Function at 0x4a91f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
stc
or edx, 0
popf
lea edx, [edx]
xchg ebx, edx
xchg ebx, edx
js 0x4a90a6
call 0x4a90054b
add byte [ebx], dh
sar byte [ecx + 0x1e], cl
mov eax, dword [0x4a4574]
xor edx, edx
mov ecx, 0x1e
div ecx
sub dword [0x4a4578], edx
add esp, 0
nop
cld
jae 0x4a90c1
jle 0x4a90d8
pushf
jns 0x4a90c7
xor edx, dword [esp]
xor edx, dword [esp]
popf
mov esp, esp
xchg edi, edi
jb 0x4a90d5
jg 0x4a90d8
jmp 0x4a92417d
mov eax, dword [0x4a47b0]
mov ebx, dword [ebp + 8]
shl eax, 7
mov dword [0x4a47b0], eax
add esp, 0
xchg edi, eax
xchg edi, eax
add esi, 0
jp 0x4a90fe
pushf
cld
popf
mov edx, edx
jne 0x4a90fb
jnp 0x4a90fe
add eax, 0x1d3b81
add al, al
cmp dword [ebx], 0xc000001d
jne 0x4a91cc
push ecx
pop ecx
ja 0x4a913d
pushf
lea eax, [eax + 0x372e]
lea eax, [eax - 0x372e]
jge 0x4a911e
add ebx, 0x5682
sub ebx, 0x5682
push eax
add eax, 0x307c
ror eax, 0x10
pop eax
popf
jae 0x4a9138
js 0x4a913a
jbe 0x4a913d
mov eax, 0x8310458b
cmp byte [eax + 0x4000000], 0x87
fild dword [ebp - 0x47edbcc]
mov dl, 0x22
add byte [eax], al
mov eax, dword [ebp + 0x10]
add dword [eax + 0xb8], 4
xchg ebx, ebx
test dword [esp], esi
cmp ebx, 0x22b2
jge 0x4a9167
pushf
or ebx, 0
cmc
jp 0x4a915c
popf
jp 0x4a9160
mov edi, edi
jnp 0x4a9164
jl 0x4a9167
lcall 0x4a, 0x47a80583
dec edx
add dword [0x4a47a8], 0x4a
shr esp, 0
cmp esp, 0x6f8c
shr esi, 0
lea eax, [eax]
jle 0x4a918f
pushf
std
cld
shl esp, 0
dec edx
inc edx
popf
lea esp, [esp]
jg 0x4a918f
call 0x59caa71e
dec edx
add byte [ebx + 0x4a45780d], cl
add cl, al
ljmp 0x780d
mov edx, dword [0x4a5980]
mov ecx, dword [0x4a4578]
shr edx, 3
add ecx, edx
mov dword [0x4a4578], ecx
nop
stc
lea ecx, [ecx + 0x351c]
lea ecx, [ecx - 0x351c]
ror ebx, 0x1a
ror ebx, 6
jle 0x4a91c2
lea edi, [edi]
jg 0x4a91c2
mov ebx, 0xb02d8176
inc edi
dec edx
add byte [esi + 0x74000002], bl
add byte [ebx + 0x7790ffe4], al
or al, 0x8d
sbb esi, dword [ebx]
sub dword [0x4a47b0], 0x29e
je 0x4a91ce
and esp, 0xffffffff
nop
ja 0x4a91e0
lea ebx, [ebx]
jae 0x4a91d8
jg 0x4a91da
mov eax, eax
jbe 0x4a91e0
add eax, 0x335e5f53
rcr byte [ebx + 0x5d], 0xc3
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.004c8cd0
add esp, 0xc
call 0x4a920e
lea esp, [esp + 4]
test dword [esp + 0x10], eax
je 0x4a922c
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret
pushf
cmc
popf
lea ebx, [ebx + 0x6f36]
lea ebx, [ebx - 0x6f36]
jne 0x4a922c
mov ebx, 0x66b16eb0
mov al, 0x6e
mov cl, 0x66
mov byte [ebp - 0xf], al
mov byte [ebp - 0xe], al
mov al, 0x6f
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xa], 0x4d
mov byte [ebp - 5], 0
mov byte [ebp - 0x13], cl
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], al
mov byte [ebp - 0x11], 0x44
mov byte [ebp - 0xc], al
mov byte [ebp - 7], cl
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0xb], 0x65
mov byte [ebp - 6], 0x58
shl esp, 0
shl edi, 0
inc edx
dec edx
xor eax, 0x1c66
xor eax, 0x1c66
jle 0x4a9292
lea esi, [esi + 0x1021]
lea esi, [esi - 0x1021]
jmp 0x4a928e
jg 0x4a9292
mov esi, 0xec458a32
mov al, byte [ebp - 0x14]
mov bl, byte [ebp - 0xf]
mov dl, byte [ebp - 0xa]
mov cl, byte [ebp - 0x13]
dec al
dec bl
mov byte [ebp - 0x14], al
mov al, byte [ebp - 0xe]
dec dl
mov byte [ebp - 0xf], bl
mov bl, byte [ebp - 9]
mov byte [ebp - 0xa], dl
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 8]
dec dl
mov byte [ebp - 9], bl
mov bl, byte [ebp - 0x11]
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0xc]
dec cl
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 7]
dec bl
mov byte [ebp - 8], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xb]
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 6]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 7], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], bl
mov byte [ebp - 6], dl
rol edx, 0
ja 0x4a931b
jp 0x4a9311
jns 0x4a9313
jbe 0x4a9315
lea ebx, [ebx]
jbe 0x4a931b
mov eax, 0xc320e834
add dword [eax], eax
call fcn.004c5640
test eax, eax
jne 0x4a932b
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
jbe 0x4a932d
jle 0x4a9344
xchg esp, esp
mov ebx, ebx
lea esi, [esi + 0x6411]
lea esi, [esi - 0x6411]
jl 0x4a9341
jg 0x4a9344
xor eax, 0x51ec4d8d
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.004af430
mov dword [ebp - 4], eax
shr esi, 0
clc
ror ebx, 8
ror ebx, 0x18
jo 0x4a9377
pushf
xor ebx, ecx
xor ebx, ecx
and esi, esi
add ecx, dword [esp]
sub ecx, dword [esp]
add ecx, 0
popf
jbe 0x4a9372
ja 0x4a9374
jno 0x4a9377
ljmp 0x6aec:0x558d106a
push 0x10
lea edx, [ebp - 0x14]
push 0
push edx
call fcn.004c8cd0
add esp, 0xc
add esp, 0
cmp edi, 0x5ba2
test dword [esp + 0xc], ebx
xor edi, ecx
xor edi, ecx
jnp 0x4a93b1
pushf
jae 0x4a939e
js 0x4a93a0
dec eax
inc eax
ror ecx, 0x19
rol ecx, 0x19
popf
ja 0x4a93ac
ja 0x4a93ae
jp 0x4a93b1
ljmp 0x75c0:0x85fc458b
mov eax, dword [ebp - 4]
test eax, eax
jne 0x4a93bf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xchg ecx, esi
xchg ecx, esi
xchg edi, edi
jb 0x4a93d1
jae 0x4a93c9
jns 0x4a93cb
jge 0x4a93cd
jae 0x4a93d1
add eax, 0x69e85026
mov dh, 1
add cl, al
in al, 0
push eax
call fcn.004c4a40
shl esp, 0
rol ecx, 0xc
ror ecx, 0xc
test edi, 0x5eb1
jnp 0x4a93e8
jb 0x4a93ef
mov edx, edx
jae 0x4a93ef
mov ebp, 0x458d106a
in al, dx
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.004c8cd0
add esp, 0x10
ror ebx, 0
push edx
add edx, 0x116a
ror edx, 0x15
pop edx
lea edx, [edx + 0x435a]
lea edx, [edx - 0x435a]
jge 0x4a9422
lea eax, [eax]
jnp 0x4a941f
jl 0x4a9422
ljmp 0x4588:0x66b16eb0
mov al, 0x6e
mov cl, 0x66
mov byte [ebp - 0xf], al
mov byte [ebp - 0xe], al
mov al, 0x6f
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xa], 0x4d
mov byte [ebp - 5], 0
mov byte [ebp - 0x13], cl
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], al
mov byte [ebp - 0x11], 0x44
mov byte [ebp - 0xc], al
mov byte [ebp - 7], cl
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0xb], 0x65
mov byte [ebp - 6], 0x42
xor ebx, edi
xor ebx, edi
jp 0x4a9473
pushf
or esi, esi
popf
xchg esp, esp
jnp 0x4a9473
add eax, 0x8aec5d8a
push ebp
int1
mov bl, byte [ebp - 0x14]
mov dl, byte [ebp - 0xf]
mov cl, byte [ebp - 0xa]
mov al, byte [ebp - 0x13]
dec bl
dec dl
mov byte [ebp - 0x14], bl
mov bl, byte [ebp - 0xe]
dec cl
mov byte [ebp - 0xf], dl
mov dl, byte [ebp - 9]
mov byte [ebp - 0xa], cl
mov cl, byte [ebp - 0x12]
dec al
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 8]
dec cl
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0x11]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 7]
dec dl
mov byte [ebp - 8], bl
mov bl, byte [ebp - 0x10]
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xb]
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 6]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 7], al
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xb], dl
mov byte [ebp - 6], cl
neg ecx
neg ecx
push esi
add esi, 0x3406
ror esi, 2
pop esi
and ecx, 0xffffffff
jne 0x4a9522
pushf
xchg edi, edi
or esp, 0
add edx, 0
not ecx
not ecx
popf
lea edi, [edi + 0x14bb]
lea edi, [edi - 0x14bb]
js 0x4a951d
jmp 0x4a951f
je 0x4a9522
mov edi, 0x4a4548a1
add byte [ebp - 0x2d98b40], al
mov eax, dword [0x4a4548]
test eax, eax
je 0x4a9551
std
cld
rol esp, 0
jl 0x4a953d
jno 0x4a9534
jle 0x4a9536
mov esp, esp
jne 0x4a953a
jge 0x4a953d
jmp 0x4592aacc
mov edx, dword [0x4a4548]
lea ecx, [ebp - 0x14]
push ecx
push edx
call fcn.004af430
mov edi, eax
jmp 0x4a9554
mov edi, dword [ebp - 4]
ror ebx, 0
push ebx
add ebx, 0x2fa3
ror ebx, 0x14
pop ebx
jo 0x4a9580
pushf
sub esp, 0
dec esi
inc esi
jmp 0x4a956d
popf
lea esi, [esi + 0xd60]
lea esi, [esi - 0xd60]
jbe 0x4a957d
jno 0x4a9580
sub eax, 0x458d106a
in al, dx
push 0x10
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.004c8cd0
add esp, 0xc
shl esp, 0
or ebx, ebx
rol eax, 0xb
rol eax, 0x15
jge 0x4a959d
jge 0x4a95b5
jbe 0x4a95a1
jne 0x4a95a3
xchg ebx, ebx
lea ecx, [ecx + 0x62de]
lea ecx, [ecx - 0x62de]
jl 0x4a95b5
mov eax, 0x74ff8559
and dword [ecx + 0x49], eax
test edi, edi
je 0x4a95da
inc ecx
dec ecx
je 0x4a95d1
pushf
xor esi, ecx
xor esi, ecx
nop
jne 0x4a95c6
popf
xchg esp, esp
jno 0x4a95cc
xchg esp, esp
jne 0x4a95d1
mov ecx, 0xb469e857
add dword [eax], eax
push edi
call fcn.004c4a40
add esp, 4
xor ecx, 0
neg edx
neg edx
call 0x4a95e6
add esp, 4
push ecx
add ecx, 0x71a4
ror ecx, 0xa
pop ecx
jo 0x4a960e
pushf
cld
xchg ebx, ebx
cmp esp, 0x6ee
lea edi, [edi]
popf
xchg edx, eax
xchg edx, eax
jno 0x4a9609
jnp 0x4a960b
jno 0x4a960e
mov edx, 0x5ffc55ff
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret