Function at 0x4a2770
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x11
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0049baea
add esp, 0xc
lea ebx, [ebx + 0x60aa]
lea ebx, [ebx - 0x60aa]
jle 0x4a27b2
pushf
xor esp, 0
or esp, 0
jno 0x4a27a1
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
popf
ja 0x4a27ad
mov edx, edx
jg 0x4a27b2
mov esi, 0x53e045c6
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x42
mov byte [ebp - 0x10], 0
add esp, 0
stc
lea eax, [eax + 0x4202]
lea eax, [eax - 0x4202]
rol eax, 0
je 0x4a2815
pushf
clc
popf
jle 0x4a2812
jne 0x4a2815
mov eax, 0x80e04d8a
jmp 0xe097b01f
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov esp, esp
mov edi, edi
jb 0x4a28a6
jne 0x4a28bd
lea edi, [edi + 0x1164]
lea edi, [edi - 0x1164]
lea esp, [esp]
ja 0x4a28b9
je 0x4a28bd
mov eax, 0x4abe8f2
add byte [eax], al
call 0x4a2d6d
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a28d5
mov eax, 1
jmp 0x4a2b31
jle 0x4a28d7
xor esp, 0
js 0x4a28ee
pushf
xchg esp, esp
nop
shl esp, 0
add esp, 0
popf
mov edx, edx
jns 0x4a28ee
add eax, 0x52e0558d
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004a7955
mov dword [ebp - 4], eax
push 0x11
push 0
lea ecx, [ebp - 0x20]
push ecx
call fcn.0049baea
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4a291e
mov eax, 1
jmp 0x4a2b31
jno 0x4a2920
jl 0x4a2937
pushf
jmp 0x4a2926
xor eax, dword [esp]
xor eax, dword [esp]
test edx, ebx
mov ecx, ecx
popf
jbe 0x4a2934
jge 0x4a2937
mov eax, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.0048e67b
add esp, 4
push 0x11
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0049baea
add esp, 0xc
push eax
add eax, 0x2bd4
ror eax, 6
pop eax
jns 0x4a295f
ror esp, 0
jl 0x4a297a
pushf
call 0x4a296b
add esp, 4
cld
popf
jno 0x4a2973
jbe 0x4a2975
jle 0x4a2977
jge 0x4a297a
add eax, 0x53e045c6
mov byte [ebp - 0x20], 0x53
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1e], 0x68
mov byte [ebp - 0x1d], 0x52
mov byte [ebp - 0x1c], 0x76
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x73
mov byte [ebp - 0x19], 0x7a
mov byte [ebp - 0x18], 0x57
mov byte [ebp - 0x17], 0x62
mov byte [ebp - 0x16], 0x6d
mov byte [ebp - 0x15], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x46
mov byte [ebp - 0x12], 0x79
mov byte [ebp - 0x11], 0x58
mov byte [ebp - 0x10], 0
clc
js 0x4a29cd
jmp 0x4a29c3
lea esp, [esp]
lea eax, [eax]
mov eax, eax
jns 0x4a29cd
add eax, 0x80e04d8a
jmp 0xe097b1d7
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0x1d]
sub dl, 1
mov byte [ebp - 0x1d], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jg 0x4a2a5a
and esp, 0xffffffff
shl esp, 0
test dword [esp], esi
jp 0x4a2a7b
pushf
shl eax, 0
rol edx, 0x18
ror edx, 0x18
cmp ecx, dword [esp + 0x10]
popf
jns 0x4a2a78
jnp 0x4a2a7b
mov esi, 0xf87d83
cmp dword [ebp - 8], 0
je 0x4a2aa2
shr esi, 0
mov esp, esp
jno 0x4a2a92
pushf
clc
popf
jne 0x4a2a8f
jo 0x4a2a92
add eax, 0x52e0558d
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004a7955
mov dword [ebp - 0xc], eax
jl 0x4a2aa4
je 0x4a2aa6
shr edx, 0
jo 0x4a2ab0
js 0x4a2aad
jno 0x4a2ab0
add eax, 0x6a116a
push 0x11
push 0
lea ecx, [ebp - 0x20]
push ecx
call fcn.0049baea
add esp, 0xc
xchg esp, esp
cmp edx, ecx
jo 0x4a2ad9
pushf
and esi, 0xffffffff
dec eax
inc eax
jnp 0x4a2acf
popf
jge 0x4a2ad3
nop
mov eax, eax
jno 0x4a2ad9
mov edi, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x4a2af7
xchg esp, esp
ja 0x4a2aeb
xchg ebx, esi
xchg ebx, esi
jbe 0x4a2aeb
jmp 0xf49fb64a
mov edx, dword [ebp - 0xc]
push edx
call fcn.0048e67b
add esp, 4
and esp, 0xffffffff
sub edi, 0
xor edi, 0x17a
xor edi, 0x17a
jbe 0x4a2b16
jno 0x4a2b0d
jg 0x4a2b0f
jp 0x4a2b11
jle 0x4a2b13
ja 0x4a2b16
or dword [ebx - 0x74afe3bb], 0x8b51184d
push ebp
adc al, 0x52
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18