Function at 0x4017b2
Capabilities:
Access peb ldr_data

Disassembly:
jmp 0x444d00
push 0xffffffffffffffff
push 0x52854e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
mov ebp, dword [esp + 0x1c]
mov ebx, ecx
push esi
push edi
mov eax, dword [ebp]
lea esi, [ebp + 0x34]
mov dword [ebx], eax
mov ecx, dword [ebp + 4]
mov dword [ebx + 4], ecx
mov edx, dword [ebp + 8]
mov dword [ebx + 8], edx
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0xc], eax
mov cx, word [ebp + 0x10]
mov word [ebx + 0x10], cx
mov dl, byte [ebp + 0x12]
mov byte [ebx + 0x12], dl
mov al, byte [ebp + 0x13]
mov byte [ebx + 0x13], al
mov cl, byte [ebp + 0x14]
mov byte [ebx + 0x14], cl
mov dl, byte [ebp + 0x15]
mov byte [ebx + 0x15], dl
mov eax, dword [ebp + 0x18]
mov dword [ebx + 0x18], eax
mov ecx, dword [ebp + 0x1c]
mov dword [ebx + 0x1c], ecx
mov edx, dword [ebp + 0x20]
mov dword [ebx + 0x20], edx
mov ax, word [ebp + 0x24]
mov word [ebx + 0x24], ax
mov cx, word [ebp + 0x26]
mov word [ebx + 0x26], cx
mov edx, dword [ebp + 0x28]
mov dword [ebx + 0x28], edx
mov eax, dword [ebp + 0x2c]
mov dword [ebx + 0x2c], eax
mov cl, byte [ebp + 0x30]
mov byte [ebx + 0x30], cl
mov dl, byte [ebp + 0x31]
mov byte [ebx + 0x31], dl
mov al, byte [ebp + 0x32]
mov byte [ebx + 0x32], al
mov cl, byte [ebp + 0x33]
mov byte [ebx + 0x33], cl
lea edi, [ebx + 0x34]
mov ecx, 0xf
mov dword [esp + 0x10], ebx
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp + 0x70]
lea edi, [ebx + 0x70]
mov ecx, 0xf
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp + 0xac]
lea edi, [ebx + 0xac]
mov ecx, 0xf
rep movsd dword es:[edi], dword [esi]
mov dl, byte [ebp + 0xe8]
lea esi, [ebp + 0xeb]
mov byte [ebx + 0xe8], dl
mov al, byte [ebp + 0xe9]
mov byte [ebx + 0xe9], al
mov cl, byte [ebp + 0xea]
mov byte [ebx + 0xea], cl
lea edi, [ebx + 0xeb]
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x12c]
lea edi, [ebp + 0x134]
mov dword [ebx + 0x12c], edx
mov eax, dword [ebp + 0x130]
mov dword [ebx + 0x130], eax
mov dl, byte [edi]
lea ecx, [ebx + 0x134]
xor esi, esi
mov byte [ecx], dl
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], esi
mov eax, dword [0x56d918]
mov edx, dword [eax]
push edx
push esi
push edi
call dword [0x56d928]
mov al, byte [ebp + 0x144]
lea edi, [ebp + 0x144]
lea ecx, [ebx + 0x144]
mov dword [esp + 0x1c], esi
mov byte [ecx], al
mov dword [ecx + 4], esi
mov dword [ecx + 8], esi
mov dword [ecx + 0xc], esi
mov edx, dword [0x56d918]
mov eax, dword [edx]
push eax
push esi
push edi
call dword [0x56d928]
mov cl, byte [ebp + 0x154]
lea eax, [ebp + 0x154]
lea edi, [ebx + 0x154]
mov byte [esp + 0x1c], 1
mov byte [edi], cl
mov dword [edi + 4], esi
mov dword [edi + 8], esi
mov dword [edi + 0xc], esi
mov edx, dword [0x56d918]
mov ecx, dword [eax + 8]
mov dword [esp + 0x24], ecx
mov edx, dword [edx]
cmp edx, ecx
jae 0x444eb5
mov dword [esp + 0x24], edx
mov ecx, edx
cmp edi, eax
jne 0x444ed2
push edx
push ecx
mov ecx, edi
call dword [0x56d91c]
push esi
push esi
mov ecx, edi
call dword [0x56d91c]
jmp 0x444f69
cmp ecx, esi
jbe 0x444f25
cmp ecx, dword [eax + 8]
jne 0x444f25
mov eax, dword [eax + 4]
cmp eax, esi
jne 0x444ee7
mov eax, dword [0x56d920]
cmp byte [eax - 1], 0xfe
jae 0x444f25
push 1
mov ecx, edi
call dword [0x56d914]
mov eax, dword [ebp + 0x158]
cmp eax, esi
jne 0x444f06
mov eax, dword [0x56d920]
mov dword [edi + 4], eax
mov ecx, dword [ebp + 0x15c]
mov dword [edi + 8], ecx
mov edx, dword [ebp + 0x160]
mov dword [edi + 0xc], edx
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x444f69
push 1
push ecx
mov ecx, edi
call dword [0x56d90c]
test al, al
je 0x444f69
mov eax, dword [ebp + 0x158]
cmp eax, esi
jne 0x444f43
mov eax, dword [0x56d920]
mov ecx, dword [esp + 0x24]
mov edi, dword [edi + 4]
mov esi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, eax
push ecx
lea ecx, [ebx + 0x154]
call dword [0x56d910]
mov edx, dword [ebp + 0x164]
pop edi
mov dword [ebx + 0x164], edx
mov eax, dword [ebp + 0x168]
mov dword [ebx + 0x168], eax
mov ecx, dword [ebp + 0x16c]
mov dword [ebx + 0x16c], ecx
mov ecx, dword [esp + 0x10]
pop esi
mov eax, ebx
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4