Function at 0x43fc00
Capabilities:
Access peb ldr_data

Disassembly:
sub esp, 0x2c
movzx eax, byte [0x66f3d0]
test al, al
jne 0x43fc14
xor ecx, ecx
xor eax, eax
jmp 0x43fc20
call fcn.00459ac0
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov edx, dword [0x68cdd8]
mov edx, dword fs:[edx]
mov edx, dword [edx]
mov dword [esp + 0x14], edx
mov ebx, dword [edx + 0x18]
inc dword [ebx + 0x7c]
mov dword [edx + 8], 0xfffffade
mov byte [edx + 0x6f], 1
mov ebx, dword [esp + 0x30]
mov dword [esp], ebx
mov ebp, dword [esp + 0x34]
mov dword [esp + 4], ebp
mov esi, dword [esp + 0x38]
mov dword [esp + 8], esi
call fcn.0043fb90
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
mov dword [ecx + 0x38], eax
mov edx, dword [esp + 0x30]
mov dword [ecx + 0x3c], edx
mov ebx, dword [esp + 0x38]
mov dword [ecx + 0x40], ebx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 3
call fcn.00439760
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x38]
cmp dword [eax], ecx
ja 0x43fca5
cmp dword [eax + 4], ecx
jae 0x43fcc3
lea ecx, [0x43ff90]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp], ecx
call fcn.0046b9d0
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x40]
test ecx, ecx
je 0x43fcce
cmp dword [eax], ecx
ja 0x43fcd3
cmp dword [eax + 4], ecx
jae 0x43fcf1
lea ecx, [0x43fea0]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp], ecx
call fcn.0046b9d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x43fd37
lea eax, [0x43fe50]
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
call fcn.0046b9d0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043fb90
lea eax, [0x66f4a0]
mov dword [esp], eax
call fcn.00471550
movzx eax, byte [esp + 4]
test al, al
je 0x43fd78
lea eax, [0x59c7b0]
mov dword [esp], eax
call fcn.0046b9d0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043fb90
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
test byte [ecx], al
mov ecx, dword [ecx + 0x1190]
test ecx, ecx
je 0x43fdbc
lea eax, [0x59c948]
mov dword [esp], eax
call fcn.0046b9d0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x38]
mov dword [esp + 8], edx
call fcn.0043fb90
mov eax, dword [esp + 0x14]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x58]
mov edx, dword [edx + 0x10]
mov dword [ecx + 0x194], edx
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x58]
lea edx, [ecx + 4]
mov dword [ecx + 0x2c], 0
mov ebx, dword [eax + 0x18]
mov dword [ebx + 0x60], ecx
mov ecx, dword [eax + 0x18]
mov dword [ecx + 0x58], 0
mov dword [esp], edx
mov dword [esp + 4], 2
call fcn.00471840
lea eax, [0x66f494]
mov dword [esp], eax
call fcn.00471550
movzx eax, byte [esp + 4]
test al, al
je 0x43fe3c
lea eax, [0x59c7ac]
mov dword [esp], eax
call fcn.0046b9d0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 8], eax
call fcn.0043fb90
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x18]
dec dword [eax + 0x7c]
add esp, 0x2c
ret