Function at 0x49b720
Capabilities:
Contain obfuscated stackstrings
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8d0
mov eax, dword [0x55b090]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov eax, 0x43
mov word [ebp - 0x8b6], ax
mov eax, 0x39
push edi
mov edi, dword [ebp + 8]
mov word [ebp - 0x8bc], ax
mov eax, 0x55
push 0x800
mov word [ebp - 0x894], ax
lea eax, [ebp - 0x80c]
push 0
push eax
mov dword [ebp - 0x880], esi
mov dword [ebp - 0x89c], 0x520051
mov dword [ebp - 0x8ac], 0x490048
mov dword [ebp - 0x8c0], 0x380037
mov dword [ebp - 0x8b4], 0x450044
mov dword [ebp - 0x8cc], 0x320031
mov dword [ebp - 0x8b0], 0x470046
mov dword [ebp - 0x892], 0x570056
mov dword [ebp - 0x8a8], 0x4b004a
mov dword [ebp - 0x898], 0x540053
mov dword [ebp - 0x8c8], 0x340033
mov dword [ebp - 0x8c4], 0x360035
mov dword [ebp - 0x8a0], 0x50004e
mov dword [ebp - 0x8ba], 0x420041
mov dword [ebp - 0x8a4], 0x4d004c
mov dword [ebp - 0x88e], 0x58
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
test edi, edi
jne 0x49b81a
xor eax, eax
jmp 0x49b859
mov eax, edi
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x49b820
sub eax, edx
sar eax, 1
lea esi, [eax + 1]
cmp esi, 0x3fffffff
jle 0x49b83e
xor eax, eax
jmp 0x49b853
add esi, esi
mov eax, esi
call fcn.00485200
mov ecx, esp
mov edx, edi
push 3
push esi
call fcn.0045f590
mov esi, dword [ebp - 0x880]
push eax
lea eax, [ebp - 0x80c]
push 0x800
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
lea ecx, [ebp - 0x80c]
add esp, 0xc
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x49b878
sub ecx, edx
mov dword [ebp - 0x874], 0
push ecx
lea eax, [ebp - 0x80c]
mov dword [ebp - 0x830], 0x6a09e667
xorps xmm0, xmm0
mov dword [ebp - 0x82c], 0xbb67ae85
push eax
lea ecx, [ebp - 0x87c]
movlpd qword [ebp - 0x87c], xmm0
mov dword [ebp - 0x828], 0x3c6ef372
mov dword [ebp - 0x824], 0xa54ff53a
mov dword [ebp - 0x820], 0x510e527f
mov dword [ebp - 0x81c], 0x9b05688c
mov dword [ebp - 0x818], 0x1f83d9ab
mov dword [ebp - 0x814], 0x5be0cd19
call fcn.004ba540
lea ecx, [ebp - 0x87c]
call fcn.004f66e0
movzx eax, byte [ebp - 0x82d]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi], ax
movzx eax, byte [ebp - 0x830]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 2], ax
movzx eax, byte [ebp - 0x82b]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 4], ax
movzx eax, byte [ebp - 0x826]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 6], ax
movzx eax, byte [ebp - 0x821]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 8], ax
movzx eax, byte [ebp - 0x824]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 0xa], ax
movzx eax, byte [ebp - 0x81f]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 0xc], ax
movzx eax, byte [ebp - 0x81a]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 0xe], ax
movzx eax, byte [ebp - 0x815]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 0x10], ax
movzx eax, byte [ebp - 0x818]
and eax, 0x1f
movzx eax, word [ebp + eax*2 - 0x8cc]
mov word [esi + 0x12], ax
lea esp, [ebp - 0x8dc]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.00482396
mov esp, ebp
pop ebp
ret 0xc