Function at 0x4f2b80
Capabilities:
Access peb ldr_data

Disassembly:
lea r12, [rsp - 0x58]
cmp r12, qword [r14 + 0x10]
jbe 0x4f3266
sub rsp, 0xd8
mov qword [rsp + 0xd0], rbp
lea rbp, [rsp + 0xd0]
mov qword [rsp + 0x100], rsi
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xe8], rbx
mov qword [rsp + 0x120], r11
mov qword [rsp + 0x118], r10
mov qword [rsp + 0x110], r9
mov qword [rsp + 0xf8], rdi
mov qword [rsp + 0x108], r8
lea rcx, [r10 + 1]
mov rax, rcx
call reloc.kernel32.dll_CreateEventA
mov rcx, qword [rsp + 0x100]
mov rdx, qword [rsp + 0x118]
mov rbx, rcx
sub rcx, rdx
mov rsi, qword [rax + 8]
mov rdi, qword [rax + 0x10]
mov r8, qword [rax]
lea r9, [rdx - 1]
nop word [rax + rax]
cmp rdx, r9
jbe 0x4f325a
mov r9, qword [rsp + 0x110]
mov r10, qword [r9 + rdx*8 - 8]
bsr r11, r10
mov r12, 0xffffffffffffffff
cmove r11, r12
lea r12, [r11 - 0x3f]
neg r12
cmp r12, 0x40
sbb r12, r12
nop
inc r11
neg r11
mov r13, rcx
mov rcx, r11
mov r15, r10
shl r10, cl
and r10, r12
nop
test r10, r10
je 0x4f3255
mov r11, r10
not r10
nop dword [rax]
cmp r10, r11
jae 0x4f3250
mov qword [rsp + 0xb0], r13
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0x70], rdi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0xc0], r8
mov rcx, rdx
mov rdx, r10
mov r12, rax
mov rax, 0xffffffffffffffff
div r11
mov qword [rsp + 0x58], rax
mov r10, qword [rsp + 0xf8]
mov r11, qword [rsp + 0x120]
mov rdx, r13
nop
jmp 0x4f2d40
lea r13, [rax - 1]
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x120]
mov rbx, qword [rsp + 0x110]
mov rdi, qword [rsp + 0x70]
mov r12, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xa8]
mov rdx, r8
mov rbx, rsi
mov rsi, qword [rsp + 0x68]
mov r8, r12
mov r9, qword [rsp + 0x110]
mov r10, qword [rsp + 0xf8]
mov r11, qword [rsp + 0x120]
mov r12, qword [rsp + 0xb8]
nop
test r13, r13
jl 0x4f3125
lea r12, [rcx + r13]
mov qword [rsp + 0xa0], r12
cmp rbx, r12
jle 0x4f2d79
nop word [rax + rax]
jbe 0x4f3245
mov r12, qword [r10 + r12*8]
mov qword [rsp + 0x50], r12
mov r12, qword [rsp + 0xa0]
jmp 0x4f2d90
mov qword [rsp + 0x88], rax
xor eax, eax
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x80], r13
mov r12, qword [rsp + 0x50]
nop dword [rax]
cmp r12, r15
je 0x4f2e45
lea rdx, [r13 + rcx]
lea rdx, [rdx - 1]
cmp rbx, rdx
jbe 0x4f3238
mov rbx, qword [r10 + rdx*8]
mov rcx, r15
mov rdi, rax
mov rax, r12
call fcn.004e5680
mov rcx, qword [rsp + 0x118]
lea rdx, [rcx - 2]
nop dword [rax]
cmp rcx, rdx
jbe 0x4f3230
mov rsi, qword [rsp + 0x110]
mov rdi, qword [rsi + rcx*8 - 0x10]
mov rdx, rax
mov rax, rdi
mov r8, rdx
mul rdx
mov r9, qword [rsp + 0x80]
lea r10, [r9 + rcx]
lea r10, [r10 - 2]
mov r11, qword [rsp + 0x100]
nop word [rax + rax]
cmp r11, r10
jbe 0x4f3225
mov r12, qword [rsp + 0xf8]
mov r10, qword [r12 + r10*8]
mov r13, qword [rsp + 0xa8]
nop dword [rax]
jmp 0x4f31b4
mov r12, 0xffffffffffffffff
cmp rcx, rdi
ja 0x4f319b
mov qword [rsp + 0x78], r12
mov qword [rsp], r8
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdi
mov qword [rsp + 0x18], r9
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 0
call fcn.004f4fc0
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x68]
cmp rcx, rdx
jae 0x4f3190
mov rbx, qword [rsp + 0xc0]
mov qword [rbx + rcx*8], rax
mov rsi, qword [rsp + 0x80]
lea rdi, [rdx + rsi]
mov r8, qword [rsp + 0x100]
cmp r8, rdi
jge 0x4f2ef1
nop
test rax, rax
jne 0x4f2ef1
lea rdi, [rdx - 1]
mov rax, rdx
mov rdx, rdi
jmp 0x4f2ef4
mov rax, rdx
lea rdi, [rdx + rsi]
mov r9, qword [rsp + 0x108]
cmp r9, rdi
jb 0x4f3185
cmp rsi, rdi
ja 0x4f3175
