Function at 0x43cfb0
Capabilities:
Access peb ldr_data
Create thread
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55e572
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x5b3680]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x18], edi
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0x11
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0xa
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0x3f400000
mov dword [edi + 0x10], 0x3e800000
mov dword [edi + 0x14], 0x40100000
mov dword [edi + 0x18], 0x26
mov dword [edi + 0x1c], 0
mov dword [ebp - 4], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov byte [ebp - 4], 1
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0x11
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0xa
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x4c], 0x3f400000
mov dword [edi + 0x50], 0x3e800000
mov dword [edi + 0x54], 0x40100000
mov dword [edi + 0x58], 0x26
mov dword [edi + 0x5c], 0
mov byte [ebp - 4], 2
mov dword [edi + 0x70], 0
mov byte [ebp - 4], 3
lea eax, [edi + 0x78]
push 0
push eax
mov dword [edi + 0x74], 0xffffffff
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
test eax, eax
jne 0x43d0e8
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x43d0e2
movzx eax, ax
or eax, 0x80070000
push eax
call fcn.004027b0
mov byte [ebp - 4], 4
lea ecx, [edi + 0x90]
call fcn.00430550
mov byte [ebp - 4], 5
lea esi, [edi + 0x124]
mov dword [edi + 0xdc], 0
mov dword [edi + 0xe0], 0
mov dword [edi + 0x120], 0x400
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00441fc0
mov dword [esi], eax
mov byte [ebp - 4], 0xa
mov dword [edi + 0x12c], 0
mov dword [edi + 0x130], 0
mov dword [edi + 0x134], 0
mov byte [ebp - 4], 0xb
lea ecx, [edi + 0x138]
call fcn.004f4c70
mov byte [ebp - 4], 0xc
lea ecx, [edi + 0x1a4]
call fcn.004f5a80
mov byte [ebp - 4], 0xd
xorps xmm0, xmm0
mov dword [edi + 0x218], 0
mov word [edi + 0x2a1c], 0x101
mov dword [edi + 0x2c26], 0
mov dword [edi + 0x2c2c], 0
movups xmmword [edi + 0x2c30], xmm0
mov word [edi + 0x2c40], 0
mov dword [edi + 0x2c44], 0
mov dword [edi + 0x2c48], 0
mov dword [edi + 0x2c4c], 0
mov dword [edi + 0x2c50], 0
mov dword [edi + 0x2c54], 0
mov dword [edi + 0x2c58], 0xa
mov byte [ebp - 4], 0xe
mov dword [edi + 0x2c5c], 0
mov dword [edi + 0x2c60], 0
mov dword [edi + 0x2c64], 0
mov dword [edi + 0x2c68], 0
mov dword [edi + 0x2c6c], 0
mov dword [edi + 0x2c70], 0xa
mov byte [ebp - 4], 0xf
mov dword [edi + 0x2c74], 0
mov dword [edi + 0x2c78], 0
mov dword [edi + 0x2c7c], 0
mov dword [edi + 0x2c80], 0
mov dword [edi + 0x2c84], 0
mov dword [edi + 0x2c88], 0xa
mov byte [ebp - 4], 0x10
mov dword [edi + 0x2c8c], 0
mov dword [edi + 0x2c90], 0
mov dword [edi + 0x2c94], 0
mov dword [edi + 0x2c98], 0
mov dword [edi + 0x2c9c], 0
mov dword [edi + 0x2ca0], 0xa
mov byte [ebp - 4], 0x11
mov ecx, edi
mov dword [edi + 0x2cac], 0
mov dword [edi + 0x2cb0], 0
call fcn.0043ce50
push str.scfsp.sys
push 0x104
lea eax, [edi + 0x2a1e]
push eax
call fcn.0052c92e
add esp, 0xc
lea eax, [edi + 0x221c]
push 0x581a44
push 0x400
push eax
call fcn.0052c92e
add esp, 8
mov ecx, edi
call fcn.00440f70
lea ecx, [ebp - 0x14]
call fcn.00482350
mov byte [ebp - 4], 0x12
mov edx, eax
push 0x582d00
lea ecx, [ebp - 0x10]
call fcn.00415f60
add esp, 4
mov byte [ebp - 4], 0x14
or esi, 0xffffffff
mov edx, dword [ebp - 0x14]
mov eax, esi
add edx, 0xfffffff0
lea ecx, [edx + 0xc]
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x43d349
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x10]
cmp dword [eax - 4], 1
jle 0x43d360
push dword [eax - 0xc]
lea ecx, [ebp - 0x10]
call fcn.004024c0
mov eax, dword [ebp - 0x10]
push eax
push 0x104
push 0x5b9c90
call fcn.0052c92e
add esp, 0xc
call fcn.0043f710
push str.EB03E83A_4058_4a73_8B15_63E9178F1B66
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
push str.D57EA188_6550_421c_9652_434C1A2E634A
push 0
push 1
push 0
mov dword [edi + 0x214], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0x441210
push 0
push 0
mov dword [edi + 0x210], eax
call fcn.0052cf98
add esp, 0x18
test eax, eax
je 0x43d3c6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x10]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x43d3e4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret