Function at 0x438210
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x4fcb99
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x5384a8]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
mov eax, dword [0x5384a8]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esi], eax
mov dword [esi + 0x1c], 0xf
mov dword [esi + 0x18], eax
mov dword [esp + 0x14], esi
mov byte [esi + 8], al
mov dword [esp + 0x44], eax
mov dword [esp + 0x10], 1
mov byte [esp + 0x18], al
mov dword [esp + 0x19], eax
mov dword [esp + 0x1d], eax
mov dword [esp + 0x21], eax
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov word [esp + 0x35], ax
mov byte [esp + 0x37], al
mov eax, 1
xor edx, edx
cpuid
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4382f8
xor eax, eax
push ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x1c]
push str._08X
push eax
call fcn.0047fe00
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4382e2
sub eax, edx
push eax
lea ecx, [esp + 0x1c]
push ecx
mov eax, esi
call fcn.00429610
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x438356
xor eax, eax
push ecx
lea edx, [esp + 0x1c]
push str._08X
push edx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
call fcn.0047fe00
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x438340
sub eax, edx
push eax
lea eax, [esp + 0x1c]
push eax
mov eax, esi
call fcn.00429610
mov eax, 3
xor ecx, ecx
xor edx, edx
cpuid
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4383c6
xor eax, eax
push ecx
lea ecx, [esp + 0x1c]
push str._08X
push ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
call fcn.0047fe00
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4383b0
sub eax, edx
push eax
lea edx, [esp + 0x1c]
push edx
mov eax, esi
call fcn.00429610
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x438426
xor eax, eax
push ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
lea eax, [esp + 0x1c]
push str._08X
push eax
call fcn.0047fe00
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
lea ebx, [ebx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x438410
sub eax, edx
push eax
lea ecx, [esp + 0x1c]
push ecx
mov eax, esi
call fcn.00429610
mov eax, esi
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.0047d0e0
add esp, 0x40
ret