Function at 0x48e1f5
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
push ecx
add esp, 4
sub esi, 0x1347b
xor esi, 0x13468
and esi, 0xcdb9
pop esi
push esi
sub esi, 0xe08c
sub esi, 0x787c
add esi, 0x7e73
sub esi, 0x482a
pop esi
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x48e1c9
push eax
push esi
add esp, 4
and eax, 0x1401b
pop eax
push esi
or esi, 0xf219
pop esi
push edx
push edx
add esp, 4
add edx, 0x12c35
or edx, 0xd1d8
pop edx
push esi
push esi
add esp, 4
jmp 0x48e1c3
pop esi
jmp 0x48e3f7
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ecx
add ecx, 0xa79f
call 0x48e1f5
add byte [ebx + edi + 0x38], cl
dec ebx
inc ebx
xor eax, 0x83493439
les eax, [ecx + ebx*2]
push eax
push edi
add esp, 4
xor eax, 0x295b
or eax, 0x3dbe
sub eax, 0x514e
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x48e278
push ebx
jmp 0x48e23b
sub ebx, 0xa688
or ebx, 0xe552
add ebx, 0x14aec
pop ebx
push ecx
push edx
add esp, 4
and ecx, 0xabb1
or ecx, 0x175a5
jmp 0x48e266
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x48e3a9
cmp dword [ebp - 0xc10], 0
jle 0x48e39d
push edi
push ecx
add esp, 4
sub edi, 0x8af
pop edi
push esi
add esi, 0x6d85
and esi, 0x7183
xor esi, 0xd794
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0x1347c
xor ebx, 0xcb66
pop ebx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x48e339
push esi
push esi
add esp, 4
add esi, 0x16fcc
sub esi, 0x13d93
or esi, 0x1320b
pop esi
push edx
push edi
add esp, 4
jmp 0x48e2f0
jmp 0x48e2f6
pop edx
push eax
sub eax, 0xa13b
pop eax
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x48e321
mov dword [ebp - 0x14cc], 1
jmp 0x48e32b
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x48e39d
push ecx
sub ecx, 0xc483
xor ecx, 0x157ba
sub ecx, 0x5ce2
and ecx, 0x17a69
pop ecx
push edx
push esi
add esp, 4
add edx, 0x1034f
or edx, 0x130b
xor edx, 0x49c6
pop edx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x48e278
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x48e3f2
push ecx
jmp 0x48e3bc
xor ecx, 0x17a6c
jmp 0x48e3c7
and ecx, 0x15d62
pop ecx
push esi
add esi, 0x31ee
pop esi
push ebx
sub ebx, 0xd305
add ebx, 0x88e5
pop ebx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x48e433
jmp 0x48e140
push ecx
push eax
add esp, 4
and ecx, 0x11a4
or ecx, 0x16369
jmp 0x48e410
pop ecx
push ecx
push edx
add esp, 4
or ecx, 0xdd77
pop ecx
push edx
push ebx
add esp, 4
sub edx, 0x13244
pop edx
mov dword [ebp - 0xa5c], 0
push edx
push edi
add esp, 4
add edx, 0x153a4
sub edx, 0xa154
pop edx
push edx
push edx
add esp, 4
or edx, 0xc4e1
and edx, 0x183e8
pop edx
push edi
sub edi, 0x2194
or edi, 0x16ed1
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push edi
push eax
add esp, 4
call 0x48e4cc
add byte [ebx + 0x4c], cl
dec esp
aas
inc esi
xor bh, byte [eax*2 - 0x14fb3b7d]
add al, 0x4c
dec ebp
dec esi
cmp al, 0x81
neg ecx
sub eax, 0x7e80000
add byte [eax], al
add byte [eax], al
dec ebp
cmp eax, 0x3d3e324c
add esp, 4
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push eax
push edx
add esp, 4
and eax, 0x3d0e
jmp 0x48e595
add eax, 0x9441
add eax, 0xccdc
pop eax
push esi
xor esi, 0x6afd
add esi, 0x144b
or esi, 0xf334
pop esi
push edx
push eax
add esp, 4
call 0x48e5cb
add byte [eax + 0x50], cl
dec esp
cmp al, 0x4c
cmp eax, 0x394f3a38
add esp, 4
call 0x48e5db
add byte [ecx], bh
dec edi
inc ebx
cmp al, byte [esp + ecx*2 + 0x3a]
add esp, 4
jmp 0x48e5e7
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
call 0x48e61e
add byte [edx], bh
inc esp
cmp dh, byte [0xc483444f]
add al, 0x59
push eax
push ecx
add esp, 4
add eax, 0x90d4
pop eax
push ebx
push esi
add esp, 4
add ebx, 0x121b5
pop ebx
push ebx
or ebx, 0x14fe5
pop ebx
cmp dword [ebp - 0x14d4], 0
jne 0x48e65a
mov dword [ebp - 0x2e0], 0
jmp 0x48e916
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ecx
push ebx
add esp, 4
and ecx, 0x931f
pop ecx
push ebx
and ebx, 0x16985
and ebx, 0x2ad5
call 0x48e694
add byte [eax + 0x4d], al
push eax
dec edx
cmp al, 0x3d
inc edi
cmp al, byte [ebx - 0xc7efb3c]
fldl2t
add byte [eax], al
pop ebx
cmp dword [ebp - 0xc20], 0
jne 0x48e6b6
mov dword [ebp - 0x2e0], 0
jmp 0x48e916
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edx
call 0x48e6d0
add byte [edi], bh
cmp dword [ecx + edi], esi
cmp dword [edx], edi
cmp eax, dword [ebx - 0x3d7efb3c]
xchg ebx, eax
adc dword [eax], eax
add bl, ch
push es
inc edx
inc edx
inc ebp
inc edi
cmp dword [ebx + 0x5a], ecx
push ebx
push edx
add esp, 4
add ebx, 0x165e3
and ebx, 0x2269
pop ebx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push esi
sub esi, 0x1862b
sub esi, 0xf132
add esi, 0x3622
sub esi, 0x14f31
pop esi
push edx
push eax
add esp, 4
jmp 0x48e747
jmp 0x48e74c
sub edx, 0x12303
pop edx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ecx
push eax
add esp, 4
or ecx, 0x3625
sub ecx, 0x16978
and ecx, 0x10aba
jmp 0x48e7cc
pop ecx
push ebx
push ecx
add esp, 4
and ebx, 0x9db1
xor ebx, 0x3a54
add byte [eax], al
pop ebx
invalid
mov bh, 0x95
add bh, bh
push esi
or esi, 0x78cd
and esi, 0xd69d
or esi, 0x3946
pop esi
push ebx
push esi
add esp, 4
add ebx, 0x359e
or ebx, 0x311b
sub ebx, 0x147c4
and ebx, 0x3a37
pop ebx
cmp dword [ebp - 0x2e0], 0
jne 0x48f261
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
test dword [edx - 0x17], eax
invalid
invalid
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push esi
xor esi, 0xd16d
pop esi
push ecx
push esi
add esp, 4
call fcn.0048ea09
add byte [esi], bh
cmp eax, 0x403c3b4e
cmp dword [ebx + eax*4 - 0x3c], eax
add esp, 4
pop ecx
push edi
or edi, 0x17226
pop edi
push esi
jmp 0x48ea1f
pop esi
mov byte [ebp - 0x820], 0x4c
invalid
test ecx, esp
idiv edi
push edx
or edx, 0x13926
add edx, 0x2549
or edx, 0x3696
pop edx
push edx
push edx
add esp, 4
or edx, 0x64d6
add edx, 0x2831
or edx, 0xa923
sub edx, 0xe73a
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push eax
push edi
add esp, 4
xor eax, 0xe4ca
add eax, 0x6c58
or eax, 0x7087
pop eax
push edx
and edx, 0x14634
pop edx
push edi
push eax
add esp, 4
xor edi, 0x10436
sub edi, 0x35dc
pop edi
cmp dword [ebp - 0x14f4], 0
jne 0x48f304
mov dword [ebp - 0x2e0], 0
jmp 0x48f5ab
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edx
push esi
add esp, 4
xor edx, 0x18284
pop edx
push ecx
push esi
add esp, 4
and ecx, 0x6b30
pop ecx
push ecx
push ecx
add esp, 4
sub ecx, 0x171ac
and ecx, 0x120e7
pop ecx
push edi
and edi, 0x6cc8
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x48f360
mov dword [ebp - 0x2e0], 0
jmp 0x48f5ab
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push edi
push edi
add esp, 4
or edi, 0x1045d
jmp 0x48f37f
xor edi, 0x9620
add edi, 0x3e3
pop edi
push eax
push edi
add esp, 4
jmp 0x48f397
jmp 0x48f39d
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push eax
add esp, 4
sub esi, 0x96d5
or esi, 0x21ef
sub esi, 0x7929
jmp 0x48f3e4
pop esi
push edx
call 0x48f3f6
add byte [ebp + 0x3b], al
xor al, 0x43
inc edx
cmp al, 0x44
inc ebp
aas
add esp, 4
pop edx
mov ecx, dword [ebp - 0xc34]
push edx
push edi
add esp, 4
sub edx, 0x6df5
add byte [eax], al
pop edx
push eax
push esi
add esp, 4
and eax, 0xf0bb
sub eax, 0x17fc6
pop eax
push edx
or edx, 0x64c4
les esp, [eax + eax]
xor edx, 0x16ff5
or edx, 0xb78d
pop edx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push ecx
jmp 0x48f5f2
xor ecx, 0x485e
jmp 0x48f5fe
and ecx, 0xab50
pop ecx
push edx
sub edx, 0x342d
jmp 0x48f614
jmp 0x48f61d
pop edx
invalid
invalid