Function at 0x4b85c0
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x20]
cmp r12, qword [r14 + 0x10]
jbe 0x4b8b06
push rbp
mov rbp, rsp
sub rsp, 0x98
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0x100], r9
mov rbx, qword [rsp + 0xc8]
nop word [rax + rax]
cmp rsi, rbx
jne 0x4b8af0
cmp r10, rbx
jne 0x4b8af0
mov r10, qword [rsp + 0xb0]
nop word [rax + rax]
cmp r10, rbx
jne 0x4b8af0
mov qword [rsp + 0x100], r9
mov qword [rsp + 0xf8], r8
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xe8], rdi
mov r11, rbx
shl r11, 1
cmp rcx, r11
jl 0x4b8660
jae 0x4b8718
jmp 0x4b8ae5
cmp r11, 1
jne 0x4b86b7
lea rax, [0x0055f0a0]
mov ebx, 1
mov rcx, rbx
call fcn.00466d20
mov rbx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf8]
mov r9, qword [rsp + 0x100]
mov r10, qword [rsp + 0xb0]
mov r11d, 1
mov ecx, 1
jmp 0x4b8718
mov qword [rsp + 0x80], r11
lea rcx, [rbx + rbx]
lea rcx, [rcx + 4]
mov qword [rsp + 0x58], rcx
lea rax, [0x0055f0a0]
mov rbx, r11
call fcn.00466d20
mov rbx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf8]
mov r9, qword [rsp + 0x100]
mov r10, qword [rsp + 0xb0]
mov r11, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x88], rax
test r11, r11
je 0x4b877d
mov rbx, r11
shl rbx, 3
call fcn.0046de20
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xf0]
mov rdi, qword [rsp + 0xe8]
mov r8, qword [rsp + 0xf8]
mov r9, qword [rsp + 0x100]
mov r10, qword [rsp + 0xb0]
mov r11, qword [rsp + 0x50]
xor edx, edx
xor r12d, r12d
jmp 0x4b87e0
mov rdx, qword [rsp + 0x60]
inc rdx
mov r13, qword [rsp + 0xf0]
mov r15, qword [rsp + 0xf8]
mov rbx, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x100]
mov rdi, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0x58]
mov rsi, r13
mov r8, r15
mov r10, qword [rsp + 0xb0]
mov r11, qword [rsp + 0x50]
mov r12, rax
mov rax, qword [rsp + 0x88]
nop word [rax + rax]
cmp rbx, rdx
jle 0x4b8970
lea r13, [rdx + rbx]
mov r15, qword [r9 + rdx*8]
cmp rcx, r13
jb 0x4b8ad6
nop word [rax + rax]
cmp rdx, r13
ja 0x4b8acb
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x70], r12
mov r9, rdx
shl rdx, 3
sub rcx, r9
mov qword [rsp + 0x78], rcx
mov r11, rcx
neg rcx
sar rcx, 0x3f
and rcx, rdx
add rcx, rax
mov qword [rsp + 0x90], rcx
mov qword [rsp], rcx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r11
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x30], r15
call fcn.004c3b40
xorps xmm15, xmm15
mov r14, qword [0x007420f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
cmp rax, rcx
jae 0x4b8ac6
mov rcx, qword [rsp + 0x38]
mov qword [rsp + 0x68], rcx
mov rdx, qword [rsp + 0x88]
mov rbx, qword [rdx + rax*8]
mov rsi, qword [rsp + 0x90]
mov qword [rsp], rsi
mov rsi, qword [rsp + 0xc8]
mov qword [rsp + 8], rsi
mov rdi, qword [rsp + 0x78]
mov qword [rsp + 0x10], rdi
mov rdi, qword [rsp + 0xa8]
mov qword [rsp + 0x18], rdi
mov r8, qword [rsp + 0xb0]
mov qword [rsp + 0x20], r8
mov r9, qword [rsp + 0xb8]
mov qword [rsp + 0x28], r9
mov r10, qword [rsp + 0xc0]
imul rbx, r10
mov qword [rsp + 0x30], rbx
nop
call fcn.004c3b40
xorps xmm15, xmm15
mov r14, qword [0x007420f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
add rdx, rcx
lea rbx, [rdx + rax]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x80]
nop word [rax + rax]
cmp rsi, rdi
jbe 0x4b8abb
mov r8, qword [rsp + 0x88]
mov qword [r8 + rdi*8], rbx
cmp rcx, rdx
ja 0x4b895f
cmp rax, rbx
jbe 0x4b8969
mov eax, 1
jmp 0x4b8784
xor eax, eax
jmp 0x4b8784
test r12, r12
je 0x4b8a16
nop dword [rax]
cmp rbx, rcx
ja 0x4b8ab0
cmp rbx, r11
ja 0x4b8aa5
mov qword [rsp], rax
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rcx
sub rcx, rbx
sub r11, rbx
mov rsi, rcx
neg rcx
shl rbx, 3
sar rcx, 0x3f
and rcx, rbx
add rcx, rax
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x28], rsi
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], r10
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0x40], rcx
call fcn.004c37c0
xorps xmm15, xmm15
mov r14, qword [0x007420f0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0xc8]
jmp 0x4b8a73
cmp rbx, rcx
ja 0x4b8a97
nop dword [rax + rax]
cmp rbx, r11
ja 0x4b8a8c
sub r11, rbx
mov rsi, rbx
sub rsi, rcx
mov rdi, rbx
shl rdi, 3
sar rsi, 0x3f
and rsi, rdi
lea rdi, [rax + rsi]
cmp rbx, r11
mov r8, rbx
cmovg r8, r11
test rsi, rsi
je 0x4b8a73
shl r8, 3
mov rbx, rdi
mov rcx, r8
call fcn.0046e120
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0xc8]
cmp rbx, rcx
ja 0x4b8a81
add rsp, 0x98
pop rbp
ret
mov rdx, rcx
mov rcx, rbx
call fcn.0046d7e0
mov rax, rbx
mov rcx, r11
call fcn.0046d820
mov rdx, rcx
mov rcx, rbx
nop dword [rax]
call fcn.0046d7e0
mov rax, rbx
mov rcx, r11
call fcn.0046d820
mov rdx, rcx
mov rcx, rbx
call fcn.0046d7e0
mov rax, rdi
mov rcx, rsi
call fcn.0046d760
call fcn.0046d760
mov rax, rdx
mov rcx, r13
call fcn.0046d820
mov rdx, rcx
mov rcx, r13
nop dword [rax]
call fcn.0046d7e0
mov rdx, rcx
mov rcx, r11
call fcn.0046d7e0
lea rax, [0x0055e960]
lea rbx, [0x00638e40]
nop
call fcn.00465960
nop
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x60], r9
mov qword [rsp + 0x68], r10
mov qword [rsp + 0x70], r11
call fcn.0046b480
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov r8, qword [rsp + 0x58]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0x68]
mov r11, qword [rsp + 0x70]
jmp fcn.004b85c0