Function at 0x4e1060
Capabilities:
Contain obfuscated stackstrings
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x627581
mov eax, dword fs:[0]
push eax
sub esp, 0x84
push ebx
push esi
mov eax, dword [0x786f54]
xor eax, esp
push eax
lea eax, [esp + 0x90]
mov dword fs:[0], eax
mov esi, ecx
call fcn.004e06e0
push 0x719780
lea ecx, [esp + 0x48]
call sub.SCL.dll_Ordinal_7749
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x9c], 0
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x44]
mov byte [esp + 0x98], 2
call sub.SCL.dll_Ordinal_7754
push str.EIGHT
lea ecx, [esp + 0x50]
call sub.SCL.dll_Ordinal_7749
lea ecx, [esp + 0x4c]
push ecx
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 3
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x4c]
mov byte [esp + 0x98], 5
call sub.SCL.dll_Ordinal_7754
push 0x71a8f0
lea ecx, [esp + 0x58]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x54]
push edx
lea ecx, [esp + 0x34]
mov byte [esp + 0x9c], 6
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x54]
mov byte [esp + 0x98], 8
call sub.SCL.dll_Ordinal_7754
push 0x71a8ec
lea ecx, [esp + 0x60]
call sub.SCL.dll_Ordinal_7749
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x44]
mov byte [esp + 0x9c], 9
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x5c]
mov byte [esp + 0x98], 0xb
call sub.SCL.dll_Ordinal_7754
push 0x71a8e8
lea ecx, [esp + 0x68]
call sub.SCL.dll_Ordinal_7749
lea ecx, [esp + 0x64]
push ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x9c], 0xc
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x64]
mov byte [esp + 0x98], 0xe
call sub.SCL.dll_Ordinal_7754
push str.WHITE
lea ecx, [esp + 0x70]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x6c]
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x9c], 0xf
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 0x11
call sub.SCL.dll_Ordinal_7754
push str.sRGB_IEC61966_2.1
lea ecx, [esp + 0x78]
call sub.SCL.dll_Ordinal_7749
lea eax, [esp + 0x74]
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x9c], 0x12
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x74]
mov byte [esp + 0x98], 0x14
call sub.SCL.dll_Ordinal_7754
push str._nvar_uw__new_UnitValue___WIDTH_____px___nvar_uh__new_UnitValue___HEIGHT____px___nvar_docname____DOCNAME____nvar_n__app.documents.length__nvar_i__0__nvar_theDoc__nfor_i__0__i___n__i____n___var_dn__app.documents_i_.name__n___if_dn__docname___n______var_idx__dn.lastIndexOf_____n______if_idx____1____n_________var_pfix__dn.substring_idx1__dn.length___n_________pfix__Number_pfix___1__n_________docname__dn.substring_0__idx_____pfix__n_______else__n_________docname__dn___1__n_______n______i__0__n____n_napp.bringToFront____ntheDoc__app.documents.add_uw__uh____RES____docname__NewDocumentMode.__CLRMODE____DocumentFill.__BACKGROUND______PIXRATIO_____ntheDoc.bitsPerChannel__BitsPerChannelType.__CLRDEPTH____ntheDoc.colorProfileName____CLRPROFILE___
lea ecx, [esp + 0x80]
call sub.SCL.dll_Ordinal_7749
lea ecx, [esp + 0x7c]
push ecx
lea ecx, [esp + 0x14]
mov byte [esp + 0x9c], 0x15
call sub.SCL.dll_Ordinal_9858
lea ecx, [esp + 0x7c]
mov byte [esp + 0x98], 0x17
call sub.SCL.dll_Ordinal_7754
mov eax, dword [esi + 0x34]
fld dword [eax + 0x84]
add eax, 0x84
call fcn.00610db0
push eax
lea ecx, [esp + 0x24]
call sub.SCL.dll_Ordinal_9816
mov esi, dword [esi + 0x34]
fld dword [esi + 0x88]
add esi, 0x84
mov byte [esp + 0x98], 0x18
call fcn.00610db0
push eax
lea ecx, [esp + 0x20]
call sub.SCL.dll_Ordinal_9816
push str.____NewDocument_PS_DocName_Untitled_1Untitled_1
lea ecx, [esp + 0x18]
mov byte [esp + 0x9c], 0x19
call sub.SCL.dll_Ordinal_9806
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
mov byte [esp + 0xa0], 0x1a
call sub.SCL.dll_Ordinal_5281
add esp, 8
mov bl, 0x1c
lea ecx, [esp + 0x14]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_9807
push str.__WIDTH__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea ecx, [esp + 0x84]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x1d
call sub.SCL.dll_Ordinal_9858
push 0
lea edx, [esp + 0x24]
mov byte [esp + 0x9c], 0x1e
push edx
push eax
lea ecx, [esp + 0x1c]
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x1d
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__HEIGHT__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea eax, [esp + 0x84]
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x1f
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x20]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x20
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x1f
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__DOCNAME__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x21
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x1c]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x22
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x21
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__RES__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x23
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x30]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x24
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x23
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__CLRMODE__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x25
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x26
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x25
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__CLRDEPTH__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x27
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x38]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x28
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x27
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__BACKGROUND__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x29
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x2c]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x2a
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x29
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__PIXRATIO__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x2b
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xa0], 0x2c
push eax
lea ecx, [esp + 0x1c]
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x2b
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.__CLRPROFILE__
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0x2d
call sub.SCL.dll_Ordinal_9858
push 0
lea ecx, [esp + 0x28]
push ecx
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 0x2e
call sub.SCL.dll_Ordinal_9852
lea ecx, [esp + 0x3c]
mov byte [esp + 0x98], 0x2d
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
push str.MCBridgeTalk::Send_photoshop_:
lea ecx, [esp + 0x88]
call sub.SCL.dll_Ordinal_7749
lea edx, [esp + 0x84]
push edx
mov byte [esp + 0x9c], 0x2f
call fcn.004da5c0
add esp, 4
lea ecx, [esp + 0x84]
mov byte [esp + 0x98], bl
call sub.SCL.dll_Ordinal_7754
lea eax, [esp + 0x10]
push eax
call fcn.004da5e0
push 1
push 1
lea ecx, [esp + 0x1c]
push ecx
push 0x7001b0
call fcn.0045d6e0
add esp, 0x14
lea ecx, [esp + 0x18]
mov byte [esp + 0x98], 0x19
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x1c]
mov byte [esp + 0x98], 0x18
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x20]
mov byte [esp + 0x98], 0x17
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x10]
mov byte [esp + 0x98], 0x14
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x24]
mov byte [esp + 0x98], 0x11
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x28]
mov byte [esp + 0x98], 0xe
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x2c]
mov byte [esp + 0x98], 0xb
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x40]
mov byte [esp + 0x98], 8
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x30]
mov byte [esp + 0x98], 5
call sub.SCL.dll_Ordinal_9807
mov byte [esp + 0x98], 2
lea ecx, [esp + 0x34]
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x38]
mov dword [esp + 0x98], 0xffffffff
call sub.SCL.dll_Ordinal_9807
mov ecx, dword [esp + 0x90]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret