Function at 0x434e10
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x3c
mov eax, dword [esp + 0x44]
test eax, eax
jl 0x434e39
nop
call fcn.00468dd0
mov eax, dword [esp]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x1c], ecx
xor edx, edx
xor ebx, ebx
jmp 0x434f03
mov eax, dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov ecx, dword [0x85d3cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x1c0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xffffffff
call fcn.004359e0
mov eax, dword [esp + 0xc]
cmp eax, 0x80
ja 0x434e99
test eax, eax
je 0x434e8d
cmp eax, 0x80
jne 0x434ea5
lea eax, [0x6a6ad0]
mov dword [esp], eax
call fcn.00466b40
jmp 0x434edf
mov dword [esp + 0x48], 0
add esp, 0x3c
ret
cmp eax, 0x102
je 0x434eeb
cmp eax, 0xffffffff
je 0x434ed1
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
lea ecx, [0x4350f0]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], eax
lea eax, [esp + 0x34]
mov dword [esp], eax
call fcn.00466b40
jmp 0x434edf
lea eax, [0x6a6ad4]
mov dword [esp], eax
call fcn.00466b40
mov dword [esp + 0x48], 0xffffffff
add esp, 0x3c
ret
mov dword [esp + 0x48], 0xffffffff
add esp, 0x3c
ret
mov edx, ecx
mov ebx, eax
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x40]
mov esi, ebp
sub ebp, ebx
mov ebx, dword [esp + 0x44]
mov edi, ebx
sbb ebx, edx
mov edx, 0x1e
xor edx, edx
mov dword [esp + 0x20], edx
mov edx, 0x1e
jmp 0x435046
test ebx, ebx
sete dl
setg bl
cmp ebp, 0xf4240
xchg ebp, ebx
setae bl
xchg ebp, ebx
and ebp, edx
or ebx, ebp
test bl, bl
je 0x434f4c
mov edx, 0x7fffffff
jmp 0x434f50
mov edx, dword [esp + 0x20]
mov ebx, edx
sar edx, 0x1f
test ebx, ebx
xchg ebp, ebx
sete bl
xchg ebp, ebx
test edx, edx
sete dl
and edx, ebp
test dl, dl
je 0x434f6e
mov ebx, 1
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov eax, dword [0x85d3cc]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x1c0]
mov dword [esp + 0x2c], eax
mov eax, dword [0x85d3cc]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x1c4]
mov dword [esp + 0x30], eax
mov eax, dword [sym.imp.kernel32.dll_WaitForMultipleObjects]
lea ecx, [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], ebx
call fcn.00435a80
mov eax, dword [esp + 0x14]
cmp eax, 1
jne 0x434e6b
call fcn.00468dd0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x18]
sub eax, edx
mov ebx, dword [esp + 0x1c]
sbb ecx, ebx
mov ebp, dword [esp + 0x44]
cmp ebp, ecx
xchg esi, ebx
setl bl
xchg esi, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
mov ebx, dword [esp + 0x40]
cmp eax, ebx
setae dl
and edx, edi
or esi, edx
xchg esi, eax
test al, al
xchg esi, eax
je 0x434ef7
jmp 0x4350d6
dec ecx
mov esi, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x20], edx
mov ebx, eax
mov eax, dword [esp + 0x18]
mov edx, ecx
mov ecx, dword [esp + 0x1c]
test edx, edx
jl 0x434f28
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], ebx
mov ecx, edx
mov esi, 0xf4240
shl esi, cl
lea edi, [ecx - 0x20]
mov ecx, edi
mov eax, 0xf4240
shl eax, cl
neg ecx
mov ebx, 0xf4240
shr ebx, cl
cmp edx, 0x20
sbb edx, edx
and esi, edx
cmp ebp, esi
setae dl
cmp ecx, 0x20
sbb ecx, ecx
and ebx, ecx
cmp edi, 0x20
sbb edi, edi
and eax, edi
or ebx, eax
mov eax, dword [esp + 0x24]
cmp eax, ebx
xchg edi, ebx
sete bl
xchg edi, ebx
setg cl
and edx, edi
or ecx, edx
test cl, cl
je 0x4350c9
mov ecx, dword [esp + 0x28]
cmp ecx, 0x20
sbb edx, edx
mov edi, 1
shl edi, cl
and edi, edx
mov edx, dword [esp + 0x20]
or edx, edi
sub ebp, esi
sbb eax, ebx
jmp 0x43502d
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
jmp 0x43502d
mov dword [esp + 0x48], 0xffffffff
add esp, 0x3c
ret