Function at 0x437090
Capabilities:
Check os version
Get number of processors

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ce880
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
mov eax, dword [0x4f5568]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [esi]
mov eax, dword [eax + 0x30]
call eax
test al, al
je 0x4370eb
cmp dword [edi + 0x204], 0
jne 0x4370eb
cmp dword [edi + 0x2c], 0
jne 0x4370eb
cmp dword [edi + 0x20c], 0
jne 0x4370eb
xor eax, eax
jmp 0x437610
xorps xmm0, xmm0
mov dword [ebp - 0x40], 0
movdqu xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x3c], 0
movdqu xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x38], 0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x60]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x20]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x34]
cmp dword [edi + 0x2c], 0
je 0x437204
mov ecx, dword [edi + 0x10c]
call fcn.00472fe0
cmp dword [edi + 0x1f4], 0
je 0x437204
mov ecx, dword [edi + 0xe4]
lea eax, [ebp - 0x74]
push eax
call fcn.0042a7d0
mov esi, dword [edi + 0x51c]
xor edx, edx
push 4
movdqu xmm0, xmmword [eax]
mov eax, dword [edi + 0xe4]
movdqu xmmword [edi + 0x508], xmm0
mov ecx, dword [eax + 0x18]
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0x1fc]
imul eax, esi
mov dword [ebp - 0x28], ecx
mov dword [edi + 0x518], ecx
mov dword [ebp - 0x18], 0x21ffffff
div ecx
xor edx, edx
mov ecx, eax
shl eax, 8
shr ecx, 8
and ecx, 0xff
or ecx, eax
mov eax, dword [edi + 0x200]
imul eax, esi
mov word [ebp - 0x1c], cx
div dword [ebp - 0x28]
mov ecx, eax
shl eax, 8
shr ecx, 8
and ecx, 0xff
or ecx, eax
mov eax, 0x100
mov word [ebp - 0x2e], ax
lea eax, [ebp - 0x30]
push eax
mov word [ebp - 0x1a], cx
mov ecx, edi
push 0
call fcn.00437010
mov ecx, dword [edi + 0x10c]
lea eax, [ebp - 0x20]
push 0xc
push eax
call fcn.00472ec0
mov dword [edi + 0x2c], 0
mov edi, 1
jmp 0x4375b4
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x54]
sar eax, 4
cmp dword [edi + 0xd8], 0
mov dword [ebp - 0x28], eax
je 0x43722f
mov ecx, dword [ebp - 0x5c]
sub ecx, dword [ebp - 0x60]
sar ecx, 4
cmp ecx, 5
jbe 0x43722a
inc eax
jmp 0x43722c
add eax, ecx
mov dword [ebp - 0x28], eax
cmp eax, 0xffff
je 0x4372a8
mov esi, dword [ebp - 0x40]
cmp esi, dword [ebp - 0x3c]
je 0x4372a8
mov edi, edi
cmp byte [edi + 0xa8], 0
jne 0x437260
cmp byte [edi + 0xa0], 0
jne 0x437260
mov ecx, dword [edi + 0x84]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
jmp 0x437286
mov eax, dword [esi + 8]
lea edx, [ebp - 0x24]
mov ecx, dword [edi + 0x84]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi]
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0xc]
call eax
mov ecx, eax
test ecx, ecx
je 0x4372a0
mov eax, dword [ebp - 0x28]
add esi, 0x10
add eax, ecx
mov dword [ebp - 0x28], eax
cmp esi, dword [ebp - 0x3c]
jne 0x437240
jmp 0x4372a8
mov eax, 0xffff
mov dword [ebp - 0x28], eax
cmp dword [edi + 0xd8], 0
jne 0x437325
cmp eax, 0xffff
je 0x437325
mov esi, dword [ebp - 0x60]
cmp esi, dword [ebp - 0x5c]
je 0x437325
cmp byte [edi + 0xa8], 0
jne 0x4372e0
cmp byte [edi + 0xa0], 0
jne 0x4372e0
mov ecx, dword [edi + 0x84]
push esi
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
jmp 0x437306
mov eax, dword [esi + 8]
lea edx, [ebp - 0x24]
mov ecx, dword [edi + 0x84]
mov dword [ebp - 0x1c], eax
mov eax, dword [esi]
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 4]
mov dword [ebp - 0x20], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x18], eax
mov eax, dword [ecx]
push edx
mov eax, dword [eax + 0xc]
call eax
mov ecx, eax
test ecx, ecx
jne 0x437315
mov eax, 0xffff
jmp 0x43731a
mov eax, dword [ebp - 0x28]
add eax, ecx
add esi, 0x10
mov dword [ebp - 0x28], eax
cmp esi, dword [ebp - 0x5c]
jne 0x4372c0
mov ecx, dword [edi + 0x84]
cmp dword [ecx + 0x70], 0
jne 0x437341
cmp dword [ecx + 0x74], 0
jne 0x437341
mov dword [edi + 0x204], 0
cmp eax, 0xffff
je 0x43736d
cmp dword [edi + 0x204], 0
je 0x437355
inc eax
mov dword [ebp - 0x28], eax
cmp dword [edi + 0x20c], 0
je 0x437362
inc eax
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x43736d
xor edi, edi
jmp 0x4375b4
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0x28]
call eax
push eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x64
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x28]
mov ecx, eax
mov byte [ebp - 4], 1
mov esi, dword [edi + 0x10c]
sar ecx, 8
and ecx, 0xff
shl eax, 8
or ecx, eax
mov byte [ebp - 0x34], 0
mov word [ebp - 0x32], cx
cmp dword [esi + 8], 0xffffffff
je 0x43758b
cmp byte [esi + 0x1a], 0
jne 0x4373dc
cmp byte [esi + 0x18], 0
je 0x4373dc
mov eax, dword [esi + 0x10]
cmp byte [eax + 0x21], 0
je 0x4373dc
push 1
lea eax, [ebp - 0x29]
mov byte [ebp - 0x29], 0
push eax
mov ecx, esi
call fcn.00472f50
push 4
lea eax, [ebp - 0x34]
mov ecx, esi
push eax
call fcn.00472f50
cmp dword [edi + 0x204], 0
je 0x437446
mov dword [edi + 0x204], 0
mov eax, dword [edi + 0xe4]
mov ecx, dword [edi + 0x84]
push dword [eax + 0x54]
push dword [edi + 0x10c]
call fcn.004479d0
test eax, eax
jne 0x43743c
push dword [edi + 0x10c]
mov ecx, dword [edi + 0x84]
mov dword [edi + 0x208], eax
call fcn.004478f0
test eax, eax
jne 0x437446
xor edi, edi
jmp 0x4375ab
mov dword [edi + 0x208], 1
cmp dword [edi + 0x20c], 0
je 0x437461
mov ecx, edi
call fcn.00438140
test eax, eax
jne 0x437461
xor edi, edi
jmp 0x4375ab
mov esi, dword [ebp - 0x54]
cmp esi, dword [ebp - 0x50]
je 0x4374b1
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
neg ecx
neg edx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x64], edx
lea esp, [esp]
mov eax, dword [esi]
add eax, ecx
mov ecx, edi
mov dword [ebp - 0x6c], eax
mov eax, dword [esi + 4]
add eax, edx
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x6c]
push eax
push esi
call fcn.004379d0
test eax, eax
je 0x43753d
mov ecx, dword [ebp - 0x30]
add esi, 0x10
mov edx, dword [ebp - 0x64]
cmp esi, dword [ebp - 0x50]
jne 0x437480
cmp dword [edi + 0xd8], 0
mov ecx, edi
je 0x4374ee
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x60]
sar eax, 4
cmp eax, 5
lea eax, [ebp - 0x60]
push eax
jbe 0x4374de
call fcn.00438330
test eax, eax
jne 0x437502
xor edi, edi
jmp 0x4375ab
call fcn.00437ed0
test eax, eax
jne 0x437502
xor edi, edi
jmp 0x4375ab
lea eax, [ebp - 0x60]
push eax
call fcn.00437700
test eax, eax
jne 0x437502
xor edi, edi
jmp 0x4375ab
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.00437700
test eax, eax
jne 0x437518
xor edi, edi
jmp 0x4375ab
cmp dword [ebp - 0x28], 0xffff
jne 0x437541
mov ecx, dword [edi + 0x84]
push dword [edi + 0x10c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov ecx, edi
call fcn.00438260
test eax, eax
jne 0x437541
xor edi, edi
jmp 0x4375ab
mov esi, dword [edi + 0x10c]
cmp dword [esi + 8], 0xffffffff
je 0x4375a6
cmp dword [esi + 0x239c], 0
je 0x437582
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push ecx
push dword [esi + 0x239c]
mov ecx, dword [esi + 8]
lea edx, [esi + 0x74]
mov dword [esi + 0xc], eax
call fcn.004735c0
add esp, 8
test al, al
je 0x4375a6
mov dword [esi + 0x239c], 0
mov ecx, esi
call fcn.004736d0
jmp 0x4375a6
push str.vncclient.cpp_:_failed_to_send_RFB_message_to_client_n
push 0
push 0x4f6c50
call fcn.00414f90
mov eax, dword [edi]
add esp, 0xc
mov ecx, edi
call dword [eax + 8]
mov edi, 1
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x4375d9
push esi
call fcn.004ad35b
add esp, 4
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x4375fe
push eax
call fcn.004ad35b
add esp, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x43760e
push esi
call fcn.004ad35b
add esp, 4
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004aca59
mov esp, ebp
pop ebp
ret 4