Function at 0x4d7049
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x4d6e43
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x4d71c2
cmp eax, dword [esp + 0xc]
sub esp, 0
jne 0x4d6e65
in al, dx
add byte [ebp + 0xf], dh
pushf
nop
popf
jne 0x4d6e5d
xchg ebx, edx
xchg ebx, edx
nop
je 0x4d6e65
mov ebx, 0x89e84d8b
dec ebp
in al, 0x83
jge 0x4d6e52
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x4d6e78
add ecx, dword [edi]
xchg dword [esi - 0x74fffffe], ecx
push ebp
in al, 0xff
invalid
and al, 0x95
bnd jno 0x4d6ecb
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x4d71f2]
add byte [edx + 0xc], ch
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004d41c9
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
shl esp, 0
cmc
xor ecx, dword [esp + 0xc]
xor ecx, dword [esp + 0xc]
jbe 0x4d6ec2
jae 0x4d6ebf
ja 0x4d6ec2
add eax, 0x80f04d8a
jmp 0xf09af6cc
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x4d6e78
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004d41c9
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
jb 0x4d6f36
jns 0x4d6f53
pushf
add edx, 0x2f96
sub edx, 0x2f96
or edi, edi
xchg edi, edi
popf
jp 0x4d6f4e
jbe 0x4d6f50
js 0x4d6f53
add eax, 0x2cf0458a
add dword [eax + 0x4d8af045], ecx
cmc
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x4d6e78
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004d41c9
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
mov edi, edi
call 0x4d6fdb
add esp, 4
jg 0x4d6fe5
jp 0x4d6fe2
jle 0x4d6fe5
mov esp, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x4d6e78
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004d41c9
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
lea esp, [esp]
lea ebx, [ebx + 0x20c3]
sub ebx, 0x20c3
ror edi, 0
cld
js 0x4d70a4
xchg ebx, ebx
jns 0x4d70a4
mov ebx, 0xf0558aab
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jle 0x4d7105
nop
add edi, 0x3cac
sub edi, 0x3cac
je 0x4d711c
lea esp, [esp]
jnp 0x4d7119
jne 0x4d711c
mov ebx, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.004d266a
mov dword [ebp - 4], eax
xor esp, 0
nop
mov eax, eax
jo 0x4d714c
pushf
stc
popf
mov esp, esp
lea esp, [esp]
jno 0x4d714c
add eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004d41c9
add esp, 0xc
xor edi, 0
or esp, 0
ja 0x4d716b
jle 0x4d7166
mov esi, esi
jbe 0x4d716b
lcall 0x4c74, 0xfffc7d83
cmp dword [ebp - 4], 0xffffffff
je 0x4d71bd
lea ebx, [ebx + 0x79ab]
lea ebx, [ebx - 0x79ab]
push ecx
add ecx, 0x4ff
ror ecx, 3
pop ecx
jg 0x4d7197
pushf
je 0x4d718e
popf
jle 0x4d7192
lea edi, [edi]
jle 0x4d7197
mov ecx, 0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.004f252b
rol ecx, 6
ror ecx, 6
ja 0x4d71b4
jo 0x4d71aa
jmp 0x4d71ac
jns 0x4d71ae
lea esp, [esp]
jbe 0x4d71b4
lcall 0, 0x12ec45c7
add bl, ch
add eax, 0xfffc78e9
push edi
invalid
mov dword [ebp - 0x14], 0x12
jmp 0x4d71c2
jmp 0x4d6e3a
neg edx
neg edx
jnp 0x4d71c8
jno 0x4d71ca
cmp edi, eax
jp 0x4d71e8
pushf
js 0x4d71d2
or eax, eax
xor edi, 0
cmp esp, 0x9a
popf
jns 0x4d71e1
jae 0x4d71e3
jmp 0x4d71e5
jnp 0x4d71e8
jmp 0x6039b777
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret