Function at 0x4a0127
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x418
mov dword [ebp - 0x414], 0
push pe_nt_image_headers32
mov eax, dword [ebp + 8]
add eax, 0x13aec
push eax
lea ecx, [ebp - 0x400]
push ecx
call fcn.0054c980
add esp, 0xc
push pe_nt_image_headers32
mov edx, dword [ebp + 8]
add edx, 0x13aec
push edx
lea eax, [ebp - 0x300]
push eax
call fcn.0054c980
add esp, 0xc
push 0x10
push 0
lea ecx, [ebp - 0x410]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 4
mov byte [ebp - 0x40e], 0xfa
mov byte [ebp - 0x40d], 0
mov byte [ebp - 0x405], 1
push 0x200
lea edx, [ebp - 0x400]
push edx
lea eax, [ebp - 0x410]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf4
mov byte [ebp - 0x40d], 0xe0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x13ad8]
shr edx, 8
mov byte [ebp - 0x40c], dl
mov byte [ebp - 0x405], 1
push 0x200
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x410]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea eax, [ebp - 0x410]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x200]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf4
mov byte [ebp - 0x40d], 0xe1
mov edx, dword [ebp + 8]
mov al, byte [edx + 0x13ad8]
mov byte [ebp - 0x40c], al
mov byte [ebp - 0x405], 1
push 0x200
lea ecx, [ebp - 0x200]
push ecx
lea edx, [ebp - 0x410]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea ecx, [ebp - 0x410]
push ecx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x200]
push edx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf9
mov byte [ebp - 0x40d], 0x6c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x13ad8]
shr ecx, 8
mov byte [ebp - 0x40c], cl
mov byte [ebp - 0x405], 1
push 0x200
lea edx, [ebp - 0x200]
push edx
lea eax, [ebp - 0x410]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf9
mov byte [ebp - 0x40d], 0x6d
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x13ad8]
mov byte [ebp - 0x40c], dl
mov byte [ebp - 0x405], 1
push 0x200
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x410]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea eax, [ebp - 0x410]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x200]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xd3
mov byte [ebp - 0x40d], 0xee
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xf738]
shr eax, 8
mov byte [ebp - 0x40c], al
mov byte [ebp - 0x405], 1
push 0x200
lea ecx, [ebp - 0x200]
push ecx
lea edx, [ebp - 0x410]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea ecx, [ebp - 0x410]
push ecx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x200]
push edx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xd3
mov byte [ebp - 0x40d], 0xef
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xf738]
mov byte [ebp - 0x40c], cl
mov byte [ebp - 0x405], 1
push 0x200
lea edx, [ebp - 0x200]
push edx
lea eax, [ebp - 0x410]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea edx, [ebp - 0x410]
push edx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf8
mov byte [ebp - 0x40d], 0xa0
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x13c11]
sub edx, 1
imul edx, edx, 6
mov byte [ebp - 0x40c], dl
mov byte [ebp - 0x405], 1
push 0x200
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x410]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea eax, [ebp - 0x410]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea ecx, [ebp - 0x200]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf1
mov byte [ebp - 0x40f], 0xc
mov byte [ebp - 0x40e], 0xf8
mov byte [ebp - 0x40d], 0xa1
mov edx, dword [ebp + 8]
xor eax, eax
mov al, byte [edx + 0x13c10]
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0xf741]
cmp eax, edx
jge 0x4a05d0
mov al, byte [ebp - 0x40c]
or al, 1
mov byte [ebp - 0x40c], al
jmp 0x4a05ee
mov ecx, dword [ebp + 8]
xor edx, edx
mov dl, byte [ecx + 0x13c11]
cmp edx, 1
jle 0x4a05ee
mov al, byte [ebp - 0x40c]
or al, 2
mov byte [ebp - 0x40c], al
mov byte [ebp - 0x405], 1
push 0x200
lea ecx, [ebp - 0x200]
push ecx
lea edx, [ebp - 0x410]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.004da773
add esp, 0x10
mov dword [ebp - 0x418], eax
push 0x10
push 0
lea ecx, [ebp - 0x410]
push ecx
call fcn.0054bfb0
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x200]
push edx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x410], 0xf0
mov byte [ebp - 0x40f], 4
mov byte [ebp - 0x40e], 0xf8
mov byte [ebp - 0x40d], 0
mov byte [ebp - 0x405], 1
push 0x200
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x410]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004da8ef
add esp, 0x10
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0xac]
and eax, 0xff
shl eax, 8
mov ecx, dword [ebp - 0xab]
and ecx, 0xff
add eax, ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0xf94c], eax
mov esp, ebp
pop ebp
ret