Function at 0x42bc50
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x566eeb
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x5f7448]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
mov dword [ebx], vtable.CHTTPHeader.0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebp - 4], 0
lea edi, [ebx + 0x14]
mov ecx, edi
mov dword [ebp - 0x14], edi
mov dword [edi], 0
mov dword [edi + 4], 0
call fcn.00469190
mov dword [edi], eax
mov byte [ebp - 4], 5
lea edi, [ebx + 0x1c]
mov ecx, edi
mov dword [ebp - 0x14], edi
mov dword [edi], 0
mov dword [edi + 4], 0
call fcn.00469190
mov dword [edi], eax
mov byte [ebp - 4], 0xa
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov byte [ebp - 4], 0xb
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x38], 0
mov byte [ebp - 4], 0xc
mov dword [ebx + 0x54], 0xf
mov dword [ebx + 0x50], 0
mov byte [ebx + 0x40], 0
mov byte [ebp - 4], 0xd
mov dword [ebx + 0x6c], 0xf
mov dword [ebx + 0x68], 0
mov byte [ebx + 0x58], 0
mov byte [ebp - 4], 0xe
mov dword [ebx + 0x84], 0xf
mov dword [ebx + 0x80], 0
mov byte [ebx + 0x70], 0
mov byte [ebp - 4], 0xf
mov dword [ebx + 0xa0], 0xf
mov dword [ebx + 0x9c], 0
mov byte [ebx + 0x8c], 0
mov byte [ebp - 4], 0x10
mov dword [ebx + 0xa4], 0
mov dword [ebx + 0xa8], 0
mov dword [ebx + 0xac], 0
mov byte [ebp - 4], 0x11
mov dword [ebx + 0xdc], 0xf
mov dword [ebx + 0xd8], 0
mov byte [ebx + 0xc8], 0
mov byte [ebp - 4], 0x12
mov dword [ebx + 0xf8], 0xf
mov dword [ebx + 0xf4], 0
mov byte [ebx + 0xe4], 0
mov byte [ebp - 4], 0x13
mov edi, dword [ebp + 8]
movzx eax, byte [edi + 0xbd]
mov byte [ebx + 0xbd], al
mov eax, dword [edi + 0x104]
mov dword [ebx + 0x104], eax
lea eax, [edi + 4]
push eax
lea ecx, [ebx + 4]
call fcn.0040f870
movzx eax, byte [edi + 0x10]
mov byte [ebx + 0x10], al
movzx eax, byte [edi + 0x11]
mov byte [ebx + 0x11], al
lea eax, [edi + 0x14]
lea esi, [ebx + 0x14]
cmp esi, eax
je 0x42be4b
mov eax, dword [esi]
mov ecx, esi
push dword [eax + 4]
call fcn.0042ae60
mov eax, dword [esi]
mov byte [ebp + 8], 0
push dword [ebp + 8]
mov dword [eax + 4], eax
mov eax, dword [esi]
mov ecx, esi
mov dword [eax], eax
mov eax, dword [esi]
mov dword [eax + 8], eax
lea eax, [edi + 0x14]
push eax
mov dword [esi + 4], 0
call fcn.00428390
lea eax, [edi + 0x1c]
lea esi, [ebx + 0x1c]
cmp esi, eax
je 0x42be88
mov eax, dword [esi]
mov ecx, esi
push dword [eax + 4]
call fcn.0042ae60
mov eax, dword [esi]
mov byte [ebp + 8], 0
push dword [ebp + 8]
mov dword [eax + 4], eax
mov eax, dword [esi]
mov ecx, esi
mov dword [eax], eax
mov eax, dword [esi]
mov dword [eax + 8], eax
lea eax, [edi + 0x1c]
push eax
mov dword [esi + 4], 0
call fcn.00428390
lea eax, [edi + 0x24]
push eax
lea ecx, [ebx + 0x24]
call fcn.0042c5f0
lea eax, [edi + 0x30]
push eax
lea ecx, [ebx + 0x30]
call fcn.0042c5f0
mov ax, word [edi + 0x3c]
mov word [ebx + 0x3c], ax
lea eax, [edi + 0x40]
lea ecx, [ebx + 0x40]
cmp ecx, eax
je 0x42bebc
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
lea eax, [edi + 0x58]
lea ecx, [ebx + 0x58]
cmp ecx, eax
je 0x42bed0
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
lea eax, [edi + 0x70]
lea ecx, [ebx + 0x70]
cmp ecx, eax
je 0x42bee4
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
movzx eax, byte [edi + 0x88]
mov byte [ebx + 0x88], al
movzx eax, byte [edi + 0x89]
mov byte [ebx + 0x89], al
lea eax, [edi + 0x8c]
lea ecx, [ebx + 0x8c]
cmp ecx, eax
je 0x42bf18
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
lea eax, [edi + 0xa4]
push eax
lea ecx, [ebx + 0xa4]
call fcn.0040f870
mov eax, dword [edi + 0xb8]
mov dword [ebx + 0xb8], eax
movzx eax, byte [edi + 0xb0]
mov byte [ebx + 0xb0], al
movzx eax, byte [edi + 0xbc]
mov byte [ebx + 0xbc], al
movzx eax, byte [edi + 0xbe]
mov byte [ebx + 0xbe], al
mov eax, dword [edi + 0xc0]
mov dword [ebx + 0xc0], eax
movzx eax, byte [edi + 0xc5]
mov byte [ebx + 0xc5], al
lea eax, [edi + 0xc8]
lea ecx, [ebx + 0xc8]
cmp ecx, eax
je 0x42bf90
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
movzx eax, byte [edi + 0xe0]
mov byte [ebx + 0xe0], al
movzx eax, byte [edi + 0xc4]
mov byte [ebx + 0xc4], al
movzx eax, byte [edi + 0xe1]
mov byte [ebx + 0xe1], al
movzx eax, byte [edi + 0xe2]
mov byte [ebx + 0xe2], al
lea eax, [edi + 0xe4]
lea ecx, [ebx + 0xe4]
cmp ecx, eax
je 0x42bfde
push 0xffffffffffffffff
push 0
push eax
call fcn.00405880
mov eax, dword [edi + 0xfc]
mov dword [ebx + 0xfc], eax
mov al, byte [edi + 0x100]
mov byte [ebx + 0x100], al
mov eax, dword [edi + 0x108]
mov dword [ebx + 0x108], eax
cmp dword [edi + 0xb4], 0
je 0x42c04a
push 0x3a4
call fcn.004ad19b
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x14
test eax, eax
je 0x42c03c
push dword [edi + 0xb4]
mov ecx, eax
call fcn.0042ba50
mov byte [ebp - 4], 0x13
mov dword [ebx + 0xb4], eax
jmp 0x42c054
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebx + 0xb4], eax
jmp 0x42c054
mov dword [ebx + 0xb4], 0
mov dword [ebp - 4], 0xffffffff
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4