Function at 0x4aa220
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004a9150
add esp, 0xc
je 0x4aa23b
jnp 0x4aa25d
pushf
js 0x4aa241
xor ecx, 0x3864
xor ecx, 0x3864
je 0x4aa24f
xor esp, 0
popf
jo 0x4aa256
jmp 0x4aa258
xchg esi, esi
jp 0x4aa25d
sub eax, 0x45c666b0
call 0xed902ab6
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
shl esi, 0
jle 0x4aa2aa
lea ecx, [ecx]
js 0x4aa299
lea eax, [eax + 0x28b7]
lea eax, [eax - 0x28b7]
jl 0x4aa2a7
jg 0x4aa2aa
add eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
xor esp, 0
jne 0x4aa320
pushf
xchg esp, esp
jmp 0x4aa315
popf
nop
lea esp, [esp]
jno 0x4aa31d
je 0x4aa320
jmp 0x635f0c
call 0x4abbe0
test eax, eax
mov dword [ebp - 4], eax
jne 0x4aa335
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esp, 0x4fd6
add esi, 0
jae 0x4aa340
rol ecx, 0xd
rol ecx, 0x13
jne 0x4aa352
mov ebx, ebx
xchg esi, esi
jo 0x4aa34e
je 0x4aa352
mov edx, 0xe84d8d7f
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.0048d910
push 0xd
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.004a9150
add esp, 0xc
test esi, esi
jne 0x4aa380
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test esp, 0x161b
jp 0x4aa388
je 0x4aa38f
jbe 0x4aa38c
jne 0x4aa38f
mov eax, 0x3abe856
invalid
push esi
call fcn.0049a740
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004a9150
add esp, 0x10
clc
jnp 0x4aa3a8
jo 0x4aa3b4
lea ebx, [ebx]
jne 0x4aa3ae
jo 0x4aa3b0
jno 0x4aa3b4
ljmp 0xe845:0xc666b03b
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
or edx, 0
jge 0x4aa3ec
jle 0x4aa405
pushf
test eax, 0x699b
rol ebx, 0
xchg ebx, ebx
jbe 0x4aa3fc
popf
jbe 0x4aa400
jg 0x4aa402
jg 0x4aa405
mov edx, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 0x17]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x12]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
not eax
not eax
dec edi
inc edi
rol edi, 5
ror edi, 5
jp 0x4aa482
pushf
jg 0x4aa477
popf
lea ebx, [ebx]
xchg edi, ebx
xchg edi, ebx
jnp 0x4aa482
mov edx, 0xe4879191
xchg ecx, eax
xchg ecx, eax
xchg esp, esp
jp 0x4aa48d
xchg esp, esp
jnp 0x4aa48d
or dword [ebx + 0x4d8dfc55], 0xe85251e8
jbe 0x4aa4cc
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.0048d910
mov edi, eax
mov dword [ebp - 4], edi
xor edx, dword [esp + 8]
xor edx, dword [esp + 8]
add esp, 0
add esp, 0
xchg ebx, ebx
jne 0x4aa4ca
invalid
js 0x4aa4b3
xchg ebx, esi
xchg ebx, esi
lea ebx, [ebx + 0x6534]
lea ebx, [ebx - 0x6534]
lea esp, [esp]
je 0x4aa4ca
invalid
call 0x8d580fa3
inc ebp
call 0xe89aa53d
jns 0x4aa4c1
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004a9150
add esp, 0xc
and esp, 0xffffffff
jbe 0x4aa4f3
invalid
pushf
jb 0x4aa4e3
nop
neg esi
neg esi
popf
mov eax, eax
je 0x4aa4ee
jne 0x4aa4f0
ja 0x4aa4f3
call 0x3abfa47c
test edi, edi
je 0x4aa531
jge 0x4aa4f9
xchg edi, eax
xchg edi, eax
jl 0x4aa525
pushf
call 0x4aa504
add esp, 4
test dword [esp], ebx
jo 0x4aa50c
ja 0x4aa50e
popf
lea ecx, [ecx + 0x60af]
lea ecx, [ecx - 0x60af]
xchg esi, edx
xchg esi, edx
jbe 0x4aa522
jge 0x4aa525
mov eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049a740
add esp, 4
sub ecx, 0
or eax, eax
jns 0x4aa549
lea ecx, [ecx + 0x3125]
lea ecx, [ecx - 0x3125]
js 0x4aa549
or ebx, 0x10558b27
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
invalid