Function at 0x492300
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0048eb40
add esp, 0xc
dec ebx
inc ebx
push edx
pop edx
push ecx
add ecx, 0x4f82
ror ecx, 0x1c
pop ecx
lea ecx, [ecx + 0x740d]
sub ecx, 0x740d
jle 0x49233e
nop
mov esp, esp
nop
jg 0x49233e
mov esi, 0xc666b029
inc ebp
call 0xe98eab9a
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
mov byte [ebp - 0xb], 0
jge 0x492377
js 0x492379
jae 0x4923a0
pushf
lea ebx, [ebx + 0x3a4b]
sub ebx, 0x3a4b
jnp 0x49238b
test ecx, 0x165c
jb 0x492393
popf
xchg esi, ebx
xchg esi, ebx
jae 0x49239b
mov esp, esp
jb 0x4923a0
mov ebx, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xf]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
jne 0x492424
pushf
or edx, edx
ja 0x492418
jns 0x49241a
popf
xchg edi, edi
mov ebx, ebx
nop
je 0x492424
mov ecx, 0x1b57e8
add byte [ebx - 0x76097a10], cl
jne 0x49242c
call fcn.00493f80
mov esi, eax
test esi, esi
mov dword [ebp - 4], esi
test byte [ecx + 0xe75fc75], 0xb8
add dword [eax], eax
add byte [eax], al
jne 0x492440
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
test dword [esp + 0xc], ecx
xchg edx, eax
xchg edx, eax
je 0x492465
pushf
lea edx, [edx + 0x3a0c]
sub edx, 0x3a0c
jge 0x492458
popf
xchg ecx, edi
xchg ecx, edi
jae 0x492460
xchg esp, esp
jne 0x492465
xor eax, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push esi
call fcn.00476d20
push 0xe
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.0048eb40
add esp, 0xc
test esi, esi
jne 0x492496
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
shr esp, 0
ror esp, 0
jae 0x4924c0
lea edi, [edi + 0x6225]
lea edi, [edi - 0x6225]
xchg edi, ebx
xchg edi, ebx
jl 0x4924b0
lea edx, [edx + 0x175f]
lea edx, [edx - 0x175f]
jb 0x4924c0
mov edx, 0x2ae85626
fdivp st(7)
jmp [edx + 0xe]
push esi
call fcn.004902f0
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0048eb40
add esp, 0x10
xchg edi, eax
xchg edi, eax
jbe 0x4924da
jl 0x4924f0
pushf
add esp, 0
xor eax, 0
ror esp, 0
popf
mov edx, edx
jge 0x4924ed
jge 0x4924f0
mov edi, 0x45c666b0
call 0xe98ead4c
mov al, 0x66
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x50
mov byte [ebp - 0x14], 0x71
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x6f
mov byte [ebp - 0x11], 0x4c
mov byte [ebp - 0x10], al
mov byte [ebp - 0xf], 0x7a
mov byte [ebp - 0xe], 0x46
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
mov byte [ebp - 0xb], 0
add ebx, 0
jb 0x492537
pushf
or ecx, ecx
popf
mov edx, edx
jae 0x492537
ljmp 0xed55:0x8ae85d8a
mov bl, byte [ebp - 0x18]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0xe]
mov al, byte [ebp - 0x17]
dec bl
dec dl
mov byte [ebp - 0x18], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0xd]
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
call 0x4925a4
lea esp, [esp + 4]
cmp eax, dword [esp]
xor edx, dword [esp]
xor edx, dword [esp]
jno 0x4925cb
pushf
inc esi
dec esi
jnp 0x4925b9
rol ecx, 0x10
rol ecx, 0x10
nop
popf
lea edx, [edx]
mov edi, edi
mov ecx, ecx
jo 0x4925cb
xor eax, 0xc08bd28b
mov edx, edx
mov eax, eax
rol edx, 4
ror edx, 4
jae 0x4925ea
pushf
xchg edx, edi
xchg edx, edi
jmp 0x4925df
popf
jge 0x4925e3
xchg esi, edi
xchg esi, edi
jb 0x4925ea
mov ebp, 0x8dfc558b
dec ebp
call 0x2a317845
inc edi
invalid
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00476d20
mov dword [ebp - 4], eax
push edx
add edx, 0x7988
ror edx, 0x12
pop edx
rol edi, 0x11
ror edi, 0x11
jp 0x492618
pushf
jmp 0x492611
popf
js 0x492615
jnp 0x492618
mov edx, 0x458d0e6a
call 0xe899268b
sbb eax, ebp
invalid
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0048eb40
add esp, 0xc
ror esp, 0
add esp, 0
xchg esi, esi
lea ebx, [ebx]
jge 0x492652
pushf
js 0x492638
shr ebx, 0
lea edx, [edx + 0x127b]
sub edx, 0x127b
neg edx
neg edx
popf
jns 0x49264f
jl 0x492652
add eax, 0x85fc458b
sal byte [edi + ebp - 0x3f], 0xc2
pop es
mov eax, dword [ebp - 4]
test eax, eax
je 0x492688
rol edx, 7
ror edx, 7
jno 0x492661
call 0x492666
add esp, 4
lea esp, [esp]
js 0x49267f
pushf
jle 0x492672
and esp, 0xffffffff
and esp, 0xffffffff
popf
lea ecx, [ecx]
jns 0x49267f
mov esi, 0xdc6be850
invalid
push eax
call fcn.004902f0
add esp, 4
stc
lea edi, [edi]
jno 0x49269a
lea esp, [esp]
xchg edx, ebx
xchg edx, ebx
mov ecx, ecx
jo 0x49269a
jmp 0x1896b20e
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14