Function at 0x4022d0
Capabilities:
Access peb ldr_data
Check os version
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x40a6b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa0
mov eax, dword [0x40d0f0]
push ebx
xor ebx, ebx
mov dword [esp + 0xa0], eax
push esi
mov dword [esp + 8], ebx
mov byte [esp + 0xc], bl
mov byte [esp + 0xd], bl
mov byte [esp + 0xe], bl
mov byte [esp + 0xf], bl
mov byte [esp + 0x10], bl
mov byte [esp + 0x11], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], bl
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], bl
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], bl
mov byte [esp + 0x1b], bl
mov byte [esp + 0x1c], bl
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], bl
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], bl
mov byte [esp + 0x25], bl
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], bl
mov byte [esp + 0x2a], bl
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], bl
mov byte [esp + 0x2f], bl
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], bl
mov byte [esp + 0x35], bl
mov byte [esp + 0x36], bl
mov byte [esp + 0x37], 0x3e
mov byte [esp + 0x38], bl
mov byte [esp + 0x39], bl
mov byte [esp + 0x3a], bl
mov byte [esp + 0x3b], 0x3f
mov byte [esp + 0x3c], 0x34
mov byte [esp + 0x3d], 0x35
mov byte [esp + 0x3e], 0x36
mov byte [esp + 0x3f], 0x37
mov byte [esp + 0x40], 0x38
mov byte [esp + 0x41], 0x39
mov byte [esp + 0x42], 0x3a
mov byte [esp + 0x43], 0x3b
mov byte [esp + 0x44], 0x3c
mov byte [esp + 0x45], 0x3d
mov byte [esp + 0x46], bl
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], bl
mov byte [esp + 0x49], bl
mov byte [esp + 0x4a], bl
mov byte [esp + 0x4b], bl
mov byte [esp + 0x4c], bl
mov byte [esp + 0x4d], bl
mov byte [esp + 0x4e], 1
mov byte [esp + 0x4f], 2
mov byte [esp + 0x50], 3
mov byte [esp + 0x51], 4
mov byte [esp + 0x52], 5
mov byte [esp + 0x53], 6
mov byte [esp + 0x54], 7
mov byte [esp + 0x55], 8
mov byte [esp + 0x56], 9
mov byte [esp + 0x57], 0xa
mov byte [esp + 0x58], 0xb
mov byte [esp + 0x59], 0xc
mov byte [esp + 0x5a], 0xd
mov byte [esp + 0x5b], 0xe
mov byte [esp + 0x5c], 0xf
mov byte [esp + 0x5d], 0x10
mov byte [esp + 0x5e], 0x11
mov byte [esp + 0x5f], 0x12
mov byte [esp + 0x60], 0x13
mov byte [esp + 0x61], 0x14
mov byte [esp + 0x62], 0x15
mov byte [esp + 0x63], 0x16
mov byte [esp + 0x64], 0x17
mov byte [esp + 0x65], 0x18
mov byte [esp + 0x66], 0x19
mov byte [esp + 0x67], bl
mov byte [esp + 0x68], bl
mov byte [esp + 0x69], bl
mov byte [esp + 0x6a], bl
mov byte [esp + 0x6b], bl
mov byte [esp + 0x6c], bl
mov byte [esp + 0x6d], 0x1a
mov byte [esp + 0x6e], 0x1b
mov byte [esp + 0x6f], 0x1c
mov byte [esp + 0x70], 0x1d
mov byte [esp + 0x71], 0x1e
mov byte [esp + 0x72], 0x1f
mov byte [esp + 0x73], 0x20
mov byte [esp + 0x74], 0x21
mov byte [esp + 0x75], 0x22
mov byte [esp + 0x76], 0x23
mov byte [esp + 0x77], 0x24
mov byte [esp + 0x78], 0x25
mov byte [esp + 0x79], 0x26
mov byte [esp + 0x7a], 0x27
mov byte [esp + 0x7b], 0x28
mov byte [esp + 0x7c], 0x29
mov byte [esp + 0x7d], 0x2a
mov byte [esp + 0x7e], 0x2b
mov byte [esp + 0x7f], 0x2c
mov byte [esp + 0x80], 0x2d
mov byte [esp + 0x81], 0x2e
mov byte [esp + 0x82], 0x2f
mov byte [esp + 0x83], 0x30
mov byte [esp + 0x84], 0x31
mov byte [esp + 0x85], 0x32
mov byte [esp + 0x86], 0x33
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], ebx
mov byte [esp + 0x8c], bl
cmp dword [esp + 0xc0], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 8], ebx
jle 0x402634
push ebp
mov ebp, dword [esp + 0xc8]
push edi
mov edi, dword [esp + 0xc4]
mov al, byte [edi]
cmp al, 0xd
je 0x40261b
cmp al, 0xa
je 0x40261b
movsx ecx, byte [edi + 1]
movsx edx, byte [esp + ecx + 0x14]
movsx eax, al
movsx esi, byte [esp + eax + 0x14]
shl esi, 0x12
inc edi
shl edx, 0xc
add esi, edx
mov eax, esi
sar eax, 0x10
push eax
push 1
lea ecx, [esp + 0x98]
inc edi
call fcn.00401aa0
inc dword [ebp]
mov al, byte [edi]
cmp al, 0x3d
je 0x402612
movsx ecx, al
movsx edx, byte [esp + ecx + 0x14]
shl edx, 6
add esi, edx
mov eax, esi
sar eax, 8
push eax
push 1
lea ecx, [esp + 0x98]
inc edi
call fcn.00401aa0
inc dword [ebp]
mov al, byte [edi]
cmp al, 0x3d
je 0x402612
movsx ecx, al
movsx edx, byte [esp + ecx + 0x14]
add esi, edx
push esi
push 1
lea ecx, [esp + 0x98]
inc edi
call fcn.00401aa0
inc dword [ebp]
mov eax, dword [esp + 0x10]
add eax, 4
jmp 0x402621
mov eax, dword [esp + 0x10]
inc edi
inc eax
cmp eax, dword [esp + 0xc8]
mov dword [esp + 0x10], eax
jl 0x402580
pop edi
pop ebp
mov esi, dword [esp + 0xb8]
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x90]
push ecx
mov dword [esi + 0x18], 0xf
mov dword [esi + 0x14], ebx
mov ecx, esi
mov byte [esi + 4], bl
call fcn.00401b70
cmp dword [esp + 0xa0], 0x10
jb 0x402674
mov edx, dword [esp + 0x8c]
push edx
call fcn.0040406d
add esp, 4
mov ecx, dword [esp + 0xa8]
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [esp + 0xa0]
pop ebx
call fcn.004040a3
add esp, 0xac
ret