Function at 0x4a36fe
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004aed4a
add esp, 0xc
lea eax, [eax + 0x19d7]
lea eax, [eax - 0x19d7]
lea ecx, [ecx + 0x2ba]
sub ecx, 0x2ba
jp 0x4a373e
ja 0x4a3733
mov esp, esp
xchg edi, esi
xchg edi, esi
mov esp, esp
jnp 0x4a373e
mov edx, 0x52e445c6
mov byte [ebp - 0x1c], 0x52
mov byte [ebp - 0x17], 0x54
mov byte [ebp - 0x12], 0x64
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x1b], 0x76
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 0x1a], 0x66
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x10], 0x54
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 0x19], 0x73
mov byte [ebp - 0x14], 0x77
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x7a
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x62
xor ecx, dword [esp + 0x10]
xor ecx, dword [esp + 0x10]
cmp edi, edx
js 0x4a37ac
jno 0x4a3798
jbe 0x4a379a
lea edi, [edi + 0x3e72]
lea edi, [edi - 0x3e72]
lea edi, [edi]
jns 0x4a37ac
mov ebx, 0xe44d8ab6
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
jnp 0x4a384a
or edi, edi
lea edx, [edx]
cmp esi, dword [esp]
jl 0x4a3861
pushf
add esp, 0
popf
lea eax, [eax]
xchg ebx, ebx
jge 0x4a3861
jmp 0xff2c064d
call 0x491a33
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a3876
xor eax, eax
jmp 0x4a3925
nop
jne 0x4a3879
jbe 0x4a38a2
pushf
rol ebx, 1
ror ebx, 1
xchg edi, eax
xchg edi, eax
neg esi
neg esi
ror edi, 0xb
ror edi, 0x15
popf
jg 0x4a3891
lea ecx, [ecx + 0x5633]
lea ecx, [ecx - 0x5633]
jg 0x4a389f
ja 0x4a38a2
mov edi, 0x51e44d8d
lea ecx, [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.0049b743
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.004aed4a
add esp, 0xc
mov eax, eax
jno 0x4a38c6
ror esp, 0
ja 0x4a38d2
mov ebx, ebx
jno 0x4a38cf
jbe 0x4a38d2
mov edx, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x4a38dc
xor eax, eax
jmp 0x4a3925
std
cld
add esp, 0
test dword [esp], edx
jne 0x4a38e6
jg 0x4a38f3
js 0x4a38ea
jp 0x4a38ec
jle 0x4a38ee
mov ebx, ebx
jle 0x4a38f3
lcall 0xa5e8, 0x51fc4d8b
cmpsd dword [esi], dword es:[edi]
invalid
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049e0a1
add esp, 4
rol esp, 0
jp 0x4a3904
jne 0x4a3906
rol edi, 0
je 0x4a391a
pushf
neg edi
neg edi
xchg esp, esp
popf
mov eax, eax
jne 0x4a391a
sub eax, 0x520c558b
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8