Function at 0x491c3e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov dword [ebp - 8], 0
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.0048e238
add esp, 0xc
cmp edi, esi
lea ebx, [ebx]
jnp 0x491c64
jl 0x491c6f
mov esp, esp
jb 0x491c6a
jge 0x491c6f
sub eax, 0x45c6f2c2
fadd qword [esi + eax*8 + 0x45]
loope 0x491cdd
mov byte [ebp - 0x24], 0x44
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x69
mov byte [ebp - 0x15], 0x33
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x1e], 0x55
mov byte [ebp - 0x19], 0x66
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x69
mov byte [ebp - 0x22], 0x66
mov byte [ebp - 0x1d], 0x70
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xe], 0x70
nop
ja 0x491cae
jns 0x491cbf
pushf
rol esp, 0
jno 0x491cb7
popf
jg 0x491cbb
nop
js 0x491cbf
add eax, 0x62df45c6
mov byte [ebp - 0x21], 0x62
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x20], 0x75
mov byte [ebp - 0x1b], 0x6d
mov byte [ebp - 0x16], 0x34
mov byte [ebp - 0x11], 0x71
mov byte [ebp - 0xc], 0
mov cl, byte [ebp - 0x24]
sub cl, 1
mov byte [ebp - 0x24], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x23]
sub al, 1
mov byte [ebp - 0x23], al
mov cl, byte [ebp - 0x1e]
sub cl, 1
mov byte [ebp - 0x1e], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x22]
sub dl, 1
mov byte [ebp - 0x22], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
jno 0x491d6b
ljmp 0xc671:0xef45c634
rol esi, 1
ror esi, 1
sub esp, 0
jnp 0x491d7f
pushf
jb 0x491d78
popf
xchg esi, esi
jp 0x491d7f
lcall 0x1e9, 0x80df4d8a
mov cl, byte [ebp - 0x21]
sub cl, 1
mov byte [ebp - 0x21], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
lea esp, [esp]
je 0x491de9
pushf
call 0x491dd9
lea esp, [esp + 4]
popf
lea esp, [esp]
jbe 0x491de4
jg 0x491de6
jne 0x491de9
xor eax, 0xfed226e8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 8], dh
call fcn.0047f014
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x491dff
or eax, 0xffffffff
jmp 0x491e8a
xchg ecx, eax
xchg ecx, eax
call 0x491e06
lea esp, [esp + 4]
jo 0x491e0c
clc
jae 0x491e1d
pushf
xchg edx, edx
sub edi, 0
popf
lea esi, [esi]
jb 0x491e1d
mov edi, 0x51dc4d8d
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.0047f2e9
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x491e38
or eax, 0xffffffff
jmp 0x491e8a
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.0048e238
add esp, 0xc
jb 0x491e4a
jns 0x491e58
jle 0x491e4e
lea edx, [edx]
lea ecx, [ecx]
jnp 0x491e54
js 0x491e58
mov ebx, 0xfc4d8be1
mov ecx, dword [ebp - 4]
push ecx
call fcn.00478641
add esp, 4
cmp ecx, dword [esp]
not edx
not edx
neg edi
neg edi
and edx, edx
jne 0x491e7f
lea esp, [esp]
jmp 0x491e78
mov eax, eax
jg 0x491e7c
je 0x491e7f
add eax, 0x520c558b
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8