Function at 0x4980a0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
sub esp, 0x50
push ebx
push ebp
push esi
mov esi, dword [esp + 0x60]
push edi
push esi
call fcn.0047f870
add esp, 4
test al, al
je 0x498349
push esi
call fcn.00498020
push str.Macromedia
push esi
call fcn.00497f60
push str.Flash_Player
push esi
call fcn.00497f60
mov al, byte [esp + 0x7c]
add esp, 0x14
test al, al
je 0x498349
push str.SharedObjects
push esi
call fcn.00497f60
push esi
call fcn.00497fa0
mov eax, dword [esi]
push eax
call fcn.0047f570
add esp, 0x10
test al, al
jne 0x498126
mov eax, dword [esi]
mov ecx, 0x4de568
push eax
call fcn.0041e9a0
xor eax, eax
pop edi
mov dword [esi], eax
mov dword [esi + 4], eax
mov dword [esi + 8], eax
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
push esi
call fcn.00498020
add esp, 4
lea ecx, [esp + 0x18]
push esi
call fcn.0041b980
lea ecx, [esp + 0x18]
push 0x4d4b7c
push ecx
call fcn.00497f60
lea edx, [esp + 0x20]
push edx
call fcn.00497fa0
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x3c]
xor ebp, ebp
push eax
push ecx
mov dword [esp + 0x48], ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov bl, 1
mov byte [esp + 0x7c], 0
call fcn.0047f900
mov edi, eax
add esp, 0x14
cmp edi, ebp
je 0x4981cb
test bl, bl
je 0x4981b6
cmp dword [esp + 0x30], 1
jne 0x4981a4
cmp dword [esp + 0x38], 8
jne 0x4981a4
mov edx, dword [esp + 0x34]
mov byte [esp + 0x68], 1
push edx
push esi
call fcn.00497f60
add esp, 8
lea eax, [esp + 0x30]
push eax
push edi
call fcn.0047f9f0
add esp, 8
mov bl, al
jmp 0x49817f
push edi
call fcn.0047fae0
mov al, byte [esp + 0x6c]
add esp, 4
test al, al
jne 0x49832b
lea ecx, [esp + 0x10]
push 8
push ecx
mov byte [esp + 0x48], 0x41
mov byte [esp + 0x49], 0x42
mov byte [esp + 0x4a], 0x43
mov byte [esp + 0x4b], 0x44
mov byte [esp + 0x4c], 0x45
mov byte [esp + 0x4d], 0x46
mov byte [esp + 0x4e], 0x47
mov byte [esp + 0x4f], 0x48
mov byte [esp + 0x50], 0x4a
mov byte [esp + 0x51], 0x4b
mov byte [esp + 0x52], 0x4c
mov byte [esp + 0x53], 0x4d
mov byte [esp + 0x54], 0x4e
mov byte [esp + 0x55], 0x50
mov byte [esp + 0x56], 0x51
mov byte [esp + 0x57], 0x52
mov byte [esp + 0x58], 0x53
mov byte [esp + 0x59], 0x54
mov byte [esp + 0x5a], 0x55
mov byte [esp + 0x5b], 0x56
mov byte [esp + 0x5c], 0x57
mov byte [esp + 0x5d], 0x58
mov byte [esp + 0x5e], 0x59
mov byte [esp + 0x5f], 0x5a
mov byte [esp + 0x60], 0x32
mov byte [esp + 0x61], 0x33
mov byte [esp + 0x62], 0x34
mov byte [esp + 0x63], 0x35
mov byte [esp + 0x64], 0x36
mov byte [esp + 0x65], 0x37
mov byte [esp + 0x66], 0x38
mov byte [esp + 0x67], 0x39
call fcn.00482700
add esp, 8
test al, al
jne 0x4982b9
mov edx, dword [esi]
mov ecx, 0x4de568
push edx
call fcn.0041e9a0
mov eax, dword [esp + 0x34]
mov ecx, 0x4de568
push eax
mov dword [esi], ebp
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
call fcn.0041e9a0
mov ecx, dword [esp + 0x18]
push ecx
mov ecx, 0x4de568
call fcn.0041e9a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
push 0x4de524
push esi
call fcn.00497f60
add esp, 8
xor edi, edi
mov dl, byte [esp + edi + 0x10]
mov ecx, esi
and edx, 0x1f
mov al, byte [esp + edx + 0x40]
push eax
call fcn.0041bb60
inc edi
cmp edi, 8
jl 0x4982c9
push esi
lea ecx, [esp + 0x28]
call fcn.0041b980
lea ecx, [esp + 0x24]
push ecx
call fcn.00497fa0
mov edx, dword [esp + 0x28]
push edx
call fcn.0047f570
add esp, 8
test al, al
jne 0x49831c
mov eax, dword [esi]
mov ecx, 0x4de568
push eax
call fcn.0041e9a0
mov dword [esi], ebp
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, 0x4de568
call fcn.0041e9a0
mov edx, dword [esp + 0x34]
mov ecx, 0x4de568
push edx
call fcn.0041e9a0
mov eax, dword [esp + 0x18]
mov ecx, 0x4de568
push eax
call fcn.0041e9a0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret