Function at 0x100498d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0xc
jae 0x100498eb
ror eax, 0x16
rol eax, 0x16
jg 0x100498f3
ror ebx, 0x12
rol ebx, 0x12
js 0x10049905
xchg ebx, ecx
xchg ebx, ecx
lea esp, [esp]
jns 0x10049905
mov ecx, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0xe], 0x6a
mov byte [ebp - 9], 0x6e
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xd], cl
mov byte [ebp - 7], 0x58
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x4f
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x47
mov byte [ebp - 0xa], 0x62
xchg esi, esi
xor esi, dword [esp]
xor esi, dword [esp]
jl 0x10049959
not ecx
not ecx
jne 0x10049964
jge 0x10049961
je 0x10049964
mov ebp, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 9]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x17]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], bl
mov bl, byte [ebp - 8]
dec dl
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 8], bl
mov bl, byte [ebp - 7]
dec dl
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 7], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov cl, byte [ebp - 0xa]
dec dl
dec cl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
rol esp, 0
jae 0x100499f9
clc
rol ecx, 9
rol ecx, 0x17
jb 0x10049a15
pushf
test ebx, ecx
nop
and esp, 0xffffffff
popf
jb 0x10049a0e
xchg esp, esp
jae 0x10049a12
jae 0x10049a15
call fcn.10380101
add byte [ebx + 0x75d285d0], cl
or dword [edi + 0x5e], ebx
call fcn.1004cd80
mov edx, eax
test edx, edx
jne 0x10049a29
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test dword [esp], edi
jbe 0x10049a3b
lea ecx, [ecx]
lea esp, [esp]
mov esi, esi
nop
ja 0x10049a3b
mov esi, 0x4d8d628b
call 0xbbecec93
test bh, bh
jmp [edx + 0x13]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.10041ef0
push 0x13
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 4], esi
call fcn.10048840
add esp, 0xc
mov ebx, ebx
jns 0x10049a6f
pushf
test eax, ecx
jne 0x10049a64
ja 0x10049a66
jg 0x10049a68
popf
mov ecx, ecx
js 0x10049a6f
sub eax, 0xb75f685
test esi, esi
jne 0x10049a7e
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea esp, [esp]
cmp esp, 0x2fc3
test ecx, ebx
test eax, esi
jg 0x10049a91
nop
jle 0x10049a91
adc dword [esi - 0x18], 0xffff0ad9
push esi
call fcn.1003a570
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0x10
sub eax, 0
call 0x10049aaf
add esp, 4
jp 0x10049ac1
pushf
push esi
pop esi
popf
jnp 0x10049abc
ja 0x10049abe
jnp 0x10049ac1
mov esp, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0xe], 0x6a
mov byte [ebp - 9], 0x6e
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xc], al
mov byte [ebp - 8], al
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xd], cl
mov byte [ebp - 7], 0x42
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x4f
mov byte [ebp - 6], 0
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x47
mov byte [ebp - 0xa], 0x62
lea eax, [eax]
ror eax, 0x12
ror eax, 0xe
ror edx, 0x18
ror edx, 8
jns 0x10049b21
jg 0x10049b1d
js 0x10049b21
adc dword [edi - 0x76], 0x4d8ae855
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 9]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x17]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], bl
mov bl, byte [ebp - 8]
dec dl
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 8], bl
mov bl, byte [ebp - 7]
dec dl
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 7], bl
mov bl, byte [ebp - 0x14]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov cl, byte [ebp - 0xa]
dec dl
dec cl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
and esi, 0xffffffff
test dword [esp], edi
lea ebx, [ebx + 0x5ab]
lea ebx, [ebx - 0x5ab]
jb 0x10049bdf
pushf
nop
jl 0x10049bca
popf
lea ecx, [ecx + 0x5147]
lea ecx, [ecx - 0x5147]
jbe 0x10049bda
jle 0x10049bdc
jae 0x10049bdf
mov ebx, 0x2a3f0a1
adc byte [ebp - 0x7ac28b40], al
iretd
mov eax, dword [0x1002a3f0]
test eax, eax
je 0x10049c25
test edi, ecx
shl eax, 0
lea edx, [edx + 0x5905]
lea edx, [edx - 0x5905]
jo 0x10049c11
pushf
cmp esp, 0x101e
mov esp, esp
add ecx, 0
popf
lea ebx, [ebx]
xchg edi, edi
jno 0x10049c11
add eax, 0xa3f0158b
add dl, byte [eax]
mov edx, dword [0x1002a3f0]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.10041ef0
mov esi, eax
jmp 0x10049c28
mov esi, dword [ebp + 0x10]
jg 0x10049c2a
jb 0x10049c2c
xor ebx, dword [esp + 0x10]
xor ebx, dword [esp + 0x10]
lea eax, [eax]
ja 0x10049c41
xchg edx, edi
xchg edx, edi
jbe 0x10049c41
mov esp, 0x136af842
push 0x13
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.10048840
add esp, 0xc
lea esp, [esp]
jl 0x10049c56
xor ecx, 0
test dword [esp], edi
jo 0x10049c67
lea edx, [edx]
mov esp, esp
js 0x10049c64
jno 0x10049c67
mov esp, 0x2e74f685
test esi, esi
je 0x10049c99
rol ecx, 0x17
rol ecx, 9
jne 0x10049c90
pushf
xor ecx, dword [esp]
xor ecx, dword [esp]
test esp, 0x6477
test esp, 0x61ae
popf
xchg edi, edx
xchg edi, edx
je 0x10049c90
mov esp, 0x8dae856
invalid
push esi
call fcn.1003a570
add esp, 4
or esi, 0
ror ebx, 0
xor ebx, 0
je 0x10049cad
jnp 0x10049ca6
xchg ecx, edx
xchg ecx, edx
jne 0x10049cad
mov esi, 0x8b104d8b
push ebp
or al, 0x8b
inc ebp
or byte [ecx + 0x52], dl
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc