Function at 0x416af9
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x47b794
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi], 0x47dab0
mov dword [esi + 4], 0x47da8c
push fcn.00439b70
push fcn.00439b10
push 4
lea eax, [esi + 0x14]
xor ebx, ebx
push 0xac
push eax
mov dword [esp + 0x30], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
call fcn.0046c993
lea ecx, [esi + 0x2d8]
mov byte [esp + 0x1c], 1
mov dword [esi + 0x2d4], ebx
call fcn.00442770
lea ecx, [esi + 0x2fc]
mov byte [esp + 0x1c], 2
mov dword [esi + 0x2f0], ebx
call fcn.00443610
push fcn.00417070
push fcn.00443610
push 6
lea ecx, [esi + 0x3ac]
push 0x7c
push ecx
mov byte [esp + 0x30], 3
call fcn.0046c993
push fcn.00417070
push fcn.00443610
push 3
lea edx, [esi + 0x6b0]
push 0x7c
push edx
mov byte [esp + 0x30], 4
call fcn.0046c993
push fcn.00417070
push fcn.00443610
push 2
lea eax, [esi + 0x83c]
push 0x7c
push eax
mov byte [esp + 0x30], 5
call fcn.0046c993
lea ecx, [esi + 0x934]
mov byte [esp + 0x1c], 6
call fcn.0043bb70
lea ecx, [esi + 0x9b4]
mov byte [esp + 0x1c], 7
call fcn.0043bb70
lea ecx, [esi + 0xa34]
mov byte [esp + 0x1c], 8
call fcn.00443080
push fcn.00442c40
push fcn.00442bc0
push 8
lea ecx, [esi + 0xb1c]
push 0x84
push ecx
mov byte [esp + 0x30], 9
call fcn.0046c993
mov byte [esp + 0x1c], 0xa
push fcn.00417070
push fcn.00443610
push 1
lea edx, [esi + 0xf50]
push 0x7c
push edx
call fcn.0046c993
lea ecx, [esi + 0xfcc]
mov byte [esp + 0x1c], 0xb
call fcn.0043bb70
push fcn.00417070
push fcn.00443610
push 1
lea eax, [esi + 0x1058]
push 0x7c
push eax
mov byte [esp + 0x30], 0xc
call fcn.0046c993
lea ecx, [esi + 0x10d8]
mov byte [esp + 0x1c], 0xd
call fcn.004420d0
lea ecx, [esi + 0x13ec]
mov byte [esp + 0x1c], 0xe
call fcn.0043e790
lea ecx, [esi + 0x1548]
mov byte [esp + 0x1c], 0xf
call fcn.0043e790
lea ecx, [esi + 0x16ac]
mov byte [esp + 0x1c], 0x10
call fcn.0043e790
lea ecx, [esi + 0x1808]
mov byte [esp + 0x1c], 0x11
call fcn.0043e790
lea ecx, [esi + 0x1964]
mov byte [esp + 0x1c], 0x12
call fcn.0043e790
lea ecx, [esi + 0x1ac0]
mov byte [esp + 0x1c], 0x13
call fcn.0043e790
lea ecx, [esi + 0x1c1c]
mov byte [esp + 0x1c], 0x14
call fcn.0043e790
lea ecx, [esi + 0x1d78]
mov byte [esp + 0x1c], 0x15
call fcn.0043e790
lea ecx, [esi + 0x1ed4]
mov byte [esp + 0x1c], 0x16
call fcn.004428e0
lea ecx, [esi + 0x1f30]
mov byte [esp + 0x1c], 0x17
call fcn.004428e0
lea ecx, [esi + 0x1f8c]
mov byte [esp + 0x1c], 0x18
call fcn.004428e0
lea ecx, [esi + 0x1fe8]
mov byte [esp + 0x1c], 0x19
call fcn.004428e0
lea ecx, [esi + 0x2044]
mov byte [esp + 0x1c], 0x1a
call fcn.00443080
lea ecx, [esi + 0x212c]
mov byte [esp + 0x1c], 0x1b
call fcn.00443080
mov byte [esp + 0x1c], 0x1c
lea ecx, [esi + 0x2214]
call fcn.00443080
lea ecx, [esi + 0x22fc]
mov byte [esp + 0x1c], 0x1d
call fcn.00442bc0
lea ecx, [esi + 0x2380]
mov byte [esp + 0x1c], 0x1e
call fcn.00442bc0
push fcn.00442c40
push fcn.00442bc0
push 9
lea ecx, [esi + 0x2404]
push 0x84
push ecx
mov byte [esp + 0x30], 0x1f
call fcn.0046c993
push fcn.0043bc80
push fcn.0043bb70
push 9
lea edx, [esi + 0x28a8]
push 0x80
push edx
mov byte [esp + 0x30], 0x20
call fcn.0046c993
lea ecx, [esi + 0x2d2c]
mov byte [esp + 0x1c], 0x21
call fcn.004420d0
lea ecx, [esi + 0x3040]
mov byte [esp + 0x1c], 0x22
call fcn.0043e790
lea ecx, [esi + 0x319c]
mov byte [esp + 0x1c], 0x23
call fcn.0043e790
push fcn.00417070
push fcn.00443610
push 5
lea eax, [esi + 0x33d0]
push 0x7c
push eax
mov byte [esp + 0x30], 0x24
call fcn.0046c993
lea ecx, [esi + 0x3698]
mov byte [esp + 0x1c], 0x25
call fcn.00441f30
lea ecx, [esi + 0x36d8]
mov byte [esp + 0x1c], 0x26
call fcn.00441f30
lea ecx, [esi + 0x372c]
mov byte [esp + 0x1c], 0x27
mov dword [esi + 0x371c], ebx
mov dword [esi + 0x3720], ebx
mov dword [esi + 0x3724], ebx
mov byte [esi + 0x3728], bl
call fcn.00443080
lea ecx, [esi + 0x3814]
mov byte [esp + 0x1c], 0x28
call fcn.0041dbc0
push fcn.00442c40
push fcn.00442bc0
push 0x10
lea ecx, [esi + 0x3820]
push 0x84
push ecx
call fcn.0046c993
push fcn.00442c40
push fcn.00442bc0
mov byte [esp + 0x24], 0x29
push 2
lea edx, [esi + 0x4060]
push 0x84
push edx
call fcn.0046c993
mov al, byte [esp + 0xf]
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea ecx, [esi + 0x4288]
mov dword [esi + 0x4168], ebx
mov byte [esi + 0x4274], al
mov dword [esi + 0x4278], ebx
mov dword [esi + 0x427c], ebx
mov dword [esi + 0x4280], ebx
push ecx
mov dword [esi + 0x4284], 0x47d408
call edi
push ebx
push ebx
push ebx
mov dword [esi + 0x42a0], 0x47da88
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
lea edx, [esi + 0x42c0]
mov dword [esi + 0x42a4], eax
mov dword [esi + 0x42b0], ebx
mov dword [esi + 0x42b8], ebx
push edx
mov dword [esi + 0x42bc], 0x47d408
call edi
lea edi, [esi + 0x37c]
mov ecx, 0xc
xor eax, eax
mov byte [esi + 0x42d8], bl
mov dword [esi], 0x47da84
mov dword [esi + 4], 0x47da60
mov dword [esi + 0x2f8], ebx
mov dword [esi + 0x2f4], ebx
mov dword [esi + 0x378], ebx
rep stosd dword es:[edi], eax
lea edi, [esi + 0x698]
mov ecx, 6
mov dword [esi + 0x694], ebx
rep stosd dword es:[edi], eax
mov dword [esi + 0x824], ebx
mov dword [esi + 0x828], ebx
mov dword [esi + 0x82c], eax
xor ecx, ecx
mov dword [esi + 0x830], eax
xor edx, edx
mov dword [esi + 0x834], eax
pop edi
mov dword [esi + 0x838], eax
mov dword [esi + 0xf44], ebx
mov dword [esi + 0xf48], ecx
mov dword [esi + 0xf4c], ecx
mov dword [esi + 0x104c], ebx
mov dword [esi + 0x1050], edx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x1054], edx
mov dword [esi + 0x10d4], ebx
mov dword [esi + 0x16a4], ebx
mov dword [esi + 0x2c4], eax
mov dword [esi + 0x2c8], eax
mov dword [esi + 0x2cc], eax
mov dword [esi + 0x2d0], eax
mov dword [esi + 0x3670], ebx
mov dword [esi + 0x36d4], ebx
mov dword [esi + 0x3714], ebx
mov dword [esi + 0x3718], 0xffffffff
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret