Function at 0x1403ad080
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rsi, qword [rcx + 0x10]
lea r14, [rcx + 0x10]
xor r15d, r15d
mov rbp, r8
mov r11d, edx
mov rdi, rcx
mov r8d, r15d
mov dword [rsp + 0xb0], r15d
mov dword [rsp + 0x40], r15d
cmp dword [rcx + 0x30], r15d
jne 0x1403ad9bd
mov r10, qword [rbp + 0x28]
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x48], r10
mov byte [rbp], 1
mov dword [rsp + 0x30], r15d
cmp dword [rbp + 0x30], r15d
jg 0x1403ad158
lea rax, [rbp + 0x24]
mov r13, rax
cmp dword [rax], r15d
je 0x1403ad8a5
mov ebx, r11d
test r11d, r11d
je 0x1403ad8a5
movsxd rcx, dword [rsi + 0x90]
mov r13, rax
mov dword [rsp + 0x40], ecx
cmp dword [rsi + 0x94], ecx
jg 0x1403ad875
xor r9d, r9d
mov dword [rsp + 0x20], r15d
mov r8d, ebx
mov edx, reloc.SinoSPE.dll_Ordinal_16
mov rcx, rsi
call fcn.140301d30
mov dword [rsp + 0x40], eax
jmp 0x1403ad8a1
mov r8d, dword [rsp + 0xb0]
mov rax, qword [r10]
mov r13d, r15d
mov dword [rsp + 0x3c], r15d
mov dword [rsp + 0x34], r15d
test dword [rax + 4], 0x1000000
mov rdx, qword [rax + 0x20]
mov qword [rsp + 0x50], rdx
je 0x1403ad231
mov rax, qword [rax + 0x40]
mov rbx, qword [rax + 0x48]
cmp dword [rbp + 0x24], r15d
je 0x1403ad209
mov rax, qword [r10 + 8]
test byte [rax + 4], 0x20
je 0x1403ad209
test r11d, r11d
je 0x1403ad209
test r8d, r8d
jne 0x1403ad1af
inc dword [rdi + 0x38]
mov r8d, dword [rdi + 0x38]
mov dword [rsp + 0xb0], r8d
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1403ad1d8
mov r9d, r8d
mov dword [rsp + 0x20], r15d
mov r8d, r11d
mov edx, 0x50
mov rcx, rsi
call fcn.140301d30
jmp 0x1403ad209
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0x50
mov dword [rax + 4], r11d
mov dword [rax + 8], r8d
mov dword [rax + 0xc], r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
dec dword [rdi + 0x44]
mov r9d, reloc.SinoSPE.dll_Ordinal_16
mov ebp, dword [rdi + 0x44]
mov rdx, rbx
mov r8d, ebp
mov dword [rsp + 0x3c], ebp
mov rcx, rdi
call fcn.14034a950
mov rdx, qword [rsp + 0x50]
mov r10, qword [rsp + 0x48]
cmp dword [r10 + 0x18], r13d
jl 0x1403ad49c
cmp byte [r10 + 0x1d], r13b
mov rax, qword [r10]
mov r14d, dword [rdx]
mov dword [rsp + 0x38], r14d
mov rcx, qword [rax + 0x10]
mov rbp, qword [rcx + 0x20]
mov eax, dword [rbp]
lea ecx, [rax + 1]
cmovne ecx, eax
cmp byte [r10 + 0x1c], r13b
lea ebx, [rcx + r14]
cmove ebx, ecx
cmp byte [r10 + 0x1e], r13b
je 0x1403ad26f
add ebx, r14d
inc ebx
mov dword [rsp + 0x34], ebx
cmp ebx, 1
jne 0x1403ad29d
movzx eax, byte [rdi + 0x1f]
test al, al
jne 0x1403ad28b
inc dword [rdi + 0x38]
mov r12d, dword [rdi + 0x38]
jmp 0x1403ad2c2
dec al
movzx eax, al
mov byte [rdi + 0x1f], al
mov r12d, dword [rdi + rax*4 + 0xe8]
jmp 0x1403ad2c2
mov ecx, dword [rdi + 0x28]
mov r12d, dword [rdi + 0x2c]
cmp ebx, ecx
jg 0x1403ad2b6
lea eax, [r12 + rbx]
sub ecx, ebx
mov dword [rdi + 0x2c], eax
mov dword [rdi + 0x28], ecx
jmp 0x1403ad2c2
mov eax, dword [rdi + 0x38]
lea r12d, [rax + 1]
add eax, ebx
mov dword [rdi + 0x38], eax
xor r9d, r9d
mov byte [rsp + 0x20], 1
mov r8d, r12d
