Function at 0x4a3cba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004c5819
add esp, 0xc
and esp, 0xffffffff
jnp 0x4a3cee
pushf
ror eax, 0
popf
lea edi, [edi + 0x791a]
lea edi, [edi - 0x791a]
jp 0x4a3cee
mov ebp, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
cmp ecx, dword [esp]
xchg esi, edi
xchg esi, edi
xchg ecx, ecx
js 0x4a3d5b
pushf
cmp eax, dword [esp]
xor ecx, dword [esp]
xor ecx, dword [esp]
popf
jnp 0x4a3d54
jp 0x4a3d56
jnp 0x4a3d58
jns 0x4a3d5b
mov eax, 0x80e04d8a
jmp 0xe097c565
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x1e]
sub al, 1
mov byte [ebp - 0x1e], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
je 0x4a3df9
push ebx
add ebx, 0x4e38
ror ebx, 8
pop ebx
shl eax, 0
shr esi, 0
jl 0x4a3e18
lea esp, [esp]
jns 0x4a3e11
jg 0x4a3e13
jae 0x4a3e15
jge 0x4a3e18
sub eax, 0xdcad
call fcn.004b1aca
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x4a3e2d
xor eax, eax
jmp 0x4a40e3
xchg esp, esp
not esi
not esi
lea edi, [edi]
xor eax, edx
xor eax, edx
jge 0x4a3e46
pushf
std
cld
popf
jae 0x4a3e43
jl 0x4a3e46
mov edx, 0x51e04d8d
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004a6a8c
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.004c5819
add esp, 0xc
lea ecx, [ecx]
mov esp, esp
jg 0x4a3e7e
pushf
cld
lea esp, [esp]
xchg edi, eax
xchg edi, eax
popf
nop
jl 0x4a3e79
jnp 0x4a3e7b
jle 0x4a3e7e
mov esi, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x4a3e8b
xor eax, eax
jmp 0x4a40e3
sub ecx, 0
jge 0x4a3ea2
pushf
jno 0x4a3e94
nop
xchg esi, ecx
xchg esi, ecx
popf
xchg ecx, ebx
xchg ecx, ebx
jl 0x4a3ea2
add eax, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.004a6b4e
add esp, 4
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.004c5819
add esp, 0xc
cmp edi, dword [esp]
std
cld
jge 0x4a3ec5
jge 0x4a3edf
pushf
js 0x4a3ecb
cld
popf
lea edi, [edi + 0x691b]
lea edi, [edi - 0x691b]
jle 0x4a3edc
jl 0x4a3edf
mov ebp, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x58
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
push edx
add edx, 0x70f0
ror edx, 0x19
pop edx
or ecx, ecx
lea eax, [eax + 0x51ad]
lea eax, [eax - 0x51ad]
and ebx, ebx
jb 0x4a3f5f
pushf
lea esi, [esi]
std
cld
add edx, dword [esp]
sub edx, dword [esp]
xchg edx, ebx
xchg edx, ebx
popf
jbe 0x4a3f5c
jae 0x4a3f5f
mov ebx, 0x2ce0458a
add dword [eax + 0x4d8ae045], ecx
in eax, 0x80
jmp 0xe597c771
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1f]
sub cl, 1
mov byte [ebp - 0x1f], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
nop
test dword [esp], ebx
ja 0x4a4001
jno 0x4a400c
xchg edi, eax
xchg edi, eax
jno 0x4a4007
xchg esp, esp
jo 0x4a400c
add dword [ebx + 0x49cc683d], 0x2a740000
cmp dword [0x49cc68], 0
je 0x4a403f
cmp eax, dword [esp]
rol edx, 7
rol edx, 0x19
cmp esi, dword [esp + 8]
shr esp, 0
ja 0x4a402c
lea esi, [esi]
jbe 0x4a402c
add eax, 0x50e0458d
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x49cc68]
push ecx
call fcn.004a6a8c
mov dword [ebp - 0xc], eax
rol esp, 0
call fcn.004a4047