Function at 0x4a1b90
Capabilities:
Contain obfuscated stackstrings
Print debug messages

Disassembly:
push edi
test dword [esp], ecx
jae 0x4a1b66
jb 0x4a1b85
pushf
shl edi, 0
xor ecx, 0
popf
lea edi, [edi + 0x2510]
lea edi, [edi - 0x2510]
jne 0x4a1b80
mov ecx, ecx
jae 0x4a1b85
mov edx, 0x486c40a1
add byte [edi - 0x3d], bl
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x488754
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
jg 0x4a1ba6
mov eax, dword [0x486c40]
pop edi
ret
dec edx
inc edx
and edi, edi
jl 0x4a1bcb
pushf
lea esp, [esp]
and esp, 0xffffffff
push edx
add edx, 0x153d
ror edx, 0x11
pop edx
popf
jp 0x4a1bc3
lea esp, [esp]
ja 0x4a1bc8
jge 0x4a1bcb
sub eax, 0x458d196a
in al, 0x6a
add byte [eax - 0x18], dl
js 0x4a1c4b
push 0x19
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.004a9150
add byte [eax], al
mov dl, 0x65
mov cl, 0x6f
mov byte [ebp - 0x17], dl
mov byte [ebp - 0x14], dl
mov al, 0x66
mov bl, 0x75
mov dl, 0x6a
add esp, 0xc
mov byte [ebp - 0x1c], 0x56
mov byte [ebp - 0x1b], cl
mov byte [ebp - 0x1a], 0x69
mov byte [ebp - 0x19], 0x62
mov byte [ebp - 0x18], cl
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], al
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x64
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x71
mov byte [ebp - 0xe], bl
mov byte [ebp - 0xd], dl
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0xb], cl
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 9], dl
mov byte [ebp - 8], 0x6d
mov byte [ebp - 7], bl
mov byte [ebp - 6], al
mov byte [ebp - 5], 0x73
mov byte [ebp - 4], 0
jae 0x4a1c3f
push ebx
add ebx, 0x1d2b
ror ebx, 0x1a
pop ebx
jno 0x4a1c5f
adc esi, dword [ebp]
jne 0x4a1c4e
lea edx, [edx + 0x34bf]
lea edx, [edx - 0x34bf]
jae 0x4a1c5c
jo 0x4a1c5f
mov ecx, 0x8ae4558a
dec ebp
jmp 0x8b3861f3
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 8]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x1b]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 8], dl
mov dl, byte [ebp - 0xc]
dec al
mov byte [ebp - 0x1b], cl
mov cl, byte [ebp - 7]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x1a]
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0x15]
dec dl
dec cl
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 7], cl
mov byte [ebp - 0x1a], al
mov byte [ebp - 0x15], bl
dec dl
mov cl, byte [ebp - 0xb]
mov al, byte [ebp - 6]
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0x14]
dec al
mov byte [ebp - 0xb], cl
mov cl, byte [ebp - 0xf]
dec bl
mov byte [ebp - 6], al
mov al, byte [ebp - 0xa]
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 5]
dec dl
dec cl
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 0x18]
dec al
mov byte [ebp - 0xf], cl
mov cl, byte [ebp - 0x13]
dec bl
mov byte [ebp - 0xa], al
mov al, byte [ebp - 0xe]
mov byte [ebp - 5], bl
mov bl, byte [ebp - 9]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x18], dl
mov byte [ebp - 0x13], cl
mov byte [ebp - 0xe], al
mov byte [ebp - 9], bl
xchg esp, esp
jns 0x4a1d34
pushf
test esp, 0x206c
popf
mov ecx, ecx
jae 0x4a1d31
js 0x4a1d34
jmp 0x6d9632c3
mov edx, dword [0x486d4c]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call fcn.0048d910
mov esi, eax
std
cld
jge 0x4a1d5c
pushf
jb 0x4a1d4e
or ebx, 0
popf
jle 0x4a1d55
jb 0x4a1d57
jb 0x4a1d59
jl 0x4a1d5c
xor eax, 0x458d196a
in al, 0x6a
add byte [eax - 0x18], dl
out 0x73, eax
add byte [eax], al
push 0x19
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.004a9150
add esp, 0xc
or edi, edi
jno 0x4a1d7b
je 0x4a1d72
mov edx, edx
lea esp, [esp]
jo 0x4a1d7b
mov ecx, 0x75f68587
sbb eax, 0x76c98b
test esi, esi
jne 0x4a1d9c
mov ecx, ecx
jbe 0x4a1d83
lea esp, [esp]
stc
jle 0x4a1d90
jae 0x4a1d8b
xchg edi, eax
xchg edi, eax
jg 0x4a1d90
mov edi, 0x6b8
add byte [edi + 0x5e], bl
mov eax, 6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or esp, 0
test esp, 0x1c6e
je 0x4a1dc5
pushf
or esp, 0
dec edi
inc edi
jp 0x4a1db0
xchg ebx, ebx
popf
lea edi, [edi + 0x3b77]
lea edi, [edi - 0x3b77]
ja 0x4a1dc2
jne 0x4a1dc5
mov ecx, 0xe487068a
mov al, byte [esi]
xchg esp, esp
lea edi, [edi + 0x79c]
lea edi, [edi - 0x79c]
jnp 0x4a1dd7
jbe 0x4a1de0
jns 0x4a1ddb
jg 0x4a1ddd
ja 0x4a1de0
mov eax, 0x2a75cc3c
cmp al, 0xcc
jne 0x4a1e0e
shr esp, 0
jge 0x4a1e02
pushf
push eax
add eax, 0x461c
ror eax, 0x1b
pop eax
inc edi
dec edi
xor ebx, 0
popf
nop
jnp 0x4a1dff
jl 0x4a1e02
ljmp 0x5f00:0x6b8
mov eax, 6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
and ecx, ecx
jge 0x4a1e12
ror ebx, 0
je 0x4a1e20
mov esi, esi
jno 0x4a1e1b
mov ebx, ebx
jne 0x4a1e20
mov edx, 0x48874468
add bh, bh
adc eax, sym.imp.KERNEL32.dll_OutputDebugStringA
push 0x488744
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
pop edi
pop esi
mov eax, 7
pop ebx
mov esp, ebp
pop ebp
ret