Function at 0x4a037b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x48b3d8], 1
je 0x4a03b4
rol eax, 0xc
ror eax, 0xc
ja 0x4a03aa
pushf
add ecx, 0x3949
sub ecx, 0x3949
popf
ja 0x4a03a7
jbe 0x4a03aa
lcall 0x8900, 0x48b3d8a1
inc ebp
cld
mov eax, dword [0x48b3d8]
mov dword [ebp - 4], eax
jmp 0x4a03cc
cmp esp, 0x7a8e
jb 0x4a03bc
js 0x4a03c5
jnp 0x4a03c0
jae 0x4a03c2
jns 0x4a03c5
sub eax, 0xf7e9c033
add dword [eax], eax
add al, ch
add byte [eax], al
add byte [eax], al
xor eax, eax
jmp 0x4a05c3
call 0x4a03d1
lea esp, [esp + 4]
xor edx, 0x456a
xor edx, 0x456a
stc
call 0x4a03e7
add esp, 4
jnp 0x4a03f3
jg 0x4a03ee
jbe 0x4a03f0
jp 0x4a03f3
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0049e0a1
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004aed4a
add esp, 0xc
add eax, 0x387d
sub eax, 0x387d
jl 0x4a042f
pushf
ror esp, 0
je 0x4a0422
js 0x4a0424
popf
jne 0x4a0428
jo 0x4a042a
jne 0x4a042c
jge 0x4a042f
mov ecx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
cmp eax, edi
dec esi
inc esi
jg 0x4a0482
pushf
std
cld
rol ebx, 0x12
ror ebx, 0x12
je 0x4a0475
ror edx, 0xf
ror edx, 0x11
popf
ja 0x4a047f
jle 0x4a0482
add eax, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
std
cld
jo 0x4a04f4
ja 0x4a04f0
jno 0x4a04f4
mov ecx, 0x903d833e
mov dl, 0x48
add byte [eax], al
cmp dword [0x48b290], 0
je 0x4a0521
jno 0x4a04ff
jne 0x4a0501
xchg edi, edi
jle 0x4a050e
jl 0x4a0507
je 0x4a0509
jmp 0x4a050b
jg 0x4a050e
add eax, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x48b290]
push ecx
call fcn.0049b743
mov dword [ebp - 8], eax
jno 0x4a0523
cmp eax, dword [esp]
xor esp, 0
or edx, 0
jle 0x4a0547
pushf
lea ecx, [ecx + 0x5529]
sub ecx, 0x5529
js 0x4a053e
popf
ja 0x4a0542
jbe 0x4a0544
jg 0x4a0547
mov ebp, 0x6a0d6a
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.004aed4a
add esp, 0xc
je 0x4a0559
add ebx, dword [esp]
sub ebx, dword [esp]
jne 0x4a056d
xchg edx, ecx
xchg edx, ecx
jne 0x4a0567
xchg esi, esi
je 0x4a056d
lcall 0x7400, 0xf87d83b1
sub al, cl
retf 0xc116
cmp dword [ebp - 8], 0
je 0x4a059d
ror edx, 0x16
rol edx, 0x16
rol ebx, 0xb
rol ebx, 0x15
jo 0x4a0581
jae 0x4a0591
xchg ebx, edx
xchg ebx, edx
mov esp, esp
jge 0x4a058b
jnp 0x4a058d
jb 0x4a0591
mov eax, 0xf8458b4d
mov eax, dword [ebp - 8]
push eax
call fcn.0049e0a1
add esp, 4
add esp, 0
call 0x4a05a5
lea esp, [esp + 4]
inc eax
dec eax
js 0x4a05bc
pushf
jo 0x4a05b1
popf
jl 0x4a05b5
lea ebx, [ebx]
jo 0x4a05b9
jns 0x4a05bc
mov esi, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4