Function at 0x4cdf61
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov esp, 0x51084d8b
call dword [ebp - 4]
jmp 0x4cdf58
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004d9ce8
add esp, 0xc
jb 0x4cdf7f
jae 0x4cdf7f
call 0x49312549
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
jb 0x4cdfbc
jae 0x4cdfbc
jmp 0x4cdf47
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
add dword [eax + 0x558ae74d], ecx
in al, dx
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
add dword [eax + 0x558aed4d], ecx
out dx, eax
sub dl, 1
mov byte [ebp - 0x11], dl
out dx, eax
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jo 0x4ce032
jno 0x4ce032
jmp 0x4ce01b
call fcn.004d348d
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4ce047
xor eax, eax
jmp 0x4ce1b9
jb 0x4ce04c
jae 0x4ce04c
call 0x533135dd
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004d66a8
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004d9ce8
add esp, 0xc
jo 0x4ce071
jno 0x4ce071
jmp 0x4cdff5
cmp dword [ebp - 4], 0
jne 0x4ce07e
xor eax, eax
jmp 0x4ce1b9
jne 0x4ce083
je 0x4ce083
jmp 0x4ce00f
mov edx, dword [ebp - 4]
push edx
call fcn.004d0bd7
add esp, 4
jo 0x4ce094
jno 0x4ce094
jmp 0x4ce0ff
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004d9ce8
add esp, 0xc
jb 0x4ce0a9
jae 0x4ce0a9
call 0x49312673
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
pop eax
jb 0x4ce0e6
jae 0x4ce0e6
jmp 0x4ce071
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jb 0x4ce15c
in eax, 0x8a
dec ebp
ljmp 0xea4d
jae 0x4ce15c
jmp 0x4ce0e0
cmp dword [0x4bd4e0], 0
je 0x4ce17c
jb 0x4ce16a
jae 0x4ce16a
lea edx, es:[ebp - 0x1c]
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x4bd4e0]
push eax
call fcn.004d66a8
mov dword [ebp - 0xc], eax
jne 0x4ce181
je 0x4ce181
je 0x4ce1ec
push 0xe
push cs
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004d9ce8
add esp, 0xc
jb 0x4ce196
jae 0x4ce196
sub eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x4ce1ad
jb 0x4ce1a1
jae 0x4ce1a1
xor dword [ebx - 0x17ad0bab], ecx
sub eax, 0x8300002a
les eax, [edx + esi*2]
add esi, dword [ebx + 1]
mov edx, dword [ebp - 0xc]
push edx
call fcn.004d0bd7
add esp, 4
jb 0x4ce1b2
jae 0x4ce1b2
xor al, 0x8b
inc ebp
or byte [eax - 1], dl
push ebp
cld
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
jp 0x4ce219
jnp 0x4ce219
call 0x81352fa7
jmp 0xe89a6a23
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
cmp dword [esp + 4], 0x1770376
call fcn.004d3f7e
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4ce29e
xor eax, eax
jmp 0x4ce402
cmp dword [esp + 8], 0x1740375
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004d66a8
mov dword [ebp - 0x1c], eax
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.004d9ce8
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x4ce2d3
mov edx, 0xc4830000
or al, 0x83
jge 0x4ce2ad
add byte [ebp + 7], dh
xor eax, eax
jmp 0x4ce402
jb 0x4ce2d8
jae 0x4ce2d8
add al, 0x8b
dec ebp
in al, 0x51
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004d0bd7
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004d9ce8
add esp, 0xc
jb 0x4ce2f9
jae 0x4ce2f9
jmp 0x4ce2c0
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
jp 0x4ce332
jnp 0x4ce332
call 0x2d3528c0
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
cmp dword [esp + 4], 0x1770376
cmp dword [ebp - 4], 0
je 0x4ce3bd
jb 0x4ce3ad
jae 0x4ce3ad
daa
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004d66a8
mov dword [ebp - 8], eax
jne 0x4ce3c2
je 0x4ce3c2
jne 0x4ce42d
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004d9ce8
or eax, 0x558d006a
call 0xb966cc1f
add byte [eax], al
add esp, 0xc
jb 0x4ce3d7
jae 0x4ce3d7
cmp dword cs:[ebp - 8], 0
cmp dword [ebp - 8], 0
je 0x4ce3ee
jb 0x4ce3e2
jae 0x4ce3e2
xor cl, byte [ebx - 0x17af07bb]
in al, dx
daa
add byte [eax], al
mov eax, dword [ebp - 8]
push eax
call fcn.004d0bd7
add esp, 4
jbe 0x4ce3f3
ja 0x4ce3f3
call 0x515d3182
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
pop eax
clc
dec ebx
add byte [eax + 3], dh
jno 0x4ce436
lcall 0x4b, 0xa8a8158b
mov edx, dword [0x4ba8a8]
mov dword [0x4bf85c], edx
jle 0x4ce447
jg 0x4ce447
xor eax, 0x4ba8aca1
add byte [ebx + 0x4bf860], ah
mov eax, dword [0x4ba8ac]
mov dword [0x4bf860], eax
jne 0x4ce456
je 0x4ce456
sub eax, 0xa8b00d8b
dec ebx
add byte [ecx + 0x4bf8640d], cl
add byte [esi + 3], dh
mov ecx, dword [0x4ba8b0]
mov dword [0x4bf864], ecx
jbe 0x4ce467
ja 0x4ce467
xor eax, 0xa8b4158b
dec ebx
add byte [ecx + 0x4bf86815], cl
add byte [ebx + eax + 0x7d], bh
add dword [0x4ba8b8a1], ebp
mov edx, dword [0x4ba8b4]
mov dword [0x4bf868], edx
jl 0x4ce478
jge 0x4ce478
sub eax, 0x4ba8b8a1
mov eax, dword [0x4ba8b8]
mov dword [0x4be0c4], eax
add byte [ebx + 0x4be0c4], ah
jb 0x4ce487
jae 0x4ce487
jmp 0xa908f216
mov ecx, dword [0x4ba8bc]
mov dword [0x4be0bc], ecx
jns 0x4ce498
js 0x4ce498
ljmp 0x4b:0xa8c0158b
mov edx, dword [0x4ba8c0]
mov dword [0x4be0c0], edx
jo 0x4ce4a9
jno 0x4ce4a9
mov eax, 0xa8d43d83
dec ebx
add byte [eax], al
cmp dword [0x4ba8d4], 0
je 0x4ce4dc
jbe 0x4ce4b7
ja 0x4ce4b7
ljmp 0x3300:0x4ba8d4a1
mov eax, dword [0x4ba8d4]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0xcc
jne 0x4ce4dc
jns 0x4ce4cd
js 0x4ce4cd
xor eax, 0xa8cc158b
dec ebx
add byte [ebx + 0x158901c2], al
int3
mov edx, dword [0x4ba8cc]
add edx, 1
mov dword [0x4ba8cc], edx
jbe 0x4ce4e1
ja 0x4ce4e1
lcall 0x2b00, 0x4bf854a1
add eax, 0x4ba8c4
mov eax, dword [0x4bf854]
sub eax, dword [0x4ba8c4]
mov dword [0x4bf854], eax
jle 0x4ce4f6
jg 0x4ce4f6
add eax, 0xf8580d8b
dec ebx
add byte [ebx], dh
or eax, 0x4ba8c8
mov ecx, dword [0x4bf858]
xor ecx, dword [0x4ba8c8]
mov dword [0x4bf858], ecx
jle 0x4ce50d
jg 0x4ce50d
xor eax, 0xf85c158b
dec ebx
add byte [ebx], al
adc eax, 0x4ba8cc
mov edx, dword [0x4bf85c]
add edx, dword [0x4ba8cc]
mov dword [0x4bf85c], edx
jmp 0x4ce522
mov dword [0x4be480], 0x4ce610
mov dword [0x4be484], 0x4ce89c
jmp 0x4ce539
mov dword [0x4be488], 0x4ce61d
mov dword [0x4be48c], 0x4ce68c
mov dword [0x4be490], 0
jne 0x4ce55c
je 0x4ce55c
lcall 0x6400, 0x4c7c1368
push dword [0]
push 0x4c7c13
push dword fs:[0]
mov dword fs:[0], esp
jbe 0x4ce574
ja 0x4ce574
jmp 0xe11122fb
cmp dword [0x4be0c4], 0
jle 0x4ce8ae
mov dword [0x4be490], 0
jmp 0x4ce58e
mov dword [0x4be0d0], 0x4ce6a7
mov dword [0x4be0d4], 0x4ce6bb
jmp 0x4ce5a5
mov dword [0x4be0d8], 0x4ce6cf
