Function at 0x44a310
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x563527
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf0
mov eax, dword [0x59fad0]
mov dl, byte [0x59fad6]
push ebx
push ebp
push esi
mov esi, ecx
mov cx, word [0x59fad4]
push edi
mov word [esp + 0x30], cx
xor edi, edi
push 6
push 0x59fac8
lea ecx, [esp + 0x18]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x34], eax
mov byte [esp + 0x3a], dl
mov dword [esp + 0x3c], edi
call fcn.005318a0
mov al, byte [esi + 0xc]
mov dword [esp + 0x108], edi
cmp al, 0xf3
mov byte [esp + 0x2d], al
jne 0x44a4e2
cmp byte [esi + 0xd], 0x55
jne 0x44a45c
lea eax, [esp + 0x38]
push 2
lea ecx, [esp + 0x30]
add esi, 0x78
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x3c], 5
call fcn.0043cb50
cmp ax, di
jne 0x44a3d4
push edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0x118], 1
mov ecx, esp
mov dword [esp + 0x30], esp
jmp 0x44a529
lea edx, [esp + 0x9c]
push 2
lea eax, [esp + 0x30]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x3c], 4
call fcn.0043cb50
cmp ax, di
mov dword [esp + 0x18], eax
jne 0x44a564
push edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0x118], 2
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x59b918
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x118], 0
call fcn.00533b90
lea ecx, [esp + 0x10]
mov dword [esp + 0x108], 0xffffffff
call fcn.00531940
or ax, 0xffff
jmp 0x44ae02
lea ecx, [esp + 0x38]
push 2
lea edx, [esp + 0x30]
push ecx
push edx
lea ecx, [esi + 0x78]
mov byte [esp + 0x3c], 1
call fcn.0043cb50
cmp ax, di
mov dword [esp + 0x18], eax
jne 0x44a564
push edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0x118], 3
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x59b918
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x118], 0
call fcn.00533b90
lea ecx, [esp + 0x10]
mov dword [esp + 0x108], 0xffffffff
call fcn.00531940
or ax, 0xffff
jmp 0x44ae02
lea eax, [esp + 0x38]
push 2
lea ecx, [esp + 0x30]
push eax
push ecx
lea ecx, [esi + 0x78]
mov byte [esp + 0x3c], 2
call fcn.0043cb50
cmp ax, di
mov dword [esp + 0x18], eax
jne 0x44a564
push edi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x59b920
call fcn.005318a0
push ecx
mov byte [esp + 0x118], 4
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x59b918
call fcn.005318a0
mov ecx, 0x5c6628
mov byte [esp + 0x118], 0
call fcn.00533b90
lea ecx, [esp + 0x10]
mov dword [esp + 0x108], 0xffffffff
call fcn.00531940
or ax, 0xffff
jmp 0x44ae02
mov esi, dword [esp + 0x114]
mov ebp, dword [esi + 8]
mov edi, dword [esi + 4]
cmp ebp, ebp
mov ebx, ebp
je 0x44a595
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push ebx
call fcn.00531810
mov ecx, edi
call fcn.005319b0
add ebx, 4
add edi, 4
cmp ebx, ebp
jne 0x44a577
mov ebp, dword [esi + 8]
mov ebx, edi
cmp edi, ebp
je 0x44a5ac
mov ecx, ebx
call fcn.00531940
add ebx, 4
cmp ebx, ebp
jne 0x44a59e
mov eax, dword [esp + 0x24]
mov dword [esi + 8], edi
cmp byte [eax + 0xc], 0xf6
jne 0x44a7eb
movzx ax, byte [esp + 0x3c]
test ax, ax
jle 0x44a62e
lea edi, [esp + 0x3d]
movsx ebp, ax
mov al, byte [edi]
test al, al
mov byte [esp + 0x1c], al
jbe 0x44a62a
cmp al, 0x16
jae 0x44a62a
mov edx, dword [esp + 0x1c]
push 0
and edx, 0xff
push 3
lea ecx, [esp + 0x18]
mov bx, word [edx*2 + 0x574fc0]
call fcn.00531ad0
xor eax, eax
lea ecx, [esp + 0x10]
mov al, bh
push eax
push 4
call fcn.00531ad0
push ebx
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
push ecx
push 1
push eax
mov ecx, esi
call fcn.00404e90
inc edi
dec ebp
jne 0x44a5cf
lea edx, [esp + 0x4d]
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
mov al, byte [eax]
test al, al
mov byte [esp + 0x1c], al
jbe 0x44a7cc
cmp al, 0x16
jae 0x44a7cc
mov ecx, dword [esp + 0x1c]
push 1
and ecx, 0xff
push 3
mov bx, word [ecx*2 + 0x574fc0]
lea ecx, [esp + 0x18]
call fcn.00531ad0
xor edx, edx
mov ebp, 4
mov dl, bh
lea ecx, [esp + 0x10]
push edx
push ebp
call fcn.00531ad0
push ebx
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
mov edi, dword [esi + 8]
mov eax, dword [esi + 0xc]
sub eax, edi
sar eax, 2
cmp eax, 1
jae 0x44a750
mov ecx, esi
call fcn.0040a310
cmp eax, 1
jbe 0x44a6c2
mov ecx, esi
call fcn.0040a310
mov ebx, eax
jmp 0x44a6c7
mov ebx, 1
mov ecx, esi
call fcn.0040a310
add eax, ebx
mov dword [esp + 0x24], eax
jns 0x44a6d8
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00556a96
mov edx, dword [esi + 4]
add esp, 4
mov ebx, eax
mov ecx, esi
push ebx
push edi
push edx
call fcn.004052e0
mov ebp, eax
lea eax, [esp + 0x10]
push eax
push 1
push ebp
mov ecx, esi
call fcn.00405320
mov ecx, dword [esi + 8]
add ebp, 4
push ebp
push ecx
push edi
mov ecx, esi
call fcn.004052e0
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.00404c00
mov eax, dword [esi + 4]
push eax
call fcn.00556360
mov ecx, dword [esp + 0x28]
add esp, 4
lea edx, [ebx + ecx*4]
mov ecx, esi
mov dword [esi + 0xc], edx
call fcn.0040a310
lea eax, [ebx + eax*4 + 4]
mov dword [esi + 4], ebx
mov dword [esi + 8], eax
jmp 0x44a7cc
mov ecx, edi
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x44a79c
lea edx, [edi + 4]
mov ecx, esi
push edx
push edi
push edi
call fcn.004052e0
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
mov edx, eax
push ecx
sub edx, edi
mov ecx, 1
sar edx, 2
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.00405320
mov eax, dword [esi + 8]
lea edx, [esp + 0x10]
push edx
push eax
push edi
call fcn.00405390
add esp, 0xc
jmp 0x44a7c9
push edi
lea ecx, [edi - 4]
push edi
push ecx
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
push eax
add eax, 0xfffffffc
push eax
push edi
call fcn.004053d0
lea edx, [esp + 0x1c]
lea eax, [edi + 4]
push edx
push eax
push edi
call fcn.00405390
add esp, 0x18
add dword [esi + 8], ebp
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
add ecx, 3
dec eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
jne 0x44a63e
jmp 0x44adce
cmp byte [eax + 0xd], 0x55
jne 0x44abcd
lea ecx, [esp + 0x3c]
mov dword [esp + 0x14], 0
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], 2
mov edx, dword [esp + 0x28]
cmp byte [edx], 0
je 0x44a9cf
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0x28]
mov dl, byte [eax]
shr dl, cl
test dl, 1
je 0x44a9b3
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
add eax, ecx
mov bx, word [eax*2 + 0x574ff4]
test bx, bx
je 0x44a9b3
push 0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ad0
xor edx, edx
mov ebp, 4
mov dl, bh
lea ecx, [esp + 0x10]
push edx
push ebp
call fcn.00531ad0
push ebx
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
mov edi, dword [esi + 8]
mov eax, dword [esi + 0xc]
sub eax, edi
sar eax, 2
cmp eax, 1
jae 0x44a937
mov ecx, esi
call fcn.0040a310
cmp eax, 1
jbe 0x44a8a8
mov ecx, esi
call fcn.0040a310
mov ebx, eax
jmp 0x44a8ad
mov ebx, 1
mov ecx, esi
call fcn.0040a310
add eax, ebx
mov dword [esp + 0x20], eax
jns 0x44a8be
xor eax, eax
lea ecx, [eax*4]
push ecx
call fcn.00556a96
mov edx, dword [esi + 4]
add esp, 4
mov ebp, eax
mov ecx, esi
push ebp
push edi
push edx
call fcn.004052e0
mov ebx, eax
lea eax, [esp + 0x10]
push eax
push 1
push ebx
mov ecx, esi
call fcn.00405320
mov ecx, dword [esi + 8]
add ebx, 4
push ebx
push ecx
push edi
mov ecx, esi
call fcn.004052e0
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.00404c00
mov eax, dword [esi + 4]
push eax
call fcn.00556360
mov ecx, dword [esp + 0x24]
add esp, 4
lea edx, [ebp + ecx*4]
mov ecx, esi
mov dword [esi + 0xc], edx
call fcn.0040a310
lea eax, [ebp + eax*4 + 4]
mov dword [esi + 4], ebp
mov dword [esi + 8], eax
jmp 0x44a9b3
mov ecx, edi
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x44a983
lea edx, [edi + 4]
mov ecx, esi
push edx
push edi
push edi
call fcn.004052e0
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
mov edx, eax
push ecx
sub edx, edi
mov ecx, 1
sar edx, 2
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.00405320
mov eax, dword [esi + 8]
lea edx, [esp + 0x10]
push edx
push eax
push edi
call fcn.00405390
add esp, 0xc
jmp 0x44a9b0
push edi
lea ecx, [edi - 4]
push edi
push ecx
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
push eax
add eax, 0xfffffffc
push eax
push edi
call fcn.004053d0
lea edx, [esp + 0x1c]
lea eax, [edi + 4]
push edx
push eax
push edi
call fcn.00405390
add esp, 0x18
add dword [esi + 8], ebp
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
inc ecx
inc edx
cmp cx, 8
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
jl 0x44a824
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
inc edx
add ecx, 8
dec eax
mov dword [esp + 0x28], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], eax
jne 0x44a80d
lea ecx, [esp + 0xa0]
mov dword [esp + 0x24], 0xa
mov dword [esp + 0x14], ecx
mov edx, dword [esp + 0x14]
mov al, byte [edx]
cmp al, 0x10
mov byte [esp + 0x1c], al
jae 0x44abae
mov eax, dword [esp + 0x1c]
and eax, 0xff
mov ecx, eax
shr ecx, 3
and eax, 0x80000007
jns 0x44aa31
dec eax
or eax, 0xfffffff8
inc eax
lea edx, [eax + ecx*8]
mov bx, word [edx*2 + 0x574ff4]
test bx, bx
je 0x44abae
push 1
push 3
lea ecx, [esp + 0x18]
call fcn.00531ad0
xor eax, eax
mov ebp, 4
mov al, bh
lea ecx, [esp + 0x10]
push eax
push ebp
call fcn.00531ad0
push ebx
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
sub ecx, eax
mov edi, eax
sar ecx, 2
cmp ecx, 1
jae 0x44ab32
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x44aaa4
sub eax, ecx
sar eax, 2
cmp eax, 1
jbe 0x44aaa4
mov ecx, esi
call fcn.0040a310
mov ebx, eax
jmp 0x44aaa9
mov ebx, 1
mov ecx, esi
call fcn.0040a310
add eax, ebx
mov dword [esp + 0x20], eax
jns 0x44aaba
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00556a96
add esp, 4
mov ebx, eax
mov eax, dword [esi + 4]
mov ecx, esi
push ebx
push edi
push eax
call fcn.004052e0
lea ecx, [esp + 0x10]
mov ebp, eax
push ecx
push 1
push ebp
mov ecx, esi
call fcn.00405320
mov edx, dword [esi + 8]
add ebp, 4
push ebp
push edx
push edi
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.00404c00
mov eax, dword [esi + 4]
push eax
call fcn.00556360
mov edx, dword [esp + 0x24]
add esp, 4
mov ecx, esi
lea eax, [ebx + edx*4]
mov dword [esi + 0xc], eax
call fcn.0040a310
lea ecx, [ebx + eax*4 + 4]
mov dword [esi + 4], ebx
mov dword [esi + 8], ecx
jmp 0x44abae
mov edx, eax
sub edx, edi
sar edx, 2
cmp edx, 1
jae 0x44ab7e
lea ecx, [edi + 4]
push ecx
push eax
push edi
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
lea edx, [esp + 0x10]
mov ecx, eax
push edx
sub ecx, edi
mov edx, 1
sar ecx, 2
sub edx, ecx
mov ecx, esi
push edx
push eax
call fcn.00405320
mov ecx, dword [esi + 8]
lea eax, [esp + 0x10]
push eax
push ecx
push edi
call fcn.00405390
add esp, 0xc
jmp 0x44abab
push eax
push eax
add eax, 0xfffffffc
mov ecx, esi
push eax
call fcn.004052e0
mov eax, dword [esi + 8]
push eax
add eax, 0xfffffffc
push eax
push edi
call fcn.004053d0
lea edx, [esp + 0x1c]
lea eax, [edi + 4]
push edx
push eax
push edi
call fcn.00405390
add esp, 0x18
add dword [esi + 8], ebp
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
add ecx, 3
dec eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], eax
jne 0x44aa05
jmp 0x44adce
mov eax, 5
cmp word [esp + 0x18], ax
mov dword [esp + 0x28], eax
jle 0x44adce
cmp ax, 9
jg 0x44adce
movsx ecx, ax
mov dl, byte [esp + ecx + 0x37]
test dl, dl
je 0x44adbe
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], ecx
movsx eax, ax
mov dl, byte [esp + eax + 0x37]
shr dl, cl
test dl, 1
je 0x44ad9e
movsx eax, word [esp + 0x28]
mov ecx, dword [esp + 0x14]
lea edx, [ecx + eax*8 - 0x28]
mov bx, word [edx*2 + 0x575014]
test bx, bx
je 0x44ad9e
push 0
push 3
lea ecx, [esp + 0x18]
call fcn.00531ad0
xor eax, eax
mov ebp, 4
mov al, bh
lea ecx, [esp + 0x10]
push eax
push ebp
call fcn.00531ad0
push ebx
push 5
lea ecx, [esp + 0x18]
call fcn.00531ad0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
sub ecx, eax
mov edi, eax
sar ecx, 2
cmp ecx, 1
jae 0x44ad22
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x44ac93
sub eax, ecx
sar eax, 2
cmp eax, 1
jbe 0x44ac93
mov ecx, esi
call fcn.0040a310
mov ebx, eax
jmp 0x44ac98
mov ebx, 1
mov ecx, esi
call fcn.0040a310
add eax, ebx
mov dword [esp + 0x20], eax
jns 0x44aca9
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.00556a96
add esp, 4
mov ebp, eax
mov eax, dword [esi + 4]
mov ecx, esi
push ebp
push edi
push eax
call fcn.004052e0
lea ecx, [esp + 0x10]
mov ebx, eax
push ecx
push 1
push ebx
mov ecx, esi
call fcn.00405320
mov edx, dword [esi + 8]
add ebx, 4
push ebx
push edx
push edi
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.00404c00
mov eax, dword [esi + 4]
push eax
call fcn.00556360
mov edx, dword [esp + 0x24]
add esp, 4
mov ecx, esi
lea eax, [ebp + edx*4]
mov dword [esi + 0xc], eax
call fcn.0040a310
lea ecx, [ebp + eax*4 + 4]
mov dword [esi + 4], ebp
mov dword [esi + 8], ecx
jmp 0x44ad9e
mov edx, eax
sub edx, edi
sar edx, 2
cmp edx, 1
jae 0x44ad6e
lea ecx, [edi + 4]
push ecx
push eax
push edi
mov ecx, esi
call fcn.004052e0
mov eax, dword [esi + 8]
lea edx, [esp + 0x10]
mov ecx, eax
push edx
sub ecx, edi
mov edx, 1
sar ecx, 2
sub edx, ecx
mov ecx, esi
push edx
push eax
call fcn.00405320
mov ecx, dword [esi + 8]
lea eax, [esp + 0x10]
push eax
push ecx
push edi
call fcn.00405390
add esp, 0xc
jmp 0x44ad9b
push eax
push eax
add eax, 0xfffffffc
mov ecx, esi
push eax
call fcn.004052e0
mov eax, dword [esi + 8]
push eax
add eax, 0xfffffffc
push eax
push edi
call fcn.004053d0
lea edx, [esp + 0x1c]
lea eax, [edi + 4]
push edx
push eax
push edi
call fcn.00405390
add esp, 0x18
add dword [esi + 8], ebp
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
inc ecx
inc edx
cmp cx, 8
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edx
jl 0x44ac04
inc eax
cmp ax, word [esp + 0x18]
mov dword [esp + 0x28], eax
jl 0x44abe1
test esi, esi
je 0x44ade7
mov eax, dword [esi + 4]
test eax, eax
jne 0x44addd
xor esi, esi
jmp 0x44adeb
mov esi, dword [esi + 8]
sub esi, eax
sar esi, 2
jmp 0x44adeb
mov esi, dword [esp + 0x34]
lea ecx, [esp + 0x10]
mov dword [esp + 0x108], 0xffffffff
call fcn.00531940
mov ax, si
mov ecx, dword [esp + 0x100]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0xfc
ret 8