Function at 0x458bd0
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x858e63
push eax
mov dword fs:[0], esp
sub esp, 0x1e4
push ebx
push esi
push edi
mov esi, ecx
call fcn.006625c0
test eax, eax
jne 0x458d03
call fcn.006edd70
test eax, eax
jne 0x458d03
push 0xf
lea ecx, [esp + 0x54]
call fcn.004b5e30
lea ecx, [esp + 0x17c]
mov dword [esp + 0x1f8], 0
call fcn.004df100
mov byte [esp + 0x1f8], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [esp + 0x1b0], eax
lea eax, [esp + 0x17c]
lea ecx, [esp + 0x50]
push eax
push ecx
mov ecx, 0x9cded8
call fcn.004dd8c0
lea ecx, [esp + 0x1d8]
mov byte [esp + 0x1f8], 5
call fcn.00831eeb
lea ecx, [esp + 0x1b8]
mov byte [esp + 0x1f8], 4
call fcn.00636c90
lea ecx, [esp + 0x1ac]
mov byte [esp + 0x1f8], 3
call fcn.00617ec0
lea ecx, [esp + 0x19c]
mov byte [esp + 0x1f8], 2
call fcn.0061ebe0
lea edx, [esp + 0x184]
mov dword [esp + 0x4c], edx
lea ecx, [esp + 0x198]
mov byte [esp + 0x1f8], 7
call fcn.00831eeb
lea ecx, [esp + 0x194]
mov byte [esp + 0x1f8], 6
call fcn.00831eeb
lea ecx, [esp + 0x17c]
mov byte [esp + 0x1f8], 0
call fcn.004b5e20
lea ecx, [esp + 0x50]
mov dword [esp + 0x1f8], 0xffffffff
call fcn.004b5e20
push str.SDHELPER
lea ecx, [esp + 0x5c]
mov dword [esi + 0x38], esi
mov dword [esi + 0x24], esi
call fcn.00617540
mov eax, dword [eax]
push 0
push 0
push 0
push 1
push eax
lea ecx, [esp + 0x70]
mov dword [esp + 0x20c], 8
call fcn.004b5e90
mov bl, 0xa
lea ecx, [esp + 0x58]
mov byte [esp + 0x1f8], bl
call fcn.00617ec0
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x5c]
push eax
call fcn.004b61f0
mov eax, dword [eax]
lea ecx, [esp + 0x50]
push eax
mov byte [esp + 0x1fc], 0xb
call fcn.00611f20
mov eax, dword [eax]
lea ecx, [esi + 0x1c]
push eax
mov byte [esp + 0x1fc], 0xc
call fcn.0063e7e0
lea ecx, [esp + 0x50]
mov byte [esp + 0x1f8], 0xb
call fcn.00612730
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1f8], bl
call fcn.00617ec0
call fcn.0064f790
push eax
lea ecx, [esi + 0x18]
call fcn.0064f650
mov eax, dword [esi + 0x20c]
test eax, eax
jne 0x458e99
push 0xffffffffffffffff
lea eax, [esi + 0x210]
push 0x7530
lea ecx, [esi + 0x34]
push 0
push eax
mov dword [eax], ecx
push 0
push 0
lea ecx, [esp + 0x24]
mov dword [esi + 0x214], 0x413a60
call fcn.005794a0
lea edx, [esp + 0xc]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0xd
call fcn.0057a890
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x230], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x22c], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x238], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x240], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x23c], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x24c], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x244], edx
mov edx, dword [esp + 0x34]
mov dword [esi + 0x248], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x258], ecx
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x250], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x254], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x264], ecx
lea ecx, [esp + 0xc]
mov dword [esi + 0x25c], edx
mov dword [esi + 0x260], eax
mov byte [esp + 0x1f8], bl
call fcn.00579500
push 0xffffffffffffffff
lea eax, [esi + 0x1b0]
push 0x7530
push 0
push eax
lea edi, [esi + 0x34]
push 0
push 0
lea ecx, [esp + 0x24]
mov dword [eax], edi
mov dword [esi + 0x1b4], 0x413a80
call fcn.005794a0
lea edx, [esp + 0xc]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0xe
call fcn.0057a890
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x1d0], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x1cc], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x1d8], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x1e0], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x1dc], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x1ec], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x1e4], edx
mov edx, dword [esp + 0x34]
mov dword [esi + 0x1e8], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x1f8], ecx
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x1f0], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x1f4], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x204], ecx
lea ecx, [esp + 0xc]
mov dword [esi + 0x1fc], edx
mov dword [esi + 0x200], eax
mov byte [esp + 0x1f8], bl
call fcn.00579500
push 0xffffffffffffffff
lea eax, [esi + 0xfc]
push 0x1d4c0
push 0
push eax
push 0
push 2
lea ecx, [esp + 0x24]
