Function at 0x4a2288
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.0049baea
add esp, 0xc
xchg esi, esi
je 0x4a22a5
cmp esp, 0x6031
jae 0x4a22ad
ja 0x4a22c2
pushf
add edx, dword [esp]
sub edx, dword [esp]
dec ecx
inc ecx
popf
lea eax, [eax]
jl 0x4a22bf
jbe 0x4a22c2
mov ecx, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
lea esp, [esp]
push edx
add edx, 0x6650
ror edx, 0xa
pop edx
jge 0x4a2323
pushf
ror esi, 9
ror esi, 0x17
xor esi, 0x62fe
xor esi, 0x62fe
popf
jnp 0x4a231e
ja 0x4a2320
jl 0x4a2323
call 0x813270b1
jmp 0xe897ab2d
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
shr ecx, 0
lea edi, [edi + 0x7c5c]
lea edi, [edi - 0x7c5c]
xchg esp, esp
cmc
jae 0x4a23b3
pushf
cmp ecx, 0x5eb0
xor ecx, 0
popf
mov esp, esp
jge 0x4a23b0
jb 0x4a23b3
add eax, 0xad92e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.004ad14a
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a23c8
xor eax, eax
jmp 0x4a25e1
ror esp, 0
jb 0x4a23dd
pushf
shl edx, 0
popf
jne 0x4a23d6
jb 0x4a23d8
xchg edx, edx
jae 0x4a23dd
mov ebp, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004a7955
mov dword [ebp - 4], eax
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.0049baea
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4a240a
xor eax, eax
jmp 0x4a25e1
jns 0x4a240c
cmp edi, 0x3a06
jl 0x4a242a
lea eax, [eax + 0x2464]
lea eax, [eax - 0x2464]
jno 0x4a2422
jle 0x4a2424
jnp 0x4a2426
jge 0x4a242a
mov ebp, 0xfc4d8bb2
mov ecx, dword [ebp - 4]
push ecx
call fcn.0048e67b
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0049baea
add esp, 0xc
rol edi, 0
xchg esi, eax
xchg esi, eax
inc esi
dec esi
cmp ebx, ecx
je 0x4a246a
pushf
inc ecx
dec ecx
xchg edx, ebx
xchg edx, ebx
js 0x4a245b
xor edx, esi
xor edx, esi
popf
xchg ecx, ebx
xchg ecx, ebx
js 0x4a2467
jne 0x4a246a
lcall 0x45c6, 0x44e845c6
jmp 0x4a24d4
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
jge 0x4a24a0
rol ebx, 0x14
rol ebx, 0xc
add esp, 0
jg 0x4a24b4
jmp 0x4a24ad
lea esp, [esp]
jle 0x4a24b4
add eax, 0xe8458a0e
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
inc ebp
int1
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
cmp eax, dword [esp]
xor edi, esi
xor edi, esi
jl 0x4a2525
jp 0x4a252e
mov esp, esp
jl 0x4a252b
jnp 0x4a252e
mov ecx, 0x82b03d83
dec eax
add byte [eax], al
cmp dword [0x4882b0], 0
je 0x4a2556
test dword [esp], ecx
jge 0x4a2543
mov esp, esp
ja 0x4a2540
jl 0x4a2543
add eax, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x4882b0]
push ecx
call fcn.004a7955
mov dword [ebp - 0x1c], eax
inc edi
dec edi
cmp edx, ecx
jno 0x4a256b
lea edx, [edx + 0xedd]
lea edx, [edx - 0xedd]
jo 0x4a256b
lcall 0x558d, 0x6a0d6a
call 0x95bd0dc8
invalid
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0049baea
add esp, 0xc
xor eax, 0
test dword [esp], edi
jo 0x4a2588
jle 0x4a2585
jno 0x4a2588
mov esi, 0xe47d83
cmp dword [ebp - 0x1c], 0
je 0x4a25ae
or esp, 0
xchg ebx, ebx
sub esp, 0
jnp 0x4a25a2
jl 0x4a259a
jle 0x4a259c
jp 0x4a259e
jp 0x4a25a2
mov esi, 0xe4458b9f
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0048e67b
add esp, 4
mov esp, esp
ror esp, 0
xchg esi, eax
xchg esi, eax
shl esp, 0
jae 0x4a25d2
pushf
nop
ror esi, 5
rol esi, 5
lea esp, [esp]
add esp, 0
popf
jp 0x4a25cd
jle 0x4a25cf
jb 0x4a25d2
or dword [ebx - 0x74aeefb3], 0x8b520c55
inc ebp
or byte [eax - 1], dl
push ebp
cld
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc