Function at 0x7fff25d9bc30
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rsi
mov qword [rax + 0x20], r9
mov qword [rax + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov r14, r9
and qword [r9 + 8], 0
and qword [r9 + 0x58], 0
and qword [r9 + 0x38], 0
and qword [r9 + 0x40], 0
and qword [r9 + 0x48], 0
mov rdx, qword [r9 + 0x18]
mov qword [rsp + 0xb0], rdx
and qword [rsp + 0x40], 0
or qword [rsp + 0x70], 0xffffffffffffffff
xor esi, esi
mov qword [rsp + 0x58], rsi
and qword [rsp + 0x78], rsi
and qword [rax - 0x98], rsi
xor r12d, r12d
mov dword [rsp + 0x50], r12d
mov dword [rsp + 0x48], r12d
test r8d, r8d
jne 0x7fff25d9befb
lea r8, [rsp + 0x40]
call fcn.7fff25d9cf14
mov dword [rsp + 0x30], eax
mov edi, eax
mov r15, qword [rsp + 0x40]
test eax, eax
js 0x7fff25d9bef1
lea r9, [rsp + 0x70]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x60]
mov rcx, r15
call fcn.7fff25d7b2fc
mov edi, eax
mov dword [rsp + 0x30], eax
mov rcx, r15
test eax, eax
js 0x7fff25d9bf19
mov rsi, qword [rsp + 0x58]
call fcn.7fff25d7b4f4
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov r11, qword [rsp + 0x60]
mov rdx, r11
mov rcx, rsi
call fcn.7fff25d7b47c
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9bf27
lea r13, [rsi + 0x10]
mov qword [rsp + 0x98], r13
mov qword [rsp + 0x88], rsi
mov edx, esi
sub edx, r13d
add edx, r11d
mov rcx, r13
call fcn.7fff25d9ceac
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9bf39
lea r8, [rsp + 0x34]
lea rax, [r13 + 0xc]
mov qword [rsp + 0x88], rax
xor ecx, ecx
mov edx, 0x50544c41
mov dword [rsp + 0x68], ecx
mov qword [rsp + 0xa0], rax
cmp ecx, dword [r13 + 8]
jae 0x7fff25d9bf92
cmp dword [rax], edx
je 0x7fff25d9bd8d
inc ecx
add rax, 8
jmp 0x7fff25d9bd6b
mov dword [r8], ecx
mov eax, dword [rax + 4]
lea r10, [r13 - 0x10]
add r10, rax
test r10, r10
je 0x7fff25d9bf9a
mov r8d, dword [rsi + 8]
mov edx, dword [rsp + 0x34]
mov rcx, r13
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7b214
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9bf5d
mov edx, dword [r10 + 4]
sub rdx, 8
shr rdx, 1
lea rcx, [r10 + 8]
lea r8, [rsp + 0x78]
call fcn.7fff25d9c160
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9bef1
lea rcx, [r13 + 0xc]
xor eax, eax
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x90], rcx
cmp eax, dword [r13 + 8]
jae 0x7fff25d9be1e
cmp dword [rcx], 0x4c444452
je 0x7fff25d9bfb2
inc eax
add rcx, 8
jmp 0x7fff25d9bdf8
xor r11d, r11d
test r11, r11
jne 0x7fff25d9c00f
lea rcx, [r13 + 0xc]
xor eax, eax
mov dword [rsp + 0x3c], eax
mov qword [rsp + 0xa8], rcx
cmp eax, dword [r13 + 8]
jae 0x7fff25d9bee7
cmp dword [rcx], 0x424f4c47
je 0x7fff25d9be5e
inc eax
add rcx, 8
mov qword [rsp + 0x88], rcx
jmp 0x7fff25d9be30
mov eax, dword [rcx + 4]
lea r12, [r13 - 0x10]
add r12, rax
lea rdx, [r12 + 0x14]
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.ntdll.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
mov eax, dword [rsp + 0x3c]
jne 0x7fff25d9beda
lea rcx, [rsp + 0x34]
mov dword [rcx], eax
test r12, r12
je 0x7fff25d9beec
mov r8d, dword [rsi + 8]
mov edx, dword [rsp + 0x34]
mov rcx, r13
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r12
call fcn.7fff25d7b11c
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9c08a
mov ecx, 1
test byte [r12 + 8], cl
mov r12d, dword [rsp + 0x50]
cmovne r12d, ecx
mov dword [rsp + 0x48], r12d
jmp 0x7fff25d9c0c1
mov rcx, qword [rsp + 0x88]
jmp 0x7fff25d9be4e
xor r12d, r12d
jmp 0x7fff25d9be90
mov r12d, dword [rsp + 0x50]
mov ecx, 1
jmp 0x7fff25d9c0c1
lea r9, [rsp + 0x40]
mov r8, rdx
lea rdx, [0x7fff25fa2078]
mov ecx, 7
call fcn.7fff25d54ab0
jmp 0x7fff25d9bcb6
mov edx, eax
call 0x7fff25e31038
mov rsi, qword [rsp + 0x58]
jmp 0x7fff25d9bef1
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x38495241
xor r9d, r9d
jmp 0x7fff25d9bf56
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x50], rsi
sub r13d, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x38434f54
mov r9d, r13d
mov r8, r11
xor ecx, ecx
jmp 0x7fff25d9bf86
mov qword [rsp + 0xb8], r10
mov qword [rsp + 0xc0], rsi
sub r10d, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x50544c41
mov r9d, r10d
mov r8, r11
mov rcx, r15
mov edx, eax
call fcn.7fff25e2bc80
jmp 0x7fff25d9bef1
xor r10d, r10d
jmp 0x7fff25d9bd9a
mov qword [rsp + 0x20], rsi
mov r9d, edx
mov r8, r11
mov rcx, r15
call fcn.7fff25e2ef04
jmp 0x7fff25d9bef1
mov eax, dword [rcx + 4]
lea rcx, [r13 - 0x10]
add rcx, rax
mov qword [rsp + 0x98], rcx
mov eax, dword [rcx + 0xc]
shr rax, 1
add rax, 0xa
lea rdx, [rcx + rax*2]
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.ntdll.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
mov eax, dword [rsp + 0x38]
jne 0x7fff25d9c002
lea rcx, [rsp + 0x34]
mov dword [rcx], eax
mov r11, qword [rsp + 0x98]
jmp 0x7fff25d9be21
mov rcx, qword [rsp + 0x90]
jmp 0x7fff25d9be16
mov r8d, dword [rsi + 8]
mov edx, dword [rsp + 0x34]
mov rcx, r13
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r11
call fcn.7fff25e2cc40
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x7fff25d9c060
mov qword [rsp + 0xc8], r11
mov qword [rsp + 0xd0], rsi
sub r11d, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x4c444452
mov r9d, r11d
mov r8, qword [rsp + 0x60]
jmp 0x7fff25d9bf83
mov edx, dword [r11 + 0xc]
shr edx, 1
lea rcx, [r11 + 0x14]
lea r8, [rsp + 0x80]
call fcn.7fff25d9c160
mov edi, eax
mov dword [rsp + 0x30], eax
test eax, eax
js 0x7fff25d9bef1
jmp 0x7fff25d9be2a
mov qword [rsp + 0xd8], r12
mov qword [rsp + 0xe0], rsi
sub r12d, esi
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x20], 0x424f4c47
mov r9d, r12d
mov r8, qword [rsp + 0x60]
mov edx, eax
mov rcx, r15
call fcn.7fff25e2bc80
jmp 0x7fff25d9beec
jmp 0x7fff25d9c0fe
test edi, edi
js 0x7fff25df27ea
mov rax, qword [rsp + 0x80]
mov qword [r14 + 0x58], rax
mov rax, qword [rsp + 0x78]
mov qword [r14 + 8], rax
mov rax, qword [rsp + 0x70]
mov qword [r14 + 0x38], rax
mov qword [r14 + 0x40], rsi
and qword [r14 + 0x48], 0
and byte [r14 + 0x50], 0xfd
and r12b, cl
add r12b, r12b
or byte [r14 + 0x50], r12b
mov eax, edi
mov rsi, qword [rsp + 0x120]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
ret