Function at 0x4c4f60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5af5b9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
call fcn.004b9b70
xor ebp, ebp
mov dword [esp + 0x24], ebp
mov dword [esi + 0xc0], 0x5c9590
mov byte [esp + 0x24], 1
lea ebx, [esi + 0xcc]
mov eax, ebx
mov dword [esi], 0x5c95c8
mov dword [esi + 0xc0], 0x5c95bc
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 2
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 3
lea eax, [esi + 0xd8]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 4
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 5
lea eax, [esi + 0xe4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 6
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 7
lea eax, [esi + 0xf0]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 8
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 9
lea edi, [esi + 0xfc]
mov ecx, edi
mov dword [esp + 0x10], edi
call fcn.004173d0
mov byte [esp + 0x24], 0xa
mov dword [edi], 0x5b7a0c
mov byte [esp + 0x24], 0xb
lea edi, [esi + 0x10c]
mov ecx, edi
mov dword [esp + 0x10], ecx
call fcn.004173d0
mov byte [esp + 0x24], 0xc
mov eax, edi
mov dword [eax], 0x5b7a0c
mov byte [esp + 0x24], 0xd
lea eax, [esi + 0x11c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0xe
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0xf
lea eax, [esi + 0x128]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x10
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x11
lea eax, [esi + 0x134]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x12
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x13
lea eax, [esi + 0x140]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x14
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x15
lea eax, [esi + 0x15c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x16
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x17
lea eax, [esi + 0x168]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x18
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x19
lea eax, [esi + 0x174]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x1a
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1b
lea eax, [esi + 0x180]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x1c
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1d
lea eax, [esi + 0x18c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x1e
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1f
lea eax, [esi + 0x198]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x20
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x21
lea eax, [esi + 0x1a4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x22
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x23
lea eax, [esi + 0x1b0]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x24
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x25
push fcn.00415990
push 0x417b00
push 4
push 0x10
lea eax, [esi + 0x234]
push eax
call fcn.005904c4
mov byte [esp + 0x24], 0x26
push fcn.00415990
push 0x417b00
push 4
push 0x10
lea ecx, [esi + 0x274]
push ecx
call fcn.005904c4
mov byte [esp + 0x24], 0x27
push fcn.00415990
push 0x417b00
push 4
push 0x10
lea edx, [esi + 0x2b4]
push edx
call fcn.005904c4
mov byte [esp + 0x24], 0x28
push fcn.00415990
push 0x417b00
push 4
push 0x10
lea eax, [esi + 0x2f4]
push eax
call fcn.005904c4
mov byte [esp + 0x24], 0x29
lea ecx, [esi + 0x350]
call fcn.00413b70
mov byte [esp + 0x24], 0x2a
lea ecx, [esi + 0x364]
call fcn.00413b70
mov byte [esp + 0x24], 0x2b
lea ecx, [esi + 0x378]
call fcn.00413b70
mov byte [esp + 0x24], 0x2c
lea eax, [esi + 0x394]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x2d
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x2e
lea eax, [esi + 0x3a0]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x2f
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x30
lea eax, [esi + 0x3ac]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x31
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x32
lea eax, [esi + 0x3bc]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x33
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x34
lea eax, [esi + 0x3c8]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x35
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x36
lea eax, [esi + 0x3d4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x37
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x38
lea eax, [esi + 0x3e0]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x39
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x3a
lea eax, [esi + 0x3ec]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x3b
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x3c
lea eax, [esi + 0x3f8]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x3d
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x3e
lea eax, [esi + 0x404]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x3f
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x40
lea eax, [esi + 0x410]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x41
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x42
lea eax, [esi + 0x41c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x43
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x44
lea eax, [esi + 0x428]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x45
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x46
lea eax, [esi + 0x434]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x47
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x48
lea eax, [esi + 0x440]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x49
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x4a
lea eax, [esi + 0x44c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x4b
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x4c
lea eax, [esi + 0x45c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x4d
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x4e
lea eax, [esi + 0x468]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x4f
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x50
lea eax, [esi + 0x474]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], ebp
mov byte [esp + 0x24], 0x51
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x52
push fcn.0040e9a0
push 0x40f150
push 2
lea eax, [esi + 0x480]
push 0xc
push eax
call fcn.005904c4
mov byte [esp + 0x24], 0x53
push fcn.0040e9a0
push 0x40f150
push 0x15
push 0xc
lea edx, [esi + 0x518]
push edx
call fcn.005904c4
mov byte [esp + 0x24], 0x54
push fcn.0040e9a0
push 0x40f150
push 0xdac
push 0xc
lea eax, [esi + 0x614]
push eax
call fcn.005904c4
mov byte [esp + 0x24], 0x55
mov dword [ebx + 4], ebp
mov dword [esi + 0xdc], ebp
mov cl, byte [esi + 0xa0]
mov dword [esp + 0x10], 0x447a0000
mov eax, dword [esp + 0x10]
xor cl, al
mov byte [esi + 0x98], cl
mov dl, byte [esi + 0xa1]
xor dl, al
mov byte [esi + 0x9c], dl
mov cl, byte [esi + 0xa0]
xor cl, ah
mov byte [esi + 0x99], cl
mov dl, byte [esi + 0xa1]
xor dl, ah
mov byte [esi + 0x9d], dl
mov cl, byte [esi + 0xa0]
shr eax, 0x10
xor cl, al
mov byte [esi + 0x9a], cl
mov dl, byte [esi + 0xa1]
xor dl, al
mov byte [esi + 0x9e], dl
mov cl, byte [esi + 0xa0]
xor cl, ah
mov byte [esi + 0x9b], cl
mov dl, byte [esi + 0xa1]
xor dl, ah
mov byte [esi + 0x9f], dl
mov cl, byte [esi + 0xb0]
mov dword [esp + 0x10], 0x43960000
mov eax, dword [esp + 0x10]
xor cl, al
mov byte [esi + 0xa8], cl
mov dl, byte [esi + 0xb1]
xor dl, al
mov byte [esi + 0xac], dl
mov cl, byte [esi + 0xb0]
xor cl, ah
mov byte [esi + 0xa9], cl
mov dl, byte [esi + 0xb1]
xor dl, ah
mov byte [esi + 0xad], dl
mov cl, byte [esi + 0xb0]
shr eax, 0x10
xor cl, al
mov byte [esi + 0xaa], cl
mov dl, byte [esi + 0xb1]
xor dl, al
mov byte [esi + 0xae], dl
mov cl, byte [esi + 0xb0]
xor cl, ah
mov byte [esi + 0xab], cl
mov dl, byte [esi + 0xb1]
xor dl, ah
mov byte [esi + 0xaf], dl
mov dword [esi + 0x3fc], ebp
mov dword [esi + 0x3f0], ebp
call fcn.00590a11
and eax, 0x80000001
jns 0x4c58f8
dec eax
or eax, 0xfffffffe
inc eax
mov dword [esi + 0xe8], eax
mov dword [esi + 0xf4], 0x2d
mov cl, byte [edi + 0xc]
mov dword [esp + 0x10], 0
mov eax, dword [esp + 0x10]
xor cl, al
mov byte [edi + 4], cl
mov dl, byte [edi + 0xd]
xor dl, al
mov byte [edi + 8], dl
mov cl, byte [edi + 0xc]
xor cl, ah
mov byte [edi + 5], cl
mov dl, byte [edi + 0xd]
xor dl, ah
mov byte [edi + 9], dl
mov cl, byte [edi + 0xc]
shr eax, 0x10
xor cl, al
mov byte [edi + 6], cl
mov dl, byte [edi + 0xd]
xor dl, al
mov byte [edi + 0xa], dl
mov cl, byte [edi + 0xc]
xor cl, ah
mov byte [edi + 7], cl
mov dl, byte [edi + 0xd]
xor dl, ah
mov byte [edi + 0xb], dl
mov dword [esi + 0x144], ebp
mov dword [esi + 0x158], ebp
or ebx, 0xffffffff
mov dword [esi + 0x160], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x3b8], eax
mov dword [esi + 0x16c], ebp
mov dword [esi + 0x138], ebp
mov dword [esi + 0x190], ebp
mov byte [esi + 0x390], 1
mov dword [esi + 0x1b4], ebp
mov dword [esi + 0x398], ebp
mov dword [esi + 0x3a4], ebp
mov dword [esi + 0x484], ebx
mov ecx, esi
mov dword [esi + 0x490], ebx
call fcn.004c2100
mov dword [esi + 0x408], ebx
mov dword [esi + 0x414], ebp
mov dword [esi + 0x420], ebp
mov dword [esi + 0x42c], ebp
mov dword [esi + 0x438], ebp
mov dword [esi + 0x444], ebp
mov dword [esi + 0x460], ebp
mov dword [esi + 0x46c], ebp
mov dword [esi + 0x478], ebp
mov dword [esi + 0x458], ebx
xor eax, eax
lea ecx, [esi + 0xaa24]
mov dword [ecx], eax
mov dword [ecx + 4], eax
xor edx, edx
lea eax, [esi + 0xaa2c]
mov dword [eax], edx
mov dword [eax + 4], edx
xor eax, eax
mov ecx, 0x3c
lea edi, [esi + 0xaa54]
rep stosd dword es:[edi], eax
mov dword [esi + 0xaa4c], ebp
mov dword [esi + 0xab44], ebp
mov dword [esi + 0xab48], ebp
mov dword [esi + 0xab4c], ebx
mov dword [esi + 0xab50], ebp
mov dword [esi + 0xab54], ebp
mov ecx, esi
mov dword [esi + 0xaa50], ebp
call fcn.004c4dd0
mov dword [esp + 0x24], ebx
pop edi
mov eax, esi
pop esi
mov ecx, dword [esp + 0x14]
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret