Function at 0x489f00
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xa8
mov eax, dword [0x4de980]
xor eax, esp
mov dword [esp + 0xa4], eax
push ebp
mov ebp, dword [esp + 0xb4]
push esi
mov esi, dword [esp + 0xb4]
mov dword [esp + 8], ebp
test esi, esi
je 0x48a477
test ebp, ebp
je 0x48a477
mov al, byte [esi + 0x12c]
push ebx
push edi
cmp al, 8
jae 0x489fab
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ebx + ebp + 0x20]
push eax
push esi
call fcn.004906d0
push edi
add ebp, 0x20
push ebx
push ebp
mov byte [esi + 0x12c], 8
call fcn.0048fda0
add esp, 0x18
test eax, eax
je 0x489f9f
cmp ebx, 4
jae 0x489f91
add edi, 0xfffffffc
push edi
push ebx
push ebp
call fcn.0048fda0
add esp, 0xc
test eax, eax
je 0x489f91
push 0x4c0214
jmp 0x489f96
push 0x4c01ec
push esi
call fcn.00493730
add esp, 8
cmp ebx, 3
jae 0x489fab
or dword [esi + 0x68], 0x1000
mov bl, 0x73
lea ecx, [ecx]
mov byte [esp + 0xa4], 0x49
mov byte [esp + 0xa5], 0x48
mov byte [esp + 0xa6], 0x44
mov byte [esp + 0xa7], 0x52
mov byte [esp + 0x64], 0x49
mov byte [esp + 0x65], 0x44
mov byte [esp + 0x66], 0x41
mov byte [esp + 0x67], 0x54
mov byte [esp + 0x34], 0x49
mov byte [esp + 0x35], 0x45
mov byte [esp + 0x36], 0x4e
mov byte [esp + 0x37], 0x44
mov byte [esp + 0x14], 0x50
mov byte [esp + 0x15], 0x4c
mov byte [esp + 0x16], 0x54
mov byte [esp + 0x17], 0x45
mov byte [esp + 0x74], 0x62
mov byte [esp + 0x75], 0x4b
mov byte [esp + 0x76], 0x47
mov byte [esp + 0x77], 0x44
mov byte [esp + 0x44], 0x63
mov byte [esp + 0x45], 0x48
mov byte [esp + 0x46], 0x52
mov byte [esp + 0x47], 0x4d
mov byte [esp + 0x94], 0x67
mov byte [esp + 0x95], 0x41
mov byte [esp + 0x96], 0x4d
mov byte [esp + 0x97], 0x41
mov byte [esp + 0x54], 0x68
mov byte [esp + 0x55], 0x49
mov byte [esp + 0x56], 0x53
mov byte [esp + 0x57], 0x54
mov byte [esp + 0x5c], 0x69
mov byte [esp + 0x5d], 0x43
mov byte [esp + 0x5e], 0x43
mov byte [esp + 0x5f], 0x50
mov byte [esp + 0x84], 0x6f
mov byte [esp + 0x85], 0x46
mov byte [esp + 0x86], 0x46
mov byte [esp + 0x87], bl
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0x43
mov byte [esp + 0x1e], 0x41
mov byte [esp + 0x1f], 0x4c
mov byte [esp + 0x2c], 0x70
mov byte [esp + 0x2d], 0x48
mov byte [esp + 0x2e], 0x59
mov byte [esp + 0x2f], bl
mov byte [esp + 0x3c], bl
mov byte [esp + 0x3d], 0x42
mov byte [esp + 0x3e], 0x49
mov byte [esp + 0x3f], 0x54
mov byte [esp + 0x24], bl
mov byte [esp + 0x25], 0x43
mov byte [esp + 0x26], 0x41
mov byte [esp + 0x27], 0x4c
mov byte [esp + 0x6c], bl
mov byte [esp + 0x6d], 0x50
mov byte [esp + 0x6e], 0x4c
mov byte [esp + 0x6f], 0x54
mov byte [esp + 0x4c], bl
mov byte [esp + 0x4d], 0x52
mov byte [esp + 0x4e], 0x47
mov byte [esp + 0x4f], 0x42
mov byte [esp + 0x7c], 0x74
mov byte [esp + 0x7d], 0x45
mov byte [esp + 0x7e], 0x58
mov byte [esp + 0x7f], 0x74
mov byte [esp + 0x8c], 0x74
mov byte [esp + 0x8d], 0x49
mov byte [esp + 0x8e], 0x4d
mov byte [esp + 0x8f], 0x45
mov byte [esp + 0x9c], 0x74
mov byte [esp + 0x9d], 0x52
mov byte [esp + 0x9e], 0x4e
mov byte [esp + 0x9f], 0x53
mov byte [esp + 0xac], 0x7a
mov byte [esp + 0xad], 0x54
mov byte [esp + 0xae], 0x58
mov byte [esp + 0xaf], 0x74
push esi
call fcn.00494aa0
mov ebp, dword [esp + 0x68]
lea ecx, [esi + 0x11c]
add esp, 4
mov edi, eax
cmp dword [ecx], ebp
jne 0x48a1aa
mov eax, dword [esi + 0x68]
test al, 8
je 0x48a1aa
or eax, 0x2000
mov dword [esi + 0x68], eax
mov eax, dword [ecx]
cmp eax, dword [esp + 0xa4]
jne 0x48a1c9
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00494bd0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x34]
jne 0x48a1e3
mov edx, dword [esp + 0x10]
push edi
push edx
push esi
call fcn.00494ee0
add esp, 0xc
jmp 0x489fb0
push ecx
push esi
call fcn.00490400
add esp, 8
test eax, eax
je 0x48a247
cmp dword [esi + 0x11c], ebp
jne 0x48a1fd
or dword [esi + 0x68], 4
mov eax, dword [esp + 0x10]
push edi
push eax
push esi
call fcn.00496de0
mov eax, dword [esi + 0x11c]
add esp, 0xc
cmp eax, dword [esp + 0x14]
jne 0x48a221
or dword [esi + 0x68], 2
jmp 0x489fb0
cmp eax, ebp
jne 0x489fb0
mov eax, dword [esi + 0x68]
test al, 1
jne 0x48a425
push 0x4c01d0
push esi
call fcn.00493730
add esp, 8
jmp 0x48a475
mov eax, dword [esi + 0x11c]
cmp eax, dword [esp + 0x14]
jne 0x48a267
mov ecx, dword [esp + 0x10]
push edi
push ecx
push esi
call fcn.00494d50
add esp, 0xc
jmp 0x489fb0
cmp eax, ebp
je 0x48a442
push edi
cmp eax, dword [esp + 0x78]
jne 0x48a289
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00495e90
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x48]
jne 0x48a2a2
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00495210
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x98]
jne 0x48a2be
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00494f30
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x58]
jne 0x48a2d7
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.004960e0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x88]
jne 0x48a2f3
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.004963a0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x20]
jne 0x48a30c
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.004964d0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x28]
jne 0x48a325
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.004967a0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x30]
jne 0x48a33e
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00496280
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x40]
jne 0x48a357
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.004950a0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x50]
jne 0x48a370
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.004955b0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x60]
jne 0x48a389
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.004957b0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x70]
jne 0x48a3a2
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.004959a0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x80]
jne 0x48a3be
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00496ad0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0x90]
jne 0x48a3da
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.004969b0
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0xa0]
jne 0x48a3f6
mov ecx, dword [esp + 0x14]
push ecx
push esi
call fcn.00495c10
add esp, 0xc
jmp 0x489fb0
cmp eax, dword [esp + 0xb0]
jne 0x48a412
mov edx, dword [esp + 0x14]
push edx
push esi
call fcn.00496c30
add esp, 0xc
jmp 0x489fb0
mov eax, dword [esp + 0x14]
push eax
push esi
call fcn.00496de0
add esp, 0xc
jmp 0x489fb0
cmp byte [esi + 0x126], 3
jne 0x48a475
test al, 2
jne 0x48a475
push 0x4c01b4
push esi
call fcn.00493730
add esp, 8
jmp 0x48a475
mov eax, dword [esi + 0x68]
test al, 1
jne 0x48a450
push 0x4c01d0
jmp 0x48a462
cmp byte [esi + 0x126], 3
jne 0x48a46b
test al, 2
jne 0x48a46b
push 0x4c01b4
push esi
call fcn.00493730
add esp, 8
or dword [esi + 0x68], 4
mov dword [esi + 0x10c], edi
pop edi
pop ebx
mov ecx, dword [esp + 0xac]
pop esi
pop ebp
xor ecx, esp
call fcn.00424ae1
add esp, 0xa8
ret