Function at 0x1400044f0
Capabilities:
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
test eax, eax
jne 0x1400022df
jmp 0x14000288d
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 0x30]
call qword [0x14007bf75]
mov qword [rsp + 0x28], rax
jmp 0x1400031ac
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax + 0x18]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x38]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x48], 0
jmp 0x14000702d
mov ecx, 0xe
call qword [0x14007bf56]
jmp 0x140004589
xor eax, eax
cmp qword [rsp + 0x40], rax
jne 0x140006f20
jmp 0x140005271
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
call qword [0x14007c137]
jmp 0x140003ac3
add byte [rax], al
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.140003d0b
jmp 0x14000628d
jmp 0x140004589
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa8], rax
xor r8d, r8d
mov edx, 1
mov rcx, qword [rsp + 0x28]
call qword [rsp + 0xa8]
jmp 0x140004c5d
mov rax, qword [rsp + 0x20]
cmp dword [rax + 0x20], 0
jne 0x140001c1f
jmp 0x140002ca2
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x70]
mov ecx, eax
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x20]
jmp 0x140006fba
test eax, eax
je 0x1400054e8
jmp 0x140003e57
mov dword [rax + 0x40], ecx
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x48], rcx
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov edx, eax
mov rcx, qword [rsp + 0x108]
call fcn.1400046cd
jmp 0x14000512e
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x30], 0
jne 0x1400054ed
jmp 0x140003954
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
movzx eax, word [rax]
cmp eax, 0x5a4d
jne 0x140004f36
jmp 0x140007277
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax + 8]
jmp 0x1400019e7
mov rcx, qword [rsp + 0x20]
mov dword [rcx + 0x24], eax
jmp 0x140005586
cmp qword [rsp + 0x30], 0
jne 0x14000413f
jmp 0x14000275f
mov rax, qword [rsp + 0x20]
jmp 0x140004083
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x38]
and eax, 1
test eax, eax
jne 0x140006e03
jmp 0x1400016de
lea rcx, [rsp + 0xb0]
mov rax, qword [rsp + 0x30]
call qword [rax + 0x60]
jmp 0x1400042ce
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov r9d, 4
mov r8d, 0x1000
mov edx, eax
mov rcx, qword [rsp + 0x28]
call qword [0x14007ccce]
mov qword [rsp + 0x90], rax
jmp 0x14000426f
cmp qword [rsp + 0x30], 0
jne 0x1400055b5
jmp 0x140006369
xor eax, eax
jmp 0x140004d0b
jmp 0x140003e6e
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x20]
mov qword [rcx + 0x38], rax
jmp 0x140002643
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 4]
cmp eax, 0x8664
je 0x140002714
jmp 0x1400055a3
mov rcx, qword [rsp + 0x20]
call fcn.140005f97
jmp 0x1400054b1
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax + 0x30]
sub rax, rcx
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x14000753f
jmp 0x1400040b6
cmp qword [rsp + 0x28], 0
je 0x140005950
jmp 0x14000601b
cmp qword [rsp + 0x30], 0
je 0x140006bd8
jmp 0x14000272c
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
jmp 0x140003e6e
mov dword [rsp + 0x60], 1
jmp 0x140006964
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
call qword [0x14007e07c]
mov qword [rsp + 0x28], rax
jmp 0x140007706
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x10], 0
jne 0x140006933
jmp 0x140005f7a
jmp 0x14000601b
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.140003d0b
jmp 0x1400066a4
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 0x16]
and eax, 0x2000
test eax, eax
jne 0x140003919
jmp 0x14000470a
mov rax, qword [rsp + 0x88]
cmp qword [rsp + 0x80], rax
ja 0x140003873
jmp 0x140002a8a
mov ecx, 0xe
call qword [0x14007e55a]
xor eax, eax
jmp 0x140004d0b
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
cmp dword [rax + 0x28], 0
je 0x140006b31
jmp 0x140001e52
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x50]
add rax, 0x28
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 6]
cmp dword [rsp + 0x48], eax
jb 0x1400039ce
jmp 0x1400036ff
add rsp, 0xe8
pop rdi
pop rsi
ret
mov rax, qword [rsp + 0x20]
mov dword [rax + 0x24], 1
jmp 0x140005586
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x1400031ac
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov r9d, 4
mov r8d, 0x1000
mov edx, eax
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x14000426f
mov rax, qword [rsp + 0x30]
call qword [rax + 0x68]
mov r8d, 0x50
mov edx, 8
mov rcx, rax
mov rax, qword [rsp + 0x30]
call qword [rax + 0x70]
mov qword [rsp + 0x20], rax
jmp 0x14000686f
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
jmp 0x140001e66
mov eax, dword [rsp + 0xb4]
mov rcx, qword [rsp + 0x38]
mov ecx, dword [rcx + 0x50]
mov edx, eax
call fcn.140003f1e
jmp 0x1400056ca
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x58], 0
jmp 0x140006631
mov rcx, qword [rsp + 0x20]
call fcn.140006da2
jmp 0x140001947
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
call qword [0x14007ece2]
jmp 0x1400019e7
mov dword [rsp + 0x60], 0
jmp 0x140006964
mov ecx, 0x45a
call qword [0x14007ed12]
jmp 0x140004589
mov rax, qword [rsp + 0x20]
mov dword [rax + 0x1c], 1
jmp 0x140006beb
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x100]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp dword [rax], 0x4550
jne 0x1400068d8
jmp 0x140002da1
mov rcx, qword [rsp + 0x20]
call fcn.1400041f6
jmp 0x140001f73
cmp qword [rsp + 0x30], 0
jne 0x1400041ce
jmp 0x1400067c9
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
jne 0x140004976
jmp 0x14000482b
mov ecx, 0xc1
call qword [0x14007fb0a]
xor eax, eax
jmp 0x140004d0b
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
call qword [0x14007f831]
mov qword [rsp + 0x28], rax
jmp 0x14000543c
test eax, eax
je 0x140007567
jmp 0x1400025f8
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x14000543c
cmp qword [rsp + 0x30], 0
je 0x1400016b4
jmp 0x140004113
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.140003d0b
jmp 0x14000176e
cmp qword [rsp + 0x28], 0
je 0x140003c1d
jmp 0x14000601b
test eax, eax
jne 0x140004b7a
jmp 0x140007357
jmp 0x140004589
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x140007706
mov rcx, qword [rsp + 0x20]
call fcn.1400052fb
jmp 0x140006e77
mov ecx, 0xc1
call qword [0x1400800f0]
xor eax, eax
jmp 0x140004d0b
mov rax, qword [rsp + 0x30]
call qword [rax + 0x68]
mov r8d, 0x10
xor edx, edx
mov rcx, rax
mov rax, qword [rsp + 0x30]
call qword [rax + 0x70]
mov qword [rsp + 0x68], rax
jmp 0x14000729b
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb4]
mov edx, eax
mov rcx, qword [rsp + 0x88]
call fcn.140003f1e
jmp 0x140001982
cmp qword [rsp + 0x30], 0
jne 0x140005231
jmp 0x140004fc6
cmp qword [rsp + 0x30], 0
jne 0x140006e84
jmp 0x140001992
mov qword [rsp + 0x68], rax
jmp 0x14000729b
test eax, eax
je 0x1400018d7
jmp 0x140002f0e
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0xc]
add rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
jmp 0x140003c02
mov rax, qword [rsp + 0x28]
shr rax, 0x20
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x28]
add rdx, rcx
mov rcx, rdx
shr rcx, 0x20
cmp rax, rcx
jae 0x140004c4c
jmp 0x1400027ca
mov ecx, 0xe
call qword [0x1400809c6]
xor eax, eax
jmp 0x140004d0b
mov ecx, 0x10
call fcn.14000243c
jmp 0x140005bc8
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov edx, 0x40
mov rcx, qword [rsp + 0x108]
call fcn.1400046cd
jmp 0x14000148a
mov ecx, 0xe
call qword [0x140080f24]
xor eax, eax
jmp 0x140004d0b
call qword [0x140080e8d]
mov r8d, 0x50
mov edx, 8
mov rcx, rax
call qword [0x140080e85]
mov qword [rsp + 0x20], rax
jmp 0x14000686f
cmp qword [rsp + 0x20], 0
jne 0x140003bb1
jmp 0x14000759b
mov ecx, 0xc1
call qword [0x140081447]
xor eax, eax
jmp 0x140004d0b
xor eax, eax
jmp 0x140004d0b
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x50]
add eax, dword [rcx + 0x10]
mov eax, eax
mov qword [rsp + 0x80], rax
jmp 0x140003c02
mov rax, qword [rsp + 0x20]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x20], ecx
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x110]
mov qword [rax + 0x30], rcx
mov rax, qword [rsp + 0x20]
mov ecx, dword [rsp + 0xb4]
jmp 0x140001fed
mov rax, qword [rsp + 0x20]
mov qword [rax + 0x38], 0
jmp 0x140002643
lea rcx, [rsp + 0xb0]
call qword [0x140081529]
jmp 0x1400042ce
jmp 0x140002643
test eax, eax
jne 0x140004ac1
jmp 0x1400068fc
mov ecx, 0xc1
call qword [0x14008192f]
xor eax, eax
jmp 0x140004d0b
test eax, eax
je 0x140001a03
jmp 0x140002e55
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax + 8]
jmp 0x140003ac3
mov ecx, 0xc1
call qword [0x14008191b]
xor eax, eax
jmp 0x140004d0b
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x30], rcx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x100]
call fcn.140001b85
jmp 0x140005c98
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 6]
cmp dword [rsp + 0x48], eax
jb 0x1400039ce
jmp 0x1400036ff
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
add rax, 0x108
mov rdx, rax
mov rcx, qword [rsp + 0x108]
call fcn.1400046cd
jmp 0x140006d17
cmp qword [rsp + 0x68], 0
je 0x1400059cb
jmp 0x140002237
jmp 0x140004589
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x20]
call fcn.140007082
jmp 0x1400024d2
jmp 0x140004589
cmp qword [rsp + 0x30], 0
je 0x140004684
jmp 0x140002369
cmp qword [rsp + 0x28], 0
je 0x140005353
jmp 0x140003aa9