Function at 0x491d70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x466a70], 1
je 0x491db0
and esi, 0xffffffff
jle 0x491d87
xchg ecx, ecx
cmp edx, dword [esp]
je 0x491da6
lea ecx, [ecx]
jb 0x491d92
lea edi, [edi + 0x7f83]
lea edi, [edi - 0x7f83]
xchg esi, edi
xchg esi, edi
jne 0x491da6
cmp dword [edi], 0x466a70a1
add byte [ecx + 0x20ebfc45], cl
mov eax, dword [0x466a70]
mov dword [ebp - 4], eax
jmp 0x491dd0
inc edi
dec edi
sub edi, 0
or eax, 0
je 0x491dc9
pushf
jg 0x491dbe
popf
jb 0x491dc2
jns 0x491dc4
mov edx, edx
jne 0x491dc9
mov edx, 0x3e9c033
add al, byte [eax]
add byte [ebx + 0x548500c6], al
and al, 8
xor eax, eax
jmp 0x491fd3
add esi, 0
test dword [esp + 8], edx
ror edx, 0
jle 0x491de4
jmp 0x491dde
ja 0x491de0
jg 0x491de4
mov ebp, 0xfc4d8bcb
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049b8ce
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00491fdc
add esp, 0xc
rol edx, 0xf
rol edx, 0x11
or esp, 0
cmp edi, 0x3424
call 0x491e14
add esp, 4
jl 0x491e23
xchg edx, eax
xchg edx, eax
js 0x491e1d
lea eax, [eax]
jge 0x491e23
xor eax, 0xe845c6fe
dec ebp
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
push ecx
pop ecx
std
cld
jb 0x491e5d
je 0x491e6c
jae 0x491e61
ja 0x491e63
xchg esi, ecx
xchg esi, ecx
jne 0x491e6c
mov ebp, 0x458adc23
call 0x45d11f9f
call 0x81366c02
jmp 0xed96a67e
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
rol ebx, 0
xor edi, dword [esp + 8]
xor edi, dword [esp + 8]
jg 0x491ee8
nop
jbe 0x491ee4
jle 0x491ee8
sub eax, 0x3d8346
push 0x74000046
sub al, 0x73
add byte [ebx], ah
invalid
cmp dword [0x466800], 0
je 0x491f1d
jae 0x491ef3
and edi, edi
jns 0x491ef7
cld
je 0x491f0a
pushf
lea esp, [esp]
cld
popf
lea esp, [esp]
jbe 0x491f07
jne 0x491f0a
call 0x5131649b
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x466800]
push ecx
call fcn.00492398
mov dword [ebp - 8], eax
test dword [esp + 8], edx
and esp, 0xffffffff
jne 0x491f26
add esi, 0
jge 0x491f55
pushf
lea esi, [esi + 0xaed]
lea esi, [esi - 0xaed]
call 0x491f3e
lea esp, [esp + 4]
ror edx, 8
ror edx, 0x18
jo 0x491f4a
popf
xchg ebx, ebx
jg 0x491f50
mov esp, esp
jl 0x491f55
add eax, 0x6a0d6a
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00491fdc
add esp, 0xc
test dword [esp], ecx
jbe 0x491f6a
and ecx, ecx
rol edx, 0
jl 0x491f77
jle 0x491f73
jge 0x491f77
mov esi, 0xf87d8385
add byte [ebx + esi - 0x57], dh
push esi
pop esi
add byte [eax], al
cmp dword [ebp - 8], 0
je 0x491fb0
test eax, 0x5e56
stc
test esp, 0x66b4
ror eax, 0x19
ror eax, 7
jle 0x491fa4
pushf
nop
lea edi, [edi]
add esp, 0
xor edx, ebx
xor edx, ebx
popf
ja 0x491fa1
jg 0x491fa4
ljmp 0x21e8:0x50f8458b
mov eax, dword [ebp - 8]
push eax
call fcn.0049b8ce
add esp, 4
sub esp, 0
jnp 0x491fb5
jge 0x491fcc
jb 0x491fb9
xchg ecx, ecx
jb 0x491fbd
lea ebx, [ebx + 0x5386]
lea ebx, [ebx - 0x5386]
jl 0x491fcc
mov ecx, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4