Function at 0x1400dfcf0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xd68
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xcd0], xmm6
mov r13, rdx
mov qword [rbp + 0xc40], rcx
mov rdx, qword [0x140120058]
test rdx, rdx
je 0x1400e162e
mov rax, qword [0x140120050]
mov rcx, rdx
shl rcx, 6
add rcx, rax
xor r15d, r15d
mov r8, rax
mov rdi, qword [rbp + 0xc40]
mov r10, qword [r8 + 0x28]
mov r9, qword [r8 + 0x30]
mov r12, qword [r8 + 0x38]
add r8, 0x40
shl r9, 4
nop
test r9, r9
je 0x1400dfd90
mov r11, r10
add r10, 0x10
mov rsi, qword [r11]
add rsi, r12
add r9, 0xfffffffffffffff0
cmp rsi, rdi
ja 0x1400dfd60
add rsi, qword [r11 + 8]
cmp rsi, rdi
jbe 0x1400dfd60
jmp 0x1400dfd9d
inc r15
cmp r8, rcx
jne 0x1400dfd4a
jmp 0x1400e162e
mov rdi, qword [0x140120070]
test rdi, rdi
je 0x1400dfdd9
mov r14, qword [0x140120068]
imul rcx, rdi, 0x230
xor r8d, r8d
xor ebx, ebx
nop dword [rax]
cmp qword [r14 + r8], r15
je 0x1400dfff7
inc rbx
add r8, 0x230
cmp rcx, r8
jne 0x1400dfdc0
cmp rdx, r15
jbe 0x1400e381b
mov rcx, r15
shl rcx, 6
mov rdx, qword [rax + rcx + 8]
mov r8, qword [rax + rcx + 0x10]
lea rcx, [rbp + 0x8c0]
call fcn.1400df1e0
test byte [rbp + 0x8c0], 1
je 0x1400e162e
mov rsi, qword [rbp + 0x8c8]
mov r14, qword [rbp + 0x8d0]
mov rbx, qword [rbp + 0x8d8]
mov qword [rbp + 0x738], 0
mov qword [rbp + 0x740], 8
xorps xmm0, xmm0
movups xmmword [rbp + 0x748], xmm0
mov qword [rbp + 0x758], 8
mov qword [rbp + 0x760], 0
cmp rbx, 0x40
jb 0x1400e1612
cmp word [r14], 0x5a4d
jne 0x1400e1612
mov eax, dword [r14 + 0x3c]
mov rcx, rbx
sub rcx, rax
setb dl
cmp rcx, 0x88
setb cl
or cl, dl
jne 0x1400e1612
cmp dword [r14 + rax], 0x4550
jne 0x1400e1612
cmp word [r14 + rax + 0x18], 0x20b
jne 0x1400e1612
movzx ecx, word [r14 + rax + 0x14]
cmp rcx, 0x70
jb 0x1400e1612
lea rdx, [rax + 0x88]
add rcx, 0xffffffffffffff90
mov r8, rbx
sub r8, rdx
cmp r8, rcx
jb 0x1400e1612
mov r8d, dword [r14 + rax + 0x84]
shl r8, 3
cmp r8, rcx
ja 0x1400e1612
add rcx, rdx
movzx r10d, word [r14 + rax + 6]
lea edx, [r10*8]
lea rdx, [rdx + rdx*4]
mov r8, rbx
sub r8, rcx
setb r9b
cmp r8, rdx
setb dl
or dl, r9b
add rcx, r14
xor r11d, r11d
test dl, dl
cmove r11, rcx
jne 0x1400e1612
mov r8d, dword [r14 + rax + 0xc]
test r8, r8
je 0x1400e0c30
mov rcx, rbx
sub rcx, r8
jb 0x1400e1612
mov r9d, dword [r14 + rax + 0x10]
lea rdx, [r9 + r9]
lea rdx, [rdx + rdx*8]
cmp rcx, rdx
jb 0x1400e1612
add rdx, r8
mov rcx, rbx
sub rcx, rdx
cmp rcx, 4
jb 0x1400e1612
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0xc60], rdx
mov ecx, dword [r14 + rdx]
mov qword [rbp + 0xc68], rcx
mov rax, qword [r14 + rax + 0x30]
mov qword [rbp + 0xc70], rax
mov qword [rbp + 0x8c0], 0
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov qword [rbp + 0xc88], r9
test r9, r9
je 0x1400e2aee
add r8, r14
mov eax, 8
mov qword [rbp + 0xcc8], 0
xor esi, esi
mov qword [rbp + 0xca0], r10
mov qword [rbp + 0xc98], r11
mov r9, qword [rbp + 0xc88]
mov qword [rbp + 0xc58], r8
jmp 0x1400e12b0
test rbx, rbx
mov qword [rbp + 0xb98], r13
je 0x1400e009d
mov r15, r14
imul r14, rbx, 0x230
lea rsi, [r15 + r14]
lea rcx, [rbp - 0x58]
mov r8d, 0x230
mov rdx, rsi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
lea rdx, [r15 + r14]
add rdx, 0x230
not rbx
add rbx, rdi
imul r8, rbx, 0x230
mov rcx, rsi
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
lea rsi, [rdi - 1]
mov qword [0x140120070], rsi
cmp rsi, qword [0x140120060]
jne 0x1400e0067
lea rcx, [0x14017adb0]
call fcn.1400ed3b0
mov r14, qword [0x140120068]
lea rcx, [r14 + 0x230]
imul r8, rsi, 0x230
mov rdx, r14
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
lea rdx, [rbp - 0x58]
mov r8d, 0x230
mov rcx, r14
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [0x140120070], rdi
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov rax, qword [rbp + 0x8c8]
mov qword [rbp + 0x510], rax
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0x518], rax
xor esi, esi
xor edi, edi
xor ecx, ecx
xor eax, eax
lea r9, [rbp + 0x858]
movabs r8, 0x8000000000000000
mov rdx, qword [rbp + 0x510]
mov qword [r9], rdx
mov rdx, qword [rbp + 0x518]
mov qword [r9 + 8], rdx
mov qword [rbp + 0x850], rax
mov qword [rbp + 0x868], r14
mov qword [rbp + 0x870], rbx
mov qword [rbp + 0x878], r11
mov qword [rbp + 0x880], r10
mov qword [rbp + 0x888], rcx
mov qword [rbp + 0x890], rbx
mov qword [rbp + 0x898], rdi
mov qword [rbp + 0x8a0], rsi
mov qword [rbp + 0x7a0], r8
lea rdx, str..debug_abbrev.debug_addr.debug_aranges.debug_cu_index.debug_info.debug_line.debug_line_str.debug_loc.debug_loclists.debug_ranges.debug_rnglists.debug_str.debug_str_offsets.debug_tu_index.debug_typesNulErrorUtf8Errorvalid_up_toerror_len
lea rsi, [rbp + 0x850]
mov r8d, 0xd
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcc8], rdx
mov edi, 1
cmove rax, rdi
mov qword [rbp + 0xcc0], rax
lea rdx, [0x140178ab5]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb0], rdx
cmove rax, rdi
mov qword [rbp + 0xca0], rax
lea rdx, [0x140178ac0]
mov r8d, 0xe
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc98], rdx
cmove rax, rdi
mov qword [rbp + 0xc88], rax
lea rdx, [0x140178add]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc70], rdx
cmove rax, rdi
mov qword [rbp + 0xc58], rax
lea rdx, [0x140178ae8]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc60], rdx
cmove rax, rdi
mov qword [rbp + 0xc68], rax
lea rdx, [0x140178af3]
mov r8d, 0xf
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb8], rdx
cmove rax, rdi
mov qword [rbp + 0xc78], rax
lea rdx, [0x140178b37]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc48], rdx
cmove rax, rdi
mov qword [rbp + 0xc80], rax
lea rdx, [0x140178b41]
mov r8d, 0x12
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc90], rdx
cmove rax, rdi
mov qword [rbp + 0xca8], rax
lea rdx, [0x140178b62]
mov r8d, 0xc
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc50], rdx
cmove rax, rdi
mov qword [rbp + 0xc08], rax
lea rdx, [0x140178b02]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc10], rdx
cmove rax, rdi
mov qword [rbp + 0xc00], rax
lea rdx, [0x140178b0c]
mov r8d, 0xf
mov rcx, rsi
call fcn.1400e3f80
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xbc8], rdx
cmove rax, rdi
mov qword [rbp + 0xc38], rax
lea rdx, [0x140178b1b]
mov r8d, 0xd
mov rcx, rsi
call fcn.1400e3f80
mov r13, rax
mov rsi, rdx
lea rdx, [0x140178b28]
mov r8d, 0xf
lea rcx, [rbp + 0x850]
call fcn.1400e3f80
test r13, r13
cmove rsi, r13
cmove r13, rdi
test rax, rax
cmovne rdi, rax
cmove rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a0], xmm0
mov rax, qword [rbp + 0xcc0]
mov qword [rbp + 0x8d0], rax
mov rax, qword [rbp + 0xcc8]
mov qword [rbp + 0x8d8], rax
mov rax, qword [rbp + 0xca0]
mov qword [rbp + 0x8e0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rbp + 0x8e8], rax
mov rax, qword [rbp + 0xc88]
mov qword [rbp + 0x8f0], rax
mov rax, qword [rbp + 0xc98]
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0xc58]
mov qword [rbp + 0x900], rax
mov rax, qword [rbp + 0xc70]
mov qword [rbp + 0x908], rax
mov rax, qword [rbp + 0xc68]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0xc60]
mov qword [rbp + 0x918], rax
mov rax, qword [rbp + 0xc78]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0xcb8]
mov qword [rbp + 0x928], rax
mov rax, qword [rbp + 0xc80]
mov qword [rbp + 0x930], rax
mov rax, qword [rbp + 0xc48]
mov qword [rbp + 0x938], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0x940], rax
mov rax, qword [rbp + 0xc90]
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x950], rax
mov rax, qword [rbp + 0xc50]
mov qword [rbp + 0x958], rax
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x960], rax
mov rax, qword [rbp + 0xc10]
mov qword [rbp + 0x968], rax
mov rax, qword [rbp + 0xc38]
mov qword [rbp + 0x970], rax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0x978], rax
mov qword [rbp + 0x980], r13
mov qword [rbp + 0x988], rsi
mov qword [rbp + 0x990], rdi
mov qword [rbp + 0x998], rdx
mov qword [rbp + 0x9b8], 0
mov byte [rbp + 0x9c0], 0
mov qword [rbp + 0x8c0], 1
mov qword [rbp + 0x8c8], 1
movzx eax, byte [0x1401b2168]
mov edx, 0x108
xor ecx, ecx
call fcn.1400ff580
test rax, rax
je 0x1400e3932
mov r13, rax
lea rdx, [rbp + 0x8c0]
mov r8d, 0x108
mov rcx, rax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rbp + 0xb90], r13
mov qword [rbp + 0xb70], 0
mov qword [rbp + 0xb78], 8
mov qword [rbp + 0xb80], 0
mov rax, qword [r13 + 0x30]
mov rcx, qword [r13 + 0x38]
mov qword [rbp + 0xc88], rax
mov qword [rbp + 0x8a8], rax
mov qword [rbp + 0x8b0], rcx
mov qword [rbp + 0x8b8], 0
mov qword [rbp + 0xca0], rcx
test rcx, rcx
mov qword [rbp + 0xc98], r13
je 0x1400e14aa
mov edi, 8
mov qword [rbp + 0xcc8], 0
mov eax, 8
mov qword [rbp + 0xcb0], rax
xor esi, esi
mov r13, qword [rbp + 0xca0]
jmp 0x1400e11c9
mov rax, qword [rbp + 0xb78]
mov qword [rbp + 0xcb0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rax + rdi - 8], r13
mov rcx, qword [rbp + 0xcc0]
mov qword [rax + rdi], rcx
mov rcx, qword [rbp + 0xcc8]
inc rcx
mov qword [rbp + 0xcc8], rcx
mov qword [rbp + 0xb80], rcx
mov r13, qword [rbp + 0x8b0]
add rdi, 0x10
test r13, r13
je 0x1400e1345
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0x8a8]
mov r8, rsi
call fcn.1400e4200
cmp byte [rbp + 0x8e9], 3
je 0x1400e158f
sub r13, qword [rbp + 0x8b0]
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0xcc0], rax
mov rsi, r13
add rsi, qword [rbp + 0x8b8]
mov r13, qword [rbp + 0x8e0]
mov qword [rbp + 0x8b8], rsi
mov rax, qword [rbp + 0xcc8]
cmp rax, qword [rbp + 0xb70]
jne 0x1400e1186
lea rcx, [rbp + 0xb70]
call fcn.1400e44b0
jmp 0x1400e1178
mov rax, qword [rbp + 0x8c8]
add rdi, qword [rbp + 0xc70]
add r13, rdi
mov rdx, qword [rbp + 0xcc8]
mov rcx, rdx
shl rcx, 4
mov qword [rax + rcx], r13
mov r8, qword [rbp + 0xcb0]
mov qword [rax + rcx + 8], r8
inc rdx
mov qword [rbp + 0xcc8], rdx
mov qword [rbp + 0x8d0], rdx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
mov r8, qword [rbp + 0xc58]
mov r9, qword [rbp + 0xc88]
mov rdi, qword [rbp + 0xcc0]
add rsi, rdi
inc rsi
cmp rsi, r9
jae 0x1400e13e7
lea rcx, [rsi + rsi*8]
movzx edi, byte [r8 + rcx*2 + 0x11]
movzx edx, word [r8 + rcx*2 + 0xe]
and edx, 0x30
cmp dx, 0x20
jne 0x1400e12a1
lea r13, [r8 + rcx*2]
movzx edx, word [r13 + 0xc]
cmp edx, 0xfeff
movsx ecx, dx
cmovb ecx, edx
test ecx, ecx
jle 0x1400e12a1
mov qword [rbp + 0xcc0], rdi
mov edx, ecx
dec rdx
lea rcx, [rdx + rdx*4]
lea rcx, [r11 + rcx*8]
cmp rdx, r10
mov edx, 0x1d
cmovae rcx, rdx
jae 0x1400e2aa9
test rcx, rcx
je 0x1400e2aa9
mov qword [rbp + 0xcb0], r13
mov edi, dword [r13 + 8]
mov r13d, dword [rcx + 0xc]
mov rcx, qword [rbp + 0xcc8]
cmp rcx, qword [rbp + 0x8c0]
jne 0x1400e1245
lea rcx, [rbp + 0x8c0]
call fcn.1400e3ea0
jmp 0x1400e123e
cmp qword [rbp + 0xcc8], 2
mov r13, qword [rbp + 0xc98]
jb 0x1400e14aa
mov rcx, qword [rbp + 0xb78]
cmp qword [rbp + 0xcc8], 0x15
jae 0x1400e1497
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r13, qword [rbp + 0xc98]
jmp 0x1400e13b0
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x1400e14aa
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x1400e139c
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x1400e1392
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x1400e13c3
add r10, rcx
jmp 0x1400e1395
cmp qword [rbp + 0xcc8], 2
jb 0x1400e2aee
mov rcx, qword [rbp + 0x8c8]
cmp qword [rbp + 0xcc8], 0x15
jae 0x1400e2ad4
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
jmp 0x1400e1460
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x1400e2aee
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x1400e144c
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x1400e1434
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x1400e1473
add r10, rcx
jmp 0x1400e1437
mov rdx, qword [rbp + 0xcc8]
call fcn.1400e4590
mov r13, qword [rbp + 0xc98]
mov qword [rbp + 0xc20], 0
mov qword [rbp + 0xc28], 8
mov qword [rbp + 0xc30], 0
mov qword [rbp + 0xbe0], 0
mov qword [rbp + 0xbe8], 8
mov qword [rbp + 0xbf0], 0
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rbp + 0xb08], xmm0
mov qword [rbp + 0xb18], 0
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0xb08]
call fcn.1400e46c0
mov rax, qword [rbp + 0x8c0]
cmp rax, 3
jne 0x1400e1649
mov rcx, r13
add rcx, 0x10
mov qword [rbp + 0xcc8], rcx
lea rdi, [rbp + 0x8d8]
mov rcx, qword [r13 + 0xd0]
mov qword [rbp + 0xc60], rcx
mov rcx, qword [r13 + 0xd8]
mov qword [rbp + 0xc70], rcx
movzx ecx, byte [r13 + 0x100]
mov byte [rbp + 0xc68], cl
mov rcx, qword [r13 + 0x20]
mov qword [rbp + 0xc58], rcx
mov rcx, qword [r13 + 0x28]
mov qword [rbp + 0xcb0], rcx
jmp 0x1400e16cb
cmp qword [rbp + 0x8c0], 0
je 0x1400e2ac8
mov r8, qword [rbp + 0x8c8]
mov rcx, qword [0x1401b2100]
xor edx, edx
call fcn.14011d4ec
mov rsi, qword [rbp + 0xc18]
jmp 0x1400e1612
mov rdx, qword [rbp + 0xcc8]
call fcn.1400e3de0
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea rcx, [rbp + 0x8c8]
mov rax, qword [rbp + 0x8c0]
movups xmm0, xmmword [rcx]
movaps xmmword [rbp + 0x510], xmm0
mov rcx, rax
neg rcx
mov rsi, qword [rbp + 0xc18]
mov rdi, qword [rbp + 0xc60]
jo 0x1400e1612
mov rsi, qword [rbp + 0xc68]
add rsi, rdi
mov rcx, r14
jmp 0x1400e0c78
lea r8, [0x14017adc8]
mov rcx, r15
call fcn.14001a41f