Function at 0x4b9020
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x4b9511
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x128], r9
mov rdx, qword [rsp + 0xe8]
lea rbx, [rdx - 1]
mov rsi, r10
sub r10, rdx
cmp rdx, rbx
jbe 0x4b9505
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x128], r9
mov qword [rsp + 0x138], r11
mov qword [rsp + 0xa8], rsi
mov qword [rsp + 0x120], r8
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x108], rcx
mov qword [rsp + 0xf8], rax
mov rcx, qword [rsp + 0xe0]
mov rbx, qword [rcx + rdx*8 - 8]
mov qword [rsp + 0x70], rbx
lea rdi, [rsi + 1]
mov qword [rsp + 0x90], rdi
nop
mov rax, rdx
call fcn.004b2540
mov qword [rsp + 0xc0], rax
mov rcx, qword [rax]
mov qword [rsp + 0xc8], rcx
mov rdx, qword [rax + 8]
mov qword [rsp + 0x78], rdx
mov rbx, qword [rax + 0x10]
mov qword [rsp + 0x80], rbx
mov qword [rsp], rcx
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rbx
mov rsi, qword [rsp + 0xe0]
mov qword [rsp + 0x18], rsi
mov rsi, qword [rsp + 0xe8]
mov qword [rsp + 0x20], rsi
mov rdi, qword [rsp + 0xf0]
mov qword [rsp + 0x28], rdi
mov rdi, qword [rsp + 0x70]
bsr rdi, rdi
mov r8, 0xffffffffffffffff
cmove rdi, r8
add rdi, 0xffffffffffffffc1
neg rdi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x30], rdi
call fcn.004bb640
xorps xmm15, xmm15
mov r14, qword [0x0069c660]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x90]
nop dword [rax]
cmp rdx, rbx
jl 0x4b9195
jb 0x4b94fb
mov rax, qword [rsp + 0x110]
jmp 0x4b91ea
mov rcx, qword [rsp + 0xa8]
nop dword [rax]
test rcx, rcx
jne 0x4b91c5
lea rax, [0x004fd2a0]
mov ebx, 1
mov rcx, rbx
call fcn.0044c180
mov edx, 1
mov ebx, 1
jmp 0x4b91ea
lea rdx, [rcx + 5]
mov qword [rsp + 0x60], rdx
lea rax, [0x004fd2a0]
mov rcx, rdx
call fcn.0044c180
mov rdx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x90]
mov rcx, qword [rsp + 0xa8]
cmp rcx, rdx
ja 0x4b94f6
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0xb8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov rbx, qword [rsp + 0x128]
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rcx
mov rbx, qword [rsp + 0x138]
mov qword [rsp + 0x28], rbx
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x30], rbx
call fcn.004bb640
xorps xmm15, xmm15
mov r14, qword [0x0069c660]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x50]
cmp rax, rcx
jae 0x4b94f1
mov r12, qword [rsp + 0x38]
mov rdi, qword [rsp + 0xb8]
mov qword [rdi + rax*8], r12
mov r12, qword [rsp + 0x108]
test r12, r12
je 0x4b92ba
mov r13, qword [rsp + 0xf8]
lea r15, [r13 + r12*8]
lea r15, [r15 - 8]
mov r8, qword [rsp + 0x60]
lea rax, [rdi + r8*8]
lea rax, [rax - 8]
cmp rax, r15
jne 0x4b92c7
xor r12d, r12d
xor r13d, r13d
jmp 0x4b92c7
mov r8, qword [rsp + 0x60]
mov r13, qword [rsp + 0xf8]
mov rbx, qword [rsp + 0x98]
lea r15, [rbx + 1]
cmp r12, r15
jl 0x4b92e5
jae 0x4b9367
nop
jmp 0x4b94e6
test rbx, rbx
jne 0x4b9322
lea rax, [0x004fd2a0]
mov ebx, 1
mov rcx, rbx
call fcn.0044c180
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x60]
mov r12d, 1
mov r13, rax
mov r15d, 1
nop
jmp 0x4b9367
mov qword [rsp + 0x88], r15
lea rcx, [rbx + 5]
mov qword [rsp + 0x58], rcx
lea rax, [0x004fd2a0]
mov rbx, r15
nop dword [rax]
call fcn.0044c180
mov rcx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x60]
mov r12, qword [rsp + 0x58]
mov r13, rax
mov r15, qword [rsp + 0x88]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r15
mov qword [rsp + 0xb0], r13
mov rdx, qword [rsp + 0xe8]
cmp rdx, 0x64
jge 0x4b93af
mov rax, r13
mov rbx, r15
mov rsi, rcx
mov r9, qword [rsp + 0xc8]
mov r10, qword [rsp + 0x78]
mov r11, qword [rsp + 0x80]
mov rcx, r12
call fcn.004b9580
jmp 0x4b93d5
mov rax, r13
mov rbx, r15
mov rsi, rcx
mov r9, qword [rsp + 0xc8]
mov r10, qword [rsp + 0x78]
mov r11, qword [rsp + 0x80]
mov rcx, r12
call fcn.004b9c80
nop
lea rax, [0x00617000]
lea rbx, [0x00516e40]
mov rcx, qword [rsp + 0xc0]
call fcn.0046e7a0
nop
mov rdx, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0x48]
nop
jmp 0x4b9405
dec rsi
test rsi, rsi
jle 0x4b9414
mov rax, qword [rdx + rsi*8 - 8]
test rax, rax
je 0x4b9402
mov rax, qword [rsp + 0x58]
nop dword [rax]
cmp rsi, rax
ja 0x4b94db
mov qword [rsp + 0xa0], rsi
mov rax, qword [rsp + 0xb8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdx
mov rbx, qword [rsp + 0x68]
mov qword [rsp + 0x30], rbx
call fcn.004bb6a0
xorps xmm15, xmm15
mov r14, qword [0x0069c660]
mov r14, qword gs:[r14]
mov r14, qword [r14]
nop
mov rax, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x50]
jmp 0x4b9494
dec rcx
test rcx, rcx
jle 0x4b94a5
mov r9, qword [rax + rcx*8 - 8]
nop
test r9, r9
je 0x4b9491
mov rdx, qword [rsp + 0x60]
cmp rcx, rdx
ja 0x4b94d6
mov rbx, qword [rsp + 0xa0]
mov rdi, rax
mov rsi, rcx
mov r8, rdx
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x58]
add rsp, 0xd0
pop rbp
ret
call fcn.00467240
mov rcx, rsi
mov rdx, rax
call fcn.00467240
mov rcx, r15
mov rdx, r12
call fcn.00467240
call fcn.004671c0
call fcn.00467240
mov rcx, rbx
nop
call fcn.00467240
mov rax, rbx
mov rcx, rdx
call fcn.004671c0
nop
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x60], r11
nop
call fcn.00464ee0
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
jmp fcn.004b9020