Function at 0x14000fdd4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r14, r8
mov ebp, edx
mov r15, rcx
mov esi, 0xc000007b
call qword [0x140019480]
xor r12d, r12d
mov rbx, rax
cmp rax, r12
jne 0x14000fe17
mov eax, esi
jmp 0x140010200
mov edi, dword [rax + 0x50]
mov rax, qword [0x1400194a8]
cmp ebp, edi
cmova edi, ebp
cmp rax, r12
jne 0x14000fe58
lea rcx, [0x1400149a0]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea rdx, str.NtCreateSection
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400194a8], rax
cmp rax, r12
je 0x1400101fb
mov qword [rsp + 0x30], r12
lea r9, [rsp + 0x48]
lea rcx, [rsp + 0x40]
mov r13d, edi
xor r8d, r8d
mov edx, 0xf001f
mov dword [rsp + 0x28], 0x8000000
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], r13
mov dword [rsp + 0x20], 0x40
call rax
cmp eax, r12d
jne 0x1400101fb
mov r12, qword [rsp + 0x40]
test r12, r12
je 0x1400101fb
mov r8, r14
mov edx, edi
mov rcx, r12
call fcn.14000fd00
mov rcx, r12
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test rbp, rbp
je 0x1400101fb
mov r8, r13
xor edx, edx
mov rcx, rbp
call fcn.14000b45c
mov eax, dword [rbx + 0x38]
mov rcx, rbp
cmp dword [rbx + 0x3c], eax
ja 0x14000ffc8
movzx eax, word [rbx + 0x14]
mov rdx, r15
lea r14, [rax + rbx + 0x18]
mov r8, r14
sub r8, r15
call sub.msvcrt.dll_memcpy
mov eax, dword [rbx + 0x38]
xor ecx, ecx
mov r12, rbp
lea r13d, [rcx + 1]
sub r12, r15
mov r15d, ecx
add r12, rbx
mov dword [r12 + 0x3c], eax
lea rax, [rbx + 6]
mov qword [rsp + 0x48], rax
cmp cx, word [rax]
jae 0x14000ffa7
mov rax, r12
sub rax, rbx
sub rbx, r12
lea r13, [rax + r14 + 0x10]
mov eax, dword [rbx + r13]
add eax, dword [r14 + 0xc]
cmp eax, edi
ja 0x14000ffc5
lea rcx, [r13 - 0x10]
mov r8d, 0x28
mov rdx, r14
call sub.msvcrt.dll_memcpy
mov edx, dword [r14 + 0x14]
mov ecx, dword [r14 + 0xc]
add rdx, qword [rsp + 0x90]
mov r8d, dword [rbx + r13]
add rcx, rbp
call sub.msvcrt.dll_memcpy
mov eax, dword [r13 - 4]
mov dword [r13 + 4], eax
mov eax, dword [r12 + 0x38]
cmp dword [r13], eax
jae 0x14000ff89
mov dword [r13], eax
mov rax, qword [rsp + 0x48]
inc r15d
add r14, 0x28
movzx eax, word [rax]
add r13, 0x28
cmp r15d, eax
jb 0x14000ff34
mov r13d, 1
cmp dword [r12 + 0x50], edi
ja 0x14000ffc5
mov rcx, rbp
call fcn.14000fb7c
xor ebx, ebx
mov rdi, rax
cmp rax, rbx
jne 0x14000ffd3
mov esi, 0xc0000017
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x14000fe10
mov r14, qword [rsp + 0xb0]
mov dword [rax + 0x68], ebx
mov word [rax + 0x6c], r13w
cmp r14, rbx
je 0x14001003c
mov rcx, r14
call qword [sym.imp.msvcrt.dll_wcslen]
mov r13d, 2
mov rbx, rax
add ax, ax
mov word [rdi + 0x48], ax
add ax, r13w
lea rbx, [rbx + rbx + 2]
mov word [rdi + 0x4a], ax
call qword [0x140019490]
lea r15d, [r13 + 6]
mov rcx, qword [rax + 0x30]
mov r8, rbx
mov edx, r15d
call qword [0x140019458]
mov rdx, r14
mov rcx, rax
mov qword [rdi + 0x50], rax
call qword [sym.imp.msvcrt.dll_wcscpy]
xor ebx, ebx
jmp 0x140010069
mov r13d, 2
mov word [rax + 0x48], bx
mov word [rax + 0x4a], r13w
call qword [0x140019490]
lea r15d, [r13 + 6]
mov rcx, qword [rax + 0x30]
mov r8, r13
mov edx, r15d
call qword [0x140019458]
mov qword [rdi + 0x50], rax
mov r14, qword [rsp + 0xa8]
cmp r14, rbx
je 0x1400100c0
mov rcx, r14
call qword [sym.imp.msvcrt.dll_wcslen]
mov rbx, rax
add ax, ax
mov word [rdi + 0x58], ax
add ax, r13w
lea rbx, [rbx + rbx + 2]
mov word [rdi + 0x5a], ax
call qword [0x140019490]
mov r8, rbx
mov rcx, qword [rax + 0x30]
mov edx, r15d
call qword [0x140019458]
mov rdx, r14
mov rcx, rax
mov qword [rdi + 0x60], rax
call qword [sym.imp.msvcrt.dll_wcscpy]
xor ebx, ebx
jmp 0x1400100e3
mov word [rdi + 0x58], bx
mov word [rdi + 0x5a], r13w
call qword [0x140019490]
mov rcx, qword [rax + 0x30]
mov r8, r13
mov edx, r15d
call qword [0x140019458]
mov qword [rdi + 0x60], rax
mov rcx, qword [rdi + 0x30]
call fcn.14000fcd4
mov qword [rdi + 0x38], rax
mov eax, 0x2000
test word [r12 + 0x16], ax
je 0x140010101
or dword [rdi + 0x68], 4
test byte [rdi + 0x68], 4
jne 0x14001010b
mov qword [rdi + 0x38], rbx
lea rax, [rdi + 0x98]
mov qword [rdi + 0x88], rbx
mov qword [rdi + 0x90], rbx
mov qword [rax], rax
mov qword [rdi + 0xa0], rax
lea rax, [rdi + 0xa8]
mov qword [rax], rax
mov qword [rdi + 0xb0], rax
lea rax, [rdi + 0xb8]
mov qword [rax], rax
mov qword [rdi + 0xc0], rax
mov qword [rdi + 0xc8], rbx
mov rax, qword [r12 + 0x30]
mov qword [rdi + 0xd8], rbx
mov qword [rdi + 0xd0], rax
mov rax, qword [rsp + 0xb8]
mov qword [rax], rdi
bts dword [rdi + 0x68], 0x15
test byte [rdi + 0x68], 4
je 0x14000fe10
lea rdx, [0x1400149c4]
mov r9d, 0xc0000018
xor r8d, r8d
mov rcx, rbp
mov dword [rsp + 0x20], 0xc000007b
call fcn.14001069c
cmp eax, ebx
mov esi, eax
jge 0x14000fe10
mov rbx, qword [rdi + 0x50]
xor ebp, ebp
cmp rbx, rbp
je 0x1400101ca
call qword [0x140019490]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax + 0x30]
call qword [0x140019468]
mov rbx, qword [rdi + 0x60]
cmp rbx, rbp
je 0x1400101e8
call qword [0x140019490]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax + 0x30]
call qword [0x140019468]
mov rcx, qword [rdi + 0x30]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov qword [rdi + 0x30], rbp
jmp 0x14000fe10
mov eax, 0xc0000017
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret