Function at 0x1004d72e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x12
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.1002fb2f
add esp, 0xc
xor ecx, dword [esp]
xor ecx, dword [esp]
xor eax, 0x344c
xor eax, 0x344c
test dword [esp], esi
jp 0x1004d76f
lea esi, [esi + 0x7772]
lea esi, [esi - 0x7772]
jg 0x1004d76a
jge 0x1004d76c
jnp 0x1004d76f
xor eax, 0x48e845c6
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x51
mov byte [ebp - 9], 0x74
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x73
mov byte [ebp - 8], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 7], 0
mov byte [ebp - 0x15], 0x44
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0x14], 0x76
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xa], 0x66
xor esp, 0
jns 0x1004d7cf
pushf
test esp, 0x137e
cmp ecx, dword [esp + 0x10]
popf
jg 0x1004d7cc
js 0x1004d7cf
mov ebx, 0x80e84d8a
jmp 0xf8525fd9
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
call fcn.1002ab9c
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1004d878
xor eax, eax
jmp 0x1004d937
lea ecx, [ecx]
test ecx, esi
inc eax
dec eax
and esp, 0xffffffff
jo 0x1004d895
pushf
je 0x1004d887
xor ebx, 0
popf
jmp 0x1004d88e
jle 0x1004d890
ja 0x1004d892
jno 0x1004d895
call 0x60ed1e26
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.1004edc3
mov dword [ebp - 0x1c], eax
push 0x12
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.1002fb2f
add esp, 0xc
cmp ebx, dword [esp]
or edx, 0
and edx, edx
jp 0x1004d8d3
pushf
ror esp, 0
rol ecx, 3
rol ecx, 0x1d
popf
jp 0x1004d8ce
mov ecx, ecx
jnp 0x1004d8d3
mov edx, 0xe47d83
cmp dword [ebp - 0x1c], 0
jne 0x1004d8dd
xor eax, eax
jmp 0x1004d937
je 0x1004d8df
test esp, 0x6400
sub ecx, 0
jle 0x1004d902
pushf
call 0x1004d8f1
lea esp, [esp + 4]
rol esi, 0xc
ror esi, 0xc
popf
jo 0x1004d8ff
jg 0x1004d902
mov ebp, 0x50e4458b
mov eax, dword [ebp - 0x1c]
push eax
call fcn.100389b2
add esp, 4
nop
lea eax, [eax + 0x7598]
lea eax, [eax - 0x7598]
cmp ecx, eax
jl 0x1004d934
xchg ebx, ebx
mov edx, edx
jo 0x1004d925
lea edx, [edx + 0x420c]
lea edx, [edx - 0x420c]
jge 0x1004d934
add eax, 0x5fe455ff
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret