Function at 0x1400baed8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov qword [rax + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
mov qword [rbp + 0x1f], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r13, r9
mov rdi, r8
mov r15, rdx
mov r14, rcx
test byte [0x140148f00], 2
je 0x1400baf3a
and dword [rsp + 0x28], 0
mov qword [rsp + 0x20], r9
mov r9, r8
mov r8, rdx
lea rdx, [0x1400056d0]
call fcn.14009f9a8
lea r12, [0x140148ea8]
mov eax, 5
mov rcx, qword [0x140148ea8]
cmp rcx, r12
je 0x1400baf7d
test byte [rcx + 0x1c], 1
je 0x1400baf7d
cmp byte [rcx + 0x19], al
jb 0x1400baf7d
lea edx, [rax + 0x3b]
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rdi
mov r9, r15
lea r8, [0x1400090b8]
mov rcx, qword [rcx + 0x10]
call fcn.14002f548
and qword [rbp - 0x49], 0
and qword [rbp - 0x41], 0
and qword [rbp - 0x59], 0
and dword [rbp - 0x61], 0
mov rax, qword [section..data]
mov rbx, qword [rax + 0x18]
mov rcx, rbx
call qword [fcn.140015690]
lea rcx, section..data
call rbx
add rax, 0x18
mov qword [rbp - 0x69], rax
lea r9, [rbp - 0x49]
mov r8, r13
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.MFPlat.DLL_MFCreateAsyncResult]
mov esi, eax
mov r10, qword [0x140148ea8]
mov edi, 5
cmp r10, r12
je 0x1400bb011
test byte [r10 + 0x1c], 2
je 0x1400bb011
movzx r8d, byte [r10 + 0x19]
lea edx, [rdi - 3]
test eax, eax
cmovns edx, edi
cmp r8d, edx
jl 0x1400bb011
lea edx, [rdi + 0x3c]
mov r9d, eax
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb980
mov rax, qword [r15]
mov rbx, qword [rax]
mov rcx, rbx
call qword [fcn.140015690]
lea r8, [rbp - 0x41]
lea rdx, [0x140001c98]
mov rcx, r15
call rbx
mov esi, eax
mov r10, qword [0x140148ea8]
cmp r10, r12
je 0x1400bb088
test byte [r10 + 0x1c], 2
je 0x1400bb088
movzx ecx, byte [r10 + 0x19]
mov eax, 2
test esi, esi
cmovns eax, edi
cmp ecx, eax
jl 0x1400bb088
mov edx, 0x42
mov rax, qword [rbp - 0x41]
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14001783c
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb980
lea r8, [rbp - 0x59]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov esi, eax
test eax, eax
js 0x1400bb970
mov rbx, qword [rbp - 0x59]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x20]
mov rcx, rdi
call qword [fcn.140015690]
lea r9, [rbp - 0x61]
mov r8d, 0x52
lea rdx, [0x1400bba90]
mov rcx, rbx
call rdi
mov esi, eax
test eax, eax
jns 0x1400bb10d
mov r10, qword [0x140148ea8]
cmp r10, r12
je 0x1400bb114
test byte [r10 + 0x1c], 2
je 0x1400bb114
cmp byte [r10 + 0x19], 2
jb 0x1400bb114
mov edx, 0x43
mov r9d, eax
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
mov r12d, dword [rbp - 0x61]
xor edi, edi
test esi, esi
js 0x1400bb979
cmp qword [r14 + 0x90], rdi
je 0x1400bb15a
mov ecx, edi
cmp dword [r14 + 0x98], edi
jbe 0x1400bb15a
mov rdx, qword [r14 + 0x88]
mov eax, ecx
cmp qword [rdx + rax*8], rdi
jne 0x1400bb152
inc ecx
cmp ecx, dword [r14 + 0x98]
jb 0x1400bb13d
jmp 0x1400bb15a
mov eax, ecx
mov rax, qword [rdx + rax*8]
jmp 0x1400bb15d
mov rax, rdi
mov qword [rbp - 0x11], rax
test rax, rax
je 0x1400bb39a
lea rdx, [rbp - 0x11]
lea rcx, [r14 + 0x88]
call fcn.1400274a4
mov r13, qword [rax]
cmp dword [r13 + 8], edi
je 0x1400bb374
mov r8d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea rdx, [0x1400bbaf8]
lea rcx, [rbp - 0x69]
call fcn.140010e38
lea rbx, [r13 + 0x10]
mov rax, qword [rbx]
cmp dword [rax - 0x10], 2
jle 0x1400bb21a
mov r8d, 5
lea rdx, [0x1400bbb20]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov rax, qword [rbx]
mov r9d, dword [rax - 0x10]
add r9d, 0xfffffffe
mov r8d, 1
lea rdx, [rbp + 0x17]
mov rcx, rbx
call fcn.140010eec
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
nop
mov r15, qword [rbp + 0x17]
lock add dword [r15 - 8], 0xffffffff
jg 0x1400bb21a
mov rdi, qword [r15 - 0x18]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
mov rcx, rbx
call qword [fcn.140015690]
lea rdx, [r15 - 0x18]
mov rcx, rdi
call rbx
xor edi, edi
mov r8d, reloc.OLEAUT32.dll_SafeArrayAccessData
lea rdx, [0x1400bbb30]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8, qword [r13 + 0x20]
mov rax, qword [rbp - 0x69]
mov dword [rsp + 0x20], edi
mov r9d, dword [r8 - 0x10]
mov edx, dword [rax - 0x10]
lea rcx, [rbp - 0x69]
call fcn.1400eeb78
mov r8d, 0x50
lea rdx, [0x1400bbb60]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov rdx, qword [r13 + 0x28]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8d, reloc.OLEAUT32.dll_DispGetParam
lea rdx, [0x1400bbc08]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov rdx, qword [r13 + 0x30]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8d, 0x1e
lea rdx, [0x1400bbc40]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov rdx, qword [r13 + 0x18]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8d, SafeArrayAccessData
lea rdx, [0x1400bbc80]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x21], 0
lea rdx, [rbp - 0x29]
mov rcx, qword [r13]
call fcn.14002c43c
test eax, eax
js 0x1400bb354
mov eax, dword [rbp - 0x21]
test eax, eax
jle 0x1400bb354
mov ebx, edi
mov r8d, reloc.WSOCK32.dll_inet_ntoa
lea rdx, [0x1400bbca8]
lea rcx, [rbp - 0x69]
call fcn.140010e38
test rdi, rdi
js 0x1400bb37f
cmp ebx, dword [rbp - 0x21]
jge 0x1400bb37f
mov rax, qword [rbp - 0x29]
mov rdx, qword [rax + rdi*8]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8d, reloc.Cabinet.dll_FCIDestroy
lea rdx, [0x1400bbcc0]
lea rcx, [rbp - 0x69]
call fcn.140010e38
inc ebx
inc rdi
cmp ebx, dword [rbp - 0x21]
jl 0x1400bb2fd
xor edi, edi
mov r8d, SafeArrayGetDim
lea rdx, [0x1400bbce0]
lea rcx, [rbp - 0x69]
call fcn.140010e38
nop
lea rcx, [rbp - 0x29]
call fcn.140026ee0
cmp qword [rbp - 0x11], rdi
je 0x1400bb392
jmp 0x1400bb16a
mov edx, 1
mov ecx, 0xc000008c
call fcn.1400119d8
nop
jmp 0x1400bb391
nop
mov r15, qword [rbp + 0x6f]
mov r13, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], 0
lea rcx, [rbp - 0x39]
call fcn.1400be60c
test eax, eax
js 0x1400bb424
mov ebx, edi
cmp dword [rbp - 0x31], edi
jle 0x1400bb424
mov r8d, 0xa
lea rdx, [0x1400bbd00]
lea rcx, [rbp - 0x69]
call fcn.140010e38
test rdi, rdi
js 0x1400bb411
cmp ebx, dword [rbp - 0x31]
jge 0x1400bb411
mov rax, qword [rbp - 0x39]
mov rdx, qword [rax + rdi*8]
mov r8d, dword [rdx - 0x10]
lea rcx, [rbp - 0x69]
call fcn.140010e38
mov r8d, reloc.Cabinet.dll_FCIFlushCabinet
lea rdx, [0x1400bbd18]
lea rcx, [rbp - 0x69]
call fcn.140010e38
inc ebx
inc rdi
cmp ebx, dword [rbp - 0x31]
jl 0x1400bb3ba
jmp 0x1400bb424
mov edx, 1
mov ecx, 0xc000008c
call fcn.1400119d8
nop
jmp 0x1400bb423
nop
lea rcx, [rbp - 0x39]
call fcn.140026ee0
mov rax, qword [section..data]
mov rbx, qword [rax + 0x18]
mov rcx, rbx
call qword [fcn.140015690]
lea rcx, section..data
call rbx
lea rdi, [rax + 0x18]
mov qword [rbp - 9], rdi
mov r14, qword [rbp - 0x69]
mov eax, dword [r14 - 0x10]
lea ebx, [rax*2 + 1]
add ebx, eax
mov ecx, 1
sub ecx, dword [rdi - 8]
mov eax, dword [rdi - 0xc]
sub eax, ebx
or eax, ecx
jge 0x1400bb483
mov edx, ebx
lea rcx, [rbp - 9]
call fcn.140044540
mov rdi, qword [rbp - 9]
xor ecx, ecx
test ebx, ebx
js 0x1400bb962
cmp ebx, dword [rdi - 0xc]
jg 0x1400bb962
mov dword [rdi - 0x10], ebx
movsxd rax, ebx
mov byte [rax + rdi], cl
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rdi
mov r9d, dword [r14 - 0x10]
mov r8, qword [rbp - 0x69]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov ebx, eax
test eax, eax
jne 0x1400bb51c
cmp dword [r14 - 0x10], eax
je 0x1400bb51c
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov rcx, qword [0x140148ea8]
lea rax, [0x140148ea8]
cmp rcx, rax
je 0x1400bb51c
test byte [rcx + 0x1c], 2
je 0x1400bb51c
cmp byte [rcx + 0x19], 2
jb 0x1400bb51c
lea edx, [rbx + 0x44]
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [rcx + 0x10]
call fcn.14000fd64
and dword [rbp - 0x61], 0
test esi, esi
js 0x1400bb5c7
cmp ebx, 0xffffffff
jne 0x1400bb53a
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rdi + rbx], 0
jne 0x1400bb531
test ebx, ebx
js 0x1400bb5b9
cmp ebx, dword [rdi - 0xc]
jg 0x1400bb5b9
mov dword [rdi - 0x10], ebx
movsxd rax, ebx
mov byte [rax + rdi], 0
mov esi, dword [rdi - 0x10]
mov rbx, qword [rbp - 0x59]
mov rax, qword [rbx]
mov r14, qword [rax + 0x20]
mov rcx, r14
call qword [fcn.140015690]
lea r9, [rbp - 0x61]
mov r8d, esi
mov rdx, rdi
mov rcx, rbx
call r14
mov esi, eax
test eax, eax
jns 0x1400bb5b3
mov rcx, qword [0x140148ea8]
lea rax, [0x140148ea8]
cmp rcx, rax
je 0x1400bb5c7
test byte [rcx + 0x1c], 2
je 0x1400bb5c7
cmp byte [rcx + 0x19], 2
jb 0x1400bb5c7
mov edx, 0x45
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [rcx + 0x10]
call fcn.14000fd64
jmp 0x1400bb5c7
add r12d, dword [rbp - 0x61]
jmp 0x1400bb5c7
mov ecx, 0x80070057
call fcn.1400119f0
nop
jmp 0x1400bb5c6
nop
lea r14, [rdi - 0x18]
lock add dword [r14 + 0x10], 0xffffffff
jg 0x1400bb5ee
mov rdi, qword [r14]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
mov rcx, rbx
call qword [fcn.140015690]
mov rdx, r14
mov rcx, rdi
call rbx
test esi, esi
js 0x1400bb959
and dword [rbp - 0x61], 0
mov rbx, qword [rbp - 0x59]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x20]
mov rcx, rdi
call qword [fcn.140015690]
lea r9, [rbp - 0x61]
mov r8d, reloc.WSOCK32.dll_inet_ntoa
lea rdx, [0x1400bbae8]
mov rcx, rbx
call rdi
mov esi, eax
add r12d, dword [rbp - 0x61]
test eax, eax
js 0x1400bb959
mov rdi, qword [rbp - 0x59]
mov rax, qword [rdi]
mov rsi, qword [rax + 0x30]
mov rcx, rsi
call qword [fcn.140015690]
mov edx, r12d
mov rcx, rdi
call rsi
mov esi, eax
test eax, eax
js 0x1400bb959
cmp qword [rbp - 0x59], 0
je 0x1400bb885
and qword [rbp - 0x19], 0
and qword [rbp - 0x51], 0
lea rcx, [rbp - 0x51]
call qword [sym.imp.MFPlat.DLL_CreatePropertyStore]
mov esi, eax
mov r10, qword [0x140148ea8]
lea r12, [0x140148ea8]
mov r14d, 2
cmp r10, r12
je 0x1400bb6d4
test byte [r10 + 0x1c], r14b
je 0x1400bb6d4
movzx ecx, byte [r10 + 0x19]
mov eax, r14d
test esi, esi
lea edx, [r14 + 3]
cmovns eax, edx
cmp ecx, eax
jl 0x1400bb6d4
lea edx, [r14 + 0x44]
mov rax, qword [rbp - 0x51]
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14001783c
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb840
xor eax, eax
mov qword [rbp + 1], rax
mov qword [rbp + 9], rax
mov dword [rbp + 0x11], eax
mov word [rbp + 0x15], ax
mov eax, 0x1f
mov word [rbp - 1], ax
lea rax, [0x140008fb8]
mov qword [rbp + 7], rax
mov rbx, qword [rbp - 0x51]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x30]
mov rcx, rdi
call qword [fcn.140015690]
lea r8, [rbp - 1]
lea rdx, [0x140001a48]
mov rcx, rbx
call rdi
mov esi, eax
mov r10, qword [0x140148ea8]
mov ebx, 5
cmp r10, r12
je 0x1400bb775
test byte [r10 + 0x1c], r14b
je 0x1400bb775
movzx ecx, byte [r10 + 0x19]
mov eax, r14d
test esi, esi
cmovns eax, ebx
cmp ecx, eax
jl 0x1400bb775
lea edx, [rbx + 0x42]
mov rax, qword [rbp + 7]
mov qword [rsp + 0x20], rax
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.1400170b0
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb840
lea rdx, [rbp - 0x19]
mov rcx, qword [rbp - 0x59]
call qword [sym.imp.MFPlat.DLL_MFCreateMFByteStreamOnStream]
mov esi, eax
mov r10, qword [0x140148ea8]
cmp r10, r12
je 0x1400bb7cf
test byte [r10 + 0x1c], r14b
je 0x1400bb7cf
movzx ecx, byte [r10 + 0x19]
mov eax, r14d
test esi, esi
cmovns eax, ebx
cmp ecx, eax
jl 0x1400bb7cf
mov edx, 0x48
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb840
mov rbx, qword [rbp - 0x41]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x168]
mov rcx, rdi
call qword [fcn.140015690]
mov r8, qword [rbp - 0x51]
mov rdx, qword [rbp - 0x19]
mov rcx, rbx
call rdi
mov esi, eax
mov r10, qword [0x140148ea8]
cmp r10, r12
je 0x1400bb840
test byte [r10 + 0x1c], r14b
je 0x1400bb840
movzx ecx, byte [r10 + 0x19]
mov eax, r14d
test esi, esi
mov edx, 5
cmovns eax, edx
cmp ecx, eax
jl 0x1400bb840
mov edx, 0x49
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
mov rbx, qword [rbp - 0x51]
test rbx, rbx
je 0x1400bb865
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140015690]
mov rcx, rbx
call rdi
mov r10, qword [0x140148ea8]
mov rbx, qword [rbp - 0x19]
test rbx, rbx
je 0x1400bb893
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140015690]
mov rcx, rbx
call rdi
jmp 0x1400bb88c
lea r12, [0x140148ea8]
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb980
mov rbx, qword [rbp - 0x49]
mov rax, qword [rbx]
mov rdi, qword [rax + 0x28]
mov rcx, rdi
call qword [fcn.140015690]
mov edx, esi
mov rcx, rbx
call rdi
mov esi, eax
mov r10, qword [0x140148ea8]
mov ebx, 5
cmp r10, r12
je 0x1400bb8fe
test byte [r10 + 0x1c], 2
je 0x1400bb8fe
movzx ecx, byte [r10 + 0x19]
lea eax, [rbx - 3]
test esi, esi
cmovns eax, ebx
cmp ecx, eax
jl 0x1400bb8fe
lea edx, [rbx + 0x45]
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
test esi, esi
js 0x1400bb980
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.MFPlat.DLL_MFInvokeCallback]
mov esi, eax
mov r10, qword [0x140148ea8]
cmp r10, r12
je 0x1400bb9bc
test byte [r10 + 0x1c], 2
je 0x1400bb980
movzx ecx, byte [r10 + 0x19]
mov eax, 2
test esi, esi
cmovns eax, ebx
cmp ecx, eax
jl 0x1400bb980
mov edx, 0x4b
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
mov r10, qword [0x140148ea8]
jmp 0x1400bb985
mov r10, qword [0x140148ea8]
jmp 0x1400bb979
mov ecx, 0x80070057
call fcn.1400119f0
nop
jmp 0x1400bb96f
nop
mov r10, qword [0x140148ea8]
jmp 0x1400bb980
lea r12, [0x140148ea8]
mov ebx, 5
cmp r10, r12
je 0x1400bb9bc
test byte [r10 + 0x1c], 1
je 0x1400bb9bc
movzx ecx, byte [r10 + 0x19]
mov eax, 2
test esi, esi
cmovns eax, ebx
cmp ecx, eax
jl 0x1400bb9bc
mov edx, 0x4c
mov r9d, esi
lea r8, [0x1400090b8]
mov rcx, qword [r10 + 0x10]
call fcn.14000fd64
test byte [0x140148f00], 2
je 0x1400bb9e2
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r13
mov r9, qword [rbp + 0x77]
mov r8, r15
lea rdx, [0x1400056c0]
call fcn.14009f9a8
nop
mov r14, qword [rbp - 0x69]
lock add dword [r14 - 8], 0xffffffff
jg 0x1400bba0c
mov rdi, qword [r14 - 0x18]
mov rax, qword [rdi]
mov rbx, qword [rax + 8]
mov rcx, rbx
call qword [fcn.140015690]
lea rdx, [r14 - 0x18]
mov rcx, rdi
call rbx
nop
mov rbx, qword [rbp - 0x59]
test rbx, rbx
je 0x1400bba2b
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140015690]
mov rcx, rbx
call rdi
nop
mov rbx, qword [rbp - 0x41]
test rbx, rbx
je 0x1400bba4a
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140015690]
mov rcx, rbx
call rdi
nop
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x1400bba68
mov rax, qword [rbx]
mov rdi, qword [rax + 0x10]
mov rcx, rdi
call qword [fcn.140015690]
mov rcx, rbx
call rdi
mov eax, esi
mov rbx, qword [rsp + 0x110]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret