Function at 0x4151c0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45ba40
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
mov eax, dword [0x48e080]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
lea ecx, [esi + 8]
call fcn.00416180
mov dword [ebp - 4], 0
mov dword [esi + 0x379c], 0
mov dword [esi + 0x3798], 0
mov dword [esi + 0x37a0], 0
mov dword [esi + 0x37a8], 0
mov dword [esi + 0x37a4], 0
mov dword [esi + 0x37ac], 0
lea ecx, [esi + 0x37b0]
mov byte [ebp - 4], 2
call fcn.00416400
lea ecx, [esi + 0x3bd4]
call fcn.0042eba0
mov dword [esi + 0x3dec], 0
mov dword [esi + 0x3de8], 0
mov dword [esi + 0x3df0], 0
mov dword [esi + 0x3df8], 0
mov dword [esi + 0x3df4], 0
mov dword [esi + 0x3dfc], 0
mov dword [esi + 0x3e04], 0
mov dword [esi + 0x3e00], 0
mov dword [esi + 0x3e08], 0
mov dword [esi + 0x3e10], 0
mov dword [esi + 0x3e0c], 0
mov dword [esi + 0x3e14], 0
mov dword [esi + 0x3e1c], 0
mov dword [esi + 0x3e18], 0
mov dword [esi + 0x3e20], 0
mov dword [esi + 0x3e28], 0
lea eax, [esi + 0x3edc]
mov dword [esi + 0x3e2c], 0
xorps xmm0, xmm0
mov dword [esi + 0x3e44], 0
mov dword [esi + 0x3e48], 0
mov dword [esi + 0x3e7c], 0
mov dword [esi + 0x3e80], 0
movups xmmword [esi + 0x3eb0], xmm0
mov dword [esi + 0x3ec0], 0
movups xmmword [esi + 0x3ec8], xmm0
mov dword [esi + 0x3ed8], 0
push 0x3c
push 0
push eax
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
call sub.VCRUNTIME140.dll_memset
lea eax, [esi + 0x3f18]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x3c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x58], 0
push 0x60
push 0
push eax
mov dword [eax + 0x5c], 0
call sub.VCRUNTIME140.dll_memset
mov dword [esi + 0x3f7c], 0
mov dword [esi + 0x3f78], 0
mov dword [esi + 0x3f80], 0
mov dword [esi + 0x3f88], 0
mov dword [esi + 0x3f84], 0
mov dword [esi + 0x3f8c], 0
mov dword [esi + 0x3f94], 0
mov dword [esi + 0x3f90], 0
mov dword [esi + 0x3f98], 0
mov dword [esi + 0x3fa0], 0
mov dword [esi + 0x3f9c], 0
mov dword [esi + 0x3fa4], 0
mov dword [esi + 0x3fac], 0
mov dword [esi + 0x3fa8], 0
mov dword [esi + 0x3fb0], 0
mov dword [esi + 0x3fb8], 0
mov dword [esi + 0x3fb4], 0
mov dword [esi + 0x3fbc], 0
mov dword [esi + 0x3fc4], 0
mov dword [esi + 0x3fc0], 0
mov dword [esi + 0x3fc8], 0
mov dword [esi + 0x3fd0], 0
mov dword [esi + 0x3fcc], 0
mov dword [esi + 0x3fd4], 0
mov dword [esi + 0x3fe0], 0
mov dword [esi + 0x3fdc], 0
mov dword [esi + 0x3fe4], 0
mov dword [esi + 0x4030], 0
mov dword [esi + 0x4034], 0
mov dword [esi + 0x4038], 0
mov dword [esi + 0x403c], 0
mov dword [esi + 0x405c], 0
mov dword [esi + 0x4060], 0
mov dword [esi + 0x4064], 0
mov dword [esi + 0x4068], 0
mov dword [esi + 0x406c], 0
mov dword [esi + 0x4070], 0
mov dword [esi + 0x4074], 0
mov dword [esi + 0x4078], 0
mov dword [esi + 0x4094], 0
mov dword [esi + 0x4098], 0
mov dword [esi + 0x409c], 0
mov dword [esi + 0x40a0], 0
mov dword [esi + 0x4088], 0
mov dword [esi + 0x4090], 0
mov dword [esi + 0x408c], 0
mov dword [esi + 0x40a4], 0
mov dword [esi + 0x40b0], 0x7f7fffff
mov dword [esi + 0x40ac], 0x7f7fffff
mov dword [esi + 0x40a8], 0x7f7fffff
mov dword [esi + 0x40c0], 0
mov dword [esi + 0x40c4], 0
mov dword [esi + 0x40c8], 0
mov dword [esi + 0x40cc], 0
mov dword [esi + 0x40b4], 0
mov dword [esi + 0x40bc], 0
mov dword [esi + 0x40b8], 0
mov dword [esi + 0x40d0], 0
mov dword [esi + 0x40dc], 0x7f7fffff
mov dword [esi + 0x40d8], 0x7f7fffff
mov dword [esi + 0x40d4], 0x7f7fffff
mov dword [esi + 0x40ec], 0
mov dword [esi + 0x40f0], 0
mov dword [esi + 0x40f4], 0
mov dword [esi + 0x40f8], 0
mov dword [esi + 0x40e0], 0
mov dword [esi + 0x40e8], 0
mov dword [esi + 0x40e4], 0
xorps xmm0, xmm0
mov dword [esi + 0x40fc], 0
mov dword [esi + 0x4108], 0x7f7fffff
mov dword [esi + 0x4104], 0x7f7fffff
mov dword [esi + 0x4100], 0x7f7fffff
mov dword [esi + 0x4118], 0
mov dword [esi + 0x411c], 0
mov dword [esi + 0x4120], 0
mov dword [esi + 0x4124], 0
mov dword [esi + 0x410c], 0
mov dword [esi + 0x4114], 0
mov dword [esi + 0x4110], 0
mov dword [esi + 0x4128], 0
mov dword [esi + 0x4134], 0x7f7fffff
mov dword [esi + 0x4130], 0x7f7fffff
mov dword [esi + 0x412c], 0x7f7fffff
mov dword [esi + 0x4174], 0
mov dword [esi + 0x4170], 0
mov dword [esi + 0x4168], 0
mov dword [esi + 0x416c], 0
movups xmmword [esi + 0x417c], xmm0
movups xmmword [esi + 0x418c], xmm0
mov word [esi + 0x419c], 0
mov dword [esi + 0x4178], 0xffffffff
mov byte [esi + 0x419e], 0
mov dword [esi + 0x41a0], 0
mov dword [esi + 0x41a4], 0
mov dword [esi + 0x41a8], 0
mov dword [esi + 0x41ac], 0
mov dword [esi + 0x41d0], 0
mov dword [esi + 0x41cc], 0
mov dword [esi + 0x41d4], 0
mov dword [esi + 0x41f0], 0
mov dword [esi + 0x41ec], 0
mov dword [esi + 0x41f4], 0
mov dword [esi + 0x4204], 0
mov dword [esi + 0x4200], 0
mov dword [esi + 0x4208], 0
mov dword [esi + 0x4210], 0
mov dword [esi + 0x420c], 0
mov dword [esi + 0x4214], 0
mov dword [esi + 0x421c], 0
mov dword [esi + 0x4218], 0
mov dword [esi + 0x4220], 0
mov dword [esi + 0x4228], 0
mov dword [esi + 0x4224], 0
mov dword [esi + 0x4230], 0
mov dword [esi + 0x422c], 0
mov dword [esi + 0x4234], 0
mov dword [esi + 0x423c], 0
mov dword [esi + 0x4238], 0
mov dword [esi + 0x4240], 0
mov dword [esi + 0x424c], 0
mov dword [esi + 0x4248], 0
mov dword [esi + 0x4250], 0
mov dword [esi + 0x4258], 0
mov dword [esi + 0x4254], 0
mov dword [esi + 0x425c], 0
mov dword [esi + 0x4264], 0
mov dword [esi + 0x4260], 0
mov dword [esi + 0x426c], 0
mov dword [esi + 0x4268], 0
mov dword [esi + 0x4270], 0
mov dword [esi + 0x4278], 0
mov dword [esi + 0x4274], 0
mov dword [esi + 0x427c], 0
lea eax, [esi + 0x4288]
mov dword [esi + 0x4280], 0
mov dword [esi + 0x4284], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
push 0xe74
push 0
push eax
mov dword [eax + 0x14], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x2c], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0x24
lea ecx, [esi + 0x50fc]
mov byte [ebp - 4], 0x1a
call fcn.0042ec90
lea eax, [esi + 0x5178]
mov dword [esi + 0x5168], 0
mov dword [esi + 0x516c], 0
mov dword [esi + 0x5170], 0
mov dword [esi + 0x5174], 0
push 0x30
push 0
push eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x51cc], 0
mov dword [esi + 0x51c8], 0
mov dword [esi + 0x51d0], 0
mov dword [esi + 0x51d8], 0
mov dword [esi + 0x51d4], 0
mov dword [esi + 0x51dc], 0
mov dword [esi + 0x51e4], 0
xorps xmm0, xmm0
mov dword [esi + 0x51e8], 0
movups xmmword [esi + 0x51e0], xmm0
mov dword [esi + 0x51f4], 0
mov dword [esi + 0x51f8], 0
movups xmmword [esi + 0x51f0], xmm0
mov dword [esi + 0x520c], 0
mov dword [esi + 0x5208], 0
mov dword [esi + 0x5210], 0
mov dword [esi + 0x5218], 0
mov dword [esi + 0x5214], 0
mov dword [esi + 0x521c], 0
mov dword [esi + 0x5224], 0
mov dword [esi + 0x5220], 0
mov dword [esi + 0x5228], 0
mov dword [esi + 0x5230], 0
mov dword [esi + 0x522c], 0
mov dword [esi + 0x5234], 0
mov dword [esi + 0x523c], 0
mov dword [esi + 0x5238], 0
mov dword [esi + 0x5240], 0
mov dword [esi + 0x5258], 0
mov dword [esi + 0x5254], 0
mov dword [esi + 0x525c], 0
mov dword [esi + 0x5284], 0
mov word [esi + 0x5288], 0x101
mov dword [esi + 0x528c], 0xffffffff
mov dword [esi + 0x5290], 0xffffffff
mov dword [esi + 0x52a4], 0
mov dword [esi + 0x52a0], 0
mov dword [esi + 0x52a8], 0
movups xmmword [esi + 0x5294], xmm0
movups xmmword [esi + 0x52a4], xmm0
mov dword [esi + 0x52b0], 0xff7fffff
mov ecx, dword [ebp + 8]
test ecx, ecx
mov byte [ebp - 4], 0x24
sete al
mov byte [esi], 0
mov byte [esi + 1], al
mov dword [esi + 0x3bc8], 0
mov dword [esi + 0x3bd0], 0
mov dword [esi + 0x3bcc], 0
test ecx, ecx
jne 0x415c4c
mov eax, dword [0x48e948]
test eax, eax
je 0x415c17
inc dword [eax + 0xa8]
push dword [0x48e950]
push 0x468
call dword [0x48e034]
mov dword [ebp - 0x14], eax
lea ecx, [ebp + 0xb]
add esp, 8
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x25
test eax, eax
je 0x415c48
mov ecx, eax
call fcn.0042ed30
jmp 0x415c4a
xor eax, eax
mov ecx, eax
mov dword [esi + 0x40], ecx
xorps xmm0, xmm0
movsd qword [esi + 0x3dc8], xmm0
mov dword [esi + 0x3dd0], 0
mov dword [esi + 0x3dd8], 0xffffffff
mov dword [esi + 0x3dd4], 0xffffffff
mov dword [esi + 0x3ddd], 0
mov byte [esi + 0x3ddc], 0
mov dword [esi + 0x3de4], 0
mov dword [esi + 0x3e24], 0
mov dword [esi + 0x3e30], 0
mov dword [esi + 0x3e34], 0
mov dword [esi + 0x3e38], 0
mov dword [esi + 0x3e3c], 0
mov dword [esi + 0x3e40], 0
mov dword [esi + 0x3e4c], 0
mov dword [esi + 0x3e50], 0
mov dword [esi + 0x3e58], 0
mov dword [esi + 0x3e54], 0
mov dword [esi + 0x3e5c], 0
mov dword [esi + 0x3e64], 0
mov dword [esi + 0x3e60], 0
mov dword [esi + 0x3e68], 0
mov dword [esi + 0x3e6c], 0
mov dword [esi + 0x3e70], 0
mov dword [esi + 0x3e74], 0
mov word [esi + 0x3e78], 0
mov dword [esi + 0x3e7c], 0xbf800000
mov dword [esi + 0x3e80], 0xbf800000
mov dword [esi + 0x3e84], 0
mov dword [esi + 0x3e88], 0
mov dword [esi + 0x3e8c], 0xffffffff
mov dword [esi + 0x3e90], 0
mov word [esi + 0x3e94], 0
mov dword [esi + 0x3e98], 0
mov dword [esi + 0x3e9c], 0
mov dword [esi + 0x3ea0], 0
mov byte [esi + 0x3ea4], 0
mov dword [esi + 0x3ea8], 0
mov dword [esi + 0x3eac], 0
movups xmmword [esi + 0x3eb0], xmm0
mov dword [esi + 0x3ec0], 0
mov dword [esi + 0x3ec4], 0
mov dword [esi + 0x3fd8], 0
mov dword [esi + 0x3fe8], 0
mov dword [esi + 0x4000], 0
mov dword [esi + 0x3ffc], 0
mov dword [esi + 0x3ff8], 0
mov dword [esi + 0x3ff4], 0
mov dword [esi + 0x3ff0], 0
mov dword [esi + 0x3fec], 0
mov dword [esi + 0x4014], 0
mov dword [esi + 0x400c], 0
mov dword [esi + 0x4008], 0
mov dword [esi + 0x4018], 0
mov dword [esi + 0x4004], 0
mov dword [esi + 0x4010], 0
mov dword [esi + 0x401c], 0
mov dword [esi + 0x4020], 0
mov dword [esi + 0x4024], 0x10000
mov word [esi + 0x4028], 0
mov byte [esi + 0x402a], 0
mov dword [esi + 0x402c], 0
mov word [esi + 0x4040], 0
mov byte [esi + 0x4042], 0
mov dword [esi + 0x4044], 0
mov dword [esi + 0x4048], 0
mov dword [esi + 0x404c], 0
mov dword [esi + 0x4058], 0xffffffff
mov dword [esi + 0x4054], 0xffffffff
mov dword [esi + 0x4050], 0xffffffff
mov dword [esi + 0x407c], 0
mov dword [esi + 0x4080], 0
mov dword [esi + 0x4084], 0
mov dword [esi + 0x4140], 0
mov dword [esi + 0x413c], 0
mov dword [esi + 0x4138], 0
mov dword [esi + 0x4148], 0
mov dword [esi + 0x4144], 0
mov byte [esi + 0x414c], 0
mov dword [esi + 0x4150], 0
mov dword [esi + 0x4154], 0
xor eax, eax
mov word [esi + 0x4159], 0
mov byte [esi + 0x4158], 0
mov dword [esi + 0x415c], 0
mov dword [esi + 0x4160], 0xffffffff
mov dword [esi + 0x4164], 0xffffffff
mov dword [esi + 0x41b0], 0
mov dword [esi + 0x41b4], 0
mov dword [esi + 0x41b8], 0
mov dword [esi + 0x41bc], 0
mov dword [esi + 0x41c0], 0
mov dword [esi + 0x41c4], 0xffffffff
mov dword [esi + 0x41c8], 0
movups xmmword [esi + 0x41d8], xmm0
mov dword [esi + 0x41e8], 0
mov dword [esi + 0x41f8], 0
mov dword [esi + 0x41fc], 0
mov dword [esi + 0x4244], 0
mov dword [esi + 0x5154], 0
mov dword [esi + 0x5158], 0xa900000
mov dword [esi + 0x5160], 0
mov dword [esi + 0x515c], 0
mov dword [esi + 0x5164], 0
mov dword [esi + 0x51a8], 0
mov word [esi + 0x51ac], 0
mov dword [esi + 0x51b0], 0
mov dword [esi + 0x51b4], 0x3c23d70a
mov dword [esi + 0x51bc], 0
mov dword [esi + 0x51c0], eax
mov dword [esi + 0x51b8], eax
mov dword [esi + 0x51c4], 0x3f000000
mov dword [esi + 0x51e4], eax
mov dword [esi + 0x51e8], eax
mov dword [esi + 0x51f4], 0xbf800000
mov dword [esi + 0x51f8], 0xbf800000
mov word [esi + 0x5200], 0x2e
mov dword [esi + 0x5204], eax
mov dword [esi + 0x5244], eax
mov byte [esi + 0x5248], al
mov dword [esi + 0x524c], eax
mov dword [esi + 0x5264], eax
mov dword [esi + 0x5260], eax
mov dword [esi + 0x5250], eax
mov dword [esi + 0x5268], 0x7f7fffff
mov byte [esi + 0x526c], al
mov dword [esi + 0x5270], eax
mov dword [esi + 0x5278], 2
mov dword [esi + 0x5274], 2
mov byte [esi + 0x527c], al
push 0x1e0
push eax
mov dword [esi + 0x5280], eax
lea eax, [esi + 0x52b4]
push eax
call sub.VCRUNTIME140.dll_memset
mov dword [esi + 0x5498], 0
lea eax, [esi + 0x54ac]
mov dword [esi + 0x5494], 0
mov dword [esi + 0x549c], 0
push 0xc01
mov dword [esi + 0x54a8], 0xffffffff
push 0
mov dword [esi + 0x54a4], 0xffffffff
push eax
mov dword [esi + 0x54a0], 0xffffffff
call sub.VCRUNTIME140.dll_memset
add esp, 0x18
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
ret 4