Function at 0x4d9cfc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004e01cb
add esp, 0xc
not ecx
not ecx
lea edx, [edx]
lea ebx, [ebx]
lea esp, [esp]
jae 0x4d9d31
pushf
jb 0x4d9d26
popf
jb 0x4d9d2a
jb 0x4d9d2c
mov edi, edi
jb 0x4d9d31
mov edx, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
dec esi
inc esi
ror eax, 0x1d
ror eax, 3
js 0x4d9d99
pushf
test edi, 0x3ee0
lea esp, [esp]
or esp, 0
rol esp, 0
popf
jg 0x4d9d94
jmp 0x4d9d96
jns 0x4d9d99
ljmp 0x1e9:0x80e44d8a
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
lea ecx, [ecx]
ror edi, 0x12
rol edi, 0x12
push edi
add edi, 0x255b
ror edi, 0xb
pop edi
and edx, edx
js 0x4d9e55
pushf
and esp, 0xffffffff
popf
jns 0x4d9e44
jge 0x4d9e46
lea ecx, [ecx + 0x816]
lea ecx, [ecx - 0x816]
jns 0x4d9e55
mov edi, 0x38dbe8
add byte [ecx + 0x7d83fc45], cl
cld
add byte [ebp + 7], dh
call fcn.004dd735
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4d9e6a
xor eax, eax
jmp 0x4da117
push edx
add edx, 0x269b
ror edx, 7
pop edx
jp 0x4d9e7e
js 0x4d9e79
jnp 0x4d9e7e
jmp 0x55db1969
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 4]
push eax
call fcn.004f370f
mov dword [ebp - 0x20], eax
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004e01cb
add esp, 0xc
rol edx, 9
ror edx, 9
add edx, dword [esp]
sub edx, dword [esp]
std
cld
ror eax, 0xe
ror eax, 0x12
jns 0x4d9ed9
pushf
add edx, dword [esp]
sub edx, dword [esp]
lea esi, [esi + 0x3038]
sub esi, 0x3038
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
popf
jg 0x4d9ed4
mov ecx, ecx
js 0x4d9ed9
ljmp 0x775:0xe07d83
cmp dword [ebp - 0x20], 0
jne 0x4d9ee6
xor eax, eax
jmp 0x4da117
mov eax, eax
rol edx, 7
rol edx, 0x19
test dword [esp], ebx
cmp esp, 0x430
jle 0x4d9f1b
pushf
mov esi, esi
rol edi, 4
rol edi, 0x1c
xchg esp, esp
ror esp, 0
popf
lea ebx, [ebx + 0xe68]
lea ebx, [ebx - 0xe68]
jl 0x4d9f18
jg 0x4d9f1b
mov esi, 0x52e0558b
mov edx, dword [ebp - 0x20]
push edx
call fcn.004f291c
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004e01cb
add esp, 0xc
shl edi, 0
add esi, 0x20d4
sub esi, 0x20d4
xor esi, dword [esp]
xor esi, dword [esp]
xchg esp, esp
ja 0x4d9f66
pushf
cld
add edx, 0x5650
sub edx, 0x5650
popf
lea edi, [edi]
jbe 0x4d9f66
call 0x4931e530
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x11], 0x6f
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0x10], 0x65
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0xf], 0x6d
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x49
mov byte [ebp - 0xe], 0x66
jle 0x4d9fac
jne 0x4d9fc4
pushf
jg 0x4d9fb2
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
shl esp, 0
popf
jb 0x4d9fc1
je 0x4d9fc4
mov ebx, 0x80e44d8a
jmp 0xe49b27ce
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
rol edi, 0x1f
rol edi, 1
test esp, 0x69be
test esp, 0x2c51
ja 0x4da068
lea edi, [edi]
jbe 0x4da068
mov edi, 0xf03d83b1
adc eax, 0x7400004d
sub eax, 0x8500c4c1
sbb al, 0x24
cmp dword [0x4d15f0], 0
je 0x4da09e
rol esp, 0
test dword [esp], ebx
mov esp, esp
sub edi, 0
je 0x4da08c
pushf
nop
jge 0x4da083
std
cld
popf
jns 0x4da089
jne 0x4da08c
ljmp 0xf0a1:0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x4d15f0]
push eax
call fcn.004f370f
mov dword [ebp - 8], eax
xchg ecx, eax
xchg ecx, eax
test edx, 0x16ef
jge 0x4da0ae
jbe 0x4da0aa
jl 0x4da0ae
xor eax, 0x6a116a19
add byte [ebp - 0x17ae1bb3], cl
adc byte [ecx], ah
add byte [ebx + 0x3b900cc4], al
sbb al, 0x24
push 0x11
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004e01cb
add esp, 0xc
nop
cmp ebx, dword [esp]
jle 0x4da0d0
pushf
jae 0x4da0c8
popf
lea esp, [esp]
jg 0x4da0d0
mov esp, 0xf87d83
cmp dword [ebp - 8], 0
je 0x4da0fa
xchg edx, eax
xchg edx, eax
add edx, 0
xor ebx, dword [esp + 4]
xor ebx, dword [esp + 4]
shr esp, 0
jae 0x4da0ee
jle 0x4da0ea
jb 0x4da0ee
jmp 0xf8a32c64
mov edx, dword [ebp - 8]
push edx
call fcn.004f291c
add esp, 4
ror ecx, 0
jae 0x4da0ff
jae 0x4da110
lea ecx, [ecx + 0x6d60]
lea ecx, [ecx - 0x6d60]
jb 0x4da110
ljmp 0x55ff:0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4