Function at 0x49f300
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5064d1
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push ebp
push esi
push edi
mov eax, dword [0x806d00]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x40], edi
push 1
lea eax, [edi + 0x14]
push eax
lea ecx, [esp + 0x2c]
xor ebx, ebx
push ecx
mov dword [esp + 0x28], ebx
call dword [0x6ad848]
add esp, 0xc
push 1
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x74], ebx
call dword [0x6ad89c]
push str.TASKS
lea ecx, [esp + 0x34]
mov byte [esp + 0x70], 1
call dword [0x6abbc4]
push 1
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x22]
push edx
mov byte [esp + 0x7c], 2
call dword [0x6aba5c]
movzx esi, byte [esp + 0x26]
add esp, 0x10
neg esi
sbb esi, esi
lea eax, [esp + 0x16]
lea ecx, [esp + 0x30]
and esi, eax
mov byte [esp + 0x6c], 1
call dword [0x6abc18]
lea ecx, [esp + 0x30]
cmp esi, ebx
je 0x49fba4
push str.TASKS
call dword [0x6abbc4]
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x74], 3
call dword [0x6ad8a0]
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
push 0x705ec4
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
mov esi, dword [0x6ad8a4]
lea eax, [esp + 0x50]
mov ebx, 1
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], 6
mov dword [esp + 0x20], ebx
call esi
lea ebp, [ebx + 0xd]
test al, al
je 0x49f5e5
push str.REG_TIME
lea ecx, [esp + 0x50]
call dword [0x6abbc4]
lea ecx, [esp + 0x4c]
push ecx
mov ebx, 3
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 7
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push 0x704378
lea ecx, [esp + 0x4c]
call dword [0x6abbc4]
lea edx, [esp + 0x48]
mov ebx, 7
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 8
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push 0x705eb4
lea ecx, [esp + 0x48]
call dword [0x6abbc4]
lea eax, [esp + 0x44]
mov ebx, 0xf
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 9
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.PAGES_CNT
lea ecx, [esp + 0x44]
call dword [0x6abbc4]
lea ecx, [esp + 0x40]
push ecx
mov ebx, 0x1f
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xa
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.FILE_REC
lea ecx, [esp + 0x40]
call dword [0x6abbc4]
lea edx, [esp + 0x3c]
mov ebx, 0x3f
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xb
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.STATUS
lea ecx, [esp + 0x3c]
call dword [0x6abbc4]
lea eax, [esp + 0x38]
mov ebx, 0x7f
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xc
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.FORMAT
lea ecx, [esp + 0x38]
call dword [0x6abbc4]
lea ecx, [esp + 0x34]
push ecx
mov ebx, 0xff
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xd
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.LANG
lea ecx, [esp + 0x1c]
call dword [0x6abbc4]
lea edx, [esp + 0x18]
mov ebx, 0x1ff
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], ebp
mov dword [esp + 0x20], ebx
call esi
test al, al
je 0x49f5e5
push str.OCR_SYS
lea ecx, [esp + 0x30]
call dword [0x6abbc4]
lea eax, [esp + 0x2c]
mov ebx, 0x3ff
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x20], ebx
call esi
mov byte [esp + 0x16], 0
test al, al
jne 0x49f5ea
mov byte [esp + 0x16], 1
mov dword [esp + 0x6c], ebp
test ebx, 0x200
je 0x49f60a
and ebx, 0xfffffdff
lea ecx, [esp + 0x2c]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 0xd
test ebx, 0x100
je 0x49f62e
and ebx, 0xfffffeff
lea ecx, [esp + 0x18]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 0xc
test bl, bl
jns 0x49f64e
and ebx, 0xffffff7f
lea ecx, [esp + 0x34]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 0xb
test bl, 0x40
je 0x49f66c
and ebx, 0xffffffbf
lea ecx, [esp + 0x38]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 0xa
test bl, 0x20
je 0x49f68a
and ebx, 0xffffffdf
lea ecx, [esp + 0x3c]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 9
test bl, 0x10
je 0x49f6a8
and ebx, 0xffffffef
lea ecx, [esp + 0x40]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 8
test bl, 8
je 0x49f6c6
and ebx, 0xfffffff7
lea ecx, [esp + 0x44]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 7
