Function at 0x4bad80
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x4bb29c
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xf8], rdi
bt esi, 0
jb 0x4badbf
cmp qword [0x006ee2b8], rsi
jg 0x4badbf
cmp rsi, 2
jge 0x4baddc
mov rbx, rsi
shl rbx, 1
cmp rcx, rbx
jb 0x4bb290
call fcn.004ba960
add rsp, 0xd0
pop rbp
ret
mov rdx, rsi
sar rdx, 1
cmp rsi, rdx
jb 0x4bb285
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0xf0], rcx
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], rax
mov rsi, rdx
call fcn.004bad80
mov r8, qword [rsp + 0x108]
mov rdx, qword [rsp + 0x58]
mov r9, r8
sub r9, rdx
mov r10, rdx
shl rdx, 3
mov r11, r9
neg r9
sar r9, 0x3f
and r9, rdx
mov rsi, qword [rsp + 0x100]
mov rax, rsi
sub rsi, r10
mov r12, qword [rsp + 0xf8]
lea rdi, [r12 + r9]
mov rcx, qword [rsp + 0xe8]
cmp rcx, rax
jb 0x4bb280
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0xa0], r11
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0x98], rdx
mov rdx, qword [rsp + 0xf0]
sub rdx, rax
mov rbx, rcx
sub rbx, rax
shl rax, 3
mov qword [rsp + 0x90], rax
mov r12, rdx
neg rdx
sar rdx, 0x3f
and rdx, rax
mov r13, qword [rsp + 0xe0]
add rdx, r13
mov r8, r11
mov rax, rdx
mov rcx, r12
call fcn.004bad80
mov rax, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x58]
lea rcx, [rdx + rax*2]
mov r9, qword [rsp + 0xf0]
cmp r9, rcx
jb 0x4bb277
mov rbx, rax
shl rbx, 1
cmp rcx, rbx
jb 0x4bb26f
mov qword [rsp + 0x88], rbx
sub r9, rbx
mov qword [rsp + 0x50], r9
mov rsi, r9
neg r9
shl rax, 4
sar r9, 0x3f
and rax, r9
mov r8, qword [rsp + 0xe0]
add rax, r8
mov qword [rsp + 0xa8], rax
mov qword [rsp], rax
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], rsi
mov r9, qword [rsp + 0xb0]
mov qword [rsp + 0x18], r9
mov r10, qword [rsp + 0x60]
mov qword [rsp + 0x20], r10
mov r11, qword [rsp + 0xa0]
mov qword [rsp + 0x28], r11
mov r12, qword [rsp + 0xf8]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], rdx
mov r13, qword [rsp + 0x108]
mov qword [rsp + 0x40], r13
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
je 0x4bb029
mov rax, qword [rsp + 0xa8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x50]
mov qword [rsp + 0x10], rdx
mov rbx, qword [rsp + 0xf8]
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rcx
mov rbx, qword [rsp + 0x108]
mov qword [rsp + 0x28], rbx
mov rbx, qword [rsp + 0xb0]
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsp + 0x60]
mov qword [rsp + 0x38], rbx
mov rbx, qword [rsp + 0xa0]
mov qword [rsp + 0x40], rbx
call fcn.004c3580
xorps xmm15, xmm15
mov r14, qword [0x007b3c90]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rdx, qword [rsp + 0x100]
lea rax, [rdx + rdx*2]
mov rcx, qword [rsp + 0xe8]
nop dword [rax]
cmp rcx, rax
jb 0x4bb26a
mov rdx, qword [rsp + 0xf0]
sub rdx, rax
mov qword [rsp + 0x70], rdx
mov rbx, rcx
sub rbx, rax
mov qword [rsp + 0x68], rbx
mov r10, rdx
neg rdx
shl rax, 3
sar rdx, 0x3f
and rax, rdx
mov rdx, qword [rsp + 0xe0]
add rax, rdx
mov qword [rsp + 0xb8], rax
mov rdi, qword [rsp + 0xa8]
mov rsi, qword [rsp + 0x58]
mov r8, qword [rsp + 0x50]
mov rcx, r10
nop dword [rax]
call fcn.004bad80
mov rax, qword [rsp + 0x100]
mov r9, rax
shl rax, 2
mov rcx, qword [rsp + 0xe8]
nop dword [rax]
cmp rcx, rax
jb 0x4bb265
mov rsi, rcx
sub rsi, rax
mov qword [rsp + 0x78], rsi
mov r8, qword [rsp + 0xf0]
mov rdx, r8
sub rdx, rax
mov qword [rsp + 0x80], rdx
mov r10, rdx
neg rdx
mov r11, r9
shl r11, 5
sar rdx, 0x3f
and r11, rdx
mov rbx, qword [rsp + 0xe0]
lea rdi, [rbx + r11]
mov qword [rsp + 0xc0], rdi
mov rdx, qword [rsp + 0x88]
cmp rdx, rsi
mov r12, rsi
cmovl r12, rdx
test r11, r11
je 0x4bb16d
shl r12, 3
mov rax, rdi
mov rcx, r12
call fcn.0046b2c0
mov rcx, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0x78]
mov rdi, qword [rsp + 0xc0]
mov r8, qword [rsp + 0xf0]
mov r9, qword [rsp + 0x100]
mov r10, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x58]
sub r8, rdx
mov qword [rsp + 0xa0], r8
mov r11, r8
neg r8
sar r8, 0x3f
mov r12, qword [rsp + 0x98]
and r8, r12
lea rax, [rbx + r8]
mov qword [rsp + 0xc8], rax
sub rcx, rdx
mov qword [rsp + 0x98], rcx
mov rbx, rcx
mov rcx, r11
mov r8, r10
call fcn.004b9340
mov rax, qword [rsp + 0x100]
mov rcx, qword [rsp + 0x78]
cmp rax, rcx
ja 0x4bb260
mov r8, qword [rsp + 0x80]
sub r8, rax
sub rcx, rax
mov rdx, r8
neg rdx
sar rdx, 0x3f
mov r10, qword [rsp + 0x90]
and rdx, r10
mov r10, qword [rsp + 0xc0]
lea rdi, [r10 + rdx]
mov rbx, qword [rsp + 0x98]
mov rsi, rcx
mov r9, rax
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xa0]
call fcn.004b9340
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
mov rdi, qword [rsp + 0xb8]
mov rsi, qword [rsp + 0x68]
mov r8, qword [rsp + 0x70]
mov r9, qword [rsp + 0x100]
call fcn.004b94e0
add rsp, 0xd0
pop rbp
ret
call fcn.0046a9c0
call fcn.0046a9c0
call fcn.0046a9c0
mov rax, rbx
call fcn.0046a9c0
mov rdx, r9
call fcn.0046a980
nop
call fcn.0046a9c0
mov rax, rdx
mov rcx, rsi
call fcn.0046a9c0
mov rdx, rcx
mov rcx, rbx
call fcn.0046a980
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
call fcn.00468620
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
nop dword [rax]
jmp fcn.004bad80