Function at 0x1400bb58c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc0
mov qword [rax - 0x40], 0xfffffffffffffffe
mov r12, r9
mov r15, r8
mov r13, rdx
lea r14, [0x14017d3a8]
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x1400bb5f2
test byte [rcx + 0x1c], 2
je 0x1400bb5f2
cmp byte [rcx + 0x19], 4
jb 0x1400bb5f2
mov edx, 0x2a
lea r8, [0x14000af10]
mov rcx, qword [rcx + 0x10]
call fcn.14001dd24
xor ebx, ebx
mov esi, ebx
mov qword [rsp + 0x30], rbx
test r15, r15
jne 0x1400bb618
lea r8, [0x14000ad60]
mov edx, 0x72b
lea rcx, [0x14000ab78]
call fcn.1400a8be8
test r12, r12
jne 0x1400bb635
lea r8, [0x14000ad70]
mov edx, 0x72c
lea rcx, [0x14000ab78]
call fcn.1400a8be8
mov dword [r15], ebx
mov qword [r12], rbx
mov edi, dword [r13 + 0x14]
sub edi, dword [r13 + 0x10]
inc edi
je 0x1400bb914
mov r15d, edi
imul r15, r15, 0x6c
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
jne 0x1400bb6b3
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x1400bb69a
test byte [rcx + 0x1c], 2
je 0x1400bb69a
cmp byte [rcx + 0x19], 1
jb 0x1400bb69a
imul edi, edi, 0x6c
lea edx, [rax + 0x2b]
mov r9d, edi
lea r8, [0x14000af10]
mov rcx, qword [rcx + 0x10]
call fcn.14001de24
mov dword [rsp + 0x24], reloc.ADVAPI32.dll_TraceEvent
lea rdx, [0x14017bf10]
lea rcx, [rsp + 0x24]
call sub.msvcrt.dll__CxxThrowException
mov r8, r15
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbx
mov rdx, r13
lea rcx, [rsp + 0x50]
call fcn.1400d0000
mov r12d, ebx
mov dword [rsp + reloc.ADVAPI32.dll_TraceEvent], r12d
cmp r12d, edi
jae 0x1400bb904
lea rcx, [rsp + 0x50]
call fcn.1400cff2c
cmp eax, reloc.ADVAPI32.dll_TraceEvent
jne 0x1400bb75b
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x1400bb731
test byte [rcx + 0x1c], 2
je 0x1400bb731
cmp byte [rcx + 0x19], 2
jb 0x1400bb731
mov edx, 0x2c
lea r8, [0x14000af10]
mov rcx, qword [rcx + 0x10]
call fcn.14001dd24
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0xc]
neg eax
sbb ecx, ecx
add ecx, 0x80780002
mov dword [rsp + 0x2c], ecx
lea rdx, [0x14017bf10]
lea rcx, [rsp + 0x2c]
call sub.msvcrt.dll__CxxThrowException
mov r15, qword [rsp + 0x100]
add r15, 0x1d8
mov edx, eax
mov rcx, r15
call fcn.1400cd99c
mov r13, rax
mov r9d, 1
mov r8, rax
lea rdx, [rsp + 0x78]
mov rcx, r15
call fcn.1400cd584
imul r12, r12, 0x6c
movups xmm0, xmmword [rsp + 0x78]
movdqu xmmword [r12 + rsi], xmm0
xor r9d, r9d
mov r8, r13
lea rdx, [rsp + 0xa8]
mov rcx, r15
call fcn.1400cd584
movups xmm0, xmmword [rsp + 0xa8]
movdqu xmmword [r12 + rsi + 0x10], xmm0
mov r9d, 2
mov r8, r13
lea rdx, [rsp + 0x70]
mov rcx, r15
call fcn.1400cd688
mov r11, qword [rsp + 0x70]
mov qword [r12 + rsi + 0x20], r11
mov r8d, 3
mov rdx, r13
mov rcx, r15
call fcn.1400cd774
mov dword [r12 + rsi + 0x28], eax
mov r9d, 5
mov r8, r13
lea rdx, [rsp + 0x88]
mov rcx, r15
call fcn.1400cd584
movups xmm0, xmmword [rsp + 0x88]
movdqu xmmword [r12 + rsi + 0x2c], xmm0
mov r8d, 9
mov rdx, r13
mov rcx, r15
call fcn.1400cd774
cmp eax, reloc.ADVAPI32.dll_TraceEvent
cmove eax, ebx
mov dword [r12 + rsi + 0x3c], eax
mov r9d, 4
mov r8, r13
lea rdx, [rsp + 0x98]
mov rcx, r15
call fcn.1400cd584
movups xmm0, xmmword [rsp + 0x98]
movdqu xmmword [r12 + rsi + 0x40], xmm0
lea r9, [rsp + 0x20]
mov r8d, 6
mov rdx, r13
mov rcx, r15
call fcn.1400cd478
mov qword [rsp + 0x48], rax
cmp dword [rsp + 0x20], 0x10
je 0x1400bb8af
mov rax, qword [rsp + 0x100]
mov eax, dword [rax + 0xc]
neg eax
sbb ecx, ecx
add ecx, 0x80780002
mov dword [rsp + 0x28], ecx
lea rdx, [0x14017bf10]
lea rcx, [rsp + 0x28]
call sub.msvcrt.dll__CxxThrowException
mov r9d, 7
mov r8, r13
lea rdx, [rsp + 0x38]
mov rcx, r15
call fcn.1400cd688
mov r11, qword [rsp + 0x38]
mov qword [r12 + rsi + 0x60], r11
mov r8d, 8
mov rdx, r13
mov rcx, r15
call fcn.1400cd774
mov dword [r12 + rsi + 0x68], eax
mov rax, qword [rsp + 0x48]
movups xmm0, xmmword [rax]
movdqu xmmword [r12 + rsi + 0x50], xmm0
mov r12d, dword [rsp + reloc.ADVAPI32.dll_TraceEvent]
inc r12d
jmp 0x1400bb6e4
mov r15, qword [rsp + 0x110]
mov r12, qword [rsp + 0x118]
mov qword [r12], rsi
mov dword [r15], edi
jmp 0x1400bb92b
mov rcx, qword [0x14017d3a8]
cmp rcx, r14
je 0x1400bb95b
test byte [rcx + 0x1c], 2
je 0x1400bb95b
cmp byte [rcx + 0x19], 4
jb 0x1400bb95b
mov edx, 0x2d
mov r9d, ebx
lea r8, [0x14000af10]
mov rcx, qword [rcx + 0x10]
call fcn.14001de24
mov eax, ebx
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret