Function at 0x10048e30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xf4
mov eax, 0x100dbf73
call fcn.100d393a
mov eax, ecx
mov dword [ebp - 0xb0], eax
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xac]
push eax
call fcn.10042e1e
mov ecx, eax
call fcn.100b6b94
mov edi, dword [eax]
lea ecx, [ebp - 0x100]
and dword [ebp - 4], 0
push ecx
mov eax, dword [edi]
mov esi, dword [eax + 0x70]
mov ecx, esi
call dword [0x101097a0]
mov ecx, edi
call esi
push eax
mov esi, dword [ebp - 0xb0]
mov byte [ebp - 4], 1
mov eax, dword [esi + 4]
add eax, 0x120
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.1002167e
add esp, 0xc
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 4
call fcn.10042e1e
cmp dword [ebp - 0xac], 0
mov byte [ebp - 4], 5
je 0x10048ee3
push dword [ebp - 0xac]
lea ecx, [ebp - 0xac]
call fcn.10042e1e
push 0x10114fdc
lea ecx, [ebp - 0x70]
call fcn.10042e1e
and dword [ebp - 0x48], 0
xor eax, eax
mov dword [ebp - 0x44], 7
mov word [ebp - 0x58], ax
mov byte [ebp - 0x89], al
lea eax, [ebp - 0x89]
push eax
mov byte [ebp - 4], 7
call fcn.10042e1e
mov ecx, eax
call fcn.10042e1e
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
and dword [ebp - 0x2c], 0
push eax
call fcn.10042e1e
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
push str.nglAppId
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0xa8]
push ebx
push eax
call fcn.100af0df
add esp, 0xc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xb
call fcn.10042e1e
push str.nglAppVersion
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
push 0xc
pop ebx
lea eax, [ebp - 0x20]
mov byte [ebp - 4], bl
push eax
push dword [ebp - 0xcc]
lea eax, [ebp - 0xa8]
push eax
call fcn.100af0df
add esp, 0xc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xd
call fcn.10042e1e
push str.deviceId
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0xe
push eax
call fcn.10042e1e
mov ecx, eax
call fcn.100b6da2
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.100af0df
add esp, 0xc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xf
call fcn.10042e1e
push str.osUserId
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.100af0df
add esp, 0xc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call fcn.10042e1e
push str.enableVdiMarkerExists
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
call fcn.10042e1e
mov eax, dword [esi + 4]
mov byte [ebp - 4], 0x12
mov al, byte [eax + 0x151]
movzx eax, al
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.100af0df
add esp, 0x14
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x14
call fcn.10042e1e
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
call fcn.10042e1e
push str.isVirtualEnvironment
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
mov eax, dword [esi + 4]
mov byte [ebp - 4], 0x16
mov al, byte [eax + 0x152]
movzx eax, al
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.100af0df
add esp, 0x14
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x18
call fcn.10042e1e
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x19
call fcn.10042e1e
push str.isOsUserAccountInDomain
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call fcn.10042e1e
mov eax, dword [esi + 4]
mov byte [ebp - 4], 0x1a
mov al, byte [eax + 0x150]
movzx eax, al
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.10042e1e
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x1b
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.100af0df
add esp, 0x14
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x1c
call fcn.10042e1e
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1d
call fcn.10042e1e
mov eax, dword [esi + 4]
mov byte [ebp - 4], 0x1e
mov edi, dword [eax + 0x158]
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x28]
push eax
mov esi, dword [edi]
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x90]
lea eax, [ebp - 0x88]
mov ecx, dword [esi + 0x14]
push eax
call dword [0x101097a0]
mov ecx, edi
call dword [esi + 0x14]
mov edi, eax
test edi, edi
je 0x10049314
mov esi, 0x10114fdc
lea ecx, [ebp - 0xe8]
push esi
call fcn.10042e1e
push esi
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1f
call fcn.10042e1e
mov eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x20
push dword [eax + 8]
call fcn.10042e1e
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.100b7903
add esp, 0xc
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x22
call fcn.10042e1e
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x23
call fcn.10042e1e
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x24
call fcn.10042e1e
cmp dword [ebp - 0x90], 0
mov byte [ebp - 4], 0x1e
je 0x10049314
push esi
lea ecx, [ebp - 0xa8]
call fcn.10042e1e
push esi
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x25
call fcn.10042e1e
mov eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x26
push dword [eax + 8]
call fcn.10042e1e
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x27
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.100b7903
add esp, 0xc
mov esi, dword [eax]
push str.InvalidateAsnpOnAppUninstall
push str._s_:_Failed_in_invalidating_asnp_on_App_uninstall
push 0x10114fdc
mov ecx, dword [esi + 0x24]
push eax
call dword [0x101097a0]
call dword [esi + 0x24]
add esp, 0x10
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x28
call fcn.10042e1e
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x29
call fcn.10042e1e
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x2a
call fcn.10042e1e
cmp edi, 4
ja 0x1004934a
je 0x10049346
sub edi, 0
je 0x1004933f
sub edi, 1
je 0x1004933b
sub edi, 1
je 0x10049337
sub edi, 1
je 0x100494bf
push 2
jmp 0x10049372
push 3
jmp 0x10049372
push 4
jmp 0x10049372
xor ebx, ebx
jmp 0x100494bf
push 5
jmp 0x10049372
sub edi, 8
je 0x10049370
sub edi, 1
je 0x1004936c
push 2
pop ebx
sub edi, ebx
je 0x10049368
sub edi, 3
jne 0x100494bf
push 0xd
jmp 0x10049372
push 8
jmp 0x10049372
push 7
jmp 0x10049372
push 6
pop ebx
jmp 0x100494bf
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x38
call fcn.10042e1e
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x39
call fcn.10042e1e
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x3a
call fcn.10042e1e
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x3b
call fcn.10042e1e
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], 0x3c
call fcn.10042e1e
mov eax, ebx
call fcn.100d3887
ret 0xc