Function at 0x45c0e0
Capabilities:
Enumerate process modules
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x538
lea rbp, [rsp + 0x80]
mov rax, rdx
test rcx, rcx
je 0x45c111
mov rax, qword [rax + 8]
test rax, rax
je 0x45c116
dec rax
jmp 0x45c118
test rax, rax
jne 0x45c10c
xor eax, eax
movabs rsi, 0x8000000000000000
mov qword [rbp + 0x418], r8
mov qword [rbp + 0x420], r9
cmp qword [0x004a5038], rsi
jne 0x45c63c
mov qword [rbp + 0x460], rax
mov rax, qword [0x004cc798]
movzx eax, byte [rax]
mov ecx, 0x8c0
mov edx, 8
call fcn.00404440
test rax, rax
je 0x45c660
mov qword [rbp + 0x448], 4
mov qword [rbp + 0x450], rax
mov qword [rbp + 0x458], 0
mov qword [rbp + 0x498], 0
mov qword [rbp + 0x4a0], 8
mov qword [rbp + 0x4a8], 0
mov ecx, 8
xor edx, edx
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
cmp rax, 0xffffffffffffffff
je 0x45c551
mov rdi, rax
lea rsi, [rbp - 0x60]
mov r8d, 0x438
mov rcx, rsi
xor edx, edx
call sub.ntdll.dll_memset
mov dword [rbp - 0x60], 0x438
mov rcx, rdi
mov rdx, rsi
call sub.KERNEL32.dll_Module32FirstW
cmp eax, 1
jne 0x45c53f
mov eax, 8
mov qword [rbp + 0x490], rax
xor eax, eax
mov qword [rbp + 0x4b0], rax
jmp 0x45c285
mov rax, qword [rbp + 0x4a0]
mov qword [rbp + 0x490], rax
mov rcx, qword [rbp + 0x4b0]
mov rax, rcx
shl rax, 6
movups xmm0, xmmword [rbp + 0x3d8]
movups xmm1, xmmword [rbp + 0x3e8]
movups xmm2, xmmword [rbp + 0x3f8]
movups xmm3, xmmword [rbp + 0x408]
mov rdx, qword [rbp + 0x490]
movups xmmword [rdx + rax + 0x30], xmm3
movups xmmword [rdx + rax + 0x20], xmm2
movups xmmword [rdx + rax + 0x10], xmm1
movups xmmword [rdx + rax], xmm0
inc rcx
mov rax, rcx
mov qword [rbp + 0x4b0], rcx
mov qword [rbp + 0x4a8], rcx
nop dword [rax]
mov rcx, rdi
lea rdx, [rbp - 0x60]
call sub.KERNEL32.dll_Module32NextW
cmp eax, 1
jne 0x45c53f
mov eax, 0x208
xor r8d, r8d
nop dword [rax]
cmp word [rbp + r8*2 + 0x1d0], 0
je 0x45c300
cmp word [rbp + r8*2 + 0x1d2], 0
je 0x45c2de
cmp word [rbp + r8*2 + 0x1d4], 0
je 0x45c2e3
cmp word [rbp + r8*2 + 0x1d6], 0
je 0x45c2e9
cmp word [rbp + r8*2 + 0x1d8], 0
je 0x45c2ef
add r8, 5
add rax, 0xfffffffffffffff6
jne 0x45c290
mov r8d, 0x104
jmp 0x45c300
inc r8
jmp 0x45c300
add r8, 2
jmp 0x45c300
add r8, 3
jmp 0x45c300
add r8, 4
nop word cs:[rax + rax]
lea rcx, [rbp + 0x428]
lea rdx, [rbp + 0x1d0]
call fcn.0043cd50
mov r13, qword [rbp + 0x430]
mov r8, qword [rbp + 0x438]
lea rcx, [rbp + 0x470]
mov rdx, r13
call fcn.0045bec0
cmp qword [rbp + 0x470], 0
je 0x45c430
mov rbx, qword [rbp + 0x478]
mov r14, qword [rbp + 0x480]
mov r15, qword [rbp + 0x488]
mov r9d, 0x40
mov rcx, r14
mov rdx, r15
xor r8d, r8d
call fcn.00461b40
test rax, rax
je 0x45c420
cmp rdx, 0x40
jb 0x45c420
movzx ecx, word [rax]
cmp ecx, 0x5a4d
jne 0x45c420
mov esi, dword [rax + 0x3c]
mov r9d, 0x88
mov rcx, r14
mov rdx, r15
mov r8, rsi
call fcn.00461b40
mov r12, rax
test rax, rax
je 0x45c420
cmp rdx, 0x88
jb 0x45c420
cmp dword [r12], 0x4550
jne 0x45c420
movzx eax, word [r12 + 0x18]
cmp eax, 0x20b
jne 0x45c420
movzx r9d, word [r12 + 0x14]
cmp r9, 0x70
jb 0x45c420
add rsi, 0x88
add r9, 0xffffffffffffff90
mov rcx, r14
mov rdx, r15
mov r8, rsi
call fcn.00461b40
test rax, rax
je 0x45c420
mov r8, rdx
mov r9d, dword [r12 + 0x84]
lea rcx, [rbp + 0x470]
mov rdx, rax
call fcn.00462f50
cmp qword [rbp + 0x470], 0
je 0x45c453
nop word cs:[rax + rax]
mov rcx, r14
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
mov rdx, qword [rbp + 0x428]
test rdx, rdx
je 0x45c270
mov r8d, 1
mov rcx, r13
call fcn.00404450
jmp 0x45c270
mov r15, qword [r12 + 0x30]
mov rax, qword [rbp - 0x48]
mov qword [rbp + 0x468], rax
mov r12, qword [rbp + 0x428]
mov rax, qword [0x004cc798]
movzx eax, byte [rax]
mov ecx, 0x10
mov edx, 8
call fcn.00404440
test rax, rax
je 0x45c66f
mov rsi, rax
mov eax, dword [rbp - 0x40]
mov qword [rsi], r15
mov qword [rsi + 8], rax
lea rax, [rbp + 0x438]
movups xmm0, xmmword [rax]
movaps xmmword [rbp + 0x470], xmm0
mov rcx, r14
call sub.KERNEL32.dll_UnmapViewOfFile
mov rcx, rbx
call sub.KERNEL32.dll_CloseHandle
movabs rax, 0x8000000000000000
cmp r12, rax
je 0x45c270
mov rcx, qword [rbp + 0x468]
sub rcx, r15
mov qword [rbp + 0x3d8], r12
mov qword [rbp + 0x3e0], r13
movaps xmm0, xmmword [rbp + 0x470]
lea rax, [rbp + 0x3e8]
movups xmmword [rax], xmm0
mov qword [rbp + 0x3f8], 1
mov qword [rbp + 0x400], rsi
mov qword [rbp + 0x408], 1
mov qword [rbp + 0x410], rcx
mov rax, qword [rbp + 0x4b0]
cmp rax, qword [rbp + 0x498]
jne 0x45c214
lea rcx, [rbp + 0x498]
call fcn.0041d640
jmp 0x45c206
mov rcx, rdi
call sub.KERNEL32.dll_CloseHandle
movabs rsi, 0x8000000000000000
movups xmm0, xmmword [rbp + 0x498]
movaps xmmword [rbp - 0x60], xmm0
mov rax, qword [rbp + 0x4a8]
mov qword [rbp - 0x50], rax
movups xmm0, xmmword [rbp + 0x448]
movups xmmword [rbp - 0x48], xmm0
mov rax, qword [rbp + 0x458]
mov qword [rbp - 0x38], rax
mov rdi, qword [0x004a5038]
cmp rdi, rsi
je 0x45c614
mov rbx, qword [0x004a5040]
mov rsi, qword [0x004a5048]
test rsi, rsi
je 0x45c5ee
lea r14, [rbx + 0x28]
jmp 0x45c5b9
add r14, 0x40
dec rsi
je 0x45c5ee
mov rdx, qword [r14 - 0x28]
test rdx, rdx
je 0x45c5d1
mov rcx, qword [r14 - 0x20]
mov r8d, 1
call fcn.00404450
mov rdx, qword [r14 - 8]
test rdx, rdx
je 0x45c5b0
mov rcx, qword [r14]
shl rdx, 4
mov r8d, 8
call fcn.00404450
jmp 0x45c5b0
test rdi, rdi
je 0x45c608
shl rdi, 6
mov r8d, 8
mov rcx, rbx
mov rdx, rdi
call fcn.00404450
lea rcx, [0x004a5050]
call fcn.0040cc70
movaps xmm0, xmmword [rbp - 0x60]
movaps xmm1, xmmword [rbp - 0x50]
movaps xmm2, xmmword [rbp - 0x40]
movups xmmword [0x004a5058], xmm2
movups xmmword [0x004a5048], xmm1
movups xmmword [0x004a5038], xmm0
mov rax, qword [rbp + 0x460]
lea rdx, [rbp + 0x418]
mov rcx, rax
call fcn.0045c750
nop
add rsp, 0x538
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov ecx, 8
mov edx, 0x8c0
call fcn.0047efe0
mov ecx, 8
mov edx, 0x10
call fcn.0047f000
ud2