Function at 0x4c44b2
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
push ecx
push ecx
push 0x1f8
mov eax, 0x5d2690
call fcn.005234b0
mov dword [ebp], ecx
xor ebx, ebx
mov dword [ebp + 8], ebx
xor edi, edi
inc edi
mov dword [ebp - 4], edi
cmp byte [ecx], bl
je 0x4c4a7c
lea ecx, [ebp - 0x54]
call fcn.004ac634
mov byte [ebp - 4], 2
cmp dword [ebp + 0x14], edi
mov esi, 0x69dd8c
push ebx
lea ecx, [ebp - 0x30]
jne 0x4c4504
push 0x67538c
call fcn.004ac9bc
mov byte [ebp - 4], 3
jmp 0x4c453a
cmp dword [ebp + 0x14], 2
jne 0x4c451a
push 0x675384
call fcn.004ac9bc
mov byte [ebp - 4], 4
jmp 0x4c453a
cmp dword [ebp + 0x14], 3
jne 0x4c4530
push 0x67537c
call fcn.004ac9bc
mov byte [ebp - 4], 5
jmp 0x4c453a
push esi
call fcn.004ac9bc
mov byte [ebp - 4], 6
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x54]
call fcn.004acaa2
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.004ac66a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [ebp + 0x14], 2
mov dword [ebp + 4], eax
je 0x4c4567
cmp dword [ebp + 0x14], 3
jne 0x4c4590
cmp eax, ebx
jle 0x4c4590
push ebx
push eax
lea ecx, [ebp - 0x78]
call fcn.004ac6f7
mov byte [ebp - 4], 7
mov eax, dword [eax]
push edi
push eax
lea ecx, [ebp + 0x18]
mov dword [ebp + 8], edi
call fcn.004ad5c4
test eax, eax
mov byte [ebp + 0x17], 1
jle 0x4c4593
mov byte [ebp + 0x17], bl
mov dword [ebp - 4], 2
test byte [ebp + 8], 1
je 0x4c45ac
and dword [ebp + 8], 0xfffffffe
lea ecx, [ebp - 0x78]
call fcn.004ac66a
cmp byte [ebp + 0x17], bl
je 0x4c45d1
push ebx
push str.__LE
lea ecx, [ebp + 0x18]
call fcn.004acfec
push dword [ebp + 4]
lea ecx, [ebp + 0x18]
call fcn.004ad0b5
push ebx
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [ebp + 0x3c]
cmp edi, ebx
je 0x4c4832
cmp byte [edi + 0x248], bl
jne 0x4c4a70
push ebx
push esi
lea ecx, [ebp - 0x108]
call fcn.004ac9bc
mov byte [ebp - 4], 8
push ebx
push esi
lea ecx, [ebp - 0xc0]
call fcn.004ac9bc
mov byte [ebp - 4], 9
push ebx
push 0x69ec70
lea ecx, [ebp - 0x9c]
call fcn.004ac9bc
mov byte [ebp - 4], 0xa
push ebx
mov esi, 0x69f088
push esi
lea ecx, [ebp - 0x150]
call fcn.004ac9bc
mov byte [ebp - 4], 0xb
push ebx
push 0x675368
lea ecx, [ebp - 0xe4]
call fcn.004ac9bc
mov byte [ebp - 4], 0xc
push ebx
push esi
lea ecx, [ebp - 0x12c]
call fcn.004ac9bc
mov byte [ebp - 4], 0xd
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0xe
sub esp, 0x24
mov eax, esp
mov dword [ebp + 4], esp
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0xc0]
push ecx
lea ecx, [ebp + 0x18]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x204]
push ecx
mov ecx, edi
mov dword [ebp + 0x3c], eax
call fcn.004ec0fa
mov byte [ebp - 4], 0xf
mov edi, dword [edi + 0x29c]
push eax
lea eax, [ebp - 0x150]
push eax
push ebx
push edi
lea ecx, [ebp - 0x1bc]
call fcn.004ac6f7
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0xe4]
push eax
push ebx
push 2
sub esp, 0x24
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp + 0x14], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x10
call fcn.004ae24b
add esp, 0x30
mov byte [ebp - 4], 0x12
push eax
push ebx
push 2
sub esp, 0x24
lea eax, [ebp + 0x40]
mov ecx, esp
mov dword [ebp + 0x14], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x12
call fcn.004ae24b
mov esi, eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x174]
push eax
call fcn.004c1ace
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x78]
push 1
push eax
call fcn.004c11c3
add esp, 0x3c
mov byte [ebp - 4], 0x16
push esi
lea ecx, [ebp - 0x12c]
push ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x30]
push ecx
push eax
mov eax, dword [ebp + 0x3c]
push eax
call fcn.004add2f
add esp, 0x3c
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp]
call fcn.004c3b5d
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x78]
call fcn.004ac66a
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x174]
call fcn.004ac66a
