Function at 0x49addf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push ebx
push esi
push edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
call 0x49adfb
lea esp, [esp + 4]
cmp ebx, dword [esp + 4]
or ecx, ecx
xchg edx, edx
jne 0x49ae26
pushf
ror esp, 0
std
cld
rol ebx, 0
popf
lea edi, [edi + 0x2e94]
lea edi, [edi - 0x2e94]
jnp 0x49ae23
je 0x49ae26
add eax, 0x6a1a6a
push 0x1a
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.0049abe6
add esp, 0xc
xor eax, 0x5d31
xor eax, 0x5d31
cmp edi, 0x142a
jne 0x49ae48
cmp ebx, dword [esp + 4]
jno 0x49ae58
jnp 0x49ae50
lea edi, [edi]
jle 0x49ae54
jo 0x49ae58
sub eax, 0x6a0d6a6f
add byte [ebp - 0x17ae4fb3], cl
cmp ebp, 0xc483ffff
or al, 0x90
push 0xd
push 0
lea ecx, [ebp - 0x50]
push ecx
call fcn.0049abe6
add esp, 0xc
nop
jmp 0x49ae6b
jp 0x49ae7c
pushf
lea ecx, [ecx]
jbe 0x49ae73
popf
xchg esi, esi
jne 0x49ae79
jnp 0x49ae7c
add eax, 0x6a0a6a
push 0xa
push 0
lea edx, [ebp - 0xc]
push edx
call fcn.0049abe6
add esp, 0xc
mov edx, edx
jge 0x49ae97
jo 0x49ae92
jo 0x49ae94
jl 0x49ae97
mov edi, 0x46b045c6
mov byte [ebp - 0x50], 0x46
mov byte [ebp - 0x4f], 0x59
mov byte [ebp - 0x4e], 0x51
mov byte [ebp - 0x4d], 0x4d
mov byte [ebp - 0x4c], 0x50
mov byte [ebp - 0x4b], 0x53
mov byte [ebp - 0x4a], 0x46
mov byte [ebp - 0x49], 0x53
mov byte [ebp - 0x48], 0x2f
mov byte [ebp - 0x47], 0x46
mov byte [ebp - 0x46], 0x59
mov byte [ebp - 0x45], 0x46
mov byte [ebp - 0x44], 0
jns 0x49aecd
js 0x49aed8
jmp 0x49aed1
jle 0x49aed3
js 0x49aed5
jns 0x49aed8
call 0x2cf9f466
add dword [eax + 0x4d8ab045], ecx
mov cl, 0x80
jmp 0xb19736ea
mov al, byte [ebp - 0x50]
sub al, 1
mov byte [ebp - 0x50], al
mov cl, byte [ebp - 0x4f]
sub cl, 1
mov byte [ebp - 0x4f], cl
mov dl, byte [ebp - 0x4e]
sub dl, 1
mov byte [ebp - 0x4e], dl
mov al, byte [ebp - 0x4d]
sub al, 1
mov byte [ebp - 0x4d], al
mov cl, byte [ebp - 0x4c]
sub cl, 1
mov byte [ebp - 0x4c], cl
mov dl, byte [ebp - 0x4b]
sub dl, 1
mov byte [ebp - 0x4b], dl
mov al, byte [ebp - 0x4a]
sub al, 1
mov byte [ebp - 0x4a], al
mov cl, byte [ebp - 0x49]
sub cl, 1
mov byte [ebp - 0x49], cl
mov dl, byte [ebp - 0x48]
sub dl, 1
mov byte [ebp - 0x48], dl
mov al, byte [ebp - 0x47]
sub al, 1
mov byte [ebp - 0x47], al
mov cl, byte [ebp - 0x46]
sub cl, 1
mov byte [ebp - 0x46], cl
mov dl, byte [ebp - 0x45]
sub dl, 1
mov byte [ebp - 0x45], dl
ror esp, 0
test ecx, 0xd6c
je 0x49af56
xchg edi, edi
mov esi, esi
xchg ecx, eax
xchg ecx, eax
jne 0x49af56
lcall 0x44f4, 0x45c67779
mov byte [ebp - 0xc], 0x44
mov byte [ebp - 0xb], 0x54
mov byte [ebp - 0xa], 0x53
mov byte [ebp - 9], 0x54
mov byte [ebp - 8], 0x54
mov byte [ebp - 7], 0x2f
mov byte [ebp - 6], 0x46
mov byte [ebp - 5], 0x59
mov byte [ebp - 4], 0x46
mov byte [ebp - 3], 0
add ecx, 0x2b90
sub ecx, 0x2b90
xchg esi, edi
xchg esi, edi
or eax, eax
jo 0x49af9c
je 0x49af94
jns 0x49af96
xchg esp, esp
jno 0x49af9c
sub eax, 0xf4458a4c
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 5]
sub cl, 1
mov byte [ebp - 5], cl
mov dl, byte [ebp - 4]
sub dl, 1
mov byte [ebp - 4], dl
ror esp, 0
je 0x49affa
jb 0x49aff1
ja 0x49aff3
lea esp, [esp]
jne 0x49affa
sbb edx, 0x5bd845c6
mov byte [ebp - 0x28], 0x5b
mov byte [ebp - 0x27], 0x78
mov byte [ebp - 0x26], 0x52
mov byte [ebp - 0x25], 0x76
mov byte [ebp - 0x24], 0x66
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x22], 0x7a
mov byte [ebp - 0x21], 0x4a
mov byte [ebp - 0x20], 0x6f
mov byte [ebp - 0x1f], 0x67
mov byte [ebp - 0x1e], 0x70
mov byte [ebp - 0x1d], 0x73
mov byte [ebp - 0x1c], 0x6e
mov byte [ebp - 0x1b], 0x62
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x19], 0x6a
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x17], 0x6f
mov byte [ebp - 0x16], 0x51
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x13], 0x64
mov byte [ebp - 0x12], 0x66
mov byte [ebp - 0x11], 0x74
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0xf], 0
rol esp, 0
add esp, 0
je 0x49b072
xchg esi, eax
xchg esi, eax
mov edi, edi
jne 0x49b072
mov ecx, 0xd8458a7c
mov al, byte [ebp - 0x28]
sub al, 1
mov byte [ebp - 0x28], al
mov cl, byte [ebp - 0x23]
sub cl, 1
mov byte [ebp - 0x23], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x27]
sub dl, 1
mov byte [ebp - 0x27], dl
mov al, byte [ebp - 0x22]
sub al, 1
mov byte [ebp - 0x22], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x26]
sub cl, 1
mov byte [ebp - 0x26], cl
mov dl, byte [ebp - 0x21]
sub dl, 1
mov byte [ebp - 0x21], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0x25]
sub al, 1
mov byte [ebp - 0x25], al
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x24]
sub dl, 1
mov byte [ebp - 0x24], dl
mov al, byte [ebp - 0x1f]
sub al, 1
mov byte [ebp - 0x1f], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
xor ecx, edx
xor ecx, edx
jo 0x49b150
mov esi, esi
add ecx, 0
je 0x49b161
xchg edx, edx
jle 0x49b15b
jg 0x49b15d
jne 0x49b161
mov ebp, 0xd84d8de2
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [0x48ecb4]
push edx
call fcn.0049918d
mov dword [0x48f144], eax
test ecx, 0x3fab
ja 0x49b189
nop
jae 0x49b181
mov edx, edx
jo 0x49b185
jbe 0x49b189
mov ebp, 0x6a1a6a7a
add byte [ebp - 0x17af27bb], cl
push eax
cli
invalid
push 0x1a
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.0049abe6
add esp, 0xc
or ebx, 0
ror esp, 0
jle 0x49b1b3
pushf
test esp, 0x69fa
popf
mov edx, edx
js 0x49b1af
nop
jg 0x49b1b3
lcall 0xa300, 0xd0cde8
lodsb al, byte [esi]
in al, dx
dec eax
add byte [ebx], al
or al, 0x24
call fcn.004a8285
mov dword [0x48ecac], eax
add ecx, dword [esp]
sub ecx, dword [esp]
shl esp, 0
shr esp, 0
je 0x49b1d5
jb 0x49b1cd
nop
jl 0x49b1d0
xchg esp, esp
jne 0x49b1d5
add eax, 0xf1440d8b
dec eax
add byte [ecx + 0x5433a44d], cl
and al, 8
mov ecx, dword [0x48f144]
mov dword [ebp - 0x5c], ecx
xor edx, dword [esp + 8]
xor edx, dword [esp + 8]
xor edx, 0
ror esp, 0
xor edi, dword [esp]
xor edi, dword [esp]
ja 0x49b207
pushf
jae 0x49b1f8
cmp esp, 0x456f
popf
jne 0x49b202
mov edi, edi
jbe 0x49b207
mov ecx, 0xa47d83
cmp dword [ebp - 0x5c], 0
jne 0x49b23c
jno 0x49b20f
push esi
add esi, 0x5103
ror esi, 0x10
pop esi
rol edx, 9
ror edx, 9
jbe 0x49b232
pushf
xor eax, 0
popf
jnp 0x49b22b
xchg edx, esi
xchg edx, esi
ja 0x49b232
mov ebp, 0x54b8
add cl, ch
xchg edi, eax
add byte [eax], al
add byte [ebx], cl
not byte [eax - 0x64720975]
in eax, 0x68
add byte [eax], al
mov eax, 0x54
jmp 0x49b2d3
or esi, esi
nop
mov esi, esi
lea ebx, [ebx + 0x68e5]
sub ebx, 0x68e5
jle 0x49b254
jp 0x49b251
jg 0x49b254
ljmp 0x558d:0x186a006a
push 0
push 0x18
lea edx, [ebp - 0x40]
push edx
push 0
mov eax, dword [0x48ecac]
push eax
call dword [ebp - 0x5c]
test eax, eax
je 0x49b26d
jmp 0x49b283
or esi, 0
clc
jb 0x49b27d
xchg edi, ecx
xchg edi, ecx
jl 0x49b279
jae 0x49b27d
mov edi, 0xd44d8b0a
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x54], ecx
jae 0x49b285
rol edx, 4
ror edx, 4
xchg esp, esp
jp 0x49b293
nop
jnp 0x49b293
mov edx, 0x52b0558d
lea edx, [ebp - 0x50]
push edx
call fcn.004b8582
add esp, 4
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x54
je 0x49b2ad
mov eax, dword [ebp - 0x58]
jmp 0x49b2d3
lea eax, [ebp - 0xc]
push eax
call fcn.004b8582
add esp, 4
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x54
je 0x49b2c7
mov eax, dword [ebp - 0x58]
jmp 0x49b2d3
mov ecx, dword [ebp - 0x54]
push ecx
call fcn.004ad6f9
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret