Function at 0x140015280
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xd68
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xcd0], xmm6
mov r13, rdx
mov qword [rbp + 0xc40], rcx
mov rdx, qword [0x14003a028]
test rdx, rdx
je 0x140016bac
mov rax, qword [0x14003a020]
mov rcx, rdx
shl rcx, 6
add rcx, rax
xor r15d, r15d
mov r8, rax
mov rdi, qword [rbp + 0xc40]
mov r10, qword [r8 + 0x28]
mov r9, qword [r8 + 0x30]
mov r12, qword [r8 + 0x38]
add r8, 0x40
shl r9, 4
nop
test r9, r9
je 0x140015320
mov r11, r10
add r10, 0x10
mov rsi, qword [r11]
add rsi, r12
add r9, 0xfffffffffffffff0
cmp rsi, rdi
ja 0x1400152f0
add rsi, qword [r11 + 8]
cmp rsi, rdi
jbe 0x1400152f0
jmp 0x14001532d
inc r15
cmp r8, rcx
jne 0x1400152da
jmp 0x140016bac
mov rdi, qword [0x14003a040]
test rdi, rdi
je 0x140015369
mov r14, qword [0x14003a038]
imul rcx, rdi, 0x230
xor r8d, r8d
xor ebx, ebx
nop dword [rax]
cmp qword [r14 + r8], r15
je 0x140015587
inc rbx
add r8, 0x230
cmp rcx, r8
jne 0x140015350
cmp rdx, r15
jbe 0x140018d6b
mov rcx, r15
shl rcx, 6
mov rdx, qword [rax + rcx + 8]
mov r8, qword [rax + rcx + 0x10]
lea rcx, [rbp + 0x8c0]
call fcn.140014d30
test byte [rbp + 0x8c0], 1
je 0x140016bac
mov rsi, qword [rbp + 0x8c8]
mov r14, qword [rbp + 0x8d0]
mov rbx, qword [rbp + 0x8d8]
mov qword [rbp + 0x738], 0
mov qword [rbp + 0x740], 8
xorps xmm0, xmm0
movups xmmword [rbp + 0x748], xmm0
mov qword [rbp + 0x758], 8
mov qword [rbp + 0x760], 0
cmp rbx, 0x40
jb 0x140016b90
cmp word [r14], 0x5a4d
jne 0x140016b90
mov eax, dword [r14 + 0x3c]
mov rcx, rbx
sub rcx, rax
setb dl
cmp rcx, 0x88
setb cl
or cl, dl
jne 0x140016b90
cmp dword [r14 + rax], 0x4550
jne 0x140016b90
cmp word [r14 + rax + 0x18], 0x20b
jne 0x140016b90
movzx ecx, word [r14 + rax + 0x14]
cmp rcx, 0x70
jb 0x140016b90
lea rdx, [rax + 0x88]
add rcx, 0xffffffffffffff90
mov r8, rbx
sub r8, rdx
cmp r8, rcx
jb 0x140016b90
mov r8d, dword [r14 + rax + 0x84]
shl r8, 3
cmp r8, rcx
ja 0x140016b90
add rcx, rdx
movzx r10d, word [r14 + rax + 6]
lea edx, [r10*8]
lea rdx, [rdx + rdx*4]
mov r8, rbx
sub r8, rcx
setb r9b
cmp r8, rdx
setb dl
or dl, r9b
add rcx, r14
xor r11d, r11d
test dl, dl
cmove r11, rcx
jne 0x140016b90
mov r8d, dword [r14 + rax + 0xc]
test r8, r8
je 0x1400161b0
mov rcx, rbx
sub rcx, r8
jb 0x140016b90
mov r9d, dword [r14 + rax + 0x10]
lea rdx, [r9 + r9]
lea rdx, [rdx + rdx*8]
cmp rcx, rdx
jb 0x140016b90
add rdx, r8
mov rcx, rbx
sub rcx, rdx
cmp rcx, 4
jb 0x140016b90
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0xc60], rdx
mov ecx, dword [r14 + rdx]
mov qword [rbp + 0xc68], rcx
mov rax, qword [r14 + rax + 0x30]
mov qword [rbp + 0xc70], rax
mov qword [rbp + 0x8c0], 0
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov qword [rbp + 0xc88], r9
test r9, r9
je 0x140018045
add r8, r14
mov eax, 8
mov qword [rbp + 0xcc8], 0
xor esi, esi
mov qword [rbp + 0xca0], r10
mov qword [rbp + 0xc98], r11
mov r9, qword [rbp + 0xc88]
mov qword [rbp + 0xc58], r8
jmp 0x14001682e
test rbx, rbx
mov qword [rbp + 0xb98], r13
je 0x140015626
mov r15, r14
imul r14, rbx, 0x230
lea rsi, [r15 + r14]
lea rcx, [rbp - 0x58]
mov r8d, 0x230
mov rdx, rsi
call sub.msvcrt.dll_memcpy
lea rdx, [r15 + r14]
add rdx, 0x230
not rbx
add rbx, rdi
