Function at 0x140027ea0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xd68
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xcd0], xmm6
mov r13, rdx
mov qword [rbp + 0xc40], rcx
mov rdx, qword [0x14004d020]
test rdx, rdx
je 0x1400297dc
mov rax, qword [0x14004d018]
mov rcx, rdx
shl rcx, 6
add rcx, rax
xor r15d, r15d
mov r8, rax
mov rdi, qword [rbp + 0xc40]
mov r10, qword [r8 + 0x28]
mov r9, qword [r8 + 0x30]
mov r12, qword [r8 + 0x38]
add r8, 0x40
shl r9, 4
nop
test r9, r9
je 0x140027f40
mov r11, r10
add r10, 0x10
mov rsi, qword [r11]
add rsi, r12
add r9, 0xfffffffffffffff0
cmp rsi, rdi
ja 0x140027f10
add rsi, qword [r11 + 8]
cmp rsi, rdi
jbe 0x140027f10
jmp 0x140027f4d
inc r15
cmp r8, rcx
jne 0x140027efa
jmp 0x1400297dc
mov rdi, qword [0x14004d038]
test rdi, rdi
je 0x140027f89
mov r14, qword [0x14004d030]
imul rcx, rdi, 0x230
xor r8d, r8d
xor ebx, ebx
nop dword [rax]
cmp qword [r14 + r8], r15
je 0x1400281a7
inc rbx
add r8, 0x230
cmp rcx, r8
jne 0x140027f70
cmp rdx, r15
jbe 0x14002b9c9
mov rcx, r15
shl rcx, 6
mov rdx, qword [rax + rcx + 8]
mov r8, qword [rax + rcx + 0x10]
lea rcx, [rbp + 0x8c0]
call fcn.140027390
test byte [rbp + 0x8c0], 1
je 0x1400297dc
mov rsi, qword [rbp + 0x8c8]
mov r14, qword [rbp + 0x8d0]
mov rbx, qword [rbp + 0x8d8]
mov qword [rbp + 0x738], 0
mov qword [rbp + 0x740], 8
xorps xmm0, xmm0
movups xmmword [rbp + 0x748], xmm0
mov qword [rbp + 0x758], 8
mov qword [rbp + 0x760], 0
cmp rbx, 0x40
jb 0x1400297c0
cmp word [r14], 0x5a4d
jne 0x1400297c0
mov eax, dword [r14 + 0x3c]
mov rcx, rbx
sub rcx, rax
setb dl
cmp rcx, 0x88
setb cl
or cl, dl
jne 0x1400297c0
cmp dword [r14 + rax], 0x4550
jne 0x1400297c0
cmp word [r14 + rax + 0x18], 0x20b
jne 0x1400297c0
movzx ecx, word [r14 + rax + 0x14]
cmp rcx, 0x70
jb 0x1400297c0
lea rdx, [rax + 0x88]
add rcx, 0xffffffffffffff90
mov r8, rbx
sub r8, rdx
cmp r8, rcx
jb 0x1400297c0
mov r8d, dword [r14 + rax + 0x84]
shl r8, 3
cmp r8, rcx
ja 0x1400297c0
add rcx, rdx
movzx r10d, word [r14 + rax + 6]
lea edx, [r10*8]
lea rdx, [rdx + rdx*4]
mov r8, rbx
sub r8, rcx
setb r9b
cmp r8, rdx
setb dl
or dl, r9b
add rcx, r14
xor r11d, r11d
test dl, dl
cmove r11, rcx
jne 0x1400297c0
mov r8d, dword [r14 + rax + 0xc]
test r8, r8
je 0x140028de0
mov rcx, rbx
sub rcx, r8
jb 0x1400297c0
mov r9d, dword [r14 + rax + 0x10]
lea rdx, [r9 + r9]
lea rdx, [rdx + rdx*8]
cmp rcx, rdx
jb 0x1400297c0
add rdx, r8
mov rcx, rbx
sub rcx, rdx
cmp rcx, 4
jb 0x1400297c0
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0xc60], rdx
mov ecx, dword [r14 + rdx]
mov qword [rbp + 0xc68], rcx
mov rax, qword [r14 + rax + 0x30]
mov qword [rbp + 0xc70], rax
mov qword [rbp + 0x8c0], 0
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov qword [rbp + 0xc88], r9
test r9, r9
je 0x14002ac9c
add r8, r14
mov eax, 8
mov qword [rbp + 0xcc8], 0
xor esi, esi
mov qword [rbp + 0xca0], r10
mov qword [rbp + 0xc98], r11
mov r9, qword [rbp + 0xc88]
mov qword [rbp + 0xc58], r8
jmp 0x14002945e
test rbx, rbx
mov qword [rbp + 0xb98], r13
je 0x14002824d
mov r15, r14
imul r14, rbx, 0x230
lea rsi, [r15 + r14]
lea rcx, [rbp - 0x58]
mov r8d, 0x230
mov rdx, rsi
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
lea rdx, [r15 + r14]
