Function at 0x4d1a80
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x6e0]
cmp r12, qword [r14 + 0x10]
jbe 0x4d25b8
push rbp
mov rbp, rsp
sub rsp, 0x758
mov rsi, qword [rdi]
mov r8, qword [rsi + 8]
mov rdx, qword [rbx + 0x10]
cmp rdx, r8
jb 0x4d25af
mov rdx, qword [rcx + 0x10]
cmp rdx, r8
jb 0x4d25a7
mov qword [rsp + 0x768], rax
mov qword [rsp + 0x780], rdi
mov rsi, qword [rsi]
mov qword [rsp + 0x750], rsi
mov r9, qword [rbx]
mov qword [rsp + 0x748], r9
mov r10, qword [rcx]
mov qword [rsp + 0x740], r10
cmp r8, 0x10
je 0x4d1c25
nop dword [rax]
cmp r8, 0x18
je 0x4d1bfc
cmp r8, 0x20
je 0x4d1bc5
mov qword [rsp + 0x30], r8
mov rcx, rdi
lea rdi, [rsp + 0x530]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045e398
mov rbp, qword [rbp]
mov rbx, r8
shl r8, 1
mov qword [rsp + 0xa8], r8
cmp r8, 0x40
jg 0x4d1b5a
mov edx, 0x40
lea rdi, [rsp + 0x530]
jmp 0x4d1ba6
lea rax, [0x0056be80]
xor ebx, ebx
mov rcx, r8
call fcn.00446ca0
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x750]
mov r8, qword [rsp + 0xa8]
mov r9, qword [rsp + 0x748]
mov r10, qword [rsp + 0x740]
mov rdx, r8
mov rdi, rax
mov rax, qword [rsp + 0x768]
cmp rdx, r8
jb 0x4d259f
mov qword [rsp + 0x90], rdx
xor r11d, r11d
xor r12d, r12d
nop dword [rax]
jmp 0x4d22c0
mov rcx, rdi
lea rdi, [rsp + 0xb0]
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045e398
mov rbp, qword [rbp]
xor edx, edx
xor ebx, ebx
jmp 0x4d2177
mov rcx, rdi
lea rdi, [rsp + 0x2b0]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045e3c6
mov rbp, qword [rbp]
xor edx, edx
xor ebx, ebx
nop
jmp 0x4d1f70
mov rcx, rdi
lea rdi, [rsp + 0x430]
nop word [rax + rax]
nop dword [rax]
mov qword [rsp - 0x10], rbp
lea rbp, [rsp - 0x10]
call fcn.0045e3f4
mov rbp, qword [rbp]
xor edx, edx
xor ebx, ebx
jmp 0x4d1d52
mov qword [rsp + 0x48], rdx
mov rax, qword [r10 + rdx*8]
lea rcx, [rsp + rdx*8 + 0x430]
mov qword [rsp + 0x738], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rax
call fcn.004d2980
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + rcx*8 + 0x430]
mov rbx, qword [rsp + 0x780]
mov rsi, qword [rbx + 0x10]
mov rdi, qword [rsp + 0x738]
mov qword [rsp], rdi
mov rdi, qword [rsp + 0x750]
mov qword [rsp + 8], rdi
imul rdx, rsi
mov qword [rsp + 0x10], rdx
call fcn.004d2980
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x48]
lea rcx, [rdx + 1]
mov rbx, qword [rsp + 0x68]
neg ebx
mov rbx, qword [rsp + 0x88]
adc rax, rbx
mov qword [rsp + rdx*8 + 0x4b0], rax
sbb rbx, rbx
neg rbx
mov rax, qword [rsp + 0x768]
mov rsi, qword [rsp + 0x750]
mov r9, qword [rsp + 0x748]
mov r10, qword [rsp + 0x740]
mov rdx, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x68], rbx
nop word [rax + rax]
cmp rdx, 0x10
jl 0x4d1c5c
cmp qword [rax + 0x10], 0x10
jl 0x4d1db9
mov rsi, qword [rax + 8]
test rsi, rsi
je 0x4d1da1
mov rcx, qword [rax]
shl rsi, 3
mov rbx, rsi
mov rax, rcx
call fcn.0045e800
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rax + 0x10]
cmp rdx, 0x10
jb 0x4d1e70
mov qword [rax + 8], 0x10
jmp 0x4d1e10
lea rax, [0x0056be80]
mov ebx, 0x10
mov rcx, rbx
call fcn.00446ca0
mov rdx, qword [rsp + 0x768]
mov qword [rdx + 8], 0x10
mov qword [rdx + 0x10], 0x10
cmp dword [0x00752400], 0
je 0x4d1dfd
call fcn.0045dd80
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rax, rdx
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x68]
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
cmp rsi, 0x10
mov edi, 0x10
cmovg rsi, rdi
lea rdi, [rsp + 0x4b0]
cmp rdx, rdi
je 0x4d1e5a
shl rsi, 3
mov rax, rdx
mov rbx, rdi
mov rcx, rsi
nop
call fcn.0045eb00
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x68]
call fcn.004d15a0
mov rax, qword [rsp + 0x768]
add rsp, 0x758
pop rbp
ret
mov ecx, 0x10
call fcn.0045e1a0
mov qword [rsp + 0x40], rdx
mov rax, qword [r10 + rdx*8]
lea rcx, [rsp + rdx*8 + 0x2b0]
mov qword [rsp + 0x738], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rax
call fcn.004d2d20
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + rcx*8 + 0x2b0]
mov rbx, qword [rsp + 0x780]
mov rsi, qword [rbx + 0x10]
mov rdi, qword [rsp + 0x738]
mov qword [rsp], rdi
mov rdi, qword [rsp + 0x750]
mov qword [rsp + 8], rdi
imul rdx, rsi
mov qword [rsp + 0x10], rdx
call fcn.004d2d20
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x40]
lea rcx, [rdx + 1]
mov rbx, qword [rsp + 0x60]
neg ebx
mov rbx, qword [rsp + 0x80]
adc rax, rbx
mov qword [rsp + rdx*8 + 0x370], rax
sbb rbx, rbx
neg rbx
mov rax, qword [rsp + 0x768]
mov rsi, qword [rsp + 0x750]
mov r9, qword [rsp + 0x748]
mov r10, qword [rsp + 0x740]
mov rdx, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x60], rbx
cmp rdx, 0x18
jl 0x4d1e7a
cmp qword [rax + 0x10], 0x18
jl 0x4d1fd4
mov rsi, qword [rax + 8]
test rsi, rsi
je 0x4d1fba
mov rcx, qword [rax]
shl rsi, 3
mov rbx, rsi
mov rax, rcx
nop dword [rax]
call fcn.0045e800
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rax + 0x10]
nop
cmp rdx, 0x18
jb 0x4d207d
mov qword [rax + 8], 0x18
jmp 0x4d202b
lea rax, [0x0056be80]
mov ebx, 0x18
mov rcx, rbx
call fcn.00446ca0
mov rdx, qword [rsp + 0x768]
mov qword [rdx + 8], 0x18
mov qword [rdx + 0x10], 0x18
cmp dword [0x00752400], 0
je 0x4d2018
call fcn.0045dd80
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rax, rdx
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x60]
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
cmp rsi, 0x18
mov edi, 0x18
cmovg rsi, rdi
lea rdi, [rsp + 0x370]
cmp rdx, rdi
je 0x4d2073
shl rsi, 3
mov rax, rdx
mov rbx, rdi
mov rcx, rsi
call fcn.0045eb00
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x60]
call fcn.004d15a0
jmp 0x4d1e5f
mov ecx, 0x18
call fcn.0045e1a0
mov qword [rsp + 0x38], rdx
mov rax, qword [r10 + rdx*8]
lea rcx, [rsp + rdx*8 + 0xb0]
mov qword [rsp + 0x738], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], r9
mov qword [rsp + 0x10], rax
call fcn.004d32e0
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + rcx*8 + 0xb0]
mov rbx, qword [rsp + 0x780]
mov rsi, qword [rbx + 0x10]
mov rdi, qword [rsp + 0x738]
mov qword [rsp], rdi
mov rdi, qword [rsp + 0x750]
mov qword [rsp + 8], rdi
imul rdx, rsi
mov qword [rsp + 0x10], rdx
call fcn.004d32e0
xorps xmm15, xmm15
mov r14, qword [0x007522d0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x18]
mov rdx, qword [rsp + 0x38]
lea rcx, [rdx + 1]
mov rbx, qword [rsp + 0x58]
neg ebx
mov rbx, qword [rsp + 0x78]
adc rax, rbx
mov qword [rsp + rdx*8 + 0x1b0], rax
sbb rbx, rbx
neg rbx
mov rax, qword [rsp + 0x768]
mov rsi, qword [rsp + 0x750]
mov r9, qword [rsp + 0x748]
mov r10, qword [rsp + 0x740]
mov rdx, rcx
mov rcx, qword [rsp + 0x780]
mov qword [rsp + 0x58], rbx
nop dword [rax]
cmp rdx, 0x20
jl 0x4d2087
cmp qword [rax + 0x10], 0x20
jl 0x4d21d9
mov rsi, qword [rax + 8]
test rsi, rsi
je 0x4d21c1
mov rcx, qword [rax]
shl rsi, 3
mov rbx, rsi
mov rax, rcx
call fcn.0045e800
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x58]
mov rdx, qword [rax + 0x10]
cmp rdx, 0x20
jb 0x4d2285
mov qword [rax + 8], 0x20
jmp 0x4d2230
lea rax, [0x0056be80]
mov ebx, 0x20
mov rcx, rbx
call fcn.00446ca0
mov rdx, qword [rsp + 0x768]
mov qword [rdx + 8], 0x20
mov qword [rdx + 0x10], 0x20
cmp dword [0x00752400], 0
je 0x4d221d
call fcn.0045dd80
mov qword [r11], rax
mov rsi, qword [rdx]
mov qword [r11 + 8], rsi
mov qword [rdx], rax
mov rax, rdx
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x58]
mov rdx, qword [rax]
mov rsi, qword [rax + 8]
cmp rsi, 0x20
mov edi, 0x20
cmovg rsi, rdi
lea rdi, [rsp + 0x1b0]
cmp rdx, rdi
je 0x4d227a
shl rsi, 3
mov rax, rdx
mov rbx, rdi
mov rcx, rsi
nop
call fcn.0045eb00
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rbx, qword [rsp + 0x58]
call fcn.004d15a0
nop
jmp 0x4d1e5f
mov ecx, 0x20
call fcn.0045e1a0
lea r11, [r10 + 1]
neg r12d
mov r15, qword [rsp + 0x28]
mov rcx, r13
mov r13, qword [rsp + 0x20]
adc r15, r13
mov qword [rdi + rcx*8], r15
sbb r12, r12
neg r12
mov r10, qword [rsp + 0x740]
mov rcx, qword [rsp + 0x780]
cmp r11, rbx
jge 0x4d2350
lea r13, [r11 + rbx]
cmp r8, r13
jbe 0x4d2594
mov r15, qword [r10 + r11*8]
nop word [rax + rax]
cmp r11, r13
ja 0x4d2589
mov qword [rsp + 0x50], r11
shl r11, 3
mov r10, qword [rsp + 0x50]
sub r10, rdx
sar r10, 0x3f
and r11, r10
lea r10, [rbx - 1]
add r11, rdi
cmp rbx, r10
jbe 0x4d257e
mov qword [rsp + 0xa0], r13
xor r10d, r10d
xor r10d, r10d
mov qword [rsp + 0x28], r10
xor r10d, r10d
jmp 0x4d2509
mov r10, qword [rsp + 0x50]
mov r15, qword [rdi + r10*8]
mov rcx, qword [rcx + 0x10]
imul rcx, r15
xor r15d, r15d
xor r15d, r15d
mov qword [rsp + 0x20], r15
xor r15d, r15d
jmp 0x4d2574
mov qword [rsp + 0x730], rdi
mov qword [rsp + 0x70], r12
nop dword [rax]
cmp qword [rax + 0x10], rbx
jl 0x4d23cf
mov rsi, qword [rax + 8]
test rsi, rsi
je 0x4d23b7
mov rcx, qword [rax]
shl rsi, 3
mov rbx, rsi
mov rax, rcx
nop dword [rax]
call fcn.0045e800
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov rdx, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x730]
mov r8, qword [rsp + 0xa8]
mov r12, qword [rsp + 0x70]
mov rsi, qword [rax + 0x10]
nop dword [rax + rax]
cmp rsi, rbx
jb 0x4d24b0
mov qword [rax + 8], rbx
jmp 0x4d2440
lea rax, [0x0056be80]
mov rcx, rbx
call fcn.00446ca0
mov rdx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x768]
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], rdx
cmp dword [0x00752400], 0
je 0x4d240f
nop dword [rax]
call fcn.0045dd80
mov qword [r11], rax
mov rdi, qword [rsi]
mov qword [r11 + 8], rdi
mov qword [rsi], rax
mov rax, rsi
mov rcx, qword [rsp + 0x780]
mov rbx, rdx
mov rdi, qword [rsp + 0x730]
mov r8, qword [rsp + 0xa8]
mov r12, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x90]
nop dword [rax]
cmp rbx, r8
ja 0x4d24a5
mov rsi, qword [rax]
mov r9, qword [rax + 8]
sub r8, rbx
mov r10, rbx
sub rbx, rdx
shl r10, 3
sar rbx, 0x3f
and rbx, r10
add rbx, rdi
cmp r9, r8
cmovg r9, r8
cmp rsi, rbx
je 0x4d2493
shl r9, 3
mov rax, rsi
mov rcx, r9
call fcn.0045eb00
mov rax, qword [rsp + 0x768]
mov rcx, qword [rsp + 0x780]
mov r12, qword [rsp + 0x70]
mov rbx, r12
call fcn.004d15a0
nop dword [rax + rax]
jmp 0x4d1e5f
mov rax, rbx
mov rcx, r8
call fcn.0045e1e0
mov rcx, rbx
mov rdx, rsi
call fcn.0045e1a0
mov rax, qword [r9 + r10*8]
mul r15
mov r8, qword [r11 + r10*8]
lea r13, [r10 + 1]
add r8, rax
adc rdx, 0
mov rax, qword [rsp + 0x28]
add rax, r8
mov qword [r11 + r10*8], rax
adc rdx, 0
mov rax, qword [rsp + 0x768]
mov r8, qword [rsp + 0xa8]
mov r10, r13
mov qword [rsp + 0x28], rdx
mov rdx, qword [rsp + 0x90]
mov r13, qword [rsp + 0xa0]
cmp r10, rbx
jl 0x4d24bb
jmp 0x4d232c
mov rax, qword [rsi + r15*8]
mov qword [rsp + 0x98], rax
mov rax, rcx
mov r9, qword [rsp + 0x98]
mul r9
mov r9, qword [r11 + r15*8]
lea r8, [r15 + 1]
add r9, rax
adc rdx, 0
mov rax, qword [rsp + 0x20]
add rax, r9
mov qword [r11 + r15*8], rax
adc rdx, 0
mov rax, qword [rsp + 0x768]
mov r9, qword [rsp + 0x748]
mov r15, r8
mov qword [rsp + 0x20], rdx
mov rdx, qword [rsp + 0x90]
mov r8, qword [rsp + 0xa8]
cmp r15, rbx
jl 0x4d2513
jmp 0x4d228f
mov rax, r10
mov rcx, rbx
call fcn.0045e120
mov rax, r11
mov rcx, r13
call fcn.0045e1e0
mov rax, r13
mov rcx, r8
call fcn.0045e120
mov rcx, r8
call fcn.0045e1a0
mov rcx, r8
call fcn.0045e1a0
mov rcx, r8
call fcn.0045e1a0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
call fcn.0045be40
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
jmp fcn.004d1a80