mov dword [eax], edi
mov dword [esi + 0x100], 0x413a10
call fcn.005794a0
lea edx, [esp + 0xc]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0xf
call fcn.0057a890
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x118], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x11c], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x124], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x128], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x12c], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x130], edx
mov dword [esi + 0x134], eax
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
mov dword [esi + 0x138], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x144], ecx
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x13c], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x140], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x150], ecx
lea ecx, [esp + 0xc]
mov dword [esi + 0x148], edx
mov dword [esi + 0x14c], eax
mov byte [esp + 0x1f8], bl
call fcn.00579500
push 0xffffffffffffffff
lea eax, [esi + 0x44]
push 0x7530
push 0
push eax
push 0
push 2
lea ecx, [esp + 0xbc]
mov dword [eax], edi
mov dword [esi + 0x48], 0x4139e0
call fcn.005794a0
lea edx, [esp + 0xa4]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0x10
call fcn.0057a890
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb4]
mov dword [esi + 0x60], eax
mov eax, dword [esp + 0xb8]
mov dword [esi + 0x64], ecx
mov ecx, dword [esp + 0xbc]
mov dword [esi + 0x6c], edx
mov edx, dword [esp + 0xc0]
mov dword [esi + 0x70], eax
mov eax, dword [esp + 0xc4]
mov dword [esi + 0x74], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esi + 0x7c], eax
mov eax, dword [esp + 0xd0]
mov dword [esi + 0x80], ecx
mov ecx, dword [esp + 0xd4]
mov dword [esi + 0x88], eax
mov eax, dword [esp + 0xdc]
mov dword [esi + 0x78], edx
mov edx, dword [esp + 0xcc]
mov dword [esi + 0x94], eax
push 0xffffffffffffffff
mov dword [esi + 0x8c], ecx
mov ecx, dword [esp + 0xe4]
lea eax, [esi + 0xa0]
push 0x9c40
mov dword [esi + 0x84], edx
mov edx, dword [esp + 0xe0]
push 0
push eax
mov dword [esi + 0x98], ecx
push 0
mov dword [esi + 0x90], edx
push 2
lea ecx, [esp + 0xfc]
mov dword [eax], edi
mov dword [esi + 0xa4], 0x4139f0
call fcn.005794a0
lea edx, [esp + 0xe4]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0x11
call fcn.0057a890
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov dword [esi + 0xbc], eax
mov edx, dword [esp + 0xf4]
mov eax, dword [esp + 0xf8]
mov dword [esi + 0xc0], ecx
mov ecx, dword [esp + 0xfc]
mov dword [esi + 0xc8], edx
mov edx, dword [esp + 0x100]
mov dword [esi + 0xcc], eax
mov eax, dword [esp + 0x104]
mov dword [esi + 0xd8], eax
mov eax, dword [esp + 0x110]
mov dword [esi + 0xd0], ecx
mov ecx, dword [esp + 0x108]
mov dword [esi + 0xe4], eax
mov eax, dword [esp + 0x11c]
mov dword [esi + 0xdc], ecx
mov ecx, dword [esp + 0x114]
mov dword [esi + 0xd4], edx
mov edx, dword [esp + 0x10c]
mov dword [esi + 0xf0], eax
push 0xffffffffffffffff
mov dword [esi + 0xe8], ecx
mov ecx, dword [esp + 0x124]
lea eax, [esi + 0x154]
push 0x9c40
mov dword [esi + 0xe0], edx
mov edx, dword [esp + 0x120]
push 0
push eax
mov dword [esi + 0xf4], ecx
push 0
mov dword [esi + 0xec], edx
push 2
lea ecx, [esp + 0x7c]
mov dword [eax], edi
mov dword [esi + 0x158], 0x413a30
call fcn.005794a0
lea edx, [esp + 0x64]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0x12
call fcn.0057a890
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x74]
mov dword [esi + 0x170], eax
mov eax, dword [esp + 0x78]
mov dword [esi + 0x174], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esi + 0x17c], edx
mov edx, dword [esp + 0x80]
mov dword [esi + 0x180], eax
mov eax, dword [esp + 0x84]
mov dword [esi + 0x184], ecx
mov ecx, dword [esp + 0x88]
mov dword [esi + 0x18c], eax
mov eax, dword [esp + 0x90]
mov dword [esi + 0x188], edx
mov edx, dword [esp + 0x8c]
mov dword [esi + 0x198], eax
mov eax, dword [esp + 0x9c]
mov dword [esi + 0x190], ecx
mov ecx, dword [esp + 0x94]
mov dword [esi + 0x1a4], eax
push 0xffffffffffffffff
mov dword [esi + 0x194], edx
mov edx, dword [esp + 0x9c]
mov dword [esi + 0x19c], ecx
mov ecx, dword [esp + 0xa4]
lea eax, [esi + 0x26c]
push 0x4e20
push 0
push eax
mov dword [esi + 0x1a0], edx
mov dword [esi + 0x1a8], ecx
push 0
mov dword [esi + 0x268], 0
mov dword [eax], edi
mov dword [esi + 0x270], 0x413980
push 2
lea ecx, [esp + 0x24]
call fcn.005794a0
lea edx, [esp + 0xc]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0x13
call fcn.0057a890
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x28c], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x288], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x294], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x29c], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x298], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x2a8], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x2a0], edx
mov edx, dword [esp + 0x34]
mov dword [esi + 0x2a4], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x2b4], ecx
mov ecx, dword [esp + 0x48]
mov dword [esi + 0x2ac], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x2b0], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x2c0], ecx
lea ecx, [esp + 0xc]
mov dword [esi + 0x2b8], edx
mov dword [esi + 0x2bc], eax
mov byte [esp + 0x1f8], 0x12
call fcn.00579500
push 0xffffffffffffffff
lea eax, [esi + 0x2c4]
push 0xffffffffffffffff
push 0
push eax
push 3
push 0
lea ecx, [esp + 0x24]
mov dword [eax], edi
mov dword [esi + 0x2c8], 0x4139b0
call fcn.005794a0
lea edx, [esp + 0xc]
mov ecx, 0x9cf1a8
push edx
mov byte [esp + 0x1fc], 0x14
call fcn.0057a890
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov dword [esi + 0x2e0], eax
mov eax, dword [esp + 0x20]
mov dword [esi + 0x2e4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x2ec], edx
mov edx, dword [esp + 0x28]
mov dword [esi + 0x2f0], eax
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x2f4], ecx
mov ecx, dword [esp + 0x30]
mov dword [esi + 0x2f8], edx
mov edx, dword [esp + 0x34]
mov dword [esi + 0x2fc], eax
mov eax, dword [esp + 0x38]
mov dword [esi + 0x300], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x304], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x308], eax
mov eax, dword [esp + 0x44]
mov dword [esi + 0x30c], ecx
mov dword [esi + 0x310], edx
mov dword [esi + 0x314], eax
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x1f8], 0x12
mov dword [esi + 0x318], ecx
lea ecx, [esp + 0xc]
call fcn.00579500
push 0xffffffffffffffff
lea eax, [esi + 0x31c]
push 0x1388
push 0
push eax
push 0
push 1
lea ecx, [esp + 0x24]
mov dword [eax], edi
mov dword [esi + 0x320], 0x4139c0
call fcn.005794a0
lea ecx, [esp + 0x124]
mov byte [esp + 0x1f8], 0x15
call fcn.005801f0
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x128], edx
mov edx, dword [esp + 0x20]
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x134], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x138], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x140], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x144], edx
mov edx, dword [esp + 0x38]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x14c], ecx
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x150], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 0x154], eax
mov eax, dword [esp + 0x48]
mov byte [esp + 0x1f8], 0x16
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], edx
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [esp + 0x124]
mov dword [esp + 0x16c], eax
push ecx
mov ecx, 0x9cf4c8
mov dword [esp + 0x174], 0x2710
call fcn.0057f840
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x338], edx
mov edx, dword [esp + 0x20]
mov dword [esi + 0x33c], eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x344], ecx
mov ecx, dword [esp + 0x28]
mov dword [esi + 0x348], edx
mov edx, dword [esp + 0x2c]
mov dword [esi + 0x34c], eax
mov eax, dword [esp + 0x30]
mov dword [esi + 0x350], ecx
mov ecx, dword [esp + 0x34]
mov dword [esi + 0x354], edx
mov edx, dword [esp + 0x38]
mov dword [esi + 0x358], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x35c], ecx
mov ecx, dword [esp + 0x40]
mov dword [esi + 0x360], edx
mov dword [esi + 0x364], eax
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x48]
mov dword [esi + 0x368], ecx
lea ecx, [esp + 0x124]
mov dword [esi + 0x36c], edx
mov dword [esi + 0x370], eax
mov byte [esp + 0x1f8], 0x15
call fcn.00579500
lea ecx, [esp + 0xc]
mov byte [esp + 0x1f8], 0x12
call fcn.00579500
lea ecx, [esp + 0x64]
mov byte [esp + 0x1f8], 0x11
call fcn.00579500
lea ecx, [esp + 0xe4]
mov byte [esp + 0x1f8], 0x10
call fcn.00579500
lea ecx, [esp + 0xa4]
mov byte [esp + 0x1f8], bl
call fcn.00579500
lea ecx, [esp + 0x5c]
mov dword [esp + 0x1f8], 0xffffffff
call fcn.004b6020
mov ecx, dword [esp + 0x1f0]
pop edi
pop esi
mov eax, 1
pop ebx
mov dword fs:[0], ecx
add esp, 0x1f0
ret