Function at 0x4a2b2d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
shr esp, 0
jl 0x4a2b43
jg 0x4a2b3d
jae 0x4a2b3f
jge 0x4a2b43
lcall 0x49cf, 0xc43d835c
add byte [ecx], al
cmp dword [0x49cfc4], 1
jne 0x4a2c9f
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004c5819
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
push edi
add edi, 0x1af7
ror edi, 0xc
pop edi
ror esp, 0
and esp, 0xffffffff
cmp ebx, dword [esp + 0x10]
js 0x4a2bc5
pushf
ror esp, 0
add edi, 0x5645
sub edi, 0x5645
and ecx, ecx
popf
xchg esi, edx
xchg esi, edx
js 0x4a2bc2
jns 0x4a2bc5
sub eax, 0x80f04d8a
jmp 0xf097b3cf
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
jnp 0x4a2c27
ror ebx, 0xa
ror ebx, 0x16
push eax
add eax, 0x68e
ror eax, 0xe
pop eax
nop
jl 0x4a2c3f
jge 0x4a2c3c
jge 0x4a2c3f
xor eax, 0xcc683d83
dec ecx
add byte [eax], al
cmp dword [0x49cc68], 0
jne 0x4a2c50
or eax, 0xffffffff
jmp 0x4a2e8d
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x49cc68]
push ecx
call fcn.004a6a8c
mov dword [ebp - 4], eax
mov edx, edx
or edx, edx
je 0x4a2c75
jbe 0x4a2c6b
js 0x4a2c6d
jg 0x4a2c6f
mov edx, edx
jne 0x4a2c75
lcall 0x8d00, 0x6a0c6aad
push ebp
invalid
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.004c5819
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x4a2c95
mov eax, dword [ebp - 4]
mov dword [0x49cfc4], eax
jmp 0x4a2c9d
or eax, 0xffffffff
jmp 0x4a2e8d
jmp 0x4a2ca8
mov ecx, dword [0x49cfc4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
not ecx
not ecx
lea edx, [edx]
jmp 0x4a2cb6
jno 0x4a2cb8
jb 0x4a2cce
pushf
ror edi, 0
nop
mov ecx, ecx
cmc
popf
mov edx, edx
jg 0x4a2cc9
xchg esp, esp
jae 0x4a2cce
mov ebx, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.004a6b4e
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.004c5819
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
shr edi, 0
jns 0x4a2d1f
nop
jnp 0x4a2d46
pushf
lea ebx, [ebx + 0x6081]
lea ebx, [ebx - 0x6081]
lea esp, [esp]
popf
lea eax, [eax + 0x56d5]
lea eax, [eax - 0x56d5]
mov esp, esp
jp 0x4a2d46
ljmp 0x1ea:0x80f0558a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
test edx, ecx
jge 0x4a2da9
lea ebx, [ebx + 0x53e1]
lea ebx, [ebx - 0x53e1]
lea esp, [esp]
jp 0x4a2dca
pushf
shr esp, 0
popf
jns 0x4a2dc3
jle 0x4a2dc5
jno 0x4a2dc7
jnp 0x4a2dca
ljmp 0x49:0xcc683d83
cmp dword [0x49cc68], 0
je 0x4a2e13
push eax
add eax, 0x9e5
ror eax, 8
pop eax
xchg ebx, esi
xchg ebx, esi
shr ebx, 0
lea eax, [eax + 0x504f]
lea eax, [eax - 0x504f]
jp 0x4a2e00
pushf
xor esp, 0
mov esp, esp
popf
ja 0x4a2dfd
jnp 0x4a2e00
sub eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x49cc68]
push edx
call fcn.004a6a8c
mov dword [ebp - 4], eax
jnp 0x4a2e15
jnp 0x4a2e20
lea ebx, [ebx]
jae 0x4a2e1b
mov esi, esi
jp 0x4a2e20
mov edi, 0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.004c5819
add esp, 0xc
not edx
not edx
test dword [esp + 0xc], esi
jge 0x4a2e42
jns 0x4a2e3c
nop
jb 0x4a2e3f
jl 0x4a2e42
lcall 0x1b74, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x4a2e63
jae 0x4a2e4a
jg 0x4a2e57
pushf
jns 0x4a2e50
popf
mov esp, esp
jle 0x4a2e57
jmp 0x52467be6
mov ecx, dword [ebp - 4]
push ecx
call fcn.004a6b4e
add esp, 4
lea edi, [edi]
jb 0x4a2e6e
mov edi, edi
jae 0x4a2e6e
xor eax, 0x558b5623
and byte [edx - 0x75], dl
inc ebp
sbb al, 0x50
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c