imul r8, rbx, 0x230
mov rcx, rsi
call sub.msvcrt.dll_memmove
lea rsi, [rdi - 1]
mov qword [0x14003a040], rsi
cmp rsi, qword [0x14003a030]
jne 0x1400155f0
call fcn.1400226f0
mov r14, qword [0x14003a038]
lea rcx, [r14 + 0x230]
imul r8, rsi, 0x230
mov rdx, r14
call sub.msvcrt.dll_memmove
lea rdx, [rbp - 0x58]
mov r8d, 0x230
mov rcx, r14
call sub.msvcrt.dll_memcpy
mov qword [0x14003a040], rdi
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov rax, qword [rbp + 0x8c8]
mov qword [rbp + 0x510], rax
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0x518], rax
xor esi, esi
xor edi, edi
xor ecx, ecx
xor eax, eax
lea r9, [rbp + 0x858]
movabs r8, 0x8000000000000000
mov rdx, qword [rbp + 0x510]
mov qword [r9], rdx
mov rdx, qword [rbp + 0x518]
mov qword [r9 + 8], rdx
mov qword [rbp + 0x850], rax
mov qword [rbp + 0x868], r14
mov qword [rbp + 0x870], rbx
mov qword [rbp + 0x878], r11
mov qword [rbp + 0x880], r10
mov qword [rbp + 0x888], rcx
mov qword [rbp + 0x890], rbx
mov qword [rbp + 0x898], rdi
mov qword [rbp + 0x8a0], rsi
mov qword [rbp + 0x7a0], r8
lea rdx, [0x141a9a5e8]
lea rsi, [rbp + 0x850]
mov r8d, 0xd
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcc8], rdx
mov edi, 1
cmove rax, rdi
mov qword [rbp + 0xcc0], rax
lea rdx, [0x141a9a5f5]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb0], rdx
cmove rax, rdi
mov qword [rbp + 0xca0], rax
lea rdx, [0x141a9a600]
mov r8d, 0xe
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc98], rdx
cmove rax, rdi
mov qword [rbp + 0xc88], rax
lea rdx, [0x141a9a61d]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc70], rdx
cmove rax, rdi
mov qword [rbp + 0xc58], rax
lea rdx, [0x141a9a628]
mov r8d, 0xb
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc60], rdx
cmove rax, rdi
mov qword [rbp + 0xc68], rax
lea rdx, [0x141a9a633]
mov r8d, 0xf
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb8], rdx
cmove rax, rdi
mov qword [rbp + 0xc78], rax
lea rdx, [0x141a9a677]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc48], rdx
cmove rax, rdi
mov qword [rbp + 0xc80], rax
lea rdx, [0x141a9a681]
mov r8d, 0x12
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc90], rdx
cmove rax, rdi
mov qword [rbp + 0xca8], rax
lea rdx, [0x141a9a6a2]
mov r8d, 0xc
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc50], rdx
cmove rax, rdi
mov qword [rbp + 0xc08], rax
lea rdx, [0x141a9a642]
mov r8d, 0xa
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc10], rdx
cmove rax, rdi
mov qword [rbp + 0xc00], rax
lea rdx, [0x141a9a64c]
mov r8d, 0xf
mov rcx, rsi
call fcn.1400194b0
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xbc8], rdx
cmove rax, rdi
mov qword [rbp + 0xc38], rax
lea rdx, [0x141a9a65b]
mov r8d, 0xd
mov rcx, rsi
call fcn.1400194b0
mov r13, rax
mov rsi, rdx
lea rdx, [0x141a9a668]
mov r8d, 0xf
lea rcx, [rbp + 0x850]
call fcn.1400194b0
test r13, r13
cmove rsi, r13
cmove r13, rdi
test rax, rax
cmovne rdi, rax
cmove rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a0], xmm0
mov rax, qword [rbp + 0xcc0]
mov qword [rbp + 0x8d0], rax
mov rax, qword [rbp + 0xcc8]
mov qword [rbp + 0x8d8], rax
mov rax, qword [rbp + 0xca0]
mov qword [rbp + 0x8e0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rbp + 0x8e8], rax
mov rax, qword [rbp + 0xc88]
mov qword [rbp + 0x8f0], rax
mov rax, qword [rbp + 0xc98]
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0xc58]
mov qword [rbp + 0x900], rax
mov rax, qword [rbp + 0xc70]
mov qword [rbp + 0x908], rax
mov rax, qword [rbp + 0xc68]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0xc60]
mov qword [rbp + 0x918], rax
mov rax, qword [rbp + 0xc78]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0xcb8]
mov qword [rbp + 0x928], rax
mov rax, qword [rbp + 0xc80]
mov qword [rbp + 0x930], rax
mov rax, qword [rbp + 0xc48]
mov qword [rbp + 0x938], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0x940], rax
mov rax, qword [rbp + 0xc90]
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x950], rax
mov rax, qword [rbp + 0xc50]
mov qword [rbp + 0x958], rax
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x960], rax
mov rax, qword [rbp + 0xc10]
mov qword [rbp + 0x968], rax
mov rax, qword [rbp + 0xc38]
mov qword [rbp + 0x970], rax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0x978], rax
mov qword [rbp + 0x980], r13
mov qword [rbp + 0x988], rsi
mov qword [rbp + 0x990], rdi
mov qword [rbp + 0x998], rdx
mov qword [rbp + 0x9b8], 0
mov byte [rbp + 0x9c0], 0
mov qword [rbp + 0x8c0], 1
mov qword [rbp + 0x8c8], 1
movzx eax, byte [0x141aa2030]
mov ecx, 0x108
call fcn.140034ef0
test rax, rax
je 0x140018e82
mov r13, rax
lea rdx, [rbp + 0x8c0]
mov r8d, 0x108
mov rcx, rax
call sub.msvcrt.dll_memcpy
mov qword [rbp + 0xb90], r13
mov qword [rbp + 0xb70], 0
mov qword [rbp + 0xb78], 8
mov qword [rbp + 0xb80], 0
mov rax, qword [r13 + 0x30]
mov rcx, qword [r13 + 0x38]
mov qword [rbp + 0xc88], rax
mov qword [rbp + 0x8a8], rax
mov qword [rbp + 0x8b0], rcx
mov qword [rbp + 0x8b8], 0
mov qword [rbp + 0xca0], rcx
test rcx, rcx
mov qword [rbp + 0xc98], r13
je 0x140016a28
mov edi, 8
mov qword [rbp + 0xcc8], 0
mov eax, 8
mov qword [rbp + 0xcb0], rax
xor esi, esi
mov r13, qword [rbp + 0xca0]
jmp 0x140016747
mov rax, qword [rbp + 0xb78]
mov qword [rbp + 0xcb0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rax + rdi - 8], r13
mov rcx, qword [rbp + 0xcc0]
mov qword [rax + rdi], rcx
mov rcx, qword [rbp + 0xcc8]
inc rcx
mov qword [rbp + 0xcc8], rcx
mov qword [rbp + 0xb80], rcx
mov r13, qword [rbp + 0x8b0]
add rdi, 0x10
test r13, r13
je 0x1400168c3
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0x8a8]
mov r8, rsi
call fcn.140019730
cmp byte [rbp + 0x8e9], 3
je 0x140016b0d
sub r13, qword [rbp + 0x8b0]
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0xcc0], rax
mov rsi, r13
add rsi, qword [rbp + 0x8b8]
mov r13, qword [rbp + 0x8e0]
mov qword [rbp + 0x8b8], rsi
mov rax, qword [rbp + 0xcc8]
cmp rax, qword [rbp + 0xb70]
jne 0x140016704
lea rcx, [rbp + 0xb70]
call fcn.1400193f0
jmp 0x1400166f6
mov rax, qword [rbp + 0x8c8]
add rdi, qword [rbp + 0xc70]
add r13, rdi
mov rdx, qword [rbp + 0xcc8]
mov rcx, rdx
shl rcx, 4
mov qword [rax + rcx], r13
mov r8, qword [rbp + 0xcb0]
mov qword [rax + rcx + 8], r8
inc rdx
mov qword [rbp + 0xcc8], rdx
mov qword [rbp + 0x8d0], rdx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
mov r8, qword [rbp + 0xc58]
mov r9, qword [rbp + 0xc88]
mov rdi, qword [rbp + 0xcc0]
add rsi, rdi
inc rsi
cmp rsi, r9
jae 0x140016965
lea rcx, [rsi + rsi*8]
movzx edi, byte [r8 + rcx*2 + 0x11]
movzx edx, word [r8 + rcx*2 + 0xe]
and edx, 0x30
cmp dx, 0x20
jne 0x14001681f
lea r13, [r8 + rcx*2]
movzx edx, word [r13 + 0xc]
cmp edx, 0xfeff
movsx ecx, dx
cmovb ecx, edx
test ecx, ecx
jle 0x14001681f
mov qword [rbp + 0xcc0], rdi
mov edx, ecx
dec rdx
lea rcx, [rdx + rdx*4]
lea rcx, [r11 + rcx*8]
cmp rdx, r10
mov edx, 0x1d
cmovae rcx, rdx
jae 0x140018000
test rcx, rcx
je 0x140018000
mov qword [rbp + 0xcb0], r13
mov edi, dword [r13 + 8]
mov r13d, dword [rcx + 0xc]
mov rcx, qword [rbp + 0xcc8]
cmp rcx, qword [rbp + 0x8c0]
jne 0x1400167c3
lea rcx, [rbp + 0x8c0]
call fcn.1400193f0
jmp 0x1400167bc
cmp qword [rbp + 0xcc8], 2
mov r13, qword [rbp + 0xc98]
jb 0x140016a28
mov rcx, qword [rbp + 0xb78]
cmp qword [rbp + 0xcc8], 0x15
jae 0x140016a15
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r13, qword [rbp + 0xc98]
jmp 0x14001692e
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x140016a28
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x14001691a
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x140016910
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x140016941
add r10, rcx
jmp 0x140016913
cmp qword [rbp + 0xcc8], 2
jb 0x140018045
mov rcx, qword [rbp + 0x8c8]
cmp qword [rbp + 0xcc8], 0x15
jae 0x14001802b
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
jmp 0x1400169de
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x140018045
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x1400169ca
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x1400169b2
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x1400169f1
add r10, rcx
jmp 0x1400169b5
mov rdx, qword [rbp + 0xcc8]
call fcn.1400199e0
mov r13, qword [rbp + 0xc98]
mov qword [rbp + 0xc20], 0
mov qword [rbp + 0xc28], 8
mov qword [rbp + 0xc30], 0
mov qword [rbp + 0xbe0], 0
mov qword [rbp + 0xbe8], 8
mov qword [rbp + 0xbf0], 0
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rbp + 0xb08], xmm0
mov qword [rbp + 0xb18], 0
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0xb08]
call fcn.140019b00
mov rax, qword [rbp + 0x8c0]
cmp rax, 3
jne 0x140016bc7
mov rcx, r13
add rcx, 0x10
mov qword [rbp + 0xcc8], rcx
lea rdi, [rbp + 0x8d8]
mov rcx, qword [r13 + 0xd0]
mov qword [rbp + 0xc60], rcx
mov rcx, qword [r13 + 0xd8]
mov qword [rbp + 0xc70], rcx
movzx ecx, byte [r13 + 0x100]
mov byte [rbp + 0xc68], cl
mov rcx, qword [r13 + 0x20]
mov qword [rbp + 0xc58], rcx
mov rcx, qword [r13 + 0x28]
mov qword [rbp + 0xcb0], rcx
jmp 0x140016c49
cmp qword [rbp + 0x8c0], 0
je 0x14001801f
mov r8, qword [rbp + 0x8c8]
mov rcx, qword [0x141aa20b0]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rbp + 0xc18]
jmp 0x140016b90
mov rdx, qword [rbp + 0xcc8]
call fcn.140019330
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea rcx, [rbp + 0x8c8]
mov rax, qword [rbp + 0x8c0]
movups xmm0, xmmword [rcx]
movaps xmmword [rbp + 0x510], xmm0
mov rcx, rax
neg rcx
mov rsi, qword [rbp + 0xc18]
mov rdi, qword [rbp + 0xc60]
jo 0x140016b90
mov rsi, qword [rbp + 0xc68]
add rsi, rdi
mov rcx, r14
jmp 0x1400161f8
lea r8, [0x141a9c068]
mov rcx, r15
call fcn.14000277f