Function at 0x1402fb95c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r15, qword [rcx]
mov r13, r9
mov rsi, qword [rcx + 0x10]
mov r12, rdx
mov rdx, qword [rdx + 0x20]
mov r11, r8
xor r8d, r8d
mov qword [rsp + 0x38], r15
mov rax, qword [r13 + 0x20]
mov ebx, r8d
mov r9, rcx
mov qword [rsp + 0x30], rax
mov edi, r8d
mov word [rsp + 0xa8], r8w
lea ebp, [r8 + 1]
mov qword [rsp + 0x40], rsi
mov r10d, r8d
mov dword [rsp + 0x20], ebx
cmp dword [r12 + 0x14], r8d
jle 0x1402fba2c
movzx ecx, word [rdx + 0x12]
mov eax, 0xffbf
and cx, ax
mov word [rdx + 0x12], cx
mov r8d, dword [r13 + 0x44]
cmp dword [rdx + 0x1c], r8d
jne 0x1402fba17
test qword [rdx + 0x28], r11
jne 0x1402fba17
movzx eax, word [rdx + 0x14]
test eax, 0xfffff7ff
je 0x1402fba17
test cl, cl
js 0x1402fba17
test byte [r13 + 0x3c], 0x58
je 0x1402fba0d
mov rax, qword [rdx]
test byte [rax + 4], 3
je 0x1402fba17
cmp dword [rax + 0x34], r8d
jne 0x1402fba17
add ebx, ebp
or cx, 0x40
mov word [rdx + 0x12], cx
add r10d, ebp
add rdx, 0x38
cmp r10d, dword [r12 + 0x14]
jl 0x1402fb9c8
mov dword [rsp + 0x20], ebx
xor r8d, r8d
mov ecx, r8d
mov edx, 2
mov dword [rsp + 0x2c], ecx
test rsi, rsi
je 0x1402fbb5b
movsxd rbp, dword [rsi]
mov r14d, r8d
mov r12, rbp
test ebp, ebp
jle 0x1402fbb2d
mov rdi, qword [rsp + 0x30]
lea eax, [rdx - 1]
xor ebp, ebp
mov r15d, ebp
add rsi, 0x18
mov rbx, qword [rsi - 0x10]
xor r8d, r8d
mov rcx, rbx
mov edx, eax
call fcn.140309e74
test eax, eax
jne 0x1402fbaf6
test byte [rsi], 2
jne 0x1402fbb0e
cmp byte [rbx], 0xa7
jne 0x1402fba8f
mov eax, dword [r13 + 0x44]
cmp dword [rbx + 0x2c], eax
jmp 0x1402fbaf4
cmp byte [rbx], 0x71
jne 0x1402fbb0e
mov rcx, qword [rbx + 0x10]
cmp byte [rcx], 0xa7
jne 0x1402fbb0e
mov eax, dword [r13 + 0x44]
cmp dword [rcx + 0x2c], eax
jne 0x1402fbb0e
movzx eax, word [rcx + 0x30]
mov word [rbx + 0x30], ax
cmp word [rcx + 0x30], bp
jl 0x1402fbaf6
movsx rax, word [rcx + 0x30]
lea rcx, [rax + rax*2]
mov rax, qword [rdi + 8]
lea rcx, [rax + rcx*8]
call fcn.140355040
mov rcx, qword [rbx + 8]
lea rdx, [0x1404fa2a4]
test rax, rax
cmovne rdx, rax
test rcx, rcx
jne 0x1402fbae8
neg rdx
sbb eax, eax
jmp 0x1402fbaf2
test rdx, rdx
je 0x1402fbb0e
call fcn.14037ead8
test eax, eax
jne 0x1402fbb0e
mov eax, 1
add rsi, 0x20
add r14d, eax
add r15, rax
cmp r15, r12
jl 0x1402fba63
mov ecx, dword [rsp + 0x2c]
mov edi, ebp
mov r15, qword [rsp + 0x38]
mov ebp, r12d
mov r9, qword [rsp + 0x90]
mov edx, 2
mov ebx, dword [rsp + 0x20]
mov r12, qword [rsp + 0x98]
cmp r14d, ebp
jne 0x1402fbb5b
movzx eax, word [r9 + 0x44]
mov ecx, ebp
test al, al
jns 0x1402fbb51
mov edi, eax
shr edi, 9
and edi, 1
add edi, edx
jmp 0x1402fbb5b
test al, 0x40
mov eax, 1
cmovne edi, eax
movsxd rbp, ecx
mov rcx, qword [r15]
movsxd rsi, ebx
imul rdx, rsi, 0x1c
mov qword [rsp + 0x90], rbp
add rdx, 0x88
lea rdx, [rdx + rbp*8]
call fcn.1403578a4
xor r13d, r13d
mov rbx, rax
test rax, rax
jne 0x1402fbba1
lea rdx, str.out_of_memory
mov rcx, r15
call fcn.14035998c
xor eax, eax
jmp 0x1402fbd54
lea r8, [rax + 0x80]
mov qword [rbx + 0x60], r12
lea r8, [r8 + rsi*8]
mov qword [rbx + 0x68], r15
mov qword [rbx + 8], r8
lea rax, [rsi + rsi*2]
lea r14, [r8 + rax*4]
mov dword [rbx + 0x70], edi
mov qword [rbx + 0x18], r14
lea rax, [r14 + rbp*8]
mov qword [rbx + 0x20], rax
mov r10d, r13d
mov dword [rbx + 0x74], r13d
mov r11d, r13d
mov ecx, 1
mov r9, qword [r12 + 0x20]
mov qword [rsp + 0x98], r14
cmp dword [r12 + 0x14], r13d
jle 0x1402fbcef
mov r14d, dword [rsp + 0xa8]
lea edi, [rcx + 0xf]
add r8, 4
lea ebp, [rcx + 1]
test byte [r9 + 0x12], 0x40
je 0x1402fbcc5
mov eax, dword [r9 + 0x20]
mov dword [r8 - 4], eax
mov eax, 0x3fff
mov dword [r8 + 4], r11d
movzx edx, word [r9 + 0x14]
and dx, ax
cmp dx, cx
jne 0x1402fbc8c
cmp word [r9 + 0x12], r13w
jl 0x1402fbc54
mov ecx, r10d
mov edx, 1
shl edx, cl
mov eax, r13d
cmp r10d, 0x1f
mov ecx, 1
cmovle eax, edx
or dword [rbx + 0x74], eax
movzx edx, bp
mov byte [r8], dl
test dl, 0x3c
je 0x1402fbcbe
mov rcx, qword [r9]
mov rcx, qword [rcx + 0x18]
call fcn.14035dcf4
mov ecx, 1
cmp eax, ecx
jle 0x1402fbcbe
cmp r10d, edi
jge 0x1402fbc81
movzx r14d, r14w
bts r14d, r10d
cmp dx, di
jne 0x1402fbcb4
mov byte [r8], 8
jmp 0x1402fbcbe
cmp dx, 0x40
jne 0x1402fbc98
mov al, byte [r9 + 0x17]
jmp 0x1402fbcaf
mov eax, 0x180
test ax, dx
je 0x1402fbc57
mov eax, pe_nt_image_headers64
cmp dx, ax
setne al
add al, 0x47
mov byte [r8], al
jmp 0x1402fbcbe
cmp dx, 4
jne 0x1402fbcbe
mov byte [r8], 0x20
add r10d, ecx
add r8, 0xc
add r11d, ecx
add r9, 0x38
cmp r11d, dword [r12 + 0x14]
jl 0x1402fbc08
mov rbp, qword [rsp + 0x90]
mov dword [rsp + 0xa8], r14d
mov r14, qword [rsp + 0x98]
mov dword [rbx], r10d
mov esi, r13d
test rbp, rbp
jle 0x1402fbd3c
mov rdi, qword [rsp + 0x40]
add rdi, 0x18
mov r15, qword [rdi - 0x10]
mov edx, ecx
mov rcx, r15
xor r8d, r8d
call fcn.140309e74
mov ecx, 1
test eax, eax
jne 0x1402fbd33
movsx eax, word [r15 + 0x30]
add esi, ecx
mov dword [r14], eax
mov al, byte [rdi]
and al, cl
mov byte [r14 + 4], al
add r14, 8
add rdi, 0x20
sub rbp, rcx
jne 0x1402fbd03
mov rax, qword [rsp + 0xb0]
mov ecx, dword [rsp + 0xa8]
mov dword [rbx + 0x10], esi
mov word [rax], cx
mov rax, rbx
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret