Function at 0x4a6156
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004a51c9
add esp, 0xc
rol esp, 0
jp 0x4a617c
ja 0x4a6176
mov ecx, ecx
jnp 0x4a617c
mov edx, 0xec45c645
dec eax
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xa], 0x55
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0xe], 0x64
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 8], 0x6e
mov byte [ebp - 0x11], 0x51
mov byte [ebp - 0xc], 0x74
mov byte [ebp - 7], 0x66
mov byte [ebp - 0x10], 0x73
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 6], 0x74
mov byte [ebp - 5], 0
test esp, 0x3b22
js 0x4a61c4
test edx, ebx
jns 0x4a61d2
lea esp, [esp]
je 0x4a61cd
jne 0x4a61cf
js 0x4a61d2
mov edi, 0x80ec4d8a
jmp 0xec97e9dc
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
call fcn.004a5cba
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x4a6269
xor eax, eax
jmp 0x4a6378
shl esi, 0
cmp ebx, dword [esp]
jge 0x4a628f
pushf
rol edi, 8
rol edi, 0x18
cmp esp, 0x6ad6
or esp, 0
popf
jns 0x4a6286
jge 0x4a6288
xchg edx, edi
xchg edx, edi
jl 0x4a628f
xor eax, 0x51ec4d8d
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.004bcc60
mov dword [ebp - 0x18], eax
nop
xor ebx, edi
xor ebx, edi
cmp esp, 0x760e
jnp 0x4a62c6
pushf
not ecx
not ecx
push edx
add edx, 0x5daa
ror edx, 0x13
pop edx
popf
jo 0x4a62c1
jp 0x4a62c3
jp 0x4a62c6
ljmp 0x458d:0x6a106a
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.004a51c9
add esp, 0xc
or ecx, 0
lea ecx, [ecx + 0x7d8c]
lea ecx, [ecx - 0x7d8c]
and ebx, 0xffffffff
jno 0x4a62ea
jae 0x4a62fa
pushf
xor edx, 0
popf
xchg edx, edi
xchg edx, edi
jb 0x4a62fa
lcall 0x475, 0xe87d83
cmp dword [ebp - 0x18], 0
jne 0x4a6304
xor eax, eax
jmp 0x4a6378
and ebx, 0xffffffff
add ebx, 0
mov esi, esi
add ecx, dword [esp]
sub ecx, dword [esp]
jae 0x4a6336
pushf
neg ebx
neg ebx
or eax, 0
mov esi, esi
jl 0x4a6321
popf
jno 0x4a6325
je 0x4a6327
lea ecx, [ecx + 0x7114]
lea ecx, [ecx - 0x7114]
jb 0x4a6336
mov ebp, 0x51e84d8b
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.004ba301
add esp, 4
cmp ecx, 0x214
stc
ja 0x4a634b
push edx
add edx, 0x6061
ror edx, 0x15
pop edx
jp 0x4a6361
xchg ebx, ebx
lea ecx, [ecx]
jo 0x4a635e
jnp 0x4a6361
mov edx, 0x5218558b
mov edx, dword [ebp + 0x18]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
push ebx
sub ch, byte [edi + 0x63]
cmp eax, 0xc43b23ed
mov byte [0x41b933bb], al
inc ecx
jo 0x6e691d
pop esp
and dword [ebx + 0x4cd21ae9], esi
mov byte [0x23725853], al
ror byte [edx + 0x53], cl
push ebx
pop eax
jb 0x6e6937
push ebp
loop 0x6e696b
inc eax
int1
pop edx
jecxz 0x6e68f8
in eax, 6
push es
mov dword [esi], eax
cmp byte [esi + edx*8], dh
pop ebp
or al, 0xa
sahf
std
xchg esp, eax
xor al, 0x18
rol dword [edx], 0x88
mov dword [0xae90adf7], eax
xchg esi, eax
push es
jnp 0x6e6910
fdivr st(2)
cli
mov ah, 0x31
pop esp
clc
fiadd dword [edi + edx + 0x6acec2a9]
sub dword [esi + ebx*8 + 0x2edb415c], eax
xor dword [eax + edi*8 - 0x26], ebx
test byte [edi], dl
test eax, 0x296acec2
test dh, bl
pop esp
inc ecx
fld xword [esi]
loop 0x6e6905
mov word [0x468e3090], gs
or ebp, ebx
mov bh, 0xb7
and ecx, dword [ebx - 0x38d917c1]
cdq
inc edi
mov dl, 0xd2
push ss
fisttp qword [ebp + 0x68]
push esp
popfd
dec edi
pop ecx
lds eax, [ecx + 0x3f3df5ce]
test al, 0x5d
mov ecx, 0x742e1da9
xchg esp, eax
je 0x6e690d
mov eax, dword [0x1c1d24f3]
xchg bh, dl
cld
mov cl, byte [ebp + 0x49]
call 0x7c903f43
pushfd
adc bh, bh
push ebp
jnp 0x6e69e7
fcom st(4)
and al, 0x46
sbb al, 0x5a
xor eax, 0xc5542f82
dec edi
xchg edx, eax
movsb byte es:[edi], byte [esi]
daa
rcr byte [eax], 1
inc esi
aaa
sbb al, 0x2a
wait
in eax, 0xfb
in eax, 0x65
cmp eax, 0xad7ca390
pop ss
js 0x6e6977
lodsd eax, dword [esi]
mov al, byte [0x9609cd4]
lodsb al, byte [esi]
or byte [ebx + 0x50], al
dec ecx
adc bh, byte [edx + 0x1573100d]
rep stosd dword es:[edi], eax
push ecx
out 0xd7, eax
adc eax, 0xe751abf3
xlatb
jne 0x6e69cd
loopne 0x6e69c2
in al, 0x3c
aas
cmp al, 0x3f
jbe 0x6e6958
loop 0x6e6a3e
push es
dec eax
sub dword [ebp + 0x4c], eax
stosb byte es:[edi], al
xor dword [ebx + 0x21c75ce], eax
stosb byte es:[edi], al
ftst
dec esp
cld
sbb dword [ebp + 0x2b8d4f73], ebx
jae 0x6e6a38
lea ebp, [ebx]
sub ecx, dword [ecx + 0xd2c2d96]
and dh, bl
jnp 0x6e6a4f
mov dword [esi + 0x220d2c2d], edx
jnp 0x6e6a4f
inc eax
ljmp 0x2a12
mov dl, 0x8a
adc ebp, dword [edi + 0x4d]
lcall 0x7bc0, 0xa5ec9930
jl 0x6e6a6a
mov byte [0xa0b2942b], al
lds ecx, [esi - 0x3d]
sub edx, dword [edx + esi*4 - 0x3cb13a60]
sub eax, 0xc5c0fae4
xlatb
dec ebp
cmpsd dword [esi], dword es:[edi]
scasb al, byte es:[edi]
mov ebp, es
sbb byte [0xb3e202ba], cl
and dword [edi + 0x3c], edx
insd dword es:[edi], dx
retf
into
cld
xlatb
pop ebp
jge 0x6e6a81
cmp al, 0x56
mov ebx, 0xd9863e4c
mov ebx, 0xd9863e4c
xlatb
jp 0x6e6a7a
inc esp
jl 0x6e6a34
div byte [esi]
inc edx
xchg byte [ecx - 0xd], ch
inc ecx
and al, 0x27
invalid
xor bl, byte [edi + 0x24]
js 0x6e69ea
dec eax
fstp qword [esi]
loope 0x6e69fc
scasb al, byte es:[edi]
pop edx
xor bh, byte [ebx + 0x73]
fisubr word [ebp + 0x22d24d2d]
mov edx, 0x3e22a7d6
push 0x51af260f
xor dl, byte [edi + 0x41]
sbb edi, esp
js 0x6e6aeb
js 0x6e6aeb
das
jmp 0x6e6a0b
into
add eax, dword [ebx]
out dx, eax
rcl byte [ecx - 0x29c14e50]
shr ebp, 0x7c
outsd dx, dword [esi]
call 0xec78aaf0
mov byte [ebx - 0x33], dh
or al, 0xc
mov ebx, 0xd5292bdd
and byte [ecx + 0x6326f22f], bh
xchg ebp, eax
xor byte [ecx + 0x17], dh
jb 0x6e6a55
cmp dword [eax - 0x5e4e3fd], ebp
mov bh, 0x26
pushal
dec esp
mov edx, 0x3ea2aa5b
jmp 0x3fc72ed5
xor ebx, edi
and ch, dh
jno 0x6e6b0d
invalid
jnp 0x6e6a90
xchg byte [edx - 0x5c], bl
push cs
and edx, dword [ebx + 0x26181051]
add al, 0xd8
invalid
jl 0x6e6afe
xchg edx, eax
leave
dec ebx
invalid