Function at 0x4b9e4c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x19
push 0
push 0
dec ecx
jne 0x4b9e54
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], eax
mov ebx, dword [0x4d3294]
mov esi, dword [0x4d3808]
xor eax, eax
push ebp
push 0x4ba6da
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4ba629
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0xc]
mov eax, dword [0x4d32c0]
call fcn.0040711c
mov eax, dword [ebp - 0xc]
call fcn.0049148c
lea edx, [ebp - 0x10]
mov eax, dword [0x4d32dc]
call fcn.0040711c
mov eax, dword [ebp - 0x10]
call fcn.0049148c
lea edx, [ebp - 0x14]
mov eax, dword [0x4d36a8]
call fcn.0040711c
mov eax, dword [ebp - 0x14]
call fcn.0049148c
lea edx, [ebp - 0x18]
mov eax, dword [0x4d3818]
call fcn.0040711c
mov eax, dword [ebp - 0x18]
call fcn.0049148c
mov eax, 0x4ba6f0
call fcn.0049148c
mov eax, dword [0x4d36ac]
xor edx, edx
mov dword [eax], edx
mov eax, dword [0x4d34f0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x4d37bc]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x4d3300]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [0x4d3304]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 8]
call fcn.004909d4
mov edi, dword [ebx]
lea edx, [ebp - 4]
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x1c]
call fcn.004103fc
mov eax, ebx
mov edx, dword [ebp - 4]
call fcn.004052b0
mov eax, 0x4ba70c
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 1
push 1
mov edx, dword [ebx]
lea eax, [ebp - 0x20]
mov ecx, 0x4ba728
call fcn.00405574
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
mov eax, dword [0x4d3300]
mov eax, dword [eax]
call fcn.004956e8
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x3c]
mov ecx, 2
mov eax, 0x4ba738
call fcn.0040cb78
mov eax, dword [ebp - 0x24]
call fcn.0049148c
mov eax, 0x4ba76c
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 0
push 0
mov edx, dword [ebx]
lea eax, [ebp - 0x40]
mov ecx, 0x4ba788
call fcn.00405574
mov edx, dword [ebp - 0x40]
mov cl, 1
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov eax, dword [0x4d37bc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x54]
mov ecx, 1
mov eax, 0x4ba798
call fcn.0040cb78
mov eax, dword [ebp - 0x44]
call fcn.0049148c
mov eax, 0x4ba7c0
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 0
push 0
mov edx, dword [ebx]
lea eax, [ebp - 0x58]
mov ecx, 0x4ba7dc
call fcn.00405574
mov edx, dword [ebp - 0x58]
mov cl, 2
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov eax, dword [0x4d34f0]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0
lea edx, [ebp - 0x54]
mov ecx, 1
mov eax, 0x4ba7ec
call fcn.0040cb78
mov eax, dword [ebp - 0x5c]
call fcn.0049148c
lea eax, [ebp - 0x60]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0xb
lea edx, [ebp - 0x54]
mov ecx, 1
mov eax, 0x4ba814
call fcn.0040cb78
mov eax, dword [ebp - 0x60]
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 1
push 2
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esi]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea edx, [ebp - 0x70]
xor ecx, ecx
mov eax, 0x4ba83c
call fcn.0040cb78
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebx]
lea eax, [ebp - 0x64]
call fcn.00405574
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov edx, dword [ebx]
lea eax, [ebp - 0x74]
mov ecx, 0x4ba850
call fcn.00405574
mov ecx, dword [ebp - 0x74]
mov eax, dword [0x4d3304]
mov eax, dword [eax]
mov eax, dword [eax + 0x48]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0x60]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0x78]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x98], eax
mov byte [ebp - 0x94], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x8c], 0xb
mov eax, dword [0x4d3304]
mov eax, dword [eax]
call fcn.00492b08
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x84], 0
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0
lea edx, [ebp - 0x98]
mov ecx, 3
mov eax, 0x4ba864
call fcn.0040cb78
mov eax, dword [ebp - 0x78]
call fcn.0049148c
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0xb
lea edx, [ebp - 0x54]
mov ecx, 1
mov eax, 0x4ba89c
call fcn.0040cb78
mov eax, dword [ebp - 0x9c]
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 0
push 0
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [esi]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea eax, [ebp - 0x70]
push eax
mov edx, dword [ebx]
lea eax, [ebp - 0xa4]
mov ecx, 0x4ba8c0
call fcn.00405574
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
pop edx
call fcn.0040cb78
mov edx, dword [ebp - 0xa0]
mov cl, 1
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0xa8]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0xb
mov eax, dword [0x4d37bc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x3c]
mov ecx, 2
mov eax, 0x4ba8d0
call fcn.0040cb78
mov eax, dword [ebp - 0xa8]
call fcn.0049148c
lea eax, [ebp - 0xac]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x54], eax
mov byte [ebp - 0x50], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x48], 0xb
lea edx, [ebp - 0x54]
mov ecx, 1
mov eax, 0x4ba8f8
call fcn.0040cb78
mov eax, dword [ebp - 0xac]
call fcn.0049148c
mov eax, dword [0x4d3644]
mov eax, dword [eax]
call fcn.0046d704
push 0
push 0
lea eax, [ebp - 0xb0]
push eax
mov eax, dword [esi]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea eax, [ebp - 0x70]
push eax
mov edx, dword [ebx]
lea eax, [ebp - 0xb4]
mov ecx, 0x4ba91c
call fcn.00405574
mov eax, dword [ebp - 0xb4]
xor ecx, ecx
pop edx
call fcn.0040cb78
mov edx, dword [ebp - 0xb0]
mov cl, 2
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0xb
mov eax, dword [0x4d34f0]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x3c]
mov ecx, 2
mov eax, 0x4ba92c
call fcn.0040cb78
mov eax, dword [ebp - 0xb8]
call fcn.0049148c
push 1
push 1
mov edx, dword [ebx]
lea eax, [ebp - 0xbc]
mov ecx, 0x4ba954
call fcn.00405574
mov edx, dword [ebp - 0xbc]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0xc0]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x38], 0xb
mov eax, dword [0x4d3300]
mov eax, dword [eax]
call fcn.004956e8
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x30], 0
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x28], 0
lea edx, [ebp - 0x3c]
mov ecx, 2
mov eax, 0x4ba968
call fcn.0040cb78
mov eax, dword [ebp - 0xc0]
call fcn.0049148c
push 1
push 2
lea eax, [ebp - 0xc4]
push eax
mov eax, dword [esi]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea eax, [ebp - 0x70]
push eax
mov edx, dword [ebx]
lea eax, [ebp - 0xc8]
mov ecx, 0x4ba9a0
call fcn.00405574
mov eax, dword [ebp - 0xc8]
xor ecx, ecx
pop edx
call fcn.0040cb78
mov edx, dword [ebp - 0xc4]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.004b9a84
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3c4]
xor edx, edx
call fcn.0044e3f8
lea eax, [ebp - 0xcc]
push eax
mov eax, dword [ebx]
mov dword [ebp - 0x98], eax
mov byte [ebp - 0x94], 0xb
mov eax, dword [esi]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x8c], 0xb
mov eax, dword [0x4d3304]
mov eax, dword [eax]
call fcn.00492b08
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x84], 0
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
call fcn.00491c78
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0
lea edx, [ebp - 0x98]
mov ecx, 3
mov eax, 0x4ba9b8
call fcn.0040cb78
mov eax, dword [ebp - 0xcc]
call fcn.0049148c
call fcn.00490ef8
call fcn.0049038c
call fcn.00490630
mov eax, dword [0x4d386c]
cmp byte [eax], 0
je 0x4ba558
mov ecx, dword [ebp - 8]
mov dl, 1
mov eax, dword [0x4b76fc]
call fcn.00464074
mov edx, dword [0x4d3844]
mov dword [edx], eax
mov eax, dword [0x4d3844]
mov eax, dword [eax]
mov edx, 1
call fcn.004b8458
mov eax, dword [0x4d3844]
mov eax, dword [eax]
call fcn.00404358
mov eax, dword [0x4d3304]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
mov eax, dword [0x4d3300]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
mov eax, dword [0x4d32fc]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
mov eax, dword [0x4d37bc]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
mov eax, dword [0x4d34f0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx]
mov eax, dword [0x4d333c]
xor ecx, ecx
mov edx, 0x2ee0
call fcn.00403b38
mov edx, dword [0x4d36e0]
mov edx, dword [edx]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x360]
call fcn.00472f48
mov edx, dword [0x4d3704]
mov edx, dword [edx]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x360]
call fcn.00473048
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x360]
mov dl, 1
call fcn.00472f08
mov eax, dword [0x4d37cc]
mov byte [eax], 1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x384]
xor edx, edx
call fcn.00444e00
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov dl, 1
call fcn.00444e00
mov eax, 0x4ba9f4
call fcn.0049148c
mov dl, 1
mov eax, dword [0x4b8c78]
call fcn.004b97f8
mov dword [0x4d3254], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4ba673
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ba6e1
lea eax, [ebp - 0xcc]
mov edx, 0xd
call fcn.00405280
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00405280
lea eax, [ebp - 0x68]
mov edx, 5
call fcn.00405280
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00405280
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00405280
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.00405280
lea eax, [ebp - 4]
call fcn.0040525c
ret