Function at 0x4484b1
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x250
push esi
mov esi, ecx
lea ecx, [esp + 0x164]
push edi
lea eax, [esi + 0x18]
push eax
call fcn.00403942
lea eax, [esi + 0x30]
push eax
lea ecx, [esp + 0x184]
call fcn.00403942
lea eax, [esi + 0x48]
push eax
lea ecx, [esp + 0x19c]
call fcn.00403942
lea eax, [esi + 0x60]
push eax
lea ecx, [esp + 0x1b4]
call fcn.00403942
mov edx, dword [esi + 0x7c]
lea ecx, [esp + 0x48]
call fcn.004495d1
mov edx, dword [esi + 0x78]
lea ecx, [esp + 0x30]
call fcn.004495d1
push 0x498a30
lea edx, [esp + 0x34]
lea ecx, [esp + 0x64]
call fcn.00449689
pop ecx
lea ecx, [esp + 0x48]
push ecx
push eax
push dword [esp + 0x10]
lea ecx, [esp + 0x1d4]
call fcn.0044986b
mov edx, dword [esi + 0x98]
lea ecx, [esp + 0x1e0]
call fcn.004495d1
push esi
lea ecx, [esp + 0x1fc]
call fcn.00403942
mov edx, dword [esi + 0x9c]
lea ecx, [esp + 0x210]
call fcn.004495d1
lea eax, [esi + 0xa0]
push eax
lea ecx, [esp + 0x22c]
call fcn.00403942
lea eax, [esi + 0x80]
push eax
lea ecx, [esp + 0x244]
call fcn.00403942
lea ecx, [esp + 0x168]
push ecx
lea eax, [esp + 0x25c]
push eax
push ecx
lea ecx, [esp + 0x30]
call fcn.004494a6
call fcn.00448906
mov ecx, eax
call fcn.004493cd
push eax
lea ecx, [esp + 0x7c]
call fcn.00403905
call fcn.0044899e
mov ecx, eax
call fcn.004493cd
push eax
lea ecx, [esp + 0x94]
call fcn.00403905
push 4
pop eax
push 5
mov word [esp + 0xc], ax
pop eax
push 0xa
mov word [esp + 0xe], ax
pop eax
mov word [esp + 0xc], ax
mov esi, dword fs:[0x2c]
push 0xf
pop eax
mov word [esp + 0xe], ax
mov esi, dword [esi]
mov eax, dword [esi + 0x5fc]
lea ecx, [esi + 0x4b0]
test al, 1
jne 0x448660
xorps xmm0, xmm0
mov byte [ecx + 8], 1
or eax, 1
movlpd qword [esp + 0x10], xmm0
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esi + 0x5fc], eax
mov ax, word [esp + edx*2 + 8]
mov word [ecx + edx*2], ax
add edx, 1
adc edi, 0
jne 0x44864f
cmp edx, 4
jb 0x448639
push 0x48e27c
call fcn.004699af
pop ecx
lea ecx, [esi + 0x4b0]
call fcn.004493a6
push eax
lea ecx, [esp + 0xac]
call fcn.00403905
push 8
pop eax
push 6
mov word [esp + 0xc], ax
pop eax
mov word [esp + 0xa], ax
push 0x7f
pop eax
mov word [esp + 0xc], ax
mov eax, dword [esi + 0x5bc]
test al, 1
jne 0x4486da
xorps xmm0, xmm0
mov byte [esi + 0x51e], 1
or eax, 1
movlpd qword [esp + 0x10], xmm0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x5bc], eax
mov ax, word [esp + ecx*2 + 8]
mov word [esi + ecx*2 + 0x518], ax
add ecx, 1
adc edx, 0
jne 0x4486cf
cmp ecx, 3
jb 0x4486b5
push 0x48e23c
call fcn.004699af
pop ecx
lea edi, [esi + 0x518]
cmp byte [edi + 6], 0
je 0x448702
push 0x1901a1eb
push 0xf7f7567
push 0
push 3
mov ecx, edi
call fcn.00403088
add esp, 0x10
mov byte [edi + 6], 0
push edi
lea ecx, [esp + 0xc4]
call fcn.00403905
call fcn.00448a36
mov edi, eax
cmp byte [edi + 0x1a], 0
je 0x448738
push 0x1901a1eb
push 0xf7f7567
push 0
push 0xd
mov ecx, edi
call fcn.00403088
add esp, 0x10
mov byte [edi + 0x1a], 0
push edi
lea ecx, [esp + 0xdc]
call fcn.00403905
push 0x15
pop eax
push 0x14
mov word [esp + 0xc], ax
pop eax
push 0x12
mov word [esp + 0xe], ax
pop eax
mov word [esp + 0xc], ax
push 0xf
pop eax
mov word [esp + 0xe], ax
mov eax, dword [esi + 0x514]
test al, 1
jne 0x4487b5
xorps xmm0, xmm0
mov byte [esi + 0x5a8], 1
or eax, 1
movlpd qword [esp + 0x10], xmm0
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x514], eax
mov ax, word [esp + ecx*2 + 8]
mov word [esi + ecx*2 + 0x5a0], ax
add ecx, 1
adc edx, 0
jne 0x4487aa
cmp ecx, 4
jb 0x448790
push 0x48e1bc
call fcn.004699af
pop ecx
mov eax, dword fs:[0x2c]
mov ecx, dword [eax]
add ecx, 0x5a0
call fcn.004493a6
push eax
lea ecx, [esp + 0xf4]
call fcn.00403905
call fcn.00448ae9
mov ecx, eax
call fcn.0044937f
push eax
lea ecx, [esp + 0x10c]
call fcn.00403905
call fcn.00448b6e
mov esi, eax
cmp byte [esi + 0xe], 0
je 0x448817
push 0x1901a1eb
push 0xf7f7567
push 0
push 7
mov ecx, esi
call fcn.00403088
add esp, 0x10
mov byte [esi + 0xe], 0
push esi
lea ecx, [esp + 0x124]
call fcn.00403905
call fcn.00448bf7
mov ecx, eax
call fcn.0044937f
push eax
lea ecx, [esp + 0x13c]
call fcn.00403905
call fcn.00448c7b
mov esi, eax
cmp byte [esi + 0x10], 0
je 0x448866
push 0x1901a1eb
push 0xf7f7567
push 0
push 8
mov ecx, esi
call fcn.00403088
add esp, 0x10
mov byte [esi + 0x10], 0
push esi
lea ecx, [esp + 0x154]
call fcn.00403905
lea ecx, [esp + 0x78]
push ecx
lea eax, [esp + 0x16c]
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.004494a6
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x14]
push eax
push dword [ebp + 8]
call fcn.0044836e
lea ecx, [esp + 0x10]
call fcn.004039d5
push 0xa
pop esi
lea edi, [esp + 0x168]
sub edi, 0x18
mov ecx, edi
call fcn.00403a1a
sub esi, 1
jne 0x4488af
lea ecx, [esp + 0x24]
call fcn.004039d5
push 0xa
lea esi, [esp + 0x25c]
pop edi
sub esi, 0x18
mov ecx, esi
call fcn.00403a1a
sub edi, 1
jne 0x4488d1
lea ecx, [esp + 0x60]
call fcn.00403a1a
lea ecx, [esp + 0x30]
call fcn.00403a1a
lea ecx, [esp + 0x48]
call fcn.00403a1a
mov eax, dword [ebp + 8]
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4