Function at 0x2b36558c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
mov dword [rsp + 0x2c], r9d
mov ebx, ecx
mov r12d, r8d
test dl, dl
jne 0x2b3655db8
test bl, bl
jne 0x2b3655da8
mov rax, qword [0x2b374c120]
lea rsi, [rsp + 0x71]
mov byte [rsp + 0x4c], 0
mov rcx, rsi
mov dword [rsp + 0x48], 0x67675f29
mov qword [rsp + 0x40], rax
movabs rax, 0x2d2e6760696d6066
mov qword [rsp + 0x71], rax
mov dword [rsp + 0x79], 0x67675f29
mov byte [rsp + 0x7d], 0
movzx eax, byte [rsp + 0x71]
add eax, 5
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x72]
add eax, 5
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x73]
add eax, 5
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
add eax, 5
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
add eax, 5
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
add eax, 5
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
add eax, 5
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
add eax, 5
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
add eax, 5
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
add eax, 5
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7b]
add eax, 5
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7c]
add eax, 5
mov byte [rsp + 0x7c], al
call fcn.2b36554d0
mov dword [rsp + 0x58], 0xba82899a
mov rbx, rax
mov rax, qword [0x2b374c128]
mov byte [rsp + 0x5c], 0
mov qword [rsp + 0x50], rax
movabs rax, 0x899992b79f9a94b7
mov qword [rsp + 0x71], rax
mov dword [rsp + 0x79], 0xba82899a
mov byte [rsp + 0x7d], 0
movzx eax, byte [rsp + 0x71]
xor eax, 0xfffffffb
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x72]
xor eax, 0xfffffffb
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x73]
xor eax, 0xfffffffb
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
xor eax, 0xfffffffb
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
xor eax, 0xfffffffb
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
xor eax, 0xfffffffb
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
xor eax, 0xfffffffb
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
xor eax, 0xfffffffb
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
xor eax, 0xfffffffb
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
xor eax, 0xfffffffb
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7b]
xor eax, 0xfffffffb
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7c]
xor eax, 0xfffffffb
mov byte [rsp + 0x7c], al
movsxd rax, dword [rbx + 0x3c]
mov edi, dword [rbx + rax + 0x88]
xor eax, eax
test edi, edi
je 0x2b3655af5
mov r14d, edi
add r14, rbx
mov r15d, dword [r14 + 0x20]
mov r13d, dword [r14 + 0x18]
add r15, rbx
test r13d, r13d
je 0x2b3655af5
xor ebp, ebp
jmp 0x2b3655ac9
add rbp, 1
add r15, 4
cmp r13, rbp
je 0x2b3655e00
mov ecx, dword [r15]
mov rdx, rsi
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x2b3655ab8
mov edx, dword [r14 + 0x24]
lea rcx, [rbx + rbp*2]
mov eax, dword [r14 + 0x1c]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
mov r8d, 0x6f6f
mov qword [0x2b377e060], rax
mov rax, qword [str.CapLnk_]
mov ecx, 0x6f6f
mov dword [rsp + 0x68], 0x616e6060
mov qword [rsp + 0x60], rax
movabs rax, 0x3d5f6b6e4c706143
mov qword [rsp + 0x71], rax
mov dword [rsp + 0x79], 0x616e6060
mov word [rsp + 0x7d], r8w
mov byte [rsp + 0x7f], 0
movzx eax, byte [rsp + 0x71]
mov word [rsp + 0x6c], cx
add eax, 4
mov byte [rsp + 0x6e], 0
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x72]
add eax, 4
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x73]
add eax, 4
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
add eax, 4
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
add eax, 4
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
add eax, 4
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
add eax, 4
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
add eax, 4
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
add eax, 4
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
add eax, 4
mov byte [rsp + 0x7a], al
movzx eax, byte [rsp + 0x7b]
add eax, 4
mov byte [rsp + 0x7b], al
movzx eax, byte [rsp + 0x7c]
add eax, 4
mov byte [rsp + 0x7c], al
movzx eax, byte [rsp + 0x7d]
add eax, 4
mov byte [rsp + 0x7d], al
movzx eax, byte [rsp + 0x7e]
add eax, 4
mov byte [rsp + 0x7e], al
xor eax, eax
test edi, edi
je 0x2b3655c4d
mov r14d, edi
add r14, rbx
mov r15d, dword [r14 + 0x20]
mov r13d, dword [r14 + 0x18]
add r15, rbx
test r13d, r13d
je 0x2b3655c4d
xor ebp, ebp
jmp 0x2b3655c21
add rbp, 1
add r15, 4
cmp r13, rbp
je 0x2b3655df0
mov ecx, dword [r15]
mov rdx, rsi
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x2b3655c10
mov edx, dword [r14 + 0x24]
lea rcx, [rbx + rbp*2]
mov eax, dword [r14 + 0x1c]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
mov qword [0x2b377e068], rax
mov rax, qword [0x2b374c138]
mov edx, 0xffff9d91
mov byte [rsp + 0x3a], 0
mov qword [rsp + 0x30], rax
mov eax, 0xffff9d91
mov word [rsp + 0x38], ax
movabs rax, 0x9292bf929f9d91b2
mov qword [rsp + 0x71], rax
mov word [rsp + 0x79], dx
mov byte [rsp + 0x7b], 0
movzx eax, byte [rsp + 0x71]
xor eax, 0xfffffffe
mov byte [rsp + 0x71], al
movzx eax, byte [rsp + 0x72]
xor eax, 0xfffffffe
mov byte [rsp + 0x72], al
movzx eax, byte [rsp + 0x73]
xor eax, 0xfffffffe
mov byte [rsp + 0x73], al
movzx eax, byte [rsp + 0x74]
xor eax, 0xfffffffe
mov byte [rsp + 0x74], al
movzx eax, byte [rsp + 0x75]
xor eax, 0xfffffffe
mov byte [rsp + 0x75], al
movzx eax, byte [rsp + 0x76]
xor eax, 0xfffffffe
mov byte [rsp + 0x76], al
movzx eax, byte [rsp + 0x77]
xor eax, 0xfffffffe
mov byte [rsp + 0x77], al
movzx eax, byte [rsp + 0x78]
xor eax, 0xfffffffe
mov byte [rsp + 0x78], al
movzx eax, byte [rsp + 0x79]
xor eax, 0xfffffffe
mov byte [rsp + 0x79], al
movzx eax, byte [rsp + 0x7a]
xor eax, 0xfffffffe
mov byte [rsp + 0x7a], al
xor eax, eax
test edi, edi
je 0x2b3655d63
add rdi, rbx
mov r14d, dword [rdi + 0x20]
mov r13d, dword [rdi + 0x18]
add r14, rbx
test r13d, r13d
je 0x2b3655d63
xor r15d, r15d
jmp 0x2b3655d39
add r15, 1
add r14, 4
cmp r13, r15
je 0x2b3655de0
mov ecx, dword [r14]
mov rdx, rsi
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x2b3655d28
mov edx, dword [rdi + 0x24]
lea rcx, [rbx + r15*2]
mov eax, dword [rdi + 0x1c]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
mov qword [0x2b377e058], rax
test r12b, r12b
jne 0x2b3655dd0
cmp byte [rsp + 0x2c], 0
jne 0x2b3655dc8
mov ecx, 0x4098
call fcn.2b3655820
test rax, rax
mov qword [0x2b377e050], rax
setne al
movzx eax, al
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
call fcn.2b3654280
jmp 0x2b36558ed
call fcn.2b36547a0
jmp 0x2b36558e5
call fcn.2b36551d0
jmp 0x2b3655d76
call fcn.2b3654f50
jmp 0x2b3655d6f
xor eax, eax
jmp 0x2b3655d63
xor eax, eax
jmp 0x2b3655c4d
xor eax, eax
jmp 0x2b3655af5