Function at 0x1004b5b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0xc
xchg edx, edx
jl 0x1004b5d5
je 0x1004b5cf
jl 0x1004b5d1
jge 0x1004b5d5
mov edi, 0xb065b225
mov cl, 0x6d
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x42
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
xor eax, 0xa43
xor eax, 0xa43
lea esi, [esi + 0x5de9]
lea esi, [esi - 0x5de9]
lea edx, [edx]
test edi, 0x718
jns 0x1004b63d
ja 0x1004b63a
js 0x1004b63d
add eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x17]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x12]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0xd]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0x16]
dec cl
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x15]
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0xb]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0x14]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xf]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xa], dl
xor eax, dword [esp + 0x10]
xor eax, dword [esp + 0x10]
and edx, edx
xor ebx, dword [esp]
xor ebx, dword [esp]
test eax, ebx
je 0x1004b6de
jbe 0x1004b6d3
lea esp, [esp]
lea esp, [esp]
ja 0x1004b6db
jne 0x1004b6de
mov ebx, 0x169de8
add byte [ebp + 0x5f0975c0], al
call fcn.1004cd80
test eax, eax
jne 0x1004b6f0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
jae 0x1004b6f2
std
cld
xchg edi, edi
jae 0x1004b700
lea esp, [esp]
jle 0x1004b6fd
jb 0x1004b700
mov ebp, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.10041ef0
push 0x11
lea edx, [ebp - 0x18]
push 0
push edx
mov dword [ebp - 4], eax
call fcn.10048840
add esp, 0xc
and esp, 0xffffffff
jne 0x1004b722
or esi, esi
jo 0x1004b751
pushf
cmp esp, 0x1351
ror ecx, 0x12
rol ecx, 0x12
cmp esi, 0x5a0b
lea ebx, [ebx]
popf
jmp 0x1004b740
mov edi, edi
lea esi, [esi + 0x4b03]
lea esi, [esi - 0x4b03]
jno 0x1004b751
ljmp 0x75d2:0x85fc558b
mov edx, dword [ebp - 4]
test edx, edx
jne 0x1004b763
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp esi, dword [esp]
test edi, 0x2fbc
lea eax, [eax]
je 0x1004b79a
pushf
test dword [esp], ecx
std
cld
lea ecx, [ecx + 0x6552]
lea ecx, [ecx - 0x6552]
popf
lea esi, [esi + 0x7be1]
lea esi, [esi - 0x7be1]
jl 0x1004b793
xchg ecx, edi
xchg ecx, edi
jne 0x1004b79a
add eax, 0xedd0e852
invalid
push edx
call fcn.1003a570
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0x10
cmp edi, edx
nop
xchg esi, eax
xchg esi, eax
jle 0x1004b7b7
jg 0x1004b7ca
pushf
xor esp, 0
or eax, 0
ja 0x1004b7c3
popf
jbe 0x1004b7c7
jle 0x1004b7ca
mov esi, 0x66b065b2
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x58
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
jmp 0x1004b80f
cmp edi, dword [esp]
jg 0x1004b81b
jne 0x1004b816
jle 0x1004b81b
mov edi, 0x458aeca4
call 0x9af215ac
push ebp
mov cl, byte [ebp - 9]
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
cmp edx, dword [esp]
js 0x1004b8b4
lea ebx, [ebx]
lea edx, [edx + 0x179a]
lea edx, [edx - 0x179a]
lea ebx, [ebx]
jns 0x1004b8b4
xor eax, 0xa3f0a104
add dl, byte [eax]
mov eax, dword [0x1002a3f0]
test eax, eax
je 0x1004b8e9
nop
jp 0x1004b8c0
mov esp, esp
lea eax, [eax + 0x4241]
lea eax, [eax - 0x4241]
jae 0x1004b8d5
jge 0x1004b8d2
jb 0x1004b8d5
mov esp, 0xa3f0158b
add dl, byte [eax]
mov edx, dword [0x1002a3f0]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.10041ef0
mov edi, eax
jmp 0x1004b8ec
mov edi, dword [ebp + 8]
nop
test dword [esp], edx
je 0x1004b8f2
jns 0x1004b8f4
jns 0x1004b8fd
xchg esi, ecx
xchg esi, ecx
js 0x1004b8fd
call 0x5591ca6b
call 0xf854b970
iretd
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0xc
jg 0x1004b90f
jns 0x1004b91d
jb 0x1004b913
jg 0x1004b915
jnp 0x1004b917
jg 0x1004b919
js 0x1004b91d
mov ebx, 0x74ff857f
daa
test edi, edi
je 0x1004b948
cld
jno 0x1004b93f
pushf
stc
add ebx, 0x46e
sub ebx, 0x46e
clc
popf
jns 0x1004b938
jno 0x1004b93a
jle 0x1004b93c
jo 0x1004b93f
mov eax, 0xec2be857
invalid
push edi
call fcn.1003a570
add esp, 4
js 0x1004b94a
shl edx, 0
jnp 0x1004b94f
js 0x1004b975
pushf
mov edx, edx
xchg esp, esp
test edi, 0xfb8
cmp esi, dword [esp]
popf
lea ecx, [ecx + 0x2284]
lea ecx, [ecx - 0x2284]
je 0x1004b970
jge 0x1004b972
jns 0x1004b975
mov esp, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4