Function at 0x48eb8f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52a6f6
mov eax, dword fs:[0]
push eax
sub esp, 0x3e0
mov eax, dword [0x5770a4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x34c], ecx
and dword [ebp - 0x350], 0
push 0x208
push 0
lea eax, [ebp - 0x218]
push eax
call fcn.004b0090
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 2
pop eax
imul eax, eax, 0x103
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x208
jae 0x48ec0e
jmp 0x48ec13
call fcn.004adf6c
xor eax, eax
mov ecx, dword [ebp - 0x358]
mov word [ebp + ecx - 0x218], ax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00409053
and dword [ebp - 4], 0
lea ecx, [ebp - 0x248]
call fcn.0040b2fe
mov byte [ebp - 4], 1
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x34c]
call fcn.0048f699
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
jne 0x48ec82
mov dword [ebp - 0x35c], 1
jmp 0x48ec89
and dword [ebp - 0x35c], 0
movzx eax, byte [ebp - 0x35c]
test eax, eax
je 0x48ecd7
push 0x541dc4
lea ecx, [ebp - 0x2a8]
call fcn.00409053
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x380], eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x350]
or eax, 1
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x374], eax
jmp 0x48ed41
lea eax, [ebp - 0x351]
push eax
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x278]
call fcn.0048c412
mov dword [ebp - 4], 3
mov dword [ebp - 4], 4
lea eax, [ebp - 0x248]
push eax
lea ecx, [ebp - 0x278]
call fcn.0040b762
mov byte [ebp - 4], 2
lea eax, [ebp - 0x278]
mov dword [ebp - 0x384], eax
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x350]
or eax, 2
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x388], eax
push dword [ebp - 0x388]
lea ecx, [ebp - 0x248]
call fcn.0041dc17
mov dword [ebp - 4], 2
mov eax, dword [ebp - 0x350]
and eax, 2
je 0x48edb2
and dword [ebp - 0x350], 0xfffffffd
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x278]
call fcn.0040a62b
mov dword [ebp - 4], 7
mov byte [ebp - 4], 2
lea eax, [ebp - 0x278]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 4], 8
mov dword [ebp - 4], 9
mov byte [ebp - 4], 2
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x350]
and eax, 1
je 0x48edfa
and dword [ebp - 0x350], 0xfffffffe
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.0040a62b
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 1
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x3a8], eax
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x248]
call fcn.0040a5f1
push eax
push dword [ebp + 8]
push str.CrashReportLoader_init__AppName:_ws__Version:_ws
call fcn.0048f8e0
add esp, 0xc
push 0xffffffffffffffff
push 0x541e08
lea ecx, [ebp - 0x230]
call fcn.00491b2a
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0xffffffff
jne 0x48eeb1
push str._CrashReportLoader__Get_Process_Folder_fail
call fcn.0048f8e0
pop ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3ac], eax
mov byte [ebp - 4], 0x10
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x13
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 4], 0x14
mov dword [ebp - 4], 0x15
or dword [ebp - 4], 0xffffffff
jmp 0x48f4c8
push dword [ebp - 0x360]
lea ecx, [ebp - 0x230]
call fcn.00491afa
push eax
lea ecx, [ebp - 0x230]
call fcn.0040b598
push str.crash_report_helper.dll
call fcn.004cc4f3
pop ecx
mov dword [ebp - 0x3a4], eax
push dword [ebp - 0x3a4]
push str.crash_report_helper.dll
lea ecx, [ebp - 0x230]
call fcn.0044441c
lea eax, [ebp - 0x230]
push eax
mov ecx, dword [ebp - 0x34c]
add ecx, 4
call fcn.0048e95c
movzx eax, al
test eax, eax
jne 0x48ef8b
push str._CrashReportLoader__Load_library_fail
call fcn.0048f8e0
pop ecx
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3b4], eax
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x1b
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 4], 0x1d
or dword [ebp - 4], 0xffffffff
jmp 0x48f4c8
mov eax, dword [ebp - 0x34c]
cmp dword [eax], 0
je 0x48f005
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0x1f
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 0x20
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x22
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x23
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 4], 0x25
or dword [ebp - 4], 0xffffffff
jmp 0x48f4c8
push 0x98
call fcn.004ad961
pop ecx
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x34c]
mov ecx, dword [ebp - 0x3a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x34c]
cmp dword [eax], 0
jne 0x48f09e
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3c4], eax
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x2a
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x2b
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 4], 0x2c
mov dword [ebp - 4], 0x2d
or dword [ebp - 4], 0xffffffff
jmp 0x48f4c8
mov eax, dword [ebp - 0x34c]
mov eax, dword [eax]
mov dword [ebp - 0x348], eax
push 0x98
push 0
push dword [ebp - 0x348]
call fcn.004b0090
add esp, 0xc
mov eax, 0x98
mov ecx, dword [ebp - 0x348]
mov word [ecx], ax
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp + 8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x248]
call fcn.0040a5f1
mov ecx, dword [ebp - 0x348]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x348]
and dword [eax + 0x30], 0
mov eax, dword [ebp - 0x348]
mov eax, dword [eax + 0x30]
or eax, 0x1fff
mov ecx, dword [ebp - 0x348]
mov dword [ecx + 0x30], eax
cmp dword [ebp + 0x24], 2
jne 0x48f122
mov dword [ebp - 0x364], 1
jmp 0x48f129
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0x364]
mov dword [eax + 0x94], ecx
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0x70], ecx
mov ecx, dword [ebp + 0x18]
mov dword [eax + 0x74], ecx
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x78], ecx
mov ecx, dword [ebp + 0x10]
mov dword [eax + 0x7c], ecx
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp + 0x1c]
mov dword [eax + 0x80], ecx
mov eax, dword [ebp - 0x348]
and dword [eax + 0x3c], 0
mov eax, dword [ebp - 0x348]
and dword [eax + 0x88], 0
and dword [eax + 0x8c], 0
mov eax, dword [ebp - 0x348]
mov dword [eax + 0x90], 4
lea ecx, [ebp - 0x260]
call fcn.0040b2fe
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f4]
call fcn.0049056e
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x2f4]
push eax
call sub.common.dll_bool___cdecl_ierd_tgp::net::get_proxy_config_struct_ierd_tgp::net::proxy_config_t__
pop ecx
movzx eax, al
test eax, eax
je 0x48f296
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jne 0x48f1f3
mov dword [ebp - 0x368], 1
jmp 0x48f1fa
and dword [ebp - 0x368], 0
movzx eax, byte [ebp - 0x368]
test eax, eax
jne 0x48f296
lea ecx, [ebp - 0x344]
call fcn.00490413
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x344]
call fcn.00491b96
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 0x31
push dword [ebp - 0x394]
lea ecx, [ebp - 0x260]
call fcn.0041dc17
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x290]
call fcn.0040a62b
mov byte [ebp - 4], 0x33
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x290]
mov dword [ebp - 0x3cc], eax
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x35
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x344]
call fcn.00490712
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
jne 0x48f2b7
mov dword [ebp - 0x36c], 1
jmp 0x48f2be
and dword [ebp - 0x36c], 0
movzx eax, byte [ebp - 0x36c]
test eax, eax
jne 0x48f2dd
lea ecx, [ebp - 0x260]
call fcn.0040a5f1
mov ecx, dword [ebp - 0x348]
mov dword [ecx + 0xc], eax
push dword [ebp - 0x348]
mov ecx, dword [ebp - 0x34c]
add ecx, 4
call fcn.0048eab2
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
je 0x48f3ec
push dword [ebp - 0x370]
push str._CrashReportLoader__InitCrashRpt_fail___d.
call fcn.0048f8e0
pop ecx
pop ecx
mov eax, dword [ebp - 0x34c]
mov eax, dword [eax]
mov dword [ebp - 0x38c], eax
push 0x98
push dword [ebp - 0x38c]
call fcn.004ad991
pop ecx
pop ecx
mov eax, dword [ebp - 0x34c]
and dword [eax], 0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f4]
call fcn.004908a2
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x260]
call fcn.0040a62b
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 1
lea eax, [ebp - 0x260]
mov dword [ebp - 0x3d0], eax
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 0x39
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0x3d
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x3e
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x3f
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 4], 0x40
mov dword [ebp - 4], 0x41
or dword [ebp - 4], 0xffffffff
jmp 0x48f4c8
push 0
mov ecx, dword [ebp - 0x34c]
add ecx, 4
call fcn.0048eaf0
push str._CrashReportLoader__InitCrashRpt_success
call fcn.0048f8e0
pop ecx
cmp dword [ebp + 0x20], 0
je 0x48f420
push 0
push dword [ebp + 0x20]
mov ecx, dword [ebp - 0x34c]
add ecx, 4
call fcn.0048eb13
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f4]
call fcn.004908a2
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x260]
call fcn.0040a62b
mov byte [ebp - 4], 0x43
mov byte [ebp - 4], 1
lea eax, [ebp - 0x260]
mov dword [ebp - 0x3dc], eax
mov byte [ebp - 4], 0x44
mov byte [ebp - 4], 0x45
mov byte [ebp - 4], 1
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x248]
call fcn.0040a62b
mov byte [ebp - 4], 0x47
mov byte [ebp - 4], 0
lea eax, [ebp - 0x248]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 0x48
mov byte [ebp - 4], 0x49
mov byte [ebp - 4], 0
mov dword [ebp - 4], 0x4a
lea ecx, [ebp - 0x230]
call fcn.0040a62b
mov dword [ebp - 4], 0x4b
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 4], 0x4c
mov dword [ebp - 4], 0x4d
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004ad99f
leave
ret 0x20