Function at 0x491510
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
xor esi, dword [esp]
xor esi, dword [esp]
je 0x491465
pushf
ror ecx, 0
jae 0x491452
xor edx, dword [esp]
xor edx, dword [esp]
ja 0x49145a
popf
je 0x49145e
jbe 0x491460
mov esi, esi
jne 0x491465
lcall 0x53a, 0x8108558b
add byte [eax], al
sal byte [ebp + 0x7d], 0x78
add byte [eax + 0x19], bh
mov edx, dword [ebp + 8]
cmp dword [edx], 0xc0000005
jne 0x4914ed
js 0x491472
js 0x49148d
pushf
xor ebx, 0
nop
call 0x49147f
lea esp, [esp + 4]
popf
jno 0x491487
lea esp, [esp]
jns 0x49148d
mov ecx, 0xb8b78b
add byte [eax], al
mov esi, dword [edi + 0xb8]
add esi, 4
mov dword [edi + 0xb8], esi
mov edx, dword [0x48a09c]
dec edx
mov dword [0x48a09c], edx
jl 0x4914ab
jp 0x4914b8
pushf
push edi
pop edi
popf
jbe 0x4914b5
jnp 0x4914b8
mov ebx, 0x48a0cca1
add byte [ebx], dh
sar byte [ecx + 0x3e8], cl
mov eax, dword [0x48a0cc]
xor edx, edx
mov ecx, 0x3e8
div ecx
sub dword [0x48a0d0], edx
cmp ecx, dword [esp + 4]
jle 0x4914e6
pushf
jl 0x4914d6
jo 0x4914d8
ror esp, 0
popf
jl 0x4914df
jns 0x4914e1
jge 0x4914e3
jg 0x4914e6
mov edx, 0xa0a425c1
dec eax
add byte [ebx + esi], al
invalid
shl dword [0x48a0a4], 4
xor eax, edi
xor eax, edi
jge 0x4914fd
jns 0x4914f5
jae 0x4914f7
jns 0x4914f9
jl 0x4914fd
call 0x33a7742f
rcr byte [ebx + 0x5d], 0xc3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004932f0
add esp, 0xc
jne 0x49152b
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret
xor ecx, 0x6f7b
xor ecx, 0x6f7b
cld
jp 0x49155a
pushf
cmp edi, edx
push esi
add esi, 0x171
ror esi, 0x12
pop esi
popf
lea eax, [eax + 0xbec]
lea eax, [eax - 0xbec]
jnp 0x49155a
call 0x460f7c0e
call 0xed8edbab
jae 0x49152b
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
xor edx, dword [esp]
xor edx, dword [esp]
add edi, 0x2024
sub edi, 0x2024
jle 0x4915b1
lea eax, [eax]
jmp 0x4915aa
jnp 0x4915ac
ja 0x4915ae
jg 0x4915b1
mov eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xe], cl
jnp 0x49161b
nop
call 0x491621
lea esp, [esp + 4]
je 0x49162c
js 0x491629
jne 0x49162c
mov eax, 0x78fe8
add byte [ebx + 0x75c985c8], cl
or dword [edi + 0x5e], ebx
call fcn.00491dc0
mov ecx, eax
test ecx, ecx
jne 0x491640
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call 0x491645
add esp, 4
xor ebx, dword [esp + 0x10]
xor ebx, dword [esp + 0x10]
shl esp, 0
jbe 0x491665
pushf
xchg esi, esi
jb 0x49165b
add eax, 0
popf
xchg ebx, eax
xchg ebx, eax
ja 0x491665
mov eax, 0x52e8558d
lea edx, [ebp - 0x18]
push edx
push ecx
call fcn.00491cd0
mov edi, eax
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
mov dword [ebp - 8], edi
call fcn.004932f0
add esp, 0xc
xchg ecx, esi
xchg ecx, esi
jo 0x491696
jns 0x49168c
jg 0x49168e
xchg ebx, ebx
jae 0x491692
jno 0x491696
mov eax, 0x75ff8546
or esi, dword [ebx]
rcr byte [edi + 0x5e], 0x5b
test edi, edi
jne 0x4916a5
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
and edx, 0xffffffff
jg 0x4916aa
jae 0x4916b4
jg 0x4916ae
jp 0x4916b0
jb 0x4916b4
xor eax, 0x86e857dd
xchg edi, eax
add dword [eax], eax
push edi
call fcn.004aae40
add esp, 4
dec ebx
inc ebx
dec esi
inc esi
jle 0x4916dd
pushf
and esp, 0xffffffff
cmp edx, dword [esp]
test edi, 0x49b2
lea esp, [esp]
popf
mov ebx, ebx
mov esi, esi
jg 0x4916dd
mov ebx, 0x4d8d0e6a
call 0xe89a1750
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.004932f0
add esp, 0xc
test dword [esp + 0x10], eax
add byte [ecx - 0x18], dl
push es
sbb al, 0
add byte [ebx + 0x44850cc4], al
and al, 0x10
xchg edx, ebx
xchg edx, ebx
jo 0x4916f7
jnp 0x491712
pushf
cmp esp, 0x1130
jle 0x491703
cmp ebx, edx
mov esp, esp
popf
jne 0x49170b
jnp 0x49170d
xchg esp, esp
jp 0x491712
add eax, 0x45c666b0
call 0xed8edd63
jae 0x4916e3
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
shl edx, 0
jb 0x491758
jnp 0x491751
jle 0x491753
xchg edx, eax
xchg edx, eax
jae 0x491758
xor eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xe], cl
jb 0x4917c2
shr eax, 0
js 0x4917d3
pushf
jle 0x4917cb
cmc
popf
xchg esi, esi
jns 0x4917d3
mov esi, 0x488008a1
add byte [ebp - 0x3ed48b40], al
les eax, [eax]
mov eax, dword [0x488008]
test eax, eax
je 0x491807
rol esp, 0
jbe 0x4917f5
pushf
cmp ebx, dword [esp + 0xc]
shl eax, 0
popf
xchg edi, ecx
xchg edi, ecx
xchg esp, esp
ja 0x4917f5
add eax, 0x488008a1
add byte [ebp + 0x5052e855], cl
mov eax, dword [0x488008]
lea edx, [ebp - 0x18]
push edx
push eax
call fcn.00491cd0
mov dword [ebp - 4], eax
xchg ebx, ebx
js 0x491818
pushf
jns 0x49180f
popf
xchg edi, esi
xchg edi, esi
jns 0x491818
lcall 0x6ae8, 0x4d8d0e6a
add byte [ecx - 0x18], dl
retf
push 0xe
lea ecx, [ebp - 0x18]
push 0
push ecx
call fcn.004932f0
add esp, 0xc
test dword [esp], edi
call 0x491830
lea esp, [esp + 4]
dec edi
inc edi
lea esi, [esi]
jbe 0x49184b
pushf
sub esp, 0
sub esp, 0
jle 0x491844
popf
ja 0x491848
ja 0x49184b
add eax, 0x85fc4d8b
leave
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x491879
add edi, 0
shr eax, 0
jge 0x491870
pushf
cmp edi, dword [esp]
mov esp, esp
nop
test esp, 0x697e
popf
nop
je 0x49186d
jl 0x491870
add eax, 0x95cae851
add dword [eax], eax
push ecx
call fcn.004aae40
add esp, 4
test ecx, 0xe26
jb 0x49188e
pushf
std
cld
popf
xchg ebx, ebx
jl 0x49188b
jae 0x49188e
lcall 0x55ff, 0x5208558b
clc
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4