Function at 0x41c370
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x59a832
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push ebx
push esi
push edi
push str.IaruBeacons
mov esi, ecx
push eax
push 0x134
mov dword [esp + 0x18], esi
call fcn.0050e8d0
lea edi, [esi + 0x88]
mov dword [esp + 0x2c], 0
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0xc4]
mov ebx, 1
mov ecx, edi
mov byte [esp + 0x2c], bl
call fcn.00571bd9
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x100]
mov byte [esp + 0x2c], 2
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x13c]
mov byte [esp + 0x2c], 3
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x178]
mov byte [esp + 0x2c], 4
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x1b4]
mov byte [esp + 0x2c], 5
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CButton.0
lea edi, [esi + 0x1f4]
mov byte [esp + 0x2c], 6
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x230]
mov byte [esp + 0x2c], 7
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x26c]
mov byte [esp + 0x2c], 8
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2a8]
mov byte [esp + 0x2c], 9
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
lea edi, [esi + 0x2e4]
mov byte [esp + 0x2c], 0xa
mov ecx, edi
call fcn.00571bd9
mov dword [edi], vtable.CStatic.0
mov byte [esp + 0x2c], 0xb
lea edi, [esi + 0x32c]
push fcn.00575ae8
push fcn.00405c30
push 0x12
push 4
push edi
call fcn.00557447
or eax, 0xffffffff
push str.4U1UN
mov ecx, edi
mov byte [esp + 0x30], 0xc
mov dword [esi], method.CPrintingDialog.virtual_0
mov dword [esi + 0x1f0], eax
mov dword [esi + 0x38c], ebx
mov dword [esi + 0x390], 0
mov dword [esi + 0x388], ebx
mov dword [esi + 0x320], eax
mov dword [esi + 0x324], eax
call fcn.00575c71
push str.VE8AT
lea ecx, [esi + 0x330]
call fcn.00575c71
push str.W6WX
lea ecx, [esi + 0x334]
call fcn.00575c71
push str.KH6WO
lea ecx, [esi + 0x338]
call fcn.00575c71
push str.ZL6B
lea ecx, [esi + 0x33c]
call fcn.00575c71
push str.VK6RBP
lea ecx, [esi + 0x340]
call fcn.00575c71
push str.JA2IGY
lea ecx, [esi + 0x344]
call fcn.00575c71
push str.RR9O
lea ecx, [esi + 0x348]
call fcn.00575c71
push str.VR2B
lea ecx, [esi + 0x34c]
call fcn.00575c71
push str.4S7B
lea ecx, [esi + 0x350]
call fcn.00575c71
push str.ZS6DN
lea ecx, [esi + 0x354]
call fcn.00575c71
push str.5Z4B
lea ecx, [esi + 0x358]
call fcn.00575c71
push str.4X6TU
lea ecx, [esi + 0x35c]
call fcn.00575c71
push str.OH2B
lea ecx, [esi + 0x360]
call fcn.00575c71
push str.CS3B
lea ecx, [esi + 0x364]
call fcn.00575c71
push str.LU4AA
lea ecx, [esi + 0x368]
call fcn.00575c71
push str.OA4B
lea ecx, [esi + 0x36c]
call fcn.00575c71
push str.YV5B
lea ecx, [esi + 0x370]
call fcn.00575c71
lea ecx, [esp + 0x10]
mov dword [esi + 0x374], 0xd72620
mov dword [esi + 0x378], 0x1145630
mov dword [esi + 0x37c], 0x142b930
mov dword [esi + 0x380], 0x17c66d0
mov dword [esi + 0x384], 0x1ae4c40
call fcn.005760db
push 0
push 0
mov byte [esp + 0x34], 0xd
push str.beacons.dat
lea ecx, [esp + 0x1c]
call fcn.00576150
test eax, eax
je 0x41c694
xor ebx, ebx
push edi
lea ecx, [esp + 0x14]
call fcn.00576333
test eax, eax
je 0x41c694
inc ebx
add edi, 4
cmp ebx, 0x12
jl 0x41c67d
mov dword [esi + 0x394], 0
mov ecx, dword [0x64fe78]
test ecx, ecx
je 0x41c6b2
push 0x378
call fcn.00488e50
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0xc
call fcn.0057610d
mov ecx, dword [esp + 0x24]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 4