Function at 0x4b9680
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x98]
cmp r12, qword [r14 + 0x10]
jbe 0x4b9e51
push rbp
mov rbp, rsp
sub rsp, 0x110
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x150], r9
bt r10d, 0
jb 0x4b96cf
nop dword [rax]
cmp qword [0x006ee2a8], r10
jg 0x4b96cf
cmp r10, 2
jge 0x4b96dd
call fcn.004b8b40
add rsp, 0x110
pop rbp
ret
mov rdx, r10
sar rdx, 1
cmp rsi, rdx
jb 0x4b9e45
mov r12, r8
sub r12, rdx
mov r13, rdx
shl rdx, 3
mov r15, r12
neg r12
sar r12, 0x3f
and r12, rdx
sub rsi, r13
add r12, rdi
cmp r10, r13
jb 0x4b9e37
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0xc8], r15
mov qword [rsp + 0xe0], r12
mov qword [rsp + 0xc0], rdx
mov qword [rsp + 0x160], r11
mov qword [rsp + 0x158], r10
mov qword [rsp + 0x150], r9
mov qword [rsp + 0x148], r8
mov qword [rsp + 0x138], rdi
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x120], rax
mov rsi, r13
mov r10, rsi
call fcn.004b9680
mov r11, qword [rsp + 0x160]
mov rdx, qword [rsp + 0xd0]
mov r12, r11
sub r12, rdx
mov r13, r12
neg r12
sar r12, 0x3f
mov r15, qword [rsp + 0xc0]
and r12, r15
mov r10, qword [rsp + 0x158]
mov rax, r10
sub r10, rdx
mov r15, qword [rsp + 0x150]
lea r9, [r15 + r12]
mov rbx, qword [rsp + 0x128]
cmp rbx, rax
jb 0x4b9e2f
mov qword [rsp + 0x78], r10
mov qword [rsp + 0xb8], r13
mov qword [rsp + 0xf0], r9
mov rcx, qword [rsp + 0x130]
mov rdx, rcx
sub rdx, rax
mov r12, rbx
sub r12, rax
shl rax, 3
mov qword [rsp + 0xb0], rax
mov rsi, rdx
neg rdx
sar rdx, 0x3f
and rdx, rax
mov r15, qword [rsp + 0x120]
add rdx, r15
mov r8, qword [rsp + 0xc8]
mov r11, r13
mov rax, rdx
mov rbx, r12
mov rcx, rsi
mov rdi, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0x58]
call fcn.004b9680
mov rax, qword [rsp + 0x158]
mov rdx, qword [rsp + 0xd0]
lea rcx, [rdx + rax*2]
mov r12, qword [rsp + 0x130]
cmp r12, rcx
jb 0x4b9e27
mov rbx, rax
shl rbx, 1
nop dword [rax]
cmp rcx, rbx
jb 0x4b9e1f
mov qword [rsp + 0xa8], rbx
mov qword [rsp + 0xa0], rcx
sub r12, rbx
mov qword [rsp + 0x50], r12
mov rsi, r12
neg r12
shl rax, 4
sar r12, 0x3f
and rax, r12
mov r8, qword [rsp + 0x120]
add rax, r8
mov qword [rsp + 0xd8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rsi
mov r9, qword [rsp + 0xe0]
mov qword [rsp + 0x18], r9
mov r10, qword [rsp + 0x58]
mov qword [rsp + 0x20], r10
mov r11, qword [rsp + 0xc8]
mov qword [rsp + 0x28], r11
mov r12, qword [rsp + 0x138]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], rdx
mov r13, qword [rsp + 0x148]
mov qword [rsp + 0x40], r13
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x4b993f
mov eax, 1
jmp 0x4b99c3
mov rax, qword [rsp + 0xd8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x10], rdx
mov rbx, qword [rsp + 0x138]
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rcx
mov rbx, qword [rsp + 0x148]
mov qword [rsp + 0x28], rbx
mov rbx, qword [rsp + 0xe0]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsp + 0x58]
mov qword [rsp + 0x38], rbx
mov rbx, qword [rsp + 0xc8]
mov qword [rsp + 0x40], rbx
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, 0xffffffffffffffff
mov rbx, qword [rsp + 0x158]
lea rcx, [rbx + rbx*2]
mov rdx, qword [rsp + 0x130]
nop word [rax + rax]
cmp rdx, rcx
jb 0x4b9e1a
mov rsi, qword [rsp + 0xa0]
cmp rcx, rsi
jb 0x4b9e12
mov qword [rsp + 0xc8], rcx
mov qword [rsp + 0x60], rax
sub rdx, rsi
mov qword [rsp + 0x70], rdx
sub rcx, rsi
mov qword [rsp + 0x68], rcx
mov rdi, rdx
neg rdx
shl rsi, 3
sar rdx, 0x3f
and rsi, rdx
mov rdx, qword [rsp + 0x120]
add rsi, rdx
mov qword [rsp + 0xe8], rsi
mov qword [rsp], rsi
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdi
mov r8, qword [rsp + 0x150]
mov qword [rsp + 0x18], r8
mov r9, qword [rsp + 0xd0]
mov qword [rsp + 0x20], r9
mov r10, qword [rsp + 0x160]
mov qword [rsp + 0x28], r10
mov r11, qword [rsp + 0xf0]
mov qword [rsp + 0x30], r11
mov r12, qword [rsp + 0x78]
mov qword [rsp + 0x38], r12
mov r13, qword [rsp + 0xb8]
mov qword [rsp + 0x40], r13
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x4b9abd
mov rax, qword [rsp + 0x60]
jmp 0x4b9b47
mov rax, qword [rsp + 0xe8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x10], rdx
mov rbx, qword [rsp + 0xf0]
mov qword [rsp + 0x18], rbx
mov rbx, qword [rsp + 0x78]
mov qword [rsp + 0x20], rbx
mov rbx, qword [rsp + 0xb8]
mov qword [rsp + 0x28], rbx
mov rbx, qword [rsp + 0x150]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsp + 0xd0]
mov qword [rsp + 0x38], rbx
mov rsi, qword [rsp + 0x160]
mov qword [rsp + 0x40], rsi
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
neg rax
mov rcx, qword [rsp + 0x128]
mov rdx, qword [rsp + 0xc8]
nop word [rax + rax]
cmp rcx, rdx
jb 0x4b9e0a
mov qword [rsp + 0x60], rax
mov r12, qword [rsp + 0x130]
sub r12, rdx
mov qword [rsp + 0x88], r12
mov rbx, rcx
sub rbx, rdx
mov qword [rsp + 0x80], rbx
mov r15, r12
neg r12
shl rdx, 3
sar r12, 0x3f
and rdx, r12
mov r12, qword [rsp + 0x120]
lea rax, [r12 + rdx]
mov qword [rsp + 0xf8], rax
mov rdi, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xd0]
mov r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0xe8]
mov r10, qword [rsp + 0x68]
mov r11, qword [rsp + 0x70]
mov rcx, r15
nop
call fcn.004b9680
mov rax, qword [rsp + 0x158]
mov r9, rax
shl rax, 2
mov rcx, qword [rsp + 0x128]
nop dword [rax]
cmp rcx, rax
jb 0x4b9e05
mov rsi, rcx
sub rsi, rax
mov qword [rsp + 0x90], rsi
mov r8, qword [rsp + 0x130]
mov rdx, r8
sub rdx, rax
mov qword [rsp + 0x98], rdx
mov r10, rdx
neg rdx
mov r11, r9
shl r11, 5
sar rdx, 0x3f
and r11, rdx
mov rbx, qword [rsp + 0x120]
lea rdi, [rbx + r11]
mov qword [rsp + 0x100], rdi
mov rdx, qword [rsp + 0xa8]
cmp rdx, rsi
mov r12, rsi
cmovl r12, rdx
test r11, r11
je 0x4b9cb3
shl r12, 3
mov rax, rdi
mov rcx, r12
call fcn.0046b2c0
mov rcx, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x120]
mov rsi, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x100]
mov r8, qword [rsp + 0x130]
mov r9, qword [rsp + 0x158]
mov r10, qword [rsp + 0x98]
mov rdx, qword [rsp + 0xd0]
sub r8, rdx
mov qword [rsp + 0xd0], r8
mov r11, r8
neg r8
sar r8, 0x3f
mov r12, qword [rsp + 0xc0]
and r8, r12
lea rax, [rbx + r8]
mov qword [rsp + 0x108], rax
sub rcx, rdx
mov qword [rsp + 0xc8], rcx
mov rbx, rcx
mov rcx, r11
mov r8, r10
nop dword [rax + rax]
call fcn.004b9340
mov rax, qword [rsp + 0x158]
mov rcx, qword [rsp + 0x90]
cmp rax, rcx
ja 0x4b9e00
mov r8, qword [rsp + 0x98]
sub r8, rax
sub rcx, rax
mov rdx, r8
neg rdx
sar rdx, 0x3f
mov r10, qword [rsp + 0xb0]
and rdx, r10
mov r10, qword [rsp + 0x100]
lea rdi, [r10 + rdx]
mov rbx, qword [rsp + 0xc8]
mov rsi, rcx
mov r9, rax
mov rax, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xd0]
call fcn.004b9340
mov rdx, qword [rsp + 0x60]
test rdx, rdx
jle 0x4b9db9
mov rax, qword [rsp + 0x108]
mov rbx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov r9, qword [rsp + 0x158]
call fcn.004b9340
jmp 0x4b9df6
mov rax, qword [rsp + 0x108]
mov rbx, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x80]
mov r8, qword [rsp + 0x88]
mov r9, qword [rsp + 0x158]
call fcn.004b94e0
add rsp, 0x110
pop rbp
ret
call fcn.0046a9c0
call fcn.0046a9c0
mov rax, rdx
call fcn.0046a9c0
mov rax, rsi
call fcn.0046a9c0
call fcn.0046a980
mov rax, rbx
call fcn.0046a9c0
mov rdx, r12
call fcn.0046a980
mov rcx, rbx
call fcn.0046a9c0
mov rax, r13
mov rcx, r10
nop dword [rax]
call fcn.0046a9c0
mov rax, rdx
mov rcx, rsi
call fcn.0046a9c0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
nop
call fcn.00468620
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.004b9680