Function at 0x4a3052
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0048801b
add esp, 0xc
stc
add esp, 0
jns 0x4a3071
cmp ecx, dword [esp + 8]
jl 0x4a308e
pushf
call 0x4a307e
lea esp, [esp + 4]
jbe 0x4a3084
rol ebx, 0
popf
lea edx, [edx]
jge 0x4a308e
lcall 0x45c6, 0x53e445c6
in eax, 0x66
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
mov byte [ebp - 0xf], 0
dec edx
inc edx
cmp ebx, 0x48d2
lea edi, [edi + 0x54ef]
lea edi, [edi - 0x54ef]
or eax, eax
je 0x4a30e6
lea eax, [eax]
lea esp, [esp]
jne 0x4a30e6
call 0x812e7e74
jmp 0xe497b8f0
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov esi, esi
jbe 0x4a315b
add edx, 0x79e3
sub edx, 0x79e3
push ebx
add ebx, 0xcc0
ror ebx, 0x1a
pop ebx
ja 0x4a3189
pushf
cmp edx, dword [esp + 0xc]
xchg ebx, edi
xchg ebx, edi
popf
jmp 0x4a3182
jne 0x4a3184
jno 0x4a3186
jbe 0x4a3189
mov ebp, 0xff66ace8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 0xa], dh
call 0x49983a
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a31a1
mov eax, 1
jmp 0x4a33e3
jge 0x4a31a3
rol ebx, 0x1f
rol ebx, 1
rol esp, 0
jns 0x4a31b9
pushf
and eax, 0xffffffff
popf
jg 0x4a31b6
js 0x4a31b9
call 0x532e874a
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00488963
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0048801b
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4a31e9
mov eax, 1
jmp 0x4a33e3
clc
xchg edi, edi
xchg esp, esp
jp 0x4a31fd
js 0x4a31f2
mov esp, esp
jmp 0x4a31f6
lea ebx, [ebx]
jnp 0x4a31fd
mov eax, 0x558b2c9a
cld
mov edx, dword [ebp - 4]
push edx
call fcn.00496b37
add esp, 4
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0048801b
add esp, 0xc
xor esp, 0
js 0x4a3229
jbe 0x4a3220
js 0x4a3222
jo 0x4a3224
jns 0x4a3229
mov ecx, 0x45c6f517
in al, 0x53
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xf], 0
jb 0x4a3263
jo 0x4a3265
jbe 0x4a3267
test esp, 0x4ab1
jb 0x4a327e
pushf
jnp 0x4a3273
add edi, 0
push edi
pop edi
popf
nop
jae 0x4a327e
ljmp 0x1e9:0x80e44d8a
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
clc
cmp esp, 0x31f3
inc eax
dec eax
shl esp, 0
ja 0x4a330f
pushf
and esp, 0xffffffff
jle 0x4a3304
cmp ecx, edi
popf
xchg esp, esp
je 0x4a330c
jbe 0x4a330f
call 0x142b096
cmp dword [ebp - 8], 0
je 0x4a333d
clc
jge 0x4a3318
nop
jo 0x4a332d
pushf
rol ebx, 0
xchg edi, eax
xchg edi, eax
popf
jg 0x4a3326
lea edi, [edi]
lea edi, [edi]
jno 0x4a332d
call 0x532e88be
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.00488963
mov dword [ebp - 0xc], eax
inc edx
dec edx
lea ecx, [ecx]
ror ebx, 0
std
cld
jl 0x4a3363
pushf
ror ebx, 0
push esi
add esi, 0x70d
ror esi, 0xb
pop esi
popf
xchg edi, eax
xchg edi, eax
xchg edi, eax
xchg edi, eax
jg 0x4a3360
jge 0x4a3363
jmp 0xb441d1
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0048801b
add esp, 0xc
lea ebx, [ebx + 0x3ab]
lea ebx, [ebx - 0x3ab]
xor ebx, 0
jge 0x4a3391
pushf
nop
xor esp, 0
popf
jge 0x4a338e
jl 0x4a3391
mov eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x4a33c0
push esi
pop esi
ja 0x4a33b4
pushf
jne 0x4a339f
test esp, 0x1e5f
jne 0x4a33a7
jns 0x4a33a9
popf
xchg esp, esp
jns 0x4a33af
js 0x4a33b1
jbe 0x4a33b4
mov edx, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.00496b37
add esp, 4
jae 0x4a33c2
jbe 0x4a33cc
je 0x4a33c6
jp 0x4a33c8
ja 0x4a33cc
jmp 0x188fbf15
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14