Function at 0x43f470
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x2c
movzx eax, byte [0x54d450]
test al, al
jne 0x43f484
xor ecx, ecx
xor eax, eax
jmp 0x43f490
call fcn.00458a40
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov edx, dword [0x56ae44]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov dword [esp + 0x14], edx
mov ebx, dword [edx + 0x18]
inc dword [ebx + 0x7c]
mov dword [edx + 8], 0xfffffade
mov byte [edx + 0x6f], 1
mov ebx, dword [esp + 0x30]
mov dword [esp], ebx
mov ebp, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
call fcn.0043f400
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x38], eax
mov edx, dword [esp + 0x30]
mov dword [ecx + 0x3c], edx
mov ebx, dword [esp + 0x38]
mov dword [ecx + 0x40], ebx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 3
call fcn.00438fd0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x38]
cmp dword [eax], ecx
ja 0x43f515
cmp dword [eax + 4], ecx
jae 0x43f533
lea ecx, [0x43f6e0]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp], ecx
call fcn.0046a2c0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x43f579
lea eax, [0x43f690]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
call fcn.0046a2c0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043f400
lea eax, [0x54d520]
mov dword [esp], eax
call fcn.0046fc80
movzx eax, byte [esp + 4]
test al, al
je 0x43f5ba
lea eax, [0x4bb0b8]
mov dword [esp], eax
call fcn.0046a2c0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043f400
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
test byte [ecx], al
mov ecx, dword [ecx + 0x1190]
test ecx, ecx
je 0x43f5fe
lea eax, [0x4bb250]
mov dword [esp], eax
call fcn.0046a2c0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043f400
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x58]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0x194], edx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
lea edx, [ecx + 4]
mov dword [ecx + 0x2c], 0
mov ebx, dword [eax + 0x18]
mov dword [ebx + 0x60], ecx
mov ecx, dword [eax + 0x18]
mov dword [ecx + 0x58], 0
mov dword [esp], edx
mov dword [esp + 4], 2
call fcn.0046ff70
lea eax, [0x54d514]
mov dword [esp], eax
call fcn.0046fc80
movzx eax, byte [esp + 4]
test al, al
je 0x43f67e
lea eax, [0x4bb0b4]
mov dword [esp], eax
call fcn.0046a2c0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0043f400
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x18]
dec dword [eax + 0x7c]
add esp, 0x2c
ret