Function at 0x4f75e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x4f7872
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
lea rbp, [rsp + 0x40]
lea rax, [0x005efe20]
mov qword [rsp], rax
call fcn.0040cb40
mov rax, qword [rsp + 8]
mov qword [rsp + 0x28], rax
mov byte [rax], 0xcc
lea rcx, [0x005ede00]
mov qword [rsp], rcx
call fcn.0040cb40
mov rax, qword [rsp + 8]
mov qword [rsp + 0x38], rax
lea rcx, [0x005f8100]
mov qword [rsp], rcx
call fcn.0040cb40
mov rax, qword [rsp + 8]
mov qword [rsp + 0x30], rax
lea rcx, [0x00612340]
mov qword [rsp], rcx
call fcn.0040cb40
mov rax, qword [rsp + 8]
lea rcx, [0x004f74c0]
mov qword [rax], rcx
cmp dword [0x007c0da0], 0
nop
jne 0x4f7837
mov rcx, qword [rsp + 0x38]
mov qword [rax + 8], rcx
mov rbx, qword [rsp + 0x28]
mov qword [rax + 0x10], rbx
mov rbx, qword [rsp + 0x30]
mov qword [rax + 0x18], rbx
mov qword [rbx], rax
mov rdx, qword [rbx]
mov rax, qword [rdx]
mov byte [rsp], 0x12
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x3f
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x86
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xf
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x17
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x2d
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x16
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], pe_nt_image_headers64
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xfb
nop
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xa7
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xa1
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x34
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x71
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xd8
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x6c
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x2a
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x47
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x99
nop
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x2e
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x69
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x93
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0xc
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x1d
call rax
mov rdx, qword [rsp + 8]
mov rax, qword [rdx]
mov byte [rsp], 0x8b
call rax
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
mov rax, qword [rax + 8]
mov qword [rsp], 0
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
call fcn.00448420
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rcx
mov rbp, qword [rsp + 0x40]
add rsp, 0x48
ret
lea rdi, [rax + 8]
mov rcx, qword [rsp + 0x38]
call fcn.0045ec20
lea rdi, [rax + 0x10]
mov rsi, qword [rsp + 0x28]
call fcn.0045ec80
lea rdi, [rax + 0x18]
mov rbx, qword [rsp + 0x30]
nop dword [rax]
call fcn.0045ec60
mov rdi, rbx
call fcn.0045eb20
jmp 0x4f76a4
call fcn.0045cde0
jmp fcn.004f75e0