Function at 0x4b9000
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x178]
cmp r12, qword [r14 + 0x10]
jbe 0x4b968b
push rbp
mov rbp, rsp
sub rsp, 0x1f0
movups xmmword [rsp + 0x1b0], xmm15
movups xmmword [rsp + 0x1c0], xmm15
movups xmmword [rsp + 0x1d0], xmm15
movups xmmword [rsp + 0x1e0], xmm15
movups xmmword [rsp + 0x10e], xmm15
movups xmmword [rsp + 0x11e], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0x10e], rdx
movabs rsi, 0x65747379535c7377
mov qword [rsp + 0x116], rsi
movabs rdi, 0x6e72656b5c32336d
mov qword [rsp + 0x11e], rdi
movabs rdi, 0x6c6c642e32336c65
mov qword [rsp + 0x126], rdi
xor eax, eax
lea rbx, [rsp + 0x10e]
mov ecx, 0x20
call fcn.0044be20
mov qword [rsp + 0x1b8], rbx
mov qword [rsp + 0x1b0], rax
movups xmmword [rsp + 0x12e], xmm15
movups xmmword [rsp + 0x130], xmm15
movups xmmword [rsp + 0x140], xmm15
mov word [rsp + 0x12e], 0x3a43
movabs rdx, 0x73776f646e69575c
mov qword [rsp + 0x130], rdx
movabs rdx, 0x336d65747379535c
mov qword [rsp + 0x138], rdx
movabs rdx, 0x6c656e72656b5c32
mov qword [rsp + 0x140], rdx
movabs rdx, 0x6c6c642e65736162
mov qword [rsp + 0x148], rdx
xor eax, eax
lea rbx, [rsp + 0x12e]
mov ecx, 0x22
nop dword [rax + rax]
call fcn.0044be20
mov qword [rsp + 0x1c8], rbx
mov qword [rsp + 0x1c0], rax
movups xmmword [rsp + 0xee], xmm15
movups xmmword [rsp + 0xfe], xmm15
movabs rdx, 0x6f646e69575c3a43
mov qword [rsp + 0xee], rdx
movabs rdx, 0x65747379535c7377
mov qword [rsp + 0xf6], rdx
movabs rdx, 0x617664615c32336d
mov qword [rsp + 0xfe], rdx
movabs rdx, 0x6c6c642e32336970
mov qword [rsp + 0x106], rdx
xor eax, eax
lea rbx, [rsp + 0xee]
mov ecx, 0x20
nop
call fcn.0044be20
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1d0], rax
movups xmmword [rsp + 0xb1], xmm15
movups xmmword [rsp + 0xbe], xmm15
mov byte [rsp + 0xb1], 0x43
mov dword [rsp + 0xb2], 0x69575c3a
movabs rdx, 0x79535c73776f646e
mov qword [rsp + 0xb6], rdx
movabs rdx, 0x6e5c32336d657473
mov qword [rsp + 0xbe], rdx
movabs rdx, 0x6c6c642e6c6c6474
mov qword [rsp + 0xc6], rdx
xor eax, eax
lea rbx, [rsp + 0xb1]
mov ecx, 0x1d
nop
call fcn.0044be20
mov qword [rsp + 0x1e8], rbx
mov qword [rsp + 0x1e0], rax
xor eax, eax
jmp 0x4b932a
movzx ecx, word [0x00656e64]
mov word [rsp + 0x46], cx
mov rdx, qword [rsp + 0x78]
inc rdx
mov qword [rsp + 0xa8], rdx
lea rbx, [rsp + 0x58]
mov qword [rsp + 0x188], rbx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x180], rbx
lea rbx, [rsp + 0x60]
mov qword [rsp + 0x178], rbx
lea rax, [0x004c56e0]
call fcn.0040c8e0
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x188]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x180]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x20
mov rcx, qword [rsp + 0x178]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x46]
mov word [rsp], cx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.004ac820
xorps xmm15, xmm15
mov r14, qword [0x00657090]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0xa8]
cmp rax, 4
jge 0x4b95d8
mov qword [rsp + 0x78], rax
shl rax, 4
mov qword [rsp + 0xa8], rax
mov rdx, qword [rsp + rax + 0x1b0]
mov rbx, qword [rsp + rax + 0x1b8]
mov rax, rdx
call fcn.00491120
nop dword [rax]
test rdi, rdi
jne 0x4b95c9
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x150], rax
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rsp + rcx + 0x1b0]
mov rbx, qword [rsp + rcx + 0x1b8]
call fcn.004a1f80
test rbx, rbx
jne 0x4b95ba
mov qword [rsp + 0x168], rax
mov dword [rsp + 0x4b], 0
mov byte [rsp + 0x4f], 0
mov byte [rsp + 0x4b], 0x2e
mov dword [rsp + 0x4c], 0x74786574
lea rax, [rsp + 0xce]
lea rbx, [rsp + 0x4b]
mov ecx, 5
call fcn.0044be20
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x68], rbx
mov rdx, qword [rsp + 0x168]
mov rsi, qword [rdx + 0x28]
mov qword [rsp + 0x1a8], rsi
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0xa0], rdx
xor ecx, ecx
jmp 0x4b95e8
mov rax, qword [rsp + 0x158]
jmp 0x4b9415
xor eax, eax
mov ecx, dword [rax + 0x18]
mov rdx, qword [rsp + 0x50]
nop dword [rax]
cmp rdx, rcx
jb 0x4b9685
mov esi, dword [rax + 0x1c]
cmp rcx, rsi
jb 0x4b967a
mov qword [rsp + 0x158], rax
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0x98], rcx
mov rcx, rsi
sub rsi, rdx
sar rsi, 0x3f
and rsi, rcx
mov qword [rsp + 0x90], rsi
mov rdx, qword [rsp + 0xa8]
mov rax, qword [rsp + rdx + 0x1b0]
mov rbx, qword [rsp + rdx + 0x1b8]
call fcn.004b0c80
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0xa0]
sub rdx, rsi
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x150]
add rsi, rdi
test rbx, rbx
jne 0x4b964f
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0x170], rsi
mov rcx, qword [rsp + 0x158]
mov ecx, dword [rcx + 0x14]
add rcx, qword [rax + 0x10]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x80], rdx
mov qword [rsp + 0x60], 0
call fcn.004b89e0
mov qword [rsp + 0x70], rax
movzx ecx, word [0x00656e64]
mov word [rsp + 0x48], cx
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x1a0], rdx
lea rbx, [rsp + 0x80]
mov qword [rsp + 0x198], rbx
lea rsi, [rsp + 0x60]
mov qword [rsp + 0x190], rsi
lea rax, [0x004c56e0]
call fcn.0040c8e0
mov qword [rax], 0xffffffffffffffff
mov rcx, qword [rsp + 0x1a0]
mov qword [rax + 8], rcx
mov rcx, qword [rsp + 0x198]
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], 0x40
mov rcx, qword [rsp + 0x190]
mov qword [rax + 0x20], rcx
movzx ecx, word [rsp + 0x48]
mov word [rsp], cx
mov rcx, qword [rsp + 0x70]
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], 5
mov qword [rsp + 0x20], 5
call fcn.004ac820
xorps xmm15, xmm15
mov r14, qword [0x00657090]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x170]
xor edx, edx
jmp 0x4b9670
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rax, rdi
mov rbx, rsi
add rsp, 0x1f0
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x1f0
pop rbp
ret
inc rcx
cmp rcx, rdx
jge 0x4b9413
mov rdi, qword [rsi + rcx*8]
mov r8, qword [rdi + 8]
cmp rbx, r8
jne 0x4b95e5
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x158], rdi
mov rdx, qword [rdi]
mov rbx, rax
mov rcx, r8
mov rax, rdx
call fcn.00402f60
nop
test al, al
jne 0x4b9409
mov rax, qword [rsp + 0x160]
mov rcx, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x1a8]
jmp 0x4b95e5
mov rax, rbx
mov rbx, rcx
add rsp, 0x1f0
pop rbp
ret
mov rbx, qword [rsp + 0x58]
add rbx, rdx
movzx esi, byte [rcx + rdx]
mov byte [rbx], sil
inc rdx
cmp rdx, rax
jl 0x4b965e
jmp 0x4b925c
mov rax, rsi
nop dword [rax]
call fcn.00461940
call fcn.00461900
nop
call fcn.0045f600
jmp fcn.004b9000