Function at 0x434ef0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x49251a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
xor ebx, ebx
push esi
push edi
mov edi, dword [esp + 0x24]
mov dword [edi + 0xc], ebx
mov dword [edi + 0x24], ebx
mov ebp, 0xf
mov dword [edi + 0x28], ebp
mov byte [edi + 0x14], bl
mov byte [edi + 8], bl
mov byte [edi + 9], bl
mov byte [edi + 0x35], bl
mov byte [edi + 0x34], bl
mov dword [edi + 0x30], 1
mov dword [esp + 0x1c], ebx
lea esi, [edi + 0x110]
mov dword [edi], vtable.SB_OBJECT.0
call fcn.00430960
lea esi, [edi + 0x19c]
call fcn.00430960
push 0x40
lea eax, [edi + 0x234]
push ebx
push eax
mov dword [edi + 0x22c], 0x10
mov dword [edi + 0x230], eax
call fcn.0045ed30
mov dword [edi + 0x274], ebx
mov dword [edi + 0x278], ebx
mov dword [edi + 0x27c], ebx
mov dword [edi + 0x280], ebx
mov dword [edi + 0x228], ebx
lea esi, [edi + 0x290]
mov dword [edi + 0x288], ebx
mov dword [edi + 0x28c], ebx
mov dword [esi + 0x18], ebp
mov dword [esi + 0x14], ebx
mov byte [esi + 4], bl
push 0x40
lea eax, [edi + 0x2d8]
push ebx
push eax
mov dword [edi + 0x2cc], ebx
mov dword [edi + 0x2d0], 0x10
mov dword [edi + 0x2d4], eax
call fcn.0045ed30
mov dword [edi + 0x32c], ebx
mov dword [edi + 0x330], ebx
lea ebp, [edi + 0x344]
mov dword [edi + 0x33c], ebx
mov dword [edi + 0x340], ebx
mov dword [ebp + 0x18], 0xf
mov dword [ebp + 0x14], ebx
mov byte [ebp + 4], bl
push 0x540
lea eax, [edi + 0x390]
push ebx
push eax
mov dword [edi + 0x384], ebx
mov dword [edi + 0x388], 0x10
mov dword [edi + 0x38c], eax
call fcn.0045ed30
add esp, 0x24
mov byte [esp + 0x1c], 7
mov dword [edi + 0xc], 0xa
mov dword [edi + 0xf8], ebx
mov dword [edi + 0xfc], ebx
mov dword [edi + 0x100], ebx
mov dword [edi + 0x104], ebx
mov word [edi + 0x108], bx
mov word [edi + 0x10a], bx
xor eax, eax
mov word [edi + 0x10c], 3
mov dword [edi + 0x4c], eax
mov dword [edi + 0x50], eax
mov dword [edi + 0x54], eax
mov dword [edi + 0x58], eax
mov dword [edi + 0x5c], eax
mov dword [edi + 0x60], eax
mov dword [edi + 0x64], eax
mov dword [edi + 0x68], eax
mov dword [edi + 0x6c], eax
mov dword [edi + 0x70], eax
mov dword [edi + 0x74], eax
lea eax, [edi + 0x7c]
mov ecx, 0x10
lea ecx, [ecx]
mov byte [eax - 4], bl
mov dword [eax], ebx
add eax, 8
sub ecx, 1
jne 0x435090
xor eax, eax
mov dword [edi + 0x320], ebx
mov dword [edi + 0x318], ebx
mov dword [edi + 0x31c], ebx
mov dword [edi + 0x324], 6
mov byte [edi + 0x335], bl
mov dword [edi + 0x328], ebx
mov byte [edi + 0x334], bl
mov dword [edi + 0x32c], ebx
mov dword [edi + 0x110], ebx
mov dword [edi + 0x19c], ebx
mov dword [edi + 0x2cc], ebx
cmp dword [edi + 0x228], ebx
mov dword [esp + 0x10], eax
jle 0x43511a
mov ecx, dword [edi + 0x230]
mov ecx, dword [ecx + eax*4]
cmp ecx, ebx
je 0x43510b
push ecx
call fcn.00459ea4
mov eax, dword [esp + 0x14]
add esp, 4
add eax, 1
cmp eax, dword [edi + 0x228]
mov dword [esp + 0x10], eax
jl 0x4350f1
mov dword [edi + 0x228], ebx
push ebx
push 0x49747a
mov ecx, esi
mov byte [edi + 0x284], bl
mov byte [edi + 0x285], bl
mov dword [edi + 0x288], ebx
call fcn.00404090
mov eax, 8
push ebx
push 0x49747a
mov ecx, ebp
mov dword [edi + 0x2ac], ebx
mov dword [edi + 0x2b0], ebx
mov dword [edi + 0x2b4], ebx
mov dword [edi + 0x2b8], ebx
mov dword [edi + 0x2bc], ebx
mov dword [edi + 0x2c0], ebx
mov dword [edi + 0x2c4], eax
mov dword [edi + 0x2c8], eax
mov byte [edi + 0x337], bl
mov byte [edi + 0x338], bl
mov byte [edi + 0x336], bl
mov byte [edi + 0x33a], bl
mov byte [edi + 0x339], bl
mov dword [edi + 0x33c], ebx
call fcn.00404090
fld1
mov ecx, dword [esp + 0x14]
fst dword [edi + 0x374]
fld dword [0x499a48]
mov dword [edi + 0x48], ebx
fst dword [edi + 0x378]
mov byte [edi + 0x360], bl
fstp dword [edi + 0x37c]
mov byte [edi + 0x361], bl
mov byte [edi + 0x362], bl
mov byte [edi + 0x363], bl
mov dword [edi + 0x364], ebx
fstp dword [edi + 0x380]
mov dword [edi + 0x368], 0xffff
mov dword [edi + 0x36c], 1
mov dword [edi + 0x370], 2
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4