Function at 0x43a367
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x10072095
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x10], edi
mov dword [edi], 0x100774f8
mov eax, dword [edi + 0x2cd4]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x20], 9
jle 0x43a4f0
neg eax
sbb eax, eax
mov ebp, eax
cmp ebp, ebx
je 0x43a49a
cmp ebp, 0xffffffff
mov edx, ebp
jne 0x43a3dc
mov esi, dword [edi + 0x2cd0]
xor eax, eax
cmp esi, ebx
jbe 0x43a3dc
mov ecx, dword [edi + 0x2ccc]
mov edx, dword [ecx]
cmp edx, ebx
jne 0x43a3dc
inc eax
add ecx, 4
cmp eax, esi
jb 0x43a3ce
mov ebp, dword [edx]
cmp ebp, ebx
jne 0x43a407
mov eax, dword [edx + 4]
mov esi, dword [edi + 0x2cd0]
inc eax
cmp eax, esi
jae 0x43a407
mov ecx, dword [edi + 0x2ccc]
lea ecx, [ecx + eax*4]
mov ebp, dword [ecx]
cmp ebp, ebx
jne 0x43a407
inc eax
add ecx, 4
cmp eax, esi
jb 0x43a3f9
mov esi, dword [edx + 0xc]
cmp esi, ebx
je 0x43a492
mov dword [esp + 0x14], esi
push 0x10028880
push 5
lea edx, [esi + 0x17b4]
push 0x194
push edx
mov byte [esp + 0x30], 0xc
call fcn.004791cf
push 0x10028880
push 5
lea eax, [esi + 0xfd0]
push 0x194
push eax
mov byte [esp + 0x30], 0xb
call fcn.004791cf
push 0x10028880
push 5
lea ecx, [esi + 0x7ec]
push 0x194
push ecx
mov byte [esp + 0x30], 0xa
call fcn.004791cf
push 0x10028880
push 5
lea edx, [esi + 8]
push 0x194
push edx
mov byte [esp + 0x30], 9
call fcn.004791cf
push esi
call fcn.00478a89
add esp, 4
xor ebx, ebx
cmp ebp, ebx
jne 0x43a3b5
mov esi, dword [edi + 0x2ccc]
cmp esi, ebx
je 0x43a4c4
mov eax, dword [edi + 0x2cd0]
cmp eax, ebx
jbe 0x43a4c4
mov ecx, esi
mov edx, eax
mov eax, dword [ecx]
cmp eax, ebx
je 0x43a4be
mov eax, dword [eax]
cmp eax, ebx
jne 0x43a4b8
add ecx, 4
dec edx
jne 0x43a4b2
push esi
call fcn.00478a89
mov ecx, dword [edi + 0x2cdc]
add esp, 4
mov dword [edi + 0x2ccc], ebx
mov dword [edi + 0x2cd4], ebx
mov dword [edi + 0x2cd8], ebx
call fcn.00478b61
mov dword [edi + 0x2cdc], ebx
lea esi, [edi + 0x2cc8]
mov dword [esp + 0x14], esi
mov dword [esi], 0x10077508
mov edx, dword [esi + 4]
mov byte [esp + 0x20], 0xd
cmp edx, ebx
je 0x43a529
mov eax, dword [esi + 8]
cmp eax, ebx
jbe 0x43a529
mov ecx, edx
mov ebp, eax
mov eax, dword [ecx]
cmp eax, ebx
je 0x43a523
mov eax, dword [eax]
cmp eax, ebx
jne 0x43a51d
add ecx, 4
dec ebp
jne 0x43a517
push edx
call fcn.00478a89
mov ecx, dword [esi + 0x14]
add esp, 4
mov dword [esi + 4], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
call fcn.00478b61
push 0x10028190
push 2
lea eax, [edi + 0x29cc]
push 0x148
push eax
mov dword [esi + 0x14], ebx
mov dword [esi], 0x10075898
mov byte [esp + 0x30], 7
call fcn.004791cf
push 0x10028880
push 5
lea ecx, [edi + 0x21e8]
push 0x194
push ecx
mov byte [esp + 0x30], 6
call fcn.004791cf
push 0x10028190
push 2
lea edx, [edi + 0x1f30]
push 0x148
push edx
mov byte [esp + 0x30], 5
call fcn.004791cf
push 0x10028880
push 5
lea eax, [edi + 0x174c]
push 0x194
push eax
mov byte [esp + 0x30], 4
call fcn.004791cf
push 0x10028190
push 2
lea ecx, [edi + 0x1494]
push 0x148
push ecx
mov byte [esp + 0x30], 3
call fcn.004791cf
push 0x10028880
push 5
lea edx, [edi + 0xcb0]
push 0x194
push edx
mov byte [esp + 0x30], 2
call fcn.004791cf
push 0x10028190
push 2
lea eax, [edi + 0x9f8]
push 0x148
push eax
mov byte [esp + 0x30], 1
call fcn.004791cf
push 0x10028880
push 5
lea ecx, [edi + 0x214]
push 0x194
push ecx
mov byte [esp + 0x30], bl
call fcn.004791cf
mov ecx, edi
call fcn.00433c37
mov ecx, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret