Function at 0x4a4d96
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049baea
add esp, 0xc
test eax, 0x530c
jg 0x4a4db6
jne 0x4a4dbd
jl 0x4a4dba
je 0x4a4dbd
sub eax, 0x53e445c6
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
mov byte [ebp - 0xf], 0
add esp, 0
sub ebx, 0
jno 0x4a4dfd
jp 0x4a4e07
mov esp, esp
xchg edi, edi
jnp 0x4a4e07
mov edi, 0xe44d8a40
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
or esi, esi
cmp ebx, esi
call 0x4a4e81
lea esp, [esp + 4]
jno 0x4a4e8d
js 0x4a4e89
jo 0x4a4e8d
mov esp, 0xdedbe850
invalid
call 0x4a2d6d
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a4ea5
mov eax, 1
jmp 0x4a50cf
shl esp, 0
jbe 0x4a4eb1
xchg edx, eax
xchg edx, eax
jg 0x4a4eae
ja 0x4a4eb1
ljmp 0x458b:0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004a7955
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0049baea
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x4a4ee1
mov eax, 1
jmp 0x4a50cf
rol ecx, 0x1f
ror ecx, 0x1f
or ebx, 0
jg 0x4a4ef3
mov esp, esp
xchg edi, edi
jle 0x4a4ef3
mov ecx, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.0048e67b
add esp, 4
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.0049baea
add esp, 0xc
jmp 0x4a4f11
not esi
not esi
je 0x4a4f28
pushf
or ecx, 0
rol esp, 0
popf
jle 0x4a4f23
jno 0x4a4f25
jne 0x4a4f28
add eax, 0x53e445c6
mov byte [ebp - 0x1c], 0x53
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x50
mov byte [ebp - 0x18], 0x71
mov byte [ebp - 0x17], 0x66
mov byte [ebp - 0x16], 0x6f
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x13], 0x7a
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
mov byte [ebp - 0xf], 0
push eax
pop eax
ror esp, 0
add edx, 0x55f4
sub edx, 0x55f4
rol edi, 0
je 0x4a4f7e
mov esi, esi
js 0x4a4f7a
jne 0x4a4f7e
ljmp 0xe980:0xe44d8a71
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1a]
sub cl, 1
mov byte [ebp - 0x1a], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
test edx, edi
test dword [esp], edi
jp 0x4a4ff6
xchg ebx, ebx
jnp 0x4a5004
lea ebx, [ebx]
jns 0x4a4ffe
lea esp, [esp]
jp 0x4a5004
xor eax, 0xf87d83
cmp dword [ebp - 8], 0
je 0x4a502e
xchg edi, edx
xchg edi, edx
cmp esi, dword [esp]
jge 0x4a5013
jne 0x4a501e
lea edx, [edx]
js 0x4a5019
xchg esp, esp
je 0x4a501e
mov esp, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.004a7955
mov dword [ebp - 0xc], eax
xor ebx, 0
jnp 0x4a5033
jge 0x4a5040
jp 0x4a5037
jge 0x4a5039
xchg edi, ebx
xchg edi, ebx
jl 0x4a5040
ljmp 0x4d8d:0x6a0e6a
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.0049baea
add esp, 0xc
cmp esp, 0x7561
and esi, 0xffffffff
xor edi, 0x4aba
xor edi, 0x4aba
jg 0x4a5081
pushf
sub esp, 0
jnp 0x4a506e
jae 0x4a5070
ror esi, 0x13
ror esi, 0xd
popf
jb 0x4a507a
jbe 0x4a507c
jle 0x4a507e
jle 0x4a5081
jmp 0x13ece08
cmp dword [ebp - 0xc], 0
je 0x4a50a4
jns 0x4a5089
lea esp, [esp]
jb 0x4a508e
je 0x4a5098
xchg edx, edx
jle 0x4a5094
jne 0x4a5098
lcall 0xe852, 0xf4558b9a
ficom dword [ebp - 0x3b7c0002]
add al, 0x87
rol dword [edi + 0x740e7ad1], 1
add byte [edi + 0x70fa87fa], al
add byte [ecx], bh
mov edx, dword [ebp - 0xc]
push edx
call fcn.0048e67b
add esp, 4
xchg ecx, edx
xchg ecx, edx
jp 0x4a50b8
je 0x4a50ac
xchg edx, edi
xchg edx, edi
jo 0x4a50b2
jns 0x4a50b4
jnp 0x4a50b8
ljmp 0x8b50:0x18458ba1
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
push 0xf3a22889
loop 0x6ee73f
cmp al, 0x4c
mov cl, dh
invalid