Function at 0x4b9aa0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x178]
cmp r12, qword [r14 + 0x10]
jbe 0x4ba14b
push rbp
mov rbp, rsp
sub rsp, 0x1f0
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
movups xmmword [rsp + 0x1d0], xmm15
movups xmmword [rsp + 0x1e0], xmm15
movups xmmword [rsp + 0x10e], xmm15
movups xmmword [rsp + 0x11e], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0x10e], rdx
movabs rsi, 0x65747379535c7377
mov qword [rsp + 0x116], rsi
movabs rdi, 0x6e72656b5c32336d
mov qword [rsp + 0x11e], rdi
movabs rdi, 0x6c6c642e32336c65
mov qword [rsp + 0x126], rdi
xor eax, eax
lea rbx, [rsp + 0x10e]
mov ecx, 0x20
call fcn.0044bc60
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1b0], rax
movups xmmword [rsp + 0x12e], xmm15
movups xmmword [rsp + 0x130], xmm15
movups xmmword [rsp + 0x140], xmm15
mov word [rsp + 0x12e], 0x3a43
movabs rdx, 0x73776f646e69575c
mov qword [rsp + 0x130], rdx
movabs rdx, 0x336d65747379535c
mov qword [rsp + 0x138], rdx
movabs rdx, 0x6c656e72656b5c32
mov qword [rsp + 0x140], rdx
movabs rdx, 0x6c6c642e65736162
mov qword [rsp + 0x148], rdx
xor eax, eax
lea rbx, [rsp + 0x12e]
mov ecx, 0x22
nop dword [rax + rax]
call fcn.0044bc60
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1c0], rax
movups xmmword [rsp + 0xee], xmm15
movups xmmword [rsp + 0xfe], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0xee], rdx
movabs rdx, 0x65747379535c7377
mov qword [rsp + 0xf6], rdx
movabs rdx, 0x617664615c32336d
mov qword [rsp + 0xfe], rdx
movabs rdx, 0x6c6c642e32336970
mov qword [rsp + 0x106], rdx
xor eax, eax
lea rbx, [rsp + 0xee]
mov ecx, 0x20
nop
call fcn.0044bc60
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1d0], rax
movups xmmword [rsp + 0xb1], xmm15
movups xmmword [rsp + 0xbe], xmm15
mov byte [rsp + 0xb1], 0x43
mov dword [rsp + 0xb2], 0x69575c3a
movabs rdx, 0x79535c73776f646e
mov qword [rsp + 0xb6], rdx
movabs rdx, 0x6e5c32336d657473
mov qword [rsp + 0xbe], rdx
movabs rdx, 0x6c6c642e6c6c6474
mov qword [rsp + 0xc6], rdx
xor eax, eax
lea rbx, [rsp + 0xb1]
mov ecx, 0x1d
nop
call fcn.0044bc60
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1e0], rax
xor eax, eax
jmp 0x4b9dcd
movzx ecx, word [0x00657dc4]
mov word [rsp + 0x46], cx
mov rdx, qword [rsp + 0x68]
inc rdx
mov qword [rsp + 0xa8], rdx
lea rbx, [rsp + 0x70]
mov qword [rsp + 0x188], rbx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x180], rbx
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x178], rbx
lea rax, [0x004c66e0]
call fcn.0040c6a0
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x188]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x180]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x20
mov rcx, qword [rsp + 0x178]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x46]
mov word [rsp], cx
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.004ad2c0
xorps xmm15, xmm15
mov r14, qword [0x00657ff0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0xa8]
cmp rax, 4
jge 0x4ba098
mov qword [rsp + 0x68], rax
shl rax, 4
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + rax + 0x1b0]
mov rbx, qword [rsp + rax + 0x1b8]
mov rax, rdx
nop dword [rax + rax]
call fcn.00490f40
test rdi, rdi
jne 0x4ba089
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x150], rax
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + rcx + 0x1b0]
mov rbx, qword [rsp + rcx + 0x1b8]
call fcn.004a1da0
nop dword [rax + rax]
test rbx, rbx
jne 0x4ba07a
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x4b], 0
mov byte [rsp + 0x4f], 0
mov byte [rsp + 0x4b], 0x2e
mov dword [rsp + 0x4c], 0x74786574
lea rax, [rsp + 0xce]
lea rbx, [rsp + 0x4b]
mov ecx, 5
nop dword [rax]
call fcn.0044bc60
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x58], rbx
mov rdx, qword [rsp + 0x170]
mov rsi, qword [rdx + 0x28]
mov qword [rsp + 0x1a8], rsi
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0xa0], rdx
xor ecx, ecx
jmp 0x4ba0a8
mov rax, qword [rsp + 0x158]
jmp 0x4b9ec5
xor eax, eax
mov ecx, dword [rax + 0x18]
mov rdx, qword [rsp + 0x50]
cmp rdx, rcx
jb 0x4ba145
mov esi, dword [rax + 0x1c]
nop dword [rax]
cmp rcx, rsi
jb 0x4ba13a
mov qword [rsp + 0x158], rax
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x98], rcx
mov rcx, rsi
sub rsi, rdx
sar rsi, 0x3f
and rsi, rcx
mov qword [rsp + 0x90], rsi
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + rdx + 0x1b0]
mov rbx, qword [rsp + rdx + 0x1b8]
call fcn.004b1720
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0xa0]
sub rdx, rsi
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x150]
add rsi, rdi
nop dword [rax]
test rbx, rbx
jne 0x4ba10f
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x168], rsi
mov rcx, qword [rsp + 0x158]
mov ecx, dword [rcx + 0x14]
add rcx, qword [rax + 0x10]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x60], 0
nop dword [rax + rax]
call fcn.004b9480
mov qword [rsp + 0x88], rax
movzx ecx, word [0x00657dc4]
mov word [rsp + 0x48], cx
lea rdx, [rsp + 0x70]
mov qword [rsp + 0x1a0], rdx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x198], rbx
lea rsi, [rsp + 0x60]
mov qword [rsp + 0x190], rsi
lea rax, [0x004c66e0]
call fcn.0040c6a0
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x1a0]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x198]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x40
mov rcx, qword [rsp + 0x190]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x48]
mov word [rsp], cx
mov rcx, qword [rsp + 0x88]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.004ad2c0
xorps xmm15, xmm15
mov r14, qword [0x00657ff0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x168]
xor edx, edx
jmp 0x4ba130
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rax, rdi
mov rbx, rsi
add rsp, 0x1f0
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x1f0
pop rbp
ret
inc rcx
cmp rcx, rdx
jge 0x4b9ec3
mov rdi, qword [rsi + rcx*8]
mov r8, qword [rdi + 8]
cmp rbx, r8
jne 0x4ba0a5
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x158], rdi
mov rdx, qword [rdi]
mov rbx, rax
mov rcx, r8
mov rax, rdx
call fcn.00402f60
nop
test al, al
jne 0x4b9eb9
mov rax, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x1a8]
jmp 0x4ba0a5
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rbx, qword [rsp + 0x70]
add rbx, rdx
movzx esi, byte [rcx + rdx]
mov byte [rbx], sil
inc rdx
cmp rdx, rax
jl 0x4ba11e
jmp 0x4b9cfc
mov rax, rsi
nop dword [rax]
call fcn.00461760
call fcn.00461720
nop
call fcn.0045f420
jmp fcn.004b9aa0