Function at 0x42cfa0
Capabilities:
Check for peb ntglobalflag flag
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4874b8
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x68], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [section..data]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov eax, ecx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x54], ecx
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
mov dword [esp + 0x8c], 0
mov eax, dword [eax + 8]
mov ebp, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
mov esi, dword [eax]
cmp esi, eax
je 0x42d2f6
lea esp, [esp]
cmp dword [esp + 0x78], 0x10
lea eax, [esp + 0x64]
mov dword [esp + 0x74], 0
cmovae eax, dword [esp + 0x64]
mov byte [eax], 0
cmp dword [esi + 0x24], 8
jb 0x42d054
mov ecx, dword [esi + 0x10]
jmp 0x42d057
lea ecx, [esi + 0x10]
mov edx, dword [esi + 0x20]
lea eax, [esp + 0x64]
push eax
call fcn.00415bf0
mov eax, dword [esp + 0x78]
lea edi, [esp + 0x68]
mov ecx, dword [esp + 0x58]
lea edx, [esp + 0x68]
add esp, 4
cmp dword [esp + 0x78], 0x10
cmovae edi, dword [esp + 0x64]
cmovae edx, dword [esp + 0x64]
add eax, edi
push eax
push edx
call fcn.0047bd90
mov ebx, dword [esi + 0x28]
mov edi, eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esi + 0x2c]
and eax, 0xffffff02
or eax, 2
mov dword [esp + 0x3c], eax
and eax, 0xfffffeff
mov dword [esp + 0x3c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ecx
mov byte [esp + 0x8c], 1
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x18]
call fcn.0047af30
mov byte [esp + 0x8c], 2
mov ecx, edi
call fcn.0047b8f0
push eax
mov ecx, edi
call fcn.0047b980
mov edi, eax
mov byte [esp + 0x8c], 3
movsx edx, byte [edi + 8]
mov cl, byte [esp + 0x1c]
mov byte [edi + 8], cl
mov ecx, dword [esp + 0x1c]
mov eax, ecx
xor eax, edx
and eax, 0xff
xor ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi]
mov eax, dword [esp + 0x14]
mov edx, dword [edi + 4]
mov dword [edi], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 4], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 8]
mov eax, ecx
xor eax, dword [esp + 0x1c]
mov edx, ecx
shr edx, 8
and eax, 0x100
xor eax, ecx
and edx, 1
mov dword [edi + 8], eax
mov eax, dword [esp + 0x1c]
shl edx, 8
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [esp + 0x1c], eax
mov ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x20]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov ecx, dword [edi + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x24], ecx
mov ecx, dword [edi + 0x14]
mov dword [edi + 0x14], eax
mov dword [esp + 0x28], ecx
mov byte [esp + 0x8c], 1
movsx eax, byte [esp + 0x1c]
cmp eax, 4
je 0x42d1f0
add eax, 0xfffffffa
cmp eax, 1
ja 0x42d207
mov edi, dword [esp + 0x14]
mov dword [esp + 0x2c], edi
test edi, edi
je 0x42d207
mov byte [esp + 0x8c], 5
mov ecx, edi
mov eax, dword [edi]
push eax
push dword [eax]
lea eax, [esp + 0x60]
push eax
call fcn.0047cc00
mov byte [esp + 0x8c], 1
push dword [edi]
call ebp
add esp, 4
push edi
call ebp
jmp 0x42d204
test dword [esp + 0x1c], 0x100
je 0x42d207
push dword [esp + 0x14]
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
je 0x42d22c
push 0x47aa30
push dword [eax - 4]
lea edi, [eax - 4]
push 4
push eax
call fcn.004805c6
push edi
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov byte [esp + 0x8c], 0
movsx eax, byte [esp + 0x3c]
cmp eax, 4
je 0x42d284
add eax, 0xfffffffa
cmp eax, 1
ja 0x42d298
mov dword [esp + 0x2c], ebx
test ebx, ebx
je 0x42d298
mov byte [esp + 0x8c], 9
mov ecx, ebx
mov eax, dword [ebx]
push eax
push dword [eax]
lea eax, [esp + 0x58]
push eax
call fcn.0047cc00
mov byte [esp + 0x8c], 0
push dword [ebx]
call ebp
add esp, 4
push ebx
call ebp
jmp 0x42d295
test dword [esp + 0x60], 0x100
je 0x42d298
push ebx
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
cmp byte [esi + 0xd], 0
xorps xmm0, xmm0
movlpd qword [esp + 0x34], xmm0
jne 0x42d2e7
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
jne 0x42d2cc
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
jne 0x42d2e7
lea ebx, [ebx]
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0xd], 0
je 0x42d2c0
jmp 0x42d2e7
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x42d2e5
cmp esi, dword [eax + 8]
jne 0x42d2e5
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x42d2d5
mov esi, eax
mov eax, dword [esp + 0x30]
cmp esi, dword [eax + 8]
jne 0x42d030
jmp 0x42d2fa
mov eax, dword [esp + 0x30]
mov eax, dword [eax + 0x10]
mov esi, dword [eax]
cmp esi, eax
je 0x42d5ba
cmp dword [esp + 0x78], 0x10
lea eax, [esp + 0x64]
mov dword [esp + 0x74], 0
cmovae eax, dword [esp + 0x64]
mov byte [eax], 0
cmp dword [esi + 0x1c], 8
jb 0x42d32b
mov ecx, dword [esi + 8]
jmp 0x42d32e
lea ecx, [esi + 8]
mov edx, dword [esi + 0x18]
lea eax, [esp + 0x64]
push eax
call fcn.00415bf0
mov eax, dword [esp + 0x78]
lea edi, [esp + 0x68]
mov ecx, dword [esp + 0x58]
lea edx, [esp + 0x68]
add esp, 4
cmp dword [esp + 0x78], 0x10
cmovae edi, dword [esp + 0x64]
cmovae edx, dword [esp + 0x64]
add eax, edi
push eax
push edx
call fcn.0047bd90
mov ebx, dword [esi + 0x20]
mov edi, eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esi + 0x24]
and eax, 0xffffff02
or eax, 2
mov dword [esp + 0x3c], eax
and eax, 0xfffffeff
mov dword [esp + 0x3c], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ecx
mov byte [esp + 0x8c], 0xc
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x18]
call fcn.0047af30
mov byte [esp + 0x8c], 0xd
movsx eax, byte [edi + 8]
cmp eax, 7
ja case.0x42d3d2.0
jmp dword [eax*4 + 0x42d610]
mov eax, dword [edi]
cmp dword [eax + 4], 0
je case.0x42d3d2.0
mov eax, dword [eax]
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], eax
call fcn.00407f30
mov eax, dword [esp + 0x60]
mov eax, dword [eax + 0x14]
inc eax
jmp 0x42d403
mov eax, dword [edi]
mov eax, dword [eax + 4]
jmp 0x42d403
xor eax, eax
push eax
mov ecx, edi
call fcn.0047b980
mov edi, eax
mov byte [esp + 0x8c], 0xe
movsx edx, byte [edi + 8]
mov cl, byte [esp + 0x1c]
mov byte [edi + 8], cl
mov ecx, dword [esp + 0x1c]
mov eax, ecx
xor eax, edx
and eax, 0xff
xor ecx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov eax, dword [esp + 0x14]
mov dword [edi], eax
mov eax, dword [esp + 0x18]
mov dword [edi + 4], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov ecx, dword [edi + 8]
xor eax, ecx
mov edx, ecx
and eax, 0x100
xor eax, ecx
shr edx, 8
mov dword [edi + 8], eax
and edx, 1
mov eax, dword [esp + 0x1c]
shl edx, 8
xor edx, eax
and edx, 0x100
xor eax, edx
mov dword [esp + 0x1c], eax
mov ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x20]
mov dword [edi + 0xc], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], ecx
mov ecx, dword [edi + 0x10]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x24], ecx
mov ecx, dword [edi + 0x14]
mov dword [edi + 0x14], eax
mov dword [esp + 0x28], ecx
mov byte [esp + 0x8c], 0xc
movsx eax, byte [esp + 0x1c]
cmp eax, 4
je 0x42d4fa
add eax, 0xfffffffa
cmp eax, 1
ja 0x42d511
mov edi, dword [esp + 0x14]
mov dword [esp + 0x50], edi
test edi, edi
je 0x42d511
mov byte [esp + 0x8c], 0x10
mov ecx, edi
mov eax, dword [edi]
push eax
push dword [eax]
lea eax, [esp + 0x60]
push eax
call fcn.0047cc00
mov byte [esp + 0x8c], 0xc
push dword [edi]
call ebp
add esp, 4
push edi
call ebp
jmp 0x42d50e
test dword [esp + 0x1c], 0x100
je 0x42d511
push dword [esp + 0x14]
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
mov eax, dword [esp + 0x20]
test eax, eax
je 0x42d536
push 0x47aa30
push dword [eax - 4]
lea edi, [eax - 4]
push 4
push eax
call fcn.004805c6
push edi
call dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete___void__]
add esp, 4
xorps xmm0, xmm0
movlpd qword [esp + 0x14], xmm0
mov byte [esp + 0x8c], 0
movsx eax, byte [esp + 0x3c]
cmp eax, 4
je 0x42d58e
add eax, 0xfffffffa
cmp eax, 1
ja 0x42d5a2
mov dword [esp + 0x50], ebx
test ebx, ebx
je 0x42d5a2
mov byte [esp + 0x8c], 0x14
mov ecx, ebx
mov eax, dword [ebx]
push eax
push dword [eax]
lea eax, [esp + 0x64]
push eax
call fcn.0047cc00
mov byte [esp + 0x8c], 0
push dword [ebx]
call ebp
add esp, 4
push ebx
call ebp
jmp 0x42d59f
test dword [esp + 0x2c], 0x100
je 0x42d5a2
push ebx
call dword [sym.imp.MSVCR120.dll_free]
add esp, 4
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
mov esi, dword [esi]
movlpd qword [esp + 0x34], xmm0
cmp esi, dword [eax + 0x10]
jne 0x42d307
mov dword [esp + 0x8c], 0xffffffff
cmp dword [esp + 0x78], 0x10
jb 0x42d5d5
push dword [esp + 0x64]
call ebp
add esp, 4
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], 0
mov byte [esp + 0x64], 0
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x68]
xor ecx, esp
call fcn.0047ff74
add esp, 0x7c
ret 4