Function at 0x7fff25d7a604
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
mov rax, qword [0x7fff25fcfe70]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov r13d, r9d
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
cmp rdx, qword [rcx + 0x28]
je 0x7fff25d7ab97
call fcn.7fff25d7b4b0
mov r8d, dword [rbx + 8]
mov rcx, rbx
mov edx, r8d
call fcn.7fff25d7b47c
mov ebp, eax
test eax, eax
js 0x7fff25deafe2
and dword [rdi + 0x74], 0
lea rcx, [rbx + 0x10]
mov edx, 0x50534552
mov qword [rdi + 0x30], rcx
call fcn.7fff25d7ac48
mov dword [rsp + 0x3c], eax
test eax, eax
je 0x7fff25d7a6a7
mov ecx, eax
call fcn.7fff25d7acc4
mov rcx, qword [rdi + 0x78]
mov rbp, rax
cmp rcx, rax
je 0x7fff25d7a69e
call fcn.7fff25d7b4f4
mov rcx, rbp
mov qword [rdi + 0x78], rbp
test rcx, rcx
je 0x7fff25deb047
mov rcx, qword [rdi + 0x30]
mov edx, 0x41534552
and dword [rdi + 0x80], 0
call fcn.7fff25d7ac48
mov r14d, eax
mov dword [rsp + 0x30], r14d
test eax, eax
je 0x7fff25d7a6f7
mov ecx, r14d
call fcn.7fff25d7acc4
mov rcx, qword [rdi + 0x88]
mov rbp, rax
cmp rcx, rax
je 0x7fff25d7a6ee
call fcn.7fff25d7b4f4
mov rcx, rbp
mov qword [rdi + 0x88], rbp
test rcx, rcx
je 0x7fff25deb047
mov rcx, qword [rdi + 0x30]
mov edx, 0x424f4c47
and dword [rdi + 0x98], 0
call fcn.7fff25d7ac48
mov edx, eax
mov dword [rsp + 0x34], edx
test eax, eax
je 0x7fff25d7a771
mov eax, 8
mul rdx
test rdx, rdx
jne 0x7fff25deb040
mov rcx, qword gs:[0x60]
mov r8, rax
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
nop dword [rax + rax]
mov rbp, rax
mov rax, qword [rdi + 0xa0]
cmp rax, rbp
je 0x7fff25d7a764
mov rcx, rax
call fcn.7fff25d7b4f4
mov rax, rbp
mov qword [rdi + 0xa0], rbp
test rax, rax
je 0x7fff25deb047
mov edx, dword [rsp + 0x34]
mov rcx, qword [rdi + 0x30]
xor r12d, r12d
lea r15, [rcx + 0xc]
cmp dword [rcx + 8], r12d
jbe 0x7fff25d7ab8c
mov eax, dword [r15]
mov r11d, 0x504d4b50
cmp eax, r11d
ja 0x7fff25d7a841
je 0x7fff25d7a985
cmp eax, 0x384e484a
je 0x7fff25d7a957
cmp eax, 0x544c054
je 0x7fff25d7a9e4
mov r10d, 0x41534552
cmp eax, r10d
je 0x7fff25d7a8b7
cmp eax, 0x424f4c47
jne 0x7fff25d7a905
mov r11d, dword [rdi + 0x98]
cmp r11d, edx
je 0x7fff25deb17c
mov r10d, dword [r15 + 4]
mov edx, r12d
mov r8d, dword [rbx + 8]
add r10, rbx
call fcn.7fff25d7ac08
cmp eax, 0x14
jb 0x7fff25deb0b3
test dword [r10 + 8], 0xfffffffc
jne 0x7fff25deb0b3
xor ebp, ebp
test ebp, ebp
js 0x7fff25deaff8
mov rax, qword [rdi + 0xa0]
mov qword [rax + r11*8], r10
inc dword [rdi + 0x98]
mov rcx, qword [rdi + 0x30]
inc r12d
add r15, 8
cmp r12d, dword [rcx + 8]
jae 0x7fff25d7ab8c
mov edx, dword [rsp + 0x34]
jmp 0x7fff25d7a786
mov r11d, 0x50534552
cmp eax, r11d
je 0x7fff25d7ab44
cmp eax, 0x50544c41
je 0x7fff25d7ab09
cmp eax, 0x53505041
je 0x7fff25d7aa35
cmp eax, 0x544c5054
je 0x7fff25d7a9e4
cmp eax, 0x55434553
jne 0x7fff25deb24b
cmp qword [rdi + 0x48], 0
jne 0x7fff25deb216
mov r10d, dword [r15 + 4]
mov edx, r12d
add r10, rbx
mov qword [rdi + 0x48], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7b260
mov ebp, eax
test eax, eax
jns 0x7fff25d7a823
jmp 0x7fff25deb1fa
mov r11d, dword [rdi + 0x80]
mov r9d, dword [r15 + 4]
cmp r11d, r14d
je 0x7fff25deb1a7
mov r8d, dword [rbx + 8]
lea r10, [rbx + r9]
mov edx, r12d
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7ac74
mov ebp, eax
test eax, eax
js 0x7fff25deb195
mov rax, qword [rdi + 0x88]
mov qword [rax + r11*8], r10
inc dword [rdi + 0x80]
jmp 0x7fff25d7a823
cmp eax, 0x47504544
jne 0x7fff25deb051
cmp qword [rdi + 0x58], 0
jne 0x7fff25deb125
mov r10d, dword [r15 + 4]
mov edx, r12d
mov rcx, qword [rdi + 0x30]
add r10, rbx
mov qword [rdi + 0x58], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7b2c4
mov ebp, eax
test eax, eax
js 0x7fff25deb109
lea rax, [r10 + 0x18]
mov qword [rdi + 0x50], rax
jmp 0x7fff25d7a823
mov r10d, dword [r15 + 4]
mov edx, r12d
mov r8d, dword [rbx + 8]
add r10, rbx
call fcn.7fff25d7ac08
cmp eax, 8
jne 0x7fff25deb1b3
cmp dword [r10], 0x384e484a
je 0x7fff25d7a823
jmp 0x7fff25deb1b3
cmp qword [rdi + 0x68], 0
jne 0x7fff25deb138
mov r10d, dword [r15 + 4]
mov edx, r12d
add r10, rbx
mov qword [rdi + 0x68], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
cmp eax, 0x10
jb 0x7fff25deb1c8
cmp dword [r10], r11d
jne 0x7fff25deb1c8
cmp dword [r10 + 4], eax
ja 0x7fff25deb1c8
test byte [r10 + 4], 3
jne 0x7fff25deb1c8
mov eax, dword [r10 + 0xc]
dec eax
cmp eax, 0x280
jbe 0x7fff25d7a823
jmp 0x7fff25deb1c8
cmp qword [rdi + 0x90], 0
jne 0x7fff25deb26e
mov r10d, dword [r15 + 4]
mov edx, r12d
add r10, rbx
mov qword [rdi + 0x90], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
cmp eax, 0x20
jb 0x7fff25deb0ca
cmp dword [r10], 0x544c5054
jne 0x7fff25deb0bd
mov rax, qword [r10 + 0x18]
cmp qword [r10 + 0x10], rax
jbe 0x7fff25d7a823
jmp 0x7fff25deb0ca
cmp qword [rdi + 0x60], 0
jne 0x7fff25deb2a8
mov r10d, dword [r15 + 4]
mov edx, r12d
add r10, rbx
mov qword [rdi + 0x60], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
cmp eax, 0x10
jb 0x7fff25deb1d4
cmp dword [r10], 0x53505041
jne 0x7fff25deb1d4
cmp dword [r10 + 4], eax
ja 0x7fff25deb1d4
test byte [r10 + 4], 3
jne 0x7fff25deb1d4
mov eax, dword [r10 + 0xc]
dec eax
cmp eax, 0x63
ja 0x7fff25deb1d4
or dword [rdi + 0x70], 0xffffffff
test r13b, 2
je 0x7fff25d7a823
mov dword [rsp + 0x38], 0x82
call sym.KERNELBASE.dll_GetCurrentProcess
mov rcx, rax
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x38]
call sym.KERNELBASE.dll_GetApplicationUserModelId
mov ebp, eax
test eax, eax
jne 0x7fff25deb0dc
mov rax, qword [rdi + 0x60]
lea r14, [rax + 0x10]
cmp dword [rax + 0xc], ebp
jbe 0x7fff25d7aaf5
lea rcx, [r14 + 0x24]
lea rdx, [rsp + 0x40]
call qword [sym.imp.ntdll.dll__wcsicmp]
nop dword [rax + rax]
test eax, eax
jne 0x7fff25d7abc5
mov dword [rdi + 0x70], ebp
cmp dword [rdi + 0x70], 0xffffffff
je 0x7fff25d7abf2
mov r14d, dword [rsp + 0x30]
jmp 0x7fff25d7a823
cmp qword [rdi + 0x38], 0
jne 0x7fff25deb229
mov r10d, dword [r15 + 4]
mov edx, r12d
add r10, rbx
mov qword [rdi + 0x38], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7b214
mov ebp, eax
test eax, eax
jns 0x7fff25d7a823
jmp 0x7fff25deb2be
mov eax, dword [rsp + 0x3c]
mov r9d, dword [r15 + 4]
cmp dword [rdi + 0x74], eax
je 0x7fff25deb157
mov r8d, dword [rbx + 8]
lea r10, [rbx + r9]
mov edx, r12d
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25d7ac74
mov ebp, eax
test eax, eax
js 0x7fff25deb2da
mov ecx, dword [rdi + 0x74]
mov rax, qword [rdi + 0x78]
mov qword [rax + rcx*8], r10
inc dword [rdi + 0x74]
jmp 0x7fff25d7a823
and r13b, 1
mov qword [rdi + 0x28], rbx
mov byte [rdi], r13b
xor eax, eax
mov ecx, dword [r14]
mov eax, 4
and ecx, 3
inc ebp
sub eax, ecx
neg ecx
sbb ecx, ecx
and eax, ecx
add eax, dword [r14]
add r14, rax
mov rax, qword [rdi + 0x60]
cmp ebp, dword [rax + 0xc]
jae 0x7fff25d7aaf5
jmp 0x7fff25d7aad5
test r13b, 4
je 0x7fff25d7aaff
jmp 0x7fff25deb284
movzx ebp, ax
or ebp, 0x80070000
mov r8d, dword [rbx + 8]
mov r9, rbx
mov edx, ebp
mov rcx, rsi
call 0x7fff25e2beb4
xor ebp, ebp
jmp 0x7fff25d7a746
mov eax, 0x8007000e
jmp 0x7fff25d7ab99
cmp eax, 0x4c444452
jne 0x7fff25deb24b
cmp qword [rdi + 0x40], 0
jne 0x7fff25deb0f3
mov r10d, dword [r15 + 4]
mov edx, r12d
mov rcx, qword [rdi + 0x30]
add r10, rbx
mov qword [rdi + 0x40], r10
mov r8d, dword [rbx + 8]
call fcn.7fff25d7ac08
mov edx, eax
mov rcx, r10
call fcn.7fff25e2cc40
mov ebp, eax
test eax, eax
jns 0x7fff25d7a823
mov r9d, dword [rdi + 0x40]
mov r8d, dword [rbx + 8]
sub r9d, ebx
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x4c444452
jmp 0x7fff25deb013
mov ebp, 0x80073d55
jmp 0x7fff25d7a80a
cmp dword [r10], 0x544c054
je 0x7fff25d7aa22
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x544c5054
jmp 0x7fff25deb1e1
test r13b, 4
je 0x7fff25d7a823
test eax, eax
jle 0x7fff25deb028
jmp 0x7fff25deb01f
mov r9d, dword [rdi + 0x40]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x4c444452
jmp 0x7fff25deb23a
mov r8d, dword [rbx + 8]
mov r9d, r10d
mov qword [rsp + 0x28], rbx
sub r9d, ebx
mov dword [rsp + 0x20], 0x47504544
jmp 0x7fff25deb013
mov r9d, dword [rdi + 0x58]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x47504544
jmp 0x7fff25deb146
mov r9d, dword [rdi + 0x68]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
mov r8d, dword [rbx + 8]
sub r9d, ebx
mov rcx, rsi
call 0x7fff25e2be34
jmp 0x7fff25deb172
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
mov r8d, dword [rbx + 8]
mov edx, 0x3d55
mov rcx, rsi
call fcn.7fff25e2bc80
mov eax, 0x3d55
jmp 0x7fff25d7ab99
mov r9d, dword [rdi + 0xa0]
mov qword [rsp + 0x28], rbx
sub r9d, ebx
mov dword [rsp + 0x20], 0x424f4c47
jmp 0x7fff25deb161
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x50534552
jmp 0x7fff25deb2e4
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r10d
jmp 0x7fff25deb161
sub r10d, ebx
mov qword [rsp + 0x28], rbx
mov r9d, r10d
mov dword [rsp + 0x20], 0x384e484a
jmp 0x7fff25deb1e7
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
jmp 0x7fff25deb1e1
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x53505041
mov r9d, r10d
sub r9d, ebx
mov r8d, dword [rbx + 8]
mov edx, 0x80073d55
mov rcx, rsi
call fcn.7fff25e2bc80
jmp 0x7fff25deb264
mov r8d, dword [rbx + 8]
mov r9d, r10d
mov qword [rsp + 0x28], rbx
sub r9d, ebx
mov dword [rsp + 0x20], 0x55434553
jmp 0x7fff25deb013
mov r9d, dword [rdi + 0x48]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x55434553
jmp 0x7fff25deb23a
mov r9d, dword [rdi + 0x38]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x50544c41
mov r8d, dword [rbx + 8]
sub r9d, ebx
mov rcx, rsi
call 0x7fff25e2be34
jmp 0x7fff25deb264
mov r8d, dword [rbx + 8]
mov rcx, rsi
mov r9d, dword [r15 + 4]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], eax
call fcn.7fff25e2c1b8
mov eax, 0x80073d55
jmp 0x7fff25d7ab99
mov r9d, dword [rdi + 0x90]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x544c5054
jmp 0x7fff25deb23a
mov r8d, dword [rbx + 8]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rbx
mov rcx, rsi
mov ebx, 0x80070490
mov edx, ebx
call 0x7fff25e2ba60
mov eax, ebx
jmp 0x7fff25d7ab99
mov r9d, dword [rdi + 0x60]
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], 0x53505041
jmp 0x7fff25deb23a
mov r8d, dword [rbx + 8]
mov r9d, r10d
mov qword [rsp + 0x28], rbx
sub r9d, ebx
mov dword [rsp + 0x20], 0x50544c41
jmp 0x7fff25deb013
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], r11d
mov r8d, dword [rbx + 8]
sub r10d, ebx
mov r9d, r10d
jmp 0x7fff25deb013