Function at 0x48d4ad
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
mov edx, dword [ebp + 0xc]
push ebx
push esi
movzx eax, dx
movzx esi, dx
push edi
cmp eax, 0x5a
jbe 0x48da2b
cmp eax, 0x6e
ja 0x48d7bb
je 0x48d7ab
cmp eax, 0x65
jbe 0x48d59e
sub eax, 0x67
je 0x48d560
sub eax, 1
je 0x48d72c
dec eax
sub eax, 1
je 0x48d535
sub eax, 3
jne 0x48d767
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x10]
cmp ecx, 0xb
ja 0x48d757
cmp byte [ebp + 0x20], 0
setne al
dec al
and al, 0x30
movzx eax, al
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 2
lea eax, [ecx + 1]
push eax
call fcn.0048de81
add esp, 0x14
jmp 0x48de57
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x1c]
cmp ecx, 0x16d
ja 0x48d757
cmp byte [ebp + 0x20], 0
setne al
dec al
and al, 0x30
movzx eax, al
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 3
jmp 0x48d524
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0x14]
lea eax, [edx + 0x76c]
cmp eax, 0x270f
ja 0x48d757
push 0x30
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 2
push dword [ecx + 0x1c]
push dword [ecx + 0x18]
push edx
call fcn.0048d482
add esp, 0xc
add eax, 0x76c
push 0x64
cdq
pop ecx
idiv ecx
push edx
jmp 0x48d528
je 0x48d783
sub eax, 0x61
je 0x48d74c
sub eax, 1
je 0x48d72c
sub eax, 1
je 0x48d5f3
sub eax, 1
jne 0x48d767
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xc]
lea eax, [ecx - 1]
cmp eax, 0x1e
ja 0x48d757
cmp byte [ebp + 0x20], 0
setne al
dec al
and al, 0x30
movzx eax, al
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 2
push ecx
jmp 0x48d528
mov ebx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x20]
cmp ebx, 0x4c15a8
jne 0x48d6e2
test al, al
jne 0x48d6e2
mov edi, dword [ebp + 0x18]
xor esi, esi
push esi
push ebx
mov ebx, dword [ebp + 0x14]
push edi
push ebx
push dword [ebp + 0x10]
push 0x61
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x1c
test al, al
jne 0x48d63d
call fcn.004830ad
mov dword [eax], 0x16
jmp 0x48d767
push edi
push ebx
push 0x4c6054
call fcn.0048df8f
push esi
push dword [ebp + 0x1c]
push edi
push ebx
push dword [ebp + 0x10]
push 0x62
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
je 0x48d62d
push edi
push ebx
push 0x4c6054
call fcn.0048df8f
push esi
push dword [ebp + 0x1c]
push edi
push ebx
push dword [ebp + 0x10]
push 0x65
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
je 0x48d62d
push edi
push ebx
push 0x4c6054
call fcn.0048df8f
push esi
push dword [ebp + 0x1c]
push edi
push ebx
push dword [ebp + 0x10]
push 0x54
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
je 0x48d62d
push edi
push ebx
push 0x4c6054
call fcn.0048df8f
push esi
push dword [ebp + 0x1c]
push edi
push ebx
push dword [ebp + 0x10]
push 0x59
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
jne 0x48de57
jmp 0x48d62d
push ebx
push dword [ebp + 0x18]
movzx eax, al
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.0048dfc2
add esp, 0x18
test al, al
je 0x48d62d
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 0x4c6054
call fcn.0048df8f
push ebx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 2
push dword [ebp + 8]
call fcn.0048dfc2
add esp, 0x24
jmp 0x48d6d5
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x10]
cmp ecx, 0xb
ja 0x48d757
push dword [ebp + 0x18]
mov eax, dword [ebp + 0x1c]
push dword [ebp + 0x14]
push dword [eax + ecx*4 + 0xec]
jmp 0x48de4f
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x18]
cmp ecx, 6
jbe 0x48d76e
call fcn.004830ad
mov dword [eax], 0x16
call fcn.00482faf
xor al, al
jmp 0x48de59
push dword [ebp + 0x18]
mov eax, dword [ebp + 0x1c]
push dword [ebp + 0x14]
push dword [eax + ecx*4 + 0xb4]
jmp 0x48de4f
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 0xc]
lea eax, [edx - 1]
cmp eax, 0x1e
ja 0x48d757
mov cl, byte [ebp + 0x20]
xor cl, 1
shl cl, 5
movzx ecx, cl
push ecx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 2
jmp 0x48d59b
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 0x4c5d44
jmp 0x48de4f
cmp eax, 0x77
ja 0x48d918
je 0x48d7e0
sub eax, 0x70
je 0x48d8e7
dec eax
sub eax, 1
je 0x48d829
dec eax
sub eax, 1
je 0x48d819
sub eax, 1
jne 0x48d767
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0x18]
cmp ecx, 6
ja 0x48d757
mov eax, esi
test ecx, ecx
jne 0x48d7fd
cmp eax, 0x75
jne 0x48d7fd
push 7
pop ecx
cmp byte [ebp + 0x20], 0
setne al
dec al
and al, 0x30
movzx eax, al
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 1
jmp 0x48d5ed
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push 0x4b4b88
jmp 0x48de4f
mov ebx, dword [ebp + 0x1c]
push dword [ebp + 0x20]
push ebx
cmp ebx, 0x4c15a8
jne 0x48d8cc
mov esi, dword [ebp + 0x18]
mov edi, dword [ebp + 0x14]
push esi
push edi
push dword [ebp + 0x10]
push 0x49
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x1c
test al, al
je 0x48d62d
push esi
push edi
push 0x4c05f0
call fcn.0048df8f
push dword [ebp + 0x20]
push ebx
push esi
push edi
push dword [ebp + 0x10]
push 0x4d
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
je 0x48d62d
push esi
push edi
push 0x4c05f0
call fcn.0048df8f
push dword [ebp + 0x20]
push ebx
push esi
push edi
push dword [ebp + 0x10]
push 0x53
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x28
test al, al
je 0x48d62d
push esi
push edi
push 0x4c6054
call fcn.0048df8f
push dword [ebp + 0x20]
push ebx
push esi
push edi
push dword [ebp + 0x10]
push 0x70
jmp 0x48d6ca
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0x58
push dword [ebp + 8]
call fcn.0048d4ad
add esp, 0x1c
jmp 0x48d6d5
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
cmp eax, 0x17
ja 0x48d757
cmp eax, 0xb
mov eax, dword [ebp + 0x1c]
jg 0x48d906
mov eax, dword [eax + 0x14c]
jmp 0x48d90c
mov eax, dword [eax + 0x150]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push eax
jmp 0x48de4f
sub eax, 0x78
je 0x48da0a
sub eax, 1
je 0x48d9d7
sub eax, 1
jne 0x48d767
call fcn.00496d78
lea eax, [ebp - 4]
xor esi, esi
push eax
mov dword [ebp - 4], esi
call fcn.00496414
pop ecx
test eax, eax
jne 0x48d757
mov eax, dword [ebp + 0x10]
cmp dword [eax + 0x20], esi
je 0x48d977
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
call fcn.004963e8
pop ecx
test eax, eax
jne 0x48d757
mov esi, dword [ebp - 4]
add esi, dword [ebp - 8]
mov dword [ebp - 4], esi
jmp 0x48d97a
mov esi, dword [ebp - 4]
mov eax, esi
cdq
xor eax, edx
sub eax, edx
cdq
push 0x3c
pop ebx
idiv ebx
mov ecx, eax
cdq
idiv ebx
mov edi, eax
mov eax, ecx
cdq
mov ecx, 0xec8b55f4
push ebp
mov ebp, esp
add byte [eax], al
jl 0x48d9dd
neg eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret
sub al, 0x61
sub esp, 0xfffffff8
mov eax, dword [esp - 4]
add eax, 2
mov dword [esp - 4], eax
mov eax, dword [esp - 8]
sub esp, 4
ret
mov byte [ebp - 0x28], 0x67
mov byte [ebp - 0x27], 0x44
mov byte [ebp - 0x26], 0x4a
mov byte [ebp - 0x25], 0x4f
mov byte [ebp - 0x24], 0x67
mov byte [ebp - 0x23], 0x42
mov byte [ebp - 0x22], 0x49
mov byte [ebp - 0x21], 0x59
mov byte [ebp - 0x20], 0x4a
fimul dword [edx - 0x3a]
inc ebp
fisttp dword [edi - 0x3a]
inc ebp
fsub qword [edi - 0x3a]
inc ebp
fld qword [edx - 0x3a]
inc ebp
fimul word [ecx - 0x3a]
inc ebp
fistp word [ecx - 0x3a]
inc ebp
loopne 0x48debd
mov byte [ebp - 0x1f], 0x59
mov byte [ebp - 0x1e], 0x52
mov byte [ebp - 0x1d], 0x6a
mov byte [ebp - 0x1c], 0x2b
in al, 0x2b