Function at 0x140011127
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x14001cc10
push rbp
push rdi
sub rsp, 0x408
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x9a
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140036040]
xor rax, rbp
mov qword [rbp + 0x3d8], rax
lea rcx, [0x14003d0ff]
call fcn.1400119fb
mov eax, 0x6e
mov word [rbp + 8], ax
mov eax, 0x74
mov word [rbp + 0xa], ax
mov eax, 0x64
mov word [rbp + 0xc], ax
mov eax, 0x6c
mov word [rbp + 0xe], ax
mov eax, 0x6c
mov word [rbp + 0x10], ax
mov eax, 0x2e
mov word [rbp + 0x12], ax
mov eax, 0x64
mov word [rbp + 0x14], ax
mov eax, 0x6c
mov word [rbp + 0x16], ax
mov eax, 0x6c
mov word [rbp + 0x18], ax
xor eax, eax
mov word [rbp + 0x1a], ax
lea rcx, [rbp + 8]
call fcn.140011285
mov qword [rbp + 0x38], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x58], rax
mov rax, qword [rbp + 0x58]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x78], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rbp + 0x78]
mov eax, dword [rcx + rax + 0x88]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x98], rax
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xb8], rax
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x20]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xd8], rax
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x24]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xf8], rax
mov dword [rbp + 0x114], 0
jmp 0x14001cd5f
mov eax, dword [rbp + 0x114]
inc eax
mov dword [rbp + 0x114], eax
mov rax, qword [rbp + 0x98]
mov eax, dword [rax + 0x18]
cmp dword [rbp + 0x114], eax
jae 0x14001ce99
mov eax, dword [rbp + 0x114]
mov rcx, qword [rbp + 0xd8]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x138], rax
mov r8d, 2
lea rdx, [0x14002ffb4]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.ucrtbased.dll_strncmp]
test eax, eax
jne 0x14001ce94
mov eax, dword [rbp + 0x114]
mov rcx, qword [rbp + 0xf8]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp + 0xb8]
mov eax, dword [rcx + rax*4]
mov dword [rbp + 0x184], eax
mov eax, dword [rbp + 0x184]
mov rcx, qword [rbp + 0x38]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x158], rax
mov rax, qword [rbp + 0x138]
add rax, 2
mov rdx, rax
lea rcx, [rbp + 0x348]
call fcn.14001148d
mov qword [rbp + 0x3b8], rax
mov rax, qword [rbp + 0x3b8]
mov qword [rbp + 0x3c0], rax
mov r8, qword [rbp + 0x3c0]
lea rdx, [0x14002ffb8]
lea rcx, [rbp + 0x388]
call fcn.140011a37
mov qword [rbp + 0x3c8], rax
mov rax, qword [rbp + 0x3c8]
mov qword [rbp + 0x3d0], rax
mov rcx, qword [rbp + 0x3d0]
call fcn.1400110d7
mov rcx, rax
call fcn.140011a1e
mov dword [rbp + 0x160], eax
lea rcx, [rbp + 0x388]
call fcn.1400111d6
nop
lea rcx, [rbp + 0x348]
call fcn.1400111d6
lea rdx, [rbp + 0x158]
lea rcx, [0x1400364d8]
call fcn.1400115aa
jmp 0x14001cd51
lea rcx, [0x1400364d8]
call fcn.1400113c0
dec rax
mov r8d, eax
xor edx, edx
lea rcx, [0x1400364d8]
call fcn.14001196f
mov qword [rbp + 0x1a8], 0
jmp 0x14001ced7
mov rax, qword [rbp + 0x1a8]
inc rax
mov qword [rbp + 0x1a8], rax
lea rcx, [0x1400364d8]
call fcn.1400113c0
cmp qword [rbp + 0x1a8], rax
jae 0x14001cf2e
mov rdx, qword [rbp + 0x1a8]
lea rcx, [0x1400364d8]
call fcn.140011960
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_EncodePointer]
mov qword [rbp + 0x3b8], rax
mov rdx, qword [rbp + 0x1a8]
lea rcx, [0x1400364d8]
call fcn.140011960
mov rcx, qword [rbp + 0x3b8]
mov qword [rax], rcx
jmp 0x14001cec6
lea rcx, [rbp - 0x20]
lea rdx, [0x14002d960]
call fcn.14001186b
mov rcx, qword [rbp + 0x3d8]
xor rcx, rbp
call fcn.140011500
lea rsp, [rbp + 0x3e8]
pop rdi
pop rbp
ret