Function at 0x441b40
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48e159
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x4b571c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x414], esi
mov dword [ebp - 0x4a4], esi
xor ecx, ecx
mov dword [esi + 4], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x48], 0
mov dword [esi + 0x5c], 0
mov dword [esi + 0x60], 7
mov word [esi + 0x4c], cx
mov dword [ebp - 0x464], ecx
xor eax, eax
mov dword [ebp - 0x470], 0x60b0f04
mov dword [ebp - 0x46c], str.PSU_Power
mov dword [ebp - 0x468], 0x20000000
movups xmm0, xmmword [ebp - 0x470]
mov dword [ebp - 0x460], ecx
mov dword [ebp - 0x454], ecx
movups xmmword [esi + 8], xmm0
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x458], 0x2dc6c0
movups xmm0, xmmword [ebp - 0x460]
mov dword [ebp - 0x450], ecx
mov dword [ebp - 0x44c], 0x2dc6c0
movups xmmword [esi + 0x18], xmm0
mov dword [ebp - 4], ecx
movq xmm0, qword [ebp - 0x450]
movq qword [esi + 0x28], xmm0
mov word [esi + 0x30], ax
mov byte [esi + 0x32], al
mov eax, dword [esi + 0x20]
imul eax, dword [esi + 0x1c]
mov dword [esi + 0x64], ecx
mov dword [esi + 0x68], ecx
mov ecx, dword [esi + 0x18]
push 0
push dword [esi + 0xc]
add eax, ecx
mov dword [esi], vtable.BasicProbeItemPSUPower_wchar_t_.0
mov dword [esi + 0x38], eax
mov eax, dword [esi + 0x14]
mov dword [esi + 0x40], eax
lea eax, [ebp - 0x4a0]
push eax
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x44], 1
call fcn.004455a0
mov edi, eax
lea ecx, [esi + 0x4c]
add esp, 0xc
cmp ecx, edi
je 0x441c98
call fcn.004036f0
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [esi + 0x4c], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x5c], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov edx, dword [ebp - 0x48c]
cmp edx, 8
jb 0x441cd8
mov ecx, dword [ebp - 0x4a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x441cce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44248b
push edx
push ecx
call fcn.00451338
add esp, 8
xorps xmm0, xmm0
lea ecx, [ebp - 0x468]
movups xmmword [ebp - 0x468], xmm0
movups xmmword [ebp - 0x458], xmm0
call fcn.004057c0
lea eax, [ebp - 0x4a0]
mov byte [ebp - 4], 1
push eax
call fcn.0042e3d0
push eax
lea eax, [ebp - 0x4bc]
mov byte [ebp - 4], 2
push eax
call fcn.00425510
add esp, 0xc
push 4
push str..ini
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00404b70
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x488], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x478], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov edx, dword [ebp - 0x4a8]
mov byte [ebp - 4], 5
cmp edx, 0x10
jb 0x441da4
mov ecx, dword [ebp - 0x4bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x441d9a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442490
push edx
push ecx
call fcn.00451338
add esp, 8
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0x4a8], 0xf
mov byte [ebp - 0x4bc], 0
mov edx, dword [ebp - 0x48c]
mov byte [ebp - 4], 6
cmp edx, 0x10
jb 0x441dfd
mov ecx, dword [ebp - 0x4a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x441df3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x442495
push edx
push ecx
call fcn.00451338
add esp, 8
cmp dword [ebp - 0x474], 0x10
lea eax, [ebp - 0x488]
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x490], 0
cmovae eax, dword [ebp - 0x488]
push eax
mov dword [ebp - 0x48c], 0xf
mov byte [ebp - 0x4a0], 0
call fcn.00405be0
push 0x200
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00468a50
mov edi, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [ebp - 0x410]
add esp, 0xc
push 0x100
push eax
push 0xa
push str.Threshold
push 0
push 0
call edi
xor eax, eax
mov dword [ebp - 0x41c], 0
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x418], 7
mov word [ebp - 0x42c], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x441e93
sub ecx, edx
lea eax, [ebp - 0x410]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x42c]
call fcn.00404660
push 0
push dword [esi + 8]
lea eax, [ebp - 0x4a0]
mov byte [ebp - 4], 7
push eax
call fcn.00446b50
add esp, 0xc
cmp dword [ebp - 0x418], 8
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 8
cmovae ecx, dword [ebp - 0x42c]
cmp dword [eax + 0x14], 8
jb 0x441eed
mov eax, dword [eax]
lea edx, [ebp - 0x414]
push edx
push dword [esi + 0x68]
push ecx
push eax
lea ecx, [ebp - 0x468]
call fcn.004058e0
mov edx, dword [ebp - 0x48c]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x441f48
mov ecx, dword [ebp - 0x4a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x441f3e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44249a
push edx
push ecx
call fcn.00451338
add esp, 8
mov eax, dword [ebp - 0x414]
push 0x200
mov dword [esi + 0x68], eax
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.00468a50
add esp, 0xc
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0xe
push str.ThresholdHigh
push 0
push 0
call edi
xor eax, eax
mov dword [ebp - 0x490], 0
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x48c], 7
mov word [ebp - 0x4a0], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x441fa6
sub ecx, edx
lea eax, [ebp - 0x210]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00404660
lea ecx, [ebp - 0x42c]
call fcn.004036f0
movups xmm0, xmmword [ebp - 0x4a0]
push 0
push dword [esi + 8]
movups xmmword [ebp - 0x42c], xmm0
lea eax, [ebp - 0x4a0]
movq xmm0, qword [ebp - 0x490]
push eax
movq qword [ebp - 0x41c], xmm0
call fcn.00446b50
add esp, 0xc
cmp dword [ebp - 0x418], 8
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 9
cmovae ecx, dword [ebp - 0x42c]
cmp dword [eax + 0x14], 8
jb 0x442025
mov eax, dword [eax]
lea edx, [ebp - 0x414]
push edx
push dword [esi + 0x64]
push ecx
push eax
lea ecx, [ebp - 0x468]
call fcn.004058e0
mov edx, dword [ebp - 0x48c]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x442080
mov ecx, dword [ebp - 0x4a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x442076
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44249f
push edx
push ecx
call fcn.00451338
add esp, 8
mov eax, dword [ebp - 0x414]
push 0x200
mov dword [esi + 0x64], eax
lea eax, [ebp - 0x210]
push 0
push eax
call fcn.00468a50
add esp, 0xc
lea eax, [ebp - 0x210]
push 0x100
push eax
push 0xd
push str.IsMonitoring
push 0
push 0
call edi
xor eax, eax
mov dword [ebp - 0x490], 0
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x48c], 7
mov word [ebp - 0x4a0], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4420e0
sub ecx, edx
lea eax, [ebp - 0x210]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00404660
lea ecx, [ebp - 0x42c]
call fcn.004036f0
movups xmm0, xmmword [ebp - 0x4a0]
push 0
push dword [esi + 8]
movups xmmword [ebp - 0x42c], xmm0
lea eax, [ebp - 0x4a0]
movq xmm0, qword [ebp - 0x490]
push eax
movq qword [ebp - 0x41c], xmm0
call fcn.00446b50
add esp, 0xc
cmp dword [ebp - 0x418], 8
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xa
cmovae ecx, dword [ebp - 0x42c]
cmp dword [eax + 0x14], 8
jb 0x44215f
mov eax, dword [eax]
lea edx, [ebp - 0x414]
push edx
push dword [esi + 0x44]
push ecx
push eax
lea ecx, [ebp - 0x468]
call fcn.004058e0
mov edx, dword [ebp - 0x48c]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x4421ba
mov ecx, dword [ebp - 0x4a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4421b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424a4
push edx
push ecx
call fcn.00451338
add esp, 8
mov eax, dword [ebp - 0x414]
mov dword [esi + 0x44], eax
xor eax, eax
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 7
mov word [ebp - 0x444], ax
push 0x200
push eax
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0xb
push eax
call fcn.00468a50
add esp, 0xc
lea eax, [ebp - 0x210]
push 0x100
push eax
push 5
push str.Name
push 0
push 0
call edi
xor eax, eax
mov dword [ebp - 0x490], 0
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x48c], 7
mov word [ebp - 0x4a0], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x442240
sub ecx, edx
lea eax, [ebp - 0x210]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00404660
lea ecx, [ebp - 0x42c]
call fcn.004036f0
movups xmm0, xmmword [ebp - 0x4a0]
push 0
push dword [esi + 8]
movups xmmword [ebp - 0x42c], xmm0
lea eax, [ebp - 0x4a0]
movq xmm0, qword [ebp - 0x490]
push eax
movq qword [ebp - 0x41c], xmm0
call fcn.00446b50
add esp, 0xc
cmp dword [esi + 0x60], 8
lea edx, [esi + 0x4c]
mov byte [ebp - 4], 0xc
jb 0x4422af
mov edx, dword [esi + 0x4c]
cmp dword [ebp - 0x418], 8
lea ecx, [ebp - 0x42c]
cmovae ecx, dword [ebp - 0x42c]
cmp dword [eax + 0x14], 8
jb 0x4422cb
mov eax, dword [eax]
lea edi, [ebp - 0x444]
push edi
push edx
push ecx
push eax
lea ecx, [ebp - 0x468]
call fcn.004059e0
mov edx, dword [ebp - 0x48c]
lea edi, [esi + 0x4c]
mov byte [ebp - 4], 0xb
cmp edx, 8
jb 0x442327
mov ecx, dword [ebp - 0x4a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44231d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424a9
push edx
push ecx
call fcn.00451338
add esp, 8
lea eax, [ebp - 0x444]
cmp edi, eax
je 0x44234d
cmp dword [ebp - 0x430], 8
mov ecx, edi
push dword [ebp - 0x434]
cmovae eax, dword [ebp - 0x444]
push eax
call fcn.00404660
lea ecx, [ebp - 0x468]
call fcn.00405890
mov edx, dword [ebp - 0x430]
cmp edx, 8
jb 0x442398
mov ecx, dword [ebp - 0x444]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44238e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424ae
push edx
push ecx
call fcn.00451338
add esp, 8
mov edx, dword [ebp - 0x418]
xor eax, eax
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x430], 7
mov word [ebp - 0x444], ax
cmp edx, 8
jb 0x4423f5
mov ecx, dword [ebp - 0x42c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4423eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424b3
push edx
push ecx
call fcn.00451338
add esp, 8
mov edx, dword [ebp - 0x474]
xor eax, eax
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 7
mov word [ebp - 0x42c], ax
cmp edx, 0x10
jb 0x442448
mov ecx, dword [ebp - 0x488]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44243e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4424b8
push edx
push ecx
call fcn.00451338
add esp, 8
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0xf
mov byte [ebp - 0x488], 0
call fcn.004057f0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004512f7
mov esp, ebp
pop ebp
ret
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
call fcn.0046c98c
int3