Function at 0x4948b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
in eax, 0x5d
ret 4
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.004932f0
add esp, 0xc
shr esp, 0
shl esp, 0
xor edx, dword [esp + 0x10]
xor edx, dword [esp + 0x10]
je 0x4948df
js 0x4948db
jne 0x4948df
mov ebp, 0xb066b1b0
je 0x4948aa
mov cl, 0x66
mov al, 0x74
mov byte [ebp - 0x14], 0x48
inc ebp
in al, dx
dec eax
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xa], 0x55
mov byte [ebp - 0x13], cl
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], cl
mov byte [ebp - 8], 0x6e
mov byte [ebp - 0x11], 0x51
mov byte [ebp - 0xc], al
mov byte [ebp - 7], cl
mov byte [ebp - 0x10], 0x73
mov byte [ebp - 0xb], al
mov byte [ebp - 6], al
mov byte [ebp - 5], 0
test dword [esp], edi
lea ecx, [ecx + 0x4196]
lea ecx, [ecx - 0x4196]
rol ebx, 4
ror ebx, 4
add esi, 0x16be
sub esi, 0x16be
jl 0x49494b
jb 0x494942
mov edx, edx
xchg esp, esp
jge 0x49494b
mov edx, 0x458a84bd
in al, dx
mov al, byte [ebp - 0x14]
mov bl, byte [ebp - 0xf]
mov dl, byte [ebp - 0xa]
mov cl, byte [ebp - 0x13]
dec al
dec bl
mov byte [ebp - 0x14], al
mov al, byte [ebp - 0xe]
dec dl
mov byte [ebp - 0xf], bl
mov bl, byte [ebp - 9]
mov byte [ebp - 0xa], dl
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 8]
dec dl
mov byte [ebp - 9], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0xc]
dec cl
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 7]
dec bl
mov byte [ebp - 8], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xb]
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 6]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 7], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], bl
mov byte [ebp - 6], dl
call fcn.00491dc0
test eax, eax
jne 0x4949d5
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
push edi
add edi, 0x10b9
ror edi, 5
pop edi
ja 0x4949e2
jne 0x4949fc
pushf
test esp, 0x73bb
rol edx, 0x12
ror edx, 0x12
and edx, edx
popf
ja 0x4949f8
nop
je 0x4949fc
ljmp 0xe850:0x51ec4d8d
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.00491cd0
mov dword [ebp - 4], eax
xor esp, 0
jge 0x494a13
jl 0x494a10
jl 0x494a13
mov ebx, 0x558d106a
in al, dx
push 0x10
lea edx, [ebp - 0x14]
push 0
push edx
call fcn.004932f0
add esp, 0xc
jbe 0x494a25
ja 0x494a44
pushf
jno 0x494a2b
add edx, 0x310c
sub edx, 0x310c
lea ebx, [ebx]
popf
xchg esi, esi
xchg esi, esi
xchg edi, edi
jbe 0x494a44
call 0x8645bfd3
div byte [ebp + 0xb]
mov esi, dword [ebp - 4]
test esi, esi
jne 0x494a56
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
test eax, 0x69cd
call 0x494a60
lea esp, [esp + 4]
cmp edx, dword [esp]
jg 0x494a70
mov ebx, ebx
jle 0x494a6d
jle 0x494a70
mov eax, 0x63cae856
add dword [eax], eax
push esi
call fcn.004aae40
add esp, 4
cmp ebx, dword [esp]
test dword [esp + 8], eax
jbe 0x494a92
pushf
sub esp, 0
popf
js 0x494a8b
mov esp, esp
jg 0x494a8f
ja 0x494a92
add eax, 0x8b18458b
dec ebp
adc al, 0x8b
push ebp
adc byte [eax - 0x75], dl
inc ebp
or al, 0x51
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push ecx
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14