Function at 0x42fbc0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x51e7d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push eax
mov dword [esp + 0x14], esi
call fcn.004626a0
mov dword [esi], 0x53193c
xor ebx, ebx
mov dword [esi + 0x2c], 0xffffffff
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x64], ebx
mov byte [esi + 0x68], bl
mov dword [esi + 0x6c], ebx
xor ecx, ecx
lea edx, [esi + 0x30]
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov byte [edx + 0x14], cl
mov dword [esp + 0x1c], ebx
mov dword [esi + 0x80], 0x531920
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x98], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0xdc], ebx
mov ebp, 0xf
mov dword [esi + 0xe0], ebp
mov byte [esi + 0xcc], bl
mov dword [esi + 0xfc], ebp
mov dword [esi + 0xf8], ebx
mov byte [esi + 0xe8], bl
mov dword [esi + 0xb0], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
mov dword [esi + 0xb4], eax
mov byte [esi + 0x100], bl
mov dword [esi + 0xb8], ebx
mov byte [esi + 0x101], bl
lea edx, [esi + 0x104]
xor eax, eax
mov ecx, edx
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
lea ecx, [edx + 0x14]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x28
lea edi, [edx + 0x28]
rep stosd dword es:[edi], eax
mov ecx, 0x12
lea edi, [edx + 0xc8]
rep stosd dword es:[edi], eax
mov dword [edx + 0x110], ebx
mov byte [edx + 0x114], bl
mov dword [esi + 0x224], ebx
mov dword [esi + 0x220], ebx
mov dword [esi + 0x27c], ebx
mov dword [esi + 0x278], ebx
mov byte [esp + 0x1c], 2
mov dword [esi + 0x284], ebx
mov dword [esi + 0x280], ebx
lea edi, [esi + 0x29c]
mov ecx, edi
call fcn.004c3d30
mov dword [edi], 0x531924
lea edi, [esi + 0x2b4]
mov ecx, edi
mov byte [esp + 0x1c], 3
call fcn.004c3d30
mov dword [edi], 0x53192c
mov dword [esi + 0x31c], ebp
mov dword [esi + 0x318], ebx
mov byte [esi + 0x308], bl
lea edi, [esi + 0x33c]
mov ecx, edi
mov byte [esp + 0x1c], 5
call fcn.00422640
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
lea edi, [esi + 0x360]
mov ecx, edi
mov byte [esp + 0x1c], 6
mov dword [esi + 0x358], ebx
mov word [esi + 0x35c], bx
call fcn.00422640
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
lea ebp, [esi + 0x370]
mov ecx, ebp
mov byte [esp + 0x1c], 7
call fcn.004497c0
lea ecx, [esi + 0x3a8]
mov byte [esp + 0x1c], 8
call fcn.004487d0
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x228], ebx
mov ecx, 0x10
xor eax, eax
lea edi, [esi + 0x22c]
rep stosd dword es:[edi], eax
mov dword [esi + 0x26c], ebx
mov dword [esi + 0x278], ebx
mov dword [esi + 0x27c], ebx
mov dword [esi + 0x280], ebx
mov dword [esi + 0x284], ebx
mov byte [esi + 0x21d], bl
mov byte [esi + 0x21e], bl
mov dword [esi + 0x220], ebx
mov dword [esi + 0x224], ebx
mov byte [esi + 0x271], bl
mov dword [esi + 0x274], ebx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x98], ebx
mov byte [esi + 0x9c], bl
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
mov byte [esi + 0x288], bl
mov dword [esi + 0x28c], ebx
mov dword [esi + 0x290], ebx
mov dword [esi + 0x294], ebx
mov dword [esi + 0x298], ebx
mov dword [esi + 0x2b0], esi
mov dword [esi + 0x2c8], esi
mov dword [esi + 0x2d0], ebx
mov dword [esi + 0x2d4], ebx
mov dword [esi + 0x2cc], ebx
mov byte [esi + 0x2d9], bl
mov byte [esi + 0x2da], bl
mov byte [esi + 0x2e1], bl
mov byte [esi + 0x2d8], bl
mov dword [esi + 0x2e4], ebx
mov dword [esi + 0x2e8], ebx
mov dword [esi + 0x7c], ebx
mov byte [esi + 0x2e2], bl
mov dword [esi + 0x2f0], ebx
mov dword [esi + 0x2ec], ebx
mov byte [esi + 0x2e0], bl
mov dword [esi + 0x2dc], ebx
mov byte [esi + 0xac], bl
mov byte [esi + 0x2f5], bl
mov dword [esi + 0x2f8], ebx
mov dword [esi + 0x2fc], ebx
mov byte [esi + 0x300], bl
mov byte [esi + 0x21c], bl
call dword [sym.imp.WINMM.dll_timeGetTime]
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x320], eax
pop edi
mov dword [esi + 0x354], ebx
mov dword [esi + 0x328], ebx
mov dword [esi + 0x324], ebx
mov byte [esi + 0x32c], bl
mov dword [esi + 0x334], ebx
mov byte [esi + 0x338], bl
mov byte [esi + 0x339], bl
mov byte [esi + 0x348], bl
mov dword [esi + 0x34c], ebx
mov dword [esi + 0x36c], ebx
mov dword [ebp], esi
mov dword [esi + 0x3f8], ebx
mov byte [esi + 0x350], 1
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4