mov dword [0x4be0dc], 0x4ce6e3
jmp 0x4ce5bc
mov dword [0x4be0e0], 0x155
mov dword [0x4be0f4], 0x4ce6f7
jne 0x4ce5d5
je 0x4ce5d5
and dword [ecx + 0x4be0d0], 0x4be0e4a3
add byte [eax + 3], dh
mov eax, dword [0x4be0d0]
mov dword [0x4be0e4], eax
jo 0x4ce5e4
jno 0x4ce5e4
add eax, 0xe0d40d8b
dec ebx
add byte [ecx + 0x4be0e80d], cl
add byte [esi + 3], dh
mov ecx, dword [0x4be0d4]
mov dword [0x4be0e8], ecx
jbe 0x4ce5f5
ja 0x4ce5f5
lcall 0x4b, 0xe0d8158b
mov edx, dword [0x4be0d8]
mov dword [0x4be0ec], edx
jb 0x4ce606
jae 0x4ce606
ljmp 0xa300:0x4be0dca1
mov eax, dword [0x4be0dc]
mov dword [0x4be0f0], eax
mov eax, eax
mov ebx, ebx
jmp 0x4ce617
int3
jo 0x4ce8b3
jno 0x4ce8b3
jmp 0x52781b
pop dword fs:[0]
add esp, 4
mov dword [0x4be490], 0
jp 0x4ce8cc
jnp 0x4ce8cc
lcall 0xe800, 0x4be12068
cli
jbe 0x4ce8d5
push 0x4be120
call fcn.004d5fd0
add esp, 4
jns 0x4ce8de
add byte [ebx + 0x37904c4], al
js 0x4ce8de
call 0xf898f66d
dec ebx
add byte [ecx - 0x75], dl
adc eax, 0x4bf870
mov ecx, dword [0x4bf84c]
push ecx
mov edx, dword [0x4bf870]
push edx
push 0x4be120
call fcn.004d52dc
add esp, 0xc
jp 0x4ce8fe
jnp 0x4ce8fe
lcall 0x6800, 0x4be12068
cmp al, 0xf8
dec ebx
add al, ch
insb byte es:[edi], dx
sar edi, 1
inc dword [ebx + 0x37908c4]
push 0x4be120
push 0x4bf83c
call fcn.004cba79
add esp, 8
jns 0x4ce915
js 0x4ce915
call 0xf8c4eee0
dec ebx
add byte [eax], al
add byte [eax], al
add bl, ch
or eax, 0x4bf878a1
add byte [ebx + 0x78a301c0], al
clc
dec ebx
add byte [ebx + 0x4bf8783d], al
add byte [eax], dl
mov dword [0x4bf878], 0
jmp 0x4ce92e
mov eax, dword [0x4bf878]
add eax, 1
mov dword [0x4bf878], eax
cmp dword [0x4bf878], 0x10
jae 0x4ce958
jp 0x4ce93c
jnp 0x4ce93c
cmp cl, byte [ebx + 0x4bf8780d]
add byte [edx + 0x4bf83c91], cl
add byte [eax + 0x78a133f2], al
clc
dec ebx
add byte [eax + 0x4bf83c90], cl
add bl, ch
leave
mov ecx, dword [0x4bf878]
mov dl, byte [ecx + 0x4bf83c]
xor dl, 0x33
mov eax, dword [0x4bf878]
mov byte [eax + 0x4bf83c], dl
jmp 0x4ce921
jne 0x4ce95d
je 0x4ce95d
ljmp 0x4b:0xf8400d8b
mov ecx, dword [0x4bf840]
xor ecx, dword [0x4be178]
mov edx, dword [0x4be0bc]
add edx, ecx
mov dword [0x4be0bc], edx
jp 0x4ce97c
jnp 0x4ce97c
cmp ah, byte [ecx + 0x4bf848]
mov eax, dword [0x4bf848]
xor eax, dword [0x4bf874]
mov ecx, dword [0x4be0c0]
sub ecx, eax
mov dword [0x4be0c0], ecx
call fcn.004d618b
jbe 0x4ce99f
popal
dec edx
push ss
enter 0x1625, 0x1b
cdq
mov cl, 0xa7
sbb al, ch
stosb byte es:[edi], al
int 0x2c
fld xword [edx]
sal dword [esi], 0x65
fcmove st(0), st(5)
push ebx
pop ecx
fistp qword [ebx]
mov ebp, 0x6307facf
in eax, dx
cmp edx, dword [eax - 0x60bb7f73]
fcomp dword [edx - 0x3a]
dec edi
push es
xor byte gs:[edx + 0x1c9f933a], bl
jae 0x527841
jo 0x527867
jae 0x52788e
dec ebx
test byte [ebx + 0x1845ef58], bl
cwde
pop ecx
fisub dword [edi - 0x71fb34f5]
dec esi
xor ah, ah
sbb ebp, eax
mov ebx, 0x195461a9
clc
cld
out 0xb2, eax
mov byte [0x801718b7], al
xor byte [0xf2c1a689], dh
push ebp
push ds
in eax, 0x87
jnp 0x5278c7
scasb al, byte es:[edi]
sbb al, 0x77
invalid
cld
add byte [edi + eax*2 - 0x4cd6e2c2], cl
dec esi
ja 0x527863
or eax, 0x136b4231
xchg ebp, eax
retf
push ebp
ret 0x1378