Function at 0x4b7d0a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5ab14c
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x5f4748]
xor eax, esp
mov dword [esp + 0x160], eax
push ebx
push esi
push edi
mov eax, dword [0x5f4748]
xor eax, esp
push eax
lea eax, [esp + 0x178]
mov dword fs:[0], eax
mov dword [esp + 0xf0], ecx
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov esi, dword [ebp + 8]
push eax
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], ebx
call fcn.004b4acb
test al, al
je 0x4b85fc
push esi
lea ecx, [esp + 0x15c]
mov dword [esp + 0x15c], ebx
call fcn.004c2785
mov dword [esp + 0x180], ebx
lea edi, [esp + 0x160]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, ebx
mov dword [esp + 0x160], ebx
mov dword [esp + 0xec], eax
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], ebx
mov byte [esp + 0x180], 1
lea eax, [esp + 0x154]
push eax
push ebx
sub esp, 0xc
mov dword [esp + 0x168], ebx
mov ecx, esp
mov dword [esp + 0x170], ebx
lea eax, [esp + 0xeb]
mov dword [esp + 0x30], 0x69737a62
lea edx, [esp + 0x30]
mov dword [esp + 0x34], 0x6f417948
push ecx
push eax
push edx
mov dword [esp + 0x44], 0x68345243
mov dword [esp + 0x48], 0x30736a50
mov dword [esp + 0x4c], 0x3049474f
mov dword [esp + 0x50], 0x70455846
mov dword [esp + 0x54], 0x36346745
mov dword [esp + 0x58], 0x52516841
mov dword [esp + 0x5c], 0x6f77444a
mov dword [esp + 0x60], 0x55677841
mov dword [esp + 0x64], 0x58554143
mov dword [esp + 0x68], 0x62634747
mov dword [esp + 0x6c], 0x4d456e42
mov dword [esp + 0x70], 0x564d414a
mov dword [esp + 0x74], 0x574d7a4f
mov dword [esp + 0x78], 0x304a6944
mov dword [esp + 0x7c], 0x45457949
mov dword [esp + 0x80], 0x79514148
mov dword [esp + 0x84], 0x2b31484d
mov dword [esp + 0x88], 0x5a4d514d
mov dword [esp + 0x8c], 0x344a6d4a
mov dword [esp + 0x90], 0x72307759
mov dword [esp + 0x94], 0x416b7765
mov dword [esp + 0x98], 0x54344144
mov dword [esp + 0x9c], 0x6b515763
mov dword [esp + 0xa0], 0x4b45534b
mov dword [esp + 0xa4], 0x41494250
mov dword [esp + 0xa8], 0x2f783348
mov dword [esp + 0xac], 0x7a5a6943
mov dword [esp + 0xb0], 0x5149444c
mov dword [esp + 0xb4], 0x70456941
mov dword [esp + 0xb8], 0x73707749
mov dword [esp + 0xbc], 0x33426e4e
mov dword [esp + 0xc0], 0x77555248
mov dword [esp + 0xc4], 0x6b4d444c
mov dword [esp + 0xc8], 0x58386945
mov dword [esp + 0xcc], 0x72305359
mov dword [esp + 0xd0], 0x6b674148
mov dword [esp + 0xd4], 0x7573694d
mov dword [esp + 0xd8], 0x48495444
mov dword [esp + 0xdc], 0x65556764
mov dword [esp + 0xe0], 0x4d675345
mov dword [esp + 0xe4], 0x65387942
mov dword [esp + 0xe8], 0x375a5245
mov dword [esp + 0xec], 0x685a794b
mov dword [esp + 0xf0], 0x41414150
mov word [esp + 0xf4], 0x4941
mov byte [esp + 0xf6], 0x63
call fcn.00450208
lea ecx, [esp + 0x15c]
call fcn.004c2ee6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x188], 2
call fcn.00451547
push eax
lea eax, [esp + 0x164]
push eax
lea ecx, [esp + 0x164]
call fcn.004b9c2e
lea ecx, [esp + 0x148]
mov byte [esp + 0x180], 4
call fcn.004513e1
mov eax, dword [esp + 0x15c]
cmp dword [eax - 0xc], 0
je 0x4b81a8
lea esi, [esp + 0xf4]
lea edi, [esp + 0x12b]
push eax
lea ecx, [esp + 0x1c]
call fcn.004c2785
lea eax, [esp + 0x18]
mov byte [esp + 0x180], 5
push eax
lea ecx, [esp + 0x164]
call fcn.004bb16e
mov byte [esp + 0x180], 4
mov ecx, dword [esp + 0x18]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea eax, [esp + 0x154]
mov dword [esp + 0xf4], 0x52383362
push eax
push ebx
sub esp, 0xc
mov dword [esp + 0x10c], 0x785a6a4a
mov ecx, esp
mov dword [esp + 0x110], 0x53555342
mov dword [esp + 0x114], 0x626b4148
mov dword [esp + 0x118], 0x6f416a49
push ecx
push edi
push esi
mov dword [esp + 0x128], 0x76594443
mov dword [esp + 0x12c], 0x79304162
mov dword [esp + 0x130], 0x34735250
mov dword [esp + 0x134], 0x6573524b
mov dword [esp + 0x138], 0x41347765
mov dword [esp + 0x13c], 0x2f5a6d4d
mov dword [esp + 0x140], 0x33427a47
mov dword [esp + 0x144], 0x41417743
mov word [esp + 0x148], 0x4341
mov byte [esp + 0x14a], 0x51
call fcn.00450208
lea ecx, [esp + 0x148]
call fcn.004c2ee6
add esp, 0xc
mov ecx, eax
mov byte [esp + 0x188], 6
call fcn.00451547
push eax
lea eax, [esp + 0xf4]
push eax
lea ecx, [esp + 0x164]
call fcn.004b9c2e
push eax
lea ecx, [esp + 0x160]
mov byte [esp + 0x184], 7
call fcn.004c2566
mov ecx, dword [esp + 0xec]
lea ecx, [ecx - 0x10]
call fcn.00450c0a
lea ecx, [esp + 0x134]
mov byte [esp + 0x180], 4
call fcn.004513e1
mov eax, dword [esp + 0x15c]
cmp dword [eax - 0xc], 0
jne 0x4b8030
mov eax, dword [esp + 0x164]
mov dword [esp + 0xec], eax
push dword [esp + 0x130]
mov edi, dword [esp + 0xf4]
mov esi, ebx
mov ecx, edi
call fcn.004b4aac
mov ecx, eax
mov edx, ebx
mov eax, dword [esp + 0xec]
sub eax, dword [esp + 0x160]
sar eax, 2
dec eax
mov dword [esp + 0x154], ecx
mov dword [esp + 0x18], edx
mov dword [esp + 0xf0], eax
je 0x4b8290
test esi, esi
je 0x4b8223
cmp byte [esi + 8], 0
je 0x4b8223
mov eax, dword [esp + 0x160]
mov ecx, esi
push dword [eax + edx*4]
call fcn.0043d7fd
test al, al
je 0x4b85d0
mov ecx, dword [esp + 0x160]
mov eax, dword [esp + 0x18]
push ebx
push dword [ecx + eax*4]
mov ecx, esi
jmp 0x4b8260
cmp byte [ecx + 8], 0
je 0x4b85d0
call fcn.0043d95a
test al, al
je 0x4b85d0
mov esi, dword [esp + 0x160]
push dword [esi + edx*4]
call fcn.0043d7fd
test al, al
je 0x4b85d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x154]
push ebx
push dword [esi + eax*4]
call fcn.0043d462
mov esi, eax
cmp byte [esi + 8], 0
je 0x4b85d0
mov edx, dword [esp + 0x18]
mov ecx, esi
inc edx
mov dword [esp + 0x154], ecx
mov dword [esp + 0x18], edx
cmp edx, dword [esp + 0xf0]
jb 0x4b81ed
mov eax, dword [esp + 0x160]
mov ecx, dword [eax + edx*4]
sub ecx, 0x10
call fcn.004c250c
lea esi, [eax + 0x10]
mov dword [esp + 0x16c], esi
mov byte [esp + 0x180], 8
mov ecx, dword [esp + 0x154]
push esi
call fcn.0043d7fd
test al, al
je 0x4b85c8
mov ecx, dword [esp + 0x154]
push ebx
push esi
call fcn.0043d462
cmp byte [eax + 8], 0
je 0x4b857f
mov ecx, edi
call fcn.004b6670
test al, al
je 0x4b82fc
mov ecx, edi
call fcn.004b66b5
mov byte [esp + 0x17], 1
test al, al
jne 0x4b8300
mov byte [esp + 0x17], bl
mov ecx, dword [esp + 0x154]
lea eax, [esp + 0x134]
push esi
push eax
call fcn.0043d70f
lea ecx, [esp + 0x134]
call fcn.00439697
cmp byte [esp + 0x17], 0
je 0x4b857f
push ebx
push ebx
sub esp, 0xc
mov dword [esp + 0x30], 0x6841534d
mov ecx, esp
mov dword [esp + 0x34], 0x69636a4f
lea eax, [esp + 0xfa]
mov dword [esp + 0x38], 0x7267694f
lea edx, [esp + 0x30]
mov dword [esp + 0x3c], 0x4a414249
push ecx
push eax
push edx
mov dword [esp + 0x4c], 0x6a687947
mov dword [esp + 0x50], 0x2b416a4d
mov dword [esp + 0x54], 0x75496942
mov dword [esp + 0x58], 0x2f784141
mov dword [esp + 0x5c], 0x79594349
mov dword [esp + 0x60], 0x37776765
mov dword [esp + 0x64], 0x386f5442
mov dword [esp + 0x68], 0x41636d65
mov dword [esp + 0x6c], 0x69676848
mov dword [esp + 0x70], 0x72415848
mov dword [esp + 0x74], 0x4b51414e
mov dword [esp + 0x78], 0x55597846
mov dword [esp + 0x7c], 0x6763434f
mov dword [esp + 0x80], 0x7238424f
mov dword [esp + 0x84], 0x61383343
mov dword [esp + 0x88], 0x7a63674f
mov dword [esp + 0x8c], 0x6c4d5143
mov dword [esp + 0x90], 0x70514347
mov dword [esp + 0x94], 0x43496e4e
mov dword [esp + 0x98], 0x6e497a47
mov dword [esp + 0x9c], 0x52594463
mov dword [esp + 0xa0], 0x54497749
mov dword [esp + 0xa4], 0x51304441
mov dword [esp + 0xa8], 0x5173584f
mov dword [esp + 0xac], 0x55774445
mov dword [esp + 0xb0], 0x4455414c
mov dword [esp + 0xb4], 0x6559774c
mov dword [esp + 0xb8], 0x41456d4e
mov dword [esp + 0xbc], 0x6e517948
mov dword [esp + 0xc0], 0x3363524a
mov dword [esp + 0xc4], 0x654d524e
mov dword [esp + 0xc8], 0x38357963
mov dword [esp + 0xcc], 0x36644759
mov dword [esp + 0xd0], 0x5a415142
mov dword [esp + 0xd4], 0x7a357950
mov dword [esp + 0xd8], 0x41387a4b
mov dword [esp + 0xdc], 0x68636d64
mov dword [esp + 0xe0], 0x78467a65
mov dword [esp + 0xe4], 0x624d7842
mov dword [esp + 0xe8], 0x70345141
mov dword [esp + 0xec], 0x2f6b7847
mov dword [esp + 0xf0], 0x32317844
mov dword [esp + 0xf4], 0x35516948
mov dword [esp + 0xf8], 0x5334524b
mov dword [esp + 0xfc], 0x63594444
mov dword [esp + 0x100], 0x41414141
mov word [esp + 0x104], 0x5169
call fcn.00450208
lea ecx, [esp + 0x148]
call fcn.004c2ee6
add esp, 0xc
mov byte [esp + 0x188], 9
mov ecx, eax
mov dword [esp + 0x134], 1
call fcn.00451547
push eax
lea ecx, [esp + 0x160]
call fcn.004b9ce8
test eax, eax
je 0x4b857f
mov bl, 1
mov dword [esp + 0x180], 8
test byte [esp + 0x12c], 1
je 0x4b85a0
lea ecx, [esp + 0x134]
call fcn.004513e1
test bl, bl
je 0x4b85b3
push dword [esp + 0x158]
mov ecx, dword [edi + 0xc]
call fcn.004d4473
push 4
lea eax, [esp + 0x1b]
mov byte [esp + 0x1b], 1
push eax
mov ecx, edi
call fcn.004b61ff
mov bl, 1
lea ecx, [esi - 0x10]
call fcn.00450c0a
mov ecx, dword [esp + 0x15c]
add ecx, 0xfffffff0
call fcn.00450c0a
lea ecx, [esp + 0x160]
call fcn.004bba39
mov ecx, dword [esp + 0x158]
add ecx, 0xfffffff0
call fcn.00450c0a
mov al, bl
mov ecx, dword [esp + 0x178]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x160]
xor ecx, esp
call fcn.0054d1e7
mov esp, ebp
pop ebp
ret 8