Function at 0x1400dec20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x328
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov rbx, r8
mov rdi, rdx
mov r14, rcx
test byte [r8 + 0x18], 4
jne 0x1400dec78
lea rdx, str.CF_FILECONTENTS_media_not_supported
lea rcx, [0x14023ca20]
call fcn.140002fd0
xor al, al
jmp 0x1400df216
call fcn.1400dde90
xor r15d, r15d
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], r15
call fcn.1400fac20
mov word [rsp + 0xa0], ax
mov qword [rsp + 0xa8], r15
mov dword [rsp + 0xb0], 1
mov dword [rsp + 0xb4], 0xffffffff
mov dword [rsp + 0xb8], 1
mov dword [rsp + 0x88], r15d
mov qword [rsp + 0x98], r15
mov rax, qword [rdi]
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0xa0]
mov rcx, rdi
call qword [rax + 0x18]
test eax, eax
jne 0x1400ded24
lea ecx, [rax + 0x18]
call fcn.14011ecf0
mov qword [rsp + 0x388], rax
test rax, rax
je 0x1400ded1c
mov rdx, qword [rsp + 0x90]
mov rcx, rax
call fcn.1400dd8b0
mov r13, rax
jmp 0x1400ded1f
mov r13, r15
jmp 0x1400dedeb
call fcn.1400fab60
mov word [rsp + 0xa0], ax
mov rax, qword [rdi]
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0xa0]
mov rcx, rdi
call qword [rax + 0x18]
mov ebx, eax
test eax, eax
je 0x1400dedb4
mov byte [rsp + 0x110], 0
or r9d, 0xffffffff
lea r8, str.GetData_CF_FILEDESCRIPTOR_W__
mov edx, 0x100
lea rcx, [rsp + 0x110]
call fcn.14007b3b0
mov edx, ebx
lea rcx, [rsp + 0x110]
call fcn.14007f910
lea rcx, [rsp + 0x214]
lea rdx, [rsp + 0x110]
mov r8d, 0x104
call fcn.14011e9b0
lea rdx, [0x14020b6e8]
lea rcx, [rsp + 0x214]
call fcn.14011f050
int3
mov ecx, 0x18
call fcn.14011ecf0
mov qword [rsp + 0x388], rax
test rax, rax
je 0x1400dede0
mov rdx, qword [rsp + 0x90]
mov rcx, rax
call fcn.1400dda10
mov r13, rax
jmp 0x1400dede3
mov r13, r15
mov rbx, qword [rsp + 0x380]
mov r12d, r15d
mov rax, qword [r13 + 8]
cmp dword [rax], r15d
jbe 0x1400df10f
nop
nop
mov rax, qword [r13]
mov edx, r12d
mov rcx, r13
call qword [rax + reloc.WS2_32.dll_htonl]
mov rdi, rax
mov qword [rsp + 0x388], rax
mov dword [rbx + 0x14], r12d
mov ecx, 0x88
call fcn.14011ecf0
mov rbx, rax
mov qword [rsp + 0x80], rax
test rax, rax
je 0x1400deeef
mov rdx, qword [rdi + 8]
mov esi, dword [rdx + 0x3c]
shl rsi, 0x20
mov ecx, dword [rdx + 0x38]
add rsi, rcx
mov ebp, dword [rdx + 0x34]
shl rbp, 0x20
mov eax, dword [rdx + 0x30]
add rbp, rax
mov r14d, dword [rdx + 0x2c]
shl r14, 0x20
mov eax, dword [rdx + 0x28]
add r14, rax
mov r15d, dword [rdx + 0x40]
shl r15, 0x20
mov eax, dword [rdx + 0x44]
add r15, rax
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rdi, rax
cmp byte [rax], 0
je 0x1400dee98
mov rcx, rax
cmp byte [rcx], 0x5c
jne 0x1400dee8f
mov byte [rcx], 0x2f
add rcx, 1
cmp byte [rcx], 0
jne 0x1400dee87
mov rcx, qword [rsp + 0x388]
mov rax, qword [rcx + 8]
mov ecx, dword [rax + 0x24]
call fcn.1400efac0
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], eax
mov r9, rdi
mov r8, qword [rsp + 0x380]
mov rdx, qword [rsp + 0x378]
mov rcx, rbx
call fcn.1400fcd10
mov rbp, rax
mov rdi, qword [rsp + 0x388]
xor r15d, r15d
jmp 0x1400deef2
mov rbp, r15
mov qword [rsp + 0x80], rbp
mov rax, qword [rdi + 8]
mov ecx, dword [rax + 0x24]
call fcn.1400efb20
mov r11, rax
mov qword [rsp + 0xc0], rax
lea rbx, [rbp + 0x40]
mov rdx, qword [rbx + 8]
test rdx, rdx
jne 0x1400def23
mov rcx, r15
jmp 0x1400def2e
mov rcx, qword [rbx + 0x10]
sub rcx, rdx
sar rcx, 3
test rdx, rdx
je 0x1400def57
mov rax, qword [rbx + 0x18]
sub rax, rdx
sar rax, 3
cmp rcx, rax
jae 0x1400def57
mov rax, qword [rbx + 0x10]
mov qword [rax], r11
add rax, 8
mov qword [rbx + 0x10], rax
jmp 0x1400deff7
mov rdi, qword [rbx + 0x10]
cmp rdx, rdi
jbe 0x1400def65
call fcn.14011ef50
mov qword [rsp + 0xd0], rbx
mov qword [rsp + 0xd8], rdi
mov rsi, qword [rbx + 8]
test rsi, rsi
je 0x1400defa1
mov rcx, qword [rbx + 0x10]
mov rax, rcx
sub rax, rsi
sar rax, 3
je 0x1400defa1
cmp rsi, rcx
jbe 0x1400def98
call fcn.14011ef50
sub rdi, rsi
sar rdi, 3
jmp 0x1400defa4
mov rdi, r15
movaps xmm0, xmmword [rsp + 0xd0]
movdqa xmmword [rsp + 0xe0], xmm0
lea r9, [rsp + 0xc0]
mov r8d, 1
lea rdx, [rsp + 0xe0]
mov rcx, rbx
call fcn.14007e6c0
mov rsi, qword [rbx + 8]
cmp rsi, qword [rbx + 0x10]
jbe 0x1400defe2
call fcn.14011ef50
lea rax, [rsi + rdi*8]
cmp rax, qword [rbx + 0x10]
ja 0x1400deff2
cmp rax, qword [rbx + 8]
jae 0x1400deff7
call fcn.14011ef50
mov rdx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
test rbx, rbx
je 0x1400df032
mov rcx, rdx
sub rcx, rbx
sar rcx, 3
mov rax, qword [rsp + 0x78]
sub rax, rbx
sar rax, 3
cmp rcx, rax
jae 0x1400df032
mov qword [rdx], rbp
lea rax, [rdx + 8]
mov qword [rsp + 0x70], rax
jmp 0x1400df0e1
mov rdi, rdx
cmp rbx, rdx
jbe 0x1400df049
call fcn.14011ef50
mov rdx, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x58], rdi
test rbx, rbx
je 0x1400df07c
mov rax, rdx
sub rax, rbx
sar rax, 3
je 0x1400df07c
cmp rbx, rdx
jbe 0x1400df073
call fcn.14011ef50
sub rdi, rbx
sar rdi, 3
jmp 0x1400df07f
mov rdi, r15
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x100], xmm0
lea r9, [rsp + 0x80]
mov r8d, 1
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x60]
call fcn.14007e6c0
mov r11, qword [rsp + 0x68]
mov rbx, r11
mov rax, qword [rsp + 0x70]
cmp r11, rax
jbe 0x1400df0ce
call fcn.14011ef50
mov rax, qword [rsp + 0x70]
mov r11, qword [rsp + 0x68]
lea rcx, [rbx + rdi*8]
cmp rcx, rax
ja 0x1400df0dc
cmp rcx, r11
jae 0x1400df0e1
call fcn.14011ef50
mov rcx, qword [rsp + 0x388]
call fcn.14011e950
add r12d, 1
mov rax, qword [r13 + 8]
cmp r12d, dword [rax]
mov rbx, qword [rsp + 0x380]
jb 0x1400dee00
mov r14, qword [rsp + 0x370]
mov rax, qword [r13]
mov edx, 1
mov rcx, r13
call qword [rax]
lea r12, [r14 + 0x20]
mov qword [rsp + 0x380], r12
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
lea rsi, [r14 + 0x48]
mov rbx, qword [rsi + 8]
cmp rbx, qword [rsi + 0x10]
jbe 0x1400df146
call fcn.14011ef50
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x58], rbx
movaps xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov rdi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsi + 0x10]
cmp qword [rsi + 8], rbp
jbe 0x1400df174
call fcn.14011ef50
test rdi, rdi
je 0x1400df17e
cmp rdi, rsi
je 0x1400df183
call fcn.14011ef50
cmp rbx, rbp
je 0x1400df1c0
test rdi, rdi
jne 0x1400df192
call fcn.14011ef50
cmp rbx, qword [rdi + 0x10]
jb 0x1400df19d
call fcn.14011ef50
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400df1af
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
cmp rbx, qword [rdi + 0x10]
jb 0x1400df1ba
call fcn.14011ef50
add rbx, 8
jmp 0x1400df165
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.1400de010
mov rcx, qword [r14 + 0x18]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.KERNEL32.dll_SetEvent]
nop
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
cmp dword [rsp + 0x88], 0
je 0x1400df205
lea rcx, [rsp + 0x88]
call qword [sym.imp.ole32.dll_ReleaseStgMedium]
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400df214
call fcn.14011e950
mov al, 1
add rsp, 0x328
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret