Function at 0x4671a0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4d0235
mov eax, dword fs:[0]
push eax
push ebx
push esi
mov eax, dword [0x4fa36c]
xor eax, esp
push eax
lea eax, [esp + 0xc]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1c]
mov dword [esi], 0x4dedc0
xor ebx, ebx
mov dword [esi + 4], 0x4df330
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esp + 0x14], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov byte [esp + 0x14], 1
mov byte [esi + 0x28], bl
mov dword [esi + 0x2c], ebx
mov byte [esi + 0x30], bl
mov byte [esi + 0x31], 1
mov byte [esi + 0x32], bl
mov dword [esi + 0x34], 0xff
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
call fcn.0046f710
mov dword [esi + 0x44], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esi + 0x44]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x44]
mov dword [eax], eax
mov eax, dword [esi + 0x44]
mov dword [eax + 8], eax
mov dword [esi + 0x48], ebx
mov byte [esp + 0x14], 2
call fcn.0043b280
mov dword [esi + 0x50], eax
mov byte [eax + 0x15], 1
mov eax, dword [esi + 0x50]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x50]
mov dword [eax], eax
mov eax, dword [esi + 0x50]
mov dword [eax + 8], eax
mov dword [esi + 0x54], ebx
mov byte [esp + 0x14], 3
call fcn.0046f710
mov dword [esi + 0x5c], eax
mov byte [eax + 0x2d], 1
mov eax, dword [esi + 0x5c]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x5c]
mov dword [eax], eax
mov eax, dword [esi + 0x5c]
mov dword [eax + 8], eax
mov dword [esi + 0x60], ebx
mov byte [esp + 0x14], 4
call fcn.0043b280
mov dword [esi + 0x68], eax
mov byte [eax + 0x15], 1
mov eax, dword [esi + 0x68]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x68]
mov dword [eax], eax
mov eax, dword [esi + 0x68]
mov dword [eax + 8], eax
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov byte [esi + 0xa4], bl
mov byte [esi + 0xa5], bl
mov dword [esi + 0xa8], ebx
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xbc], ebx
mov byte [esi + 0xc0], bl
mov byte [esi + 0xcc], bl
mov dword [esi + 0xd4], ebx
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf4], ebx
mov dword [esi + 0xf8], ebx
mov dword [esi + 0xfc], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x108], ebx
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x110], ebx
mov dword [esi + 0x14c], 7
mov dword [esi + 0x148], ebx
mov word [esi + 0x138], bx
mov byte [esp + 0x14], 0xa
mov dword [esi + 0x150], ebx
mov dword [esi + 0x174], ebx
mov dword [esi + 0x178], ebx
mov dword [esi + 0x17c], ebx
mov dword [esi + 0x180], ebx
mov dword [esi + 0x184], ebx
mov byte [esi + 0x188], bl
mov byte [esi + 0x189], bl
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x190], ebx
mov dword [esi + 0x194], ebx
call fcn.0043b680
mov dword [esi + 0x19c], eax
mov byte [eax + 0x45], 1
mov eax, dword [esi + 0x19c]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x19c]
mov dword [eax], eax
mov eax, dword [esi + 0x19c]
mov dword [eax + 8], eax
mov dword [esi + 0x1a0], ebx
mov byte [esp + 0x14], 0xb
push 0x18
mov byte [esi + 0x1a4], bl
mov dword [esi + 0x1a8], 0x1000
call fcn.004a9a85
add esp, 4
push eax
mov dword [esi + 0x1ac], eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
or eax, 0xffffffff
mov dword [esi + 0xc8], eax
mov dword [esi + 0xc4], eax
xor eax, eax
mov byte [esi + 0x1b0], bl
mov dword [esi + 0x1d4], ebx
mov byte [esi + 0x1d8], bl
mov byte [esi + 0x1d9], bl
mov byte [esi + 0x1da], bl
mov dword [esi + 0x1dc], ebx
mov dword [esi + 0x1e0], ebx
mov dword [esi + 0x1e4], ebx
mov byte [esi + 0x1e8], 1
mov byte [esi + 0x1e9], bl
mov byte [esi + 0x1ea], 1
mov dword [esi + 0x118], ebx
mov dword [esi + 0x114], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x12c], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x154], eax
mov dword [esi + 0x158], eax
mov dword [esi + 0x15c], eax
mov dword [esi + 0x160], eax
mov dword [esi + 0x164], eax
mov dword [esi + 0x168], eax
mov dword [esi + 0x16c], eax
mov dword [esi + 0x170], eax
mov dword [esi + 0x1b4], eax
mov dword [esi + 0x1b8], eax
mov dword [esi + 0x1bc], eax
mov dword [esi + 0x1c0], eax
mov dword [esi + 0x1c4], eax
mov dword [esi + 0x1c8], eax
mov dword [esi + 0x1cc], eax
mov dword [esi + 0x1d0], eax
cmp dword [esi + 0x2c], ebx
jne 0x4674e0
push 0xdc
push 1
push ebx
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [esi + 0x2c], eax
mov eax, esi
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
add esp, 0xc
ret 4