Function at 0x441f00
Capabilities:
Access peb ldr_data

Disassembly:
cmp rsp, qword [r14 + 0x10]
jbe 0x442370
sub rsp, 0x58
mov qword [rsp + 0x50], rbp
lea rbp, [rsp + 0x50]
nop dword [rax + rax]
test rax, rax
je 0x44235c
mov qword [rsp + 0x60], rax
lea rcx, [rax + 0x58]
mov qword [rsp + 0x30], rcx
nop
mov rax, rcx
nop dword [rax + rax]
call fcn.00447840
mov rcx, qword [rsp + 0x60]
cmp dword [rcx + 0x1c], 0
jne 0x44233d
lea rax, [fcn.00441f00]
lea rdx, [rcx + 0x10]
mov qword [rsp + 0x48], rdx
mov qword [rsp], rdx
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rax
call fcn.0049cee0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
nop
mov rax, r14
mov rbx, qword [rsp + 0x48]
call fcn.00480e40
mov rax, qword [rsp + 0x60]
mov dword [rax + 0x1c], 1
mov qword [rsp + 0x18], 0
jmp 0x441fe5
mov qword [rsp + 0x40], rax
mov byte [rcx + 0x35], 0
mov rbx, qword [rsp + 0x48]
call fcn.00480d00
nop
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x40]
mov qword [rdx + 0xa0], rcx
nop
mov qword [rsp + 0x18], rdx
mov rax, qword [rsp + 0x60]
jmp 0x4420b9
mov rbx, rax
mov esi, 1
xor ecx, ecx
test rcx, rcx
je 0x4421ab
mov qword [rsp + 0x28], rcx
mov rdx, qword [rcx + 0x18]
test rdx, rdx
je 0x44204f
mov rax, qword [rbx + 0x20]
mov rbx, rdx
call fcn.0044ec20
cmp dword [0x006b6e40], 0
nop
jne 0x442031
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 0x18], 0
jmp 0x442045
mov rcx, qword [rsp + 0x28]
lea rdi, [rcx + 0x18]
xor edx, edx
nop dword [rax]
call fcn.0049b7e0
mov rbx, qword [rsp + 0x60]
mov esi, 1
cmp qword [rcx + 0x28], 0
je 0x442086
call fcn.0049b520
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 0x28], rax
mov rbx, qword [rsp + 0x60]
mov esi, 1
mov rax, qword [rcx]
test byte [rax], al
cmp dword [0x006b6e40], 0
jne 0x4420a5
mov qword [rax + 0x88], rcx
nop dword [rax + rax]
jmp 0x441fb5
lea rdi, [rax + 0x88]
call fcn.0049b7c0
jmp 0x441fb5
mov rax, rbx
mov rcx, qword [rax + 0x38]
nop dword [rax]
test rcx, rcx
je 0x441fea
lea rdi, [rax + 0x38]
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x44211a
cmp dword [0x006b6e40], 0
jne 0x4420f5
mov qword [rdx + 0x10], 0
mov qword [rax + 0x38], rdx
mov qword [rcx + 8], 0
jmp 0x44213a
lea rsi, [rdx + 0x10]
mov rbx, rdi
mov rdi, rsi
xor r8d, r8d
call fcn.0049b840
mov rdi, rbx
call fcn.0049b7e0
lea rdi, [rcx + 8]
call fcn.0049b840
jmp 0x44213a
cmp dword [0x006b6e40], 0
jne 0x44212a
movups xmmword [rax + 0x38], xmm15
jmp 0x44213a
xor edx, edx
call fcn.0049b7e0
lea rdi, [rax + 0x40]
call fcn.0049b7e0
cmp byte [rcx + 0x34], 0
nop
je 0x44215f
mov rdx, qword [rcx]
mov rbx, rax
xor eax, eax
mov esi, 1
lock cmpxchg dword [rdx + 0x178], esi
sete dl
xor edx, 1
jmp 0x442169
mov rbx, rax
mov esi, 1
xor edx, edx
test dl, dl
jne 0x4420b6
jmp 0x441ff4
mov qword [rsp + 0x38], rax
mov byte [rcx + 0x35], 0
mov rbx, qword [rsp + 0x48]
call fcn.00480d00
nop
mov rcx, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x38]
mov qword [rdx + 0xa0], rcx
nop
mov qword [rsp + 0x18], rdx
mov rbx, qword [rsp + 0x60]
mov esi, 1
jmp 0x442245
xor ecx, ecx
test rcx, rcx
je 0x4422f1
cmp dword [0x006b6e40], 0
jne 0x4421ce
mov qword [rcx + 0x18], 0
jmp 0x4421d9
lea rdi, [rcx + 0x18]
xor edx, edx
call fcn.0049b7e0
cmp qword [rcx + 0x28], 0
nop
je 0x442217
mov qword [rsp + 0x20], rcx
call fcn.0049b520
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp]
mov rcx, qword [rsp + 0x20]
mov qword [rcx + 0x28], rax
mov rbx, qword [rsp + 0x60]
mov esi, 1
mov rax, qword [rcx]
test byte [rax], al
cmp dword [0x006b6e40], 0
jne 0x442231
mov qword [rax + 0x88], rcx
jmp 0x442176
lea rdi, [rax + 0x88]
call fcn.0049b7c0
nop dword [rax]
jmp 0x442176
mov rcx, qword [rbx + 0x48]
test rcx, rcx
je 0x4421b0
lea rdi, [rbx + 0x48]
mov rdx, qword [rcx + 8]
test rdx, rdx
je 0x4422a7
cmp dword [0x006b6e40], 0
jne 0x44227e
mov qword [rdx + 0x10], 0
mov qword [rbx + 0x48], rdx
mov qword [rcx + 8], 0
jmp 0x4422c7
lea r8, [rdx + 0x10]
mov rax, rdi
mov rdi, r8
xor r9d, r9d
call fcn.0049b860
mov rdi, rax
call fcn.0049b7e0
lea rdi, [rcx + 8]
nop dword [rax]
call fcn.0049b860
jmp 0x4422c7
cmp dword [0x006b6e40], 0
jne 0x4422b7
movups xmmword [rbx + 0x48], xmm15
jmp 0x4422c7
xor edx, edx
call fcn.0049b7e0
lea rdi, [rbx + 0x50]
call fcn.0049b7e0
cmp byte [rcx + 0x34], 0
je 0x4422e2
mov rdx, qword [rcx]
xor eax, eax
lock cmpxchg dword [rdx + 0x178], esi
sete dl
xor edx, 1
jmp 0x4422e4
xor edx, edx
test dl, dl
jne 0x442245
jmp 0x4421b2
nop
nop
mov rax, qword [rsp + 0x30]
call fcn.00447a60
jmp 0x442314
mov qword [rax + 0xa0], 0
mov ebx, 3
call fcn.004733a0
mov rax, qword [rsp + 0x18]
test rax, rax
je 0x442333
nop
nop
test rax, rax
je 0x4422ff
mov rcx, qword [rax + 0xa0]
mov qword [rsp + 0x18], rcx
jmp 0x4422ff
mov rbp, qword [rsp + 0x50]
add rsp, 0x58
ret
nop
nop
mov rax, qword [rsp + 0x30]
call fcn.00447a60
lea rax, [0x0052db40]
lea rbx, [0x005bfc08]
call fcn.004701a0
lea rax, [0x0052db40]
lea rbx, [0x005bfbf8]
call fcn.004701a0
nop
mov qword [rsp + 8], rax
call fcn.00499460
mov rax, qword [rsp + 8]
nop
jmp fcn.00441f00