Function at 0x18004eb60
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
lea rbp, [rsp - 0x568]
sub rsp, 0x668
mov r15, rcx
call fcn.1800486a0
mov rcx, qword [0x180092dc8]
add rcx, 8
call fcn.180040730
test al, al
je 0x18004f91b
mov qword [rsp + 0x688], rbx
mov qword [rsp + 0x690], rsi
mov qword [rsp + 0x698], rdi
mov qword [rsp + 0x660], r12
lea rcx, [rsp + 0x40]
xor edx, edx
mov qword [rsp + 0x658], r13
mov qword [rsp + 0x650], r14
call fcn.180041040
lea rcx, [rsp + 0x30]
mov edx, 0x200
call fcn.180041040
lea rcx, [rsp + 0x20]
mov edx, 0x200
call fcn.180041040
lea rcx, [rsp + 0x40]
mov edx, 0x54
call fcn.180041110
mov edx, 0x45
mov rcx, rax
call fcn.180041110
mov edx, 0x4d
mov rcx, rax
call fcn.180041110
mov edx, 0x50
mov rcx, rax
call fcn.180041110
mov r11, qword [0x180092db8]
xor r12d, r12d
movabs rax, 0x41821ee8e53ac33
movabs rbx, 0x4b873568d1e0b188
lea r14d, [r12 + 0xf]
cmp r11, rax
cmove r11, r12
mov qword [0x180092db8], r11
test r11, r11
je 0x18004ecaa
nop dword [rax]
mov edx, r12d
mov rcx, r12
lea rax, [r11 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0xcb794a31
je 0x18004ec95
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004ec70
mov r11, qword [r11 + 0x280]
test r11, r11
jne 0x18004ec60
jmp 0x18004ecaa
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r11 + rcx*8 + 0x20]
test rax, rax
jne 0x18004f249
mov r8, qword [0x180092db0]
cmp r8, rbx
cmove r8, r12
mov qword [0x180092db0], r8
test r8, r8
je 0x18004ed07
nop word [rax + rax]
mov edx, r12d
mov rcx, r12
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x89a17f76
je 0x18004edd7
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004ece0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004ecd0
mov rax, qword gs:[0x30]
mov r13, r12
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r10, qword [rbx + 0x60]
mov r11d, r12d
mov edx, r12d
cmp r12w, word [rbx + 0x58]
ja 0x18004ed6c
lea rax, [rbp - 0x30]
mov r8, r10
lea rcx, [rbp - 0x30]
sub r8, rax
nop
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r12w, ax
je 0x18004ed6c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004ed50
mov r9d, r12d
cmp r12w, word [rbx + 0x58]
jae 0x18004edab
lea r8, [rbp + 0x3d0]
nop dword [rax]
movzx ecx, byte [r10]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004ed8e
add cl, 0xe0
mov byte [r8], cl
test cl, cl
je 0x18004edab
movzx eax, word [rbx + 0x58]
inc r9d
inc r11d
add r10, 2
inc r8
cmp r9d, eax
jl 0x18004ed80
lea rcx, [rbp + 0x3d0]
mov edx, r11d
call fcn.180063bd0
xor eax, 0x102a2c68
cmp eax, 0x89a17f76
je 0x18004ede8
cmp rbx, rdi
je 0x18004ef4d
mov rbx, qword [rbx]
jmp 0x18004ed30
movsxd rax, edx
shl rax, 5
mov r13, qword [rax + r8 + 0x18]
jmp 0x18004ef57
mov r13, qword [rbx + 0x30]
test r13, r13
je 0x18004ef4d
cmp byte [0x1800930b0], r12b
jne 0x18004ef4d
mov rdi, qword [0x180092db0]
test rdi, rdi
jne 0x18004ee83
mov ecx, 0x208
mov byte [0x1800930b0], 1
call fcn.180046860
mov rdi, rax
test rax, rax
je 0x18004ee5a
mov esi, r14d
lea rbx, [rax + 0x18]
nop
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r12d
mov qword [rbx], r12
add rbx, 0x20
dec esi
jns 0x18004ee30
mov qword [rdi + 0x200], r12
mov qword [0x180092db0], rdi
jmp 0x18004ee64
mov rdi, r12
mov qword [0x180092db0], r12
mov edx, 0xdae1905e
mov ecx, 0x701ac3f9
call fcn.180048dc0
mov byte [0x1800930b0], r12b
mov qword [0x180092da8], rax
jmp 0x18004ee9f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004ee9f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004ee90
mov edx, r12d
mov rcx, r12
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], r12d
je 0x18004ef2c
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004eeb0
mov ecx, 0x208
call fcn.180046860
mov rsi, rax
test rax, rax
je 0x18004ef09
mov r12d, r14d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
xor eax, eax
add rbx, 0x20
dec r12d
mov dword [rbx - 0x28], eax
mov qword [rbx - 0x20], rax
jns 0x18004eee0
xor r12d, r12d
mov qword [rsi + 0x200], r12
jmp 0x18004ef0c
mov rsi, r12
lea rdx, [rbp - 0x30]
mov rcx, rsi
mov qword [rsi + 0x18], r13
call fcn.180042540
mov dword [rsi + 0x10], 0x89a17f76
mov qword [rdi + 0x200], rsi
jmp 0x18004ef4d
movsxd rbx, edx
lea rdx, [rbp - 0x30]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r13
call fcn.180042540
mov dword [rbx + 0x10], 0x89a17f76
movabs rbx, 0x4b873568d1e0b188
test r13, r13
jne 0x18004f237
mov ecx, 0x89a17f76
call fcn.180048ac0
test al, al
je 0x18004f25d
mov rdx, qword [0x180092db0]
cmp rdx, rbx
cmove rdx, r12
mov qword [0x180092db0], rdx
test rdx, rdx
je 0x18004efc8
nop dword [rax]
mov r8d, r12d
mov rcx, r12
lea rax, [rdx + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x89a17f76
je 0x18004f0a7
inc rcx
inc r8d
add rax, 0x20
cmp rcx, 0x10
jl 0x18004efa0
mov rdx, qword [rdx + 0x200]
test rdx, rdx
jne 0x18004ef90
mov rax, qword gs:[0x30]
mov r13, r12
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r10, qword [rbx + 0x60]
mov r11d, r12d
mov edx, r12d
cmp r12w, word [rbx + 0x58]
ja 0x18004f03c
lea rax, [rbp + 0x150]
mov r8, r10
lea rcx, [rbp + 0x150]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r12w, ax
je 0x18004f03c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004f020
mov r9d, r12d
cmp r12w, word [rbx + 0x58]
jae 0x18004f07b
lea r8, [rbp + 0xd0]
nop dword [rax]
movzx ecx, byte [r10]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004f05e
add cl, 0xe0
mov byte [r8], cl
test cl, cl
je 0x18004f07b
movzx eax, word [rbx + 0x58]
inc r9d
inc r11d
add r10, 2
inc r8
cmp r9d, eax
jl 0x18004f050
lea rcx, [rbp + 0xd0]
mov edx, r11d
call fcn.180063bd0
xor eax, 0x102a2c68
cmp eax, 0x89a17f76
je 0x18004f0b8
cmp rbx, rdi
je 0x18004f228
mov rbx, qword [rbx]
jmp 0x18004eff0
movsxd rax, r8d
shl rax, 5
mov r13, qword [rax + rdx + 0x18]
jmp 0x18004f232
mov r13, qword [rbx + 0x30]
test r13, r13
je 0x18004f228
cmp byte [0x1800930b0], 0
jne 0x18004f228
mov rdi, qword [0x180092db0]
test rdi, rdi
jne 0x18004f153
mov ecx, 0x208
mov byte [0x1800930b0], 1
call fcn.180046860
mov rdi, rax
test rax, rax
je 0x18004f12a
mov esi, r14d
lea rbx, [rax + 0x18]
nop
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r12d
mov qword [rbx], r12
add rbx, 0x20
dec esi
jns 0x18004f100
mov qword [rdi + 0x200], r12
mov qword [0x180092db0], rdi
jmp 0x18004f134
mov rdi, r12
mov qword [0x180092db0], r12
mov edx, 0xdae1905e
mov ecx, 0x701ac3f9
call fcn.180048dc0
mov byte [0x1800930b0], 0
mov qword [0x180092da8], rax
jmp 0x18004f16f
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004f16f
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004f160
mov edx, r12d
mov rcx, r12
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], 0
je 0x18004f204
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004f180
mov ecx, 0x208
call fcn.180046860
mov rsi, rax
test rax, rax
je 0x18004f1de
mov r12d, r14d
lea rbx, [rax + 0x18]
xor r15d, r15d
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r15d
mov qword [rbx], r15
add rbx, 0x20
dec r12d
jns 0x18004f1b0
mov r15, qword [rbp + 0x580]
xor r12d, r12d
mov qword [rsi + 0x200], r12
jmp 0x18004f1e1
mov rsi, r12
lea rdx, [rbp + 0x150]
mov rcx, rsi
mov qword [rsi + 0x18], r13
call fcn.180042540
mov dword [rsi + 0x10], 0x89a17f76
mov qword [rdi + 0x200], rsi
jmp 0x18004f228
movsxd rbx, edx
lea rdx, [rbp + 0x150]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r13
call fcn.180042540
mov dword [rbx + 0x10], 0x89a17f76
movabs rbx, 0x4b873568d1e0b188
test r13, r13
je 0x18004f25d
mov edx, 0xcb794a31
mov rcx, r13
call fcn.180047fb0
test rax, rax
je 0x18004f25d
movsxd r8, dword [rsp + 0x38]
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
shr r8, 1
call rax
mov r11, qword [0x180092db8]
movabs rax, 0x41821ee8e53ac33
cmp r11, rax
cmove r11, r12
mov qword [0x180092db8], r11
test r11, r11
je 0x18004f2da
nop word [rax + rax]
mov edx, r12d
mov rcx, r12
lea rax, [r11 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x3cd91c3c
je 0x18004f2c5
inc rcx
inc edx
add rax, 0x28
cmp rcx, 0x10
jl 0x18004f2a0
mov r11, qword [r11 + 0x280]
test r11, r11
jne 0x18004f290
jmp 0x18004f2da
movsxd rax, edx
lea rcx, [rax + rax*4]
mov rax, qword [r11 + rcx*8 + 0x20]
test rax, rax
jne 0x18004f885
mov rdx, qword [0x180092db0]
cmp rdx, rbx
cmove rdx, r12
mov qword [0x180092db0], rdx
test rdx, rdx
je 0x18004f338
nop word [rax + rax]
mov r8d, r12d
mov rcx, r12
lea rax, [rdx + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x89a17f76
je 0x18004f415
inc rcx
inc r8d
add rax, 0x20
cmp rcx, 0x10
jl 0x18004f310
mov rdx, qword [rdx + 0x200]
test rdx, rdx
jne 0x18004f300
mov rax, qword gs:[0x30]
mov r13, r12
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r10, qword [rbx + 0x60]
mov r11d, r12d
mov edx, r12d
cmp r12w, word [rbx + 0x58]
ja 0x18004f3ac
lea rax, [rbp + 0x2d0]
mov r8, r10
lea rcx, [rbp + 0x2d0]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r12w, ax
je 0x18004f3ac
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004f390
mov r9d, r12d
cmp r12w, word [rbx + 0x58]
jae 0x18004f3eb
lea r8, [rsp + 0x50]
nop dword [rax + rax]
movzx ecx, byte [r10]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004f3ce
add cl, 0xe0
mov byte [r8], cl
test cl, cl
je 0x18004f3eb
movzx eax, word [rbx + 0x58]
inc r9d
inc r11d
add r10, 2
inc r8
cmp r9d, eax
jl 0x18004f3c0
lea rcx, [rsp + 0x50]
mov edx, r11d
call fcn.180063bd0
xor eax, 0x102a2c68
cmp eax, 0x89a17f76
je 0x18004f426
cmp rbx, rdi
je 0x18004f598
mov rbx, qword [rbx]
jmp 0x18004f360
movsxd rax, r8d
shl rax, 5
mov r13, qword [rax + rdx + 0x18]
jmp 0x18004f5a2
mov r13, qword [rbx + 0x30]
test r13, r13
je 0x18004f598
cmp byte [0x1800930b0], 0
jne 0x18004f598
mov rdi, qword [0x180092db0]
test rdi, rdi
jne 0x18004f4c3
mov ecx, 0x208
mov byte [0x1800930b0], 1
call fcn.180046860
mov rdi, rax
test rax, rax
je 0x18004f49a
mov esi, r14d
lea rbx, [rax + 0x18]
nop dword [rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r12d
mov qword [rbx], r12
add rbx, 0x20
dec esi
jns 0x18004f470
mov qword [rdi + 0x200], r12
mov qword [0x180092db0], rdi
jmp 0x18004f4a4
mov rdi, r12
mov qword [0x180092db0], r12
mov edx, 0xdae1905e
mov ecx, 0x701ac3f9
call fcn.180048dc0
mov byte [0x1800930b0], 0
mov qword [0x180092da8], rax
jmp 0x18004f4df
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004f4df
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004f4d0
mov edx, r12d
mov rcx, r12
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], 0
je 0x18004f574
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004f4f0
mov ecx, 0x208
call fcn.180046860
mov rsi, rax
test rax, rax
je 0x18004f54e
mov r12d, r14d
lea rbx, [rax + 0x18]
xor r15d, r15d
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r15d
mov qword [rbx], r15
add rbx, 0x20
dec r12d
jns 0x18004f520
mov r15, qword [rbp + 0x580]
xor r12d, r12d
mov qword [rsi + 0x200], r12
jmp 0x18004f551
mov rsi, r12
lea rdx, [rbp + 0x2d0]
mov rcx, rsi
mov qword [rsi + 0x18], r13
call fcn.180042540
mov dword [rsi + 0x10], 0x89a17f76
mov qword [rdi + 0x200], rsi
jmp 0x18004f598
movsxd rbx, edx
lea rdx, [rbp + 0x2d0]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r13
call fcn.180042540
mov dword [rbx + 0x10], 0x89a17f76
movabs rbx, 0x4b873568d1e0b188
test r13, r13
jne 0x18004f873
mov ecx, 0x89a17f76
call fcn.180048ac0
test al, al
je 0x18004f899
mov r8, qword [0x180092db0]
cmp r8, rbx
cmove r8, r12
mov qword [0x180092db0], r8
test r8, r8
je 0x18004f617
nop word [rax + rax]
mov edx, r12d
mov rcx, r12
lea rax, [r8 + 0x10]
nop word [rax + rax]
cmp dword [rax], 0x89a17f76
je 0x18004f6f7
inc rcx
inc edx
add rax, 0x20
cmp rcx, 0x10
jl 0x18004f5f0
mov r8, qword [r8 + 0x200]
test r8, r8
jne 0x18004f5e0
mov rax, qword gs:[0x30]
mov r13, r12
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rbx, qword [rax + 0x10]
mov rdi, qword [rax + 0x18]
nop word [rax + rax]
mov r10, qword [rbx + 0x60]
mov r11d, r12d
mov edx, r12d
cmp r12w, word [rbx + 0x58]
ja 0x18004f68c
lea rax, [rbp + 0x450]
mov r8, r10
lea rcx, [rbp + 0x450]
sub r8, rax
nop word [rax + rax]
movzx eax, word [r8 + rcx]
mov word [rcx], ax
cmp r12w, ax
je 0x18004f68c
movzx eax, word [rbx + 0x58]
inc edx
add rcx, 2
cmp edx, eax
jle 0x18004f670
mov r9d, r12d
cmp r12w, word [rbx + 0x58]
jae 0x18004f6cb
lea r8, [rbp + 0x250]
nop dword [rax]
movzx ecx, byte [r10]
lea eax, [rcx - 0x61]
cmp al, 0x19
ja 0x18004f6ae
add cl, 0xe0
mov byte [r8], cl
test cl, cl
je 0x18004f6cb
movzx eax, word [rbx + 0x58]
inc r9d
inc r11d
add r10, 2
inc r8
cmp r9d, eax
jl 0x18004f6a0
lea rcx, [rbp + 0x250]
mov edx, r11d
call fcn.180063bd0
xor eax, 0x102a2c68
cmp eax, 0x89a17f76
je 0x18004f708
cmp rbx, rdi
je 0x18004f86e
mov rbx, qword [rbx]
jmp 0x18004f640
movsxd rax, edx
shl rax, 5
mov r13, qword [rax + r8 + 0x18]
jmp 0x18004f86e
mov r13, qword [rbx + 0x30]
test r13, r13
je 0x18004f899
cmp byte [0x1800930b0], 0
jne 0x18004f86e
mov rdi, qword [0x180092db0]
test rdi, rdi
jne 0x18004f7a3
mov ecx, 0x208
mov byte [0x1800930b0], 1
call fcn.180046860
mov rdi, rax
test rax, rax
je 0x18004f77a
mov esi, r14d
lea rbx, [rax + 0x18]
nop
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r12d
mov qword [rbx], r12
add rbx, 0x20
dec esi
jns 0x18004f750
mov qword [rdi + 0x200], r12
mov qword [0x180092db0], rdi
jmp 0x18004f784
mov rdi, r12
mov qword [0x180092db0], r12
mov edx, 0xdae1905e
mov ecx, 0x701ac3f9
call fcn.180048dc0
mov byte [0x1800930b0], 0
mov qword [0x180092da8], rax
jmp 0x18004f7bf
mov rax, qword [rdi + 0x200]
test rax, rax
je 0x18004f7bf
nop
mov rdi, rax
mov rax, qword [rax + 0x200]
test rax, rax
jne 0x18004f7b0
mov r8d, r12d
mov rdx, r12
lea rax, [rdi + 0x10]
nop dword [rax]
cmp dword [rax], 0
je 0x18004f84a
inc rdx
inc r8d
add rax, 0x20
cmp rdx, 0x10
jl 0x18004f7d0
mov ecx, 0x208
call fcn.180046860
mov rsi, rax
test rax, rax
je 0x18004f824
lea rbx, [rax + 0x18]
nop dword [rax + rax]
lea rcx, [rbx - 0x18]
xor edx, edx
call fcn.180041040
mov dword [rbx - 8], r12d
mov qword [rbx], r12
add rbx, 0x20
dec r14d
jns 0x18004f800
mov qword [rsi + 0x200], r12
jmp 0x18004f827
mov rsi, r12
lea rdx, [rbp + 0x450]
mov rcx, rsi
mov qword [rsi + 0x18], r13
call fcn.180042540
mov dword [rsi + 0x10], 0x89a17f76
mov qword [rdi + 0x200], rsi
jmp 0x18004f86e
movsxd rbx, r8d
lea rdx, [rbp + 0x450]
shl rbx, 5
add rbx, rdi
mov rcx, rbx
mov qword [rbx + 0x18], r13
call fcn.180042540
mov dword [rbx + 0x10], 0x89a17f76
test r13, r13
je 0x18004f899
mov edx, 0x3cd91c3c
mov rcx, r13
call fcn.180047fb0
test rax, rax
je 0x18004f899
movsxd r8, dword [rsp + 0x28]
mov rdx, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x30]
shr r8, 1
call rax
lea rcx, [rsp + 0x20]
call fcn.180041260
mov r14, qword [rsp + 0x650]
mov r13, qword [rsp + 0x658]
cmp word [rax], 0x5c
mov r12, qword [rsp + 0x660]
mov rdi, qword [rsp + 0x698]
mov rsi, qword [rsp + 0x690]
mov rbx, qword [rsp + 0x688]
je 0x18004f8e8
lea rcx, [rsp + 0x20]
mov edx, 0x5c
call fcn.180041110
mov rcx, qword [0x180092dc8]
mov rdx, qword [rsp + 0x20]
add rcx, 8
call fcn.180042540
lea rcx, [rsp + 0x20]
call fcn.1800403c0
lea rcx, [rsp + 0x30]
call fcn.1800403c0
lea rcx, [rsp + 0x40]
call fcn.1800403c0
mov rdx, qword [0x180092dc8]
mov rcx, r15
add rdx, 8
call fcn.180042510
mov rax, r15
add rsp, 0x668
pop r15
pop rbp
ret