Function at 0x5048d3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
xor esp, 0
add esp, 0
not edx
not edx
jno 0x50490c
pushf
xor ecx, 0
not eax
not eax
cmp esp, 0x778d
push edx
add edx, 0x3337
ror edx, 2
pop edx
popf
nop
jl 0x504907
jl 0x504909
jo 0x50490c
mov edx, 0xa6743d83
dec esi
add byte [ecx], al
cmp dword [0x4ea674], 1
jne 0x504a53
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00512b9e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
rol esi, 0x10
rol esi, 0x10
ror esp, 0
mov esi, esi
jp 0x504974
pushf
shr esp, 0
popf
jp 0x50496f
jg 0x504971
jnp 0x504974
xor eax, 0x80f04d8a
jmp 0xf09dd17e
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
not edx
not edx
jne 0x5049e4
jge 0x5049dc
jg 0x5049de
jbe 0x5049e0
je 0x5049e4
mov ecx, 0x383d8322
test al, 0x4e
add byte [eax], al
cmp dword [0x4ea838], 0
jne 0x5049f5
or eax, 0xffffffff
jmp 0x504c29
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x4ea838]
push ecx
call fcn.004f3a1e
mov dword [ebp - 4], eax
ror esp, 0
jmp 0x504a0d
jp 0x504a29
pushf
and ecx, 0xffffffff
or esp, 0
and esp, 0xffffffff
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
popf
jae 0x504a26
jnp 0x504a29
jmp 0xba5697
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.00512b9e
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x504a49
mov eax, dword [ebp - 4]
mov dword [0x4ea674], eax
jmp 0x504a51
or eax, 0xffffffff
jmp 0x504c29
jmp 0x504a5c
mov ecx, dword [0x4ea674]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
jbe 0x504a64
jg 0x504a66
jg 0x504a68
jnp 0x504a87
pushf
xor edx, dword [esp]
xor edx, dword [esp]
je 0x504a74
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
push esi
pop esi
popf
xchg edx, edx
jg 0x504a84
jp 0x504a87
ljmp 0x6ee8:0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.0050bbfe
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00512b9e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jb 0x504ad5
test esi, ebx
cmc
ja 0x504ae3
mov ecx, ecx
xchg ecx, ecx
xchg esi, esi
jbe 0x504ae3
mov ebp, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
push edi
add edi, 0x3d02
ror edi, 0x1a
pop edi
lea eax, [eax]
jb 0x504b5e
pushf
cmp edx, dword [esp]
popf
jmp 0x504b5a
nop
jae 0x504b5e
mov edx, 0xa8383d83
dec esi
add byte [eax], al
cmp dword [0x4ea838], 0
je 0x504b95
shr esp, 0
je 0x504b6c
jo 0x504b82
lea edx, [edx + 0x398f]
lea edx, [edx - 0x398f]
jl 0x504b7c
mov esp, esp
jno 0x504b82
jmp 0xf09dd91e
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x4ea838]
push edx
call fcn.004f3a1e
mov dword [ebp - 4], eax
ror eax, 0x15
rol eax, 0x15
jnp 0x504b9d
nop
add edx, 0x4f9a
sub edx, 0x4f9a
je 0x504bb5
mov esp, esp
xchg ebx, ebx
js 0x504bb2
jne 0x504bb5
lcall 0x458d, 0x6a0c6a
invalid
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00512b9e
add esp, 0xc
test esp, 0x5d5a
jge 0x504bd8
jl 0x504bcf
jo 0x504bd1
jge 0x504bd3
jl 0x504bd8
add eax, 0x7d8383cc
cld
add byte [edx + ebx + 0x77], dh
add byte [eax], bh
cmp dword [ebp - 4], 0
je 0x504bf8
ja 0x504be0
js 0x504be2
cmp ecx, edi
jns 0x504bec
nop
xchg edi, eax
xchg edi, eax
js 0x504bec
mov ebp, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0050bbfe
add esp, 4
ror ebx, 0
cmp edi, ebx
jns 0x504c0a
jo 0x504c01
xchg esp, esp
jne 0x504c05
js 0x504c07
js 0x504c0a
mov ebp, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c