Function at 0x4d6290
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
lea edx, [ebp - 0x9c]
sub esp, 0xc4
mov dword [ebp - 0xa8], ecx
lea eax, [ebp - 8]
mov dword [esp], edx
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x84], 0x567468
mov dword [ebp - 0x80], 0x5c315d
mov dword [ebp - 0x78], 0x4d664c
mov dword [ebp - 0x74], esp
call sub.libgcc_s_sjlj_1.dll__Unwind_SjLj_Register
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x52], 0x6d
mov byte [ebp - 0x51], 0x61
mov byte [ebp - 0x50], 0x73
mov byte [ebp - 0x4f], 0x74
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x72
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x73
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x63
mov byte [ebp - 0x48], 0x72
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0x74
mov byte [ebp - 0x45], 0x6b
mov byte [ebp - 0x44], 0x65
mov byte [ebp - 0x43], 0x79
mov byte [ebp - 0x42], 0x20
mov byte [ebp - 0x41], 0x65
mov byte [ebp - 0x40], 0x78
mov byte [ebp - 0x3f], 0x70
mov byte [ebp - 0x3e], 0x61
mov byte [ebp - 0x3d], 0x6e
mov byte [ebp - 0x3c], 0x73
mov byte [ebp - 0x3b], 0x69
mov byte [ebp - 0x3a], 0x6f
mov byte [ebp - 0x39], 0x6e
mov dword [ebp - 0x98], 0xffffffff
call fcn.004d6100
mov dword [esp], 1
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x98], 4
call fcn.0049b590
mov dword [esp], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x2c], eax
call fcn.005769c0
lea eax, [ebp - 0x52]
sub esp, 4
mov dword [ebp - 0x64], 0xd
mov dword [ebp - 0x68], eax
lea ecx, [ebp - 0x68]
lea eax, [ebp - 0x38]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [ebp - 0x98], 2
call fcn.005977e0
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x38]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00597780
mov eax, dword [ebp + 0x18]
lea edx, [ebp - 0x38]
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.00597780
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x14], edx
mov edx, dword [ebp - 0x38]
mov dword [esp + 0x10], edx
mov edx, dword [ecx + 4]
mov dword [esp + 0xc], edx
mov edx, dword [ecx]
mov dword [esp + 4], 0x30
lea ecx, [ebp - 0x28]
mov dword [esp + 8], edx
lea edx, [ebp - 0x60]
mov dword [esp], edx
call dword [eax + 0x14]
mov eax, dword [ebp - 0x24]
sub esp, 0x18
mov dword [ebp - 0x98], 3
mov ecx, dword [ebp + 8]
mov dword [esp], eax
call fcn.005769c0
mov ecx, dword [ebp + 8]
sub esp, 4
mov eax, dword [ebp - 0x24]
cmp dword [ecx + 4], eax
cmovbe eax, dword [ecx + 4]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 4], eax
mov eax, dword [ecx]
mov dword [esp], eax
call sub.msvcrt.dll_memmove
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
test ecx, ecx
je 0x4d6467
test eax, eax
jne 0x4d65d5
mov dword [esp], 0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x98], 2
call fcn.005769c0
lea eax, [ebp - 0x45]
sub esp, 4
mov dword [ebp - 0x64], 0xd
mov dword [ebp - 0x68], eax
lea edx, [ebp - 0x38]
lea eax, [ebp - 0x68]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [ebp - 0x98], 2
call fcn.005977e0
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0x38]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00597780
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x38]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00597780
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x60]
mov dword [esp + 0x14], edx
mov edx, dword [ebp - 0x38]
mov dword [esp + 0x10], edx
mov edx, dword [ecx + 4]
mov dword [esp + 0xc], edx
mov edx, dword [ecx]
lea ecx, [ebp - 0x18]
mov dword [esp + 8], edx
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
lea edx, [ebp - 0x60]
mov dword [esp], edx
call dword [eax + 0x14]
mov eax, dword [ebp - 0xa8]
sub esp, 0x18
mov dword [eax], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [esp], 1
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], 6
call fcn.0049b590
mov edx, dword [ebp - 0xa8]
mov dword [edx + 0xc], eax
mov ecx, edx
mov dword [esp], 0
call fcn.005769c0
mov dword [ebp - 0x98], 5
lea ecx, [ebp - 0x18]
sub esp, 4
mov dword [esp], ecx
mov ecx, dword [ebp - 0xa8]
call fcn.00577e00
mov ecx, dword [ebp - 0xc]
sub esp, 4
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x18]
test ecx, ecx
je 0x4d6597
test eax, eax
jne 0x4d6624
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
test ecx, ecx
je 0x4d65a8
test eax, eax
jne 0x4d6600
mov dword [ebp - 0x98], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.0040c3b0
lea ecx, [ebp - 0x9c]
mov dword [esp], ecx
call sub.libgcc_s_sjlj_1.dll__Unwind_SjLj_Unregister
mov eax, dword [ebp - 0xa8]
mov ebx, dword [ebp - 4]
leave
ret 0x14
test edx, edx
je 0x4d6467
mov ebx, dword [ecx]
mov dword [esp + 4], eax
mov dword [esp], edx
mov eax, dword [ebx + 4]
mov dword [ebp - 0x98], 2
call eax
sub esp, 8
jmp 0x4d6467
test edx, edx
je 0x4d65a8
mov ebx, dword [ecx]
mov dword [esp + 4], eax
mov dword [esp], edx
mov eax, dword [ebx + 4]
mov dword [ebp - 0x98], 1
call eax
sub esp, 8
jmp 0x4d65a8
test edx, edx
je 0x4d6597
mov ebx, dword [ecx]
mov dword [esp + 4], eax
mov dword [esp], edx
mov eax, dword [ebx + 4]
mov dword [ebp - 0x98], 2
call eax
sub esp, 8
jmp 0x4d6597