test bl, 4
je 0x49f6e4
and ebx, 0xfffffffb
lea ecx, [esp + 0x48]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 6
test bl, 2
je 0x49f702
and ebx, 0xfffffffd
lea ecx, [esp + 0x4c]
mov dword [esp + 0x1c], ebx
call dword [0x6abc18]
mov dword [esp + 0x6c], 5
test bl, 1
je 0x49f719
lea ecx, [esp + 0x50]
call dword [0x6abc18]
cmp byte [esp + 0x16], 0
je 0x49fb90
push 0x705eb4
lea ecx, [esp + 0x54]
xor bl, bl
call dword [0x6abbc4]
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], 0x10
call esi
test al, al
lea ecx, [esp + 0x50]
sete byte [esp + 0x16]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
cmp byte [esp + 0x16], bl
je 0x49f7eb
push str.TEXT
lea ecx, [esp + 0x4c]
call dword [0x6abbc4]
push 0x705eb4
lea ecx, [esp + 0x50]
mov byte [esp + 0x70], 0x11
call dword [0x6abbc4]
push str.TASKS
lea ecx, [esp + 0x54]
mov byte [esp + 0x70], 0x12
call dword [0x6abbc4]
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x30]
push edx
mov ecx, edi
mov byte [esp + 0x7c], 0x13
call fcn.0049bc10
lea ecx, [esp + 0x50]
mov bl, al
mov byte [esp + 0x6c], 0x12
call dword [0x6abc18]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x11
call dword [0x6abc18]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
push str.FORMAT
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], 0x14
call esi
test al, al
lea ecx, [esp + 0x50]
sete byte [esp + 0x16]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
cmp byte [esp + 0x16], 0
je 0x49f8b1
push str.TEXT
lea ecx, [esp + 0x4c]
call dword [0x6abbc4]
push str.FORMAT
lea ecx, [esp + 0x50]
mov byte [esp + 0x70], 0x15
call dword [0x6abbc4]
push str.TASKS
lea ecx, [esp + 0x54]
mov byte [esp + 0x70], 0x16
call dword [0x6abbc4]
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x30]
push ecx
mov ecx, edi
mov byte [esp + 0x7c], 0x17
call fcn.0049bc10
lea ecx, [esp + 0x50]
mov bl, al
mov byte [esp + 0x6c], 0x16
call dword [0x6abc18]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x15
call dword [0x6abc18]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
push str.LANG
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
lea edx, [esp + 0x50]
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], 0x18
call esi
test al, al
lea ecx, [esp + 0x50]
sete byte [esp + 0x16]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
cmp byte [esp + 0x16], 0
je 0x49f977
push str.TEXT
lea ecx, [esp + 0x4c]
call dword [0x6abbc4]
push str.LANG
lea ecx, [esp + 0x50]
mov byte [esp + 0x70], 0x19
call dword [0x6abbc4]
push str.TASKS
lea ecx, [esp + 0x54]
mov byte [esp + 0x70], 0x1a
call dword [0x6abbc4]
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x50]
push ecx
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x30]
push eax
mov ecx, edi
mov byte [esp + 0x7c], 0x1b
call fcn.0049bc10
lea ecx, [esp + 0x50]
mov bl, al
mov byte [esp + 0x6c], 0x1a
call dword [0x6abc18]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x19
call dword [0x6abc18]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
push str.OCR_SYS
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x24]
mov byte [esp + 0x70], 0x1c
call esi
test al, al
lea ecx, [esp + 0x50]
sete byte [esp + 0x16]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
cmp byte [esp + 0x16], 0
je 0x49fa3d
push str.TEXT
lea ecx, [esp + 0x4c]
call dword [0x6abbc4]
push str.OCR_SYS
lea ecx, [esp + 0x50]
mov byte [esp + 0x70], 0x1d
call dword [0x6abbc4]
push str.TASKS
lea ecx, [esp + 0x54]
mov byte [esp + 0x70], 0x1e
call dword [0x6abbc4]
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x30]
push edx
mov ecx, edi
mov byte [esp + 0x7c], 0x1f
call fcn.0049bc10
lea ecx, [esp + 0x50]
mov bl, al
mov byte [esp + 0x6c], 0x1e
call dword [0x6abc18]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x1d
call dword [0x6abc18]
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
test bl, bl
jne 0x49fb90
mov byte [esp + 0x50], 0x20
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x1a]
call dword [0x6abb70]
push str.TASKS
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
push 0
lea ecx, [esp + 0x4c]
push str.The_table__1_is_obsolete.
