Function at 0x4bf3a0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x4bfa33
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov qword [rsp + 0x120], r11
mov qword [rsp + 0x118], r10
mov qword [rsp + 0x110], r9
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], rax
lea rcx, [r10 + 1]
mov rax, rcx
call fcn.004b97e0
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 1]
mov rbx, qword [rsp + 0x100]
mov rsi, rbx
sub rbx, rcx
cmp rcx, rdx
jbe 0x4bfa2a
mov r8, qword [rsp + 0x110]
mov rdx, qword [r8 + rcx*8 - 8]
nop
nop
nop
bsr r9, rdx
mov r10, 0xffffffffffffffff
cmove r9, r10
lea r10, [r9 - 0x3f]
neg r10
inc r9
neg r9
mov rdi, rcx
mov rcx, r9
mov r11, rdx
shl r11, cl
cmp r10, 0x40
sbb r9, r9
and r11, r9
test r11, r11
je 0x4bfa25
mov r9, r11
not r11
nop word [rax + rax]
cmp r11, r9
jae 0x4bfa20
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x50], rdx
mov rcx, rdx
mov rdx, r11
mov r10, rax
mov rax, 0xffffffffffffffff
div r9
mov qword [rsp + 0x90], rax
mov r9, qword [r10 + 8]
mov qword [rsp + 0x60], r9
mov rdx, qword [r10 + 0x10]
mov qword [rsp + 0x68], rdx
mov r11, qword [r10]
mov qword [rsp + 0xc0], r11
mov r12, qword [rsp + 0xf8]
mov r13, qword [rsp + 0x120]
mov r15, rbx
jmp 0x4bf54e
lea rbx, [rax - 1]
mov rax, qword [rsp + 0x90]
mov r13, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x68]
mov r10, qword [rsp + 0xc0]
mov r15, qword [rsp + 0x50]
mov rcx, r15
mov rdx, rdi
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x78]
test rbx, rbx
jl 0x4bf910
lea r10, [rdi + rbx]
mov qword [rsp + 0xb0], r10
cmp rsi, r10
jle 0x4bf584
jbe 0x4bfa10
mov r10, qword [r12 + r10*8]
mov qword [rsp + 0x80], r10
mov r10, qword [rsp + 0xb0]
jmp 0x4bf59e
mov qword [rsp + 0x98], rax
xor eax, eax
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x58], rbx
mov r10, qword [rsp + 0x80]
cmp r10, rcx
je 0x4bf63f
lea r15, [rbx + rdi]
lea r15, [r15 - 1]
nop dword [rax]
cmp rsi, r15
jbe 0x4bfa05
mov rbx, qword [r12 + r15*8]
mov rdi, rax
mov rax, r10
call 0x4b2600
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 2]
cmp rcx, rdx
jbe 0x4bf9f8
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsi + rcx*8 - 0x10]
mov rdx, rax
mov rax, rdi
mov r8, rdx
mul rdx
mov r9, qword [rsp + 0x58]
lea r10, [r9 + rcx]
lea r10, [r10 - 2]
mov r11, qword [rsp + 0x100]
nop dword [rax + rax]
cmp r11, r10
jbe 0x4bf9ed
mov r12, qword [rsp + 0xf8]
mov r10, qword [r12 + r10*8]
mov r13, qword [rsp + 0x50]
jmp 0x4bf986
mov r10, 0xffffffffffffffff
cmp rdi, rdx
ja 0x4bf972
mov qword [rsp + 0x88], r10
mov qword [rsp], r11
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x38], 0
call fcn.004c1560
xorps xmm15, xmm15
mov r14, qword [0x007f3030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x60]
cmp rax, rcx
jae 0x4bf96d
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0xc0]
mov qword [rsi + rax*8], rbx
mov rdi, qword [rsp + 0x58]
lea r8, [rcx + rdi]
mov r9, qword [rsp + 0x100]
cmp r9, r8
jge 0x4bf6e2
test rbx, rbx
jne 0x4bf6e2
lea rbx, [rcx - 1]
nop
jmp 0x4bf6e5
mov rbx, rcx
lea r8, [rbx + rdi]
mov rdx, qword [rsp + 0x108]
cmp rdx, r8
jb 0x4bf965
nop word [rax + rax]
cmp rdi, r8
ja 0x4bf95a
sub rdx, rdi
mov r10, rdx
neg rdx
mov r11, rdi
shl rdi, 3
sar rdx, 0x3f
and rdx, rdi
mov rdi, qword [rsp + 0xf8]
add rdx, rdi
cmp r9, r11
jb 0x4bf94f
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0xc8], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rdx
sub r9, r11
mov qword [rsp + 0xa0], r9
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rcx
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0x40], rdi
call fcn.004c12a0
xorps xmm15, xmm15
mov r14, qword [0x007f3030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x4bf7c9
mov rcx, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x88]
jmp 0x4bf8c3
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xb0]
nop dword [rax]
cmp rdx, rcx
jb 0x4bf94a
mov rax, qword [rsp + 0x58]
cmp rax, rcx
ja 0x4bf945
mov rax, qword [rsp + 0xc8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x40], rdx
call fcn.004c1200
xorps xmm15, xmm15
mov r14, qword [0x007f3030]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x70]
cmp rcx, rax
jge 0x4bf8a8
mov rsi, qword [rsp + 0x100]
mov rax, qword [rsp + 0xb0]
cmp rsi, rax
jbe 0x4bf938
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0xf8]
add qword [r9 + rax*8], r8
jmp 0x4bf8b8
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x88]
dec r10
mov rax, qword [rsp + 0x58]
mov r8, qword [rsp + 0x78]
cmp rax, r8
jne 0x4bf8f2
mov r11, qword [rsp + 0xe8]
cmp r11, r8
jne 0x4bf8fa
nop
test r10, r10
jne 0x4bf8fa
mov r12, qword [rsp + 0xe0]
jmp 0x4bf4e8
mov r11, qword [rsp + 0xe8]
cmp r11, rax
jbe 0x4bf930
mov r12, qword [rsp + 0xe0]
mov qword [r12 + rax*8], r10
jmp 0x4bf4e8
nop
lea rax, [0x0076d760]
lea rbx, [0x00577520]
mov rcx, r10
call fcn.00467420
add rsp, 0xd0
pop rbp
ret
mov rcx, r11
call fcn.0045ece0
mov rcx, rsi
nop dword [rax + rax]
call fcn.0045ece0
call fcn.0045eda0
call fcn.0045ed60
mov rax, r11
mov rcx, r9
call fcn.0045eda0
mov rax, rdi
mov rcx, r8
call fcn.0045eda0
mov rcx, r8
call fcn.0045ed60
call fcn.0045ece0
mov rcx, rdi
call fcn.0045ed60
mov rbx, rax
mul rdi
mov r8, rbx
mov rbx, r15
cmp rbx, rdx
jb 0x4bf992
jne 0x4bf9a2
cmp rax, r10
jbe 0x4bf9a2
lea r15, [rbx + r13]
lea rax, [r8 - 1]
cmp rbx, r15
jbe 0x4bf97a
nop
jmp 0x4bf9a5
mov rax, r8
mov rcx, r13
mov rdx, qword [rsp + 0x68]
mov rbx, r9
mov rsi, r11
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x120]
mov r15, qword [rsp + 0x78]
mov r10, rax
mov rax, qword [rsp + 0x90]
jmp 0x4bf646
mov rax, r10
mov rcx, r11
call fcn.0045ece0
mov rax, rdx
nop dword [rax + rax]
call fcn.0045ece0
mov rax, r15
mov rcx, rsi
call fcn.0045ece0
mov rax, r10
mov rcx, rsi
call fcn.0045ece0
nop dword [rax + rax]
call fcn.004327c0
call fcn.00432760
mov rax, rdx
call fcn.0045ece0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.0045ca00
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.004bf3a0