Function at 0x44fac0
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48c041
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x4a4100]
xor eax, esp
mov dword [esp + 0x78], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a4100]
xor eax, esp
push eax
lea eax, [esp + 0x94]
mov dword fs:[0], eax
mov eax, dword [esp + 0xa4]
mov ebx, ecx
xor ecx, ecx
mov dword [esp + 0x30], ecx
mov byte [ebx + 8], cl
and dword [ebx + 8], 0xfffffeff
mov dword [esp + 0x20], ebx
mov dword [ebx + 0xc], ecx
mov dword [esp + 0x9c], ecx
mov ebp, dword [eax + 0x18]
mov eax, dword [eax]
mov esi, dword [ebp]
mov edi, eax
mov dword [esp + 0x30], 1
mov dword [esp + 0x38], ebp
mov dword [esp + 0x28], esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x24], edi
test edi, edi
je 0x44fb49
cmp edi, eax
je 0x44fb4e
call fcn.0046f637
cmp esi, ebp
je 0x44fd9e
test edi, edi
jne 0x44fca5
call fcn.0046f637
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x44fb6f
call fcn.0046f637
lea eax, [esp + 0x70]
push 0xfde9
lea ecx, [esi + 0xc]
push eax
call fcn.0044a620
add esp, 8
mov dword [esp + 0x9c], 2
test edi, edi
jne 0x44fcac
call fcn.0046f637
xor eax, eax
cmp esi, dword [eax + 0x18]
jne 0x44fba8
call fcn.0046f637
mov ebx, dword [esi + 0x34]
cmp ebx, dword [esi + 0x38]
jbe 0x44fbb5
call fcn.0046f637
mov eax, dword [esi + 0x28]
mov dword [esp + 0x18], eax
mov ebp, ebx
test edi, edi
jne 0x44fcb3
call fcn.0046f637
mov eax, dword [esp + 0x18]
cmp esi, dword [edi + 0x18]
jne 0x44fbdd
call fcn.0046f637
mov eax, dword [esp + 0x18]
mov edi, dword [esi + 0x38]
mov dword [esp + 0x2c], edi
cmp dword [esi + 0x34], edi
jbe 0x44fbf2
call fcn.0046f637
mov eax, dword [esp + 0x18]
mov ecx, dword [esi + 0x28]
mov dword [esp + 0x4c], ecx
lea esp, [esp]
test eax, eax
je 0x44fc0a
cmp eax, dword [esp + 0x4c]
je 0x44fc13
call fcn.0046f637
mov eax, dword [esp + 0x18]
cmp ebp, edi
je 0x44fd5d
test eax, eax
jne 0x44fcba
call fcn.0046f637
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x44fc34
call fcn.0046f637
lea edx, [esp + 0x54]
push 0xfde9
push edx
mov ecx, ebp
call fcn.0044a620
add esp, 8
mov esi, eax
mov byte [esp + 0x9c], 3
mov eax, dword [esp + 0x44]
and eax, 0xffffff04
or eax, 0x104
test byte [0x4aad14], 1
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], 0
jne 0x44fc93
or dword [0x4aad14], 1
push 0x48dd50
mov dword [0x4aad04], 0x494c04
call fcn.0046ffe4
add esp, 4
mov eax, dword [esi + 0x14]
mov edi, 0x10
cmp dword [esi + 0x18], edi
jb 0x44fcc1
mov esi, dword [esi + 4]
jmp 0x44fcc4
mov eax, dword [edi]
jmp 0x44fb65
mov eax, dword [edi]
jmp 0x44fb9e
mov edi, dword [edi]
jmp 0x44fbcf
mov eax, dword [eax]
jmp 0x44fc2a
add esi, 4
mov ecx, dword [0x4a75e4]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0xc]
push esi
call eax
mov dword [esp + 0x3c], eax
mov byte [esp + 0x9c], 4
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x88], edi
jae 0x44fcf0
lea eax, [esp + 0x74]
mov ebx, dword [esp + 0x20]
lea ecx, [esp + 0x3c]
push ecx
push eax
call fcn.0044d020
call fcn.0044d2d0
lea eax, [esp + 0x3c]
mov byte [esp + 0x9c], 3
call fcn.0044c5d0
mov byte [esp + 0x9c], 2
cmp dword [esp + 0x6c], edi
jb 0x44fd30
mov edx, dword [esp + 0x58]
push edx
call fcn.0046f011
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x44fd59
call fcn.0046f637
xor eax, eax
cmp ebp, dword [eax + 0x10]
jb 0x44fd49
call fcn.0046f637
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
add ebp, 0x1c
jmp 0x44fc00
mov eax, dword [eax]
jmp 0x44fd3f
mov byte [esp + 0x9c], 0
cmp dword [esp + 0x88], 0x10
jb 0x44fd7c
mov eax, dword [esp + 0x74]
push eax
call fcn.0046f011
add esp, 4
lea esi, [esp + 0x24]
call fcn.00447a90
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x20]
jmp 0x44fb41
mov eax, ebx
mov ecx, dword [esp + 0x94]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x78]
xor ecx, esp
call fcn.0046f01c
add esp, 0x8c
ret 4