Function at 0x4f4a80
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x50]
cmp r12, qword [r14 + 0x10]
jbe 0x4f4f96
sub rsp, 0xd0
mov qword [rsp + 0xc8], rbp
lea rbp, [rsp + 0xc8]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x120], r9
mov rdx, qword [rsp + 0xe0]
mov rbx, r10
sub r10, rdx
lea rsi, [rdx - 1]
cmp rdx, rsi
jbe 0x4f4f8a
mov qword [rsp + 0x90], r10
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x120], r9
mov qword [rsp + 0xa0], rbx
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x118], r8
mov qword [rsp + 0x130], r11
mov qword [rsp + 0x100], rcx
mov rcx, qword [rsp + 0xd8]
mov rcx, qword [rcx + rdx*8 - 8]
mov qword [rsp + 0x68], rcx
nop
mov rax, rdx
call fcn.004ede40
mov qword [rsp + 0xb8], rax
mov rcx, qword [rsp + 0x68]
bsr rcx, rcx
mov rdx, 0xffffffffffffffff
cmove rcx, rdx
mov rdx, qword [rax]
mov qword [rsp + 0xc0], rdx
mov rbx, qword [rax + 8]
mov qword [rsp + 0x70], rbx
mov rsi, qword [rax + 0x10]
mov qword [rsp + 0x78], rsi
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov rdi, qword [rsp + 0xd8]
mov qword [rsp + 0x18], rdi
mov rdi, qword [rsp + 0xe0]
mov qword [rsp + 0x20], rdi
mov r8, qword [rsp + 0xe8]
mov qword [rsp + 0x28], r8
add rcx, 0xffffffffffffffc1
neg rcx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x30], rcx
call fcn.004f8da0
xorps xmm15, xmm15
mov r14, qword [0x00803400]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rbx, qword [rsp + 0xa0]
lea rcx, [rbx + 1]
mov rdx, qword [rsp + 0x118]
nop
cmp rdx, rcx
jl 0x4f4bf5
jb 0x4f4f85
mov rax, qword [rsp + 0x108]
jmp 0x4f4c60
test rbx, rbx
jne 0x4f4c22
lea rax, [0x005e0de0]
mov ebx, 1
mov rcx, rbx
call fcn.0044a840
mov rbx, qword [rsp + 0xa0]
mov edx, 1
mov ecx, 1
jmp 0x4f4c60
mov qword [rsp + 0x88], rcx
lea rdx, [rbx + 5]
mov qword [rsp + 0x58], rdx
lea rax, [0x005e0de0]
mov rbx, rcx
mov rcx, rdx
call fcn.0044a840
mov rbx, qword [rsp + 0xa0]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x88]
nop word [rax + rax]
cmp rbx, rdx
ja 0x4f4f78
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0xb0], rax
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdx
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rbx
mov rcx, qword [rsp + 0x130]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
call fcn.004f8da0
xorps xmm15, xmm15
mov r14, qword [0x00803400]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0xa0]
mov rsi, qword [rsp + 0x48]
nop dword [rax + rax]
cmp rcx, rsi
jae 0x4f4f6d
mov rdi, qword [rsp + 0xb0]
mov qword [rdi + rcx*8], rax
mov r12, qword [rsp + 0x100]
nop dword [rax]
test r12, r12
je 0x4f4d33
mov r13, qword [rsp + 0xf0]
lea r15, [r13 + r12*8]
lea r15, [r15 - 8]
mov r8, qword [rsp + 0x58]
mov rax, r12
lea r12, [rdi + r8*8]
lea r12, [r12 - 8]
cmp r12, r15
jne 0x4f4d43
xor eax, eax
xor r13d, r13d
jmp 0x4f4d43
mov r8, qword [rsp + 0x58]
mov rax, r12
mov r13, qword [rsp + 0xf0]
mov rbx, qword [rsp + 0x90]
lea rcx, [rbx + 1]
cmp rax, rcx
jl 0x4f4d60
jae 0x4f4ddf
jmp 0x4f4f65
test rbx, rbx
jne 0x4f4d9a
lea rax, [0x005e0de0]
mov ebx, 1
mov rcx, rbx
call fcn.0044a840
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
mov r8, qword [rsp + 0x58]
mov r13, rax
mov ecx, 1
mov eax, 1
jmp 0x4f4ddf
mov qword [rsp + 0x80], rcx
lea rdx, [rbx + 5]
mov qword [rsp + 0x50], rdx
lea rax, [0x005e0de0]
mov rbx, rcx
mov rcx, rdx
call fcn.0044a840
mov rsi, qword [rsp + 0x48]
mov rdi, qword [rsp + 0xb0]
mov r8, qword [rsp + 0x58]
mov r13, rax
mov rcx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0x50], rax
mov rdx, qword [rsp + 0xe0]
nop dword [rax]
cmp rdx, 0x64
jge 0x4f4e28
mov rbx, rcx
mov rcx, rax
mov r9, qword [rsp + 0xc0]
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x78]
mov rax, r13
call fcn.004f5000
jmp 0x4f4e48
mov rbx, rcx
mov rcx, rax
mov r9, qword [rsp + 0xc0]
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x78]
mov rax, r13
call fcn.004f5740
nop
lea rax, [0x007af600]
lea rbx, [0x0061bcc0]
mov rcx, qword [rsp + 0xb8]
nop
call fcn.0047a660
nop
mov rdx, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x98]
jmp 0x4f4e80
dec rsi
nop dword [rax + rax]
test rsi, rsi
jle 0x4f4e8f
mov rax, qword [rdx + rsi*8 - 8]
test rax, rax
je 0x4f4e78
mov rax, qword [rsp + 0x50]
cmp rsi, rax
ja 0x4f4f58
mov qword [rsp + 0x98], rsi
mov rax, qword [rsp + 0xb0]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x58]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rdx
mov rbx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rbx
nop
call fcn.004f8e00
xorps xmm15, xmm15
mov r14, qword [0x00803400]
mov r14, qword gs:[r14]
mov r14, qword [r14]
nop
mov rax, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x48]
jmp 0x4f4f0a
dec rcx
test rcx, rcx
jle 0x4f4f19
mov r9, qword [rax + rcx*8 - 8]
test r9, r9
je 0x4f4f07
mov rdx, qword [rsp + 0x58]
nop
cmp rcx, rdx
ja 0x4f4f53
mov rbx, qword [rsp + 0x98]
mov rdi, rax
mov rsi, rcx
mov r8, rdx
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0xc8]
add rsp, 0xd0
ret
call fcn.00465b20
mov rcx, rsi
mov rdx, rax
nop
call fcn.00465b20
mov rdx, rax
call fcn.00465b20
mov rax, rcx
mov rcx, rsi
call fcn.00465aa0
mov rcx, rbx
nop dword [rax + rax]
call fcn.00465b20
call fcn.00465b20
mov rax, rsi
mov rcx, rdx
call fcn.00465aa0
nop
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x50], r9
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x60], r11
call fcn.00463440
mov rax, qword [rsp + 0x20]
mov rbx, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov r11, qword [rsp + 0x60]
jmp fcn.004f4a80