Function at 0x4b86b6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x80
push ebx
push esi
push edi
mov dword [ebp - 0x7c], 0x32
inc ebx
dec ebx
rol eax, 0x12
rol eax, 0xe
jae 0x4b86d3
js 0x4b86f7
pushf
or esp, 0
xor eax, dword [esp + 0xc]
xor eax, dword [esp + 0xc]
popf
lea edi, [edi + 0x7465]
lea edi, [edi - 0x7465]
jle 0x4b86f2
jmp 0x4b86f4
jns 0x4b86f7
mov esp, 0x6a286a
push 0x28
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.004c5819
add esp, 0xc
mov byte [ebp - 0x78], 0x54
mov byte [ebp - 0x77], 0x5a
mov byte [ebp - 0x76], 0x54
mov byte [ebp - 0x75], 0x55
mov byte [ebp - 0x74], 0x46
mov byte [ebp - 0x73], 0x4e
mov byte [ebp - 0x72], 0x5d
mov byte [ebp - 0x71], 0x44
mov byte [ebp - 0x70], 0x76
mov byte [ebp - 0x6f], 0x73
mov byte [ebp - 0x6e], 0x73
mov byte [ebp - 0x6d], 0x66
mov byte [ebp - 0x6c], 0x6f
mov byte [ebp - 0x6b], 0x75
mov byte [ebp - 0x6a], 0x44
mov byte [ebp - 0x69], 0x70
mov byte [ebp - 0x68], 0x6f
mov byte [ebp - 0x67], 0x75
mov byte [ebp - 0x66], 0x73
mov byte [ebp - 0x65], 0x70
mov byte [ebp - 0x64], 0x6d
mov byte [ebp - 0x63], 0x54
mov byte [ebp - 0x62], 0x66
mov byte [ebp - 0x61], 0x75
mov byte [ebp - 0x60], 0x5d
mov byte [ebp - 0x5f], 0x54
mov byte [ebp - 0x5e], 0x66
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x5c], 0x77
mov byte [ebp - 0x5b], 0x6a
mov byte [ebp - 0x5a], 0x64
mov byte [ebp - 0x59], 0x66
mov byte [ebp - 0x58], 0x74
mov byte [ebp - 0x57], 0x5d
mov byte [ebp - 0x56], 0x4f
mov byte [ebp - 0x55], 0x55
mov byte [ebp - 0x54], 0x6a
mov byte [ebp - 0x53], 0x64
mov byte [ebp - 0x52], 0x66
mov byte [ebp - 0x51], 0
xor esi, dword [esp]
xor esi, dword [esp]
add esi, 0
jo 0x4b87c9
xchg ecx, edx
xchg ecx, edx
js 0x4b87b8
lea edx, [edx + 0x1f14]
lea edx, [edx - 0x1f14]
jnp 0x4b87c6
jno 0x4b87c9
sub eax, 0x80884d8a
jmp 0x88990fd3
mov cl, byte [ebp - 0x78]
sub cl, 1
mov byte [ebp - 0x78], cl
mov dl, byte [ebp - 0x73]
sub dl, 1
mov byte [ebp - 0x73], dl
mov al, byte [ebp - 0x6e]
sub al, 1
mov byte [ebp - 0x6e], al
mov cl, byte [ebp - 0x69]
sub cl, 1
mov byte [ebp - 0x69], cl
mov dl, byte [ebp - 0x64]
sub dl, 1
mov byte [ebp - 0x64], dl
mov al, byte [ebp - 0x77]
sub al, 1
mov byte [ebp - 0x77], al
mov cl, byte [ebp - 0x72]
sub cl, 1
mov byte [ebp - 0x72], cl
mov dl, byte [ebp - 0x6d]
sub dl, 1
mov byte [ebp - 0x6d], dl
mov al, byte [ebp - 0x68]
sub al, 1
mov byte [ebp - 0x68], al
mov cl, byte [ebp - 0x63]
sub cl, 1
mov byte [ebp - 0x63], cl
mov dl, byte [ebp - 0x76]
sub dl, 1
mov byte [ebp - 0x76], dl
mov al, byte [ebp - 0x71]
sub al, 1
mov byte [ebp - 0x71], al
mov cl, byte [ebp - 0x6c]
sub cl, 1
mov byte [ebp - 0x6c], cl
mov dl, byte [ebp - 0x67]
sub dl, 1
mov byte [ebp - 0x67], dl
mov al, byte [ebp - 0x62]
sub al, 1
mov byte [ebp - 0x62], al
mov cl, byte [ebp - 0x75]
sub cl, 1
mov byte [ebp - 0x75], cl
mov dl, byte [ebp - 0x70]
