Function at 0x45a860
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b3c56
mov eax, dword fs:[0]
push eax
sub esp, 0x620
mov eax, dword [0x4e406c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x20
xor eax, eax
mov dword [ebp - 0x5c0], 0x3e9
push 0x4d1360
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x5ac], 0
mov dword [ebp - 0x5a8], 7
mov word [ebp - 0x5bc], ax
call fcn.00407cf0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x5a4]
push 5
xor eax, eax
mov dword [ebp - 0x594], 0
push 0x4d13a4
mov dword [ebp - 0x590], 7
mov word [ebp - 0x5a4], ax
call fcn.00407cf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58c]
push 5
xor eax, eax
mov dword [ebp - 0x57c], 0
push 0x4d13a4
mov dword [ebp - 0x578], 7
mov word [ebp - 0x58c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 2
push eax
push 0x4c685c
lea ecx, [ebp - 0x574]
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x560], 7
mov word [ebp - 0x574], ax
call fcn.00407cf0
mov byte [ebp - 0x55c], 0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x554]
push 0x37
xor eax, eax
mov dword [ebp - 0x558], 0x3ea
push 0x4d13b0
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 7
mov word [ebp - 0x554], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 4
push eax
push 0x4c685c
lea ecx, [ebp - 0x53c]
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 7
mov word [ebp - 0x53c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 5
push eax
push 0x4c685c
lea ecx, [ebp - 0x524]
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x510], 7
mov word [ebp - 0x524], ax
call fcn.00407cf0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x50c]
push 0x20
xor eax, eax
mov dword [ebp - 0x4fc], 0
push 0x4d1420
mov dword [ebp - 0x4f8], 7
mov word [ebp - 0x50c], ax
call fcn.00407cf0
mov byte [ebp - 0x4f4], 0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4ec]
push 0x22
xor eax, eax
mov dword [ebp - 0x4f0], 0x3eb
push 0x4d1468
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0x4d8], 7
mov word [ebp - 0x4ec], ax
call fcn.00407cf0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4d4]
push 5
xor eax, eax
mov dword [ebp - 0x4c4], 0
push 0x4d14b0
mov dword [ebp - 0x4c0], 7
mov word [ebp - 0x4d4], ax
call fcn.00407cf0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4bc]
push 5
xor eax, eax
mov dword [ebp - 0x4ac], 0
push 0x4d14b0
mov dword [ebp - 0x4a8], 7
mov word [ebp - 0x4bc], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0xa
push eax
push 0x4c685c
lea ecx, [ebp - 0x4a4]
mov dword [ebp - 0x494], 0
mov dword [ebp - 0x490], 7
mov word [ebp - 0x4a4], ax
call fcn.00407cf0
mov byte [ebp - 0x48c], 0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x484]
push 0x43
xor eax, eax
mov dword [ebp - 0x488], 0x3ec
push 0x4d14c0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 7
mov word [ebp - 0x484], ax
call fcn.00407cf0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x46c]
push 5
xor eax, eax
mov dword [ebp - 0x45c], 0
push 0x4d14b0
mov dword [ebp - 0x458], 7
mov word [ebp - 0x46c], ax
call fcn.00407cf0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x454]
push 5
xor eax, eax
mov dword [ebp - 0x444], 0
push 0x4d14b0
mov dword [ebp - 0x440], 7
mov word [ebp - 0x454], ax
call fcn.00407cf0
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x428], 7
mov word [ebp - 0x43c], ax
push 0x20
push 0x4d1420
lea ecx, [ebp - 0x43c]
call fcn.00407cf0
mov byte [ebp - 0x424], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41c]
push 0x28
xor eax, eax
mov dword [ebp - 0x420], 0x3ed
push 0x4d1548
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 7
mov word [ebp - 0x41c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x10
push eax
push 0x4c685c
lea ecx, [ebp - 0x404]
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 7
mov word [ebp - 0x404], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x11
push eax
push 0x4c685c
lea ecx, [ebp - 0x3ec]
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 7
mov word [ebp - 0x3ec], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3d4]
push 0x11
xor eax, eax
mov dword [ebp - 0x3c4], 0
push 0x4d159c
mov dword [ebp - 0x3c0], 7
mov word [ebp - 0x3d4], ax
call fcn.00407cf0
mov byte [ebp - 0x3bc], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3b4]
push 0x2c
xor eax, eax
mov dword [ebp - 0x3b8], 0x3ee
push 0x4d15c0
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x3a0], 7
mov word [ebp - 0x3b4], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x39c]
push 3
xor eax, eax
mov dword [ebp - 0x38c], 0
push 0x4d161c
mov dword [ebp - 0x388], 7
mov word [ebp - 0x39c], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x384]
push 3
xor eax, eax
mov dword [ebp - 0x374], 0
push 0x4d1624
mov dword [ebp - 0x370], 7
mov word [ebp - 0x384], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x358], 7
push 0xd
xor eax, eax
lea ecx, [ebp - 0x36c]
push 0x4d162c
mov word [ebp - 0x36c], ax
call fcn.00407cf0
mov byte [ebp - 0x354], 0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x34c]
push 0x1e
xor eax, eax
mov dword [ebp - 0x350], 0x3ef
push 0x4d1648
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 7
mov word [ebp - 0x34c], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x334]
push 4
xor eax, eax
mov dword [ebp - 0x324], 0
push 0x4d1688
mov dword [ebp - 0x320], 7
mov word [ebp - 0x334], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x31c]
push 4
xor eax, eax
mov dword [ebp - 0x30c], 0
push 0x4d1694
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x1a
push eax
push 0x4c685c
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 7
mov word [ebp - 0x304], ax
call fcn.00407cf0
mov byte [ebp - 0x2ec], 0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2e4]
push 0x17
xor eax, eax
mov dword [ebp - 0x2e8], 0x3f0
push 0x4d16a0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 7
mov word [ebp - 0x2e4], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x1c
push eax
push 0x4c685c
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x1d
push eax
push 0x4c685c
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 7
mov word [ebp - 0x2b4], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x29c]
push 0xb
xor eax, eax
mov dword [ebp - 0x28c], 0
push 0x4d16d0
mov dword [ebp - 0x288], 7
mov word [ebp - 0x29c], ax
call fcn.00407cf0
mov byte [ebp - 0x284], 0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x27c]
push 0xb
xor eax, eax
mov dword [ebp - 0x280], 0x3f1
push 0x4d16e8
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x268], 7
mov word [ebp - 0x27c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x20
push eax
push 0x4c685c
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x250], 7
mov word [ebp - 0x264], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x21
push eax
push 0x4c685c
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x22
push eax
push 0x4c685c
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.00407cf0
mov byte [ebp - 0x21c], 0
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x214]
push 0x32
xor eax, eax
mov dword [ebp - 0x218], 0x3f2
push 0x4d1700
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 7
mov word [ebp - 0x214], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1fc]
push 0x12
xor eax, eax
mov dword [ebp - 0x1ec], 0
push 0x4d1768
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x25
xor eax, eax
push 7
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x1e4], ax
push 0x4d1790
lea ecx, [ebp - 0x1e4]
call fcn.00407cf0
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1cc]
push 0xb
xor eax, eax
mov dword [ebp - 0x1bc], 0
push 0x4d16d0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
call fcn.00407cf0
mov byte [ebp - 0x1b4], 0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1ac]
push 0xf
xor eax, eax
mov dword [ebp - 0x1b0], 0x3f3
push 0x4d17a0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 7
mov word [ebp - 0x1ac], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x28
push eax
push 0x4c685c
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 7
mov word [ebp - 0x194], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x29
push eax
push 0x4c685c
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 7
mov word [ebp - 0x17c], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x2a
push eax
push 0x4c685c
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
call fcn.00407cf0
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x144]
push 0x12
xor eax, eax
mov dword [ebp - 0x148], 0x3f4
push 0x4d17c0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x2c
push eax
push 0x4c685c
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 7
mov word [ebp - 0x12c], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x2d
xor eax, eax
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 7
push eax
push 0x4c685c
lea ecx, [ebp - 0x114]
mov word [ebp - 0x114], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x2e
push eax
push 0x4c685c
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 7
mov word [ebp - 0xfc], ax
call fcn.00407cf0
mov byte [ebp - 0xe4], 0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xdc]
push 0x20
xor eax, eax
mov dword [ebp - 0xe0], 0x3f5
push 0x4d17e8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xc4]
push 3
xor eax, eax
mov dword [ebp - 0xb4], 0
push 0x4d182c
mov dword [ebp - 0xb0], 7
mov word [ebp - 0xc4], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xac]
push 3
xor eax, eax
mov dword [ebp - 0x9c], 0
push 0x4d182c
mov dword [ebp - 0x98], 7
mov word [ebp - 0xac], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x32
push eax
push 0x4c685c
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
mov word [ebp - 0x94], ax
call fcn.00407cf0
mov byte [ebp - 0x7c], 0
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x74]
push 0x23
xor eax, eax
mov dword [ebp - 0x78], 0x3f6
push 0x4d1838
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x5c]
push 3
xor eax, eax
mov dword [ebp - 0x4c], 0
push 0x4d182c
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.00407cf0
mov byte [ebp - 4], 0x35
push 3
xor eax, eax
mov dword [ebp - 0x34], 0
push 0x4d182c
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.00407cf0
xor eax, eax
mov byte [ebp - 4], 0x36
push eax
push 0x4c685c
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.00407cf0
mov byte [ebp - 0x14], 0
mov dword [ebp - 4], 0x37
lea esi, [ebp - 0x5a4]
nop dword [eax]
nop word [eax + eax]
mov eax, dword [esi - 0x1c]
lea ecx, [ebp - 0x624]
mov dword [ebp - 0x628], eax
lea eax, [esi - 0x18]
push eax
call fcn.0040c290
push esi
lea ecx, [ebp - 0x60c]
mov byte [ebp - 4], 0x38
call fcn.0040c290
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0x5f4]
call fcn.0040c290
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x3a
push eax
lea ecx, [ebp - 0x5dc]
call fcn.0040c290
mov al, byte [esi + 0x48]
mov byte [ebp - 0x5c4], al
mov byte [ebp - 4], 0x3b
call fcn.0042cd40
lea eax, [ebp - 0x624]
mov dl, 1
push eax
mov cl, dl
call fcn.0042cdb0
add esp, 4
test al, al
je 0x45b5ef
cmp dword [0x4e4e4c], 8
lea ecx, [ebp - 0x5f4]
mov eax, dword [ebp - 0x5e4]
mov edx, 0x4e4e38
cmovae edx, dword [0x4e4e38]
cmp dword [ebp - 0x5e0], 8
cmovae ecx, dword [ebp - 0x5f4]
cmp eax, dword [0x4e4e48]
jne 0x45b5ef
push eax
call fcn.0041a740
add esp, 4
test eax, eax
jne 0x45b5ef
cmp dword [0x4e4e34], 8
lea ecx, [ebp - 0x60c]
mov eax, dword [ebp - 0x5fc]
mov edx, 0x4e4e20
cmovae edx, dword [0x4e4e20]
cmp dword [ebp - 0x5f8], 8
cmovae ecx, dword [ebp - 0x60c]
cmp eax, dword [0x4e4e30]
jne 0x45b5ef
push eax
call fcn.0041a740
add esp, 4
test eax, eax
jne 0x45b5ef
cmp dword [0x4e4e64], 8
lea ecx, [ebp - 0x5dc]
mov eax, dword [ebp - 0x5cc]
mov edx, 0x4e4e50
cmovae edx, dword [0x4e4e50]
cmp dword [ebp - 0x5c8], 8
cmovae ecx, dword [ebp - 0x5dc]
cmp eax, dword [0x4e4e60]
jne 0x45b5ef
push eax
call fcn.0041a740
add esp, 4
test eax, eax
jne 0x45b5ef
mov al, byte [ebp - 0x5c4]
cmp al, byte [0x4e9956]
jne 0x45b5ef
lea ecx, [ebp - 0x628]
mov byte [ebp - 4], 0x37
call fcn.0045b660
add esi, 0x68
lea ecx, [ebp - 0x10]
lea eax, [esi - 0x1c]
cmp eax, ecx
jne 0x45b470
mov bl, 1
jmp 0x45b622
mov esi, dword [ebp - 0x628]
mov edx, 0x4d1880
mov ecx, 0x4e86a8
call fcn.0043c020
push esi
mov ecx, eax
call fcn.0045b7a0
push eax
call fcn.0043c2d0
add esp, 4
lea ecx, [ebp - 0x628]
call fcn.0045b660
xor bl, bl
push fcn.0045b660
push 0xe
push 0x68
lea eax, [ebp - 0x5c0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.0046da9e
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046d32d
mov esp, ebp
pop ebp
ret