Function at 0x44c220
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x47a720
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push ebp
push esi
mov esi, ecx
mov ebx, dword [esp + 0x6c]
push edi
mov eax, dword [esi + 0x5c]
mov eax, dword [eax - 8]
test eax, eax
je 0x44c3b6
cmp ebx, 0xfffffffe
jne 0x44c3b6
lea edi, [esi + 0x60]
push 0xf
mov ecx, edi
mov edx, dword [ecx]
mov dword [esp + 0x30], edx
mov eax, dword [ecx + 4]
mov edx, dword [ecx + 8]
mov dword [esp + 0x38], edx
mov edx, dword [esi + 0x4c]
mov ecx, dword [ecx + 0xc]
lea eax, [eax + edx*2]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x34], eax
call fcn.005d7e88
push 0xffffffffffffff8b
pop esp
and al, 0x6c
lea ecx, [esp + 0x2c]
push eax
push ecx
mov ecx, ebx
call fcn.00475261
mov ebp, dword [edi + 8]
mov eax, dword [edi]
mov edx, dword [esi + 0x4c]
push 0x10
sub ebp, eax
mov dword [esp + 0x70], edx
call fcn.005d7e88
mov dword [0x5064568b], eax
mov eax, dword [esp + 0x70]
push 1
lea ecx, [eax*4]
sub ebp, ecx
mov ecx, dword [edi]
push ebp
push edx
lea edx, [ecx + eax*2]
mov ecx, ebx
push edx
call fcn.0047528b
mov ebp, dword [edi + 8]
mov eax, dword [edi]
sub ebp, eax
mov eax, dword [esi + 0x4c]
push 0x14
mov dword [esp + 0x70], eax
call fcn.005d7e88
mov bh, 0x8b
push esi
push eax
mov eax, dword [esp + 0x70]
push 1
lea ecx, [eax*4]
sub ebp, ecx
mov ecx, dword [edi]
inc edx
push ebp
push edx
lea edx, [ecx + eax*2]
push edx
mov ecx, ebx
call fcn.0047528b
push 0xffffffffffffffff
lea eax, [esp + 0x30]
push 0xffffffffffffffff
push eax
call fcn.005c9079
dec byte [ebx - 0x140abba]
invalid
mov eax, dword [esi + 0x58]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x44c54f
cmp ebx, 0xfffffffd
jne 0x44c54f
call fcn.005e83f6
retf
lea ecx, [esp + 0x10]
lea eax, [esp + 0x3c]
push ecx
push ebx
mov ecx, esi
mov dword [esp + 0x18], eax
call fcn.0044bc20
test eax, eax
je 0x44c738
mov edi, dword [esp + 0x6c]
push 0x26
mov dword [esp + 0x74], 0
mov edx, dword [edi + 8]
push edx
call fcn.005d7bb5
movsd dword es:[edi], dword [esi]
test ah, 1
je 0x44c5a7
lea eax, [esi + 0x98]
push 0
push eax
mov ecx, edi
call fcn.0047283b
mov ecx, dword [edi + 4]
mov dword [esp + 0x70], eax
push ecx
call fcn.005da62e
push esi
cmp dword [esi + 0x54], ebx
jne 0x44c5c3
cmp dword [esi + 0x50], ebx
je 0x44c5c3
call fcn.005e8654
push 0x6a
adc al, 0xff
aad 0x8d
push esp
and al, 0x3c
push eax
push edx
jmp 0x44c5d3
call fcn.005e878b
push ss
push 0xf
call ebp
push eax
lea eax, [esp + 0x40]
push eax
mov ecx, edi
call fcn.00475261
cmp dword [esi + 0x50], ebx
jne 0x44c5ee
mov edx, dword [edi + 4]
push 0xf
lea ecx, [esp + 0x40]
push 4
push ecx
push edx
jmp 0x44c600
cmp dword [esi + 0x54], ebx
jne 0x44c606
mov ecx, dword [edi + 4]
push 0xf
lea eax, [esp + 0x40]
push 2
push eax
push ecx
call fcn.005e245a
jg 0x44c592
mov eax, dword [ebx*8 + 0x4c4fcc]
xor ecx, ecx
mov edx, eax
mov cl, ah
shr edx, 0x10
and edx, 0xff
and ecx, 0xff
or dh, 2
and eax, 0xff
shl edx, 8
or edx, ecx
lea ecx, [esp + 0x1c]
shl edx, 8
or edx, eax
push edx
call fcn.00473219
mov dword [esp + 0x64], 2
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x4af1c0
push 0x10
mov byte [esp + 0x68], 3
call ebp
push eax
push 1
push 0
call fcn.005c960b
push ebp
push eax
lea ecx, [esp + 0x18]
call fcn.0047315c
lea edx, [esp + 0x1c]
mov ecx, edi
push edx
call fcn.004727b0
mov ebx, eax
lea eax, [esp + 0x14]
push eax
mov ecx, edi
call fcn.004727b0
mov esi, dword [esi + 0x4c]
mov ebp, eax
lea edx, [esp + 0x3c]
lea eax, [esi + 1]
mov ecx, eax
neg ecx
neg eax
push ecx
push eax
push edx
call fcn.005c9079
push ebx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push eax
mov eax, dword [esp + 0x40]
push ecx
mov ecx, dword [edi + 4]
push edx
push eax
push ecx
call fcn.005c9e02
jmp 0x44c71b
add al, 0xdd
int3
and al, 0x64
add al, 0xe8
nop
push 2
add byte [ecx - 0x38e3db8c], cl
inc esp
and al, 0x64
add eax, 0x8d000000
dec esp
and al, 0x1c
call fcn.004731b3
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x58
ret 8