Function at 0x4d6520
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x2e
push 0
push 0
dec ecx
jne 0x4d6528
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
add ebx, 0xfffffffc
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x1c]
xor eax, eax
push ebp
push 0x4d6c92
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
cmp word [eax + 0xd2], 0
je 0x4d6583
mov eax, dword [ebx]
mov edi, dword [eax + 0x78]
mov edx, dword [esi + 0x5c]
mov eax, dword [edi + 0xd4]
call dword [edi + 0xd0]
mov edx, dword [0x4c96c4]
call fcn.00404fa0
mov dword [ebp - 0x1c], eax
jmp 0x4d662f
mov eax, dword [esi + 0x5c]
xor edx, edx
call fcn.004ca444
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x4d65b3
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
mov edx, dword [eax + 0x90]
cmp edx, dword [esi + 0x5c]
jne 0x4d662f
cmp byte [eax + 0xa4], 0
je 0x4d662f
mov edi, dword [0x66be9c]
mov edi, dword [edi]
lea eax, [ebp - 0x1c]
call edi
mov ecx, dword [esi + 0x5c]
mov dl, 1
mov eax, dword [0x4d0154]
call fcn.004ccf00
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx]
mov edi, dword [eax + 0x78]
mov eax, dword [edi + 0x90]
cmp eax, dword [esi + 0x5c]
jne 0x4d662f
mov eax, dword [ebp - 0x1c]
add eax, 0x18
mov edx, dword [edi + 0x98]
call fcn.00405e24
mov eax, dword [ebp - 0x1c]
add eax, 0x44
mov edx, dword [ebx]
mov edx, dword [edx + 0x78]
mov edx, dword [edx + 0x94]
call fcn.00405e24
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0x9c]
mov edx, dword [ebp - 0x1c]
add edx, 0x38
mov dword [edx], eax
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
mov eax, dword [eax + 0xa0]
mov edx, dword [ebp - 0x1c]
add edx, 8
mov dword [edx], eax
xor eax, eax
push ebp
push 0x4d6c3b
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 4]
call fcn.00405dd0
cmp byte [esi + 0x68], 0
je 0x4d6695
cmp byte [esi + 0x69], 0
je 0x4d6683
mov eax, dword [ebp + 8]
cmp byte [eax + 0x18], 0
je 0x4d6669
lea eax, [ebp - 4]
mov edx, 0x4d6ca8
call fcn.00405e68
jmp 0x4d6671
lea eax, [ebp - 4]
call fcn.00405dd0
lea eax, [ebp - 8]
mov edx, dword [ebx]
mov edx, dword [edx + 0xac]
call fcn.00405e68
jmp 0x4d66a5
lea eax, [ebp - 8]
mov edx, dword [ebx]
mov edx, dword [edx + 0xb0]
call fcn.00405e68
jmp 0x4d66a5
lea eax, [ebp - 8]
mov edx, dword [ebx]
mov edx, dword [edx + 0xb4]
call fcn.00405e68
cmp dword [esi + 0x78], 0
jne 0x4d66be
cmp dword [esi + 0x74], 1
jne 0x4d66be
lea eax, [ebp - 8]
mov edx, 0x4d6cb4
call fcn.004060b8
mov eax, dword [ebx]
call fcn.004d6404
test al, al
je 0x4d6861
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
push eax
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 0xc]
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [esi + 0x5c]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov eax, dword [ebx]
mov eax, dword [eax + 0x78]
mov edi, dword [eax]
call dword [edi + 0x1c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
cmp byte [eax], 0
je 0x4d6742
lea eax, [ebp - 0x10]
mov edx, 0x4d6ccc
call fcn.00405e68
cmp byte [esi + 0x68], 0
je 0x4d6727
cmp byte [esi + 0x69], 0
jne 0x4d6727
lea eax, [ebp - 8]
mov edx, dword [ebx]
mov edx, dword [edx + 0xb8]
call fcn.00405e68
cmp dword [esi + 0x78], 0
jne 0x4d674f
cmp dword [esi + 0x74], 1
jne 0x4d674f
lea eax, [ebp - 8]
mov edx, 0x4d6cb4
call fcn.004060b8
jmp 0x4d674f
lea eax, [ebp - 0x10]
mov edx, 0x4d6cd8
call fcn.00405e68
mov eax, dword [ebp + 8]
cmp byte [eax + 0x18], 0
je 0x4d67e0
lea eax, [ebp - 0x20]
push eax
lea edx, [ebp - 0x44]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd4]
call fcn.004d64dc
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
lea edx, [ebp - 0x48]
mov eax, dword [ebp - 0x10]
call fcn.004d64dc
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x4c]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd8]
call fcn.004d64dc
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0xb
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 0xc]
call fcn.004d64dc
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x24], 0xb
lea edx, [ebp - 0x40]
mov ecx, 3
mov eax, 0x4d6ce4
call fcn.0044b944
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0xc]
call fcn.00405e68
jmp 0x4d6869
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x58]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd4]
call fcn.004d64dc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0xb
lea edx, [ebp - 0x5c]
mov eax, dword [ebp - 0x10]
call fcn.004d64dc
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x60]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd8]
call fcn.004d64dc
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x2c], 0xb
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 0xc]
call fcn.004d64dc
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x24], 0xb
lea edx, [ebp - 0x40]
mov ecx, 3
mov eax, 0x4d6cfc
call fcn.0044b944
mov edx, dword [ebp - 0x54]
lea eax, [ebp - 0xc]
call fcn.00405e68
jmp 0x4d6869
lea eax, [ebp - 0xc]
call fcn.00405dd0
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx + 0x44]
call fcn.00405e68
cmp dword [ebp - 0x14], 0
jne 0x4d6888
lea eax, [ebp - 0x14]
mov edx, dword [esi + 0x60]
call fcn.00405e68
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
call fcn.004ce1c8
cmp dword [ebp - 0x18], 0
jne 0x4d68a4
lea eax, [ebp - 0x18]
mov edx, dword [esi + 0x64]
call fcn.00405e68
mov eax, dword [ebp + 8]
cmp byte [eax + 0x18], 0
je 0x4d6a98
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0xe4]
mov eax, dword [ebp - 4]
call fcn.004d64dc
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0xdc], 0xb
lea edx, [ebp - 0xe8]
mov eax, dword [ebp - 8]
call fcn.004d64dc
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0xd4], 0xb
lea edx, [ebp - 0xec]
mov eax, dword [ebx]
mov eax, dword [eax + 0xbc]
call fcn.004d64dc
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 0xcc], 0xb
mov eax, dword [esi + 0x5c]
call fcn.004d64d4
mov dword [ebp - 0xc8], eax
mov byte [ebp - 0xc4], 0
lea edx, [ebp - 0xf0]
mov eax, dword [ebx]
mov eax, dword [eax + 0xcc]
call fcn.004d64dc
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 0xbc], 0xb
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
call fcn.004d64d4
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0
lea edx, [ebp - 0xf4]
mov eax, dword [ebx]
mov eax, dword [eax + 0xc0]
call fcn.004d64dc
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0xb
mov eax, dword [ebp - 0x1c]
call fcn.004ce04c
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0
lea edx, [ebp - 0xf8]
mov eax, dword [ebx]
mov eax, dword [eax + 0xc4]
call fcn.004d64dc
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], 0xb
lea edx, [ebp - 0xfc]
mov eax, dword [ebp - 0x14]
call fcn.004d64dc
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x98], eax
mov byte [ebp - 0x94], 0xb
lea edx, [ebp - 0x100]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd0]
call fcn.004d64dc
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x8c], 0xb
lea edx, [ebp - 0x104]
mov eax, dword [ebp - 0x18]
call fcn.004d64dc
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x84], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0xb
lea edx, [ebp - 0x108]
mov eax, dword [ebx]
mov eax, dword [eax + 0xdc]
call fcn.004d64dc
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x74], 0xb
mov eax, dword [esi + 0x84]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea edx, [ebp - 0xe0]
mov ecx, 0xe
mov eax, 0x4d6d14
call fcn.0044b944
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
call fcn.00405e24
jmp 0x4d6be0
lea eax, [ebp - 0x10c]
push eax
lea edx, [ebp - 0x158]
mov eax, dword [ebp - 4]
call fcn.004d64dc
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x150], 0xb
lea edx, [ebp - 0x15c]
mov eax, dword [ebp - 8]
call fcn.004d64dc
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x14c], eax
mov byte [ebp - 0x148], 0xb
lea edx, [ebp - 0x160]
mov eax, dword [ebx]
mov eax, dword [eax + 0xbc]
call fcn.004d64dc
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x144], eax
mov byte [ebp - 0x140], 0xb
mov eax, dword [esi + 0x5c]
call fcn.004d64d4
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0x138], 0
lea edx, [ebp - 0x164]
mov eax, dword [ebx]
mov eax, dword [eax + 0xc4]
call fcn.004d64dc
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x134], eax
mov byte [ebp - 0x130], 0xb
lea edx, [ebp - 0x168]
mov eax, dword [ebp - 0x14]
call fcn.004d64dc
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 0x128], 0xb
lea edx, [ebp - 0x16c]
mov eax, dword [ebx]
mov eax, dword [eax + 0xd0]
call fcn.004d64dc
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x124], eax
mov byte [ebp - 0x120], 0xb
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x18]
call fcn.004d64dc
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x118], 0xb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x114], eax
mov byte [ebp - 0x110], 0xb
lea edx, [ebp - 0x154]
mov ecx, 8
mov eax, 0x4d6d50
call fcn.0044b944
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
call fcn.00405e24
mov eax, dword [ebp + 8]
cmp byte [eax + 0x18], 0
jne 0x4d6c20
movzx eax, byte [0x4d6d6c]
push eax
lea eax, [ebp - 0x174]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov eax, dword [eax]
mov ecx, 0x4d6d78
mov edx, 0x4d6d84
call fcn.00473db8
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
call fcn.00405e24
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d6c42
mov ebx, dword [0x66be9c]
mov ebx, dword [ebx]
lea eax, [ebp - 0x1c]
call ebx
ret