Function at 0x4355f0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x726c47
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
mov al, byte [ebp - 0xd]
push ebx
mov ebx, ecx
push esi
push edi
xor esi, esi
lea edi, [ebx + 4]
mov dword [ebp - 0x1c], ebx
mov byte [edi], al
mov dword [edi + 4], esi
mov dword [edi + 8], esi
mov dword [edi + 0xc], esi
mov cl, byte [ebp - 0xd]
mov dword [ebp - 4], esi
mov byte [ebx + 0x18], cl
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], esi
mov dl, byte [ebp - 0xd]
mov dword [ebx + 0x2c], esi
mov byte [ebx + 0x28], dl
mov dword [ebx + 0x30], esi
mov dword [ebx + 0x34], esi
mov al, byte [ebp - 0xd]
mov dword [ebx + 0x3c], esi
mov byte [ebx + 0x38], al
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
mov cl, byte [ebp - 0xd]
mov dword [ebx + 0x4c], esi
mov byte [ebx + 0x48], cl
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x54], esi
mov dword [ebx], 0x73a9d0
mov edx, dword [0x7da928]
mov ecx, dword [0x73a7f0]
mov eax, edx
cmp ecx, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], eax
jae 0x435689
mov dword [ebp - 0x18], ecx
mov eax, ecx
cmp edi, 0x7da920
jne 0x435719
mov dword [ebp - 0x14], ecx
mov ecx, dword [edi + 8]
cmp ecx, eax
jae 0x4356a4
call fcn.00705107
mov ecx, edi
call fcn.00421b20
mov eax, dword [edi + 8]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
sub eax, ecx
cmp eax, edx
jae 0x4356bd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jbe 0x4356fd
mov edx, dword [edi + 4]
add ecx, edx
mov edx, dword [ebp - 0x14]
sub eax, edx
push eax
lea eax, [ecx + edx]
push eax
push ecx
call fcn.00712760
mov eax, dword [edi + 8]
mov edx, dword [ebp - 0x14]
add esp, 0xc
sub eax, edx
mov ecx, edi
mov dword [ebp - 0x18], eax
push esi
push eax
call fcn.004219e0
test al, al
je 0x4356fd
mov ecx, dword [ebp - 0x18]
push ecx
mov ecx, edi
call fcn.004219c0
push esi
push esi
mov ecx, edi
call fcn.004200e0
pop edi
mov eax, ebx
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
cmp eax, esi
jbe 0x43577d
cmp eax, edx
jne 0x43577d
mov ecx, dword [0x7da924]
cmp ecx, esi
jne 0x435730
mov ecx, 0x73a7f4
cmp byte [ecx - 1], 0xfe
jae 0x43577d
push 1
mov ecx, edi
call fcn.00420200
mov eax, dword [0x7da924]
cmp eax, esi
jne 0x43574d
mov eax, 0x73a7f4
mov dword [edi + 4], eax
mov edx, dword [0x7da928]
mov dword [edi + 8], edx
mov ecx, dword [0x7da92c]
mov dword [edi + 0xc], ecx
mov cl, byte [eax - 1]
inc cl
pop edi
mov byte [eax - 1], cl
mov eax, ebx
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push 1
push eax
mov ecx, edi
call fcn.004219e0
test al, al
je 0x4357bb
mov eax, dword [0x7da924]
cmp eax, esi
mov esi, 0x73a7f4
je 0x43579b
mov esi, eax
mov ecx, dword [ebp - 0x18]
mov edi, dword [edi + 4]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov eax, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebx + 8]
mov dword [ebx + 0xc], eax
mov byte [ecx + eax], 0
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret