Function at 0x44f970
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x9c]
cmp eax, dword [ecx + 8]
jbe 0x44fc6f
sub esp, 0x11c
mov eax, dword [esp + 0x120]
mov ecx, dword [eax + 0x38]
test ecx, ecx
jne 0x44fc58
mov ecx, dword [eax + 4]
mov edx, dword [eax]
test edx, edx
je 0x44fc42
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], edx
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
sub ecx, edx
mov dword [esp + 0x40], ecx
mov esi, dword [esp + 0x124]
sub esi, ecx
mov dword [esp + 0x3c], esi
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x38], eax
mov ebx, dword [ebx + 0x54]
mov dword [esp], ebx
call fcn.00448b50
lea eax, [0x7184c0]
mov dword [esp], eax
mov eax, dword [esp + 0x124]
mov ecx, dword [esp + 0x40]
sub eax, ecx
mov eax, 0
sbb eax, 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
call fcn.00421b70
mov eax, dword [esp + 0x124]
mov dword [esp], eax
call fcn.0044eb50
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x30], ecx
lea edi, [esp + 0x4c]
xor eax, eax
call fcn.00464f0c
mov eax, dword [esp + 0x44]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x50], ecx
mov ebx, dword [esp + 0x30]
sub ebx, ecx
mov dword [esp + 0x54], ebx
mov ebx, dword [esp + 0x38]
mov esi, ecx
sub ecx, ebx
mov dword [esp + 0x2c], ecx
mov ebx, dword [esp + 0x120]
movzx edi, byte [ebx + 0x6c]
xchg edi, eax
test al, al
xchg edi, eax
jne 0x44fac3
mov edi, dword [esp + 0x124]
mov eax, dword [esp + 0x40]
cmp edi, eax
jae 0x44faad
lea eax, [ebx + 0x6d]
mov dword [esp], eax
call fcn.00402880
movzx eax, byte [esp + 4]
test al, al
jne 0x44fc2c
mov ebx, dword [esp + 0x120]
mov dword [esp], ebx
lea eax, [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.0044f7b0
mov ecx, dword [esp + 0x2c]
jmp 0x44fb07
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], esi
call fcn.0044f800
mov eax, dword [esp + 0xc]
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x120]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
lea edx, [esp + 0x4c]
mov dword [esp + 8], edx
call fcn.0044f860
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esp + 0x30]
sub eax, ecx
mov ebx, dword [esp + 0x48]
sub ebx, ecx
mov dword [esp], eax
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
call fcn.00465630
mov eax, dword [esp + 0x120]
mov dword [esp], eax
lea ecx, [esp + 0x4c]
mov dword [esp + 4], ecx
call fcn.0044f640
mov eax, dword [esp + 0x120]
mov dword [esp], eax
lea ecx, [esp + 0x4c]
mov dword [esp + 4], ecx
call fcn.0044f680
mov eax, dword [esp + 0x120]
mov dword [esp], eax
lea ecx, [esp + 0x4c]
mov dword [esp + 4], ecx
call fcn.0044f770
mov eax, dword [esp + 0x118]
test eax, eax
je 0x44fb80
mov ecx, dword [esp + 0x54]
add eax, ecx
mov dword [esp + 0x118], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x120]
mov dword [ecx], eax
mov edx, dword [esp + 0x30]
mov dword [ecx + 4], edx
add eax, 0xba0
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x2c]
sub edx, eax
mov dword [ecx + 0x1c], edx
mov eax, dword [esp + 0x54]
add dword [ecx + 0x40], eax
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00452730
mov eax, dword [esp + 4]
mov dword [esp], 0xffffffff
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x7fffffff
lea ecx, [0x5e5bec]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], 0
call fcn.00459c20
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.0044ee60
add esp, 0x11c
ret
lea eax, [0x5de96f]
mov dword [esp], eax
mov dword [esp + 4], 0x2f
call fcn.004382f0
lea eax, [0x5d1da0]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004382f0
lea eax, [0x5dd1cd]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.004382f0
nop
call fcn.00463a70
jmp fcn.0044f970