Function at 0x48dd50
Capabilities:
Contain obfuscated stackstrings
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x5888bc
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x6b3854]
xor eax, esp
mov dword [esp + 0x268], eax
push ebx
push esi
push edi
mov eax, dword [0x6b3854]
xor eax, esp
push eax
lea eax, [esp + 0x27c]
mov dword fs:[0], eax
push 0x218
mov esi, ecx
call fcn.0056dadb
add esp, 4
mov dword [esp + 0x14], eax
xor edi, edi
mov dword [esp + 0x284], edi
cmp eax, edi
je 0x48ddb3
mov ecx, eax
call fcn.004db530
mov edi, eax
mov al, byte [esi + 0x128]
mov ebx, dword [esp + 0x28c]
mov dword [esp + 0x284], 0xffffffff
mov dword [esi + 0x320], edi
mov byte [esi + 0x324], bl
mov byte [esp + 0x13], al
push ebx
cmp al, 1
jne 0x48dde7
push 0xaa
jmp 0x48de3d
test al, al
jns 0x48de03
movzx ecx, word [esi + 0x362]
mov eax, dword [esi + 0x39c]
movzx edx, word [eax + ecx*2 + 0x84]
push edx
jmp 0x48de3d
test al, 0x20
je 0x48de27
mov eax, dword [esi + 0x370]
movzx ecx, word [eax + 0x98]
mov dword [esp + 0x18], ecx
fild dword [esp + 0x18]
fmul dword [eax + 0x7c]
call fcn.0056dc70
push eax
jmp 0x48de3d
test al, 2
je 0x48de38
mov eax, dword [esi + 0x42c]
movzx edx, word [eax + 0x1c]
push edx
jmp 0x48de3d
push 0xb4
push esi
mov ecx, edi
call fcn.004db570
test bl, 1
je 0x48df6f
mov bl, byte [esp + 0x13]
cmp bl, 0x20
je 0x48de71
cmp bl, 0x29
je 0x48de71
mov eax, dword [esi + 0x320]
mov ecx, dword [eax + 0x1fc]
lea edx, [esi + 0x131]
push edx
jmp 0x48de87
mov eax, dword [esi + 0x370]
mov ecx, dword [esi + 0x320]
mov ecx, dword [ecx + 0x1fc]
add eax, 4
push eax
call fcn.004daa30
cmp bl, 1
jne 0x48df4f
mov ecx, esi
call fcn.00495c30
test eax, eax
je 0x48dea7
mov ecx, esi
call fcn.0048d540
mov ecx, esi
call fcn.00495ca0
mov ecx, dword [esi + 0x320]
push eax
call fcn.004db9f0
mov ecx, esi
call fcn.0048d4d0
test al, al
je 0x48ded4
mov ecx, esi
call fcn.00489960
push eax
mov ecx, esi
call fcn.0048b2b0
cmp dword [esi + 0x4a6], 0
je 0x48deec
mov ecx, esi
call fcn.00496750
push eax
mov ecx, esi
call fcn.00496e10
mov ecx, esi
call fcn.004967c0
test eax, eax
je 0x48df06
mov ecx, esi
call fcn.004967c0
push eax
mov ecx, esi
call fcn.004967a0
movzx eax, word [esi + 0x4aa]
test ax, ax
je 0x48df1e
mov ecx, dword [esi + 0x320]
push eax
call fcn.004dbac0
mov eax, dword [esi + 0x4b8]
test eax, eax
je 0x48df35
mov edx, dword [esi]
push eax
mov eax, dword [edx + 0xc0]
mov ecx, esi
call eax
cmp dword [esi + 0x4f0], 0
je 0x48df6f
movzx ecx, word [esi + 0x4f0]
push ecx
mov ecx, esi
call fcn.004967d0
jmp 0x48df6f
cmp bl, 2
jne 0x48df6f
mov eax, dword [esi + 0x42c]
cmp dword [eax + 0x20], 0
je 0x48df6f
mov ecx, dword [esi + 0x320]
add eax, 2
push eax
call fcn.004db9f0
lea ecx, [esp + 0x138]
call fcn.004222f0
lea ecx, [esp + 0x198]
mov dword [esp + 0x284], 1
call fcn.004222f0
lea ecx, [esp + 0x158]
mov byte [esp + 0x284], 2
call fcn.004222f0
lea ecx, [esp + 0x238]
mov byte [esp + 0x284], 3
call fcn.004222f0
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x284], 4
call fcn.004222f0
lea ecx, [esp + 0x1f8]
mov byte [esp + 0x284], 5
call fcn.004222f0
lea ecx, [esp + 0x178]
mov byte [esp + 0x284], 6
call fcn.004222f0
lea ecx, [esp + 0x218]
mov byte [esp + 0x284], 7
call fcn.004222f0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x284], 8
call fcn.004222f0
lea ecx, [esp + 0x258]
mov byte [esp + 0x284], 9
call fcn.004222f0
push 0
lea edx, [esp + 0x13c]
push edx
mov bl, 0xa
push 0x42
mov ecx, 0x6c36d8
mov byte [esp + 0x290], bl
call fcn.00426e50
push 0
lea eax, [esp + 0x19c]
push eax
push 0x43
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x15c]
push ecx
push 0x44
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x23c]
push edx
push 0x45
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x1bc]
push eax
push 0x46
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x1fc]
push ecx
push 0x47
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x17c]
push edx
push 0x48
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x21c]
push eax
push 0x49
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x1dc]
push ecx
push 0x4a
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x25c]
push edx
push 0x4b
mov ecx, 0x6c36d8
call fcn.00426e50
test byte [esp + 0x28c], 2
je 0x48e3f3
mov eax, dword [esi + 0x320]
fld dword [0x5943c0]
mov ecx, dword [eax + 0x200]
push ecx
fstp dword [esp]
lea edx, [esp + 0x25c]
push edx
lea eax, [esp + 0x1c0]
push eax
lea edx, [esp + 0x224]
push edx
lea eax, [esp + 0x1a8]
push eax
lea edx, [esp + 0x20c]
push edx
lea eax, [esp + 0x250]
push eax
lea edx, [esp + 0x1f4]
push edx
lea eax, [esp + 0x198]
push eax
lea edx, [esp + 0x17c]
push edx
lea eax, [esp + 0x160]
push eax
call fcn.004d81b0
lea ecx, [esp + 0xf8]
call fcn.004222f0
lea ecx, [esp + 0x118]
mov byte [esp + 0x284], 0xb
call fcn.004222f0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0xc
call fcn.004222f0
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0xd
call fcn.004222f0
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0xe
call fcn.004222f0
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0xf
call fcn.004222f0
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 0x10
call fcn.004222f0
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x11
call fcn.004222f0
lea ecx, [esp + 0xb8]
mov byte [esp + 0x284], 0x12
call fcn.004222f0
push 0
lea ecx, [esp + 0xfc]
push ecx
push 0x63
mov ecx, 0x6c36d8
mov byte [esp + 0x290], 0x13
call fcn.00426e50
push 0
lea edx, [esp + 0x9c]
push edx
push 0x64
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x1c]
push eax
push 0x65
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x11c]
push ecx
push 0x66
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x5c]
push edx
push 0x67
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x7c]
push eax
push 0x68
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0xdc]
push ecx
push 0x69
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x3c]
push edx
push 0x6a
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0xbc]
push eax
push 0x6b
mov ecx, 0x6c36d8
call fcn.00426e50
fld dword [0x5943c0]
mov ecx, dword [esi + 0x320]
mov ecx, dword [ecx + 0x200]
push ecx
fstp dword [esp]
lea edx, [esp + 0xbc]
push edx
lea eax, [esp + 0x40]
push eax
lea edx, [esp + 0xe4]
push edx
lea eax, [esp + 0x88]
push eax
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x130]
push eax
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0xb8]
push eax
lea edx, [esp + 0x11c]
push edx
call fcn.004d8440
lea ecx, [esp + 0xb8]
mov byte [esp + 0x284], 0x12
call fcn.00422300
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x11
call fcn.00422300
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 0x10
call fcn.00422300
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0xf
call fcn.00422300
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0xe
call fcn.00422300
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0xd
call fcn.00422300
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0xc
call fcn.00422300
mov byte [esp + 0x284], 0xb
lea ecx, [esp + 0x118]
call fcn.00422300
lea ecx, [esp + 0xf8]
mov byte [esp + 0x284], bl
call fcn.00422300
test byte [esp + 0x28c], 4
je 0x48e9ac
mov eax, dword [esi + 0x320]
fld dword [0x5943c0]
mov ecx, dword [eax + 0x204]
push ecx
fstp dword [esp]
push 0
lea edx, [esp + 0x1c0]
push edx
lea eax, [esp + 0x224]
push eax
lea edx, [esp + 0x1a8]
push edx
lea eax, [esp + 0x20c]
push eax
lea edx, [esp + 0x250]
push edx
lea eax, [esp + 0x1f4]
push eax
lea edx, [esp + 0x198]
push edx
lea eax, [esp + 0x17c]
push eax
lea edx, [esp + 0x160]
push edx
call fcn.004d81b0
fld dword [0x5943c0]
mov eax, dword [esi + 0x320]
mov ecx, dword [eax + 0x208]
push ecx
fstp dword [esp]
push 0
lea edx, [esp + 0x1c0]
push edx
lea eax, [esp + 0x224]
push eax
lea edx, [esp + 0x1a8]
push edx
lea eax, [esp + 0x20c]
push eax
lea edx, [esp + 0x250]
push edx
lea eax, [esp + 0x1f4]
push eax
lea edx, [esp + 0x198]
push edx
lea eax, [esp + 0x17c]
push eax
lea edx, [esp + 0x160]
push edx
call fcn.004d81b0
lea ecx, [esp + 0xb8]
call fcn.004222f0
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x14
call fcn.004222f0
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 0x15
call fcn.004222f0
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0x16
call fcn.004222f0
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0x17
call fcn.004222f0
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0x18
call fcn.004222f0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0x19
call fcn.004222f0
lea ecx, [esp + 0x118]
mov byte [esp + 0x284], 0x1a
call fcn.004222f0
lea ecx, [esp + 0xf8]
mov byte [esp + 0x284], 0x1b
call fcn.004222f0
push 0
lea eax, [esp + 0xbc]
push eax
push 0x75
mov ecx, 0x6c36d8
mov byte [esp + 0x290], 0x1c
call fcn.00426e50
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0x76
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0xdc]
push edx
push 0x77
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x7c]
push eax
push 0x78
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x5c]
push ecx
push 0x79
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x11c]
push edx
push 0x7a
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x1c]
push eax
push 0x7b
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x9c]
push ecx
push 0x7c
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0xfc]
push edx
push 0x7d
mov ecx, 0x6c36d8
call fcn.00426e50
fld dword [0x5943c0]
mov eax, dword [esi + 0x320]
mov ecx, dword [eax + 0x204]
push ecx
fstp dword [esp]
lea edx, [esp + 0xfc]
push edx
lea eax, [esp + 0xa0]
push eax
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x128]
push eax
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x90]
push eax
lea edx, [esp + 0xf4]
push edx
lea eax, [esp + 0x58]
push eax
lea edx, [esp + 0xdc]
push edx
call fcn.004d8440
lea ecx, [esp + 0xf8]
mov byte [esp + 0x284], 0x1b
call fcn.00422300
lea ecx, [esp + 0x118]
mov byte [esp + 0x284], 0x1a
call fcn.00422300
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0x19
call fcn.00422300
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0x18
call fcn.00422300
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0x17
call fcn.00422300
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0x16
call fcn.00422300
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 0x15
call fcn.00422300
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x14
call fcn.00422300
lea ecx, [esp + 0xb8]
mov byte [esp + 0x284], bl
call fcn.00422300
lea ecx, [esp + 0xb8]
call fcn.004222f0
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x1d
call fcn.004222f0
lea ecx, [esp + 0x18]
mov byte [esp + 0x284], 0x1e
call fcn.004222f0
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0x1f
call fcn.004222f0
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0x20
call fcn.004222f0
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0x21
call fcn.004222f0
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0x22
call fcn.004222f0
lea ecx, [esp + 0x118]
mov byte [esp + 0x284], 0x23
call fcn.004222f0
lea ecx, [esp + 0xf8]
mov byte [esp + 0x284], 0x24
call fcn.004222f0
push 0
lea eax, [esp + 0xbc]
push eax
push 0x80
mov ecx, 0x6c36d8
mov byte [esp + 0x290], 0x25
call fcn.00426e50
push 0
lea ecx, [esp + 0x3c]
push ecx
push 0x81
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0xdc]
push edx
push 0x82
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x7c]
push eax
push 0x83
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x5c]
push ecx
push 0x84
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0x11c]
push edx
push 0x85
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea eax, [esp + 0x1c]
push eax
push 0x86
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea ecx, [esp + 0x9c]
push ecx
push 0x87
mov ecx, 0x6c36d8
call fcn.00426e50
push 0
lea edx, [esp + 0xfc]
push edx
push 0x88
mov ecx, 0x6c36d8
call fcn.00426e50
fld dword [0x5943c0]
mov eax, dword [esi + 0x320]
mov ecx, dword [eax + 0x208]
push ecx
fstp dword [esp]
lea edx, [esp + 0xfc]
push edx
lea eax, [esp + 0xa0]
push eax
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x128]
push eax
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x90]
push eax
lea edx, [esp + 0xf4]
push edx
lea eax, [esp + 0x58]
push eax
lea edx, [esp + 0xdc]
push edx
call fcn.004d8440
lea ecx, [esp + 0xf8]
mov byte [esp + 0x284], 0x24
call fcn.00422300
lea ecx, [esp + 0x118]
mov byte [esp + 0x284], 0x23
call fcn.00422300
lea ecx, [esp + 0xd8]
mov byte [esp + 0x284], 0x22
call fcn.00422300
lea ecx, [esp + 0x98]
mov byte [esp + 0x284], 0x21
call fcn.00422300
lea ecx, [esp + 0x58]
mov byte [esp + 0x284], 0x20
call fcn.00422300
lea ecx, [esp + 0x38]
mov byte [esp + 0x284], 0x1f
call fcn.00422300
mov byte [esp + 0x284], 0x1e
lea ecx, [esp + 0x18]
call fcn.00422300
lea ecx, [esp + 0x78]
mov byte [esp + 0x284], 0x1d
call fcn.00422300
lea ecx, [esp + 0xb8]
mov byte [esp + 0x284], bl
call fcn.00422300
lea ecx, [esp + 0x258]
mov byte [esp + 0x284], 9
call fcn.00422300
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x284], 8
call fcn.00422300
lea ecx, [esp + 0x218]
mov byte [esp + 0x284], 7
call fcn.00422300
lea ecx, [esp + 0x178]
mov byte [esp + 0x284], 6
call fcn.00422300
lea ecx, [esp + 0x1f8]
mov byte [esp + 0x284], 5
call fcn.00422300
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x284], 4
call fcn.00422300
lea ecx, [esp + 0x238]
mov byte [esp + 0x284], 3
call fcn.00422300
lea ecx, [esp + 0x158]
mov byte [esp + 0x284], 2
call fcn.00422300
lea ecx, [esp + 0x198]
mov byte [esp + 0x284], 1
call fcn.00422300
lea ecx, [esp + 0x138]
mov dword [esp + 0x284], 0xffffffff
call fcn.00422300
mov ecx, dword [esp + 0x27c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x268]
xor ecx, esp
call fcn.0056ca39
add esp, 0x278
ret 4