Function at 0x4a8e00
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x160]
cmp r12, qword [r14 + 0x10]
jbe 0x4a99d4
push rbp
mov rbp, rsp
sub rsp, 0x1d8
movq qword [rsp + 0x1d0], xmm15
mov byte [rsp + 0x46], 0
call fcn.004854e0
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0x168], rcx
mov rdi, qword [0x005d95f8]
mov rsi, qword [0x005d9600]
mov r8, qword [0x005d9608]
mov rdx, qword [0x005d1b90]
mov qword [rsp + 0x128], rdx
mov r9, qword [0x005d1b98]
mov qword [rsp + 0x88], r9
nop dword [rax]
call fcn.00484520
test al, al
je 0x4a8ec2
mov rcx, qword [0x005d9618]
mov rbx, qword [rsp + 0x88]
cmp rcx, rbx
je 0x4a8ea2
xor eax, eax
nop
jmp 0x4a8ecc
mov rax, qword [0x005d9610]
mov rbx, qword [rsp + 0x128]
call fcn.00403020
mov rbx, qword [rsp + 0x88]
nop
jmp 0x4a8ecc
mov rbx, qword [rsp + 0x88]
xor eax, eax
test al, al
je 0x4a8ef2
mov rcx, qword [0x005d95e8]
test rcx, rcx
je 0x4a8ee2
mov rcx, qword [rcx]
nop
jmp 0x4a8ee4
xor ecx, ecx
test rcx, rcx
jle 0x4a8ef2
add rsp, 0x1d8
pop rbp
ret
mov rax, qword [rsp + 0x128]
call fcn.004b4240
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0x160], rcx
mov qword [rsp + 0xa8], rbx
nop dword [rax]
test rsi, rsi
je 0x4a8f34
mov r9, qword [rsp + 0x88]
xor edx, edx
jmp 0x4a8fec
mov rdx, qword [0x005d9618]
mov r9, qword [rsp + 0x88]
cmp rdx, r9
je 0x4a8f4c
xor edx, edx
jmp 0x4a8f8c
mov rax, qword [0x005d9610]
mov rbx, qword [rsp + 0x128]
mov rcx, rdx
nop
call fcn.00403020
mov rcx, qword [rsp + 0x160]
mov rbx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x70]
mov r9, qword [rsp + 0x88]
mov edx, eax
mov rax, qword [rsp + 0xb0]
test dl, dl
jne 0x4a8f94
xor edx, edx
jmp 0x4a8fec
mov rdx, qword [0x005d9620]
mov r9, qword [0x005d9628]
mov r10, qword [0x005d9630]
mov rdi, rax
mov rsi, rbx
mov r8, rcx
mov rax, rdx
mov rbx, r9
mov rcx, r10
nop dword [rax + rax]
call fcn.004845e0
mov rcx, qword [rsp + 0x160]
mov rbx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0x70]
mov r9, qword [rsp + 0x88]
mov edx, eax
mov rax, qword [rsp + 0xb0]
test dl, dl
je 0x4a9063
cmp qword [0x005d9638], rdi
jne 0x4a9063
mov rax, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x168]
movabs rdi, 0x12a05f200
nop dword [rax + rax]
call fcn.00484e00
mov qword [0x005d95f8], rax
mov qword [0x005d9600], rbx
cmp dword [0x0062c630], 0
je 0x4a9053
nop dword [rax]
call fcn.00464220
mov qword [r11], rcx
mov rax, qword [0x005d9608]
mov qword [r11 + 8], rax
mov qword [0x005d9608], rcx
add rsp, 0x1d8
pop rbp
ret
call fcn.0040d4c0
mov qword [rsp + 0x120], rax
call fcn.0040d4c0
mov qword [rsp + 0x108], rax
mov rbx, qword [rsp + 0x88]
mov rax, qword [rsp + 0x128]
call fcn.004b4160
mov qword [rsp + 0x130], rax
test rbx, rbx
je 0x4a90f8
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x100], rcx
mov rdx, qword [0x005d8f30]
mov rdi, qword [0x005d8f38]
mov rax, rbx
mov rbx, rcx
mov rcx, rdx
call fcn.0046a1e0
test al, al
jne 0x4a90f0
mov rcx, qword [0x005d8f10]
mov rdi, qword [0x005d8f18]
mov rax, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x100]
call fcn.0046a1e0
test al, al
je 0x4a9142
mov rax, qword [rsp + 0x130]
test rax, rax
je 0x4a913c
movups xmmword [rsp + 0x170], xmm15
lea rcx, [0x004a99e0]
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rax
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x1d0], rcx
mov byte [rsp + 0x46], 1
call fcn.004b3f60
jmp 0x4a92c9
xor eax, eax
nop
jmp 0x4a914b
add rsp, 0x1d8
pop rbp
ret
mov byte [rsp + 0x47], al
mov rbx, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x168]
movabs rdi, 0x12a05f200
mov rax, qword [rsp + 0xc0]
call fcn.00484e00
mov qword [0x005d95f8], rax
mov qword [0x005d9600], rbx
cmp dword [0x0062c630], 0
je 0x4a91a0
call fcn.00464220
mov qword [r11], rcx
mov rax, qword [0x005d9608]
mov qword [r11 + 8], rax
mov qword [0x005d9608], rcx
mov rax, qword [rsp + 0x88]
mov qword [0x005d9618], rax
cmp dword [0x0062c630], 0
jne 0x4a91d9
mov rax, qword [rsp + 0x128]
mov rcx, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x108]
jmp 0x4a9222
call fcn.004642a0
mov rax, qword [rsp + 0x128]
mov qword [r11], rax
mov rcx, qword [0x005d9610]
mov qword [r11 + 8], rcx
mov rcx, qword [rsp + 0x120]
mov qword [r11 + 0x10], rcx
mov rbx, qword [0x005d95e8]
mov qword [r11 + 0x18], rbx
mov rbx, qword [rsp + 0x108]
mov qword [r11 + 0x20], rbx
mov rsi, qword [0x005d95f0]
mov qword [r11 + 0x28], rsi
mov qword [0x005d9610], rax
mov qword [0x005d95e8], rcx
mov qword [0x005d95f0], rbx
mov rax, qword [rsp + 0xb0]
mov qword [0x005d9620], rax
mov rax, qword [rsp + 0xa8]
mov qword [0x005d9628], rax
cmp dword [0x0062c630], 0
jne 0x4a9268
mov rax, qword [rsp + 0x160]
jmp 0x4a9283
call fcn.00464220
mov rax, qword [rsp + 0x160]
mov qword [r11], rax
mov rcx, qword [0x005d9630]
mov qword [r11 + 8], rcx
mov qword [0x005d9630], rax
mov rax, qword [rsp + 0x70]
mov qword [0x005d9638], rax
movzx eax, byte [rsp + 0x47]
test al, 1
je 0x4a92b3
and eax, 0xfffffffe
mov byte [rsp + 0x46], al
mov rdx, qword [rsp + 0x1d0]
mov rax, qword [rdx]
call rax
add rsp, 0x1d8
pop rbp
ret
mov rax, qword [rsp + 0x130]
call fcn.004b3f60
test cl, cl
je 0x4a9390
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x118], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x23
call fcn.00403520
xorps xmm15, xmm15
mov r14, qword [0x0062c5a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jl 0x4a9325
mov rdx, qword [rsp + 0x80]
cmp rdx, rcx
jae 0x4a932d
nop dword [rax]
jmp 0x4a99c0
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x118]
mov rbx, rcx
lea rcx, [0x004f4330]
mov edi, 4
call fcn.004b43c0
cmp rbx, 2
jl 0x4a92bc
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0xf0], rax
mov rcx, qword [rax]
mov rbx, qword [rax + 8]
mov rax, rcx
call fcn.004a8da0
test rbx, rbx
je 0x4a92bc
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xf8], rax
mov ecx, 1
xor edx, edx
xor esi, esi
jmp 0x4a93bc
mov eax, 1
jmp 0x4a914b
mov rcx, qword [rsp + 0x60]
inc rcx
mov rax, qword [rsp + 0xf8]
mov rbx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x50]
cmp rdi, rcx
jle 0x4a92bc
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x110], rsi
shl rcx, 4
mov qword [rsp + 0xa0], rcx
mov rdx, qword [rsp + 0xf0]
mov rbx, qword [rcx + rdx + 8]
mov qword [rsp + 0x98], rbx
mov rsi, qword [rcx + rdx]
mov qword [rsp + 0x140], rsi
mov qword [rsp], rsi
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x2e
call fcn.00403520
xorps xmm15, xmm15
mov r14, qword [0x0062c5a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
je 0x4a947e
mov rax, qword [rsp + 0x98]
lea rdx, [rax - 1]
cmp rax, rdx
jbe 0x4a99b1
mov rbx, qword [rsp + 0x140]
movzx edx, byte [rax + rbx - 1]
cmp dl, 0x2e
je 0x4a948e
mov rcx, rax
lea rdi, [0x0051ba40]
mov esi, 1
xor eax, eax
call fcn.0044e1c0
mov rcx, rbx
mov rbx, rax
mov rax, rcx
jmp 0x4a948e
mov rbx, qword [rsp + 0x140]
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x140], rbx
mov rdx, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xa0]
mov rdi, qword [rsi + rdx]
mov rcx, qword [rsi + rdx + 8]
lea rax, [rsp + 0xc8]
mov rbx, rdi
call fcn.0044e700
xor ecx, ecx
jmp 0x4a9988
mov rcx, rbx
mov rbx, rax
xor eax, eax
call fcn.0044e540
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x138], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x2e
call fcn.00403520
xorps xmm15, xmm15
mov r14, qword [0x0062c5a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
je 0x4a9562
mov rax, qword [rsp + 0x90]
lea rdx, [rax - 1]
cmp rax, rdx
jbe 0x4a99a6
mov rbx, qword [rsp + 0x138]
movzx edx, byte [rbx + rax - 1]
cmp dl, 0x2e
je 0x4a9572
mov rcx, rax
lea rdi, [0x0051ba40]
mov esi, 1
xor eax, eax
call fcn.0044e1c0
mov rcx, rax
mov rax, rbx
mov rbx, rcx
nop
jmp 0x4a9572
mov rax, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x138]
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0x58]
lea rax, [0x004d8080]
mov rbx, qword [rsp + 0x108]
nop dword [rax + rax]
call fcn.00411640
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov rdx, qword [rax]
mov rsi, qword [rsp + 0x60]
cmp rsi, 1
mov r8, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x48]
cmove r8, rdi
mov qword [rsp + 0x78], r8
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0xe8]
cmove r9, r10
mov qword [rsp + 0x110], r9
cmp rcx, rbx
jae 0x4a965c
mov qword [rsp + 0x158], rax
mov rax, rdx
mov edi, 1
lea rsi, [0x004d27e0]
call fcn.0044a480
mov rdx, qword [rsp + 0x158]
mov qword [rdx + 0x10], rcx
cmp dword [0x0062c630], 0
nop
je 0x4a9631
call fcn.00464220
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x48]
mov r8, qword [rsp + 0x78]
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0xe8]
mov rcx, rax
mov rax, rdx
mov rdx, rcx
mov qword [rax + 8], rbx
lea r11, [rbx - 1]
shl r11, 4
mov r12, qword [rsp + 0x98]
mov qword [rdx + r11 + 8], r12
cmp dword [0x0062c630], 0
jne 0x4a968b
mov rax, r11
mov r12, qword [rsp + 0x140]
jmp 0x4a96a6
mov rax, r11
call fcn.00464220
mov r12, qword [rsp + 0x140]
mov qword [r11], r12
mov r13, qword [rdx + rax]
mov qword [r11 + 8], r13
mov qword [rdx + rax], r12
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
lea rax, [0x004d8140]
mov rbx, qword [rsp + 0x120]
mov rcx, r10
call fcn.00411260
mov rdx, qword [rax]
mov qword [rsp + 0x1a8], rdx
movups xmm0, xmmword [rax + 8]
movups xmmword [rsp + 0x1b0], xmm0
movups xmm0, xmmword [rax + 0x18]
movups xmmword [rsp + 0x1c0], xmm0
mov rdx, qword [rsp + 0x1a8]
mov qword [rsp + 0x180], rdx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rsp + 0x188], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsp + 0x198], xmm0
test bl, bl
je 0x4a9877
mov rcx, qword [rsp + 0x190]
mov rbx, qword [rsp + 0x188]
inc rbx
mov rax, qword [rsp + 0x180]
cmp rcx, rbx
jae 0x4a9768
mov edi, 1
lea rsi, [0x004d27e0]
call fcn.0044a480
lea rdx, [rbx - 1]
shl rdx, 4
mov rsi, qword [rsp + 0x58]
mov qword [rax + rdx + 8], rsi
cmp dword [0x0062c630], 0
jne 0x4a978d
mov r8, qword [rsp + 0xf8]
jmp 0x4a97a5
call fcn.00464220
mov r8, qword [rsp + 0xf8]
mov qword [r11], r8
mov r9, qword [rdx + rax]
mov qword [r11 + 8], r9
mov qword [rax + rdx], r8
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], rbx
mov qword [rsp + 0x1b8], rcx
mov rdx, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x1a0]
mov qword [rsp + 0x1c0], rdx
mov qword [rsp + 0x1c8], rsi
lea rax, [0x004d8140]
mov rbx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x48]
call fcn.00411640
test byte [rax], al
cmp dword [0x0062c630], 0
je 0x4a984f
mov qword [rsp + 0x150], rax
mov rbx, rax
lea rcx, [rsp + 0x1a8]
lea rax, [0x004debc0]
call fcn.00412300
mov rax, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x1a8]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rax + 0x18], xmm0
jmp 0x4a939a
movups xmmword [rsp + 0x1a8], xmm15
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
lea rax, [0x004d4520]
call fcn.0040ca40
mov rcx, qword [rsp + 0x58]
mov qword [rax + 8], rcx
cmp dword [0x0062c630], 0
jne 0x4a98ba
mov rdx, qword [rsp + 0xf8]
jmp 0x4a98ca
call fcn.00464200
mov rdx, qword [rsp + 0xf8]
mov qword [r11], rdx
mov qword [rax], rdx
mov qword [rsp + 0x1a8], rax
mov qword [rsp + 0x1b0], 1
mov qword [rsp + 0x1b8], 1
mov rsi, qword [rsp + 0x110]
mov qword [rsp + 0x1c0], rsi
mov r8, qword [rsp + 0x78]
mov qword [rsp + 0x1c8], r8
lea rax, [0x004d8140]
mov rbx, qword [rsp + 0x120]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x48]
call fcn.00411640
test byte [rax], al
cmp dword [0x0062c630], 0
je 0x4a995d
mov qword [rsp + 0x148], rax
mov rbx, rax
lea rcx, [rsp + 0x1a8]
lea rax, [0x004debc0]
call fcn.00412300
mov rax, qword [rsp + 0x148]
mov rcx, qword [rsp + 0x1a8]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rax + 0x18], xmm0
jmp 0x4a939a
inc rcx
cmp rbx, rcx
jle 0x4a94ce
movzx edx, byte [rax + rcx]
lea esi, [rdx - 0x41]
cmp sil, 0x19
ja 0x4a9985
add edx, 0x20
mov byte [rax + rcx], dl
jmp 0x4a9985
mov rcx, rax
mov rax, rdx
call fcn.00464580
mov rcx, rax
mov rax, rdx
call fcn.00464580
nop dword [rax]
call fcn.004645c0
nop
call fcn.00434c40
add rsp, 0x1d8
pop rbp
ret
call fcn.00462300
jmp fcn.004a8e00