Function at 0x10001fa0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10045d63
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 8
push esi
push edi
mov eax, dword [0x10052040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x18], esi
lea ecx, [esi + 8]
call fcn.100034f0
mov dword [ebp - 4], 0
mov dword [esi + 0x3784], 0
mov dword [esi + 0x3780], 0
mov dword [esi + 0x3788], 0
mov dword [esi + 0x3790], 0
mov dword [esi + 0x378c], 0
mov dword [esi + 0x3794], 0
lea ecx, [esi + 0x3798]
mov byte [ebp - 4], 2
call fcn.10003330
lea ecx, [esi + 0x3bbc]
call fcn.1001fe10
mov dword [esi + 0x3dd4], 0
mov dword [esi + 0x3dd0], 0
mov dword [esi + 0x3dd8], 0
mov dword [esi + 0x3de0], 0
mov dword [esi + 0x3ddc], 0
mov dword [esi + 0x3de4], 0
mov dword [esi + 0x3dec], 0
mov dword [esi + 0x3de8], 0
mov dword [esi + 0x3df0], 0
mov dword [esi + 0x3df8], 0
mov dword [esi + 0x3df4], 0
mov dword [esi + 0x3dfc], 0
mov dword [esi + 0x3e04], 0
mov dword [esi + 0x3e00], 0
mov dword [esi + 0x3e08], 0
mov dword [esi + 0x3e10], 0
lea eax, [esi + 0x3ec0]
mov dword [esi + 0x3e14], 0
xorps xmm0, xmm0
mov dword [esi + 0x3e2c], 0
mov dword [esi + 0x3e30], 0
mov dword [esi + 0x3e64], 0
mov dword [esi + 0x3e68], 0
movups xmmword [esi + 0x3e90], xmm0
mov dword [esi + 0x3ea0], 0
movups xmmword [esi + 0x3eac], xmm0
mov dword [esi + 0x3ebc], 0
push 0x3c
push 0
push eax
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
call sub.VCRUNTIME140.dll_memset
lea eax, [esi + 0x3efc]
add esp, 0xc
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x3c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0
push 0x60
push 0
push eax
mov dword [eax + 0x58], 0
mov dword [eax + 0x5c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x3f60], 0
mov dword [esi + 0x3f5c], 0
mov dword [esi + 0x3f64], 0
mov dword [esi + 0x3f6c], 0
mov dword [esi + 0x3f68], 0
mov dword [esi + 0x3f70], 0
mov dword [esi + 0x3f78], 0
mov dword [esi + 0x3f74], 0
mov dword [esi + 0x3f7c], 0
mov dword [esi + 0x3f84], 0
mov dword [esi + 0x3f80], 0
mov dword [esi + 0x3f88], 0
mov dword [esi + 0x3f90], 0
mov dword [esi + 0x3f8c], 0
mov dword [esi + 0x3f94], 0
mov dword [esi + 0x3f9c], 0
mov dword [esi + 0x3f98], 0
mov dword [esi + 0x3fa0], 0
mov dword [esi + 0x3fa8], 0
mov dword [esi + 0x3fa4], 0
mov dword [esi + 0x3fac], 0
mov dword [esi + 0x3fb4], 0
mov dword [esi + 0x3fb0], 0
mov dword [esi + 0x3fb8], 0
mov dword [esi + 0x3fc4], 0
mov dword [esi + 0x3fc0], 0
mov dword [esi + 0x3fc8], 0
mov dword [esi + 0x4014], 0
mov dword [esi + 0x4018], 0
mov dword [esi + 0x401c], 0
mov dword [esi + 0x4020], 0
mov dword [esi + 0x4040], 0
mov dword [esi + 0x4044], 0
mov dword [esi + 0x4048], 0
mov dword [esi + 0x404c], 0
mov dword [esi + 0x4050], 0
mov dword [esi + 0x4054], 0
mov dword [esi + 0x4058], 0
mov dword [esi + 0x405c], 0
mov dword [esi + 0x4078], 0
mov dword [esi + 0x407c], 0
mov dword [esi + 0x4080], 0
mov dword [esi + 0x4084], 0
mov dword [esi + 0x406c], 0
mov dword [esi + 0x4074], 0
mov dword [esi + 0x4070], 0
mov dword [esi + 0x4088], 0
mov dword [esi + 0x4094], 0x7f7fffff
mov dword [esi + 0x4090], 0x7f7fffff
mov dword [esi + 0x408c], 0x7f7fffff
mov dword [esi + 0x40a4], 0
mov dword [esi + 0x40a8], 0
mov dword [esi + 0x40ac], 0
mov dword [esi + 0x40b0], 0
mov dword [esi + 0x4098], 0
mov dword [esi + 0x40a0], 0
mov dword [esi + 0x409c], 0
mov dword [esi + 0x40b4], 0
mov dword [esi + 0x40c0], 0x7f7fffff
mov dword [esi + 0x40bc], 0x7f7fffff
mov dword [esi + 0x40b8], 0x7f7fffff
mov dword [esi + 0x40d0], 0
mov dword [esi + 0x40d4], 0
mov dword [esi + 0x40d8], 0
mov dword [esi + 0x40dc], 0
mov dword [esi + 0x40c4], 0
xorps xmm0, xmm0
mov dword [esi + 0x40cc], 0
mov dword [esi + 0x40c8], 0
mov dword [esi + 0x40e0], 0
mov dword [esi + 0x40ec], 0x7f7fffff
mov dword [esi + 0x40e8], 0x7f7fffff
mov dword [esi + 0x40e4], 0x7f7fffff
mov dword [esi + 0x40fc], 0
mov dword [esi + 0x4100], 0
mov dword [esi + 0x4104], 0
mov dword [esi + 0x4108], 0
mov dword [esi + 0x40f0], 0
mov dword [esi + 0x40f8], 0
mov dword [esi + 0x40f4], 0
mov dword [esi + 0x410c], 0
mov dword [esi + 0x4118], 0x7f7fffff
mov dword [esi + 0x4114], 0x7f7fffff
mov dword [esi + 0x4110], 0x7f7fffff
mov dword [esi + 0x4134], 0
mov dword [esi + 0x4138], 0
mov dword [esi + 0x413c], 0
mov dword [esi + 0x4140], 0
mov dword [esi + 0x4168], 0
mov dword [esi + 0x4164], 0
mov dword [esi + 0x415c], 0
mov dword [esi + 0x4160], 0
movups xmmword [esi + 0x4170], xmm0
movups xmmword [esi + 0x4180], xmm0
mov word [esi + 0x4190], 0
mov dword [esi + 0x416c], 0xffffffff
mov byte [esi + 0x4192], 0
mov dword [esi + 0x4194], 0
mov dword [esi + 0x4198], 0
mov dword [esi + 0x419c], 0
mov dword [esi + 0x41a0], 0
mov dword [esi + 0x41c4], 0
mov dword [esi + 0x41c0], 0
mov dword [esi + 0x41c8], 0
mov dword [esi + 0x41e4], 0
mov dword [esi + 0x41e0], 0
mov dword [esi + 0x41e8], 0
mov dword [esi + 0x41f8], 0
mov dword [esi + 0x41f4], 0
mov dword [esi + 0x41fc], 0
mov dword [esi + 0x4204], 0
mov dword [esi + 0x4200], 0
mov dword [esi + 0x4208], 0
mov dword [esi + 0x4210], 0
mov dword [esi + 0x420c], 0
mov dword [esi + 0x4214], 0
mov dword [esi + 0x421c], 0
mov dword [esi + 0x4218], 0
mov dword [esi + 0x4224], 0
mov dword [esi + 0x4220], 0
mov dword [esi + 0x4228], 0
mov dword [esi + 0x4230], 0
mov dword [esi + 0x422c], 0
mov dword [esi + 0x4234], 0
mov dword [esi + 0x4240], 0
mov dword [esi + 0x423c], 0
mov dword [esi + 0x4244], 0
mov dword [esi + 0x424c], 0
mov dword [esi + 0x4248], 0
mov dword [esi + 0x4250], 0
mov dword [esi + 0x4258], 0
mov dword [esi + 0x4254], 0
mov dword [esi + 0x4260], 0
mov dword [esi + 0x425c], 0
mov dword [esi + 0x4264], 0
mov dword [esi + 0x426c], 0
mov dword [esi + 0x4268], 0
mov dword [esi + 0x4270], 0
lea eax, [esi + 0x428c]
mov dword [esi + 0x4284], 0
mov dword [esi + 0x4288], 0
push 0xe74
push 0
push eax
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x2c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [esi + 0x5100]
call fcn.10025490
lea eax, [esi + 0x517c]
mov dword [esi + 0x516c], 0
mov dword [esi + 0x5170], 0
mov dword [esi + 0x5174], 0
mov dword [esi + 0x5178], 0
push 0x30
push 0
push eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x51d0], 0
mov dword [esi + 0x51cc], 0
mov dword [esi + 0x51d4], 0
mov dword [esi + 0x51dc], 0
mov dword [esi + 0x51d8], 0
mov dword [esi + 0x51e0], 0
mov dword [esi + 0x51e8], 0
xorps xmm0, xmm0
mov dword [esi + 0x51ec], 0
movups xmmword [esi + 0x51e4], xmm0
mov dword [esi + 0x51f8], 0
mov dword [esi + 0x51fc], 0
movups xmmword [esi + 0x51f4], xmm0
mov dword [esi + 0x5210], 0
mov dword [esi + 0x520c], 0
mov dword [esi + 0x5214], 0
mov dword [esi + 0x521c], 0
mov dword [esi + 0x5218], 0
mov dword [esi + 0x5220], 0
mov dword [esi + 0x5228], 0
mov dword [esi + 0x5224], 0
mov dword [esi + 0x522c], 0
mov dword [esi + 0x5234], 0
mov dword [esi + 0x5230], 0
mov dword [esi + 0x5238], 0
mov dword [esi + 0x5240], 0
mov dword [esi + 0x523c], 0
mov dword [esi + 0x5244], 0
mov dword [esi + 0x525c], 0
mov dword [esi + 0x5258], 0
mov dword [esi + 0x5260], 0
mov dword [esi + 0x5288], 0
mov dword [esi + 0x5284], 0
mov dword [esi + 0x528c], 0
mov dword [esi + 0x5299], 0
mov byte [esi + 0x5298], 0
mov word [esi + 0x529d], 0x101
mov dword [esi + 0x52a4], 0xffffffff
mov dword [esi + 0x52a0], 0xffffffff
mov dword [esi + 0x52b8], 0
mov dword [esi + 0x52b4], 0
mov dword [esi + 0x52bc], 0
movups xmmword [esi + 0x52a8], xmm0
movups xmmword [esi + 0x52b8], xmm0
mov dword [esi + 0x52c4], 0xff7fffff
mov dword [esi + 0x53d4], 0
mov dword [esi + 0x53d0], 0
mov dword [esi + 0x53d8], 0
mov eax, dword [0x100528f0]
mov word [esi], 0x100
mov dword [esi + 0x3bb0], 0
mov dword [esi + 0x3bb8], 0
mov dword [esi + 0x3bb4], 0
test eax, eax
je 0x10002a68
inc dword [eax + 0xb0]
push 0x468
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
lea eax, [ebp - 0x11]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], edi
test edi, edi
je 0x10002b1f
mov dword [edi + 0x28], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
lea eax, [edi + 0x58]
mov ecx, 0x40
nop dword [eax]
mov dword [eax], 0
lea eax, [eax + 0x10]
mov dword [eax - 0xc], 0
mov dword [eax - 8], 0
mov dword [eax - 4], 0
sub ecx, 1
jne 0x10002ad0
push 0x468
push ecx
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [edi + 0xc], 1
mov dword [edi + 0x464], 0xffffffff
mov dword [edi + 0x460], 0xffffffff
jmp 0x10002b21
xor edi, edi
mov dword [esi + 0x48], edi
xorps xmm0, xmm0
movsd qword [esi + 0x3db0], xmm0
mov dword [esi + 0x3db8], 0
mov dword [esi + 0x3dc0], 0xffffffff
mov dword [esi + 0x3dbc], 0xffffffff
mov dword [esi + 0x3dc5], 0
mov byte [esi + 0x3dc4], 0
mov dword [esi + 0x3dcc], 0
mov dword [esi + 0x3e0c], 0
mov dword [esi + 0x3e18], 0
mov dword [esi + 0x3e1c], 0
mov dword [esi + 0x3e20], 0
mov dword [esi + 0x3e24], 0
mov dword [esi + 0x3e28], 0
mov dword [esi + 0x3e34], 0
mov dword [esi + 0x3e38], 0
mov dword [esi + 0x3e40], 0
mov dword [esi + 0x3e3c], 0
mov dword [esi + 0x3e44], 0
mov dword [esi + 0x3e4c], 0
mov dword [esi + 0x3e48], 0
mov dword [esi + 0x3e50], 0
mov dword [esi + 0x3e54], 0
mov dword [esi + 0x3e58], 0
mov dword [esi + 0x3e5c], 0
mov word [esi + 0x3e60], 0
mov dword [esi + 0x3e64], 0xbf800000
mov dword [esi + 0x3e68], 0xbf800000
mov dword [esi + 0x3e6c], 0
mov dword [esi + 0x3e70], 0
mov dword [esi + 0x3e74], 0xffffffff
mov dword [esi + 0x3e78], 0
mov word [esi + 0x3e7c], 0
mov dword [esi + 0x3e80], 0
mov dword [esi + 0x3e84], 0
mov dword [esi + 0x3e88], 0
mov dword [esi + 0x3e8c], 0
movups xmmword [esi + 0x3e90], xmm0
mov dword [esi + 0x3ea0], 0
mov dword [esi + 0x3ea4], 0
mov dword [esi + 0x3ea8], 0
mov dword [esi + 0x3fbc], 0
mov dword [esi + 0x3fcc], 0
mov dword [esi + 0x3fe4], 0
mov dword [esi + 0x3fe0], 0
mov dword [esi + 0x3fdc], 0
mov dword [esi + 0x3fd8], 0
mov dword [esi + 0x3fd4], 0
mov dword [esi + 0x3fd0], 0
mov dword [esi + 0x3ff8], 0
mov dword [esi + 0x3ff0], 0
mov dword [esi + 0x3fec], 0
mov dword [esi + 0x3ffc], 0
mov dword [esi + 0x3fe8], 0
mov dword [esi + 0x3ff4], 0
mov dword [esi + 0x4000], 0
mov dword [esi + 0x4004], 0
mov dword [esi + 0x4008], 0x10000
mov word [esi + 0x400c], 0
mov byte [esi + 0x400e], 0
mov dword [esi + 0x4010], 0
mov word [esi + 0x4024], 0
mov byte [esi + 0x4026], 0
mov dword [esi + 0x4028], 0
mov dword [esi + 0x402c], 0
mov dword [esi + 0x4030], 0
mov dword [esi + 0x403c], 0xffffffff
mov dword [esi + 0x4038], 0xffffffff
mov dword [esi + 0x4034], 0xffffffff
mov dword [esi + 0x4060], 0
mov dword [esi + 0x4064], 0
mov dword [esi + 0x4068], 0
mov dword [esi + 0x4124], 0
mov dword [esi + 0x4120], 0
mov dword [esi + 0x411c], 0
mov dword [esi + 0x412c], 0
mov dword [esi + 0x4128], 0
mov byte [esi + 0x4130], 0
mov dword [esi + 0x4144], 0
mov dword [esi + 0x4148], 0
mov word [esi + 0x414d], 0
xor eax, eax
mov byte [esi + 0x414c], 0
mov dword [esi + 0x4150], 0
mov dword [esi + 0x4154], 0xffffffff
mov dword [esi + 0x4158], 0xffffffff
mov dword [esi + 0x41a4], 0
mov dword [esi + 0x41a8], 0
mov dword [esi + 0x41ac], 0
mov dword [esi + 0x41b0], 0
mov dword [esi + 0x41b4], 0
mov dword [esi + 0x41b8], 0xffffffff
mov dword [esi + 0x41bc], 0
movups xmmword [esi + 0x41cc], xmm0
mov dword [esi + 0x41dc], 0
mov dword [esi + 0x41ec], 0
mov dword [esi + 0x41f0], 0
mov dword [esi + 0x4238], 0
mov dword [esi + 0x4278], 0
mov dword [esi + 0x4274], 0
mov dword [esi + 0x4280], 0
mov dword [esi + 0x427c], 0
mov dword [esi + 0x5158], 0
mov dword [esi + 0x515c], 0xa900000
mov dword [esi + 0x5164], 0
mov dword [esi + 0x5160], 0
mov dword [esi + 0x5168], 0
mov dword [esi + 0x51ac], 0
mov dword [esi + 0x51b0], 0
mov word [esi + 0x51b4], 0
mov dword [esi + 0x51b8], 0
mov dword [esi + 0x51bc], 0x3c23d70a
mov dword [esi + 0x51c0], 0
mov dword [esi + 0x51c4], 0
mov dword [esi + 0x51c8], eax
mov dword [esi + 0x51e8], eax
mov dword [esi + 0x51ec], eax
mov dword [esi + 0x51f8], 0xbf800000
mov dword [esi + 0x51fc], 0xbf800000
mov word [esi + 0x5204], 0x2e
mov dword [esi + 0x5208], eax
mov dword [esi + 0x5248], eax
mov byte [esi + 0x524c], al
mov dword [esi + 0x5250], eax
mov dword [esi + 0x5268], eax
mov dword [esi + 0x5264], eax
mov dword [esi + 0x5254], eax
mov dword [esi + 0x526c], 0x7f7fffff
mov byte [esi + 0x5270], al
mov dword [esi + 0x5274], eax
mov dword [esi + 0x527c], 2
mov dword [esi + 0x5278], 2
mov dword [esi + 0x5280], 0x400
mov word [esi + 0x5290], ax
push 0xf0
push eax
mov dword [esi + 0x5294], eax
lea eax, [esi + 0x52c8]
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [esi + 0x53bc], 0
add esp, 0xc
mov dword [esi + 0x53b8], 0
mov eax, esi
mov dword [esi + 0x53c0], 0
mov dword [esi + 0x53cc], 0xffffffff
mov dword [esi + 0x53c8], 0xffffffff
mov dword [esi + 0x53c4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4