Function at 0x4bf500
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4bf85c
push rbp
mov rbp, rsp
sub rsp, 0x98
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xc0], rdi
test r9, r9
jne 0x4bf647
nop dword [rax + rax]
cmp rbx, rsi
jne 0x4bf558
test rbx, rbx
je 0x4bf558
cmp rax, rdi
jne 0x4bf558
add rsp, 0x98
pop rbp
ret
test rcx, rcx
je 0x4bf57e
nop dword [rax]
test r8, r8
je 0x4bf57e
lea r10, [rax + rcx*8]
lea r10, [r10 - 8]
lea r11, [rdi + r8*8]
lea r11, [r11 - 8]
cmp r11, r10
je 0x4bf647
nop
nop
cmp rcx, rsi
jl 0x4bf58a
mov rdx, rsi
jmp 0x4bf5f2
cmp rsi, 1
jne 0x4bf5c2
lea rax, [0x00528980]
mov ebx, 1
mov rcx, rbx
nop
call fcn.0044ea40
mov rdx, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xc0]
mov esi, 1
mov ecx, 1
nop
jmp 0x4bf5f2
lea rcx, [rsi + 4]
mov qword [rsp + 0x50], rcx
lea rax, [0x00528980]
mov rbx, rsi
call fcn.0044ea40
mov rdx, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xc0]
mov rsi, rdx
mov rcx, qword [rsp + 0x50]
cmp rdx, rsi
mov rbx, rsi
cmovl rsi, rdx
nop dword [rax]
cmp rdi, rax
je 0x4bf63e
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x68], rcx
shl rsi, 3
mov rbx, rdi
mov rcx, rsi
call fcn.0046ae40
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x80]
add rsp, 0x98
pop rbp
ret
test rsi, rsi
je 0x4bf7f5
mov r10, r9
shr r9, 6
mov qword [rsp + 0x78], r9
lea rbx, [r9 + rsi]
lea rbx, [rbx + 1]
lea r11, [r9 + rsi]
mov qword [rsp + 0x60], r11
cmp rcx, rbx
jl 0x4bf67d
jae 0x4bf727
jmp 0x4bf850
mov qword [rsp + 0x70], r10
mov qword [rsp + 0xd0], r8
test r11, r11
jne 0x4bf6d8
lea rax, [0x00528980]
mov ebx, 1
mov rcx, rbx
nop
call fcn.0044ea40
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov r9, qword [rsp + 0x78]
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x60]
mov ecx, 1
mov ebx, 1
jmp 0x4bf727
mov qword [rsp + 0x58], rbx
lea rcx, [r9 + rsi]
lea rcx, [rcx + 5]
mov qword [rsp + 0x48], rcx
lea rax, [0x00528980]
call fcn.0044ea40
mov rsi, qword [rsp + 0xc8]
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xd0]
mov r9, qword [rsp + 0x78]
mov r10, qword [rsp + 0x70]
mov r11, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x58]
cmp rcx, r11
jb 0x4bf845
cmp r9, r11
ja 0x4bf839
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x88], rax
mov qword [rsp + 0x40], rbx
sub rcx, r9
shl r9, 3
mov qword [rsp + 0x80], r9
mov r11, rcx
neg rcx
sar rcx, 0x3f
and rcx, r9
add rcx, rax
mov qword [rsp], rcx
mov qword [rsp + 8], rsi
mov qword [rsp + 0x10], r11
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], r8
and r10d, 0x3f
mov qword [rsp + 0x30], r10
call fcn.004c7060
xorps xmm15, xmm15
mov r14, qword [0x00759698]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x60]
cmp rcx, rax
jbe 0x4bf834
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x88]
mov qword [rdi + rax*8], rsi
nop
mov rsi, qword [rsp + 0x78]
test rsi, rsi
je 0x4bf7f2
mov rax, rdi
mov rbx, qword [rsp + 0x80]
nop dword [rax]
call fcn.0046ab40
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x88]
nop
jmp 0x4bf804
xor ebx, ebx
add rsp, 0x98
pop rbp
nop
ret
dec rcx
test rcx, rcx
jle 0x4bf813
mov rsi, qword [rdi + rcx*8 - 8]
test rsi, rsi
je 0x4bf801
mov rdx, qword [rsp + 0x48]
cmp rcx, rdx
ja 0x4bf82f
mov rax, rdi
mov rbx, rcx
mov rcx, rdx
add rsp, 0x98
pop rbp
ret
call fcn.0046a500
call fcn.0046a480
mov rax, r9
mov rcx, r11
nop
call fcn.0046a540
mov rdx, rcx
mov rcx, r11
call fcn.0046a500
mov rdx, rcx
mov rcx, rbx
call fcn.0046a500
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
nop
call fcn.004681a0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
jmp fcn.004bf500