 0x31c], ebx
mov eax, dword [esi + 0x308]
mov ecx, dword [eax]
lea edi, [esi + 0x304]
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.0049bf20
mov eax, dword [edi + 4]
push eax
call fcn.005c88b6
add esp, 4
lea ecx, [esi + 0x2a4]
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov byte [ebp - 4], 2
call fcn.0042f520
lea ecx, [esi + 0x40]
mov byte [ebp - 4], 1
call fcn.0042f520
mov eax, dword [esi + 0x34]
cmp eax, ebx
je 0x4aeaea
push eax
call fcn.005c88b6
add esp, 4
mov ecx, esi
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [ebp - 4], 0xffffffff
call dword [0x5ea8a0]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret