Function at 0x4fd740
Capabilities:
Persist via run registry key

Disassembly:
lea r12, [rsp - 0xe8]
cmp r12, qword [r14 + 0x10]
jbe 0x4fdbfe
push rbp
mov rbp, rsp
sub rsp, 0x160
movups xmmword [rsp + 0xb8], xmm15
call fcn.004a6800
test rcx, rcx
jne 0x4fdbcc
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0xd8], rax
mov eax, 0x80000001
lea rbx, [0x0053ff2e]
mov ecx, 0x2d
mov edi, 0xf003f
call fcn.004fc6e0
nop dword [rax]
test rbx, rbx
jne 0x4fdb9e
mov qword [rsp + 0x38], rax
movups xmmword [rsp + 0xa8], xmm15
lea rcx, [0x004fdc80]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rax
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0x90], rcx
lea rax, [rsp + 0x78]
call fcn.0043bf00
test eax, eax
jne 0x4fdb80
lea rax, [0x005346c4]
mov ebx, 7
nop dword [rax]
call fcn.004a4fe0
movups xmmword [rsp + 0x120], xmm15
movups xmmword [rsp + 0x130], xmm15
movups xmmword [rsp + 0x140], xmm15
movups xmmword [rsp + 0x150], xmm15
mov qword [rsp + 0x128], rbx
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x138], 9
lea rcx, [0x00534d18]
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x148], 7
lea rcx, [0x005346cb]
mov qword [rsp + 0x140], rcx
mov qword [rsp + 0x158], 0x19
lea rcx, [0x0053a831]
mov qword [rsp + 0x150], rcx
lea rax, [rsp + 0x120]
mov ebx, 4
mov rcx, rbx
call fcn.004bd7c0
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x30], rbx
mov ecx, 0xa
mov rdi, rax
mov rsi, rbx
mov rax, qword [rsp + 0x38]
lea rbx, [0x005350e4]
call fcn.004fc940
test rax, rax
jne 0x4fdb4c
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x30]
nop
call fcn.004a84e0
test rcx, rcx
jne 0x4fd909
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x30]
call fcn.004a7b80
nop dword [rax]
test rax, rax
jne 0x4fdb1e
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x40]
xor ecx, ecx
xor edi, edi
call fcn.004a6f20
nop
test rbx, rbx
jne 0x4fdaf0
mov qword [rsp + 0xd0], rax
movups xmmword [rsp + 0xe0], xmm15
lea rcx, [0x004fdc20]
mov qword [rsp + 0xe0], rcx
mov qword [rsp + 0xe8], rax
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x60], rcx
lea rax, [rsp + 0x48]
call fcn.0043bf00
test eax, eax
jne 0x4fdad2
lea rax, [0x0054a448]
mov rbx, qword [rsp + 0xd0]
nop
call fcn.004bb360
test rdi, rdi
jne 0x4fdaa4
mov rdi, rbx
mov rsi, rcx
mov r8d, 0x1ed
mov rbx, qword [rsp + 0x30]
mov rcx, rax
mov rax, qword [rsp + 0xc8]
call fcn.004bb3a0
test rax, rax
je 0x4fd9e2
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
movups xmmword [rsp + 0xf0], xmm15
movups xmmword [rsp + 0x100], xmm15
movups xmmword [rsp + 0x110], xmm15
mov qword [rsp + 0xf8], 2
lea rdx, [0x00533f4d]
mov qword [rsp + 0xf0], rdx
mov qword [rsp + 0x108], 2
lea rdx, [0x00533f4f]
mov qword [rsp + 0x100], rdx
mov rdx, qword [rsp + 0x30]
mov qword [rsp + 0x118], rdx
mov rdx, qword [rsp + 0xc8]
mov qword [rsp + 0x110], rdx
lea rax, [0x0053447d]
mov ebx, 6
lea rcx, [rsp + 0xf0]
mov edi, 3
mov rsi, rdi
call fcn.004bf040
call fcn.004c0140
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xc0], rsi
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], rcx
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], rbx
nop dword [rax]
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rbx
mov qword [rsp + 0xc0], rcx
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
mov qword [rsp + 0xb8], rcx
mov qword [rsp + 0xc0], rdi
nop dword [rax]
call fcn.0043c3c0
mov rax, qword [rsp + 0xb8]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x160
pop rbp
ret
nop
call fcn.0046bca0
jmp fcn.004fd740