Function at 0x4bf6ab
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
mov dword [ebp - 4], 0
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004c4eb6
add esp, 0xc
xor esi, 0
xchg ecx, ebx
xchg ecx, ebx
mov esp, esp
not eax
not eax
je 0x4bf6e0
jo 0x4bf6dc
jne 0x4bf6e0
mov ecx, 0xec45c618
inc edi
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
cmp esp, 0x8a
xor esp, 0
lea eax, [eax]
add esp, 0
js 0x4bf736
lea edi, [edi + 0x5119]
lea edi, [edi - 0x5119]
jp 0x4bf72e
mov eax, eax
jb 0x4bf732
jns 0x4bf736
mov ecx, 0xec4d8abd
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
call fcn.004b8e66
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4bf7ab
xor eax, eax
jmp 0x4bf9e9
cmp edi, dword [esp + 0x10]
jns 0x4bf7cb
pushf
shr esi, 0
popf
xchg esp, esp
jge 0x4bf7bc
lea ecx, [ecx + 0x6b0b]
lea ecx, [ecx - 0x6b0b]
js 0x4bf7cb
add eax, 0x50ec458d
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004c1700
mov dword [ebp - 0x18], eax
push 0xc
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.004c4eb6
add esp, 0xc
ror edi, 0
cmp ebx, 0x40c
sub eax, 0
and esp, 0xffffffff
je 0x4bf80a
pushf
rol ebx, 0
popf
jmp 0x4bf805
xchg ecx, ecx
jne 0x4bf80a
add dword [ebx + 0x7500e87d], 0xe9c03307
rol byte [ecx], cl
add byte [eax], al
cmp dword [ebp - 0x18], 0
jne 0x4bf817
xor eax, eax
jmp 0x4bf9e9
and edx, edx
ror ecx, 0x13
rol ecx, 0x13
sub esp, 0
jl 0x4bf824
jle 0x4bf82c
jl 0x4bf828
jg 0x4bf82c
sub eax, 0xe8458b44
mov eax, dword [ebp - 0x18]
push eax
call fcn.004c792a
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x14]
push ecx
call fcn.004c4eb6
add esp, 0xc
cld
jge 0x4bf862
pushf
xor ebx, 0x6d16
xor ebx, 0x6d16
popf
jae 0x4bf85d
jae 0x4bf85f
jl 0x4bf862
xor eax, 0x47ec45c6
mov byte [ebp - 0x14], 0x47
mov byte [ebp - 0xf], 0x6a
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x6f
mov byte [ebp - 9], 0
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x11], 0x65
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xb], 0x78
neg edx
neg edx
jg 0x4bf8a2
xchg esp, esp
mov edx, edx
nop
jl 0x4bf89f
jle 0x4bf8a2
xor eax, 0x80ec558a
ljmp 0x458a
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
add esi, dword [esp]
sub esi, dword [esp]
jns 0x4bf909
shl esp, 0
jns 0x4bf925
pushf
cmp ebx, edi
test esp, 0x651f
popf
xchg esi, ecx
xchg esi, ecx
jl 0x4bf920
jge 0x4bf922
js 0x4bf925
mov edx, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x4bf94c
nop
jno 0x4bf92e
jbe 0x4bf93c
jo 0x4bf932
ja 0x4bf934
jae 0x4bf936
xchg esi, esi
ja 0x4bf93c
mov ebx, 0xec4d8db9
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004c1700
mov dword [ebp - 8], eax
shl edx, 0
jp 0x4bf951
test eax, 0x5fad
and ebx, 0xffffffff
jno 0x4bf965
jb 0x4bf95d
mov esi, esi
lea esp, [esp]
jo 0x4bf965
sub dword [edx + 0xc], 0x458d006a
in al, dx
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004c4eb6
add esp, 0xc
lea esp, [esp]
push edi
pop edi
jge 0x4bf97c
sub ebx, 0
jbe 0x4bf992
pushf
cmp esp, 0x45da
popf
jle 0x4bf98d
jae 0x4bf98f
ja 0x4bf992
mov esi, 0xf87d83
cmp dword [ebp - 8], 0
je 0x4bf9bd
add ecx, 0x54ad
sub ecx, 0x54ad
lea ebx, [ebx]
jo 0x4bf9b1
lea edi, [edi]
jg 0x4bf9ac
nop
jno 0x4bf9b1
ljmp 0xe851:0xf84d8b7e
mov ecx, dword [ebp - 8]
push ecx
call fcn.004c792a
add esp, 4
rol ecx, 0
ror ecx, 0x16
rol ecx, 0x16
ja 0x4bf9de
pushf
jae 0x4bf9cc
jge 0x4bf9ce
rol ecx, 0xb
rol ecx, 0x15
popf
nop
jns 0x4bf9d9
jle 0x4bf9db
jbe 0x4bf9de
mov esi, 0x520c558b
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8