Function at 0x4a0b91
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x49b55c], 1
je 0x4a0bcd
xor eax, dword [esp]
xor eax, dword [esp]
or esi, 0
jns 0x4a0bae
jnp 0x4a0bc3
pushf
xchg esi, esi
popf
lea ecx, [ecx + 0x57]
lea ecx, [ecx - 0x57]
jp 0x4a0bbe
lea ecx, [ecx]
jp 0x4a0bc3
lcall 0x8900, 0x49b55ca1
inc ebp
cld
mov eax, dword [0x49b55c]
mov dword [ebp - 4], eax
jmp 0x4a0be4
test eax, ecx
jne 0x4a0bdd
lea esi, [esi]
jl 0x4a0bd5
jle 0x4a0bd7
jg 0x4a0bd9
je 0x4a0bdd
adc dword [edx], 0x1de9c033
add al, byte [eax]
add byte [ebx], dh
sbb al, 0x24
xor eax, eax
jmp 0x4a0e01
xor ebx, dword [esp]
xor ebx, dword [esp]
and esp, 0xffffffff
jg 0x4a0bef
jne 0x4a0c0c
pushf
xor edx, 0x7925
xor edx, 0x7925
popf
jg 0x4a0c03
xchg esi, ecx
xchg esi, ecx
jl 0x4a0c09
je 0x4a0c0c
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004ba301
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004a51c9
add esp, 0xc
stc
jge 0x4a0c2b
jg 0x4a0c2d
jne 0x4a0c34
jnp 0x4a0c31
je 0x4a0c34
mov ebx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
or esp, 0
xchg edx, eax
xchg edx, eax
jb 0x4a0c80
pushf
test edx, 0x242c
je 0x4a0c79
popf
lea edi, [edi]
jae 0x4a0c80
mov edx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
sub edi, 0
ror esi, 0
rol edi, 0x1a
ror edi, 0x1a
nop
jge 0x4a0d0d
pushf
shl esp, 0
ror esp, 0
clc
rol ebx, 1
ror ebx, 1
popf
jae 0x4a0d08
jl 0x4a0d0a
jl 0x4a0d0d
jmp 0xb9b24a94
cmp dword [0x49b968], 0
je 0x4a0d40
sub eax, 0
xor edx, 0
std
cld
jae 0x4a0d2d
pushf
jns 0x4a0d24
popf
lea edi, [edi]
jb 0x4a0d2a
jb 0x4a0d2d
or dword [ebp - 0x74af17bb], 0x49b9680d
add byte [ecx - 0x18], dl
and edi, dword [edi + 0x45890001]
clc
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x49b968]
push ecx
call fcn.004bcc60
mov dword [ebp - 8], eax
test ebx, eax
test dword [esp + 0xc], ecx
mov edi, edi
xor edi, edx
xor edi, edx
jb 0x4a0d76
pushf
test dword [esp], esi
jae 0x4a0d55
xor edi, 0x40c4
xor edi, 0x40c4
jae 0x4a0d63
popf
lea ecx, [ecx + 0x443e]
lea ecx, [ecx - 0x443e]
jae 0x4a0d73
jae 0x4a0d76
sub dword [edx + 0xd], 0x558d006a
call 0x4490f5d3
add byte [eax], al
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004a51c9
add esp, 0xc
clc
rol edx, 0x12
rol edx, 0xe
jne 0x4a0d8f
js 0x4a0d91
jle 0x4a0daa
pushf
xor eax, dword [esp]
xor eax, dword [esp]
rol esi, 0x13
rol esi, 0xd
popf
jnp 0x4a0da5
xchg esi, eax
xchg esi, eax
jg 0x4a0daa
jmp 0x1428b31
cmp dword [ebp - 8], 0
je 0x4a0de6
stc
dec ebx
inc ebx
jg 0x4a0dda
pushf
cmp esp, 0x4e37
lea ecx, [ecx + 0xccf]
lea ecx, [ecx - 0xccf]
rol esi, 5
ror esi, 5
neg eax
neg eax
popf
xchg edx, edx
jle 0x4a0dda
lcall 0x1ee8, 0x50f8458b
xchg ebp, eax
add dword [eax], eax
mov eax, dword [ebp - 8]
push eax
call fcn.004ba301
add esp, 4
xor ebx, 0
call 0x4a0dee
lea esp, [esp + 4]
jno 0x4a0dfa
jne 0x4a0df6
jo 0x4a0dfa
jmp 0x89799a1
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4