Function at 0x1400c4230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x718
movdqa xmmword [rsp + 0x700], xmm6
mov r9, r8
mov r8, rdx
mov rsi, rcx
movabs rbx, 0x8000000000000000
xor eax, eax
cmp r9, 0x1f5
adc al, 1
mov qword [rsp + 0x58], 3
mov byte [rsp + 0x62], 0
mov qword [rsp + 0x80], 2
mov qword [rsp + 0x88], 3
mov byte [rsp + 0x92], 0
mov byte [rsp + 0x98], 1
mov qword [rsp + 0x68], 3
mov byte [rsp + 0x72], 0
mov byte [rsp + 0xa1], al
mov word [rsp + 0x60], 1
mov word [rsp + 0x90], 1
mov word [rsp + 0x70], 1
mov word [rsp + 0x78], 0x100
mov byte [rsp + 0xa0], 0
lea rdi, [rsp + 0xa8]
lea rdx, [rsp + 0x58]
mov rcx, rdi
call sym.aho_corasick::nfa::noncontiguous::Builder::build::h4a4f676b94d8d292
mov r14, qword [rsp + 0xa8]
cmp r14, rbx
jne 0x1400c4313
movzx eax, word [rdi + 0x1e]
mov ecx, dword [rdi + 0x1a]
mov dword [rsp + 0x20], ecx
mov word [rsp + 0x24], ax
mov byte [rsi + 0x11], 3
jmp 0x1400c4725
movzx ebp, byte [rsp + 0xc1]
movzx r15d, byte [rsp + 0xc0]
mov eax, dword [rdi + 0x1a]
mov dword [rsp + 0x40], eax
movzx eax, word [rdi + 0x1e]
mov word [rsp + 0x44], ax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x280]
mov r8d, 0x198
call sym.memcpy
movdqu xmm0, xmmword [rsp + 0xb0]
movdqu xmmword [rsp + 0x268], xmm0
mov byte [rsp + 0x278], r15b
mov byte [rsp + 0x279], bpl
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x27a], eax
movzx eax, word [rsp + 0x44]
mov word [rsp + 0x27e], ax
mov qword [rsp + 0x260], r14
movzx eax, byte [rsp + 0xa1]
cmp rax, 3
jne 0x1400c43e7
lea rdi, [rsp + 0xa8]
lea rdx, [rsp + 0x260]
mov r8d, 0x1b8
mov rcx, rdi
call sym.memcpy
lea rcx, [rsp + 0x40]
lea rdx, [rsp + 0x58]
mov r8, rdi
call sym.aho_corasick::ahocorasick::AhoCorasickBuilder::build_auto::h81e3679a391ee626
movdqa xmm6, xmmword [rsp + 0x40]
movzx edi, byte [rsp + 0x50]
movzx ebx, byte [rsp + 0xa0]
jmp 0x1400c470a
test rax, rax
je 0x1400c4522
cmp eax, 1
jne 0x1400c45b0
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0xa8]
lea r8, [rsp + 0x260]
call sym.aho_corasick::nfa::contiguous::Builder::build_from_noncontiguous::hffdda6dd1175daf3
mov r14, qword [rsp + 0xa8]
cmp r14, rbx
je 0x1400c45dd
movzx ebx, byte [rsp + 0xc1]
movups xmm6, xmmword [rsp + 0xb0]
movzx ebp, byte [rsp + 0xc0]
mov eax, dword [rdi + 0x1a]
mov dword [rsp + 0x28], eax
movzx eax, word [rdi + 0x1e]
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x418]
mov r8d, 0x160
call sym.memcpy
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x30], eax
movzx eax, word [rsp + 0x2c]
mov word [rsp + 0x34], ax
movzx eax, byte [0x140361100]
mov rcx, qword [0x1403610c8]
test rcx, rcx
jne 0x1400c44a7
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x1400c474c
mov rcx, rax
mov qword [0x1403610c8], rax
mov r8d, 0x190
xor edx, edx
call fcn.14014aadc
test rax, rax
je 0x1400c474c
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], r14
movups xmmword [rax + 0x18], xmm6
mov byte [rax + 0x28], bpl
mov byte [rax + 0x29], bl
mov eax, dword [rsp + 0x30]
mov dword [rdi + 0x2a], eax
movzx eax, word [rsp + 0x34]
mov word [rdi + 0x2e], ax
lea rcx, [rdi + 0x30]
lea rdx, [rsp + 0x418]
mov r8d, 0x160
call sym.memcpy
lea rax, sym.core::ptr::drop_in_place_aho_corasick::nfa::contiguous::NFA_::h131239c255fd047d
movq xmm0, rax
movq xmm6, rdi
punpcklqdq xmm6, xmm0
mov dil, 1
jmp 0x1400c46f5
movzx eax, byte [0x140361100]
mov rcx, qword [0x1403610c8]
test rcx, rcx
jne 0x1400c454d
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x1400c473d
mov rcx, rax
mov qword [0x1403610c8], rax
mov r8d, 0x1c8
xor edx, edx
call fcn.14014aadc
test rax, rax
je 0x1400c473d
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
lea rcx, [rax + 0x10]
lea rdx, [rsp + 0x260]
mov r8d, 0x1b8
call sym.memcpy
lea rax, sym.core::ptr::drop_in_place_aho_corasick::nfa::noncontiguous::NFA_::h7d6a859e6b260fe3
movq xmm0, rax
movq xmm6, rdi
punpcklqdq xmm6, xmm0
xor edi, edi
movzx ebx, byte [rsp + 0xa0]
jmp 0x1400c470a
movzx edx, byte [rsp + 0x78]
movzx r8d, byte [rsp + 0x79]
lea rcx, [rsp + 0xa8]
lea r9, [rsp + 0x260]
call sym.aho_corasick::dfa::Builder::build_from_noncontiguous::h57265a7f83f149a9
mov r14, qword [rsp + 0xa8]
cmp r14, rbx
jne 0x1400c45ff
movzx eax, word [rdi + 0x1e]
mov ecx, dword [rdi + 0x1a]
mov dword [rsp + 0x20], ecx
mov word [rsp + 0x24], ax
lea rcx, [rsp + 0x260]
call sym.core::ptr::drop_in_place_aho_corasick::nfa::noncontiguous::NFA_::h7d6a859e6b260fe3
jmp 0x1400c430a
movzx ebx, byte [rsp + 0xc1]
movups xmm6, xmmword [rsp + 0xb0]
movzx ebp, byte [rsp + 0xc0]
mov eax, dword [rdi + 0x1a]
mov dword [rsp + 0x28], eax
movzx eax, word [rdi + 0x1e]
mov word [rsp + 0x2c], ax
lea rdx, [rsp + 0xc8]
lea rcx, [rsp + 0x578]
mov r8d, 0x188
call sym.memcpy
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x38], eax
movzx eax, word [rsp + 0x2c]
mov word [rsp + 0x3c], ax
movzx eax, byte [0x140361100]
mov rcx, qword [0x1403610c8]
test rcx, rcx
jne 0x1400c467f
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x1400c475b
mov rcx, rax
mov qword [0x1403610c8], rax
mov r8d, 0x1b8
xor edx, edx
call fcn.14014aadc
test rax, rax
je 0x1400c475b
mov rdi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov qword [rax + 0x10], r14
movups xmmword [rax + 0x18], xmm6
mov byte [rax + 0x28], bpl
mov byte [rax + 0x29], bl
mov eax, dword [rsp + 0x38]
mov dword [rdi + 0x2a], eax
movzx eax, word [rsp + 0x3c]
mov word [rdi + 0x2e], ax
lea rcx, [rdi + 0x30]
lea rdx, [rsp + 0x578]
mov r8d, 0x188
call sym.memcpy
lea rax, str._x_b_
movq xmm0, rax
movq xmm6, rdi
punpcklqdq xmm6, xmm0
mov dil, 2
movzx ebx, byte [rsp + 0xa0]
lea rcx, [rsp + 0x260]
call sym.core::ptr::drop_in_place_aho_corasick::nfa::noncontiguous::NFA_::h7d6a859e6b260fe3
movdqu xmmword [rsi], xmm6
mov byte [rsi + 0x10], dil
mov byte [rsi + 0x11], bl
mov eax, dword [rsp + 0x20]
mov dword [rsi + 0x12], eax
movzx eax, word [rsp + 0x24]
mov word [rsi + 0x16], ax
movaps xmm6, xmmword [rsp + 0x700]
add rsp, 0x718
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov ecx, 8
mov edx, 0x1c8
call sym.alloc::alloc::handle_alloc_error::hc580476980f9927e
mov ecx, 8
mov edx, 0x190
call sym.alloc::alloc::handle_alloc_error::hc580476980f9927e
mov ecx, 8
mov edx, 0x1b8
call sym.alloc::alloc::handle_alloc_error::hc580476980f9927e
int3