Function at 0x4a4857
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x4a46ef
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x4a4a9f
cmp edi, 0x25f2
add esp, 0
xchg edx, edx
js 0x4a4714
pushf
lea esp, [esp]
popf
xchg ebx, edx
xchg ebx, edx
jns 0x4a4714
ljmp 0xe44d:0x89e84d8b
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x4a4727
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x4a4acd]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
jmp 0x4a4760
cmp esi, dword [esp]
call 0x4a4768
add esp, 4
cmp ecx, esi
js 0x4a4788
pushf
jl 0x4a4773
popf
xchg esi, esi
lea edx, [edx]
lea edx, [edx + 0x6a72]
lea edx, [edx - 0x6a72]
jns 0x4a4788
mov esi, 0x80f04d8a
jmp 0xf097cf92
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x4a4727
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
jno 0x4a47fc
jae 0x4a47fe
push eax
add eax, 0x6350
ror eax, 0x1c
pop eax
neg eax
neg eax
je 0x4a4816
mov edi, edi
jl 0x4a4812
jne 0x4a4816
add eax, 0xf0458abf
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x4a4727
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
xor ebx, 0
jo 0x4a489c
jne 0x4a48b2
jg 0x4a48a0
lea esp, [esp]
lea esi, [esi + 0x495b]
lea esi, [esi - 0x495b]
je 0x4a48b2
mov esp, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x4a4727
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.00499b0b
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
not esi
not esi
xor ecx, 0
shr edi, 0
jbe 0x4a4979
pushf
neg edi
neg edi
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
jle 0x4a4972
popf
jge 0x4a4976
ja 0x4a4979
jmp 0x813a9f07
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jae 0x4a49da
jnp 0x4a49e5
lea edx, [edx]
je 0x4a49e0
jg 0x4a49e2
jp 0x4a49e5
mov ecx, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.004a7a85
mov dword [ebp - 4], eax
jbe 0x4a4a02
nop
jp 0x4a4a2a
pushf
shr esp, 0
xor ebx, dword [esp + 8]
xor ebx, dword [esp + 8]
and esp, 0xffffffff
xor ebx, 0x5496
xor ebx, 0x5496
popf
lea esi, [esi]
je 0x4a4a27
jnp 0x4a4a2a
add eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.00499b0b
add esp, 0xc
or eax, 0
xor esp, 0
jg 0x4a4a42
ja 0x4a4a4c
jo 0x4a4a46
nop
jbe 0x4a4a4c
add eax, 0x7d8328db
cld
push dword [eax + ecx*2 - 0x7d]
int3
cmp dword [ebp - 4], 0xffffffff
je 0x4a4a9a
or esp, 0
jae 0x4a4a57
jno 0x4a4a76
pushf
or edi, edi
test esp, 0x5d22
xor edx, 0x608e
xor edx, 0x608e
popf
xchg esi, esi
jo 0x4a4a76
add eax, 0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.00498df0
test esp, 0x28b0
cmp esi, edx
je 0x4a4a91
xchg esp, esp
xchg esp, esp
jne 0x4a4a91
xor eax, 0xec45c72d
adc al, byte [eax]
add byte [eax], al
mov dword [ebp - 0x14], 0x12
jmp 0x4a4a9f
jmp 0x4a46e6
lea ecx, [ecx]
cmp esp, 0x4703
jae 0x4a4aa9
shr esp, 0
jne 0x4a4ac3
pushf
test eax, 0x5b9e
std
cld
shr ebx, 0
popf
jae 0x4a4abe
xchg ecx, ecx
je 0x4a4ac3
mov ebx, 0x5fec458b
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret