Function at 0x4b5a10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, ecx
push esi
push edi
lea esi, [eax + 0x344]
lea edi, [eax + 0x9c4]
mov ecx, 0xd0
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 0xd64]
lea edi, [eax + 0xe24]
mov ecx, 0x18
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 4]
lea edi, [eax + 0x684]
mov ecx, 0xd0
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 0xd04]
lea edi, [eax + 0xdc4]
mov ecx, 0x18
rep movsd dword es:[edi], dword [esi]
pop edi
mov dword [eax + 0xe84], 1
mov dword [eax + 0xe8c], 0
pop esi
ret
sub esp, 0x740
push ebx
push ebp
mov ebx, 4
push esi
xor esi, esi
push edi
mov edi, 1
mov ebp, ecx
mov dword [esp + 0xd0], edi
mov word [esp + 0xd4], di
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], esi
mov dword [esp + 0xe0], edi
mov word [esp + 0xe4], 0x3b
mov dword [esp + 0xe8], esi
mov dword [esp + 0xec], esi
mov dword [esp + 0xf0], edi
mov word [esp + 0xf4], 0x3c
mov dword [esp + 0xf8], esi
mov dword [esp + 0xfc], esi
mov dword [esp + 0x100], edi
mov word [esp + 0x104], 0x3d
mov dword [esp + 0x108], esi
mov dword [esp + 0x10c], esi
mov dword [esp + 0x110], edi
mov word [esp + 0x114], 0x3e
mov dword [esp + 0x118], esi
mov dword [esp + 0x11c], esi
mov dword [esp + 0x120], edi
mov word [esp + 0x124], 0x3f
mov dword [esp + 0x128], esi
mov dword [esp + 0x12c], esi
mov dword [esp + 0x130], edi
mov word [esp + 0x134], 0x40
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], edi
mov word [esp + 0x144], 0x41
mov dword [esp + 0x148], esi
mov dword [esp + 0x14c], esi
mov dword [esp + 0x150], edi
mov word [esp + 0x154], 0x42
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], esi
mov dword [esp + 0x160], edi
mov word [esp + 0x164], 0x43
mov dword [esp + 0x168], esi
mov dword [esp + 0x16c], esi
mov dword [esp + 0x170], edi
mov word [esp + 0x174], 0x44
mov dword [esp + 0x178], esi
mov dword [esp + 0x17c], esi
mov dword [esp + 0x180], ebx
mov word [esp + 0x184], 0x1f
mov dword [esp + 0x188], esi
mov dword [esp + 0x18c], esi
mov dword [esp + 0x190], ebx
mov word [esp + 0x194], 0x17
mov dword [esp + 0x198], esi
mov dword [esp + 0x19c], esi
mov dword [esp + 0x1a0], ebx
mov word [esp + 0x1a4], 0x2e
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x1ac], esi
mov dword [esp + 0x1b0], ebx
mov word [esp + 0x1b4], 0x22
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1c0], ebx
mov word [esp + 0x1c4], 0x32
mov dword [esp + 0x1c8], esi
mov dword [esp + 0x1cc], esi
mov dword [esp + 0x1d0], ebx
mov word [esp + 0x1d4], 0x10
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1dc], esi
mov dword [esp + 0x1e0], ebx
mov word [esp + 0x1e4], 0x18
mov dword [esp + 0x1e8], esi
mov dword [esp + 0x1ec], esi
mov dword [esp + 0x1f0], ebx
mov eax, 2
mov ecx, 0x1d
mov edx, 0x2a
mov word [esp + 0x1f4], 0x21
mov dword [esp + 0x1f8], esi
mov dword [esp + 0x1fc], esi
mov dword [esp + 0x200], ebx
mov word [esp + 0x204], 0x31
mov dword [esp + 0x208], esi
mov dword [esp + 0x20c], esi
mov dword [esp + 0x210], ebx
mov word [esp + 0x214], 0x13
mov dword [esp + 0x218], esi
mov dword [esp + 0x21c], esi
mov dword [esp + 0x220], ebx
mov word [esp + 0x224], ax
mov dword [esp + 0x228], esi
mov dword [esp + 0x22c], esi
mov dword [esp + 0x230], ebx
mov word [esp + 0x234], 3
mov dword [esp + 0x238], esi
mov dword [esp + 0x23c], esi
mov dword [esp + 0x240], ebx
mov word [esp + 0x244], bx
mov dword [esp + 0x248], esi
mov dword [esp + 0x24c], esi
mov dword [esp + 0x250], ebx
mov word [esp + 0x254], 5
mov dword [esp + 0x258], esi
mov dword [esp + 0x25c], esi
mov dword [esp + 0x260], ebx
mov word [esp + 0x264], 0x2c
mov dword [esp + 0x268], esi
mov dword [esp + 0x26c], esi
mov dword [esp + 0x270], eax
mov word [esp + 0x274], cx
mov dword [esp + 0x278], edi
mov dword [esp + 0x27c], esi
mov dword [esp + 0x280], ebx
mov word [esp + 0x284], 0x1e
mov dword [esp + 0x288], esi
mov dword [esp + 0x28c], esi
mov dword [esp + 0x290], ebx
mov word [esp + 0x294], 0x23
mov dword [esp + 0x298], esi
mov dword [esp + 0x29c], esi
mov dword [esp + 0x2a0], edi
mov word [esp + 0x2a4], 0xd2
mov dword [esp + 0x2a8], esi
mov dword [esp + 0x2ac], esi
mov dword [esp + 0x2b0], edi
mov word [esp + 0x2b4], 0x58
mov dword [esp + 0x2b8], esi
mov dword [esp + 0x2bc], esi
mov dword [esp + 0x2c0], 8
mov word [esp + 0x2c4], dx
mov dword [esp + 0x2c8], esi
mov dword [esp + 0x2cc], esi
mov dword [esp + 0x2d0], 0xf
mov word [esp + 0x2d4], dx
mov dword [esp + 0x2d8], edi
mov dword [esp + 0x2dc], edi
mov dword [esp + 0x2e0], edi
mov word [esp + 0x2e4], 0xc8
mov dword [esp + 0x2e8], edi
mov dword [esp + 0x2ec], esi
mov dword [esp + 0x2f0], edi
mov word [esp + 0x2f4], 0xd0
mov dword [esp + 0x2f8], edi
mov dword [esp + 0x2fc], esi
mov dword [esp + 0x300], ebx
mov word [esp + 0x304], 0x11
mov dword [esp + 0x308], esi
mov dword [esp + 0x30c], esi
mov dword [esp + 0x310], ebx
mov word [esp + 0x314], 0x19
mov dword [esp + 0x318], esi
mov dword [esp + 0x31c], esi
mov dword [esp + 0x320], eax
mov word [esp + 0x324], cx
mov dword [esp + 0x328], esi
push 0xd0
lea eax, [esp + 0x344]
push esi
push eax
mov dword [esp + 0x338], esi
mov dword [esp + 0x33c], ebx
mov word [esp + 0x340], cx
mov dword [esp + 0x344], esi
mov dword [esp + 0x348], edi
call sub.MSVCR80.dll_memset
mov edx, 2
mov ecx, 8
add esp, 0xc
mov dword [esp + 0x410], edi
mov word [esp + 0x414], di
mov dword [esp + 0x418], edi
mov dword [esp + 0x41c], esi
mov dword [esp + 0x420], edi
mov word [esp + 0x424], dx
mov dword [esp + 0x428], esi
mov dword [esp + 0x42c], esi
mov dword [esp + 0x430], edi
mov word [esp + 0x434], 3
mov dword [esp + 0x438], esi
mov dword [esp + 0x43c], esi
mov dword [esp + 0x440], edi
mov word [esp + 0x444], bx
mov dword [esp + 0x448], esi
mov dword [esp + 0x44c], esi
mov dword [esp + 0x450], edi
mov word [esp + 0x454], 5
mov dword [esp + 0x458], esi
mov dword [esp + 0x45c], esi
mov dword [esp + 0x460], edi
mov word [esp + 0x464], 6
mov dword [esp + 0x468], esi
mov dword [esp + 0x46c], esi
mov dword [esp + 0x470], edi
mov word [esp + 0x474], 7
mov dword [esp + 0x478], esi
mov dword [esp + 0x47c], esi
mov dword [esp + 0x480], edi
mov word [esp + 0x484], cx
mov dword [esp + 0x488], esi
mov dword [esp + 0x48c], esi
mov dword [esp + 0x490], edi
mov word [esp + 0x494], 9
mov dword [esp + 0x498], esi
mov dword [esp + 0x49c], esi
mov dword [esp + 0x4a0], edi
mov word [esp + 0x4a4], 0xa
mov dword [esp + 0x4a8], esi
mov dword [esp + 0x4ac], esi
mov dword [esp + 0x4b0], edi
mov word [esp + 0x4b4], 0xb
mov dword [esp + 0x4b8], esi
mov dword [esp + 0x4bc], esi
mov dword [esp + 0x4c0], edi
mov word [esp + 0x4c4], 0x1f
mov dword [esp + 0x4c8], esi
mov dword [esp + 0x4cc], esi
mov dword [esp + 0x4d0], edi
mov word [esp + 0x4d4], 0x17
mov dword [esp + 0x4d8], esi
mov dword [esp + 0x4dc], esi
mov dword [esp + 0x4e0], edi
mov word [esp + 0x4e4], 0x2e
mov dword [esp + 0x4e8], esi
mov dword [esp + 0x4ec], esi
mov dword [esp + 0x4f0], edi
mov word [esp + 0x4f4], 0x22
mov dword [esp + 0x4f8], esi
mov dword [esp + 0x4fc], esi
mov dword [esp + 0x500], edi
mov word [esp + 0x504], 0x32
mov dword [esp + 0x508], esi
mov dword [esp + 0x50c], esi
mov dword [esp + 0x510], edi
mov word [esp + 0x514], 0x10
mov dword [esp + 0x518], esi
mov dword [esp + 0x51c], esi
mov dword [esp + 0x600], ecx
mov ecx, 0x2a
mov word [esp + 0x604], cx
mov word [esp + 0x614], cx
mov eax, 0x1d
mov ecx, 0xc8
mov dword [esp + 0x520], edi
mov word [esp + 0x524], 0x18
mov dword [esp + 0x528], esi
mov dword [esp + 0x52c], esi
mov dword [esp + 0x530], edi
mov word [esp + 0x534], 0x21
mov dword [esp + 0x538], esi
mov dword [esp + 0x53c], esi
mov dword [esp + 0x540], edi
mov word [esp + 0x544], 0x31
mov dword [esp + 0x548], esi
mov dword [esp + 0x54c], esi
mov dword [esp + 0x550], edi
mov word [esp + 0x554], 0x13
mov dword [esp + 0x558], esi
mov dword [esp + 0x55c], esi
mov dword [esp + 0x560], edi
mov word [esp + 0x564], 0x3b
mov dword [esp + 0x568], edi
mov dword [esp + 0x56c], esi
mov dword [esp + 0x570], edi
mov word [esp + 0x574], 0x3c
mov dword [esp + 0x578], edi
mov dword [esp + 0x57c], esi
mov dword [esp + 0x580], edi
mov word [esp + 0x584], 0x3d
mov dword [esp + 0x588], edi
mov dword [esp + 0x58c], esi
mov dword [esp + 0x590], edi
mov word [esp + 0x594], 0x3e
mov dword [esp + 0x598], edi
mov dword [esp + 0x59c], esi
mov dword [esp + 0x5a0], edi
mov word [esp + 0x5a4], 0x2c
mov dword [esp + 0x5a8], esi
mov dword [esp + 0x5ac], esi
mov dword [esp + 0x5b0], edx
mov word [esp + 0x5b4], ax
mov dword [esp + 0x5b8], edi
mov dword [esp + 0x5bc], esi
mov dword [esp + 0x5c0], edi
mov word [esp + 0x5c4], 0x1e
mov dword [esp + 0x5c8], esi
mov dword [esp + 0x5cc], esi
mov dword [esp + 0x5d0], edi
mov word [esp + 0x5d4], 0x23
mov dword [esp + 0x5d8], esi
mov dword [esp + 0x5dc], esi
mov dword [esp + 0x5e0], edi
mov word [esp + 0x5e4], 0xd2
mov dword [esp + 0x5e8], edi
mov dword [esp + 0x5ec], esi
mov dword [esp + 0x5f0], edi
mov word [esp + 0x5f4], 0x58
mov dword [esp + 0x5f8], edi
mov dword [esp + 0x5fc], edi
mov dword [esp + 0x608], esi
mov dword [esp + 0x60c], esi
mov dword [esp + 0x610], 0xf
mov dword [esp + 0x618], edi
mov dword [esp + 0x61c], edi
mov dword [esp + 0x620], edi
mov word [esp + 0x624], cx
mov dword [esp + 0x628], edi
mov dword [esp + 0x62c], esi
mov dword [esp + 0x630], edi
mov word [esp + 0x634], 0xd0
mov dword [esp + 0x638], edi
mov dword [esp + 0x63c], esi
mov dword [esp + 0x640], edi
mov word [esp + 0x644], 0x11
mov dword [esp + 0x648], esi
mov dword [esp + 0x64c], esi
mov dword [esp + 0x650], edi
mov word [esp + 0x654], 0x19
mov dword [esp + 0x660], edx
mov ebx, 0xc9
mov edx, 0xd1
mov dword [esp + 0x658], esi
mov dword [esp + 0x65c], esi
mov word [esp + 0x664], ax
mov dword [esp + 0x668], esi
mov dword [esp + 0x66c], esi
mov dword [esp + 0x670], edi
mov word [esp + 0x674], ax
mov dword [esp + 0x678], esi
mov dword [esp + 0x67c], edi
mov dword [esp + 0x680], edi
mov word [esp + 0x684], 0x14
mov dword [esp + 0x688], esi
mov dword [esp + 0x68c], esi
mov dword [esp + 0x690], edi
mov word [esp + 0x694], 0x12
mov dword [esp + 0x698], esi
mov dword [esp + 0x69c], esi
mov dword [esp + 0x6a0], edi
mov word [esp + 0x6a4], 0x2f
mov dword [esp + 0x6a8], esi
mov dword [esp + 0x6ac], esi
mov dword [esp + 0x6b0], edi
mov word [esp + 0x6b4], 0x4f
mov dword [esp + 0x6b8], esi
mov dword [esp + 0x6bc], esi
mov dword [esp + 0x6c0], edi
mov word [esp + 0x6c4], 0x50
mov dword [esp + 0x6c8], esi
mov dword [esp + 0x6cc], esi
mov dword [esp + 0x6d0], edi
mov word [esp + 0x6d4], 0x51
mov dword [esp + 0x6d8], esi
mov dword [esp + 0x6dc], esi
mov dword [esp + 0x6e0], edi
mov word [esp + 0x6e4], 0x4b
mov dword [esp + 0x6e8], esi
mov dword [esp + 0x6ec], esi
mov dword [esp + 0x6f0], edi
mov word [esp + 0x6f4], 0x4c
mov dword [esp + 0x6f8], esi
mov dword [esp + 0x6fc], esi
mov dword [esp + 0x700], edi
mov word [esp + 0x704], 0x4d
mov dword [esp + 0x708], esi
mov dword [esp + 0x70c], esi
mov dword [esp + 0x710], edi
mov word [esp + 0x714], 0x47
mov dword [esp + 0x718], esi
mov dword [esp + 0x71c], esi
mov dword [esp + 0x720], edi
mov word [esp + 0x724], 0x48
mov dword [esp + 0x728], esi
mov dword [esp + 0x72c], esi
mov dword [esp + 0x730], edi
mov word [esp + 0x734], 0x49
mov dword [esp + 0x738], esi
mov dword [esp + 0x73c], esi
mov dword [esp + 0x740], edi
mov word [esp + 0x744], 0x52
mov dword [esp + 0x748], esi
mov dword [esp + 0x74c], esi
mov dword [esp + 0x10], edi
mov word [esp + 0x14], bx
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edi
mov word [esp + 0x24], dx
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], edi
mov word [esp + 0x34], cx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], edi
mov word [esp + 0x44], 0xd0
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], edi
mov ecx, 0xcd
mov word [esp + 0x54], cx
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], edi
mov dword [esp + 0x68], esi
mov dword [esp + 0x6c], esi
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], esi
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], edi
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], edi
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], esi
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa8], esi
mov dword [esp + 0xac], esi
mov dword [esp + 0xb0], edi
mov word [esp + 0xb4], cx
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], esi
mov dword [esp + 0xc0], edi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xcc], esi
lea edi, [ebp + 4]
mov ecx, 0x1a0
lea esi, [esp + 0xd0]
rep movsd dword es:[edi], dword [esi]
mov eax, 0xcb
lea edi, [ebp + 0xd04]
mov word [esp + 0x74], bx
mov ecx, 0x30
lea esi, [esp + 0x10]
mov word [esp + 0x64], ax
mov word [esp + 0x84], dx
mov word [esp + 0x94], 0xc8
mov word [esp + 0xa4], 0xd0
mov word [esp + 0xc4], ax
rep movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov ecx, ebp
pop ebp
pop ebx
add esp, 0x740
jmp 0x4b4f90