Function at 0x429e70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513941
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x549e00]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
call fcn.004111d0
lea ecx, [edi + 0x1a8]
mov dword [ebp - 4], 0
mov dword [edi], vtable.KUiRecovery.0
call fcn.0041a7e0
lea ecx, [edi + 0x330]
mov byte [ebp - 4], 1
call fcn.0041a7e0
lea ecx, [edi + 0x4b8]
mov byte [ebp - 4], 2
call fcn.0040e9f0
lea ecx, [edi + 0x774]
mov byte [ebp - 4], 3
call fcn.0040f8a0
lea ecx, [edi + 0x91c]
mov byte [ebp - 4], 4
call fcn.0040f8a0
lea ecx, [edi + 0xac4]
mov byte [ebp - 4], 5
call fcn.0040f8a0
lea ecx, [edi + 0xc6c]
mov byte [ebp - 4], 6
call fcn.0041a7e0
lea ecx, [edi + 0xdf4]
mov byte [ebp - 4], 7
call fcn.0040e9f0
lea ecx, [edi + 0x10b0]
mov byte [ebp - 4], 8
call fcn.0040f8a0
lea ecx, [edi + 0x1258]
mov byte [ebp - 4], 9
call fcn.0040f8a0
lea ecx, [edi + 0x1400]
mov byte [ebp - 4], 0xa
call fcn.0040f8a0
lea ecx, [edi + 0x15a8]
mov byte [ebp - 4], 0xb
call fcn.0041a7e0
lea ecx, [edi + 0x1730]
mov byte [ebp - 4], 0xc
call fcn.0040e9f0
lea ecx, [edi + 0x19ec]
mov byte [ebp - 4], 0xd
call fcn.0041a7e0
lea ecx, [edi + 0x1b74]
mov byte [ebp - 4], 0xe
call fcn.0040f8a0
lea ecx, [edi + 0x1d1c]
mov byte [ebp - 4], 0xf
call fcn.0040e9f0
lea ecx, [edi + 0x1fd8]
mov byte [ebp - 4], 0x10
call fcn.0041a7e0
lea ecx, [edi + 0x2160]
mov byte [ebp - 4], 0x11
call fcn.0040f8a0
lea ecx, [edi + 0x2308]
mov byte [ebp - 4], 0x12
call fcn.0040e9f0
mov byte [ebp - 4], 0x13
lea ecx, [edi + 0x25c4]
call fcn.0041a7e0
lea ecx, [edi + 0x274c]
mov byte [ebp - 4], 0x14
call fcn.0040e9f0
lea ecx, [edi + 0x2a08]
mov byte [ebp - 4], 0x15
call fcn.0041a7e0
lea ecx, [edi + 0x2b90]
mov byte [ebp - 4], 0x16
call fcn.0040e9f0
lea ecx, [edi + 0x2e4c]
mov byte [ebp - 4], 0x17
call fcn.0041a7e0
lea ecx, [edi + 0x2fd4]
mov byte [ebp - 4], 0x18
call fcn.0040f8a0
lea ecx, [edi + 0x317c]
mov byte [ebp - 4], 0x19
call fcn.0040e9f0
lea ecx, [edi + 0x3438]
mov byte [ebp - 4], 0x1a
call fcn.0041a7e0
lea ecx, [edi + 0x35c0]
mov byte [ebp - 4], 0x1b
call fcn.0040f8a0
lea ecx, [edi + 0x3768]
mov byte [ebp - 4], 0x1c
call fcn.0040e9f0
lea ecx, [edi + 0x3a24]
mov byte [ebp - 4], 0x1d
call fcn.0041a860
lea esi, [edi + 0x3bdc]
mov byte [ebp - 4], 0x1e
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.0041be00
mov dword [esi], vtable.KWndShadow.0
mov dword [esi + 0x40], 0
lea ecx, [edi + 0x3c20]
mov byte [ebp - 4], 0x1f
call fcn.0040e9f0
lea ecx, [edi + 0x3edc]
mov byte [ebp - 4], 0x20
call fcn.0041a7e0
lea ecx, [edi + 0x4064]
mov byte [ebp - 4], 0x21
call fcn.0040e9f0
lea ecx, [edi + 0x4320]
mov byte [ebp - 4], 0x22
call fcn.0041a7e0
lea ecx, [edi + 0x44a8]
mov byte [ebp - 4], 0x23
call fcn.0040e9f0
lea ecx, [edi + 0x4764]
mov byte [ebp - 4], 0x24
call fcn.0041a7e0
lea ecx, [edi + 0x48ec]
mov byte [ebp - 4], 0x25
call fcn.0040e9f0
lea ecx, [edi + 0x4ba8]
mov byte [ebp - 4], 0x26
call fcn.0041a7e0
lea ecx, [edi + 0x4d30]
mov byte [ebp - 4], 0x27
call fcn.0040e9f0
lea ecx, [edi + 0x4fec]
mov byte [ebp - 4], 0x28
call fcn.0041a7e0
lea ecx, [edi + 0x5174]
mov byte [ebp - 4], 0x29
call fcn.0040f8a0
lea ecx, [edi + 0x531c]
mov byte [ebp - 4], 0x2a
call fcn.0040e9f0
lea ecx, [edi + 0x55d8]
mov byte [ebp - 4], 0x2b
call fcn.0041a7e0
lea ecx, [edi + 0x5760]
mov byte [ebp - 4], 0x2c
call fcn.0040e9f0
lea ecx, [edi + 0x5a1c]
mov byte [ebp - 4], 0x2d
call fcn.0041a7e0
lea ecx, [edi + 0x5ba4]
mov byte [ebp - 4], 0x2e
call fcn.0040e9f0
lea ecx, [edi + 0x5e60]
mov byte [ebp - 4], 0x2f
call fcn.0041a7e0
lea ecx, [edi + 0x5fe8]
mov byte [ebp - 4], 0x30
call fcn.0040e9f0
lea ecx, [edi + 0x62a4]
mov byte [ebp - 4], 0x31
call fcn.0041a7e0
lea ecx, [edi + 0x642c]
mov byte [ebp - 4], 0x32
call fcn.0040f8a0
lea ecx, [edi + 0x65d4]
mov byte [ebp - 4], 0x33
call fcn.0040e9f0
lea ecx, [edi + 0x6890]
mov byte [ebp - 4], 0x34
call fcn.0041a860
lea ecx, [edi + 0x6a48]
mov byte [ebp - 4], 0x35
call fcn.0041a860
lea esi, [edi + 0x6c00]
mov byte [ebp - 4], 0x36
mov ecx, esi
mov dword [ebp - 0x14], esi
call fcn.0041be00
mov dword [esi], vtable.KWndShadow.0
mov eax, edi
mov dword [esi + 0x40], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret