Function at 0x43cf2c
Capabilities:
Access peb ldr_data
Create thread

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xf
push 0
push 0
dec ecx
jne 0x43cf34
mov eax, 0x43cd7c
call fcn.00407028
xor eax, eax
push ebp
push 0x43d1c1
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
call fcn.0043b7d4
test al, al
je 0x43d1a6
mov esi, dword [0x440718]
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
cmp esi, dword [eax + 0x18]
jne 0x43cf75
mov esi, dword [eax]
mov ebx, dword [eax + 4]
mov dword [ebx], esi
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ebx + 4], esi
lea eax, [eax + 8]
mov esi, dword [eax]
mov ebx, dword [eax + 4]
mov dword [ebx], esi
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov dword [ebx + 4], esi
lea eax, [ebp - 0x48]
call fcn.0043a3b4
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x44]
call fcn.00408480
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.0040df00
mov eax, dword [ebp - 0x40]
mov edx, 0x43d1d8
call fcn.00404f3c
jne 0x43d085
push 0x445b9c
push 0
push 0
push 0x426014
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0x445b9c
push 0
push 0
push 0x43c9e0
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0x445b9c
push 0
push 0
push 0x43cad4
push 0
push 0
call sub.kernel32.dll_CreateThread_1
push 0x445b9c
push 0
push 0
push 0x439d20
push 0
push 0
call sub.kernel32.dll_CreateThread_1
mov eax, dword [0x43fda4]
cmp byte [eax + 0xa94], 0
jne 0x43d0e0
push 0
push 0
push 0x445b9c
mov ecx, 0x439a50
xor edx, edx
xor eax, eax
call fcn.00404afc
mov eax, dword [0x43fda4]
mov byte [eax + 0xa94], 1
mov edx, dword [0x43fe78]
mov edx, dword [edx]
mov eax, dword [0x43fda4]
call fcn.0043a7b0
mov edx, dword [0x43fea4]
mov edx, dword [edx]
mov eax, dword [0x43fda4]
call fcn.0043a7b0
jmp 0x43d0e0
lea eax, [ebp - 0x54]
call fcn.0043a3b4
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.00408480
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x4c]
call fcn.0040df00
mov eax, dword [ebp - 0x4c]
mov edx, 0x43d200
call fcn.00404f3c
jne 0x43d0e0
call fcn.0042919c
mov edx, dword [0x43fdf8]
mov byte [edx], al
mov eax, dword [0x43fdf8]
cmp byte [eax], 0
jne 0x43d0e0
push 0
push 0
push 0x445b9c
mov ecx, 0x431c9c
xor edx, edx
xor eax, eax
call fcn.00404afc
lea eax, [ebp - 0x5c]
call fcn.0043c700
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x58]
call fcn.00408480
mov eax, dword [ebp - 0x58]
push eax
lea eax, [ebp - 0x64]
call fcn.0043a3b4
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x60]
call fcn.00408480
mov eax, dword [ebp - 0x60]
pop edx
call fcn.004050d8
test eax, eax
jne 0x43d157
lea eax, [ebp - 0x6c]
call fcn.0043a3b4
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.00408480
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x78]
call fcn.0043c700
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.00408b9c
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x70]
call fcn.00408480
mov edx, dword [ebp - 0x70]
pop eax
call fcn.00404f3c
jne 0x43d1a6
mov eax, dword [0x43fdf8]
cmp byte [eax], 0
jne 0x43d16e
call fcn.0042919c
mov edx, dword [0x43fdf8]
mov byte [edx], al
mov eax, dword [0x43fdf8]
cmp byte [eax], 0
je 0x43d1a6
push 0
push 0
push 0x445b9c
mov ecx, 0x43cce0
xor edx, edx
xor eax, eax
call fcn.00404afc
push 0
push 0
push 0x445b9c
mov ecx, 0x437560
xor edx, edx
xor eax, eax
call fcn.00404afc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x43d1c8
lea eax, [ebp - 0x78]
mov edx, 0xf
call fcn.00404b64
ret