Function at 0x4985d0
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff0
sub esp, 0xa0
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + 4]
mov dword [esp + 0x38], eax
test eax, eax
je 0x498c88
mov edi, dword [esi + 0x12c]
test edi, edi
je 0x498ca3
mov dword [esp], edi
call fcn.007ddf80
add eax, 0x2b1
mov dword [esp + 4], 0xeb5d38
mov dword [esp], eax
call fcn.004caa50
mov ebx, eax
test eax, eax
je 0x498b29
mov eax, dword [esi + 0x1a0]
mov edx, 0x8213e0
test eax, eax
cmove eax, edx
lea edx, [ebx + 0x2b0]
mov dword [ebx + 0x1cc], edx
mov dword [ebx + 0x188], eax
mov dword [esp], edi
mov dword [esp + 0x30], edx
call fcn.007ddf80
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edi
add eax, 1
mov dword [esp], edx
mov dword [esp + 8], eax
call fcn.007de188
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
test eax, eax
je 0x498d30
mov eax, dword [ebp + 8]
mov dword [ebx + 0x1b0], eax
lea eax, [esp + 0x40]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xeb5bde
mov dword [esp + 4], 0x5f
mov dword [esp], eax
call fcn.0048a610
mov edx, dword [esi]
lea ecx, [esp + 0x40]
lea edi, [ecx + eax]
test edx, edx
je 0x498b38
mov dword [esp + 0xc], edx
mov edx, 0x5f
sub edx, eax
mov dword [esp + 8], 0xeb5be1
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.0048a610
mov edx, eax
mov eax, dword [esi + 0x30]
test eax, eax
je 0x4986e6
test ax, ax
je 0x498edb
mov edx, dword [esi]
test edx, edx
je 0x498ee2
mov dword [esp + 0x18], eax
lea ecx, [ebx + 0x130]
lea eax, [esp + 0x40]
mov dword [esp + 0x14], edx
mov dword [esp + 8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xeb5be9
mov eax, dword [ebp + 8]
mov dword [esp + 0x2c], ecx
add eax, 0x308
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0048e060
mov eax, dword [esi + 0x2c]
mov edx, dword [esi + 0x11c]
mov ecx, dword [ebp + 8]
mov edi, dword [esp + 0x38]
mov dword [ebx + 0x128], eax
mov eax, dword [esi + 0x118]
mov dword [esp + 0x34], edx
mov edx, 0x14
mov dword [esp + 0x30], eax
mov eax, dword [esi]
mov dword [ebx + 0x1d0], eax
mov eax, dword [esi + 0xfc]
test eax, eax
cmove eax, edx
lea edx, [ecx + 0x2b8]
mov dword [ebx + 0x298], eax
mov eax, dword [esi + 0x16c]
mov dword [ebx + 0x280], 0
test eax, eax
cmove eax, edx
test edi, edi
mov dword [ebx + 0x1b8], eax
je 0x498d50
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4987c4
lea edx, [eax + 0x20]
mov eax, 1
lea esi, cs:[esi]
mov ecx, dword [edx]
mov edi, eax
add edx, 0x1c
add eax, 1
test ecx, ecx
jne 0x4987b0
mov dword [ebx + 0x280], edi
movd xmm0, dword [esi + 0x1c]
movd xmm2, dword [esi + 0x14]
mov edi, 0x821414
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x34]
punpckldq xmm0, xmm2
movq qword [ebx + 0x1f0], xmm0
mov dword [ebx + 0x1a8], eax
mov eax, dword [esi + 0x120]
mov dword [ebx + 0x1ac], edx
mov edx, dword [0x821414]
mov dword [ebx + 0x278], eax
mov eax, dword [esi + 0x148]
mov dword [ebx + 0x1e0], eax
mov eax, dword [esi + 0x14c]
mov dword [ebx + 0x1e4], eax
movq xmm3, qword [esi + 0x150]
movq qword [ebx + 0x1d4], xmm3
mov eax, dword [esi + 0x164]
mov dword [ebx + 0x1dc], eax
mov eax, dword [esi + 0x198]
mov dword [ebx + 0x29c], eax
test edx, edx
je 0x49887b
lea esi, [esi]
movzx eax, byte [edx + 0xd]
add edi, 4
shr al, 4
je 0x498875
mov edx, dword [edx + 8]
movzx eax, al
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [edx + eax*4 - 4]
test eax, eax
jne 0x498b29
mov edx, dword [edi]
test edx, edx
jne 0x498850
mov eax, dword [esi + 0x40]
mov edx, 5
test eax, eax
cmove eax, edx
mov edx, 0xa
mov dword [ebx + 0x290], eax
mov eax, dword [esi + 0x104]
test eax, eax
cmove eax, edx
mov dword [ebx + 0x294], eax
mov eax, dword [esi + 0xac]
mov dword [ebx + 0x230], eax
mov eax, dword [esi + 0x9c]
mov dword [ebx + 0x270], eax
mov eax, dword [esi + 0x78]
test eax, eax
je 0x4988dd
mov dword [esp + 4], eax
lea eax, [ebx + 0x240]
mov dword [esp + 8], 0x10
mov dword [esp], eax
call fcn.0048a650
mov eax, dword [esi + 0x68]
mov edx, dword [esi + 0x6c]
test eax, eax
je 0x498df0
mov dword [esp], eax
mov dword [esp + 0x30], edx
call fcn.007ddf80
mov edx, dword [esp + 0x30]
lea edi, [eax + 1]
test edx, edx
je 0x49890e
mov dword [esp], edx
call fcn.007ddf80
lea edi, [edi + eax + 1]
mov dword [esp + 4], edi
mov dword [esp + 8], 0xeb5bf2
mov dword [esp], 0
call fcn.004caa40
movd xmm0, eax
movdqa xmm1, xmm0
punpckldq xmm1, xmm0
movq qword [ebx + 0x238], xmm1
mov edi, dword [esi + 0x68]
test edi, edi
je 0x498980
mov dword [esp], edi
mov dword [esp + 0x28], eax
call fcn.007ddf80
movd xmm0, dword [esp + 0x28]
mov dword [esp + 4], edi
lea edx, [eax + 1]
mov dword [esp + 8], edx
movd dword [esp], xmm0
mov dword [esp + 0x30], edx
call fcn.007de188
mov edx, dword [esp + 0x30]
add edx, dword [ebx + 0x23c]
mov dword [ebx + 0x23c], edx
movd xmm0, edx
mov edi, dword [esi + 0x6c]
movd dword [esp + 0x30], xmm0
test edi, edi
je 0x4989b0
mov dword [esp], edi
call fcn.007ddf80
movd xmm0, dword [esp + 0x30]
mov dword [esp + 4], edi
add eax, 1
mov dword [esp + 8], eax
movd dword [esp], xmm0
call fcn.007de188
mov dword [esp + 4], 0xeb5bfb
mov eax, dword [ebp + 8]
movsx edx, word [eax + 0x720]
mov eax, dword [ebx + 0x280]
lea eax, [edx + eax + 5]
imul eax, eax, 0x1c
mov dword [esp], eax
call fcn.004caa50
mov ecx, eax
test eax, eax
je 0x498e94
mov eax, dword [ebx + 0x280]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x30], eax
test edx, edx
je 0x498cb8
imul eax, dword [esp + 0x30], 0x1c
mov dword [esp], ecx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], ecx
mov dword [esp + 4], eax
call fcn.007de188
mov ecx, dword [esp + 0x38]
imul eax, dword [esp + 0x30], 0x1c
xor edi, edi
add eax, ecx
mov edx, dword [edi*4 + 0x821400]
add edi, 1
add eax, 0x1c
movdqu xmm0, xmmword [edx]
movups xmmword [eax - 0x1c], xmm0
movdqu xmm0, xmmword [edx + 0xc]
movups xmmword [eax - 0x10], xmm0
mov edx, dword [ebx + 0x280]
add edx, 1
mov dword [ebx + 0x280], edx
cmp edi, 4
jne 0x498a21
lea eax, [edx + edx*2]
or byte [ebx + 0x2a8], 1
shl eax, 2
mov dword [ebx + 0x1e8], ecx
mov dword [esp + 4], 0xeb5c10
mov dword [esp], eax
call fcn.004caa50
xor edx, edx
mov ecx, dword [esi + 0x24]
mov edi, dword [esi + 0x30]
mov dword [ebx + 0x1f8], eax
mov eax, dword [ebx + 0x1a8]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x3c]
and eax, 0x4000
mov dword [ebx + 0x124], ecx
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
or eax, edx
jne 0x498b82
cmp edi, 0xfffffffe
je 0x498d88
cmp edi, 0xffffffff
jne 0x498e34
movdqu xmm0, xmmword [0xeb5e40]
movups xmmword [esp + 0x40], xmm0
mov dword [esp + 0x4f], 0x296465
jmp 0x498b82
mov dword [esp + 0x14], 0xeb5c40
mov dword [esp + 0x10], 0xeb5d38
mov dword [esp + 0xc], 1
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x496e80
mov eax, dword [ebx + 0x188]
mov dword [esp], eax
call fcn.0048e010
mov dword [esp], ebx
call fcn.00497fe0
mov dword [esp], ebx
call fcn.00497e30
mov eax, dword [ebx + 0x2a0]
test eax, eax
je 0x498e6c
xor ebx, ebx
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esi + 0x30]
mov edx, 0xeb5bdd
test eax, eax
je 0x4986f0
test ax, ax
jne 0x4986f0
mov dword [esp + 0xc], eax
lea eax, [esp + 0x9f]
sub eax, edi
mov dword [esp + 8], 0xeb5be5
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0048a610
mov eax, dword [esi + 0x30]
jmp 0x4986e6
mov ecx, dword [ecx]
test ecx, ecx
jne 0x498b80
mov byte [ebx + 0xa4], 0
mov eax, dword [esi + 0x10]
mov dword [ebx + 0x27c], edi
mov dword [ebx + 0x12c], 0
test eax, eax
je 0x498dff
mov edx, dword [esi + 0x34]
test edx, edx
je 0x498bb5
mov dword [ebx + 0x12c], edx
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0049e800
mov eax, dword [esi + 0xec]
mov ecx, dword [esi + 0xf4]
mov edx, dword [esi + 0xf0]
mov dword [ebx + 0x284], eax
mov eax, dword [ebx + 0x1a8]
mov dword [ebx + 0x28c], ecx
xor ecx, ecx
and eax, 0x8000
mov dword [ebx + 0x288], edx
or eax, ecx
jne 0x498db0
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004c6c70
test eax, eax
jne 0x498ad9
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004c8270
test eax, eax
jne 0x498e5f
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.004a5330
test eax, eax
js 0x498e87
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x550]
test eax, eax
je 0x498e79
lea esi, cs:[esi]
nop
mov edx, eax
mov eax, dword [eax + 0x1b4]
test eax, eax
jne 0x498c50
add edx, 0x1b4
mov eax, dword [ebp + 8]
mov dword [edx], ebx
cmp byte [eax + 0x718], 0
jns 0x498b2b
mov dword [esp], eax
call fcn.00497aa0
jmp 0x498b2b
mov eax, dword [ebp + 8]
mov edi, dword [esi + 0x12c]
mov eax, dword [eax + 0x448]
mov dword [esp + 0x38], eax
test edi, edi
jne 0x4985ff
mov eax, 0x2b8
mov edi, 0xeb5b5c
jmp 0x49860c
lea edi, [eax*4]
xor eax, eax
cmp dword [esp + 0x30], 0
mov edx, ecx
jle 0x498a18
mov dword [esp + 0x38], ecx
jmp 0x498d00
mov ecx, dword [esi + 0x158]
add edx, 0x1c
mov ecx, dword [ecx + eax]
add eax, 4
movdqu xmm0, xmmword [ecx]
movups xmmword [edx - 0x1c], xmm0
movdqu xmm0, xmmword [ecx + 0xc]
movups xmmword [edx - 0x10], xmm0
cmp edi, eax
jne 0x498d00
jmp 0x498a14
mov eax, dword [esi + 0x158]
test eax, eax
jne 0x49867b
mov dword [esp + 0x38], 0xeb5e00
jmp 0x49867b
mov edx, dword [esi + 0x158]
mov eax, 1
mov ecx, dword [edx]
test ecx, ecx
je 0x4987c4
lea esi, cs:[esi]
lea esi, [esi]
mov ecx, eax
add eax, 1
mov edi, dword [edx + eax*4 - 4]
test edi, edi
jne 0x498d70
mov dword [ebx + 0x280], ecx
jmp 0x4987c4
mov dword [esp + 0x44], 0x7473696c
mov dword [esp + 0x40], 0x206f6e28
mov dword [esp + 0x46], 0x6e657473
mov dword [esp + 0x4a], 0x297265
jmp 0x498b82
mov dword [esp + 0x14], 0xeb5c30
mov dword [esp + 0x10], 0xeb5d38
mov dword [esp + 0xc], 4
mov dword [esp + 8], ebx
mov dword [esp + 4], 0x496e80
mov eax, dword [ebx + 0x188]
mov dword [esp], eax
call fcn.0048e010
jmp 0x498bfa
xor edi, edi
test edx, edx
jne 0x498902
jmp 0x4989b0
mov dword [esp], 0xeb5c25
call fcn.007de220
test eax, eax
je 0x498bc1
mov dword [esp + 4], eax
lea eax, [esp + 0x40]
mov dword [esp + 8], 0x60
mov dword [esp], eax
call fcn.0048a650
lea eax, [esp + 0x40]
jmp 0x498bb5
lea eax, [esp + 0x40]
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0xeb5c1d
mov dword [esp + 4], 0x60
mov dword [esp], eax
call fcn.0048a610
mov edi, dword [esi + 0x30]
mov ecx, dword [esi + 0x24]
jmp 0x498b82
mov dword [esp + 0x14], 0xeb5c64
jmp 0x498ae1
mov dword [esp], ebx
call fcn.004981e0
jmp 0x498b29
mov eax, dword [ebp + 8]
lea edx, [eax + 0x550]
jmp 0x498c62
mov dword [esp + 0x14], 0xeb5c87
jmp 0x498ae1
mov dword [esp + 4], 0xeb5c0b
mov dword [esp], 1
call fcn.0048dfc0
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x1b0]
mov dword [esp], eax
call fcn.0048e290
mov dword [esp + 8], 0xeb5b68
mov dword [esp + 4], 0
mov dword [esp], ebx
call fcn.004caa40
jmp 0x498b29
add edi, edx
jmp 0x498b51
mov edx, 0xeb5bdd
jmp 0x4986f0