Function at 0x49178f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004a5bec
add esp, 0xc
cmp eax, dword [esp]
mov esp, esp
sub esp, 0
test esp, 0xa75
jnp 0x4917c9
pushf
xchg edx, eax
xchg edx, eax
lea eax, [eax]
jge 0x4917c0
mov edx, edx
popf
jg 0x4917c6
jp 0x4917c9
mov ebp, 0x48ec45c6
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xa], 0x55
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6e
mov byte [ebp - 0x11], 0x51
mov byte [ebp - 0xc], 0x74
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x10], 0x73
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 6], 0x74
mov byte [ebp - 5], 0
std
cld
jnp 0x49180d
jle 0x49181c
pushf
test eax, ecx
popf
lea ebx, [ebx]
jo 0x491819
jg 0x49181c
mov ebx, 0x80ec4d8a
jmp 0xec96a026
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
call fcn.0048fa55
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4918b3
xor eax, eax
jmp 0x49196a
ja 0x4918b5
ror esp, 0
je 0x4918c7
lea edi, [edi]
je 0x4918be
jge 0x4918c0
xchg ecx, ebx
xchg ecx, ebx
jne 0x4918c7
call 0x52356658
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004b7254
mov dword [ebp - 0x18], eax
or esp, 0
jp 0x4918f3
pushf
jo 0x4918e0
lea edx, [edx + 0x73bc]
sub edx, 0x73bc
popf
xchg esp, esp
jnp 0x4918f3
add eax, 0x6a106a
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004a5bec
add esp, 0xc
mov esi, esi
jno 0x491907
jp 0x491909
je 0x491912
nop
jg 0x49190e
jne 0x491912
call 0xe8c69cc8
add byte [ebp + 4], dh
cmp dword [ebp - 0x18], 0
jne 0x49191c
xor eax, eax
jmp 0x49196a
jb 0x49191e
sub edi, 0
jbe 0x491923
jb 0x491930
jne 0x491927
jno 0x491929
jno 0x49192b
jae 0x491930
call 0x4dd4ad6a
call 0x20bf0188
add byte [eax], al
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.004939ae
add esp, 4
jns 0x49193e
cmc
rol eax, 4
ror eax, 4
jbe 0x491953
pushf
cld
popf
xchg edx, edx
jle 0x491950
ja 0x491953
lcall 0x458b, 0x5218558b
adc al, 0x50
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14