Function at 0x140230920
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov word [r11 + 0x20], r9w
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
movzx eax, word [rsp + 0x130]
xor ebx, ebx
mov qword [rsp + 0x38], rbx
movzx r10d, r9w
mov r9, rdx
mov r14, r8
mov rdx, rcx
mov r12d, ebx
mov esi, ebx
test ax, ax
je 0x14023098b
mov rax, qword [rcx]
mov r10, qword [rax]
test byte [r10 + 0x60], 0x40
jne 0x14023132b
movzx r10d, word [r11 + 0x20]
movzx eax, word [rsp + 0x130]
movzx ebp, word [r9]
mov word [rsp + 0x6a], bp
cmp ebp, 0x3f
ja 0x14023132b
mov r8d, ebx
mov dword [rsp + 0x54], ebp
mov ecx, ebp
mov qword [rsp + 0x88], rbx
mov edi, 1
mov qword [rsp + 0x60], rbx
shl rdi, cl
mov r15b, 1
dec rdi
mov dword [rsp + 0x34], r15d
mov ecx, 0x803
mov qword [rsp + 0x78], rdi
test cx, r10w
mov dword [rsp + 0x50], ebx
mov r13d, ebp
mov qword [rsp + 0x80], rbx
setne r8b
mov r11, rbx
add r8w, 0x182
mov ecx, ebx
mov dword [rsp + 0x40], r8d
cmp rsi, rdi
jae 0x140231277
movzx eax, ax
cmp ecx, eax
jg 0x1402312f7
test ecx, ecx
jle 0x140230a19
or r11, qword [r12 + 8]
mov qword [rsp + 0x60], r11
cmp ecx, eax
jge 0x140230a38
bt r10w, 0xb
mov rax, qword [r14 + 0x18]
mov r12, qword [rax + rbx*8]
mov qword [rsp + 0x58], r12
jb 0x14023124d
jmp 0x140230a45
mov r12, qword [rsp + 0x138]
mov qword [rsp + 0x58], r12
test dword [r12 + 0x38], 0x400
jne 0x1402312db
movzx eax, r10w
mov ecx, pe_nt_image_headers64
and ax, cx
mov word [rsp + 0x68], ax
je 0x140230a72
xor r10d, r10d
mov word [r12 + 0x1e], r10w
jmp 0x140230a75
xor r10d, r10d
movzx eax, byte [r12 + 0x10]
mov ebp, r10d
imul rcx, rax, 0x68
mov rax, qword [rdx + 8]
mov edx, dword [rcx + rax + 0x4c]
mov dword [rsp + 0x44], edx
test r13d, r13d
je 0x140230af4
mov r15, qword [rsp + 0x110]
nop dword [rax + rax]
mov eax, ebp
bt rsi, rax
jb 0x140230ae8
mov esi, ebp
shl rsi, 5
add rsi, r9
mov r14d, ebp
mov rbx, qword [rsi + 8]
test rbx, rbx
je 0x140230ae3
nop dword [rax]
mov eax, dword [rbx + 4]
test eax, 0x82000
je 0x140230b29
bt eax, 0x13
jae 0x140230ada
mov rax, qword [rbx + 0x20]
mov rbx, qword [rax + 8]
jmp 0x140230ade
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x140230ac0
mov rsi, qword [rsp + 0x38]
inc ebp
cmp ebp, r13d
jl 0x140230aa0
mov r15d, dword [rsp + 0x34]
mov eax, dword [r12 + 0x38]
bt eax, 0xc
jb 0x14023113a
bt eax, 8
jae 0x140230cc7
mov r14d, dword [rsp + 0x34]
xor ebp, ebp
mov r11d, ebp
mov qword [rsp + 0x70], rbp
mov word [rsp + 0x4c], bp
lea ecx, [rbp + 1]
jmp 0x140230d10
movzx eax, byte [rbx]
add al, 0x59
test al, 0xfd
jne 0x140230ae3
cmp dword [rbx + 0x2c], edx
jne 0x140230ae3
movzx eax, r8w
lea rcx, [r15 + 0x70]
movsx r8d, word [rbx + 0x30]
mov r9, r11
mov qword [rsp + 0x28], r10
not r9
mov dword [rsp + 0x20], eax
call fcn.140218180
mov rdi, rax
test rax, rax
je 0x140230ca4
movzx r9d, word [rax + 0x14]
cmp r9w, 1
jne 0x140230b9c
movzx edx, word [r12 + 0x3c]
xor r10d, r10d
mov ecx, r10d
test edx, edx
je 0x140230b94
mov r8, qword [r12 + 0x48]
movsxd rax, ecx
cmp rdi, qword [r8 + rax*8]
je 0x140230b94
inc ecx
cmp ecx, edx
jl 0x140230b85
cmp ecx, edx
jge 0x140230c89
test r9b, 0x82
je 0x140230c41
cmp word [rbx + 0x30], 0
jl 0x140230c41
mov rbx, qword [r15]
mov rdx, qword [rsi + 8]
mov rcx, rbx
call fcn.1401cb2f0
mov rsi, rax
test rax, rax
jne 0x140230bcf
mov rax, qword [rbx]
mov rsi, qword [rax + 0x10]
mov rax, qword [rdi]
test dword [rax + 4], 0x400
je 0x140230be5
mov rdi, qword [rax + 0x10]
mov rdx, qword [rax + 0x18]
jmp 0x140230bed
mov rdi, qword [rax + 0x18]
mov rdx, qword [rax + 0x10]
test dword [rdx + 4], 0x200
jne 0x140230c14
test rdi, rdi
je 0x140230c04
test dword [rdi + 4], 0x200
jne 0x140230c11
mov rcx, rbx
call fcn.1401cb2f0
test rax, rax
jne 0x140230c21
mov rdx, rdi
mov rcx, rbx
call fcn.1401cb2f0
test rax, rax
je 0x140230c6b
mov rdx, qword [rsi]
mov r9, qword [rax]
sub r9, rdx
nop word [rax + rax]
movzx eax, byte [rdx]
movzx r8d, byte [rdx + r9]
cmp eax, r8d
jne 0x140230c51
test eax, eax
jne 0x140230c66
mov rsi, qword [rsp + 0x38]
bts rsi, r14
mov qword [rsp + 0x38], rsi
jmp 0x140230ca9
lea r10, [0x14030df60]
movzx ecx, byte [rax + r10]
movzx eax, byte [r8 + r10]
cmp ecx, eax
jne 0x140230c6b
inc rdx
jmp 0x140230c30
mov edx, dword [rsp + 0x44]
xor r10d, r10d
mov r9, qword [rsp + 0x118]
mov r8d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x60]
jmp 0x140230ae3
mov edx, dword [rsp + 0x44]
mov r9, qword [rsp + 0x118]
mov r8d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x60]
jmp 0x140230ae3
mov rsi, qword [rsp + 0x38]
mov r11, qword [rsp + 0x60]
xor r10d, r10d
mov r8d, dword [rsp + 0x40]
mov r9, qword [rsp + 0x118]
mov edx, dword [rsp + 0x44]
jmp 0x140230ae8
mov r11, qword [r12 + 0x20]
mov qword [rsp + 0x70], r11
test r11, r11
je 0x14023132b
test byte [r11 + 0x64], 4
jne 0x14023132b
cmp byte [r11 + 0x62], 0
movzx ecx, word [r11 + 0x5e]
mov word [rsp + 0x4c], cx
movzx ecx, word [r11 + 0x60]
je 0x140230d06
bt eax, 0xf
jb 0x140230d06
mov r14b, 1
jmp 0x140230d09
xor r14b, r14b
xor ebp, ebp
mov dword [rsp + 0x34], r14d
xor al, al
xor dl, dl
xor dil, dil
mov byte [rsp + 0x31], al
movzx eax, cx
mov r13d, ebp
mov byte [rsp + 0x30], dl
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x6c], eax
test eax, eax
je 0x140231130
nop word [rax + rax]
movzx r10d, word [r12 + 0x18]
mov bl, 1
cmp r13d, r10d
jge 0x140230dc7
movzx eax, word [r12 + 0x3e]
cmp r13d, eax
jl 0x140230dc7
mov r9, qword [r12 + 0x48]
movsxd rax, r13d
mov rcx, qword [r9 + rax*8]
movzx eax, word [rcx + 0x14]
test ax, r8w
je 0x140230d95
mov r9, qword [rsp + 0x118]
mov ecx, 0x180
test cx, ax
movzx eax, r14b
mov ecx, ebp
cmove ecx, eax
movzx r14d, cl
mov dword [rsp + 0x34], r14d
jmp 0x1402310f9
test bl, al
je 0x140230dc7
mov r8, qword [rcx]
lea edx, [r13 + 1]
cmp edx, r10d
jge 0x140230dc7
nop word [rax + rax]
movsxd rax, edx
mov rcx, qword [r9 + rax*8]
cmp qword [rcx], r8
je 0x140230dc5
inc edx
cmp edx, r10d
jl 0x140230db0
jmp 0x140230dc7
xor bl, bl
test r11, r11
je 0x140230dfb
mov rax, qword [r11 + 8]
movsxd rcx, r13d
movsx r15d, word [rax + rcx*2]
mov rax, qword [r11 + 0x38]
movzx r12d, byte [rcx + rax]
mov rax, qword [r11 + 0x18]
and r12b, 1
movsx ecx, word [rax + 0x34]
mov eax, 0xffffffff
cmp r15d, ecx
cmove r15d, eax
jmp 0x140230e04
mov r15d, 0xffffffff
xor r12b, r12b
test r14b, r14b
je 0x140230e41
test r15d, r15d
js 0x140230e30
cmp r13d, r10d
jl 0x140230e41
movsxd rax, r15d
lea rdx, [rax + rax*2]
mov rax, qword [r11 + 0x18]
mov rcx, qword [rax + 8]
test byte [rcx + rdx*8 + 8], 0xf
jne 0x140230e41
mov byte [rsp + 0x34], 0
jmp 0x140230e41
cmp r15d, 0xfffffffe
movzx r14d, r14b
cmove r14d, ebp
mov dword [rsp + 0x34], r14d
test bl, bl
je 0x140230fc2
nop dword [rax]
cmp ebp, dword [rsp + 0x54]
jge 0x140230fbe
mov eax, ebp
bt rsi, rax
jb 0x140230fb4
movsxd r14, ebp
shl r14, 5
add r14, qword [rsp + 0x118]
mov rdx, qword [r14 + 8]
test rdx, rdx
je 0x140230fb4
mov eax, dword [rdx + 4]
test eax, 0x82000
je 0x140230eaa
bt eax, 0x13
jae 0x140230e9c
mov rax, qword [rdx + 0x20]
mov rdx, qword [rax + 8]
jmp 0x140230ea0
mov rdx, qword [rdx + 0x10]
test rdx, rdx
jne 0x140230e82
jmp 0x140230fb4
test byte [rsp + 0x128], 0xc0
mov ecx, 0
movzx eax, bl
cmovne ecx, eax
movzx ebx, cl
movzx esi, cl
cmp r15d, 0xffffffff
jl 0x140230ef7
movzx eax, byte [rdx]
cmp al, 0xa7
je 0x140230ed8
cmp al, 0xa9
jne 0x140230faf
mov eax, dword [rsp + 0x44]
cmp dword [rdx + 0x2c], eax
jne 0x140230faf
movsx eax, word [rdx + 0x30]
cmp eax, r15d
jne 0x140230faf
movsxd rdi, r13d
jmp 0x140230f4a
mov rax, qword [r11 + 0x50]
movsxd rdi, r13d
mov rcx, rdi
shl rcx, 5
mov r8, qword [rcx + rax + 8]
test r8, r8
je 0x140230f23
nop
test dword [r8 + 4], 0x2000
je 0x140230f23
mov r8, qword [r8 + 0x10]
test r8, r8
jne 0x140230f10
test dword [rdx + 4], 0x2000
je 0x140230f35
mov rdx, qword [rdx + 0x10]
test rdx, rdx
jne 0x140230f23
mov r9d, dword [rsp + 0x44]
xor ecx, ecx
call fcn.1401cb590
mov r11, qword [rsp + 0x70]
test eax, eax
jne 0x140230faf
cmp r15d, 0xffffffff
je 0x140231007
mov rax, qword [rsp + 0x110]
mov rdx, qword [r14 + 8]
mov rbx, qword [rax]
mov rcx, rbx
call fcn.1401cb2f0
test rax, rax
jne 0x140230f77
mov rax, qword [rbx]
mov rax, qword [rax + 0x10]
mov r11, qword [rsp + 0x70]
mov r8, qword [rax]
mov rax, qword [r11 + 0x40]
lea r11, [0x14030df60]
mov r9, qword [rax + rdi*8]
sub r9, r8
movzx edx, byte [r8]
movzx eax, byte [r9 + r8]
cmp edx, eax
jne 0x140230ff4
test edx, edx
jne 0x140231002
mov r11, qword [rsp + 0x70]
movzx ebx, sil
test edx, edx
je 0x140231007
mov rsi, qword [rsp + 0x38]
inc ebp
test bl, bl
jne 0x140230e50
mov edi, dword [rsp + 0x48]
mov r9, qword [rsp + 0x118]
mov r12, qword [rsp + 0x58]
test r13d, r13d
je 0x140230fe2
movzx eax, word [rsp + 0x4c]
cmp r13d, eax
jge 0x140231112
mov rsi, qword [rsp + 0x38]
xor r15b, r15b
mov dword [rsp + 0x34], r15d
jmp 0x14023111c
movzx ecx, byte [rax + r11]
movzx edx, byte [rdx + r11]
sub edx, ecx
jne 0x140230fa2
inc r8
jmp 0x140230f91
cmp word [rsp + 0x68], 0
je 0x14023101c
mov rcx, qword [rsp + 0x58]
lea eax, [r13 + 1]
mov word [rcx + 0x1e], ax
test byte [rsp + 0x128], 0x40
mov r10b, 1
mov r9, qword [rsp + 0x118]
jne 0x14023109c
movzx edi, byte [rsp + 0x31]
movsxd rax, ebp
shl rax, 5
movzx edx, byte [rax + r9 + 0x18]
and dl, r10b
test dil, dil
je 0x140231077
movzx r8d, byte [rsp + 0x30]
xor ecx, ecx
xor r12b, r8b
movzx eax, r10b
cmp r12b, dl
mov byte [rsp + 0x30], r8b
mov byte [rsp + 0x31], dil
cmove ecx, eax
test cl, cl
jne 0x14023109c
mov edi, dword [rsp + 0x48]
jmp 0x140230fca
xor dl, r12b
mov byte [rsp + 0x30], dl
je 0x140231097
mov rdx, qword [rsp + 0x140]
movsxd rax, dword [rsp + 0x50]
mov rcx, qword [rdx]
bts rcx, rax
mov qword [rdx], rcx
mov byte [rsp + 0x31], r10b
mov r12, qword [rsp + 0x58]
movsxd rcx, ebp
mov rax, rcx
shl rax, 5
test byte [rax + r9 + 0x18], 2
je 0x1402310c7
movzx eax, word [r12 + 0x18]
cmp r13d, eax
jne 0x140231109
or dword [r12 + 0x38], 0x80000
mov edi, dword [rsp + 0x48]
cmp r15d, 0xffffffff
mov rsi, qword [rsp + 0x38]
mov eax, 1
mov r14d, dword [rsp + 0x34]
mov r8d, dword [rsp + 0x40]
movzx edi, dil
cmove edi, eax
bts rsi, rcx
mov qword [rsp + 0x38], rsi
xor ebp, ebp
mov dword [rsp + 0x48], edi
inc r13d
cmp r13d, dword [rsp + 0x6c]
jl 0x140230d40
jmp 0x140231117
mov edi, dword [rsp + 0x48]
jmp 0x140230fcf
mov rsi, qword [rsp + 0x38]
mov r15d, dword [rsp + 0x34]
mov r13d, dword [rsp + 0x54]
test dil, dil
je 0x14023113a
mov r15b, 1
mov dword [rsp + 0x34], r15d
jmp 0x140231143
mov r15d, dword [rsp + 0x34]
mov r13d, dword [rsp + 0x54]
test r15b, r15b
je 0x140231221
mov r14, qword [rsp + 0x88]
xor edi, edi
or r14, qword [r12 + 8]
mov qword [rsp + 0x88], r14
test r13d, r13d
je 0x140231221
mov r15, qword [rsp + 0x110]
xor r12d, r12d
nop
mov eax, edi
bt rsi, rax
jb 0x140231204
mov eax, edi
shl rax, 5
mov ebp, edi
mov rsi, qword [rax + r9 + 8]
test rsi, rsi
je 0x140231283
lea rcx, [r15 + 0x258]
mov rdx, rsi
call fcn.140218110
mov rbx, rax
test rax, rax
jne 0x1402312b9
mov eax, 1
mov dword [rsp + 0xb8], r12d
mov word [rsp + 0xb4], ax
lea rcx, [rsp + 0x90]
lea rax, [fcn.140167440]
mov rdx, rsi
mov qword [rsp + 0x98], rax
lea rax, [0x1401f74d0]
mov qword [rsp + 0xa0], rax
call fcn.140212200
cmp word [rsp + 0xb4], r12w
jne 0x1402312b9
mov rsi, qword [rsp + 0x38]
mov r9, qword [rsp + 0x118]
inc edi
cmp edi, r13d
jl 0x140231170
mov r12, qword [rsp + 0x58]
mov r15d, dword [rsp + 0x34]
mov rdx, qword [rsp + 0x110]
movzx r10d, word [rsp + 0x128]
mov ecx, dword [rsp + 0x50]
mov r8d, dword [rsp + 0x40]
mov r11, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x78]
mov r14, qword [rsp + 0x120]
inc qword [rsp + 0x80]
inc ecx
mov rbx, qword [rsp + 0x80]
movzx eax, word [rsp + 0x130]
mov dword [rsp + 0x50], ecx
test r15b, r15b
jne 0x1402309f7
cmp rsi, rdi
jne 0x1402312f7
movzx eax, byte [rsp + 0x6a]
jmp 0x14023132d
mov eax, 1
mov dword [rsp + 0xb8], r12d
mov word [rsp + 0xb4], ax
mov rbx, r12
lea rax, [fcn.140167440]
mov qword [rsp + 0x98], rax
lea rax, [0x1401f74d0]
mov qword [rsp + 0xa0], rax
mov rsi, qword [rsp + 0x38]
mov rax, r14
not rax
test rbx, rax
jne 0x140231204
bts rsi, rbp
mov qword [rsp + 0x38], rsi
jmp 0x140231204
cmp byte [r12 + 0x20], 0
je 0x1402312f7
mov eax, 0x280
and r10w, ax
mov eax, pe_nt_image_headers64
cmp r10w, ax
jne 0x140231279
test r15b, r15b
jne 0x140231346
lea ecx, [r13 - 1]
test ecx, ecx
jle 0x14023132b
cmp ecx, 0x40
jge 0x140231316
mov edx, 1
shl rdx, cl
dec rdx
jmp 0x14023131a
xor eax, eax
mov edx, eax
mov rax, rdx
and rax, rsi
cmp rax, rdx
je 0x140231341
dec ecx
test ecx, ecx
jg 0x140231304
xor al, al
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
movzx eax, cl
jmp 0x14023132d
mov al, 0xff
jmp 0x14023132d