Function at 0x488810
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49388a
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x4ae248]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417510
mov dword [ebp - 4], 0
mov byte [ebp - 0x20d], 0x43
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417520
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call fcn.00488000
add esp, 4
mov byte [ebp - 4], 1
push 0
push 0x3a
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0048a340
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
jg 0x488899
jmp 0x4888e0
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
sub edx, 1
push edx
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0048a2e0
mov al, byte [eax]
mov byte [ebp - 0x201], al
movsx ecx, byte [ebp - 0x201]
cmp ecx, 0x43
je 0x4888e0
movsx edx, byte [ebp - 0x201]
cmp edx, 0x63
je 0x4888e0
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0048a460
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 2
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 3
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 4
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 5
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 6
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b9a0
mov byte [ebp - 4], 7
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call fcn.00489bf0
add esp, 4
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call fcn.00488da0
add esp, 4
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
jmp 0x488973
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
add eax, 1
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417620
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
jae 0x4889b3
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push ecx
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417630
movzx edx, byte [eax]
push edx
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
call fcn.00489450
add esp, 8
test eax, eax
je 0x4889b1
jmp 0x4889b3
jmp 0x488964
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call fcn.00488e30
add esp, 4
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call fcn.00488da0
add esp, 4
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0041ec50
cmp eax, 0x28
jbe 0x488a28
push 0x28
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0048a380
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push edx
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.004208a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c]
call fcn.0040b8a0
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 0
jmp 0x488a43
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
add eax, 1
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417620
cmp dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
jae 0x488a83
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push ecx
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.00417630
movzx edx, byte [eax]
push edx
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
call fcn.004897f0
add esp, 8
test eax, eax
je 0x488a81
jmp 0x488a83
jmp 0x488a34
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call fcn.00488da0
add esp, 4
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call fcn.004899b0
add esp, 4
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
call fcn.00488da0
add esp, 4
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
push 0x49570c
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
push 0x495710
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
push 0x495714
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
push 0x495718
lea ecx, [ebp - 0x48]
call fcn.00415800
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.0048a960
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0x80]
push ecx
call fcn.0048a9a0
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0x9c]
push ecx
call fcn.0048a960
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call fcn.0048a9a0
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0xd4]
push ecx
call fcn.0048a960
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, [ebp - 0xf0]
push ecx
call fcn.0048a9a0
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ecx
call fcn.0048a960
add esp, 0xc
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov edx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], edx
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push eax
mov ecx, dword [ebp + 8]
call fcn.004208a0
mov byte [ebp - 4], 0xf
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xf0]
call fcn.0040b8a0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd4]
call fcn.0040b8a0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb8]
call fcn.0040b8a0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x9c]
call fcn.0040b8a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x80]
call fcn.0040b8a0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x64]
call fcn.0040b8a0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x48]
call fcn.0040b8a0
mov ecx, dword [ebp + 8]
push ecx
lea edx, reloc.NETAPI32.dll_NetApiBufferFree
push edx
call fcn.004884f0
add esp, 8
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004208a0
mov byte [ebp - 4], 7
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree], 1
mov byte [ebp - 4], 6
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 5
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 4
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 3
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 2
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 1
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov byte [ebp - 4], 0
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.0040b8a0
mov dword [ebp - 4], reloc.NETAPI32.dll_NetApiBufferFree
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
call fcn.004175f0
mov eax, dword [ebp - reloc.NETAPI32.dll_NetApiBufferFree]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00492cee
mov esp, ebp
pop ebp
ret