Function at 0x644ee0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0xf0]
cmp r12, qword [r14 + 0x10]
jbe 0x645426
push rbp
mov rbp, rsp
sub rsp, 0x168
mov byte [rsp + 0x178], al
mov byte [rsp + 0x179], bl
mov qword [rsp + 0x188], rdi
mov qword [rsp + 0x180], rcx
lea rax, [0x0066e460]
xor ebx, ebx
mov rcx, rdi
call fcn.0044b9c0
mov qword [rsp + 0x98], rax
movups xmmword [rsp + 0xa0], xmm15
movups xmmword [rsp + 0xb0], xmm15
movups xmmword [rsp + 0xc0], xmm15
mov rbx, qword [rsp + 0x188]
cmp rbx, 8
jg 0x644fa3
movups xmmword [rsp + 0xd0], xmm15
lea rdi, [rsp + 0xd8]
lea rdi, [rdi - 0x30]
nop word [rax + rax]
nop dword [rax + rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.00467859
mov rbp, qword [rbp]
lea rdx, [rsp + 0xd0]
mov qword [rsp + 0xb0], rdx
lea rax, [0x0067cac0]
lea rcx, [rsp + 0xa0]
call fcn.0040e180
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x188]
xor edx, edx
xor ebx, ebx
mov rsi, qword [rsp + 0x98]
mov rdi, rcx
xor r8d, r8d
jmp 0x644ff4
mov rdi, rcx
mov r8, rbx
mov rcx, qword [rsp + 0x68]
mov rbx, rsi
mov rsi, rax
mov rax, qword [rsp + 0x80]
test rcx, rcx
jle 0x64535a
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x58], rdx
lea r9, [rcx - 1]
mov qword [rsp + 0x68], r9
mov r10, r9
shl r9, 4
mov r11, qword [rsp + 0x180]
mov r12, qword [r11 + r9 + 8]
mov qword [rsp + 0x60], r12
mov r9, qword [r11 + r9]
mov qword [rsp + 0x90], r9
movzx r13d, byte [rsp + 0x179]
test r13b, r13b
je 0x645059
xor ecx, ecx
jmp 0x6450d0
mov qword [rsp], r9
mov qword [rsp + 8], r12
mov byte [rsp + 0x10], 0
call fcn.00403d60
xorps xmm15, xmm15
mov r14, qword [0x009dd8a0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x18], 0xffffffffffffffff
setne al
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x90]
mov r10, qword [rsp + 0x68]
mov r11, qword [rsp + 0x180]
mov r12, qword [rsp + 0x60]
movzx r13d, byte [rsp + 0x179]
mov ecx, eax
mov rax, qword [rsp + 0x80]
test cl, cl
je 0x645115
nop
lea rax, [0x00687cc0]
nop dword [rax]
call fcn.0040d680
mov qword [rax + 8], 0x27
lea rcx, [0x006d4883]
mov qword [rax], rcx
lea rdx, [0x007416a0]
mov rsi, rax
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x78]
jmp 0x644fdb
mov rax, r9
mov rbx, r12
lea rcx, [0x0073e7a8]
mov edi, 1
call fcn.004d2140
test rax, rax
jne 0x645180
mov rbx, qword [rsp + 0x60]
nop word [rax + rax]
nop
cmp rbx, 1
jb 0x645418
lea rdx, [rbx - 1]
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and edx, 1
mov r8, qword [rsp + 0x90]
lea rax, [r8 + rdx]
lea rcx, [0x0073e7a8]
mov edi, 1
mov rbx, rsi
call fcn.004d2140
inc rax
nop
test rax, rax
jge 0x64522b
mov rdx, qword [rsp + 0x60]
test rdx, rdx
je 0x64520a
mov rbx, qword [rsp + 0x48]
inc rbx
mov rcx, qword [rsp + 0x50]
cmp rcx, rbx
jb 0x6451ac
mov rax, qword [rsp + 0x78]
jmp 0x6451ca
mov rax, qword [rsp + 0x78]
mov edi, 1
lea rsi, [0x0066e460]
nop dword [rax]
call fcn.0044baa0
mov rdx, qword [rsp + 0x60]
lea r8, [rbx - 1]
shl r8, 4
mov qword [rax + r8 + 8], rdx
cmp dword [0x009dda80], 0
nop
jne 0x6451ec
mov rdx, qword [rsp + 0x90]
jmp 0x645204
call fcn.004671c0
mov rdx, qword [rsp + 0x90]
mov qword [r11], rdx
mov r9, qword [r8 + rax]
mov qword [r11 + 8], r9
mov qword [rax + r8], rdx
jmp 0x645219
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x88]
jmp 0x644fdb
mov rdx, qword [rsp + 0x60]
cmp rax, rdx
ja 0x645410
movzx esi, byte [rsp + 0x178]
test sil, sil
jne 0x645250
mov rcx, qword [rsp + 0x90]
jmp 0x64526b
mov rbx, rax
mov rax, qword [rsp + 0x90]
nop dword [rax + rax]
call fcn.004d0d00
mov rcx, rax
mov rax, rbx
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x70], rcx
mov rbx, qword [rsp + 0x80]
mov rdi, rax
lea rax, [0x0067cac0]
call fcn.00412420
cmp byte [rax], 0
je 0x6452b2
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x78]
jmp 0x644fdb
lea rax, [0x0067cac0]
mov rbx, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x40]
call fcn.00412bc0
mov byte [rax], 1
mov rbx, qword [rsp + 0x48]
inc rbx
mov rcx, qword [rsp + 0x50]
cmp rcx, rbx
jb 0x6452ec
mov rax, qword [rsp + 0x78]
jmp 0x645305
mov rax, qword [rsp + 0x78]
mov edi, 1
lea rsi, [0x0066e460]
nop dword [rax]
call fcn.0044baa0
lea rdx, [rbx - 1]
shl rdx, 4
mov r8, qword [rsp + 0x60]
mov qword [rax + rdx + 8], r8
cmp dword [0x009dda80], 0
nop
jne 0x64532c
mov r8, qword [rsp + 0x90]
jmp 0x645344
call fcn.004671c0
mov r8, qword [rsp + 0x90]
mov qword [r11], r8
mov r9, qword [rdx + rax]
mov qword [r11 + 8], r9
mov qword [rax + rdx], r8
mov rdx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x88]
jmp 0x644fdb
xor eax, eax
jmp 0x645369
mov qword [rsi + r8], r11
lea rax, [r9 + 1]
mov r8, rcx
mov rcx, r8
shr r8, 1
cmp rax, r8
jge 0x6453f0
mov r8, rcx
sub r8, rax
dec r8
mov r9, rax
shl rax, 4
mov r10, qword [rax + rsi + 8]
mov r11, qword [rax + rsi]
cmp rcx, r8
jbe 0x645408
shl r8, 4
mov r12, qword [rsi + r8 + 8]
mov r13, qword [rsi + r8]
mov qword [rsi + rax + 8], r12
cmp dword [0x009dda80], 0
je 0x6453c3
mov r12, r11
call fcn.004671c0
mov qword [r11], r13
mov r15, qword [rax + rsi]
mov qword [r11 + 8], r15
mov r11, r12
mov qword [rsi + rax], r13
mov qword [rsi + r8 + 8], r10
cmp dword [0x009dda80], 0
je 0x64535e
mov rax, r11
call fcn.004671c0
mov qword [r11], rax
mov r10, qword [rsi + r8]
mov qword [r11 + 8], r10
mov r11, rax
jmp 0x64535e
mov rax, rsi
mov rsi, rbx
mov rbx, rcx
mov rcx, rdi
mov rdi, rdx
add rsp, 0x168
pop rbp
ret
mov rax, r8
call fcn.00467560
mov rcx, rax
call fcn.004675a0
mov eax, 1
xor ecx, ecx
nop
call fcn.00467620
nop
mov byte [rsp + 8], al
mov byte [rsp + 9], bl
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], rsi
nop dword [rax]
call fcn.004652a0
movzx eax, byte [rsp + 8]
movzx ebx, byte [rsp + 9]
mov rcx, qword [rsp + 0x10]
mov rdi, qword [rsp + 0x18]
mov rsi, qword [rsp + 0x20]
nop
jmp fcn.00644ee0