sub dl, 1
mov byte [ebp - 0x70], dl
mov al, byte [ebp - 0x6b]
sub al, 1
mov byte [ebp - 0x6b], al
mov cl, byte [ebp - 0x66]
sub cl, 1
mov byte [ebp - 0x66], cl
mov dl, byte [ebp - 0x61]
sub dl, 1
mov byte [ebp - 0x61], dl
mov al, byte [ebp - 0x74]
sub al, 1
mov byte [ebp - 0x74], al
mov cl, byte [ebp - 0x6f]
sub cl, 1
mov byte [ebp - 0x6f], cl
mov dl, byte [ebp - 0x6a]
sub dl, 1
mov byte [ebp - 0x6a], dl
mov al, byte [ebp - 0x65]
sub al, 1
mov byte [ebp - 0x65], al
mov cl, byte [ebp - 0x60]
sub cl, 1
mov byte [ebp - 0x60], cl
mov dl, byte [ebp - 0x5f]
sub dl, 1
mov byte [ebp - 0x5f], dl
mov al, byte [ebp - 0x5b]
sub al, 1
mov byte [ebp - 0x5b], al
mov cl, byte [ebp - 0x57]
sub cl, 1
mov byte [ebp - 0x57], cl
mov dl, byte [ebp - 0x53]
sub dl, 1
mov byte [ebp - 0x53], dl
mov al, byte [ebp - 0x5e]
sub al, 1
mov byte [ebp - 0x5e], al
mov cl, byte [ebp - 0x5a]
sub cl, 1
mov byte [ebp - 0x5a], cl
mov dl, byte [ebp - 0x56]
sub dl, 1
mov byte [ebp - 0x56], dl
mov al, byte [ebp - 0x52]
sub al, 1
mov byte [ebp - 0x52], al
mov cl, byte [ebp - 0x5d]
sub cl, 1
mov byte [ebp - 0x5d], cl
mov dl, byte [ebp - 0x59]
sub dl, 1
mov byte [ebp - 0x59], dl
mov al, byte [ebp - 0x55]
sub al, 1
mov byte [ebp - 0x55], al
mov cl, byte [ebp - 0x5c]
sub cl, 1
mov byte [ebp - 0x5c], cl
mov dl, byte [ebp - 0x58]
sub dl, 1
mov byte [ebp - 0x58], dl
mov al, byte [ebp - 0x54]
sub al, 1
mov byte [ebp - 0x54], al
xchg esp, esp
mov eax, eax
cmp ecx, 0x58fd
jae 0x4b8934
mov eax, eax
jns 0x4b892b
jno 0x4b892d
lea ecx, [ecx]
jb 0x4b8934
add eax, 0x4d8de5c9
mov ah, 0x51
lea ecx, [ebp - 0x4c]
push ecx
push 1
push 0
lea edx, [ebp - 0x78]
push edx
push 0x80000002
call fcn.004b178a
mov dword [ebp - 0x50], eax
jnp 0x4b894f
ror eax, 9
rol eax, 9
cmp esp, 0x7ec6
test edi, ebx
jp 0x4b8966
jne 0x4b8961
mov edx, edx
jnp 0x4b8966
lcall 0x458d, 0x6a286a
mov byte [eax - 0x18], dl
cmpsb byte [esi], byte es:[edi]
into
add byte [eax], al
push 0x28
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.004c5819
add esp, 0xc
inc esi
dec esi
jo 0x4b897a
jp 0x4b8984
xchg ebx, edi
xchg ebx, edi
nop
jnp 0x4b8984
lcall 0x850f, 0xb07d83
adc byte [ecx], al
add byte [eax], al
cmp dword [ebp - 0x50], 0
jne 0x4b8a9e
ror esp, 0
test dword [esp], esi
nop
jne 0x4b899e
lea ebx, [ebx]
xchg esp, esp
je 0x4b899e
add eax, 0x548845c6
mov byte [ebp - 0x78], 0x54
mov byte [ebp - 0x77], 0x66
mov byte [ebp - 0x76], 0x73
mov byte [ebp - 0x75], 0x6a
mov byte [ebp - 0x74], 0x62
mov byte [ebp - 0x73], 0x6d
mov byte [ebp - 0x72], 0
clc
jp 0x4b89c8
lea ecx, [ecx]
je 0x4b89c1
lea esp, [esp]
nop
jnp 0x4b89c8
mov eax, 0x80884d8a
jmp 0x889911d2
mov cl, byte [ebp - 0x78]
sub cl, 1
mov byte [ebp - 0x78], cl
mov dl, byte [ebp - 0x77]
sub dl, 1
mov byte [ebp - 0x77], dl
mov al, byte [ebp - 0x76]
sub al, 1
mov byte [ebp - 0x76], al
mov cl, byte [ebp - 0x75]
sub cl, 1
