Function at 0x43d340
Capabilities:
Check os version
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x463940
mov eax, dword fs:[0]
push eax
sub esp, 0x50c
mov eax, dword [0x472008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [0x4736a8], eax
lea eax, [ebp - 0x518]
push eax
mov dword [ebp - 0x518], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x43d64c
cmp dword [ebp - 0x508], 2
jne 0x43d64c
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [0x475950]
cmp eax, dword [esi + 4]
jle 0x43d3f1
push 0x475950
call fcn.0045e1b6
add esp, 4
cmp dword [0x475950], 0xffffffff
jne 0x43d3f1
push 0
push 2
push 6
call fcn.0045dfc0
test eax, eax
push 0x475950
setne byte [0x475940]
call fcn.0045e16c
add esp, 4
cmp byte [0x475940], 0
je 0x43d516
push ecx
lea edx, [ebp - 0x2e8]
mov dword [ebp - 0x2e8], 3
mov ecx, 3
call fcn.0045de40
add esp, 4
test eax, eax
je 0x43d502
mov eax, dword [0x47593c]
cmp eax, dword [esi + 4]
jle 0x43d468
push 0x47593c
call fcn.0045e1b6
add esp, 4
cmp dword [0x47593c], 0xffffffff
jne 0x43d468
push 0
push 3
push 6
call fcn.0045dfc0
test eax, eax
push 0x47593c
setne byte [0x475938]
call fcn.0045e16c
add esp, 4
cmp byte [0x475938], 0
je 0x43d493
push ecx
lea edx, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 3
mov ecx, 2
call fcn.0045de40
add esp, 4
test eax, eax
je 0x43d502
mov eax, dword [0x47594c]
cmp eax, dword [esi + 4]
jle 0x43d4d7
push 0x47594c
call fcn.0045e1b6
add esp, 4
cmp dword [0x47594c], 0xffffffff
jne 0x43d4d7
push 0
push 0
push 0xa
call fcn.0045dfc0
test eax, eax
push 0x47594c
setne byte [0x47595c]
call fcn.0045e16c
add esp, 4
cmp byte [0x47595c], 0
je 0x43d516
push ecx
lea edx, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], 3
mov ecx, 0xa
call fcn.0045de40
add esp, 4
test eax, eax
jne 0x43d516
push 0x10
push 0x4693c8
push str.Cannot_enable_security_mitigations
push 0
call dword [0x4657c4]
lea eax, [ebp - 0x404]
mov dword [ebp - 4], 0
push eax
mov dword [ebp - 0x404], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x43d54a
cmp dword [ebp - 0x400], 6
jne 0x43d54a
cmp dword [ebp - 0x3fc], 0
je 0x43d57e
push str.SetDefaultDllDirectories
push 0x4685c0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x43d57e
push 0xc00
mov ecx, esi
call dword [0x4642a0]
call esi
test eax, eax
jne 0x43d60f
push 0x106
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
test eax, eax
je 0x43d60f
cmp eax, 0x104
ja 0x43d60f
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ebx, eax
cmp word [ebp + ebx*2 - 0x2e6], 0x5c
je 0x43d5c3
mov eax, 0x5c
mov word [ebp + ebx*2 - 0x2e4], ax
inc ebx
mov esi, str.UXTHEME
mov dl, byte [esi]
test dl, dl
je 0x43d60f
xor edi, edi
lea eax, [edi + ebx]
movzx ecx, dl
inc esi
mov word [ebp + eax*2 - 0x2e4], cx
lea edi, [edi + 1]
test dl, dl
jne 0x43d60b
push str..dll
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 8
push 0
lea eax, [ebp - 0x2e4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x43d5c8
mov dl, byte [esi]
jmp 0x43d5d0
call fcn.0045df10
call fcn.0043c500
jmp 0x43d665
push 0x10
push 0x4693c8
push str.Unsupported_Windows_version
push 0
call dword [0x4657c4]
mov eax, 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045e090
mov esp, ebp
pop ebp
ret 0x10