Function at 0x4df4fd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1ac
mov eax, 0x5af09d
call fcn.00553bf3
mov esi, ecx
mov dword [ebp - 4], 1
xor ebx, ebx
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1c], ebx
call fcn.0045082c
push eax
lea ecx, [ebp - 0x1c]
call fcn.004c3be8
mov byte [ebp - 4], 2
mov dword [ebp - 0x14], ebx
call fcn.0045082c
push eax
lea ecx, [ebp - 0x14]
call fcn.004c3be8
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], ebx
call fcn.0045082c
push eax
lea ecx, [ebp - 0x18]
call fcn.004c3be8
mov byte [ebp - 4], 4
lea eax, [ebp - 0x3a]
push ebx
sub esp, 0xc
mov dword [ebp - 0x20], ebx
mov ecx, esp
mov dword [ebp - 0xb0], 0x6c674654
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xac], 0x71594344
mov dword [ebp - 0xa8], 0x54416e4f
push ecx
push eax
push edx
mov dword [ebp - 0xa4], 0x58596842
mov dword [ebp - 0xa0], 0x5a517842
mov dword [ebp - 0x9c], 0x68775441
mov dword [ebp - 0x98], 0x496b445a
mov dword [ebp - 0x94], 0x2f677948
mov dword [ebp - 0x90], 0x38776a61
mov dword [ebp - 0x8c], 0x6141684b
mov dword [ebp - 0x88], 0x2f557a43
mov dword [ebp - 0x84], 0x734e544c
mov dword [ebp - 0x80], 0x4f4d7a4e
mov dword [ebp - 0x7c], 0x4473794c
mov dword [ebp - 0x78], 0x496f7844
mov dword [ebp - 0x74], 0x674d794d
mov dword [ebp - 0x70], 0x375a6d45
mov dword [ebp - 0x6c], 0x68736841
mov dword [ebp - 0x68], 0x394e6861
mov dword [ebp - 0x64], 0x6b457846
mov dword [ebp - 0x60], 0x336b7a43
mov dword [ebp - 0x5c], 0x6b556d4b
mov dword [ebp - 0x58], 0x644d6966
mov dword [ebp - 0x54], 0x7742334f
mov dword [ebp - 0x50], 0x676f5443
mov dword [ebp - 0x4c], 0x3364334d
mov dword [ebp - 0x48], 0x384d674e
mov dword [ebp - 0x44], 0x5941574b
mov dword [ebp - 0x40], 0x41414141
mov word [ebp - 0x3c], 0x6755
call fcn.00450208
lea ecx, [ebp - 0x30]
call fcn.0052fed7
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.004ab6d2
push eax
lea ecx, [ebp - 0x20]
call fcn.004c3491
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 7
call fcn.004ab565
push ebx
sub esp, 0xc
mov dword [ebp - 0x24], ebx
mov ecx, esp
mov dword [ebp - 0x1a0], 0x2f734753
lea eax, [ebp - 0xb2]
mov dword [ebp - 0x19c], 0x6b6f7744
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x198], 0x474d4866
push ecx
push eax
push edx
mov dword [ebp - 0x194], 0x6e596a65
mov dword [ebp - 0x190], 0x36387a43
mov dword [ebp - 0x18c], 0x50556a43
mov dword [ebp - 0x188], 0x38565162
mov dword [ebp - 0x184], 0x36356e48
mov dword [ebp - 0x180], 0x6e594350
mov dword [ebp - 0x17c], 0x5245474f
mov dword [ebp - 0x178], 0x456b4247
mov dword [ebp - 0x174], 0x52733266
mov dword [ebp - 0x170], 0x534d784c
mov dword [ebp - 0x16c], 0x57496e49
mov dword [ebp - 0x168], 0x5573674c
mov dword [ebp - 0x164], 0x3249544d
mov dword [ebp - 0x160], 0x726f684c
mov dword [ebp - 0x15c], 0x78517844
mov dword [ebp - 0x158], 0x38707741
mov dword [ebp - 0x154], 0x69736a4c
mov dword [ebp - 0x150], 0x5a6f534d
mov dword [ebp - 0x14c], 0x48636d50
mov dword [ebp - 0x148], 0x32597a4c
mov dword [ebp - 0x144], 0x4b4d6964
mov dword [ebp - 0x140], 0x44413244
mov dword [ebp - 0x13c], 0x7049524a
mov dword [ebp - 0x138], 0x766f334f
mov dword [ebp - 0x134], 0x6a4d4366
mov dword [ebp - 0x130], 0x6a4d7948
mov dword [ebp - 0x12c], 0x666f5444
mov dword [ebp - 0x128], 0x44454444
mov dword [ebp - 0x124], 0x3151794c
mov dword [ebp - 0x120], 0x4d307949
mov dword [ebp - 0x11c], 0x5877674b
mov dword [ebp - 0x118], 0x566b6d41
mov dword [ebp - 0x114], 0x4830694d
mov dword [ebp - 0x110], 0x4d67524d
mov dword [ebp - 0x10c], 0x78353349
mov dword [ebp - 0x108], 0x2f56444e
mov dword [ebp - 0x104], 0x5a6b7a48
mov dword [ebp - 0x100], 0x68497741
mov dword [ebp - 0xfc], 0x35687848
mov dword [ebp - 0xf8], 0x6330694e
mov dword [ebp - 0xf4], 0x67636a41
mov dword [ebp - 0xf0], 0x674a5345
mov dword [ebp - 0xec], 0x4e63544a
mov dword [ebp - 0xe8], 0x59734449
mov dword [ebp - 0xe4], 0x47344250
mov dword [ebp - 0xe0], 0x6a306a48
mov dword [ebp - 0xdc], 0x62594741
mov dword [ebp - 0xd8], 0x716b6842
mov dword [ebp - 0xd4], 0x7749774b
mov dword [ebp - 0xd0], 0x72594148
mov dword [ebp - 0xcc], 0x76705845
mov dword [ebp - 0xc8], 0x6d554245
mov dword [ebp - 0xc4], 0x55635846
mov dword [ebp - 0xc0], 0x76554250
mov dword [ebp - 0xbc], 0x39306a43
mov dword [ebp - 0xb8], 0x41414141
mov word [ebp - 0xb4], 0x5172
call fcn.00450208
lea ecx, [ebp - 0x1b8]
call fcn.0052fed7
add esp, 0xc
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.004ab6d2
push eax
lea ecx, [ebp - 0x24]
call fcn.004c3491
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0xa
call fcn.004ab565
mov ecx, dword [ebp + 0x18]
mov eax, dword [ebp + 0xc]
sub ecx, dword [ebp + 0x14]
sub eax, dword [ebp + 8]
xor ecx, eax
test ecx, 0xfffffffc
je 0x4df95b
mov ebx, 0x915
jmp 0x4dfaf7
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 0xb
cmp dword [esi + 8], 0
je 0x4dfae3
lea eax, [ebp - 0x34]
push eax
push ecx
push dword [esi + 8]
lea ecx, [ebp - 0x2c]
call fcn.004ae7aa
test eax, eax
je 0x4dfae3
cmp dword [esi + 0x10], ebx
jne 0x4dfae3
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
call fcn.004afa51
test eax, eax
je 0x4df9a9
mov ebx, 0x913
jmp 0x4dfae8
lea eax, [ebp - 0x1a4]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004c22da
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xc
call fcn.004c2e65
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x4dfae8
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], ebx
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x14]
call fcn.004c22da
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xd
call fcn.004c2e65
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1a8]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov edx, dword [ebp + 0xc]
mov esi, ebx
mov ecx, dword [ebp + 8]
mov eax, edx
sub eax, ecx
sar eax, 2
test eax, eax
je 0x4dfaa3
mov edi, dword [ebp - 0x18]
cmp dword [edi - 0xc], 0
je 0x4dfa51
push dword [ecx + esi*4]
lea ecx, [ebp - 0x18]
call fcn.004c3166
test eax, eax
je 0x4dfa5f
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov eax, edx
inc esi
sub eax, ecx
sar eax, 2
cmp esi, eax
jb 0x4dfa36
jmp 0x4dfaa3
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x14]
call fcn.004c22da
mov byte [ebp - 4], 0xe
mov edi, dword [eax]
mov ecx, edi
mov eax, dword [ebp + 0x14]
mov esi, dword [eax + esi*4]
call fcn.004c3b60
push eax
push edi
mov ecx, esi
call fcn.004c3ad4
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x1ac]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea eax, [ebp - 0x1a4]
push eax
push dword [ebp - 0x20]
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004c22da
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0xf
call fcn.004c2e65
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x34]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], ebx
jne 0x4df9e8
jmp 0x4dfae8
mov ebx, 0x4cf
cmp dword [ebp - 0x28], 0
je 0x4dfaf7
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 0x24]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov ecx, dword [ebp - 0x20]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov ecx, dword [ebp - 0x18]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov ecx, dword [ebp - 0x14]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00450c0a
lea ecx, [ebp + 8]
call fcn.004bb412
lea ecx, [ebp + 0x14]
call fcn.00521e03
mov eax, ebx
call fcn.00553ba2
ret 0x18