Function at 0x4dbb00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [esp + 0x306], bl
mov byte [esp + 0x307], bl
mov dword [esp + 0x308], ebx
mov dword [esp + 0x30c], ebx
mov byte [esp + 0x310], bl
mov byte [esp + 0x311], cl
mov byte [esp + 0x312], bl
mov byte [esp + 0x313], bl
mov dword [esp + 0x314], ebx
mov dword [esp + 0x318], ebx
mov byte [esp + 0x31c], bl
mov byte [esp + 0x31d], dl
mov byte [esp + 0x31e], bl
mov byte [esp + 0x2e0], 1
mov dword [esp + 0x320], ebx
mov dword [esp + 0x324], ebx
mov byte [esp + 0x2f8], 1
mov byte [esp + 0x329], dl
mov byte [esp + 0x32a], bl
mov byte [esp + 0x304], 1
mov dword [esp + 0x32c], ebx
mov dword [esp + 0x330], ebx
mov byte [esp + 0x31f], 9
mov byte [esp + 0x328], 1
mov byte [esp + 0x32b], 9
mov byte [esp + 0x337], cl
mov dword [esp + 0x338], edi
mov dword [esp + 0x33c], ebx
mov byte [esp + 0x340], al
mov byte [esp + 0x341], dl
mov byte [esp + 0x342], bl
mov byte [esp + 0x343], bl
mov dword [esp + 0x344], ebx
mov byte [esp + 0x334], 1
mov byte [esp + 0x335], 9
mov byte [esp + 0x336], 6
mov dword [esp + 0x348], ebx
mov byte [esp + 0x34c], al
mov byte [esp + 0x34d], dl
mov byte [esp + 0x34e], bl
mov byte [esp + 0x34f], bl
mov dword [esp + 0x350], ebx
mov dword [esp + 0x354], ebx
mov byte [esp + 0x358], bl
mov byte [esp + 0x359], dl
pop ecx
add eax, dword [eax]
add byte [eax + 0x35a249c], cl
add byte [eax], al
mov byte [esp + 0x35b], bl
mov dword [esp + 0x35c], ebx
mov dword [esp + 0x360], ebx
mov byte [esp + 0x364], bl
mov byte [esp + 0x365], dl
mov byte [esp + 0x366], bl
mov byte [esp + 0x367], bl
mov dword [esp + 0x368], ebx
mov dword [esp + 0x36c], ebx
mov byte [esp + 0x370], bl
mov byte [esp + 0x371], dl
mov byte [esp + 0x372], bl
mov byte [esp + 0x373], bl
mov dword [esp + 0x374], ebx
mov dword [esp + 0x378], ebx
mov byte [esp + 0x37c], bl
mov byte [esp + 0x37d], cl
mov byte [esp + 0x37e], bl
mov byte [esp + 0x37f], cl
mov dword [esp + 0x384], ebx
mov byte [esp + 0x388], al
mov byte [esp + 0x38b], cl
mov dword [esp + 0x380], 0x3e8
mov dword [esp + 0x390], ebx
mov byte [esp + 0x394], al
mov byte [esp + 0x389], 1
mov byte [esp + 0x38a], 1
mov byte [esp + 0x396], al
mov dword [esp + 0x398], ebx
mov dword [esp + 0x38c], 0x3e8
mov dword [esp + 0x39c], ebx
mov byte [esp + 0x3a1], dl
mov byte [esp + 0x3a2], bl
mov byte [esp + 0x3a3], bl
mov dword [esp + 0x3a4], ebx
mov dword [esp + 0x3a8], ebx
mov byte [esp + 0x3ac], bl
mov byte [esp + 0x3ad], dl
mov byte [esp + 0x3ae], bl
mov byte [esp + 0x3af], bl
mov dword [esp + 0x3b0], ebx
mov dword [esp + 0x3b4], ebx
mov byte [esp + 0x395], 1
mov byte [esp + 0x3b9], dl
mov byte [esp + 0x3ba], bl
mov byte [esp + 0x3bb], bl
mov dword [esp + 0x3bc], ebx
mov dword [esp + 0x3c0], ebx
mov byte [esp + 0x3c4], bl
mov byte [esp + 0x397], 0xc
mov byte [esp + 0x3a0], 1
mov byte [esp + 0x3b8], 1
mov byte [esp + 0x3c5], dl
mov byte [esp + 0x3c6], bl
mov byte [esp + 0x3c7], bl
mov dword [esp + 0x3c8], ebx
mov dword [esp + 0x3cc], ebx
mov byte [esp + 0x3d1], dl
mov byte [esp + 0x3d2], bl
mov byte [esp + 0x3d0], 0x11
mov dword [esp + 0x3d8], ebx
mov byte [esp + 0x3dd], dl
mov byte [esp + 0x3d3], 8
mov dword [esp + 0x3d4], 0x10010
mov byte [esp + 0x3de], bl
mov dword [esp + 0x3e4], ebx
mov byte [esp + 0x3dc], 0x11
mov byte [esp + 0x3e9], dl
mov byte [esp + 0x3ea], bl
mov byte [esp + 0x3df], 8
mov dword [esp + 0x3e0], 0x1005f
mov byte [esp + 0x3e8], 0x11
mov dword [esp + 0x3f0], ebx
mov byte [esp + 0x3f5], dl
mov byte [esp + 0x3eb], 8
mov dword [esp + 0x3ec], 0x10012
mov byte [esp + 0x3f6], bl
mov dword [esp + 0x3fc], ebx
mov byte [esp + 0x3f4], 0x11
mov byte [esp + 0x401], dl
mov byte [esp + 0x402], bl
mov byte [esp + 0x3f7], 8
mov dword [esp + 0x404], ebx
mov dword [esp + 0x408], ebx
mov dword [esp + 0x3f8], 0x10014
mov byte [esp + 0x400], 0x11
mov byte [esp + 0x403], 6
mov byte [esp + 0x40c], 1
mov dword [esp + 0x410], esi
mov dword [esp + 0x414], ebx
mov byte [esp + 0x40d], 9
mov byte [esp + 0x40e], 1
mov byte [esp + 0x40f], 5
mov byte [esp + 0x418], 1
mov dword [esp + 0x41c], esi
mov dword [esp + 0x420], ebx
mov byte [esp + 0x419], 9
mov byte [esp + 0x41a], 1
mov byte [esp + 0x41b], 5
mov byte [esp + 0x424], al
mov dword [esp + 0x428], esi
mov dword [esp + 0x42c], ebx
mov byte [esp + 0x430], al
mov byte [esp + 0x425], 9
mov byte [esp + 0x426], 1
mov byte [esp + 0x427], 5
mov dword [esp + 0x434], esi
mov dword [esp + 0x438], ebx
mov byte [esp + 0x431], 9
mov byte [esp + 0x432], 1
mov byte [esp + 0x433], 5
mov byte [esp + 0x43d], 9
mov byte [esp + 0x43c], al
mov byte [esp + 0x43e], 1
mov dword [esp + 0x440], esi
mov dword [esp + 0x444], ebx
mov byte [esp + 0x43f], 5
mov byte [esp + 0x44b], dl
mov dword [esp + 0x44c], esi
mov byte [esp + 0x448], 0x11
mov byte [esp + 0x449], 9
mov byte [esp + 0x44a], 1
mov dword [esp + 0x450], ebx
mov byte [esp + 0x457], dl
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], ebx
mov byte [esp + 0x454], 0x11
mov byte [esp + 0x455], 9
mov byte [esp + 0x456], 1
mov byte [esp + 0x463], dl
mov dword [esp + 0x464], esi
mov dword [esp + 0x468], ebx
mov byte [esp + 0x46c], bl
mov byte [esp + 0x460], 0x11
mov byte [esp + 0x461], 9
mov byte [esp + 0x46e], dl
mov dword [esp + 0x470], ebx
mov byte [esp + 0x462], 1
mov byte [esp + 0x46d], 1
mov dword [esp + 0x474], ebx
mov byte [esp + 0x47a], dl
mov byte [esp + 0x46f], 0xc
mov dword [esp + 0x47c], ebx
mov dword [esp + 0x480], ebx
mov byte [esp + 0x478], 1
mov byte [esp + 0x479], 1
mov byte [esp + 0x485], dl
mov byte [esp + 0x487], bl
mov dword [esp + 0x488], ebx
mov dword [esp + 0x48c], ebx
mov byte [esp + 0x490], bl
mov byte [esp + 0x491], dl
mov byte [esp + 0x47b], 0xc
mov byte [esp + 0x493], bl
mov dword [esp + 0x494], ebx
mov byte [esp + 0x484], 1
mov byte [esp + 0x486], 0x40
mov byte [esp + 0x492], 0x40
mov dword [esp + 0x498], ebx
mov byte [esp + 0x49f], bl
mov dword [esp + 0x4a0], ebx
mov dword [esp + 0x4a4], ebx
mov byte [esp + 0x49c], 0x11
mov byte [esp + 0x49d], 9
mov byte [esp + 0x4a8], bl
mov byte [esp + 0x4ab], cl
mov dword [esp + 0x4ac], edi
mov dword [esp + 0x4b0], ebx
mov byte [esp + 0x49e], 0x41
mov byte [esp + 0x4b5], cl
mov byte [esp + 0x4b6], bl
mov byte [esp + 0x4a9], 9
mov byte [esp + 0x4aa], 6
mov byte [esp + 0x4b4], 1
mov byte [esp + 0x4b7], cl
mov dword [esp + 0x4b8], ebp
mov dword [esp + 0x4bc], ebx
mov byte [esp + 0x4c1], cl
mov byte [esp + 0x4c2], bl
mov byte [esp + 0x4c3], cl
mov dword [esp + 0x4c4], ebp
mov dword [esp + 0x4c8], ebx
mov byte [esp + 0x4cd], cl
mov byte [esp + 0x4ce], bl
mov byte [esp + 0x4cf], cl
mov byte [esp + 0x4c0], 1
mov dword [esp + 0x4d4], ebx
mov byte [esp + 0x4d9], dl
mov byte [esp + 0x4cc], 1
mov byte [esp + 0x4db], bl
mov dword [esp + 0x4dc], ebx
mov dword [esp + 0x4d0], 0x3e8
mov byte [esp + 0x4d8], 0x11
mov byte [esp + 0x4da], 0x40
mov dword [esp + 0x4e0], ebx
mov byte [esp + 0x4e7], cl
mov dword [esp + 0x4e8], edi
mov dword [esp + 0x4ec], ebx
mov byte [esp + 0x4e4], 1
mov byte [esp + 0x4e5], 5
mov byte [esp + 0x4e6], 1
mov byte [esp + 0x4f3], bl
mov dword [esp + 0x4f4], ebx
mov byte [esp + 0x4f0], 1
mov byte [esp + 0x4f1], 6
mov byte [esp + 0x4f2], 0x40
mov dword [esp + 0x4f8], ebx
mov byte [esp + 0x4ff], bl
mov dword [esp + 0x500], ebx
mov dword [esp + 0x504], ebx
mov byte [esp + 0x4fc], 1
mov byte [esp + 0x509], al
mov byte [esp + 0x50a], cl
mov byte [esp + 0x50b], al
mov dword [esp + 0x50c], ebx
mov byte [esp + 0x4fd], 6
mov dword [esp + 0x510], ebx
mov byte [esp + 0x515], al
mov byte [esp + 0x516], cl
mov byte [esp + 0x517], bl
mov dword [esp + 0x518], ebx
mov dword [esp + 0x51c], ebx
mov byte [esp + 0x4fe], 0x40
mov byte [esp + 0x508], 0x11
mov byte [esp + 0x522], bl
mov byte [esp + 0x523], bl
mov dword [esp + 0x524], ebx
mov dword [esp + 0x528], ebx
mov byte [esp + 0x514], 1
mov byte [esp + 0x52d], dl
mov byte [esp + 0x52e], bl
mov byte [esp + 0x520], 1
mov byte [esp + 0x521], 7
mov byte [esp + 0x52c], 1
mov byte [esp + 0x52f], cl
mov dword [esp + 0x530], 0x3e8
mov dword [esp + 0x534], ebx
mov byte [esp + 0x53a], bl
mov byte [esp + 0x53b], bl
mov dword [esp + 0x53c], ebx
mov byte [esp + 0x538], 1
mov byte [esp + 0x539], 7
mov byte [esp + 0x544], 0x11
mov dword [esp + 0x540], ebx
mov dword [esp + 0x548], esi
mov dword [esp + 0x54c], ebx
mov byte [esp + 0x550], bl
mov byte [esp + 0x545], 9
mov byte [esp + 0x552], bl
mov byte [esp + 0x553], bl
mov dword [esp + 0x554], ebx
mov dword [esp + 0x558], ebx
mov byte [esp + 0x546], 1
mov byte [esp + 0x547], 0x10
mov byte [esp + 0x55e], bl
mov byte [esp + 0x55f], bl
mov dword [esp + 0x560], ebx
mov dword [esp + 0x564], ebx
mov byte [esp + 0x551], 7
mov byte [esp + 0x569], dl
mov byte [esp + 0x56a], bl
mov byte [esp + 0x55c], 1
mov byte [esp + 0x55d], 0x63
mov dword [esp + 0x570], ebx
mov byte [esp + 0x574], bl
mov byte [esp + 0x568], 1
mov byte [esp + 0x576], bl
mov byte [esp + 0x577], bl
mov dword [esp + 0x578], ebx
mov dword [esp + 0x57c], ebx
mov byte [esp + 0x56b], 1
mov byte [esp + 0x580], bl
mov byte [esp + 0x582], bl
mov byte [esp + 0x583], bl
mov dword [esp + 0x584], ebx
mov dword [esp + 0x56c], 0x2073
mov byte [esp + 0x575], 7
mov byte [esp + 0x581], 0x63
mov dword [esp + 0x588], ebx
mov byte [esp + 0x58f], bl
mov dword [esp + 0x590], ebx
mov dword [esp + 0x594], ebx
mov byte [esp + 0x58c], 1
mov byte [esp + 0x58d], 0x63
mov byte [esp + 0x58e], 0x40
mov byte [esp + 0x59b], bl
mov dword [esp + 0x59c], ebx
mov byte [esp + 0x598], 1
mov byte [esp + 0x599], 0x63
mov byte [esp + 0x59a], 0x40
mov dword [esp + 0x5a0], ebx
mov byte [esp + 0x5a7], cl
mov byte [esp + 0x5a4], 0x11
mov byte [esp + 0x5a5], 5
mov byte [esp + 0x5a6], 1
mov dword [esp + 0x5a8], edi
mov dword [esp + 0x5ac], ebx
mov byte [esp + 0x5b3], cl
mov dword [esp + 0x5b4], edi
mov byte [esp + 0x5b0], 0x11
mov dword [esp + 0x5b8], ebx
mov byte [esp + 0x5bd], dl
mov byte [esp + 0x5b1], 5
mov byte [esp + 0x5b2], 1
mov byte [esp + 0x5be], bl
mov dword [esp + 0x5c4], ebx
mov byte [esp + 0x5bc], 0x11
mov byte [esp + 0x5c9], dl
mov byte [esp + 0x5ca], bl
mov byte [esp + 0x5bf], 8
mov dword [esp + 0x5cc], ebx
mov dword [esp + 0x5d0], ebx
mov dword [esp + 0x5c0], 0x10011
mov byte [esp + 0x5c8], 0x11
mov byte [esp + 0x5d6], bl
mov byte [esp + 0x5d7], bl
mov dword [esp + 0x5d8], ebx
mov dword [esp + 0x5dc], ebx
mov byte [esp + 0x5cb], 6
mov byte [esp + 0x5e0], bl
mov byte [esp + 0x5e2], bl
mov byte [esp + 0x5e3], bl
mov dword [esp + 0x5e4], ebx
mov byte [esp + 0x5d4], 1
mov byte [esp + 0x5d5], 7
mov dword [esp + 0x5e8], ebx
mov byte [esp + 0x5ee], dl
mov byte [esp + 0x5e1], 7
mov dword [esp + 0x5f0], ebx
mov dword [esp + 0x5f4], ebx
add eax, 0x84c60000
and al, 0xec
add eax, 0xc6010000
test byte [ebp*8 + 0x1000005], ah
mov byte [esp + 0x5ef], 0xc
mov byte [esp + 0x5fb], bl
mov dword [esp + 0x5fc], ebx
mov byte [esp + 0x5f8], 1
mov byte [esp + 0x5f9], 0x63
mov dword [esp + 0x600], ebx
mov byte [esp + 0x606], bl
mov byte [esp + 0x607], bl
mov dword [esp + 0x608], ebx
mov byte [esp + 0x5fa], 0x40
mov dword [esp + 0x60c], ebx
mov byte [esp + 0x611], dl
mov byte [esp + 0x604], 1
mov byte [esp + 0x605], 0x63
mov byte [esp + 0x612], bl
mov dword [esp + 0x618], ebx
mov byte [esp + 0x610], 0x11
mov byte [esp + 0x61d], dl
mov byte [esp + 0x61e], bl
mov byte [esp + 0x61f], bl
mov dword [esp + 0x620], ebx
mov byte [esp + 0x613], 1
mov dword [esp + 0x614], 0x2081
mov byte [esp + 0x61c], 1
mov dword [esp + 0x624], ebx
mov byte [esp + 0x628], bl
mov byte [esp + 0x62a], bl
mov dword [esp + 0x630], ebx
mov byte [esp + 0x634], bl
mov byte [esp + 0x635], dl
mov byte [esp + 0x636], bl
mov byte [esp + 0x637], bl
mov dword [esp + 0x638], ebx
mov dword [esp + 0x63c], ebx
mov byte [esp + 0x640], bl
mov byte [esp + 0x641], dl
mov byte [esp + 0x642], bl
mov byte [esp + 0x643], bl
mov dword [esp + 0x644], ebx
mov dword [esp + 0x648], ebx
mov byte [esp + 0x629], 1
mov byte [esp + 0x64d], dl
mov byte [esp + 0x64e], bl
mov byte [esp + 0x64f], bl
mov dword [esp + 0x650], ebx
mov dword [esp + 0x654], ebx
push es
add byte [eax], al
mov byte [esp + 0x658], bl
mov byte [esp + 0x62b], 1
mov dword [esp + 0x62c], 0x2083
mov byte [esp + 0x64c], 1
mov byte [esp + 0x65a], bl
mov dword [esp + 0x660], ebx
mov byte [esp + 0x659], 1
mov byte [esp + 0x664], bl
mov byte [esp + 0x666], al
mov byte [esp + 0x65b], 1
mov dword [esp + 0x65c], 0x2087
mov dword [esp + 0x66c], ebx
push es
add byte [eax], al
mov byte [esp + 0x670], al
mov byte [esp + 0x665], 1
mov byte [esp + 0x667], 1
mov dword [esp + 0x668], 0x2088
mov byte [esp + 0x671], dl
mov dword [esp + 0x678], ebx
mov byte [esp + 0x672], 0x40
mov byte [esp + 0x673], 1
mov dword [esp + 0x674], 0x2089
mov byte [esp + 0x67c], 1
mov dword [esp + 0x680], ebx
mov dword [esp + 0x684], ebx
mov byte [esp + 0x67d], 1
mov byte [esp + 0x67e], 1
mov byte [esp + 0x67f], 0xf
mov byte [esp + 0x688], 1
mov dword [esp + 0x68c], ebx
mov dword [esp + 0x690], ebx
mov byte [esp + 0x689], 1
mov byte [esp + 0x68a], 1
mov byte [esp + 0x68b], 0xf
mov byte [esp + 0x694], 1
mov dword [esp + 0x698], ebx
mov dword [esp + 0x69c], ebx
mov byte [esp + 0x695], 1
mov byte [esp + 0x696], 1