Function at 0x430a40
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x56a11b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x820
push ebx
mov ebx, ecx
push ebp
push esi
mov eax, dword [ebx + 0xc]
push edi
imul eax, dword [ebx + 0x10]
push 2
push eax
lea eax, [esp + 0x20]
lea ecx, [esp + 0x30]
push eax
call fcn.0043a160
mov ecx, dword [ebx]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x24], ecx
mov ecx, dword [ebx + 0x10]
xor edi, edi
mov dword [esp + 0x1c], eax
cmp ecx, edi
mov dword [esp + 0x838], edi
mov dword [esp + 0x10], edi
jle 0x430b3b
jmp 0x430aa3
xor edi, edi
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x14], edi
cmp eax, edi
jle 0x430b0f
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x20], edx
mov esi, dword [esp + 0x24]
push 0x40
lea eax, [esp + 0x34]
push 0
push eax
mov ecx, esi
call fcn.004307f0
mov eax, dword [esp + 0x20]
add esi, 0x10
mov dword [esp + 0x24], esi
lea edx, [esp + 0x30]
mov ebp, 0x20
mov ecx, 0x10
mov esi, edx
mov edi, eax
add edx, 0x40
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0xc]
dec ebp
lea eax, [eax + ecx*2]
jne 0x430ade
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
add eax, 0x20
add edx, 0x40
cmp eax, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], edx
jl 0x430ab6
mov edx, dword [ebx + 0xc]
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
mov ecx, dword [ebx + 0x10]
shl edx, 6
add eax, 0x20
add esi, edx
cmp eax, ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x10], eax
jl 0x430aa1
mov eax, dword [esp + 0x18]
xor edi, edi
cmp dword [esp + 0x84c], edi
je 0x430bad
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
push 2
push 0x20
push ecx
mov ecx, dword [ebx + 4]
push edx
push ecx
push eax
call fcn.00432c10
mov ecx, dword [ebx + 0x10]
mov eax, dword [esp + 0x30]
add esp, 0x18
xor esi, esi
cmp ecx, edi
jle 0x430bc6
mov ecx, dword [ebx + 0xc]
xor edx, edx
cmp ecx, edi
jle 0x430b9b
mov cx, word [eax]
add edx, 2
mov word [eax + 2], cx
mov ebp, dword [ebx + 0xc]
mov word [eax + ebp*2 + 2], cx
mov ecx, dword [ebx + 0xc]
mov bp, word [eax + ecx*2 + 2]
mov word [eax + ecx*2], bp
mov ecx, dword [ebx + 0xc]
add eax, 4
cmp edx, ecx
jl 0x430b73
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebx + 0x10]
add esi, 2
cmp esi, ecx
lea eax, [eax + edx*2]
jl 0x430b6a
jmp 0x430bc6
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
push 1
push 0x20
push ecx
mov ecx, dword [ebx + 4]
push edx
push ecx
push eax
call fcn.00432c10
add esp, 0x18
mov eax, dword [ebx + 8]
mov edx, dword [esp + 0x840]
mov ebp, dword [esp + 0x18]
cmp eax, edi
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
jle 0x430c48
mov edi, dword [esp + 0x848]
mov eax, dword [ebx + 4]
xor ecx, ecx
test eax, eax
jle 0x430c24
mov esi, ebp
movsx eax, word [esi]
add eax, 0x20
sar eax, 6
cmp eax, 0xffffff80
jge 0x430c07
mov eax, 0xffffff80
jmp 0x430c11
cmp eax, 0x7f
jle 0x430c11
mov eax, 0x7f
mov byte [edx], al
mov eax, dword [ebx + 4]
inc ecx
add esi, 2
add edx, edi
cmp ecx, eax
jl 0x430bf2
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x844]
mov ecx, dword [ebx + 8]
add edx, eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x14], edx
lea ebp, [ebp + eax*2]
mov eax, dword [esp + 0x10]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x430be7
lea ecx, [esp + 0x28]
mov dword [esp + 0x838], 0xffffffff
call fcn.0043a1a0
mov ecx, dword [esp + 0x830]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x82c
ret 0x10