Function at 0x4c2c11
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x188
mov eax, 0x63c617
call fcn.0040eae7
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], bl
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], ebx
call fcn.004b0ce4
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 1
call fcn.004b0ce4
push esi
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 2
call fcn.004b13c0
test al, al
je 0x4c35b1
xor ecx, ecx
mov dword [edi], ebx
inc ecx
mov dword [edi + 4], ebx
mov dword [edi + 8], ecx
mov dword [edi + 0x48], ecx
lea ecx, [edi + 0x10]
mov dword [edi + 0x40], 0x1e
mov byte [edi + 0x44], bl
cmp dword [edi + 0x24], 8
mov dword [edi + 0x20], ebx
jb 0x4c2c91
mov ecx, dword [edi + 0x10]
xor eax, eax
lea esi, [edi + 0x64]
mov word [ecx], ax
mov eax, esi
cmp dword [esi + 0x14], 0x10
mov dword [esi + 0x10], ebx
jb 0x4c2ca6
mov eax, dword [esi]
mov byte [eax], bl
lea ecx, [edi + 0x28]
cmp dword [edi + 0x3c], 8
mov dword [edi + 0x38], ebx
jb 0x4c2cb7
mov ecx, dword [edi + 0x28]
xor eax, eax
mov word [ecx], ax
lea ecx, [edi + 0x7c]
cmp dword [edi + 0x90], 0x10
mov dword [edi + 0x8c], ebx
jb 0x4c2cd1
mov ecx, dword [edi + 0x7c]
lea eax, [edi + 0xac]
mov byte [ecx], bl
cmp dword [eax + 0x14], 0x10
mov ecx, eax
mov dword [eax + 0x10], ebx
jb 0x4c2ce6
mov ecx, dword [eax]
mov byte [ecx], bl
lea ecx, [ebp - 0x28]
push 2
push 0x650804
mov dword [edi + 0x10c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
push edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 2
push 0x650008
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 4]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 4
push str.land
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 8]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 6
push 0x65066c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0xc]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 3
push 0x6b923c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00403470
lea eax, [ebp - 0x28]
push eax
call fcn.004b2806
add esp, 0x20
lea ecx, [edi + 0x10]
push eax
call fcn.0040377a
lea ecx, [ebp - 0x28]
call fcn.0040199e
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 3
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x30], ebx
push 0x650810
mov dword [ebp - 0x18], ebx
mov byte [eax], bl
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.004038dd
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0x40]
mov ecx, esp
push eax
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00403470
lea eax, [ebp - 0x28]
push eax
call fcn.004b2806
add esp, 0x20
lea ecx, [edi + 0x28]
push eax
call fcn.0040377a
lea ecx, [ebp - 0x28]
call fcn.0040199e
lea ecx, [ebp - 0x78]
call fcn.004b0ce4
push 6
push str.config
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xb0]
call fcn.004b11a1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov bl, al
call fcn.004038dd
test bl, bl
je 0x4c3593
push 6
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
push str.intert
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0x40]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 5
push str.param
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0xac]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 7
push str.dllmain
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0x7c]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 7
push str.exename
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0x94]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 0xa
push str.returnbool
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0x44]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1303
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 7
push str.funtype
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
push esi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 5
push str.admin
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0x4c]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 4
push str.land
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 8]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b114d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
push 0xd
push str.firstdlldelay
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [edi + 0xc4]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 0xa
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x30], ebx
push str.usercfgtag
mov dword [ebp - 0x18], ebx
mov byte [eax], bl
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
mov bl, al
call fcn.004038dd
test bl, bl
je 0x4c31b8
xor eax, eax
cmp eax, dword [ebp - 0x30]
sbb eax, eax
neg eax
mov dword [edi + 0x48], eax
push 0xb
xor ebx, ebx
mov dword [ebp - 0x14], 0xf
push str.dlldelayqid
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b11a1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
lea ecx, [ebp - 0x190]
call fcn.004b138f
test eax, eax
jle 0x4c3271
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x16
push eax
push esi
lea ecx, [ebp - 0x190]
call fcn.004b134e
test al, al
je 0x4c3252
lea ecx, [edi + 0xdc]
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x4c3248
lea eax, [ebp - 0x28]
push eax
call fcn.004b1b61
jmp 0x4c3252
lea edx, [ebp - 0x28]
push edx
push eax
call fcn.004b1ba5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 9
call fcn.004038dd
lea ecx, [ebp - 0x190]
inc esi
call fcn.004b138f
cmp esi, eax
jl 0x4c320a
lea esi, [edi + 0x64]
lea ecx, [ebp - 0x158]
call fcn.004b0ce4
push 7
push str.onlyqid
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x158]
mov byte [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b11a1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.004038dd
lea ecx, [ebp - 0x158]
call fcn.004b138f
test eax, eax
jle 0x4c3337
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x19
push eax
push esi
lea ecx, [ebp - 0x158]
call fcn.004b134e
test al, al
je 0x4c3318
lea ecx, [edi + 0xe8]
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x4c330e
lea eax, [ebp - 0x28]
push eax
call fcn.004b1b61
jmp 0x4c3318
lea edx, [ebp - 0x28]
push edx
push eax
call fcn.004b1ba5
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x17
call fcn.004038dd
lea ecx, [ebp - 0x158]
inc esi
call fcn.004b138f
cmp esi, eax
jl 0x4c32d0
lea esi, [edi + 0x64]
cmp dword [esi + 0x10], 0
jbe 0x4c336a
sub esp, 0x18
mov ecx, esp
push esi
mov dword [ecx + 0x10], ebx
mov dword [ecx + 0x14], ebx
call fcn.00403470
lea eax, [ebp - 0x28]
push eax
call fcn.004b275c
add esp, 0x1c
mov ecx, esi
push eax
call fcn.00405aca
lea ecx, [ebp - 0x28]
call fcn.004038dd
lea ecx, [ebp - 0xe8]
call fcn.004b0ce4
push 0xb
push str.localbinary
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x78]
call fcn.004b11a1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
mov bl, al
call fcn.004038dd
test bl, bl
je 0x4c357d
push 0x54
call fcn.0040e1c7
mov esi, eax
xor ebx, ebx
pop ecx
test esi, esi
je 0x4c33e7
push 0x54
push ebx
push esi
call fcn.004f2410
add esp, 0xc
mov ecx, esi
call fcn.004c2be6
jmp 0x4c33e9
mov eax, ebx
push 4
push str.name
lea ecx, [ebp - 0x28]
mov dword [edi + 0x10c], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
push dword [edi + 0x10c]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0xe8]
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.004038dd
push 7
push str.lbparam
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
mov eax, dword [edi + 0x10c]
lea ecx, [ebp - 0xe8]
add eax, 0x30
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.004038dd
push 9
push str.lbdllmain
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
mov eax, dword [edi + 0x10c]
lea ecx, [ebp - 0xe8]
add eax, 0x18
mov byte [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004b1252
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1a
call fcn.004038dd
lea ecx, [ebp - 0x120]
call fcn.004b0ce4
push 8
push str.lbrunver
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], bl
call fcn.00403856
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0x20
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xe8]
call fcn.004b11a1
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1f
call fcn.004038dd
lea ecx, [ebp - 0x120]
mov esi, ebx
call fcn.004b138f
test eax, eax
jle 0x4c3572
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x120]
cmovae eax, dword [ebp - 0x40]
mov byte [eax], bl
lea eax, [ebp - 0x40]
push eax
push esi
call fcn.004b134e
mov ecx, dword [edi + 0x10c]
add ecx, 0x48
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x4c3558
lea eax, [ebp - 0x40]
push eax
call fcn.004b1b61
jmp 0x4c3562
lea edx, [ebp - 0x40]
push edx
push eax
call fcn.004b1ba5
lea ecx, [ebp - 0x120]
inc esi
call fcn.004b138f
cmp esi, eax
jl 0x4c351c
lea ecx, [ebp - 0x120]
call fcn.004b0d9a
lea ecx, [ebp - 0xe8]
call fcn.004b0d9a
lea ecx, [ebp - 0x158]
call fcn.004b0d9a
xor ebx, ebx
cmp dword [edi + 0x20], ebx
je 0x4c35a9
cmp dword [edi + 0x8c], ebx
je 0x4c35a9
cmp dword [edi + 0x38], ebx
je 0x4c35a9
mov bl, 1
lea ecx, [ebp - 0x78]
call fcn.004b0d9a
lea ecx, [ebp - 0x190]
call fcn.004b0d9a
lea ecx, [ebp - 0xb0]
call fcn.004b0d9a
lea ecx, [ebp - 0x40]
call fcn.004038dd
mov al, bl
call fcn.0040ea91
ret