Function at 0x42d270
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x474194
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x8c
mov dword [esp + 0x18], esi
call fcn.004616d3
lea edi, [esi + 0x7c]
mov dword [esp + 0x2c], 0
mov ecx, edi
call fcn.0045a24d
mov dword [edi], 0x40ccdc
mov eax, dword [0x404774]
lea edi, [esi + 0xb8]
mov dword [edi], eax
mov ecx, dword [0x404774]
lea ebp, [esi + 0xbc]
mov dword [ebp], ecx
mov edx, dword [0x404774]
mov dword [esi + 0xc0], edx
mov eax, dword [0x404774]
mov dword [esi + 0xd8], eax
mov ecx, dword [0x404774]
mov dword [esi + 0xdc], ecx
mov edx, dword [0x404774]
mov dword [esi + 0xe0], edx
mov eax, dword [0x404774]
mov dword [esi + 0xe4], eax
mov ecx, dword [0x404774]
mov dword [esi + 0xf4], ecx
mov edx, dword [0x404774]
mov dword [esi + 0xf8], edx
mov eax, dword [0x404774]
mov dword [esi + 0xfc], eax
mov ecx, dword [0x404774]
mov dword [esi + 0x100], ecx
mov edx, dword [0x404774]
mov dword [esi + 0x104], edx
mov eax, dword [0x404774]
mov dword [esi + 0x108], eax
mov ecx, dword [0x404774]
mov dword [esi + 0x110], ecx
mov edx, dword [0x404774]
mov dword [esi + 0x118], edx
mov eax, dword [0x404774]
mov dword [esi + 0x11c], eax
mov ecx, dword [0x404774]
mov dword [esi + 0x120], ecx
push 0x426ee0
push 0x426ea0
push 9
lea edx, [esi + 0x128]
push 0x40
push edx
mov byte [esp + 0x40], 0x12
call fcn.00447e8b
push 0x436770
push 0x436730
mov byte [esp + 0x34], 0x13
push 3
lea eax, [esi + 0x368]
push 0x4a4
push eax
call fcn.00447e8b
push ecx
mov bl, 0x14
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x47e51c
mov byte [esp + 0x34], bl
mov dword [esi], 0x40a9a8
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x15
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x402798
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x16
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x40278c
call fcn.0045e0b5
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push ecx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
mov ecx, edi
mov byte [esp + 0x30], 0x18
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x402784
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x19
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40277c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x1a
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40278c
call fcn.0045e0b5
lea edx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push edx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
mov ecx, ebp
mov byte [esp + 0x30], 0x1c
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push 0x47e51c
lea ecx, [esi + 0xc0]
call fcn.0045e1d0
push 0xa81
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e84
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x1d
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push 0x1f40
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e74
mov dword [esi + 0xc4], eax
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x1f
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e60
mov dword [esi + 0xc8], eax
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x21
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x402770
mov dword [esi + 0xcc], eax
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x23
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x40278c
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
mov dword [esi + 0xd0], eax
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x402764
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x25
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x40278c
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push ecx
mov dword [esi + 0xd4], eax
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x27
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x402758
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x28
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40278c
call fcn.0045e0b5
lea eax, [esp + 0x1c]
mov byte [esp + 0x38], bl
push eax
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0xd8]
mov byte [esp + 0x30], 0x2a
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x2b
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40274c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x2c
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40278c
call fcn.0045e0b5
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push ecx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0xdc]
mov byte [esp + 0x30], 0x2e
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x402744
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x2f
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x402738
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x30
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40278c
call fcn.0045e0b5
lea edx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push edx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0xe0]
mov byte [esp + 0x30], 0x32
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x33
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40272c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x34
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40278c
call fcn.0045e0b5
lea eax, [esp + 0x1c]
mov byte [esp + 0x38], bl
push eax
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0xe4]
mov byte [esp + 0x30], 0x36
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e40
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x37
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401a40
mov dword [esi + 0xe8], eax
mov dword [esi + 0xec], 0
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x39
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401a38
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push 0x47e51c
lea ecx, [esi + 0xf4]
mov dword [esi + 0xf0], eax
call fcn.0045e1d0
push 0x47e51c
lea ecx, [esi + 0xf8]
call fcn.0045e1d0
push 0x402720
lea ecx, [esi + 0x100]
call fcn.0045e1d0
push 0x47e51c
lea ecx, [esi + 0x104]
call fcn.0045e1d0
push 0x47e51c
lea ecx, [esi + 0x108]
call fcn.0045e1d0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401fb4
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x3b
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push ecx
mov dword [esi + 0x10c], eax
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
mov byte [esp + 0x30], 0x3d
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4020e0
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x3e
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x401e34
call fcn.0045e0b5
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push ecx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0x110]
mov byte [esp + 0x30], 0x40
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x402014
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x41
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x401e34
call fcn.0045e0b5
mov byte [esp + 0x38], bl
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427ea0
push ecx
mov dword [esi + 0x114], eax
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x43
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40200c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x44
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x401e34
call fcn.0045e0b5
lea edx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push edx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0x118]
mov byte [esp + 0x30], 0x46
call fcn.0045e180
mov byte [esp + 0x2c], bl
lea ecx, [esp + 0x10]
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x47
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x4020f0
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x48
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x401e34
call fcn.0045e0b5
lea eax, [esp + 0x1c]
mov byte [esp + 0x38], bl
push eax
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0x120]
mov byte [esp + 0x30], 0x4a
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x47e51c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x34], 0x4b
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x40271c
call fcn.0045e0b5
push ecx
mov byte [esp + 0x38], 0x4c
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x401e34
call fcn.0045e0b5
lea ecx, [esp + 0x1c]
mov byte [esp + 0x38], bl
push ecx
call fcn.004179e0
mov ecx, eax
add ecx, 0xc0
call fcn.00427dd0
push eax
lea ecx, [esi + 0x11c]
mov byte [esp + 0x30], 0x4e
call fcn.0045e180
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0045e047
mov ecx, dword [esp + 0x24]
mov byte [esi + 0x124], 1
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x20
ret