Function at 0x4a7a85
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
js 0x4a7a90
test dword [esp + 4], edx
jl 0x4a7aa3
lea eax, [eax]
xchg ebx, ebx
xchg edi, ebx
xchg edi, ebx
lea esi, [esi]
jge 0x4a7aa3
mov edx, 0x1b3c3d83
dec ecx
add byte [ecx], al
cmp dword [0x491b3c], 1
jne 0x4a7be5
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
clc
ror edi, 0
jp 0x4a7afc
lea edi, [edi]
jnp 0x4a7afc
sub eax, 0xf04d8a1a
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
xchg edi, edi
lea edi, [edi + 0x18b8]
lea edi, [edi - 0x18b8]
xchg edi, ebx
xchg edi, ebx
neg ecx
neg ecx
jle 0x4a7b7c
xchg ebx, eax
xchg ebx, eax
xchg ebx, ebx
jg 0x4a7b7c
mov edi, 0x383d83ae
xor ecx, dword [ecx]
add byte [ebp + 8], dh
cmp dword [0x493338], 0
jne 0x4a7b8d
or eax, 0xffffffff
jmp 0x4a7deb
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x493338]
push ecx
call fcn.0049db9f
mov dword [ebp - 4], eax
shr esp, 0
shr esp, 0
rol ebx, 0xb
rol ebx, 0x15
test dword [esp + 0xc], eax
je 0x4a7bbb
jp 0x4a7bb4
xchg esi, eax
xchg esi, eax
jne 0x4a7bbb
call 0xcb53cae
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.00499b0b
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4a7bdb
mov eax, dword [ebp - 4]
mov dword [0x491b3c], eax
jmp 0x4a7be3
or eax, 0xffffffff
jmp 0x4a7deb
jmp 0x4a7bee
mov ecx, dword [0x491b3c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
cmp ebx, edi
jl 0x4a7bf8
jo 0x4a7c0c
pushf
xor edx, ebx
xor edx, ebx
rol edi, 0
popf
mov esp, esp
ja 0x4a7c09
jno 0x4a7c0c
mov eax, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.004aa525
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
xor ebx, 0x12a7
xor ebx, 0x12a7
jg 0x4a7c66
jns 0x4a7c7a
pushf
xchg esi, esi
sub esp, 0
push esi
pop esi
popf
jnp 0x4a7c75
jl 0x4a7c77
js 0x4a7c7a
mov esi, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov ecx, ecx
xchg edi, eax
xchg edi, eax
xchg ebx, ebx
jge 0x4a7ce1
ja 0x4a7cf5
pushf
test esi, ebx
clc
jp 0x4a7cea
jnp 0x4a7cec
popf
lea eax, [eax]
jnp 0x4a7cf2
jbe 0x4a7cf5
mov ebp, 0x33383d83
dec ecx
add byte [eax], al
cmp dword [0x493338], 0
je 0x4a7d36
lea ebx, [ebx + 0x4974]
sub ebx, 0x4974
dec esi
inc esi
ror ebx, 1
ror ebx, 0x1f
jbe 0x4a7d23
lea esi, [esi + 0xda5]
lea esi, [esi - 0xda5]
nop
ja 0x4a7d23
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x493338]
push edx
call fcn.0049db9f
mov dword [ebp - 4], eax
cld
jb 0x4a7d39
xchg edx, edx
mov eax, eax
jae 0x4a7d56
pushf
test eax, 0x431
ror edi, 9
rol edi, 9
jle 0x4a7d4e
clc
popf
lea eax, [eax]
jb 0x4a7d56
mov edi, 0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00499b0b
add esp, 0xc
cld
shr esp, 0
nop
jle 0x4a7d6d
jne 0x4a7d90
pushf
test edx, ecx
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
xchg esi, esi
popf
jno 0x4a7d81
lea ecx, [ecx + 0x4419]
lea ecx, [ecx - 0x4419]
je 0x4a7d90
mov ecx, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x4a7db1
inc eax
dec eax
rol esp, 0
je 0x4a7da5
jno 0x4a7d9f
jo 0x4a7da1
nop
jne 0x4a7da5
xor eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004aa525
add esp, 4
mov ebx, ebx
inc edx
dec edx
jp 0x4a7dcc
pushf
lea edi, [edi + 0x1f4]
sub edi, 0x1f4
popf
jno 0x4a7dc9
jnp 0x4a7dcc
add eax, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c