Function at 0x493215
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
jmp 0x492d9e
pop eax
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x500], ecx
jmp 0x492dbc
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edx
push edx
add esp, 4
sub edx, 0x1818e
sub edx, 0x12ff2
or edx, 0x368d
pop edx
push ecx
add ecx, 0x18336
sub ecx, 0xdc0
sub ecx, 0x13479
xor ecx, 0x2711
pop ecx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x492e36
push esi
push eax
add esp, 4
and esi, 0x55fd
pop esi
push ebx
and ebx, 0x16ca7
call 0x492e21
add byte [edi + 0x39464f4e], dh
push eax
cmp al, byte [ebx - 0x3c7efb3c]
jl 0x492e29
add byte [ecx + 0x8710f3], al
add byte [ebx - 0x17], bl
add al, byte cs:[eax]
add bh, al
test dword [ebx + esi*8 - 1], edi
inc dword [edi]
add byte [eax], al
add byte [ebx - 0x4ff73], cl
dec dword [ecx - 0xacf73]
call dword [esi - 0x7f]
into
wait
or al, 0
add byte [ecx + 0x1342cf6], al
add al, ch
or byte [eax], al
add byte [eax], al
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push esi
or esi, 0xc9b
xor esi, 0x1342c
call 0x492e66
add byte [ecx], bh
dec eax
push eax
push eax
inc edx
aaa
inc ebp
add esp, 4
and esi, 0xde69
pop esi
push esi
or esi, 0xb69b
or esi, 0x891c
pop esi
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x492ee5
push ecx
or ecx, 0x16ae9
pop ecx
push ecx
push ecx
add esp, 4
sub ecx, 0xe707
call 0x492ec4
add byte [esi], dh
xor eax, 0x34503835
dec edi
dec edi
xor al, 0x83
les eax, [ecx + eax*4]
loope 0x492e4c
sub eax, 0xe1810000
mov al, 0x4c
add byte [eax], al
pop ecx
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x493016
cmp dword [ebp - 0xc84], 0
jle 0x49300a
push ecx
and ecx, 0x5a0f
jmp 0x492f00
pop ecx
push ecx
push esi
add esp, 4
xor ecx, 0x1162d
jmp 0x492f12
and ecx, 0x1825e
pop ecx
push edi
jmp 0x492f23
pop edi
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x492fa6
push eax
or eax, 0xf444
and eax, 0x117ee
and eax, 0xd914
pop eax
push esi
sub esi, 0x2271
and esi, 0xfce7
jmp 0x492f63
pop esi
push ebx
and ebx, 0x16173
pop ebx
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x492f8e
mov dword [ebp - 0x15d0], 1
jmp 0x492f98
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x49300a
push edx
jmp 0x492faf
xor edx, 0x169a3
call 0x492fc1
add byte [edx], bh
cmp al, byte [eax + 0x45]
dec eax
xor al, 0x83
les eax, [edx + ebx*2]
push ebx
push ebx
add esp, 4
add ebx, 0x14a5f
jmp 0x492fd7
pop ebx
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x492ee5
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x49305f
push edi
push ebx
add esp, 4
and edi, 0x287
jmp 0x493033
pop edi
push edi
call 0x493045
add byte [ecx + 0x33], al
dec esi
dec esp
inc esi
inc ebx
cmp byte [ebx], dh
dec ebp
dec esi
add esp, 4
pop edi
push edi
sub edi, 0x969f
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x4930a0
jmp 0x492dad
push ecx
push ecx
add esp, 4
call 0x4930b3
add byte [esi], dh
inc esi
cmp al, byte [esi + 0x48]
inc edi
dec ecx
add esp, 4
sub ecx, 0x3859
pop ecx
push ecx
push eax
add esp, 4
call 0x4930ce
add byte [edx + 0x42], al
inc ebx
cmp bh, byte [ebx]
dec edi
add esp, 4
pop ecx
push ebx
push edx
add esp, 4
xor ebx, 0xdf87
jmp 0x4930e5
add ebx, 0x3ed4
pop ebx
push ecx
push edx
add esp, 4
xor ecx, 0x12957
or ecx, 0x723f
jmp 0x493103
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push edi
jmp 0x493123
and edi, 0x14e8b
and edi, 0x16499
jmp 0x493136
pop edi
push esi
push ebx
add esp, 4
add esi, 0x11ef3
pop esi
push ecx
sub ecx, 0x1635a
pop ecx
mov dword [ebp - 0x20d8], 0xffffffff
push edx
and edx, 0x176d
pop edx
push edx
call 0x49316b
add byte [eax], bh
inc esi
dec ecx
inc ebx
cmp edi, dword [eax]
dec esp
add esp, 4
and edx, 0x2b4
pop edx
push edx
push edx
add esp, 4
xor edx, 0x1582d
sub edx, 0xc430
pop edx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x4931a4
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push ebx
push eax
add esp, 4
xor ebx, 0x830b
xor ebx, 0x7e07
pop ebx
push ecx
push edi
add esp, 4
jmp 0x4931c3
add ecx, 0x2a2
sub ecx, 0x3eea
xor ecx, 0x8fd8
pop ecx
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x49321e
push edi
push esi
add esp, 4
add edi, 0x40ba
or edi, 0xbf73
and edi, 0x15b85
xor edi, 0xc06f
pop edi
push ebx
call 0x493215
add byte [ebx + 0x33], al
inc esp
cmp eax, dword [esi + 0x4b]
dec ebx
dec esi
add esp, 4
pop ebx
jmp 0x49344c
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push ecx
add ecx, 0x160b3
sub ecx, 0xcddf
sub ecx, 0x1448e
sub ecx, 0xa5ef
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xf259
and esi, 0xb418
and esi, 0xb182
pop esi
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x4932cd
push ebx
push edx
add esp, 4
add ebx, 0x92ab
add ebx, 0x14f3c
add ebx, 0x12ce9
pop ebx
push eax
sub eax, 0xc219
sub eax, 0xfac6
and eax, 0x76cf
add eax, 0xd521
pop eax
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x4933fe
cmp dword [ebp - 0xc8c], 0
jle 0x4933f2
push esi
and esi, 0x15027
pop esi
push ebx
push edx
add esp, 4
jmp 0x4932ee
add ebx, 0xa1e5
pop ebx
push ebx
push eax
add esp, 4
call 0x493308
add byte [edx + edi], bh
inc esi
inc edi
aaa
inc edi
inc ebx
inc edi
add esp, 4
pop ebx
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x49338e
push edx
push edi
add esp, 4
xor edx, 0x6f88
and edx, 0x1349d
sub edx, 0x9f33
pop edx
push edi
push edi
add esp, 4
sub edi, 0x1848b
and edi, 0x14ec4
pop edi
push esi
xor esi, 0x8e67
pop esi
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x493376
mov dword [ebp - 0x15dc], 1
jmp 0x493380
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x4933f2
push ecx
push eax
add esp, 4
and ecx, 0x12de7
and ecx, 0x73d7
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0x110cf
pop ebx
push edi
or edi, 0x16180
sub edi, 0x1407c
add edi, 0x17195
pop edi
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x4932cd
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x493447
push edx
push edi
add esp, 4
and edx, 0x7502
add edx, 0x34e6
sub edx, 0xf61b
pop edx
push ecx
jmp 0x493195
push ecx
add ecx, 0x4c2f
sub ecx, 0x14541
jmp 0x49345e
pop ecx
push ebx
and ebx, 0xf7a0
pop ebx
push eax
push edi
add esp, 4
sub eax, 0x512c
sub eax, 0xcda8
jmp 0x49347d
pop eax
mov dword [ebp - 0xac4], 0