Function at 0x44c590
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x54f382
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push esi
push edi
mov esi, ecx
push 0x44c920
push 0x44c910
push 0x15
lea edi, [esi + 4]
push 0xc
push edi
mov dword [esp + 0x1c], esi
call fcn.0051d375
xor eax, eax
mov dword [esi + method.CCommandLineInfo.virtual_0], 0x5611e0
mov dword [esp + 0x14], eax
mov dword [esi + 0x104], eax
mov dword [esi + 0x108], 0x11
mov dword [esi + 0x10c], eax
mov dword [esi + 0x110], eax
mov dword [esi + 0x114], eax
mov dword [esi + 0x118], 0xa
mov dword [esi + method.CCommandLineInfo.virtual_0], 0x5611d4
mov dword [esi + 0x120], eax
mov dword [esi + 0x12c], eax
mov dword [esi + 0x128], eax
mov dword [esi + 0x124], eax
mov dword [esi], 0x5611d0
mov dword [edi], eax
lea eax, [esi + 8]
push 0x597ffc
push eax
mov byte [esp + 0x1c], 2
call fcn.0053091a
add esp, 8
mov edi, 0x44cb00
lea ecx, [esi + 0x14]
mov dword [esi + 0xc], edi
push str.applet
push ecx
mov dword [esi + 0x10], 1
call fcn.0053091a
add esp, 8
lea edx, [esi + 0x20]
mov dword [esi + 0x18], edi
mov dword [esi + 0x1c], 2
push str.area
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0x2c]
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], 3
push str.base
push eax
call fcn.0053091a
add esp, 8
lea ecx, [esi + 0x38]
mov dword [esi + 0x30], 0x44d280
mov dword [esi + 0x34], 4
push str.bgsound
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0x44]
mov dword [esi + 0x3c], edi
mov dword [esi + 0x40], 5
push str.body
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0x50]
mov dword [esi + 0x48], edi
mov dword [esi + 0x4c], 6
push str.embed
push eax
call fcn.0053091a
add esp, 8
mov dword [esi + 0x54], edi
mov dword [esi + 0x58], 7
lea ecx, [esi + 0x5c]
push 0x59db50
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0x68]
mov dword [esi + 0x60], edi
mov dword [esi + 0x64], 8
push str.form
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0x74]
mov dword [esi + 0x6c], 0x44cbe0
mov dword [esi + 0x70], 9
push str.frame
push eax
call fcn.0053091a
add esp, 8
lea ecx, [esi + 0x80]
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], 0xa
push str.iframe
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0x8c]
mov dword [esi + 0x84], edi
mov dword [esi + 0x88], 0xb
push 0x59db34
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0x98]
mov dword [esi + 0x90], edi
mov dword [esi + 0x94], 0xc
push str.input
push eax
call fcn.0053091a
add esp, 8
lea ecx, [esi + 0xa4]
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], 0xd
push str.layer
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0xb0]
mov dword [esi + 0xa8], edi
mov dword [esi + 0xac], 0xe
push str.link
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0xbc]
mov dword [esi + 0xb4], 0x44cc20
mov dword [esi + 0xb8], 0xf
push str.meta
push eax
call fcn.0053091a
add esp, 8
lea ecx, [esi + 0xc8]
mov dword [esi + 0xc0], 0x44cfc0
mov dword [esi + 0xc4], 0x10
push str.overlay
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0xd4]
mov dword [esi + 0xcc], edi
mov dword [esi + 0xd0], 0x11
push str.script
push edx
call fcn.0053091a
add esp, 8
lea eax, [esi + 0xe0]
mov dword [esi + 0xd8], edi
mov dword [esi + 0xdc], 0x12
push str.table
push eax
call fcn.0053091a
add esp, 8
lea ecx, [esi + 0xec]
mov dword [esi + 0xe4], edi
mov dword [esi + 0xe8], 0x13
push 0x59daf8
push ecx
call fcn.0053091a
add esp, 8
lea edx, [esi + 0xf8]
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], 0x14
push 0x59daf4
push edx
call fcn.0053091a
mov ecx, dword [esp + 0x14]
add esp, 8
mov dword [esi + 0xfc], edi
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
add esp, 0x10
ret