Function at 0x41d740
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Contain obfuscated stackstrings
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x42ae06
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x43bafc]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x10], esi
call fcn.00404600
mov dword [esp + 0x1c], 0
lea ecx, [esi + 0x18]
call fcn.00404600
mov byte [esp + 0x1c], 1
lea ecx, [esi + 0x1c]
call fcn.00404600
mov byte [esp + 0x1c], 2
lea ecx, [esi + 0x20]
call fcn.00404600
mov byte [esp + 0x1c], 3
lea ecx, [esi + 0x24]
call fcn.00404600
mov byte [esp + 0x1c], 4
lea ecx, [esi + 0x28]
call fcn.00404600
mov byte [esp + 0x1c], 5
lea ecx, [esi + 0x2c]
call fcn.00404600
mov byte [esp + 0x1c], 6
lea ecx, [esi + 0x30]
call fcn.00404600
mov byte [esp + 0x1c], 7
lea ecx, [esi + 0x34]
call fcn.00404600
mov byte [esp + 0x1c], 8
lea ecx, [esi + 0x38]
call fcn.00404600
mov byte [esp + 0x1c], 9
lea ecx, [esi + 0x3c]
call fcn.00404600
mov byte [esp + 0x1c], 0xa
lea ecx, [esi + 0x40]
call fcn.00404600
mov byte [esp + 0x1c], 0xb
lea ecx, [esi + 0x44]
call fcn.00404600
mov byte [esp + 0x1c], 0xc
lea ecx, [esi + 0x48]
call fcn.00404600
mov byte [esp + 0x1c], 0xd
lea ecx, [esi + 0x4c]
call fcn.00404600
mov byte [esp + 0x1c], 0xe
lea ecx, [esi + 0x50]
call fcn.00404600
mov byte [esp + 0x1c], 0xf
lea ecx, [esi + 0x54]
call fcn.00404600
mov byte [esp + 0x1c], 0x10
lea ecx, [esi + 0x58]
call fcn.00404600
mov byte [esp + 0x1c], 0x11
lea ecx, [esi + 0x5c]
call fcn.00404600
mov byte [esp + 0x1c], 0x12
lea ecx, [esi + 0x60]
call fcn.00404600
mov byte [esp + 0x1c], 0x13
lea ecx, [esi + 0x64]
call fcn.00404600
mov byte [esp + 0x1c], 0x14
lea ecx, [esi + 0x68]
call fcn.00404600
mov byte [esp + 0x1c], 0x15
lea ecx, [esi + 0x6c]
call fcn.00404600
mov byte [esp + 0x1c], 0x16
lea ecx, [esi + 0x70]
call fcn.00404600
mov byte [esp + 0x1c], 0x17
lea ecx, [esi + 0x74]
call fcn.00404600
mov byte [esp + 0x1c], 0x18
lea ecx, [esi + 0x78]
call fcn.00404600
mov byte [esp + 0x1c], 0x19
lea ecx, [esi + 0x7c]
call fcn.00404600
mov byte [esp + 0x1c], 0x1a
lea ecx, [esi + 0x80]
call fcn.0041af50
mov byte [esp + 0x1c], 0x1b
lea ecx, [esi + 0x8c]
call fcn.00404600
mov byte [esp + 0x1c], 0x1c
lea ecx, [esi + 0x90]
call fcn.0041af50
mov byte [esp + 0x1c], 0x1d
lea ecx, [esi + 0x9c]
call fcn.0041af50
mov byte [esp + 0x1c], 0x1e
lea ecx, [esi + 0xa8]
call fcn.00404600
mov byte [esp + 0x1c], 0x1f
lea ecx, [esi + 0xac]
call fcn.00404600
mov byte [esp + 0x1c], 0x20
lea ecx, [esi + 0xb0]
call fcn.00404600
mov byte [esp + 0x1c], 0x21
lea ecx, [esi + 0xb4]
call fcn.00404600
mov byte [esp + 0x1c], 0x22
lea ecx, [esi + 0xb8]
call fcn.00404600
mov byte [esp + 0x1c], 0x23
lea ecx, [esi + 0xbc]
call fcn.00404600
mov byte [esp + 0x1c], 0x24
lea ecx, [esi + 0xc0]
call fcn.00404600
mov byte [esp + 0x1c], 0x25
lea ecx, [esi + 0xc4]
call fcn.00404600
mov byte [esp + 0x1c], 0x26
lea ecx, [esi + 0xc8]
call fcn.00404600
mov byte [esp + 0x1c], 0x27
lea ecx, [esi + 0xcc]
call fcn.00404600
mov byte [esp + 0x1c], 0x28
lea ecx, [esi + 0xd0]
call fcn.00404600
mov byte [esp + 0x1c], 0x29
lea ecx, [esi + 0xd4]
call fcn.00404600
mov byte [esp + 0x1c], 0x2a
lea ecx, [esi + 0xd8]
call fcn.00404600
mov byte [esp + 0x1c], 0x2b
lea ecx, [esi + 0xdc]
call fcn.00404600
mov byte [esp + 0x1c], 0x2c
lea ecx, [esi + 0xe0]
call fcn.00404600
mov byte [esp + 0x1c], 0x2d
lea ecx, [esi + 0xec]
call fcn.00404600
mov byte [esp + 0x1c], 0x2e
lea ecx, [esi + 0xf0]
call fcn.00404600
mov byte [esp + 0x1c], 0x2f
lea ecx, [esi + 0xf4]
call fcn.00404600
mov byte [esp + 0x1c], 0x30
lea ecx, [esi + 0xf8]
call fcn.00404600
mov byte [esp + 0x1c], 0x31
call fcn.00404b00
mov dword [esi + 0x100], eax
call fcn.0041d6d0
push str.INIFILE
lea ecx, [esp + 0x10]
mov dword [esi + 0x104], eax
call fcn.0040ae70
mov byte [esp + 0x1c], 0x32
mov ecx, dword [esi + 0x104]
lea eax, [esp + 0xc]
push eax
lea edi, [esi + 0x108]
call fcn.00419850
push eax
mov ecx, edi
call fcn.0040a580
mov byte [esp + 0x1c], 0x34
lea ecx, [esp + 0xc]
call fcn.00404660
mov ecx, dword [edi]
cmp dword [ecx - 0xc], 0
jne 0x41dace
mov eax, dword [esi + 0x100]
add eax, 4
push str.CrashDumper.ini
push eax
lea edx, [esp + 0x14]
push edx
call fcn.004113c0
add esp, 0xc
mov byte [esp + 0x1c], 0x35
push eax
mov ecx, edi
call fcn.0040acf0
mov byte [esp + 0x1c], 0x34
lea ecx, [esp + 0xc]
call fcn.00404660
mov ecx, esi
call fcn.0041b320
mov dword [esp + 0x1c], 0xffffffff
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
add esp, 0x14
ret