Function at 0x14005b110
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x60
xor r12d, r12d
cmp byte [0x14017ca9b], r12b
jne 0x14005bd66
lea rcx, [0x14017a150]
call fcn.140052770
test al, al
jne 0x14005b17d
mov rax, qword [0x1401b2500]
cmp rax, qword [0x1401b2508]
je 0x14005b15d
mov qword [0x1401b2508], rax
mov rax, qword [0x1401b24e8]
cmp rax, qword [0x1401b24f0]
je 0x14005bd5f
mov qword [0x1401b24f0], rax
jmp 0x14005bd5f
mov byte [0x14017ca9b], 1
mov ecx, 0x4dc
call fcn.1400cff9c
mov rbx, rax
mov dword [rax], 0xffffffff
mov qword [rax + 4], r12
mov qword [rax + 0xc], r12
mov qword [rax + 0x14], r12
mov qword [rax + 0x1c], r12
mov qword [rax + 0x24], r12
mov qword [rax + 0x2c], r12
mov dword [rax + 0x34], r12d
mov qword [rax + 0x38], 0x43a50000
mov qword [rax + 0x40], r12
mov qword [rax + 0x48], r12
mov qword [rax + 0x50], r12
mov qword [rax + 0x58], r12
mov qword [rax + 0x60], r12
mov qword [rax + 0x68], r12
mov qword [rax + 0x70], r12
mov qword [rax + 0x78], r12
mov qword [rax + 0x80], r12
mov qword [rax + 0x88], r12
mov qword [rax + 0x90], r12
mov qword [rax + 0x98], r12
mov qword [rax + 0xa0], r12
mov qword [rax + 0xa8], r12
mov qword [rax + 0xb0], r12
mov qword [rax + 0xb8], r12
mov qword [rax + 0xc0], r12
mov qword [rax + 0xc8], r12
mov qword [rax + 0xd0], r12
mov qword [rax + 0xd8], r12
mov qword [rax + 0xe0], r12
mov qword [rax + 0xe8], r12
mov qword [rax + 0xf0], r12
mov qword [rax + 0xf8], r12
mov qword [rax + 0x100], r12
mov dword [rax + 0x108], r12d
mov dword [rax + 0x10c], 0xbf800000
mov qword [rax + 0x110], r12
mov dword [rax + 0x118], 0xbf800000
mov qword [rax + 0x11c], r12
mov qword [rax + 0x124], r12
mov qword [rax + 0x12c], r12
mov qword [rax + 0x134], r12
mov qword [rax + 0x13c], r12
mov qword [rax + 0x144], r12
mov qword [rax + 0x14c], r12
mov qword [rax + 0x154], r12
mov qword [rax + 0x15c], r12
mov qword [rax + 0x164], r12
mov qword [rax + 0x16c], r12
mov qword [rax + 0x174], r12
mov qword [rax + 0x17c], r12
mov qword [rax + 0x184], r12
mov qword [rax + 0x18c], r12
mov qword [rax + 0x194], r12
mov qword [rax + 0x19c], r12
mov qword [rax + 0x1a4], r12
mov qword [rax + 0x1ac], r12
mov qword [rax + 0x1b4], r12
mov qword [rax + 0x1bc], r12
mov qword [rax + 0x1c4], r12
mov qword [rax + 0x1cc], r12
mov qword [rax + 0x1d4], r12
mov qword [rax + 0x1dc], r12
mov qword [rax + 0x1e4], 0x3f800000
mov qword [rax + 0x1ec], r12
mov qword [rax + 0x1f4], 0x3f800000
mov qword [rax + 0x1fc], r12
mov qword [rax + 0x204], r12
mov qword [rax + 0x20c], r12
mov qword [rax + 0x214], r12
mov qword [rax + 0x21c], r12
mov qword [rax + 0x224], r12
mov qword [rax + 0x22c], r12
mov qword [rax + 0x234], r12
mov qword [rax + 0x23c], r12
mov qword [rax + 0x244], r12
mov qword [rax + 0x24c], r12
mov qword [rax + 0x254], r12
mov qword [rax + 0x25c], r12
mov qword [rax + 0x264], r12
mov qword [rax + 0x26c], r12
mov qword [rax + 0x274], r12
mov qword [rax + 0x27c], r12
mov qword [rax + 0x284], r12
mov qword [rax + 0x28c], r12
mov qword [rax + 0x294], r12
mov dword [rax + 0x29c], r12d
mov dword [rax + 0x2a0], 0x3f666666
mov qword [rax + 0x2a4], 0x3f800000
mov qword [rax + 0x2ac], r12
mov qword [rax + 0x2b4], r12
mov qword [rax + 0x2bc], 0x3fc00000
mov qword [rax + 0x2c4], 0x3f99999a
mov qword [rax + 0x2cc], r12
mov qword [rax + 0x2d4], r12
mov qword [rax + 0x2dc], r12
mov qword [rax + 0x2e4], r12
mov qword [rax + 0x2ec], r12
mov dword [rax + 0x2f4], 0xffffffff
mov qword [rax + 0x2f8], r12
mov qword [rax + 0x300], r12
mov qword [rax + 0x308], r12
mov qword [rax + 0x310], r12
mov qword [rax + 0x318], r12
mov qword [rax + 0x320], r12
mov qword [rax + 0x328], r12
mov qword [rax + 0x330], r12
mov qword [rax + 0x338], r12
mov qword [rax + 0x340], r12
mov qword [rax + 0x348], r12
mov qword [rax + 0x350], r12
mov qword [rax + 0x358], r12
mov qword [rax + 0x360], r12
mov qword [rax + 0x368], r12
mov qword [rax + 0x370], r12
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0xffffffff
mov qword [rax + 0x380], r12
mov dword [rax + 0x388], 0xffffffff
mov qword [rax + 0x38c], r12
mov qword [rax + 0x394], r12
mov qword [rax + 0x39c], r12
mov qword [rax + 0x3a4], r12
mov qword [rax + 0x3ac], r12
mov qword [rax + 0x3b4], r12
mov qword [rax + 0x3bc], r12
mov qword [rax + 0x3c4], r12
mov qword [rax + 0x3cc], r12
mov qword [rax + 0x3d4], r12
mov qword [rax + 0x3dc], r12
mov qword [rax + 0x3e4], r12
mov qword [rax + 0x3ec], r12
mov qword [rax + 0x3f4], r12
mov qword [rax + 0x3fc], r12
mov qword [rax + 0x404], r12
mov qword [rax + 0x40c], r12
mov qword [rax + 0x414], r12
mov qword [rax + 0x41c], r12
mov qword [rax + 0x424], r12
mov qword [rax + 0x42c], r12
mov qword [rax + 0x434], r12
mov dword [rax + 0x43c], 0x3dcccccd
mov qword [rax + 0x440], 0x3e333333
mov qword [rax + 0x448], r12
mov qword [rax + 0x450], r12
mov qword [rax + 0x458], r12
mov qword [rax + 0x460], r12
mov qword [rax + 0x468], r12
mov qword [rax + 0x470], r12
mov qword [rax + 0x478], r12
mov qword [rax + 0x480], r12
mov qword [rax + 0x488], r12
mov qword [rax + 0x490], r12
mov qword [rax + 0x498], r12
mov qword [rax + 0x4a0], r12
mov qword [rax + 0x4a8], r12
mov qword [rax + 0x4b0], r12
mov qword [rax + 0x4b8], r12
mov qword [rax + 0x4c0], r12
mov qword [rax + 0x4c8], r12
mov qword [rax + 0x4d0], r12
mov dword [rax + 0x4d8], r12d
mov ecx, 0x4dc
call fcn.1400cff9c
mov rdi, rax
mov qword [rax], 0xffffffffffffffff
mov dword [rax + 8], 0xffffffff
mov qword [rax + 0xc], 0xffffff
mov qword [rax + 0x14], r12
mov qword [rax + 0x1c], r12
mov qword [rax + 0x24], 0xffffffffffffff00
mov qword [rax + 0x2c], 0xffffffffffffffff
mov qword [rax + 0x34], 0xffffffffffffffff
mov qword [rax + 0x3c], 0xff
mov qword [rax + 0x44], r12
mov qword [rax + 0x4c], r12
mov qword [rax + 0x54], r12
mov qword [rax + 0x5c], r12
mov qword [rax + 0x64], r12
mov qword [rax + 0x6c], r12
mov qword [rax + 0x74], r12
mov qword [rax + 0x7c], r12
mov qword [rax + 0x84], r12
mov qword [rax + 0x8c], r12
mov qword [rax + 0x94], r12
mov qword [rax + 0x9c], r12
mov qword [rax + 0xa4], r12
mov qword [rax + 0xac], r12
mov qword [rax + 0xb4], r12
mov qword [rax + 0xbc], r12
mov qword [rax + 0xc4], r12
mov qword [rax + 0xcc], r12
mov qword [rax + 0xd4], r12
mov qword [rax + 0xdc], r12
mov qword [rax + 0xe4], r12
mov qword [rax + 0xec], r12
mov qword [rax + 0xf4], r12
mov qword [rax + 0xfc], r12
mov qword [rax + 0x104], r12
mov dword [rax + 0x10c], 0xffffffff
mov qword [rax + 0x110], r12
mov dword [rax + 0x118], 0xffffffff
mov qword [rax + 0x11c], 0xffffff
mov qword [rax + 0x124], r12
mov qword [rax + 0x12c], r12
mov qword [rax + 0x134], r12
mov qword [rax + 0x13c], r12
mov qword [rax + 0x144], r12
mov qword [rax + 0x14c], r12
mov qword [rax + 0x154], r12
mov qword [rax + 0x15c], r12
mov qword [rax + 0x164], r12
mov qword [rax + 0x16c], r12
mov qword [rax + 0x174], r12
mov qword [rax + 0x17c], r12
mov qword [rax + 0x184], r12
mov qword [rax + 0x18c], r12
mov qword [rax + 0x194], r12
mov qword [rax + 0x19c], r12
mov qword [rax + 0x1a4], r12
mov qword [rax + 0x1ac], r12
mov qword [rax + 0x1b4], r12
mov qword [rax + 0x1bc], r12
mov qword [rax + 0x1c4], r12
mov qword [rax + 0x1cc], r12
mov qword [rax + 0x1d4], r12
mov qword [rax + 0x1dc], r12
mov dword [rax + 0x1e4], 0xffffffff
mov qword [rax + 0x1e8], r12
mov dword [rax + 0x1f0], r12d
mov dword [rax + 0x1f4], 0xffffffff
mov qword [rax + 0x1f8], 0xffffff
mov qword [rax + 0x200], r12
mov qword [rax + 0x208], r12
mov qword [rax + 0x210], r12
mov qword [rax + 0x218], r12
mov qword [rax + 0x220], r12
mov qword [rax + 0x228], r12
mov qword [rax + 0x230], r12
mov qword [rax + 0x238], r12
mov qword [rax + 0x240], r12
mov qword [rax + 0x248], r12
mov qword [rax + 0x250], r12
mov qword [rax + 0x258], r12
mov qword [rax + 0x260], r12
mov qword [rax + 0x268], r12
mov qword [rax + 0x270], r12
mov qword [rax + 0x278], r12
mov qword [rax + 0x280], r12
mov qword [rax + 0x288], r12
mov qword [rax + 0x290], r12
mov qword [rax + 0x298], r12
mov qword [rax + 0x2a0], 0xffffffffffffffff
mov qword [rax + 0x2a8], r12
mov qword [rax + 0x2b0], r12
mov dword [rax + 0x2b8], r12d
mov qword [rax + 0x2bc], 0xffffffffffff0000
mov dword [rax + 0x2c4], 0xffffffff
mov qword [rax + 0x2c8], r12
mov qword [rax + 0x2d0], r12
mov qword [rax + 0x2d8], r12
mov qword [rax + 0x2e0], r12
mov qword [rax + 0x2e8], r12
mov dword [rax + 0x2f0], r12d
mov dword [rax + 0x2f4], 0xffffffff
mov qword [rax + 0x2f8], r12
mov qword [rax + 0x300], r12
mov qword [rax + 0x308], r12
mov qword [rax + 0x310], r12
mov qword [rax + 0x318], r12
mov qword [rax + 0x320], r12
mov qword [rax + 0x328], r12
mov qword [rax + 0x330], r12
mov qword [rax + 0x338], r12
mov qword [rax + 0x340], r12
mov qword [rax + 0x348], r12
mov qword [rax + 0x350], r12
mov qword [rax + 0x358], r12
mov qword [rax + 0x360], r12
mov qword [rax + 0x368], r12
mov qword [rax + 0x370], r12
mov dword [rax + 0x378], r12d
mov dword [rax + 0x37c], 0xffffffff
mov qword [rax + 0x380], r12
mov dword [rax + 0x388], 0xffffffff
mov qword [rax + 0x38c], r12
mov qword [rax + 0x394], r12
mov qword [rax + 0x39c], r12
mov qword [rax + 0x3a4], r12
mov qword [rax + 0x3ac], r12
mov qword [rax + 0x3b4], r12
mov qword [rax + 0x3bc], r12
mov qword [rax + 0x3c4], r12
mov qword [rax + 0x3cc], r12
mov qword [rax + 0x3d4], r12
mov qword [rax + 0x3dc], r12
mov qword [rax + 0x3e4], r12
mov qword [rax + 0x3ec], r12
mov qword [rax + 0x3f4], r12
mov qword [rax + 0x3fc], r12
mov qword [rax + 0x404], r12
mov qword [rax + 0x40c], r12
mov qword [rax + 0x414], r12
mov qword [rax + 0x41c], r12
mov qword [rax + 0x424], r12
mov qword [rax + 0x42c], r12
mov qword [rax + 0x434], r12
mov qword [rax + 0x43c], 0xffffffffffffffff
mov qword [rax + 0x444], r12
mov qword [rax + 0x44c], r12
mov qword [rax + 0x454], r12
mov qword [rax + 0x45c], r12
mov qword [rax + 0x464], r12
mov qword [rax + 0x46c], r12
mov qword [rax + 0x474], r12
mov qword [rax + 0x47c], r12
mov qword [rax + 0x484], r12
mov qword [rax + 0x48c], r12
mov qword [rax + 0x494], r12
mov qword [rax + 0x49c], r12
mov qword [rax + 0x4a4], r12
mov qword [rax + 0x4ac], r12
mov qword [rax + 0x4b4], r12
mov qword [rax + 0x4bc], r12
mov qword [rax + 0x4c4], r12
mov qword [rax + 0x4cc], r12
mov qword [rax + 0x4d4], r12
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov r15, rax
cmp byte [0x14017ca49], r12b
sete cl
mov byte [0x14017ca49], cl
test cl, cl
je 0x14005bca4
mov rcx, qword [0x1401b2500]
cmp rcx, qword [0x1401b2508]
je 0x14005bac8
mov qword [0x1401b2508], rcx
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
lea r9, [rsp + 0x40]
mov r8, rdi
mov rdx, rbx
lea rcx, [0x14017a150]
call fcn.140052e60
mov rax, qword [rsp + 0x48]
cmp qword [rsp + 0x40], rax
jne 0x14005bb16
mov byte [0x14017ca49], 0
mov byte [0x14017ca9b], 0
lea rcx, [rsp + 0x40]
call fcn.14006aab0
jmp 0x14005bd66
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400cff9c
mov rbx, rax
mov dword [rax], 0xffffffff
mov qword [rax + 4], 0
mov qword [rax + 0xc], 0
mov qword [rax + 0x14], 0
mov dword [rax + 0x1c], 0
mov r14, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
cmp rsi, r14
je 0x14005bbde
nop dword [rax + rax]
mov rbp, qword [rsi]
mov r8d, r15d
mov rdx, rbp
lea rcx, [0x14017a150]
call fcn.140053a70
mov rdi, rax
test rax, rax
je 0x14005bbd5
movzx eax, byte [rax + 0xa9]
cmp byte [rdi + 0xa8], al
jne 0x14005bb9f
movzx ecx, byte [rdi + 0xaa]
cmp al, cl
jne 0x14005bb9f
cmp cl, byte [rdi + 0xab]
je 0x14005bbd5
mov rcx, rdi
call fcn.14005b080
test al, al
je 0x14005bbd5
mov rdx, rbx
mov rcx, rdi
call fcn.140057760
test al, al
jne 0x14005bbd5
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], rdi
lea rdx, [rsp + 0x30]
lea rcx, [0x1401b2500]
call fcn.14006f150
add rsi, 8
cmp rsi, r14
jne 0x14005bb60
mov rsi, qword [0x1401b2508]
mov rdi, qword [0x1401b2500]
cmp rdi, rsi
je 0x14005bc95
nop word [rax + rax]
mov rbp, qword [rdi]
mov rbx, qword [rdi + 8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov r8, rax
mov rdx, rbp
lea rcx, [0x14017a150]
call fcn.140053a70
test rax, rax
je 0x14005bc88
cmp byte [rax], 0xff
jne 0x14005bc88
cmp byte [rax + 1], 0xff
jne 0x14005bc88
cmp byte [rax + 2], 0xff
jne 0x14005bc88
cmp byte [rax + 3], 0xff
jne 0x14005bc88
cmp byte [rax + 4], 0
jne 0x14005bc88
cmp byte [rax + 5], 0
jne 0x14005bc88
cmp byte [rax + 6], 0
jne 0x14005bc88
cmp byte [rax + 7], 0
jne 0x14005bc88
mov rdx, rax
mov rcx, rbx
call fcn.14005b0f0
mov rbx, rax
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov qword [rsp + 0x20], r12
mov r9, rax
mov r8, rbx
mov rdx, rbp
mov rcx, qword [0x14017a158]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 0x10
cmp rdi, rsi
jne 0x14005bc00
lea rcx, [rsp + 0x40]
call fcn.14006aab0
jmp 0x14005bd5f
mov rbp, qword [0x1401b2508]
mov rdi, qword [0x1401b2500]
cmp rdi, rbp
je 0x14005bd5f
nop dword [rax + rax]
mov r14, qword [rdi]
mov rsi, qword [rdi + 8]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov r8, rax
mov rdx, r14
lea rcx, [0x14017a150]
call fcn.140053a70
mov rbx, rax
test rax, rax
je 0x14005bd52
cmp byte [rax], 0xff
jne 0x14005bd52
cmp byte [rax + 1], 0xff
jne 0x14005bd52
cmp byte [rax + 2], 0xff
jne 0x14005bd52
cmp byte [rax + 3], 0xff
jne 0x14005bd52
cmp byte [rax + 4], r12b
jne 0x14005bd52
cmp byte [rax + 5], r12b
jne 0x14005bd52
cmp byte [rax + 6], r12b
jne 0x14005bd52
cmp byte [rax + 7], r12b
jne 0x14005bd52
movzx eax, byte [rsi + 0x5e]
mov byte [rbx + 0x5e], al
movzx eax, byte [rsi + 0x5d]
mov byte [rbx + 0x5d], al
movzx eax, byte [rsi + 0x5c]
mov byte [rbx + 0x5c], al
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll__msize]
mov qword [rsp + 0x20], r12
mov r9, rax
mov r8, rbx
mov rdx, r14
mov rcx, qword [0x14017a158]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
add rdi, 0x10
cmp rdi, rbp
jne 0x14005bcc0
mov byte [0x14017ca9b], 0
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret