Function at 0x64bf3f
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x103b2c5c
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push ebp
push esi
push edi
mov eax, dword [0x105623f8]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x20], esi
mov dword [esi], 0x104a180c
xor ebx, ebx
mov dword [esi + 4], ebx
mov byte [esi + 8], bl
mov dword [esi + 0xc], ebx
mov byte [esi + 0x10], bl
mov dword [esi + 0x14], ebx
mov byte [esi + 0x18], bl
mov dword [esi + 0x1c], ebx
mov byte [esi + 0x20], bl
mov dword [esi + 0x24], ebx
mov byte [esi + 0x28], bl
mov byte [esi + 0x2c], bl
mov byte [esi + 0x2d], bl
mov byte [esi + 0x2e], bl
mov byte [esi + 0x2f], bl
lea edi, [esi + 4]
mov byte [esi + 0x30], bl
mov byte [esi + 0x31], bl
mov byte [esi + 0x32], bl
mov byte [esi + 0x33], bl
lea ebp, [esi + 0x2c]
mov byte [esi + 0x34], bl
mov byte [esi + 0x35], bl
mov byte [esi + 0x36], bl
mov byte [esi + 0x37], bl
mov byte [esi + 0x38], bl
mov byte [esi + 0x39], bl
lea ecx, [esi + 0x3c]
mov byte [esi + 0x3a], bl
mov byte [esi + 0x3b], bl
call fcn.0057fe9f
mov dword [esp + 0x2c], ebx
mov dword [esi + 0x54], 0x10259a00
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], 0x10259a00
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], 0x10259a00
mov dword [esi + 0x68], ebx
mov eax, dword [esp + 0x34]
mov byte [ebp], bl
mov byte [ebp + 1], bl
lea ecx, [esi + 0x2e]
mov byte [ecx], bl
mov byte [ecx + 1], bl
mov edx, dword [eax + 8]
mov dword [esp + 0x1c], edx
lea edx, [esp + 0x18]
mov byte [esp + 0x2c], 3
cmp edi, edx
je 0x64c01d
mov edx, dword [eax + 4]
mov dword [edi], edx
add edi, 4
lea edx, [esp + 0x1c]
cmp edi, edx
je 0x64c02e
mov dl, byte [esp + 0x1c]
mov byte [edi], dl
mov edx, dword [eax + 0x10]
mov dword [esp + 0x1c], edx
lea edi, [esp + 0x18]
lea edx, [esi + 0xc]
cmp edx, edi
je 0x64c045
mov edi, dword [eax + 0xc]
mov dword [edx], edi
add edx, 4
lea edi, [esp + 0x1c]
mov dword [esp + 0x14], edx
cmp edx, edi
je 0x64c05e
mov dl, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov byte [edi], dl
mov edx, dword [eax + 0x18]
mov dword [esp + 0x1c], edx
lea edi, [esp + 0x18]
lea edx, [esi + 0x14]
cmp edx, edi
je 0x64c075
mov edi, dword [eax + 0x14]
mov dword [edx], edi
add edx, 4
lea edi, [esp + 0x1c]
mov dword [esp + 0x14], edx
cmp edx, edi
je 0x64c08e
mov dl, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov byte [edi], dl
mov edx, dword [eax + 0x20]
mov dword [esp + 0x1c], edx
lea edi, [esp + 0x18]
lea edx, [esi + 0x1c]
cmp edx, edi
je 0x64c0a5
mov edi, dword [eax + 0x1c]
mov dword [edx], edi
add edx, 4
lea edi, [esp + 0x1c]
mov dword [esp + 0x14], edx
cmp edx, edi
je 0x64c0be
mov dl, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov byte [edi], dl
mov edx, dword [eax + 0x28]
mov dword [esp + 0x1c], edx
lea edi, [esp + 0x18]
lea edx, [esi + 0x24]
cmp edx, edi
je 0x64c0d5
mov edi, dword [eax + 0x24]
mov dword [edx], edi
add edx, 4
lea edi, [esp + 0x1c]
mov dword [esp + 0x14], edx
cmp edx, edi
je 0x64c0ee
mov dl, byte [esp + 0x1c]
mov edi, dword [esp + 0x14]
mov byte [edi], dl
mov dx, word [eax + 0x2c]
lea edi, [esp + 0x14]
cmp ebp, edi
je 0x64c0fd
mov byte [ebp], dl
inc ebp
lea edi, [esp + 0x15]
cmp ebp, edi
je 0x64c10a
mov edi, ebp
mov byte [edi], dh
mov dx, word [eax + 0x2e]
lea edi, [esp + 0x14]
cmp ecx, edi
je 0x64c118
mov byte [ecx], dl
lea edi, [ecx + 1]
lea ecx, [esp + 0x15]
cmp edi, ecx
je 0x64c125
mov byte [edi], dh
mov cx, word [eax + 0x30]
lea edx, [esp + 0x14]
lea edi, [esi + 0x30]
cmp edi, edx
je 0x64c136
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c141
mov byte [edi], ch
mov cx, word [eax + 0x32]
lea edx, [esp + 0x14]
lea edi, [esi + 0x32]
cmp edi, edx
je 0x64c152
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c15d
mov byte [edi], ch
mov cx, word [eax + 0x34]
lea edx, [esp + 0x14]
lea edi, [esi + 0x34]
cmp edi, edx
je 0x64c16e
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c179
mov byte [edi], ch
mov cx, word [eax + 0x36]
lea edx, [esp + 0x14]
lea edi, [esi + 0x36]
cmp edi, edx
je 0x64c18a
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c195
mov byte [edi], ch
mov cx, word [eax + 0x38]
lea edx, [esp + 0x14]
lea edi, [esi + 0x38]
cmp edi, edx
je 0x64c1a6
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c1b1
mov byte [edi], ch
mov cx, word [eax + 0x3a]
lea edx, [esp + 0x14]
lea edi, [esi + 0x3a]
cmp edi, edx
je 0x64c1c2
mov byte [edi], cl
inc edi
lea edx, [esp + 0x15]
cmp edi, edx
je 0x64c1cd
mov byte [edi], ch
add eax, 0x3c
push eax
lea ecx, [esi + 0x3c]
call fcn.005c8aef
mov edi, dword [esp + 0x34]
cmp dword [edi + 0x58], ebx
je 0x64c1ed
mov ecx, dword [edi + 0x58]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
jmp 0x64c1ef
xor eax, eax
lea ecx, [esi + 0x58]
lea edx, [esp + 0x1c]
cmp ecx, edx
je 0x64c200
mov edx, dword [ecx]
mov dword [ecx], eax
mov eax, edx
push eax
call fcn.0065d66f
add esp, 4
cmp dword [edi + 0x60], ebx
je 0x64c219
mov ecx, dword [edi + 0x60]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
jmp 0x64c21b
xor eax, eax
lea ecx, [esi + 0x60]
lea edx, [esp + 0x1c]
cmp ecx, edx
je 0x64c22c
mov edx, dword [ecx]
mov dword [ecx], eax
mov eax, edx
push eax
call fcn.0065d66f
add esp, 4
cmp dword [edi + 0x68], ebx
je 0x64c245
mov ecx, dword [edi + 0x68]
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
jmp 0x64c247
xor eax, eax
lea ecx, [esi + 0x68]
lea edx, [esp + 0x1c]
cmp ecx, edx
je 0x64c258
mov edx, dword [ecx]
mov dword [ecx], eax
mov eax, edx
push eax
call fcn.0065d66f
add esp, 4
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret 4