Function at 0x4ddab7
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004e01cb
add esp, 0xc
cmp eax, dword [esp + 0x10]
je 0x4ddae4
pushf
jnp 0x4ddada
or esp, 0
popf
lea edx, [edx]
jne 0x4ddae4
add esi, 0xc653e445
inc ebp
in eax, 0x66
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
mov byte [ebp - 0xf], 0
and ebx, 0xffffffff
or ebx, ebx
sub eax, 0
jne 0x4ddb3d
pushf
xor esi, 0x7178
xor esi, 0x7178
popf
ja 0x4ddb38
jb 0x4ddb3a
je 0x4ddb3d
add eax, 0x80e44d8a
jmp 0xe49b6347
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
and edi, 0xffffffff
test dword [esp + 0x10], esi
add esi, 0x3024
sub esi, 0x3024
jns 0x4ddbc3
jne 0x4ddbd6
jb 0x4ddbc7
lea ebx, [ebx + 0x4e2d]
lea ebx, [ebx - 0x4e2d]
je 0x4ddbd6
add eax, 0x17083e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 0xa], dh
call 0x4f4c5e
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4ddbee
mov eax, 1
jmp 0x4dde49
lea edi, [edi + 0x6a57]
sub edi, 0x6a57
jae 0x4ddc03
xchg esp, esp
jp 0x4ddc00
jb 0x4ddc03
lcall 0x458b, 0x52e4558d
clc
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004f370f
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004e01cb
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4ddc33
mov eax, 1
jmp 0x4dde49
lea esp, [esp]
mov ecx, ecx
je 0x4ddc45
pushf
jl 0x4ddc3e
popf
jb 0x4ddc42
jne 0x4ddc45
mov ebp, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.004f291c
add esp, 4
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004e01cb
add esp, 0xc
add esi, 0
jns 0x4ddc66
ror edi, 0
jge 0x4ddc85
pushf
jbe 0x4ddc6f
ror ebx, 0x10
rol ebx, 0x10
jbe 0x4ddc77
not ecx
not ecx
popf
lea eax, [eax]
jb 0x4ddc81
nop
jl 0x4ddc85
call 0x5432224f
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xf], 0
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
lea edi, [edi]
lea eax, [eax + 0xc56]
lea eax, [eax - 0xc56]
jae 0x4ddce5
pushf
cmp ebx, dword [esp + 4]
nop
popf
xchg esi, eax
xchg esi, eax
xchg edi, edi
jb 0x4ddce5
mov esi, 0x80e44d8a
jmp 0xe49b64ef
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
sub eax, 0
jo 0x4ddd68
pushf
jle 0x4ddd5f
popf
jnp 0x4ddd63
jmp 0x4ddd65
jno 0x4ddd68
mov edi, 0xf87d83
cmp dword [ebp - 8], 0
je 0x4ddd9f
lea esi, [esi + 0x6d1d]
lea esi, [esi - 0x6d1d]
test dword [esp + 0xc], edi
ja 0x4ddd80
jns 0x4ddd8f
pushf
or edi, edi
popf
jle 0x4ddd8a
jle 0x4ddd8c
js 0x4ddd8f
call 0x53323320
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004f370f
mov dword [ebp - 0xc], eax
xchg ebx, ebx
jmp 0x4ddda3
jne 0x4ddda5
jbe 0x4dddab
nop
ja 0x4dddab
lcall 0x4d8d, 0x6a0e6a
in al, 0x51
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004e01cb
add esp, 0xc
or esp, 0
je 0x4ddddc
pushf
neg ebx
neg ebx
ror esp, 0
xor esi, 0x3632
xor esi, 0x3632
popf
mov ecx, ecx
jne 0x4ddddc
xor eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x4dde0c
lea ecx, [ecx + 0x24c3]
lea ecx, [ecx - 0x24c3]
jo 0x4dde00
pushf
or eax, 0
jb 0x4dddf7
popf
jne 0x4dddfb
je 0x4dddfd
jno 0x4dde00
mov esi, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.004f291c
add esp, 4
sub esp, 0
jle 0x4dde32
pushf
xor ebx, 0
or esi, esi
xor eax, 0
lea eax, [eax]
popf
lea eax, [eax]
lea eax, [eax + 0x6d12]
lea eax, [eax - 0x6d12]
jbe 0x4dde2f
jg 0x4dde32
or dword [ebx - 0x74afe7bb], 0x8b51144d
push ebp
adc byte [edx - 0x75], dl
inc ebp
or al, 0x50
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14