Function at 0x4aa260
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x4aabdd
push rbp
mov rbp, rsp
sub rsp, 0xc8
mov qword [rsp + 0xd8], rax
cmp rbx, 2
jl 0x4aa729
mov byte [rsp + 0xe8], cl
mov qword [rsp + 0xe0], rbx
mov qword [rsp + 0xd8], rax
movzx ecx, byte [rax]
mov byte [rsp + 0x46], cl
lea rdx, [rax + 1]
mov qword [rsp + 0xa0], rdx
lea rsi, [rbx - 1]
mov qword [rsp + 0x60], rsi
mov qword [rsp], rdx
mov qword [rsp + 8], rsi
mov byte [rsp + 0x10], cl
call fcn.00403d20
xorps xmm15, xmm15
mov r14, qword [0x00917770]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jl 0x4aa6fe
mov qword [rsp + 0x50], rcx
lea rax, [rcx + 2]
mov qword [rsp + 0x80], rax
movzx r9d, byte [rsp + 0x46]
cmp r9b, 0x22
je 0x4aa464
cmp r9b, 0x27
je 0x4aa464
nop dword [rax]
cmp r9b, 0x60
jne 0x4aa439
movzx r9d, byte [rsp + 0xe8]
test r9b, r9b
je 0x4aa414
mov rdx, qword [rsp + 0xe0]
cmp rdx, rax
jb 0x4aabd4
nop
mov rcx, qword [rsp + 0xd8]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0xd
call fcn.00403d20
xorps xmm15, xmm15
mov r14, qword [0x00917770]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
je 0x4aa3cc
mov rcx, qword [rsp + 0x50]
lea rdx, [rcx - 1]
mov qword [rsp + 0x78], rdx
lea rax, [0x00603140]
xor ebx, ebx
mov rcx, rdx
nop dword [rax]
call fcn.00447660
mov rdx, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xe0]
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x78]
mov ebx, 1
xor r8d, r8d
jmp 0x4aab28
mov rcx, qword [rsp + 0x50]
lea r9, [rcx + 1]
mov rdx, qword [rsp + 0xe0]
nop dword [rax]
cmp rdx, r9
jb 0x4aab1d
cmp r9, 1
jb 0x4aab11
mov rax, rcx
neg rcx
sar rcx, 0x3f
and ecx, 1
mov r9, qword [rsp + 0xd8]
lea r10, [r9 + rcx]
mov rcx, rax
jmp 0x4aaac5
mov rdx, qword [rsp + 0xe0]
nop dword [rax]
cmp rdx, rax
jb 0x4aab09
mov r9, qword [rsp + 0xd8]
mov r10, r9
jmp 0x4aaac5
mov rsi, qword [0x008a8bc0]
mov r8, qword [0x008a8bc8]
xor eax, eax
xor ebx, ebx
mov rcx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
add rsp, 0xc8
pop rbp
ret
mov rdx, qword [rsp + 0xe0]
cmp rdx, rax
jb 0x4aaab9
nop
mov rcx, qword [rsp + 0xd8]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov byte [rsp + 0x10], 0x5c
call fcn.00403d20
xorps xmm15, xmm15
mov r14, qword [0x00917770]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
je 0x4aa4af
xor eax, eax
jmp 0x4aa4ef
nop
nop
mov rax, qword [rsp + 0xd8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x80]
mov qword [rsp + 8], rcx
mov byte [rsp + 0x10], 0xa
call fcn.00403d20
xorps xmm15, xmm15
mov r14, qword [0x00917770]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
sete al
test al, al
je 0x4aa68f
movzx ecx, byte [rsp + 0x46]
nop dword [rax]
cmp cl, 0x22
jne 0x4aa560
mov rbx, qword [rsp + 0x50]
lea rsi, [rbx + 1]
mov rdx, qword [rsp + 0xe0]
cmp rdx, rsi
jb 0x4aaab1
nop
cmp rsi, 1
jb 0x4aaaa5
mov rcx, rbx
neg rcx
sar rcx, 0x3f
and ecx, 1
mov rdx, qword [rsp + 0xd8]
lea rax, [rdx + rcx]
call fcn.0046f3a0
mov rdx, qword [rsp + 0x80]
mov r9d, eax
jmp 0x4aa5ee
cmp cl, 0x27
jne 0x4aa5e3
mov rbx, qword [rsp + 0x50]
lea rsi, [rbx + 1]
mov rdx, qword [rsp + 0xe0]
nop word [rax + rax]
cmp rdx, rsi
jb 0x4aaa99
cmp rsi, 1
jb 0x4aaa8d
mov rcx, rbx
neg rcx
sar rcx, 0x3f
and ecx, 1
mov rdx, qword [rsp + 0xd8]
lea rax, [rdx + rcx]
call fcn.0046ea60
lea rcx, [rbx + 2]
mov rdx, qword [rsp + 0x80]
nop dword [rax]
cmp rcx, rdx
jne 0x4aa5de
cmp eax, 0xfffd
je 0x4aa5d4
mov r9d, 1
jmp 0x4aa5ee
cmp rbx, 1
setne r9b
jmp 0x4aa5ee
xor r9d, r9d
jmp 0x4aa5ee
mov rdx, qword [rsp + 0x80]
xor r9d, r9d
test r9b, r9b
je 0x4aa68f
movzx r9d, byte [rsp + 0xe8]
test r9b, r9b
je 0x4aa648
mov rcx, qword [rsp + 0x50]
lea r9, [rcx + 1]
cmp r9, rdx
ja 0x4aaa85
nop word [rax + rax]
cmp r9, 1
jb 0x4aaa79
mov rax, rcx
neg rcx
sar rcx, 0x3f
and ecx, 1
mov r9, qword [rsp + 0xd8]
lea r10, [r9 + rcx]
mov rcx, rax
jmp 0x4aa65b
mov rcx, qword [rsp + 0x50]
mov r9, qword [rsp + 0xd8]
mov rax, rdx
mov r10, r9
mov rdi, qword [rsp + 0xe0]
sub rdi, rcx
add rdi, 0xfffffffffffffffe
mov r11, rdi
neg r11
sar r11, 0x3f
and rdx, r11
lea rcx, [r9 + rdx]
mov rbx, rax
xor esi, esi
xor r8d, r8d
mov rax, r10
add rsp, 0xc8
pop rbp
ret
movzx r9d, byte [rsp + 0xe8]
test r9b, r9b
jne 0x4aa6a3
xor eax, eax
xor ecx, ecx
jmp 0x4aa6e7
mov rdx, qword [rsp + 0x50]
lea rsi, [rdx + rdx*2]
lea rdx, [rdx + rdx*2]
lea rdx, [rdx + 6]
shr rdx, 0x3f
lea rcx, [rsi + rdx]
lea rcx, [rcx + 6]
sar rcx, 1
mov qword [rsp + 0x70], rcx
lea rax, [0x00603140]
xor ebx, ebx
call fcn.00447660
movzx r9d, byte [rsp + 0xe8]
mov rcx, rax
mov rax, qword [rsp + 0x70]
movzx r10d, byte [rsp + 0x46]
mov rdx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x60]
xor ebx, ebx
jmp 0x4aa760
mov rsi, qword [0x008a8bc0]
mov r8, qword [0x008a8bc8]
xor eax, eax
xor ebx, ebx
mov rcx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
add rsp, 0xc8
pop rbp
ret
mov rsi, qword [0x008a8bc0]
mov r8, qword [0x008a8bc8]
mov rcx, rax
mov rdi, rbx
xor eax, eax
xor ebx, ebx
add rsp, 0xc8
pop rbp
ret
mov rsi, rdi
mov rax, r10
mov r10d, r11d
mov r8, rdx
mov rdx, rcx
mov rcx, r8
nop dword [rax]
test rsi, rsi
je 0x4aa988
cmp byte [rdx], r10b
je 0x4aa977
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0xa8], rcx
mov rax, rdx
mov rbx, rsi
mov ecx, r10d
call fcn.004a9d60
mov rdx, qword [rsp + 0xc0]
cmp byte [rdx], 0xa
je 0x4aa94c
test rsi, rsi
jne 0x4aa94c
movzx r9d, byte [rsp + 0xe8]
nop dword [rax]
test r9b, r9b
je 0x4aa922
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0xb0], rcx
nop dword [rax]
cmp eax, 0x80
jl 0x4aa7eb
test bl, bl
jne 0x4aa853
mov rbx, qword [rsp + 0x68]
inc rbx
mov r10, qword [rsp + 0x70]
cmp r10, rbx
jb 0x4aa807
mov rdx, qword [rsp + 0xa8]
jmp 0x4aa84a
mov dword [rsp + 0x4c], eax
mov rax, qword [rsp + 0xa8]
mov rcx, r10
mov edi, 1
lea rsi, [0x00603140]
call fcn.00447740
mov rdi, qword [rsp + 0x88]
movzx r9d, byte [rsp + 0xe8]
mov rdx, rax
mov r10, rcx
mov eax, dword [rsp + 0x4c]
mov rcx, qword [rsp + 0xb0]
mov byte [rbx + rdx - 1], al
jmp 0x4aa934
mov dword [rsp + 0x48], 0
mov ebx, 4
mov rcx, rbx
mov edi, eax
lea rax, [rsp + 0x48]
call fcn.0046ee20
cmp rax, 4
ja 0x4aaa6c
mov rdx, qword [rsp + 0x68]
lea rbx, [rdx + rax]
mov rcx, qword [rsp + 0x70]
cmp rcx, rbx
jb 0x4aa896
mov rsi, qword [rsp + 0xa8]
jmp 0x4aa8c5
mov qword [rsp + 0x90], rax
mov rdi, rax
lea rsi, [0x00603140]
mov rax, qword [rsp + 0xa8]
call fcn.00447740
mov rdx, qword [rsp + 0x68]
mov rsi, rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x98], rbx
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0xb8], rsi
add rdx, rsi
mov rdi, rax
mov rax, rdx
lea rbx, [rsp + 0x48]
mov rcx, rdi
call fcn.00461c60
mov rcx, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0x88]
movzx r9d, byte [rsp + 0xe8]
mov r10, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xb8]
nop
jmp 0x4aa934
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0xa8]
mov r10, qword [rsp + 0x70]
movzx r11d, byte [rsp + 0x46]
nop word [rax + rax]
cmp r11b, 0x27
jne 0x4aa74a
jmp 0x4aa9a0
mov rsi, qword [0x008a8bc0]
mov r8, qword [0x008a8bc8]
xor eax, eax
xor ebx, ebx
mov rcx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
add rsp, 0xc8
pop rbp
ret
mov r11d, r10d
mov rdi, rsi
mov rax, rcx
mov rcx, rdx
mov rdx, rax
jmp 0x4aa9a0
mov r11d, r10d
mov rdi, rsi
mov rax, rcx
mov rcx, rdx
mov rdx, rax
nop word [rax + rax]
test rdi, rdi
je 0x4aaa39
cmp byte [rcx], r11b
jne 0x4aaa39
lea r10, [rdi - 1]
mov r11, r10
neg r10
sar r10, 0x3f
and r10d, 1
add rcx, r10
test r9b, r9b
jne 0x4aa9fe
mov rbx, qword [rsp + 0xe0]
mov rdx, rbx
sub rbx, rdi
inc rbx
nop dword [rax]
cmp rdx, rbx
jb 0x4aaa64
mov rax, qword [rsp + 0xd8]
mov rdi, r11
xor esi, esi
xor r8d, r8d
add rsp, 0xc8
pop rbp
ret
mov qword [rsp + 0x98], r11
mov qword [rsp + 0xc0], rcx
xor eax, eax
mov rcx, rbx
mov rbx, rdx
call fcn.0044ab20
mov rcx, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0x98]
xor esi, esi
xor r8d, r8d
add rsp, 0xc8
pop rbp
ret
mov rsi, qword [0x008a8bc0]
mov r8, qword [0x008a8bc8]
xor eax, eax
xor ebx, ebx
mov rcx, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0xe0]
add rsp, 0xc8
pop rbp
ret
mov rcx, rbx
call fcn.004612a0
mov rcx, rax
mov edx, 4
call fcn.004612a0
mov eax, 1
xor ecx, ecx
call fcn.00461320
mov rcx, r9
call fcn.004612a0
mov eax, 1
xor ecx, ecx
call fcn.00461320
mov rcx, rsi
nop dword [rax]
call fcn.004612a0
mov eax, 1
xor ecx, ecx
call fcn.00461320
mov rcx, rsi
call fcn.004612a0
mov rcx, rax
nop dword [rax]
call fcn.004612a0
mov r11, qword [rsp + 0x80]
cmp rdx, r11
jb 0x4aaafe
sub rdx, rcx
lea rdi, [rdx - 2]
mov rdx, rdi
neg rdx
sar rdx, 0x3f
and r11, rdx
lea rcx, [r9 + r11]
mov rbx, rax
xor esi, esi
xor r8d, r8d
mov rax, r10
add rsp, 0xc8
pop rbp
ret
mov rax, r11
mov rcx, rdx
call fcn.00461320
mov rcx, rax
call fcn.004612a0
mov eax, 1
xor ecx, ecx
call fcn.00461320
mov rcx, r9
call fcn.004612a0
inc rbx
lea r9, [rcx + 1]
cmp rbx, r9
jge 0x4aab9c
cmp rsi, rbx
jbe 0x4aabc9
movzx r9d, byte [rdx + rbx]
nop
cmp r9b, 0xd
je 0x4aab25
inc r8
cmp rdi, r8
jae 0x4aab95
mov qword [rsp + 0x58], rbx
mov byte [rsp + 0x47], r9b
mov rbx, r8
mov rcx, rdi
mov edi, 1
lea rsi, [0x00603140]
call fcn.00447740
mov rdx, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xe0]
movzx r9d, byte [rsp + 0x47]
mov r8, rbx
mov rdi, rcx
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov byte [r8 + rax - 1], r9b
jmp 0x4aab25
mov rbx, rax
mov rcx, r8
xor eax, eax
call fcn.0044ab20
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0xe0]
mov r9, qword [rsp + 0xd8]
mov r10, rax
mov rax, rbx
jmp 0x4aaac5
mov rax, rbx
mov rcx, rsi
call fcn.00461260
mov rcx, rax
call fcn.004612a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.0045efa0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
nop
jmp fcn.004aa260