Function at 0x4411c0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5255f8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
lea ecx, [esp + 8]
call fcn.0048a5e0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0
call fcn.0048a5e0
push 0
push 3
sub esp, 0x10
mov ebx, 1
mov esi, esp
mov dword [esp + 0x28], esp
push ecx
mov byte [esp + 0x3c], bl
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 2
mov esi, esp
mov dword [esp + 0x3c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x54bfd4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
cmp ax, 2
jne 0x441294
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
xor ax, ax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x1c
ret
push 0
push 3
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 3
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfcc
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
cmp ax, 2
jne 0x44132b
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
xor ax, ax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x1c
ret
push 0
push 0
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 4
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfc4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 6
push 0x54bf68
lea ecx, [esp + 0x10]
call fcn.0048ac30
mov esi, 0x2d
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
dec esi
jne 0x44139e
push 0
push 3
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 5
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfbc
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
cmp ax, 2
jne 0x441456
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
xor ax, ax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x1c
ret
push 0
push ebx
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 6
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfb4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 0
push 0
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 7
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfc4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 0xa
push 0x54bfa8
lea ecx, [esp + 0x10]
call fcn.0048ac30
mov esi, 0x4e
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
dec esi
jne 0x441526
push 0
push ebx
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 8
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfa0
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 0
push 0
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 9
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfc4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 6
push 0x54bf68
lea ecx, [esp + 0x10]
call fcn.0048ac30
mov esi, 0x2d
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
dec esi
jne 0x441617
push 0
push 3
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xa
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bf98
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
cmp ax, 2
jne 0x4416cf
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
xor ax, ax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x1c
ret
push 0
push 3
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xb
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bf90
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
cmp ax, 2
jne 0x441766
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
xor ax, ax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x1c
ret
push 0
push ebx
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xc
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bf88
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 0
push 0
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xd
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfc4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
mov esi, 0x30
push 6
push 0x54be78
lea ecx, [esp + 0x10]
call fcn.0048ac30
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
lea ecx, [esp + 8]
push 0xa
push 0x54bfa8
call fcn.0048ac30
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
lea ecx, [esp + 8]
push 6
push 0x54bf68
call fcn.0048ac30
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
dec esi
jne 0x441826
push 0
push ebx
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xe
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bf80
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 0
push 0
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0xf
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bfc4
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
push 6
push 0x54bf78
lea ecx, [esp + 0x10]
call fcn.0048ac30
mov esi, 0x18
lea eax, [esp + 0xc]
lea edx, [esp + 8]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.0048a5f0
call fcn.004017d0
add esp, 8
dec esi
jne 0x441987
push 0
push ebx
sub esp, 0x10
mov esi, esp
mov dword [esp + 0x2c], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54bf30
call fcn.0048a680
push esi
call fcn.0049de10
sub esp, 8
mov byte [esp + 0x48], 0x10
mov esi, esp
mov dword [esp + 0x38], esp
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x54bf70
call fcn.0048a680
push esi
call fcn.0049de10
add esp, 8
mov ecx, 0x55b3d0
mov byte [esp + 0x48], bl
call fcn.004995c0
lea ecx, [esp + 0xc]
mov byte [esp + 0x20], 0
call fcn.0048a720
lea ecx, [esp + 8]
mov dword [esp + 0x20], 0xffffffff
call fcn.0048a720
mov ecx, dword [esp + 0x18]
mov ax, bx
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x1c
ret