Function at 0x43e8cc
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x34
mov dword [ebp - 0x10], 0x26cfc4f5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
cmp eax, 0xd18709b4
jg 0x43e944
cmp eax, 0xbb321aee
jle 0x43e9a2
cmp eax, 0xcd3d190d
jg 0x43ea5f
cmp eax, 0xc5b885ac
jg 0x43eb82
cmp eax, 0xbb321aef
je 0x43ecef
cmp eax, 0xc2fb37a8
jne 0x43e8e5
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff79
add eax, ecx
shr eax, 3
mov dword [ebp - 0x14], eax
push eax
call fcn.0043d911
add esp, 4
mov dword [ebp - 0x10], 0xb325a231
jmp 0x43e8e5
cmp eax, 0x28dccfc3
jle 0x43ea03
cmp eax, 0x52c8d076
jle 0x43ea95
cmp eax, 0x71c3109a
jg 0x43ebad
cmp eax, 0x52c8d077
je 0x43ecfe
cmp eax, 0x54ad69e3
jne 0x43e8e5
mov cl, byte [ebp - 0x19]
cmp byte [ebp - 0x1a], 0
mov eax, 0xaf093426
mov edx, 0xaf093426
jne 0x43e993
mov edx, 0xd18709b5
test cl, cl
jne 0x43ee51
mov eax, edx
jmp 0x43ee51
cmp eax, 0xaefbe83a
jle 0x43eae2
cmp eax, 0xb325a230
jg 0x43ebe7
cmp eax, 0xaefbe83b
je 0x43eb76
cmp eax, 0xaf093426
jne 0x43e8e5
mov eax, dword [ebp - 0x18]
add eax, 0xffffffb1
imul ecx, eax, 0xa2
imul eax, eax
imul edx, eax, 0x6463
add ecx, 0xffffffc6
dec edx
shr ecx, 5
mov dword [ebp - 0x18], ecx
mov ecx, 0xd7b4234c
cmp eax, edx
je 0x43e9fb
mov ecx, 0xd047fbe7
mov dword [ebp - 0x10], ecx
jmp 0x43e8e5
cmp eax, 0xf62cb4e0
jle 0x43eb46
cmp eax, 0x25e14777
jg 0x43ec11
cmp eax, 0xf62cb4e1
je 0x43ed1a
cmp eax, 0xd7a6351
jne 0x43e8e5
imul ecx, dword [ebp - 0x14], 0xf7
add ecx, 0x153a
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0xb325a231
cmp ecx, 0x22c00
jb 0x43ee51
mov eax, 0xb8f4343e
jmp 0x43ee51
cmp eax, 0xd047fbe6
jg 0x43ec3f
cmp eax, 0xcd3d190e
je 0x43ed4e
cmp eax, 0xcfe746fe
jne 0x43e8e5
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x78dccbf4
jmp 0x43e8e5
cmp eax, 0x2ece5c7e
jle 0x43ecab
cmp eax, 0x2ece5c7f
je 0x43ed99
cmp eax, 0x371c40e4
jne 0x43e8e5
imul esi, dword [ebp - 0x14], 0x95
shr esi, 0x1d
mov dword [ebp - 0x14], esi
call fcn.0043e8cc
push 0x4d59
push esi
call fcn.0043ce47
add esp, 8
mov dword [ebp - 0x10], 0xb325a231
jmp 0x43e8e5
cmp eax, 0x9027e669
je 0x43edd7
cmp eax, 0x90bc63b1
je 0x43ee0e
cmp eax, 0xa0ec9b44
jne 0x43e8e5
mov eax, dword [ebp - 0x14]
shr eax, 0x12
imul esi, eax, 0xbe
add esi, 0xffff9f84
mov edi, esi
shr edi, 8
mov dword [ebp - 0x14], edi
call fcn.0043e8cc
push edi
push 0xed3
call fcn.0043ce47
add esp, 8
mov eax, 0xb325a231
cmp esi, 0xb00
jae 0x43ed10
jmp 0x43ee51
cmp eax, 0xd18709b5
je 0x43ee24
cmp eax, 0xd7b4234c
je 0x43ee33
cmp eax, 0xdc5149cf
jne 0x43e8e5
mov eax, dword [ebp - 0x14]
shr eax, 0xd
imul eax, eax, 0x149100
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb8f4343e
jmp 0x43e8e5
cmp eax, 0xc5b885ad
je 0x43ee59
cmp eax, 0xcaf9a3c4
jne 0x43e8e5
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x30]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xd0ca3eab
jmp 0x43e8e5
cmp eax, 0x71c3109b
je 0x43ee74
cmp eax, 0x78dccbf4
jne 0x43e8e5
imul eax, dword [ebp - 0x18], 0x26100
add eax, 0xffe2dbc0
shr eax, 0xe
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x28dccfc4
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
jmp 0x43e8e5
cmp eax, 0xb325a231
je 0x43eeb3
cmp eax, 0xb8f4343e
jne 0x43e8e5
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xc5b885ad
jmp 0x43e8e5
cmp eax, 0x25e14778
je 0x43eecd
cmp eax, 0x26cfc4f5
jne 0x43e8e5
mov eax, dword fs:[0x30]
add eax, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xb325a231
jmp 0x43e8e5
cmp eax, 0xd047fbe7
je 0x43eed9
cmp eax, 0xd0ca3eab
jne 0x43e8e5
push eax
sub esp, 0x18
mov edi, esp
mov word [edi + 0x18], 0
push 0x18
push 0x466db0
push edi
call fcn.00441d60
add esp, 0xc
push 8
push 0x466dc8
push 0xc
push edi
call fcn.0043ef10
add esp, 0x10
push edi
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
sete byte [ebp - 0x19]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
sete byte [ebp - 0x1a]
mov dword [ebp - 0x10], 0x54ad69e3
jmp 0x43e8e5
cmp eax, 0x2dfa41f9
jne 0x43eee5
mov esi, dword [ebp - 0x14]
mov eax, 0x7ffd6
add esi, eax
and esi, 0x7ffff
mov dword [ebp - 0x14], esi
push 0x25eb
push esi
call fcn.0043cda8
add esp, 8
mov eax, 0xa0ec9b44
cmp esi, 0x79
jb 0x43ee51
mov eax, 0xb325a231
jmp 0x43ee51
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x10], 0xaefbe83b
jmp 0x43e8e5
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x18], 0
mov eax, 0x90bc63b1
je 0x43ee51
mov eax, 0xcaf9a3c4
jmp 0x43ee51
imul esi, dword [ebp - 0x14], 0x1cdb
add esi, 0x3f242
mov dword [ebp - 0x14], esi
push esi
call fcn.0043d911
add esp, 4
mov eax, 0x371c40e4
cmp esi, 0xf8
jl 0x43ee51
mov eax, 0xcd3d190e
jmp 0x43ee51
mov edi, dword [ebp - 0x14]
add edi, 0x65
shr edi, 7
add edi, 0xffffffe4
mov dword [ebp - 0x14], edi
push edi
push 0x629b
push 0x369d
push 0x3e24
call fcn.0043ef10
add esp, 0x10
push edi
call fcn.0043d911
add esp, 4
mov eax, 0xd7a6351
cmp edi, 0xa4
je 0x43ee51
mov eax, 0xdc5149cf
jmp 0x43ee51
imul esi, dword [ebp - 0x14], 0xbb
mov edi, esi
shr edi, 6
mov dword [ebp - 0x14], edi
push edi
push 0x3aef
call fcn.0043cda8
add esp, 8
push edi
call fcn.0043d911
add esp, 4
mov eax, 0x52c8d077
cmp esi, 0x2a00
jb 0x43ee51
mov eax, 0x71c3109b
jmp 0x43ee51
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x3a]
imul ecx, ecx
imul edx, ecx, 0x3bdf
dec edx
add eax, eax
add eax, 0xffffff29
mov dword [ebp - 0x18], eax
mov eax, 0x52c8d077
cmp edx, ecx
je 0x43edff
mov eax, 0x28dccfc4
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0
jmp 0x43e8e5
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x28]
mov eax, 0x9027e669
cmp edx, ecx
je 0x43ee51
mov eax, 0xd18709b5
jmp 0x43ee51
mov dword [ebp - 0x10], 0xbb321aef
mov ebx, dword [ebp - 0x20]
jmp 0x43e8e5
mov ecx, dword [ebp - 0x14]
shr ecx, 3
add ecx, 0xffffffb2
mov dword [ebp - 0x14], ecx
mov eax, 0x54ad69e3
cmp ecx, 0xc2
je 0x43ee51
mov eax, 0x2dfa41f9
mov dword [ebp - 0x10], eax
jmp 0x43e8e5
imul eax, dword [ebp - 0x18], 0xb1a0
add eax, 0x49b62a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x25e14778
jmp 0x43e8e5
mov edi, dword [ebp - 0x14]
shl edi, 0x11
mov esi, 0xcaf9a3c4
add edi, 0xff860000
mov dword [ebp - 0x14], edi
je 0x43ee8f
mov esi, 0xb325a231
push 0x1aad
push edi
call fcn.0043ce47
add esp, 8
push 0x5ee2
push edi
call fcn.0043cda8
add esp, 8
mov dword [ebp - 0x10], esi
jmp 0x43e8e5
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xbb321aef
jmp 0x43e8e5
mov dword [ebp - 0x10], 0x52c8d077
jmp 0x43e8e5
mov dword [ebp - 0x10], 0xcfe746fe
jmp 0x43e8e5
cmp eax, 0x28dccfc4
jne 0x43e8e5
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret