Function at 0x4f9680
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x28]
cmp r12, qword [r14 + 0x10]
jbe 0x4f9bc6
sub rsp, 0xa8
mov qword [rsp + 0xa0], rbp
lea rbp, [rsp + 0xa0]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0x108], r9
mov rbx, qword [rsp + 0xd0]
cmp rsi, rbx
jne 0x4f9bb2
cmp r10, rbx
jne 0x4f9bb2
mov r10, qword [rsp + 0xb8]
cmp r10, rbx
jne 0x4f9bb2
mov qword [rsp + 0xf8], rsi
mov qword [rsp + 0x100], r8
mov qword [rsp + 0xf0], rdi
mov qword [rsp + 0x108], r9
mov r11, rbx
shl rbx, 1
cmp rcx, rbx
jl 0x4f9720
jae 0x4f97d4
jmp 0x4f9ba7
cmp rbx, 1
jne 0x4f9776
lea rax, [0x006707e0]
mov ebx, 1
mov rcx, rbx
call fcn.0044b5c0
mov rsi, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
mov r8, qword [rsp + 0x100]
mov r9, qword [rsp + 0x108]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xd0]
mov ebx, 1
mov ecx, 1
jmp 0x4f97d4
mov qword [rsp + 0x88], rbx
lea rcx, [r11 + r11]
lea rcx, [rcx + 4]
mov qword [rsp + 0x50], rcx
lea rax, [0x006707e0]
call fcn.0044b5c0
mov rsi, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
mov r8, qword [rsp + 0x100]
mov r9, qword [rsp + 0x108]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xd0]
mov rbx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x90], rax
nop
test rbx, rbx
je 0x4f9837
shl rbx, 3
call fcn.00465840
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
mov r8, qword [rsp + 0x100]
mov r9, qword [rsp + 0x108]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xd0]
xor edx, edx
xor r12d, r12d
jmp 0x4f988f
mov rdx, qword [rsp + 0x68]
inc rdx
mov r13, qword [rsp + 0x100]
mov r9, qword [rsp + 0x108]
mov r11, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0x60]
mov rbx, rsi
mov rsi, r15
mov r8, r13
mov r10, qword [rsp + 0xb8]
mov r12, rax
mov rax, qword [rsp + 0x90]
cmp r11, rdx
jle 0x4f9a25
mov r13, qword [r9 + rdx*8]
lea r15, [rdx + r11]
cmp rcx, r15
jb 0x4f9b9c
cmp rdx, r15
ja 0x4f9b91
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x88], r15
mov qword [rsp + 0x78], r12
mov rbx, rdx
shl rdx, 3
sub rcx, rbx
mov qword [rsp + 0x80], rcx
mov r10, rcx
neg rcx
sar rcx, 0x3f
and rdx, rcx
lea rcx, [rax + rdx]
mov qword [rsp + 0x98], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], r11
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], r13
call fcn.00504160
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x58]
nop dword [rax]
cmp rcx, rdx
jae 0x4f9b86
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x90]
mov rdx, qword [rax + rcx*8]
mov rbx, qword [rsp + 0x98]
mov qword [rsp], rbx
mov rbx, qword [rsp + 0xd0]
mov qword [rsp + 8], rbx
mov rsi, qword [rsp + 0x80]
mov qword [rsp + 0x10], rsi
mov rsi, qword [rsp + 0xb0]
mov qword [rsp + 0x18], rsi
mov rdi, qword [rsp + 0xb8]
mov qword [rsp + 0x20], rdi
mov r8, qword [rsp + 0xc0]
mov qword [rsp + 0x28], r8
mov r9, qword [rsp + 0xc8]
imul rdx, r9
mov qword [rsp + 0x30], rdx
call fcn.00504160
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x78]
add rdx, rcx
lea rbx, [rdx + rax]
mov rsi, qword [rsp + 0x58]
mov rdi, qword [rsp + 0x88]
cmp rsi, rdi
jbe 0x4f9b7b
mov r8, qword [rsp + 0x90]
mov qword [r8 + rdi*8], rbx
cmp rcx, rdx
ja 0x4f9a13
cmp rax, rbx
jbe 0x4f9a1d
mov eax, 1
jmp 0x4f983e
xor eax, eax
nop
jmp 0x4f983e
test r12, r12
je 0x4f9ad2
cmp r11, rcx
ja 0x4f9b70
nop word [rax + rax]
cmp r11, rbx
ja 0x4f9b65
mov qword [rsp], rax
mov qword [rsp + 8], r11
mov qword [rsp + 0x10], rcx
sub rcx, r11
mov rsi, rcx
neg rcx
mov rdi, r11
shl r11, 3
sar rcx, 0x3f
and rcx, r11
add rcx, rax
mov qword [rsp + 0x18], rcx
sub rbx, rdi
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x28], rsi
mov rcx, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], r10
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0x40], rcx
call fcn.00503de0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0xd0]
jmp 0x4f9b27
cmp r11, rcx
ja 0x4f9b55
cmp r11, rbx
ja 0x4f9b4a
sub rbx, r11
cmp r11, rbx
mov rsi, r11
cmovg r11, rbx
mov rbx, rsi
sub rsi, rcx
mov rdi, rbx
shl rbx, 3
sar rsi, 0x3f
and rsi, rbx
lea rbx, [rax + rsi]
test rsi, rsi
je 0x4f9b27
shl r11, 3
mov rcx, r11
call fcn.00465b40
mov rax, qword [rsp + 0x90]
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rsp + 0xd0]
cmp rdi, rcx
ja 0x4f9b3f
mov rbx, rdi
mov rbp, qword [rsp + 0xa0]
add rsp, 0xa8
ret
mov rdx, rcx
mov rcx, rdi
call fcn.00465200
mov rax, r11
mov rcx, rbx
call fcn.00465240
mov rdx, rcx
mov rcx, r11
nop dword [rax + rax]
call fcn.00465200
mov rax, r11
mov rcx, rbx
call fcn.00465240
mov rdx, rcx
mov rcx, r11
call fcn.00465200
mov rax, rdi
mov rcx, rsi
call fcn.00465180
mov rax, rcx
mov rcx, rdx
call fcn.00465180
mov rax, rdx
mov rcx, r15
call fcn.00465240
mov rdx, rcx
mov rcx, r15
call fcn.00465200
mov rdx, rcx
mov rcx, rbx
call fcn.00465200
lea rax, [0x00670e20]
lea rbx, [0x0073ec10]
call fcn.00437500
nop
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], r11
call fcn.00462aa0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x68]
mov r11, qword [rsp + 0x70]
jmp fcn.004f9680