Function at 0x4b06bf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
ror esp, 0
jae 0x4b06d9
jmp 0x4b06cf
mov esp, esp
xchg edx, eax
xchg edx, eax
jo 0x4b06d5
jb 0x4b06d9
add eax, 0x443d8318
in al, dx
dec eax
add byte [ecx], al
cmp dword [0x48ec44], 1
jne 0x4b081f
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0049abe6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
xor ebx, dword [esp]
xor ebx, dword [esp]
lea edi, [edi + 0x1386]
sub edi, 0x1386
jns 0x4b074c
pushf
jle 0x4b073e
add esi, 0
popf
jne 0x4b0745
js 0x4b0747
xchg edx, eax
xchg edx, eax
js 0x4b074c
call 0x813b54da
jmp 0xf0988f56
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
cmp eax, dword [esp + 8]
jb 0x4b07be
mov ebx, ebx
jmp 0x4b07b6
mov esp, esp
xchg edi, edi
jae 0x4b07be
call 0xbc888ac3
jecxz 0x4b080b
cmp dword [0x48e3bc], 0
add byte [eax], al
jne 0x4b07cf
or eax, 0xffffffff
jmp 0x4b09f2
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x48e3bc]
push ecx
call fcn.0049918d
mov dword [ebp - 4], eax
stc
jns 0x4b07f5
pushf
add eax, 0
popf
ja 0x4b07ee
jmp 0x4b07f0
jae 0x4b07f2
js 0x4b07f5
mov eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0049abe6
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4b0815
mov eax, dword [ebp - 4]
mov dword [0x48ec44], eax
jmp 0x4b081d
or eax, 0xffffffff
jmp 0x4b09f2
jmp 0x4b0828
mov ecx, dword [0x48ec44]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
add eax, dword [esp]
sub eax, dword [esp]
cmp esi, ecx
jnp 0x4b084b
pushf
shl esp, 0
sub esp, 0
popf
xchg esp, esp
jl 0x4b0846
ja 0x4b0848
jp 0x4b084b
sub eax, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.004a26e9
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0049abe6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
test esp, 0xc70
test edx, 0x213d
jle 0x4b08aa
lea ebx, [ebx]
jg 0x4b08aa
xor eax, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
cmp ebx, 0x2f67
nop
xor ecx, 0
jl 0x4b0915
jbe 0x4b092b
lea esi, [esi + 0x1d2e]
lea esi, [esi - 0x1d2e]
xchg edi, edx
xchg edi, edx
ja 0x4b092b
mov ecx, 0xbc3d8332
jecxz 0x4b0978
cmp dword [0x48e3bc], 0
add byte [eax], al
je 0x4b0961
je 0x4b0936
sub esp, 0
and edx, edx
js 0x4b094e
lea ebx, [ebx + 0x5598]
lea ebx, [ebx - 0x5598]
jns 0x4b094b
jns 0x4b094e
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x48e3bc]
push edx
call fcn.0049918d
mov dword [ebp - 4], eax
jge 0x4b0963
jp 0x4b096f
jne 0x4b0967
xchg ecx, ecx
mov esp, esp
jnp 0x4b096f
lcall 0x8d00, 0x6a0c6a77
inc ebp
invalid
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0049abe6
add esp, 0xc
or esp, 0
jae 0x4b0984
push 0xffffffffffffffa2
invalid
and esp, 0xffffffff
sub esp, 0
je 0x4b09a1
pushf
push esi
pop esi
add esp, 0
shr esp, 0
popf
mov esp, esp
jg 0x4b099c
xchg esp, esp
jne 0x4b09a1
mov ecx, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x4b09c0
jno 0x4b09a9
jbe 0x4b09b4
lea esp, [esp]
xchg ecx, ecx
ja 0x4b09b4
jmp 0xfc9894fc
mov ecx, dword [ebp - 4]
push ecx
call fcn.004a26e9
add esp, 4
cld
and esp, 0xffffffff
jl 0x4b09d3
xchg ebx, edx
xchg ebx, edx
jbe 0x4b09cc
lea esi, [esi]
jge 0x4b09d3
mov edi, 0x558b8ee6
and byte [edx - 0x75], dl
inc ebp
sbb al, 0x50
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c