sub r9, rsi
mov r10, r9
neg r9
mov r11, rsi
shl rsi, 3
sar r9, 0x3f
and r9, rsi
mov rsi, qword [rsp + 0xf8]
add r9, rsi
cmp r8, r11
jb 0x4f316a
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x98], r10
mov qword [rsp + 0xc8], r9
mov qword [rsp], r9
mov qword [rsp + 8], rdx
mov qword [rsp + 0x10], r10
mov qword [rsp + 0x18], r9
sub r8, r11
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x20], r8
mov qword [rsp + 0x28], r10
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rax
mov rsi, qword [rsp + 0x70]
mov qword [rsp + 0x40], rsi
call fcn.004f4d00
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
cmp qword [rsp + 0x48], 0
jne 0x4f2fd1
mov rcx, qword [rsp + 0x118]
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r12, qword [rsp + 0x78]
jmp 0x4f30d0
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0xa0]
cmp rdx, rcx
jb 0x4f3165
mov rax, qword [rsp + 0x80]
cmp rax, rcx
ja 0x4f3160
mov rax, qword [rsp + 0xc8]
mov qword [rsp], rax
mov rcx, qword [rsp + 0x118]
mov qword [rsp + 8], rcx
mov rdx, qword [rsp + 0x98]
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov rdx, qword [rsp + 0x120]
mov qword [rsp + 0x40], rdx
call fcn.004f4c60
xorps xmm15, xmm15
mov r14, qword gs:[0x28]
mov r14, qword [r14]
mov rax, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x118]
mov rdx, qword [rsp + 0x60]
cmp rcx, rdx
jge 0x4f30b7
mov rsi, qword [rsp + 0x100]
mov r8, qword [rsp + 0xa0]
nop word [rax + rax]
cmp rsi, r8
jbe 0x4f3154
mov r9, qword [rsp + 0xf8]
add qword [r9 + r8*8], rax
jmp 0x4f30c7
mov rsi, qword [rsp + 0x100]
mov r9, qword [rsp + 0xf8]
mov r8, qword [rsp + 0x78]
lea r12, [r8 - 1]
mov rax, qword [rsp + 0x80]
mov r8, qword [rsp + 0xb0]
cmp rax, r8
jne 0x4f3105
mov r10, qword [rsp + 0xe8]
cmp r10, r8
jne 0x4f310d
test r12, r12
jne 0x4f310d
mov r11, qword [rsp + 0xe0]
nop
jmp 0x4f2ce2
mov r10, qword [rsp + 0xe8]
cmp r10, rax
jbe 0x4f314c
mov r11, qword [rsp + 0xe0]
mov qword [r11 + rax*8], r12
nop
jmp 0x4f2ce2
nop
lea rax, [0x0088e940]
lea rbx, [0x00692ba0]
mov rcx, r12
call fcn.0046b6a0
mov rbp, qword [rsp + 0xd0]
add rsp, 0xd8
ret
mov rcx, r10
call fcn.00462ac0
mov rax, r8
mov rcx, rsi
call fcn.00462ac0
nop
call fcn.00462b80
call fcn.00462b40
mov rax, r11
mov rcx, r8
call fcn.00462b80
mov rax, rsi
mov rcx, rdi
nop dword [rax + rax]
call fcn.00462b80
mov rcx, rdi
mov rdx, r9
call fcn.00462b40
mov rax, rcx
mov rcx, rdx
call fcn.00462ac0
mov rdx, rdi
nop
call fcn.00462b40
mov rbx, rax
mul rdi
mov r15, rbx
mov rbx, r8
mov r8, r15
cmp rbx, rdx
jb 0x4f31c5
jne 0x4f31d4
nop dword [rax + rax]
cmp rax, r10
jbe 0x4f31d4
lea rax, [r8 - 1]
lea r8, [rbx + r13]
cmp rbx, r8
jbe 0x4f31a5
jmp 0x4f31d7
mov rax, r8
mov rdx, qword [rsp + 0xb0]
mov rbx, r11
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
mov r8, qword [rsp + 0xc0]
mov r9, qword [rsp + 0x110]
mov r10, r12
mov r11, qword [rsp + 0x120]
mov r13, qword [rsp + 0x80]
mov r15, qword [rsp + 0xa8]
mov r12, rax
mov rax, qword [rsp + 0x58]
nop
jmp 0x4f2e4c
mov rax, r10
mov rcx, r11
call fcn.00462ac0
mov rax, rdx
call fcn.00462ac0
mov rax, rdx
mov rcx, rbx
nop
call fcn.00462ac0
mov rax, r12
mov rcx, rbx
call fcn.00462ac0
call fcn.00434420
call fcn.004343c0
mov rax, r9
mov rcx, rdx
call fcn.00462ac0
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r8
mov qword [rsp + 0x38], r9
mov qword [rsp + 0x40], r10
mov qword [rsp + 0x48], r11
call fcn.004603e0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov r10, qword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
jmp fcn.004f2b80