Function at 0x4bb050
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ecx, 0x590140
jmp 0x4bb042
mov eax, 0x53ce00
call fcn.0050ad90
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x18], esi
call fcn.004cc49d
lea edi, [esi + 0xea4]
xor ebx, ebx
mov ecx, edi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ecx
call fcn.004e5c5d
mov eax, edi
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc4]
call fcn.004e5c5d
lea ecx, [esi + 0x1030]
mov byte [ebp - 4], 2
call fcn.004f5e86
lea ecx, [esi + 0x1044]
mov byte [ebp - 4], 3
call fcn.0050a2bc
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1070]
push eax
mov byte [ebp - 4], 5
call fcn.00492f51
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1098]
push eax
mov byte [ebp - 4], 8
call fcn.004c22f0
lea ecx, [esi + 0x10c4]
mov byte [ebp - 4], 0xa
call fcn.004e39c5
lea eax, [esi + 0x10e0]
lea ecx, [ebp - 0xd]
push ebx
push ecx
lea ecx, [eax + 8]
mov byte [ebp - 4], 0xc
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.004ddbf8
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1144]
push eax
mov byte [ebp - 4], 0xf
call fcn.004c2340
lea ecx, [esi + 0x11c4]
mov byte [ebp - 4], 0x11
call fcn.004c1fde
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x11d0]
push eax
mov byte [ebp - 4], 0x13
call fcn.004c2437
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1228]
push eax
mov byte [ebp - 4], 0x16
call fcn.004c2487
lea ecx, [esi + 0x1250]
mov byte [ebp - 4], 0x18
call fcn.004f5bdd
lea ecx, [esi + 0x1288]
mov byte [ebp - 4], 0x19
call fcn.0050a2bc
lea ecx, [esi + 0x1298]
mov byte [ebp - 4], 0x1a
call fcn.004f574c
lea ecx, [esi + 0x12d4]
mov byte [ebp - 4], 0x1b
call fcn.004f3c0a
lea ecx, [esi + 0x136c]
mov byte [ebp - 4], 0x1c
call fcn.004f353a
lea ecx, [esi + 0x1410]
mov byte [ebp - 4], 0x1d
call fcn.004f5bdd
lea ecx, [esi + 0x1448]
mov byte [ebp - 4], 0x1e
call fcn.004f3506
lea ecx, [esi + 0x1454]
mov byte [ebp - 4], 0x1f
call fcn.004f3136
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1484]
push eax
mov byte [ebp - 4], 0x21
call fcn.004c24d7
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x14ac]
push eax
mov byte [ebp - 4], 0x24
call fcn.004c24d7
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x14d4]
push eax
mov byte [ebp - 4], 0x27
call fcn.004c24d7
lea eax, [esi + 0x1e60]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x1e7c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 0x2b
lea ecx, [esi + 0x1e88]
call fcn.004c1eab
lea ecx, [esi + 0x1e94]
mov byte [ebp - 4], 0x2c
call fcn.004c1eab
lea eax, [ebp - 0xd]
push ebx
lea ecx, [esi + 0x1fd8]
push eax
mov byte [ebp - 4], 0x2e
call fcn.004c256e
lea ecx, [esi + 0x2038]
mov byte [ebp - 4], 0x30
call fcn.004c361a
lea ecx, [esi + 0x2f50]
mov byte [ebp - 4], 0x31
call fcn.004c361a
lea ecx, [esi + 0x3e68]
mov byte [ebp - 4], 0x32
call fcn.004d4124
lea ecx, [esi + 0x3eb8]
mov byte [ebp - 4], 0x33
call fcn.004dce47
lea ecx, [esi + 0x40ec]
mov byte [ebp - 4], 0x34
call fcn.004df3c6
lea ecx, [esi + 0x432c]
mov byte [ebp - 4], 0x35
call fcn.004d5002
lea ecx, [esi + 0x448c]
mov byte [ebp - 4], 0x36
call fcn.004f2c64
lea ecx, [esi + 0x44bc]
mov byte [ebp - 4], 0x37
call fcn.004f2c13
lea eax, [esi + 0x4528]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4534]
mov byte [ebp - 4], 0x39
call fcn.0050a2bc
lea ecx, [esi + 0x4544]
mov byte [ebp - 4], 0x3a
call fcn.0050a2bc
lea ecx, [esi + 0x4600]
mov byte [ebp - 4], 0x3b
call fcn.0040288b
lea ecx, [esi + 0x460c]
mov byte [ebp - 4], 0x3c
call fcn.0040288b
lea eax, [esi + 0x4618]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea eax, [esi + 0x4624]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esi + 0x4634]
lea eax, [ebp - 0xd]
mov byte [ebp - 4], pe_nt_image_headers32
push eax
lea eax, [ebp - 0xe]
push eax
call fcn.004c2249
lea ecx, [esi + 0x4640]
lea eax, [ebp - 0xe]
mov byte [ebp - 4], 0x42
push eax
lea eax, [ebp - 0xd]
push eax
call fcn.004c2249
mov dword [esi], 0x552f68
mov dword [esi + 0x3dc], 6
mov dword [esi + 0xe98], ebx
mov dword [esi + 0xe94], ebx
mov dword [esi + 0x1064], ebx
mov dword [esi + 0x1068], ebx
push 0xffffffffffffffff
mov ecx, edi
mov byte [ebp - 4], 0x43
mov dword [esi + 0xe8c], ebx
call fcn.004e5ce0
push 0xffffffffffffffff
lea ecx, [esi + 0xf68]
call fcn.004e5ce0
lea ecx, [esi + 0x1144]
mov dword [esi + 0x1294], 1
call fcn.004e5205
mov dword [esi + 0x1ea0], 0xc8
mov dword [esi + 0x4558], ebx
mov dword [esi + 0x10ec], ebx
push 0xc
mov dword [esi + 0x455c], ebx
mov dword [esi + 0x1058], ebx
lea edi, [esi + 0x10f0]
pop ecx
xor eax, eax
mov dword [esi + 0x10c0], ebx
rep stosd dword es:[edi], eax
or dword [esi + 0x1040], 0xffffffff
mov ecx, esi
call fcn.004bed9f
lea ecx, [esi + 0x1484]
call fcn.004e5205
lea ecx, [esi + 0x14ac]
call fcn.004e5205
lea ecx, [esi + 0x14d4]
call fcn.004e5205
mov ecx, esi
mov dword [esi + 0x1e74], ebx
call fcn.004bf7ba
lea eax, [esi + 0x1ed4]
mov dword [esi + 0x1174], ebx
push str.NULL
mov dword [esi + 0x116c], ebx
push eax
mov dword [esi + 0x1178], ebx
call fcn.0050ae40
mov dword [esi + 0x3e4], 0xc
call fcn.00507854
mov dword [esi + 0x106c], eax
push 0x10
lea eax, [esi + 0x430c]
push ebx
push eax
call fcn.0050aefa
push 0x10
lea eax, [esi + 0x431c]
push ebx
push eax
call fcn.0050aefa
add esp, 0x20
call fcn.00507854
mov dword [esi + 0x1ea4], eax
call fcn.00507854
mov dword [esi + 0x1eb4], eax
mov dword [esi + 0x1eb8], ebx
mov dword [esi + 0x1ec8], ebx
mov dword [esi + 0x1ebc], ebx
or dword [esi + 0x1fd4], 0xffffffff
mov dword [esi + 0xea0], ebx
mov dword [esi + 0x447c], ebx
mov dword [esi + 0xe90], ebx
mov dword [esi + 0x4510], ebx
mov dword [esi + 0x4514], ebx
lea ecx, [esi + 0x44bc]
mov dword [esi + 0x4518], ebx
call fcn.004f2c3f
push 0xa4
mov byte [esi + 0x1ea8], bl
call fcn.0050aa6c
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x44
je 0x4bb4f6
mov ecx, eax
call fcn.004f6a34
jmp 0x4bb4f8
xor eax, eax
push 0x64
mov byte [ebp - 4], 0x43
mov dword [esi + 0xe7c], eax
call fcn.0050aa6c
pop ecx
mov dword [ebp - 0x14], eax
cmp eax, ebx
mov byte [ebp - 4], 0x45
je 0x4bb51e
mov ecx, eax
call fcn.004f6061
jmp 0x4bb520
xor eax, eax
mov dword [esi + 0xe78], eax
mov dword [esi + 0xe80], ebx
push 0x1c
lea eax, [esi + 0x1124]
mov dword [esi + 0xe84], ebx
push ebx
mov dword [esi + 0x4560], ebx
push eax
mov byte [ebp - 4], 0x43
mov dword [esi + 0x4564], ebx
call fcn.0050aefa
add esp, 0xc
call fcn.00507854
or dword [esi + 0x45d0], 0xffffffff
mov dword [esi + 0x457c], eax
mov ecx, esi
mov dword [esi + 0x4590], ebx
mov dword [esi + 0x4630], ebx
mov byte [esi + 0x45d8], bl
mov dword [esi + 0x45d4], ebx
mov dword [esi + 0x45dc], ebx
mov dword [esi + 0x45e0], ebx
call fcn.004c159a
push dword [esi + 0x10e4]
lea ecx, [esi + 0x10e0]
push dword [ecx]
call fcn.004d5682
push 0x10
lea eax, [esi + 0x1218]
push ebx
mov dword [0x594c0c], ebx
push eax
mov dword [esi + 0x45fc], ebx
mov byte [esi + 0x1e79], bl
mov byte [esi + 0x1e78], bl
mov dword [esi + 0x1190], ebx
mov dword [esi + 0x11c0], ebx
mov byte [esi + 0x1194], bl
mov dword [esi + 0xca4], ebx
mov dword [esi + 0x1198], ebx
mov dword [esi + 0x119c], ebx
mov dword [esi + 0x11a0], ebx
mov dword [esi + 0x11a4], ebx
mov dword [esi + 0x11a8], ebx
mov dword [esi + 0x11ac], ebx
mov dword [esi + 0x11b4], ebx
mov dword [esi + 0x11b8], ebx
mov dword [esi + 0x11bc], ebx
mov dword [esi + 0x11b0], ebx
mov byte [esi + 0x1208], bl
mov byte [esi + 0x1209], bl
mov dword [esi + 0x120c], ebx
mov dword [esi + 0x1210], ebx
mov dword [esi + 0x1214], ebx
mov byte [esi + 0x4664], bl
mov dword [esi + 0x464c], ebx
mov dword [esi + 0x1140], ebx
call fcn.0050aefa
mov ecx, dword [ebp - 0xc]
add esp, 0xc
mov eax, esi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret