Function at 0x49ecf0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x528747
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x214
push ebx
push esi
mov esi, ecx
mov eax, 0x534208
xor ecx, ecx
push edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x108], ecx
mov dword [esp + 0x228], ecx
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x128], 0xe0000000
mov dword [esp + 0x12c], 0x3f60624d
mov dword [esp + 0x130], 0xa0000000
mov dword [esp + 0x134], 0x3feffe5c
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], 0x3ff00000
mov dword [esp + 0x138], 0x47ae147b
mov dword [esp + 0x13c], 0x3f847ae1
mov dword [esp + 0x140], 0xeb1c432d
mov dword [esp + 0x144], 0x3f1a36e2
mov dword [esp + 0x148], eax
mov dword [esp + 0x210], 0x47ae147b
mov dword [esp + 0x214], 0x3f847ae1
mov dword [esp + 0x218], 0xd2f1a9fc
mov dword [esp + 0x21c], 0x3f50624d
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x1f0], 0xd2f1a9fc
mov dword [esp + 0x1f4], 0xbf50624d
mov dword [esp + 0x1f8], 0x9374bc6a
mov dword [esp + 0x1fc], 0x3ff00418
mov dword [esp + 0x200], 0xd2f1a9fc
mov dword [esp + 0x204], 0x3f50624d
mov dword [esp + 0x208], 0xd916872b
mov dword [esp + 0x20c], 0x3feff7ce
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.00487f90
mov ebx, dword [ebp + 8]
lea ecx, [esi + 0x48]
mov byte [esp + 0x228], 2
lea eax, [ebx + 0x48]
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.00487d00
fld qword [esp + 0x2c]
fsub qword [0x53ad70]
mov ecx, esi
fstp qword [esp + 0x2c]
fld qword [esp + 0x34]
fsub qword [0x53ad70]
fstp qword [esp + 0x34]
fld qword [esp + 0x3c]
fadd qword [0x53ad70]
fstp qword [esp + 0x3c]
fld qword [esp + 0x44]
fadd qword [0x53ad70]
fstp qword [esp + 0x44]
call fcn.0049c880
mov edi, eax
lea edx, [esp + 0x2c]
push edi
push edx
lea ecx, [esp + 0x150]
call fcn.00489260
test eax, eax
je 0x49f201
lea ecx, [esp + 0x50]
call fcn.00487f90
lea eax, [esp + 0x50]
mov ecx, edi
push eax
mov byte [esp + 0x22c], 3
call fcn.00488960
lea ecx, [esp + 0xc]
call fcn.00487f90
lea ecx, [esp + 0x50]
lea edx, [esp + 0x2c]
push ecx
push edx
lea ecx, [esp + 0x14]
mov byte [esp + 0x230], 4
call fcn.00487d00
fld qword [esp + 0xc]
fsub qword [0x53ad70]
mov ecx, ebx
fstp qword [esp + 0xc]
fld qword [esp + 0x14]
fsub qword [0x53ad70]
fstp qword [esp + 0x14]
fld qword [esp + 0x1c]
fadd qword [0x53ad70]
fstp qword [esp + 0x1c]
fld qword [esp + 0x24]
fadd qword [0x53ad70]
fstp qword [esp + 0x24]
call fcn.0049c880
mov esi, eax
fld qword [esi]
fcomp qword [esp + 0xc]
fnstsw ax
test ah, 1
je 0x49ef68
fld qword [esi + 0x18]
fadd qword [esi]
fcomp qword [esp + 0xc]
fnstsw ax
test ah, 1
jne case.0x49f05b.9
fld qword [esi]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x49ef89
fld qword [esi + 0x18]
fadd qword [esi]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
je case.0x49f05b.9
fld qword [esi + 8]
fcomp qword [esp + 0x14]
fnstsw ax
test ah, 1
je 0x49efac
fld qword [esi + 0x20]
fadd qword [esi + 8]
fcomp qword [esp + 0x14]
fnstsw ax
test ah, 1
jne case.0x49f05b.9
fld qword [esi + 8]
fcomp qword [esp + 0x24]
fnstsw ax
test ah, 0x41
jne 0x49efcf
fld qword [esi + 0x20]
fadd qword [esi + 8]
fcomp qword [esp + 0x24]
fnstsw ax
test ah, 0x41
je case.0x49f05b.9
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fsubp st(1)
fst qword [esp + 0x110]
fcomp qword [0x531cf0]
fnstsw ax
test ah, 0x40
je 0x49f001
mov dword [esp + 0x108], 0
jmp case.0x49f05b.9
push esi
push edi
lea ecx, [esp + 0x78]
call fcn.00430140
cmp dword [esp + 0x108], 1
jne case.0x49f05b.9
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
push eax
push ecx
push edi
call fcn.0049ec90
mov edx, dword [esp + 0xd0]
lea ebx, [eax + eax*4]
mov eax, dword [esp + 0xcc]
push edx
push eax
push esi
shl ebx, 1
call fcn.0049ec90
add ebx, eax
add esp, 0x18
cmp ebx, 0x16
ja case.0x49f05b.9
xor ecx, ecx
mov cl, byte [ebx + 0x49f304]
jmp dword [ecx*4 + 0x49f2dc]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x531cf0]
fnstsw ax
test ah, 0x41
je case.0x49f05b.0
jmp case.0x49f05b.9
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x531cf0]
fnstsw ax
test ah, 1
jne case.0x49f05b.0
jmp case.0x49f05b.9
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
jmp 0x49f06e
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
jmp 0x49f092
mov eax, dword [edi + 0x40]
test eax, eax
je 0x49f102
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x531cf0]
fnstsw ax
test ah, 1
jne case.0x49f05b.9
mov ecx, dword [edi + 0x3c]
push esi
call fcn.004a6d50
test eax, eax
jne case.0x49f05b.0
jmp case.0x49f05b.9
push esi
mov ecx, edi
call fcn.004a6d20
test eax, eax
je case.0x49f05b.0
mov ecx, dword [edi + 0x3c]
push esi
call fcn.004a6d20
test eax, eax
jmp 0x49f07b
mov ebx, dword [edi + 0x3c]
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x49f15e
fld qword [ebx + 0x18]
fmul qword [esi + 0x20]
fld qword [ebx + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x531cf0]
fnstsw ax
test ah, 1
jne case.0x49f05b.0
mov ecx, dword [ebx + 0x3c]
push esi
call fcn.004a6d50
test eax, eax
je case.0x49f05b.0
jmp case.0x49f05b.9
push esi
mov ecx, ebx
call fcn.004a6d20
test eax, eax
je case.0x49f05b.9
mov ecx, dword [ebx + 0x3c]
push esi
call fcn.004a6d20
test eax, eax
jmp 0x49f09f
mov eax, dword [edi + 0x40]
push esi
test eax, eax
mov ecx, edi
je 0x49f1a0
call fcn.004a6d50
test eax, eax
je case.0x49f05b.0
mov ecx, dword [edi + 0x3c]
push esi
call fcn.004a6d50
test eax, eax
je case.0x49f05b.0
jmp case.0x49f05b.9
call fcn.004a6d20
test eax, eax
je case.0x49f05b.9
mov ecx, dword [edi + 0x3c]
push esi
call fcn.004a6d20
test eax, eax
jmp 0x49f09f
mov ecx, dword [edi + 0x3c]
push esi
call fcn.004a6d80
test al, al
jne case.0x49f05b.0
mov ebx, dword [ebp + 8]
mov esi, dword [esi + 0x38]
mov ecx, ebx
call fcn.0049c880
cmp esi, eax
jne 0x49ef47
lea ecx, [esp + 0xc]
mov byte [esp + 0x228], 3
call fcn.00519440
lea ecx, [esp + 0x50]
mov byte [esp + 0x228], 2
call fcn.00519440
mov esi, dword [esp + 0x4c]
mov edi, dword [edi + 0x38]
mov ecx, esi
call fcn.0049c880
cmp edi, eax
je 0x49f288
jmp 0x49eeab
lea ecx, [esp + 0xc]
mov byte [esp + 0x228], 3
call fcn.00519440
lea ecx, [esp + 0x50]
mov byte [esp + 0x228], 2
call fcn.00519440
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.00519440
lea ecx, [esp + 0x148]
mov byte [esp + 0x228], 0
call fcn.004891f0
lea ecx, [esp + 0x70]
mov dword [esp + 0x228], 0xffffffff
call fcn.004891f0
mov al, 1
mov ecx, dword [esp + 0x220]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.00519440
lea ecx, [esp + 0x148]
mov byte [esp + 0x228], 0
call fcn.004891f0
lea ecx, [esp + 0x70]
mov dword [esp + 0x228], 0xffffffff
call fcn.004891f0
mov ecx, dword [esp + 0x220]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4