Function at 0x48ad09
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x110
mov eax, 0x54c08f
call fcn.0053655e
mov esi, ecx
mov dword [ebp - 0xe8], esi
mov edi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x11c], edi
mov ecx, edi
push ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], ebx
call fcn.004dab43
sub esp, 0x18
mov dword [ebp - 4], ebx
mov ecx, esp
mov dword [ebp - 0xd4], esp
inc ebx
mov dword [ebp - 0xe0], ebx
push dword [esi + 0x10]
call fcn.004daa5d
push 0x5658ec
mov ecx, edi
mov dword [ebp - 4], ebx
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.004dacca
sub esp, 0x18
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004daa00
push 0x564060
mov ecx, edi
mov dword [ebp - 4], 2
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.004dacca
movzx eax, byte [esi + 0x71]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004dac05
push str.stat
mov ecx, edi
mov dword [ebp - 4], 3
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.004dacca
mov eax, dword [esi + 0xbc]
sub eax, dword [esi + 0xb8]
push 0x24
cdq
pop ecx
idiv ecx
test eax, eax
je 0x48af38
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov eax, dword [esi + 0xb8]
mov ecx, dword [esi + 0xbc]
mov dword [ebp - 4], 4
cmp eax, ecx
je 0x48aef4
mov edi, eax
mov esi, ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.0040a64a
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x7c]
and dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 5
call fcn.00403913
or ebx, 2
mov dword [ebp - 0xe0], ebx
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x28]
and dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x40]
push eax
mov byte [ebp - 4], 6
call fcn.00403913
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00402940
mov ecx, eax
call fcn.0049b007
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 8
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x58]
call fcn.0040257a
lea ecx, [ebp - 0x40]
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.00403ae4
lea ecx, [ebp - 0x7c]
call fcn.0040257a
push 0x24
pop eax
add edi, eax
cmp edi, esi
jne 0x48ae24
mov esi, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xe4]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push str.files
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.004dacca
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0
call fcn.004dac77
push 0x24
pop ecx
mov eax, dword [esi + 0xb0]
sub eax, dword [esi + 0xac]
cdq
idiv ecx
test eax, eax
je 0x48b09b
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov eax, dword [esi + 0xac]
mov ecx, dword [esi + 0xb0]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], ecx
cmp eax, ecx
je 0x48b057
mov edi, eax
mov esi, ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.0040a64a
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x7c]
and dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0xc
call fcn.00403913
or ebx, 4
mov dword [ebp - 0xe0], ebx
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
and dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xd
call fcn.00403913
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00402940
mov ecx, eax
call fcn.0049b007
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xf
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x58]
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0x40]
call fcn.0040257a
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0xb
call fcn.00403ae4
lea ecx, [ebp - 0x7c]
call fcn.0040257a
push 0x24
pop eax
add edi, eax
cmp edi, esi
jne 0x48af87
mov esi, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xe4]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push str.folders
mov ecx, edi
mov byte [ebp - 4], 0x11
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.004dacca
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0
call fcn.004dac77
push 0x24
pop ecx
mov eax, dword [esi + 0x8c]
sub eax, dword [esi + 0x88]
cdq
idiv ecx
test eax, eax
je 0x48b1fd
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov eax, dword [esi + 0x88]
mov ecx, dword [esi + 0x8c]
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], ecx
cmp eax, ecx
je 0x48b1ba
mov edi, eax
mov esi, ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.0040a64a
and dword [ebp - 0x30], 0
lea eax, [ebp - 0x7c]
and dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.00403913
or ebx, 8
mov dword [ebp - 0xe0], ebx
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
and dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x14
call fcn.00403913
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00402940
mov ecx, eax
call fcn.0049b007
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x16
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x58]
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0x40]
call fcn.0040257a
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x12
call fcn.00403ae4
lea ecx, [ebp - 0x7c]
call fcn.0040257a
push 0x24
pop eax
add edi, eax
cmp edi, esi
jne 0x48b0ea
mov esi, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xe4]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push 0x18
pop eax
push 0x56d5fc
mov ecx, edi
mov byte [ebp - 4], al
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.004dacca
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0
call fcn.004dac77
mov eax, dword [esi + 0xd4]
sub eax, dword [esi + 0xd0]
sar eax, 3
test eax, eax
je 0x48b371
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov eax, dword [esi + 0xd0]
mov ecx, dword [esi + 0xd4]
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], ecx
cmp eax, ecx
je 0x48b330
mov edi, eax
mov esi, ecx
and dword [ebp - 0xd8], 0
lea ecx, [ebp - 0xd8]
and dword [ebp - 0xd4], 0
push edi
call fcn.00404733
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0x40]
and dword [ebp - 0x30], 0
add eax, 4
and dword [ebp - 0x2c], 0
push eax
mov byte [ebp - 4], 0x1a
call fcn.00403913
or ebx, 0x10
mov dword [ebp - 0xe0], ebx
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
and dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00403913
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00402940
mov ecx, eax
call fcn.0049b007
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x1d
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x58]
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0x40]
call fcn.0040257a
mov ecx, dword [ebp - 0xd4]
mov byte [ebp - 4], 0x19
test ecx, ecx
je 0x48b319
call fcn.00406959
add edi, 8
cmp edi, esi
jne 0x48b24c
mov esi, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xe4]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push str.procs
mov ecx, edi
mov byte [ebp - 4], 0x1f
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.004dacca
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0
call fcn.004dac77
mov eax, dword [esi + 0x140]
sub eax, dword [esi + 0x13c]
push 0x18
cdq
pop ecx
idiv ecx
test eax, eax
je 0x48b46c
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov eax, dword [esi + 0x13c]
mov ecx, dword [esi + 0x140]
mov dword [ebp - 4], 0x20
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], ecx
cmp eax, ecx
je 0x48b42b
push 0x18
mov edi, eax
mov esi, ecx
pop ebx
and dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
and dword [ebp - 0x14], 0
push edi
call fcn.00403913
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x118]
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x20
call fcn.0040257a
add edi, ebx
cmp edi, esi
jne 0x48b3c2
mov esi, dword [ebp - 0xe8]
mov edi, dword [ebp - 0xe4]
mov ebx, dword [ebp - 0xe0]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push str.jobs
mov ecx, edi
mov byte [ebp - 4], 0x23
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.004dacca
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0
call fcn.004dac77
mov eax, dword [esi + 0x158]
sub eax, dword [esi + 0x154]
sar eax, 3
test eax, eax
je 0x48b65a
push 6
lea ecx, [ebp - 0x100]
call fcn.004dab43
mov ecx, dword [esi + 0x158]
push 0x24
pop eax
mov dword [ebp - 4], eax
mov eax, dword [esi + 0x154]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], ecx
cmp eax, ecx
je 0x48b61d
mov edi, eax
and dword [ebp - 0xd8], 0
lea ecx, [ebp - 0xd8]
and dword [ebp - 0xd4], 0
push edi
call fcn.00404733
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd0]
push eax
mov byte [ebp - 4], 0x25
call fcn.004982ed
and dword [ebp - 0x30], 0
lea ecx, [ebp - 0x40]
and dword [ebp - 0x2c], 0
push eax
mov byte [ebp - 4], 0x26
call fcn.00403913
or ebx, 0x20
mov dword [ebp - 0xe0], ebx
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x40]
and dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0x27
call fcn.00403913
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x28
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00402940
mov ecx, eax
call fcn.0049b007
mov esi, eax
mov ecx, dword [ebp - 0xd8]
lea eax, [ebp - 0xac]
push eax
mov byte [ebp - 4], 0x29
call fcn.00498303
push 0x56d614
push eax
lea eax, [ebp - 0x94]
mov byte [ebp - 4], 0x2a
push eax
call fcn.004030d5
push esi
push eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x2b
push eax
call fcn.004045e5
add esp, 0x18
push eax
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x2c
call fcn.004daa00
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x2d
push eax
lea ecx, [ebp - 0x100]
call fcn.004db1f4
lea ecx, [ebp - 0x118]
call fcn.004dac77
lea ecx, [ebp - 0x58]
call fcn.0040257a
lea ecx, [ebp - 0x94]
call fcn.0040257a
lea ecx, [ebp - 0xac]
call fcn.0040257a
lea ecx, [ebp - 0x70]
call fcn.0040257a
lea ecx, [ebp - 0x28]
call fcn.0040257a
lea ecx, [ebp - 0x40]
call fcn.0040257a
lea ecx, [ebp - 0xb8]
call fcn.00403ae4
lea ecx, [ebp - 0xd0]
call fcn.0040257a
mov ecx, dword [ebp - 0xd4]
push 0x24
pop eax
mov byte [ebp - 4], al
test ecx, ecx
je 0x48b608
call fcn.00406959
add edi, 8
cmp edi, dword [ebp - 0xdc]
jne 0x48b4b8
mov edi, dword [ebp - 0xe4]
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0xd4], esp
push eax
call fcn.004da8b9
push str.shortcuts
mov ecx, edi
mov byte [ebp - 4], 0x2e
call fcn.004dae12
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.004dacca
lea ecx, [ebp - 0x100]
call fcn.004dac77
mov eax, edi
call fcn.00536508
ret 4