Function at 0x417788
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors

Disassembly:
push 0xffffffffffffffff
push 0x45a1fa
mov eax, dword fs:[0]
push eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4809a0]
xor eax, esp
push eax
lea eax, [esp + 0x14]
mov dword fs:[0], eax
mov esi, dword [esp + 0x24]
lea ebp, [esi + 0x10]
mov ecx, ebp
mov dword [esi], vtable.CSettingConfDetails.0
call fcn.00402fa4
xor ebx, ebx
lea ecx, [esi + 0x2c]
mov dword [esp + 0x1c], ebx
call fcn.00402fa4
lea ecx, [esi + 0x30]
call fcn.00402fa4
lea ecx, [esi + 0x34]
call fcn.00402fa4
lea ecx, [esi + 0x38]
call fcn.00402fa4
lea ecx, [esi + 0x3c]
call fcn.00402fa4
lea ecx, [esi + 0x40]
call fcn.00402fa4
lea ecx, [esi + 0x44]
call fcn.00402fa4
lea ecx, [esi + 0x48]
call fcn.00402fa4
lea ecx, [esi + 0x4c]
call fcn.00402fa4
lea ecx, [esi + 0x50]
call fcn.00402fa4
lea ecx, [esi + 0x54]
call fcn.00402fa4
lea ecx, [esi + 0x58]
call fcn.00402fa4
lea ecx, [esi + 0x128]
call fcn.00402fa4
lea ecx, [esi + 0x12c]
call fcn.00402fa4
lea ecx, [esi + 0x130]
call fcn.00402fa4
lea edi, [esi + 0x134]
mov ecx, edi
call fcn.00402fa4
lea ecx, [esi + 0x138]
call fcn.00402fa4
lea ecx, [esi + 0x2d0]
call fcn.00402fa4
lea ecx, [esi + 0x2d8]
call fcn.00402fa4
lea ecx, [esi + 0x3a8]
call fcn.00402fa4
mov byte [esp + 0x1c], 0x14
mov byte [esi + 5], bl
mov byte [esi + 0x14], 1
mov byte [esi + 0x15], 1
mov byte [esi + 0x16], bl
mov byte [esi + 0x18], 1
mov byte [esi + 0x1a], bl
mov byte [esi + 0x1b], bl
mov byte [esi + 0x1c], bl
mov byte [esi + 0x1d], bl
mov byte [esi + 0x1e], bl
mov dword [esi + 0x20], 0x1bb
push str.meeting.zoho.com
mov ecx, edi
call fcn.00403547
mov edi, 0x464fb4
push edi
lea ecx, [esi + 0x138]
call fcn.00403547
push 0x465014
lea eax, [esi + 0x204]
push 0x64
push eax
mov dword [esi + 0x24], 0x1bb
mov dword [esi + 0x28], ebx
call fcn.00439536
push edi
lea eax, [esi + 0x5c]
push 0x64
push eax
call fcn.00439536
add esp, 0x18
push str.Guest
lea ecx, [esi + 0x2c]
call fcn.00403547
push edi
lea ecx, [esi + 0x30]
call fcn.00403547
push edi
lea ecx, [esi + 0x34]
call fcn.00403547
push edi
lea ecx, [esi + 0x38]
call fcn.00403547
push edi
lea ecx, [esi + 0x40]
call fcn.00403547
push edi
lea ecx, [esi + 0x44]
call fcn.00403547
push edi
lea ecx, [esi + 0x48]
call fcn.00403547
push edi
lea ecx, [esi + 0x4c]
call fcn.00403547
push edi
lea ecx, [esi + 0x50]
call fcn.00403547
push edi
lea ecx, [esi + 0x54]
call fcn.00403547
push edi
lea ecx, [esi + 0x128]
mov dword [esi + 0x124], ebx
call fcn.00403547
push edi
lea ecx, [esi + 0x12c]
call fcn.00403547
push edi
lea ecx, [esi + 0x130]
call fcn.00403547
push edi
lea eax, [esi + 0x13c]
push 0x64
push eax
call fcn.00439536
add esp, 0xc
push edi
lea ecx, [esi + 0x2d0]
mov dword [esi + 8], 3
mov dword [esi + 0x2cc], ebx
call fcn.00403547
push edi
mov ecx, ebp
mov dword [esi + 0xc], ebx
call fcn.00403547
push edi
lea ecx, [esi + 0x2d8]
mov byte [esi + 0x2d4], bl
call fcn.00403547
mov byte [esi + 0x2dd], bl
mov byte [esi + 0x2dc], bl
mov dword [esi + 0x3b0], ebx
push edi
lea eax, [esi + 0x2de]
push 0x64
push eax
mov dword [esi + 0x3b4], ebx
mov dword [esi + 0x3b8], ebx
mov dword [esi + 0x3bc], ebx
mov dword [esi + 0x3c0], ebx
mov byte [esi + 0x1f], bl
call fcn.00439536
push 0x46f2ec
lea eax, [esi + 0x3c4]
push 0xa
push eax
call fcn.00439536
push edi
lea eax, [esi + 0x3d8]
push 0x104
push eax
call fcn.00439536
add esp, 0x24
mov byte [esi + 0x5e0], bl
mov eax, esi
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret 4