Function at 0x4a366a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
jg 0x4a3675
jg 0x4a3677
lea esi, [esi + 0x564a]
sub esi, 0x564a
ror esp, 0
js 0x4a369e
pushf
add esi, dword [esp]
sub esi, dword [esp]
mov edx, edx
cmc
popf
mov esp, esp
mov ecx, ecx
mov edx, edx
jns 0x4a369e
mov ecx, 0xbb343d83
dec ecx
add byte [ecx], al
cmp dword [0x49bb34], 1
jne 0x4a37e8
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004a51c9
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jge 0x4a36ed
jle 0x4a3702
pushf
rol esi, 6
ror esi, 6
cld
xchg edx, eax
xchg edx, eax
popf
js 0x4a36fe
nop
jg 0x4a3702
lcall 0x1e9, 0x80f04d8a
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
add ecx, 0x66ea
sub ecx, 0x66ea
jbe 0x4a3780
pushf
xchg edi, edi
std
cld
jo 0x4a3778
popf
lea esp, [esp]
ja 0x4a3780
lcall 0x49, 0xb9683d83
add byte [ebp + 8], dh
cmp dword [0x49b968], 0
jne 0x4a3791
or eax, 0xffffffff
jmp 0x4a39d0
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x49b968]
push ecx
call fcn.004bcc60
mov dword [ebp - 4], eax
cmp eax, dword [esp + 0xc]
xchg esp, esp
cld
jl 0x4a37be
pushf
ror edx, 1
ror edx, 0x1f
push ebx
pop ebx
popf
nop
jne 0x4a37bb
jge 0x4a37be
mov ebp, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004a51c9
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4a37de
mov eax, dword [ebp - 4]
mov dword [0x49bb34], eax
jmp 0x4a37e6
or eax, 0xffffffff
jmp 0x4a39d0
jmp 0x4a37f1
mov ecx, dword [0x49bb34]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
shl esp, 0
jp 0x4a3801
jno 0x4a37fe
jnp 0x4a3801
mov edx, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.004ba301
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004a51c9
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
test edi, 0x431c
rol eax, 0x12
ror eax, 0x12
jno 0x4a386f
pushf
xor edx, 0
lea edi, [edi]
test dword [esp], esi
cld
popf
lea esi, [esi]
mov edi, edi
jo 0x4a386f
call 0x813a8dfd
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
nop
jb 0x4a38ea
pushf
test dword [esp], eax
call fcn.004a38db