Function at 0x4b6cd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c7838
mov eax, dword fs:[0]
push eax
sub esp, 0x314
mov eax, dword [0x4fe37c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x310], ecx
mov dword [ebp - 0x30c], 0
push 0x90
call fcn.0044527f
add esp, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x7c], 0
je 0x4b6d9c
push str._post_instgamehall.gif
lea ecx, [ebp - 0x98]
call fcn.00406c80
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x30c]
or eax, 1
mov dword [ebp - 0x30c], eax
push str.http:__ping.ie.sogou.com
lea ecx, [ebp - 0xb4]
call fcn.00406c80
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x30c]
or ecx, 2
mov dword [ebp - 0x30c], ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
push ecx
mov ecx, dword [ebp - 0x7c]
call fcn.0040c850
mov dword [ebp - 0x314], eax
jmp 0x4b6da6
mov dword [ebp - 0x314], 0
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0x78], edx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x74], eax
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x30c]
and ecx, 2
je 0x4b6de0
and dword [ebp - 0x30c], 0xfffffffd
lea ecx, [ebp - 0xb4]
call fcn.00406d00
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x30c]
and edx, 1
je 0x4b6e04
and dword [ebp - 0x30c], 0xfffffffe
lea ecx, [ebp - 0x98]
call fcn.00406d00
mov eax, dword [ebp - 0x74]
push eax
push 0
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
call fcn.00493790
push 0x90
call fcn.0044527f
add esp, 4
mov dword [ebp - 0xbc], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0xbc], 0
je 0x4b6eb5
push str._pv.gif
lea ecx, [ebp - 0xd8]
call fcn.00406c80
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x30c]
or ecx, 4
mov dword [ebp - 0x30c], ecx
push str.http:__pb.sogou.com
lea ecx, [ebp - 0xf4]
call fcn.00406c80
mov dword [ebp - 4], 7
mov edx, dword [ebp - 0x30c]
or edx, 8
mov dword [ebp - 0x30c], edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xf4]
push ecx
mov edx, dword [ebp - 0x310]
add edx, 0x9d8
push edx
mov ecx, dword [ebp - 0xbc]
call fcn.0040c850
mov dword [ebp - 0x318], eax
jmp 0x4b6ebf
mov dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x70], ecx
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x30c]
and edx, 8
je 0x4b6eff
and dword [ebp - 0x30c], 0xfffffff7
lea ecx, [ebp - 0xf4]
call fcn.00406d00
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x30c]
and eax, 4
je 0x4b6f23
and dword [ebp - 0x30c], 0xfffffffb
lea ecx, [ebp - 0xd8]
call fcn.00406d00
mov ecx, dword [ebp - 0x70]
push ecx
push 1
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
call fcn.00493790
lea ecx, [ebp - 0x30]
call fcn.00406f20
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
call fcn.00406f20
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6c]
call fcn.00406f20
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x310]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x310]
mov eax, dword [edx + 0xe0]
call eax
lea ecx, [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x310]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x310]
mov edx, dword [eax + 0x100]
call edx
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x320], eax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x320]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.00406ff0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x110]
call fcn.00406fd0
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x6c]
push eax
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
call fcn.00493e70
push 1
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
call fcn.004936f0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x4b72c7
push 0x4e566c
lea ecx, [ebp - 0x12c]
call fcn.00406c80
mov byte [ebp - 4], 0xe
push str.uigs_productid
lea ecx, [ebp - 0x148]
call fcn.00406c80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x148]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x148]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x12c]
call fcn.00406d00
push 0x4e5680
lea ecx, [ebp - 0x164]
call fcn.00406c80
mov byte [ebp - 4], 0x10
push str.ufoid
lea ecx, [ebp - 0x180]
call fcn.00406c80
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x180]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x180]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x164]
call fcn.00406d00
push str.mini
lea ecx, [ebp - 0x19c]
call fcn.00406c80
mov byte [ebp - 4], 0x12
push str.ptype
lea ecx, [ebp - 0x1b8]
call fcn.00406c80
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x19c]
push edx
lea eax, [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1b8]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x19c]
call fcn.00406d00
push str.instgamehall
lea ecx, [ebp - 0x1d4]
call fcn.00406c80
mov byte [ebp - 4], 0x14
push str.pcode
lea ecx, [ebp - 0x1f0]
call fcn.00406c80
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1f0]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1f0]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1d4]
call fcn.00406d00
push str.spid
lea ecx, [ebp - 0x20c]
call fcn.00406c80
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00493fa0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x20c]
call fcn.00406d00
push str.ssuv
lea ecx, [ebp - 0x228]
call fcn.00406c80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x228]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00493fd0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x228]
call fcn.00406d00
push 0x4e56c4
lea ecx, [ebp - 0x244]
call fcn.00406c80
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x244]
push edx
mov ecx, dword [ebp - 0x10]
call fcn.00493f70
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x244]
call fcn.00406d00
push str.2101
lea ecx, [ebp - 0x260]
call fcn.00406c80
mov byte [ebp - 4], 0x19
push str.module
lea ecx, [ebp - 0x27c]
call fcn.00406c80
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x27c]
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x27c]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x260]
call fcn.00406d00
push str.ct.gif
lea ecx, [ebp - 0x298]
call fcn.00406c80
mov byte [ebp - 4], 0x1b
push 0x4e56e0
lea ecx, [ebp - 0x2b4]
call fcn.00406c80
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x298]
push edx
lea eax, [ebp - 0x2b4]
push eax
mov ecx, dword [ebp - 0x10]
call fcn.00493d20
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2b4]
call fcn.00406d00
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x298]
call fcn.00406d00
push 0
mov ecx, dword [ebp - 0x310]
add ecx, 0x9d8
call fcn.004936f0
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x4b737d
push str.hrv1
lea ecx, [ebp - 0x2d0]
call fcn.00406c80
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2d0]
push ecx
mov ecx, dword [ebp - 0x34]
call fcn.00493fd0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2d0]
call fcn.00406d00
push 0x4e56e8
lea ecx, [ebp - 0x2ec]
call fcn.00406c80
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x2ec]
push edx
mov ecx, dword [ebp - 0x34]
call fcn.00493fa0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2ec]
call fcn.00406d00
push 0x4e56ec
lea ecx, [ebp - 0x308]
call fcn.00406c80
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x308]
push eax
mov ecx, dword [ebp - 0x34]
call fcn.00493f70
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x308]
call fcn.00406d00
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6c]
call fcn.00406fd0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x50]
call fcn.00406fd0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00406fd0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004443e3
mov esp, ebp
pop ebp
ret