Function at 0x4d6ec0
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
lea r12, [rsp - 0xd0]
cmp r12, qword [r14 + 0x10]
jbe 0x4d776b
push rbp
mov rbp, rsp
sub rsp, 0x148
mov qword [rsp + 0xf0], rax
lea rax, [0x0054f140]
call fcn.0040d040
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xf0]
call fcn.004d7c20
jmp 0x4d6f15
mov rax, qword [rsp + 0xf0]
call fcn.004d7c20
test cl, cl
je 0x4d6ffe
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xc8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x23
nop dword [rax + rax]
call fcn.00403840
xorps xmm15, xmm15
mov r14, qword [0x00753e00]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
nop dword [rax]
cmp rcx, 0xffffffffffffffff
je 0x4d6f78
mov rdx, qword [rsp + 0x80]
cmp rdx, rcx
jae 0x4d6f80
jmp 0x4d7765
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0xc8]
jmp 0x4d7022
test rcx, rcx
je 0x4d6f08
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0xc8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0x3a
call fcn.00403840
xorps xmm15, xmm15
mov r14, qword [0x00753e00]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x4d706f
mov rdx, qword [rsp + 0x80]
cmp rdx, rcx
jb 0x4d7760
mov rax, qword [rsp + 0xc8]
mov rbx, rcx
mov rsi, rax
jmp 0x4d70e0
mov rax, qword [rsp + 0xb8]
add rsp, 0x148
pop rbp
ret
dec rcx
mov rdx, rcx
neg rdx
sar rdx, 0x3f
and edx, 1
add rax, rdx
test rcx, rcx
je 0x4d7045
movzx edx, byte [rax]
cmp dl, 0x20
je 0x4d700f
cmp dl, 9
je 0x4d700f
cmp dl, 0xa
je 0x4d700f
cmp dl, 0xd
je 0x4d700f
nop
jmp 0x4d7045
dec rcx
test rcx, rcx
je 0x4d6f08
movzx edx, byte [rax + rcx - 1]
cmp dl, 0x20
je 0x4d7042
cmp dl, 9
je 0x4d7042
nop dword [rax]
cmp dl, 0xa
je 0x4d7042
cmp dl, 0xd
je 0x4d7042
jmp 0x4d6f8d
nop
lea rax, [0x00544280]
call fcn.0040d040
mov qword [rax + 8], 0x10
lea rcx, [0x00568863]
mov qword [rax], rcx
lea rcx, [0x005b63c0]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00753e90], 0
je 0x4d70ba
call fcn.00464900
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
ret
dec rcx
mov rdi, rcx
neg rdi
sar rdi, 0x3f
and edi, 1
add rax, rdi
nop dword [rax]
test rcx, rcx
je 0x4d710b
movzx edi, byte [rax]
cmp dil, 0x20
je 0x4d70ca
cmp dil, 9
je 0x4d70ca
cmp dil, 0xa
je 0x4d70ca
nop word [rax + rax]
cmp dil, 0xd
je 0x4d70ca
jmp 0x4d710b
dec rcx
test rcx, rcx
je 0x4d7132
movzx edi, byte [rax + rcx - 1]
cmp dil, 0x20
je 0x4d7108
nop dword [rax + rax]
cmp dil, 9
je 0x4d7108
cmp dil, 0xa
je 0x4d7108
cmp dil, 0xd
je 0x4d7108
lea rdi, [rbx + 1]
cmp rdx, rdi
jb 0x4d7752
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0xa0], rax
sub rdx, rbx
dec rdx
mov rbx, rdx
neg rdx
sar rdx, 0x3f
and rdi, rdx
lea rdx, [rsi + rdi]
jmp 0x4d71ab
lea rdi, [rdx + rsi*8]
lea rdi, [rdi - 0x20]
mov r8, qword [rsp + 0x120]
mov qword [rdx + rsi*8 - 0x28], r8
movups xmm0, xmmword [rsp + 0x128]
movups xmmword [rdi], xmm0
movups xmm0, xmmword [rsp + 0x138]
movups xmmword [rdi + 0x10], xmm0
mov rax, qword [rsp + 0xa0]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xe0]
