Function at 0x10004a6a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
lea eax, [ecx + 4]
mov edi, dword [esp + 0x48]
mov esi, ecx
mov ebp, 0x778ac9b8
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
lea eax, [edi + 1]
mov dword [esp + 0x2c], eax
lea eax, [edi + 2]
mov dword [esp + 0x28], eax
mov eax, 0x821b5a85
cmp eax, 0x130c488b
jg 0x10004ac6
cmp eax, 0x821b5a85
je 0x10004b06
cmp eax, 0xbdbbc949
je 0x10004b1a
cmp eax, 0xd517489f
jne 0x10004a9e
mov eax, 0x130c488c
mov ebx, 8
jmp 0x10004a9e
cmp eax, 0x130c488c
je 0x10004dea
cmp eax, 0x528214df
je 0x10004b67
cmp eax, 0x728e2e3e
jne 0x10004a9e
mov eax, dword [esp + 0x24]
xor ebx, ebx
mov dword [eax], edi
mov eax, dword [esp]
mov eax, dword [eax]
mov byte [eax + edi], bl
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
mov eax, dword [eax]
mov byte [eax + ecx], bl
mov eax, 0x130c488c
jmp 0x10004a9e
cmp dword [esp + 0x30], 0
mov eax, 0xbdbbc949
mov ecx, 0x528214df
cmove eax, ecx
jmp 0x10004a9e
lea eax, [esp + 0x12]
mov ecx, 0x866765a0
mov dword [esp + 8], 0x6465684c
mov dword [esp + 0xc], 0x7c685d68
mov byte [esp + 0x10], 0x7d
mov dword [esp + 0x18], eax
lea eax, [esp + 0x11]
cmp ecx, 0x8d50ec99
je 0x10004bb8
cmp ecx, 0x866765a0
jne 0x10004b40
mov byte [eax], 0
inc eax
mov ecx, 0x866765a0
mov edx, 0x8d50ec99
cmp eax, dword [esp + 0x18]
cmove ecx, edx
jmp 0x10004b40
lea eax, [esp + 0x22]
mov ecx, 0x866765a0
mov dword [esp + 0x18], 0x75676248
mov dword [esp + 0x1c], 0x76767745
mov byte [esp + 0x20], 0x7b
mov dword [esp + 8], eax
lea eax, [esp + 0x21]
cmp ecx, 0x8d50ec99
je 0x10004c20
cmp ecx, 0x866765a0
jne 0x10004b8d
mov byte [eax], 0
inc eax
mov ecx, 0x866765a0
mov edx, 0x8d50ec99
cmp eax, dword [esp + 8]
cmove ecx, edx
jmp 0x10004b8d
xor eax, eax
mov ecx, 0xed45e7ae
cmp ecx, 0x778ac9b8
je 0x10004bf0
cmp ecx, 0x6c6eeb2a
je 0x10004c90
cmp ecx, 0xed45e7ae
jne 0x10004bbf
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
cmp ecx, 9
mov ecx, 0x6c6eeb2a
cmovb ecx, ebp
jmp 0x10004bbf
mov ecx, dword [esp + 0x18]
mov dl, byte [esp + ecx + 8]
mov eax, edx
and dl, 0xb4
not al
and al, 0x4b
or dl, al
mov eax, dword [esp + 0x18]
mov dh, dl
not dh
add al, 0x4b
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 8], al
mov eax, dword [esp + 0x18]
inc eax
jmp 0x10004bba
xor eax, eax
mov ecx, 0xed45e7ae
cmp ecx, 0x778ac9b8
je 0x10004c58
cmp ecx, 0x6c6eeb2a
je 0x10004cc1
cmp ecx, 0xed45e7ae
jne 0x10004c27
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
cmp ecx, 9
mov ecx, 0x6c6eeb2a
cmovb ecx, ebp
jmp 0x10004c27
mov ecx, dword [esp + 8]
mov dl, byte [esp + ecx + 0x18]
mov eax, edx
mov dh, dl
and dl, 2
not al
and dh, 0xb4
and al, 0x49
or dh, al
mov eax, dword [esp + 8]
or dl, dh
add al, 0x4b
mov dh, al
and al, 0xfd
not dh
and dh, 2
or al, dh
xor al, dl
mov byte [esp + ecx + 0x18], al
mov eax, dword [esp + 8]
inc eax
jmp 0x10004c22
lea ecx, [esp + 8]
mov byte [esp + 0x11], 0
call fcn.10004f33
mov ecx, dword [esp]
push dword [ecx]
call eax
mov eax, dword [esp]
xor ecx, ecx
mov dword [eax], ecx
mov dword [esi + 0xc], ecx
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov eax, 0x528214df
jmp 0x10004a9e
lea ecx, [esp + 0x18]
mov byte [esp + 0x21], 0
call fcn.10004f33
mov ebp, eax
lea eax, [esp + 0x17]
mov ecx, 0xc676c44a
mov dword [esp + 8], 0x55726247
mov dword [esp + 0xc], 0x7c797476
mov dword [esp + 0x10], 0x78566c6b
mov word [esp + 0x14], 0x637d
mov dword [esp + 4], eax
lea eax, [esp + 0x16]
cmp ecx, 0xdd3196a
je 0x10004d28
cmp ecx, 0xc676c44a
jne 0x10004d01
mov byte [eax], 0
inc eax
mov ecx, 0xc676c44a
mov edx, 0xdd3196a
cmp eax, dword [esp + 4]
cmove ecx, edx
jmp 0x10004d01
xor eax, eax
mov ecx, 0xb326718f
cmp ecx, 0x18a85394
je 0x10004d61
cmp ecx, 0xe96a7f24
je 0x10004d91
cmp ecx, 0xb326718f
jne 0x10004d2f
mov dword [esp + 4], eax
mov edx, 0x18a85394
mov ecx, dword [esp + 4]
cmp ecx, 0xe
mov ecx, 0xe96a7f24
cmovb ecx, edx
jmp 0x10004d2f
mov ecx, dword [esp + 4]
mov dl, byte [esp + ecx + 8]
mov eax, edx
and dl, 0xb4
not al
and al, 0x4b
or dl, al
mov eax, dword [esp + 4]
mov dh, dl
not dh
add al, 0x4b
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 8], al
mov eax, dword [esp + 4]
inc eax
jmp 0x10004d2a
lea ecx, [esp + 8]
mov byte [esp + 0x16], 0
call fcn.10004f33
call eax
push dword [esp + 0x28]
push 8
push eax
call ebp
mov ecx, dword [esp]
mov ebp, 0x778ac9b8
mov dword [ecx], eax
mov ecx, 0xd517489f
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 0xc], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov dword [esp + 0x24], esi
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov eax, dword [esp]
cmp dword [eax], 0
mov eax, 0x728e2e3e
cmove eax, ecx
jmp 0x10004a9e
mov eax, ebx
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret 4