Function at 0x4fc940
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x56b4b6
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push ebp
push esi
push edi
mov eax, dword [0x660038]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
test byte [0x67d448], 1
jne 0x4fd2f0
or dword [0x67d448], 1
lea eax, [esp + 0x18]
xor ebx, ebx
push eax
mov dword [esp + 0x54], ebx
call fcn.004fb7a0
add esp, 4
push 0x67cfc8
mov ecx, eax
mov byte [esp + 0x54], 1
call fcn.004d1930
mov eax, str.000000000000000000000000000000000000000001
mov edi, 0xa3
mov ebp, 7
mov esi, 2
mov dword [0x67cfe0], edi
mov dword [0x67cfe4], ebp
mov dword [0x67cfe8], 6
mov dword [0x67cfec], 3
mov dword [0x67cff0], ebx
mov dword [0x67cff4], eax
mov dword [0x67cff8], eax
mov dword [0x67cffc], 0x620610
mov dword [0x67d000], 0x620668
mov dword [0x67d004], esi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 3
call fcn.004d1980
lea edx, [esp + 0x30]
push edx
call fcn.004fb820
add esp, 4
push 0x67d008
mov ecx, eax
mov byte [esp + 0x54], 4
call fcn.004d1930
mov dword [0x67d020], edi
mov dword [0x67d024], ebp
mov dword [0x67d028], 6
mov dword [0x67d02c], 3
mov dword [0x67d030], ebx
mov dword [0x67d034], 0x620504
mov dword [0x67d038], 0x620530
mov dword [0x67d03c], 0x620560
mov dword [0x67d040], 0x6205b8
mov dword [0x67d044], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 6
call fcn.004d1980
lea ecx, [esp + 0x18]
push ecx
call fcn.004fb8a0
add esp, 4
push 0x67d048
mov ecx, eax
mov byte [esp + 0x54], 7
call fcn.004d1930
mov edi, 4
mov dword [0x67d060], ebx
mov dword [0x67d064], ebx
mov dword [0x67d068], 0xef
mov dword [0x67d06c], 0x9e
mov dword [0x67d070], ebx
mov dword [0x67d074], 0x6203c4
mov dword [0x67d078], 0x620404
mov dword [0x67d07c], 0x620448
mov dword [0x67d080], 0x6204c4
mov dword [0x67d084], edi
mov byte [esp + 0x50], 9
lea edx, [esp + 0x18]
push edx
call fcn.004d1980
lea eax, [esp + 0x30]
push eax
call fcn.004d29c0
add esp, 4
push 0x67d088
mov ecx, eax
mov byte [esp + 0x54], 0xa
call fcn.004d1930
mov dword [0x67d0a0], ebx
mov dword [0x67d0a4], ebx
mov dword [0x67d0a8], 0x71
mov dword [0x67d0ac], 9
mov dword [0x67d0b0], ebx
mov dword [0x67d0b4], 0x620324
mov dword [0x67d0b8], 0x620344
mov dword [0x67d0bc], 0x620364
mov dword [0x67d0c0], 0x6203a4
mov dword [0x67d0c4], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0xc
call fcn.004d1980
lea edx, [esp + 0x18]
push edx
call fcn.004fb920
add esp, 4
push 0x67d0c8
mov ecx, eax
mov byte [esp + 0x54], 0xd
call fcn.004d1930
mov dword [0x67d0e0], ebx
mov dword [0x67d0e4], ebx
mov dword [0x67d0e8], 0x71
mov dword [0x67d0ec], 9
mov dword [0x67d0f0], ebx
mov dword [0x67d0f4], 0x620284
mov dword [0x67d0f8], 0x6202a4
mov dword [0x67d0fc], 0x6202c4
mov dword [0x67d100], 0x620304
mov dword [0x67d104], esi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0xf
call fcn.004d1980
lea ecx, [esp + 0x30]
push ecx
call fcn.004fb9a0
add esp, 4
push 0x67d108
mov ecx, eax
mov byte [esp + 0x54], 0x10
call fcn.004d1930
mov dword [0x67d120], 0xa3
mov dword [0x67d124], ebp
mov dword [0x67d128], 6
mov dword [0x67d12c], 3
mov dword [0x67d130], ebx
mov dword [0x67d134], 0x6205e4
mov dword [0x67d138], 0x6201d4
mov dword [0x67d13c], 0x620200
mov dword [0x67d140], 0x620258
mov dword [0x67d144], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x12
call fcn.004d1980
lea eax, [esp + 0x18]
push eax
call fcn.004fba20
add esp, 4
push 0x67d148
mov ecx, eax
mov byte [esp + 0x54], 0x13
call fcn.004d1930
mov dword [0x67d160], 0x11b
mov dword [0x67d164], 0xc
mov dword [0x67d168], ebp
mov dword [0x67d16c], 5
mov dword [0x67d170], ebx
mov dword [0x67d174], 0x620050
mov dword [0x67d178], 0x6200a0
mov dword [0x67d17c], 0x6200f0
mov dword [0x67d180], 0x620188
mov dword [0x67d184], edi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 0x15
call fcn.004d1980
lea edx, [esp + 0x30]
push edx
call fcn.004fbaa0
add esp, 4
push 0x67d188
mov ecx, eax
mov byte [esp + 0x54], 0x16
call fcn.004d1930
mov dword [0x67d1a8], ebp
mov ebp, 5
mov dword [0x67d1a0], 0x11b
mov dword [0x67d1a4], 0xc
mov dword [0x67d1ac], ebp
mov dword [0x67d1b0], ebx
mov dword [0x67d1b4], 0x6200a0
mov dword [0x67d1b8], 0x61ff18
mov dword [0x67d1bc], 0x61ff68
mov dword [0x67d1c0], 0x620000
mov dword [0x67d1c4], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 0x18
call fcn.004d1980
lea ecx, [esp + 0x18]
push ecx
call fcn.004fbb20
add esp, 4
push 0x67d1c8
mov ecx, eax
mov byte [esp + 0x54], 0x19
call fcn.004d1930
mov dword [0x67d1e0], 0x83
mov dword [0x67d1e4], 8
mov dword [0x67d1e8], 3
mov dword [0x67d1ec], esi
mov dword [0x67d1f0], ebx
mov dword [0x67d1f4], 0x61fe5c
mov dword [0x67d1f8], 0x61fe80
mov dword [0x67d1fc], 0x61fea8
mov dword [0x67d200], 0x61fef0
mov dword [0x67d204], esi
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x54], 0x1b
call fcn.004d1980
lea eax, [esp + 0x30]
push eax
call fcn.004fbba0
add esp, 4
mov byte [esp + 0x50], 0x1c
push 0x67d208
mov ecx, eax
call fcn.004d1930
mov dword [0x67d220], 0x83
mov dword [0x67d224], 8
mov dword [0x67d228], 3
mov dword [0x67d22c], esi
mov dword [0x67d230], ebx
mov dword [0x67d234], 0x61fda4
mov dword [0x67d238], 0x61fdc8
mov dword [0x67d23c], 0x61fdf0
mov dword [0x67d240], 0x61fe38
mov dword [0x67d244], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0x1e
call fcn.004d1980
lea edx, [esp + 0x18]
push edx
call fcn.004fbc20
add esp, 4
push 0x67d248
mov ecx, eax
mov byte [esp + 0x54], 0x1f
call fcn.004d1930
mov dword [0x67d260], ebx
mov dword [0x67d264], ebx
mov dword [0x67d268], 0xc1
mov dword [0x67d26c], 0xf
mov dword [0x67d270], ebx
mov dword [0x67d274], 0x61fc9c
mov dword [0x67d278], 0x61fcd0
mov dword [0x67d27c], 0x61fd08
mov dword [0x67d280], 0x61fd70
mov dword [0x67d284], esi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0x21
call fcn.004d1980
lea ecx, [esp + 0x30]
push ecx
call fcn.004fbca0
add esp, 4
push 0x67d288
mov ecx, eax
mov byte [esp + 0x54], 0x22
call fcn.004d1930
mov dword [0x67d2a0], ebx
mov dword [0x67d2a4], ebx
mov dword [0x67d2a8], 0xc1
mov dword [0x67d2ac], 0xf
mov dword [0x67d2b0], ebx
mov dword [0x67d2b4], 0x61fb98
mov dword [0x67d2b8], 0x61fbcc
mov dword [0x67d2bc], 0x61fc00
mov dword [0x67d2c0], 0x61fc68
mov dword [0x67d2c4], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x24
call fcn.004d1980
lea eax, [esp + 0x18]
push eax
call fcn.004fbd20
add esp, 4
push 0x67d2c8
mov ecx, eax
mov byte [esp + 0x54], 0x25
call fcn.004d1930
mov dword [0x67d2e0], ebx
mov dword [0x67d2e4], ebx
mov dword [0x67d2e8], 0xe9
mov dword [0x67d2ec], 0x4a
mov dword [0x67d2f0], ebx
mov dword [0x67d2f4], 0x6203c4
mov dword [0x67d2f8], 0x620404
mov dword [0x67d2fc], 0x61fae0
mov dword [0x67d300], 0x61fb5c
mov dword [0x67d304], edi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 0x27
call fcn.004d1980
lea edx, [esp + 0x30]
push edx
call fcn.004fbda0
add esp, 4
push 0x67d308
mov ecx, eax
mov byte [esp + 0x54], 0x28
call fcn.004d1930
mov dword [0x67d320], ebx
mov dword [0x67d324], ebx
mov dword [0x67d328], 0xe9
mov dword [0x67d32c], 0x4a
mov dword [0x67d330], ebx
mov dword [0x67d334], 0x620404
mov dword [0x67d338], 0x61f9e0
mov dword [0x67d33c], 0x61fa20
mov dword [0x67d340], 0x61fa9c
mov dword [0x67d344], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 0x2a
call fcn.004d1980
lea ecx, [esp + 0x18]
push ecx
call fcn.004fbe20
add esp, 4
push 0x67d348
mov ecx, eax
mov byte [esp + 0x54], 0x2b
call fcn.004d1930
mov dword [0x67d360], ebx
mov dword [0x67d364], ebx
mov dword [0x67d368], 0x199
mov dword [0x67d36c], 0x57
mov dword [0x67d370], ebx
mov dword [0x67d374], 0x61f7c0
mov dword [0x67d378], 0x61f830
mov dword [0x67d37c], 0x61f8a0
mov dword [0x67d380], 0x61f978
mov dword [0x67d384], edi
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x54], 0x2d
call fcn.004d1980
lea eax, [esp + 0x30]
push eax
call fcn.004fbea0
add esp, 4
push 0x67d388
mov ecx, eax
mov byte [esp + 0x54], 0x2e
call fcn.004d1930
mov dword [0x67d3a0], ebx
mov dword [0x67d3a4], ebx
mov dword [0x67d3a8], 0x199
mov dword [0x67d3ac], 0x57
mov dword [0x67d3b0], ebx
mov dword [0x67d3b4], 0x61f830
mov dword [0x67d3b8], 0x61f608
mov dword [0x67d3bc], 0x61f678
mov dword [0x67d3c0], 0x61f750
mov dword [0x67d3c4], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0x30
call fcn.004d1980
lea edx, [esp + 0x18]
push edx
call fcn.004fbf20
add esp, 4
push 0x67d3c8
mov ecx, eax
mov byte [esp + 0x54], 0x31
call fcn.004d1930
mov dword [0x67d3e0], 0x23b
mov dword [0x67d3e4], 0xa
mov dword [0x67d3e8], ebp
mov dword [0x67d3ec], esi
mov dword [0x67d3f0], ebx
mov dword [0x67d3f4], 0x61f318
mov dword [0x67d3f8], 0x61f3b0
mov dword [0x67d3fc], 0x61f448
mov dword [0x67d400], 0x61f570
mov dword [0x67d404], edi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0x33
call fcn.004d1980
lea ecx, [esp + 0x30]
push ecx
call fcn.004fbfa0
add esp, 4
push 0x67d408
mov ecx, eax
mov byte [esp + 0x54], 0x34
call fcn.004d1930
mov dword [0x67d420], 0x23b
mov dword [0x67d424], 0xa
mov dword [0x67d428], ebp
mov dword [0x67d42c], esi
mov dword [0x67d430], ebx
mov dword [0x67d434], 0x61f3b0
mov dword [0x67d438], 0x61f0c0
mov dword [0x67d43c], 0x61f158
mov dword [0x67d440], 0x61f280
mov dword [0x67d444], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x36
call fcn.004d1980
push 0x571100
mov byte [esp + 0x54], bl
call fcn.0054927a
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov dword [eax], 0x67cfc8
add esp, 4
mov dword [ecx], 0x67d448
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov dword [edx], 0x67cfc8
mov dword [eax], 0x67d448
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret