Function at 0x455bb0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4d81ee
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6e8
mov dx, word [0x4ffec0]
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x1a]
mov word [esp + 0x18], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ebx, 4
xor ebp, ebp
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x6a]
mov dword [esp + 0x58], 0xa03d
mov byte [esp + 0x5c], bl
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], ebp
mov word [esp + 0x68], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0xba]
mov dword [esp + 0xa8], 0xa03e
mov byte [esp + 0xac], bl
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xb4], 1
mov word [esp + 0xb8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x10a]
mov dword [esp + 0xf8], 0xa03f
mov byte [esp + 0xfc], bl
mov dword [esp + 0x100], ebp
mov dword [esp + 0x104], 2
mov word [esp + 0x108], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x15a]
mov dword [esp + 0x148], 0xa040
mov byte [esp + 0x14c], bl
mov dword [esp + 0x150], ebp
mov dword [esp + 0x154], 3
mov word [esp + 0x158], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x1aa]
mov dword [esp + 0x198], 0xa041
mov byte [esp + 0x19c], bl
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1a4], ebx
mov word [esp + 0x1a8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x1fa]
mov dword [esp + 0x1e8], ebp
mov byte [esp + 0x1ec], bl
mov dword [esp + 0x1f0], 1
mov dword [esp + 0x1f4], 0xffffffff
mov word [esp + 0x1f8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp + 0x10], esi
mov dword [esp + 0x238], 0xa042
mov byte [esp + 0x23c], bl
mov dword [esp + 0x240], ebp
mov dword [esp + 0x244], 5
mov word [esp + 0x248], dx
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x24a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x29a]
mov dword [esp + 0x288], 0xa043
mov byte [esp + 0x28c], bl
mov dword [esp + 0x290], ebp
mov dword [esp + 0x294], 6
mov word [esp + 0x298], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x2ea]
mov dword [esp + 0x2d8], 0xa044
mov byte [esp + 0x2dc], bl
mov dword [esp + 0x2e0], ebp
mov dword [esp + 0x2e4], 7
mov word [esp + 0x2e8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x33a]
mov dword [esp + 0x328], 0xa045
mov byte [esp + 0x32c], bl
mov dword [esp + 0x330], ebp
mov dword [esp + 0x334], 8
mov word [esp + 0x338], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x38a]
mov dword [esp + 0x378], 0xa046
mov byte [esp + 0x37c], bl
mov dword [esp + 0x380], ebp
mov dword [esp + 0x384], 9
mov word [esp + 0x388], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x3da]
mov dword [esp + 0x3c8], 0xa047
mov byte [esp + 0x3cc], bl
mov dword [esp + 0x3d0], ebp
mov dword [esp + 0x3d4], 0xa
mov word [esp + 0x3d8], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x42a]
mov dword [esp + 0x418], 0xa048
mov byte [esp + 0x41c], bl
mov dword [esp + 0x420], ebp
mov dword [esp + 0x424], 0xb
mov word [esp + 0x428], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x47a]
mov dword [esp + 0x468], 0xa049
mov byte [esp + 0x46c], bl
mov dword [esp + 0x470], ebp
mov dword [esp + 0x474], 0xc
mov word [esp + 0x478], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp + 0x4b8], 0xa04a
mov byte [esp + 0x4bc], bl
mov dword [esp + 0x4c0], ebp
mov dword [esp + 0x4c4], 0xd
mov word [esp + 0x4c8], dx
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x4ca]
push 0x20
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x51e]
mov dword [esp + 0x50c], ebp
mov byte [esp + 0x510], bl
mov dword [esp + 0x514], 1
mov dword [esp + 0x518], 0xffffffff
mov word [esp + 0x51c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x56e]
mov dword [esp + 0x55c], 0xa04b
mov byte [esp + 0x560], bl
mov dword [esp + 0x564], ebp
mov dword [esp + 0x568], 0xe
mov word [esp + 0x56c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x5be]
mov dword [esp + 0x5ac], 0xa04c
mov byte [esp + 0x5b0], bl
mov dword [esp + 0x5b4], ebp
mov dword [esp + 0x5b8], ecx
mov word [esp + 0x5bc], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x60e]
mov dword [esp + 0x5fc], 0xa04d
mov byte [esp + 0x600], bl
mov dword [esp + 0x604], ebp
mov dword [esp + 0x608], 0x10
mov word [esp + 0x60c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x65e]
mov dword [esp + 0x64c], 0xa04e
mov byte [esp + 0x650], bl
mov dword [esp + 0x654], ebp
mov dword [esp + 0x658], 0x11
mov word [esp + 0x65c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x6ae]
mov dword [esp + 0x69c], 0xa04f
mov byte [esp + 0x6a0], bl
mov dword [esp + 0x6a4], ebp
mov dword [esp + 0x6a8], 0x12
mov word [esp + 0x6ac], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp + 0x6ec], 0xa050
mov byte [esp + 0x6f0], bl
mov dword [esp + 0x6f4], ebp
mov dword [esp + 0x6f8], 0x13
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, ebp
mov dword [esp + 0x700], ebp
je 0x456137
mov ecx, eax
call fcn.004baf00
mov edi, eax
jmp 0x456139
xor edi, edi
push 0x10
push 0x10
mov ecx, edi
mov dword [esp + 0x708], 0xffffffff
call fcn.004bb5e0
push str.IL_MINITOOLBAR
mov ecx, edi
call fcn.004bb060
push str.IL_NETFAV
mov ecx, edi
call fcn.004bb060
add esi, 0x685c
push edi
mov ecx, esi
call fcn.004cfd50
push 1
mov ecx, esi
call fcn.004cfb60
push 5
push ebp
mov ecx, esi
call fcn.004cf710
mov edi, dword [esp + 0x10]
mov eax, dword [esi]
mov ecx, esi
lea ebx, [edi + 0x2c]
push ebx
call dword [eax + 0xc]
push str.BTN_SEP
push ebp
push ebp
push 1
push 3
push 2
push 1
push str.BTN_MASK_MINI
push ebp
push ebp
mov ecx, esi
call fcn.004cf600
lea ecx, [esp + 0x18]
push 0x16
push ecx
mov ecx, esi
call fcn.004cd570
push 0x455
mov ecx, esi
call fcn.004d0950
mov edx, dword [edi + 4]
mov eax, dword [edi + 0x30]
push ebp
push 1
push ebp
push ebp
push 0x455
push edx
push eax
push str.MiniToolBar
mov ecx, esi
call fcn.004cd440
push 3
push 0x19
push 0x1e
push 0x1e
push 0x1e
push esi
mov ecx, ebx
call fcn.004c0260
mov ecx, dword [edi + 0x2c62c]
push ebp
push ecx
mov ecx, edi
call fcn.004573b0
mov ecx, dword [esp + 0x6f8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x6f4
ret