Function at 0x453f70
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x5269f4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
mov al, byte [esp + 3]
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x14], esi
mov byte [esi + 4], al
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov ecx, dword [0x565124]
mov dword [esp + 0x20], ebx
mov dword [esi + 0x3c], ecx
mov edx, dword [0x565124]
mov dword [esi + 0x58], edx
mov eax, dword [0x565124]
mov dword [esi + 0x7c], eax
mov ecx, dword [0x565124]
mov dword [esi + 0xb0], ecx
lea ecx, [esi + 0xd0]
mov byte [esp + 0x20], 1
call fcn.00451110
mov edx, dword [0x565124]
mov dword [esi + 0x160], edx
mov eax, dword [0x565124]
mov dword [esi + 0x220], eax
mov ecx, dword [0x565124]
mov dword [esi + 0x224], ecx
mov edx, dword [0x565124]
mov dword [esi + 0x228], edx
mov al, byte [esp + 0xf]
mov dword [esi + 0x230], ebx
mov byte [esi + 0x22c], al
mov dword [esi + 0x234], ebx
mov dword [esi + 0x238], ebx
mov cl, byte [esp + 0xf]
mov dword [esi + 0x240], ebx
mov byte [esi + 0x23c], cl
mov dword [esi + 0x244], ebx
mov dword [esi + 0x248], ebx
mov dl, byte [esp + 0xf]
mov dword [esi + 0x250], ebx
mov byte [esi + 0x24c], dl
mov dword [esi + 0x254], ebx
mov dword [esi + 0x258], ebx
mov al, byte [esp + 0xf]
mov dword [esi + 0x260], ebx
mov byte [esi + 0x25c], al
mov dword [esi + 0x264], ebx
mov dword [esi + 0x268], ebx
mov dl, byte [esp + 0xf]
mov al, byte [esp + 0xf]
lea ecx, [esi + 0x26c]
mov byte [esp + 0x20], 0xa
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.00461c00
mov dl, byte [esp + 0xf]
mov al, byte [esp + 0xf]
lea ecx, [esi + 0x27c]
mov byte [esp + 0x20], 0xb
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.00462090
mov byte [esp + 0x20], 0xc
mov dl, byte [esp + 0xf]
mov al, byte [esp + 0xf]
lea ecx, [esi + 0x28c]
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.00462090
mov cl, byte [esp + 0xf]
mov dl, byte [esp + 0xf]
lea edi, [esi + 0x29c]
mov byte [esp + 0x20], 0xd
mov byte [edi], cl
lea ecx, [esp + 0x10]
mov byte [edi + 1], dl
mov byte [edi + 8], bl
call fcn.004fdd50
mov eax, dword [0x5b8e70]
mov byte [esp + 0x20], 0xe
cmp eax, ebx
jne 0x454127
push 1
push ebx
mov ecx, edi
call fcn.00463100
mov dword [0x5b8e70], eax
mov dword [eax], ebx
mov eax, dword [0x5b8e70]
mov dword [eax + 8], ebx
mov ecx, dword [0x5b8e6c]
push ebx
inc ecx
mov dword [0x5b8e6c], ecx
mov ecx, dword [0x5b8e70]
push ecx
mov ecx, edi
call fcn.00463100
mov dword [edi + 4], eax
mov dword [edi + 0xc], ebx
mov dword [eax], eax
mov edi, dword [edi + 4]
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xd
mov dword [edi + 8], edi
call fcn.004fddec
mov ecx, esi
mov byte [esp + 0x20], 0xf
mov dword [esi], 0x538148
mov dword [esi + 0x164], 1
mov dword [esi + 0x128], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x178], 0xfffffffe
call fcn.00454cf0
mov ecx, esi
call fcn.00454970
mov ecx, esi
call fcn.004552f0
mov ecx, esi
call fcn.0045b670
push 1
mov ecx, esi
call fcn.0045b7b0
push 7
push 7
push 1
push 0x32
push 4
push 4
mov ecx, esi
mov dword [esi + 0x16c], ebx
call fcn.0045eb40
mov ecx, esi
mov dword [esi + 0x168], 0x20
call fcn.0045b840
push 1
mov ecx, esi
call fcn.00454590
push 0x10
call dword [0x5347e0]
push eax
mov ecx, esi
call fcn.004545a0
mov ecx, dword [esp + 0x18]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret