Function at 0x43f530
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55c318
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x5b7028]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x64]
call fcn.00408c00
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x64]
mov dword [eax], 0x585fb8
mov ecx, dword [ebp - 0x64]
add ecx, 0xc
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x64]
add ecx, 0x10
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x64]
add ecx, 0x18
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x64]
add ecx, 0x20
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x64]
add ecx, 0x28
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x64]
add ecx, 0x2c
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x64]
add ecx, 0x30
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x64]
add ecx, 0x38
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x64]
add ecx, 0x40
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x64]
add ecx, 0x48
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x64]
add ecx, 0x50
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x64]
add ecx, 0x58
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x64]
add ecx, 0x60
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x64]
add ecx, 0x68
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x64]
add ecx, 0x70
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x64]
add ecx, 0x78
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x10
mov ecx, dword [0x5bcadc]
xor edx, edx
cmp ecx, dword [0x5bcae0]
sete dl
movzx eax, dl
test eax, eax
je 0x43f95c
push 0x582fb0
lea ecx, [ebp - 0x10]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10]
nop
nop
nop
nop
nop
nop
push 0x582fd4
lea ecx, [ebp - 0x14]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x14]
push edx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x14]
nop
nop
nop
nop
nop
nop
push 0x582fd8
lea ecx, [ebp - 0x18]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x18]
nop
nop
nop
nop
nop
nop
push 0x582fe0
lea ecx, [ebp - 0x1c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1c]
nop
nop
nop
nop
nop
nop
push 0x582fe8
lea ecx, [ebp - 0x20]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x20]
push edx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x20]
nop
nop
nop
nop
nop
nop
push 0x582ff0
lea ecx, [ebp - 0x24]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x24]
nop
nop
nop
nop
nop
nop
push 0x582ff8
lea ecx, [ebp - 0x28]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
nop
nop
nop
nop
nop
nop
push 0x583000
lea ecx, [ebp - 0x2c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x2c]
push edx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2c]
nop
nop
nop
nop
nop
nop
push 0x583008
lea ecx, [ebp - 0x30]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x30]
nop
nop
nop
nop
nop
nop
push 0x583010
lea ecx, [ebp - 0x34]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x34]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x34]
nop
nop
nop
nop
nop
nop
push 0x583018
lea ecx, [ebp - 0x38]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x38]
push edx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x38]
nop
nop
nop
nop
nop
nop
push 0x58302c
lea ecx, [ebp - 0x3c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3c]
nop
nop
nop
nop
nop
nop
push 0x58303c
lea ecx, [ebp - 0x40]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x40]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x40]
nop
nop
nop
nop
nop
nop
push 0x58304c
lea ecx, [ebp - 0x44]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1e
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x44]
nop
nop
nop
nop
nop
nop
push 0x583034
lea ecx, [ebp - 0x48]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x48]
nop
nop
nop
nop
nop
nop
push 0x583054
lea ecx, [ebp - 0x4c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, 0x5bcadc
call fcn.00406990
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x4c]
nop
nop
nop
nop
nop
nop
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret