Function at 0x14071d6e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xd8
mov rax, qword [rcx]
mov rsi, qword [rcx + 8]
mov rdi, qword [rax]
mov qword [rsp + 0x48], rdi
mov rdi, qword [rcx + 0x10]
mov qword [rsp + 0x120], rcx
mov rcx, qword [rax + 8]
movzx r12d, byte [rdi + 0x10]
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x88], rax
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x128], rdx
movsxd rdx, dword [rsi + 0x14]
mov qword [rsp + 0x58], rax
lea rax, [r12 + r12*2]
lea rax, [r12 + rax*4]
mov qword [rsp + 0x50], rdi
lea r10, [rcx + rax*8]
mov qword [rsp + 0x60], rcx
mov dword [rsp + 0x9c], 0
mov rax, qword [r10 + 0x28]
mov qword [rsp + 0x80], rax
mov rax, qword [rsi + 0x20]
test edx, edx
jle 0x14071e116
lea r9, [rdx*8]
mov ecx, dword [r10 + 0x4c]
xor edi, edi
sub r9, rdx
lea r9, [rax + r9*8]
nop word [rax + rax]
movzx r11d, word [rax + 0x12]
mov edx, r11d
and edx, 0xffffffbf
mov word [rax + 0x12], dx
cmp dword [rax + 0x1c], ecx
jne 0x14071d800
mov rbx, r8
and rbx, qword [rax + 0x28]
jne 0x14071d800
movzx ebx, word [rax + 0x14]
and ebx, 0xf7ff
je 0x14071d800
and r11d, 0x80
jne 0x14071d800
movzx r11d, byte [r10 + 0x44]
test r11b, 0x58
je 0x14071d7f0
mov rbx, qword [rax]
mov esi, dword [rbx + 4]
test sil, 3
je 0x14071d800
cmp ecx, dword [rbx + 0x34]
jne 0x14071d800
and r11d, 0x18
je 0x14071d7f0
and esi, 2
jne 0x14071d800
nop dword [rax]
or edx, 0x40
add edi, 1
mov word [rax + 0x12], dx
nop word [rax + rax]
add rax, 0x38
cmp rax, r9
jne 0x14071d790
movsxd rdi, edi
lea rax, [rdi*8]
sub rax, rdi
lea rax, [rax*4 + 0x88]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x58], 0
je 0x14071d95a
mov rax, qword [rsp + 0x58]
mov r14d, dword [rax]
test r14d, r14d
jle 0x14071e0ee
lea r13, [rax + 8]
lea rax, [r12 + r12*2]
xor ebp, ebp
shl rax, 2
lea rsi, [0x1406b6a40]
lea rbx, [0x14069e520]
mov qword [rsp + 0x68], rax
mov r15, qword [r13]
mov ecx, 1
mov qword [rsp + 0xa8], rsi
mov word [rsp + 0xc4], cx
mov qword [rsp + 0xb0], rbx
mov dword [rsp + 0xc8], 0
test r15, r15
je 0x14071dae8
lea rcx, [rsp + 0xa0]
mov rdx, r15
call fcn.1406b7fd0
cmp word [rsp + 0xc4], 0
jne 0x14071dae8
test byte [r13 + 0x10], 2
jne 0x14071d95a
movzx eax, byte [r15]
cmp al, 0xa7
je 0x14071dac8
cmp al, 0x71
jne 0x14071d95a
mov rax, qword [r15 + 0x10]
cmp byte [rax], 0xa7
jne 0x14071d95a
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x60]
add rcx, r12
mov ecx, dword [rdx + rcx*8 + 0x4c]
cmp dword [rax + 0x2c], ecx
jne 0x14071d95a
movsx rax, word [rax + 0x30]
mov word [r15 + 0x30], ax
test ax, ax
js 0x14071dae8
lea rcx, [rax + rax*2]
mov rax, qword [rsp + 0x80]
lea r10, str.BINARY
mov rax, qword [rax + 8]
lea rcx, [rax + rcx*8]
mov rax, qword [rcx]
movzx ecx, word [rcx + 0x12]
test ch, 2
jne 0x14071d934
jmp 0x14071d946
add rax, 1
cmp byte [rax], 0
jne 0x14071d930
and ecx, 4
jne 0x14071daa8
lea r10, [rax + 1]
mov rcx, qword [r15 + 8]
mov rdx, r10
call fcn.1406b2eb0
test eax, eax
je 0x14071dae8
xor ebx, ebx
xor esi, esi
xor r14d, r14d
mov rax, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x78]
mov rcx, qword [rax]
add rbp, rbx
test rcx, rcx
je 0x14071def0
mov rdx, rbp
call fcn.1406bbba0
mov r12, rax
test r12, r12
je 0x14071df04
mov r8, rbp
xor edx, edx
mov rcx, r12
call sub.msvcrt.dll_memset
lea rax, [rdi + rdi*2]
mov dword [r12 + 0x70], esi
xor edx, edx
lea r10, [r12 + rdi*8 + 0x80]
mov rdi, qword [rsp + 0x48]
mov word [rsp + 0x60], dx
lea rbp, [r10 + rax*4]
mov rax, qword [rsp + 0x70]
mov qword [r12 + 8], r10
add rbx, rbp
mov qword [r12 + 0x18], rbp
mov rsi, rax
mov qword [r12 + 0x20], rbx
mov ebx, dword [rsi + 0x14]
mov qword [r12 + 0x60], rax
mov qword [r12 + 0x68], rdi
mov rax, qword [rax + 0x20]
mov dword [r12 + 0x74], 0
test ebx, ebx
jle 0x14071dbca
xor edx, edx
xor r15d, r15d
mov r13d, 1
jmp 0x14071da42
cmp r9w, 0x40
je 0x14071db30
test r11w, 0x180
je 0x14071db40
cmp r9w, 0x100
setne cl
add ecx, 0x47
mov byte [r8 + 4], cl
add r15d, 1
add edx, 1
add rax, 0x38
cmp edx, ebx
je 0x14071dbd0
movzx ecx, word [rax + 0x12]
test cl, 0x40
je 0x14071da33
movsxd r8, r15d
mov r9d, dword [rax + 0x20]
movzx r11d, word [rax + 0x14]
lea r8, [r8 + r8*2]
lea r8, [r10 + r8*4]
mov dword [r8], r9d
mov r9d, r11d
and r9w, 0x3fff
mov dword [r8 + 8], edx
cmp r9w, 1
jne 0x14071da08
test cx, cx
js 0x14071da9b
mov r9d, dword [r12 + 0x74]
mov esi, r13d
mov ecx, r15d
shl esi, cl
mov r11d, r9d
or r9d, esi
cmp r15d, 0x20
cmovge r9d, r11d
mov dword [r12 + 0x74], r9d
mov byte [r8 + 4], 2
jmp 0x14071da2f
add rax, 1
cmp byte [rax], 0
je 0x14071d942
add rax, 1
cmp byte [rax], 0
jne 0x14071daa8
jmp 0x14071d942
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
add rax, r12
mov eax, dword [rcx + rax*8 + 0x4c]
cmp dword [r15 + 0x2c], eax
jne 0x14071d95a
nop dword [rax + rax]
add ebp, 1
add r13, 0x20
cmp r14d, ebp
jne 0x14071d862
mov rax, qword [rsp + 0x88]
movsxd rbx, r14d
shl rbx, 3
movzx esi, word [rax + 0x3c]
test sil, 0x80
je 0x14071e10a
test si, 0x200
setne sil
movzx esi, sil
add esi, 2
jmp 0x14071d961
movzx ecx, byte [rax + 0x17]
mov byte [r8 + 4], cl
jmp 0x14071da2f
and r11d, 0x3c
mov byte [r8 + 4], r9b
je 0x14071da2f
mov rcx, qword [rax]
mov r11, qword [rcx + 0x18]
movzx ecx, byte [r11]
cmp cl, 0xb0
jne 0x14071db63
movzx ecx, byte [r11 + 2]
cmp cl, 0xb1
je 0x14071df6e
cmp cl, 0x8a
jne 0x14071da2f
mov rcx, qword [r11 + 0x20]
mov rcx, qword [rcx + 0x20]
mov ecx, dword [rcx]
cmp ecx, 1
jle 0x14071da2f
mov ecx, r15d
mov esi, r13d
movzx edi, word [rsp + 0x60]
shl esi, cl
mov ecx, esi
mov r11d, edi
or ecx, edi
cmp r15d, 0x10
cmovl r11d, ecx
mov word [rsp + 0x60], r11w
cmp r9w, 0x10
je 0x14071e100
cmp r9w, 4
jne 0x14071da2f
mov byte [r8 + 4], 0x20
jmp 0x14071da2f
xor r15d, r15d
nop dword [rax]
mov dword [r12], r15d
test r14d, r14d
je 0x14071dc95
mov rsi, qword [rsp + 0x58]
lea eax, [r14 - 1]
xor r14d, r14d
lea rbx, [0x14069e520]
shl rax, 5
lea r13, [rsp + 0xa0]
mov qword [rsp + 0x58], r12
lea rax, [rsi + rax + 0x28]
lea r15, [rsi + 8]
mov r12, r13
mov r13, rbp
lea rsi, [0x1406b6a40]
mov rbp, rsi
mov rsi, rbx
mov rbx, rax
mov rdi, qword [r15]
mov eax, 1
mov qword [rsp + 0xa8], rbp
mov word [rsp + 0xc4], ax
mov qword [rsp + 0xb0], rsi
mov dword [rsp + 0xc8], 0
test rdi, rdi
je 0x14071dc83
mov rdx, rdi
mov rcx, r12
call fcn.1406b7fd0
cmp word [rsp + 0xc4], 0
jne 0x14071dc83
movsxd rax, r14d
add r14d, 1
lea rdx, [r13 + rax*8]
movsx eax, word [rdi + 0x30]
mov dword [rdx], eax
movzx eax, byte [r15 + 0x10]
and eax, 1
mov byte [rdx + 4], al
add r15, 0x20
cmp rbx, r15
jne 0x14071dc20
mov r12, qword [rsp + 0x58]
mov r15d, dword [r12]
mov rdx, qword [rsp + 0x50]
xor ebp, ebp
xor r13d, r13d
mov dword [r12 + 0x10], r14d
movzx eax, word [rdx + 0x40]
and byte [rdx + 0x1c], 0xfe
mov word [rdx + 0x12], bp
mov dword [rdx + 0x38], 0x400
mov word [rdx + 0x3c], r13w
cmp r15d, eax
jg 0x14071ddc0
movzx esi, word [rsp + 0x60]
lea rax, [rsp + 0x9c]
xor r9d, r9d
lea rdi, [rsp + 0xa0]
mov qword [rsp + 0x38], rax
mov rdx, qword [rsp + 0x128]
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x30], rdi
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov ebx, dword [rsp + 0x9c]
mov r13d, eax
test ebx, ebx
jne 0x14071df30
test r13d, r13d
je 0x14071de50
mov ecx, dword [r12 + 0x38]
test ecx, ecx
jne 0x14071df20
mov rax, qword [rsp + 0x48]
mov edx, dword [r12]
xor ebx, ebx
mov r15, qword [rax]
test edx, edx
jle 0x14071dd98
nop word cs:[rax + rax]
mov r14, qword [r12 + rbx*8 + 0x80]
test r14, r14
je 0x14071dd82
test word [r14 + 0x14], 0x9000
jne 0x14071dd6e
mov eax, dword [r14 + 0x20]
test eax, eax
je 0x14071dd76
mov rcx, r14
call fcn.1406ac3d0
mov rcx, qword [r14 + 0x18]
mov rdx, r14
call fcn.1406abfe0
mov qword [r12 + rbx*8 + 0x80], 0
add rbx, 1
cmp dword [r12], ebx
jg 0x14071dd50
mov rdx, r12
mov rcx, r15
call fcn.1406abfe0
mov eax, r13d
add rsp, 0xd8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov rax, qword [rsp + 0x48]
mov r8d, r15d
mov rcx, qword [rax]
call fcn.1406bc1c0
test eax, eax
je 0x14071dcc5
mov rax, qword [rsp + 0x48]
mov edi, dword [r12]
xor ebx, ebx
mov r14, qword [rax]
test edi, edi
jle 0x14071de38
nop word [rax + rax]
mov r13, qword [r12 + rbx*8 + 0x80]
test r13, r13
je 0x14071de22
test word [r13 + 0x14], 0x9000
jne 0x14071de0e
mov esi, dword [r13 + 0x20]
test esi, esi
je 0x14071de16
mov rcx, r13
call fcn.1406ac3d0
mov rcx, qword [r13 + 0x18]
mov rdx, r13
call fcn.1406abfe0
mov qword [r12 + rbx*8 + 0x80], 0
add rbx, 1
cmp dword [r12], ebx
jg 0x14071ddf0
mov rdx, r12
mov rcx, r14
mov r13d, 7
call fcn.1406abfe0
jmp 0x14071dda3
mov r14, qword [rsp + 0x128]
mov rbx, qword [rsp + 0x50]
mov ecx, dword [rsp + 0xa0]
not r14
mov rax, r14
and rax, qword [rbx]
mov dword [rsp + 0x80], ecx
mov qword [rsp + 0x58], rax
jne 0x14071df79
test ecx, ecx
je 0x14071dd27
mov qword [rsp + 0x38], 0
mov rdx, qword [rsp + 0x128]
mov r9d, 1
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x30], rdi
mov rcx, qword [rsp + 0x120]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov rbx, qword [rsp + 0x50]
mov rcx, r14
and rcx, qword [rbx]
sete dl
mov qword [rsp + 0x60], rcx
movzx edx, dl
mov dword [rsp + 0x78], edx
test eax, eax
jne 0x14071e0a1
mov dword [rsp + 0x80], edx
jmp 0x14071df93
mov rcx, rbp
call fcn.1406a6690
mov r12, rax
test r12, r12
jne 0x14071d98e
mov rcx, qword [rsp + 0x48]
lea rdx, [0x140bbb4e4]
mov r13d, 7
call fcn.1406bb9a0
jmp 0x14071dda3
mov rcx, qword [r12 + 0x30]
call fcn.1406a4060
jmp 0x14071dd34
mov qword [rsp + 0x30], rdi
mov rdx, qword [rsp + 0x128]
xor r9d, r9d
mov r8, 0xffffffffffffffff
mov dword [rsp + 0x28], esi
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov r13d, eax
jmp 0x14071dd1e
mov rcx, qword [r11 + 0x20]
mov ecx, dword [rcx]
jmp 0x14071db7f
mov r11d, dword [rsp + 0x80]
test r11d, r11d
jne 0x14071de87
mov qword [rsp + 0x60], 0
lea eax, [r15 - 1]
mov dword [rsp + 0x68], esi
mov rsi, qword [rsp + 0x128]
xor ebx, ebx
lea rbp, [rax + rax*2]
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x88], r13d
mov r13, qword [rsp + 0x70]
shl rbp, 2
mov dword [rsp + 0x78], eax
nop dword [rax]
mov r8, rbx
test r15d, r15d
jle 0x14071e130
mov rdx, qword [r12 + 8]
mov r9, qword [r13 + 0x20]
mov rbx, 0xffffffffffffffff
lea rax, [rdx + 8]
lea rcx, [rdx + rbp + 0x14]
nop dword [rax]
movsxd r10, dword [rax]
lea rdx, [r10*8]
sub rdx, r10
mov r11, qword [r9 + rdx*8 + 0x28]
and r11, r14
cmp r11, r8
jbe 0x14071e012
cmp r11, rbx
cmovb rbx, r11
add rax, 0xc
cmp rcx, rax
jne 0x14071dff0
cmp rbx, 0xffffffffffffffff
je 0x14071e130
cmp rbx, qword [rsp + 0x58]
je 0x14071dfc8
cmp qword [rsp + 0x60], rbx
je 0x14071dfc8
mov eax, dword [rsp + 0x68]
mov qword [rsp + 0x30], rdi
mov r8, rbx
xor r9d, r9d
mov qword [rsp + 0x38], 0
mov rcx, qword [rsp + 0x120]
or r8, rsi
mov rdx, rsi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov rcx, qword [rsp + 0x50]
cmp qword [rcx], rsi
jne 0x14071e095
mov r10d, dword [rsp + 0xa0]
mov ecx, 1
mov dword [rsp + 0x80], 1
test r10d, r10d
cmovne ecx, dword [rsp + 0x78]
mov dword [rsp + 0x78], ecx
test eax, eax
je 0x14071dfc8
mov esi, dword [rsp + 0x68]
mov r13d, eax
mov eax, dword [rsp + 0x78]
or eax, r13d
jne 0x14071dd27
mov r8, qword [rsp + 0x128]
mov qword [rsp + 0x30], rdi
mov r9d, 1
mov dword [rsp + 0x28], esi
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x38], 0
mov rdx, r8
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov r13d, eax
jmp 0x14071dd27
je 0x14071daf8
jmp 0x14071d95a
mov byte [r8 + 4], 8
jmp 0x14071da2f
shr si, 6
and esi, 1
jmp 0x14071d961
mov qword [rsp + 0x78], 0x88
xor edi, edi
jmp 0x14071d824
mov r9d, dword [rsp + 0x80]
mov esi, dword [rsp + 0x68]
mov r13d, dword [rsp + 0x88]
test r9d, r9d
jne 0x14071e0a4
mov r8, qword [rsp + 0x128]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], esi
mov rcx, qword [rsp + 0x120]
mov qword [rsp + 0x38], 0
mov rdx, r8
mov qword [rsp + 0x20], r12
call fcn.14071cf70
mov r8d, dword [rsp + 0xa0]
mov r13d, eax
test r8d, r8d
je 0x14071dd27
jmp 0x14071e0a4