Function at 0x4b07aa
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x5ae509
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
lea eax, [esi + 0xc]
push edi
mov dword [esi], 0x5c90c0
xor edi, edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov dword [esp + 0x24], edi
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov dword [esp + 0x24], 1
lea eax, [esi + 0x18]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 2
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 3
lea eax, [esi + 0x24]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 4
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 5
lea eax, [esi + 0x30]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 6
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 7
lea ebx, [esi + 0x3c]
mov ecx, ebx
mov dword [esp + 0x10], ebx
call fcn.004173d0
mov byte [esp + 0x24], 8
mov dword [ebx], 0x5b7a0c
mov byte [esp + 0x24], 9
lea eax, [esi + 0x4c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0xa
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0xb
lea ebp, [esi + 0x58]
mov ecx, ebp
mov dword [esp + 0x10], ecx
call fcn.004173d0
mov byte [esp + 0x24], 0xc
mov edx, ebp
mov dword [edx], 0x5b7a0c
mov byte [esp + 0x24], 0xd
lea eax, [esi + 0x68]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0xe
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0xf
lea eax, [esi + 0x74]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x10
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x11
lea eax, [esi + 0x80]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x12
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x13
lea eax, [esi + 0x8c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x14
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x15
lea ecx, [esi + 0x98]
mov dword [esp + 0x10], ecx
call fcn.004173d0
mov byte [esp + 0x24], 0x16
mov eax, dword [esp + 0x10]
mov dword [eax], 0x5b7a0c
mov byte [esp + 0x24], 0x17
lea eax, [esi + 0xa8]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x18
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x19
lea eax, [esi + 0xb4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x1a
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1b
lea eax, [esi + 0xc4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x1c
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1d
lea eax, [esi + 0xd0]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x1e
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x1f
lea eax, [esi + 0xdc]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x20
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x21
lea eax, [esi + 0xe8]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x22
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x23
lea eax, [esi + 0xf4]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x24
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x25
lea eax, [esi + 0x100]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x26
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x27
lea eax, [esi + 0x10c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x28
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x29
lea eax, [esi + 0x363c]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x2a
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x2b
lea eax, [esi + 0x3648]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x2c
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x2d
lea eax, [esi + 0x3654]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x2e
mov dword [eax], 0x5b60dc
mov edx, dword [0xaf9600]
mov dword [eax + 8], edx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x2f
lea eax, [esi + 0x3660]
mov dword [esp + 0x10], eax
mov dword [eax], 0x5b5f30
mov dword [eax + 4], edi
mov byte [esp + 0x24], 0x30
mov dword [eax], 0x5b60dc
mov ecx, dword [0xaf9600]
mov dword [eax + 8], ecx
inc dword [0xaf9600]
mov byte [esp + 0x24], 0x31
lea ecx, [esi + 0x3678]
call fcn.004b7540
mov byte [esp + 0x24], 0x32
xor edx, edx
mov dword [esi + 0x11c], edx
mov dword [esi + 0x120], edx
mov dword [esi + 0x124], edx
mov dword [esi + 0x128], edx
mov dword [esi + 0x12c], edx
mov dword [esi + 0x130], edx
mov dword [esi + 0x134], edx
mov dword [esi + 0x138], edx
mov dword [esi + 0x13c], edx
mov dword [esi + 0x140], edx
mov dword [esi + 0x144], edx
mov dword [esi + 0x148], edx
mov dword [esi + 0x14c], edx
mov dword [esi + 0x150], edx
mov dword [esi + 0x18c], edi
mov dword [esi + 0x190], edi
mov dword [esi + 0x194], edi
mov dword [esi + 0x198], edi
mov dword [esi + 0x19c], edi
mov dword [esi + 0x1a0], edi
mov dword [esi + 0x1a4], edi
mov dword [esi + 0x1a8], edi
mov dword [esi + 0x1ac], edi
mov dword [esi + 0x1b0], edi
mov dword [esi + 0x1b4], edi
mov dword [esi + 0x1b8], edi
mov dword [esi + 0x1bc], edi
mov dword [esi + 0x1c0], edi
mov dword [esi + 0x1c4], edi
mov dword [esi + 0x1c8], edi
mov dword [esi + 0x1cc], edi
mov dword [esi + 0x1d0], edi
mov dword [esi + 0x1d4], edi
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x10]
mov ecx, 1
mov dword [esi + 0x10], ecx
mov dword [esi + 0x1c], edi
mov dword [esi + 0x28], edi
mov dword [esi + 0x34], ecx
mov dl, byte [ebx + 0xc]
xor dl, al
mov byte [ebx + 4], dl
mov dl, byte [ebx + 0xd]
xor dl, al
mov byte [ebx + 8], dl
mov dl, byte [ebx + 0xc]
xor dl, ah
mov byte [ebx + 5], dl
mov dl, byte [ebx + 0xd]
xor dl, ah
mov byte [ebx + 9], dl
mov dl, byte [ebx + 0xc]
shr eax, 0x10
xor dl, al
mov byte [ebx + 6], dl
mov dl, byte [ebx + 0xd]
xor dl, al
mov byte [ebx + 0xa], dl
mov dl, byte [ebx + 0xc]
xor dl, ah
mov byte [ebx + 7], dl
mov dl, byte [ebx + 0xd]
xor dl, ah
mov byte [ebx + 0xb], dl
mov dword [esi + 0x50], edi
mov dword [esi + 0xd4], edi
mov dword [esi + 0xe0], edi
mov dword [esi + 0xec], edi
mov dword [esi + 0xf8], edi
mov dword [esi + 0x104], edi
mov dl, byte [ebp + 0xc]
mov eax, edi
xor dl, al
mov byte [ebp + 4], dl
mov dl, byte [ebp + 0xd]
xor dl, al
mov byte [ebp + 8], dl
mov dl, byte [ebp + 0xc]
xor dl, ah
mov byte [ebp + 5], dl
mov dl, byte [ebp + 0xd]
xor dl, ah
mov byte [ebp + 9], dl
mov dl, byte [ebp + 0xc]
shr eax, 0x10
xor dl, al
mov byte [ebp + 6], dl
mov dl, byte [ebp + 0xd]
xor dl, al
mov byte [ebp + 0xa], dl
mov dl, byte [ebp + 0xc]
xor dl, ah
mov byte [ebp + 7], dl
mov dl, byte [ebp + 0xd]
xor dl, ah
mov byte [ebp + 0xb], dl
mov dword [esi + 0x364c], ecx
mov al, byte [0x6fb1e8]
mov cl, byte [0x6fb1e9]
mov byte [0x6fb1e0], al
mov byte [0x6fb1e4], cl
mov byte [0x6fb1e1], al
mov byte [0x6fb1e5], cl
mov byte [0x6fb1e2], al
mov byte [0x6fb1e6], cl
mov byte [0x6fb1e3], al
mov al, byte [0x6fb1f8]
mov byte [0x6fb1e7], cl
mov cl, byte [0x6fb1f9]
mov dword [esp + 0x10], edi
mov byte [0x6fb1f0], al
mov byte [0x6fb1f4], cl
mov byte [0x6fb1f1], al
mov byte [0x6fb1f5], cl
mov byte [0x6fb1f2], al
mov byte [0x6fb1f6], cl
mov byte [0x6fb1f3], al
mov byte [0x6fb1f7], cl
mov dword [esp + 0x24], 0xffffffff
mov ecx, dword [esp + 0x1c]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret