Function at 0x424f38
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x465a93
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc8
push ebx
push esi
push edi
push str.insert.php_
lea ecx, [esp + 0x10]
call fcn.00405b00
mov ebx, dword [ebp + 8]
and dword [esp + 0xdc], 0
lea eax, [esp + 0x98]
push eax
call fcn.0041e865
mov byte [esp + 0xe0], 1
lea eax, [esp + 0x10]
mov dword [esp], 0x47c77c
push eax
lea eax, [esp + 0x68]
push eax
call fcn.00409750
add esp, 0xc
lea ecx, [esp + 0x98]
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0xe8], 2
call fcn.0041e0c0
add esp, 0xc
mov esi, 0x47b708
push esi
push eax
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0xe8], 3
call fcn.00409750
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 4
call fcn.00409280
lea ecx, [esp + 0x28]
call fcn.00407d30
lea ecx, [esp + 0x44]
call fcn.00407d30
lea ecx, [esp + 0x60]
mov byte [esp + 0xdc], 1
call fcn.00407d30
push str.md5
lea eax, [esp + 0x10]
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00409750
add esp, 0xc
push dword [ebp + 0xc]
mov byte [esp + 0xe0], 5
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.0041e0c0
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0xe8], 6
call fcn.00409750
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 7
call fcn.00409280
lea ecx, [esp + 0x60]
call fcn.00407d30
lea ecx, [esp + 0x44]
call fcn.00407d30
lea ecx, [esp + 0x28]
mov byte [esp + 0xdc], 1
call fcn.00407d30
push dword [ebp + 0x14]
lea eax, [esp + 0x80]
push dword [ebp + 0x10]
push str._lld
push eax
call fcn.0041f27c
mov edi, eax
push str.size
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0xf8], 8
call fcn.00409750
add esp, 0x1c
push edi
push eax
lea eax, [esp + 0x4c]
push eax
mov byte [esp + 0xe8], 9
call fcn.0041e0c0
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0xe8], 0xa
call fcn.00409750
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0xb
call fcn.00409280
lea ecx, [esp + 0x60]
call fcn.00407d30
lea ecx, [esp + 0x44]
call fcn.00407d30
lea ecx, [esp + 0x28]
call fcn.00407d30
lea ecx, [esp + 0x7c]
mov byte [esp + 0xdc], 1
call fcn.00407d30
push dword [ebp + 0x18]
lea eax, [esp + 0x2c]
push eax
call fcn.004246fd
mov edi, eax
push str.mode
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x54]
push eax
mov byte [esp + 0xf0], 0xc
call fcn.00409750
add esp, 0x14
push edi
push eax
lea eax, [esp + 0x68]
push eax
mov byte [esp + 0xe8], 0xd
call fcn.0041e0c0
add esp, 0xc
push esi
push eax
lea eax, [esp + 0x84]
push eax
mov byte [esp + 0xe8], 0xe
call fcn.00409750
add esp, 0xc
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0xe0], 0xf
call fcn.00409280
lea ecx, [esp + 0x7c]
call fcn.00407d30
lea ecx, [esp + 0x60]
call fcn.00407d30
lea ecx, [esp + 0x44]
call fcn.00407d30
lea ecx, [esp + 0x28]
call fcn.00407d30
lea ecx, [esp + 0xb4]
call fcn.00405580
lea eax, [esp + 0xb4]
push eax
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0xe4], 0x11
call fcn.00424d44
pop ecx
pop ecx
lea ecx, [esp + 0xb4]
mov bl, al
call fcn.00407d30
lea ecx, [esp + 0x98]
call fcn.00407d30
lea ecx, [esp + 0xc]
call fcn.00407d30
mov ecx, dword [esp + 0xd4]
pop edi
pop esi
mov al, bl
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret