Function at 0x4a9870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.00499b0b
add esp, 0xc
xor esp, 0
jg 0x4a988e
ja 0x4a989c
xchg esp, esp
lea esp, [esp]
jae 0x4a9897
jno 0x4a9899
jbe 0x4a989c
mov esi, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x58
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
xor ebx, eax
xor ebx, eax
xchg esp, esp
shl ebx, 0
cmp ebx, dword [esp]
je 0x4a9902
pushf
cld
popf
jp 0x4a98fd
jne 0x4a98ff
jne 0x4a9902
mov edx, 0x80e04d8a
jmp 0xe098210c
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x1e]
sub al, 1
mov byte [ebp - 0x1e], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
sub ecx, 0
jl 0x4a99b5
pushf
shr esp, 0
jns 0x4a99aa
jae 0x4a99ac
popf
xchg edx, ebx
xchg edx, ebx
jge 0x4a99b5
mov esi, 0xffd90de8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 7], dh
call fcn.004a72c7
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a99ca
xor eax, eax
jmp 0x4a9c90
and edi, 0xffffffff
or edx, edx
cmp esp, 0x4849
jl 0x4a99e0
mov esp, esp
xchg esp, esp
jae 0x4a99dd
jge 0x4a99e0
mov ecx, 0x51e04d8d
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.0049db9f
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.00499b0b
add esp, 0xc
call 0x4a9a05
add esp, 4
sub ecx, 0
je 0x4a9a33
pushf
and eax, 0xffffffff
std
cld
ror edi, 0x10
rol edi, 0x10
test dword [esp + 4], esi
popf
lea ecx, [ecx + 0x7e4d]
lea ecx, [ecx - 0x7e4d]
jae 0x4a9a2e
jge 0x4a9a30
jne 0x4a9a33
add eax, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x4a9a40
xor eax, eax
jmp 0x4a9c90
add esp, 0
shl edi, 0
stc
jne 0x4a9a4e
jle 0x4a9a4b
je 0x4a9a4e
mov esp, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004aa525
add esp, 4
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.00499b0b
add esp, 0xc
cmc
std
cld
cmp eax, edx
ja 0x4a9a9b
pushf
jb 0x4a9a75
cmp ebx, 0xb1
lea eax, [eax + 0x21f7]
lea eax, [eax - 0x21f7]
nop
popf
lea esi, [esi + 0x566]
lea esi, [esi - 0x566]
js 0x4a9a98
jbe 0x4a9a9b
mov esp, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
add esp, 0
js 0x4a9b03
pushf
add ecx, 0x4cbf
sub ecx, 0x4cbf
popf
jno 0x4a9afe
jno 0x4a9b00
jns 0x4a9b03
lcall 0x8801, 0x2ce0458a
inc ebp
loopne 0x4a9a96
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1f]
sub cl, 1
mov byte [ebp - 0x1f], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
cmc
jmp 0x4a9ba2
dec ebp
in eax, 0x80
jmp 0xe5982315
ror ebx, 0x1a
ror ebx, 6
jg 0x4a9bc4
pushf
dec edi
inc edi
add ebx, 0x5028
sub ebx, 0x5028
popf
jl 0x4a9bbe
jno 0x4a9bc0
nop
jle 0x4a9bc4
mov eax, 0x33383d83
dec ecx
add byte [eax], al
cmp dword [0x493338], 0
je 0x4a9bfd
rol ecx, 0
cmp edi, dword [esp + 8]
xor eax, 0x6c62
xor eax, 0x6c62
stc
jg 0x4a9bea
jnp 0x4a9be3
mov esi, esi
xchg edx, edx
jle 0x4a9bea
add eax, 0x50e0458d
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x493338]
push ecx
call fcn.0049db9f
mov dword [ebp - 0xc], eax
clc
jge 0x4a9c11
pushf
rol ebx, 0x1e
ror ebx, 0x1e
popf
jns 0x4a9c0c
jle 0x4a9c0e
jl 0x4a9c11
add eax, 0x6a136a
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.00499b0b
add esp, 0xc
call 0x4a9c26
add esp, 4
xor ecx, 0
jp 0x4a9c37
xchg edi, edx
xchg edi, edx
jbe 0x4a9c34
jnp 0x4a9c37
call 0x13f19be
cmp dword [ebp - 0xc], 0
je 0x4a9c59
jns 0x4a9c3f
shl esp, 0
jle 0x4a9c4d
jno 0x4a9c46
jg 0x4a9c48
xchg edi, edi
jg 0x4a9c4d
lcall 0xcfe8, 0x50f4458b
or byte [eax], al
add byte [ebx - 0x302fb3c], al
mov eax, dword [ebp - 0xc]
push eax
call fcn.004aa525
add esp, 4
std
cld
lea esi, [esi + 0x33e1]
lea esi, [esi - 0x33e1]
jae 0x4a9c81
pushf
lea edx, [edx]
ror ebx, 0x1a
rol ebx, 0x1a
shr esp, 0
push edi
pop edi
popf
jg 0x4a9c7c
jns 0x4a9c7e
jb 0x4a9c81
ljmp 0x558b:0x51104d8b
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc