Function at 0x4934a5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esi, 0x6788
sub esi, 0x46ec
add esi, 0x2f76
pop esi
mov ecx, dword [ebp - 0x2124]
mov dword [ebp - 0x160c], ecx
push ecx
push ecx
add esp, 4
add ecx, 0x3993
call 0x492b83
add byte [ebx], bh
dec ebx
cmp esi, dword [0x83374844]
les eax, [ebx + ebp*8]
add eax, 0x3a43334c
inc edi
call 0x492b99
add byte [edi + 0x50], cl
dec eax
xor eax, 0xc4833832
add al, 0x59
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x160c], edx
jmp 0x95d52bc8
adc ah, bh
invalid
dec dword [ecx - 0x206b6b]
dec dword [ebx - 0x206b7b]
inc dword [ebx]
test esp, esi
jmp 0x85d32be0
adc ah, bh
invalid
call dword [edi - 0x7f]
iretd
mul byte [edx]
add byte [ecx + 0x172cae7], al
add byte [ecx + 0x5817e7], al
add byte [ecx + 0x6ce0cf], al
add byte [edi + 0x56], bl
add esi, 0xc777
pop esi
push ecx
and ecx, 0x2a40
pop ecx
push eax
xor eax, 0x1191f
pop eax
mov byte [ebp - 0xbf0], 0x52
mov byte [ebp - 0xbef], 0xb9
mov byte [ebp - 0xbee], 0x10
mov byte [ebp - 0xbed], 0x10
mov byte [ebp - 0xbec], 0x10
mov byte [ebp - 0xbeb], 0x10
mov byte [ebp - 0xbea], 0x5a
push edi
push ebx
add esp, 4
call 0x492c59
add byte [edx], bh
xor eax, 0x3c4b4932
add esp, 4
xor edi, 0xe7f5
add edi, 0x1289a
call 0x492c76
add byte [edi], bh
inc edx
aaa
cmp eax, 0x3b4e3f37
add esp, 4
pop edi
mov byte [ebp - 0xbf8], 0x52
mov byte [ebp - 0xbf7], 0xb9
mov byte [ebp - 0xbf6], 0x20
mov byte [ebp - 0xbf5], 0x20
mov byte [ebp - 0xbf4], 0x20
mov byte [ebp - 0xbf3], 0x20
mov byte [ebp - 0xbf2], 0x5a
push edx
and edx, 0x9f48
jmp 0x492cb7
call 0x492cc5
add byte [ecx], bh
dec ebp
dec eax
inc edi
dec edi
xor bh, byte [esi]
add esp, 4
pop edx
push edx
and edx, 0x15b3d
and edx, 0xd787
add edx, 0xf340
pop edx
mov dword [ebp - 0x2128], 0xe
push ecx
add ecx, 0x2ad1
xor ecx, 0x17c11
xor ecx, 0x9745
pop ecx
push ebx
push ebx
add esp, 4
sub ebx, 0xb47a
jmp 0x492d0c
or ebx, 0xcaf1
and ebx, 0x18215
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x1610], eax
push eax
add eax, 0x13cdc
sub eax, 0x724b
and eax, 0xede5
pop eax
push ecx
jmp 0x492d4c
call 0x492d5c
add byte [edi], dh
cmp dword [edx], edi
dec ebx
dec edi
xor edi, dword [edx]
xor bh, byte [ecx]
cmp al, 0x83
les eax, [ecx + ebx*2]
mov dword [ebp - 0x212c], 0xffffffff
push ebx
push edx
add esp, 4
call 0x492d7b
add byte [ecx + 0x4e], cl
dec ebx
dec ebp
cmp al, 0x32
add esp, 4
jmp 0x492d87
pop ebx
push ebx
push edi
add esp, 4
jmp 0x492d92
jmp 0x492d9b
pop ebx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x492db9
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edi
add edi, 0x1004f
pop edi
push ebx
push edi
add esp, 4
and ebx, 0x12a2d
call 0x492dd9
add byte [edx + 0x47], cl
inc esi
dec edx
xor eax, 0xc4834e47
add al, 0x5b
push ecx
or ecx, 0x6755
sub ecx, 0x13e94
pop ecx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x492e33
push ebx
push edx
add esp, 4
jmp 0x492e0a
jmp 0x492e13
pop ebx
push ecx
push esi
add esp, 4
sub ecx, 0x101f1
xor ecx, 0x9b0d
pop ecx
push ebx
or ebx, 0x9d94
pop ebx
jmp 0x493061
mov dword [ebp - 0xcd4], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad4], ecx
push esi
sub esi, 0xe984
add esi, 0xc471
pop esi
push esi
push esi
add esp, 4
add esi, 0xb38d
pop esi
push ecx
push eax
add esp, 4
xor ecx, 0x50e8
add ecx, 0xe28d
xor ecx, 0xdf61
pop ecx
mov edx, dword [ebp - 0x1610]
mov dword [ebp - 0xad0], edx
mov dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x1610]
jne 0x492ee2
push edx
push edx
add esp, 4
call 0x492eb4
add byte [edx], dh
inc eax
aas
cmp eax, 0x4a323c50
xor eax, dword [ebx - 0x357efb3c]
cli
add byte [eax], al
pop edx
push esi
push ecx
add esp, 4
add esi, 0xe916
jmp 0x492ed0
pop esi
mov ecx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1618], ecx
jmp 0x493013
cmp dword [ebp - 0xcd4], 0
jle 0x493007
push ebx
call 0x492efd
add byte [esi + eax*2], dh
xor esi, dword [edx]
push eax
dec ebx
dec ebx
add esp, 4
add ebx, 0x7538
pop ebx
push edi
add edi, 0x17371
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0xf5ab
or ebx, 0xca26
pop ebx
mov edx, dword [ebp - 0xad4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xad0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x492fa3
push edx
push ebx
add esp, 4
sub edx, 0x3ee0
sub edx, 0x4d1a
pop edx
push esi
and esi, 0x1649a
add esi, 0x9a7b
call 0x492f65
add byte [ebp + 0x34], al
cmp dword [ebp + 0x4a], ecx
cmp eax, dword [esi + 0x4d]
dec edi
add esp, 4
pop esi
mov eax, dword [ebp - 0xad4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x492f8b
mov dword [ebp - 0x1614], 1
jmp 0x492f95
mov dword [ebp - 0x1614], 0xffffffff
mov ecx, dword [ebp - 0x1614]
mov dword [ebp - 0xcd8], ecx
jmp 0x493007
push ebx
push edx
add esp, 4
jmp 0x492fae
pop ebx
push ebx
push eax
add esp, 4
sub ebx, 0xf36c
pop ebx
push edi
xor edi, 0x8842
sub edi, 0x13e31
add edi, 0x4df0
jmp 0x492fd4
pop edi
mov edx, dword [ebp - 0xcd4]
sub edx, 1
mov dword [ebp - 0xcd4], edx
mov eax, dword [ebp - 0xad4]
add eax, 1
mov dword [ebp - 0xad4], eax
mov ecx, dword [ebp - 0xad0]
add ecx, 1
mov dword [ebp - 0xad0], ecx
jmp 0x492ee2
mov edx, dword [ebp - 0xcd8]
mov dword [ebp - 0x1618], edx
cmp dword [ebp - 0x1618], 0
jne 0x49305c
push eax
sub eax, 0x41
xor eax, 0x8b16
sub eax, 0x37a5
jmp 0x493036
pop eax
push edx
call 0x493044
add byte [edx], bh
inc edx
aaa
dec esp
inc eax
cmp al, byte [ebx - 0x357efb3c]
stosd dword es:[edi], eax
test dword [eax], eax
add byte [edx - 0x75], bl
test dword [eax], eax
sti
invalid
jmp 0x492daa
push ecx
push ecx
add esp, 4
call 0x493075
add byte [ecx], bh
inc ecx
dec esi
cmp al, 0x46
xor al, 0x3f
inc ecx
add esp, 4
call 0x493087
add byte [eax + 0x43], al
inc ecx
dec eax
dec ecx
inc esi
inc edx
aas
inc esp
add esp, 4
pop ecx
push esi
add esi, 0x9199
pop esi
mov dword [ebp - 0x3fc], 0
push esi
push ebx
add esp, 4
or esi, 0x11572
or esi, 0x17e63
sub esi, 0x13382
pop esi
push eax
push esi
add esp, 4
xor eax, 0xed08
and eax, 0xd8d9
jmp 0x4930ce
pop eax
push edx
push ebx
add esp, 4
xor edx, 0x973a
call 0x4930e7
add byte [ebx + 0x36], al
dec esi
inc ecx
inc edx
xor eax, 0x4c48342
add edx, 0x8089
call 0x4930fd
add byte [ebx + 0x3a], cl
inc esp
dec edi
inc ecx
inc edx
dec edx
add esp, 4
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf8]
mov dword [ebp - 0x161c], eax
push eax
push esi
add esp, 4
add eax, 0xaf23
sub eax, 0x18425
add eax, 0xf0bc
or eax, 0x85f5
pop eax
push eax
or eax, 0x222e
xor eax, 0x1e59
and eax, 0xe4d7
pop eax
mov dword [ebp - 0x2130], 0xffffffff
push edi
push edx
add esp, 4
or edi, 0xbf99
jmp 0x493162
xor edi, 0x6eee
pop edi
push edx
push ebx
add esp, 4
jmp 0x493177
add edx, 0xed7e
sub edx, 0xa9fd
pop edx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x504], ecx
jmp 0x4931a1
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push eax
push edx
add esp, 4
or eax, 0x7622
add eax, 0x7019
xor eax, 0x12208
jmp 0x4931bd
pop eax
push edx
call 0x4931cf
add byte [eax], bh
cmp esi, dword [edi]
xor bh, byte [edi]
xor ecx, dword [edx + 0x4f]
cmp al, 0x45
add esp, 4
pop edx
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x49321b
push ecx
push edx
add esp, 4
or ecx, 0x16b75
pop ecx
push edx
push eax
add esp, 4
add edx, 0x17c15
sub edx, 0x481a
add edx, 0xdee6
pop edx
push edi
sub edi, 0x1301e
add edi, 0x3042
pop edi
jmp 0x493449
mov dword [ebp - 0xcdc], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xa6c], ecx
push ecx
or ecx, 0x81ed
sub ecx, 0x18064
and ecx, 0x11b88
pop ecx
push ecx
push ebx
add esp, 4
or ecx, 0x6dee
xor ecx, 0x20cb
pop ecx
push edi
push edi
add esp, 4
add edi, 0xe6e2
pop edi
mov edx, dword [ebp - 0x161c]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x161c]
jne 0x4932ca
push edi
push ecx
add esp, 4
xor edi, 0x134e9
add edi, 0x2c06
pop edi
push eax
push ebx
add esp, 4
add eax, 0x184e0
jmp 0x4932ac
sub eax, 0x119b7
xor eax, 0xea6f
pop eax
mov ecx, dword [ebp - 0xce0]
mov dword [ebp - 0x1624], ecx
jmp 0x4933fb
cmp dword [ebp - 0xcdc], 0
jle 0x4933ef
push ecx
sub ecx, 0x4022
add ecx, 0x2582
or ecx, 0x6c64
pop ecx
push edi
push ebx
add esp, 4
add edi, 0x10b22
pop edi
push ecx
push edi
add esp, 4
and ecx, 0x5b98
xor ecx, 0x17178
pop ecx
mov edx, dword [ebp - 0xa6c]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x49338b
push ecx
push eax
add esp, 4
xor ecx, 0x48e6
or ecx, 0xa374
pop ecx
push edx
push eax
add esp, 4
jmp 0x49333e
call 0x49334d
add byte [0x40334a44], dh
dec edx
cmp byte [ecx], bh
dec esi
add esp, 4
pop edx
mov eax, dword [ebp - 0xa6c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x493373
mov dword [ebp - 0x1620], 1
jmp 0x49337d
mov dword [ebp - 0x1620], 0xffffffff
mov ecx, dword [ebp - 0x1620]
mov dword [ebp - 0xce0], ecx
jmp 0x4933ef
push edi
push ecx
add esp, 4
xor edi, 0x10c35
sub edi, 0x3e03
sub edi, 0x8af3
pop edi
push edi
push eax
add esp, 4
sub edi, 0xfff9
jmp 0x4933b4
pop edi
push ebx
add ebx, 0x9f36
pop ebx
mov edx, dword [ebp - 0xcdc]
sub edx, 1
mov dword [ebp - 0xcdc], edx
mov eax, dword [ebp - 0xa6c]
add eax, 1
mov dword [ebp - 0xa6c], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x4932ca
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x1624], edx
cmp dword [ebp - 0x1624], 0
jne 0x493444
push esi
call 0x493414
add byte [ecx + 0x44], al
cmp dword [esi + 0x48], ecx
inc esp
inc esp
inc edi
dec edi
add esp, 4
or esi, 0x6e6
or esi, 0x12376
and eax, dword [ecx]
add byte [esi + 0x56], bl
push ebx
add esp, 4
sub esi, 0x866
and esi, 0x55ea
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac8], eax
jmp 0x493485
jmp 0x493192
push ebx
call 0x493456
add byte [esi + edi + 0x50], cl
dec esp
xor eax, 0x4c48344
jmp 0x493460
sub ebx, 0x1259a
pop ebx
push ebx
add ebx, 0x144cd
and ebx, 0x11851
sub ebx, 0x1660
pop ebx
mov dword [ebp - 0xac8], 0
push edx
jmp 0x49348b
pop edx
push eax
add eax, 0x1394a
sub eax, 0x3811
call 0x4934a5
add byte [ebx], dh
inc ebp
cmp al, 0x37
inc eax
cmp eax, 0x5804c483
pop eax
push edi
xor edi, 0x9672
and edi, 0x12c44
pop edi
mov byte [ebp - 0x868], 0x45
mov byte [ebp - 0x867], 0x78
mov byte [ebp - 0x866], 0x69
mov byte [ebp - 0x865], 0x74
mov byte [ebp - 0x864], 0x50
mov byte [ebp - 0x863], 0x72
popfd
idiv edi
push dword [edx - 0x3a]
test dword [esi + 0x6ffffff7], ebx
mov byte [ebp - 0x861], 0x63
mov byte [ebp - 0x860], 0x65
mov byte [ebp - 0x85f], 0x73
mov byte [ebp - 0x85e], 0x73
mov byte [ebp - 0x85d], 0
push edx
xor edx, 0x133d3
and edx, 0xe1ed
and edx, 0xcb04
and edx, 0x1807c
pop edx
push eax
push ebx
add esp, 4
xor eax, 0x94cb
add eax, 0x3d9c
and eax, 0xa742
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1790], cx
mov edx, 0x65
mov word [ebp - 0x178e], dx
mov eax, 0x72
mov word [ebp - 0x178c], ax
mov ecx, 0x6e
mov word [ebp - 0x178a], cx
mov edx, 0x65
mov word [ebp - 0x1788], dx
mov eax, 0x6c
mov word [ebp - 0x1786], ax
mov ecx, 0x33
mov word [ebp - 0x1784], cx
mov edx, 0x32
mov word [ebp - 0x1782], dx
mov eax, 0x2e
mov word [ebp - 0x1780], ax
mov ecx, 0x64
mov word [ebp - 0x177e], cx
mov edx, 0x6c
mov word [ebp - 0x177c], dx
mov eax, 0x6c
mov word [ebp - 0x177a], ax
xor ecx, ecx
mov word [ebp - 0x1778], cx
push ebx
push edx
add esp, 4
and ebx, 0x121a2
pop ebx
push esi
add esi, 0x10a06
and esi, 0x124b0
call 0x4935fe
add byte [eax + 0x3a], cl
cmp byte [ebx], bh
inc edi
dec ebx
inc ebx
dec ebx
cmp dword [ebx - 0x317efb3c], eax
mov edx, 0x5e000151
push ecx
push edi
add esp, 4
and ecx, 0x8ab9
xor ecx, 0x6355
xor ecx, 0x7476
and ecx, 0x74a4
pop ecx
push edi
sub edi, 0xf95
add edi, 0x16a1a
add edi, 0x18340
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2070], edx
mov eax, dword [ebp - 0x2070]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2074], ecx
mov edx, dword [ebp - 0x2074]
mov dword [ebp - 0x1628], edx
push esi
call 0x493672
add byte [ebp + 0x3a], al
inc ebp
cmp al, 0x4f
dec esp
cmp dword [ebx], esi
inc ebx
add esp, 4
and esi, 0xf75
or esi, 0xad88
add esi, 0x13cc0
pop esi
push esi
push ebx
add esp, 4
add esi, 0x7497
pop esi
cmp dword [ebp - 0x1628], 0
jne 0x4936ac
mov dword [ebp - 0x2fc], 0
jmp 0x493968
mov eax, dword [ebp - 0x1628]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xcec], edx
push eax
and eax, 0x9c6
add eax, 0xbbc9
or eax, 0x1162f
pop eax
push ebx
push edi
add esp, 4
xor ebx, 0x92e4
add ebx, 0x308d
sub ebx, 0x1544a
xor ebx, 0x13d51
pop ebx
cmp dword [ebp - 0xcec], 0
jne 0x493708
mov dword [ebp - 0x2fc], 0
jmp 0x493968
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x508], eax
push edi
add edi, 0x4c72
jmp 0x493720
pop edi
push ebx
call 0x49372e
add byte [esi], dh
cmp ecx, dword [edi + 0x45]
aas
inc ebx
add esp, 4
add ebx, 0x7e3
and ebx, 0x16880
pop ebx
push edi
add edi, 0x11ebf
pop edi
lea ecx, [ebp - 0x1790]
mov dword [ebp - 0xce8], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xce4], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ecx
push edi
add esp, 4
sub ecx, 0x12579
add ecx, 0x108d8
pop ecx
push ecx
push ebx
add esp, 4
xor ecx, 0x775
xor ecx, 0x16484
and ecx, 0xe1d8
pop ecx
push ebx
or ebx, 0x7617
pop ebx
mov eax, dword [ebp - 0xce4]
mov cx, word [eax]
mov word [ebp - 0x1082], cx
lea edi, [esi - 0x11]
invalid
dec dword [ebx - 0xce36b]
inc dword [ebx - 0x6a76fd3e]
sbb al, 0xf3
invalid
invalid