Function at 0x489d71
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
cmp dword [ebp + 8], 0
jne 0x489d85
jmp 0x489f22
xchg edx, eax
xchg edx, eax
lea edi, [edi]
jns 0x489daa
pushf
lea ebx, [ebx + 0x584a]
lea ebx, [ebx - 0x584a]
jbe 0x489d9b
ror esi, 0
popf
jne 0x489da2
lea esp, [esp]
jb 0x489da7
js 0x489daa
add eax, 0x8908458b
inc ebp
in al, dx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov dword [0x485b9c], edx
lea edi, [edi + 0x591f]
sub edi, 0x591f
xchg edx, edi
xchg edx, edi
lea ecx, [ecx]
jle 0x489de3
pushf
cmp esp, 0x1e46
sub edx, 0
cmp edi, edx
popf
jbe 0x489de0
jg 0x489de3
lcall 0x448, 0x8bec458b
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 4]
mov dword [0x485804], ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 8]
mov dword [0x485800], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xc]
mov dword [0x485848], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x10]
mov dword [0x48584c], ecx
sub esp, 0
jne 0x489e1d
jbe 0x489e19
je 0x489e1d
add eax, 0xf045c65f
dec ebp
mov byte [ebp - 0x10], 0x4d
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0xc], 0x4d
mov byte [ebp - 0xb], 0x6a
mov byte [ebp - 0xa], 0x63
mov byte [ebp - 9], 0x73
mov byte [ebp - 8], 0x62
mov byte [ebp - 7], 0x73
mov byte [ebp - 6], 0x7a
mov byte [ebp - 5], 0x42
mov byte [ebp - 4], 0
add esp, 0
jle 0x489e56
jne 0x489e63
pushf
jae 0x489e5c
popf
jp 0x489e60
je 0x489e63
mov esi, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 5]
sub cl, 1
mov byte [ebp - 5], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
cld
jo 0x489ed4
jge 0x489ed0
jno 0x489ed4
mov edi, 0x3d83ad
pop eax
dec eax
add byte [eax], al
cmp dword [0x485800], 0
je 0x489ef1
lea edx, [ebp - 0x10]
push edx
mov eax, dword [0x485800]
push eax
call fcn.004b7254
mov dword [0x485b98], eax
shl ecx, 0
jge 0x489f12
pushf
ror esi, 0x15
ror esi, 0xb
xor esi, 0x7514
xor esi, 0x7514
popf
nop
xchg edx, edx
jl 0x489f12
ljmp 0x4d8d:0x6a0d6a
push 0xd
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004a5bec
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
add eax, 0xd4cacf80
sub al, 0x9f
push 3
ljmp 0xe7d4
outsd dx, dword [esi]
invalid
outsb dx, byte [esi]
xor eax, 0x8825d2e6
xlatb
mov bh, dl
jno 0x6ee57d
loopne 0x6ee5be
sub dword [esi + edx*2 - 0xf], esp
xor esp, dword [ebp - 0x24b20f6a]
mov dword [eax + 0x33], esp
pop edi
rol ah, 1
insd dword es:[edi], dx
pop edi
bound ecx, qword [ebx + 0x18]
insd dword es:[edi], dx
mov ecx, cs
adc edi, dword [esi + 0x26077896]
jo 0x6ee617
add bh, byte [eax + 0x2c]
mov ecx, 0xb8cb5112
lea ebx, [edx + 0x52]
scasb al, byte es:[edi]
xchg ecx, eax
jmp 0x6ee5ca
mov cl, 0x96
aaa
rol dl, 1
test al, ah
mov al, byte [0xb6ea7a55]
sahf
pop ds
dec ebx
mov dword [0xd6cdb160], eax
pop esi
mov eax, 0x581ad22e
aaa
cmpsb byte [esi], byte es:[edi]
mov edi, 0x1ddadbc9
sbb dword [edi], ebp
das
xchg edx, eax
sbb eax, 0x29c496df
jne 0x6ee5c5
mov al, 0x2a
cmp eax, 0xf8e6345
sbb byte [ebx + 0x19c02836], dl
invalid