Function at 0x4343d0
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x490317
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x4c4074]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
lea eax, [ebx + 8]
mov dword [ebx + 4], 0
mov dword [ebp - 0x14], eax
mov dword [eax + 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov dword [ebp - 4], 3
lea esi, [ebx + 0x20]
push 0x30
push 0
push esi
call fcn.00470500
mov dword [esi], 0x30
add esp, 0xc
mov dword [ebx + 0x24], 0x80
mov eax, dword [0x4c508c]
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], 0xc4
mov dword [ebx + 0x38], 0x43a4e0
mov dword [ebx + 0x40], 0x439140
mov dword [ebx + 0x3c], ebx
mov dword [ebp - 4], 4
lea eax, [ebx + 0x50]
mov dword [ebp - 0x14], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 5
mov byte [eax + 0x1c], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0x18], 0xffffffff
mov byte [ebp - 4], 6
mov word [ebx + 0x74], 0
mov dword [ebp - 4], 7
mov eax, dword [ebp + 8]
mov dword [ebx + 0x78], 0x4ab4b8
mov byte [ebx + 0x7c], 1
mov dword [ebx + 0x80], 0x4ab4f8
mov dword [ebx + 0x88], eax
mov dword [ebx + 0x84], 0x4ab0a4
mov dword [ebx + 0x90], eax
mov eax, dword [ebp + 0xc]
mov dword [ebx], 0x4ab514
mov dword [ebx + 0x78], 0x4ab4b8
mov dword [ebx + 0x80], 0x4ab508
mov dword [ebx + 0x84], 0x4ab504
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x98], 0
mov dword [ebx + 0x9c], 0
mov dword [ebx + 0xa0], 0
mov byte [ebp - 4], 8
lea esi, [ebx + 0xa8]
mov eax, dword [ebp + 0x10]
mov dword [ebx + 0xa4], eax
lea eax, [esi + 8]
mov dword [ebp + 8], esi
mov dword [esi + 4], 0
mov dword [ebp + 0x10], eax
mov dword [eax + 0xc], 0
mov byte [ebp - 4], 0xa
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov byte [ebp - 4], 0xb
mov ebx, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [esi + 0x20], ebx
mov byte [ebp - 4], 0xd
lea eax, [esi + 0x30]
mov edi, dword [sym.imp.USER32.dll_SetRectEmpty]
mov byte [esi + 0x24], 0
mov dword [esi + 0x40], 0xffffffff
mov dword [esi + 0x44], 0xffffffff
mov dword [esi + 0x48], 0
mov dword [esi + 0x4c], 0xffffffff
mov dword [esi + 0x50], 4
mov dword [esi + 0x54], 0
mov dword [esi + 0x58], 0
mov dword [esi + 0x5c], 0
mov byte [esi + 0x60], 1
mov dword [esi + 0x64], 0
mov dword [esi + 0x68], 0
mov byte [esi + 0x6c], 1
mov dword [esi + 0x70], 1
mov dword [esi + 0x74], 0xffffffff
mov dword [esi + 0x78], 0xffffffff
mov byte [esi + 0x7c], 0
push eax
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
call edi
mov byte [ebp - 4], 0xe
mov dword [esi], 0x4ab48c
mov byte [ebp - 4], 0xf
mov esi, dword [ebp - 0x10]
add esi, 0x128
mov dword [ebp + 8], esi
lea eax, [esi + 8]
mov dword [ebp + 0x10], eax
mov dword [esi + 4], 0
mov dword [eax + 0xc], 0
mov byte [ebp - 4], 0x11
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov byte [ebp - 4], 0x12
mov dword [esi + 0x20], ebx
mov byte [ebp - 4], 0x14
lea eax, [esi + 0x30]
mov byte [esi + 0x24], 1
mov dword [esi + 0x40], 0xffffffff
mov dword [esi + 0x44], 0xffffffff
mov dword [esi + 0x48], 0
mov dword [esi + 0x4c], 0xffffffff
mov dword [esi + 0x50], 4
mov dword [esi + 0x54], 0
mov dword [esi + 0x58], 0
mov dword [esi + 0x5c], 0
mov byte [esi + 0x60], 1
mov dword [esi + 0x64], 0
mov dword [esi + 0x68], 0
mov byte [esi + 0x6c], 1
mov dword [esi + 0x70], 1
mov dword [esi + 0x74], 0xffffffff
mov dword [esi + 0x78], 0xffffffff
mov byte [esi + 0x7c], 0
push eax
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
call edi
mov byte [ebp - 4], 0x15
mov dword [esi], 0x4ab48c
mov byte [ebp - 4], 0x16
mov esi, dword [ebp - 0x10]
lea ecx, [esi + 0x1a8]
mov dword [ebp + 8], ecx
lea eax, [ecx + 8]
mov dword [ecx + 4], 0
mov dword [ebp + 0x10], eax
mov dword [eax + 0xc], 0
mov byte [ebp - 4], 0x18
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 0
mov byte [ebp - 4], 0x19
mov dword [ecx + 0x20], ebx
mov byte [ebp - 4], 0x1b
mov dword [ecx], 0x4ab4e8
mov byte [ebp - 4], 0x1c
lea ecx, [esi + 0x1d0]
mov dword [ebp + 8], ecx
lea eax, [ecx + 8]
mov dword [ecx + 4], 0
mov dword [ebp + 0x10], eax
mov dword [eax + 0xc], 0
mov byte [ebp - 4], 0x1e
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], 0
mov byte [ebp - 4], 0x1f
mov dword [ecx + 0x20], ebx
mov byte [ebp - 4], 0x21
mov dword [ecx], 0x4ab4d8
mov byte [ebp - 4], 0x22
mov dword [esi + 0x1f8], 0
mov dword [esi + 0x1fc], 0
mov dword [esi + 0x200], 0
mov dword [esi + 0x204], 0
mov dword [esi + 0x208], 0
mov dword [esi + 0x20c], 0
mov byte [ebp - 4], 0x23
lea eax, [esi + 0x210]
mov dword [ebp + 8], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 0x25
lea edi, [esi + 0x228]
mov dword [esi + 0x21c], 0
mov dword [esi + 0x220], 0
mov dword [esi + 0x224], 0
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434a77
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x27
lea edi, [esi + 0x22c]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434a81
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x29
lea edi, [esi + 0x230]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434a8b
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x2b
lea edi, [esi + 0x234]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434a95
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x2d
lea edi, [esi + 0x238]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434a9f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x2f
lea edi, [esi + 0x23c]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434aa9
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x31
lea edi, [esi + 0x240]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434ab3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x33
lea edi, [esi + 0x244]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434abd
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x35
lea edi, [esi + 0x248]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434ac7
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x37
lea edi, [esi + 0x24c]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434ad1
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x39
lea edi, [esi + 0x250]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434adb
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x3b
lea edi, [esi + 0x254]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434ae5
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x3d
lea edi, [esi + 0x258]
mov dword [ebp + 8], edi
call fcn.00403d50
mov ecx, eax
test ecx, ecx
je 0x434aef
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x3f
mov dword [esi + 0x25c], 0
mov dword [esi + 0x264], 0
mov dword [esi + 0x268], 0
mov dword [esi + 0x26c], 0
mov byte [ebp - 4], 0x40
mov ecx, esi
call fcn.00435e60
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov edi, dword [ecx + 4]
test edi, edi
jle 0x434a42
xor edx, edx
nop dword [eax]
test edx, edx
js 0x434a6b
cmp eax, edi
jge 0x434a6b
mov ecx, dword [ecx]
mov ecx, dword [ecx + edx + 8]
cmp dword [ecx - 0xc], 0
jne 0x434a67
mov ecx, dword [ebp + 0xc]
inc eax
add edx, 0x164
cmp eax, edi
jl 0x434a20
xor al, al
mov byte [esi + 0x260], al
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov al, 1
jmp 0x434a44
push 1
push 0xc000008c
call fcn.004086a0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
push 0x80004005
call fcn.004024c0
int3