Function at 0x43e5d0
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55c4b0
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x5b7028]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x68], ecx
mov ecx, dword [ebp - 0x68]
call fcn.00408c00
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x68]
mov dword [eax], 0x585f1c
mov ecx, dword [ebp - 0x68]
add ecx, 0xc
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x68]
add ecx, 0x10
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x68]
add ecx, 0x18
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x68]
add ecx, 0x20
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x68]
add ecx, 0x28
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x68]
add ecx, 0x2c
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x68]
add ecx, 0x30
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x68]
add ecx, 0x38
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x68]
add ecx, 0x40
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x68]
add ecx, 0x48
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x68]
add ecx, 0x50
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x68]
add ecx, 0x58
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x68]
add ecx, 0x60
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x68]
add ecx, 0x68
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x68]
add ecx, 0x70
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x68]
add ecx, 0x78
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x68]
add ecx, 0x80
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x11
mov ecx, dword [0x5bcacc]
xor edx, edx
cmp ecx, dword [0x5bcad0]
sete dl
movzx eax, dl
test eax, eax
je 0x43ea3c
push 0x582fb0
lea ecx, [ebp - 0x10]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x10]
nop
nop
nop
nop
nop
nop
push 0x582fd4
lea ecx, [ebp - 0x14]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x14]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x14]
nop
nop
nop
nop
nop
nop
push 0x582fd8
lea ecx, [ebp - 0x18]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18]
nop
nop
nop
nop
nop
nop
push 0x582fe0
lea ecx, [ebp - 0x1c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1c]
nop
nop
nop
nop
nop
nop
push 0x582fe8
lea ecx, [ebp - 0x20]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x20]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x20]
nop
nop
nop
nop
nop
nop
push 0x582ff0
lea ecx, [ebp - 0x24]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x24]
nop
nop
nop
nop
nop
nop
push 0x582ff8
lea ecx, [ebp - 0x28]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x28]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
nop
nop
nop
nop
nop
nop
push 0x583000
lea ecx, [ebp - 0x2c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x2c]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c]
nop
nop
nop
nop
nop
nop
push 0x583008
lea ecx, [ebp - 0x30]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x30]
nop
nop
nop
nop
nop
nop
push 0x583010
lea ecx, [ebp - 0x34]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x34]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x34]
nop
nop
nop
nop
nop
nop
push 0x583018
lea ecx, [ebp - 0x38]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x38]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x38]
nop
nop
nop
nop
nop
nop
push 0x58301c
lea ecx, [ebp - 0x3c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x3c]
nop
nop
nop
nop
nop
nop
push 0x583024
lea ecx, [ebp - 0x40]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x40]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x40]
nop
nop
nop
nop
nop
nop
push 0x58302c
lea ecx, [ebp - 0x44]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x1f
lea edx, [ebp - 0x44]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x44]
nop
nop
nop
nop
nop
nop
push 0x583034
lea ecx, [ebp - 0x48]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x48]
nop
nop
nop
nop
nop
nop
push 0x58303c
lea ecx, [ebp - 0x4c]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4c]
nop
nop
nop
nop
nop
nop
push 0x583044
lea ecx, [ebp - 0x50]
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x50]
push edx
mov ecx, 0x5bcacc
call fcn.00406990
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x50]
nop
nop
nop
nop
nop
nop
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret