Function at 0x4cfb91
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x4c855c], 1
je 0x4cfbcd
xor eax, dword [esp]
xor eax, dword [esp]
or esi, 0
jns 0x4cfbae
jnp 0x4cfbc3
pushf
xchg esi, esi
popf
lea ecx, [ecx + 0x57]
lea ecx, [ecx - 0x57]
jp 0x4cfbbe
lea ecx, [ecx]
jp 0x4cfbc3
lcall 0x8900, 0x4c855ca1
inc ebp
cld
mov eax, dword [0x4c855c]
mov dword [ebp - 4], eax
jmp 0x4cfbe4
test eax, ecx
jne 0x4cfbdd
lea esi, [esi]
jl 0x4cfbd5
jle 0x4cfbd7
jg 0x4cfbd9
je 0x4cfbdd
adc dword [edx], 0x1de9c033
add al, byte [eax]
add byte [ebx], dh
sbb al, 0x24
xor eax, eax
jmp 0x4cfe01
xor ebx, dword [esp]
xor ebx, dword [esp]
and esp, 0xffffffff
jg 0x4cfbef
jne 0x4cfc0c
pushf
xor edx, 0x7925
xor edx, 0x7925
popf
jg 0x4cfc03
xchg esi, ecx
xchg esi, ecx
jl 0x4cfc09
je 0x4cfc0c
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004e9301
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004d41c9
add esp, 0xc
stc
jge 0x4cfc2b
jg 0x4cfc2d
jne 0x4cfc34
jnp 0x4cfc31
je 0x4cfc34
mov ebx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
or esp, 0
xchg edx, eax
xchg edx, eax
jb 0x4cfc80
pushf
test edx, 0x242c
je 0x4cfc79
popf
lea edi, [edi]
jae 0x4cfc80
mov edx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
sub edi, 0
ror esi, 0
rol edi, 0x1a
ror edi, 0x1a
nop
jge 0x4cfd0d
pushf
shl esp, 0
ror esp, 0
clc
rol ebx, 1
ror ebx, 1
popf
jae 0x4cfd08
jl 0x4cfd0a
jl 0x4cfd0d
jmp 0x89b53a94
cmp dword [0x4c8968], 0
je 0x4cfd40
sub eax, 0
xor edx, 0
std
cld
jae 0x4cfd2d
pushf
jns 0x4cfd24
popf
lea edi, [edi]
jb 0x4cfd2a
jb 0x4cfd2d
or dword [ebp - 0x74af17bb], 0x4c89680d
add byte [ecx - 0x18], dl
and edi, dword [edi + 0x45890001]
clc
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x4c8968]
push ecx
call fcn.004ebc60
mov dword [ebp - 8], eax
test ebx, eax
test dword [esp + 0xc], ecx
mov edi, edi
xor edi, edx
xor edi, edx
jb 0x4cfd76
pushf
test dword [esp], esi
jae 0x4cfd55
xor edi, 0x40c4
xor edi, 0x40c4
jae 0x4cfd63
popf
lea ecx, [ecx + 0x443e]
lea ecx, [ecx - 0x443e]
jae 0x4cfd73
jae 0x4cfd76
sub dword [edx + 0xd], 0x558d006a
call 0x4493e5d3
add byte [eax], al
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004d41c9
add esp, 0xc
clc
rol edx, 0x12
rol edx, 0xe
jne 0x4cfd8f
js 0x4cfd91
jle 0x4cfdaa
pushf
xor eax, dword [esp]
xor eax, dword [esp]
rol esi, 0x13
rol esi, 0xd
popf
jnp 0x4cfda5
xchg esi, eax
xchg esi, eax
jg 0x4cfdaa
jmp 0x1457b31
cmp dword [ebp - 8], 0
je 0x4cfde6
stc
dec ebx
inc ebx
jg 0x4cfdda
pushf
cmp esp, 0x4e37
lea ecx, [ecx + 0xccf]
lea ecx, [ecx - 0xccf]
rol esi, 5
ror esi, 5
neg eax
neg eax
popf
xchg edx, edx
jle 0x4cfdda
lcall 0x1ee8, 0x50f8458b
xchg ebp, eax
add dword [eax], eax
mov eax, dword [ebp - 8]
push eax
call fcn.004e9301
add esp, 4
xor ebx, 0
call 0x4cfdee
lea esp, [esp + 4]
jno 0x4cfdfa
jne 0x4cfdf6
jo 0x4cfdfa
jmp 0x89a89a1
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4