Function at 0x430eb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov rsi, qword [0x007add88]
mov qword [rsp + 0x118], rdx
mov r12, rcx
test rsi, rsi
je 0x4315e0
mov rax, qword [rsi + 0x10]
test rax, rax
je 0x431607
mov r11d, dword [rax + 0x30]
mov rbx, qword [rax + 0x28]
mov edi, dword [rax + 0x60]
mov rsi, qword [rax + 0x90]
mov dword [rsp + 0x3c], edi
mov r15d, dword [rax + 0x78]
mov r9d, dword [rax + 0x40]
mov qword [rsp + 0x30], rsi
mov ecx, dword [rax + 0x50]
mov r8, qword [rax + 0x48]
mov rdx, qword [rax + 0x58]
mov r10, qword [rax + 0x38]
mov r14, qword [rax + 0x80]
mov r13d, dword [rax + 0x88]
mov ebp, dword [rax + 0x98]
mov rdi, qword [rax + 0xa0]
mov esi, dword [rax + 0xa8]
mov rax, qword [rax + 0x70]
mov dword [rsp + 0x48], r15d
mov r15, qword [rsp + 0x30]
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x88], r11d
mov qword [rsp + 0x50], r14
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x68], ebp
mov qword [rsp + 0x70], rdi
mov dword [rsp + 0x78], esi
mov qword [rsp + 0x90], r10
mov r11d, dword [rsp + 0x3c]
mov dword [rsp + 0xa8], ecx
mov ecx, pe_nt_image_headers64
mov dword [rsp + 0x98], r9d
mov qword [rsp + 0xa0], r8
mov qword [rsp + 0xb0], rdx
mov dword [rsp + 0xb8], r11d
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
movdqa xmm3, xmmword [rsp + 0x40]
movdqa xmm4, xmmword [rsp + 0x50]
movups xmmword [rax], xmm3
movups xmmword [rax + 0x10], xmm4
movdqa xmm5, xmmword [rsp + 0x60]
mov rbx, rax
movdqa xmm0, xmmword [rsp + 0x70]
movdqa xmm1, xmmword [rsp + 0x80]
movdqa xmm2, xmmword [rsp + 0x90]
movups xmmword [rax + 0x20], xmm5
movdqa xmm3, xmmword [rsp + 0xa0]
movups xmmword [rax + 0x30], xmm0
movdqa xmm4, xmmword [rsp + 0xb0]
movups xmmword [rax + 0x40], xmm1
movups xmmword [rax + 0x50], xmm2
movups xmmword [rax + 0x60], xmm3
movups xmmword [rax + 0x70], xmm4
lea rbp, [rbx + 0x80]
mov r8d, 4
mov rcx, rbx
mov rdx, rbp
call fcn.004041f0
mov rdx, rbp
mov rcx, rbx
mov rdi, rbp
call fcn.00402780
mov r8d, dword [rbx + 4]
lea rax, [rbx + 0x80]
test r8d, r8d
je 0x431a84
mov r9d, dword [rbx + 0x24]
test r9d, r9d
je 0x431a95
mov ecx, dword [rbx + 0x44]
test ecx, ecx
mov rcx, rbp
je 0x431a8c
mov edx, dword [rbx + 0x64]
test edx, edx
mov rdx, rbx
je 0x431ab1
sub rcx, rbx
add rcx, 0xffffffffffffff80
shr rcx, 7
and ecx, 3
je 0x4314b2
mov r15d, dword [rax + 4]
test r15d, r15d
je 0x431120
mov r13d, dword [rax + 0x24]
test r13d, r13d
je 0x431900
mov esi, dword [rax + 0x44]
test esi, esi
je 0x431910
mov r11d, dword [rax + 0x64]
test r11d, r11d
je 0x431920
mov rdx, rax
cmp rcx, 1
je 0x4314b2
cmp rcx, 2
je 0x43110d
lea rax, [rbx + 0x100]
mov r10d, dword [rax + 4]
test r10d, r10d
je 0x431120
mov r8d, dword [rax + 0x24]
test r8d, r8d
je 0x431900
mov r9d, dword [rax + 0x44]
test r9d, r9d
je 0x431910
mov ecx, dword [rax + 0x64]
test ecx, ecx
je 0x431920
mov rdx, rax
sub rax, 0xffffffffffffff80
mov r14d, dword [rax + 4]
test r14d, r14d
jne 0x43148a
nop
lea rdx, [rax + 0x20]
cmp rax, rbp
je 0x431162
cmp rdx, rbp
je 0x431162
nop
mov r14d, dword [rdx + 4]
test r14d, r14d
je 0x431540
movdqu xmm2, xmmword [rdx]
add rdx, 0x20
add rax, 0x20
movups xmmword [rax - 0x20], xmm2
mov r15, qword [rdx - 0x10]
mov qword [rax - 0x10], r15
mov r13d, dword [rdx - 8]
mov dword [rax - 8], r13d
cmp rbp, rdx
jne 0x431130
cmp rbx, rbp
je 0x431556
mov edx, dword [rbx + 0x24]
mov ecx, dword [rbx + 4]
lea rax, [rbx + 0x20]
cmp edx, ecx
je 0x4314e0
mov r8d, dword [rbx + 0x44]
lea rcx, [rbx + 0x40]
cmp r8d, edx
je 0x431750
mov r9d, dword [rbx + 0x64]
lea rax, [rbx + 0x60]
cmp r8d, r9d
je 0x431517
nop
mov r9, rdi
mov rax, rbx
xor esi, esi
sub r9, rbx
sub r9, 0x20
shr r9, 5
add r9, 1
and r9d, 7
je 0x431296
cmp r9, 1
je 0x431275
cmp r9, 2
je 0x43125d
cmp r9, 3
je 0x431245
cmp r9, 4
je 0x43122d
cmp r9, 5
je 0x43121a
cmp r9, 6
je 0x431205
mov r15d, dword [rbx + 4]
mov rdx, qword [rbx + 0x10]
test r15d, r15d
je 0x431201
cmp rsi, rdx
cmovb rsi, rdx
lea rax, [rbx + 0x20]
mov r11d, dword [rax + 4]
mov r13, qword [rax + 0x10]
test r11d, r11d
jne 0x4318f0
add rax, 0x20
mov ebp, dword [rax + 4]
mov r10, qword [rax + 0x10]
test ebp, ebp
jne 0x431820
add rax, 0x20
mov r8d, dword [rax + 4]
mov rcx, qword [rax + 0x10]
test r8d, r8d
je 0x431241
cmp rsi, rcx
cmovb rsi, rcx
add rax, 0x20
mov r9d, dword [rax + 4]
mov r14, qword [rax + 0x10]
test r9d, r9d
je 0x431259
cmp rsi, r14
cmovb rsi, r14
add rax, 0x20
mov r15d, dword [rax + 4]
mov rdx, qword [rax + 0x10]
test r15d, r15d
je 0x431271
cmp rsi, rdx
cmovb rsi, rdx
add rax, 0x20
mov r11d, dword [rax + 4]
mov r13, qword [rax + 0x10]
test r11d, r11d
je 0x431289
cmp rsi, r13
cmovb rsi, r13
add rax, 0x20
cmp rax, rdi
je 0x431353
mov ebp, dword [rax + 4]
mov r10, qword [rax + 0x10]
test ebp, ebp
je 0x4312a8
cmp rsi, r10
cmovb rsi, r10
add rax, 0x20
mov ecx, dword [rax + 4]
mov r8, qword [rax + 0x10]
test ecx, ecx
je 0x4312be
cmp rsi, r8
cmovb rsi, r8
mov r9d, dword [rax + 0x24]
mov r14, qword [rax + 0x30]
test r9d, r9d
je 0x4312d2
cmp rsi, r14
cmovb rsi, r14
mov r15d, dword [rax + 0x44]
mov rdx, qword [rax + 0x50]
test r15d, r15d
je 0x4312e6
cmp rsi, rdx
cmovb rsi, rdx
mov r11d, dword [rax + 0x64]
mov r13, qword [rax + 0x70]
test r11d, r11d
je 0x4312fa
cmp rsi, r13
cmovb rsi, r13
mov ebp, dword [rax + 0x84]
mov r10, qword [rax + 0x90]
test ebp, ebp
je 0x431312
cmp rsi, r10
cmovb rsi, r10
mov ecx, dword [rax + 0xa4]
mov r8, qword [rax + 0xb0]
test ecx, ecx
je 0x43132a
cmp rsi, r8
cmovb rsi, r8
mov r9d, dword [rax + 0xc4]
mov r14, qword [rax + 0xd0]
test r9d, r9d
je 0x431344
cmp rsi, r14
cmovb rsi, r14
add rax, 0xe0
cmp rax, rdi
jne 0x431296
mov edx, 0x1000
mov ecx, 0x380
mov r14, qword [sym.imp.msvcrt.dll__aligned_malloc]
call r14
mov r13, rax
test r12, r12
jne 0x431590
mov edx, 0x200000
mov rcx, rsi
call r14
xor edx, edx
mov qword [r13 + 0xe0], rax
mov word [r13 + 0xe8], dx
test rax, rax
je 0x43192c
mov rcx, rbx
call sub.libstdc_6.dll_operator_delete_void_
mov rax, r13
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r11d, dword [rax + 4]
mov rcx, rax
test r11d, r11d
je 0x431120
mov r10d, dword [rax + 0x24]
test r10d, r10d
je 0x431900
mov r8d, dword [rax + 0x44]
test r8d, r8d
je 0x431910
mov r9d, dword [rax + 0x64]
test r9d, r9d
je 0x431920
mov rdx, rax
lea rax, [rax + 0x80]
mov r14d, dword [rax + 4]
test r14d, r14d
je 0x431120
mov r15d, dword [rax + 0x24]
test r15d, r15d
je 0x431900
mov r13d, dword [rax + 0x44]
test r13d, r13d
je 0x431910
mov esi, dword [rax + 0x64]
test esi, esi
je 0x431920
mov rdx, rax
lea rax, [rax + 0x80]
mov r11d, dword [rax + 4]
test r11d, r11d
je 0x431120
mov r10d, dword [rax + 0x24]
test r10d, r10d
je 0x431900
mov r8d, dword [rax + 0x44]
test r8d, r8d
je 0x431910
mov eax, dword [rax + 0x64]
test eax, eax
lea rax, [rcx + 0x180]
je 0x431920
lea rdx, [rcx + 0x100]
mov r9d, dword [rax + 4]
test r9d, r9d
je 0x431120
mov r15d, dword [rax + 0x24]
test r15d, r15d
je 0x431900
mov r13d, dword [rax + 0x44]
test r13d, r13d
je 0x431910
mov esi, dword [rax + 0x64]
test esi, esi
je 0x431920
mov rdx, rax
lea rax, [rdx + 0x80]
cmp rax, rbp
jne 0x4313c0
cmp rbx, rbp
je 0x431556
lea rax, [rbx + 0x20]
mov ecx, dword [rbx + 4]
cmp dword [rbx + 0x24], ecx
jne 0x4314f6
nop word [rax + rax]
test ecx, ecx
je 0x431830
mov rsi, qword [rbx + 0x10]
cmp qword [rax + 0x10], rsi
je 0x431830
lea rcx, [rax + 0x20]
mov edx, dword [rax + 4]
cmp dword [rax + 0x24], edx
je 0x431750
mov r8d, dword [rcx + 4]
lea rax, [rcx + 0x20]
cmp r8d, dword [rcx + 0x24]
jne 0x431559
mov r9d, r8d
test r9d, r9d
je 0x4318a0
mov r14, qword [rax + 0x10]
xor edx, edx
test r8d, r8d
je 0x43152f
mov rdx, qword [rcx + 0x10]
cmp r14, rdx
jne 0x431559
jmp 0x4318ac
add rdx, 0x20
cmp rbp, rdx
jne 0x431130
cmp rbx, rbp
jne 0x43116b
mov rdi, rbx
cmp rbx, rdi
jne 0x4311a0
mov edx, 0x1000
mov ecx, 0x380
mov r14, qword [sym.imp.msvcrt.dll__aligned_malloc]
call r14
xor esi, esi
mov r13, rax
test r12, r12
je 0x431373
nop
nop word cs:[rax + rax]
call qword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
mov r9d, 4
mov r8d, 0x20003000
cmp rax, rsi
lea rdx, [rax + rax]
cmovae rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [r13 + 0xe0], rax
test rax, rax
je 0x431a12
mov byte [r13 + 0xe8], 1
jmp 0x431398
mov ecx, 0x28
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
pxor xmm5, xmm5
mov rsi, rax
movups xmmword [rax], xmm5
mov qword [rax + 0x20], 0
mov qword [0x007add88], rax
movups xmmword [rax + 0x10], xmm5
mov ecx, 0xc0
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
mov rcx, rax
mov rbx, rax
call fcn.0040ed60
mov r10d, dword [rbx + 0x60]
mov rbp, qword [rbx + 0x80]
mov qword [rsi + 0x10], rbx
mov rcx, qword [rbx + 0x38]
mov r8d, dword [rbx + 0x30]
mov qword [rsp + 0x50], rbp
mov r9, qword [rbx + 0x28]
mov edx, dword [rbx + 0x40]
mov dword [rsp + 0xb8], r10d
mov r14d, dword [rbx + 0x50]
mov rax, qword [rbx + 0x48]
mov qword [rsp + 0x90], rcx
mov ecx, pe_nt_image_headers64
mov r11, qword [rbx + 0xa0]
mov r10d, dword [rbx + 0xa8]
mov qword [rsp + 0x80], r9
mov r13d, dword [rbx + 0x78]
mov ebp, dword [rbx + 0x88]
mov dword [rsp + 0x88], r8d
mov esi, dword [rbx + 0x98]
mov r15, qword [rbx + 0x58]
mov qword [rsp + 0x70], r11
mov rdi, qword [rbx + 0x90]
mov rbx, qword [rbx + 0x70]
mov dword [rsp + 0x78], r10d
mov dword [rsp + 0x98], edx
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x58], ebp
mov qword [rsp + 0x60], rdi
mov dword [rsp + 0x68], esi
mov dword [rsp + 0xa8], r14d
mov qword [rsp + 0xb0], r15
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
movdqa xmm0, xmmword [rsp + 0x40]
movdqa xmm1, xmmword [rsp + 0x50]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm1
movdqa xmm2, xmmword [rsp + 0x60]
mov rbx, rax
movdqa xmm3, xmmword [rsp + 0x70]
movdqa xmm4, xmmword [rsp + 0x80]
movdqa xmm5, xmmword [rsp + 0x90]
movups xmmword [rax + 0x20], xmm2
movdqa xmm0, xmmword [rsp + 0xa0]
movups xmmword [rax + 0x30], xmm3
movdqa xmm1, xmmword [rsp + 0xb0]
movups xmmword [rax + 0x40], xmm4
movups xmmword [rax + 0x50], xmm5
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm1
jmp 0x431019
test edx, edx
jne 0x431880
mov r15d, dword [rcx + 8]
cmp dword [rax + 8], r15d
jne 0x431506
mov esi, dword [rcx + 0x18]
mov r13, qword [rcx + 0x10]
test esi, esi
jne 0x431778
lea esi, [r13 - 1]
and esi, 0xfffffff0
mov r10d, dword [rax + 0x18]
mov r11, qword [rax + 0x10]
test r10d, r10d
jne 0x43178d
lea r10d, [r11 - 1]
and r10d, 0xfffffff0
cmp r10d, esi
jne 0x431506
mov r8, rcx
mov rcx, rax
mov rax, r8
cmp rcx, rbp
je 0x431559
add rax, 0x20
cmp rax, rbp
jne 0x4317ec
jmp 0x4319f8
movdqu xmm3, xmmword [rax]
lea r8, [rcx + 0x20]
movups xmmword [rcx + 0x20], xmm3
mov r9, qword [rax + 0x10]
mov qword [rcx + 0x30], r9
mov r14d, dword [rax + 0x18]
mov dword [rcx + 0x38], r14d
add rax, 0x20
mov rcx, r8
cmp rbp, rax
je 0x431a00
mov edi, dword [rax + 4]
cmp edi, dword [rcx + 4]
jne 0x4317c0
test edi, edi
jne 0x4319a0
mov r15d, dword [rcx + 8]
cmp dword [rax + 8], r15d
je 0x4319c0
lea r8, [rcx + 0x20]
mov rsi, rax
mov ecx, 7
mov rdi, r8
rep movsd dword [rdi], dword [rsi]
jmp 0x4317dc
cmp rsi, r10
cmovb rsi, r10
jmp 0x431229
mov r11d, dword [rbx + 8]
cmp dword [rax + 8], r11d
jne 0x4314f6
mov r9d, dword [rax + 0x18]
mov r10, qword [rax + 0x10]
test r9d, r9d
jne 0x431853
lea r9d, [r10 - 1]
and r9d, 0xfffffff0
mov ecx, dword [rbx + 0x18]
mov r8, qword [rbx + 0x10]
test ecx, ecx
jne 0x431865
lea ecx, [r8 - 1]
and ecx, 0xfffffff0
cmp r9d, ecx
jne 0x4314f6
mov rcx, rbx
jmp 0x43179f
mov r14, qword [rcx + 0x10]
cmp qword [rax + 0x10], r14
jne 0x431506
jmp 0x431758
xor r14d, r14d
test r8d, r8d
jne 0x43152b
mov r15d, dword [rax + 8]
cmp dword [rcx + 8], r15d
jne 0x431559
mov esi, dword [rax + 0x18]
mov r13, qword [rax + 0x10]
test esi, esi
jne 0x4318cc
lea esi, [r13 - 1]
and esi, 0xfffffff0
mov r10d, dword [rcx + 0x18]
mov r11, qword [rcx + 0x10]
test r10d, r10d
jne 0x4318e1
lea r10d, [r11 - 1]
and r10d, 0xfffffff0
cmp r10d, esi
jne 0x431559
jmp 0x43179f
cmp rsi, r13
cmovb rsi, r13
jmp 0x431216
lea rax, [rdx + 0xa0]
jmp 0x431120
lea rax, [rdx + 0xc0]
jmp 0x431120
lea rax, [rdx + 0xe0]
jmp 0x431120
mov r15, qword [0x007add88]
test r15, r15
je 0x431a40
mov r12, qword [r15]
test r12, r12
je 0x431a67
mov qword [rsp + 0x20], rsi
lea rbp, [rsp + 0x40]
lea r9, str._llu
mov r8d, 0x20
lea rdx, [0x00409640]
mov rcx, rbp
call fcn.00409650
mov r9, qword [rsp + 0x40]
lea r8, str.MEMORY_ALLOC_FAILED:__mm_malloc_was_not_able_to_allocate__s_byte
xor edx, edx
mov rcx, r12
call fcn.00430850
mov rcx, qword [rsp + 0x40]
add rbp, 0x10
cmp rcx, rbp
je 0x431398
call sub.libstdc_6.dll_operator_delete_void_
jmp 0x431398
mov rdx, qword [rcx + 0x10]
cmp qword [rax + 0x10], rdx
jne 0x43180a
mov r15d, dword [rcx + 8]
cmp dword [rax + 8], r15d
jne 0x43180a
nop dword [rax]
mov esi, dword [rax + 0x18]
mov r13, qword [rax + 0x10]
test esi, esi
jne 0x4319d2
lea esi, [r13 - 1]
and esi, 0xfffffff0
mov r10d, dword [rcx + 0x18]
mov r11, qword [rcx + 0x10]
test r10d, r10d
jne 0x4319e7
lea r10d, [r11 - 1]
and r10d, 0xfffffff0
cmp r10d, esi
jne 0x43180a
mov r8, rcx
jmp 0x4317dc
mov r8, rcx
nop dword [rax + rax]
lea rdi, [r8 + 0x20]
cmp rdi, rbx
jne 0x4311a0
jmp 0x431562
mov rcx, r13
call qword [sym.imp.msvcrt.dll__aligned_free]
mov edi, dword [0x007ac788]
mov r12, qword [rsp + 0x118]
test edi, edi
je 0x431a9e
lea rax, str.VirtualAlloc_failed._Reboot_might_help.
xor r13d, r13d
mov qword [r12], rax
jmp 0x431398
mov ecx, 0x28
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
pxor xmm4, xmm4
mov r15, rax
movups xmmword [rax], xmm4
mov qword [rax + 0x20], 0
mov qword [0x007add88], rax
movups xmmword [rax + 0x10], xmm4
mov ecx, 0x18
call sub.libstdc_6.dll_operator_new_unsigned_long_long_
mov rcx, rax
mov r12, rax
call fcn.00430940
mov qword [r15], r12
jmp 0x431948
mov rax, rbx
jmp 0x431120
lea rax, [rbx + 0x40]
jmp 0x431120
lea rax, [rbx + 0x20]
jmp 0x431120
lea rsi, str.VirtualAlloc_failed.
xor r13d, r13d
mov qword [r12], rsi
jmp 0x431398
lea rax, [rbx + 0x60]
jmp 0x431120