Function at 0x4ba740
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x50168b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbc
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [0x532a80]
mov dword [esp + 0xd4], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xdc]
mov byte [esp + 0xd4], 1
mov ecx, dword [eax - 8]
test ecx, ecx
jne 0x4ba7b8
push 0x30006
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x52f7d8
push 0xe1be
push ecx
call fcn.00471cf0
add esp, 0xc
mov ecx, esi
call fcn.00427a50
mov esi, eax
jmp 0x4bafe5
push 0x528ddc
push eax
call fcn.004ca29a
add esp, 8
test eax, eax
jne 0x4ba811
mov edx, dword [0x532a80]
mov dword [esp + 0x14], edx
push 0x10001
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov byte [esp + 0xe0], 2
call fcn.004df802
mov ecx, esi
call fcn.00427a50
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0xd4], 1
call fcn.004dfa8d
jmp 0x4bafe5
push 0x2f
lea ecx, [esp + 0xe0]
call fcn.004dca9d
lea ecx, [esp + 0x28]
call fcn.004dd9e8
lea ecx, [esp + 0xdc]
mov byte [esp + 0xd4], 3
push ecx
lea ecx, [esp + 0x1c]
call fcn.004df802
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd4], 4
call fcn.004539c0
lea edx, [esp + 0x3c]
mov ecx, esi
push edx
mov byte [esp + 0xd8], 5
call fcn.004bbc40
push ecx
lea eax, [esp + 0xe0]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004df802
call fcn.0040dac0
mov ebp, eax
add esp, 4
cmp ebp, 0xffffffff
jne 0x4ba892
mov ecx, esi
call fcn.004b8fe0
mov ebp, eax
mov ebx, dword [esp + 0xe0]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push ecx
push 0xe1f5
push edx
call fcn.004dca01
mov eax, dword [esp + 0x28]
add esp, 0xc
mov ecx, esi
push 1
push eax
call fcn.004b8b60
push 1
mov ecx, esi
call fcn.004bb8f0
push ebx
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.004df802
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
push 2
mov ecx, esi
mov edi, eax
call fcn.004bb8f0
mov ecx, edi
and ecx, 0xffff0000
cmp ecx, 0x10000
je 0x4ba99c
cmp edi, 0x30007
je 0x4ba913
cmp edi, 0x30002
jne 0x4bad7b
mov eax, dword [0x532a80]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], eax
lea edx, [esp + 0x20]
lea eax, [esp + 0x14]
push edx
push eax
push ebp
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0xe8], 0x2c
call fcn.004df802
call fcn.0040d420
add esp, 0x10
test eax, eax
je 0x4bae8c
mov ecx, dword [esp + 0x30]
lea eax, [esp + 0x20]
push eax
push ecx
lea ecx, [esp + 0x30]
call fcn.004ddc42
lea edx, [esp + 0x14]
lea ecx, [esp + 0x18]
push edx
call fcn.004dfbc6
lea ecx, [esp + 0x20]
mov byte [esp + 0xd4], 0x2b
call fcn.004dfa8d
lea ecx, [esp + 0x14]
mov byte [esp + 0xd4], 5
call fcn.004dfa8d
jmp 0x4ba899
mov eax, dword [esp + 0x30]
test eax, eax
jle 0x4bacac
lea ebp, [eax - 1]
test ebp, ebp
jl 0x4baab2
push ebp
lea ecx, [esp + 0x2c]
call fcn.004bb030
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004df802
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x30]
mov edx, dword [esp + 0x18]
push 0
lea ecx, [esp + 0x40]
push 0x536e9c
push ecx
push edx
mov edi, eax
call fcn.004099a0
mov eax, edi
add esp, 0x10
and eax, 0xffff0000
cmp eax, 0x10000
jne 0x4baa97
push 1
push ebp
lea ecx, [esp + 0x30]
call fcn.004bb030
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004df802
lea ecx, [esp + 0x20]
mov byte [esp + 0xdc], 6
call fcn.004128f0
push eax
push 4
lea ecx, [esp + 0x30]
call fcn.0040c920
lea ecx, [esp + 0x1c]
mov byte [esp + 0xdc], 8
push ecx
mov ecx, eax
call fcn.0040cb00
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xd8], 9
call fcn.004dfbc6
lea ecx, [esp + 0x14]
mov byte [esp + 0xd4], 8
call fcn.004dfa8d
lea ecx, [esp + 0x20]
mov byte [esp + 0xd4], 5
call fcn.004dfa8d
push ebx
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004df802
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov edi, eax
mov ecx, edi
and ecx, 0xffff0000
cmp ecx, 0x10000
jne 0x4babde
dec ebp
jns 0x4ba9b3
mov edx, dword [0x532a80]
mov dword [esp + 0x14], edx
push 0x10001
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
mov byte [esp + 0xe0], 0x13
call fcn.004df802
mov ecx, esi
call fcn.00427a50
lea ecx, [esp + 0x14]
mov esi, eax
mov byte [esp + 0xd4], 5
call fcn.004dfa8d
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd4], 0x19
call fcn.004dfa8d
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd4], 0x18
call fcn.004dfa8d
lea ecx, [esp + 0x98]
mov byte [esp + 0xd4], 0x17
call fcn.004dfa8d
lea ecx, [esp + 0x94]
mov byte [esp + 0xd4], 0x16
call fcn.004dfa8d
lea ecx, [esp + 0x78]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x84]
mov byte [esp + 0xd4], 0x1c
call fcn.004dfa8d
lea ecx, [esp + 0x80]
mov byte [esp + 0xd4], 0x1b
call fcn.004dfa8d
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd4], 0x1a
call fcn.004dfa8d
lea edx, [esp + 0x40]
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x64]
mov byte [esp + 0xd4], 0x21
call fcn.004dda1b
lea ecx, [esp + 0x60]
mov byte [esp + 0xd4], 0x20
call fcn.004dfa8d
lea ecx, [esp + 0x50]
mov byte [esp + 0xd4], 0x1f
call fcn.004dfa8d
lea ecx, [esp + 0x4c]
mov byte [esp + 0xd4], 0x1e
call fcn.004dfa8d
mov byte [esp + 0xd4], 0x1d
jmp 0x4bafba
mov eax, dword [esp + 0xdc]
push edi
push ecx
mov edx, esp
mov dword [esp + 0x18], esp
push eax
push 0x18a
push edx
call fcn.00471cf0
add esp, 0xc
mov ecx, esi
call fcn.00427a50
mov esi, eax
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd4], 0xf
call fcn.004dfa8d
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd4], 0xe
call fcn.004dfa8d
lea ecx, [esp + 0x98]
mov byte [esp + 0xd4], 0xd
call fcn.004dfa8d
lea ecx, [esp + 0x94]
mov byte [esp + 0xd4], 0xc
call fcn.004dfa8d
lea ecx, [esp + 0x78]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x84]
mov byte [esp + 0xd4], 0x12
call fcn.004dfa8d
lea ecx, [esp + 0x80]
mov byte [esp + 0xd4], 0x11
call fcn.004dfa8d
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd4], 0x10
call fcn.004dfa8d
lea ecx, [esp + 0x40]
mov byte [esp + 0xd4], 0xa
call fcn.00405d50
jmp 0x4bafc3
push 0x10001
push ecx
mov ecx, dword [esp + 0x20]
mov eax, esp
mov dword [esp + 0x18], esp
push ecx
push 0xe1eb
push eax
call fcn.00471cf0
add esp, 0xc
mov ecx, esi
call fcn.00427a50
mov esi, eax
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd4], 0x27
call fcn.004dfa8d
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd4], 0x26
call fcn.004dfa8d
lea ecx, [esp + 0x98]
mov byte [esp + 0xd4], 0x25
call fcn.004dfa8d
lea ecx, [esp + 0x94]
mov byte [esp + 0xd4], 0x24
call fcn.004dfa8d
lea edx, [esp + 0x78]
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x84]
mov byte [esp + 0xd4], 0x2a
call fcn.004dfa8d
lea ecx, [esp + 0x80]
mov byte [esp + 0xd4], 0x29
call fcn.004dfa8d
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd4], 0x28
call fcn.004dfa8d
lea ecx, [esp + 0x40]
mov byte [esp + 0xd4], 0x22
call fcn.00405d50
jmp 0x4bafc3
push edi
push ecx
mov ecx, dword [esp + 0xe4]
mov eax, esp
mov dword [esp + 0x18], esp
push ecx
push 0x18a
push eax
call fcn.00471cf0
add esp, 0xc
mov ecx, esi
call fcn.00427a50
mov esi, eax
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd4], 0x40
call fcn.004dfa8d
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd4], 0x3f
call fcn.004dfa8d
lea ecx, [esp + 0x98]
mov byte [esp + 0xd4], 0x3e
call fcn.004dfa8d
lea ecx, [esp + 0x94]
mov byte [esp + 0xd4], 0x3d
call fcn.004dfa8d
lea edx, [esp + 0x78]
mov dword [esp + 0x10], edx
lea ecx, [esp + 0x84]
mov byte [esp + 0xd4], 0x43
call fcn.004dfa8d
lea ecx, [esp + 0x80]
mov byte [esp + 0xd4], 0x42
call fcn.004dfa8d
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd4], 0x41
call fcn.004dfa8d
lea eax, [esp + 0x40]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x64]
mov byte [esp + 0xd4], 0x48
call fcn.004dda1b
lea ecx, [esp + 0x60]
mov byte [esp + 0xd4], 0x47
call fcn.004dfa8d
lea ecx, [esp + 0x50]
mov byte [esp + 0xd4], 0x46
call fcn.004dfa8d
lea ecx, [esp + 0x4c]
mov byte [esp + 0xd4], 0x45
call fcn.004dfa8d
mov byte [esp + 0xd4], 0x44
jmp 0x4bafba
mov edx, dword [esp + 0xdc]
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
push 0x18a
push ecx
call fcn.00471cf0
add esp, 0xc
mov ecx, esi
call fcn.00427a50
lea ecx, [esp + 0x20]
mov esi, eax
mov byte [esp + 0xd4], 0x2b
call fcn.004dfa8d
lea ecx, [esp + 0x14]
mov byte [esp + 0xd4], 5
call fcn.004dfa8d
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd4], 0x32
call fcn.004dfa8d
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd4], 0x31
call fcn.004dfa8d
lea ecx, [esp + 0x98]
mov byte [esp + 0xd4], 0x30
call fcn.004dfa8d
lea ecx, [esp + 0x94]
mov byte [esp + 0xd4], 0x2f
call fcn.004dfa8d
lea eax, [esp + 0x78]
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x84]
mov byte [esp + 0xd4], 0x35
call fcn.004dfa8d
lea ecx, [esp + 0x80]
mov byte [esp + 0xd4], 0x34
call fcn.004dfa8d
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd4], 0x33
call fcn.004dfa8d
lea ecx, [esp + 0x40]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x64]
mov byte [esp + 0xd4], 0x3a
call fcn.004dda1b
lea ecx, [esp + 0x60]
mov byte [esp + 0xd4], 0x39
call fcn.004dfa8d
lea ecx, [esp + 0x50]
mov byte [esp + 0xd4], 0x38
call fcn.004dfa8d
lea ecx, [esp + 0x4c]
mov byte [esp + 0xd4], 0x37
call fcn.004dfa8d
mov byte [esp + 0xd4], 0x36
lea ecx, [esp + 0x48]
call fcn.004dfa8d
lea ecx, [esp + 0x18]
mov byte [esp + 0xd4], 3
call fcn.004dfa8d
lea ecx, [esp + 0x28]
mov byte [esp + 0xd4], 1
call fcn.004dda1b
lea ecx, [esp + 0x1c]
mov byte [esp + 0xd4], 0
call fcn.004dfa8d
lea ecx, [esp + 0xdc]
mov dword [esp + 0xd4], 0xffffffff
call fcn.004dfa8d
mov ecx, dword [esp + 0xcc]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xc8
ret 8