Function at 0x4cecc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov cl, 0x4b
add byte [ebx - 0x6e7403b3], cl
js 0x4ced00
add byte [eax], al
mov dword [0x4bb178], edx
xor eax, eax
mov esp, ebp
pop ebp
ret
sub esp, 0x18
push ebx
push esi
push edi
mov dword [ebp - 4], 0
cld
add byte [eax], al
add byte [eax], al
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004d9ce8
add esp, 0xc
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x14], 0x4e
mov byte [ebp - 0xf], 0x68
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0xd], 0x43
mov byte [ebp - 0x11], 0x74
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0xb], 0x79
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 9], 0
jne 0x4ced1a
je 0x4cecc8
inc ebp
hlt
je 0x4ced1a
jl 0x4ceca5
mov cl, byte [ebp - 0x14]
dec ebp
in al, dx
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
call fcn.004c7bfe
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4ced8f
add dword [eax + 0x458af455], ecx
invalid
xor eax, eax
jmp 0x4ceef4
jo 0x4ced94
jno 0x4ced94
call 0x51393325
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.004d66a8
mov dword [ebp - 0x18], eax
jb 0x4ceda9
jae 0x4ceda9
jmp 0x4cee14
push 0xc
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.004d9ce8
add byte [eax], al
add esp, 0xc
jne 0x4cedbe
je 0x4cedbe
call 0x1356b45
cmp dword [ebp - 0x18], 0
jne 0x4cedcb
xor eax, eax
jmp 0x4ceef4
jne 0x4cedd0
je 0x4cedd0
jns 0x4ced5c
mov eax, dword [ebp - 0x18]
push eax
call fcn.004d0bd7
inc ebp
call 0x1e4bd627
add byte [eax], al
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x14]
push ecx
call fcn.004d9ce8
add esp, 0xc
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x14], 0x4e
mov byte [ebp - 0xf], 0x68
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0xd], 0x43
mov byte [ebp - 0x11], 0x74
mov byte [ebp - 0xc], 0x70
inc ebp
hlt
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0xb], 0x79
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
jne 0x4cee29
je 0x4cee29
jp 0x4cedb4
mov dl, byte [ebp - 0x14]
push ebp
in al, dx
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
jb 0x4cee8d
jae 0x4cee8d
jmp 0x4cee11
cmp dword [ebp - 4], 0
je 0x4ceea8
jb 0x4cee98
jae 0x4cee98
and dword [ebp - 0x74ae13b3], ecx
push ebp
cld
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004d66a8
mov dword [ebp - 8], eax
jne 0x4ceead
je 0x4ceead
jg 0x4cef18
push 0xc
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004d9ce8
or al, 0x6a
add byte [ebp - 0x17af13bb], cl
scasb al, byte es:[edi]
add byte [eax], al
add esp, 0xc
jb 0x4ceec2
jae 0x4ceec2
sub byte [ebx + 0x7400f87d], al
adc dword [edx + 3], esi
cmp dword [ebp - 8], 0
je 0x4ceed9
jb 0x4ceecd
jae 0x4ceecd
sub al, 0x8b
dec ebp
clc
mov ecx, dword [ebp - 8]
push ecx
call fcn.004d0bd7
add esp, 4
cmp dword [esp + 8], 0x1740375
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
jae fcn.004cef1b
or eax, 0x48dc45c6