Function at 0x4af4ce
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
add esp, 0
jae 0x4af4e5
jae 0x4af4de
ja 0x4af4e0
jno 0x4af4e2
jb 0x4af4e5
sub eax, 0xfafc3d83
dec ecx
add byte [ecx], al
cmp dword [0x49fafc], 1
jne 0x4af617
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004a802d
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
or esp, 0
ja 0x4af537
jbe 0x4af539
inc ecx
dec ecx
jbe 0x4af547
jno 0x4af53f
nop
jo 0x4af542
jmp 0x4af544
ja 0x4af547
mov edi, 0x80f04d8a
jmp 0xf0987d51
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
and eax, 0xffffffff
je 0x4af5b3
jle 0x4af5ae
jno 0x4af5b0
jne 0x4af5b3
jmp 0x13e3333a
cmp dword [0x4a1398], 0
jne 0x4af5c4
or eax, 0xffffffff
jmp 0x4af810
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x4a1398]
push ecx
call fcn.004b6106
mov dword [ebp - 4], eax
add edi, dword [esp]
sub edi, dword [esp]
shr esp, 0
rol ecx, 0
jl 0x4af5ed
jle 0x4af5e7
js 0x4af5e9
jge 0x4af5ed
mov esi, 0x6a0c6abf
add byte [ebp - 0x17ad0fab], cl
xor ecx, dword [edx - 0x3b7c0001]
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004a802d
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4af60d
or al, 0x83
jge 0x4af5fc
add byte [edx + ecx - 0x75], dh
inc ebp
cld
mov eax, dword [ebp - 4]
mov dword [0x49fafc], eax
jmp 0x4af615
or eax, 0xffffffff
jmp 0x4af810
jmp 0x4af620
mov ecx, dword [0x49fafc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
nop
cmc
test ebx, eax
jne 0x4af638
jne 0x4af62e
ja 0x4af630
xchg edi, edi
js 0x4af634
je 0x4af638
lcall 0xe850, 0xec458bde
add dl, byte [edi + edi*8 - 1]
mov eax, dword [ebp - 0x14]
push eax
call fcn.004a4a43
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004a802d
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
shl esp, 0
call 0x4af68c
lea esp, [esp + 4]
jb 0x4af69a
jo 0x4af694
jo 0x4af696
jae 0x4af69a
jmp 0xf0a080c3
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
cmp edx, dword [esp + 0xc]
lea eax, [eax + 0xf3]
lea eax, [eax - 0xf3]
sub esp, 0
push edx
add edx, 0x6a10
ror edx, 0x1c
pop edx
jge 0x4af723
jg 0x4af71b
xchg esp, esp
je 0x4af71f
jl 0x4af723
xor eax, 0x983d83d2
adc ecx, dword [edx]
add byte [ecx + esi - 0x73], dh
or dword [ebx], ecx
invalid
cmp dword [0x4a1398], 0
je 0x4af75d
lea ecx, [ecx]
or edi, edi
cld
jo 0x4af733
jl 0x4af74a
jne 0x4af737
mov edi, edi
jb 0x4af73b
lea eax, [eax + 0x62ff]
lea eax, [eax - 0x62ff]
jge 0x4af74a
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x4a1398]
push edx
call fcn.004b6106
mov dword [ebp - 4], eax
ja 0x4af75f
je 0x4af77a
pushf
std
cld
xor edx, 0x751a
xor edx, 0x751a
popf
mov esp, esp
jp 0x4af777
jne 0x4af77a
ljmp 0x458d:0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004a802d
add esp, 0xc
call 0x4af78f
lea esp, [esp + 4]
jl 0x4af795
jo 0x4af7aa
pushf
ror esi, 0x19
ror esi, 7
popf
je 0x4af7a3
jl 0x4af7a5
jle 0x4af7a7
jno 0x4af7aa
mov ecx, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x4af7d2
not edx
not edx
jle 0x4af7c6
pushf
shl esp, 0
popf
jns 0x4af7bf
jle 0x4af7c1
jle 0x4af7c3
jg 0x4af7c6
mov esp, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004a4a43
add esp, 4
call 0x4af7d7
lea esp, [esp + 4]
call 0x4af7e0
lea esp, [esp + 4]
sub esp, 0
jo 0x4af7f1
xchg edi, edi
jne 0x4af7ed
jno 0x4af7f1
jmp 0x20a08399
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
and cl, byte [edi - 0x633dad2b]
invalid
clc
in eax, 0x8c
dec esp
scasd eax, dword es:[edi]
inc edi
push 0x6fd53d00
sbb byte [edi + 0xf3b20f7], ch
ja 0x6e64f6
out 0x45, al
dec ebp
fsubr st(3)
inc ebp
pop edx
sar byte [ecx + esi - 0x4e], 0x20
push cs
xchg edx, eax
imul esi, dword [bp + di - 0x24b3], 0xf5123468
xchg edi, eax
xchg ebp, eax
into
cmp cl, bl
cmp ebp, ebx
and eax, 0x4459cce0
sbb dword [0x9191794b], ecx
push ss
sbb byte [ebx + ecx*2], 0xea
xchg ecx, eax
sbb byte [ecx - 0x3e], 0x38
int3