Function at 0x3482b0f6
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x348500b8
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x3485dd14]
xor eax, esp
mov dword [esp + 0x3c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x3485dd14]
xor eax, esp
push eax
lea eax, [esp + 0x54]
mov dword fs:[0], eax
mov eax, dword [esp + 0x68]
mov edi, dword [esp + 0x64]
xor esi, esi
push esi
push esi
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x1c], esi
mov dword [esp + 0x34], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], esi
call dword [sym.imp.OLEAUT32.dll_CreateErrorInfo]
mov eax, dword [edi + 8]
add eax, 0xf8
push eax
mov dword [esp + 0x38], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov ebp, dword [edi + 8]
mov ebx, dword [ebp + 0x14]
add ebx, 0xc
test dword [esp + 0x6c], 0xfffffffe
mov dword [esp + 0x5c], esi
je 0x3482b18e
mov esi, 0x80070057
jmp 0x3482b48d
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x3482b1b3
cmp dword [ecx + 0x10], 2
jne 0x3482b1a9
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x3482b1a9
cmp word [eax], 0
jne 0x3482b1b3
mov esi, 0x80040e76
jmp 0x3482b48d
mov eax, dword [ebp + 0x4c]
test eax, eax
je 0x3482b1fa
test ecx, ecx
je 0x3482b1fa
mov ecx, dword [ecx + 0x14]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x3482b1e7
test dx, dx
je 0x3482b1e3
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x3482b1e7
add eax, 4
add ecx, 4
test dx, dx
jne 0x3482b1c1
xor eax, eax
jmp 0x3482b1ec
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x3482b1fa
mov esi, 0x80040e76
jmp 0x3482b48d
cmp dword [ebp + 0x6c], 0
jne 0x3482b20a
mov esi, 0x80040e0c
jmp 0x3482b48d
cmp dword [esp + 0x18], 0
jne 0x3482b273
mov eax, dword [0x34866048]
mov edx, dword [eax]
push 0x82
lea ecx, [esp + 0x3c]
push eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x50], 2
call eax
test eax, eax
mov dword [esp + 0x4c], eax
jne 0x3482b245
mov esi, 0x8007000e
jmp 0x3482b48d
mov ecx, dword [edi + 8]
mov ecx, dword [ecx + 0x4c]
test ecx, ecx
je 0x3482b263
push 0x41
push eax
push ecx
call dword [sym.imp.MSO.dll_Ordinal_6877]
mov dword [esp + 0x30], 1
jmp 0x3482b273
push 0x40
push eax
mov dword [esp + 0x34], 1
call fcn.34834afd
test byte [esp + 0x6c], 1
je 0x3482b2bc
mov edx, dword [edi + 8]
mov eax, dword [edx + 0x4c]
test eax, eax
je 0x3482b28f
push eax
mov ecx, 0x34866048
call fcn.34828c49
mov eax, dword [edi + 8]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx + 0x14]
add eax, 0x4c
push eax
push edx
call fcn.3481cac1
mov esi, eax
test esi, esi
jl 0x3482b48d
mov eax, dword [edi + 8]
mov dword [eax + 0x48], 0
jmp 0x3482b48d
cmp dword [esp + 0x30], 0
jne 0x3482b38a
mov ecx, dword [edi + 8]
mov eax, dword [ecx + 0x34]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x1c]
mov edx, dword [edx + 0x14]
push edx
push ecx
push eax
call sub.acecore.dll_Ordinal_302
cmp eax, 0xfffffc0d
mov dword [esp + 0x14], eax
jg 0x3482b327
je 0x3482b31d
cmp eax, 0xfffff88d
je 0x3482b313
cmp eax, 0xfffffade
je 0x3482b309
cmp eax, 0xfffffae9
jne 0x3482b332
mov esi, 0x80040e68
jmp 0x3482b491
mov esi, 0x80040e09
jmp 0x3482b495
mov esi, 0x8007000e
jmp 0x3482b495
cmp eax, 0xfffffc16
je 0x3482b380
test eax, eax
je 0x3482b33c
mov esi, 0x80004005
jmp 0x3482b491
mov dword [esp + 0x28], 1
mov ecx, dword [edi + 8]
mov ecx, dword [ecx + 0x38]
test ecx, ecx
je 0x3482b353
call fcn.3484cf71
mov eax, dword [edi + 8]
mov edx, dword [eax + 0x34]
mov ecx, dword [edx + 0x58]
mov dword [eax + 0x38], ecx
mov edx, dword [edi + 8]
cmp dword [edx + 0x38], 0
je 0x3482b372
mov eax, edx
mov ecx, dword [eax + 0x38]
call fcn.3484ca97
test ebx, ebx
jne 0x3482b3b8
mov esi, 0x80004005
jmp 0x3482b48d
mov esi, 0x80040e76
jmp 0x3482b495
mov eax, dword [edi + 8]
mov ecx, dword [eax + 0x34]
mov eax, dword [eax + 0x4c]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0x10]
lea ebp, [esp + 0x1c]
push ebp
push eax
push edx
push ecx
call sub.acecore.dll_Ordinal_315
test eax, eax
mov dword [esp + 0x14], eax
jge 0x3482b344
mov esi, 0x80004005
jmp 0x3482b491
lea ecx, [esp + 0x24]
push ecx
mov ecx, dword [ebx + 0xc]
push 0xfd
call fcn.3481f579
mov ebp, 1
cmp dword [esp + 0x24], ebp
jne 0x3482b40f
mov ecx, dword [ebx + 0xc]
lea edx, [esp + 0x20]
push edx
push 0xf2
mov esi, ebp
call fcn.348131e9
mov ecx, dword [ebx + 0xc]
lea eax, [esp + 0x24]
push eax
push 0x119
call fcn.3481f579
cmp dword [esp + 0x24], ebp
jne 0x3482b406
mov esi, 3
cmp dword [esp + 0x20], 0
jne 0x3482b40f
xor esi, esi
mov edx, dword [edi + 8]
mov ebp, dword [edx + 0x6c]
mov eax, ebp
lea ebx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x3482b41d
mov ecx, dword [edx + 0x34]
mov ecx, dword [ecx + 0x10]
sub eax, ebx
lea edx, [esp + 0x14]
push edx
push esi
sar eax, 1
neg esi
sbb esi, esi
and esi, dword [esp + 0x28]
push esi
push eax
mov eax, dword [esp + 0x2c]
push ebp
push eax
push ecx
call fcn.3481cb23
mov esi, eax
test esi, esi
jl 0x3482b48d
mov ecx, dword [edi + 8]
mov dword [ecx + 0x48], 1
mov edx, dword [edi + 8]
cmp dword [edx + 0x4c], 0
je 0x3482b477
mov eax, edx
mov ecx, dword [eax + 0x4c]
push ecx
mov ecx, 0x34866048
call fcn.34828c49
mov edx, dword [edi + 8]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x14]
add edx, 0x4c
push edx
push ecx
call fcn.3481cac1
mov esi, eax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x3482b4aa
mov edx, dword [edi + 8]
push 0x348564ec
push eax
mov eax, dword [edx + 0x34]
push esi
push eax
call fcn.3481319b
jmp 0x3482b4c9
test esi, esi
jge 0x3482b4c9
mov ecx, dword [edi + 8]
mov eax, dword [ecx + 0x34]
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
push 0
push 0x348564ec
push esi
push edx
push eax
call fcn.3481cfc1
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x3482b4de
mov ecx, dword [edi + 8]
mov ecx, dword [ecx + 0x34]
push eax
call fcn.348171c1
test esi, esi
jge 0x3482b508
cmp dword [esp + 0x28], 1
jne 0x3482b508
mov edx, dword [edi + 8]
mov eax, dword [edx + 0x34]
mov edx, dword [esp + 0x18]
mov edx, dword [edx + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
push edx
push ecx
push eax
call sub.acecore.dll_Ordinal_126
mov dword [esp + 0x14], eax
cmp dword [esp + 0x2c], 1
jne 0x3482b531
mov eax, dword [esp + 0x18]
test eax, eax
je 0x3482b531
mov eax, dword [eax + 0x14]
test eax, eax
je 0x3482b531
mov ecx, dword [0x34866048]
test ecx, ecx
je 0x3482b531
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x14]
push ecx
call eax
mov eax, dword [esp + 0x34]
test eax, eax
je 0x3482b540
push eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov eax, esi
mov ecx, dword [esp + 0x54]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.3481f5cd
add esp, 0x4c
ret 0xc