Function at 0x4964d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
mov dword [ebp - 4], 0x32
jbe 0x4964e4
ja 0x4964e4
call 0x45d68d52
mov esp, 0xe850006a
out dx, eax
pop eax
add byte [eax], al
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0049bde0
mov al, 0x75
mov bl, 0x66
mov byte [ebp - 0x37], al
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2d], al
mov dl, 0x6f
mov cl, 0x70
mov al, 0x64
add esp, 0xc
mov byte [ebp - 0x44], 0x54
mov byte [ebp - 0x43], 0x5a
mov byte [ebp - 0x42], 0x54
mov byte [ebp - 0x41], 0x55
mov byte [ebp - 0x40], 0x46
mov byte [ebp - 0x3f], 0x4e
mov byte [ebp - 0x3e], 0x5d
mov byte [ebp - 0x3d], 0x44
mov byte [ebp - 0x3c], 0x76
mov byte [ebp - 0x3b], 0x73
mov byte [ebp - 0x3a], 0x73
mov byte [ebp - 0x39], bl
mov byte [ebp - 0x38], dl
mov byte [ebp - 0x36], 0x44
mov byte [ebp - 0x35], cl
mov byte [ebp - 0x34], dl
mov byte [ebp - 0x32], 0x73
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x30], 0x6d
mov byte [ebp - 0x2f], 0x54
mov byte [ebp - 0x2e], bl
mov byte [ebp - 0x2c], 0x5d
mov byte [ebp - 0x2b], 0x54
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x77
mov byte [ebp - 0x27], 0x6a
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x24], 0x74
mov byte [ebp - 0x23], 0x5d
mov byte [ebp - 0x22], 0x4f
mov byte [ebp - 0x21], 0x55
mov byte [ebp - 0x20], 0x6a
mov byte [ebp - 0x1f], al
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], 0
jns 0x496595
js 0x496595
call 0x8b05bb23
dec ebp
ror dword [edx - 0x350139bb], 0xfe
leave
mov dl, byte [ebp - 0x44]
mov cl, byte [ebp - 0x3f]
mov al, byte [ebp - 0x3a]
dec dl
dec cl
mov byte [ebp - 0x44], dl
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0x3f], cl
mov cl, byte [ebp - 0x30]
dec al
dec dl
mov byte [ebp - 0x3a], al
mov al, byte [ebp - 0x43]
dec cl
mov byte [ebp - 0x35], dl
mov dl, byte [ebp - 0x3e]
mov byte [ebp - 0x30], cl
mov cl, byte [ebp - 0x39]
dec al
dec dl
dec cl
mov byte [ebp - 0x43], al
mov al, byte [ebp - 0x34]
mov byte [ebp - 0x3e], dl
mov byte [ebp - 0x39], cl
mov dl, byte [ebp - 0x2f]
mov cl, byte [ebp - 0x42]
dec al
dec dl
dec cl
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x3d]
mov byte [ebp - 0x2f], dl
mov dl, byte [ebp - 0x38]
mov byte [ebp - 0x42], cl
mov cl, byte [ebp - 0x33]
dec al
dec dl
mov byte [ebp - 0x3d], al
mov al, byte [ebp - 0x2e]
dec cl
mov byte [ebp - 0x38], dl
mov dl, byte [ebp - 0x41]
mov byte [ebp - 0x33], cl
mov cl, byte [ebp - 0x3c]
dec al
dec dl
mov byte [ebp - 0x2e], al
mov al, byte [ebp - 0x37]
dec cl
mov byte [ebp - 0x41], dl
mov dl, byte [ebp - 0x32]
mov byte [ebp - 0x3c], cl
mov cl, byte [ebp - 0x2d]
dec al
dec dl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x40]
dec cl
mov byte [ebp - 0x32], dl
mov dl, byte [ebp - 0x3b]
mov byte [ebp - 0x2d], cl
mov cl, byte [ebp - 0x36]
dec al
dec dl
mov byte [ebp - 0x40], al
mov al, byte [ebp - 0x31]
dec cl
mov byte [ebp - 0x3b], dl
mov dl, byte [ebp - 0x2c]
mov byte [ebp - 0x36], cl
mov cl, byte [ebp - 0x2b]
dec al
dec dl
mov byte [ebp - 0x31], al
mov al, byte [ebp - 0x27]
dec cl
mov byte [ebp - 0x2c], dl
mov dl, byte [ebp - 0x23]
mov byte [ebp - 0x2b], cl
mov cl, byte [ebp - 0x1f]
dec al
dec dl
mov byte [ebp - 0x27], al
mov al, byte [ebp - 0x2a]
dec cl
mov byte [ebp - 0x23], dl
mov dl, byte [ebp - 0x26]
mov byte [ebp - 0x1f], cl
mov cl, byte [ebp - 0x22]
dec al
dec dl
mov byte [ebp - 0x2a], al
mov al, byte [ebp - 0x1e]
dec cl
mov byte [ebp - 0x26], dl
mov dl, byte [ebp - 0x29]
mov byte [ebp - 0x22], cl
mov cl, byte [ebp - 0x25]
dec al
dec dl
dec cl
mov byte [ebp - 0x1e], al
mov al, byte [ebp - 0x21]
mov byte [ebp - 0x29], dl
mov byte [ebp - 0x25], cl
mov dl, byte [ebp - 0x28]
mov cl, byte [ebp - 0x24]
dec al
dec dl
mov byte [ebp - 0x21], al
mov al, byte [ebp - 0x20]
dec cl
dec al
mov byte [ebp - 0x28], dl
mov byte [ebp - 0x24], cl
mov byte [ebp - 0x20], al
jp 0x4966d2
jnp 0x4966d2
call 0x8e41b463
push ebp
mov esp, 0x6a016a51
add byte [edx + 0x68], dl
add al, byte [eax]
add byte [eax + 0xb508e8], al
add byte [ebx + 0x7f037ef0], cl
add dword [esi + 0x6a], ebx
sub byte [ebp + 0x6abc45], cl
lea ecx, [ebp - 8]
lea edx, [ebp - 0x44]
push ecx
push 1
push 0
push edx
push 0x80000002
call 0x4a1bf0
mov esi, eax
jle 0x4966ef
jg 0x4966ef
pop esi
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0049bde0
add esp, 0xc
jns 0x496704
js 0x496704
call 0x85595d8d
cdq
add byte [eax], al
add byte [esi + 3], dh
test esi, esi
jne 0x4967a5
jbe 0x496711
ja 0x496711
call 0x5505acdb
mov byte [ebp - 0x44], 0x54
mov byte [ebp - 0x43], bl
mov byte [ebp - 0x42], 0x73
mov byte [ebp - 0x41], 0x6a
mov byte [ebp - 0x40], 0x62
mov byte [ebp - 0x3f], 0x6d
mov byte [ebp - 0x3e], 0
jl 0x496731
jge 0x496731
call 0x8b05acbf
pop ebp
mov ebp, 0x8abe558a
dec ebp
mov edi, 0xcbfec8fe
mov al, byte [ebp - 0x44]
mov bl, byte [ebp - 0x43]
mov dl, byte [ebp - 0x42]
mov cl, byte [ebp - 0x41]
dec al
dec bl
mov byte [ebp - 0x44], al
mov al, byte [ebp - 0x40]
mov byte [ebp - 0x43], bl
mov bl, byte [ebp - 0x3f]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x42], dl
mov byte [ebp - 0x41], cl
mov byte [ebp - 0x40], al
mov byte [ebp - 0x3f], bl
jl 0x496766
jge 0x496766
call 0x8e45b4f7
push ebp
mov byte [ecx - 0x73], dl
inc ebp
hlt
lea ecx, [ebp - 4]
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xc]
push edx
mov edx, dword [ebp - 8]
push eax
lea ecx, [ebp - 0x44]
push esi
push ecx
push edx
call fcn.0049e6c0
mov esi, eax
jle 0x496787
jg 0x496787
call 0x45d68ff5
mov esp, 0xe850006a
dec esp
push esi
add byte [eax], al
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0049bde0
add esp, 0xc
jl 0x49679c
jge 0x49679c
jle 0x496728
mov ecx, dword [ebp - 8]
dec ebp
clc
push ecx
call fcn.004a05f0
jne 0x4967aa
je 0x4967aa
call 0x5e2dad74
mov byte [ebp - 0x1c], 0x5d
mov byte [ebp - 0x17], 0x55
mov byte [ebp - 0x1b], 0x5d
mov byte [ebp - 0x16], 0x4a
mov byte [ebp - 0x1a], 0x2f
mov byte [ebp - 0x15], 0x44
mov byte [ebp - 0x19], 0x5d
mov byte [ebp - 0x14], 0x46
mov byte [ebp - 0x18], 0x4f
mov byte [ebp - 0x13], 0
jbe 0x4967d7
ja 0x4967d7
call 0x54fd8566
dec eax
add byte [eax + 0xb], bh
mov ebx, dword [0x4854b4]
mov eax, 0xb
add ebx, eax
mov dword [0x4854b4], ebx
jle 0x4967ef
jg 0x4967ef
call 0x55016d1c
dec eax
add byte [edx + 3], dh
sub dword [0x4854b8], eax
jb 0x4967fa
jae 0x4967fa
call 0x8b2db588
inc ebp
jmp 0x8b2ec58e
mov cl, byte [ebp - 0x1c]
mov al, byte [ebp - 0x17]
mov bl, byte [ebp - 0x1b]
mov dl, byte [ebp - 0x16]
dec cl
dec al
mov byte [ebp - 0x1c], cl
mov cl, byte [ebp - 0x1a]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x1b], bl
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x1a], cl
mov cl, byte [ebp - 0x18]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x18], cl
jbe 0x496847
ja 0x496847
cmp byte [ebp + 0x757a75f6], al
add esi, dword [ecx + eax - 0x18]
test esi, esi
jne 0x4968c5
jne 0x496850
je 0x496850
call 0x52d1bde1
lea edx, [ebp - 0x78]
push edx
call fcn.0049fb30
add esp, 4
mov dword [ebp - 4], eax
jbe 0x496864
ja 0x496864
mov eax, 0x9fc7d83
cmp dword [ebp - 4], 9
ja 0x49687d
cmp dword [esp + 4], 0x1770376
pop esi
mov eax, 0x15
pop ebx
mov esp, ebp
pop ebp
ret
jb 0x496882
jae 0x496882
call 0x8b45ae11
dec esp
add eax, 0xed4d8885
mov eax, dword [ebp - 4]
mov cl, byte [ebp + eax - 0x7b]
mov byte [ebp - 0x13], cl
jbe 0x496891
ja 0x496891
call 0x8b45be20
inc esp
adc eax, 0xee458883
mov edx, dword [ebp - 4]
mov al, byte [ebp + edx - 0x7d]
mov byte [ebp - 0x12], al
jp 0x4968a0
jnp 0x4968a0
call 0x8b45b62f
push esp
or eax, 0xef558881
mov ecx, dword [ebp - 4]
mov dl, byte [ebp + ecx - 0x7f]
mov byte [ebp - 0x11], dl
jbe 0x4968af
ja 0x4968af
call 0x8b45ae3e
mov word [0xffffff7f], es
mov eax, dword [ebp - 4]
mov cl, byte [ebp + eax - 0x81]
mov byte [ebp - 0x10], cl
jo 0x4968c1
jno 0x4968c1
call 0x13aae8b
mov byte [ebp - 0xf], 0
jne 0x4968ca
je 0x4968ca
call 0x80b16938
add byte [eax], al
add byte [edx + 3], ch
push 0
push pe_nt_image_headers32
push 3
push 0
push 3
lea edx, [ebp - 0x1c]
push 0xc0000000
push edx
call fcn.004a44e0
mov esi, eax
jb 0x4968ec
jae 0x4968ec
call 0x45d6775a
in al, 0x6a
add byte [eax - 0x18], dl
out 0x54, eax
add byte [eax], al
push 0xe
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.0049bde0
add esp, 0xc
jb 0x496901
jae 0x496901
call 0x75496788
sbb esi, dword [esi + 3]
cmp esi, 0xffffffff
je 0x496921
jbe 0x49690b
ja 0x49690b
call 0x7bd95165
add byte [eax], al
push esi
call fcn.0049e4a0
jns 0x496916
js 0x496916
call int.00512178
add byte [eax], al
pop esi
mov eax, 7
pop ebx
mov esp, ebp
pop ebp
ret
jbe 0x496926
ja 0x496926
call 0x5f2188
add byte [eax], al
pop esi
mov eax, 0x15
pop ebx
mov esp, ebp
pop ebp
ret