Function at 0x441fd5
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x5291dc
call fcn.004512a8
sub esp, 0x78
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
push 0x5322d0
mov ebx, ecx
push edi
push eax
mov dword [ebp - 0x1c], ebx
call fcn.00402795
add esp, 0xc
and dword [ebp - 4], 0
or dword [ebp - 4], 0xffffffff
mov ecx, ebx
call fcn.00441efa
mov dword [ebp - 4], 1
lea ecx, [ebx + 0x178]
call fcn.004406fe
mov byte [ebp - 4], 2
lea esi, [ebx + 0x188]
mov ecx, esi
call fcn.00440733
mov byte [ebp - 4], 3
nop
nop
nop
nop
nop
nop
nop
nop
and dword [esi], 0
lea ecx, [ebx + 0x18c]
push 0x52faf0
call fcn.004026dd
mov edx, 0x9211
mov eax, edx
mov word [ebp - 0x84], ax
add eax, 0x66
mov word [ebp - 0x82], ax
lea ecx, [edx + 0x6a]
mov eax, ecx
mov word [ebp - 0x80], ax
add eax, 0xfffffffe
mov esi, eax
mov word [ebp - 0x7c], ax
mov word [ebp - 0x7a], cx
lea eax, [edx + 0x69]
mov word [ebp - 0x78], ax
add eax, 0xfffffffb
mov ecx, eax
mov word [ebp - 0x76], cx
lea ecx, [edx + 0x53]
mov word [ebp - 0x72], cx
mov word [ebp - 0x7e], si
mov esi, ecx
add ecx, 0xc
mov word [ebp - 0x70], cx
mov ecx, eax
mov word [ebp - 0x6e], cx
lea ecx, [edx + 0x4f]
mov word [ebp - 0x6a], ax
lea eax, [edx + 0x23]
mov word [ebp - 0x6c], cx
mov ecx, eax
mov word [ebp - 0x74], si
mov word [ebp - 0x68], dx
mov word [ebp - 0x66], cx
mov word [ebp - 0x64], cx
mov word [ebp - 0x62], cx
mov word [ebp - 0x60], cx
mov word [ebp - 0x5e], cx
mov word [ebp - 0x5c], cx
mov word [ebp - 0x5a], cx
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], cx
mov word [ebp - 0x54], cx
mov word [ebp - 0x52], cx
mov word [ebp - 0x50], cx
mov word [ebp - 0x4e], cx
mov word [ebp - 0x4c], cx
mov word [ebp - 0x22], ax
xor eax, eax
push eax
mov word [ebp - 0x20], ax
lea eax, [ebp - 0x84]
push eax
mov word [ebp - 0x4a], cx
mov word [ebp - 0x48], cx
mov word [ebp - 0x46], cx
mov word [ebp - 0x44], cx
mov word [ebp - 0x42], cx
mov word [ebp - 0x40], cx
mov word [ebp - 0x3e], cx
mov word [ebp - 0x3c], cx
mov word [ebp - 0x3a], cx
mov word [ebp - 0x38], cx
mov word [ebp - 0x36], cx
mov word [ebp - 0x34], cx
mov word [ebp - 0x32], cx
mov word [ebp - 0x30], cx
mov word [ebp - 0x2e], cx
mov word [ebp - 0x2c], cx
mov word [ebp - 0x2a], cx
mov word [ebp - 0x28], cx
mov word [ebp - 0x26], cx
mov word [ebp - 0x24], cx
call fcn.004069fd
pop ecx
pop ecx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x10]
call fcn.00402ae2
mov byte [ebp - 4], 4
push 0x52fb58
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402795
add esp, 0xc
mov byte [ebp - 4], 5
push eax
lea ecx, [ebx + 0x190]
call fcn.004026fc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x14]
call fcn.00402189
push 7
lea eax, [ebx + 0x20]
lea esi, [edi + 0x20]
pop ecx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 8]
lea eax, [esi + 0x50]
push eax
lea ecx, [ebx + 0x50]
call fcn.0044104c
lea eax, [esi + 0x3c]
push eax
lea ecx, [ebx + 0x3c]
call fcn.00441095
lea eax, [esi + 0x160]
push eax
lea ecx, [ebx + 0x160]
call fcn.004410c7
mov eax, dword [esi + 0x1c]
push 0x12
mov dword [ebx + 0x1c], eax
pop ecx
lea eax, [ebp - 0x18]
add esi, 0xd8
lea edi, [ebx + 0xd8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00437c2c
mov ecx, dword [eax]
mov dword [ebx + 0x170], ecx
mov eax, dword [eax + 4]
mov esi, dword [ebp + 8]
and dword [ebp - 0x14], 0
mov dword [ebx + 0x174], eax
lea edi, [esi + 0x90]
push dword [ebp - 0x14]
mov ecx, edi
call fcn.0040a83b
push eax
push dword [ebp - 0x14]
lea ecx, [ebx + 0x90]
call fcn.0040a83b
mov ecx, eax
call fcn.00441cd2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 8
jl 0x442220
lea eax, [esi + 0x120]
push eax
lea ecx, [ebx + 0x120]
call fcn.00441103
lea eax, [esi + 0x148]
push eax
lea ecx, [ebx + 0x148]
call fcn.0044117b
lea eax, [esi + 0xb8]
push eax
lea ecx, [ebx + 0xb8]
call fcn.004411c3
push 6
pop ecx
add esi, 0xa0
lea edi, [ebx + 0xa0]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 8]
lea eax, [edi + 0xd0]
push eax
lea ecx, [ebx + 0xd0]
call fcn.004411f7
xor esi, esi
inc esi
lea ecx, [ebx + 0x17c]
push 0x52faf0
mov dword [ebx + 0x38], esi
mov dword [ebx + 0x2c], esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x30], esi
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], esi
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x1c], esi
call fcn.004026dd
and dword [ebx + 0x180], 0
push 0x52faf0
lea ecx, [ebx + 0x178]
mov dword [ebx + 0x184], esi
call fcn.004026dd
mov eax, dword [edi + 8]
mov dword [ebx + 8], eax
mov eax, dword [edi + 0xc]
mov dword [ebx + 0xc], eax
mov eax, dword [edi + 0x10]
add edi, 4
push edi
lea ecx, [ebx + 4]
mov dword [ebx + 0x10], eax
call fcn.004026fc
mov dword [ebx + 0x14], esi
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x10]
call fcn.00402189
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
leave
ret 4