jmp 0x4d7560
test rbx, rbx
je 0x4d6f08
mov qword [rsp + 0xa8], rdx
mov qword [rsp + 0x60], rbx
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x20
call fcn.00403840
xorps xmm15, xmm15
mov r14, qword [0x00753e00]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x4d723a
mov rdx, qword [rsp + 0x60]
nop dword [rax + rax]
cmp rdx, rcx
jb 0x4d774d
lea rax, [rcx + 1]
cmp rdx, rax
jb 0x4d7745
sub rdx, rcx
dec rdx
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and rax, rdx
mov rdx, qword [rsp + 0xa8]
lea r8, [rdx + rax]
jmp 0x4d76ee
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor edx, edx
mov qword [rsp + 0x48], rcx
test rax, rax
je 0x4d73a7
cmp byte [rdx], 0x5b
je 0x4d7265
xor r8d, r8d
xor r9d, r9d
xor esi, esi
nop
jmp 0x4d73af
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xe8], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0x5d
call fcn.00403840
xorps xmm15, xmm15
mov r14, qword [0x00753e00]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
nop
cmp rcx, 0xffffffffffffffff
je 0x4d7661
mov rdx, qword [rsp + 0x90]
cmp rdx, rcx
jb 0x4d76d5
nop dword [rax + rax]
cmp rcx, 1
jb 0x4d76c9
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x108], 0
movups xmmword [rsp + 0x110], xmm15
lea rbx, [rcx - 1]
mov qword [rsp + 0x50], rbx
mov rdx, rbx
neg rdx
sar rdx, 0x3f
and edx, 1
mov rsi, qword [rsp + 0xe8]
lea rax, [rsi + rdx]
mov qword [rsp + 0x98], rax
movups xmmword [rsp + 0xf8], xmm15
lea rdx, [0x004d7780]
mov qword [rsp + 0xf8], rdx
lea rdi, [rsp + 0x108]
mov qword [rsp + 0x100], rdi
lea rcx, [rsp + 0xf8]
nop
call fcn.004d83e0
test rax, rax
jne 0x4d75b7
mov rax, qword [rsp + 0x40]
lea rdx, [rax + 1]
mov rcx, qword [rsp + 0x90]
nop
cmp rcx, rdx
jb 0x4d76c1
sub rcx, rax
lea rax, [rcx - 1]
mov rsi, rax
neg rsi
sar rsi, 0x3f
and rdx, rsi
mov rsi, qword [rsp + 0x108]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x118]
mov r10, qword [rsp + 0xe8]
add rdx, r10
mov rcx, qword [rsp + 0x48]
jmp 0x4d73af
xor r8d, r8d
xor r9d, r9d
xor esi, esi
mov qword [rsp + 0x60], rax
mov qword [rsp + 0xe0], rdx
mov r10, qword [rsp + 0xb8]
cmp qword [r10 + 0x28], 0
jne 0x4d742e
mov qword [rsp + 0x70], r8
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0x78], r9
nop dword [rax]
call fcn.0040dac0
cmp dword [0x00753e90], 0
jne 0x4d73f8
mov rdx, qword [rsp + 0xb8]
jmp 0x4d7410
call fcn.00464900
mov qword [r11], rax
mov rdx, qword [rsp + 0xb8]
mov rsi, qword [rdx + 0x28]
mov qword [r11 + 8], rsi
mov qword [rdx + 0x28], rax
mov rcx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x78]
mov r10, rdx
movups xmmword [rsp + 0x120], xmm15
movups xmmword [rsp + 0x128], xmm15
movups xmmword [rsp + 0x138], xmm15
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x120], rdx
mov qword [rsp + 0x128], rcx
mov qword [rsp + 0x130], rsi
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x140], r9
mov rbx, qword [r10 + 0x28]
lea rax, [0x0053fbc0]
mov rcx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x58]
call fcn.00411f80
mov rcx, qword [rax + 0x10]
mov rbx, qword [rax + 8]
inc rbx
mov rdx, qword [rax]
cmp rcx, rbx
jae 0x4d74f5
mov qword [rsp + 0xd8], rax
mov rax, rdx
mov edi, 1
lea rsi, [0x0054ce80]
call fcn.0044ac20
mov rdx, qword [rsp + 0xd8]
mov qword [rdx + 0x10], rcx
cmp dword [0x00753e90], 0
je 0x4d74e9
call fcn.00464900
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rcx, rax
mov rax, rdx
mov rdx, rcx
mov qword [rax + 8], rbx
lea rsi, [rbx + rbx*4]
lea rbx, [rdx + rsi*8]
lea rbx, [rbx - 0x28]
cmp dword [0x00753e90], 0
je 0x4d7165
mov qword [rsp + 0x88], rsi
mov qword [rsp + 0xd0], rdx
lea rax, [0x0054ce80]
lea rcx, [rsp + 0x120]
call fcn.00412c40
mov rdx, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0x88]
jmp 0x4d7165
dec rbx
mov rsi, rbx
neg rsi
sar rsi, 0x3f
and esi, 1
add rdx, rsi
nop
test rbx, rbx
je 0x4d758b
movzx esi, byte [rdx]
cmp sil, 0x20
je 0x4d754b
cmp sil, 9
je 0x4d754b
cmp sil, 0xa
je 0x4d754b
nop word [rax + rax]
cmp sil, 0xd
je 0x4d754b
jmp 0x4d758b
dec rbx
test rbx, rbx
je 0x4d6f08
movzx esi, byte [rbx + rdx - 1]
cmp sil, 0x20
je 0x4d7588
nop
cmp sil, 9
je 0x4d7588
cmp sil, 0xa
je 0x4d7588
cmp sil, 0xd
je 0x4d7588
jmp 0x4d71b0
xor eax, eax
lea rbx, [0x005694ab]
mov ecx, 0x12
mov rdi, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x50]
call fcn.0044e960
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0xb0], rax
lea rax, [0x00544280]
call fcn.0040d040
mov rdx, qword [rsp + 0x68]
mov qword [rax + 8], rdx
cmp dword [0x00753e90], 0
jne 0x4d760c
mov rcx, qword [rsp + 0xb0]
jmp 0x4d761c
call fcn.004648e0
mov rcx, qword [rsp + 0xb0]
mov qword [r11], rcx
mov qword [rax], rcx
lea rcx, [0x005b63c0]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00753e90], 0
je 0x4d7650
nop dword [rax + rax]
call fcn.00464900
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
nop
ret
nop
lea rax, [0x00544280]
call fcn.0040d040
mov qword [rax + 8], 0x1a
lea rcx, [0x0056cf8f]
mov qword [rax], rcx
lea rcx, [0x005b63c0]
mov rdx, qword [rsp + 0xb8]
mov qword [rdx + 0x18], rcx
cmp dword [0x00753e90], 0
je 0x4d76b0
nop dword [rax]
call fcn.00464900
mov qword [r11], rax
mov rcx, qword [rdx + 0x20]
mov qword [r11 + 8], rcx
mov qword [rdx + 0x20], rax
mov rax, rdx
add rsp, 0x148
pop rbp
nop
ret
mov rax, rdx
call fcn.00464d60
mov eax, 1
xor ecx, ecx
call fcn.00464d60
call fcn.00464ce0
dec rsi
mov r9, rsi
neg r9
sar r9, 0x3f
and r9d, 1
add r8, r9
test rsi, rsi
je 0x4d7717
movzx r9d, byte [r8]
cmp r9b, 0x20
je 0x4d76da
nop dword [rax]
cmp r9b, 9
je 0x4d76da
cmp r9b, 0xa
je 0x4d76da
cmp r9b, 0xd
je 0x4d76da
jmp 0x4d7717
dec rsi
test rsi, rsi
je 0x4d773a
movzx r9d, byte [r8 + rsi - 1]
cmp r9b, 0x20
je 0x4d7714
cmp r9b, 9
je 0x4d7714
cmp r9b, 0xa
je 0x4d7714
cmp r9b, 0xd
je 0x4d7714
mov rax, rsi
mov rdx, r8
jmp 0x4d7243
mov rcx, rdx
call fcn.00464d60
call fcn.00464ce0
mov rax, rdi
mov rcx, rdx
call fcn.00464d60
nop dword [rax]
call fcn.00464ce0
call fcn.00464ce0
nop
mov qword [rsp + 8], rax
call fcn.004629e0
mov rax, qword [rsp + 8]
jmp fcn.004d6ec0