Function at 0x44afb0
Capabilities:
Access peb ldr_data

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x542de3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xc0
mov eax, dword [ebx + 8]
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x18], edi
lea esi, [edi + 4]
mov dword [ebp - 0x14], 0
push 0x28
mov dword [edi], eax
mov dword [ebp - 0x1c], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00511c75
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xc]
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], esi
mov dword [esi], 0
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov dword [edi + 0x24], eax
mov byte [ebp - 4], 3
mov dword [edi + 0x28], eax
mov dword [edi + 0x2c], eax
mov dword [edi + 0x30], eax
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], eax
mov byte [edi + 0x40], al
mov dword [edi + 0x41], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea ecx, [ebp - 0xcc]
call fcn.0044ae70
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb4]
mov edx, dword [edi]
mov edx, dword [edx + 4]
call fcn.0044ae70
mov dword [ebp - 0x24], eax
mov ecx, dword fs:[0x2c]
mov edi, dword [ecx]
mov ecx, dword [0x683024]
cmp ecx, dword [edi + 4]
jle 0x44b0cb
push 0x683024
call fcn.00511b9f
add esp, 4
cmp dword [0x683024], 0xffffffff
jne 0x44b0cb
push 0x683024
call fcn.00511b55
add esp, 4
mov eax, dword [0x683020]
cmp eax, dword [edi + 4]
jle 0x44b10f
push 0x683020
call fcn.00511b9f
add esp, 4
cmp dword [0x683020], 0xffffffff
jne 0x44b10f
push 0x683020
mov dword [0x683028], 0
mov dword [0x68302c], 0x3c
call fcn.00511b55
add esp, 4
mov eax, dword [0x683034]
cmp eax, dword [edi + 4]
jle 0x44b153
push 0x683034
call fcn.00511b9f
add esp, 4
cmp dword [0x683034], 0xffffffff
jne 0x44b153
push 0x683034
mov dword [0x683018], 5
mov dword [0x68301c], 0xf
call fcn.00511b55
add esp, 4
mov dword [ebp - 0x54], 0
xor eax, eax
mov byte [ebp - 4], 6
push ecx
mov ecx, 0x683018
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 7
mov word [ebp - 0x54], ax
mov dword [ebp - 0x14], 1
call fcn.0043df80
mov edi, eax
test edi, edi
jle 0x44b22b
mov dword [ebp - 0x30], 0x683030
mov dword [ebp - 0x2c], 0x20
mov dword [ebp - 0x28], 0xffffffff
nop dword [eax]
nop word [eax + eax]
mov eax, dword [0x683028]
cmp eax, 0x80000000
lea ecx, [eax - 0x80000000]
lea esi, [eax - 0x80000000]
cmovae esi, ecx
mov ecx, dword [0x68302c]
cmp ecx, 0x80000000
lea edx, [ecx - 0x80000000]
lea eax, [ecx - 0x80000000]
cmovae eax, edx
sub eax, esi
cmp eax, 0xffffffff
jne 0x44b1f2
call fcn.00511112
jmp 0x44b1fc
inc eax
lea ecx, [ebp - 0x30]
push eax
call fcn.0043e010
add eax, esi
cmp eax, 0x80000000
lea ecx, [eax - 0x80000000]
lea edx, [eax - 0x80000000]
cmovae edx, ecx
lea ecx, [ebp - 0x54]
movzx eax, word [edx*2 + 0x671840]
push eax
call fcn.0043de50
sub edi, 1
jne 0x44b1b0
mov esi, dword [ebp - 0x20]
push 1
push 0x66afac
lea ecx, [ebp - 0x54]
call fcn.00441bb0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x84], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x74], xmm0
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x14], 3
push dword [ebp - 0x24]
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xa
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c]
call fcn.0044bc30
mov dword [ebp - 0x14], 7
push 1
push 0x66af94
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0xb
call fcn.00441bb0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x6c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x5c], xmm0
xor ecx, ecx
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x14], 0xf
push dword [ebp - 0x1c]
lea eax, [ebp - 0x6c]
mov byte [ebp - 4], 0xe
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
call fcn.0044bc30
lea eax, [ebp - 0x3c]
cmp esi, eax
je 0x44b315
mov ecx, esi
call fcn.00413120
movups xmm0, xmmword [ebp - 0x3c]
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x2c]
movq qword [esi + 0x10], xmm0
xor eax, eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 7
mov word [ebp - 0x3c], ax
lea ecx, [ebp - 0x3c]
call fcn.00413120
lea ecx, [ebp - 0x6c]
call fcn.00413120
lea ecx, [ebp - 0x9c]
call fcn.00413120
lea ecx, [ebp - 0x84]
call fcn.00413120
lea ecx, [ebp - 0x54]
call fcn.00413120
lea ecx, [ebp - 0xb4]
call fcn.00413120
lea ecx, [ebp - 0xcc]
call fcn.00413120
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4