Function at 0x140015830
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1d0
mov qword [rbp + 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rbx, r8
mov r12, rdx
mov r15, rcx
xor eax, eax
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x80], rax
or rsi, 0xffffffffffffffff
mov dword [rbp - 0x70], esi
lea rcx, [rbp - 0x70]
call fcn.140009850
mov edi, eax
xor r14b, r14b
movzx r13d, byte [rbp + 0x148]
test r13b, r13b
je 0x140015a75
call fcn.140073b20
mov rcx, rax
test rax, rax
jne 0x1400158ba
mov ecx, 0x80004005
call fcn.14001d630
int3
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp + 0x10], rax
movzx r9d, byte [rbp + 0x140]
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x78]
mov ecx, edi
call fcn.140014b90
mov rbx, qword [rbp + 0x10]
test al, al
je 0x1400159e7
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x1400159e7
lea rax, [rbp - 0x80]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 1
mov r9d, 2
xor r8d, r8d
mov edx, 0x2000000
call fcn.140078430
test eax, eax
je 0x140015996
xor r8d, r8d
mov rdx, qword [rbp - 0x78]
lea rcx, [rsp + 0x78]
call fcn.140078580
test eax, eax
je 0x14001593d
mov r14b, 1
jmp 0x140015a49
xor eax, eax
mov qword [rbp - 0x6c], rax
mov word [rbp - 0x64], ax
lea rcx, [rbp - 0x6c]
call fcn.14004a8c0
mov rdx, rax
test rax, rax
je 0x140015969
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140015960
mov r8d, eax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x6c]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x68]
mov ecx, 6
rep stosb byte [rdi], al
jmp 0x140015a49
xor eax, eax
mov qword [rbp - 0x62], rax
mov word [rbp - 0x5a], ax
lea rcx, [rbp - 0x62]
call fcn.14004a420
mov rdx, rax
test rax, rax
je 0x1400159bd
mov rax, rsi
inc rax
cmp byte [rdx + rax], 0
jne 0x1400159b4
mov r8d, eax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x62]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x5e]
mov ecx, 6
rep stosb byte [rdi], al
jmp 0x140015a49
xor eax, eax
mov qword [rbp - 0x26], rax
mov dword [rbp - 0x1e], eax
lea rcx, [rbp - 0x26]
call fcn.140049980
mov rdx, rax
test rax, rax
je 0x140015a0d
mov rax, rsi
inc rax
cmp byte [rdx + rax], 0
jne 0x140015a04
mov r8d, eax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x26]
xor eax, eax
mov ecx, 4
rep stosb byte [rdi], al
lea rdi, [rbp - 0x22]
mov ecx, 8
rep stosb byte [rdi], al
mov r8d, dword [rbx - 0x10]
mov rdx, rbx
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdx, [rbx - 0x18]
mov eax, esi
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x140015a62
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + OleUIPromptUserA]
test r14b, r14b
jne 0x140015a6e
xor al, al
jmp 0x140016085
mov rbx, qword [rbp + 0x120]
mov eax, 0x5a4d
cmp word [r15], ax
jne 0x140015fef
movsxd r15, dword [r15 + 0x3c]
add r15, qword [rbp + 0x110]
cmp dword [r15], 0x4550
jne 0x140015fa2
lea rdx, [rbp + 0x148]
mov rcx, r12
call fcn.140078850
movzx ecx, word [r15 + 4]
mov edx, 0x14c
mov eax, dword [rbp + 0x148]
cmp cx, dx
jne 0x140015ac4
test eax, eax
jne 0x140015a67
mov edx, 0x8664
cmp cx, dx
jne 0x140015ad3
cmp eax, 6
jne 0x140015a67
xor eax, eax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
xor edx, edx
lea r8d, [rax + 0x68]
lea rcx, [rbp + 0x60]
call fcn.1400d8b80
mov dword [rbp + 0x60], 0x68
mov dword [rbp + 0x9c], 0x101
xor edi, edi
mov word [rbp + 0xa0], di
lea rax, [rsp + 0x60]
xor r9d, r9d
test r13b, r13b
je 0x140015b59
mov qword [rsp + 0x50], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], rdi
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x30], 0x8000404
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
mov r8, rbx
mov rdx, r12
mov rcx, qword [rbp - 0x80]
call fcn.1400786b0
jmp 0x140015b8b
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x60]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x8000004
mov dword [rsp + 0x20], edi
xor r8d, r8d
mov rdx, rbx
mov rcx, r12
call fcn.14007cc60
test eax, eax
je 0x140015f50
mov r14d, 4
mov r9d, r14d
lea edx, [r14 + 8]
xor ecx, ecx
mov r8d, 0x1000
call fcn.14007b9d0
mov r13, rax
mov dword [rax + 0x30], 0x100002
mov rdx, rax
mov rcx, qword [rsp + 0x68]
call fcn.140079910
test eax, eax
je 0x140015f05
mov rdx, qword [r13 + 0x88]
add rdx, 0x10
mov qword [rsp + 0x20], rdi
lea r9d, [r14 + 4]
lea r8, [rbp + 0x18]
mov rcx, qword [rsp + 0x60]
call fcn.140079ad0
xor eax, eax
mov qword [rbp - 0x1a], rax
mov dword [rbp - 0x12], eax
lea rcx, [rbp - 0x1a]
call fcn.14005c180
mov rdx, rax
test rax, rax
jne 0x140015c0c
mov eax, edi
jmp 0x140015c19
mov rax, rsi
nop
inc rax
cmp byte [rdx + rax], 0
jne 0x140015c10
mov r8d, eax
mov rbx, qword [rbp + 0x130]
mov rcx, rbx
call fcn.14001d350
nop
lea rdi, [rbp - 0x1a]
xor eax, eax
mov rcx, r14
rep stosb byte [rdi], al
lea rdi, [rbp - 0x16]
mov ecx, 8
rep stosb byte [rdi], al
lea r12, [r15 + 0x30]
mov eax, dword [rbp + 0x18]
cmp rax, qword [r12]
jne 0x140015c9c
xor eax, eax
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
mov dword [rbp + 0x30], eax
mov word [rbp + 0x34], ax
lea rcx, [rbp + 0x20]
call fcn.1400568a0
mov rdx, rax
test rax, rax
je 0x140015c7d
mov rax, rsi
inc rax
cmp byte [rdx + rax], 0
jne 0x140015c74
mov r8d, eax
mov rcx, rbx
call fcn.14001d350
nop
lea rdi, [rbp + 0x20]
xor eax, eax
mov ecx, 7
rep stosb byte [rdi], al
lea rdi, [rbp + 0x28]
jmp 0x140015ce7
xor eax, eax
mov qword [rbp + 0x36], rax
mov qword [rbp + 0x3e], rax
mov dword [rbp + 0x46], eax
mov word [rbp + 0x4a], ax
lea rcx, [rbp + 0x36]
call fcn.140056190
mov rdx, rax
test rax, rax
je 0x140015cca
mov rax, rsi
inc rax
cmp byte [rdx + rax], 0
jne 0x140015cc1
mov r8d, eax
mov rcx, rbx
call fcn.14001d350
nop
lea rdi, [rbp + 0x36]
xor eax, eax
mov ecx, 7
rep stosb byte [rdi], al
lea rdi, [rbp + 0x3e]
mov ecx, 0xe
rep stosb byte [rdi], al
mov rdx, qword [rbp + 0x18]
mov eax, edx
cmp rax, qword [r12]
jne 0x140015d9e
mov rcx, qword [rsp + 0x60]
call fcn.14007cb70
test eax, eax
jne 0x140015d56
xor eax, eax
mov qword [rbp - 0xe], rax
mov dword [rbp - 6], eax
lea rcx, [rbp - 0xe]
call fcn.14005bc00
mov rdx, rax
test rax, rax
je 0x140015d39
mov rax, rsi
nop dword [rax]
inc rax
cmp byte [rdx + rax], 0
jne 0x140015d30
mov r8d, eax
mov rcx, rbx
call fcn.14001d350
nop
lea rdi, [rbp - 0xe]
xor eax, eax
mov rcx, r14
rep stosb byte [rdi], al
lea rdi, [rbp - 0xa]
jmp 0x140015d97
xor eax, eax
mov qword [rbp - 2], rax
mov dword [rbp + 6], eax
lea rcx, [rbp - 2]
call fcn.140054b10
mov rdx, rax
test rax, rax
je 0x140015d7c
mov rax, rsi
inc rax
cmp byte [rdx + rax], 0
jne 0x140015d73
mov r8d, eax
mov rcx, rbx
call fcn.14001d350
nop
lea rdi, [rbp - 2]
xor eax, eax
mov rcx, r14
rep stosb byte [rdi], al
lea rdi, [rbp + 2]
mov ecx, 8
rep stosb byte [rdi], al
mov eax, 0x40
cmp byte [rbp + 0x138], 0
cmovne r14d, eax
mov r8d, dword [r15 + 0x50]
mov dword [rsp + 0x20], r14d
mov r9d, 0x3000
mov rdx, qword [r12]
mov rcx, qword [rsp + 0x60]
call fcn.14007bac0
mov r14, rax
test rax, rax
je 0x140015ea4
mov r9d, dword [r15 + 0x54]
xor edi, edi
mov qword [rsp + 0x20], rdi
mov rsi, qword [rbp + 0x110]
mov r8, rsi
mov rdx, rax
mov rcx, qword [rsp + 0x60]
call fcn.140079800
movzx eax, word [r15 + 0x14]
mov ebx, edi
cmp di, word [r15 + 6]
jae 0x140015e54
lea rdi, [r15 + 0x2c]
add rdi, rax
xor r12d, r12d
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rdi - 4]
mov r8d, dword [rdi]
add r8, rsi
mov edx, dword [rdi - 8]
add rdx, r14
mov qword [rsp + 0x20], r12
mov rcx, qword [rsp + 0x60]
call fcn.140079800
lea rdi, [rdi + 0x28]
inc ebx
movzx eax, word [r15 + 6]
cmp ebx, eax
jl 0x140015e20
lea r12, [r15 + 0x30]
xor edi, edi
mov rdx, qword [r13 + 0x88]
add rdx, 0x10
mov qword [rsp + 0x20], rdi
mov r9d, 8
mov r8, r12
mov rcx, qword [rsp + 0x60]
call fcn.140079800
mov eax, dword [r15 + 0x28]
add rax, r14
mov qword [r13 + 0x80], rax
mov rdx, r13
mov rcx, qword [rsp + 0x68]
call fcn.14007eef0
mov rcx, qword [rsp + 0x68]
call fcn.14007efd0
mov dil, 1
jmp 0x140016047
mov qword [rbp - 0x58], rax
mov word [rbp - 0x50], ax
lea rcx, [rbp - 0x58]
call fcn.14004c030
test rax, rax
jne 0x140015ec0
xor esi, esi
jmp 0x140015ec9
inc rsi
cmp byte [rax + rsi], 0
jne 0x140015ec0
mov r8d, esi
mov rdx, rax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x58]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x54]
mov ecx, 6
rep stosb byte [rdi], al
xor edx, edx
mov rcx, qword [rsp + 0x60]
call fcn.14007f0b0
jmp 0x140016044
xor eax, eax
mov qword [rbp - 0x4e], rax
mov word [rbp - 0x46], ax
lea rcx, [rbp - 0x4e]
call fcn.14004bb80
test rax, rax
jne 0x140015f21
mov esi, edi
jmp 0x140015f2a
inc rsi
cmp byte [rax + rsi], 0
jne 0x140015f21
mov r8d, esi
mov rdx, rax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x4e]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x4a]
jmp 0x140015eed
xor eax, eax
mov qword [rbp - 0x44], rax
mov word [rbp - 0x3c], ax
lea rcx, [rbp - 0x44]
call fcn.14004b6d0
test rax, rax
jne 0x140015f70
mov esi, edi
jmp 0x140015f79
inc rsi
cmp byte [rax + rsi], 0
jne 0x140015f70
mov r8d, esi
mov rdx, rax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x44]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x40]
jmp 0x14001603d
xor eax, eax
mov qword [rbp - 0x3a], rax
mov word [rbp - 0x32], ax
lea rcx, [rbp - 0x3a]
call fcn.14004b220
test rax, rax
jne 0x140015fc0
xor esi, esi
jmp 0x140015fc9
inc rsi
cmp byte [rax + rsi], 0
jne 0x140015fc0
mov r8d, esi
mov rdx, rax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x3a]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x36]
jmp 0x14001603d
xor eax, eax
mov qword [rbp - 0x30], rax
mov word [rbp - 0x28], ax
lea rcx, [rbp - 0x30]
call fcn.14004ad70
test rax, rax
jne 0x140016010
xor esi, esi
jmp 0x140016019
inc rsi
cmp byte [rax + rsi], 0
jne 0x140016010
mov r8d, esi
mov rdx, rax
mov rcx, qword [rbp + 0x128]
call fcn.14001d350
nop
lea rdi, [rbp - 0x30]
xor eax, eax
mov ecx, 3
rep stosb byte [rdi], al
lea rdi, [rbp - 0x2c]
mov ecx, 6
rep stosb byte [rdi], al
xor dil, dil
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14001605f
call fcn.14007d800
xor ebx, ebx
mov qword [rsp + 0x78], rbx
jmp 0x140016061
xor ebx, ebx
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x140016073
call fcn.14007c7b0
mov qword [rbp - 0x80], rbx
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x140016081
call fcn.14007c7b0
movzx eax, dil
mov rbx, qword [rsp + 0x218]
add rsp, 0x1d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret