Function at 0x140002fb0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
push r12
push r13
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov rax, qword [0x140034040]
xor rax, rsp
mov qword [rbp + 0x98], rax
xor r13d, r13d
xorps xmm0, xmm0
cmp dword [0x140035d70], r13d
mov esi, ecx
mov r12d, r13d
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
mov qword [rbp + 0x70], r13
movups xmmword [rbp + 0x78], xmm0
je 0x14000300c
lea eax, [r13 + 1]
jmp 0x1400036e2
mov rax, qword [0x140035df0]
mov qword [rsp + 0x1d0], rbx
mov qword [rsp + 0x1d8], rdi
test rax, rax
jne 0x140003041
lea edx, [rax + 1]
mov ecx, 0x84c05e40
call fcn.1400081d0
mov qword [0x140035df0], rax
test rax, rax
je 0x140003098
mov rbx, qword [0x140035de8]
mov dword [rbp + 0x10], 0xc3050f
test rbx, rbx
jne 0x1400030ad
lea rbx, [rax + 0x1000]
lea rdi, [rbx + 0x100000]
cmp rbx, rdi
jae 0x140003091
nop word [rax + rax]
mov r8d, 3
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_RtlCompareMemory]
cmp rax, 3
je 0x1400030a1
inc rbx
cmp rbx, rdi
jb 0x140003070
mov qword [0x140035de8], r13
mov qword [0x140035d88], r13
jmp 0x1400030f0
mov qword [0x140035de8], rbx
test rbx, rbx
je 0x140003098
add rbx, 0xfc1
lea rdi, [rbx + 0x1000]
cmp rbx, rdi
jae 0x1400030e1
mov r8d, 3
lea rdx, [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_RtlCompareMemory]
cmp rax, 3
je 0x1400030e4
inc rbx
cmp rbx, rdi
jb 0x1400030c0
mov rbx, r13
mov qword [0x140035d88], rbx
test rbx, rbx
jne 0x14000311d
xor r9d, r9d
mov qword [rsp + 0x68], r13
lea rax, [rsp + 0x68]
lea rcx, [0x14002f670]
mov qword [rsp + 0x20], rax
lea edx, [r9 + 3]
lea r8d, [r9 + 1]
call fcn.140008ce0
mov qword [0x140035d88], rax
test esi, esi
je 0x14000315f
xor edx, edx
mov ecx, 0x84c05e40
call fcn.1400081d0
mov rdi, rax
test rax, rax
je 0x140003239
mov eax, 0x5a4d
cmp word [rdi], ax
jne 0x140003239
movsxd rbx, dword [rdi + 0x3c]
add rbx, rdi
cmp dword [rbx], 0x4550
jne 0x140003239
jmp 0x140003424
movzx eax, byte [rsp + 0x60]
lea rdx, [rbp + 0x20]
mov r9d, 0x24
mov byte [rsp + 0x28], al
lea rcx, [rsp + 0x70]
mov dword [rbp + 0x20], 0x110a9777
mov dword [rbp + 0x24], 0x5d53f34c
mov dword [rbp + 0x28], 0x323ac13c
lea r8d, [r9 + 0x26]
mov dword [rbp + 0x2c], 0xd8def1d4
mov dword [rbp + 0x30], 0xed4d203f
mov dword [rbp + 0x34], 0x206316f9
mov dword [rbp + 0x38], 0x471213e9
mov dword [rbp + 0x3c], 0x6a2385dc
mov dword [rbp + 0x40], 0xba1b62a7
mov dword [rbp + 0x44], 0x674cd806
mov dword [rbp + 0x48], 0x6007ebaf
mov dword [rbp + 0x4c], 0xff55b84b
mov dword [rbp + 0x50], 0xea01217
mov dword [rbp + 0x54], 0x921a9647
mov dword [rbp + 0x58], 0x1315e5d5
mov dword [rbp + 0x5c], 0x8fd8bdac
mov dword [rbp + 0x60], 0x442209eb
mov word [rsp + 0x20], 0xc
call fcn.140003a40
lea rax, [rsp + 0x70]
mov qword [rsp + 0x68], rax
mov rax, qword [0x140035de0]
test rax, rax
jne 0x140003240
xor edx, edx
mov ecx, 0x84c05e40
call fcn.1400081d0
mov edx, 0xfa2a9aa9
mov rcx, rax
call fcn.140008510
mov qword [0x140035de0], rax
test rax, rax
jne 0x140003240
xor eax, eax
jmp 0x1400036d2
mov rdx, qword [rsp + 0x68]
lea rcx, [rbp + 0x78]
call rax
mov dword [rsp + 0x50], r13d
lea rax, [rbp + 0x78]
mov qword [rsp + 0x48], r13
lea r9, [rbp + 0x88]
mov dword [rsp + 0x40], 0x60
lea r8, [rbp - 0x20]
mov dword [rsp + 0x38], 1
lea rcx, [rbp - 0x30]
xorps xmm0, xmm0
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], r13d
mov edx, 0x80100000
mov qword [rsp + 0x20], r13
mov dword [rbp - 0x20], 0x30
mov qword [rbp - 0x18], r13
mov dword [rbp - 8], 0x40
mov qword [rbp - 0x10], rax
movdqu xmmword [rbp], xmm0
movups xmmword [rbp + 0x88], xmm0
call fcn.140009763
test eax, eax
je 0x1400032ce
mov rax, qword [rbp - 0x30]
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140003677
mov rax, qword [rbp - 0x30]
lea rcx, [rbp - 0x28]
mov qword [rsp + 0x30], rax
xor r9d, r9d
mov dword [rsp + 0x28], 0x8000000
xor r8d, r8d
mov edx, 0xf0005
mov dword [rsp + 0x20], 2
call fcn.140009715
test eax, eax
jne 0x140003677
mov rcx, qword [rbp - 0x28]
lea rax, [rbp + 0x10]
mov dword [rsp + 0x48], 2
lea r8, [rbp - 0x40]
mov dword [rsp + 0x40], r13d
xor r9d, r9d
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r13
lea rdx, [r9 - 1]
mov qword [rbp + 0x10], r13
mov qword [rsp + 0x20], r13
call fcn.140009722
test eax, eax
jne 0x140003677
mov rbx, qword [rbp - 0x40]
mov eax, 0x5a4d
cmp word [rbx], ax
jne 0x140003677
movsxd rsi, dword [rbx + 0x3c]
add rsi, rbx
cmp dword [rsi], 0x4550
jne 0x140003677
mov eax, dword [rsi + 0x50]
lea r9, [rbp + 0x70]
xor r8d, r8d
mov dword [rsp + 0x28], 4
lea rdx, [rbp - 0x38]
mov qword [rbp + 0x70], rax
mov dword [rsp + 0x20], 0x1000
lea rcx, [r8 - 1]
call fcn.1400096c7
test eax, eax
jne 0x140003677
mov r8d, dword [rsi + 0x54]
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rbp - 0x38]
call fcn.14001ee70
movsxd rbx, dword [rbx + 0x3c]
mov edi, r13d
mov rcx, qword [rbp - 0x40]
add rbx, 0x11c
cmp r13w, word [rsi + 6]
jae 0x1400033fd
add rbx, rcx
mov eax, dword [rbx - 4]
test eax, eax
je 0x1400033ef
mov edx, dword [rbx]
mov r8d, eax
add rdx, rcx
mov ecx, dword [rbx - 8]
add rcx, qword [rbp - 0x38]
call fcn.14001ee70
mov rcx, qword [rbp - 0x40]
movzx eax, word [rsi + 6]
inc edi
add rbx, 0x28
cmp edi, eax
jb 0x1400033d0
mov rdi, qword [rbp - 0x38]
movsxd rbx, dword [rdi + 0x3c]
add rbx, rdi
test rcx, rcx
je 0x140003424
mov rdx, rcx
mov rcx, 0xffffffffffffffff
call fcn.14000972f
mov rdi, qword [rbp - 0x38]
mov qword [rbp - 0x40], r13
mov qword [rsp + 0x1e0], r14
mov rdx, rbx
mov rcx, rdi
mov qword [rsp + 0x1a0], r15
call fcn.1400018a0
test eax, eax
jne 0x14000365a
mov eax, dword [rbx + 0x88]
test eax, eax
je 0x140003667
mov esi, eax
add rsi, rdi
je 0x140003667
mov r15d, dword [rsi + 0x20]
mov r14d, r13d
add r15, rdi
cmp dword [rsi + 0x18], r12d
jbe 0x14000365a
nop dword [rax]
nop dword [rax + rax]
mov ecx, dword [rsi + 0x24]
add rcx, rdi
mov edx, r14d
mov r8d, dword [r15 + rdx*4]
movzx edx, word [rcx + rdx*2]
add r8, rdi
mov ecx, dword [rsi + 0x1c]
add rcx, rdi
mov ebx, dword [rcx + rdx*4]
mov rcx, 0xffffffffffffffff
add rbx, rdi
inc rcx
cmp byte [r8 + rcx], r12b
jne 0x1400034a7
dec rcx
mov rdx, r8
call fcn.140004290
not eax
cmp eax, 0x50b60c2e
ja 0x1400035b0
je 0x140003597
cmp eax, 0x2df8c40f
ja 0x140003554
je 0x14000353b
cmp eax, 0x1c7650a6
je 0x140003522
cmp eax, 0x1feeb616
je 0x140003509
cmp eax, 0x23cf603a
jne 0x14000364d
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035da8], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d9c], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d98], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d84], eax
jmp 0x140003649
cmp eax, 0x44ac5182
je 0x14000357f
cmp eax, 0x4f21bd4e
jne 0x14000364d
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035db0], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
mov eax, dword [rbx + 4]
mov dword [0x140035da4], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035dac], eax
jmp 0x140003649
cmp eax, 0xc599a33a
ja 0x140003619
je 0x140003607
cmp eax, 0x55f33ee9
je 0x1400035f5
cmp eax, 0x6aab1661
je 0x1400035e3
cmp eax, 0x96da030b
jne 0x14000364d
cmp byte [rbx + 3], 0xb8
jne 0x140003667
mov eax, dword [rbx + 4]
mov dword [0x140035d90], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d94], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d80], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d78], eax
jmp 0x140003649
cmp eax, 0xc66c52a5
je 0x140003639
cmp eax, 0xe762b067
jne 0x14000364d
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035d7c], eax
jmp 0x140003649
cmp byte [rbx + 3], 0xb8
jne 0x140003667
movzx eax, word [rbx + 4]
mov dword [0x140035da0], eax
test eax, eax
je 0x140003667
inc r14d
cmp r14d, dword [rsi + 0x18]
jb 0x140003480
mov r12d, 1
mov dword [0x140035d70], r12d
mov r14, qword [rsp + 0x1e0]
mov r15, qword [rsp + 0x1a0]
cmp qword [rbp - 0x38], r13
je 0x140003697
mov r9d, 0x8000
lea r8, [rbp + 0x70]
lea rdx, [rbp - 0x38]
mov rcx, 0xffffffffffffffff
call fcn.1400096d4
mov rbx, qword [rbp - 0x40]
test rbx, rbx
je 0x1400036b3
mov rdx, rbx
mov rcx, 0xffffffffffffffff
call fcn.14000972f
mov qword [rbp - 0x40], r13
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1400036c1
call fcn.1400096ba
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x1400036cf
call fcn.1400096ba
mov eax, r12d
mov rbx, qword [rsp + 0x1d0]
mov rdi, qword [rsp + 0x1d8]
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.140009900
add rsp, 0x1a8
pop r13
pop r12
pop rsi
pop rbp
ret