Function at 0x4d8a60
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x608526
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push ebp
push esi
push edi
mov eax, dword [0x72d630]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
test byte [0x747030], 1
jne 0x4d9410
or dword [0x747030], 1
lea eax, [esp + 0x18]
xor ebx, ebx
push eax
mov dword [esp + 0x54], ebx
call fcn.004d7820
add esp, 4
push 0x746bb0
mov ecx, eax
mov byte [esp + 0x54], 1
call fcn.004ad830
mov eax, str.000000000000000000000000000000000000000001
mov edi, 0xa3
mov ebp, 7
mov esi, 2
mov dword [0x746bc8], edi
mov dword [0x746bcc], ebp
mov dword [0x746bd0], 6
mov dword [0x746bd4], 3
mov dword [0x746bd8], ebx
mov dword [0x746bdc], eax
mov dword [0x746be0], eax
mov dword [0x746be4], 0x6dd128
mov dword [0x746be8], 0x6dd180
mov dword [0x746bec], esi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 3
call fcn.004ad880
lea edx, [esp + 0x30]
push edx
call fcn.004d78a0
add esp, 4
push 0x746bf0
mov ecx, eax
mov byte [esp + 0x54], 4
call fcn.004ad830
mov dword [0x746c08], edi
mov dword [0x746c0c], ebp
mov dword [0x746c10], 6
mov dword [0x746c14], 3
mov dword [0x746c18], ebx
mov dword [0x746c1c], 0x6dd01c
mov dword [0x746c20], 0x6dd048
mov dword [0x746c24], 0x6dd078
mov dword [0x746c28], 0x6dd0d0
mov dword [0x746c2c], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 6
call fcn.004ad880
lea ecx, [esp + 0x18]
push ecx
call fcn.004d7920
add esp, 4
push 0x746c30
mov ecx, eax
mov byte [esp + 0x54], 7
call fcn.004ad830
mov edi, 4
mov dword [0x746c48], ebx
mov dword [0x746c4c], ebx
mov dword [0x746c50], 0xef
mov dword [0x746c54], 0x9e
mov dword [0x746c58], ebx
mov dword [0x746c5c], 0x6dcedc
mov dword [0x746c60], 0x6dcf1c
mov dword [0x746c64], 0x6dcf60
mov dword [0x746c68], 0x6dcfdc
mov dword [0x746c6c], edi
mov byte [esp + 0x50], 9
lea edx, [esp + 0x18]
push edx
call fcn.004ad880
lea eax, [esp + 0x30]
push eax
call fcn.004ae860
add esp, 4
push 0x746c70
mov ecx, eax
mov byte [esp + 0x54], 0xa
call fcn.004ad830
mov dword [0x746c88], ebx
mov dword [0x746c8c], ebx
mov dword [0x746c90], 0x71
mov dword [0x746c94], 9
mov dword [0x746c98], ebx
mov dword [0x746c9c], 0x6dce3c
mov dword [0x746ca0], 0x6dce5c
mov dword [0x746ca4], 0x6dce7c
mov dword [0x746ca8], 0x6dcebc
mov dword [0x746cac], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0xc
call fcn.004ad880
lea edx, [esp + 0x18]
push edx
call fcn.004d79a0
add esp, 4
push 0x746cb0
mov ecx, eax
mov byte [esp + 0x54], 0xd
call fcn.004ad830
mov dword [0x746cc8], ebx
mov dword [0x746ccc], ebx
mov dword [0x746cd0], 0x71
mov dword [0x746cd4], 9
mov dword [0x746cd8], ebx
mov dword [0x746cdc], 0x6dcd9c
mov dword [0x746ce0], 0x6dcdbc
mov dword [0x746ce4], 0x6dcddc
mov dword [0x746ce8], 0x6dce1c
mov dword [0x746cec], esi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0xf
call fcn.004ad880
lea ecx, [esp + 0x30]
push ecx
call fcn.004d7a20
add esp, 4
push 0x746cf0
mov ecx, eax
mov byte [esp + 0x54], 0x10
call fcn.004ad830
mov dword [0x746d08], 0xa3
mov dword [0x746d0c], ebp
mov dword [0x746d10], 6
mov dword [0x746d14], 3
mov dword [0x746d18], ebx
mov dword [0x746d1c], 0x6dd0fc
mov dword [0x746d20], 0x6dccec
mov dword [0x746d24], 0x6dcd18
mov dword [0x746d28], 0x6dcd70
mov dword [0x746d2c], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x12
call fcn.004ad880
lea eax, [esp + 0x18]
push eax
call fcn.004d7aa0
add esp, 4
push 0x746d30
mov ecx, eax
mov byte [esp + 0x54], 0x13
call fcn.004ad830
mov dword [0x746d48], 0x11b
mov dword [0x746d4c], 0xc
mov dword [0x746d50], ebp
mov dword [0x746d54], 5
mov dword [0x746d58], ebx
mov dword [0x746d5c], 0x6dcb68
mov dword [0x746d60], 0x6dcbb8
mov dword [0x746d64], 0x6dcc08
mov dword [0x746d68], 0x6dcca0
mov dword [0x746d6c], edi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 0x15
call fcn.004ad880
lea edx, [esp + 0x30]
push edx
call fcn.004d7b20
add esp, 4
push 0x746d70
mov ecx, eax
mov byte [esp + 0x54], 0x16
call fcn.004ad830
mov dword [0x746d90], ebp
mov ebp, 5
mov dword [0x746d88], 0x11b
mov dword [0x746d8c], 0xc
mov dword [0x746d94], ebp
mov dword [0x746d98], ebx
mov dword [0x746d9c], 0x6dcbb8
mov dword [0x746da0], 0x6dca30
mov dword [0x746da4], 0x6dca80
mov dword [0x746da8], 0x6dcb18
mov dword [0x746dac], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 0x18
call fcn.004ad880
lea ecx, [esp + 0x18]
push ecx
call fcn.004d7ba0
add esp, 4
push 0x746db0
mov ecx, eax
mov byte [esp + 0x54], 0x19
call fcn.004ad830
mov dword [0x746dc8], 0x83
mov dword [0x746dcc], 8
mov dword [0x746dd0], 3
mov dword [0x746dd4], esi
mov dword [0x746dd8], ebx
mov dword [0x746ddc], 0x6dc974
mov dword [0x746de0], 0x6dc998
mov dword [0x746de4], 0x6dc9c0
mov dword [0x746de8], 0x6dca08
mov dword [0x746dec], esi
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x54], 0x1b
call fcn.004ad880
lea eax, [esp + 0x30]
push eax
call fcn.004d7c20
add esp, 4
mov byte [esp + 0x50], 0x1c
push 0x746df0
mov ecx, eax
call fcn.004ad830
mov dword [0x746e08], 0x83
mov dword [0x746e0c], 8
mov dword [0x746e10], 3
mov dword [0x746e14], esi
mov dword [0x746e18], ebx
mov dword [0x746e1c], 0x6dc8bc
mov dword [0x746e20], 0x6dc8e0
mov dword [0x746e24], 0x6dc908
mov dword [0x746e28], 0x6dc950
mov dword [0x746e2c], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0x1e
call fcn.004ad880
lea edx, [esp + 0x18]
push edx
call fcn.004d7ca0
add esp, 4
push 0x746e30
mov ecx, eax
mov byte [esp + 0x54], 0x1f
call fcn.004ad830
mov dword [0x746e48], ebx
mov dword [0x746e4c], ebx
mov dword [0x746e50], 0xc1
mov dword [0x746e54], 0xf
mov dword [0x746e58], ebx
mov dword [0x746e5c], 0x6dc7b4
mov dword [0x746e60], 0x6dc7e8
mov dword [0x746e64], 0x6dc820
mov dword [0x746e68], 0x6dc888
mov dword [0x746e6c], esi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0x21
call fcn.004ad880
lea ecx, [esp + 0x30]
push ecx
call fcn.004d7d20
add esp, 4
push 0x746e70
mov ecx, eax
mov byte [esp + 0x54], 0x22
call fcn.004ad830
mov dword [0x746e88], ebx
mov dword [0x746e8c], ebx
mov dword [0x746e90], 0xc1
mov dword [0x746e94], 0xf
mov dword [0x746e98], ebx
mov dword [0x746e9c], 0x6dc6b0
mov dword [0x746ea0], 0x6dc6e4
mov dword [0x746ea4], 0x6dc718
mov dword [0x746ea8], 0x6dc780
mov dword [0x746eac], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x24
call fcn.004ad880
lea eax, [esp + 0x18]
push eax
call fcn.004d7da0
add esp, 4
push 0x746eb0
mov ecx, eax
mov byte [esp + 0x54], 0x25
call fcn.004ad830
mov dword [0x746ec8], ebx
mov dword [0x746ecc], ebx
mov dword [0x746ed0], 0xe9
mov dword [0x746ed4], 0x4a
mov dword [0x746ed8], ebx
mov dword [0x746edc], 0x6dcedc
mov dword [0x746ee0], 0x6dcf1c
mov dword [0x746ee4], 0x6dc5f8
mov dword [0x746ee8], 0x6dc674
mov dword [0x746eec], edi
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x54], 0x27
call fcn.004ad880
lea edx, [esp + 0x30]
push edx
call fcn.004d7e20
add esp, 4
push 0x746ef0
mov ecx, eax
mov byte [esp + 0x54], 0x28
call fcn.004ad830
mov dword [0x746f08], ebx
mov dword [0x746f0c], ebx
mov dword [0x746f10], 0xe9
mov dword [0x746f14], 0x4a
mov dword [0x746f18], ebx
mov dword [0x746f1c], 0x6dcf1c
mov dword [0x746f20], 0x6dc4f8
mov dword [0x746f24], 0x6dc538
mov dword [0x746f28], 0x6dc5b4
mov dword [0x746f2c], esi
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x54], 0x2a
call fcn.004ad880
lea ecx, [esp + 0x18]
push ecx
call fcn.004d7ea0
add esp, 4
push 0x746f30
mov ecx, eax
mov byte [esp + 0x54], 0x2b
call fcn.004ad830
mov dword [0x746f48], ebx
mov dword [0x746f4c], ebx
mov dword [0x746f50], 0x199
mov dword [0x746f54], 0x57
mov dword [0x746f58], ebx
mov dword [0x746f5c], 0x6dc2d8
mov dword [0x746f60], 0x6dc348
mov dword [0x746f64], 0x6dc3b8
mov dword [0x746f68], 0x6dc490
mov dword [0x746f6c], edi
lea edx, [esp + 0x18]
push edx
mov byte [esp + 0x54], 0x2d
call fcn.004ad880
lea eax, [esp + 0x30]
push eax
call fcn.004d7f20
add esp, 4
push 0x746f70
mov ecx, eax
mov byte [esp + 0x54], 0x2e
call fcn.004ad830
mov dword [0x746f88], ebx
mov dword [0x746f8c], ebx
mov dword [0x746f90], 0x199
mov dword [0x746f94], 0x57
mov dword [0x746f98], ebx
mov dword [0x746f9c], 0x6dc348
mov dword [0x746fa0], 0x6dc120
mov dword [0x746fa4], 0x6dc190
mov dword [0x746fa8], 0x6dc268
mov dword [0x746fac], esi
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x54], 0x30
call fcn.004ad880
lea edx, [esp + 0x18]
push edx
call fcn.004d7fa0
add esp, 4
push 0x746fb0
mov ecx, eax
mov byte [esp + 0x54], 0x31
call fcn.004ad830
mov dword [0x746fc8], 0x23b
mov dword [0x746fcc], 0xa
mov dword [0x746fd0], ebp
mov dword [0x746fd4], esi
mov dword [0x746fd8], ebx
mov dword [0x746fdc], 0x6dbe30
mov dword [0x746fe0], 0x6dbec8
mov dword [0x746fe4], 0x6dbf60
mov dword [0x746fe8], 0x6dc088
mov dword [0x746fec], edi
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x54], 0x33
call fcn.004ad880
lea ecx, [esp + 0x30]
push ecx
call fcn.004d8020
add esp, 4
push 0x746ff0
mov ecx, eax
mov byte [esp + 0x54], 0x34
call fcn.004ad830
mov dword [0x747008], 0x23b
mov dword [0x74700c], 0xa
mov dword [0x747010], ebp
mov dword [0x747014], esi
mov dword [0x747018], ebx
mov dword [0x74701c], 0x6dbec8
mov dword [0x747020], 0x6dbbd8
mov dword [0x747024], 0x6dbc70
mov dword [0x747028], 0x6dbd98
mov dword [0x74702c], esi
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x54], 0x36
call fcn.004ad880
push 0x610a90
mov byte [esp + 0x54], bl
call fcn.005e05b7
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
mov dword [eax], 0x746bb0
add esp, 4
mov dword [ecx], 0x747030
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret
mov edx, dword [esp + 0x58]
mov eax, dword [esp + 0x5c]
mov dword [edx], 0x746bb0
mov dword [eax], 0x747030
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret