Function at 0x488461
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x472608], 1
je 0x488490
ror ebx, 3
ror ebx, 0x1d
nop
ror edx, 0
jae 0x48847f
jno 0x488486
jae 0x488483
jo 0x488486
add eax, 0x472608a1
add byte [ecx + 0x2bebfc45], cl
mov eax, dword [0x472608]
mov dword [ebp - 4], eax
jmp 0x4884bb
rol ecx, 0x13
rol ecx, 0xd
dec eax
inc eax
sub ecx, 0
jb 0x4884b4
pushf
jae 0x4884a1
xor ebx, dword [esp]
xor ebx, dword [esp]
and ebx, ebx
lea ecx, [ecx]
popf
ja 0x4884af
xchg edi, eax
xchg edi, eax
jae 0x4884b4
mov ebx, 0xe1e9c033
add dword [eax], eax
add byte [ecx], dh
xor eax, eax
jmp 0x48869c
jno 0x4884bd
xchg edi, esi
xchg edi, esi
jb 0x4884c3
jp 0x4884c5
jl 0x4884d1
js 0x4884c9
jge 0x4884cb
mov edi, edi
jge 0x4884d1
mov ebp, 0xfc4d8b6c
mov ecx, dword [ebp - 4]
push ecx
call fcn.00496b37
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0048801b
add esp, 0xc
xor esp, 0
jns 0x488500
pushf
dec ecx
inc ecx
stc
popf
jg 0x4884fb
jge 0x4884fd
js 0x488500
mov ebx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
or esp, 0
add edi, 0
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
cmp esp, 0x3a20
jne 0x488567
pushf
jmp 0x48854e
rol esp, 0
nop
popf
js 0x488556
jle 0x488558
lea edi, [edi + 0x1053]
lea edi, [edi - 0x1053]
je 0x488567
mov ecx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
rol edx, 0x14
ror edx, 0x14
jae 0x4885e8
pushf
sub esp, 0
shr esi, 0
popf
xchg edx, ebx
xchg edx, ebx
jb 0x4885e8
mov esi, 0x37483d83
inc edi
add byte [eax], al
cmp dword [0x473748], 0
je 0x48861d
nop
cmp esp, 0xc49
cld
je 0x48860a
pushf
or eax, eax
popf
jae 0x488603
jae 0x488605
mov esp, esp
jne 0x48860a
add eax, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x473748]
push ecx
call fcn.00488963
mov dword [ebp - 8], eax
test dword [esp], esi
jns 0x488631
pushf
cmc
je 0x488627
shl esi, 0
popf
jle 0x48862e
js 0x488631
sub dword [edx + 0xd], 0x558d006a
call 0xfa266e8e
invalid
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0048801b
add esp, 0xc
cmp ebx, dword [esp]
jb 0x48864e
xchg ecx, edi
xchg ecx, edi
jae 0x48864e
mov esi, 0xf87d8371
add byte [esi - 0x3f], dh
les eax, [eax]
cmp dword [ebp - 8], 0
je 0x48867a
rol esp, 0
add esp, 0
add esp, 0
je 0x48866e
pushf
std
cld
popf
jae 0x488667
jo 0x488669
jns 0x48866b
jne 0x48866e
mov ecx, 0x50f8458b
mov eax, dword [ebp - 8]
push eax
call fcn.00496b37
add esp, 4
xor esi, 0
or esi, 0
jl 0x488695
pushf
jl 0x488686
test esp, 0x69b1
popf
jns 0x488690
jae 0x488692
jge 0x488695
add eax, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4