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e0]
call fcn.004ac66a
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x198]
call fcn.004ac66a
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1bc]
call fcn.004ac66a
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x204]
call fcn.004ac66a
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x12c]
call fcn.004ac66a
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe4]
call fcn.004ac66a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x150]
call fcn.004ac66a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x9c]
call fcn.004ac66a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc0]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x108]
jmp 0x4c4a6b
push ebx
push esi
lea ecx, [ebp - 0x78]
call fcn.004ac9bc
mov byte [ebp - 4], 0x18
push ebx
push esi
lea ecx, [ebp - 0x174]
call fcn.004ac9bc
mov byte [ebp - 4], 0x19
push ebx
push esi
lea ecx, [ebp - 0x30]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1a
push ebx
push esi
lea ecx, [ebp - 0x12c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1b
push ebx
push esi
lea ecx, [ebp - 0xe4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1c
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1d
push ebx
mov esi, 0x69f088
push esi
lea ecx, [ebp - 0x9c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1e
push ebx
push esi
lea ecx, [ebp - 0xc0]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1f
push ebx
push esi
lea ecx, [ebp - 0x108]
call fcn.004ac9bc
mov byte [ebp - 4], 0x20
sub esp, 0x24
mov edi, esp
mov dword [ebp + 0x3c], esp
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp + 0x18]
push eax
lea eax, [ebp - 0x9c]
push eax
push ebx
push 2
sub esp, 0x24
lea eax, [ebp - 0x54]
mov ecx, esp
mov dword [ebp + 0x14], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x1e0]
push eax
mov byte [ebp - 4], 0x20
call fcn.004ae24b
add esp, 0x30
mov byte [ebp - 4], 0x22
push eax
push ebx
push 2
sub esp, 0x24
lea eax, [ebp + 0x40]
mov ecx, esp
mov dword [ebp + 0x14], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x22
call fcn.004ae24b
mov esi, eax
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x1bc]
push eax
call fcn.004c1ace
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x204]
push 1
push eax
call fcn.004c11c3
add esp, 0x3c
mov byte [ebp - 4], 0x26
push esi
lea ecx, [ebp - 0xc0]
push ecx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x108]
push ecx
push eax
push edi
call fcn.004add2f
add esp, 0x3c
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp]
call fcn.004c3b5d
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x204]
call fcn.004ac66a
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1bc]
call fcn.004ac66a
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x198]
call fcn.004ac66a
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1e0]
call fcn.004ac66a
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x108]
call fcn.004ac66a
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
call fcn.004ac66a
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x9c]
call fcn.004ac66a
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x150]
call fcn.004ac66a
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xe4]
call fcn.004ac66a
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x12c]
call fcn.004ac66a
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x30]
call fcn.004ac66a
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x174]
call fcn.004ac66a
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x78]
call fcn.004ac66a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.004ac66a
mov byte [ebp - 4], bl
lea ecx, [ebp + 0x18]
call fcn.004ac66a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x40]
call fcn.004ac66a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0xc
leave
ret 0x50