push ecx
mov byte [esp + 0x78], 0x20
call fcn.0049bb40
add esp, 0xc
mov esi, dword [0x6abb74]
lea edx, [esp + 0x16]
push edx
push 0
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, eax
mov byte [esp + 0x7c], 0x21
call esi
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x23
call dword [0x6abc18]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], 0x24
call dword [0x6abc18]
mov byte [esp + 0x44], 0x20
mov eax, dword [esp + 0x44]
push eax
lea ecx, [esp + 0x1c]
call dword [0x6abb70]
push 0x6b6bd8
lea ecx, [esp + 0x44]
call dword [0x6abbc4]
lea ecx, [esp + 0x18]
push ecx
push 0
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x50]
push ecx
mov bl, 0x25
mov ecx, eax
mov byte [esp + 0x7c], bl
call esi
push eax
lea ecx, [edi + 0xc]
mov byte [esp + 0x70], 0x26
call dword [0x6abbac]
lea ecx, [esp + 0x44]
mov byte [esp + 0x6c], bl
call dword [0x6abc18]
lea ecx, [esp + 0x40]
mov byte [esp + 0x6c], 0x24
call dword [0x6abc18]
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 5
call dword [0x6abc18]
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 1
call dword [0x6ad830]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x6c], 0
call dword [0x6abbf0]
test al, al
jne 0x49fb68
mov edx, dword [esp + 0x28]
push edx
lea ecx, [esp + 0x2c]
call fcn.00401260
lea ecx, [esp + 0x24]
mov dword [esp + 0x6c], 0xffffffff
call dword [0x6ad84c]
xor al, al
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 1
call dword [0x6ad830]
jmp 0x49fe82
push str.CREATE_TABLE_TASKS__ID_________INTEGER_PRIMARY_KEY__REG_TIME___TIMESTAMP__TASK_ID____TEXT__MD5________TEXT__PAGES_CNT__INTEGER__FILE_REC___TEXT__STATUS_____TEXT__FORMAT_____TEXT__LANG_______TEXT__OCR_SYS____TEXT_
call dword [0x6abbc4]
mov esi, dword [0x6ad8c4]
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x74], 0x27
call esi
mov edi, dword [0x6ad82c]
lea ecx, [esp + 0x50]
call edi
mov ebx, dword [0x6ad8c8]
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x28]
call ebx
mov ecx, eax
mov byte [esp + 0x6c], 0x28
call dword [0x6ad8c0]
mov ebp, dword [0x6ad8d0]
test eax, eax
lea ecx, [esp + 0x54]
setne byte [esp + 0x16]
mov byte [esp + 0x6c], 0x27
call ebp
cmp byte [esp + 0x16], 0
je 0x49fdb5
mov byte [esp + 0x50], 0x20
mov eax, dword [esp + 0x50]
push eax
lea ecx, [esp + 0x1c]
call dword [0x6abb70]
push str.TASKS
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
push 0
lea ecx, [esp + 0x4c]
push str.Cant_create_table__1
push ecx
mov byte [esp + 0x78], 0x29
call fcn.0049bb40
add esp, 0xc
mov esi, dword [0x6abb74]
lea edx, [esp + 0x18]
push edx
push 0
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x58]
push edx
mov ecx, eax
mov byte [esp + 0x7c], 0x2a
call esi
lea ecx, [esp + 0x48]
mov byte [esp + 0x6c], 0x2c
call dword [0x6abc18]
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], 0x2d
call dword [0x6abc18]
mov byte [esp + 0x44], 0x20
mov eax, dword [esp + 0x44]
push eax
lea ecx, [esp + 0x20]
call dword [0x6abb70]
mov byte [esp + 0x44], 0x20
mov ecx, dword [esp + 0x44]
push ecx
lea ecx, [esp + 0x1a]
call dword [0x6abb70]
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x28]
call ebx
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
mov byte [esp + 0x70], 0x2e
call dword [0x6ad8cc]
mov edi, eax
push str._1_:__2
lea ecx, [esp + 0x38]
mov byte [esp + 0x70], 0x2f
call dword [0x6abbc4]
lea edx, [esp + 0x16]
push edx
push 0
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x44]
push edx
mov ecx, eax
mov byte [esp + 0x7c], 0x30
call esi
lea ecx, [esp + 0x1c]
push ecx
mov bl, 0x31
push 0
mov byte [esp + 0x74], bl
push edi
lea edx, [esp + 0x48]
push edx
mov ecx, eax
call esi
mov ecx, dword [esp + 0x40]
push eax
add ecx, 0xc
mov byte [esp + 0x70], 0x32
call dword [0x6abbac]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x6c], bl
call dword [0x6abc18]
lea ecx, [esp + 0x38]
mov byte [esp + 0x6c], 0x30
call dword [0x6abc18]
lea ecx, [esp + 0x34]
mov byte [esp + 0x6c], 0x2f
call dword [0x6abc18]
lea ecx, [esp + 0x20]
mov byte [esp + 0x6c], 0x2e
call dword [0x6abc18]
lea ecx, [esp + 0x54]
mov byte [esp + 0x6c], 0x2d
call ebp
lea ecx, [esp + 0x4c]
mov byte [esp + 0x6c], 0x27
call dword [0x6abc18]
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 1
call dword [0x6abc18]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x6c], 0
call dword [0x6abbf0]
test al, al
jne 0x49fb68
mov eax, dword [esp + 0x28]
push eax
jmp 0x49fb5f
push str.CREATE_INDEX_IDX_TASKS_ID_ON_TASKS__ID_
lea ecx, [esp + 0x30]
call dword [0x6abbc4]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x54]
mov bl, 0x33
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x74], bl
call esi
lea ecx, [esp + 0x50]
call edi
push str.CREATE_INDEX_IDX_TASKS_REG_TIME_ON_TASKS__REG_TIME_
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
mov ebp, dword [0x6abbac]
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 0x34
call ebp
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], bl
call dword [0x6abc18]
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x54]
push ecx
lea ecx, [esp + 0x2c]
call esi
lea ecx, [esp + 0x50]
call edi
push str.CREATE_INDEX_IDX_TASKS_TASK_ID_ON_TASKS__TASK_ID_
lea ecx, [esp + 0x54]
call dword [0x6abbc4]
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x70], 0x35
call ebp
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], bl
call dword [0x6abc18]
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x2c]
call esi
lea ecx, [esp + 0x48]
call edi
lea ecx, [esp + 0x2c]
mov byte [esp + 0x6c], 0x27
call dword [0x6abc18]
lea ecx, [esp + 0x30]
mov byte [esp + 0x6c], 1
call dword [0x6abc18]
mov ecx, dword [esp + 0x28]
mov byte [esp + 0x6c], 0
call dword [0x6abbf0]
test al, al
jne 0x49fea3
mov ecx, dword [esp + 0x28]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00401260
lea ecx, [esp + 0x24]
mov dword [esp + 0x6c], 0xffffffff
call dword [0x6ad84c]
mov al, 1
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret