Function at 0x484370
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x565d79
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x5e8024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ecx, dword fs:[0x2c]
mov esi, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebx, dword [ecx]
mov ecx, dword [0x5ee734]
cmp ecx, dword [ebx + 4]
jle 0x484406
push 0x5ee734
call fcn.0052e34a
add esp, 4
cmp dword [0x5ee734], 0xffffffff
jne 0x484406
mov dword [ebp - 4], 0
push str.SetSearchPathMode
push esi
call edi
mov dword [0x5ee72c], eax
mov dword [ebp - 4], 0xffffffff
push 0x5ee734
call fcn.0052e300
add esp, 4
mov eax, dword [0x5ee72c]
test eax, eax
je 0x484416
push 0x8001
call eax
mov eax, dword [0x5ee730]
cmp eax, dword [ebx + 4]
jle 0x484461
push 0x5ee730
call fcn.0052e34a
add esp, 4
cmp dword [0x5ee730], 0xffffffff
jne 0x484461
mov dword [ebp - 4], 1
push str.SetDllDirectory
push esi
call edi
mov dword [0x5ee724], eax
mov dword [ebp - 4], 0xffffffff
push 0x5ee730
call fcn.0052e300
add esp, 4
mov eax, dword [0x5ee724]
test eax, eax
je 0x484471
push 0x593988
call eax
mov eax, dword [0x5ee728]
cmp eax, dword [ebx + 4]
jle 0x4844bc
push 0x5ee728
call fcn.0052e34a
add esp, 4
cmp dword [0x5ee728], 0xffffffff
jne 0x4844bc
mov dword [ebp - 4], 2
push str.SetDefaultDllDirectories
push esi
call edi
mov dword [0x5ee720], eax
mov dword [ebp - 4], 0xffffffff
push 0x5ee728
call fcn.0052e300
add esp, 4
mov eax, dword [0x5ee720]
test eax, eax
je 0x4844cc
push 0x800
call eax
mov dword [ebp - 0xcc], str.psapi.dll
lea esi, [ebp - 0xcc]
mov dword [ebp - 0xc8], str.WindowsCodecs.dll
mov dword [ebp - 0xc4], str.bcrypt.dll
mov dword [ebp - 0xc0], str.msi.dll
mov dword [ebp - 0xbc], str.USP10.dll
mov dword [ebp - 0xb8], str.msls31.dll
mov dword [ebp - 0xb4], str.version.dll
mov dword [ebp - 0xb0], str.mpr.dll
mov dword [ebp - 0xac], str.uxtheme.dll
mov dword [ebp - 0xa8], str.profapi.dll
mov dword [ebp - 0xa4], str.gdiplus.dll
mov dword [ebp - 0xa0], str.userenv.dll
mov dword [ebp - 0x9c], str.dwmapi.dll
mov dword [ebp - 0x98], str.davhlpr.dll
mov dword [ebp - 0x94], str.ole32.dll
mov dword [ebp - 0x90], str.oleaut32.dll
mov dword [ebp - 0x8c], 0x59a790
mov dword [ebp - 0x88], str.shell32.dll
mov dword [ebp - 0x84], str.advapi32.dll
mov dword [ebp - 0x80], str.gdi32.dll
mov dword [ebp - 0x7c], str.user32.dll
mov dword [ebp - 0x78], str.comdlg32.dll
mov dword [ebp - 0x74], str.msimg32.dll
mov dword [ebp - 0x70], str.dbghelp.dll
mov dword [ebp - 0x6c], str.version.dll
mov dword [ebp - 0x68], str.wininet.dll
mov dword [ebp - 0x64], str.urlmon.dll
mov dword [ebp - 0x60], str.mpr.dll
mov dword [ebp - 0x5c], str.uxtheme.dll
mov dword [ebp - 0x58], str.msi.dll
mov dword [ebp - 0x54], str.gdiplus.dll
mov dword [ebp - 0x50], str.cabinet.dll
mov dword [ebp - 0x4c], str.kernel32.dll
mov dword [ebp - 0x48], 0x5a0674
mov dword [ebp - 0x44], str.rsaenh.dll
mov dword [ebp - 0x40], str.apphelp.dll
mov dword [ebp - 0x3c], str.msasn1.dll
mov dword [ebp - 0x38], str.crypt32.dll
mov dword [ebp - 0x34], str.wintrust.dll
mov dword [ebp - 0x30], str.shlwapi.dll
mov dword [ebp - 0x2c], str.lpk.dll
mov dword [ebp - 0x28], str.setupapi.dll
mov dword [ebp - 0x24], str.usp10.dll
mov dword [ebp - 0x20], str.msihnd.dll
mov dword [ebp - 0x1c], str.shcore.dll
mov dword [ebp - 0x18], str.cryptsp.dll
mov dword [ebp - 0x14], str.secur32.dll
mov ecx, dword [esi]
call fcn.00457d30
add esi, 4
lea eax, [ebp - 0x10]
cmp esi, eax
jne 0x484654
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0052df57
mov esp, ebp
pop ebp
ret