Function at 0x4bc443
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4ab97b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x234
push esi
mov esi, ecx
push edi
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x3d]
mov byte [esp + 0x3c], 0
mov dword [esp + 0x34], pe_nt_image_headers32
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x34]
lea ecx, [esp + 0x3c]
push eax
push ecx
push 0x4d76fc
push 0x18
push 0x4d34fc
call fcn.004c62b8
add esp, 0x14
test eax, eax
je 0x4bc48f
lea eax, [esp + 0x3c]
jmp 0x4bc60c
lea ecx, [esp + 8]
call fcn.0050d46e
mov al, 0xd8
mov cl, 0xae
mov byte [esp + 0x11], al
mov byte [esp + 0x13], al
mov al, 0x28
mov byte [esp + 0xe], cl
mov byte [esp + 0x1e], al
mov byte [esp + 0x22], cl
mov byte [esp + 0x28], al
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x13d]
mov byte [esp + 0x13c], 0
lea edx, [esp + 0x30]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x13c]
push edx
push eax
push 0x4d76fc
lea ecx, [esp + 0x18]
push 0x20
push ecx
mov dword [esp + 0x258], 0
mov byte [esp + 0x20], 0x25
mov byte [esp + 0x21], 0xd3
mov byte [esp + 0x23], 0x32
mov byte [esp + 0x24], 0x15
mov byte [esp + 0x26], 0x12
mov byte [esp + 0x28], 0xc9
mov byte [esp + 0x29], 0x78
mov byte [esp + 0x2a], 0xea
mov byte [esp + 0x2b], 0x81
mov byte [esp + 0x2c], 0x8f
mov byte [esp + 0x2d], 0x53
mov byte [esp + 0x2e], 0xcf
mov byte [esp + 0x2f], 0x63
mov byte [esp + 0x30], 0x3b
mov byte [esp + 0x31], 0x5d
mov byte [esp + 0x33], 0xaf
mov byte [esp + 0x34], 0x51
mov byte [esp + 0x35], 0x27
mov byte [esp + 0x37], 0x13
mov byte [esp + 0x38], 0x40
mov byte [esp + 0x39], 0xf6
mov byte [esp + 0x3a], 0x7d
mov byte [esp + 0x3b], 0x5a
mov byte [esp + 0x3d], 0xeb
mov byte [esp + 0x3e], 0xaa
mov byte [esp + 0x3f], 0xe1
mov dword [esp + 0x44], pe_nt_image_headers32
call fcn.004c62b8
add esp, 0x14
test eax, eax
lea eax, [esp + 0x13c]
jne 0x4bc597
mov eax, 0x4cf218
push eax
lea ecx, [esp + 0xc]
call fcn.0050d47a
push 0x4cf214
push 0x4cf210
lea ecx, [esp + 0x10]
call fcn.0050d6ae
push 0x4cf208
push 0x4cf204
lea ecx, [esp + 0x10]
call fcn.0050d6ae
lea edx, [esp + 8]
push 0x4ce830
lea eax, [esp + 0x30]
push edx
push eax
call fcn.0050d60c
mov eax, dword [eax]
push 0
push eax
call dword [fcn.004b4060]
lea ecx, [esp + 0x2c]
call fcn.0050d468
lea ecx, [esp + 8]
mov dword [esp + 0x244], 0xffffffff
call fcn.0050d468
xor ecx, ecx
call ecx
mov eax, 0x4d85a8
push eax
lea ecx, [esi + 0x16c]
call fcn.0050d68a
lea edx, [esi + 0x90]
lea eax, [esi + 0x1f4]
push edx
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.0050d618
mov eax, dword [0x4de8b0]
mov ecx, dword [eax + 0x20]
push ecx
lea ecx, [eax + 0x110]
call fcn.00497c88
mov edi, eax
mov eax, dword [0x4de8b0]
test byte [eax + 0xa4], 0x20
je 0x4bc692
test edi, edi
jne 0x4bc692
cmp dword [esi + 0x84], 2
jl 0x4bc692
push 0x906000
push 0x703000
push 0x703000
lea ecx, [eax + 0x11dc]
call fcn.004ae078
mov edx, dword [0x4de8b0]
push edi
push 0x19
push 2
mov eax, dword [edx + 0x20]
push eax
call dword [0x4b476c]
mov ecx, dword [esp + 0x23c]
mov eax, edi
pop edi
mov dword fs:[0], ecx
pop esi
add esp, 0x240
ret