Function at 0x48b190
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5adaf0
mov eax, dword fs:[0]
push eax
sub esp, 0x284
mov eax, dword [0x5fa040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 0x220], edi
mov dword [ebp - 0x22c], esi
mov dword [ebp - 4], 1
mov byte [edi + 0x30], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x14], 0
mov ecx, dword [edi + 0xc]
test ecx, ecx
je 0x48b207
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [edi + 0xc], 0
lea edx, [ebp - 0x214]
mov byte [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0x21c], edx
mov edi, 0x200
mov dword [ebp - 0x218], eax
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [esi]
lea edx, [ebp - 0x230]
mov ecx, SysReAllocString
cmp edi, ecx
push edx
mov edx, dword [ebp - 0x21c]
cmovb ecx, edi
push ecx
push edx
push esi
call dword [eax + 0xc]
mov ecx, eax
mov eax, dword [ebp - 0x230]
add dword [ebp - 0x218], eax
sub edi, eax
add dword [ebp - 0x21c], eax
test ecx, ecx
jne 0x48b3a0
test eax, eax
je 0x48b275
test edi, edi
jne 0x48b230
xor ecx, ecx
cmp dword [ebp - 0x218], 0x200
setne cl
jne 0x48b3a0
mov eax, dword [ebp - 0x20c]
or eax, dword [ebp - 0x208]
jne 0x48b4ee
mov ecx, dword [ebp - 0x214]
xor ecx, 0x5245
test ecx, 0xffe1ffff
jne 0x48b4ee
shr ecx, 0x10
test ecx, ecx
je 0x48b4ee
lea eax, [ecx - 1]
test ecx, eax
jne 0x48b4ee
mov eax, 0x30210
mov edx, 1
shr eax, cl
and eax, 3
mov ecx, eax
shl edx, cl
add eax, 9
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x23c], edx
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x210]
bswap eax
mov dword [ebp - 0x230], eax
mov dword [ecx + 0x20], eax
mov eax, edx
nop dword [eax]
nop word [eax + eax]
sub eax, 1
mov dword [ebp - 0x21c], eax
je 0x48b3c0
lea edx, [ebp - 0x214]
xor eax, eax
mov dword [ebp - 0x228], edx
mov edi, 0x200
mov dword [ebp - 0x218], eax
nop dword [eax + eax]
mov eax, dword [esi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 0x224]
push eax
mov eax, SysReAllocString
cmp edi, eax
cmovb eax, edi
push eax
push edx
push esi
call ecx
mov edx, dword [ebp - 0x228]
mov ecx, eax
mov eax, dword [ebp - 0x224]
add edx, eax
add dword [ebp - 0x218], eax
sub edi, eax
mov dword [ebp - 0x228], edx
test ecx, ecx
jne 0x48b3a0
test eax, eax
je 0x48b385
test edi, edi
jne 0x48b340
mov eax, dword [ebp - 0x21c]
xor ecx, ecx
cmp dword [ebp - 0x218], 0x200
setne cl
je 0x48b310
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00587d99
mov esp, ebp
pop ebp
ret 0x10
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x21c], 0
nop dword [eax]
nop dword [eax + eax]
lea eax, [ebp - 0x214]
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x218], eax
mov edi, 0x200
nop dword [eax + eax]
mov eax, dword [esi]
lea edx, [ebp - 0x234]
mov ecx, SysReAllocString
cmp edi, ecx
push edx
cmovb ecx, edi
push ecx
push dword [ebp - 0x218]
push esi
call dword [eax + 0xc]
mov edx, dword [ebp - 0x224]
mov ecx, eax
mov eax, dword [ebp - 0x234]
add edx, eax
add dword [ebp - 0x218], eax
sub edi, eax
mov dword [ebp - 0x224], edx
test ecx, ecx
jne 0x48b3a0
test eax, eax
je 0x48b44c
test edi, edi
jne 0x48b400
xor ecx, ecx
cmp edx, 0x200
setne cl
jne 0x48b3a0
cmp dword [ebp - 0x214], 0x4d50
movups xmm0, xmmword [ebp - 0x204]
mov edx, dword [ebp - 0x20c]
mov esi, dword [ebp - 0x208]
mov eax, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x210]
movups xmmword [ebp - 0x284], xmm0
bswap edx
movups xmm0, xmmword [ebp - 0x1f4]
bswap esi
bswap eax
movups xmmword [ebp - 0x274], xmm0
bswap ecx
movups xmm0, xmmword [ebp - 0x1e4]
mov dword [ebp - 0x290], edx
mov dword [ebp - 0x28c], esi
movups xmmword [ebp - 0x264], xmm0
mov dword [ebp - 0x288], eax
movups xmm0, xmmword [ebp - 0x1d4]
movups xmmword [ebp - 0x254], xmm0
jne 0x48b4ee
cmp dword [ebp - 0x21c], 0
jne 0x48b4f8
mov dword [ebp - 0x228], ecx
cmp ecx, 0x100
ja 0x48b4ee
test ecx, ecx
jne 0x48b500
mov eax, 1
jmp 0x48b3a2
cmp ecx, dword [ebp - 0x228]
jne 0x48b4ee
lea eax, [edx + esi]
cmp eax, edx
jb 0x48b4ee
mov ecx, dword [ebp - 0x230]
cmp ecx, eax
mov edx, dword [ebp - 0x220]
cmovb ecx, eax
mov dword [ebp - 0x230], ecx
mov dword [ebp - 0x244], ecx
mov ecx, dword [edx + 0x18]
cmp dword [edx + 0x14], ecx
jne 0x48b5a2
cmp ecx, 0x7fffffff
jae 0x48b70a
mov eax, ecx
mov esi, SysReAllocString
shr eax, 2
sub esi, ecx
inc eax
cmp eax, esi
cmovbe esi, eax
add esi, ecx
mov ecx, 0x4c
mov eax, esi
mul ecx
mov ecx, 0xffffffff
cmovb eax, ecx
push eax
call fcn.0058813f
mov ecx, dword [ebp - 0x220]
mov edi, eax
add esp, 4
mov eax, dword [ecx + 0x14]
test eax, eax
je 0x48b58b
imul eax, eax, 0x4c
push eax
push dword [ecx + 0x10]
push edi
call fcn.0058aed0
mov ecx, dword [ebp - 0x220]
add esp, 0xc
push dword [ecx + 0x10]
call fcn.00588148
mov edx, dword [ebp - 0x220]
add esp, 4
mov dword [edx + 0x10], edi
mov dword [edx + 0x18], esi
mov ecx, dword [edx + 0x14]
movups xmm0, xmmword [ebp - 0x290]
lea eax, [ecx + 1]
imul ecx, ecx, 0x4c
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 0x248]
add ecx, dword [edx + 0x10]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [ebp - 0x280]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x270]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [ebp - 0x260]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [ebp - 0x250]
movq qword [ecx + 0x40], xmm0
mov dword [ecx + 0x48], eax
mov eax, dword [ebp - 0x23c]
nop dword [eax + eax]
sub eax, 1
mov dword [ebp - 0x218], eax
je 0x48b68e
lea edx, [ebp - 0x214]
mov esi, 0x200
mov dword [ebp - 0x224], edx
xor edi, edi
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 0x240]
push eax
mov eax, SysReAllocString
cmp esi, eax
cmovb eax, esi
push eax
push edx
push dword [ebp - 0x22c]
call ecx
mov edx, dword [ebp - 0x224]
mov ecx, eax
mov eax, dword [ebp - 0x240]
add edx, eax
add edi, eax
mov dword [ebp - 0x224], edx
sub esi, eax
test ecx, ecx
jne 0x48b3a0
test eax, eax
je 0x48b672
test esi, esi
jne 0x48b622
mov eax, dword [ebp - 0x218]
xor ecx, ecx
cmp edi, 0x200
setne cl
je 0x48b600
jmp 0x48b3a0
mov edi, dword [ebp - 0x21c]
mov esi, dword [ebp - 0x22c]
inc edi
mov dword [ebp - 0x21c], edi
cmp edi, dword [ebp - 0x228]
jne 0x48b3e0
mov edx, dword [ebp - 0x220]
movd xmm1, dword [ebp - 0x244]
movd xmm0, dword [edx + 0x1c]
mov byte [edx + 0x30], 1
psllq xmm1, xmm0
movq qword [edx + 0x28], xmm1
test esi, esi
je 0x48b6dd
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov edx, dword [ebp - 0x220]
mov ecx, dword [edx + 0xc]
test ecx, ecx
je 0x48b6f0
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov edx, dword [ebp - 0x220]
mov dword [edx + 0xc], esi
xor eax, eax
jmp 0x48b3a2
push 0x5f79a8
lea eax, [ebp - 0x238]
mov dword [ebp - 0x238], 0x7e5
push eax
call fcn.0058acc1
int3