Function at 0x140009890
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x58]
mov qword [rax], rcx
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x30], 0
jne 0x14000bcb5
jmp 0x140008c58
mov ecx, 0xc1
call qword [0x1400842b2]
xor eax, eax
jmp 0x14000e4af
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
call qword [0x140084190]
mov qword [rsp + 0x28], rax
jmp 0x14000f41a
mov ecx, 0xe
call qword [0x140084142]
xor eax, eax
jmp 0x14000e4af
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x20]
mov qword [rcx + 0x38], rax
jmp 0x14000a826
test eax, eax
je 0x14000d9ac
jmp 0x140009870
jmp 0x14000a51b
jmp 0x14000a826
cmp qword [rsp + 0x30], 0
jne 0x14000aa66
jmp 0x14000e7f5
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0xc]
add rax, qword [rsp + 0xa0]
mov qword [rsp + 0x80], rax
jmp 0x14000d851
jmp 0x14000eac3
cmp qword [rsp + 0x30], 0
je 0x14000b706
jmp 0x14000a65c
mov rax, qword [rax]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x30], rcx
mov r9, qword [rsp + 0x20]
mov r8, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x108]
mov rcx, qword [rsp + 0x100]
call fcn.14000f6d5
jmp 0x14000b814
mov rcx, qword [rsp + 0x20]
mov dword [rcx + 0x24], eax
jmp 0x14000be95
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
movzx eax, word [rax]
cmp eax, 0x5a4d
jne 0x14000c106
jmp 0x14000bf4e
mov rax, qword [rsp + 0x50]
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x50]
add eax, dword [rcx + 0x10]
mov eax, eax
mov qword [rsp + 0x80], rax
jmp 0x14000d851
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
call qword [0x140084c4c]
jmp 0x14000b91c
test eax, eax
je 0x140009ab2
jmp 0x14000e00e
xor eax, eax
jmp 0x14000e4af
jmp 0x14000eac3
mov ecx, 0x10
call fcn.140009af1
jmp 0x14000e74b
xor eax, eax
jmp 0x14000e4af
mov ecx, 0xe
call qword [0x140085106]
xor eax, eax
jmp 0x14000e4af
lea rcx, [rsp + 0xb0]
mov rax, qword [rsp + 0x30]
call qword [rax + 0x60]
jmp 0x14000befc
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x14000c786
mov rcx, qword [rsp + 0x20]
call fcn.14000f4f7
jmp 0x1400099bc
mov ecx, 0xe
call qword [0x14008560b]
xor eax, eax
jmp 0x14000e4af
mov rax, qword [rsp + 0x28]
shr rax, 0x20
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x28]
add rdx, rcx
mov rcx, rdx
shr rcx, 0x20
cmp rax, rcx
jb 0x14000bb72
jmp 0x14000da0e
mov rax, qword [rsp + 0x110]
mov qword [rsp + 0x30], rax
mov edx, 0x40
mov rcx, qword [rsp + 0x108]
call fcn.14000efdc
jmp 0x140009071
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 0x30]
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x14000e5a4
jmp 0x14000eac3
test eax, eax
je 0x14000af63
jmp 0x14000a115
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov eax, dword [rax + 0x28]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa8], rax
xor r8d, r8d
mov edx, 1
mov rcx, qword [rsp + 0x28]
call qword [rsp + 0xa8]
jmp 0x14000f0b4
test eax, eax
jne 0x14000baf5
jmp 0x1400095e4
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax + 8]
jmp 0x14000b91c
mov rax, qword [rsp + 0x20]
jmp 0x14000f03f
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x38]
and eax, 1
test eax, eax
je 0x14000e6a7
jmp 0x140008b8e
mov rdi, qword [rsp + 0x90]
mov rsi, qword [rsp + 0x70]
mov ecx, eax
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x90]
add rcx, rax
mov rax, rcx
mov rcx, qword [rsp + 0x20]
mov qword [rcx], rax
mov rax, qword [rsp + 0x20]
jmp 0x140009742
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.14000df44
jmp 0x140009c8e
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov r9d, 4
mov r8d, 0x1000
mov edx, eax
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x90], rax
jmp 0x14000cfa4
mov rax, qword [rsp + 0x20]
mov dword [rax + 0x24], 1
jmp 0x14000be95
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x30]
call qword [rax + 8]
jmp 0x14000a90b
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0xe8
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x88], 0
mov qword [rsp + 0x58], 0
jmp 0x14000a638
mov dword [rsp + 0x60], 1
jmp 0x14000b9e9
mov rax, qword [rsp + 0x30]
call qword [rax + 0x68]
mov r8d, 0x50
mov edx, 8
mov rcx, rax
mov rax, qword [rsp + 0x30]
call qword [rax + 0x70]
mov qword [rsp + 0x20], rax
jmp 0x14000d8d0
jmp 0x14000eac3
mov rax, qword [rsp + 0x30]
call qword [rax + 0x68]
mov r8d, 0x10
xor edx, edx
mov rcx, rax
mov rax, qword [rsp + 0x30]
call qword [rax + 0x70]
mov qword [rsp + 0x68], rax
jmp 0x14000d39e
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x20]
call fcn.14000f560
jmp 0x140009802
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax + 0x30]
call qword [0x140086dd7]
mov qword [rsp + 0x28], rax
jmp 0x14000e5a4
mov eax, dword [rsp + 0x48]
inc eax
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x50]
add rax, 0x28
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 6]
cmp dword [rsp + 0x48], eax
jae 0x14000ec7d
jmp 0x14000f54c
test eax, eax
jne 0x14000bb94
jmp 0x14000a687
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.14000df44
jmp 0x14000a2da
mov rax, qword [rsp + 0x20]
mov ecx, dword [rsp + 0x60]
mov dword [rax + 0x20], ecx
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x110]
mov qword [rax + 0x30], rcx
mov rax, qword [rsp + 0x20]
mov ecx, dword [rsp + 0xb4]
jmp 0x14000d64a
mov dword [rsp + 0x60], 0
jmp 0x14000b9e9
cmp qword [rsp + 0x30], 0
je 0x14000d4c4
jmp 0x14000a9cf
cmp qword [rsp + 0x30], 0
je 0x140009bad
jmp 0x14000b1b6
jmp 0x14000eac3
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov rcx, qword [rsp + 0x38]
mov rcx, qword [rcx + 0x30]
mov rax, qword [rax + 0x30]
sub rax, rcx
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x14000b6db
jmp 0x14000a9fe
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
mov rax, qword [rsp + 0x30]
call qword [rax]
mov qword [rsp + 0x28], rax
jmp 0x14000f41a
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 4]
cmp eax, 0x8664
jne 0x14000f165
jmp 0x14000a830
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x100]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp dword [rax], 0x4550
jne 0x14000da42
jmp 0x14000bd5b
mov rcx, qword [rsp + 0x20]
call fcn.14000ea8d
jmp 0x14000a735
mov eax, dword [rsp + 0xb4]
mov rcx, qword [rsp + 0x38]
mov ecx, dword [rcx + 0x50]
mov edx, eax
call fcn.14000dfbd
jmp 0x14000c027
mov rax, qword [rsp + 0x70]
movsxd rax, dword [rax + 0x3c]
add rax, 0x108
mov rdx, rax
mov rcx, qword [rsp + 0x108]
call fcn.14000efdc
jmp 0x14000ca4b
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb4]
mov edx, eax
mov rcx, qword [rsp + 0x88]
call fcn.14000dfbd
jmp 0x14000c18c
mov rax, qword [rsp + 0x20]
cmp dword [rax + 0x20], 0
jne 0x14000a772
jmp 0x140008f18
test eax, eax
jne 0x14000ce10
jmp 0x14000bb83
mov ecx, 0xc1
call qword [0x1400878d2]
xor eax, eax
jmp 0x14000e4af
cmp qword [rsp + 0x40], rax
je 0x1400096eb
jmp 0x14000dd79
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x88], rax
jmp 0x14000b7e4
cmp qword [rsp + 0x28], 0
jne 0x14000a51b
jmp 0x14000d3af
test eax, eax
je 0x140009c70
jmp 0x14000bd74
cmp qword [rsp + 0x30], 0
je 0x1400098ee
jmp 0x14000a80c
mov rdx, qword [rsp + 0x110]
mov rcx, qword [rsp + 0x58]
call fcn.14000df44
jmp 0x140008d62
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
cmp dword [rax + 0x28], 0
jne 0x14000c090
jmp 0x14000e781
call qword [0x140088315]
mov r8d, 0x50
mov edx, 8
mov rcx, rax
call qword [0x14008830d]
mov qword [rsp + 0x20], rax
jmp 0x14000d8d0
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
jmp 0x14000a853
lea rcx, [rsp + 0xb0]
call qword [0x1400889c7]
jmp 0x14000befc
cmp qword [rsp + 0x68], 0
jne 0x140008913
jmp 0x1400094cc
mov ecx, 0xe
call qword [0x1400888e4]
xor eax, eax
jmp 0x14000e4af
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov r9d, 4
mov r8d, 0x1000
mov edx, eax
mov rcx, qword [rsp + 0x28]
call qword [0x140088843]
mov qword [rsp + 0x90], rax
jmp 0x14000cfa4
jmp 0x14000b7e4
mov dword [rax + 0x40], ecx
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x58]
mov qword [rax + 0x48], rcx
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov edx, eax
mov rcx, qword [rsp + 0x108]
call fcn.14000efdc
jmp 0x14000a7ff
mov ecx, 0x45a
call qword [0x140088846]
jmp 0x14000eac3
mov rax, qword [rsp + 0x88]
cmp qword [rsp + 0x80], rax
jbe 0x14000d618
jmp 0x14000c2ef
cmp qword [rsp + 0x20], 0
je 0x14000cacf
jmp 0x14000efff
xor eax, eax
jmp 0x14000e4af
cmp qword [rsp + 0x30], 0
je 0x14000cf51
jmp 0x14000af3b
mov ecx, 0xc1
call qword [0x1400891a9]
xor eax, eax
jmp 0x14000e4af
mov ecx, 0xc1
call qword [0x14008936c]
xor eax, eax
jmp 0x14000e4af
cmp qword [rsp + 0x30], 0
jne 0x140009de8
jmp 0x14000e51e
mov rcx, qword [rsp + 0x20]
call fcn.140009ab7
jmp 0x14000c0f9
add rsp, 0xe8
pop rdi
pop rsi
ret
mov r9d, 4
mov r8d, 0x3000
mov rdx, qword [rsp + 0x40]
xor ecx, ecx
call qword [0x140089b99]
mov qword [rsp + 0x28], rax
jmp 0x14000c786
cmp qword [rsp + 0x28], 0
je 0x14000df10
jmp 0x14000a51b
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 0x14]
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + rax + 0x18]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x38]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x48], 0
jmp 0x14000e9ae
mov qword [rsp + 0x68], rax
jmp 0x14000d39e
mov rax, qword [rsp + 0x20]
mov qword [rax + 0x38], 0
jmp 0x14000a826
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rsp + 0x28]
call qword [0x140089c9a]
jmp 0x14000a90b
mov rax, qword [rsp + 0x20]
mov dword [rax + 0x1c], 1
jmp 0x14000924a
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 6]
cmp dword [rsp + 0x48], eax
jb 0x14000f54c
jmp 0x14000ec7d
mov rcx, qword [rsp + 0x20]
call fcn.14000e350
jmp 0x140009a70
cmp qword [rsp + 0x30], 0
jne 0x140009dc8
jmp 0x14000d376
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x28]
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 0x16]
and eax, 0x2000
test eax, eax
jne 0x14000ad72
jmp 0x14000bad7
add rsp, 0xe8
pop rdi
pop rsi
ret
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x78], 0
je 0x14000d767
jmp 0x14000e92f
mov ecx, 0xc1
call qword [0x14008a8aa]
xor eax, eax
jmp 0x14000e4af
cmp qword [rsp + 0x28], 0
jne 0x1400090f9
jmp 0x14000cb06
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x10], 0
je 0x14000956d
jmp 0x140009895