Function at 0x48ce2d
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xa4
push ebx
push esi
mov esi, ecx
push edi
test esi, esi
je 0x48d181
xor edx, edx
call fcn.0048de0d
xor eax, eax
mov dword [esp + 0x20], 0x52444849
mov byte [esp + 0x24], al
lea ebx, [esi + 0x11c]
mov dword [esp + 0x10], 0x54414449
mov byte [esp + 0x14], al
mov dword [esp + 0x28], 0x444e4549
mov byte [esp + 0x2c], al
mov dword [esp + 0x18], 0x45544c50
mov byte [esp + 0x1c], al
mov dword [esp + 0x30], 0x44474b62
mov byte [esp + 0x34], al
mov dword [esp + 0x38], 0x4d524863
mov byte [esp + 0x3c], al
mov dword [esp + 0x40], 0x414d4167
mov byte [esp + 0x44], al
mov dword [esp + 0x48], 0x54534968
mov byte [esp + 0x4c], al
mov dword [esp + 0x80], 0x50434369
mov byte [esp + 0x84], al
mov dword [esp + 0x50], 0x7346466f
mov byte [esp + 0x54], al
mov dword [esp + 0x58], 0x4c414370
mov byte [esp + 0x5c], al
mov dword [esp + 0x68], 0x73594870
mov byte [esp + 0x6c], al
mov dword [esp + 0x70], 0x54494273
mov byte [esp + 0x74], al
mov dword [esp + 0x60], 0x4c414373
mov byte [esp + 0x64], al
mov dword [esp + 0x88], 0x544c5073
mov byte [esp + 0x8c], al
mov dword [esp + 0x78], 0x42475273
mov byte [esp + 0x7c], al
mov dword [esp + 0x90], 0x74584574
mov byte [esp + 0x94], al
mov dword [esp + 0x98], 0x454d4974
mov byte [esp + 0x9c], al
mov dword [esp + 0xa0], 0x534e5274
mov byte [esp + 0xa4], al
mov dword [esp + 0xa8], 0x7458547a
mov byte [esp + 0xac], al
mov ecx, esi
call fcn.0048dd1f
mov ecx, dword [ebx]
mov edi, eax
lea eax, [esp + 0x20]
cmp ecx, dword [eax]
jne 0x48cf8b
push edi
xor edx, edx
mov ecx, esi
call fcn.0048e250
jmp 0x48d176
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
cmp eax, dword [ecx]
mov ecx, esi
jne 0x48cfa2
push edi
call fcn.0048e4ef
jmp 0x48d176
mov edx, ebx
call fcn.0048c1d7
test eax, eax
lea ecx, [esp + 0x10]
mov eax, dword [ebx]
je 0x48cff2
cmp eax, dword [ecx]
jne 0x48cfd0
test edi, edi
jne 0x48cfc4
test dword [esi + 0x68], 0x2000
je 0x48cfd0
mov edx, str.Too_many_IDATs_found
mov ecx, esi
call fcn.0048d93d
push edi
xor edx, edx
mov ecx, esi
call fcn.0048fca8
mov eax, dword [ebx]
pop ecx
lea ecx, [esp + 0x18]
cmp eax, dword [ecx]
jne 0x48d177
or dword [esi + 0x68], 2
jmp 0x48d177
cmp eax, dword [ecx]
jne 0x48d01d
test edi, edi
jne 0x48d003
test dword [esi + 0x68], 0x2000
je 0x48d00f
mov edx, str.Too_many_IDATs_found
mov ecx, esi
call fcn.0048d93d
mov edx, edi
mov ecx, esi
call fcn.0048de0d
jmp 0x48d177
lea ecx, [esp + 0x18]
xor edx, edx
push edi
cmp eax, dword [ecx]
jne 0x48d034
mov ecx, esi
call fcn.0048e39a
jmp 0x48d176
lea ecx, [esp + 0x34]
cmp eax, dword [ecx]
jne 0x48d048
mov ecx, esi
call fcn.0048f1c1
jmp 0x48d176
lea ecx, [esp + 0x3c]
cmp eax, dword [ecx]
jne 0x48d05c
mov ecx, esi
call fcn.0048e75f
jmp 0x48d176
lea ecx, [esp + 0x44]
cmp eax, dword [ecx]
jne 0x48d070
mov ecx, esi
call fcn.0048e534
jmp 0x48d176
lea ecx, [esp + 0x4c]
cmp eax, dword [ecx]
jne 0x48d084
mov ecx, esi
call fcn.0048f361
jmp 0x48d176
lea ecx, [esp + 0x54]
cmp eax, dword [ecx]
jne 0x48d098
mov ecx, esi
call fcn.0048f4f9
jmp 0x48d176
lea ecx, [esp + 0x5c]
cmp eax, dword [ecx]
jne 0x48d0ac
mov ecx, esi
call fcn.0048f596
jmp 0x48d176
lea ecx, [esp + 0x64]
cmp eax, dword [ecx]
jne 0x48d0c0
mov ecx, esi
call fcn.0048f7bd
jmp 0x48d176
lea ecx, [esp + 0x6c]
cmp eax, dword [ecx]
jne 0x48d0d4
mov ecx, esi
call fcn.0048f45e
jmp 0x48d176
lea ecx, [esp + 0x74]
cmp eax, dword [ecx]
jne 0x48d0e8
mov ecx, esi
call fcn.0048e657
jmp 0x48d176
lea ecx, [esp + 0x7c]
cmp eax, dword [ecx]
jne 0x48d0f9
mov ecx, esi
call fcn.0048ea78
jmp 0x48d176
lea ecx, [esp + 0x84]
cmp eax, dword [ecx]
jne 0x48d10d
mov ecx, esi
call fcn.0048ec16
jmp 0x48d176
lea ecx, [esp + 0x8c]
cmp eax, dword [ecx]
jne 0x48d121
mov ecx, esi
call fcn.0048edc9
jmp 0x48d176
lea ecx, [esp + 0x94]
cmp eax, dword [ecx]
jne 0x48d135
mov ecx, esi
call fcn.0048f9ff
jmp 0x48d176
lea ecx, [esp + 0x9c]
cmp eax, dword [ecx]
jne 0x48d149
mov ecx, esi
call fcn.0048f937
jmp 0x48d176
lea ecx, [esp + 0xa4]
cmp eax, dword [ecx]
jne 0x48d15d
mov ecx, esi
call fcn.0048f00a
jmp 0x48d176
lea ecx, [esp + 0xac]
cmp eax, dword [ecx]
mov ecx, esi
jne 0x48d171
call fcn.0048fb29
jmp 0x48d176
call fcn.0048fca8
pop ecx
test byte [esi + 0x68], 0x10
je 0x48cf69
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret