Function at 0x4aedcf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049baea
add esp, 0xc
xor esp, 0
cmp edx, dword [esp]
xor ecx, 0
mov eax, eax
je 0x4aee0f
pushf
cld
cmp esi, dword [esp + 8]
add esp, 0
xor esp, 0
popf
mov eax, eax
jne 0x4aee08
xchg ebx, edi
xchg ebx, edi
jne 0x4aee0f
add eax, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
xor edi, ecx
xor edi, ecx
jbe 0x4aee65
pushf
cld
jno 0x4aee5e
popf
lea ebx, [ebx]
ja 0x4aee65
or dword [edx - 0x167f1bb3], 0xe44d8801
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
shl edx, 0
test esi, 0xa2c
je 0x4aef08
xchg ebx, esi
xchg ebx, esi
jge 0x4aef01
nop
nop
jne 0x4aef08
call 0x3e330d9e
loop 0x4aef0b
call fcn.004ad14a
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4aef1d
invalid
dec dword [ecx + 0x7d83fc45]
cld
add byte [ebp + 7], dh
xor eax, eax
jmp 0x4af171
add esi, dword [esp]
sub esi, dword [esp]
xor esp, 0
nop
jg 0x4aef37
xchg ecx, esi
xchg ecx, esi
ja 0x4aef2f
jns 0x4aef31
xchg edx, edx
jle 0x4aef37
ljmp 0x8b52:0xe4558d86
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004a7955
mov dword [ebp - 0x20], eax
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0049baea
add esp, 0xc
xchg esp, esp
jg 0x4aef61
jnp 0x4aef5d
jle 0x4aef61
xor eax, 0xe07d83e6
add byte [ebp + 7], dh
cmp dword [ebp - 0x20], 0
jne 0x4aef6e
xor eax, eax
jmp 0x4af171
xor esp, 0
jge 0x4aef73
ja 0x4aef75
jmp 0x4aef77
ja 0x4aef82
ja 0x4aef7b
jge 0x4aef7d
lea eax, [eax]
jbe 0x4aef82
ljmp 0xf0e8:0x52e0558b
mov edx, dword [ebp - 0x20]
push edx
call fcn.0048e67b
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049baea
add esp, 0xc
jo 0x4aefa0
jns 0x4aefae
mov esi, esi
jb 0x4aefa6
lea esp, [esp]
jo 0x4aefab
js 0x4aefae
jmp 0x492f3578
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
ja 0x4aeff4
je 0x4aeff6
jb 0x4aeff8
mov esi, esi
jbe 0x4af011
pushf
xor esp, 0
cmc
jb 0x4af004
xchg edi, esi
xchg edi, esi
popf
jl 0x4af00c
jbe 0x4af00e
ja 0x4af011
add eax, 0x80e44d8a
jmp 0xe498781b
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
test esi, 0xdc2
jp 0x4af0a4
cmp eax, dword [esp]
nop
jae 0x4af0b4
jp 0x4af0ac
xchg esp, esp
jnp 0x4af0b0
jb 0x4af0b4
mov eax, 0xb03d83fe
or byte [eax], 0
cmp dword [0x4882b0], 0
je 0x4af0df
clc
neg edi
neg edi
neg esi
neg esi
je 0x4af0cd
jmp 0x4af0ca
jne 0x4af0cd
sub eax, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x4882b0]
push eax
call fcn.004a7955
mov dword [ebp - 8], eax
jge 0x4af0e1
je 0x4af0ea
jns 0x4af0e5
lea eax, [eax]
jne 0x4af0ea
mov ebx, 0x6a116a
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0049baea
add esp, 0xc
test esi, eax
lea eax, [eax + 0x1aa7]
lea eax, [eax - 0x1aa7]
or ebx, ebx
jg 0x4af10c
jge 0x4af11b
jnp 0x4af110
xchg ecx, ecx
jo 0x4af114
js 0x4af116
jl 0x4af11b
call 0x7dce83ba
clc
add byte [eax + ebp - 0x73], dh
mov dh, 0x3b
pop es
add byte [eax], al
cmp dword [ebp - 8], 0
je 0x4af149
lea esi, [esi + 0x73b]
lea esi, [esi - 0x73b]
inc esi
dec esi
cmc
jb 0x4af13d
nop
xchg esp, esp
jge 0x4af137
lea edx, [edx]
jae 0x4af13d
mov ebp, 0xf8558b93
mov edx, dword [ebp - 8]
push edx
call fcn.0048e67b
add esp, 4
lea edx, [edx + 0x1feb]
lea edx, [edx - 0x1feb]
xor eax, 0
jge 0x4af16a
pushf
or edi, 0
std
cld
popf
jne 0x4af165
jno 0x4af167
jl 0x4af16a
mov edx, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4