Function at 0x441f80
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x49cc97
mov eax, dword fs:[0]
push eax
sub esp, 0x34
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4c86e0]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov esi, ecx
mov ebp, dword [esp + 0x58]
mov ecx, ebp
call fcn.0045a1ef
xor ebx, ebx
mov dword [esp + 0x50], ebx
mov dword [ebp + 0x74], vtable.CCXBParentWnd.0
mov dword [ebp + 0x78], vtable.CArray_class_CCXBVirtualCtrl___class_CCXBVirtualCtrl__.0
mov dword [ebp + 0x7c], ebx
mov dword [ebp + 0x88], ebx
mov dword [ebp + 0x84], ebx
mov dword [ebp + 0x80], ebx
mov dword [ebp + 0x90], ebx
mov dword [ebp + 0x8c], ebx
mov dword [ebp + 0x94], ebx
mov byte [esp + 0x50], 1
mov dword [ebp], vtable.CCXBMainDlg.1.0
mov dword [ebp + 0x74], vtable.CCXBMainDlg.0
call fcn.00461729
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x44201c
push 0x80004005
call fcn.00401fb0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0xb4], eax
mov byte [esp + 0x50], 2
call fcn.00461729
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x44204d
push 0x80004005
call fcn.00401fb0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp + 0xc4], eax
push 0x4cd500
mov dword [ebp + method.ATL::CImage.virtual_0], vtable.ATL::CImage.0
mov dword [ebp + 0x130], ebx
mov dword [ebp + 0x134], ebx
mov dword [ebp + 0x138], ebx
mov dword [ebp + 0x13c], ebx
mov dword [ebp + 0x140], ebx
mov dword [ebp + 0x144], ebx
mov byte [ebp + 0x148], bl
mov byte [ebp + 0x149], bl
mov dword [ebp + 0x14c], 0xffffffff
mov dword [ebp + 0x150], ebx
mov dword [ebp + 0x154], ebx
mov dword [ebp + 0x158], ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
add dword [0x4cd518], 1
push 0x4cd500
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
lea edi, [ebp + 0x220]
call fcn.00446b60
lea edi, [ebp + 0x308]
call fcn.00446b60
lea edi, [ebp + 0x3f0]
call fcn.00446b60
lea edi, [ebp + 0x4d8]
mov ecx, edi
mov byte [esp + 0x50], 7
call fcn.0045c0ce
mov ecx, dword [esp + 0x5c]
mov dword [edi], vtable.CCXBShadowWnd.0
mov dword [edi + 0x64], ebx
mov dword [edi + 0x60], ebx
mov dword [edi + 0x54], 1
mov dword [edi + 0x5c], ebx
mov dword [edi + 0x58], ebx
mov byte [edi + 0x68], bl
mov byte [edi + 0x69], bl
mov byte [edi + 0x6b], 1
mov byte [edi + 0x6a], 0xff
mov dword [ebp + 0x584], ebx
mov dword [ebp + 0x588], ebx
mov dword [ebp + 0x58c], ebx
mov dword [ebp + 0x590], ebx
mov dword [ebp + 0x5b4], ebx
mov dword [ebp + 0x5b8], ebx
mov dword [ebp + 0x5bc], ebx
mov dword [ebp + 0x5c0], ebx
lea edi, [ebp + 0x594]
mov dword [ebp + 0x54], esi
movzx edx, si
mov dword [ebp + 0x68], ecx
mov dword [ebp + 0x58], edx
mov dword [ebp + 0xa8], 0xeaeaea
mov dword [ebp + 0x9c], ebx
mov dword [ebp + 0xa0], ebx
mov dword [ebp + 0xb0], 3
mov eax, 0x10
mov esi, 5
mov dword [ebp + 0xac], esi
mov dword [ebp + 0xd4], ebx
mov dword [ebp + 0xd8], ebx
or ecx, 0xffffffff
mov dword [ebp + 0xb8], 0xffffff
mov dword [ebp + 0xd0], ecx
mov dword [ebp + 0x110], ebx
mov dword [ebp + 0x544], eax
mov dword [ebp + 0x548], eax
mov dword [ebp + 0x54c], eax
mov dword [ebp + 0x554], eax
mov dword [ebp + 0x550], ebx
mov edx, 4
mov dword [ebp + 0x558], edx
mov dword [ebp + 0x55c], esi
mov dword [ebp + 0x560], edx
mov dword [ebp + 0x120], ecx
mov ecx, 2
mov dword [ebp + 0x108], ecx
mov esi, 0x1e
mov dword [ebp + 0x10c], esi
mov ecx, 3
mov dword [ebp + 0x124], ebx
mov dword [ebp + 0x128], ebx
mov dword [esp + 0x18], esi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], ecx
mov ecx, 0xc
lea esi, [esp + 0x18]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], 0x14
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp + 0x118], 5
mov dword [ebp + 0x11c], edx
mov dword [ebp + 0x100], eax
mov dword [ebp + 0x104], eax
mov dword [ebp + 0xfc], ebx
mov dword [ebp + 0x114], ebx
mov dword [ebp + 0x98], ebx
mov dword [ebp + 0xbc], ebx
mov dword [ebp + 0xc0], ebx
mov dword [ebp + 0xc8], ebx
mov dword [ebp + 0xcc], ebx
mov eax, 2
mov dword [ebp + 0xf8], ebx
mov dword [ebp + 0xec], ebx
mov dword [ebp + 0xf0], 0x12c
mov dword [ebp + 0xf4], 0xfa
mov dword [ebp + 0x218], ebx
mov dword [ebp + 0x21c], ebx
mov dword [ebp + 0x164], 1
mov dword [ebp + 0x168], ebx
mov dword [ebp + 0x214], ebx
mov dword [ebp + 0x20c], eax
mov dword [ebp + 0x210], eax
mov dword [ebp + 0xa4], ebx
mov eax, ebp
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret 8