Function at 0x435600
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x722cb7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
mov al, byte [ebp - 0xd]
push ebx
mov ebx, ecx
push esi
push edi
xor esi, esi
lea edi, [ebx + 4]
mov dword [ebp - 0x1c], ebx
mov byte [edi], al
mov dword [edi + 4], esi
mov dword [edi + 8], esi
mov dword [edi + 0xc], esi
mov cl, byte [ebp - 0xd]
mov dword [ebp - 4], esi
mov byte [ebx + 0x18], cl
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], esi
mov dl, byte [ebp - 0xd]
mov dword [ebx + 0x2c], esi
mov byte [ebx + 0x28], dl
mov dword [ebx + 0x30], esi
mov dword [ebx + 0x34], esi
mov al, byte [ebp - 0xd]
mov dword [ebx + 0x3c], esi
mov byte [ebx + 0x38], al
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
mov cl, byte [ebp - 0xd]
mov dword [ebx + 0x4c], esi
mov byte [ebx + 0x48], cl
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x54], esi
mov dword [ebx], 0x7369d0
mov edx, dword [0x7d6528]
mov ecx, dword [0x7367f0]
mov eax, edx
cmp ecx, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], eax
jae 0x435699
mov dword [ebp - 0x18], ecx
mov eax, ecx
cmp edi, 0x7d6520
jne 0x435729
mov dword [ebp - 0x14], ecx
mov ecx, dword [edi + 8]
cmp ecx, eax
jae 0x4356b4
call fcn.00701187
mov ecx, edi
call fcn.00421b30
mov eax, dword [edi + 8]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
sub eax, ecx
cmp eax, edx
jae 0x4356cd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jbe 0x43570d
mov edx, dword [edi + 4]
add ecx, edx
mov edx, dword [ebp - 0x14]
sub eax, edx
push eax
lea eax, [ecx + edx]
push eax
push ecx
call fcn.0070e7e0
mov eax, dword [edi + 8]
mov edx, dword [ebp - 0x14]
add esp, 0xc
sub eax, edx
mov ecx, edi
mov dword [ebp - 0x18], eax
push esi
push eax
call fcn.004219f0
test al, al
je 0x43570d
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, edi
call fcn.004219d0
push esi
push esi
mov ecx, edi
call fcn.004200f0
pop edi
mov eax, ebx
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
cmp eax, esi
jbe 0x43578d
cmp eax, edx
jne 0x43578d
mov ecx, dword [0x7d6524]
cmp ecx, esi
jne 0x435740
mov ecx, 0x7367f4
cmp byte [ecx - 1], 0xfe
jae 0x43578d
push 1
mov ecx, edi
call fcn.00420210
mov eax, dword [0x7d6524]
cmp eax, esi
jne 0x43575d
mov eax, 0x7367f4
mov dword [edi + 4], eax
mov edx, dword [0x7d6528]
mov dword [edi + 8], edx
mov ecx, dword [0x7d652c]
mov dword [edi + 0xc], ecx
mov cl, byte [eax - 1]
inc cl
pop edi
mov byte [eax - 1], cl
mov eax, ebx
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push 1
push eax
mov ecx, edi
call fcn.004219f0
test al, al
je 0x4357cb
mov eax, dword [0x7d6524]
cmp eax, esi
mov esi, 0x7367f4
je 0x4357ab
mov esi, eax
mov ecx, dword [ebp - 0x18]
mov edi, dword [edi + 4]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 8]
mov dword [ebx + 0xc], eax
mov byte [ecx + eax], 0
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret