Function at 0x7ff74aecf00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov r13, r9
mov edi, r8d
mov rsi, rdx
mov r15, rcx
xor ebx, ebx
mov r12d, ebx
cmp dword [rdx + 0x98], ebx
jne 0x7ff74b0c5cd
mov edx, edi
mov rcx, r15
call fcn.7ff74aed31c
cmp eax, ebx
je 0x7ff74b219b1
mov rax, qword [r15 + 0x30]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x58], ebx
mov dword [rsp + 0x5c], ebx
mov rax, qword [rsi + 0x80]
or dword [rax + 4], 8
test byte [r15 + 0x49], 4
jne 0x7ff74b219c3
mov edi, 1
cmp dword [rsi + 0x38], 2
je 0x7ff74b219d7
mov rax, qword [rsi + 0x140]
movdqu xmm0, xmmword [rsi + 0x3c]
movdqu xmmword [rax + 0x20], xmm0
mov qword [rsp + 0x68], rbx
mov dword [rsp + 0x60], ebx
lea rax, [rsp + 0x78]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [0x7ff74b4e3f0]
mov rcx, qword [rsi + 0x130]
call fcn.7ff74aec4a4
mov dword [r13], eax
cmp eax, ebx
jl 0x7ff74b21a16
mov rcx, qword [rsi + 0x10]
add rcx, 8
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
mov edx, edi
call qword [rax + 0x18]
mov dword [r13], eax
cmp eax, ebx
jl 0x7ff74b21a1d
xor edx, edx
lea r8d, [rdx + 0x40]
mov rcx, qword [0x7ff74b584e0]
call qword [0x7ff74b58358]
mov rcx, rax
cmp rax, rbx
je 0x7ff74b21a24
movdqu xmm0, xmmword [rsi + 0x3c]
movdqu xmmword [rsp + 0xc0], xmm0
mov rax, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbx
mov r9d, dword [rsi + 0xd0]
mov r8d, dword [rax + 0x60]
lea rdx, [rsp + 0xc0]
call fcn.7ff74aeb738
mov r14, rax
mov qword [rsp + 0x50], rax
jmp 0x7ff74aed04b
cmp r14, rbx
je 0x7ff74aed05f
mov rdx, r14
mov rcx, qword [0x7ff74b583e0]
call fcn.7ff74aeb6dc
mov eax, dword [rsi + 0x38]
cmp eax, ebx
je 0x7ff74af974b
dec eax
cmp eax, edi
ja 0x7ff74b21a5b
mov r12d, ebx
mov rcx, qword [rsi + 0x90]
mov rdx, qword [rsi + 0x88]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov r9, qword [rsi + 0x80]
mov r8, qword [rsp + 0x70]
lea rdx, [0x7ff74b4ee28]
lea rcx, [0x7ff74b4cba0]
call sub.RPCRT4.dll_NdrClientCall2
mov dword [r13], eax
jmp 0x7ff74aed0cd
jmp 0x7ff74aed0cf
cmp r14, rbx
je 0x7ff74aed11a
mov rdx, r14
mov rcx, qword [0x7ff74b583e0]
call fcn.7ff74aeb7d0
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74aed108
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74aed108
test byte [rcx + 0x1c], 0x20
jne 0x7ff74b21a92
mov r8, r14
xor edx, edx
mov rcx, qword [0x7ff74b584e0]
call qword [case.0x7ff74b3e5fd.0]
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74aed140
mov r10, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp r10, rax
je 0x7ff74aed140
test byte [r10 + 0x1c], 0x10
jne 0x7ff74b21ab0
mov rcx, qword [rsi + 0x10]
add rcx, 8
mov rax, qword [rcx]
mov edx, dword [rsp + 0x60]
call qword [rax + 0x20]
mov r8, qword [rsp + 0x78]
xor edx, edx
mov rcx, qword [0x7ff74b584e0]
call qword [case.0x7ff74b3e5fd.0]
cmp dword [r13], ebx
jne 0x7ff74aed2ad
cmp r12d, ebx
jne 0x7ff74aed2ad
mov qword [rsp + 0x50], rbx
lea rdx, [rsp + 0x50]
mov rcx, qword [rsp + 0x68]
call fcn.7ff74ae8438
mov dword [r13], eax
cmp eax, ebx
jl 0x7ff74aed299
lea rax, [0x7ff74b4da90]
mov qword [rsp + 0x80], rax
lea rax, [0x7ff74b4dfc0]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x90], edi
mov dword [rsp + 0x94], ebx
mov dword [rsp + 0x98], ebx
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0xa8], ebx
mov dword [rsp + 0xac], edi
cmp rax, rbx
je 0x7ff74b21b22
mov eax, dword [rax]
mov dword [rsp + 0x9c], eax
xor edx, edx
mov r8d, 0x350
mov rcx, qword [0x7ff74b584e0]
call qword [0x7ff74b58358]
cmp rax, rbx
je 0x7ff74b21b2e
xor edx, edx
mov rcx, rax
call fcn.7ff74ae93f0
mov rcx, rax
jmp 0x7ff74aed226
mov qword [rsi + 0x138], rcx
cmp rcx, rbx
je 0x7ff74b21b53
mov rax, qword [rcx]
lea r9, [rsp + 0xb0]
lea r8, [0x7ff74b4eee0]
lea rdx, [rsp + 0x80]
call qword [rax + 0x30]
mov r14d, eax
cmp eax, ebx
jl 0x7ff74b21b36
mov rcx, qword [rsp + 0xb0]
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x7ff74aed26e
lea rax, [0x7ff74b4da90]
mov qword [rsp + 0x80], rax
lea rax, [0x7ff74b4dfc0]
mov qword [rsp + 0x88], rax
cmp dword [rsp + 0xa8], ebx
jne 0x7ff74b21b60
mov r8, qword [rsp + 0x68]
xor edx, edx
mov rcx, qword [0x7ff74b584e0]
call qword [case.0x7ff74b3e5fd.0]
mov ecx, edi
cmp r12d, 0x6bb
je 0x7ff74b21b7d
cmp r12d, 0x80010001
je 0x7ff74b21b9d
cmp ecx, ebx
je 0x7ff74aecf9a
cmp r12d, 5
je 0x7ff74b21ca7
cmp r12d, 0x80070005
je 0x7ff74b21ca7
cmp r12d, ebx
jne 0x7ff74b21bc8
cmp dword [r13], 0x80080008
je 0x7ff74b21bc8
mov eax, edi
jmp 0x7ff74aed303
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov r12d, ebx
mov rcx, qword [rsi + 0x90]
mov rdx, qword [rsi + 0x88]
lea rax, [rsp + 0x68]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rdx
mov r9, qword [rsi + 0x80]
mov r8, qword [rsp + 0x70]
lea rdx, [0x7ff74b4ede6]
lea rcx, [0x7ff74b4cba0]
call sub.RPCRT4.dll_NdrClientCall2
mov dword [r13], eax
jmp 0x7ff74aed0cf
cmp dword [rdx + 0x158], ebx
je 0x7ff74aecf3e
xor r8d, r8d
mov rdx, qword [rdx]
mov rcx, qword [rcx + 0x28]
call fcn.7ff74b0c0c0
cmp eax, ebx
jne 0x7ff74aecf3e
jmp 0x7ff74b21917
lea edi, [rbx + 1]
lock add dword [r15 + 0x64], edi
mov r11d, 0x800706ba
mov dword [r13], r11d
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b219aa
lea rax, [0x7ff74b58350]
mov rcx, qword [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b219aa
test byte [rcx + 0x1c], dil
je 0x7ff74b219aa
mov rax, qword [rsi + 8]
cmp rax, rbx
je 0x7ff74b2195c
mov r10, qword [rax + 0xf0]
jmp 0x7ff74b21963
lea r10, [0x7ff74b48980]
cmp rax, rbx
je 0x7ff74b2196b
mov ebx, dword [rax + 0x60]
mov r8, qword [r15 + 0x28]
lea r9, [rsi + 0x3c]
mov edx, 0xa
mov dword [rsp + 0x40], r11d
mov rax, qword [r8 + 0xf0]
mov qword [rsp + 0x38], rax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r10
mov dword [rsp + 0x20], ebx
lea r8, [0x7ff74b51680]
mov rcx, qword [rcx + 0x10]
call fcn.7ff74b3e784
mov eax, edi
jmp 0x7ff74aed303
mov dword [r13], 0x8007000e
mov eax, 1
jmp 0x7ff74aed303
mov rax, qword [rsi + 0x140]
mov edi, 1
mov dword [rax + 0x38], edi
jmp 0x7ff74aecf7f
mov rcx, qword [rsi + 0xc8]
cmp rcx, rbx
je 0x7ff74aecf89
call fcn.7ff74b09830
mov rdx, rax
cmp rax, rbx
jne 0x7ff74b21a03
mov dword [r13], 0x8007000e
mov eax, edi
jmp 0x7ff74aed303
mov rcx, qword [rsi + 0x148]
mov rax, qword [rcx]
call qword [rax + 0x48]
nop
jmp 0x7ff74aecf89
mov eax, edi
jmp 0x7ff74aed303
mov eax, edi
jmp 0x7ff74aed303
mov r14, rbx
mov qword [rsp + 0x50], rbx
jmp 0x7ff74aed04b
mov dword [r13], 0x8000ffff
jmp 0x7ff74aed0cf
mov edx, 0xb
mov r9, r14
lea r8, [0x7ff74b51c30]
mov rcx, qword [rcx + 0x10]
call fcn.7ff74b263d0
nop
jmp 0x7ff74aed108
mov rax, qword [rsi + 8]
cmp rax, rbx
je 0x7ff74b21ac2
mov r11, qword [rax + 0xf0]
jmp 0x7ff74b21ac9
lea r11, [0x7ff74b48980]
cmp rax, rbx
je 0x7ff74b21ad3
mov ecx, dword [rax + 0x60]
jmp 0x7ff74b21ad5
mov ecx, ebx
mov r8, qword [r15 + 0x28]
lea r9, [rsi + 0x3c]
mov edx, 0xb
mov eax, dword [r13]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r12d
mov rax, qword [r8 + 0xf0]
mov qword [rsp + 0x38], rax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], ecx
lea r8, [0x7ff74b51680]
mov rcx, qword [r10 + 0x10]
call fcn.7ff74b3e60c
nop
jmp 0x7ff74aed140
mov dword [rsp + 0x9c], ebx
jmp 0x7ff74aed1f9
mov rcx, rbx
jmp 0x7ff74aed226
mov rcx, qword [rsi + 0x138]
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [rsi + 0x138], rbx
mov dword [r13], r14d
jmp 0x7ff74aed26e
mov dword [r13], 0x8007000e
jmp 0x7ff74aed26e
mov r8, qword [rsp + 0xa0]
xor edx, edx
mov rcx, qword [0x7ff74b584e0]
call qword [case.0x7ff74b3e5fd.0]
nop
jmp 0x7ff74aed299
mov r14d, dword [rsp + 0x58]
mov eax, r14d
add r14d, edi
mov dword [rsp + 0x58], r14d
cmp eax, 3
jae 0x7ff74aed2c9
mov ecx, ebx
jmp 0x7ff74aed2c9
mov r14d, dword [rsp + 0x5c]
mov eax, r14d
add r14d, edi
mov dword [rsp + 0x5c], r14d
cmp eax, 0xa
jae 0x7ff74aed2c9
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, ebx
jmp 0x7ff74aed2c9
cmp r12d, ebx
je 0x7ff74b21c8e
mov eax, r12d
and eax, 0x1fff0000
cmp eax, 0x10000
jne 0x7ff74b21be6
mov dword [r13], r12d
jmp 0x7ff74b21bfa
movzx eax, r12w
or eax, 0x80070000
cmp r12d, ebx
cmovle eax, r12d
mov dword [r13], eax
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b21c8e
mov rcx, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp rcx, rax
je 0x7ff74b21c8e
test byte [rcx + 0x1c], dil
je 0x7ff74b21c8e
mov rax, qword [rsi + 8]
cmp rax, rbx
je 0x7ff74b21c31
mov r11, qword [rax + 0xf0]
jmp 0x7ff74b21c38
lea r11, [0x7ff74b48980]
cmp rax, rbx
je 0x7ff74b21c43
mov r10d, dword [rax + 0x60]
jmp 0x7ff74b21c46
mov r10d, ebx
mov r8, qword [r15 + 0x28]
lea r9, [rsi + 0x3c]
mov edx, 0xd
mov eax, dword [r13]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r12d
mov rax, qword [r8 + 0xf0]
mov qword [rsp + 0x38], rax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], r10d
lea r8, [0x7ff74b51680]
mov rcx, qword [rcx + 0x10]
call fcn.7ff74b3e60c
mov ecx, ebx
cmp dword [r13], 0x80010100
setne cl
cmp ecx, ebx
sete bl
mov eax, ebx
jmp 0x7ff74aed303
movzx ecx, r12w
or ecx, 0x80070000
cmp r12d, ebx
cmovle ecx, r12d
mov dword [r13], ecx
cmp dword [0x7ff74b582c8], ebx
je 0x7ff74b21d41
mov r10, qword [0x7ff74b58350]
lea rax, [0x7ff74b58350]
cmp r10, rax
je 0x7ff74b21d41
test byte [r10 + 0x1c], dil
je 0x7ff74b21d41
mov rax, qword [rsi + 8]
cmp rax, rbx
je 0x7ff74b21cef
mov r11, qword [rax + 0xf0]
jmp 0x7ff74b21cf6
lea r11, [0x7ff74b48980]
cmp rax, rbx
je 0x7ff74b21cfe
mov ebx, dword [rax + 0x60]
mov r8, qword [r15 + 0x28]
lea r9, [rsi + 0x3c]
mov edx, 0xc
mov dword [rsp + 0x48], ecx
mov dword [rsp + 0x40], r12d
mov rax, qword [r8 + 0xf0]
mov qword [rsp + 0x38], rax
mov eax, dword [r8 + 0x60]
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r11
mov dword [rsp + 0x20], ebx
lea r8, [0x7ff74b51680]
mov rcx, qword [r10 + 0x10]
call fcn.7ff74b3e60c
mov eax, edi
jmp 0x7ff74aed303