Function at 0x4c3e0f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
sub esp, 0x204
lea ebp, [esp - 4]
mov eax, dword [0x70b744]
xor eax, ebp
mov dword [ebp + 0x204], eax
push 0x20c
mov eax, 0x5d24d2
call fcn.005234b0
sub esp, 0x24
mov esi, ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
xor edi, edi
push edi
push 0x67535c
mov dword [ebp - 0x18], esi
call fcn.004ac9bc
mov dword [ebp - 4], edi
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3b5d
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x14], esp
push edi
push eax
call fcn.004c11c3
mov dword [ebp - 4], 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push edi
push str.Start
call fcn.004ac9bc
mov byte [ebp - 4], 2
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
mov ebx, 0x721f18
push eax
mov ecx, ebx
call fcn.004bc730
mov dword [ebp - 4], 3
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.Version
call fcn.004ac9bc
mov byte [ebp - 4], 4
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
push edi
push dword [0x722278]
call fcn.004ac6f7
mov dword [ebp - 4], 5
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x69e008
call fcn.004ac9bc
mov byte [ebp - 4], 6
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push edi
push eax
mov ecx, 0x722058
call fcn.004c93d1
mov dword [ebp - 4], 7
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.License
call fcn.004ac9bc
mov byte [ebp - 4], 8
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push edi
push eax
mov ecx, ebx
call fcn.004bdbdf
mov dword [ebp - 4], 9
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.Server
call fcn.004ac9bc
mov byte [ebp - 4], 0xa
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
push edi
push dword [0x722288]
call fcn.004ac6f7
mov dword [ebp - 4], 0xb
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x675338
call fcn.004ac9bc
mov byte [ebp - 4], 0xc
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004c1b8a
mov dword [ebp - 4], 0xd
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x675330
call fcn.004ac9bc
mov byte [ebp - 4], 0xe
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push 0x64
push eax
call fcn.004c34b3
mov dword [ebp - 4], 0xf
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x675328
call fcn.004ac9bc
mov byte [ebp - 4], 0x10
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push eax
mov ecx, ebx
call fcn.004bc870
mov dword [ebp - 4], 0x11
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x675320
call fcn.004ac9bc
mov byte [ebp - 4], 0x12
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004c3d55
push edi
mov esi, 0x69dd8c
push esi
lea ecx, [ebp - 0x188]
call fcn.004ac9bc
mov dword [ebp - 4], 0x13
push edi
push esi
lea ecx, [ebp - 0x140]
call fcn.004ac9bc
mov byte [ebp - 4], 0x14
push edi
push esi
lea ecx, [ebp - 0xf8]
call fcn.004ac9bc
mov byte [ebp - 4], 0x15
push edi
push esi
lea ecx, [ebp - 0xd4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x16
push edi
push esi
lea ecx, [ebp - 0x164]
call fcn.004ac9bc
mov byte [ebp - 4], 0x17
push edi
push esi
lea ecx, [ebp - 0x1ac]
call fcn.004ac9bc
mov byte [ebp - 4], 0x18
push edi
push esi
lea ecx, [ebp - 0x11c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x19
push edi
push esi
lea ecx, [ebp - 0x1f4]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1a
push edi
push esi
lea ecx, [ebp - 0xb0]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1b
push edi
push str._Except:
lea ecx, [ebp - 0x1d0]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1c
push edi
push edi
mov ecx, 0x7221bc
call fcn.004ad90c
push eax
lea ecx, [ebp - 0x218]
call fcn.004ac6f7
mov byte [ebp - 4], 0x1d
push edi
push 0x6a1910
lea ecx, [ebp - 0x44]
call fcn.004ac9bc
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x7221bc
call fcn.004ad86b
mov byte [ebp - 4], 0x1f
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
lea edx, [ebp - 0x188]
push edx
lea edx, [ebp - 0x140]
push edx
lea edx, [ebp - 0xf8]
push edx
lea edx, [ebp - 0xd4]
push edx
lea edx, [ebp - 0x164]
push edx
lea edx, [ebp - 0x1ac]
push edx
lea edx, [ebp - 0x11c]
push edx
lea edx, [ebp - 0x1f4]
push edx
lea edx, [ebp - 0xb0]
push edx
push 0x7221e0
lea edx, [ebp - 0x1d0]
push edx
lea edx, [ebp - 0x218]
push edx
lea edx, [ebp - 0x44]
push edx
push eax
push ecx
call fcn.004add2f
mov byte [ebp - 4], 0x20
add esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.Proxy_Settings
call fcn.004ac9bc
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x18]
call fcn.004c3d55
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x8c]
call fcn.004ac66a
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x44]
call fcn.004ac66a
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x218]
call fcn.004ac66a
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1d0]
call fcn.004ac66a
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb0]
call fcn.004ac66a
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1f4]
call fcn.004ac66a
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x11c]
call fcn.004ac66a
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1ac]
call fcn.004ac66a
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x164]
call fcn.004ac66a
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd4]
call fcn.004ac66a
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xf8]
call fcn.004ac66a
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x140]
call fcn.004ac66a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.004ac66a
push edi
push 0x6ad370
lea ecx, [ebp - 0x68]
call fcn.004ac9bc
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0x1c]
push eax
push 1
push edi
push str.SoftwareMicrosoftInternet_Explorer
push reloc.WSOCK32.dll_bind
call dword [0x71f5dc]
cmp eax, edi
jne 0x4c4374
push edi
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push esi
call fcn.004120e9
mov byte [ebp - 4], 0x23
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.Version
call fcn.004120e9
mov byte [ebp - 4], 0x24
push dword [ebp - 0x1c]
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 0x22
mov ecx, ebx
call fcn.004ced0e
mov byte [ebp - 4], 0x25
cmp dword [eax + 0x18], 8
jb 0x4c4331
mov eax, dword [eax + 4]
jmp 0x4c4334
add eax, 4
push eax
lea ecx, [ebp - 0x8c]
call fcn.004ac9bc
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x68]
call fcn.004acaa2
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x8c]
call fcn.004ac66a
mov byte [ebp - 4], 0x22
push edi
push 1
lea ecx, [ebp - 0x3c]
call fcn.00410779
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
sub esp, 0x24
lea eax, [ebp - 0x68]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004ac698
mov byte [ebp - 4], 0x27
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push 0x675294
call fcn.004ac9bc
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x22
mov ebx, dword [ebp - 0x18]
mov ecx, ebx
call fcn.004c3d55
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.004c1862
mov byte [ebp - 4], 0x29
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.AppPath
call fcn.004ac9bc
mov byte [ebp - 4], 0x2a
mov byte [ebp - 4], 0x22
mov ecx, ebx
call fcn.004c3d55
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp]
push eax
mov dword [ebp - 0x20], 0x101
call dword [0x71f5c8]
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
push edi
lea eax, [ebp]
push eax
call fcn.004ac9bc
mov byte [ebp - 4], 0x2b
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
push edi
push str.UserAccount
call fcn.004ac9bc
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x22
mov ecx, ebx
call fcn.004c3d55
lea esi, [ebx + 0x18]
cmp dword [esi], edi
je 0x4c4461
cmp dword [esi + 4], edi
je 0x4c4461
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
push esi
call fcn.004ac698
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x22
mov ecx, ebx
call fcn.004c3b5d
mov ecx, esi
call fcn.004acc79
jmp 0x4c4483
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10], esp
push edi
push 0x6a0e4c
call fcn.004ac9bc
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x22
mov ecx, ebx
call fcn.004c3b5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.004ac66a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x204]
xor ecx, ebp
call fcn.0051d721
add ebp, 0x208
leave
ret