Function at 0x403ad0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x45c858
push eax
mov dword fs:[0], esp
sub esp, 0x154
cmp dword [0x4cb36c], 0x84
jne 0x403b82
push ebx
xor ebx, ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsA]
push ebx
call dword [sym.imp.KERNEL32.dll_InterlockedFlushSList]
push ebx
call dword [sym.imp.KERNEL32.dll_AddAtomW]
mov dword [esp + 0x154], 0xf
mov dword [esp + 0x150], ebx
mov byte [esp + 0x140], bl
push ebx
mov dword [esp + 0x164], ebx
call fcn.00404726
push ebx
push ebx
call fcn.004047b4
add esp, 0xc
mov dword [esp + 0x160], 0xffffffff
cmp dword [esp + 0x154], 0x10
jb 0x403b68
mov eax, dword [esp + 0x140]
push eax
call fcn.004049a6
add esp, 4
mov dword [esp + 0x150], ebx
mov byte [esp + 0x140], bl
mov dword [esp + 0x154], 0xf
pop ebx
mov dword [esp + 0x10c], 0x3dbc2f74
mov dword [esp + 0xfc], 0x6b2e79d5
mov dword [esp + 0x5c], 0x31cec7c8
mov dword [esp + 0x130], 0x3a757ab7
mov dword [esp + 0x11c], 0x2afc8f8b
mov dword [esp + 0x90], 0x459b14e3
mov dword [esp + 0x44], 0x3290e55
mov dword [esp + 0x70], 0x37ee5d23
mov dword [esp + 0xbc], 0x2fbee62f
mov dword [esp + 0x12c], 0x40239a87
mov dword [esp + 0x128], 0x6e4b3ac0
mov dword [esp + 0x74], 0x4894081a
mov dword [esp + 0x3c], 0x27a6e64f
mov dword [esp + 0x120], 0x88cfad1
mov dword [esp + 0x24], 0x2968041b
mov dword [esp + 0x88], 0x5b011dc
mov dword [esp + 0xac], 0x1121d262
mov dword [esp + 0xc8], 0x22f438e1
mov dword [esp + 0x1c], 0x7faf99f7
mov dword [esp + 0xd4], 0x56479c75
mov dword [esp + 0x10], 0x7bd3b1c3
mov dword [esp + 0x84], 0xc6dfa2d
mov dword [esp + 0xec], 0x39529680
mov dword [esp + 0x80], 0x3aa32773
mov dword [esp + 0x38], 0x79baec18
mov dword [esp + 0xd8], 0x6d616800
mov dword [esp + 0x54], 0x1d93fcc4
mov dword [esp + 0xc0], 0x34ec734d
mov dword [esp + 0xb8], 0x5f331156
mov dword [esp + 0x6c], 0x57a397ca
mov dword [esp + 8], 0x1e91d56c
mov dword [esp + 0x108], 0x529d9133
mov dword [esp + 0x134], 0x40a07b86
mov dword [esp + 0x68], 0x77d8268e
mov dword [esp + 0x34], 0x7f69c098
mov dword [esp + 4], 0x272cc94e
mov dword [esp + 0xb0], 0x2c6b2d3d
mov dword [esp + 0x9c], 0x50c03b2e
mov dword [esp + 0x78], 0x58e26df6
mov dword [esp + 0x124], 0x679c1e7a
mov dword [esp + 0x30], 0x813930
mov dword [esp + 0x100], 0x268ed5d0
mov dword [esp + 0x94], 0x3391b215
mov dword [esp], 0x46111afe
mov dword [esp + 0x60], 0x22bad46
mov dword [esp + 0xdc], 0x6e75c61
mov dword [esp + 0x114], 0x40fadcc0
mov dword [esp + 0xb4], 0x1bc667d
mov dword [esp + 0x7c], 0x47f7dee4
mov dword [esp + 0x58], 0x335925bd
mov dword [esp + 0xf8], 0x6e4353da
mov dword [esp + 0xa8], 0x62b52bb4
mov dword [esp + 0x118], 0x1570d920
mov dword [esp + 0x104], 0xaf79b
mov dword [esp + 0xd0], 0x4f85c959
mov dword [esp + 0xe4], 0x36b98910
mov dword [esp + 0xa0], 0x7439affa
mov dword [esp + 0x28], 0x23a7d31
mov dword [esp + 0x14], 0x3e0ad148
mov dword [esp + 0xf0], 0x74664622
mov dword [esp + 0xa4], 0x1f01055c
mov dword [esp + 0x50], 0x2c321ffe
mov dword [esp + 0xc], 0x3c1e01a7
mov dword [esp + 0xc4], 0x4880ace6
mov dword [esp + 0xe8], 0x28cf45f6
mov dword [esp + 0x20], 0x34a9705e
mov dword [esp + 0x98], 0x63011ca7
mov dword [esp + 0x2c], 0x3113fb69
mov dword [esp + 0x110], 0x6caa5709
mov dword [esp + 0x48], 0x206777cf
mov dword [esp + 0xe0], 0x5266ee6e
mov dword [esp + 0x4c], 0x43e049aa
mov dword [esp + 0x64], 0x5c8f7835
mov dword [esp + 0x18], 0x5eb279b2
mov dword [esp + 0x40], 0x384d31ec
mov dword [esp + 0xcc], 0x4395d2f3
mov dword [esp + 0x8c], 0x725eb96e
mov dword [esp + 0xf4], 0x7b2c9eb0
add dword [esp + 0x10c], 0x74e47d5d
mov eax, 0x3ce077cd
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
sub dword [esp + 0x10c], 0x46763112
sub dword [esp + 0x10c], 0x544d975a
mov eax, 0x31158c2e
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
mov eax, 0x1f127098
mul dword [esp + 0x5c]
mov eax, dword [esp + 0x5c]
mov eax, 0xab21b9c
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
mov eax, 0x493767cf
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
mov eax, 0x182bc689
mul dword [esp + 0x130]
mov eax, dword [esp + 0x130]
mov eax, 0x7aa445fc
mul dword [esp + 0x130]
mov eax, dword [esp + 0x130]
add dword [esp + 0x70], 0x634980e0
mov eax, 0x154b1476
mul dword [esp + 0x44]
mov eax, dword [esp + 0x44]
sub dword [esp + 0xbc], 0x2e6c6b43
mov eax, 0x211999b8
mul dword [esp + 0xfc]
mov eax, dword [esp + 0xfc]
sub dword [esp + 0x5c], 0x6f33a66e
mov eax, 0x2dff295
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
mov eax, 0x51da1140
mul dword [esp + 0x74]
mov eax, dword [esp + 0x74]
sub dword [esp + 0x70], 0x2ce01034
sub dword [esp + 0x12c], 0x1400eceb
mov eax, 0x28006e48
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov eax, 0x724983d5
mul dword [esp + 0x44]
mov eax, dword [esp + 0x44]
mov eax, 0x136813f9
mul dword [esp + 0xbc]
mov eax, dword [esp + 0xbc]
mov eax, 0x4713d8e
mul dword [esp + 0x128]
mov eax, dword [esp + 0x128]
sub dword [esp + 0x24], 0x47cfdfd4
add dword [esp + 0x44], 0x3c330e46
mov eax, 0x2cbce2d4
mul dword [esp + 0x10c]
mov eax, dword [esp + 0x10c]
mov eax, 0x64cf1991
mul dword [esp + 0xac]
mov eax, dword [esp + 0xac]
add dword [esp + 0x130], 0x4027dae9
sub dword [esp + 0x10c], 0x7abeb724
sub dword [esp + 0x88], 0x5e2e10c1
add dword [esp + 0xbc], 0xf48e3f6
mov eax, 0x61923f97
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
add dword [esp + 0x3c], 0x1da4a7db
mov eax, 0x3a42a469
mul dword [esp + 0x128]
mov eax, dword [esp + 0x128]
add dword [esp + 0x44], 0x7f2b6889
mov eax, 0x5fddb4ed
mul dword [esp + 0x88]
mov eax, dword [esp + 0x88]
mov eax, 0x18a400fe
mul dword [esp + 0x12c]
mov eax, dword [esp + 0x12c]
mov eax, 0xdf6ca23
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
mov eax, 0x4c9c5468
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
mov eax, 0x2efad968
mul dword [esp + 0x44]
mov eax, dword [esp + 0x44]
mov eax, 0x43851c73
mul dword [esp + 0x90]
mov eax, dword [esp + 0x90]
mov eax, 0x31bccc3c
mul dword [esp + 0xec]
mov eax, dword [esp + 0xec]
sub dword [esp + 0x44], 0x3dc45506
add dword [esp + 0x74], 0x511126e2
add dword [esp + 0x44], 0x1166fc7
add dword [esp + 0xc8], 0x348063e
sub dword [esp + 0xec], 0x61449f3d
mov eax, 0x3639a075
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
sub dword [esp + 0x12c], 0x5f1d09f3
mov eax, 0x411da12b
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0xc8], 0x568111d8
add dword [esp + 0x128], 0x736e9bcc
add dword [esp + 0x128], 0x158cf41f
sub dword [esp + 0x11c], 0x3ff37509
sub dword [esp + 0x74], 0x63af35fc
add dword [esp + 0x38], 0x5d872f95
add dword [esp + 0xac], 0x31ff187c
mov eax, 0x41a1df7
mul dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
sub dword [esp + 0x10], 0x4449421f
add dword [esp + 0x9c], 0xeae4757
mov eax, 0x4709cdea
mul dword [esp + 0xc8]
mov eax, dword [esp + 0xc8]
sub dword [esp + 0x100], 0x117d39b7
mov eax, 0x782c2246
mul dword [esp + 0xd4]
mov eax, dword [esp + 0xd4]
add dword [esp + 0xd4], 0x5d9db0d0
sub dword [esp + 0x54], 0x1e9c4178
add dword [esp + 0x24], 0x1f97eefe
add dword [esp + 0x1c], 0x23c10358
mov eax, 0xaa0b21d
mul dword [esp + 0xb8]
mov eax, dword [esp + 0xb8]
mov eax, 0x770aa4cf
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x6eaa66d0
mul dword [esp + 0x9c]
mov eax, dword [esp + 0x9c]
add dword [esp + 0x44], 0x15d45cbb
sub dword [esp + 0x34], 0x218443c3
add dword [esp + 0x10], 0x7a89adfc
mov eax, 0x21db3401
mul dword [esp + 0x58]
mov eax, dword [esp + 0x58]
mov eax, 0x262900b7
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
sub dword [esp + 0x6c], 0x692d1dfa
add dword [esp + 0x38], 0x38589036
mov eax, 0x682fced9
mul dword [esp + 0x78]
mov eax, dword [esp + 0x78]
mov eax, 0x510c2fa9
mul dword [esp + 0xf8]
mov eax, dword [esp + 0xf8]
mov eax, 0x7e865c8b
mul dword [esp + 8]
mov eax, dword [esp + 8]
sub dword [esp + 0x7c], 0x2fb1a096
add dword [esp + 0x9c], 0x6639659e
sub dword [esp + 0xdc], 0x43fa15b5
add dword [esp + 0x108], 0x384f512b
mov eax, 0x41f5763f
mul dword [esp + 0x124]
mov eax, dword [esp + 0x124]
add dword [esp + 0xc0], 0x272fda2d
sub dword [esp + 0x3c], 0x57f59a9
add dword [esp + 0x94], 0x177894ad
mov eax, 0x6ff0524a
mul dword [esp + 0x12c]
mov eax, dword [esp + 0x12c]
add dword [esp + 0xf0], 0x7a3729a4
add dword [esp + 0x74], 0x1077441f
add dword [esp + 0x134], 0x13056cf8
add dword [esp + 0x11c], 0x659a9a18
mov eax, 0x7a3fe727
mul dword [esp + 0xf0]
mov eax, dword [esp + 0xf0]
mov eax, 0x4b9be8b0
mul dword [esp + 0x104]
mov eax, dword [esp + 0x104]
mov eax, 0x22f13eb2
mul dword [esp + 0x80]
mov eax, dword [esp + 0x80]
add dword [esp + 0x70], 0x31ef6306
mov eax, 0x41ad4610
mul dword [esp + 0xc0]
mov eax, dword [esp + 0xc0]
add dword [esp + 0x60], 0x1fe82a5f
sub dword [esp + 0x114], 0x7491ed2d
mov eax, 0x548b0d14
mul dword [esp + 0xc4]
mov eax, dword [esp + 0xc4]
add dword [esp + 0x128], 0x50defb89
add dword [esp + 0x120], 0xe80b7d8
add dword [esp + 0xe4], 0x6e807931
add dword [esp + 0xb4], 0x34332e96
add dword [esp + 0xa4], 0x7cd51bb1
sub dword [esp + 0xdc], 0x1d3c5a8b
sub dword [esp + 0xac], 0x208c214f
sub dword [esp + 0x38], 0x17de536b
sub dword [esp + 0xe4], 0x390c14f5
add dword [esp + 0x28], 0x2bc8e1a3
add dword [esp + 0xb4], 0x7761d724
mov eax, 0x6e1792f9
mul dword [esp + 0x100]
mov eax, dword [esp + 0x100]
sub dword [esp + 0x78], 0x4e94d77a
mov eax, 0x579892d9
mul dword [esp + 0xa8]
mov eax, dword [esp + 0xa8]
sub dword [esp + 0xec], 0x130aea3b
sub dword [esp + 0xf0], 0x7714ea2c
sub dword [esp + 0xf0], 0x31b14839
add dword [esp + 0x24], 0x22f0035
add dword [esp + 0x3c], 0x29dba46b
add dword [esp + 0xbc], 0xafca99f
add dword [esp + 0xf0], 0x43e41294
mov ecx, dword [0x460504]
mov edx, dword [0x4604d8]
mov dword [0x4cb36c], ecx
mov dword [0x4cbd0c], edx
call fcn.004032a0
mov ecx, dword [esp + 0x154]
xor eax, eax
mov dword fs:[0], ecx
add esp, 0x160
ret 0x10