Function at 0x3cf5de8
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 4], ecx
test dl, dl
je 0x3cf5e01
add esp, 0xfffffff0
call fcn.03a69aa4
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x3cf5636
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x3d73c8c
mov dword [esi + 0x10], eax
mov eax, 0x3d73e4c
mov dword [esi + 0x14], eax
mov eax, 0x3d7657c
mov dword [esi + 0x18], eax
mov eax, 0x3d76598
mov dword [esi + 0x1c], eax
mov eax, 0x3dbd8f8
mov dword [esi + 0x20], eax
mov eax, 0x3dbd918
mov dword [esi + 0x24], eax
mov eax, 0x3d74ab0
mov dword [esi + 0x28], eax
mov eax, 0x3d73bfc
mov dword [esi + 0x2c], eax
mov eax, 0x3d75870
mov dword [esi + 0x30], eax
mov eax, 0x3d75a08
mov dword [esi + 0x34], eax
mov eax, 0x3d752e0
mov dword [esi + 0x38], eax
mov eax, 0x3d75314
mov dword [esi + 0x3c], eax
mov eax, 0x3d7534c
mov dword [esi + 0x40], eax
mov eax, 0x3d7664c
mov dword [esi + 0x44], eax
mov eax, 0x3d747a8
mov dword [esi + 0x48], eax
mov eax, 0x3d74f88
mov dword [esi + 0x4c], eax
mov eax, 0x3d74ee8
mov dword [esi + 0x50], eax
mov eax, 0x3d4fc00
mov dword [esi + 0x54], eax
mov eax, 0x3d1d260
mov dword [esi + 0x58], eax
mov eax, 0x3d1ed70
mov dword [esi + 0x5c], eax
mov eax, 0x3d1d2e4
mov dword [esi + 0x60], eax
mov eax, 0x3d1ebf8
mov dword [esi + 0x64], eax
mov eax, 0x3d1dc7c
mov dword [esi + 0x68], eax
mov eax, 0x3d1e0bc
mov dword [esi + 0x6c], eax
mov eax, 0x3d1e330
mov dword [esi + 0x70], eax
mov eax, 0x3d1e4b0
mov dword [esi + 0x74], eax
mov eax, 0x3d1e478
mov dword [esi + 0x78], eax
mov eax, 0x3d1e1b4
mov dword [esi + 0x7c], eax
mov eax, fcn.03d1e2cc
mov dword [esi + 0x80], eax
mov eax, 0x3d1e20c
mov dword [esi + 0x84], eax
mov eax, 0x3d1e23c
mov dword [esi + 0x88], eax
mov eax, 0x3d1e268
mov dword [esi + 0x8c], eax
mov eax, 0x3d1e2a0
mov dword [esi + 0x90], eax
mov eax, 0x3d1e304
mov dword [esi + 0x94], eax
mov eax, fcn.03d1e188
mov dword [esi + 0x98], eax
mov eax, 0x3d1d530
mov dword [esi + 0x9c], eax
mov eax, 0x3d1fbf8
mov dword [esi + 0xa0], eax
mov eax, 0x3d1d414
mov dword [esi + 0xa4], eax
mov eax, 0x3d1d43c
mov dword [esi + 0xa8], eax
mov eax, 0x3d1d45c
mov dword [esi + 0xac], eax
mov eax, 0x3d1d4e0
mov dword [esi + 0xb0], eax
mov eax, 0x3d1d3c4
mov dword [esi + 0xb4], eax
mov eax, 0x3d1d7b8
mov dword [esi + 0xb8], eax
mov eax, 0x3d1d79c
mov dword [esi + 0xbc], eax
mov eax, 0x3d1d70c
mov dword [esi + 0xc0], eax
mov eax, 0x3d1d6ac
mov dword [esi + 0xc4], eax
mov eax, 0x3d1d818
mov dword [esi + 0xc8], eax
mov eax, 0x3d1d908
mov dword [esi + 0xcc], eax
mov eax, 0x3d1d728
mov dword [esi + 0xd0], eax
mov eax, 0x3d1dd64
mov dword [esi + 0xd4], eax
mov eax, 0x3d1dd74
mov dword [esi + 0xd8], eax
mov eax, 0x3d1dfa4
mov dword [esi + 0xdc], eax
mov eax, 0x3d1e900
mov dword [esi + 0xe0], eax
mov eax, 0x3d1e760
mov dword [esi + 0xe4], eax
mov eax, 0x3d1ea54
mov dword [esi + 0xe8], eax
mov eax, 0x3d1e7b0
mov dword [esi + 0xec], eax
mov eax, 0x3d1e800
mov dword [esi + 0xf0], eax
mov eax, 0x3d1e81c
mov dword [esi + 0xf4], eax
mov eax, 0x3d1e86c
mov dword [esi + 0xf8], eax
mov eax, 0x3d1d350
mov dword [esi + 0xfc], eax
mov eax, 0x3d1eb08
mov dword [esi + 0x100], eax
mov eax, 0x3d2831c
mov dword [esi + 0x104], eax
mov eax, 0x3d289b0
mov dword [esi + 0x108], eax
mov eax, 0x3d287d4
mov dword [esi + 0x10c], eax
mov eax, 0x3d2894c
mov dword [esi + 0x110], eax
mov eax, 0x3d28970
mov dword [esi + 0x114], eax
mov eax, 0x3d28994
mov dword [esi + 0x118], eax
mov eax, 0x3d5de3c
mov dword [esi + 0x11c], eax
mov eax, 0x3d5e980
mov dword [esi + 0x120], eax
mov eax, 0x3d39c90
mov dword [esi + 0x124], eax
mov eax, 0x3d75540
mov dword [esi + 0x128], eax
mov eax, 0x3d75504
mov dword [esi + 0x12c], eax
mov eax, 0x3d7557c
mov dword [esi + 0x130], eax
mov eax, 0x3d747f4
mov dword [esi + 0x134], eax
mov eax, fcn.03d74814
mov dword [esi + 0x138], eax
mov eax, 0x3cf8fd0
mov dword [esi + 0x13c], eax
mov eax, 0x3cf93bc
mov dword [esi + 0x140], eax
mov eax, 0x3cf90c0
mov dword [esi + 0x144], eax
mov eax, 0x3cf8dbc
mov dword [esi + 0x148], eax
mov eax, 0x3cf8de0
mov dword [esi + 0x14c], eax
mov eax, 0x3d754b8
mov dword [esi + 0x150], eax
mov eax, 0x3d75bb0
mov dword [esi + 0x154], eax
mov eax, 0x3d16b74
mov dword [esi + 0x158], eax
mov eax, 0x3d16e80
mov dword [esi + 0x15c], eax
mov eax, 0x3d17360
mov dword [esi + 0x160], eax
mov eax, 0x3d17418
mov dword [esi + 0x164], eax
mov eax, 0x3d17424
mov dword [esi + 0x168], eax
mov eax, 0x3d027e4
mov dword [esi + 0x16c], eax
mov eax, 0x3d02a1c
mov dword [esi + 0x170], eax
mov eax, 0x3d73ec0
mov dword [esi + 0x178], eax
mov eax, 0x3d745b4
mov dword [esi + 0x17c], eax
mov byte [esi + 4], 1
call fcn.03d7488c
xor edx, edx
mov eax, esi
call fcn.03ce9fd8
mov eax, dword [esi + 0xc]
mov edx, 0x3cf5668
call fcn.03a6bc6c
je 0x3cf6220
lea eax, [ebp - 4]
call fcn.03a6b2b8
push eax
mov eax, dword [0x3e4d144]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x10], 0xb
mov eax, dword [esi + 0xc]
mov dword [ebp - 0xc], eax
mov byte [ebp - 8], 0xb
lea edx, [ebp - 0x14]
mov ecx, 1
mov eax, 0x3cf567c
call fcn.03cd1394
mov eax, dword [ebp - 4]
call fcn.03cd47b4
call fcn.03a72770
mov eax, dword [0x3e4d0d0]
mov edx, dword [ebp - 4]
call fcn.03a68a30
call fcn.03a68bdc
call fcn.03a67998
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x3cf563d
lea eax, [ebp - 4]
call fcn.03a6b2b8
ret