Function at 0x441000
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x160
mov esi, esp
mov dword [esi + 0x18], ebp
mov eax, dword [ebp + 8]
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], eax
mov ecx, dword [ebp + 0xc]
mov dword [esi + 0x3c], ecx
mov eax, esp
mov dword [esi + 0x14c], eax
mov dword [esi + 0x158], 0xffffffff
lea eax, [esi + 0x150]
mov dword [esi + 0x154], 0x45be00
mov edx, dword fs:[0]
mov dword [esi + 0x150], edx
mov dword fs:[0], eax
mov eax, esp
mov dword [eax], ecx
call fcn.00475d00
mov ecx, eax
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.004c6820
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], edx
mov dword [esi + 0x13c], eax
mov dword [esi + 0x140], edx
mov eax, esp
mov dword [eax], ecx
call fcn.00475cd0
mov ecx, eax
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.004c6920
mov ecx, dword [esi + 0x30]
mov edi, eax
mov ebx, edx
mov edx, dword [esi + 0x34]
mov dword [esi + 0x144], edi
mov dword [esi + 0x148], ebx
mov eax, esp
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], edi
mov dword [eax + 8], edx
mov dword [eax + 4], ecx
lea ecx, [esi + 0xa4]
mov dword [esi + 0x38], ecx
mov dword [eax], ecx
call fcn.004fe9e0
mov ecx, dword [esi + 0x38]
mov eax, esp
mov dword [eax + 4], ecx
lea ecx, [esi + 0x98]
mov dword [eax], ecx
call fcn.004a4140
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x158], 1
mov eax, esp
mov dword [eax], ecx
call fcn.004759e0
mov dword [esi + 0x40], edx
mov dword [esi + 0x44], eax
jmp 0x441102
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x40]
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.004c6aa0
mov dword [esi + 0x20], edx
mov dword [esi + 0x24], eax
jmp 0x44111c
mov ecx, dword [esi + 0x24]
mov edx, dword [esi + 0x20]
mov eax, esp
mov dword [eax + 8], edx
mov dword [eax + 4], ecx
lea ecx, [esi + 0xb4]
mov dword [eax], ecx
call fcn.004feff0
jmp 0x441139
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x158], 2
mov eax, esp
mov dword [eax], ecx
call fcn.00476130
mov byte [esi + 0x1f], al
jmp 0x441154
mov eax, esp
lea ecx, [esi + 0xc0]
mov dword [eax], ecx
call fcn.0041f540
jmp 0x441165
mov ecx, dword [esi + 0x28]
mov al, byte [esi + 0x1f]
mov edx, dword [esi + 0xa0]
mov dword [esi + 0x84], edx
movsd xmm0, qword [esi + 0x98]
movsd qword [esi + 0x7c], xmm0
mov edx, dword [esi + 0xbc]
mov dword [esi + 0x90], edx
movsd xmm0, qword [esi + 0xb4]
movsd qword [esi + 0x88], xmm0
and al, 1
mov byte [esi + 0x94], al
movsd xmm0, qword [esi + 0xe8]
movsd qword [esi + 0x70], xmm0
movsd xmm0, qword [esi + 0xe0]
movsd qword [esi + 0x68], xmm0
movsd xmm0, qword [esi + 0xd8]
movsd qword [esi + 0x60], xmm0
movsd xmm0, qword [esi + 0xd0]
movsd qword [esi + 0x58], xmm0
movsd xmm0, qword [esi + 0xc0]
movsd xmm1, qword [esi + 0xc8]
movsd qword [esi + 0x50], xmm1
movsd qword [esi + 0x48], xmm0
mov eax, dword [esi + 0xf0]
mov dword [esi + 0x78], eax
mov dword [esi + 0x118], 0x80000000
add ecx, 0x28
mov eax, esp
lea edx, [esi + 0x48]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0x50
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0x28]
movsd xmm0, qword [esi + 0x130]
movsd qword [eax + 0x20], xmm0
movsd xmm0, qword [esi + 0x128]
movsd qword [eax + 0x18], xmm0
movsd xmm0, qword [esi + 0x120]
movsd qword [eax + 0x10], xmm0
movsd xmm0, qword [esi + 0x110]
movsd xmm1, qword [esi + 0x118]
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm0
lea ecx, [esi + 0xf4]
mov dword [esi + 0x158], 3
mov eax, esp
mov dword [eax], ecx
call fcn.00411f70
jmp 0x441280
lea ecx, [esi + 0x100]
mov dword [esi + 0x158], 0xffffffff
mov eax, esp
mov dword [eax], ecx
call fcn.00411f70
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x150]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret