Function at 0x420610
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc4
mov eax, dword fs:[0x30]
mov eax, dword [eax + 8]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0x430000
mov dword [ebp - 0x3c], 0x50746547
mov dword [ebp - 0x38], 0x41636f72
mov dword [ebp - 0x34], 0x65726464
mov dword [ebp - 0x30], 0x7373
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call fcn.004202e7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], 0x4d746547
mov dword [ebp - 0x38], 0x6c75646f
mov dword [ebp - 0x34], 0x6e614865
mov dword [ebp - 0x30], 0x41656c64
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call fcn.004202e7
cmp eax, 0
je 0x4206a9
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], 0x6e72656b
mov dword [ebp - 0x38], 0x32336c65
mov dword [ebp - 0x34], 0x6c6c642e
mov dword [ebp - 0x30], 0
jmp 0x42070c
mov dword [ebp - 0x3c], 0x4d746547
mov dword [ebp - 0x38], 0x6c75646f
mov dword [ebp - 0x34], 0x6e614865
mov dword [ebp - 0x30], 0x57656c64
mov dword [ebp - 0x2c], 0
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 4]
call fcn.004202e7
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x3c], 0x65006b
mov dword [ebp - 0x38], 0x6e0072
mov dword [ebp - 0x34], 0x6c0065
mov dword [ebp - 0x30], 0x320033
mov dword [ebp - 0x2c], 0x64002e
mov dword [ebp - 0x28], 0x6c006c
mov dword [ebp - 0x24], 0
lea eax, [ebp - 0x3c]
push eax
call dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x3c], 0x74726956
mov dword [ebp - 0x38], 0x506c6175
mov dword [ebp - 0x34], 0x65746f72
mov dword [ebp - 0x30], 0x7463
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x10]
call dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x20]
push eax
push 0x40
call fcn.0042001c
mov ebx, eax
call fcn.00420088
sub eax, ebx
push eax
push ebx
call dword [ebp - 0x1c]
call fcn.00420026
mov ebx, dword [ebp - 0x10]
mov dword [eax], ebx
call fcn.00420034
mov ebx, dword [ebp - 0x18]
mov dword [eax], ebx
call fcn.00420050
mov ebx, dword [ebp - 0x1c]
mov dword [eax], ebx
call fcn.00420034
mov ebx, dword [eax]
call fcn.00420026
mov ecx, dword [eax]
pushal
mov dword [ebp - 0x3c], 0x74726956
mov dword [ebp - 0x38], 0x416c6175
mov dword [ebp - 0x34], 0x636f6c6c
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x3c]
push eax
push ecx
call ebx
mov edx, eax
call fcn.00420042
mov dword [eax], edx
popal
pushal
mov dword [ebp - 0x3c], 0x74726956
mov dword [ebp - 0x38], 0x516c6175
mov dword [ebp - 0x34], 0x79726575
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x3c]
push eax
push ecx
call ebx
mov edx, eax
call fcn.0042005e
mov dword [eax], edx
popal
pushal
mov dword [ebp - 0x3c], 0x74726956
mov dword [ebp - 0x38], 0x516c6175
mov dword [ebp - 0x34], 0x79726575
mov dword [ebp - 0x30], 0x7845
lea eax, [ebp - 0x3c]
push eax
push ecx
call ebx
mov edx, eax
call fcn.0042006c
mov dword [eax], edx
popal
pushal
mov dword [ebp - 0x3c], 0x64616f4c
mov dword [ebp - 0x38], 0x7262694c
mov dword [ebp - 0x34], 0x41797261
mov dword [ebp - 0x30], 0
lea eax, [ebp - 0x3c]
push eax
push ecx
call ebx
mov edx, eax
call fcn.0042007a
mov dword [eax], edx
popal
push dword [ebp - 8]
call fcn.00420507
mov dword [ebp - 0xc], eax
mov eax, dword fs:[0]
mov ebx, dword [eax]
cmp ebx, 0xffffffff
je 0x420858
mov eax, ebx
jmp 0x42084d
mov dword fs:[0], eax
mov ebx, dword fs:[0x30]
mov eax, dword [ebp - 0xc]
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0xc]
cmp eax, 0
je 0x42088a
mov ecx, dword [eax + 0x18]
cmp ecx, dword [ebp - 4]
jne 0x420886
mov ecx, dword [ebp - 0xc]
mov dword [eax + 0x18], ecx
jmp 0x42088a
mov eax, dword [eax]
jmp 0x420871
wait
fninit
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x3c]
add eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x28]
add eax, dword [ebp - 0xc]
mov edx, eax
xor ecx, ecx
mov ebx, dword fs:[0x30]
call edx
leave
ret