Function at 0x4b1ce0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
lea r12, [rsp - 0x258]
cmp r12, qword [r14 + 0x10]
jbe 0x4b3346
push rbp
mov rbp, rsp
sub rsp, 0x2d0
mov byte [rsp + 0x2f0], cl
mov qword [rsp + 0x2e0], rax
mov qword [rsp + 0x2e8], rbx
lea rax, [0x004eb960]
nop dword [rax + rax]
call fcn.0040e360
mov qword [rsp + 0x1e0], rax
nop
lea rax, [0x004e6140]
call fcn.0040e360
mov rcx, qword [rsp + 0x2e0]
mov qword [rax], rcx
cmp dword [0x008a78a0], 0
jne 0x4b1d58
mov rdx, qword [rsp + 0x2e8]
jmp 0x4b1d68
call fcn.00466b00
mov rdx, qword [rsp + 0x2e8]
mov qword [r11], rdx
mov qword [rsp + 0x1c0], rax
mov qword [rax + 8], rdx
movups xmmword [rax + 0x10], xmm15
movabs r9, 0x7fffffffffffffff
mov qword [rax + 0x20], r9
mov qword [rax + 0x28], r9
mov rbx, rax
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004cfa00]
mov r8, qword [rsp + 0x1e0]
lea rax, [0x007806a0]
call fcn.0049a9c0
mov rdx, qword [rsp + 0x1e0]
movups xmm0, xmmword [rdx]
movups xmmword [rsp + 0x108], xmm0
movups xmm0, xmmword [rdx + 0x10]
movups xmmword [rsp + 0x118], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmmword [rsp + 0x128], xmm0
movups xmm0, xmmword [rdx + 0x30]
movups xmmword [rsp + 0x138], xmm0
lea rax, [0x004ebda0]
lea rbx, [rsp + 0x108]
nop dword [rax]
call fcn.0049cee0
mov qword [rsp + 0x198], rax
mov r8, qword [rsp + 0x1e0]
mov edx, dword [r8 + 0x3c]
cmp rax, rdx
jg 0x4b1e25
mov byte [r8 + 0x40], 0
jmp 0x4b1e6a
lea rdx, [r8 + 0x41]
lea rax, [0x007806a0]
mov rbx, qword [rsp + 0x1c0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004d1d00]
mov r8, rdx
call fcn.0049a9c0
mov r8, qword [rsp + 0x1e0]
mov byte [r8 + 0x40], 1
mov rax, qword [rsp + 0x198]
cmp byte [r8 + 0x40], 0
je 0x4b1ebd
movups xmm0, xmmword [r8 + 0x41]
movups xmmword [rsp + 0x48], xmm0
movups xmm0, xmmword [r8 + 0x51]
movups xmmword [rsp + 0x58], xmm0
movups xmm0, xmmword [r8 + 0x61]
movups xmmword [rsp + 0x68], xmm0
movups xmm0, xmmword [r8 + 0x71]
movups xmmword [rsp + 0x78], xmm0
lea rax, [0x004d4e60]
lea rbx, [rsp + 0x48]
call fcn.0049cee0
mov rcx, qword [rsp + 0x198]
add rax, rcx
mov r8, qword [rsp + 0x1e0]
mov ecx, dword [r8 + 0x3c]
cmp rax, rcx
jge 0x4b1fde
sub rcx, rax
mov qword [rsp + 0x150], rcx
lea rax, [0x004d3180]
mov rbx, rcx
nop
call fcn.0044bd40
mov qword [rsp + 0x220], rax
mov qword [rsp + 0x260], rax
mov rdx, qword [rsp + 0x150]
mov qword [rsp + 0x268], rdx
mov qword [rsp + 0x270], rdx
mov rbx, qword [rsp + 0x1c0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004d1fc0]
lea r8, [rsp + 0x260]
lea rax, [0x007806a0]
call fcn.0049a9c0
mov dword [rsp + 0x44], 0x68636952
mov rax, qword [rsp + 0x220]
mov rbx, qword [rsp + 0x150]
mov rcx, rbx
lea rdi, [rsp + 0x44]
mov esi, 4
mov r8, rsi
call fcn.00499840
cmp rax, 0xffffffffffffffff
je 0x4b1fd6
lea rcx, [rax + 8]
mov rdx, qword [rsp + 0x150]
nop dword [rax]
cmp rdx, rcx
jb 0x4b333b
mov r8, qword [rsp + 0x1e0]
mov qword [r8 + 0x90], rcx
mov qword [r8 + 0x98], rdx
cmp dword [0x008a78a0], 0
jne 0x4b1fb2
mov rdx, qword [rsp + 0x220]
jmp 0x4b1fcd
call fcn.00466b20
mov rdx, qword [rsp + 0x220]
mov qword [r11], rdx
mov r9, qword [r8 + 0x88]
mov qword [r11 + 8], r9
mov qword [r8 + 0x88], rdx
jmp 0x4b1fde
mov r8, qword [rsp + 0x1e0]
cmp word [r8], 0x5a4d
je 0x4b1fed
xor edx, edx
jmp 0x4b207a
mov ecx, dword [r8 + 0x3c]
mov qword [rsp + 0x1b8], rcx
lea rax, [0x004d46e0]
call fcn.0040e360
mov qword [rsp + 0x2b8], rax
mov rcx, qword [rsp + 0x2e0]
mov rdx, qword [rcx + 0x18]
mov rbx, rax
mov edi, 4
mov rsi, qword [rsp + 0x1b8]
mov rax, qword [rsp + 0x2e8]
mov rcx, rdi
call rdx
mov rbx, qword [rsp + 0x2b8]
cmp byte [rbx], 0x50
jne 0x4b229f
cmp byte [rbx + 1], 0x45
jne 0x4b229f
cmp byte [rbx + 2], 0
jne 0x4b229f
cmp byte [rbx + 3], 0
nop
jne 0x4b229f
mov rdx, qword [rsp + 0x1b8]
add rdx, 4
mov r8, qword [rsp + 0x1e0]
mov qword [rsp + 0x170], rdx
mov rbx, qword [rsp + 0x1c0]
mov r9, qword [rbx + 0x10]
lea r10, [rdx + r9]
cmp r9, r10
jg 0x4b209b
mov qword [rbx + 0x18], r10
lea rdx, [r8 + 0xa0]
mov qword [rsp + 0x218], rdx
lea rax, [0x007806a0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004cfbc0]
mov r8, rdx
call fcn.0049a9c0
test rax, rax
jne 0x4b228e
mov rdx, qword [rsp + 0x1e0]
movzx r8d, word [rdx + 0xa0]
cmp r8w, 0x14c
ja 0x4b2105
test r8w, r8w
je 0x4b2119
cmp r8w, 0x14c
je 0x4b2119
nop dword [rax]
jmp 0x4b2230
cmp r8w, 0x1c4
je 0x4b2119
cmp r8w, 0x8664
jne 0x4b2230
movzx r8d, byte [rsp + 0x2f0]
test r8b, r8b
je 0x4b22fd
mov r9, qword [rsp + 0x1c0]
mov r10, qword [r9 + 0x18]
cmp qword [r9 + 0x10], r10
jle 0x4b214f
mov r10, qword [0x00812d90]
mov r11, qword [0x00812d98]
xor eax, eax
jmp 0x4b2160
mov r12, qword [r9 + 0x10]
sub r10, r12
mov rax, r10
xor r11d, r11d
xor r10d, r10d
nop
test r10, r10
je 0x4b21b6
movups xmmword [rsp + 0x2a8], xmm15
je 0x4b2174
mov r10, qword [r10 + 8]
mov qword [rsp + 0x2a8], r10
mov qword [rsp + 0x2b0], r11
lea rax, [0x004f8ca5]
mov ebx, 0x28
lea rcx, [rsp + 0x2a8]
mov edi, 1
mov rsi, rdi
call fcn.0048e640
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov qword [rsp + 0x148], rax
mov rcx, qword [rdx + 0xa0]
mov qword [rsp + 0xf4], rcx
movups xmm0, xmmword [rdx + 0xa4]
movups xmmword [rsp + 0xf8], xmm0
lea rax, [0x004e8240]
lea rbx, [rsp + 0xf4]
call fcn.0049cee0
mov rcx, qword [rsp + 0x170]
lea rdx, [rax + rcx]
mov rsi, qword [rsp + 0x1e0]
movzx edi, word [rsi + 0xb0]
add rdx, rdi
mov rbx, qword [rsp + 0x1c0]
mov rdi, qword [rbx + 0x10]
add rdx, rdi
nop dword [rax]
cmp rdi, rdx
jg 0x4b2229
mov qword [rbx + 0x18], rdx
xor eax, eax
jmp 0x4b3278
movups xmmword [rsp + 0x2a8], xmm15
movzx eax, word [rdx + 0xa0]
call fcn.0040b2e0
lea rcx, [0x004d3200]
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x2b0], rax
lea rax, [0x004fa608]
mov ebx, 0x33
lea rcx, [rsp + 0x2a8]
mov edi, 1
mov rsi, rdi
call fcn.0048e640
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
movups xmmword [rsp + 0x2a8], xmm15
lea rax, [0x004d46e0]
call fcn.0040b260
lea rcx, [0x004d46e0]
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x2b0], rax
lea rax, [0x004f7ff3]
mov ebx, 0x24
lea rcx, [rsp + 0x2a8]
mov edi, 1
mov rsi, rdi
call fcn.0048e640
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rax, qword [rsp + 0x218]
lea rbx, [0x00780870]
mov rcx, qword [rsp + 0x1c0]
call fcn.004b3fc0
mov rdx, qword [rsp + 0x1e0]
mov qword [rdx + 0x120], rbx
mov qword [rdx + 0x128], rcx
cmp dword [0x008a78a0], 0
je 0x4b234b
call fcn.00466b20
mov qword [r11], rax
mov r8, qword [rdx + 0x118]
mov qword [r11 + 8], r8
mov qword [rdx + 0x118], rax
test rdi, rdi
jne 0x4b2752
mov rax, qword [rsp + 0x218]
lea rbx, [0x00780870]
mov rcx, qword [rsp + 0x1c0]
call fcn.004b4460
mov rdx, qword [rsp + 0x1e0]
mov qword [rdx + 0x108], rbx
mov qword [rdx + 0x110], rcx
cmp dword [0x008a78a0], 0
je 0x4b23a9
call fcn.00466b20
mov qword [r11], rax
mov r9, qword [rdx + 0x100]
mov qword [r11 + 8], r9
mov qword [rdx + 0x100], rax
test rdi, rdi
jne 0x4b2741
mov rdi, qword [rdx + 0x118]
mov rsi, qword [rdx + 0x120]
mov r8, qword [rdx + 0x128]
call fcn.004b4740
mov rdx, qword [rsp + 0x1e0]
mov qword [rdx + 0xf0], rbx
mov qword [rdx + 0xf8], rcx
cmp dword [0x008a78a0], 0
je 0x4b2405
call fcn.00466b20
mov qword [r11], rax
mov r8, qword [rdx + 0xe8]
mov qword [r11 + 8], r8
mov qword [rdx + 0xe8], rax
test rdi, rdi
jne 0x4b2730
mov rcx, qword [rdx + 0xa0]
mov qword [rsp + 0xb8], rcx
movups xmm0, xmmword [rdx + 0xa4]
movups xmmword [rsp + 0xbc], xmm0
lea rax, [0x004e8240]
lea rbx, [rsp + 0xb8]
call fcn.0049cee0
mov rcx, qword [rsp + 0x170]
add rcx, rax
mov rdx, qword [rsp + 0x1e0]
mov qword [rdx + 0x148], rcx
mov rsi, qword [rsp + 0x1c0]
mov rdi, qword [rsi + 0x10]
add rcx, rdi
nop
cmp rdi, rcx
jg 0x4b247a
mov qword [rsi + 0x18], rcx
lea rax, [0x004ed5e0]
call fcn.0040e360
mov qword [rsp + 0x2c8], rax
lea rax, [0x004ed2a0]
call fcn.0040e360
mov rcx, qword [rsp + 0x1e0]
movzx edx, word [rcx + 0xb0]
cmp word [0x008a7646], dx
je 0x4b25d0
nop word [rax + rax]
nop
cmp word [0x008a7648], dx
jne 0x4b2662
mov qword [rsp + 0x2c0], rax
mov rbx, qword [rsp + 0x1c0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004cfd40]
mov r8, rax
lea rax, [0x007806a0]
nop dword [rax]
call fcn.0049a9c0
test rax, rax
jne 0x4b25bf
mov rdx, qword [rsp + 0x2c0]
cmp word [rdx], 0x20b
jne 0x4b2565
lea rsi, [0x004cfd40]
mov rdi, qword [rsp + 0x1e0]
mov qword [rdi + 0xb8], rsi
cmp dword [0x008a78a0], 0
je 0x4b2553
nop dword [rax]
call fcn.00466b20
mov qword [r11], rdx
mov r8, qword [rdi + 0xc0]
mov qword [r11 + 8], r8
mov qword [rdi + 0xc0], rdx
mov rcx, rdi
nop dword [rax]
jmp 0x4b2662
movups xmmword [rsp + 0x2a8], xmm15
movzx eax, word [rdx]
call fcn.0040b2e0
lea rcx, [0x004d3200]
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x2b0], rax
lea rax, [0x004fa4dc]
mov ebx, 0x32
lea rcx, [rsp + 0x2a8]
mov edi, 1
mov rsi, rdi
call fcn.0048e640
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
lea rax, [0x007806a0]
mov rbx, qword [rsp + 0x1c0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004cfd00]
mov r8, qword [rsp + 0x2c8]
nop dword [rax]
call fcn.0049a9c0
test rax, rax
jne 0x4b271f
mov rdx, qword [rsp + 0x2c8]
cmp word [rdx], 0x10b
nop dword [rax + rax]
jne 0x4b26c5
lea rsi, [0x004cfd00]
mov rdi, qword [rsp + 0x1e0]
mov qword [rdi + 0xb8], rsi
cmp dword [0x008a78a0], 0
je 0x4b2658
call fcn.00466b20
mov qword [r11], rdx
mov r8, qword [rdi + 0xc0]
mov qword [r11 + 8], r8
mov qword [rdi + 0xc0], rdx
mov rcx, rdi
movzx ebx, word [rcx + 0xa2]
lea rax, [0x004dd360]
mov rcx, rbx
call fcn.0044bd40
mov rdx, qword [rsp + 0x1e0]
movzx esi, word [rdx + 0xa2]
mov qword [rdx + 0xd0], rsi
mov qword [rdx + 0xd8], rsi
cmp dword [0x008a78a0], 0
je 0x4b26b3
nop
call fcn.00466b20
mov qword [r11], rax
mov r9, qword [rdx + 0xc8]
mov qword [r11 + 8], r9
mov qword [rdx + 0xc8], rax
xor eax, eax
nop dword [rax]
jmp 0x4b2770
movups xmmword [rsp + 0x2a8], xmm15
movzx eax, word [rdx]
call fcn.0040b2e0
lea rcx, [0x004d3200]
mov qword [rsp + 0x2a8], rcx
mov qword [rsp + 0x2b0], rax
lea rax, [0x004fa2c1]
mov ebx, 0x31
lea rcx, [rsp + 0x2a8]
mov edi, 1
mov rsi, rdi
call fcn.0048e640
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x2d0
pop rbp
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x2d0
pop rbp
ret
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x2d0
pop rbp
ret
mov qword [r11 + r9*8], rdx
inc r9
mov rdx, rax
mov rax, r9
movzx r9d, word [rdx + 0xa2]
nop dword [rax + rax]
cmp rax, r9
jge 0x4b2c2f
mov qword [rsp + 0x188], rax
movups xmmword [rsp + 0x90], xmm15
movups xmmword [rsp + 0x98], xmm15
movups xmmword [rsp + 0xa8], xmm15
lea rax, [0x007806a0]
mov rbx, qword [rsp + 0x1c0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004d78c0]
lea r8, [rsp + 0x90]
call fcn.0049a9c0
nop dword [rax]
test rax, rax
jne 0x4b2c1e
mov rdx, qword [rsp + 0x1e0]
mov rbx, qword [rdx + 0x118]
mov rcx, qword [rdx + 0x120]
mov rdi, qword [rdx + 0x128]
lea rax, [rsp + 0x90]
call fcn.004b3d40
test rcx, rcx
jne 0x4b2c0d
mov qword [rsp + 0x1d8], rax
mov qword [rsp + 0x178], rbx
lea rax, [0x004e5b20]
call fcn.0040e360
mov qword [rsp + 0x1c8], rax
movups xmmword [rsp + 0x228], xmm15
movups xmmword [rsp + 0x230], xmm15
movups xmmword [rsp + 0x240], xmm15
movups xmmword [rsp + 0x250], xmm15
mov rcx, qword [rsp + 0x1d8]
mov qword [rsp + 0x228], rcx
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0x230], rcx
mov rcx, qword [rsp + 0x90]
mov qword [rsp + 0x238], rcx
mov ecx, dword [rsp + 0x98]
mov dword [rsp + 0x240], ecx
mov ecx, dword [rsp + 0x9c]
mov dword [rsp + 0x244], ecx
mov ecx, dword [rsp + 0xa0]
mov dword [rsp + 0x248], ecx
mov ecx, dword [rsp + 0xa4]
mov dword [rsp + 0x24c], ecx
mov ecx, dword [rsp + 0xa8]
mov dword [rsp + 0x250], ecx
mov ecx, dword [rsp + 0xac]
mov dword [rsp + 0x254], ecx
movzx ecx, word [rsp + 0xb0]
mov word [rsp + 0x258], cx
movzx ecx, word [rsp + 0xb2]
mov word [rsp + 0x25a], cx
mov ecx, dword [rsp + 0xb4]
mov dword [rsp + 0x25c], ecx
cmp dword [0x008a78a0], 0
je 0x4b293e
mov rbx, rax
lea rcx, [rsp + 0x228]
lea rax, [0x004e98e0]
call fcn.004135e0
mov rax, qword [rsp + 0x1c8]
mov rcx, qword [rsp + 0x228]
mov qword [rax], rcx
movups xmm0, xmmword [rsp + 0x230]
movups xmmword [rax + 8], xmm0
movups xmm0, xmmword [rsp + 0x240]
movups xmmword [rax + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x250]
movups xmmword [rax + 0x28], xmm0
cmp dword [rsp + 0xa4], 0
mov rcx, qword [rsp + 0x2e8]
lea rdx, [0x008a7620]
cmove rcx, rdx
mov qword [rsp + 0x1d0], rcx
mov rsi, qword [rsp + 0x2e0]
lea rdi, [0x007806c0]
cmove rsi, rdi
mov qword [rsp + 0x168], rsi
movzx r9d, byte [rsp + 0x2f0]
test r9b, r9b
je 0x4b2aad
mov ecx, dword [rax + 0x1c]
mov qword [rsp + 0x1b8], rcx
mov edx, dword [rax + 0x20]
mov qword [rsp + 0x1b0], rdx
movabs rbx, 0x7fffffffffffffff
sub rbx, rdx
mov qword [rsp + 0x1a8], rbx
lea rsi, [rcx + rdx]
mov qword [rsp + 0x158], rsi
lea rax, [0x004e6140]
nop dword [rax + rax]
call fcn.0040e360
mov rcx, qword [rsp + 0x168]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x1a8]
cmp rcx, rdx
movabs rdx, 0x7fffffffffffffff
mov rbx, qword [rsp + 0x158]
cmovle rdx, rbx
cmp dword [0x008a78a0], 0
jne 0x4b2a4c
mov r9, qword [rsp + 0x1d0]
jmp 0x4b2a5c
call fcn.00466b00
mov r9, qword [rsp + 0x1d0]
mov qword [r11], r9
mov qword [rax + 8], r9
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
mov qword [rax + 0x20], rdx
mov rdx, qword [rsp + 0x1b0]
mov qword [rax + 0x28], rdx
cmp dword [0x008a78a0], 0
nop
jne 0x4b2a8c
mov rdx, qword [rsp + 0x1c8]
jmp 0x4b2aa4
call fcn.00466b20
mov qword [r11], rax
mov rdx, qword [rsp + 0x1c8]
mov r9, qword [rdx + 0x60]
mov qword [r11 + 8], r9
mov qword [rdx + 0x60], rax
jmp 0x4b2b92
mov ecx, dword [rax + 0x24]
mov qword [rsp + 0x1b8], rcx
mov edx, dword [rax + 0x20]
mov qword [rsp + 0x1b0], rdx
movabs rbx, 0x7fffffffffffffff
sub rbx, rdx
mov qword [rsp + 0x1a8], rbx
lea rsi, [rcx + rdx]
mov qword [rsp + 0x160], rsi
lea rax, [0x004e6140]
call fcn.0040e360
mov rcx, qword [rsp + 0x168]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1b8]
mov rdx, qword [rsp + 0x1a8]
cmp rcx, rdx
movabs rdx, 0x7fffffffffffffff
mov rbx, qword [rsp + 0x160]
cmovle rdx, rbx
cmp dword [0x008a78a0], 0
jne 0x4b2b37
mov r9, qword [rsp + 0x1d0]
jmp 0x4b2b47
call fcn.00466b00
mov r9, qword [rsp + 0x1d0]
mov qword [r11], r9
mov qword [rax + 8], r9
mov qword [rax + 0x10], rcx
mov qword [rax + 0x18], rcx
mov qword [rax + 0x20], rdx
mov rdx, qword [rsp + 0x1b0]
mov qword [rax + 0x28], rdx
cmp dword [0x008a78a0], 0
jne 0x4b2b76
mov rdx, qword [rsp + 0x1c8]
jmp 0x4b2b8e
call fcn.00466b20
mov qword [r11], rax
mov rdx, qword [rsp + 0x1c8]
mov r9, qword [rdx + 0x60]
mov qword [r11 + 8], r9
mov qword [rdx + 0x60], rax
mov r9, qword [rdx + 0x60]
lea r10, [0x007806e0]
mov qword [rdx + 0x50], r10
cmp dword [0x008a78a0], 0
je 0x4b2bba
call fcn.00466b20
mov qword [r11], r9
mov r12, qword [rdx + 0x58]
mov qword [r11 + 8], r12
mov qword [rdx + 0x58], r9
mov rax, qword [rsp + 0x1e0]
mov rcx, qword [rax + 0xd0]
mov r9, qword [rsp + 0x188]
cmp r9, rcx
jae reloc.kernel32.dll_GetQueuedCompletionStatusEx
mov r11, qword [rax + 0xc8]
cmp dword [0x008a78a0], 0
je 0x4b2763
mov rcx, r11
call fcn.00466b20
mov qword [r11], rdx
mov r12, qword [rcx + r9*8]
mov qword [r11 + 8], r12
mov r11, rcx
jmp 0x4b2763
xor eax, eax
mov rbx, rcx
mov rcx, rdi
add rsp, 0x2d0
pop rbp
ret
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rsi, qword [rdx + 0xd0]
mov qword [rsp + 0x1a0], rsi
mov rcx, qword [rsp + 0x1c0]
xor eax, eax
jmp 0x4b2c60
lea rax, [r9 + 1]
mov rsi, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1c0]
nop
cmp rax, rsi
jge 0x4b2d07
mov rdi, qword [rdx + 0xd0]
cmp rax, rdi
jae 0x4b324a
mov qword [rsp + 0x180], rax
mov rsi, qword [rdx + 0xc8]
mov rsi, qword [rsi + rax*8]
test byte [rsi], al
lea rbx, [0x00780870]
mov rax, rsi
call fcn.004b3aa0
mov rdx, qword [rsp + 0x1e0]
mov r8, qword [rdx + 0xd0]
mov r9, qword [rsp + 0x180]
cmp r9, r8
jae GetStdHandle
mov r8, qword [rdx + 0xc8]
mov r8, qword [r8 + r9*8]
mov qword [r8 + 0x40], rbx
mov qword [r8 + 0x48], rcx
cmp dword [0x008a78a0], 0
je 0x4b2ce9
call fcn.00466b20
mov qword [r11], rax
mov r10, qword [r8 + 0x38]
mov qword [r11 + 8], r10
mov qword [r8 + 0x38], rax
test rdi, rdi
je 0x4b2c4a
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x2d0
pop rbp
ret
mov rax, rdx
call fcn.004b3600
cmp dword [0x008a78a0], 0
jne 0x4b2d22
mov rdx, qword [rsp + 0x1e0]
jmp 0x4b2d3d
call fcn.00466b20
mov qword [r11], rax
mov rdx, qword [rsp + 0x1e0]
mov rsi, qword [rdx + 0xe0]
mov qword [r11 + 8], rsi
mov qword [rdx + 0xe0], rax
test rbx, rbx
jne 0x4b2f22
movzx esi, byte [rsp + 0x2f0]
test sil, sil
jne 0x4b2dbb
mov rax, rdx
lea rbx, [0x00780870]
mov rcx, qword [rsp + 0x1c0]
call fcn.004b0d60
mov rdx, qword [rsp + 0x1e0]
mov qword [rdx + 0x138], rbx
mov qword [rdx + 0x140], rcx
cmp dword [0x008a78a0], 0
je 0x4b2da3
call fcn.00466b20
mov qword [r11], rax
mov r8, qword [rdx + 0x130]
mov qword [r11 + 8], r8
mov qword [rdx + 0x130], rax
test rdi, rdi
jne 0x4b2f11
movzx esi, byte [rsp + 0x2f0]
mov rdi, qword [rdx + 0xb8]
test rdi, rdi
je 0x4b2f2d
mov r8d, dword [rdi + 0x10]
mov r9, qword [rdx + 0xc0]
cmp r8d, 0x4dde60f4
jne 0x4b2e06
lea r10, [0x004cfd00]
cmp rdi, r10
jne 0x4b2f2d
cmp dword [r9 + 0xd0], 0
je 0x4b2f2d
cmp r8d, 0x4dde60f4
jmp 0x4b2e45
cmp r8d, 0xa4cbac8d
jne 0x4b2f2d
lea r10, [0x004cfd40]
nop word [rax + rax]
cmp rdi, r10
jne 0x4b2f2d
cmp dword [r9 + 0xe0], 0
je 0x4b2f2d
cmp r8d, 0x4dde60f4
lea r10, [0x004cfd00]
jne 0x4b2e60
cmp rdi, r10
jne 0x4b2e85
mov edi, dword [r9 + 0xd0]
mov r8d, dword [r9 + 0xd4]
jmp 0x4b2e8a
cmp r8d, 0xa4cbac8d
jne 0x4b2e85
lea r8, [0x004cfd40]
cmp rdi, r8
jne 0x4b2e85
mov edi, dword [r9 + 0xe0]
mov r8d, dword [r9 + 0xe4]
jmp 0x4b2e8a
xor r8d, r8d
xor edi, edi
mov dword [rsp + 0x8c], r8d
mov dword [rsp + 0x88], edi
lea rax, [0x004d3180]
mov ebx, r8d
mov ecx, ebx
call fcn.0044bd40
mov qword [rsp + 0x220], rax
movzx edx, byte [rsp + 0x2f0]
test dl, dl
jne 0x4b2ee5
mov r8, qword [rsp + 0x1e0]
mov r9, qword [r8 + 0xc8]
mov r10, qword [r8 + 0xd0]
mov r11d, dword [rsp + 0x88]
xor ecx, ecx
xor ebx, ebx
jmp 0x4b31e8
mov rdx, qword [rsp + 0x2e0]
mov r8, qword [rdx + 0x18]
mov rbx, rax
mov ecx, dword [rsp + 0x8c]
mov edi, ecx
mov esi, dword [rsp + 0x88]
mov rax, qword [rsp + 0x2e8]
call r8
jmp 0x4b2f3d
xor eax, eax
mov rbx, rdi
mov rcx, rsi
add rsp, 0x2d0
pop rbp
ret
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rax, rdx
xor ebx, ebx
xor ecx, ecx
add rsp, 0x2d0
pop rbp
ret
lea rax, [0x004e1400]
call fcn.0040e360
mov ecx, dword [rsp + 0x8c]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
cmp dword [0x008a78a0], 0
nop
jne 0x4b2f6c
mov rdx, qword [rsp + 0x220]
jmp 0x4b2f7c
call fcn.00466b00
mov rdx, qword [rsp + 0x220]
mov qword [r11], rdx
mov qword [rax], rdx
mov qword [rax + 0x18], 0
mov qword [rax + 0x20], 0xffffffffffffffff
mov r8, qword [rsp + 0x1e0]
lea rdx, [r8 + 0x170]
mov rbx, rax
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004cfc80]
lea rax, [0x00780700]
mov r8, rdx
call fcn.0049a9c0
mov rdx, qword [rsp + 0x1e0]
mov ecx, dword [rdx + 0x17c]
lea rax, [0x004d3180]
mov rbx, rcx
nop dword [rax]
call fcn.0044bd40
mov qword [rsp + 0x220], rax
mov rdx, qword [rsp + 0x1e0]
mov edi, dword [rdx + 0x17c]
mov qword [rsp + 0x1a0], rdi
movzx r9d, byte [rsp + 0x2f0]
test r9b, r9b
jne 0x4b302f
mov r8d, dword [rdx + 0x178]
mov r9, qword [rdx + 0xc8]
mov r10, qword [rdx + 0xd0]
xor ecx, ecx
xor ebx, ebx
jmp 0x4b3191
mov r8, qword [rsp + 0x2e0]
mov r8, qword [r8 + 0x18]
mov esi, dword [rdx + 0x178]
mov rbx, rax
mov rcx, rdi
mov rax, qword [rsp + 0x2e8]
call r8
lea rax, [0x004e1400]
call fcn.0040e360
mov rcx, qword [rsp + 0x1a0]
mov qword [rax + 8], rcx
mov qword [rax + 0x10], rcx
cmp dword [0x008a78a0], 0
jne 0x4b3082
mov rcx, qword [rsp + 0x220]
nop
jmp 0x4b3092
call fcn.00466b00
mov rcx, qword [rsp + 0x220]
mov qword [r11], rcx
mov qword [rax], rcx
mov qword [rax + 0x18], 0
mov qword [rax + 0x20], 0xffffffffffffffff
movups xmmword [rsp + 0x278], xmm15
movups xmmword [rsp + 0x288], xmm15
movups xmmword [rsp + 0x298], xmm15
mov rbx, rax
lea rax, [0x00780700]
call TlsAlloc
movups xmm0, xmmword [rsp]
movups xmmword [rsp + 0x278], xmm0
movups xmm0, xmmword [rsp + 0x10]
movups xmmword [rsp + 0x288], xmm0
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rsp + 0x298], xmm0
movups xmm0, xmmword [rsp + 0x278]
movups xmmword [rsp + 0x1e8], xmm0
movups xmm0, xmmword [rsp + 0x288]
movups xmmword [rsp + 0x1f8], xmm0
movups xmm0, xmmword [rsp + 0x298]
movups xmmword [rsp + 0x208], xmm0
cmp dword [0x008a78a0], 0
je 0x4b3154
mov rbx, qword [rsp + 0x1e0]
lea rdx, [rbx + 0x1b8]
lea rax, [0x004e8b40]
lea rcx, [rsp + 0x1e8]
mov rbx, rdx
call fcn.004135e0
movups xmm0, xmmword [rsp + 0x1e8]
mov rdx, qword [rsp + 0x1e0]
movups xmmword [rdx + 0x1b8], xmm0
movups xmm0, xmmword [rsp + 0x1f8]
movups xmmword [rdx + 0x1c8], xmm0
movups xmm0, xmmword [rsp + 0x208]
movups xmmword [rdx + 0x1d8], xmm0
jmp ResumeThread
inc rcx
cmp rcx, r10
jge 0x4b31bd
mov r11, qword [r9 + rcx*8]
mov r12d, dword [r11 + 0x1c]
nop
cmp r12d, r8d
ja 0x4b318e
mov r13d, dword [r11 + 0x20]
add r13d, r12d
cmp r8d, r13d
ja 0x4b318e
mov ebx, r8d
sub ebx, r12d
add ebx, dword [r11 + 0x24]
jmp 0x4b318e
mov rdx, qword [rsp + 0x2e0]
mov rdx, qword [rdx + 0x18]
mov esi, ebx
mov rbx, rax
mov rcx, rdi
mov rax, qword [rsp + 0x2e8]
call rdx
nop dword [rax + rax]
jmp reloc.kernel32.dll_WerSetFlags
inc rcx
cmp rcx, r10
jge 0x4b3215
mov r12, qword [r9 + rcx*8]
mov r13d, dword [r12 + 0x1c]
cmp r11d, r13d
jb 0x4b31e5
mov r15d, dword [r12 + 0x20]
add r15d, r13d
cmp r11d, r15d
ja 0x4b31e5
mov ebx, r11d
sub ebx, r13d
add ebx, dword [r12 + 0x24]
jmp 0x4b31e5
mov rdx, qword [rsp + 0x2e0]
mov r8, qword [rdx + 0x18]
mov esi, ebx
mov rbx, rax
mov ecx, dword [rsp + 0x8c]
mov edi, ecx
mov rax, qword [rsp + 0x2e8]
call r8
jmp 0x4b2f3d
mov rax, r9
mov rcx, r8
call fcn.00466ec0
mov rcx, rdi
call fcn.00466ec0
mov rax, r9
call fcn.00466ec0
mov rax, qword [rsp + 0x190]
inc rax
mov rcx, qword [rsp + 0x170]
mov rbx, qword [rsp + 0x1c0]
mov rsi, r9
movzx edx, word [rsi + 0xa2]
nop
cmp rax, rdx
jge 0x4b331a
mov qword [rsp + 0x190], rax
movups xmmword [rsp + 0xcc], xmm15
movups xmmword [rsp + 0xd4], xmm15
movups xmmword [rsp + 0xe4], xmm15
lea rax, [0x007806a0]
lea rcx, [0x00781010]
lea rdi, [0x008a7620]
lea rsi, [0x004d78c0]
lea r8, [rsp + 0xcc]
call fcn.0049a9c0
test rax, rax
jne 0x4b3309
mov edx, dword [rsp + 0xe0]
mov r9, qword [rsp + 0x1e0]
cmp dword [r9 + 0xa8], edx
jne 0x4b325a
mov edx, dword [rsp + 0xd8]
mov dword [r9 + 0xa8], edx
jmp ExitProcess
mov rcx, rbx
mov rbx, rax
xor eax, eax
add rsp, 0x2d0
pop rbp
ret
mov rdx, qword [rbx + 0x10]
mov rdi, qword [rsp + 0x148]
add rdi, rdx
cmp rdx, rdi
jg 0x4b22fd
mov qword [rbx + 0x18], rdi
jmp 0x4b22fd
nop dword [rax + rax]
call fcn.00466f40
nop
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov byte [rsp + 0x18], cl
call fcn.00464be0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
movzx ecx, byte [rsp + 0x18]
jmp fcn.004b1ce0