Function at 0x4a7180
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.004c8cd0
add esp, 0xc
jp 0x4a719b
cmp esi, dword [esp]
jno 0x4a71b5
js 0x4a71a2
jb 0x4a71a4
jae 0x4a71a6
lea eax, [eax + 0x4366]
lea eax, [eax - 0x4366]
jo 0x4a71b5
mov eax, 0x45c666b0
call 0xed903806
jae 0x4a7186
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x42
jae 0x4a71ef
xchg edx, ebx
xchg edx, ebx
ror edx, 0
lea esi, [esi]
jae 0x4a7208
pushf
or esp, 0
popf
mov ecx, ecx
mov ebx, ebx
jb 0x4a7208
call 0x8b32bf96
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xe], cl
clc
test dword [esp + 4], eax
lea edi, [edi + 0x65f5]
lea edi, [edi - 0x65f5]
jns 0x4a728e
lea edi, [edi]
jmp 0x4a7287
xchg edi, edi
mov esp, esp
js 0x4a728e
mov edx, 0x1e3ade8
add byte [ebx + 0x75c985c8], cl
or dword [edi + 0x5e], ebx
call fcn.004c5640
mov ecx, eax
test ecx, ecx
jne 0x4a72a2
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cld
sub esi, 0
or eax, 0
je 0x4a72ab
js 0x4a72be
pushf
stc
mov esi, esi
stc
shl esp, 0
popf
nop
jbe 0x4a72bb
jns 0x4a72be
call 0x5332c84f
lea edx, [ebp - 0x18]
push edx
push ecx
call fcn.004af430
mov esi, eax
push 0xe
lea eax, [ebp - 0x18]
push 0
push eax
mov dword [ebp - 8], esi
call fcn.004c8cd0
add esp, 0xc
jo 0x4a72df
add esp, 0
ja 0x4a730a
pushf
push ecx
add ecx, 0xcaf
ror ecx, 8
pop ecx
mov eax, eax
xchg edi, ebx
xchg edi, ebx
popf
jno 0x4a72fb
lea ecx, [ecx + 0x466d]
lea ecx, [ecx - 0x466d]
jbe 0x4a730a
mov esp, 0xb75f685
test esi, esi
jne 0x4a7319
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
rol esi, 0
jle 0x4a731e
jnp 0x4a7334
lea ebx, [ebx + 0x5c58]
lea ebx, [ebx - 0x5c58]
jae 0x4a732e
mov ecx, ecx
jp 0x4a7334
mov esi, 0xf84d8bec
mov ecx, dword [ebp - 8]
push ecx
call fcn.004c4a40
add esp, 4
cmp ebx, dword [esp]
ror eax, 0x17
rol eax, 0x17
jne 0x4a7359
pushf
jo 0x4a734f
cmc
popf
popfd
jae 0x4a7354
jp 0x4a7356
je 0x4a7359
mov ecx, 0x558d0e6a
call 0xe89c73cc
push 0x19
add al, byte [eax]
push 0xe
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.004c8cd0
add esp, 0xc
std
cld
ror ebx, 0
cmp ecx, esi
jp 0x4a7380
pushf
test dword [esp], esi
popf
lea edx, [edx]
jl 0x4a737d
jnp 0x4a7380
mov esi, 0x45c666b0
call 0xed9039d1
jae 0x4a7351
mov al, 0x66
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], 0x73
mov byte [ebp - 0xe], 0x46
inc ebp
inc esi
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], 0x6a
mov byte [ebp - 0x15], 0x57
mov byte [ebp - 0x10], 0x70
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x6f
mov byte [ebp - 0xb], 0
mov byte [ebp - 0xd], 0x79
mov byte [ebp - 0xc], 0x58
lea esi, [esi + 0x37e6]
lea esi, [esi - 0x37e6]
jne 0x4a73d7
pushf
shl esp, 0
ja 0x4a73cd
popf
jl 0x4a73d1
ja 0x4a73d3
nop
je 0x4a73d7
jmp 0x8b32c165
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x17]
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x15]
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x14]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xf]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xd]
dec cl
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0xe]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0xe], cl
jns 0x4a7441
ror esi, 0
je 0x4a7446
or esp, 0
js 0x4a745e
pushf
add eax, 0
jp 0x4a7452
popf
jmp 0x4a7456
nop
xchg esi, ebx
xchg esi, ebx
jns 0x4a745e
mov edx, 0x4a4548a1
add byte [ebp - 0x6fca8b40], al
mov eax, dword [0x4a4548]
test eax, eax
je 0x4a749c
nop
jge 0x4a7489
pushf
clc
cmp edi, edx
shl esp, 0
lea edi, [edi + 0x2712]
sub edi, 0x2712
popf
xchg ebx, ebx
mov ebx, ebx
jge 0x4a7486
jl 0x4a7489
mov esp, 0x45480d8b
dec edx
add byte [ebp + 0x5150e845], cl
mov ecx, dword [0x4a4548]
lea eax, [ebp - 0x18]
push eax
push ecx
call fcn.004af430
mov dword [ebp - 4], eax
xchg ecx, edx
xchg ecx, edx
add edi, 0
jns 0x4a74b8
pushf
shl esp, 0
mov esi, esi
jb 0x4a74ae
lea esp, [esp]
popf
je 0x4a74b5
js 0x4a74b8
xor eax, 0x558d0e6a
call 0xe89c752b
or ebx, dword [eax]
add al, byte [eax]
push 0xe
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.004c8cd0
add esp, 0xc
test eax, 0x132d
dec ecx
inc ecx
jge 0x4a74d9
jne 0x4a74d3
jno 0x4a74d5
jl 0x4a74d9
add eax, 0xfc458be6
mov eax, dword [ebp - 4]
test eax, eax
je 0x4a7507
rol ecx, 0x16
rol ecx, 0xa
xor ebx, ecx
xor ebx, ecx
js 0x4a74fe
pushf
xchg ebx, ebx
rol esi, 0
popf
mov ecx, ecx
jo 0x4a74f9
js 0x4a74fb
jns 0x4a74fe
adc dword [eax - 0x18], 0x1d53c
push eax
call fcn.004c4a40
add esp, 4
add ebx, dword [esp]
sub ebx, dword [esp]
not ecx
not ecx
shl ebx, 0
jg 0x4a7529
lea eax, [eax + 0x2689]
lea eax, [eax - 0x2689]
lea ebx, [ebx]
jle 0x4a7529
mov ecx, 0x4d8b9797
or byte [ecx - 1], dl
push ebp
clc
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4