Function at 0x104f192
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.010399d6
add esp, 0xc
or edi, 0
jg 0x104f1bb
jge 0x104f1b2
xchg ebx, esi
xchg ebx, esi
jl 0x104f1b8
jle 0x104f1bb
mov ebx, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
or edx, edx
xor edx, 0x4094
xor edx, 0x4094
or edi, edi
lea ecx, [ecx]
jbe 0x104f217
lea edx, [edx + 0x64af]
lea edx, [edx - 0x64af]
ja 0x104f217
ljmp 0xe980:0xe44d8adb
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
je 0x104f28a
jb 0x104f294
js 0x104f28e
jbe 0x104f290
jae 0x104f294
jmp 0xec43dabf
call fcn.0102ddd7
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x104f2a9
xor eax, eax
jmp 0x104f521
nop
rol ecx, 0x1c
ror ecx, 0x1c
test dword [esp], eax
jg 0x104f2c2
pushf
push esi
pop esi
popf
js 0x104f2bd
je 0x104f2bf
jle 0x104f2c2
or dword [ebp - 0x74ad1bab], 0xe850f845
retf 0xfeb6
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.0103a999
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.010399d6
add esp, 0xc
shr esp, 0
xchg edx, ecx
xchg edx, ecx
lea ecx, [ecx]
jg 0x104f2f8
pushf
or eax, eax
popf
jne 0x104f2f5
jle 0x104f2f8
mov ebx, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x104f305
xor eax, eax
jmp 0x104f521
rol eax, 0
jg 0x104f32d
pushf
rol ebx, 0x1a
rol ebx, 6
lea esp, [esp]
or edi, 0
js 0x104f31a
popf
jp 0x104f31e
lea ebx, [ebx + 0x1d83]
lea ebx, [ebx - 0x1d83]
jle 0x104f32d
xor eax, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.01036c45
add esp, 4
shl ecx, 0
jae 0x104f33e
jb 0x104f363
pushf
jbe 0x104f344
xor esi, 0
std
cld
jp 0x104f34b
popf
lea esp, [esp]
lea edx, [edx + 0x7eba]
lea edx, [edx - 0x7eba]
xchg ebx, ecx
xchg ebx, ecx
jae 0x104f363
mov ebx, 0x6a0e6a
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.010399d6
add esp, 0xc
cmp ebx, 0x4f75
jo 0x104f384
mov edi, edi
jnp 0x104f37f
jg 0x104f381
jno 0x104f384
call 0x49e9394e
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
lea eax, [eax + 0xac1]
lea eax, [eax - 0xac1]
xchg edi, edx
xchg edi, edx
js 0x104f3e5
pushf
or ebx, 0
xor ebx, dword [esp]
xor ebx, dword [esp]
sub esp, 0
or edx, edx
popf
jns 0x104f3e2
jns 0x104f3e5
mov eax, 0x80e44d8a
jmp 0xe5527bef
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
ror eax, 0
mov edi, edi
jo 0x104f463
jbe 0x104f45f
jno 0x104f463
mov esp, 0x303d834e
xchg esp, eax
add al, byte [ecx]
add byte [esi + ebp - 8], dh
cmp dword [0x1029430], 0
je 0x104f49a
clc
jb 0x104f488
pushf
rol esp, 0
nop
xor eax, 0x35d0
xor eax, 0x35d0
popf
mov esp, esp
lea edx, [edx]
jae 0x104f488
mov ecx, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x1029430]
push eax
call fcn.0103a999
mov dword [ebp - 0xc], eax
xor edi, 0
xor edx, 0x21a3
xor edx, 0x21a3
shl ecx, 0
lea edi, [edi + 0x11f1]
lea edi, [edi - 0x11f1]
jnp 0x104f4bf
jp 0x104f4bc
jp 0x104f4bf
xor eax, 0x6a0e6a
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.010399d6
add esp, 0xc
and edi, edi
jo 0x104f4d3
test ebx, 0x3ff1
je 0x104f4ed
pushf
mov ebx, ebx
and esp, 0xffffffff
popf
jo 0x104f4e6
lea edx, [edx]
jno 0x104f4ea
jne 0x104f4ed
mov esi, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x104f50d
jns 0x104f4f5
jo 0x104f501
jo 0x104f4f9
nop
jno 0x104f4fc
jno 0x104f501
add eax, 0x558bde32
hlt
mov edx, dword [ebp - 0xc]
push edx
call fcn.01036c45
add esp, 4
mov ebx, ebx
mov edx, edx
jp 0x104f51a
xchg ebx, eax
xchg ebx, eax
mov esp, esp
jnp 0x104f51a
add eax, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4