Function at 0x4849ab
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
xor ebx, 0xa27
pop ebx
push edx
add edx, 0x8fb5
pop edx
mov dword [ebp - 0x1fac], 0xffffffff
push ecx
push ebx
add esp, 4
jmp 0x484750
call 0x48475e
add byte [eax + 0x4c], cl
cmp byte [edi + esi + 0x48], cl
inc ebp
dec esp
add esp, 4
sub ecx, 0xbb6c
pop ecx
push ecx
xor ecx, 0x15a79
xor ecx, 0x1f50
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x484793
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push ebx
add ebx, 0x3f09
pop ebx
push ebx
and ebx, 0x5b14
call 0x4847af
add byte [edx], bh
inc ecx
xor eax, 0xc4834549
add al, 0x5b
push edi
push edi
add esp, 4
sub edi, 0x10be1
add edi, 0x2184
pop edi
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x48480d
push ecx
call 0x4847e6
add byte [eax + eax*2], bh
xor eax, 0x423c3543
cmp eax, 0x4c48340
sub ecx, 0x444c
sub ecx, 0x62c3
call 0x484804
add byte [0x45394d32], dh
xor edi, dword [edx]
aas
push eax
add esp, 4
pop ecx
jmp 0x484a3b
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push esi
push esi
add esp, 4
or esi, 0x3950
add esi, 0x68b7
and esi, 0xae09
pop esi
push edi
add edi, 0x151f2
add edi, 0x1e94
xor edi, 0x9d51
or edi, 0xaa66
pop edi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x4848bc
push edi
sub edi, 0x109d4
sub edi, 0x117b5
or edi, 0x1557a
sub edi, 0xaabf
pop edi
push ebx
push ebx
add esp, 4
or ebx, 0x8e43
pop ebx
push edx
push edx
add esp, 4
and edx, 0xb8db
pop edx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x4849ed
cmp dword [ebp - 0xc10], 0
jle 0x4849e1
push edi
or edi, 0x9ca5
add edi, 0x24ee
pop edi
push eax
push edi
add esp, 4
jmp 0x4848e2
call 0x4848f1
add byte [ecx], bh
cmp eax, 0x474a3537
cmp dl, byte [eax + 0x4c]
add esp, 4
and eax, 0xa3dc
pop eax
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x48497d
push esi
jmp 0x484919
xor esi, 0x899a
or esi, 0x182c4
add esi, 0x120e2
pop esi
push ebx
push ecx
add esp, 4
jmp 0x484936
pop ebx
push edx
push esi
add esp, 4
sub edx, 0x3275
pop edx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x484965
mov dword [ebp - 0x14cc], 1
jmp 0x48496f
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x4849e1
push esi
push eax
add esp, 4
xor esi, 0xb3db
xor esi, 0x9fb9
pop esi
push eax
sub eax, 0x16f7
and eax, 0x18148
call 0x4849ab
add byte [esi + 0x37], cl
xor ecx, dword [esi + 0x4c]
dec esp
dec edx
xor eax, 0x4c48337
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x4848bc
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x484a36
push ecx
push ecx
add esp, 4
add ecx, 0x164db
xor ecx, 0x17bc5
xor ecx, 0x8aa
pop ecx
push ebx
add ebx, 0x12267
pop ebx
push ecx
push ecx
add esp, 4
xor ecx, 0x1776a
and ecx, 0x7f94
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x484a77
jmp 0x484784
push ebx
push eax
add esp, 4
add ebx, 0x46c6
and ebx, 0xa082
jmp 0x484a54
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0xeda5
or edx, 0x160b1
and edx, 0x4b2a
pop edx
mov dword [ebp - 0xa5c], 0
push ebx
call 0x484a84
add byte [esi + 0x3b], al
xor eax, 0x83493539
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
dec edx
dec edx
dec ecx
inc ecx
cmp dword [ecx - 0x7d], eax
les eax, [ecx + eax*4]
retf