Function at 0x42ad30
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x574c77
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x5b4ef4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x14], 0
cmp dword [ebp + 8], 0
je 0x42ad96
mov dword [edi + 4], 0x597604
mov dword [edi + method.nbase::SupportWeakCallback.virtual_0], vtable.nbase::SupportWeakCallback.0
mov dword [edi + 0x32c], 0
mov dword [edi + 0x330], 0
mov dword [ebp - 0x14], 1
mov eax, dword [edi + 4]
mov dword [edi], vtable.ui::PlaceHolder.0
mov eax, dword [eax + 4]
mov dword [eax + edi + 4], vtable.ui::PlaceHolder.1.0
xor eax, eax
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 7
mov word [edi + 8], ax
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], 0xffffffff
mov dword [edi + 0x2c], 0xffffffff
mov dword [edi + 0x30], 0xffffffff
mov dword [edi + 0x34], 0xffffffff
mov dword [edi + 0x38], 0x98967f
mov dword [edi + 0x3c], 0x98967f
mov dword [edi + 0x4c], eax
mov dword [edi + 0x48], eax
mov dword [edi + 0x44], eax
mov dword [edi + 0x40], eax
mov dword [edi + 0x50], eax
mov dword [edi + 0x54], eax
mov dword [edi + 0x58], 0x1010100
mov word [edi + 0x5c], 1
mov byte [edi + 0x5e], al
mov dword [edi + 0x60], eax
mov dword [ebp - 4], 1
lea esi, [edi + 0x68]
mov eax, dword [edi + 4]
mov dword [edi], vtable.ui::Control.0
mov eax, dword [eax + 4]
mov dword [ebp + 8], esi
mov dword [eax + edi + 4], vtable.ui::Control.1.0
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00428860
mov dword [esi], eax
mov byte [ebp - 4], 2
lea esi, [edi + 0x70]
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00428860
mov dword [esi], eax
mov byte [ebp - 4], 3
lea esi, [edi + 0x78]
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00428860
mov dword [esi], eax
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0x1010100
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0x10101
mov word [edi + 0x90], 1
mov dword [edi + 0x94], 0
mov dword [edi + 0x98], 0x12c
mov dword [edi + 0x9c], 0xff
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
mov dword [edi + 0xac], 0
mov dword [edi + 0xa8], 0
mov dword [edi + 0xb4], 0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xbc], 0
mov dword [edi + 0xb8], 0
mov dword [edi + 0xcc], 0
mov dword [edi + 0xc8], 0
mov dword [edi + 0xc4], 0
mov dword [edi + 0xc0], 0
mov dword [edi + 0xdc], 0
mov dword [edi + 0xd8], 0
mov dword [edi + 0xd4], 0
mov dword [edi + 0xd0], 0
mov dword [edi + 0xec], 0
mov dword [edi + 0xe8], 0
xor eax, eax
mov dword [edi + 0xe4], 0
mov dword [edi + 0xe0], 0
mov dword [edi + 0xf0], 0
mov dword [edi + 0xf4], 0
mov dword [edi + 0x108], 0
mov dword [edi + 0x10c], 7
mov word [edi + 0xf8], ax
mov dword [edi + 0x120], eax
mov dword [edi + 0x124], 7
mov word [edi + 0x110], ax
mov dword [edi + 0x138], eax
mov dword [edi + 0x13c], 7
mov word [edi + 0x128], ax
mov dword [edi + 0x150], eax
mov dword [edi + 0x154], 7
mov word [edi + 0x140], ax
mov dword [edi + 0x168], eax
mov dword [edi + 0x16c], 7
mov word [edi + 0x158], ax
mov dword [edi + 0x180], eax
mov dword [edi + 0x184], 7
mov word [edi + 0x170], ax
mov dword [edi + 0x198], eax
mov dword [edi + 0x19c], 7
mov word [edi + 0x188], ax
mov byte [ebp - 4], 0xc
lea ebx, [edi + 0x1a0]
mov dword [ebp + 8], ebx
lea esi, [ebx + 4]
mov dword [ebx], eax
mov dword [ebp + 8], esi
mov dword [esi], eax
mov dword [esi + 4], eax
call fcn.00404ff0
mov dword [esi], eax
lea ecx, [edi + 0x1ac]
call fcn.00404190
lea ecx, [edi + 0x230]
call fcn.00404190
mov byte [ebp - 4], 0xf
lea esi, [edi + 0x2b4]
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00428860
mov dword [esi], eax
mov byte [ebp - 4], 0x10
lea esi, [edi + 0x2bc]
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00404ff0
mov dword [esi], eax
xorps xmm0, xmm0
movq qword [edi + 0x2c4], xmm0
mov dword [edi + 0x2cc], 0
mov dword [edi + 0x2c8], 0
mov dword [edi + 0x2cc], 0
mov dword [edi + method.nbase::SupportWeakCallback.virtual_0], vtable.nbase::WeakCallbackFlag.0
add edi, 0x2d0
mov byte [ebp - 4], 0x12
mov dword [ebp + 8], edi
lea esi, [edi + 4]
mov dword [ebp + 8], esi
mov dword [edi], 0
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00420f40
mov dword [esi], eax
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movq qword [eax + 0x2dc], xmm0
mov dword [eax + 0x2e4], 0
mov dword [eax + 0x2e0], 0
mov dword [eax + 0x2e4], 0
mov dword [eax + method.nbase::SupportWeakCallback.virtual_0], vtable.nbase::WeakCallbackFlag.0
movq qword [eax + 0x2e8], xmm0
mov dword [eax + 0x2f0], 0
mov dword [eax + 0x2ec], 0
mov dword [eax + 0x2f0], 0
mov dword [eax + method.nbase::SupportWeakCallback.virtual_0], vtable.nbase::WeakCallbackFlag.0
mov dword [eax + 0x308], 0
xor ecx, ecx
mov dword [eax + 0x30c], 7
mov word [eax + 0x2f8], cx
mov dword [eax + 0x310], ecx
mov dword [eax + 0x314], ecx
mov dword [eax + 0x318], 2
mov dword [eax + 0x31c], 2
mov dword [eax + 0x320], 2
mov byte [eax + 0x324], 1
mov byte [ebp - 4], 0x16
lea esi, [eax + 0x2b4]
mov dword [ebp + 8], ecx
lea ecx, [ebp + 8]
push ecx
mov ecx, esi
mov dword [ebx], eax
call fcn.00404db0
mov ebx, dword [ebp - 0x10]
mov ecx, esi
mov dword [eax], ebx
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], 1
call fcn.00404db0
mov ecx, esi
mov dword [eax], ebx
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], 2
call fcn.00404db0
mov ecx, esi
mov dword [eax], ebx
lea eax, [ebp + 8]
push eax
mov dword [ebp + 8], 3
call fcn.00404db0
mov dword [eax], ebx
mov eax, ebx
mov dword [edi], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4