Function at 0x490380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
rol edi, 0
push edi
pop edi
jae 0x4902fd
jb 0x490307
ja 0x490301
jb 0x490303
jae 0x490307
mov ecx, 0x8458b3c
mov eax, dword [ebp + 8]
push eax
call fcn.00475ff0
add esp, 4
cmp eax, 2
jne 0x490361
cmp ecx, dword [esp + 4]
xor esi, 0
push edx
pop edx
cmp edi, dword [esp]
jg 0x49032b
jp 0x490328
jle 0x49032b
sub dword [eax - 0x14], 0xa30046e8
movsb byte es:[edi], byte [esi]
loop 0x49037a
push 0x46e8ec
mov dword [0x46e2a4], eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
add bh, bh
adc eax, sym.imp.KERNEL32.dll_OutputDebugStringA
xor edi, eax
xor edi, eax
shl esp, 0
jne 0x490344
jle 0x490357
lea eax, [eax + 0x6601]
lea eax, [eax - 0x6601]
jp 0x490354
jg 0x490357
call 0x490513
add byte [edi + 0x5e], bl
mov eax, 1
pop edi
pop esi
pop ebx
pop ebp
ret
std
cld
ja 0x490371
xchg ebx, esi
xchg ebx, esi
xchg ecx, ecx
xchg esp, esp
jbe 0x490371
cmp dword [ecx + 0x5f], 0x5bc0335e
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.0048eb40
add esp, 0xc
jmp 0x49039b
or ecx, ecx
ja 0x4903a8
xchg edx, ecx
xchg edx, ecx
jnp 0x4903a5
jbe 0x4903a8
add eax, 0x45c675b0
in eax, dx
mov byte [ebp - 0xd], al
mov al, 0x75
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xd], al
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0x10], al
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 9], 0x6f
mov byte [ebp - 8], 0x67
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 6], 0x42
mov byte [ebp - 0x12], al
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 5], 0
mov byte [ebp - 0xb], 0x71
mov byte [ebp - 0xa], 0x4a
mov byte [ebp - 7], 0x70
jle 0x4903e9
rol esi, 0
jbe 0x4903f3
mov esp, esp
ja 0x4903f3
mov edx, 0x8aec458a
pop ebp
int1
mov al, byte [ebp - 0x14]
mov bl, byte [ebp - 0xf]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0x12]
dec al
dec bl
mov byte [ebp - 0x14], al
mov al, byte [ebp - 8]
dec dl
mov byte [ebp - 0xf], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xe]
dec bl
mov byte [ebp - 8], al
mov al, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xd]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 7]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 6]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 7], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 6], bl
mov byte [ebp - 0xa], dl
cmp esi, dword [esp]
jle 0x490470
add esp, 0
dec edi
inc edi
jge 0x49047d
mov esp, esp
jl 0x49047d
lcall 0xfffe, 0x30cee8e5
call fcn.00473550
test eax, eax
je 0x49052c
not ebx
not ebx
or edx, edx
jg 0x490492
cmp edx, ebx
js 0x49049e
jg 0x490498
jbe 0x49049a
jns 0x49049e
mov edx, 0xec4d8dfd
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.00476d20
push 0x10
lea edx, [ebp - 0x14]
push 0
push edx
mov dword [ebp - 4], eax
call fcn.0048eb40
add esp, 0xc
rol esi, 0x17
rol esi, 9
rol edi, 0x12
ror edi, 0x12
or ecx, 0
jbe 0x4904dc
lea ebx, [ebx + 0x71a7]
lea ebx, [ebx - 0x71a7]
ja 0x4904dc
mov edx, 0xfc758bd1
mov esi, dword [ebp - 4]
test esi, esi
je 0x49052c
cmp edx, ebx
add eax, dword [esp]
sub eax, dword [esp]
add esp, 0
jnp 0x4904f9
jns 0x4904f2
jp 0x4904f4
jp 0x4904f9
add eax, 0xe8561df2
int1
std
invalid
push esi
call fcn.004902f0
add esp, 4
rol edi, 0
and esp, 0xffffffff
jl 0x490526
pushf
or ebx, 0
call 0x490514
add esp, 4
neg eax
neg eax
popf
jns 0x49051f
jp 0x490521
jae 0x490523
jge 0x490526
mov eax, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4