mov rdx, rbp
mov rcx, rdi
mov r13d, r12d
call fcn.140346b80
mov r10, qword [rsp + 0x48]
mov ebp, dword [rbp]
cmp byte [r10 + 0x1d], r15b
jne 0x1403ad34e
movsxd rcx, dword [rsi + 0x90]
lea edx, [r12 + rbp]
mov r8d, dword [r10 + 0x18]
cmp dword [rsi + 0x94], ecx
jg 0x1403ad31c
mov r9d, edx
mov dword [rsp + 0x20], r15d
mov edx, 0x7e
mov rcx, rsi
call fcn.140301d30
mov r10, qword [rsp + 0x48]
jmp 0x1403ad34c
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0x7e
mov dword [rax + 4], r8d
mov dword [rax + 8], edx
mov dword [rax + 0xc], r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
inc ebp
cmp byte [r10 + 0x1c], r15b
je 0x1403ad378
mov rdx, qword [rsp + 0x50]
lea r13d, [r12 + rbp]
mov r8d, r13d
mov byte [rsp + 0x20], 1
xor r9d, r9d
mov rcx, rdi
call fcn.140346b80
mov r10, qword [rsp + 0x48]
add ebp, r14d
cmp byte [r10 + 0x1e], r15b
je 0x1403ad40b
cmp byte [r10 + 0x1c], r15b
mov ebx, r12d
cmovne ebx, r13d
test r14d, r14d
jle 0x1403ad407
add ebp, r12d
nop word [rax + rax]
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1403ad3c9
mov r9d, ebp
mov dword [rsp + 0x20], r15d
mov r8d, ebx
mov edx, 0xb5
mov rcx, rsi
call fcn.140301d30
jmp 0x1403ad3f8
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0xb5
mov dword [rax + 4], ebx
mov dword [rax + 8], ebp
mov dword [rax + 0xc], r15d
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
inc ebp
inc ebx
sub r14, 1
jne 0x1403ad3a0
mov r10, qword [rsp + 0x48]
mov ebx, dword [rsp + 0x34]
mov rdx, qword [rsp + 0x50]
cmp dword [r10 + 0x10], r15d
jl 0x1403ad456
test rdx, rdx
je 0x1403ad456
mov eax, dword [rsp + 0x3c]
test eax, eax
jne 0x1403ad42d
dec dword [rdi + 0x44]
mov eax, dword [rdi + 0x44]
mov dword [rsp + 0x3c], eax
mov r8d, dword [r10 + 0x10]
mov r9d, eax
mov dword [rsp + 0x28], r13d
mov rcx, rdi
mov qword [rsp + 0x20], rdx
mov edx, dword [rsp + 0xc8]
call fcn.1402ad020
mov r10, qword [rsp + 0x48]
mov dword [r10 + 0x10], eax
cmp dword [r10 + 0x18], r15d
jl 0x1403ad5ed
movsxd rcx, dword [rsi + 0x90]
lea ebp, [rbx - 1]
add ebp, r12d
dec ebx
cmp dword [rsi + 0x94], ecx
jg 0x1403ad52d
mov r9d, ebx
mov dword [rsp + 0x20], ebp
mov r8d, r12d
mov edx, 0x61
mov rcx, rsi
call fcn.140301d30
mov r10, qword [rsp + 0x48]
jmp 0x1403ad55c
test rdx, rdx
je 0x1403ad51d
mov r14d, dword [rdx]
mov dword [rsp + 0x38], r14d
cmp r14d, 1
jne 0x1403ad4d2
movzx eax, byte [rdi + 0x1f]
test al, al
jne 0x1403ad4c0
inc dword [rdi + 0x38]
mov r13d, dword [rdi + 0x38]
jmp 0x1403ad4fa
dec al
movzx eax, al
mov byte [rdi + 0x1f], al
mov r13d, dword [rdi + rax*4 + 0xe8]
jmp 0x1403ad4fa
mov ecx, dword [rdi + 0x28]
mov r13d, dword [rdi + 0x2c]
cmp r14d, ecx
jg 0x1403ad4ed
lea eax, [r14 + r13]
sub ecx, r14d
mov dword [rdi + 0x2c], eax
mov dword [rdi + 0x28], ecx
jmp 0x1403ad4fa
mov eax, dword [rdi + 0x38]
lea r13d, [rax + 1]
add eax, r14d
mov dword [rdi + 0x38], eax
xor r9d, r9d
mov byte [rsp + 0x20], 1
mov r8d, r13d
mov rcx, rdi
mov r12d, r13d
call fcn.140346b80
mov r10, qword [rsp + 0x48]
mov ebx, r15d
jmp 0x1403ad40b
mov dword [rsp + 0x38], r15d
mov r12d, r15d
mov ebx, r15d
jmp 0x1403ad410
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0x61
mov dword [rax + 4], r12d
mov dword [rax + 8], ebx
mov dword [rax + 0xc], ebp
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
movsxd rcx, dword [rsi + 0x90]
mov edx, dword [r10 + 0x18]
cmp dword [rsi + 0x94], ecx
jg 0x1403ad58d
mov r8d, edx
mov dword [rsp + 0x28], ebx
mov edx, 0x8a
mov dword [rsp + 0x20], r12d
mov r9d, ebp
mov rcx, rsi
call fcn.1402957d0
jmp 0x1403ad5bb
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0xfd8a
mov dword [rax + 4], edx
mov dword [rax + 8], ebp
mov dword [rax + 0xc], r12d
mov dword [rax + 0x10], ebx
mov qword [rax + 0x18], r15
mov eax, dword [rsp + 0x34]
mov ebx, dword [rsp + 0xb0]
mov rbp, qword [rsp + 0xc0]
mov r14d, dword [rsp + 0x30]
cmp eax, 1
je 0x1403ad7dc
cmp eax, dword [rdi + 0x28]
jle 0x1403ad804
mov dword [rdi + 0x28], eax
jmp 0x1403ad800
mov rax, qword [r10 + 8]
mov r13d, dword [rsp + 0x38]
test byte [rax + 4], 0x20
je 0x1403ad707
mov r14, qword [rsp + 0x50]
mov rbp, r15
add r14, 8
mov ebx, r15d
nop
cmp ebx, r13d
jge 0x1403ad630
mov rdx, qword [r14]
mov rcx, rdi
call fcn.140349e40
inc ebx
add r14, 0x20
mov rbp, rax
test rax, rax
je 0x1403ad610
jmp 0x1403ad63c
test rbp, rbp
jne 0x1403ad63c
mov rax, qword [rdi]
mov rbp, qword [rax + 0x10]
mov ebx, dword [rsp + 0xb0]
test ebx, ebx
jne 0x1403ad662
mov rax, qword [rsp + 0xc0]
cmp dword [rax + 0x24], r15d
je 0x1403ad662
inc dword [rdi + 0x38]
mov ebx, dword [rdi + 0x38]
mov dword [rsp + 0xb0], ebx
movsxd rcx, dword [rsi + 0x90]
cmp dword [rsi + 0x94], ecx
jg 0x1403ad68d
xor r9d, r9d
mov dword [rsp + 0x20], r15d
mov r8d, ebx
mov edx, 0x55
mov rcx, rsi
call fcn.140301d30
mov ecx, eax
jmp 0x1403ad6b9
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], 0x55
mov dword [rax + 4], ebx
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov rax, qword [rsi]
cmp byte [rax + 0x67], r15b
jne 0x1403ad70e
test ecx, ecx
jns 0x1403ad6ce
mov ecx, dword [rsi + 0x90]
dec ecx
movsxd rax, ecx
shl rax, 5
add rax, qword [rsi + 0x88]
cmp byte [rax + 1], r15b
je 0x1403ad6f8
mov r9d, 0xfffffffe
mov r8, rbp
mov rdx, rax
mov rcx, rsi
call fcn.1403af6e0
jmp 0x1403ad70e
test rbp, rbp
je 0x1403ad70e
mov qword [rax + 0x10], rbp
mov byte [rax + 1], 0xfe
jmp 0x1403ad70e
mov ebx, dword [rsp + 0xb0]
mov rbp, qword [rsp + 0xc0]
mov r14d, dword [rsp + 0x30]
movsxd rdx, dword [rsi + 0x90]
mov ecx, dword [rbp + 0x20]
add ecx, dword [rbp + 0xc]
add ecx, r14d
cmp dword [rsi + 0x94], edx
jg 0x1403ad74c
mov dword [rsp + 0x20], ecx
mov r9d, r12d
mov rcx, rsi
xor r8d, r8d
mov edx, 0xa2
call fcn.140301d30
jmp 0x1403ad779
lea eax, [rdx + 1]
mov dword [rsi + 0x90], eax
mov rax, rdx
shl rax, 5
add rax, qword [rsi + 0x88]
mov qword [rax], 0xa2
mov dword [rax + 8], r12d
mov dword [rax + 0xc], ecx
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
mov rcx, qword [rsi]
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rdx + 8]
cmp byte [rcx + 0x67], r15b
je 0x1403ad798
test byte [rdx + 4], 0x10
je 0x1403ad7b4
call fcn.140342e80
jmp 0x1403ad7b4
movsxd rcx, dword [rsi + 0x90]
mov rax, qword [rsi + 0x88]
shl rcx, 5
mov byte [rcx + rax - 0x1f], 0xf9
mov qword [rcx + rax - 0x10], rdx
movsxd rax, dword [rsi + 0x90]
test eax, eax
jle 0x1403ad7d6
mov rcx, rax
movzx edx, r13b
mov rax, qword [rsi + 0x88]
shl rcx, 5
mov word [rcx + rax - 0x1e], dx
cmp r13d, 1
jne 0x1403ad7f6
test r12d, r12d
je 0x1403ad804
movzx eax, byte [rdi + 0x1f]
cmp al, 8
jae 0x1403ad804
mov dword [rdi + rax*4 + 0xe8], r12d
inc byte [rdi + 0x1f]
jmp 0x1403ad804
cmp r13d, dword [rdi + 0x28]
jle 0x1403ad804
mov dword [rdi + 0x28], r13d
mov dword [rdi + 0x2c], r12d
mov edx, dword [rsp + 0x3c]
test edx, edx
je 0x1403ad837
mov rcx, qword [rsi + 0x18]
not edx
mov eax, dword [rcx + 0x48]
add eax, dword [rcx + 0x44]
jns 0x1403ad827
mov r8d, edx
mov rdx, rsi
call fcn.140322800
jmp 0x1403ad837
mov rcx, qword [rcx + 0x50]
mov eax, dword [rsi + 0x90]
movsxd rdx, edx
mov dword [rcx + rdx*4], eax
mov r10, qword [rsp + 0x48]
inc r14d
mov r11d, dword [rsp + 0xb8]
add r10, 0x20
mov dword [rsp + 0x30], r14d
mov qword [rsp + 0x48], r10
cmp r14d, dword [rbp + 0x30]
jl 0x1403ad150
test ebx, ebx
jne 0x1403ad86c
lea r14, [rdi + 0x10]
jmp 0x1403ad0f1
lea rax, [rbp + 0x24]
jmp 0x1403ad10d
lea eax, [rcx + 1]
mov dword [rsi + 0x90], eax
mov rax, rcx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax], reloc.SinoSPE.dll_Ordinal_16
mov dword [rax + 4], ebx
mov qword [rax + 8], r15
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], r15
lea r14, [rdi + 0x10]
mov r12, qword [rbp + 0x18]
cmp dword [r13], r15d
jle 0x1403ad95c
add r12, 8
nop word [rax + rax]
mov ebp, dword [rbp + 0xc]
add ebp, r15d
cmp qword [r14], 0
je 0x1403ad943
mov rbx, qword [r12]
mov r8d, ebp
mov rdx, rbx
mov rcx, rdi
call fcn.140348710
mov r8d, eax
cmp eax, ebp
je 0x1403ad943
test rbx, rbx
je 0x1403ad933
nop word [rax + rax]
mov ecx, dword [rbx + 4]
test ecx, 0x82000
je 0x1403ad91e
bt ecx, 0x13
jae 0x1403ad90b
mov rax, qword [rbx + 0x20]
mov rbx, qword [rax + 8]
jmp 0x1403ad914
cmp byte [rbx], 0x71
jne 0x1403ad919
mov rbx, qword [rbx + 0x10]
test rbx, rbx
jne 0x1403ad8f0
test rbx, rbx
je 0x1403ad933
test dword [rbx + 4], 0x400000
jne 0x1403ad92c
cmp byte [rbx], 0xb0
jne 0x1403ad933
mov edx, 0x50
jmp 0x1403ad938
mov edx, 0x51
mov rcx, qword [r14]
mov r9d, ebp
call fcn.1403858c0
mov rbp, qword [rsp + 0xc0]
inc r15d
add r12, 0x18
cmp r15d, dword [r13]
jl 0x1403ad8c0
movsxd rdx, dword [rsp + 0x40]
mov r13, qword [rsp + 0x68]
mov r12, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
mov byte [rbp], 0
test edx, edx
je 0x1403ad9bd
mov ecx, dword [rsi + 0x90]
lea eax, [rcx - 1]
cmp edx, eax
jne 0x1403ad99a
mov dword [rsi + 0x90], eax
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov rax, qword [rsi]
cmp byte [rax + 0x67], 0
je 0x1403ad9ac
lea rax, [0x1404b8858]
jmp 0x1403ad9ba
mov rax, rdx
shl rax, 5
add rax, qword [rsi + 0x88]
mov dword [rax + 8], ecx
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret