Function at 0x4493b0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x4b5848
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov esi, ecx
push ebx
mov dword [esp + 0x14], esi
call fcn.00453c80
mov dword [esp + 0x2c], ebx
lea edx, [esi + 0x538]
mov ebp, 0x20
mov ecx, 0x25b
xor eax, eax
mov edi, edx
add edx, 0x96c
rep stosd dword es:[edi], eax
mov eax, 0x3e8
mov dword [edx - 4], 0x25d80c37
mov dword [edx - 0x118], eax
mov dword [edx - 0x114], eax
mov dword [edx - 0x110], ebx
dec ebp
jne 0x4493e9
lea edx, [esi + 0x132b8]
mov ebp, 0x100
mov ecx, 0x17
xor eax, eax
mov edi, edx
add edx, 0x5c
rep stosd dword es:[edi], eax
mov dword [edx - 0x48], 0x25d80c37
dec ebp
jne 0x449426
lea eax, [esi + 0x18eb8]
mov ecx, 0x100
mov edx, 0xf47a3b51
mov ebp, eax
xor edi, edi
add eax, 0x10
dec ecx
mov dword [ebp], edi
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
mov dword [ebp + 0xc], edi
mov dword [eax - 4], edx
jne 0x44944e
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1a4ac]
call fcn.00479eec
mov eax, 0x3e8
mov ebp, 0x80000000
mov ecx, 0x186a0
mov dword [esi + 0x1a4f4], eax
mov dword [esi + 0x1a4f8], ebp
mov dword [esi + 0x1a4fc], ebp
mov dword [esi + 0x1a504], ebx
mov dword [esi + 0x1a500], ecx
mov dword [esi + 0x1a508], ebx
push ebx
mov dword [esi + 0x1a518], ecx
or edi, 0xffffffff
push ebx
mov dword [esi + 0x1a50c], eax
mov dword [esi + 0x1a510], ebp
mov dword [esi + 0x1a514], ebp
mov dword [esi + 0x1a51c], ebx
mov dword [esi + 0x1a520], ebx
push ebx
lea ecx, [esi + 0x1a530]
mov byte [esp + 0x38], 1
mov dword [esi + 0x1a4b4], 0x1000001
mov dword [esi + 0x1a4b8], ebx
mov dword [esi + 0x1a4bc], edi
mov dword [esi + 0x1a4c0], ebx
mov dword [esi + 0x1a4c4], edi
mov dword [esi + 0x1a4c8], edi
mov dword [esi + 0x1a4cc], edi
mov dword [esi + 0x1a4d8], 0xbf800000
mov dword [esi + 0x1a4d0], ebx
mov dword [esi + 0x1a4dc], edi
mov dword [esi + 0x1a4e0], edi
mov dword [esi + 0x1a4e4], edi
mov dword [esi + 0x1a4e8], edi
mov dword [esi + 0x1a4ec], edi
mov dword [esi + 0x1a52c], 0xab53e06f
mov dword [esi + 0x1a4d4], ebx
mov dword [esi + 0x1a528], ebx
mov dword [esi + 0x1a4f0], ebx
mov dword [esi + 0x1a524], ebx
call fcn.00479eec
mov ecx, 0x3e8
mov eax, 0x186a0
mov dword [esi + 0x1a578], ecx
mov dword [esi + 0x1a57c], ebp
mov dword [esi + 0x1a580], ebp
mov dword [esi + 0x1a588], ebx
mov dword [esi + 0x1a584], eax
mov dword [esi + 0x1a58c], ebx
mov dword [esi + 0x1a590], ecx
mov dword [esi + 0x1a594], ebp
mov dword [esi + 0x1a598], ebp
mov dword [esi + 0x1a5a0], ebx
mov dword [esi + 0x1a59c], eax
mov dword [esi + 0x1a5a4], ebx
mov byte [esp + 0x2c], 2
mov dword [esi + 0x1a538], 0x1000001
mov dword [esi + 0x1a53c], ebx
mov dword [esi + 0x1a540], edi
mov dword [esi + 0x1a544], ebx
mov dword [esi + 0x1a548], edi
mov dword [esi + 0x1a54c], edi
mov dword [esi + 0x1a550], edi
mov dword [esi + 0x1a55c], 0xbf800000
mov dword [esi + 0x1a554], ebx
mov dword [esi + 0x1a560], edi
mov dword [esi + 0x1a564], edi
mov dword [esi + 0x1a568], edi
mov dword [esi + 0x1a56c], edi
mov dword [esi + 0x1a570], edi
mov dword [esi + 0x1a5b0], 0xab53e06f
mov dword [esi + 0x1a558], ebx
mov dword [esi + 0x1a5ac], ebx
mov dword [esi + 0x1a574], ebx
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1b1cc]
mov dword [esi + 0x1a5a8], ebx
call fcn.00479eec
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1b2e0]
mov byte [esp + 0x38], 3
call fcn.00479eec
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1b2ec]
mov byte [esp + 0x38], 4
call fcn.00479eec
push ebx
push ebx
push ebx
lea ecx, [esi + 0x1c764]
mov byte [esp + 0x38], 5
call fcn.00479eec
lea ebp, [esi + 0x1d784]
push ebx
push ebx
push ebx
lea ecx, [ebp + 4]
mov byte [esp + 0x38], 6
mov dword [esp + 0x20], ebp
call fcn.00479eec
lea eax, [ebp + 4]
push ebx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x34], 7
mov dword [ebp + 0xc], ebx
call sub.MFC42.DLL_CSingleLock::CSingleLock
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 8
call sub.MFC42.DLL_CSingleLock::Lock
mov eax, dword [ebp + 0xc]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x18]
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x10], ebx
mov byte [ebp], bl
mov byte [esp + 0x2c], 7
call sub.MFC42.DLL_CSingleLock::Unlock
lea edi, [esi + 0x1d7a4]
push ebx
push ebx
push ebx
lea ecx, [edi + 4]
mov byte [esp + 0x38], 9
mov dword [esp + 0x20], edi
call fcn.00479eec
lea eax, [edi + 4]
push ebx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x34], 0xa
mov dword [edi + 0xc], ebx
call sub.MFC42.DLL_CSingleLock::CSingleLock
mov byte [esp + 0x2c], 0xb
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
call sub.MFC42.DLL_CSingleLock::Lock
mov eax, dword [edi + 0xc]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x18]
mov dword [edi + 0xc], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x10], ebx
mov byte [edi], bl
mov byte [esp + 0x2c], 0xa
call sub.MFC42.DLL_CSingleLock::Unlock
lea edi, [esi + 0x1dc40]
push ebx
push ebx
push ebx
lea ecx, [edi + 0x408]
mov byte [esp + 0x38], 0xc
mov dword [esp + 0x20], edi
call fcn.00479eec
push 0x400
mov byte [esp + 0x30], 0xd
mov dword [edi + 0x41c], ebx
mov dword [edi + 0x404], ebx
mov dword [edi + 0x410], 0x400
mov dword [edi + 0x414], ebx
call sub.MFC42.DLL_operatornew
mov dword [edi], eax
mov dword [edi + 0x418], ebx
mov dword [edi + 0x420], ebx
mov ecx, 0x100
xor eax, eax
add edi, 4
add esp, 4
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x1e068]
mov byte [esp + 0x2c], 0xe
call fcn.004622f0
lea ecx, [esi + 0x1e4e8]
call fcn.004622f0
push ebx
push ebx
push ebx
lea ecx, [esi + 0x229ec]
call fcn.00479eec
mov byte [esi + 0x1a080], bl
mov byte [esi + 0x19eb8], bl
mov byte [esi + 0x19f39], bl
mov byte [esi + 0x1adc9], bl
mov byte [esi + 0x1b1d4], bl
mov byte [esi + 0x1d819], bl
mov byte [esi + 0x1e994], bl
mov dword [esi + 0x1dc1c], ebx
mov dword [esi + 0x19f5c], ebx
mov dword [esi + 0x19fe8], ebx
mov dword [esi + 0x19fec], ebx
mov dword [esi + 0x1a074], ebx
mov dword [esi + 0x1a078], ebx
mov dword [esi + 0x1a07c], ebx
mov dword [esi + 0x1a484], ebx
mov dword [esi + 0x1a488], ebx
mov dword [esi + 0x1a48c], ebx
mov dword [esi + 0x1e990], ebx
mov dword [esi + 0x1b2e8], ebx
mov dword [esi + 0x1adc4], ebx
mov dword [esi + 0x1a5c0], 0xffffffff
mov byte [esi + 0x1adc8], bl
mov dword [esi + 0x19f60], ebx
mov byte [esp + 0x2c], 0xf
mov byte [esi + 0x1d7d0], bl
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1a5c4]
rep stosd dword es:[edi], eax
mov ecx, 0x100
lea edi, [esi + 0x1a9c4]
rep stosd dword es:[edi], eax
mov dword [esi + 0x1dc20], ebx
mov byte [esi + 0x1dc28], bl
mov ecx, 0x80000000
mov dword [esi + 0x1dc24], ebx
mov eax, 0x7fffffff
mov dword [esi + 0x1e968], ecx
mov dword [esi + 0x1e96c], eax
mov dword [esi + 0x1e970], ecx
mov dword [esi + 0x1e974], eax
mov dword [esi + 0x1dc2c], ebx
mov dword [esi + 0x1dc30], ebx
mov dword [esi + 0x1dc34], ebx
mov dword [esi + 0x1dc38], ebx
mov byte [esi + 0x1d7d1], bl
mov dword [esi + 0x1e978], ebx
mov dword [esi + 0x1e97c], ebx
mov dword [esi + 0x1e980], ebx
mov dword [esi + 0x1e984], ebx
mov dword [esi + 0x1e988], ebx
mov dword [esi + 0x1e98c], ebx
mov dword [esi + 0x1a5b4], ebx
mov dword [esi + 0x1e9d8], ebx
mov byte [esi + 0x1c76c], bl
mov dword [esi + 0x1c770], ebx
mov dword [esi + 0x1c774], ebx
mov dword [esi + 0x1c778], ebx
mov dword [esi + 0x1e9dc], ebx
mov byte [esi + 0x1b2f4], 1
mov ecx, esi
mov dword [esi + 0x1bb50], ebx
mov byte [esi + 0x1bb00], bl
mov dword [esi + 0x1a498], ebx
mov dword [esi + 0x1a49c], ebx
mov dword [esi + 0x1a4a4], ebx
mov byte [esi + 0x1a031], bl
mov byte [esi + 0x1a051], bl
call fcn.0044be90
lea eax, [ebp + 4]
push ebx
push eax
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CSingleLock::CSingleLock
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0x10
call sub.MFC42.DLL_CSingleLock::Lock
mov eax, dword [ebp + 0xc]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
lea ecx, [esp + 0x18]
mov dword [ebp + 0xc], ebx
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x10], ebx
mov byte [ebp], bl
mov byte [esp + 0x2c], 0xf
call sub.MFC42.DLL_CSingleLock::Unlock
lea ecx, [esi + 0x1d7a8]
push ebx
push ecx
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CSingleLock::CSingleLock
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0x11
call sub.MFC42.DLL_CSingleLock::Lock
mov eax, dword [esi + 0x1d7b0]
push eax
call sub.MFC42.DLL_operatordelete
add esp, 4
mov dword [esi + 0x1d7b0], ebx
mov dword [esi + 0x1d7b8], ebx
mov dword [esi + 0x1d7bc], ebx
lea ecx, [esp + 0x18]
mov dword [esi + 0x1d7c0], ebx
mov dword [esi + 0x1d7b4], ebx
mov byte [esi + 0x1d7a4], bl
mov byte [esp + 0x2c], 0xf
call sub.MFC42.DLL_CSingleLock::Unlock
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1bf60]
mov dword [esi + 0x1bf5c], ebx
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1c361]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1c77c]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1cb7d]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x100
xor eax, eax
lea edi, [esi + 0x1cf7e]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esi + 0x1d37f]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esi + 0x1d480]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esi + 0x1d581]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x40
xor eax, eax
lea edi, [esi + 0x1d682]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, 0x800
xor eax, eax
lea edi, [esi + 0x1e9e0]
rep stosd dword es:[edi], eax
mov ecx, 0x800
lea edi, [esi + 0x209e4]
mov dword [esi + 0x209e0], ebx
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [esi + 0x22a08]
mov dword [esi + 0x229e4], ebx
mov dword [esi + 0x229e8], ebx
mov dword [esi + 0x229f4], ebx
mov dword [esi + 0x229f8], ebx
mov byte [esi + 0x229fc], bl
mov dword [esi + 0x22a00], ebx
mov dword [esi + 0x22a04], ebx
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [esi + 0x22a28]
rep stosd dword es:[edi], eax
mov byte [esi + 0x22a48], bl
mov dword [esi + 0x22a4c], ebx
mov byte [esi + 0x22a54], bl
mov byte [esi + 0x22e55], bl
mov byte [esi + 0x22e95], bl
mov dword [esi + 0x22a50], ebx
mov dword [esi + 0x1a4a8], ebx
mov dword [esi + 0x22e98], ebx
mov dword [esi + 0x233c0], ebx
mov ecx, esi
mov dword [esi + 0x22e9c], ebx
mov dword [esi + 0x22ea0], ebx
mov dword [esi + 0x22ea4], 4
mov byte [esi + 0x22fb1], bl
mov byte [esi + 0x233bc], bl
mov byte [esi + 0x233cc], bl
mov dword [esi + 0x233c4], ebx
mov dword [esi + 0x233c8], ebx
call fcn.00449ef0
mov ecx, dword [esp + 0x24]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret