Function at 0x10000b134
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa8
mov rbx, rcx
lea rdx, [0x1000069e0]
lea rcx, [rsp + 0x38]
mov r9d, 1
mov r8d, 0x46d
call fcn.10001ed8c
xor esi, esi
mov eax, 0x47d
mov r15, rsi
mov qword [rsp + 0x30], rsi
mov r14d, esi
mov dword [rsp + 0xf8], esi
mov dword [rsp + 0xf0], esi
mov qword [rsp + 0x70], rsi
mov rdi, rsi
mov qword [rsp + 0x80], rsi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x88], rsi
cmp rbx, rsi
jne 0x10000b1bc
mov dword [rsp + 0x38], 0x80070057
mov word [rsp + 0x3e], ax
jmp 0x10000b782
mov edx, dword [rbx + 0xd0]
lea r8, [rsp + 0x88]
lea rcx, [0x100005f70]
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
call fcn.1000098d0
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x483
jl 0x10000b1b2
mov edx, dword [rbx + 0xc8]
lea r8, [rsp + 0x78]
lea rcx, [0x100005e40]
mov word [rsp + 0x3c], ax
call fcn.1000098d0
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x484
jl 0x10000b1b2
mov word [rsp + 0x3c], ax
cmp dword [rbx + 0x28], esi
je 0x10000b264
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbx + 0x1b0]
mov rax, qword [rcx]
call qword [rax + 0xa8]
cmp eax, 0x80780015
jne 0x10000b24e
mov eax, 0x48c
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
jmp 0x10000b782
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x48e
jl 0x10000b1b2
mov word [rsp + 0x3c], ax
mov rcx, qword [rsp + 0x78]
lea rbp, [rbx + 0xa8]
lea rdx, [rbx + 0xa0]
mov rax, qword [rcx]
mov r8, rbp
call qword [rax + 0xd0]
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x491
jl 0x10000b1b2
mov word [rsp + 0x3c], ax
cmp dword [rbx + 0xa0], esi
jne 0x10000b2a8
mov eax, 0x495
jmp 0x10000b240
mov ecx, dword [rbx + 0xa0]
shl rcx, 4
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov r13, rax
cmp rax, rsi
mov eax, 0x499
jne 0x10000b2d7
mov dword [rsp + 0x38], 0x8007000e
mov word [rsp + 0x3e], ax
jmp 0x10000b74d
mov r8d, dword [rbx + 0xa0]
xor edx, edx
mov rcx, r13
shl r8, 4
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
call fcn.10002a670
mov ecx, dword [rbx + 0xa0]
shl rcx, 4
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov r15, rax
cmp rax, rsi
mov eax, 0x49d
je 0x10000b2c5
mov r8d, dword [rbx + 0xa0]
xor edx, edx
mov rcx, r15
shl r8, 4
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
call fcn.10002a670
mov ecx, esi
mov dword [rsp + 0x100], ecx
cmp dword [rbx + 0xa0], esi
jbe 0x10000b73f
mov qword [rsp + 0x108], r15
mov rbp, qword [rbp]
cmp byte [rsi + rbp + 0x70], dil
je 0x10000b3f9
cmp dword [rsi + rbp + 0x18], 1
jne 0x10000b3f9
cmp dword [rsi + rbp + 0x1c], 2
je 0x10000b379
cmp dword [rsi + rbp + 0x1c], 3
jne 0x10000b3f9
mov rax, qword [rsi + rbp + 0x20]
cmp qword [rax + 0x50], rdi
je 0x10000b3f9
cmp byte [rsi + rbp + 0x89], dil
je 0x10000b3f9
mov rcx, qword [rsp + 0x78]
movdqu xmm0, xmmword [rsi + rbp]
mov r8d, r14d
mov rax, qword [rcx]
shl r8, 4
lea rdx, [rsp + 0x90]
movdqu xmmword [rsp + 0x90], xmm0
add r8, r13
lea r9, [r8 + 8]
call qword [rax + 0x240]
mov dword [rsp + 0x38], eax
test eax, eax
mov eax, 0x4ba
js 0x10000b41d
mov ecx, dword [rsp + 0x100]
mov word [rsp + 0x3c], ax
mov rax, qword [rsp + 0x108]
movdqu xmm0, xmmword [rsi + rbp]
movdqu xmmword [rax], xmm0
inc r14d
add rax, 0x10
mov qword [rsp + 0x108], rax
inc ecx
add rsi, 0xa8
mov dword [rsp + 0x100], ecx
cmp ecx, dword [rbx + 0xa0]
jae 0x10000b429
lea rbp, [rbx + 0xa8]
jmp 0x10000b34d
mov word [rsp + 0x3e], ax
xor esi, esi
jmp 0x10000b74d
xor esi, esi
cmp r14d, esi
je 0x10000b73f
lea rax, [rsp + 0x30]
mov r9, r15
mov r8, r13
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xf8]
mov edx, r14d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.10000ad3c
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x4c7
jl 0x10000b2cd
mov rcx, qword [rsp + 0x88]
mov r9, qword [rsp + 0x30]
lea r8, [rsp + 0x70]
mov qword [rsp + 0x28], r8
lea r8, [rsp + 0xf0]
mov word [rsp + 0x3c], ax
mov rax, qword [rcx]
mov qword [rsp + 0x20], r8
mov r8d, dword [rsp + 0xf8]
lea edx, [rsi + 2]
call qword [rax + 0x20]
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x4ca
jl 0x10000b2cd
mov word [rsp + 0x3c], ax
cmp dword [rsp + 0xf0], esi
jne 0x10000b4d0
mov eax, 0x4cd
jmp 0x10000b744
mov rdx, qword [rsp + 0x70]
lea rcx, [rbx + 0x30]
lea r8, [rsp + 0xf0]
call fcn.10000a9dc
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x4d0
jl 0x10000b2cd
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0xf0]
cmp eax, esi
jne 0x10000b511
mov eax, 0x4d3
jmp 0x10000b744
mov rcx, rax
imul rcx, rcx, 0xb8
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rdi, rax
mov qword [rsp + 0x80], rax
cmp rax, rsi
mov eax, 0x4d7
je 0x10000b2c5
mov r8d, dword [rsp + 0xf0]
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
imul r8, r8, 0xb8
call fcn.10002a670
mov r8d, dword [rsp + 0xf0]
mov dword [rsp + 0x100], esi
cmp r8d, esi
jbe 0x10000b6f2
lea rbp, [rdi + 0xc]
mov rax, qword [rsp + 0x70]
mov r8, qword [rsp + 0x30]
mov edx, dword [rsp + 0xf8]
movdqu xmm0, xmmword [rsi + rax]
and dword [rsp + 0x108], 0
lea r9, [rsp + 0x108]
movdqu xmmword [rsp + 0x90], xmm0
lea rcx, [rsp + 0x90]
call fcn.10000a4e0
mov dword [rsp + 0x38], eax
test eax, eax
mov eax, 0x4de
js 0x10000b41d
mov word [rsp + 0x3c], ax
mov rax, qword [rsp + 0x70]
lea rcx, [rbp + 0x24]
lea rdx, [rsi + rax]
mov r8d, 0x88
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x30]
mov r11d, dword [rsp + 0x108]
lea rdx, [r11 + r11*4]
mov r8d, 0x88
shl rdx, 5
mov ecx, dword [rdx + rax + 0x80]
mov dword [rbp], ecx
mov rax, qword [rsp + 0x30]
mov ecx, dword [rdx + rax + 0x70]
mov dword [rbp - 4], ecx
mov rax, qword [rsp + 0x30]
mov ecx, dword [rdx + rax + 0x90]
mov dword [rbp + 4], ecx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rdx + rax + 0x88]
mov qword [rbp + 0x14], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rdx + rax + 0x78]
mov qword [rbp + 0xc], rcx
mov rax, qword [rsp + 0x30]
mov rcx, qword [rdx + rax + 0x98]
mov qword [rbp + 0x1c], rcx
mov dword [rbp - 0xc], 1
mov dword [rbp - 8], 1
mov rax, qword [rsp + 0x30]
xor ecx, ecx
mov dword [rdx + rax + 0x80], ecx
mov rax, qword [rsp + 0x30]
mov dword [rdx + rax + 0x70], ecx
mov rax, qword [rsp + 0x30]
mov dword [rdx + rax + 0x90], ecx
mov rax, qword [rsp + 0x30]
mov qword [rdx + rax + 0x78], rcx
mov rax, qword [rsp + 0x30]
mov qword [rdx + rax + 0x88], rcx
mov rax, qword [rsp + 0x30]
mov qword [rdx + rax + 0x98], rcx
mov ecx, dword [rsp + 0x100]
xor edx, edx
imul rcx, rcx, 0x88
add rcx, qword [rsp + 0x70]
call fcn.10002a670
mov eax, dword [rsp + 0x100]
mov r8d, dword [rsp + 0xf0]
inc eax
add rsi, 0x88
add rbp, 0xb8
mov dword [rsp + 0x100], eax
cmp eax, r8d
jb 0x10000b578
xor esi, esi
mov rdx, qword [rbx + 0xa8]
mov ecx, dword [rbx + 0xa0]
mov r9, rdi
call fcn.10000a80c
mov dword [rsp + 0x38], eax
cmp eax, esi
mov eax, 0x503
jl 0x10000b2cd
mov word [rsp + 0x3c], ax
mov eax, dword [rsp + 0xf0]
mov qword [rbx + 0x68], rdi
mov rdi, rsi
mov qword [rsp + 0x80], rsi
mov dword [rsp + 0xf0], esi
mov dword [rbx + 0x60], eax
jmp 0x10000b74d
mov eax, 0x4c3
mov dword [rsp + 0x38], esi
mov word [rsp + 0x3c], ax
cmp r13, rsi
je 0x10000b782
cmp r14d, esi
jbe 0x10000b779
lea rbx, [r13 + 8]
mov esi, r14d
mov rcx, qword [rbx]
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rbx], 0
and dword [rbx - 8], 0
add rbx, 0x10
sub rsi, 1
jne 0x10000b75e
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp qword [rsp + 0x30], rsi
je 0x10000b7a3
mov ecx, dword [rsp + 0xf8]
lea rdx, [rsp + 0x30]
call sub.SPP.dll_SppFreeExternalGroupPropArray
cmp qword [rsp + 0x70], rsi
je 0x10000b7bb
mov ecx, dword [rsp + 0xf0]
lea rdx, [rsp + 0x70]
call sub.SRCORE.dll_SrFreeRpPropArray
cmp rdi, rsi
je 0x10000b7d4
mov ecx, dword [rsp + 0xf0]
lea rdx, [rsp + 0x80]
call fcn.100008fc4
mov rcx, qword [rsp + 0x88]
mov ebx, dword [rsp + 0x38]
cmp rcx, rsi
je 0x10000b7eb
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov rcx, qword [rsp + 0x78]
cmp rcx, rsi
je 0x10000b7fb
mov rdx, qword [rcx]
call qword [rdx + 0x10]
lea rcx, [rsp + 0x38]
call fcn.10001eea4
mov eax, ebx
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret