Function at 0x43b730
Capabilities:
Access peb ldr_data
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cb6f1
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x50d024]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], 1
lea eax, [edi + 8]
mov dword [edi + 4], ebx
mov dword [ebp - 0x20], eax
mov dword [eax + 0xc], ebx
mov byte [ebp - 4], 3
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov byte [ebp - 4], 6
lea eax, [edi + 0x24]
mov dword [ebp - 0x1c], eax
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 7
mov byte [eax + 0x1c], bl
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0x18], 0xffffffff
mov byte [ebp - 4], 8
mov eax, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov dword [edi + 0x20], 0x4ed328
mov dword [edi + 0x48], eax
mov eax, dword [ebp + 0xc]
mov dword [edi], 0x4ed8c0
mov dword [edi + 0x20], 0x4ed8b8
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x10], ebx
mov dword [ebp + 0xc], ebx
mov dword [edi + 0x4c], eax
mov dword [edi + 0x50], ecx
mov dword [edi + 0x54], edx
mov byte [ebp - 4], 9
lea esi, [edi + 0x58]
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov byte [ebp - 4], 0xa
add edi, 0x64
mov dword [ebp + 0x18], edi
lea eax, [edi + 8]
mov dword [ebp - 0x18], eax
mov dword [edi + 4], ebx
mov dword [eax + 0xc], ebx
mov byte [ebp - 4], 0xc
mov dword [edi + 0x18], ebx
mov dword [edi + 0x1c], ebx
mov byte [ebp - 4], 0xf
lea eax, [edi + 0x24]
mov dword [ebp - 0x24], eax
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 0x10
mov byte [eax + 0x1c], bl
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0x18], 0xffffffff
mov byte [ebp - 4], 0x11
lea ecx, [edi + 0x48]
mov dword [edi + 0x20], 0x4e8440
push ecx
mov dword [edi], 0x4ed6f0
mov dword [edi + 0x20], 0x4ed6ec
call fcn.00430ec0
mov byte [ebp - 4], 0x12
lea ecx, [edi + 0xac]
push ecx
call fcn.00430ec0
mov byte [ebp - 4], 0x13
mov dword [edi + 0x110], ebx
mov byte [ebp - 4], 0x14
xor edx, edx
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + 0x178]
mov dword [ebp - 0x28], eax
mov dword [eax + 4], 0x4ece64
mov dword [eax], 0x4ecea4
mov dword [eax + 4], 0x4ece84
mov dword [eax + 8], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], 7
mov word [eax + 8], dx
mov byte [ebp - 4], 0x15
inc dword [0x5118d4]
mov dword [eax + 0x20], edx
mov dword [eax + 0x24], edx
mov byte [ebp - 4], 0x16
lea edi, [ecx + 0x1a0]
mov dword [ebp - 0x2c], edi
lea eax, [edi + 8]
mov dword [edi + 4], edx
mov dword [ebp - 0x30], eax
mov dword [eax + 0xc], edx
mov byte [ebp - 4], 0x18
mov dword [edi + 0x18], edx
mov dword [edi + 0x1c], edx
mov byte [ebp - 4], 0x19
mov eax, dword [sym.imp.USER32.dll_DefWindowProcW]
mov dword [edi + 0x20], eax
mov byte [ebp - 4], 0x1b
lea eax, [edi + 0x30]
push eax
mov byte [edi + 0x24], 1
mov dword [edi + 0x40], 0xffffffff
mov dword [edi + 0x44], 0xffffffff
mov dword [edi + 0x48], edx
mov dword [edi + 0x4c], 0xffffffff
mov dword [edi + 0x50], 4
mov dword [edi + 0x54], edx
mov dword [edi + 0x58], edx
mov dword [edi + 0x5c], edx
mov byte [edi + 0x60], 1
mov dword [edi + 0x64], edx
mov dword [edi + 0x68], edx
mov byte [edi + 0x6c], 1
mov dword [edi + 0x70], 1
mov dword [edi + 0x74], 0xffffffff
mov dword [edi + 0x78], 0xffffffff
mov byte [edi + 0x7c], dl
mov dword [edi + 0x28], edx
mov dword [edi + 0x2c], edx
call dword [sym.imp.USER32.dll_SetRectEmpty]
mov byte [ebp - 4], 0x1c
mov dword [edi], 0x4ed8a8
mov byte [ebp - 4], 0x1d
mov edi, dword [ebp - 0x10]
lea ecx, [edi + 0x220]
call fcn.0042ef00
mov byte [ebp - 4], 0x1e
lea ecx, [edi + 0x308]
call fcn.0042ef00
mov byte [ebp - 4], 0x1f
push ebx
mov dword [edi + 0x3f0], ebx
call fcn.0043ded0
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
mov eax, dword [0x511c84]
mov dword [ebp - 0x1c], ecx
cmp eax, dword [ecx + 4]
jle 0x43b9e8
push 0x511c84
call fcn.00498d05
add esp, 4
cmp dword [0x511c84], 0xffffffff
jne 0x43b9e8
mov byte [ebp - 4], 0x20
call fcn.00423900
push 0x4d8290
call fcn.00499017
add esp, 4
mov byte [ebp - 4], 0x1f
push 0x511c84
call fcn.00498cbb
add esp, 4
mov eax, dword [ebp + 8]
push ecx
mov ecx, esp
mov dword [ebp + 8], 0
mov dword [ebp + 0x18], esp
mov dword [ecx], eax
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x1f
mov ecx, 0x511c88
call fcn.00423260
mov eax, dword [ebp - 0x10]
mov edi, dword [edi + 0x4c]
mov dword [ebp - 0x18], edi
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x20], eax
cmp edi, eax
je 0x43bbc8
nop dword [eax]
nop word [eax + eax]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x511c84]
cmp eax, dword [ecx + 4]
jle 0x43ba7d
push 0x511c84
call fcn.00498d05
add esp, 4
cmp dword [0x511c84], 0xffffffff
jne 0x43ba7d
mov byte [ebp - 4], 0x22
call fcn.00423900
push 0x4d8290
call fcn.00499017
add esp, 4
mov byte [ebp - 4], 0x1f
push 0x511c84
call fcn.00498cbb
add esp, 4
push dword [edi]
mov ecx, 0x511c88
call fcn.00423830
mov edi, eax
mov byte [ebp - 4], 0x23
push 0x6c
call fcn.0049905d
mov edx, eax
add esp, 4
mov dword [ebp - 0x30], edx
mov byte [ebp - 4], 0x24
lea ecx, [edx + 8]
mov dword [edx + 4], 0
mov dword [ebp - 0x2c], ecx
mov dword [ecx + 0xc], 0
mov byte [ebp - 4], 0x26
mov dword [edx + 0x18], 0
mov dword [edx + 0x1c], 0
mov byte [ebp - 4], 0x29
lea eax, [edx + 0x24]
mov dword [ebp - 0x28], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov byte [ebp - 4], 0x2a
mov byte [eax + 0x1c], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xffffffff
mov dword [eax + 0x18], 0xffffffff
mov byte [ebp - 4], 0x2b
mov dword [edx + 0x20], 0x4e8440
mov dword [edx], 0x4ed628
mov dword [edx + 0x20], 0x4ed624
mov dword [edx + 0x48], 0
mov dword [edx + 0x4c], 0
mov dword [edx + 0x50], 0
mov byte [ebp - 4], 0x2c
lea eax, [edx + 0x58]
mov dword [edx + 0x54], 0
mov dword [ebp - 0x24], eax
mov dword [eax], 0
mov byte [ebp - 4], 0x2d
mov dword [eax + 4], 0xffffffff
mov dword [eax + 8], 0xffffffff
mov dword [eax + 0xc], 0xffffffff
mov byte [ebp - 4], 0x2e
mov dword [edx + 0x68], edi
mov byte [ebp - 4], 0x23
or ebx, 1
mov dword [ebp - 0x14], ebx
mov eax, dword [esi + 4]
mov dword [ebp + 0x18], edx
cmp eax, dword [esi + 8]
je 0x43bb92
mov dword [ebp + 0x18], 0
mov dword [eax], edx
add dword [esi + 4], 4
jmp 0x43bb9e
lea ecx, [ebp + 0x18]
push ecx
push eax
mov ecx, esi
call fcn.0043f250
and ebx, 0xfffffffe
mov dword [ebp - 0x14], ebx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp + 0x18]
test ecx, ecx
je 0x43bbb6
mov eax, dword [ecx]
push 1
call dword [eax + 4]
mov edi, dword [ebp - 0x18]
add edi, 4
mov dword [ebp - 0x18], edi
cmp edi, dword [ebp - 0x20]
jne 0x43ba30
mov byte [ebp - 4], 0
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x43bbd9
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004065f0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14