Function at 0x4d2a41
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5adec0
mov eax, dword fs:[0]
push eax
sub esp, 0x1e8
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0x1e0], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0x1f8]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
and dword [esp + 0x178], 0
mov dword [esp + 0x18], ebx
mov dword [esp + 0x148], eax
call fcn.0045082c
push eax
lea ecx, [esp + 0x17c]
call fcn.0045053f
and dword [esp + 0x200], 0
cmp byte [esi + 8], 0
je 0x4d2ede
push esi
mov ecx, edi
call fcn.004d20e0
lea ecx, [esp + 0x17c]
call fcn.004402df
push esi
lea eax, [esp + 0x15c]
mov byte [esp + 0x204], 1
and dword [esp + 0x174], 0
push eax
call fcn.00440308
mov byte [esp + 0x200], 2
cmp dword [eax + 0x14], 0x10
jb 0x4d2b05
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x174]
call fcn.004c2785
xor esi, esi
mov byte [esp + 0x200], 4
push esi
push 1
lea ecx, [esp + 0x160]
call fcn.00451c1f
mov ecx, dword [esp + 0x170]
call fcn.00450b41
push eax
push dword [esp + 0x174]
lea ecx, [esp + 0x180]
call fcn.004d5847
mov dword [esp + 0x1c], 0x2b645348
mov dword [esp + 0x20], 0x43456d66
mov dword [esp + 0x24], 0x30747a4b
mov dword [esp + 0x28], 0x794e5865
mov dword [esp + 0x2c], 0x316f7845
mov dword [esp + 0x30], 0x5177524a
mov dword [esp + 0x34], 0x7a526d46
mov dword [esp + 0x38], 0x38705850
mov dword [esp + 0x3c], 0x456b6842
mov dword [esp + 0x40], 0x4d6b7849
mov dword [esp + 0x44], 0x4a516941
mov dword [esp + 0x48], 0x59513259
mov dword [esp + 0x4c], 0x4e675844
mov dword [esp + 0x50], 0x67636848
mov dword [esp + 0x54], 0x556f544a
mov dword [esp + 0x58], 0x7a675149
mov dword [esp + 0x5c], 0x37396d47
mov dword [esp + 0x60], 0x6a6f5844
mov dword [esp + 0x64], 0x6d597842
mov dword [esp + 0x68], 0x6445324b
mov dword [esp + 0x6c], 0x65734263
mov dword [esp + 0x70], 0x43416947
mov dword [esp + 0x74], 0x6f497a41
mov dword [esp + 0x78], 0x464d7746
mov dword [esp + 0x7c], 0x4c6f7a45
mov dword [esp + 0x80], 0x73556e63
mov dword [esp + 0x84], 0x51596842
mov dword [esp + 0x88], 0x4641474f
mov dword [esp + 0x8c], 0x6a34424a
mov dword [esp + 0x90], 0x586b7746
mov dword [esp + 0x94], 0x2f594241
mov dword [esp + 0x98], 0x674d534a
mov dword [esp + 0x9c], 0x7273434f
mov dword [esp + 0xa0], 0x68637942
mov dword [esp + 0xa4], 0x6c42434b
mov dword [esp + 0xa8], 0x78567946
mov dword [esp + 0xac], 0x2f516845
mov dword [esp + 0xb0], 0x6e553359
mov dword [esp + 0xb4], 0x38355447
mov dword [esp + 0xb8], 0x6b38694b
mov dword [esp + 0xbc], 0x38456746
mov dword [esp + 0xc0], 0x37347849
mov dword [esp + 0xc4], 0x696b3347
mov dword [esp + 0xc8], 0x7767694e
mov dword [esp + 0xcc], 0x39774263
mov dword [esp + 0xd0], 0x3949334e
mov dword [esp + 0xd4], 0x6e5a4444
mov dword [esp + 0xd8], 0x52454350
mov dword [esp + 0xdc], 0x64416943
mov dword [esp + 0xe0], 0x67745443
mov dword [esp + 0xe4], 0x584d7745
mov dword [esp + 0xe8], 0x316b6864
mov dword [esp + 0xec], 0x6f496743
mov dword [esp + 0xf0], 0x32455141
mov dword [esp + 0xf4], 0x41414141
mov word [esp + 0xf8], 0x416e
mov dword [esp + 0x100], 0x76415466
mov dword [esp + 0x104], 0x5651794e
mov dword [esp + 0x108], 0x2b6f434c
mov dword [esp + 0x10c], 0x7a6f424a
mov dword [esp + 0x110], 0x306f444c
mov dword [esp + 0x114], 0x416b4750
mov dword [esp + 0x118], 0x74345741
mov dword [esp + 0x11c], 0x3541794b
push esi
sub esp, 0xc
mov dword [esp + 0x130], 0x4a73445a
mov ecx, esp
mov dword [esp + 0x134], 0x3551684c
lea eax, [esp + 0x10a]
mov dword [esp + 0x138], 0x38314262
lea edx, [esp + 0x2c]
mov dword [esp + 0x13c], 0x334a5350
push ecx
push eax
push edx
mov dword [esp + 0x14c], 0x41414141
mov word [esp + 0x150], 0x7749
call fcn.00450208
lea ecx, [esp + 0x148]
call fcn.004d8ec6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x204], 5
call fcn.00451547
push eax
push esi
sub esp, 0xc
lea eax, [esp + 0x14a]
mov ecx, esp
lea edx, [esp + 0x114]
push ecx
push eax
push edx
call fcn.00450208
lea ecx, [esp + 0x160]
call fcn.004d8ec6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x208], 6
call fcn.00451547
push eax
lea ecx, [esp + 0x180]
call fcn.004be53c
lea ecx, [esp + 0x14c]
call fcn.004513e1
lea ecx, [esp + 0x138]
mov byte [esp + 0x200], 4
call fcn.004513e1
push 0xd
lea ecx, [esp + 0x17c]
call fcn.004d4d18
push 0xa
lea ecx, [esp + 0x17c]
call fcn.004d4d18
mov ecx, dword [esp + 0x170]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea ecx, [esp + 0x17c]
mov byte [esp + 0x200], 0
call fcn.004330ae
and dword [esp + 0x1b4], 0
lea eax, [esp + 0x14]
push eax
mov ecx, edi
call fcn.004d24a9
mov byte [esp + 0x200], 7
lea ecx, [esp + 0x20]
mov eax, dword [eax]
push 3
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x20]
push eax
call fcn.004c2180
mov byte [esp + 0x200], 8
lea ecx, [esp + 0x1b4]
push dword [esp + 0x1c]
call fcn.004c2785
lea eax, [esp + 0x20]
cmp dword [esp + 0x1c], eax
je 0x4d2f3c
push dword [esp + 0x1c]
call fcn.0054e49f
pop ecx
mov byte [esp + 0x200], 0xb
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov ecx, dword [esp + 0x1b4]
lea ecx, [ecx - 0x10]
call fcn.004c250c
add eax, 0x10
mov dword [esp + 0x174], eax
mov byte [esp + 0x200], 0xc
lea ecx, [esp + 0x1b0]
and dword [esp + 0x1b0], 0
push ebx
call fcn.004c2785
lea eax, [esp + 0x14]
mov byte [esp + 0x200], 0xd
push eax
mov ecx, edi
call fcn.004d24a9
mov byte [esp + 0x200], 0xe
mov eax, dword [eax]
mov ebx, dword [esp + 0x178]
mov edx, dword [eax - 0xc]
mov eax, dword [esp + 0x1b0]
mov ecx, dword [eax - 0xc]
mov eax, dword [ebx - 0xc]
add eax, edx
add eax, ecx
lea ecx, [esp + 0x174]
push eax
call fcn.00450a01
mov byte [esp + 0x200], 0xd
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
mov esi, dword [esp + 0x18]
mov ecx, esi
call fcn.00450b41
push eax
push esi
lea ecx, [esp + 0x17c]
call fcn.004d5847
mov ecx, ebx
call fcn.00450b41
push eax
push ebx
lea ecx, [esp + 0x17c]
call fcn.004d5847
push 0x38
lea eax, [esp + 0x1bc]
push 0
push eax
call fcn.005533c0
add esp, 0xc
mov ecx, edi
push 0x40
call fcn.004d2989
push eax
lea ecx, [esp + 0x1c0]
call fcn.004cdbbd
push 0x20
mov byte [esp + 0x204], 0xf
call fcn.005312f2
mov esi, eax
mov dword [esp + 0x18], esi
pop ecx
test esi, esi
jne 0x4d308c
and dword [esp + 0x144], eax
lea eax, [esp + 0x138]
mov dword [esp + 0x13c], 0xb
mov dword [esp + 0x140], 0x2a
mov dword [esp + 0x138], 0x5d0d7c
push 0x5f1974
push eax
call fcn.00553b2b
mov edi, dword [esp + 0x174]
cmp dword [edi - 4], 1
mov eax, dword [edi - 0xc]
mov dword [esp + 0x18], eax
jle 0x4d30b8
push eax
lea ecx, [esp + 0x178]
call fcn.004508eb
mov edi, dword [esp + 0x174]
mov eax, dword [esp + 0x18]
push esi
push eax
push edi
lea ecx, [esp + 0x1c4]
call fcn.004cda2c
push 0xffffffffffffffff
lea ecx, [esp + 0x178]
mov esi, eax
call fcn.004c28b6
test esi, esi
je 0x4d3121
mov esi, dword [esp + 0x14]
push esi
call fcn.0054e4d7
and dword [esp + 0x148], 0
lea eax, [esp + 0x13c]
mov dword [esp + 0x140], 0xb
mov dword [esp + 0x144], 0x28
mov dword [esp + 0x13c], 0x5d0d7c
mov dword [esp], 0x5f1974
jmp 0x4d3086
and dword [esp + 0x170], 0
call fcn.0045082c
push eax
lea ecx, [esp + 0x174]
call fcn.004c3be8
mov byte [esp + 0x200], 0x10
lea ecx, [esp + 0x170]
mov eax, dword [esp + 0x1bc]
mov eax, dword [eax + 0xc]
add eax, eax
push eax
call fcn.004c3a23
mov eax, dword [esp + 0x1bc]
and dword [esp + 0x18], 0
mov esi, dword [esp + 0x14]
cmp dword [eax + 0xc], 0
jbe 0x4d3293
mov ebx, dword [esp + 0x18]
lea edi, [esp + 0x17c]
lea edx, [esp + 0x1ae]
movzx eax, byte [ebx + esi]
push eax
push 0
sub esp, 0xc
mov dword [esp + 0x190], 0x384a475a
mov ecx, esp
mov dword [esp + 0x194], 0x47556746
mov dword [esp + 0x198], 0x73416a41
mov dword [esp + 0x19c], 0x7831694f
push ecx
push edx
push edi
mov dword [esp + 0x1ac], 0x646b424d
mov dword [esp + 0x1b0], 0x4a387743
mov dword [esp + 0x1b4], 0x364e424f
mov dword [esp + 0x1b8], 0x37344449
mov dword [esp + 0x1bc], 0x486f4845
mov dword [esp + 0x1c0], 0x4363544c
mov dword [esp + 0x1c4], 0x3346774d
mov dword [esp + 0x1c8], 0x41414141
mov word [esp + 0x1cc], 0x5148
call fcn.00450208
lea ecx, [esp + 0x14c]
call fcn.004d90ca
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x208], 0x11
call fcn.004ab6d2
push eax
lea eax, [esp + 0x178]
push eax
call fcn.004c323e
add esp, 0xc
mov byte [esp + 0x200], 0x10
lea ecx, [esp + 0x138]
call fcn.004ab565
mov eax, dword [esp + 0x1bc]
lea edx, [esp + 0x1ae]
inc ebx
cmp ebx, dword [eax + 0xc]
jb 0x4d3188
mov edi, dword [esp + 0x174]
mov ebx, dword [esp + 0x178]
push esi
call fcn.0054e4d7
lea ecx, [esp + 0x174]
call fcn.004d4db5
mov esi, dword [esp + 0x170]
mov ecx, dword [esp + 0x148]
push dword [esi - 0xc]
call fcn.004c3a23
push dword [esi - 0xc]
mov ecx, dword [esp + 0x14c]
push esi
call fcn.004c3780
lea ecx, [esi - 0x10]
call fcn.00450c0a
mov byte [esp + 0x200], 0xd
lea ecx, [esp + 0x1b8]
mov dword [esp + 0x1b8], 0x5d0e68
call fcn.004cd835
mov ecx, dword [esp + 0x1b0]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea ecx, [edi - 0x10]
call fcn.00450c0a
mov ecx, dword [esp + 0x1b4]
add ecx, 0xfffffff0
call fcn.00450c0a
lea ecx, [ebx - 0x10]
call fcn.00450c0a
mov al, 1
mov ecx, dword [esp + 0x1f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1e0]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret 0xc