mov byte [ebp - 0x75], cl
mov dl, byte [ebp - 0x74]
sub dl, 1
mov byte [ebp - 0x74], dl
mov al, byte [ebp - 0x73]
sub al, 1
mov byte [ebp - 0x73], al
jmp 0x4b89fe
std
cld
add esi, dword [esp]
sub esi, dword [esp]
jg 0x4b8a1d
lea esp, [esp]
lea edx, [edx + 0x99e]
lea edx, [edx - 0x99e]
jl 0x4b8a19
jle 0x4b8a1d
call 0x84991746
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x48]
push eax
push 0
lea ecx, [ebp - 0x78]
push ecx
mov edx, dword [ebp - 0x4c]
push edx
call fcn.004bc372
mov dword [ebp - 0x50], eax
shr esp, 0
lea esp, [esp]
nop
je 0x4b8a5b
lea eax, [eax]
lea ebx, [ebx + 0x7648]
lea ebx, [ebx - 0x7648]
xchg ecx, esi
xchg ecx, esi
mov esp, esp
jne 0x4b8a5b
lcall 0x458d, 0x6a286a
mov byte [eax - 0x18], dl
mov cl, 0xcd
add byte [eax], al
push 0x28
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.004c5819
add esp, 0xc
add edx, 0x2456
sub edx, 0x2456
add ebx, 0
sub eax, 0
or edx, 0
js 0x4b8a95
pushf
and esp, 0xffffffff
jns 0x4b8a89
nop
popf
jne 0x4b8a8e
xchg ebx, ecx
xchg ebx, ecx
jns 0x4b8a95
jmp 0x51ffd824
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.004a327d
nop
jns 0x4b8aa1
xchg edi, edi
jb 0x4b8aac
xchg edi, edi
mov esp, esp
jae 0x4b8aac
ljmp 0x45c6:0x5dbc45c6
mov byte [ebp - 0x44], 0x5d
mov byte [ebp - 0x3f], 0x55
mov byte [ebp - 0x43], 0x5d
mov byte [ebp - 0x3e], 0x4a
mov byte [ebp - 0x42], 0x2f
mov byte [ebp - 0x3d], 0x44
mov byte [ebp - 0x41], 0x5d
mov byte [ebp - 0x3c], 0x46
mov byte [ebp - 0x40], 0x4f
mov byte [ebp - 0x3b], 0
jp 0x4b8ad6
nop
jbe 0x4b8ae0
lea ecx, [ecx]
xchg edx, eax
xchg edx, eax
ja 0x4b8ae0
mov esp, 0x80bc558a
ljmp 0x458a
mov dl, byte [ebp - 0x44]
sub dl, 1
mov byte [ebp - 0x44], dl
mov al, byte [ebp - 0x3f]
sub al, 1
mov byte [ebp - 0x3f], al
mov cl, byte [ebp - 0x43]
sub cl, 1
mov byte [ebp - 0x43], cl
mov dl, byte [ebp - 0x3e]
sub dl, 1
mov byte [ebp - 0x3e], dl
mov al, byte [ebp - 0x42]
sub al, 1
mov byte [ebp - 0x42], al
mov cl, byte [ebp - 0x3d]
sub cl, 1
mov byte [ebp - 0x3d], cl
mov dl, byte [ebp - 0x41]
sub dl, 1
mov byte [ebp - 0x41], dl
mov al, byte [ebp - 0x3c]
sub al, 1
mov byte [ebp - 0x3c], al
mov cl, byte [ebp - 0x40]
sub cl, 1
mov byte [ebp - 0x40], cl
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
jno 0x4b8b48
pushf
test eax, edx
nop
jmp 0x4b8b3f
xchg ebx, ebx
popf
lea esi, [esi]
jo 0x4b8b48
mov esi, 0xb07d83
cmp dword [ebp - 0x50], 0
jne 0x4b8c6f
nop
jns 0x4b8b5a
jbe 0x4b8b57
js 0x4b8b5a
add eax, 0x52cc558d
lea edx, [ebp - 0x34]
push edx
call fcn.004ba44d
add esp, 4
mov dword [ebp - 0x7c], eax
cmc
jp 0x4b8b78
jbe 0x4b8b6e
lea ebx, [ebx]
mov edx, edx
xchg ecx, ecx
jnp 0x4b8b78
and ebx, 0x9847d83
cmp dword [ebp - 0x7c], 9
ja 0x4b8ba7
cmp ecx, dword [esp]
call 0x4b8b86
add esp, 4
jg 0x4b8b9d
pushf
xor edi, 0
jge 0x4b8b92
jae 0x4b8b94
je 0x4b8b96
popf
lea ecx, [ecx]
jle 0x4b8b9d
add eax, 0x15b8
add cl, ch
scasb al, byte es:[edi]
add dword [eax], eax
add cl, al
in al, dx
add byte [ecx + 0x6959c1], al
add byte [ecx + 0x6959e9], al
add ch, dh
mov eax, 0x15
jmp 0x4b8d55
shr esp, 0
add ecx, 0x6959
sub ecx, 0x6959
cmc
add esi, 0
je 0x4b8bd2
lea eax, [eax + 0x440b]
lea eax, [eax - 0x440b]
jmp 0x4b8bca
jnp 0x4b8bcc
jae 0x4b8bce
jne 0x4b8bd2
mov eax, 0x84458b63
mov eax, dword [ebp - 0x7c]
mov cl, byte [ebp + eax - 0x37]
mov byte [ebp - 0x3b], cl
mov edi, edi
or edi, 0
add esi, dword [esp]
sub esi, dword [esp]
jle 0x4b8be9
jne 0x4b8bf5
jmp 0x4b8bed
lea esp, [esp]
jle 0x4b8bf2
je 0x4b8bf5
mov ebp, 0x8a84558b
inc esp
adc eax, 0xc64588c7
mov edx, dword [ebp - 0x7c]
mov al, byte [ebp + edx - 0x39]
mov byte [ebp - 0x3a], al
cld
jp 0x4b8c0d
ja 0x4b8c04
nop
jbe 0x4b8c07
jne 0x4b8c09
jnp 0x4b8c0d
mov edx, 0x844d8b6b
mov ecx, dword [ebp - 0x7c]
mov dl, byte [ebp + ecx - 0x3b]
mov byte [ebp - 0x39], dl
jmp 0x4b8c19
lea eax, [eax]
jmp 0x4b8c1d
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
jge 0x4b8c47
pushf
call 0x4b8c2e
lea esp, [esp + 4]
sub esp, 0
xor edx, eax
xor edx, eax
shl ebx, 0
popf
jnp 0x4b8c40
js 0x4b8c42
mov ecx, ecx
jl 0x4b8c47
mov eax, 0x8a84458b
dec esp
add eax, 0xc84d88c3
mov eax, dword [ebp - 0x7c]
mov cl, byte [ebp + eax - 0x3d]
mov byte [ebp - 0x38], cl
shl ecx, 0
je 0x4b8c6b
pushf
cmp eax, dword [esp]
jl 0x4b8c5d
shl esp, 0
popf
jno 0x4b8c64
lea ebx, [ebx]
je 0x4b8c68
jne 0x4b8c6b
add eax, 0xc945c6
mov byte [ebp - 0x37], 0
ror esi, 0x18
ror esi, 8
lea eax, [eax]
ror ecx, 3
rol ecx, 3
je 0x4b8c84
js 0x4b8c81
jne 0x4b8c84
mov esp, 0x8068006a
add byte [eax], al
add byte [edx + 3], ch
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
lea edx, [ebp - 0x44]
push edx
call fcn.004a2b2d
mov dword [ebp - 0x80], eax
xchg esi, edi
xchg esi, edi
je 0x4b8ca8
jl 0x4b8caa
jl 0x4b8cc6
pushf
call 0x4b8cb3
add esp, 4
xor ecx, dword [esp + 0xc]
xor ecx, dword [esp + 0xc]
nop
popf
jns 0x4b8cc3
jge 0x4b8cc6
mov ebx, 0x6a0e6a
push 0xe
push 0
lea eax, [ebp - 0x44]
push eax
call fcn.004c5819
add esp, 0xc
jle 0x4b8cd8
jg 0x4b8cf1
pushf
rol eax, 0x11
rol eax, 0xf
mov eax, eax
shr edi, 0
stc
popf
xchg esi, edi
xchg esi, edi
jle 0x4b8cf1
mov ebx, 0xff807d83
cmp dword [ebp - 0x80], 0xffffffff
je 0x4b8d3e
add esp, 0
jns 0x4b8d14
pushf
js 0x4b8d00
cmp eax, ebx
cmp edi, 0x554a
or esi, 0
popf
jo 0x4b8d0f
jp 0x4b8d11
js 0x4b8d14
sub eax, 0x51804d8b
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.004be764
sub esp, 0
test esi, 0x400
xchg edi, edi
jb 0x4b8d37
pushf
jns 0x4b8d2e
jg 0x4b8d30
popf
mov esp, esp
jae 0x4b8d37
mov ebx, 0x7b8
add bl, ch
pop ss
mov eax, 7
jmp 0x4b8d55
xor esp, 0
xor eax, dword [esp]
xor eax, dword [esp]
je 0x4b8d50
jns 0x4b8d4b
jne 0x4b8d50
mov edx, 0x15b899a8
add byte [eax], al
add byte [edi + 0x5e], bl
mov eax, 0x15
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret