Function at 0x451a4a
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
mov ecx, 0x4ec870
jmp 0x451a30
push 0xffffffffffffffff
push 0x4b4cc0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
lea ecx, [esi + 8]
call fcn.00401430
xor ebx, ebx
lea ecx, [esi + 0xe8]
mov dword [esp + 0x20], ebx
call fcn.00411b20
lea ecx, [esi + 0x569a4]
mov byte [esp + 0x20], 1
call fcn.00414b60
lea ecx, [esi + 0x56f86]
mov byte [esp + 0x20], 2
call fcn.00405cd0
lea ecx, [esi + 0x56fa2]
mov byte [esp + 0x20], 3
call fcn.00407e70
push 0x452000
push 0x453250
push 4
lea eax, [esi + 0x570ba]
push 0x9472b
push eax
mov byte [esp + 0x34], 4
call fcn.004a84a6
lea ecx, [esi + 0x2a9790]
mov byte [esp + 0x20], 5
call fcn.00405e80
lea ecx, [esi + 0x2a9c6c]
mov byte [esp + 0x20], 6
call fcn.004077a0
lea ecx, [esi + 0x2a9da4]
mov byte [esp + 0x20], 7
call fcn.004077a0
lea ecx, [esi + 0x2a9edc]
mov byte [esp + 0x20], 8
call fcn.00459b70
lea ecx, [esi + 0x2ab106]
call fcn.0044f710
lea ecx, [esi + 0x2ab112]
mov byte [esp + 0x20], 9
call fcn.0044f710
push fcn.0041b300
push fcn.0041b280
push 0xc8
lea ecx, [esi + 0x2ab11e]
push 0x22e6
push ecx
mov byte [esp + 0x34], 0xa
call fcn.004a84a6
push fcn.0041b300
push fcn.0041b280
push 0x96
lea edx, [esi + 0x45f4ce]
push 0x22e6
push edx
mov byte [esp + 0x34], 0xb
call fcn.004a84a6
lea ecx, [esi + 0x5a67b2]
mov byte [esp + 0x20], 0xc
call fcn.0042b380
mov byte [esp + 0x20], 0xd
mov dword [esi + 0x79c81e], ebx
push fcn.0044b8d0
push 0x44b850
mov dword [esi + 0x79c822], ebx
mov word [esi + 0x79c828], bx
mov word [esi + 0x79c826], bx
mov word [esi + 0x79c82c], bx
mov word [esi + 0x79c82a], bx
mov word [esi + 0x79c830], bx
mov word [esi + 0x79c82e], bx
mov word [esi + 0x79c834], bx
mov word [esi + 0x79c832], bx
push 6
lea eax, [esi + 0x79c84b]
mov dword [esi + 0x79c81a], 0xffffffff
push 0x106
mov dword [esi + 0x79c81e], ebx
mov dword [esi + 0x79c822], ebx
mov word [esi + 0x79c828], bx
mov word [esi + 0x79c826], bx
mov word [esi + 0x79c82c], bx
mov word [esi + 0x79c82a], bx
mov word [esi + 0x79c830], bx
mov word [esi + 0x79c82e], bx
mov word [esi + 0x79c834], bx
mov word [esi + 0x79c832], bx
push eax
mov byte [esi + 0x79c83a], bl
mov dword [esi + 0x79c83b], ebx
mov dword [esi + 0x79c83f], ebx
mov dword [esi + 0x79c843], ebx
mov dword [esi + 0x79c847], ebx
call fcn.004a84a6
push fcn.0044be00
push 0x44bdc0
push 3
lea ecx, [esi + 0x79ce6f]
push 0x1c
push ecx
mov byte [esp + 0x34], 0xe
call fcn.004a84a6
lea ecx, [esi + 0x79cec3]
mov byte [esp + 0x20], 0xf
call fcn.00423510
lea ecx, [esi + 0x79f691]
mov byte [esp + 0x20], 0x10
call fcn.0042a730
lea ecx, [esi + 0x7a4f3d]
mov byte [esp + 0x20], 0x11
call fcn.0042d500
lea ecx, [esi + 0x9da5f1]
mov byte [esp + 0x20], 0x12
call fcn.0044a710
lea ecx, [esi + 0x9dc41b]
mov byte [esp + 0x20], 0x13
call fcn.004313f0
lea ecx, [esi + 0x9dc431]
mov byte [esp + 0x20], 0x14
call fcn.00443730
lea ecx, [esi + 0x9dce99]
mov byte [esp + 0x20], 0x15
call fcn.00448950
lea ecx, [esi + 0x9dcf01]
mov byte [esp + 0x20], 0x16
call fcn.004474d0
push fcn.0044a500
push 0x44a450
push 0xe
lea edx, [esi + 0x9dd085]
push 0xb84e
mov byte [esp + 0x30], 0x17
push edx
call fcn.004a84a6
lea ecx, [esi + 0xa7e4c9]
mov byte [esp + 0x20], 0x18
call fcn.00431460
lea ecx, [esi + 0xa9d93b]
mov byte [esp + 0x20], 0x19
call fcn.0043b000
lea ecx, [esi + 0xa9d989]
mov byte [esp + 0x20], 0x1a
call fcn.0043b000
lea ecx, [esi + 0xa9d9f5]
mov byte [esp + 0x20], 0x1b
mov dword [esi + 0xa9d9d7], ebx
mov word [esi + 0xa9d9db], bx
mov dword [esi + 0xa9d9dd], ebx
mov dword [esi + 0xa9d9f1], ebx
mov dword [esi + 0xa9d9ed], ebx
call fcn.0043cef0
lea ecx, [esi + 0xa9dfc3]
mov byte [esp + 0x20], 0x1c
call fcn.0043ddb0
lea ecx, [esi + 0xa9e1cb]
mov byte [esp + 0x20], 0x1d
call fcn.004451e0
lea ecx, [esi + 0xa9e43b]
mov byte [esp + 0x20], 0x1e
call fcn.0043b0d0
lea ecx, [esi + 0xa9e48d]
mov byte [esp + 0x20], 0x1f
call fcn.0044c230
lea edi, [esi + 0xa9e49d]
mov byte [esp + 0x20], 0x20
mov dword [esp + 0x14], edi
lea ebp, [edi + 4]
mov ecx, ebp
call fcn.00415c70
push fcn.0041b300
push fcn.0041b280
push 2
lea eax, [edi + 0xf10]
push 0x22e6
push eax
mov byte [esp + 0x34], 0x21
call fcn.004a84a6
lea ecx, [edi + 0x54e4]
mov byte [esp + 0x20], 0x22
call fcn.00415c70
push 1
mov ecx, ebp
mov byte [esp + 0x24], 0x23
mov dword [edi], 0x4b661c
call fcn.00415ef0
push 1
lea ecx, [edi + 0x54e4]
call fcn.00415ef0
mov eax, 0xffff
mov dword [edi + 0x63f8], ebx
mov word [edi + 0x54dc], ax
mov word [edi + 0x54de], ax
mov word [edi + 0x54e0], ax
mov word [edi + 0x54e2], ax
mov word [edi + 0x63fc], ax
mov dword [edi + 0x63fe], ebx
mov dword [edi + 0x6402], ebx
mov dword [edi + 0x63f0], ebx
mov dword [edi + 0x63f4], ebx
mov byte [esp + 0x20], 0x24
lea ecx, [esi + 0xaa48a3]
call fcn.0044cd90
lea ecx, [esi + 0xaa5573]
mov byte [esp + 0x20], 0x25
call fcn.0044eff0
lea ecx, [esi + 0xaa64c3]
mov byte [esp + 0x20], 0x26
call fcn.004500f0
lea ecx, [esi + 0xaa740f]
mov byte [esp + 0x20], 0x27
call fcn.00411430
lea ecx, [esi + 0xaa743b]
mov byte [esp + 0x20], 0x28
call fcn.00408cd0
lea ecx, [esi + 0xaa8aab]
mov byte [esp + 0x20], 0x29
call fcn.00411a30
push ebx
push ebx
push ebx
lea ecx, [esi + 0xaa8b11]
mov eax, 0x3f800000
push ebx
mov dword [esi + 0xaa8ae1], ebx
push ecx
mov byte [esp + 0x34], 0x2a
mov dword [esi + 0xaa8add], ebx
mov dword [esi + 0xaa8ad9], ebx
mov dword [esi + 0xaa8ad5], ebx
mov dword [esi + 0xaa8ad1], ebx
mov dword [esi + 0xaa8acd], ebx
mov dword [esi + 0xaa8aed], eax
mov dword [esi + 0xaa8ae9], eax
mov dword [esi + 0xaa8ae5], eax
mov dword [esi + 0xaa8b0d], ebx
mov dword [esi + 0xaa8b09], ebx
mov dword [esi + 0xaa8b05], ebx
mov dword [esi + 0xaa8b01], eax
mov dword [esi + 0xaa8afd], eax
mov dword [esi + 0xaa8af9], eax
mov dword [esi + 0xaa8af5], eax
mov dword [esi + 0xaa8af1], eax
mov word [esi + 0xaa8b33], bx
mov word [esi + 0xaa8b31], bx
mov word [esi + 0xaa8b2f], bx
mov word [esi + 0xaa8b2d], bx
mov word [esi + 0xaa8b2b], bx
mov word [esi + 0xaa8b29], bx
mov word [esi + 0xaa8b27], bx
mov word [esi + 0xaa8b25], bx
mov word [esi + 0xaa8b23], bx
mov word [esi + 0xaa8b21], bx
mov word [esi + 0xaa8b43], bx
mov word [esi + 0xaa8b41], bx
mov word [esi + 0xaa8b3f], bx
mov word [esi + 0xaa8b3d], bx
mov dword [esi + 0xaa8b49], ebx
mov dword [esi + 0xaa8b45], ebx
call dword [0x4b6218]
lea ecx, [esi + 0xaa8b55]
call fcn.00401430
mov ecx, esi
mov byte [esp + 0x20], 0x2b
mov dword [esi], 0x4b6618
call fcn.004523e0
mov ecx, dword [esp + 0x18]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret