Function at 0x41b2e0
Capabilities:
Access peb ldr_data

Disassembly:
mov rcx, qword gs:[0x28]
mov rcx, qword [rcx]
cmp rsp, qword [rcx + 0x10]
jbe 0x41b656
sub rsp, 0x50
mov qword [rsp + 0x48], rbp
lea rbp, [rsp + 0x48]
mov rax, qword [rsp + 0x60]
cmp byte [rax + 0x67], 0
je 0x41b4b5
nop
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rcx]
mov rbx, qword [rax + 0x18]
mov rsi, rcx
xor edi, edi
jmp 0x41b337
mov r8, qword [rdx]
mov rdi, rcx
mov rcx, rdx
mov rdx, r8
test rdx, rdx
je 0x41b35c
mov rcx, qword [rdx + 0x18]
cmp rcx, rbx
jae 0x41b34a
mov rcx, rdx
jmp 0x41b32b
jbe 0x41b63c
lea rdi, [rdx + 8]
mov rcx, rdx
mov rdx, rdi
jmp 0x41b32b
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x30], rdi
lea rax, [0x00593120]
mov qword [rsp], rax
call fcn.00416da0
mov rax, qword [rsp + 8]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rcx + 0x18]
mov qword [rax + 0x18], rdx
mov rdx, qword gs:[0x28]
mov rdx, qword [rdx]
mov rdx, qword [rdx + 0x30]
mov ebx, dword [rdx + 0xf0]
mov esi, dword [rdx + 0xf4]
mov dword [rdx + 0xf0], esi
mov edi, ebx
shl ebx, 0x11
xor edi, ebx
mov ebx, esi
xor esi, edi
shr edi, 7
xor edi, esi
mov esi, ebx
shr ebx, 0x10
xor ebx, edi
mov dword [rdx + 0xf4], ebx
lea edx, [rsi + rbx]
mov dword [rax + 0x30], edx
mov qword [rax + 0x20], rcx
mov rdx, qword [rcx + 0x20]
mov qword [rax + 0x28], rdx
mov qword [rsp], rcx
call fcn.0041afa0
mov eax, dword [rsp + 8]
mov rcx, qword [rsp + 0x40]
mov dword [rcx + 0x34], eax
mov rax, qword [rsp + 0x30]
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x28]
mov qword [rax], rcx
mov rax, rcx
jmp 0x41b411
mov rcx, qword [rcx + 0x10]
mov rdx, qword [rcx + 0x10]
test rdx, rdx
jne 0x41b493
xor edx, edx
test dl, dl
jne 0x41b40d
mov rcx, qword [rsp + 0x58]
jmp 0x41b437
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x58]
mov rax, rdx
mov rcx, rbx
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x41b489
mov ebx, dword [rax + 0x30]
cmp dword [rdx + 0x30], ebx
jbe 0x41b489
mov rbx, qword [rax + 0x20]
mov rsi, qword [rax + 0x18]
cmp qword [rbx + 0x18], rsi
jne 0x41b54d
cmp qword [rdx + 8], rax
je 0x41b479
cmp qword [rdx], rax
jne 0x41b534
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
call fcn.0041b9c0
jmp 0x41b427
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
call fcn.0041baa0
jmp 0x41b427
mov rbp, qword [rsp + 0x48]
add rsp, 0x50
ret
mov qword [rsp + 0x38], rcx
mov qword [rsp], rdx
call fcn.0041ac60
movzx edx, byte [rsp + 8]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
jmp 0x41b41c
mov rdx, qword [0x005ab1b8]
test rdx, rdx
jne 0x41b4d1
xor ecx, ecx
mov rdx, qword [rsp + 0x58]
add qword [rdx + 8], rcx
jmp 0x41b317
mov rbx, qword [rax + 0x20]
mov rsi, rdx
shr rdx, 0xd
cmp rbx, rdx
jb 0x41b4c1
nop
shl rbx, 0xd
mov rdx, qword [rax + 0x18]
add rbx, rdx
cmp rsi, 0x2000
jbe 0x41b52f
lea rdx, [rdx + rsi]
lea rdx, [rdx - 1]
dec rsi
not rsi
and rdx, rsi
and rsi, rbx
cmp rdx, rsi
jae 0x41b52b
mov rcx, qword [0x005ab1b0]
cmp rcx, 0x40
sbb rbx, rbx
sub rsi, rdx
shr rsi, cl
and rsi, rbx
mov rcx, rsi
jmp 0x41b4c3
xor ecx, ecx
jmp 0x41b4c3
mov rsi, rbx
jmp 0x41b50a
lea rax, [0x004e51ae]
mov qword [rsp], rax
mov qword [rsp + 8], 0x21
call fcn.0042cef0
mov qword [rsp + 0x18], rsi
call fcn.0042d900
lea rax, [0x004e16b6]
mov qword [rsp], rax
mov qword [rsp + 8], 0x13
call fcn.0042e2b0
mov rax, qword [rsp + 0x40]
mov qword [rsp], rax
call fcn.0042e260
lea rax, [0x004df18e]
mov qword [rsp], rax
mov qword [rsp + 8], 8
call fcn.0042e2b0
mov rax, qword [rsp + 0x18]
mov qword [rsp], rax
call fcn.0042dfc0
call fcn.0042dba0
call fcn.0042d990
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x20], rax
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x10], rcx
call fcn.0042d900
lea rax, [0x004e23ca]
mov qword [rsp], rax
mov qword [rsp + 8], 0x16
call fcn.0042e2b0
mov rax, qword [rsp + 0x20]
mov qword [rsp], rax
call fcn.0042e260
lea rax, [0x004e0791]
mov qword [rsp], rax
mov qword [rsp + 8], 0x10
call fcn.0042e2b0
mov rax, qword [rsp + 0x10]
mov qword [rsp], rax
call fcn.0042dfc0
call fcn.0042dba0
call fcn.0042d990
lea rax, [0x004e6dc9]
mov qword [rsp], rax
mov qword [rsp + 8], 0x2f
call fcn.0042cef0
lea rax, [0x004e485c]
mov qword [rsp], rax
mov qword [rsp + 8], 0x1f
call fcn.0042cef0
nop
call fcn.004537f0
jmp fcn.0041b2e0