Function at 0x4c9120
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x4c97b3
push rbp
mov rbp, rsp
sub rsp, 0xd0
mov qword [rsp + 0x120], r11
mov qword [rsp + 0x118], r10
mov qword [rsp + 0x110], r9
mov qword [rsp + 0x108], r8
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0xe0], rax
lea rcx, [r10 + 1]
mov rax, rcx
call fcn.004c3540
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 1]
mov rbx, qword [rsp + 0x100]
mov rsi, rbx
sub rbx, rcx
cmp rcx, rdx
jbe 0x4c97aa
mov r8, qword [rsp + 0x110]
mov rdx, qword [r8 + rcx*8 - 8]
nop
nop
nop
bsr r9, rdx
mov r10, 0xffffffffffffffff
cmove r9, r10
lea r10, [r9 - 0x3f]
neg r10
inc r9
neg r9
mov rdi, rcx
mov rcx, r9
mov r11, rdx
shl r11, cl
cmp r10, 0x40
sbb r9, r9
and r11, r9
test r11, r11
je 0x4c97a5
mov r9, r11
not r11
nop word [rax + rax]
cmp r11, r9
jae 0x4c97a0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0x70], rdx
mov rcx, rdx
mov rdx, r11
mov r10, rax
mov rax, 0xffffffffffffffff
div r9
mov qword [rsp + 0x50], rax
mov r9, qword [r10 + 8]
mov qword [rsp + 0x60], r9
mov rdx, qword [r10 + 0x10]
mov qword [rsp + 0x68], rdx
mov r11, qword [r10]
mov qword [rsp + 0xc0], r11
mov r12, qword [rsp + 0xf8]
mov r13, qword [rsp + 0x120]
mov r15, rbx
jmp 0x4c92c8
lea rbx, [rax - 1]
mov rax, qword [rsp + 0x50]
mov r13, qword [rsp + 0x120]
mov rdx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x68]
mov r10, qword [rsp + 0xc0]
mov r15, qword [rsp + 0x70]
mov rcx, r15
mov rdx, rdi
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x60]
mov r10, qword [rsp + 0xb8]
mov r11, qword [rsp + 0xc0]
mov r12, qword [rsp + 0xf8]
mov r15, qword [rsp + 0x58]
test rbx, rbx
jl 0x4c9698
lea r10, [rdi + rbx]
mov qword [rsp + 0xb0], r10
nop dword [rax]
cmp rsi, r10
jle 0x4c9302
jbe 0x4c9792
mov r10, qword [r12 + r10*8]
mov qword [rsp + 0x88], r10
mov r10, qword [rsp + 0xb0]
nop
jmp 0x4c931c
mov qword [rsp + 0x98], rax
xor eax, eax
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x90], rbx
mov r10, qword [rsp + 0x88]
cmp r10, rcx
je 0x4c93bf
lea r15, [rbx + rdi]
lea r15, [r15 - 1]
nop dword [rax]
cmp rsi, r15
jbe 0x4c9787
mov rbx, qword [r12 + r15*8]
mov rdi, rax
mov rax, r10
call 0x4bc360
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 2]
cmp rcx, rdx
jbe 0x4c977f
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsi + rcx*8 - 0x10]
mov rdx, rax
mov rax, rdi
mov r8, rdx
mul rdx
mov r9, qword [rsp + 0x90]
lea r10, [r9 + rcx]
lea r10, [r10 - 2]
mov r11, qword [rsp + 0x100]
nop
cmp r11, r10
jbe 0x4c9774
mov r12, qword [rsp + 0xf8]
mov r10, qword [r12 + r10*8]
mov r13, qword [rsp + 0x70]
jmp 0x4c9711
mov r10, 0xffffffffffffffff
cmp rdi, rdx
ja 0x4c96fd
mov qword [rsp + 0x78], r10
mov qword [rsp], r11
mov qword [rsp + 8], rdi
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x38], 0
nop
call fcn.004cb2e0
xorps xmm15, xmm15
mov r14, qword [0x0071ba10]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x118]
mov rcx, qword [rsp + 0x60]
cmp rax, rcx
jae 0x4c96f8
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0xc0]
mov qword [rsi + rax*8], rbx
mov rdi, qword [rsp + 0x90]
lea r8, [rcx + rdi]
mov r9, qword [rsp + 0x100]
cmp r9, r8
jge 0x4c9462
test rbx, rbx
jne 0x4c9462
lea rbx, [rcx - 1]
jmp 0x4c9465
mov rbx, rcx
lea r8, [rbx + rdi]
mov rdx, qword [rsp + 0x108]
cmp rdx, r8
jb 0x4c96f0
nop word [rax + rax]
cmp rdi, r8
ja 0x4c96e5
sub rdx, rdi
mov r10, rdx
neg rdx
mov r11, rdi
shl rdi, 3
sar rdx, 0x3f
and rdx, rdi
mov rdi, qword [rsp + 0xf8]
add rdx, rdi
cmp r9, r11
jb 0x4c96d7
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0xa8], r10
mov qword [rsp + 0xc8], rdx
mov qword [rsp], rdx
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], rdx
sub r9, r11
mov qword [rsp + 0xa0], r9
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x38], rcx
mov rdi, qword [rsp + 0x68]
mov qword [rsp + 0x40], rdi
call fcn.004cb020
xorps xmm15, xmm15
mov r14, qword [0x0071ba10]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x4c9549
mov rcx, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x78]
jmp 0x4c9649
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xb0]
nop dword [rax]
cmp rdx, rcx
jb 0x4c96d2
mov rax, qword [rsp + 0x90]
cmp rax, rcx
ja 0x4c96cd
mov rax, qword [rsp + 0xc8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x40], rdx
call fcn.004caf80
xorps xmm15, xmm15
mov r14, qword [0x0071ba10]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rcx, qword [rsp + 0x118]
mov rax, qword [rsp + 0x80]
nop dword [rax]
cmp rcx, rax
jge 0x4c9631
mov rsi, qword [rsp + 0x100]
mov rax, qword [rsp + 0xb0]
cmp rsi, rax
jbe 0x4c96c5
mov r8, qword [rsp + 0x48]
mov r9, qword [rsp + 0xf8]
add qword [r9 + rax*8], r8
jmp 0x4c9641
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r10, qword [rsp + 0x78]
dec r10
mov rax, qword [rsp + 0x90]
mov r8, qword [rsp + 0x58]
cmp rax, r8
jne 0x4c967a
mov r11, qword [rsp + 0xe8]
cmp r11, r8
jne 0x4c9682
test r10, r10
jne 0x4c9682
mov r12, qword [rsp + 0xe0]
jmp 0x4c9265
mov r11, qword [rsp + 0xe8]
cmp r11, rax
jbe 0x4c96b8
mov r12, qword [rsp + 0xe0]
mov qword [r12 + rax*8], r10
jmp 0x4c9265
nop
lea rax, [0x00695e60]
lea rbx, [0x00563a80]
mov rcx, r10
call fcn.004663a0
add rsp, 0xd0
pop rbp
ret
mov rcx, r11
nop dword [rax + rax]
call fcn.0045e960
mov rcx, rsi
call fcn.0045e960
call fcn.0045ea20
call fcn.0045e9e0
mov rax, r11
mov rcx, r9
nop dword [rax]
call fcn.0045ea20
mov rax, rdi
mov rcx, r8
call fcn.0045ea20
mov rcx, r8
call fcn.0045e9e0
call fcn.0045e960
mov rcx, rdi
call fcn.0045e9e0
mov rbx, rax
mul rdi
mov r8, rbx
mov rbx, r15
cmp rbx, rdx
jb 0x4c971d
jne 0x4c972c
cmp rax, r10
jbe 0x4c972c
lea r15, [rbx + r13]
lea rax, [r8 - 1]
cmp rbx, r15
jbe 0x4c9705
jmp 0x4c972f
mov rax, r8
mov rcx, r13
mov rdx, qword [rsp + 0x68]
mov rbx, r9
mov rsi, r11
mov rdi, qword [rsp + 0x118]
mov r8, qword [rsp + 0x110]
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x120]
mov r15, qword [rsp + 0x58]
mov r10, rax
mov rax, qword [rsp + 0x50]
jmp 0x4c93c6
mov rax, r10
mov rcx, r11
call fcn.0045e960
mov rax, rdx
call fcn.0045e960
mov rax, r15
mov rcx, rsi
call fcn.0045e960
mov rax, r10
mov rcx, rsi
call fcn.0045e960
nop dword [rax]
call fcn.004328e0
call fcn.00432880
mov rax, rdx
call fcn.0045e960
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.0045c680
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.004c9120