Function at 0x4ca83b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004d9ce8
add esp, 0xc
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
jb 0x4ca8a5
jae 0x4ca8a5
call 0x8130f633
jmp 0xe49a30af
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
call 0x2d39eead
add dword [eax + 0x4d8aed45], ecx
sub cl, 1
mov byte [ebp - 0xe], cl
jne 0x4ca935
je 0x4ca935
jg 0x4ca91e
call fcn.004d348d
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4ca94a
push ebx
mov eax, dword [eax]
add byte [ecx + 0x7d83fc45], cl
cld
add byte [ebp + 7], dh
xor eax, eax
jmp 0x4caae3
jbe 0x4ca94f
ja 0x4ca94f
mov edi, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004d66a8
mov dword [ebp - 0x20], eax
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004d9ce8
add esp, 0xc
jbe 0x4ca974
ja 0x4ca974
mov al, 0x83
jge 0x4ca957
cmp dword [ebp - 0x20], 0
jne 0x4ca981
add byte [ebp + 7], dh
xor eax, eax
jmp 0x4caae3
cmp dword [esp + 4], 0x1770376
mov edx, dword [ebp - 0x20]
push edx
call fcn.004d0bd7
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004d9ce8
add esp, 0xc
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
jb 0x4ca9f6
jae 0x4ca9f6
call 0x8130f784
jmp 0xe49a3200
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
out dx, al
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
call 0x2d39effe
add dword [eax + 0x4d8aed45], ecx
sub cl, 1
mov byte [ebp - 0xe], cl
jb 0x4caa86
jae 0x4caa86
jmp 0x4caa0a
cmp dword [0x4bd4e0], 0
je 0x4caaa6
jb 0x4caa94
jae 0x4caa94
xor byte [ebp - 0x5ead1bab], cl
loopne 0x4caa6f
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x4bd4e0]
push eax
call fcn.004d66a8
mov dword [ebp - 8], eax
dec ebx
add byte [eax - 0x18], dl
add eax, 0x890000bc
inc ebp
clc
jne 0x4caaab
je 0x4caaab
jle 0x4cab16
push 0x11
push 0
adc dword [edx], ebp
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004d9ce8
add esp, 0xc
jb 0x4caac0
jae 0x4caac0
aaa
cmp dword [ebp - 8], 0
je 0x4caad7
jb 0x4caacb
jae 0x4caacb
cmp ecx, dword [ebx - 0x17ad07ab]
add esp, dword [ecx]
add byte [ebx + 0x37604c4], al
mov edx, dword [ebp - 8]
push edx
call fcn.004d0bd7
add esp, 4
jbe 0x4caadc
ja 0x4caadc
mov bh, 0x8b
inc ebp
or byte [eax - 1], dl
push ebp
loopne 0x4cab43
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, 0xf
jmp 0x4cab2a
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x830000f1]
les ecx, [esi*2 - 0x17fe8bfd]
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x42
mov byte [ebp - 0x10], 0
jne 0x4cab98
je 0x4cab98
call 0x812cf926
jmp 0xe09a33a2
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jne 0x4cac28
in al, 0x8a
inc ebp
jmp 0x45d4ad45
je 0x4cac28
jmp 0x4cac11
call fcn.004d3f7e
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4cac40
mov eax, 1
jmp 0x4cade0
jns 0x4cac45
js 0x4cac45
call 0x532d01d6
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004d66a8
mov dword [ebp - 4], eax
push 0x11
push 0
lea ecx, [ebp - 0x20]
push ecx
call fcn.004d9ce8
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4cac75
mov eax, 1
jmp 0x4cade0
jb 0x4cac7a
jae 0x4cac7a
jmp 0x4cac06
mov edx, dword [ebp - 4]
push edx
call fcn.004d0bd7
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004d9ce8
add esp, 0xc
jne 0x4cac9b
je 0x4cac9b
call 0x542cf265
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x58
mov byte [ebp - 0x10], 0
jne 0x4cace4
je 0x4cace4
call 0x812cfa72
jmp 0xe09a34ee
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jne 0x4cad74
ljmp 0x8aea:0x4588012c
je 0x4cad74
jmp 0x4cacf8
cmp dword [ebp - 8], 0
je 0x4cad8f
jb 0x4cad7f
jae 0x4cad7f
or cl, byte [ebp - 0x74ad1fab]
inc ebp
clc
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004d66a8
mov dword [ebp - 0xc], eax
jne 0x4cad94
je 0x4cad94
je 0x4cadff
push 0x11
push 0
adc dword [edx], ebp
lea ecx, [ebp - 0x20]
push ecx
call fcn.004d9ce8
add esp, 0xc
jb 0x4cada9
jae 0x4cada9
adc dword [ebx + 0x7400f47d], eax
adc dword [edx + 3], esi
cmp dword [ebp - 0xc], 0
je 0x4cadc0
jb 0x4cadb4
jae 0x4cadb4
adc eax, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.004d0bd7
add esp, 4
jb 0x4cadc5
jae 0x4cadc5
sbb dword [ebx - 0x74afe3bb], ecx
dec ebp
sbb byte [ecx - 0x75], dl
push ebp
adc al, 0x52
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
in al, dx
sub esp, 0x20
push ebx
push esi
push edi
push 0x15
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004d9ce8
add esp, 0xc
jb 0x4cae07
jae 0x4cae07
call 0x4930f3d1
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x16], 0x73
mov byte [ebp - 0xe], 0x4d
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x19], 0x56
mov byte [ebp - 0x10], 0x6d
mov byte [ebp - 0x18], 0x74
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0xc], 0x6f
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x67
mov byte [ebp - 9], 0x45
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0xb], 0x68
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xa], 0x4a
mov byte [ebp - 8], 0
mov byte [ebp - 0x15], 0x45
jb 0x4cae60
jae 0x4cae60
jmp 0x4cadeb
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
push ebp
invalid
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
jo 0x4caf13
jno 0x4caf13
jmp 0x4caefc
call fcn.004d348d
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4caf26
xor ax, ax
jmp 0x4caf74
jb 0x4caf2b
jae 0x4caf2b
call 0x5130f4bc
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004d66a8
mov dword [ebp - 0x20], eax
push 0x15
push 0
lea edx, [ebp - 0x1c]
push edx
call fcn.004d9ce8
add esp, 0xc
jo 0x4caf50
jno 0x4caf50
jmp 0x4caed4
cmp dword [ebp - 0x20], 0
jne 0x4caf5b
xor ax, ax
jmp 0x4caf74
jne 0x4caf60
je 0x4caf60
jmp 0x4caeec
mov eax, dword [ebp - 0x20]
push eax
call fcn.004d0bd7
add esp, 4
jo 0x4caf71
jno 0x4caf71
jmp 0x4caf71
call dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret