Function at 0x49f9fd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x1e0
mov eax, 0x5a8f73
call fcn.00553bc0
mov edi, edx
mov esi, ecx
mov eax, dword [edi]
mov ebx, dword [esi + 0x34]
mov edx, dword [esi + 0x30]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [esi + 0x1c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14], eax
cmp ebx, edx
jae 0x49fa3f
sub edx, ebx
dec edx
jmp 0x49fed2
mov edx, dword [esi + 0x2c]
sub edx, ebx
jmp 0x49fed2
mov ecx, dword [ebp - 0x18]
jmp dword [ecx*4 + 0x4a040d]
mov ecx, dword [ebp - 0x1c]
cmp edx, 0x102
jb 0x49faf0
cmp dword [ebp - 0x20], 0xa
jb 0x49faf0
mov edx, dword [ebp - 0x10]
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x20], edx
mov edx, dword [ebp - 0x24]
mov dword [edi + 4], eax
mov eax, edx
sub eax, dword [edi]
add dword [edi + 8], eax
mov dword [edi], edx
push edi
mov dword [esi + 0x34], ebx
movzx edx, byte [ecx + 0x11]
push esi
push dword [ecx + 0x18]
push dword [ecx + 0x14]
movzx ecx, byte [ecx + 0x10]
call fcn.004a3049
mov ebx, dword [esi + 0x34]
add esp, 0x10
mov edx, dword [esi + 0x30]
mov ecx, dword [esi + 0x1c]
mov dword [ebp + 8], eax
mov eax, dword [edi]
mov dword [ebp - 0x24], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0x20]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
cmp ebx, edx
jae 0x49facb
sub edx, ebx
dec edx
jmp 0x49fad0
mov edx, dword [esi + 0x2c]
sub edx, ebx
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x49faed
push 9
pop eax
cmp ecx, 1
push 7
pop ecx
cmove eax, ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
jmp 0x49fed2
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x10]
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x14]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx], 1
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
jae 0x49fb4a
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0
je 0x49ff13
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x14]
and dword [ebp + 8], 0
dec dword [ebp - 0x20]
shl eax, cl
or dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add eax, 8
inc ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
cmp eax, dword [ebp - 0x18]
jb 0x49fb16
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx*4 + 0x5cb670]
and ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 8]
lea eax, [eax + ecx*8]
movzx ecx, byte [eax + 1]
shr dword [ebp - 0x10], cl
sub dword [ebp - 0x14], ecx
mov ecx, eax
mov dword [ebp - 0x28], eax
movzx ecx, byte [ecx]
mov dword [ebp - 0x18], ecx
test ecx, ecx
jne 0x49fb8a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov dword [ecx], 6
jmp 0x49fed2
test cl, 0x10
je 0x49fbb2
and ecx, 0xf
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
mov dword [ecx + 4], eax
mov dword [ecx], 2
jmp 0x49fed2
test cl, 0x40
jne 0x49fbd6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x28]
mov ecx, eax
mov eax, dword [eax + 4]
lea eax, [ecx + eax*8]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 8], eax
jmp 0x49fed2
test cl, 0x20
je 0x49ff2b
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], 7
jmp 0x49fed2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ecx + 8]
jae 0x49fc35
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0
je 0x49ff13
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x14]
and dword [ebp + 8], 0
dec dword [ebp - 0x20]
shl eax, cl
or dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add eax, 8
inc ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
cmp eax, dword [ebp - 0x18]
jb 0x49fc01
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax*4 + 0x5cb670]
and eax, dword [ebp - 0x10]
add dword [ecx + 4], eax
mov eax, dword [ebp - 0x18]
mov ecx, eax
shr dword [ebp - 0x10], cl
mov ecx, dword [ebp - 0x1c]
sub dword [ebp - 0x14], eax
movzx eax, byte [ecx + 0x11]
mov dword [ecx + 0xc], eax
mov eax, dword [ecx + 0x18]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [ecx], 3
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 0x18], ecx
cmp eax, ecx
jae 0x49fcad
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0
je 0x49ff13
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x14]
and dword [ebp + 8], 0
dec dword [ebp - 0x20]
shl eax, cl
or dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add eax, 8
inc ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
cmp eax, dword [ebp - 0x18]
jb 0x49fc79
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ecx*4 + 0x5cb670]
and ecx, dword [ebp - 0x10]
mov eax, dword [eax + 8]
lea eax, [eax + ecx*8]
movzx ecx, byte [eax + 1]
shr dword [ebp - 0x10], cl
sub dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], eax
movzx eax, byte [eax]
test al, 0x10
je 0x49fcf1
mov ecx, dword [ebp - 0x1c]
and eax, 0xf
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
mov dword [ecx + 0xc], eax
mov dword [ecx], 4
jmp 0x49fed2
test al, 0x40
jne 0x4a0020
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x18]
mov ecx, eax
jmp 0x49fbc5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ecx + 8]
jae 0x49fd51
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0x20], 0
je 0x49ff13
movzx eax, byte [ecx]
mov ecx, dword [ebp - 0x14]
and dword [ebp + 8], 0
dec dword [ebp - 0x20]
shl eax, cl
or dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add eax, 8
inc ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], ecx
cmp eax, dword [ebp - 0x18]
jb 0x49fd1d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax*4 + 0x5cb670]
and eax, dword [ebp - 0x10]
add dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x18]
mov ecx, eax
shr dword [ebp - 0x10], cl
mov ecx, dword [ebp - 0x1c]
sub dword [ebp - 0x14], eax
mov dword [ecx], 5
mov ecx, dword [ebp - 0x1c]
mov eax, ebx
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x28], eax
cmp eax, dword [esi + 0x28]
jae 0x49fd9c
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
cmp eax, dword [esi + 0x28]
jb 0x49fd91
mov dword [ebp - 0x28], eax
cmp dword [ecx + 4], 0
je 0x49fecf
test edx, edx
jne 0x49fe20
cmp ebx, dword [esi + 0x2c]
jne 0x49fdcc
mov edx, dword [esi + 0x30]
cmp edx, dword [esi + 0x28]
je 0x49fdcc
mov ebx, dword [esi + 0x28]
cmp ebx, edx
jae 0x49fdc3
sub edx, ebx
dec edx
jmp 0x49fdc8
mov edx, dword [esi + 0x2c]
sub edx, ebx
test edx, edx
jne 0x49fe20
push dword [ebp + 8]
mov edx, edi
mov dword [esi + 0x34], ebx
mov ecx, esi
call fcn.0049f8bd
mov ebx, dword [esi + 0x34]
pop ecx
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x18], eax
cmp ebx, ecx
jae 0x49fdf0
mov edx, ecx
sub edx, ebx
dec edx
jmp 0x49fdf5
mov edx, dword [esi + 0x2c]
sub edx, ebx
cmp ebx, dword [esi + 0x2c]
jne 0x49fe12
cmp ecx, dword [esi + 0x28]
je 0x49fe12
mov ebx, dword [esi + 0x28]
cmp ebx, ecx
jae 0x49fe0d
mov edx, ecx
sub edx, ebx
dec edx
jmp 0x49fe12
mov edx, dword [esi + 0x2c]
sub edx, ebx
test edx, edx
je 0x4a03af
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov al, byte [eax]
and dword [ebp + 8], 0
mov byte [ebx], al
inc ebx
mov eax, dword [ebp - 0x28]
inc eax
dec edx
mov dword [ebp - 0x28], eax
cmp eax, dword [esi + 0x2c]
jne 0x49fe3c
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x28], eax
dec dword [ecx + 4]
jne 0x49fda6
jmp 0x49fecf
mov ecx, dword [ebp - 0x1c]
test edx, edx
jne 0x49fec4
cmp ebx, dword [esi + 0x2c]
jne 0x49fe73
mov edx, dword [esi + 0x30]
cmp edx, dword [esi + 0x28]
je 0x49fe73
mov ebx, dword [esi + 0x28]
cmp ebx, edx
jae 0x49fe6a
sub edx, ebx
dec edx
jmp 0x49fe6f
mov edx, dword [esi + 0x2c]
sub edx, ebx
test edx, edx
jne 0x49fec4
push dword [ebp + 8]
mov edx, edi
mov dword [esi + 0x34], ebx
mov ecx, esi
call fcn.0049f8bd
mov ebx, dword [esi + 0x34]
pop ecx
mov ecx, dword [esi + 0x30]
mov dword [ebp - 0x18], eax
cmp ebx, ecx
jae 0x49fe97
mov edx, ecx
sub edx, ebx
dec edx
jmp 0x49fe9c
mov edx, dword [esi + 0x2c]
sub edx, ebx
cmp ebx, dword [esi + 0x2c]
jne 0x49feb9
cmp ecx, dword [esi + 0x28]
je 0x49feb9
mov ebx, dword [esi + 0x28]
cmp ebx, ecx
jae 0x49feb4
mov edx, ecx
sub edx, ebx
dec edx
jmp 0x49feb9
mov edx, dword [esi + 0x2c]
sub edx, ebx
test edx, edx
je 0x4a03af
mov ecx, dword [ebp - 0x1c]
mov al, byte [ecx + 8]
and dword [ebp + 8], 0
mov byte [ebx], al
inc ebx
dec edx
and dword [ecx], 0
mov eax, dword [ecx]
cmp eax, 9
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
jbe 0x49fa49
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x10]
mov dword [esi + 0x20], ecx
mov dword [esi + 0x1c], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov dword [edi + 4], eax
mov eax, edx
sub eax, dword [edi]
mov dword [edi], edx
add dword [edi + 8], eax
mov edx, edi
mov ecx, esi
mov dword [esi + 0x34], ebx
call fcn.0049f8bd
pop ecx
call fcn.00553b8e
ret
mov edx, dword [ebp - 0x10]
push dword [ebp + 8]
mov dword [esi + 0x1c], eax
mov eax, ecx
mov dword [esi + 0x20], edx
and dword [edi + 4], 0
sub eax, dword [edi]
mov dword [edi], ecx
jmp 0x49fefd
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x80]
push 0
sub esp, 0xc
mov dword [ebp - 0x80], 0x3477444b
mov ecx, esp
mov dword [ebp - 0x7c], 0x6f347a4c
mov dword [eax], 9
lea eax, [ebp - 0x2a]
mov dword [ebp - 0x78], 0x6f456d4b
push ecx
push eax
push edx
mov dword [ebp - 0x74], 0x6e597a4a
mov dword [ebp - 0x70], 0x2b417a4d
mov dword [ebp - 0x6c], 0x68677961
mov dword [ebp - 0x68], 0x2b416a4f
mov dword [ebp - 0x64], 0x72306d4a
mov dword [ebp - 0x60], 0x75674350
mov dword [ebp - 0x5c], 0x78415363
mov dword [ebp - 0x58], 0x444d6d49
mov dword [ebp - 0x54], 0x31307a65
mov dword [ebp - 0x50], 0x3049784a
mov dword [ebp - 0x4c], 0x51305342
mov dword [ebp - 0x48], 0x77675346
mov dword [ebp - 0x44], 0x63457942
mov dword [ebp - 0x40], 0x74417843
mov dword [ebp - 0x3c], 0x6b305465
mov dword [ebp - 0x38], 0x49385147
mov dword [ebp - 0x34], 0x69565265
mov dword [ebp - 0x30], 0x41414141
mov word [ebp - 0x2c], 0x5149
call fcn.00450208
lea ecx, [ebp - 0x1e8]
call fcn.004ab7c4
add esp, 0xc
and dword [ebp - 4], 0
mov ecx, eax
call fcn.00451547
lea ecx, [ebp - 0x1e8]
or dword [ebp - 4], 0xffffffff
mov dword [edi + 0x18], eax
call fcn.004513e1
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], ecx
push 0xfffffffffffffffd
jmp 0x49feee
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1d0], 0x3477444b
mov dword [ebp - 0x1cc], 0x6f347a4c
mov dword [ebp - 0x1c8], 0x67456d4b
mov dword [eax], 9
mov dword [ebp - 0x1c4], 0x32457a4a
mov dword [ebp - 0x1c0], 0x78384449
mov dword [ebp - 0x1bc], 0x6e515749
mov dword [ebp - 0x1b8], 0x764d7a4f
mov dword [ebp - 0x1b4], 0x76347765
mov dword [ebp - 0x1b0], 0x4b415343
mov dword [ebp - 0x1ac], 0x46517a4f
mov dword [ebp - 0x1a8], 0x324e4147
mov dword [ebp - 0x1a4], 0x69453246
mov dword [ebp - 0x1a0], 0x38556847
mov dword [ebp - 0x19c], 0x624d6864
mov dword [ebp - 0x198], 0x716b4763
mov dword [ebp - 0x194], 0x7a4a6e46
mov dword [ebp - 0x190], 0x2b706841
mov dword [ebp - 0x18c], 0x6438424e
mov dword [ebp - 0x188], 0x79355143
mov dword [ebp - 0x184], 0x45346d42
mov dword [ebp - 0x180], 0x70416746
mov dword [ebp - 0x17c], 0x50736a4e
mov dword [ebp - 0x178], 0x75515343
mov dword [ebp - 0x174], 0x4f516e41
mov dword [ebp - 0x170], 0x2b596a45
mov dword [ebp - 0x16c], 0x79456845
mov dword [ebp - 0x168], 0x38415465
mov dword [ebp - 0x164], 0x38553342
mov dword [ebp - 0x160], 0x54307741
mov dword [ebp - 0x15c], 0x61776a4d
mov dword [ebp - 0x158], 0x4a38524e
mov dword [ebp - 0x154], 0x754d414a
mov dword [ebp - 0x150], 0x43636947
mov dword [ebp - 0x14c], 0x5155414c
mov dword [ebp - 0x148], 0x35734242
mov dword [ebp - 0x144], 0x67514446
mov dword [ebp - 0x140], 0x6b594759
mov dword [ebp - 0x13c], 0x4c456743
mov dword [ebp - 0x138], 0x744d774b
mov dword [ebp - 0x134], 0x41345366
mov dword [ebp - 0x130], 0x43735344
mov dword [ebp - 0x12c], 0x7155674e
mov dword [ebp - 0x128], 0x7a524465
mov dword [ebp - 0x124], 0x30635349
mov dword [ebp - 0x120], 0x5545534b
mov dword [ebp - 0x11c], 0x764d7a63
mov dword [ebp - 0x118], 0x38636944
mov dword [ebp - 0x114], 0x52635365
mov dword [ebp - 0x110], 0x75385150
mov dword [ebp - 0x10c], 0x3751474d
mov dword [ebp - 0x108], 0x6c4d324c
mov dword [ebp - 0x104], 0x58387a4a
mov dword [ebp - 0x100], 0x796b524b
mov dword [ebp - 0xfc], 0x44635450
mov dword [ebp - 0xf8], 0x2f745145
mov dword [ebp - 0xf4], 0x30776a41
mov dword [ebp - 0xf0], 0x50416959
mov dword [ebp - 0xec], 0x4f773347
mov dword [ebp - 0xe8], 0x666b6959
mov dword [ebp - 0xe4], 0x46677a4a
mov dword [ebp - 0xe0], 0x36684245
mov dword [ebp - 0xdc], 0x774d6741
mov dword [ebp - 0xd8], 0x49675349
mov dword [ebp - 0xd4], 0x6b417843
mov dword [ebp - 0xd0], 0x59634464
mov dword [ebp - 0xcc], 0x6c413344
mov dword [ebp - 0xc8], 0x69675141
mov dword [ebp - 0xc4], 0x626f7850
mov dword [ebp - 0xc0], 0x7067424e
mov dword [ebp - 0xbc], 0x3438794f
mov dword [ebp - 0xb8], 0x64637a4a
mov dword [ebp - 0xb4], 0x77686950
mov dword [ebp - 0xb0], 0x30594147
mov dword [ebp - 0xac], 0x30556a46
mov dword [ebp - 0xa8], 0x7a67534a
mov dword [ebp - 0xa4], 0x51555850
mov dword [ebp - 0xa0], 0x69774262
mov dword [ebp - 0x9c], 0x67384443
mov dword [ebp - 0x98], 0x4a6b6949
push 0
sub esp, 0xc
mov dword [ebp - 0x94], 0x39774449
mov ecx, esp
mov dword [ebp - 0x90], 0x3334544d
lea eax, [ebp - 0x85]
mov dword [ebp - 0x8c], 0x41417766
lea edx, [ebp - 0x1d0]
mov word [ebp - 0x88], 0x4e41
push ecx
push eax
push edx
mov byte [ebp - 0x86], 0x38
call fcn.00450208
lea ecx, [ebp - 0x1dc]
call fcn.004ab7c4
add esp, 0xc
mov ecx, eax
mov dword [ebp - 4], 1
call fcn.00451547
lea ecx, [ebp - 0x1dc]
jmp 0x4a0001
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
push dword [ebp - 0x18]
mov dword [esi + 0x20], eax
mov dword [esi + 0x1c], ecx
jmp 0x49feee
push 7
pop ecx
cmp eax, ecx
jbe 0x4a03d6
sub eax, 8
inc dword [ebp - 0x20]
dec dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
push dword [ebp + 8]
mov edx, edi
mov dword [esi + 0x34], ebx
mov ecx, esi
call fcn.0049f8bd
mov ebx, dword [esi + 0x34]
pop ecx
mov dword [ebp - 0x18], eax
cmp dword [esi + 0x30], ebx
jne 0x4a03af
mov eax, dword [ebp - 0x1c]
mov dword [eax], 8
mov eax, dword [ebp - 0x14]
push 1
jmp 0x49fee5
push 0xfffffffffffffffd
jmp 0x49fee5