Function at 0x4940e4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1d
push 0
push 0
dec ecx
jne 0x4940ec
push ebx
push esi
push edi
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x493a12
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x6265c8], 1
xor eax, eax
push ebp
push 0x4939a1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00405150
mov edx, dword [0x41a064]
mov dword [ebp - 0x24], edx
mov edx, dword [0x464b14]
mov dword [ebp - 0x20], edx
lea edx, [ebp - 0x24]
mov ecx, 1
call fcn.004931f4
test al, al
je 0x49414e
call fcn.004074a8
jmp 0x4945a8
call fcn.00459ba0
test al, al
jne 0x49416a
call fcn.00492b74
test al, al
jne 0x49416a
call fcn.004074a8
jmp 0x4945a8
call fcn.00405170
mov ebx, eax
call fcn.00405150
mov edx, dword [0x419938]
call fcn.00406398
test al, al
je 0x4941d0
call fcn.00405150
call fcn.00493b44
test al, al
je 0x49419a
test ebx, ebx
je 0x49419a
sub ebx, 5
call fcn.00405150
mov edx, dword [eax + 4]
lea eax, [ebp - 0x14]
mov ecx, 0
call fcn.00408964
call fcn.00405150
mov eax, dword [eax]
lea edx, [ebp - 0x28]
call fcn.00406078
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 8]
mov ecx, 0
call fcn.00408964
jmp 0x4941ed
lea eax, [ebp - 0x14]
mov edx, 0x493a2c
call fcn.00408190
lea eax, [ebp - 0x14]
call fcn.004588b0
lea eax, [ebp - 8]
call fcn.00407cf0
mov eax, dword [0x626b10]
call fcn.00492fa0
test al, al
je 0x49421c
lea edx, [ebp - 0x2c]
mov eax, dword [0x626b10]
mov eax, dword [eax]
call fcn.00406078
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 4]
mov ecx, 0
call fcn.00408964
jmp 0x494224
lea eax, [ebp - 4]
call fcn.00407cf0
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x44], 0xb
mov esi, ebx
mov eax, esi
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x4c]
mov eax, 8
call fcn.00420c88
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x40], eax
mov byte [ebp - 0x3c], 0x11
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x34], 0xb
lea edx, [ebp - 0x48]
mov ecx, 2
mov eax, 0x493a50
call fcn.00422800
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov ecx, 0
call fcn.00408964
mov eax, dword [ebp - 0x10]
call fcn.004087d8
push eax
call fcn.0040da20
lea eax, [ebp - 0x18]
call fcn.00407cf0
mov edx, 0x20
mov eax, esi
call fcn.004592e4
test al, al
je 0x494305
mov edi, esi
add esi, 0x20
dec esi
sub esi, edi
jb 0x494305
inc esi
lea eax, [ebp - 0x58]
mov ecx, 0x493ac4
mov edx, dword [ebp - 0x18]
call fcn.004085ec
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0x54]
call fcn.00408ca4
push dword [ebp - 0x54]
lea ecx, [ebp - 0x5c]
movzx eax, byte [edi]
mov edx, 2
call fcn.00420c5c
push dword [ebp - 0x5c]
push 0x493ad4
lea eax, [ebp - 0x50]
mov edx, 3
call fcn.00408ec0
mov edx, dword [ebp - 0x50]
lea eax, [ebp - 0x18]
mov ecx, 0
call fcn.00408964
inc edi
dec esi
jne 0x4942ae
lea eax, [ebp - 0x60]
push eax
mov eax, 0x493ae4
mov dword [ebp - 0xb8], eax
mov byte [ebp - 0xb4], 0x11
call fcn.004243a8
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0xbc]
call fcn.00493680
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xac], 0xb
lea eax, [ebp - 0xc0]
call fcn.00492174
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xa8], eax
mov byte [ebp - 0xa4], 0xb
mov eax, 0x493b00
mov dword [ebp - 0xa0], eax
mov byte [ebp - 0x9c], 0x11
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x98], eax
mov byte [ebp - 0x94], 0xb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x8c], 0xb
mov eax, dword [ebp - 4]
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x84], 0xb
lea edx, [ebp - 0xc4]
mov eax, ebx
call fcn.00493f08
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x7c], 0xb
mov eax, dword [ebp - 8]
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x74], 0xb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x6c], 0xb
lea eax, [ebp - 0xc8]
call fcn.00493b68
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x64], 0xb
lea edx, [ebp - 0xb8]
mov ecx, 0xa
mov eax, 0x493b1c
call fcn.00422800
mov edx, dword [ebp - 0x60]
lea eax, [ebp - 0x10]
mov ecx, 0
call fcn.00408964
lea edx, [ebp - 0xd0]
xor eax, eax
call fcn.00405548
mov eax, dword [ebp - 0xd0]
lea ecx, [ebp - 0xcc]
mov edx, 0x493c88
call fcn.0042162c
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc]
mov ecx, 0
call fcn.00408964
lea eax, [ebp - 0xc]
xor ecx, ecx
mov dl, 1
call fcn.0045a0f8
test al, al
jne 0x494460
call fcn.004074a8
jmp 0x4945a8
mov dl, 1
mov eax, dword [0x43a6c8]
call fcn.00447b64
mov ebx, eax
lea eax, [ebp - 0xd4]
mov edx, dword [ebp - 0x10]
call fcn.00408ca4
mov edx, dword [ebp - 0xd4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea eax, [ebp - 0xd8]
mov edx, dword [ebp - 0xc]
call fcn.00408ca4
mov eax, dword [ebp - 0xd8]
push eax
call fcn.0042becc
mov ecx, eax
mov eax, ebx
pop edx
mov esi, dword [eax]
call dword [esi + 0x80]
mov eax, ebx
call fcn.00406180
push 0x242014
push 0x493c94
lea eax, [ebp - 0xdc]
push eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 0xb
lea edx, [ebp - 0x24]
xor ecx, ecx
mov eax, 0x493ccc
call fcn.00422800
mov eax, dword [ebp - 0xdc]
call fcn.00408bd4
push eax
push 0
call fcn.0040e328
cmp eax, 6
jne 0x49458c
lea edx, [ebp - 0xe4]
xor eax, eax
call fcn.00405548
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0xe0]
mov edx, 0x493c88
call fcn.0042162c
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 0xc]
mov ecx, 0
call fcn.00408964
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x493db8
mov edx, 0x493db8
mov eax, 0x493de4
call fcn.004a9b0c
test al, al
jne 0x49458c
push 0x242030
push 0x493dfc
lea eax, [ebp - 0xe8]
push eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x20], 0xb
lea edx, [ebp - 0x24]
xor ecx, ecx
mov eax, 0x493e20
call fcn.00422800
mov eax, dword [ebp - 0xe8]
call fcn.00408bd4
push eax
push 0
call fcn.0040e328
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4939a8
mov byte [0x6265c8], 0
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x493a19
lea eax, [ebp - 0xe8]
mov edx, 8
call fcn.00407d2c
lea eax, [ebp - 0xc8]
mov edx, 4
call fcn.00407d5c
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00407d2c
lea eax, [ebp - 0x58]
call fcn.00407cf0
lea eax, [ebp - 0x54]
mov edx, 3
call fcn.00407d2c
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00407d2c
lea eax, [ebp - 0x18]
mov edx, 6
call fcn.00407d5c
ret