Function at 0x100532a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a6aea
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x14
push esi
mov eax, dword [0x10242040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x18], esi
lea ecx, [esi + 8]
call fcn.100545f0
lea ecx, [esi + 0x2b38]
mov dword [ebp - 4], 0
call fcn.10054440
lea ecx, [esi + 0x2f5c]
call fcn.1006cc70
mov dword [esi + 0x3174], 0
mov dword [esi + 0x3170], 0
mov dword [esi + 0x3178], 0
mov dword [esi + 0x3180], 0
mov dword [esi + 0x317c], 0
mov dword [esi + 0x3184], 0
mov dword [esi + 0x318c], 0
mov dword [esi + 0x3188], 0
mov dword [esi + 0x3190], 0
mov dword [esi + 0x3198], 0
mov dword [esi + 0x3194], 0
mov dword [esi + 0x319c], 0
mov dword [esi + 0x31a4], 0
mov dword [esi + 0x31a0], 0
mov dword [esi + 0x31a8], 0
mov dword [esi + 0x31b4], 0
lea eax, [esi + 0x325c]
mov dword [esi + 0x31b0], 0
xorps xmm0, xmm0
mov dword [esi + 0x31d0], 0
mov dword [esi + 0x31cc], 0
movups xmmword [esi + 0x320c], xmm0
mov dword [esi + 0x3220], 0
mov dword [esi + 0x321c], 0
movups xmmword [esi + 0x3248], xmm0
mov dword [esi + 0x3258], 0
push 0x3c
push 0
push eax
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
call sub.VCRUNTIME140.dll_memset
lea eax, [esi + 0x3298]
add esp, 0xc
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
push 0x60
push 0
push eax
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x3c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x5c], 0
mov dword [eax + 0x58], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x32fc], 0
mov dword [esi + 0x32f8], 0
mov dword [esi + 0x3300], 0
mov dword [esi + 0x3308], 0
mov dword [esi + 0x3304], 0
mov dword [esi + 0x330c], 0
mov dword [esi + 0x3314], 0
mov dword [esi + 0x3310], 0
mov dword [esi + 0x3318], 0
mov dword [esi + 0x3320], 0
mov dword [esi + 0x331c], 0
mov dword [esi + 0x3324], 0
mov dword [esi + 0x332c], 0
mov dword [esi + 0x3328], 0
mov dword [esi + 0x3330], 0
mov dword [esi + 0x3338], 0
mov dword [esi + 0x3334], 0
mov dword [esi + 0x333c], 0
mov dword [esi + 0x3344], 0
mov dword [esi + 0x3340], 0
mov dword [esi + 0x3348], 0
mov dword [esi + 0x3350], 0
mov dword [esi + 0x334c], 0
mov dword [esi + 0x3354], 0
mov dword [esi + 0x3360], 0
mov dword [esi + 0x335c], 0
mov dword [esi + 0x3364], 0
mov dword [esi + 0x33b0], 0
mov dword [esi + 0x33b4], 0
mov dword [esi + 0x33b8], 0
mov dword [esi + 0x33bc], 0
mov dword [esi + 0x33dc], 0
mov dword [esi + 0x33e0], 0
mov dword [esi + 0x33e4], 0
mov dword [esi + 0x33e8], 0
mov dword [esi + 0x33ec], 0
mov dword [esi + 0x33f0], 0
mov dword [esi + 0x33f4], 0
mov dword [esi + 0x33f8], 0
mov dword [esi + 0x3414], 0
mov dword [esi + 0x3418], 0
mov dword [esi + 0x341c], 0
mov dword [esi + 0x3420], 0
mov dword [esi + 0x3408], 0
mov dword [esi + 0x3410], 0
mov dword [esi + 0x340c], 0
mov dword [esi + 0x3424], 0
mov dword [esi + 0x3430], 0x7f7fffff
mov dword [esi + 0x342c], 0x7f7fffff
mov dword [esi + 0x3428], 0x7f7fffff
mov dword [esi + 0x3440], 0
mov dword [esi + 0x3444], 0
mov dword [esi + 0x3448], 0
mov dword [esi + 0x344c], 0
mov dword [esi + 0x3434], 0
mov dword [esi + 0x343c], 0
mov dword [esi + 0x3438], 0
mov dword [esi + 0x3450], 0
mov dword [esi + 0x345c], 0x7f7fffff
mov dword [esi + 0x3458], 0x7f7fffff
mov dword [esi + 0x3454], 0x7f7fffff
mov dword [esi + 0x346c], 0
mov dword [esi + 0x3470], 0
mov dword [esi + 0x3474], 0
mov dword [esi + 0x3478], 0
mov dword [esi + 0x3460], 0
mov dword [esi + 0x3468], 0
mov dword [esi + 0x3464], 0
mov dword [esi + 0x347c], 0
mov dword [esi + 0x3488], 0x7f7fffff
mov dword [esi + 0x3484], 0x7f7fffff
mov dword [esi + 0x3480], 0x7f7fffff
mov dword [esi + 0x3498], 0
mov dword [esi + 0x349c], 0
mov dword [esi + 0x34a0], 0
mov dword [esi + 0x34a4], 0
xorps xmm0, xmm0
mov dword [esi + 0x348c], 0
mov dword [esi + 0x3494], 0
mov dword [esi + 0x3490], 0
mov dword [esi + 0x34a8], 0
mov dword [esi + 0x34b4], 0x7f7fffff
mov dword [esi + 0x34b0], 0x7f7fffff
mov dword [esi + 0x34ac], 0x7f7fffff
mov dword [esi + 0x34f4], 0
mov dword [esi + 0x34f0], 0
mov dword [esi + 0x34e8], 0
mov dword [esi + 0x34ec], 0
movups xmmword [esi + 0x34fc], xmm0
movups xmmword [esi + 0x350c], xmm0
mov word [esi + 0x351c], 0
mov dword [esi + 0x34f8], 0xffffffff
mov byte [esi + 0x351e], 0
mov dword [esi + 0x3520], 0
mov dword [esi + 0x3524], 0
mov dword [esi + 0x3528], 0
mov dword [esi + 0x352c], 0
mov dword [esi + 0x3550], 0
mov dword [esi + 0x354c], 0
mov dword [esi + 0x3554], 0
mov dword [esi + 0x3570], 0
mov dword [esi + 0x356c], 0
mov dword [esi + 0x3574], 0
mov dword [esi + 0x3584], 0
mov dword [esi + 0x3580], 0
mov dword [esi + 0x3588], 0
mov dword [esi + 0x3590], 0
mov dword [esi + 0x358c], 0
mov dword [esi + 0x3594], 0
mov dword [esi + 0x359c], 0
mov dword [esi + 0x3598], 0
mov dword [esi + 0x35a0], 0
mov dword [esi + 0x35a8], 0
mov dword [esi + 0x35a4], 0
mov dword [esi + 0x35b0], 0
mov dword [esi + 0x35ac], 0
mov dword [esi + 0x35b4], 0
mov dword [esi + 0x35bc], 0
mov dword [esi + 0x35b8], 0
mov dword [esi + 0x35c0], 0
mov dword [esi + 0x35cc], 0
mov dword [esi + 0x35c8], 0
mov dword [esi + 0x35d0], 0
mov dword [esi + 0x35d8], 0
mov dword [esi + 0x35d4], 0
mov dword [esi + 0x35dc], 0
mov dword [esi + 0x35e4], 0
mov dword [esi + 0x35e0], 0
mov dword [esi + 0x35ec], 0
mov dword [esi + 0x35e8], 0
mov dword [esi + 0x35f0], 0
mov dword [esi + 0x35f8], 0
mov dword [esi + 0x35f4], 0
mov dword [esi + 0x35fc], 0
lea eax, [esi + 0x3608]
mov dword [esi + 0x3604], 0
mov dword [esi + 0x3600], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x2c], 0
push 0xe74
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [esi + 0x447c]
call fcn.10073450
lea eax, [esi + 0x44f8]
mov dword [esi + 0x44f4], 0
mov dword [esi + 0x44f0], 0
mov dword [esi + 0x44ec], 0
mov dword [esi + 0x44e8], 0
push 0x30
push 0
push eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x454c], 0
mov dword [esi + 0x4548], 0
mov dword [esi + 0x4550], 0
mov dword [esi + 0x4558], 0
mov dword [esi + 0x4554], 0
mov dword [esi + 0x455c], 0
mov dword [esi + 0x4568], 0
xorps xmm0, xmm0
mov dword [esi + 0x4564], 0
movups xmmword [esi + 0x4560], xmm0
mov dword [esi + 0x4578], 0
mov dword [esi + 0x4574], 0
movups xmmword [esi + 0x4570], xmm0
mov dword [esi + 0x458c], 0
mov dword [esi + 0x4588], 0
mov dword [esi + 0x4590], 0
mov dword [esi + 0x4598], 0
mov dword [esi + 0x4594], 0
mov dword [esi + 0x459c], 0
mov dword [esi + 0x45a4], 0
mov dword [esi + 0x45a0], 0
mov dword [esi + 0x45a8], 0
mov dword [esi + 0x45b0], 0
mov dword [esi + 0x45ac], 0
mov dword [esi + 0x45b4], 0
mov dword [esi + 0x45bc], 0
mov dword [esi + 0x45b8], 0
mov dword [esi + 0x45c0], 0
mov dword [esi + 0x45d8], 0
mov dword [esi + 0x45d4], 0
mov dword [esi + 0x45dc], 0
mov dword [esi + 0x4604], 0
mov word [esi + 0x4608], 0x101
mov dword [esi + 0x460c], 0xffffffff
mov dword [esi + 0x4610], 0xffffffff
mov dword [esi + 0x4624], 0
mov dword [esi + 0x4620], 0
mov dword [esi + 0x4628], 0
movups xmmword [esi + 0x4614], xmm0
movq qword [esi + 0x4624], xmm0
mov byte [ebp - 4], 0x22
mov word [esi], 0x100
mov dword [esi + 0x2f50], 0
mov dword [esi + 0x2f58], 0
mov ecx, 0x468
mov dword [esi + 0x2f54], 0
call fcn.100575c0
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x23
test eax, eax
je 0x10053cc5
mov ecx, eax
call fcn.10071090
jmp 0x10053cc7
xor eax, eax
mov dword [esi + 0x40], eax
xorps xmm0, xmm0
movsd qword [esi + 0x3150], xmm0
mov dword [esi + 0x3158], 0
mov dword [esi + 0x3160], 0xffffffff
mov dword [esi + 0x315c], 0xffffffff
mov dword [esi + 0x3165], 0
mov byte [esi + 0x3164], 0
mov dword [esi + 0x316c], 0
mov dword [esi + 0x31ac], 0
mov dword [esi + 0x31b8], 0
mov dword [esi + 0x31bc], 0
mov dword [esi + 0x31c0], 0
mov dword [esi + 0x31c4], 0
mov dword [esi + 0x31c8], 0
mov dword [esi + 0x31d4], 0
mov dword [esi + 0x31d8], 0
mov dword [esi + 0x31e0], 0
mov dword [esi + 0x31dc], 0
mov dword [esi + 0x31e4], 0
mov dword [esi + 0x31ec], 0
mov dword [esi + 0x31e8], 0
mov dword [esi + 0x31f0], 0
mov dword [esi + 0x31f4], 0
mov dword [esi + 0x31f8], 0
mov dword [esi + 0x31fc], 0
mov word [esi + 0x3200], 0
mov byte [esi + 0x3202], 0
mov dword [esi + 0x3204], 0
mov dword [esi + 0x3208], 0
movups xmmword [esi + 0x320c], xmm0
mov dword [esi + 0x321c], 0xbf800000
mov dword [esi + 0x3220], 0xbf800000
mov dword [esi + 0x3224], 0
mov dword [esi + 0x3228], 0
mov dword [esi + 0x322c], 0xffffffff
mov dword [esi + 0x3230], 0
mov word [esi + 0x3234], 0
mov dword [esi + 0x3238], 0
mov dword [esi + 0x323c], 0
mov dword [esi + 0x3240], 0
mov dword [esi + 0x3244], 0
mov dword [esi + 0x3358], 0
mov dword [esi + 0x3368], 0
mov dword [esi + 0x3380], 0
mov dword [esi + 0x337c], 0
mov dword [esi + 0x3378], 0
mov dword [esi + 0x3374], 0
mov dword [esi + 0x3370], 0
mov dword [esi + 0x336c], 0
mov dword [esi + 0x3394], 0
mov dword [esi + 0x338c], 0
mov dword [esi + 0x3388], 0
mov dword [esi + 0x3398], 0
mov dword [esi + 0x3384], 0
mov dword [esi + 0x3390], 0
mov dword [esi + 0x339c], 0
mov dword [esi + 0x33a0], 0
mov dword [esi + 0x33a4], 0x10000
mov word [esi + 0x33a8], 0
mov byte [esi + 0x33aa], 0
mov dword [esi + 0x33ac], 0
mov word [esi + 0x33c0], 0
mov byte [esi + 0x33c2], 0
mov dword [esi + 0x33c4], 0
mov dword [esi + 0x33c8], 0
mov dword [esi + 0x33cc], 0
mov dword [esi + 0x33d8], 0xffffffff
mov dword [esi + 0x33d4], 0xffffffff
mov dword [esi + 0x33d0], 0xffffffff
mov dword [esi + 0x33fc], 0
mov dword [esi + 0x3400], 0
mov dword [esi + 0x3404], 0
mov dword [esi + 0x34c0], 0
mov dword [esi + 0x34bc], 0
mov dword [esi + 0x34b8], 0
mov dword [esi + 0x34c8], 0
mov dword [esi + 0x34c4], 0
mov byte [esi + 0x34cc], 0
mov dword [esi + 0x34d0], 0
mov dword [esi + 0x34d4], 0
mov word [esi + 0x34d9], 0
xor eax, eax
mov byte [esi + 0x34d8], 0
mov dword [esi + 0x34dc], 0
mov dword [esi + 0x34e0], 0xffffffff
mov dword [esi + 0x34e4], 0xffffffff
mov dword [esi + 0x3530], 0
mov dword [esi + 0x3534], 0
mov dword [esi + 0x3538], 0
mov dword [esi + 0x353c], 0
mov dword [esi + 0x3540], 0
mov dword [esi + 0x3544], 0xffffffff
mov dword [esi + 0x3548], 0
movups xmmword [esi + 0x3558], xmm0
mov dword [esi + 0x3568], 0
mov dword [esi + 0x3578], 0
mov dword [esi + 0x357c], 0
mov dword [esi + 0x35c4], 0
mov dword [esi + 0x44d4], 0
mov dword [esi + 0x44d8], 0xa900000
mov dword [esi + 0x44e0], 0
mov dword [esi + 0x44dc], 0
mov dword [esi + 0x44e4], 0
mov dword [esi + 0x4528], 0
mov word [esi + 0x452c], 0
mov dword [esi + 0x4530], 0
mov dword [esi + 0x4534], 0x3c23d70a
mov dword [esi + 0x453c], 0
mov dword [esi + 0x4540], eax
mov dword [esi + 0x4538], eax
mov dword [esi + 0x4544], 0x3f000000
mov dword [esi + 0x4564], eax
mov dword [esi + 0x4568], eax
mov dword [esi + 0x4574], 0xbf800000
mov dword [esi + 0x4578], 0xbf800000
mov word [esi + 0x4580], 0x2e
mov dword [esi + 0x4584], eax
mov dword [esi + 0x45c4], eax
mov byte [esi + 0x45c8], al
mov dword [esi + 0x45cc], eax
mov dword [esi + 0x45e4], eax
mov dword [esi + 0x45e0], eax
mov dword [esi + 0x45d0], eax
mov dword [esi + 0x45e8], 0x7f7fffff
mov byte [esi + 0x45ec], al
mov dword [esi + 0x45f0], eax
mov dword [esi + 0x45f8], 2
mov dword [esi + 0x45f4], 2
mov byte [esi + 0x45fc], al
push 0x1e0
push eax
mov dword [esi + 0x4600], eax
lea eax, [esi + 0x462c]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi + 0x4810], 0
mov dword [esi + 0x480c], 0
lea eax, [esi + 0x4824]
mov dword [esi + 0x4814], 0
mov dword [esi + 0x4820], 0xffffffff
push 0xc01
push 0
mov dword [esi + 0x481c], 0xffffffff
push eax
mov dword [esi + 0x4818], 0xffffffff
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4