Function at 0x31c9b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x3947e3
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
mov eax, dword [0x3c508c]
xor eax, esp
push eax
lea eax, [esp + 0x24]
mov dword fs:[0], eax
push 0x39cf4c
lea ecx, [esp + 0x18]
call dword [0x39a8d8]
lea ecx, [esp + 0x14]
lea ebx, [esp + 0x10]
mov dword [esp + 0x2c], 0
call fcn.003581f0
mov bl, 2
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x20]
push ecx
call fcn.0036de10
add esp, 8
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 3
call dword [0x39a8cc]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
push 0x39c260
lea ecx, [esp + 0x1c]
call dword [0x39a8d8]
lea ecx, [esp + 0x18]
lea ebx, [esp + 0xc]
mov byte [esp + 0x2c], 4
call fcn.003581f0
mov bl, 6
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
lea edx, [esp + 0xc]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.0036de10
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x30], 7
call dword [0x39a8cc]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
cmp byte [esp + 0x34], 0
je 0x31cc65
push 0x39d2e0
lea ecx, [esp + 0x18]
call dword [0x39a8d8]
lea ecx, [esp + 0x14]
lea ebx, [esp + 0x34]
mov byte [esp + 0x2c], 8
call fcn.003581f0
mov bl, 0xa
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.0036de10
add esp, 8
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0xb
call dword [0x39a8cc]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], bl
call dword [0x39ad2c]
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
je 0x31cc5c
mov ecx, dword [esp + 0xc]
cmp dword [ecx - 0xc], 0
jne 0x31cc5c
mov edx, dword [esp + 0x34]
cmp dword [edx - 0xc], 0
je 0x31cc5c
push 0x39cf4c
lea ecx, [esp + 0x20]
call dword [0x39a8d8]
push 0x39c260
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0xc
call dword [0x39a8d8]
lea ecx, [esp + 0x1c]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0xd
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xe
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x18]
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], 0xa
call dword [0x39ad2c]
push 0x39cf6c
lea ecx, [esp + 0x1c]
call dword [0x39a8d8]
push 0x39d320
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], 0xf
call dword [0x39a8d8]
lea ecx, [esp + 0x18]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0x10
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], 0x11
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
call dword [0x39ad2c]
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xa
call dword [0x39ad2c]
push 0x39c1cc
lea ecx, [esp + 0x1c]
call dword [0x39a8d8]
push 0x39c234
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], 0x12
call dword [0x39a8d8]
lea ecx, [esp + 0x18]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0x13
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], 0x14
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
call dword [0x39ad2c]
lea ecx, [esp + 0x18]
call dword [0x39ad2c]
lea ecx, [esp + 0x34]
jmp 0x31cda8
mov eax, dword [esp + 0x10]
cmp dword [eax - 0xc], 0
jne 0x31cdae
mov ecx, dword [esp + 0xc]
cmp dword [ecx - 0xc], 0
je 0x31cdae
push 0x39c260
lea ecx, [esp + 0x20]
call dword [0x39a8d8]
push 0x39cf4c
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0x15
call dword [0x39a8d8]
lea ecx, [esp + 0x1c]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0x16
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c], 0x17
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x34]
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], 6
call dword [0x39ad2c]
push 0x39d320
lea ecx, [esp + 0x20]
call dword [0x39a8d8]
push 0x39cf6c
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0x18
call dword [0x39a8d8]
lea ecx, [esp + 0x1c]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0x19
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c], 0x1a
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x34]
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], 6
call dword [0x39ad2c]
push 0x39c234
lea ecx, [esp + 0x20]
call dword [0x39a8d8]
push 0x39c1cc
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 0x1b
call dword [0x39a8d8]
lea ecx, [esp + 0x1c]
lea ebx, [esp + 0x20]
mov byte [esp + 0x2c], 0x1c
call fcn.003581f0
mov edx, eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c], 0x1d
call fcn.00358040
mov ecx, ebx
call dword [0x39ad2c]
lea ecx, [esp + 0x34]
call dword [0x39ad2c]
lea ecx, [esp + 0x1c]
call dword [0x39ad2c]
lea ecx, [esp + 0xc]
call dword [0x39ad2c]
lea ecx, [esp + 0x10]
call dword [0x39ad2c]
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop ecx
pop ebx
add esp, 0x28
ret 4