Function at 0x52f4e0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x52fb73
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov qword [rsp + 0x120], r11
mov qword [rsp + 0x118], r10
mov qword [rsp + 0x110], r9
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], rax
lea rcx, [r10 + 1]
mov rax, rcx
call fcn.00528700
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 1]
mov rbx, qword [rsp + 0x100]
mov rsi, rbx
sub rbx, rcx
cmp rcx, rdx
jbe 0x52fb6a
mov r8, qword [rsp + 0x110]
mov rdx, qword [r8 + rcx*8 - 8]
nop
nop
nop
bsr r9, rdx
mov r10, 0xffffffffffffffff
cmove r9, r10
lea r10, [r9 - 0x3f]
neg r10
inc r9
neg r9
mov rdi, rcx
mov rcx, r9
mov r11, rdx
shl r11, cl
cmp r10, 0x40
sbb r9, r9
and r11, r9
test r11, r11
je 0x52fb65
mov r9, r11
not r11
nop word [rax + rax]
cmp r11, r9
jae 0x52fb60
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x90], rdx
mov rcx, rdx
mov rdx, r11
mov r10, rax
mov rax, 0xffffffffffffffff
div r9
mov qword [rsp + 0x50], rax
mov r9, qword [r10 + 8]
mov qword [rsp + 0x80], r9
mov rdx, qword [r10 + 0x10]
mov qword [rsp + 0x88], rdx
mov r11, qword [r10]
mov qword [rsp + 0xc0], r11
mov r12, qword [rsp + 0xf8]
mov r13, qword [rsp + 0x120]
mov r15, rbx
jmp 0x52f6a0
lea rbx, [rax - 1]
mov rax, qword [rsp + 0x50]
mov r13, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x88]
mov r10, qword [rsp + 0xc0]
mov r15, qword [rsp + 0x90]
mov rcx, r15
mov rdx, rdi
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x80]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x70]
nop word [rax + rax]
test rbx, rbx
jl 0x52fa50
lea r10, [rdi + rbx]
mov qword [rsp + 0xb0], r10
cmp rsi, r10
jle 0x52f6d9
nop word [rax + rax]
jbe 0x52fb50
mov r10, qword [r12 + r10*8]
mov qword [rsp + 0x78], r10
mov r10, qword [rsp + 0xb0]
jmp 0x52f6f0
mov qword [rsp + 0x98], rax
xor eax, eax
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x68], rbx
mov r10, qword [rsp + 0x78]
nop word [rax + rax]
cmp r10, rcx
je 0x52f78e
lea r15, [rbx + rdi]
lea r15, [r15 - 1]
cmp rsi, r15
jbe 0x52fb45
mov rbx, qword [r12 + r15*8]
mov rdi, rax
mov rax, r10
call 0x520a20
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 2]
cmp rcx, rdx
jbe 0x52fb3b
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsi + rcx*8 - 0x10]
mov rdx, rax
mov rax, rdi
mov r8, rdx
mul rdx
mov r9, qword [rsp + 0x68]
lea r10, [r9 + rcx]
lea r10, [r10 - 2]
mov r11, qword [rsp + 0x100]
cmp r11, r10
jbe 0x52fb30
mov r12, qword [rsp + 0xf8]
mov r10, qword [r12 + r10*8]
mov r13, qword [rsp + 0x90]
jmp 0x52fac6
mov r10, 0xffffffffffffffff
cmp rdi, rdx
ja 0x52fab2
mov qword [rsp + 0x60], r10
mov qword [rsp], r11
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x38], 0
call fcn.005316a0
xorps xmm15, xmm15
mov r14, qword [0x00a202e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x80]
cmp rax, rcx
jae 0x52faad
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0xc0]
mov qword [rsi + rax*8], rbx
mov rdi, qword [rsp + 0x68]
lea r8, [rcx + rdi]
mov r9, qword [rsp + 0x100]
cmp r9, r8
jge 0x52f830
test rbx, rbx
jne 0x52f830
lea rbx, [rcx - 1]
jmp 0x52f833
mov rbx, rcx
lea r8, [rbx + rdi]
mov rdx, qword [rsp + 0x108]
nop
cmp rdx, r8
jb 0x52faa5
cmp rdi, r8
ja 0x52fa9a
sub rdx, rdi
mov r10, rdx
neg rdx
mov r11, rdi
shl rdi, 3
sar rdx, 0x3f
and rdx, rdi
mov rdi, qword [rsp + 0xf8]
add rdx, rdi
cmp r9, r11
jb 0x52fa8f
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0xc8], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rdx
sub r9, r11
mov qword [rsp + 0xa0], r9
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rcx
mov rdi, qword [rsp + 0x88]
mov qword [rsp + 0x40], rdi
call fcn.005313e0
xorps xmm15, xmm15
mov r14, qword [0x00a202e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x52f912
mov rcx, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x60]
jmp 0x52fa02
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xb0]
cmp rdx, rcx
jb 0x52fa8a
mov rax, qword [rsp + 0x68]
cmp rax, rcx
ja 0x52fa85
mov rax, qword [rsp + 0xc8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x40], rdx
call fcn.00531340
xorps xmm15, xmm15
mov r14, qword [0x00a202e0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x58]
cmp rcx, rax
jge 0x52f9ea
mov rsi, qword [rsp + 0x100]
mov rax, qword [rsp + 0xb0]
cmp rsi, rax
jbe 0x52fa78
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0xf8]
add qword [r9 + rax*8], r8
jmp 0x52f9fa
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x60]
dec r10
mov rax, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
cmp rax, r8
jne 0x52fa32
mov r11, qword [rsp + 0xe8]
cmp r11, r8
jne 0x52fa3a
nop
test r10, r10
jne 0x52fa3a
mov r12, qword [rsp + 0xe0]
jmp 0x52f62e
mov r11, qword [rsp + 0xe8]
cmp r11, rax
jbe 0x52fa70
mov r12, qword [rsp + 0xe0]
mov qword [r12 + rax*8], r10
jmp 0x52f62e
nop
lea rax, [0x00999d80]
lea rbx, [0x006c3220]
mov rcx, r10
call fcn.00474080
add rsp, 0xd0
pop rbp
ret
mov rcx, r11
call fcn.0046c640
mov rcx, rsi
nop dword [rax + rax]
call fcn.0046c640
call fcn.0046c700
call fcn.0046c6c0
mov rax, r11
mov rcx, r9
call fcn.0046c700
mov rax, rdi
mov rcx, r8
call fcn.0046c700
mov rcx, r8
call fcn.0046c6c0
call fcn.0046c640
mov rcx, rdi
call fcn.0046c6c0
mov rbx, rax
mul rdi
mov r8, rbx
mov rbx, r15
cmp rbx, rdx
jb 0x52fad2
jne 0x52fae2
cmp rax, r10
jbe 0x52fae2
lea r15, [rbx + r13]
lea rax, [r8 - 1]
cmp rbx, r15
jbe 0x52faba
nop
jmp 0x52fae5
mov rax, r8
mov rcx, r13
mov rdx, qword [rsp + 0x88]
mov rbx, r9
mov rsi, r11
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x80]
mov r11, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x120]
mov r15, qword [rsp + 0x70]
mov r10, rax
mov rax, qword [rsp + 0x50]
jmp 0x52f795
mov rax, r10
mov rcx, r11
call fcn.0046c640
mov rax, rdx
nop
call fcn.0046c640
mov rax, r15
mov rcx, rsi
call fcn.0046c640
mov rax, r10
mov rcx, rsi
call fcn.0046c640
nop dword [rax + rax]
call fcn.00437e20
call fcn.00437dc0
mov rax, rdx
call fcn.0046c640
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.0046a360
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.0052f4e0