Function at 0x442f90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4790f3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
lea edi, [esi + 0xc]
mov dword [esi], method.CRenderObjectBase.virtual_0
mov dword [esi + 8], 5
mov dword [esp + 0x14], edi
xor ebx, ebx
mov byte [edi + 4], 1
mov dword [esp + 0x20], ebx
mov dword [edi], ebx
call fcn.00422dc0
mov dword [edi], eax
or eax, 0xffffffff
lea ecx, [esi + 0x80]
mov dword [esi + 0x18], eax
mov dword [esi + 0x28], eax
mov al, byte [esp + 0x30]
mov dword [esi + 0x48], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x74], ebx
mov byte [esi + 0x78], bl
mov byte [esi + 0x79], bl
mov byte [esi + 0x7a], bl
mov dword [esi + 0x7c], ebx
push ebx
mov dword [esp + 0x24], 1
mov byte [ecx], al
call fcn.00422400
mov cl, byte [esp + 0x30]
lea edi, [esi + 0x90]
push ebx
mov byte [esp + 0x24], 2
mov byte [edi], cl
mov ecx, edi
call fcn.00422400
mov dl, byte [esp + 0x30]
lea ecx, [esi + 0xa0]
push ebx
mov byte [esp + 0x24], 3
mov byte [ecx], dl
call fcn.00422400
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
mov dl, byte [esp + 0x30]
mov dword [esi + 0x100], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x108], eax
mov dword [esi + 0x10c], ecx
mov byte [esi + 0x110], dl
mov dword [esi + 0x114], ebx
mov dword [esi + 0x118], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x124], ebx
mov dword [esi + 0x128], ebx
mov al, byte [esp + 0x30]
lea ebp, [esi + 0x134]
push ebx
mov ecx, ebp
mov byte [esp + 0x24], 7
mov byte [ebp], al
call fcn.00422400
mov dword [esi + 0x148], ebx
mov dword [esi], 0x47cccc
mov ecx, dword [esi + 0x124]
cmp ecx, ebx
mov byte [esp + 0x20], 9
je 0x4430f9
mov dword [esi + 0x124], ebx
mov edx, dword [ecx]
call dword [edx + 8]
mov ecx, dword [esp + 0x30]
xor eax, eax
cmp ecx, ebx
je 0x44310c
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [esp + 0x30]
push esi
mov ecx, 0x4919a8
mov dword [esi + 0x124], eax
call fcn.004285b0
mov ecx, dword [esi + 0x108]
push ecx
mov ecx, 0x4919a8
call fcn.00427ea0
mov edx, dword [0x47ca5c]
add eax, 0x68
push edx
push ebx
push eax
mov ecx, edi
call fcn.00422650
mov ecx, 0x10
xor eax, eax
lea edi, [esi + 0xc0]
rep stosd dword es:[edi], eax
lea eax, [esi + 0xb0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x491808
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ebx
call fcn.0044b1a8
add esp, 4
mov ecx, ebp
mov edi, eax
call fcn.00422e80
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
cmp eax, ebx
je 0x44319d
mov al, byte [eax - 1]
cmp al, bl
je 0x44319d
cmp al, 0xff
je 0x44319d
cmp edi, ebx
jne 0x4431c1
push 1
mov ecx, ebp
call fcn.00422400
jmp 0x4431e5
cmp edi, ebx
jne 0x4431ac
push 1
mov ecx, ebp
call fcn.00422400
jmp 0x4431e5
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x4431b8
cmp eax, edi
jae 0x4431c9
push 1
mov ecx, ebp
call fcn.00422400
push edi
mov ecx, ebp
call fcn.00422e90
mov ecx, dword [ebp + 4]
push edi
push 0x491808
push ecx
call fcn.00421840
mov edx, dword [ebp + 4]
mov dword [ebp + 8], edi
add esp, 0xc
mov word [edx + edi*2], bx
mov ecx, dword [esp + 0x18]
mov dword [esi + 0x144], ebx
mov dword [esi + 4], ebx
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret 0xc