Function at 0x49fa31
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x4dd52c]
push ebx
push esi
xor ebx, ebx
push edi
mov edi, dword [ebp + 8]
inc ebx
cmp byte [edi + 0x18933], bl
mov dword [ebp - 4], eax
movsx eax, word [edi + 0x9d3]
mov dword [ebp - 0x94], edi
jbe 0x49fa64
mov eax, ebx
mov ecx, dword [edi + 0x16620]
mov esi, dword [ecx + 0x9c]
push 2
pop edx
sub esi, edx
push 0
mov dword [ebp - 0x88], esi
pop esi
je 0x49ffc1
mov edi, dword [ebp - 0x88]
sub edi, edx
je 0x49ff20
sub edi, edx
je 0x49fd95
sub edi, 3
je 0x49fc79
sub edi, 7
jne 0x4a00b2
push 5
pop edi
shl eax, 5
lea eax, [ebp + eax - 0x84]
mov word [ebp - 0x84], si
mov word [ebp - 0x82], bx
mov word [ebp - 0x80], dx
mov word [ebp - 0x7e], 3
mov word [ebp - 0x7c], 4
mov word [ebp - 0x7a], di
mov word [ebp - 0x78], 6
mov word [ebp - 0x76], 7
mov word [ebp - 0x74], 8
mov word [ebp - 0x72], 9
mov word [ebp - 0x70], 0xa
mov word [ebp - 0x6e], 0xb
mov word [ebp - 0x6c], 0xc
mov word [ebp - 0x6a], 0xd
mov word [ebp - 0x68], 0xe
mov word [ebp - 0x66], 0xf
mov word [ebp - 0x64], si
mov word [ebp - 0x62], 4
mov word [ebp - 0x60], 8
mov word [ebp - 0x5e], 0xc
mov word [ebp - 0x5c], bx
mov word [ebp - 0x5a], di
mov word [ebp - 0x58], 9
mov word [ebp - 0x56], 0xd
mov word [ebp - 0x54], dx
mov word [ebp - 0x52], 6
mov word [ebp - 0x50], 0xa
mov word [ebp - 0x4e], 0xe
mov word [ebp - 0x4c], 3
mov word [ebp - 0x4a], 7
mov word [ebp - 0x48], 0xb
mov word [ebp - 0x46], 0xf
mov word [ebp - 0x44], 3
mov word [ebp - 0x42], dx
mov word [ebp - 0x40], bx
mov word [ebp - 0x3e], si
mov word [ebp - 0x3c], 7
mov word [ebp - 0x3a], 6
mov word [ebp - 0x38], di
mov word [ebp - 0x36], 4
mov word [ebp - 0x34], 0xb
mov word [ebp - 0x32], 0xa
mov word [ebp - 0x30], 9
mov word [ebp - 0x2e], 8
mov word [ebp - 0x2c], 0xf
mov word [ebp - 0x2a], 0xe
mov word [ebp - 0x28], 0xd
mov word [ebp - 0x26], 0xc
mov word [ebp - 0x24], 3
mov word [ebp - 0x22], 7
mov word [ebp - 0x20], 0xb
mov word [ebp - 0x1e], 0xf
mov word [ebp - 0x1c], dx
mov word [ebp - 0x1a], 6
mov word [ebp - 0x18], 0xa
mov word [ebp - 0x16], 0xe
mov word [ebp - 0x14], bx
mov word [ebp - 0x12], di
mov word [ebp - 0x10], 9
mov word [ebp - 0xe], 0xd
mov word [ebp - 0xc], si
mov word [ebp - 0xa], 4
mov word [ebp - 8], 8
mov word [ebp - 6], 0xc
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x88], 0xa0
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x88]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x8c], edx
add dword [ebp - 0x88], edx
mov word [edi + ecx], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x49fc35
jmp 0x4a00b8
push 5
pop edi
lea eax, [eax + eax*8]
lea eax, [ebp + eax*2 - 0x4c]
mov word [ebp - 0x4c], si
mov word [ebp - 0x4a], bx
mov word [ebp - 0x48], dx
mov word [ebp - 0x46], 3
mov word [ebp - 0x44], 4
mov word [ebp - 0x42], di
mov word [ebp - 0x40], 6
mov word [ebp - 0x3e], 7
mov word [ebp - 0x3c], 8
mov word [ebp - 0x3a], si
mov word [ebp - 0x38], 3
mov word [ebp - 0x36], 6
mov word [ebp - 0x34], bx
mov word [ebp - 0x32], 4
mov word [ebp - 0x30], 7
mov word [ebp - 0x2e], dx
mov word [ebp - 0x2c], di
mov word [ebp - 0x2a], 8
mov word [ebp - 0x28], dx
mov word [ebp - 0x26], bx
mov word [ebp - 0x24], si
mov word [ebp - 0x22], di
mov word [ebp - 0x20], 4
mov word [ebp - 0x1e], 3
mov word [ebp - 0x1c], 8
mov word [ebp - 0x1a], 7
mov word [ebp - 0x18], 6
mov word [ebp - 0x16], dx
mov word [ebp - 0x14], di
mov word [ebp - 0x12], 8
mov word [ebp - 0x10], bx
mov word [ebp - 0xe], 4
mov word [ebp - 0xc], 7
mov word [ebp - 0xa], si
mov word [ebp - 8], 3
mov word [ebp - 6], 6
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x49fd51
jmp 0x4a00b8
mov edi, dword [ebp - 0x94]
cmp word [edi + 0x1625c], bx
push 5
pop edi
lea eax, [eax + eax*2]
mov dword [ebp - 0x90], esi
mov word [ebp - 0x28], si
mov word [ebp - 0x2c], 4
mov word [ebp - 0x2e], 3
mov word [ebp - 0x30], dx
mov word [ebp - 0x32], bx
mov word [ebp - 0x34], si
mov word [ebp - 0x1e], di
mov word [ebp - 0x2a], di
jne 0x49fe7c
lea eax, [ebp + eax*4 - 0x34]
mov word [ebp - 0x26], 3
mov word [ebp - 0x24], bx
mov word [ebp - 0x22], 4
mov word [ebp - 0x20], dx
mov word [ebp - 0x1c], dx
mov word [ebp - 0x1a], bx
mov word [ebp - 0x18], si
mov word [ebp - 0x16], di
mov word [ebp - 0x14], 4
mov word [ebp - 0x12], 3
mov word [ebp - 0x10], dx
mov word [ebp - 0xe], di
mov word [ebp - 0xc], bx
mov word [ebp - 0xa], 4
mov word [ebp - 8], si
mov word [ebp - 6], 3
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x49fe38
jmp 0x4a00b8
lea eax, [ebp + eax*4 - 0x34]
mov word [ebp - 0x26], dx
mov word [ebp - 0x24], 4
mov word [ebp - 0x22], bx
mov word [ebp - 0x20], 3
mov word [ebp - 0x1c], bx
mov word [ebp - 0x1a], si
mov word [ebp - 0x18], 3
mov word [ebp - 0x16], dx
mov word [ebp - 0x14], di
mov word [ebp - 0x12], 4
mov word [ebp - 0x10], bx
mov word [ebp - 0xe], 3
mov word [ebp - 0xc], di
mov word [ebp - 0xa], si
mov word [ebp - 8], dx
mov word [ebp - 6], 4
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x49fedc
jmp 0x4a00b8
push 3
pop edi
lea eax, [ebp + eax*8 - 0x24]
mov word [ebp - 0x24], si
mov word [ebp - 0x22], bx
mov word [ebp - 0x20], dx
mov word [ebp - 0x1e], di
mov word [ebp - 0x1c], si
mov word [ebp - 0x1a], dx
mov word [ebp - 0x18], bx
mov word [ebp - 0x16], di
mov word [ebp - 0x14], bx
mov word [ebp - 0x12], si
mov word [ebp - 0x10], di
mov word [ebp - 0xe], dx
mov word [ebp - 0xc], bx
mov word [ebp - 0xa], di
mov word [ebp - 8], si
mov word [ebp - 6], dx
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x49ff7d
jmp 0x4a00b8
cmp word [edi + 0x1625c], bx
mov dword [ebp - 0x90], esi
mov word [ebp - 6], si
mov word [ebp - 8], bx
mov word [ebp - 0x12], bx
mov word [ebp - 0x14], si
mov word [ebp - 0x16], bx
mov word [ebp - 0x18], si
jne 0x4a004d
lea eax, [ebp + eax*4 - 0x18]
mov word [ebp - 0x10], bx
mov word [ebp - 0xe], si
mov word [ebp - 0xc], bx
mov word [ebp - 0xa], si
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x4a000c
jmp 0x4a00b8
lea eax, [ebp + eax*4 - 0x18]
mov word [ebp - 0x10], si
mov word [ebp - 0xe], bx
mov word [ebp - 0xc], si
mov word [ebp - 0xa], bx
mov dword [ebp - 0x8c], 0xa0
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x8c]
mov ax, word [eax]
inc dword [ebp - 0x90]
add dword [ebp - 0x88], edx
add dword [ebp - 0x8c], edx
mov word [ecx + edi], ax
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax + 0x16620]
mov edi, dword [ebp - 0x90]
cmp edi, dword [ecx + 0x9c]
jl 0x4a0071
jmp 0x4a00b8
mov eax, dword [ebp - 0x94]
cmp word [eax + 0xd8e], si
jne 0x4a0101
cmp word [eax + 0x368], si
jg 0x4a00d3
cmp byte [eax + 0xd10], 6
jne 0x4a0101
cmp byte [eax + 0xc9a], bl
jne 0x4a0101
mov ecx, dword [eax + 0x16620]
lea edx, [ecx + 0xa0]
mov cx, word [ecx + 0xa2]
mov si, word [edx]
mov word [edx], cx
mov eax, dword [eax + 0x16620]
mov word [eax + 0xa2], si
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.004a9585
leave
ret 4