Function at 0x428800
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x7f8]
cmp r12, qword [r14 + 0x10]
jbe 0x428b31
push rbp
mov rbp, rsp
sub rsp, 0x870
lea rdi, [rsp + 0x70]
mov ecx, 0x100
mov rdx, rax
xor eax, eax
rep stosq qword [rdi], rax
mov dword [rsp + 0x40], 0
mov dword [rsp + 0x4c], 0
mov dword [rsp + 0x44], 0
mov qword [rsp + 0x50], 0
mov rbx, qword [r14 + 0x30]
cmp qword [0x005fa298], 0xffffffffffffffff
nop dword [rax]
je 0x4289d2
test rdx, rdx
jge 0x428875
mov rcx, rdx
mov edx, 0xffffffff
jmp 0x4288c3
jne 0x428880
mov rcx, rdx
xor edx, edx
jmp 0x4288c3
cmp rdx, 0xf4240
jge 0x428893
mov rcx, rdx
mov edx, 1
jmp 0x4288c3
movabs rcx, 0x38d7ea4c68000
nop dword [rax]
cmp rdx, rcx
jge 0x4288bb
movabs rax, 0x431bde82d7b634db
mov rcx, rdx
imul rdx
sar rdx, 0x12
jmp 0x4288c3
mov rcx, rdx
mov edx, 0x3b9aca00
movsxd rsi, dword [0x0065e400]
test rsi, rsi
je 0x428b2b
mov eax, 0x40
mov edi, edx
nop word [rax + rax]
cmp rsi, 0xffffffffffffffff
jne 0x4288ed
neg rax
xor edx, edx
jmp 0x4288f2
cqo
idiv rsi
mov dword [rsp + 0x44], eax
cmp eax, 8
jae 0x428908
mov dword [rsp + 0x44], 8
test rcx, rcx
jmp 0x42890b
test rcx, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x68], rbx
je 0x42891e
mov byte [rbx + 0xe5], 1
mov rax, qword [0x005fa298]
mov rcx, qword [sym.imp.kernel32.dll_GetQueuedCompletionStatusEx]
lea rdx, [rsp + 0x70]
mov ebx, dword [rsp + 0x44]
lea rsi, [rsp + 0x44]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov eax, edi
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 0
call fcn.0042b480
xorps xmm15, xmm15
mov r14, qword [0x0065e5b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x38], 0
nop
je 0x428997
mov rdx, qword [rsp + 0x68]
mov byte [rdx + 0xe5], 0
mov rdx, qword [rsp + 0x58]
xor eax, eax
jmp 0x4289f1
mov rax, qword [rsp + 0x68]
mov byte [rax + 0xe5], 0
call fcn.00452360
xorps xmm15, xmm15
mov r14, qword [0x0065e5b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
nop dword [rax]
cmp eax, 0x102
jne 0x4289dd
xor eax, eax
add rsp, 0x870
pop rbp
ret
xor eax, eax
add rsp, 0x870
pop rbp
ret
lea rax, [0x005644ce]
mov ebx, 0x17
call fcn.0042d980
lea eax, [rbx + 1]
cmp dword [rsp + 0x44], eax
jbe 0x428b13
nop dword [rax + rax]
cmp rax, 0x40
jae 0x428b21
mov dword [rsp + 0x48], eax
mov ebx, eax
shl rax, 5
mov rsi, qword [rsp + rax + 0x78]
nop dword [rax]
test rsi, rsi
je 0x428ae6
mov rdi, qword [rsi + 0x20]
mov r8, qword [rsp + rax + 0x70]
cmp r8, rdi
je 0x428a3f
test rdx, rdx
jmp 0x428ae9
mov qword [rsp + 0x60], rsi
mov dword [rsp + 0x40], 0
mov rax, qword [0x0060a1b0]
mov rcx, qword [rsi + 0x20]
mov rcx, qword [rcx + 8]
lea rbx, [rsp + 0x40]
lea rdi, [rsp + 0x4c]
mov qword [rsp], rax
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], rdi
call fcn.0042b400
xorps xmm15, xmm15
mov r14, qword [0x0065e5b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
cmp qword [rsp + 0x30], 0
je 0x428aa9
xor eax, eax
jmp 0x428ac3
call fcn.00452360
xorps xmm15, xmm15
mov r14, qword [0x0065e5b0]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov edi, dword [rsp + 0x40]
mov rbx, qword [rsp + 0x60]
mov ecx, eax
lea rax, [rsp + 0x50]
call fcn.00428b60
mov rdx, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x48]
jmp 0x4289ee
test rdx, rdx
nop
mov esi, 0
lea rdi, [0x0065e3dc]
xchg dword [rdi], esi
jne 0x4289ee
nop
call fcn.00428740
mov rdx, qword [rsp + 0x58]
mov ebx, dword [rsp + 0x48]
jmp 0x4289ee
mov rax, qword [rsp + 0x50]
add rsp, 0x870
pop rbp
ret
mov ecx, 0x40
call fcn.00450f20
call fcn.0042c440
nop
mov qword [rsp + 8], rax
call fcn.0044eca0
mov rax, qword [rsp + 8]
jmp fcn.00428800