Function at 0x431730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4c84ac
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x522d80]
xor eax, esp
push eax
lea eax, [esp + 0x1c]
mov dword fs:[0], eax
mov esi, ecx
push 0xe4
call fcn.00485f87
add esp, 4
mov dword [esp + 0x14], eax
mov ebx, dword [0x4cf65c]
mov dword [esp + 0x24], 0
test eax, eax
je 0x431782
mov ecx, eax
call ebx
jmp 0x431784
xor eax, eax
or edi, 0xffffffff
push 0xe4
mov dword [esp + 0x28], edi
mov dword [esi + 8], eax
call fcn.00485f87
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 1
test eax, eax
je 0x4317b1
mov ecx, eax
call ebx
jmp 0x4317b3
xor eax, eax
push 0x60
mov dword [esp + 0x28], edi
mov dword [esi + 0xc], eax
call fcn.00485f87
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 2
test eax, eax
je 0x4317de
mov ecx, eax
call dword [0x4cf6a0]
jmp 0x4317e0
xor eax, eax
push 0x60
mov dword [esp + 0x28], edi
mov dword [esi], eax
call fcn.00485f87
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], 3
test eax, eax
je 0x43180a
mov ecx, eax
call dword [0x4cf6a0]
jmp 0x43180c
xor eax, eax
mov ebx, dword [esp + 0x30]
mov dword [esi + 4], eax
cmp dword [ebx + 0xc0], 0
mov dword [esp + 0x24], edi
mov edi, dword [esp + 0x2c]
je 0x431846
mov eax, dword [ebx + 0x90]
mov ecx, dword [ebx + 0x8c]
mov edx, dword [edi + 0x189c]
push eax
mov eax, dword [edx + 4]
push ecx
mov ecx, dword [esi]
push eax
call dword [0x4cf6a4]
jmp 0x431886
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 0x10]
mov eax, dword [edi + 0x189c]
push ecx
mov ecx, dword [eax + 4]
push edx
push ecx
mov ecx, dword [esi]
call dword [0x4cf6a8]
mov edx, dword [ebx + 0xc]
mov eax, dword [ebx + 0x10]
mov ecx, dword [ebx + 0x68]
push edx
mov edx, dword [ebx + 0x74]
push eax
mov eax, dword [ebx + 0x80]
push ecx
mov ecx, dword [ebx + 0x8c]
push edx
push eax
push ecx
mov ecx, dword [esi]
call dword [0x4cf6ac]
mov ecx, dword [esi]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
fld dword [ecx + 0x44]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov dword [ecx + 0x28], edx
mov ecx, dword [esi]
fldcw word [esp + 0x2c]
fld dword [ecx + 0x40]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [ecx + 0x24], eax
mov eax, dword [esi]
mov ecx, dword [esi + 8]
mov edx, dword [ecx]
fldcw word [esp + 0x2c]
mov edx, dword [edx]
push eax
mov eax, dword [edi + 0x189c]
mov eax, dword [eax + 4]
push eax
call edx
mov ecx, dword [esi + 8]
mov ebp, dword [0x4cf6b4]
push 1
call ebp
mov ecx, dword [esi + 8]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov edx, dword [eax]
mov ecx, dword [esi + 8]
mov dword [ecx + 0x80], edx
fld dword [edi + 0x18b8]
mov eax, dword [edi + 0x189c]
mov ecx, dword [esi + 8]
sub esp, 8
fstp dword [esp + 4]
fld dword [eax + 0x26c]
mov eax, dword [eax + 4]
fstp dword [esp]
push 0
push eax
call dword [0x4cf658]
mov ecx, dword [esi + 8]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov ecx, dword [eax]
fstp dword [ecx + 0x17c]
mov edx, dword [esi + 8]
mov ecx, dword [edi + 0x189c]
push edx
call dword [0x4cf6c0]
mov eax, dword [ebx + 0x10]
mov ebx, dword [esp + 0x34]
mov dword [esi + 0x3c], eax
cmp dword [ebx + 0xc0], 0
je 0x43199f
mov ecx, dword [ebx + 0x90]
mov edx, dword [ebx + 0x8c]
mov eax, dword [edi + 0x189c]
push ecx
mov ecx, dword [eax + 4]
push edx
push ecx
mov ecx, dword [esi + 4]
call dword [0x4cf6a4]
jmp 0x4319e1
mov edx, dword [ebx + 0xc]
mov ecx, dword [edi + 0x189c]
mov eax, dword [ebx + 0x10]
push edx
mov edx, dword [ecx + 4]
mov ecx, dword [esi + 4]
push eax
push edx
call dword [0x4cf6a8]
mov eax, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebx + 0x68]
push eax
mov eax, dword [ebx + 0x74]
push ecx
mov ecx, dword [ebx + 0x80]
push edx
mov edx, dword [ebx + 0x8c]
push eax
push ecx
mov ecx, dword [esi + 4]
push edx
call dword [0x4cf6ac]
mov ecx, dword [esi + 4]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
fld dword [ecx + 0x44]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [ecx + 0x28], eax
mov ecx, dword [esi + 4]
fldcw word [esp + 0x2c]
fld dword [ecx + 0x40]
fnstcw word [esp + 0x2c]
movzx eax, word [esp + 0x2c]
or eax, 0xc00
mov dword [esp + 0x30], eax
fldcw word [esp + 0x30]
fistp qword [esp + 0x14]
mov edx, dword [esp + 0x14]
mov dword [ecx + 0x24], edx
mov edx, dword [esi + 4]
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
fldcw word [esp + 0x2c]
mov eax, dword [eax]
push edx
mov edx, dword [edi + 0x189c]
mov edx, dword [edx + 4]
push edx
call eax
mov ecx, dword [esi + 0xc]
push 1
call ebp
mov ecx, dword [esi + 0xc]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
mov edx, dword [eax]
mov ecx, dword [esi + 0xc]
mov dword [ecx + 0x80], edx
fld dword [edi + 0x18b8]
mov eax, dword [edi + 0x189c]
mov ecx, dword [esi + 0xc]
sub esp, 8
fstp dword [esp + 4]
fld dword [eax + 0x26c]
mov eax, dword [eax + 4]
fstp dword [esp]
push 0
push eax
call dword [0x4cf658]
mov ecx, dword [esi + 0xc]
push 0
add ecx, 0x68
call dword [0x4cf6bc]
fld1
mov ecx, dword [eax]
fstp dword [ecx + 0x17c]
mov edx, dword [esi + 0xc]
mov ecx, dword [edi + 0x189c]
push edx
call dword [0x4cf6c0]
mov eax, dword [ebx + 0xc]
mov edx, dword [esp + 0x48]
mov dword [esi + 0x34], eax
mov ecx, dword [ebx + 0x10]
mov eax, dword [esp + 0x44]
mov dword [esi + 0x38], ecx
mov ecx, dword [esp + 0x38]
mov dword [esi + 0x40], eax
mov dword [esi + 0x2c], eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x44], edx
mov edx, dword [esp + 0x40]
mov dword [esi + 0x18], ecx
push eax
mov ecx, esi
mov dword [esi + 0x5c], edx
call fcn.00430310
mov ecx, dword [esp + 0x1c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret 0x20