Function at 0x4e7140
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
lea r12, [rsp - 0xd0]
cmp r12, qword [r14 + 0x10]
jbe 0x4e7926
push rbp
mov rbp, rsp
sub rsp, 0x148
mov qword [rsp + 0x158], rax
lea rax, [0x006acb20]
call fcn.0040c9c0
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x158]
call fcn.004e7dc0
jmp 0x4e7195
mov rax, qword [rsp + 0x158]
call fcn.004e7dc0
test cl, cl
je 0x4e7246
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0x48], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x23
call fcn.004038e0
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
cmp rax, 0xffffffffffffffff
jne 0x4e71df
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xa0]
jmp 0x4e726a
test rax, rax
je 0x4e7188
mov qword [rsp + 0x48], rax
mov qword [rsp + 0xf0], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0x3a
call fcn.004038e0
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
cmp rax, 0xffffffffffffffff
je 0x4e72b9
nop
mov rcx, qword [rsp + 0xf0]
mov rdx, rax
mov rbx, rcx
jmp 0x4e7327
mov rax, qword [rsp + 0xd0]
add rsp, 0x148
pop rbp
ret
dec rax
mov rdx, rax
neg rdx
sar rdx, 0x3f
and edx, 1
add rcx, rdx
test rax, rax
je 0x4e728f
movzx edx, byte [rcx]
cmp dl, 0x20
je 0x4e7257
cmp dl, 9
je 0x4e7257
nop dword [rax]
cmp dl, 0xa
je 0x4e7257
cmp dl, 0xd
je 0x4e7257
jmp 0x4e728f
dec rax
test rax, rax
je 0x4e7188
movzx edx, byte [rcx + rax - 1]
nop dword [rax]
cmp dl, 0x20
je 0x4e728c
cmp dl, 9
je 0x4e728c
cmp dl, 0xa
je 0x4e728c
cmp dl, 0xd
je 0x4e728c
jmp 0x4e71ec
nop
lea rax, [0x00696f80]
call fcn.0040c9c0
mov qword [rax + 8], 0x10
lea rcx, [0x006e46e6]
mov qword [rax], rcx
lea rcx, [0x00765980]
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x18], rcx
cmp dword [0x00c4bdb0], 0
je 0x4e7304
call fcn.0045c000
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
ret
dec rax
mov rsi, rax
neg rsi
sar rsi, 0x3f
and esi, 1
add rcx, rsi
test rax, rax
je 0x4e7351
movzx esi, byte [rcx]
cmp sil, 0x20
je 0x4e7314
cmp sil, 9
je 0x4e7314
nop dword [rax + rax]
cmp sil, 0xa
je 0x4e7314
cmp sil, 0xd
je 0x4e7314
jmp 0x4e7351
dec rax
test rax, rax
je 0x4e7378
movzx esi, byte [rax + rcx - 1]
nop dword [rax + rax]
cmp sil, 0x20
je 0x4e734e
cmp sil, 9
je 0x4e734e
cmp sil, 0xa
je 0x4e734e
cmp sil, 0xd
je 0x4e734e
mov qword [rsp + 0xe8], rcx
mov qword [rsp + 0x80], rax
mov rsi, qword [rsp + 0x48]
sub rsi, rdx
dec rsi
mov rdi, rsi
neg rsi
sar rsi, 0x3f
inc rdx
and rdx, rsi
add rdx, rbx
jmp 0x4e73f1
lea rbx, [rdx + rsi*8]
lea rbx, [rbx - 0x20]
mov r8, qword [rsp + 0xf8]
mov qword [rdx + rsi*8 - 0x28], r8
movups xmm0, xmmword [rsp + 0x100]
movups xmmword [rbx], xmm0
movups xmm0, xmmword [rsp + 0x110]
movups xmmword [rbx + 0x10], xmm0
mov rax, qword [rsp + 0x80]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x140]
jmp 0x4e7764
test rdi, rdi
je 0x4e7188
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0xe0], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rdi
mov byte [rsp + 0x10], 0x20
call fcn.004038e0
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
cmp rax, 0xffffffffffffffff
je 0x4e7468
mov rdx, qword [rsp + 0x60]
sub rdx, rax
dec rdx
mov rsi, rdx
neg rdx
sar rdx, 0x3f
lea r8, [rax + 1]
and r8, rdx
mov rdx, qword [rsp + 0xe0]
add r8, rdx
jmp 0x4e78c7
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x50], rcx
test rax, rax
je 0x4e75a9
cmp byte [rdx], 0x5b
je 0x4e7492
xor r9d, r9d
xor r10d, r10d
xor r8d, r8d
jmp 0x4e75b2
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xc0], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0x5d
call fcn.004038e0
xorps xmm15, xmm15
mov r14, qword [0x00c4bbb8]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp + 0x18]
cmp rbx, 0xffffffffffffffff
je 0x4e7853
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xa8], 0
movups xmmword [rsp + 0xb0], xmm15
lea rdx, [rbx - 1]
mov qword [rsp + 0x78], rdx
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and edx, 1
mov rdi, qword [rsp + 0xc0]
lea rax, [rdi + rdx]
mov qword [rsp + 0xd8], rax
movups xmmword [rsp + 0x120], xmm15
lea rdx, [0x004e7940]
mov qword [rsp + 0x120], rdx
lea r8, [rsp + 0xa8]
mov qword [rsp + 0x128], r8
lea rcx, [rsp + 0x120]
mov rbx, rsi
call fcn.004e84c0
test rax, rax
jne 0x4e77b4
mov rax, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x58]
sub rax, rsi
dec rax
mov r8, rax
neg r8
sar r8, 0x3f
inc rsi
and rsi, r8
mov r8, qword [rsp + 0xa8]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xc0]
lea rdx, [r11 + rsi]
mov rcx, qword [rsp + 0x50]
jmp 0x4e75b2
xor r9d, r9d
xor r10d, r10d
xor r8d, r8d
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x140], rdx
mov rsi, qword [rsp + 0xd0]
cmp qword [rsi + 0x28], 0
jne 0x4e762e
mov qword [rsp + 0x68], r9
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0x70], r10
call fcn.0040d440
cmp dword [0x00c4bdb0], 0
jne 0x4e75f8
mov rdx, qword [rsp + 0xd0]
jmp 0x4e7610
call fcn.0045c000
mov qword [r11], rax
mov rdx, qword [rsp + 0xd0]
mov rsi, qword [rdx + 0x28]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x28], rax
mov rcx, qword [rsp + 0x50]
mov rsi, rdx
mov r8, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x68]
mov r10, qword [rsp + 0x70]
mov rbx, qword [rsi + 0x28]
movups xmmword [rsp + 0xf8], xmm15
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 0xf8], rdx
mov qword [rsp + 0x100], rcx
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x110], r9
mov qword [rsp + 0x118], r10
lea rax, [0x0068c720]
mov rcx, qword [rsp + 0xe8]
mov rdi, qword [rsp + 0x80]
call fcn.00411d20
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov rdx, qword [rax]
cmp rcx, rbx
jae 0x4e76fb
mov qword [rsp + 0x138], rax
mov rax, rdx
mov edi, 1
lea rsi, [0x006a9b40]
call fcn.00444d60
mov rdx, qword [rsp + 0x138]
mov qword [rdx + 0x10], rcx
cmp dword [0x00c4bdb0], 0
je 0x4e76ef
nop dword [rax]
call fcn.0045c000
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rcx, rax
mov rax, rdx
mov rdx, rcx
mov qword [rax + 8], rbx
lea rsi, [rbx + rbx*4]
lea rbx, [rdx + rsi*8]
lea rbx, [rbx - 0x28]
cmp dword [0x00c4bdb0], 0
je 0x4e73a8
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x88], rsi
lea rax, [0x006a9b40]
lea rcx, [rsp + 0xf8]
call fcn.004129a0
mov rdx, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x88]
jmp 0x4e73a8
dec rdi
mov rbx, rdi
neg rbx
sar rbx, 0x3f
and ebx, 1
add rdx, rbx
test rdi, rdi
je 0x4e778a
movzx ebx, byte [rdx]
cmp bl, 0x20
je 0x4e7751
cmp bl, 9
je 0x4e7751
cmp bl, 0xa
je 0x4e7751
nop dword [rax + rax]
cmp bl, 0xd
je 0x4e7751
jmp 0x4e778a
dec rdi
test rdi, rdi
je 0x4e7188
movzx ebx, byte [rdx + rdi - 1]
cmp bl, 0x20
je 0x4e7787
nop dword [rax]
cmp bl, 9
je 0x4e7787
cmp bl, 0xa
je 0x4e7787
cmp bl, 0xd
je 0x4e7787
jmp 0x4e73f6
xor eax, eax
lea rbx, [0x006e5e89]
mov ecx, 0x12
mov rdi, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0x78]
call fcn.00447b80
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x98], rax
lea rax, [0x00696f80]
call fcn.0040c9c0
mov rdx, qword [rsp + 0x40]
mov qword [rax + 8], rdx
cmp dword [0x00c4bdb0], 0
jne 0x4e7811
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xd0]
jmp 0x4e7835
call fcn.0045c020
mov rcx, qword [rsp + 0x98]
mov qword [r11], rcx
mov qword [r11 + 8], rax
mov rdx, qword [rsp + 0xd0]
mov rbx, qword [rdx + 0x20]
mov qword [r11 + 0x10], rbx
mov qword [rax], rcx
lea rcx, [0x00765980]
mov qword [rdx + 0x18], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
ret
nop
lea rax, [0x00696f80]
nop dword [rax + rax]
call fcn.0040c9c0
mov qword [rax + 8], 0x1a
lea rcx, [0x006eaaa2]
mov qword [rax], rcx
lea rcx, [0x00765980]
mov rdx, qword [rsp + 0xd0]
mov qword [rdx + 0x18], rcx
cmp dword [0x00c4bdb0], 0
je 0x4e78a3
call fcn.0045c000
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
ret
dec rsi
mov r9, rsi
neg r9
sar r9, 0x3f
and r9d, 1
add r8, r9
test rsi, rsi
je 0x4e78f1
movzx r9d, byte [r8]
cmp r9b, 0x20
je 0x4e78b3
cmp r9b, 9
je 0x4e78b3
nop dword [rax]
cmp r9b, 0xa
je 0x4e78b3
cmp r9b, 0xd
je 0x4e78b3
jmp 0x4e78f1
dec rsi
test rsi, rsi
je 0x4e7918
movzx r9d, byte [rsi + r8 - 1]
nop dword [rax]
cmp r9b, 0x20
je 0x4e78ee
cmp r9b, 9
je 0x4e78ee
cmp r9b, 0xa
je 0x4e78ee
cmp r9b, 0xd
je 0x4e78ee
mov rcx, rax
mov rdx, r8
mov rax, rsi
jmp 0x4e7471
mov qword [rsp + 8], rax
call fcn.0045a0c0
mov rax, qword [rsp + 8]
jmp fcn.004e7140