Function at 0x49d74c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e6f01
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x53c
push edi
mov dword [ebp - 0x548], ecx
push 0
push 1
mov eax, dword [ebp - 0x548]
add eax, 0x3c
push eax
call dword [0x4ea1a8]
test eax, eax
je 0x49d7a4
mov ecx, dword [ebp - 0x548]
cmp dword [ecx + 0x3c], 2
je 0x49d79f
push 1
call dword [0x4ea328]
jmp 0x49d789
jmp 0x49db31
mov byte [ebp - 0x124], 0x43
mov byte [ebp - 0x123], 0x57
mov byte [ebp - 0x122], 0x46
mov byte [ebp - 0x121], 0x44
mov byte [ebp - 0x120], 0x65
mov byte [ebp - 0x11f], 0x69
mov byte [ebp - 0x11e], 0x26
mov byte [ebp - 0x11d], 0x65
mov byte [ebp - 0x11c], 0x65
mov byte [ebp - 0x11b], 0x31
mov byte [ebp - 0x11a], 0x46
mov byte [ebp - 0x119], 0x6a
mov byte [ebp - 0x118], 0x76
mov byte [ebp - 0x117], 0x64
mov byte [ebp - 0x116], 0x6a
mov byte [ebp - 0x115], 0x33
mov byte [ebp - 0x114], 0
mov byte [ebp - 0x544], 0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x543]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 3
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
lea edx, [ebp - 0x544]
push edx
push 0xd148a4
call fcn.004a0ea3
add esp, 0x14
mov eax, dword [ebp - 0x548]
add eax, 0x48
push eax
push 0
lea ecx, [ebp - 0x544]
push ecx
call fcn.0049fedf
add esp, 0xc
mov edx, dword [ebp - 0x548]
mov dword [edx + 0x448], eax
mov byte [ebp - 0x128], 1
mov byte [ebp - 0x127], 0
mov byte [ebp - 0x126], 1
lea eax, [ebp - 0x124]
push eax
push 4
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx + 0xac4]
push edx
lea ecx, [ebp - 0x144]
call fcn.004a8740
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x144]
call fcn.004a87e0
mov byte [ebp - 0x90], 0
mov ecx, 0x20
xor eax, eax
lea edi, [ebp - 0x8f]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dword [ebp - 0x110], 0x5555a627
mov dword [ebp - 0x10c], 0xc8e301d6
mov dword [ebp - 0x108], 0x47fd389c
mov dword [ebp - 0x104], 0x9a16c76e
mov dword [ebp - 0x100], 0x55c4af5b
mov dword [ebp - 0xfc], 0x41112aa0
mov dword [ebp - 0xf8], 0x5577410b
mov dword [ebp - 0xf4], 0x86a4632e
mov dword [ebp - 0xf0], 0xee07d6a6
mov dword [ebp - 0xec], 0x641076d0
mov dword [ebp - 0xe8], 0x9311ab5e
mov dword [ebp - 0xe4], 0xc666fe9d
mov dword [ebp - 0xe0], 0xd652032c
mov dword [ebp - 0xdc], 0xec503496
mov dword [ebp - 0xd8], 0xd2494605
mov dword [ebp - 0xd4], 0x1691145
mov dword [ebp - 0xd0], 0xe2837fef
mov dword [ebp - 0xcc], 0x360ccb98
mov dword [ebp - 0xc8], 0x8a024a87
mov dword [ebp - 0xc4], 0x9fd98d81
mov dword [ebp - 0xc0], 0xb4041056
mov dword [ebp - 0xbc], 0xd26cff9b
mov dword [ebp - 0xb8], 0xf4e7adac
mov dword [ebp - 0xb4], 0x2cfda069
mov dword [ebp - 0xb0], 0x310a3062
mov dword [ebp - 0xac], 0x506071f6
mov dword [ebp - 0xa8], 0xf86f8b86
mov dword [ebp - 0xa4], 0xea76eee4
mov dword [ebp - 0xa0], 0xb350bfe1
mov dword [ebp - 0x9c], 0xb62c2f85
mov dword [ebp - 0x98], 0x8d33bfe3
mov dword [ebp - 0x94], 0xff2ec040
mov dword [ebp - 0x12c], 0
jmp 0x49da38
mov eax, dword [ebp - 0x12c]
add eax, 1
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x20
jge 0x49da64
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp + ecx*4 - 0x110]
push edx
call dword [0x4ea6c4]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + ecx*4 - 0x110], eax
jmp 0x49da29
push 0x80
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x90]
push eax
call fcn.004bb9a0
add esp, 0xc
push 0
push 0x80
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x124]
push edx
call fcn.004a00b6
add esp, 0x10
push 0x80
lea eax, [ebp - 0x90]
push eax
mov ecx, dword [ebp - 0x548]
add ecx, 0x2c
push ecx
call fcn.004a7f52
add esp, 0xc
push 3
lea edx, [ebp - 0x128]
push edx
mov eax, dword [ebp - 0x548]
add eax, 0x20
push eax
call fcn.004a7f52
add esp, 0xc
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx + 0x448]
push edx
mov eax, dword [ebp - 0x548]
add eax, 0x48
push eax
call fcn.0049cd30
add esp, 8
mov ecx, dword [ebp - 0x548]
mov dword [ecx + 0x4b8], eax
push 2
mov edx, dword [ebp - 0x548]
add edx, 0x3c
push edx
call dword [0x4ea1a4]
mov eax, dword [ebp - 0x548]
mov dword [eax + 0x40], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.004a87a0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 4