Function at 0x44d7d0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x5831c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
mov eax, dword [esp + 0x20]
push ebx
push ebp
push esi
push edi
mov esi, ecx
push eax
push 0x6b
mov dword [esp + 0x18], esi
call fcn.00567fdd
lea ebx, [esi + 0x5c]
xor edi, edi
mov ecx, ebx
mov dword [esp + 0x28], edi
call fcn.00568d76
mov dword [ebx], vtable.CStatic.0
lea ebp, [esi + 0x98]
mov byte [esp + 0x28], 1
mov ecx, ebp
call fcn.00568d76
mov dword [ebp], vtable.CStatic.0
lea ebp, [esi + 0xd4]
mov byte [esp + 0x28], 2
mov ecx, ebp
call fcn.00568d76
mov dword [ebp], vtable.CStatic.0
lea ecx, [esi + 0x110]
mov byte [esp + 0x28], 3
call fcn.004ce860
lea ecx, [esi + 0x1e4]
mov byte [esp + 0x28], 4
call fcn.00565883
mov ecx, dword [0x5f9f88]
lea ebp, [esi + 0x23c]
mov dword [esp + 0x30], ebp
mov dword [ebp], ecx
mov edx, dword [0x5f9f88]
mov dword [ebp + 4], edx
mov dword [ebp + 0x2c], edi
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x34], edi
mov dword [ebp + 0x30], edi
push edi
mov ecx, ebp
mov byte [esp + 0x2c], 9
call fcn.0049ec50
mov dword [ebp + 0x28], edi
lea ebp, [esi + 0x27c]
mov ebx, 0xa
mov ecx, ebp
mov byte [esp + 0x28], bl
call fcn.00405dd0
mov dword [ebp], 0x597d4c
mov dword [esi + method.CGopherLocator.virtual_0], 0x599a28
mov dword [esi + 0x294], edi
mov dword [esi + 0x2a0], edi
mov dword [esi + 0x29c], edi
mov dword [esi + 0x298], edi
mov ecx, 0x598120
mov eax, 0x11
mov dword [esi + 0x3b8], ecx
mov dword [esi + 0x3bc], edi
mov dword [esi + 0x3c0], eax
mov dword [esi + 0x3c4], edi
mov dword [esi + 0x3c8], edi
mov dword [esi + 0x3cc], edi
mov dword [esi + 0x3d0], ebx
mov dword [esi + 0x3d4], ecx
mov dword [esi + 0x3d8], edi
mov dword [esi + 0x3dc], eax
mov dword [esi + 0x3e0], edi
mov dword [esi + 0x3e4], edi
mov dword [esi + 0x3e8], edi
mov dword [esi + 0x3ec], ebx
mov dword [esi + 0x3f0], ecx
mov dword [esi + 0x3f4], edi
mov dword [esi + 0x3f8], eax
mov dword [esi + 0x3fc], edi
mov dword [esi + 0x400], edi
mov dword [esi + 0x404], edi
mov dword [esi + 0x408], ebx
mov dword [esi + 0x40c], ecx
mov dword [esi + 0x410], edi
mov dword [esi + 0x414], eax
mov dword [esi + 0x418], edi
mov dword [esi + 0x41c], edi
mov dword [esi + 0x420], edi
mov dword [esi + 0x424], ebx
mov dword [esi + 0x428], 0x5999dc
mov dword [esi + 0x42c], edi
mov dword [esi + 0x438], edi
mov dword [esi + 0x434], edi
mov dword [esi + 0x430], edi
lea ebp, [esi + 0x43c]
mov byte [esp + 0x28], al
lea eax, [esp + 0x14]
mov dword [ebp], edi
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
push eax
mov dword [esi], method.CDialog.virtual_0
mov dword [esi + 0x2b0], edi
call fcn.0054800a
push eax
mov ecx, ebp
call fcn.0044daf0
mov eax, 1
mov dword [esi + 0x2a8], eax
mov dword [esi + 0x2ac], eax
call fcn.00578d59
call fcn.00578d59
mov eax, dword [eax + 0xc]
push 0x83
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov ecx, dword [esp + 0x20]
mov dword [esi + 0x2a4], eax
mov dword [esi + 0x288], edi
mov dword [esi + 0x28c], edi
mov dword [esi + 0x278], edi
mov dword [esi + 0x284], 0xffffffff
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 4