Function at 0x489410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x5cf4cf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
mov ebx, dword [esp + 0x3c]
push ebp
push esi
push edi
lea ecx, [esp + 0x48]
mov dword [esp + 0x14], 0
mov dword [ebx], 0
call fcn.0047d160
mov esi, dword [esp + 0x40]
mov edi, 1
test esi, esi
mov dword [esp + 0x34], edi
je 0x489699
mov eax, dword [esp + 0x44]
test eax, eax
je 0x489699
mov byte [esp + 0x1c], 0x43
mov byte [esp + 0x1d], 0x44
mov byte [esp + 0x1e], 0x10
mov byte [esp + 0x1f], 0x24
mov byte [esp + 0x20], 0x57
mov byte [esp + 0x21], 0x96
mov byte [esp + 0x22], 0x55
mov byte [esp + 0x23], 0x40
mov byte [esp + 0x24], 0x54
mov byte [esp + 0x25], 0x10
mov byte [esp + 0x26], 0x5a
mov byte [esp + 0x27], 0x42
mov byte [esp + 0x28], 0
mov byte [esp + 0x29], 0
mov byte [esp + 0x2a], 1
mov byte [esp + 0x2b], 0x38
xor eax, eax
mov cl, byte [esp + eax + 0x1c]
add cl, al
mov byte [esp + eax + 0x1c], cl
inc eax
cmp eax, 0x10
jb 0x4894ba
lea ecx, [esp + 0x10]
call fcn.0047d160
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x10]
push eax
push esi
mov byte [esp + 0x3c], 2
call fcn.0047d670
lea ecx, [esp + 0x44]
push 4
push ecx
lea ecx, [esp + 0x18]
call fcn.0047d670
call fcn.0055f2c0
cdq
mov ecx, 0x64
idiv ecx
test edx, edx
jle 0x489526
mov esi, edx
call fcn.0055f2c0
lea edx, [esp + 0x40]
push 4
push edx
lea ecx, [esp + 0x18]
mov dword [esp + 0x48], eax
call fcn.0047d670
dec esi
jne 0x48950a
push 0
lea ecx, [esp + 0x14]
call fcn.0047d330
add eax, 0x30
lea ecx, [esp + 0x44]
push eax
call fcn.0047d170
lea ecx, [esp + 0x40]
mov byte [esp + 0x34], 3
call fcn.0047da70
push eax
lea ecx, [esp + 0x14]
call fcn.0047d330
push eax
lea ecx, [esp + 0x18]
call fcn.0047da50
push eax
lea eax, [esp + 0x28]
push 0x10
push eax
push 3
call fcn.004aab20
mov esi, eax
test esi, esi
je 0x48966b
cmp esi, 0xffffffff
je 0x48966b
push 0xffffffffffffffff
push esi
lea ecx, [esp + 0x48]
call fcn.0047d340
lea ecx, [esp + 0x40]
call fcn.0047da50
cmp esi, 8
mov dword [ebx], 0
jb 0x4895ed
mov ecx, dword [eax]
mov edx, 1
lea ebp, [esi - 4]
and ecx, 0xefffffff
cmp ebp, edx
jb 0x4895f5
lea edi, [eax + 1]
sub ecx, eax
lea eax, [ecx + edi]
cmp dword [edi], eax
je 0x4895ca
inc edx
inc edi
cmp edx, ebp
ja 0x4895f5
jmp 0x4895bb
lea eax, [edx + 4]
cmp eax, 0xffffff9c
je 0x489671
test eax, eax
jle 0x4895fb
lea ecx, [esp + 0x40]
mov byte [esp + 0x34], 2
call fcn.0047d290
jmp 0x489526
mov dword [ebx], 0x29
jmp 0x489671
mov dword [ebx], 0x36
lea ecx, [esp + 0x40]
call fcn.0047da50
mov eax, dword [eax]
lea edx, [esp + 0x40]
and eax, 0xefffffff
push edx
add eax, esi
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1c], eax
call fcn.0047d6b0
lea eax, [esp + 0x18]
push 4
push eax
lea ecx, [esp + 0x50]
call fcn.0047d670
lea ecx, [esp + 0x40]
mov byte [esp + 0x34], 2
call fcn.0047d290
mov esi, dword [esp + 0x3c]
lea edx, [esp + 0x48]
push edx
mov ecx, esi
mov dword [ebx], 0
call fcn.0047d250
mov dword [esp + 0x14], 1
lea ecx, [esp + 0x10]
mov byte [esp + 0x34], 1
call fcn.0047d290
jmp 0x4896b3
mov dword [ebx], 0x63
mov esi, dword [esp + 0x3c]
lea ecx, [esp + 0x48]
push ecx
mov ecx, esi
call fcn.0047d250
lea ecx, [esp + 0x40]
mov dword [esp + 0x14], 1
mov byte [esp + 0x34], 2
call fcn.0047d290
jmp 0x48965b
mov esi, dword [esp + 0x3c]
lea eax, [esp + 0x48]
push eax
mov ecx, esi
mov dword [ebx], 0x46
call fcn.0047d250
mov dword [esp + 0x14], edi
lea ecx, [esp + 0x48]
mov byte [esp + 0x34], 0
call fcn.0047d290
mov ecx, dword [esp + 0x2c]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x28
ret