Function at 0x448fa2
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x15c
mov eax, 0x4917dd
call fcn.0045a8ee
mov edi, ecx
mov esi, dword [ebp + 8]
lea ebx, [edi + 0x18]
push ebx
push 0x65
call fcn.00442454
pop ecx
pop ecx
push dword [edi + 0x48]
lea eax, [ebp - 0x14d]
mov dword [ebp - 0x14c], 0x50555362
push 0
sub esp, 0xc
mov dword [ebp - 0x148], 0x45556a4a
mov ecx, esp
mov dword [ebp - 0x144], 0x77643343
lea edx, [ebp - 0x4d]
mov dword [ebp - 0x140], 0x6f49434a
mov dword [ebp - 0x13c], 0x56346841
push eax
mov dword [ebp - 0x138], 0x624d4243
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x134], 0x6c59774d
mov dword [ebp - 0x130], 0x62597766
mov dword [ebp - 0x12c], 0x6b496d41
mov dword [ebp - 0x128], 0x35306a4b
mov dword [ebp - 0x124], 0x396f4844
mov dword [ebp - 0x120], 0x61735443
mov dword [ebp - 0x11c], 0x54414349
mov dword [ebp - 0x118], 0x4f414341
mov dword [ebp - 0x114], 0x57346944
mov dword [ebp - 0x110], 0x2f31574e
mov dword [ebp - 0x10c], 0x74634446
mov dword [ebp - 0x108], 0x5445674f
mov dword [ebp - 0x104], 0x46456a49
mov dword [ebp - 0x100], 0x4159774c
mov dword [ebp - 0xfc], 0x68774466
mov dword [ebp - 0xf8], 0x32495450
mov dword [ebp - 0xf4], 0x7a6c6948
mov dword [ebp - 0xf0], 0x2f515245
mov dword [ebp - 0xec], 0x48387742
mov dword [ebp - 0xe8], 0x63776750
mov dword [ebp - 0xe4], 0x3230484b
mov dword [ebp - 0xe0], 0x45777a42
mov dword [ebp - 0xdc], 0x33637a47
mov dword [ebp - 0xd8], 0x65307a4c
mov dword [ebp - 0xd4], 0x396f4363
mov dword [ebp - 0xd0], 0x72417848
mov dword [ebp - 0xcc], 0x30524850
mov dword [ebp - 0xc8], 0x7a73584e
mov dword [ebp - 0xc4], 0x334d7942
mov dword [ebp - 0xc0], 0x6e776d42
mov dword [ebp - 0xbc], 0x6f30444b
mov dword [ebp - 0xb8], 0x59634765
mov dword [ebp - 0xb4], 0x42347a41
mov dword [ebp - 0xb0], 0x344d674b
mov dword [ebp - 0xac], 0x6551414c
mov dword [ebp - 0xa8], 0x58515147
mov dword [ebp - 0xa4], 0x79415449
mov dword [ebp - 0xa0], 0x37787a44
mov dword [ebp - 0x9c], 0x6e6b6963
mov dword [ebp - 0x98], 0x42307864
mov dword [ebp - 0x94], 0x58776e46
mov dword [ebp - 0x90], 0x59676a46
mov dword [ebp - 0x8c], 0x67496841
mov dword [ebp - 0x88], 0x69346a47
mov dword [ebp - 0x84], 0x3735334f
mov dword [ebp - 0x80], 0x4e347747
mov dword [ebp - 0x7c], 0x5155795a
mov dword [ebp - 0x78], 0x35556747
mov dword [ebp - 0x74], 0x7451584a
mov dword [ebp - 0x70], 0x36704464
mov dword [ebp - 0x6c], 0x4c73534d
mov dword [ebp - 0x68], 0x39453244
mov dword [ebp - 0x64], 0x4841415a
mov dword [ebp - 0x60], 0x4f415866
mov dword [ebp - 0x5c], 0x2b51694d
mov dword [ebp - 0x58], 0x6d594742
mov dword [ebp - 0x54], 0x4141674d
mov word [ebp - 0x50], 0x4c41
mov byte [ebp - 0x4e], 0x6b
push edx
push eax
call fcn.0040a169
lea eax, [ebp - 0x164]
push eax
call fcn.0042a1df
add esp, 0x10
and dword [ebp - 4], 0
mov ecx, eax
call fcn.004103eb
push eax
push ebx
call fcn.00426614
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
add esp, 0xc
call fcn.00455078
test esi, esi
je 0x449284
mov eax, dword [esi]
mov ecx, ebx
push dword [eax - 0xc]
push eax
call fcn.00426586
xor edx, edx
mov dword [ebp - 0x164], 0x424c53
push edx
lea eax, [edi + 0xe8]
mov dword [ebp - 0x15c], edi
push eax
push dword [edi + 0x4c]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x158], esp
mov dword [ebp - 0x168], ecx
mov dword [ecx + 0x10], edx
push ecx
lea eax, [ebp - 0x164]
mov dword [ebp - 4], 1
push eax
call fcn.0041d915
mov eax, dword [ebx]
push ecx
sub eax, 0x10
mov dword [ebp - 4], 2
mov esi, esp
push eax
call fcn.0042921f
or dword [ebp - 4], 0xffffffff
add eax, 0x10
pop ecx
lea ecx, [edi + 0x78]
mov dword [esi], eax
call fcn.0044dead
test al, al
jne 0x449352
cmp byte [edi + 0x53], al
jne 0x44934e
push 0x3c
lea eax, [ebp - 0x4c]
push 0
push eax
call fcn.0045d120
mov esi, dword [edi + 0x48]
lea ecx, [ebp - 0x4c]
add esp, 0xc
push 1
push 4
call fcn.004219db
and dword [ebp - 0x14], 0
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x4c], 0x494d74
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x18], 0x13
lea eax, [ebp - 0x4c]
mov dword [ebp - 4], 3
push eax
call fcn.00444856
pop ecx
lea ecx, [ebp - 0x4c]
call fcn.004239b9
xor al, al
jmp 0x449354
mov al, 1
call fcn.0045a89d
ret 4