Function at 0x4c91a0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x1c8]
cmp r12, qword [r14 + 0x10]
jbe 0x4ca6df
push rbp
mov rbp, rsp
sub rsp, 0x240
mov qword [rsp + 0x258], rbx
mov qword [rsp + 0x260], rcx
test r8, r8
je 0x4c91fa
cmp qword [r8 + 0x18], 0
jne 0x4c91fa
lea rax, [0x006397bf]
mov ebx, 0x34
xor ecx, ecx
xor edi, edi
mov rsi, rdi
call fcn.004b3120
add rsp, 0x240
pop rbp
ret
nop word [rax + rax]
test rdi, rdi
je 0x4c92a3
mov qword [rsp + 0x250], rax
mov qword [rsp + 0x270], rsi
mov qword [rsp + 0x278], r8
test rsi, rsi
je 0x4c92df
mov rdx, qword [rsi + 0x38]
bt edx, 7
jae 0x4c92df
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0x158], rcx
mov qword [rsp + 0x150], rbx
mov rax, rbx
mov rbx, rcx
mov rcx, rdi
call fcn.004ceae0
nop
test al, al
jne 0x4c9296
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x150]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
jmp 0x4c92df
xor eax, eax
xor ebx, ebx
add rsp, 0x240
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x240
pop rbp
ret
mov rax, rbx
mov rbx, rcx
mov rcx, rdx
call fcn.0048d980
mov rsi, qword [rsp + 0x270]
mov r8, qword [rsp + 0x278]
mov rdi, rcx
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x250]
mov rdx, rdi
and edi, 0x1f
mov qword [rsp + 0xa0], rdi
nop
cmp rdi, 0x14
je 0x4c9304
cmp rdi, 0x16
jne 0x4c937f
nop
cmp rdi, 0x14
ja 0x4c9320
lea r9, [rdi - 0x12]
cmp r9, 1
jbe 0x4c934a
cmp rdi, 0x14
je 0x4c932c
jmp 0x4ca6a5
cmp rdi, 0x16
jbe 0x4c934a
cmp rdi, 0x17
jne 0x4c9340
cmp qword [rcx], 0
setne dil
jmp 0x4c9369
cmp rdi, 0x1a
jne 0x4ca6a5
bt edx, 9
jb 0x4c92b0
bt edx, 7
jae 0x4c935f
mov rdi, qword [rcx]
jmp 0x4c9362
mov rdi, rcx
test rdi, rdi
setne dil
test dil, dil
jne 0x4c92b0
xor eax, eax
xor ebx, ebx
add rsp, 0x240
pop rbp
ret
mov qword [rsp + 0x98], rdx
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xb0], rbx
test rdx, rdx
je 0x4c93b1
bt edx, 9
jb 0x4c93b1
test rdx, rdx
mov r9, rbx
lea r10, [0x00677120]
jmp 0x4c9405
mov rax, rbx
mov rbx, rcx
mov rcx, rdx
call fcn.00490080
mov rcx, qword [rsp + 0x98]
test rcx, rcx
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, rax
mov rax, qword [rsp + 0x250]
je 0x4ca66f
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0x50], r10
nop dword [rax + rax]
test rdx, 0x60
je 0x4c942e
xor r11d, r11d
jmp 0x4c9490
mov rdx, qword [0x0086aba0]
mov rcx, qword [0x0086aba8]
mov rsi, qword [r10 + 0x78]
mov rax, rbx
mov rbx, rdx
call rsi
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x50]
mov r11d, eax
mov rax, qword [rsp + 0x250]
test r11b, r11b
jne 0x4c9c09
bt edx, 8
jb 0x4c94ab
test rdx, 0x60
jmp 0x4c9592
mov rax, r9
mov rbx, rcx
mov rcx, rdx
call fcn.0048c2e0
nop dword [rax]
test rcx, rcx
je 0x4ca63a
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x150], rax
test rcx, 0x60
jne 0x4c9534
bt ecx, 9
jb 0x4c94f9
lea rdx, [0x00677120]
jmp 0x4c9504
call fcn.00490080
mov rdx, rax
mov rax, rbx
mov rbx, qword [0x0086aba0]
mov rcx, qword [0x0086aba8]
mov rdx, qword [rdx + 0x78]
call rdx
mov rcx, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x158]
mov edx, eax
mov rax, qword [rsp + 0x150]
jmp 0x4c9536
xor edx, edx
test dl, dl
jne 0x4c9bd8
mov rcx, qword [rsp + 0x98]
test rcx, 0x60
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x50]
je 0x4c9599
xor r11d, r11d
jmp 0x4c9600
mov rdx, qword [0x0086abc0]
mov rcx, qword [0x0086abc8]
mov rsi, qword [r10 + 0x78]
mov rax, rbx
mov rbx, rdx
call rsi
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x50]
mov r11d, eax
mov rax, qword [rsp + 0x250]
nop dword [rax + rax]
test r11b, r11b
je 0x4c9645
mov rax, r9
mov rbx, rcx
mov rcx, rdx
mov edi, 1
call fcn.0048de20
nop dword [rax + rax]
test rax, rax
je 0x4ca62e
mov qword [rsp + 0x110], rbx
mov rdx, qword [0x0082f5b0]
mov rsi, qword [rdx]
mov r8d, dword [rax + 0x10]
nop
jmp 0x4ca53b
bt edx, 8
jae 0x4c974e
mov rax, r9
mov rbx, rcx
mov rcx, rdx
call fcn.0048c2e0
nop dword [rax]
test rcx, rcx
je 0x4ca506
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x150], rax
test rcx, 0x60
jne 0x4c96d4
bt ecx, 9
jb 0x4c9699
lea rdx, [0x00677120]
jmp 0x4c96a4
call fcn.00490080
mov rdx, rax
mov rax, rbx
mov rbx, qword [0x0086abc0]
mov rcx, qword [0x0086abc8]
mov rdx, qword [rdx + 0x78]
call rdx
mov rcx, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x158]
mov edx, eax
mov rax, qword [rsp + 0x150]
jmp 0x4c96d6
xor edx, edx
test dl, dl
je 0x4c9709
mov edi, 1
nop
call fcn.0048de20
test rax, rax
je 0x4ca4fa
mov qword [rsp + 0x108], rbx
mov rdx, qword [0x0082f5d0]
mov rsi, qword [rdx]
mov r8d, dword [rax + 0x10]
jmp 0x4ca3cf
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x50]
cmp rdi, 0x17
je 0x4c975a
cmp rdi, 0x11
jne 0x4c97c2
mov rcx, qword [r10 + 0x48]
mov rax, rbx
call rcx
mov rcx, qword [rax + 0x98]
mov rax, rbx
call rcx
cmp rax, 8
setne cl
mov rax, qword [rsp + 0x250]
mov rdx, qword [rsp + 0x98]
mov rbx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x270]
mov rdi, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x50]
mov r11d, ecx
mov rcx, qword [rsp + 0xb8]
nop
jmp 0x4c97c5
xor r11d, r11d
test r11b, r11b
je 0x4c9825
cmp rdi, 0x17
jne 0x4c97d6
mov r10, qword [rcx + 8]
jmp 0x4c9818
mov rax, r9
mov rbx, rcx
mov rcx, rdx
nop
call fcn.0048e9a0
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x270]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, rax
mov rax, qword [rsp + 0x250]
mov qword [rsp + 0x58], r10
xor ebx, ebx
nop
jmp 0x4ca36f
mov rax, r10
call fcn.004d34e0
test rbx, rbx
jne 0x4c9bc9
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x128], rcx
movups xmmword [rsp + 0xc8], xmm15
movups xmmword [rsp + 0xd0], xmm15
movups xmmword [rsp + 0xe0], xmm15
movups xmmword [rsp + 0xf0], xmm15
mov rdx, qword [rsp + 0x278]
nop word [rax + rax]
test rdx, rdx
jne 0x4c9970
mov rdx, qword [rax]
test rdx, rdx
je 0x4c9a70
mov r8, qword [rdx + 0x20]
test r8, r8
je 0x4c98cf
mov r9, qword [rdx + 0x18]
mov r10, qword [rdx + 0x28]
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0xc8], r10
mov qword [rsp + 0xd0], rdx
mov qword [rsp + 0xd8], r9
mov qword [rsp + 0xe0], r8
jmp 0x4c9a70
mov rax, rdx
mov rbx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x98]
xor esi, esi
call fcn.004d55e0
mov edi, 1
call fcn.0048de20
lea rdx, [0x005f68c0]
cmp rax, rdx
jne 0x4c9918
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
mov r9, qword [rbx + 0x10]
mov r10, qword [rbx + 0x18]
jmp 0x4c992f
mov r10d, 0
mov r8d, 0
mov r9d, 0
mov edx, 0
jne 0x4c9956
test r10, r10
je 0x4c9956
mov qword [rsp + 0xc8], rdx
mov qword [rsp + 0xd0], r8
mov qword [rsp + 0xd8], r9
mov qword [rsp + 0xe0], r10
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x78]
jmp 0x4c9a70
mov r8, qword [rdx]
mov r9, qword [rdx + 8]
mov r10, qword [rdx + 0x10]
mov r11, qword [rdx + 0x18]
mov r12, qword [rsp + 0xe8]
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], r9
mov qword [rsp + 0xd8], r10
mov qword [rsp + 0xe0], r11
mov rdi, qword [rdx + 0x28]
mov rdx, qword [rdx + 0x20]
test rdi, rdi
ja 0x4c99bc
mov rsi, rdi
xor r8d, r8d
jmp 0x4c99fe
mov qword [rsp + 0x88], rdi
mov qword [rsp + 0x148], rdx
mov rax, r12
mov rbx, rdi
xor ecx, ecx
lea rsi, [0x005f6960]
nop dword [rax + rax]
call fcn.0044cc00
mov rdx, qword [rsp + 0x148]
mov rsi, qword [rsp + 0x88]
mov rdi, rbx
mov r12, rax
mov r8, rcx
mov qword [rsp + 0x88], r8
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x148], r12
lea rax, [0x005f6960]
mov rbx, r12
mov rcx, rdi
mov rdi, rdx
call fcn.00414340
mov rdx, qword [rsp + 0x148]
mov qword [rsp + 0xe8], rdx
mov rdx, qword [rsp + 0x80]
mov qword [rsp + 0xf0], rdx
mov rdx, qword [rsp + 0x88]
mov qword [rsp + 0xf8], rdx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x78]
cmp qword [rsp + 0xe0], 0
jne 0x4c9ab8
mov rdx, qword [rsp + 0x270]
test rdx, rdx
je 0x4c9ab8
mov r8, qword [rdx + 0x28]
mov r9, qword [rdx + 0x30]
mov r10, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x20]
mov qword [rsp + 0xc8], r8
mov qword [rsp + 0xd0], r9
mov qword [rsp + 0xd8], r10
mov qword [rsp + 0xe0], rdx
cmp qword [rsp + 0xe0], 0
jne 0x4c9b61
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rcx + 0xb8]
mov rax, qword [rsp + 0xa8]
call rdx
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], 0x5b
call fcn.00403a00
xorps xmm15, xmm15
mov r14, qword [0x008f2d60]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x18]
test rcx, rcx
jl 0x4c9b2a
mov rdx, qword [rsp + 0x60]
nop
cmp rdx, rcx
jae 0x4c9b2f
jmp 0x4ca32d
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x4c9b74
mov rdx, qword [rsp + 0x100]
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0xe0], rcx
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x78]
mov rdx, qword [rax + 0x10]
mov qword [rsp + 0x88], rdx
xor esi, esi
jmp 0x4c9e72
lea rax, [0x005eee40]
nop dword [rax + rax]
call fcn.0040e720
mov rcx, qword [rsp + 0x50]
mov qword [rax], rcx
cmp dword [0x008f2de0], 0
jne 0x4c9ba2
mov rcx, qword [rsp + 0xa8]
nop
jmp 0x4c9bb2
call fcn.004680e0
mov rcx, qword [rsp + 0xa8]
mov qword [r11], rcx
mov qword [rax + 8], rcx
mov rbx, rax
lea rax, [0x00673b60]
add rsp, 0x240
pop rbp
ret
mov rax, rbx
mov rbx, rcx
add rsp, 0x240
pop rbp
ret
mov edi, 1
nop dword [rax]
call fcn.0048de20
test rax, rax
je 0x4c9e63
mov qword [rsp + 0x118], rbx
mov rdx, qword [0x0082f590]
mov rsi, qword [rdx]
mov r8d, dword [rax + 0x10]
jmp 0x4c9d3a
mov rax, r9
mov rbx, rcx
mov rcx, rdx
mov edi, 1
call fcn.0048de20
nop dword [rax]
test rax, rax
je 0x4c9d2e
mov qword [rsp + 0x120], rbx
mov rdx, qword [0x0082f570]
mov rsi, qword [rdx]
mov r8d, dword [rax + 0x10]
mov r9, r8
and r8, rsi
shl r8, 4
mov r10, qword [rdx + r8 + 8]
cmp rax, r10
je 0x4c9c6d
lea r8, [r9 + 1]
test r10, r10
jne 0x4c9c3f
mov rbx, rax
lea rax, [0x0082f570]
call fcn.0040b960
jmp 0x4c9c72
mov rax, qword [rdx + r8 + 0x10]
mov qword [rsp + 0x140], rax
mov rbx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x270]
mov rdi, qword [rsp + 0x278]
mov rax, qword [rsp + 0x50]
call fcn.004cbb60
mov qword [rsp + 0x208], rax
mov qword [rsp + 0x210], rbx
mov qword [rsp + 0x218], rcx
mov qword [rsp + 0x220], rdi
mov qword [rsp + 0x228], rsi
mov qword [rsp + 0x230], r8
mov qword [rsp + 0x238], r9
mov rdx, qword [rsp + 0x208]
mov qword [rsp], rdx
movups xmm0, xmmword [rsp + 0x210]
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x220]
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x230]
movups xmmword [rsp + 0x28], xmm0
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x120]
nop
call fcn.004cbde0
add rsp, 0x240
pop rbp
ret
lea rax, [0x005e9e40]
call fcn.0040b520
mov r9, r8
and r8, rsi
shl r8, 4
mov r10, qword [rdx + r8 + 8]
cmp rax, r10
je 0x4c9d70
lea r8, [r9 + 1]
test r10, r10
jne 0x4c9d3a
mov rbx, rax
lea rax, [0x0082f590]
call fcn.0040b960
mov rbx, qword [rsp + 0x118]
jmp 0x4c9d75
mov rax, qword [rdx + r8 + 0x10]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x90]
bt ecx, 9
jb 0x4c9d9c
lea rcx, [0x00677120]
mov rdx, qword [rsp + 0x150]
jmp 0x4c9db7
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x158]
call fcn.00490080
mov rcx, rax
mov rdx, rbx
mov rax, rcx
mov rbx, rdx
mov rcx, qword [rsp + 0x270]
mov rdi, qword [rsp + 0x278]
call fcn.004cbb60
mov qword [rsp + 0x1d0], rax
mov qword [rsp + 0x1d8], rbx
mov qword [rsp + 0x1e0], rcx
mov qword [rsp + 0x1e8], rdi
mov qword [rsp + 0x1f0], rsi
mov qword [rsp + 0x1f8], r8
mov qword [rsp + 0x200], r9
mov rdx, qword [rsp + 0x1d0]
mov qword [rsp], rdx
movups xmm0, xmmword [rsp + 0x1d8]
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x1e8]
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x1f8]
movups xmmword [rsp + 0x28], xmm0
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x118]
call fcn.004cbde0
add rsp, 0x240
pop rbp
ret
lea rax, [0x005e9e40]
call fcn.0040b520
inc rsi
cmp rsi, rdx
jge 0x4ca01a
mov r8, qword [rax + 0x10]
nop
cmp rsi, r8
jae 0x4ca322
mov r8, qword [rax + 8]
imul r9, rsi, 0x58
mov r10, qword [r9 + r8 + 0x38]
lea r11, [r8 + r9]
bt r10d, 1
nop
jae 0x4c9e6f
mov qword [rsp + 0x138], r8
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x80], r9
mov rax, r11
mov rbx, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0xb8]
mov rdi, qword [rsp + 0x98]
xor esi, esi
call fcn.004d55e0
mov rdx, qword [rsp + 0x138]
mov r8, qword [rsp + 0x80]
mov r9, qword [r8 + rdx + 0x38]
bt r9d, 7
jae 0x4c9f4b
test rcx, rcx
jne 0x4c9f02
mov esi, 1
nop
jmp 0x4c9f4d
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x158], rbx
mov qword [rsp + 0x150], rax
call fcn.004ceae0
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x138]
mov rbx, qword [rsp + 0x158]
mov r8, qword [rsp + 0x80]
mov esi, eax
mov rax, qword [rsp + 0x150]
jmp 0x4c9f4d
xor esi, esi
test sil, sil
je 0x4c9f79
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
jmp 0x4c9e6f
mov r11, rcx
and ecx, 0x1f
nop
cmp rcx, 0x14
jne 0x4c9fb3
cmp qword [rbx], 0
jne 0x4c9fb3
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
jmp 0x4c9e6f
mov rcx, qword [rdx + r8 + 0x28]
mov rdi, qword [rdx + r8 + 0x30]
mov rsi, qword [rdx + r8 + 0x18]
mov r8, qword [rdx + r8 + 0x20]
mov r9, rax
mov r10, rbx
mov rax, qword [rsp + 0x250]
lea rbx, [rsp + 0xc8]
nop dword [rax]
call fcn.004ca740
test rax, rax
jne 0x4ca011
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x68]
jmp 0x4c9e6f
add rsp, 0x240
pop rbp
ret
mov rdx, qword [rax]
nop dword [rax]
test rdx, rdx
je 0x4ca1c3
cmp qword [rsp + 0xd0], 0
jne 0x4ca1b9
cmp qword [rdx + 0x30], 0
nop dword [rax]
jne 0x4ca1af
cmp qword [rdx + 0x20], 0
jne 0x4ca1a5
mov rdx, qword [rsp + 0x250]
mov r8, qword [rdx + 0x78]
nop dword [rax]
test r8, r8
je 0x4ca1cb
mov r9, qword [rdx + 0x70]
dec r8
shl r8, 5
mov r8, qword [r9 + r8 + 8]
nop dword [rax]
test r8, r8
je 0x4ca1cb
mov r8, qword [rsp + 0xf8]
mov r9, qword [rsp + 0xf0]
inc r9
mov r10, qword [rsp + 0xe8]
cmp r8, r9
jae 0x4ca0f8
mov rax, r10
mov rbx, r9
mov rcx, r8
mov edi, 1
lea rsi, [0x005f6960]
nop
call fcn.0044cc00
mov qword [rsp + 0xf8], rcx
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x250]
mov r9, rbx
mov r10, rax
mov rax, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0xf0], r9
lea rsi, [r9 + r9*2]
shl rsi, 4
lea rdi, [rsi + r10]
lea rdi, [rdi - 0x30]
cmp dword [0x008f2de0], 0
je 0x4ca17c
mov qword [rsp + 0x148], r10
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x88], rsi
lea rax, [0x005f6960]
mov rbx, rdi
lea rcx, [0x00674660]
call fcn.00414200
mov rax, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x88]
mov rdi, qword [rsp + 0x130]
mov r10, qword [rsp + 0x148]
lea rsi, [rsi + r10]
lea rsi, [rsi - 0x20]
movups xmm0, xmmword [0x00674660]
movups xmmword [rdi], xmm0
movups xmm0, xmmword [0x00674670]
movups xmmword [rsi], xmm0
movups xmm0, xmmword [0x00674680]
movups xmmword [rsi + 0x10], xmm0
jmp 0x4ca1cb
mov rdx, qword [rsp + 0x250]
jmp 0x4ca1cb
mov rdx, qword [rsp + 0x250]
jmp 0x4ca1cb
mov rdx, qword [rsp + 0x250]
jmp 0x4ca1cb
mov rdx, qword [rsp + 0x250]
mov rax, rdx
lea rbx, [rsp + 0xc8]
call fcn.004cc160
nop dword [rax + rax]
test rax, rax
jne 0x4ca319
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x19
jne 0x4ca22d
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0x98]
nop
call fcn.004cd060
mov r8, rax
mov r9, rbx
jmp 0x4ca2a7
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xb0]
mov rsi, qword [rsp + 0xb8]
mov r8, qword [rsp + 0x98]
call fcn.004cca60
nop
test r8, r8
jne 0x4ca2a7
test rcx, rcx
je 0x4ca287
lea rax, [0x00673b40]
mov rbx, qword [rsp + 0x250]
mov r8d, 1
nop
call fcn.004da6e0
jmp 0x4ca29a
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x250]
call fcn.004daae0
mov r8, qword [rsp + 0x78]
mov r9, qword [rsp + 0x128]
test r8, r8
jne 0x4ca30a
mov rbx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x250]
call fcn.004cc580
test rax, rax
je 0x4ca2e7
add rsp, 0x240
pop rbp
ret
mov rax, qword [rsp + 0x250]
xor ebx, ebx
xor ecx, ecx
mov rdi, rcx
call fcn.004ce1c0
mov rax, rbx
mov rbx, rcx
add rsp, 0x240
pop rbp
ret
mov rax, r8
mov rbx, r9
add rsp, 0x240
pop rbp
ret
add rsp, 0x240
pop rbp
ret
mov rax, rsi
mov rcx, r8
call fcn.004684a0
call fcn.004684e0
mov rbx, qword [rsp + 0x70]
inc rbx
mov rax, qword [rsp + 0x250]
mov rcx, qword [rsp + 0xb8]
mov rdx, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x270]
mov r8, qword [rsp + 0x278]
mov r9, qword [rsp + 0xb0]
mov r10, qword [rsp + 0x58]
cmp rbx, r10
jge 0x4ca3c2
mov qword [rsp + 0x70], rbx
mov rax, r9
mov rdi, rbx
mov rbx, rcx
mov rcx, rdx
call fcn.0048dc60
mov rdi, rcx
mov rsi, qword [rsp + 0x270]
mov r8, qword [rsp + 0x278]
mov rcx, rbx
mov rbx, rax
mov rax, qword [rsp + 0x250]
call fcn.004c91a0
test rax, rax
je 0x4ca332
add rsp, 0x240
pop rbp
ret
xor eax, eax
xor ebx, ebx
add rsp, 0x240
pop rbp
ret
mov r9, r8
and r8, rsi
shl r8, 4
mov r10, qword [rdx + r8 + 8]
nop
cmp rax, r10
je 0x4ca407
lea r8, [r9 + 1]
test r10, r10
jne 0x4ca3cf
mov rbx, rax
lea rax, [0x0082f5d0]
call fcn.0040b960
mov rbx, qword [rsp + 0x108]
jmp 0x4ca40c
mov rax, qword [rdx + r8 + 0x10]
mov qword [rsp + 0x140], rax
mov rcx, qword [rsp + 0x90]
bt ecx, 9
jb 0x4ca433
lea rcx, [0x00677120]
mov rdx, qword [rsp + 0x150]
jmp 0x4ca44e
mov rax, qword [rsp + 0x150]
mov rbx, qword [rsp + 0x158]
call fcn.00490080
mov rcx, rax
mov rdx, rbx
mov rax, rcx
mov rbx, rdx
mov rcx, qword [rsp + 0x270]
mov rdi, qword [rsp + 0x278]
call fcn.004cbb60
mov qword [rsp + 0x160], rax
mov qword [rsp + 0x168], rbx
mov qword [rsp + 0x170], rcx
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x180], rsi
mov qword [rsp + 0x188], r8
mov qword [rsp + 0x190], r9
mov rdx, qword [rsp + 0x160]
mov qword [rsp], rdx
movups xmm0, xmmword [rsp + 0x168]
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x178]
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x188]
movups xmmword [rsp + 0x28], xmm0
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x108]
call fcn.004cc080
add rsp, 0x240
pop rbp
ret
lea rax, [0x005eb640]
call fcn.0040b520
lea rax, [0x005f6320]
call fcn.0040e720
mov qword [rax + 8], 0x1a
lea rcx, [0x006322f2]
mov qword [rax], rcx
mov qword [rax + 0x10], 0
mov rbx, rax
lea rax, [0x005e5020]
call fcn.00437520
mov r9, r8
and r8, rsi
shl r8, 4
mov r10, qword [rdx + r8 + 8]
cmp rax, r10
je 0x4ca569
lea r8, [r9 + 1]
test r10, r10
jne 0x4ca53b
mov rbx, rax
lea rax, [0x0082f5b0]
call fcn.0040b960
jmp 0x4ca56e
mov rax, qword [rdx + r8 + 0x10]
mov qword [rsp + 0x140], rax
mov rbx, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x270]
mov rdi, qword [rsp + 0x278]
mov rax, qword [rsp + 0x50]
call fcn.004cbb60
mov qword [rsp + 0x198], rax
mov qword [rsp + 0x1a0], rbx
mov qword [rsp + 0x1a8], rcx
mov qword [rsp + 0x1b0], rdi
mov qword [rsp + 0x1b8], rsi
mov qword [rsp + 0x1c0], r8
mov qword [rsp + 0x1c8], r9
mov rdx, qword [rsp + 0x198]
mov qword [rsp], rdx
movups xmm0, xmmword [rsp + 0x1a0]
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x1b0]
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x1c0]
movups xmmword [rsp + 0x28], xmm0
mov rax, qword [rsp + 0x250]
mov rbx, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x110]
nop dword [rax + rax]
call fcn.004cc080
add rsp, 0x240
pop rbp
ret
lea rax, [0x005eb640]
call fcn.0040b520
lea rax, [0x005f6320]
call fcn.0040e720
mov qword [rax + 8], 0x1a
lea rcx, [0x006322f2]
mov qword [rax], rcx
mov qword [rax + 0x10], 0
mov rbx, rax
lea rax, [0x005e5020]
call fcn.00437520
lea rax, [0x005f6320]
call fcn.0040e720
mov qword [rax + 8], 0x1a
lea rcx, [0x006322f2]
mov qword [rax], rcx
mov qword [rax + 0x10], 0
mov rbx, rax
lea rax, [0x005e5020]
nop
call fcn.00437520
lea rax, [0x005f6320]
call fcn.0040e720
mov qword [rax + 8], 0x13
lea rcx, [0x0062e616]
mov qword [rax], rcx
mov rcx, qword [rsp + 0xa0]
mov qword [rax + 0x10], rcx
mov rbx, rax
lea rax, [0x005e5020]
call fcn.00437520
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
nop dword [rax]
call fcn.004661c0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
jmp fcn.004c91a0