Function at 0x494670
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x517e07
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x214
push ebx
push esi
mov esi, ecx
mov eax, 0x522e6c
xor ecx, ecx
push edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x70], eax
mov dword [esp + 0x108], ecx
mov dword [esp + 0x228], ecx
mov dword [esp + 0x118], ecx
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x128], 0xe0000000
mov dword [esp + 0x12c], 0x3f60624d
mov dword [esp + 0x130], 0xa0000000
mov dword [esp + 0x134], 0x3feffe5c
mov dword [esp + 0x120], ecx
mov dword [esp + 0x124], 0x3ff00000
mov dword [esp + 0x138], 0x47ae147b
mov dword [esp + 0x13c], 0x3f847ae1
mov dword [esp + 0x140], 0xeb1c432d
mov dword [esp + 0x144], 0x3f1a36e2
mov dword [esp + 0x148], eax
mov dword [esp + 0x210], 0x47ae147b
mov dword [esp + 0x214], 0x3f847ae1
mov dword [esp + 0x218], 0xd2f1a9fc
mov dword [esp + 0x21c], 0x3f50624d
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x1f0], 0xd2f1a9fc
mov dword [esp + 0x1f4], 0xbf50624d
mov dword [esp + 0x1f8], 0x9374bc6a
mov dword [esp + 0x1fc], 0x3ff00418
mov dword [esp + 0x200], 0xd2f1a9fc
mov dword [esp + 0x204], 0x3f50624d
mov dword [esp + 0x208], 0xd916872b
mov dword [esp + 0x20c], 0x3feff7ce
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.0047dc50
mov ebx, dword [ebp + 8]
lea ecx, [esi + 0x48]
mov byte [esp + 0x228], 2
lea eax, [ebx + 0x48]
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.0047d9c0
fld qword [esp + 0x2c]
fsub qword [0x529428]
mov ecx, esi
fstp qword [esp + 0x2c]
fld qword [esp + 0x34]
fsub qword [0x529428]
fstp qword [esp + 0x34]
fld qword [esp + 0x3c]
fadd qword [0x529428]
fstp qword [esp + 0x3c]
fld qword [esp + 0x44]
fadd qword [0x529428]
fstp qword [esp + 0x44]
call fcn.004f7aa0
mov edi, eax
lea edx, [esp + 0x2c]
push edi
push edx
lea ecx, [esp + 0x150]
call fcn.0047ee90
test eax, eax
je 0x494b81
lea ecx, [esp + 0x50]
call fcn.0047dc50
lea eax, [esp + 0x50]
mov ecx, edi
push eax
mov byte [esp + 0x22c], 3
call fcn.0047e610
lea ecx, [esp + 0xc]
call fcn.0047dc50
lea ecx, [esp + 0x50]
lea edx, [esp + 0x2c]
push ecx
push edx
lea ecx, [esp + 0x14]
mov byte [esp + 0x230], 4
call fcn.0047d9c0
fld qword [esp + 0xc]
fsub qword [0x529428]
mov ecx, ebx
fstp qword [esp + 0xc]
fld qword [esp + 0x14]
fsub qword [0x529428]
fstp qword [esp + 0x14]
fld qword [esp + 0x1c]
fadd qword [0x529428]
fstp qword [esp + 0x1c]
fld qword [esp + 0x24]
fadd qword [0x529428]
fstp qword [esp + 0x24]
call fcn.004f7aa0
mov esi, eax
fld qword [esi]
fcomp qword [esp + 0xc]
fnstsw ax
test ah, 1
je 0x4948e8
fld qword [esi + 0x18]
fadd qword [esi]
fcomp qword [esp + 0xc]
fnstsw ax
test ah, 1
jne case.0x4949db.9
fld qword [esi]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x494909
fld qword [esi + 0x18]
fadd qword [esi]
fcomp qword [esp + 0x1c]
fnstsw ax
test ah, 0x41
je case.0x4949db.9
fld qword [esi + 8]
fcomp qword [esp + 0x14]
fnstsw ax
test ah, 1
je 0x49492c
fld qword [esi + 0x20]
fadd qword [esi + 8]
fcomp qword [esp + 0x14]
fnstsw ax
test ah, 1
jne case.0x4949db.9
fld qword [esi + 8]
fcomp qword [esp + 0x24]
fnstsw ax
test ah, 0x41
jne 0x49494f
fld qword [esi + 0x20]
fadd qword [esi + 8]
fcomp qword [esp + 0x24]
fnstsw ax
test ah, 0x41
je case.0x4949db.9
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fsubp st(1)
fst qword [esp + 0x110]
fcomp qword [0x520dc0]
fnstsw ax
test ah, 0x40
je 0x494981
mov dword [esp + 0x108], 0
jmp case.0x4949db.9
push esi
push edi
lea ecx, [esp + 0x78]
call fcn.0042b8a0
cmp dword [esp + 0x108], 1
jne case.0x4949db.9
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
push eax
push ecx
push edi
call fcn.00494610
mov edx, dword [esp + 0xd0]
lea ebx, [eax + eax*4]
mov eax, dword [esp + 0xcc]
push edx
push eax
push esi
shl ebx, 1
call fcn.00494610
add ebx, eax
add esp, 0x18
cmp ebx, 0x16
ja case.0x4949db.9
xor ecx, ecx
mov cl, byte [ebx + 0x494c84]
jmp dword [ecx*4 + 0x494c5c]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x520dc0]
fnstsw ax
test ah, 0x41
je case.0x4949db.0
jmp case.0x4949db.9
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x520dc0]
fnstsw ax
test ah, 1
jne case.0x4949db.0
jmp case.0x4949db.9
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
jmp 0x4949ee
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
jmp 0x494a12
mov eax, dword [edi + 0x40]
test eax, eax
je 0x494a82
fld qword [edi + 0x18]
fmul qword [esi + 0x20]
fld qword [edi + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x520dc0]
fnstsw ax
test ah, 1
jne case.0x4949db.9
mov ecx, dword [edi + 0x3c]
push esi
call fcn.0049b830
test eax, eax
jne case.0x4949db.0
jmp case.0x4949db.9
push esi
mov ecx, edi
call fcn.0049b800
test eax, eax
je case.0x4949db.0
mov ecx, dword [edi + 0x3c]
push esi
call fcn.0049b800
test eax, eax
jmp 0x4949fb
mov ebx, dword [edi + 0x3c]
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x494ade
fld qword [ebx + 0x18]
fmul qword [esi + 0x20]
fld qword [ebx + 0x20]
fmul qword [esi + 0x18]
fsubp st(1)
fcomp qword [0x520dc0]
fnstsw ax
test ah, 1
jne case.0x4949db.0
mov ecx, dword [ebx + 0x3c]
push esi
call fcn.0049b830
test eax, eax
je case.0x4949db.0
jmp case.0x4949db.9
push esi
mov ecx, ebx
call fcn.0049b800
test eax, eax
je case.0x4949db.9
mov ecx, dword [ebx + 0x3c]
push esi
call fcn.0049b800
test eax, eax
jmp 0x494a1f
mov eax, dword [edi + 0x40]
push esi
test eax, eax
mov ecx, edi
je 0x494b20
call fcn.0049b830
test eax, eax
je case.0x4949db.0
mov ecx, dword [edi + 0x3c]
push esi
call fcn.0049b830
test eax, eax
je case.0x4949db.0
jmp case.0x4949db.9
call fcn.0049b800
test eax, eax
je case.0x4949db.9
mov ecx, dword [edi + 0x3c]
push esi
call fcn.0049b800
test eax, eax
jmp 0x494a1f
mov ecx, dword [edi + 0x3c]
push esi
call fcn.0049b910
test al, al
jne case.0x4949db.0
mov ebx, dword [ebp + 8]
mov esi, dword [esi + 0x38]
mov ecx, ebx
call fcn.004f7aa0
cmp esi, eax
jne 0x4948c7
lea ecx, [esp + 0xc]
mov byte [esp + 0x228], 3
call fcn.00507a00
lea ecx, [esp + 0x50]
mov byte [esp + 0x228], 2
call fcn.00507a00
mov esi, dword [esp + 0x4c]
mov edi, dword [edi + 0x38]
mov ecx, esi
call fcn.004f7aa0
cmp edi, eax
je 0x494c08
jmp 0x49482b
lea ecx, [esp + 0xc]
mov byte [esp + 0x228], 3
call fcn.00507a00
lea ecx, [esp + 0x50]
mov byte [esp + 0x228], 2
call fcn.00507a00
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.00507a00
lea ecx, [esp + 0x148]
mov byte [esp + 0x228], 0
call fcn.0047ee20
lea ecx, [esp + 0x70]
mov dword [esp + 0x228], 0xffffffff
call fcn.0047ee20
mov al, 1
mov ecx, dword [esp + 0x220]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [esp + 0x2c]
mov byte [esp + 0x228], 1
call fcn.00507a00
lea ecx, [esp + 0x148]
mov byte [esp + 0x228], 0
call fcn.0047ee20
lea ecx, [esp + 0x70]
mov dword [esp + 0x228], 0xffffffff
call fcn.0047ee20
mov ecx, dword [esp + 0x220]
pop edi
pop esi
xor al, al
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4