Function at 0x43f840
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d3bf8
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xa8
mov eax, dword [0x52600c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
push 0x50
lea eax, [ebp - 0x68]
push 0
push eax
call fcn.004bf140
add esp, 0xc
lea ecx, [ebp - 0x68]
call fcn.0043cbe0
mov dword [ebp - 4], 0
mov ecx, dword [esi + 0x140]
mov eax, dword [ecx]
call dword [eax + 0x34]
mov edx, dword [ebx + 0xc]
lea eax, [esi + 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x7c], eax
movups xmmword [eax], xmm0
shl edx, 4
sub edx, dword [ebx + 0xc]
movups xmmword [eax + 0x10], xmm0
mov dword [ebp - 0x8c], edx
movups xmmword [eax + 0x20], xmm0
movq qword [eax + 0x30], xmm0
mov dword [eax + 0x38], 0
movups xmmword [esi + 0xcc], xmm0
movups xmmword [esi + 0xdc], xmm0
movups xmmword [esi + 0xec], xmm0
movq qword [esi + 0xfc], xmm0
mov dword [esi + 0x104], 0
mov ecx, dword [esi + 0x7c]
mov eax, dword [esi + 0x154]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 4]
sub eax, edx
mov dword [ebp - 0x88], eax
cmp eax, 0xf
jle 0x43f934
mov eax, 0xf
mov edi, 0xfffffb1e
mov dword [ebp - 0x88], eax
jmp 0x43f946
cmp eax, 5
jl 0x43f940
mov edi, 0xfffffb1e
jmp 0x43f946
imul edi, eax, 0xffffff06
cmp eax, 5
jle 0x43f966
lea ecx, [eax + 4]
mov eax, 0x66666667
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0xffffff60
jmp 0x43f96b
mov ecx, 0xffffff60
lea eax, [edi + 0x500]
cdq
sub eax, edx
sar eax, 1
add eax, 4
mov dword [ebp - 0x80], eax
lea eax, [ecx + 0x2b2]
mov ecx, dword [esi + 0x144]
cdq
sub eax, edx
sar eax, 1
add eax, 0x10
mov dword [ebp - 0xa4], eax
test ecx, ecx
je 0x43f9aa
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [esi + 0x144], 0
mov eax, dword [esi + 0x2c]
lea edi, [esi + 0x2c]
push 1
mov dword [edi + 4], eax
mov ecx, dword [esi + 0x138]
push 0xd0000000
add ecx, 0x108
push 0x2d0
push 0x500
push 0
mov eax, dword [ecx]
push 0
call dword [eax + 0xd0]
mov ecx, dword [esi + 0x13c]
push 0
add ecx, 0x108
push 0x2d0
push 0x500
push 0
mov eax, dword [ecx]
push 0
call dword [eax + 0xd8]
mov ecx, dword [esi + 0x13c]
push 0
push 0
mov eax, dword [ecx]
call dword [eax + 0x48]
mov ecx, dword [esi + 0x7c]
mov eax, dword [esi + 0x154]
add ecx, ecx
mov edx, dword [esi]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
push 0xffffffffffffffff
push 0
push 0
push dword [eax + ecx*8 + 8]
mov eax, dword [edx + 0xd0]
mov ecx, esi
call eax
xor ecx, ecx
mov dword [esi + 0x144], eax
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x88], ecx
jle 0x43fcb0
imul edi, dword [ebx + 0xc], 0x30c
mov dword [ebp - 0x84], edi
jmp 0x43fa66
mov edi, dword [ebp - 0x84]
mov eax, 0xcccccccd
mul ecx
mov eax, edx
shr eax, 2
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x7c]
mov dword [eax + 0x3c], 1
mov ecx, dword [esi + 0x7c]
mov eax, dword [esi + 0x154]
add ecx, ecx
mov eax, dword [eax + ecx*8 + 0xc]
mov eax, dword [edi + eax]
mov dword [ebp - 0x6c], eax
call fcn.00499b50
mov ecx, dword [ebp - 0x6c]
mov eax, dword [eax + 8]
mov edi, ecx
test edi, edi
jns 0x43faa8
add edi, 7
sar edi, 3
mov edx, dword [eax + 0x18]
and ecx, 0x80000007
jns 0x43fabb
dec ecx
or ecx, 0xfffffff8
inc ecx
mov al, 1
shl al, cl
mov ecx, dword [ebp - 0x74]
test byte [edx + edi + 0xce4], al
mov edi, dword [esi + 0x148]
mov edx, dword [esi + 0x138]
lea eax, [ecx + ecx*4]
je 0x43fbc3
shl eax, 5
add edx, 0x108
add eax, dword [ebp - 0xa4]
mov dword [ebp - 0x78], eax
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x70]
sub ecx, eax
mov dword [ebp - 0x6c], edx
mov edx, dword [edx]
imul eax, ecx, 0xfa
mov ecx, dword [ebp - 0x80]
push 0
push 0x1c0
add ecx, eax
lea eax, [edi + 0x108]
neg edi
mov dword [ebp - 0x74], ecx
sbb edi, edi
and edi, eax
push edi
push 0x8b
push 0xf4
push dword [ebp - 0x78]
push ecx
mov ecx, dword [ebp - 0x6c]
call dword [edx + 0xa8]
mov eax, dword [esi + 0x138]
mov ecx, dword [ebp - 0x8c]
add eax, 0x108
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
mov eax, 0x66666667
imul ecx
mov edi, dword [esi + 0x144]
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [ebp - 0x6c]
imul eax, ecx, 0x87
mov edx, dword [edx]
push eax
mov eax, dword [ebx + 0xc]
lea eax, [eax + eax*2]
sub eax, ecx
mov ecx, dword [ebp - 0x70]
lea ecx, [ecx + eax*4]
add ecx, eax
mov eax, ecx
shl eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x6c]
shl eax, 4
push eax
lea eax, [edi + 0x108]
neg edi
sbb edi, edi
and edi, eax
mov eax, dword [ebp - 0x78]
push edi
mov edi, dword [ebp - 0x74]
add eax, 2
push 0x87
push 0xf0
push eax
lea eax, [edi + 2]
push eax
call dword [edx + 0xa8]
mov eax, dword [ebp - 0x7c]
mov dword [eax], 1
jmp 0x43fc21
shl eax, 5
add edx, 0x108
add eax, dword [ebp - 0xa4]
mov dword [ebp - 0x78], eax
lea eax, [ecx + ecx*4]
mov ecx, dword [ebp - 0x70]
sub ecx, eax
mov dword [ebp - 0x6c], edx
mov edx, dword [edx]
imul eax, ecx, 0xfa
mov ecx, dword [ebp - 0x80]
push 0x1a1
push 0x1c0
add ecx, eax
lea eax, [edi + 0x108]
neg edi
mov dword [ebp - 0x74], ecx
sbb edi, edi
and edi, eax
push edi
push 0x8b
push 0xf4
push dword [ebp - 0x78]
push ecx
mov ecx, dword [ebp - 0x6c]
call dword [edx + 0xa8]
mov edi, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x78]
lea eax, [edi + 0xf4]
mov edx, dword [esi + 0x30]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb4], edi
lea edi, [esi + 0x2c]
lea eax, [ecx + 0x8b]
mov dword [ebp - 0xb0], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0xa8], eax
movups xmm0, xmmword [ebp - 0xb4]
mov dword [ebp - 0xa0], ecx
movups xmmword [ebp - 0x9c], xmm0
cmp dword [esi + 0x34], edx
je 0x43fc83
movups xmm0, xmmword [ebp - 0xa0]
mov eax, dword [ebp - 0x90]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], eax
add dword [esi + 0x30], 0x14
jmp 0x43fc95
lea eax, [ebp - 0xa0]
mov ecx, edi
push eax
push edx
call fcn.00440a80
mov ecx, dword [ebp - 0x70]
add dword [ebp - 0x84], 0x34
inc ecx
add dword [ebp - 0x7c], 4
mov dword [ebp - 0x70], ecx
cmp ecx, dword [ebp - 0x88]
jl 0x43fa60
mov ecx, dword [esi + 0x7c]
mov eax, dword [esi + 0x154]
add ecx, ecx
mov ecx, dword [eax + ecx*8 + 4]
mov eax, 0x88888889
add ecx, 0xe
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x80], eax
mov dword [esi + 0x88], eax
mov eax, 0x88888889
imul dword [ebx + 8]
add edx, dword [ebx + 8]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x8c], eax
cmp dword [esi + 0x84], eax
je 0x43fd23
mov ecx, dword [esi + 0x14c]
push 1
push eax
call fcn.0043be50
mov eax, dword [ebp - 0x8c]
mov dword [esi + 0x84], eax
mov eax, dword [esi + 0x88]
jmp 0x43fd26
mov eax, dword [ebp - 0x80]
mov edx, dword [ebx + 0xc]
mov dword [esi + 0x8c], edx
cmp eax, 1
je 0x43fe64
mov ecx, dword [esi + 0x138]
add ecx, 0x108
test edx, edx
mov edx, dword [esi + 0x148]
mov edi, dword [ecx]
lea eax, [edx + 0x108]
jne 0x43fd5d
push 0xe6
jmp 0x43fd5f
push 0x26
neg edx
push 0x2b4
sbb edx, edx
and edx, eax
push edx
push 0x40
push 0x3d
push 0x27d
push 0x244
call dword [edi + 0xa8]
mov ecx, dword [esi + 0x138]
mov eax, dword [esi + 0x88]
add ecx, 0x108
mov edx, dword [esi + 0x148]
dec eax
cmp dword [esi + 0x8c], eax
mov edi, dword [ecx]
lea eax, [edx + 0x108]
jne 0x43fdaf
push 0xe6
jmp 0x43fdb1
push 0x26
neg edx
push 0x2f1
sbb edx, edx
and edx, eax
push edx
push 0x40
push 0x3d
push 0x27d
push 0x287
call dword [edi + 0xa8]
movaps xmm0, xmmword [0x513eb0]
lea edi, [esi + 0x2c]
mov ecx, dword [edi + 4]
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0xa0], 0x100
cmp dword [edi + 8], ecx
je 0x43fe0d
movups xmm0, xmmword [ebp - 0xa0]
mov eax, dword [ebp - 0x90]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
add dword [edi + 4], 0x14
jmp 0x43fe1c
lea eax, [ebp - 0xa0]
push eax
push ecx
mov ecx, edi
call fcn.00440a80
mov ecx, dword [edi + 4]
movaps xmm0, xmmword [0x513ec0]
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0xa0], 0x101
cmp dword [edi + 8], ecx
je 0x43fe55
movups xmm0, xmmword [ebp - 0xa0]
mov eax, dword [ebp - 0x90]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
add dword [edi + 4], 0x14
jmp 0x43fe64
lea eax, [ebp - 0xa0]
push eax
push ecx
mov ecx, edi
call fcn.00440a80
mov edx, dword [esi + 0x148]
mov ecx, dword [esi + 0x138]
mov esi, dword [ecx + 0x108]
add ecx, 0x108
push 0
lea eax, [edx + 0x108]
neg edx
push 0x184
sbb edx, edx
and edx, eax
push edx
push 0x3c
push 0x3c
push 0x28e
push 0x4b3
call dword [esi + 0xa8]
movaps xmm0, xmmword [0x513ed0]
mov ecx, dword [edi + 4]
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0xa0], 0x200
cmp dword [edi + 8], ecx
je 0x43fedd
movups xmm0, xmmword [ebp - 0xa0]
mov eax, dword [ebp - 0x90]
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], eax
add dword [edi + 4], 0x14
jmp 0x43feec
lea eax, [ebp - 0xa0]
push eax
push ecx
mov ecx, edi
call fcn.00440a80
lea ecx, [ebp - 0x68]
call fcn.0043cc50
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004bcfcc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8