add rdx, 0x230
not rbx
add rbx, rdi
imul r8, rbx, 0x230
mov rcx, rsi
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
lea rsi, [rdi - 1]
mov qword [0x14004d038], rsi
cmp rsi, qword [0x14004d028]
jne 0x140028217
lea rcx, [0x140059d48]
call fcn.140035550
mov r14, qword [0x14004d030]
lea rcx, [r14 + 0x230]
imul r8, rsi, 0x230
mov rdx, r14
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
lea rdx, [rbp - 0x58]
mov r8d, 0x230
mov rcx, r14
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [0x14004d038], rdi
mov qword [rbp + 0xc18], rsi
mov qword [rbp + 0xb98], r13
mov qword [rbp + 0x8c8], 8
mov qword [rbp + 0x8d0], 0
mov rax, qword [rbp + 0x8c8]
mov qword [rbp + 0x510], rax
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0x518], rax
xor esi, esi
xor edi, edi
xor ecx, ecx
xor eax, eax
lea r9, [rbp + 0x858]
movabs r8, 0x8000000000000000
mov rdx, qword [rbp + 0x510]
mov qword [r9], rdx
mov rdx, qword [rbp + 0x518]
mov qword [r9 + 8], rdx
mov qword [rbp + 0x850], rax
mov qword [rbp + 0x868], r14
mov qword [rbp + 0x870], rbx
mov qword [rbp + 0x878], r11
mov qword [rbp + 0x880], r10
mov qword [rbp + 0x888], rcx
mov qword [rbp + 0x890], rbx
mov qword [rbp + 0x898], rdi
mov qword [rbp + 0x8a0], rsi
mov qword [rbp + 0x7a0], r8
lea rdx, str..debug_abbrev.debug_addr.debug_aranges.debug_cu_index.debug_info.debug_line.debug_line_str.debug_loc.debug_loclists.debug_ranges.debug_rnglists.debug_str.debug_str_offsets.debug_tu_index.debug_typesUtf8Errorvalid_up_toerror_lenNoneSome:
lea rsi, [rbp + 0x850]
mov r8d, 0xd
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcc8], rdx
mov edi, 1
cmove rax, rdi
mov qword [rbp + 0xcc0], rax
lea rdx, [0x140057895]
mov r8d, 0xb
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb0], rdx
cmove rax, rdi
mov qword [rbp + 0xca0], rax
lea rdx, [0x1400578a0]
mov r8d, 0xe
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc98], rdx
cmove rax, rdi
mov qword [rbp + 0xc88], rax
lea rdx, [0x1400578bd]
mov r8d, 0xb
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc70], rdx
cmove rax, rdi
mov qword [rbp + 0xc58], rax
lea rdx, [0x1400578c8]
mov r8d, 0xb
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc60], rdx
cmove rax, rdi
mov qword [rbp + 0xc68], rax
lea rdx, [0x1400578d3]
mov r8d, 0xf
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xcb8], rdx
cmove rax, rdi
mov qword [rbp + 0xc78], rax
lea rdx, [0x140057917]
mov r8d, 0xa
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc48], rdx
cmove rax, rdi
mov qword [rbp + 0xc80], rax
lea rdx, [0x140057921]
mov r8d, 0x12
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc90], rdx
cmove rax, rdi
mov qword [rbp + 0xca8], rax
lea rdx, [0x140057942]
mov r8d, 0xc
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc50], rdx
cmove rax, rdi
mov qword [rbp + 0xc08], rax
lea rdx, [0x1400578e2]
mov r8d, 0xa
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xc10], rdx
cmove rax, rdi
mov qword [rbp + 0xc00], rax
lea rdx, [0x1400578ec]
mov r8d, 0xf
mov rcx, rsi
call fcn.14002c130
test rax, rax
cmove rdx, rax
mov qword [rbp + 0xbc8], rdx
cmove rax, rdi
mov qword [rbp + 0xc38], rax
lea rdx, [0x1400578fb]
mov r8d, 0xd
mov rcx, rsi
call fcn.14002c130
mov r13, rax
mov rsi, rdx
lea rdx, [0x140057908]
mov r8d, 0xf
lea rcx, [rbp + 0x850]
call fcn.14002c130
test r13, r13
cmove rsi, r13
cmove r13, rdi
test rax, rax
cmovne rdi, rax
cmove rdx, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x9a0], xmm0
mov rax, qword [rbp + 0xcc0]
mov qword [rbp + 0x8d0], rax
mov rax, qword [rbp + 0xcc8]
mov qword [rbp + 0x8d8], rax
mov rax, qword [rbp + 0xca0]
mov qword [rbp + 0x8e0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rbp + 0x8e8], rax
mov rax, qword [rbp + 0xc88]
mov qword [rbp + 0x8f0], rax
mov rax, qword [rbp + 0xc98]
mov qword [rbp + 0x8f8], rax
mov rax, qword [rbp + 0xc58]
mov qword [rbp + 0x900], rax
mov rax, qword [rbp + 0xc70]
mov qword [rbp + 0x908], rax
mov rax, qword [rbp + 0xc68]
mov qword [rbp + 0x910], rax
mov rax, qword [rbp + 0xc60]
mov qword [rbp + 0x918], rax
mov rax, qword [rbp + 0xc78]
mov qword [rbp + 0x920], rax
mov rax, qword [rbp + 0xcb8]
mov qword [rbp + 0x928], rax
mov rax, qword [rbp + 0xc80]
mov qword [rbp + 0x930], rax
mov rax, qword [rbp + 0xc48]
mov qword [rbp + 0x938], rax
mov rax, qword [rbp + 0xca8]
mov qword [rbp + 0x940], rax
mov rax, qword [rbp + 0xc90]
mov qword [rbp + 0x948], rax
mov rax, qword [rbp + 0xc08]
mov qword [rbp + 0x950], rax
mov rax, qword [rbp + 0xc50]
mov qword [rbp + 0x958], rax
mov rax, qword [rbp + 0xc00]
mov qword [rbp + 0x960], rax
mov rax, qword [rbp + 0xc10]
mov qword [rbp + 0x968], rax
mov rax, qword [rbp + 0xc38]
mov qword [rbp + 0x970], rax
mov rax, qword [rbp + 0xbc8]
mov qword [rbp + 0x978], rax
mov qword [rbp + 0x980], r13
mov qword [rbp + 0x988], rsi
mov qword [rbp + 0x990], rdi
mov qword [rbp + 0x998], rdx
mov qword [rbp + 0x9b8], 0
mov byte [rbp + 0x9c0], 0
mov qword [rbp + 0x8c0], 1
mov qword [rbp + 0x8c8], 1
movzx eax, byte [0x140061030]
mov ecx, 0x108
call fcn.1400474f0
test rax, rax
je 0x14002bae0
mov r13, rax
lea rdx, [rbp + 0x8c0]
mov r8d, 0x108
mov rcx, rax
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov qword [rbp + 0xb90], r13
mov qword [rbp + 0xb70], 0
mov qword [rbp + 0xb78], 8
mov qword [rbp + 0xb80], 0
mov rax, qword [r13 + 0x30]
mov rcx, qword [r13 + 0x38]
mov qword [rbp + 0xc88], rax
mov qword [rbp + 0x8a8], rax
mov qword [rbp + 0x8b0], rcx
mov qword [rbp + 0x8b8], 0
mov qword [rbp + 0xca0], rcx
test rcx, rcx
mov qword [rbp + 0xc98], r13
je 0x140029658
mov edi, 8
mov qword [rbp + 0xcc8], 0
mov eax, 8
mov qword [rbp + 0xcb0], rax
xor esi, esi
mov r13, qword [rbp + 0xca0]
jmp 0x140029377
mov rax, qword [rbp + 0xb78]
mov qword [rbp + 0xcb0], rax
mov rax, qword [rbp + 0xcb0]
mov qword [rax + rdi - 8], r13
mov rcx, qword [rbp + 0xcc0]
mov qword [rax + rdi], rcx
mov rcx, qword [rbp + 0xcc8]
inc rcx
mov qword [rbp + 0xcc8], rcx
mov qword [rbp + 0xb80], rcx
mov r13, qword [rbp + 0x8b0]
add rdi, 0x10
test r13, r13
je 0x1400294f3
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0x8a8]
mov r8, rsi
call fcn.14002c3b0
cmp byte [rbp + 0x8e9], 3
je 0x14002973d
sub r13, qword [rbp + 0x8b0]
mov rax, qword [rbp + 0x8d0]
mov qword [rbp + 0xcc0], rax
mov rsi, r13
add rsi, qword [rbp + 0x8b8]
mov r13, qword [rbp + 0x8e0]
mov qword [rbp + 0x8b8], rsi
mov rax, qword [rbp + 0xcc8]
cmp rax, qword [rbp + 0xb70]
jne 0x140029334
lea rcx, [rbp + 0xb70]
call fcn.14002c660
jmp 0x140029326
mov rax, qword [rbp + 0x8c8]
add rdi, qword [rbp + 0xc70]
add r13, rdi
mov rdx, qword [rbp + 0xcc8]
mov rcx, rdx
shl rcx, 4
mov qword [rax + rcx], r13
mov r8, qword [rbp + 0xcb0]
mov qword [rax + rcx + 8], r8
inc rdx
mov qword [rbp + 0xcc8], rdx
mov qword [rbp + 0x8d0], rdx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
mov r8, qword [rbp + 0xc58]
mov r9, qword [rbp + 0xc88]
mov rdi, qword [rbp + 0xcc0]
add rsi, rdi
inc rsi
cmp rsi, r9
jae 0x140029595
lea rcx, [rsi + rsi*8]
movzx edi, byte [r8 + rcx*2 + 0x11]
movzx edx, word [r8 + rcx*2 + 0xe]
and edx, 0x30
cmp dx, 0x20
jne 0x14002944f
lea r13, [r8 + rcx*2]
movzx edx, word [r13 + 0xc]
cmp edx, 0xfeff
movsx ecx, dx
cmovb ecx, edx
test ecx, ecx
jle 0x14002944f
mov qword [rbp + 0xcc0], rdi
mov edx, ecx
dec rdx
lea rcx, [rdx + rdx*4]
lea rcx, [r11 + rcx*8]
cmp rdx, r10
mov edx, 0x1d
cmovae rcx, rdx
jae 0x14002ac57
test rcx, rcx
je 0x14002ac57
mov qword [rbp + 0xcb0], r13
mov edi, dword [r13 + 8]
mov r13d, dword [rcx + 0xc]
mov rcx, qword [rbp + 0xcc8]
cmp rcx, qword [rbp + 0x8c0]
jne 0x1400293f3
lea rcx, [rbp + 0x8c0]
call fcn.14002c050
jmp 0x1400293ec
cmp qword [rbp + 0xcc8], 2
mov r13, qword [rbp + 0xc98]
jb 0x140029658
mov rcx, qword [rbp + 0xb78]
cmp qword [rbp + 0xcc8], 0x15
jae 0x140029645
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r13, qword [rbp + 0xc98]
jmp 0x14002955e
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x140029658
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x14002954a
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x140029540
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x140029571
add r10, rcx
jmp 0x140029543
cmp qword [rbp + 0xcc8], 2
jb 0x14002ac9c
mov rcx, qword [rbp + 0x8c8]
cmp qword [rbp + 0xcc8], 0x15
jae 0x14002ac82
mov rsi, qword [rbp + 0xcc8]
shl rsi, 4
add rsi, rcx
lea r8, [rcx + 0x10]
mov eax, 0x10
mov r9, rcx
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
jmp 0x14002960e
mov r10, rcx
mov qword [r10], r8
mov qword [r10 + 8], r9
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea r8, [rdx + 0x10]
add rax, 0x10
mov r9, rdx
cmp r8, rsi
je 0x14002ac9c
mov rdx, r8
mov r8, qword [r9 + 0x10]
cmp r8, qword [r9]
jae 0x1400295fa
mov r9, qword [r9 + 0x18]
mov r11, rax
movups xmm0, xmmword [rcx + r11 - 0x10]
movups xmmword [rcx + r11], xmm0
cmp r11, 0x10
je 0x1400295e2
lea r10, [r11 - 0x10]
cmp r8, qword [rcx + r11 - 0x20]
mov r11, r10
jb 0x140029621
add r10, rcx
jmp 0x1400295e5
mov rdx, qword [rbp + 0xcc8]
call fcn.14002c740
mov r13, qword [rbp + 0xc98]
mov qword [rbp + 0xc20], 0
mov qword [rbp + 0xc28], 8
mov qword [rbp + 0xc30], 0
mov qword [rbp + 0xbe0], 0
mov qword [rbp + 0xbe8], 8
mov qword [rbp + 0xbf0], 0
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rbp + 0xb08], xmm0
mov qword [rbp + 0xb18], 0
lea rcx, [rbp + 0x8c0]
lea rdx, [rbp + 0xb08]
call fcn.14002c870
mov rax, qword [rbp + 0x8c0]
cmp rax, 3
jne 0x1400297f7
mov rcx, r13
add rcx, 0x10
mov qword [rbp + 0xcc8], rcx
lea rdi, [rbp + 0x8d8]
mov rcx, qword [r13 + 0xd0]
mov qword [rbp + 0xc60], rcx
mov rcx, qword [r13 + 0xd8]
mov qword [rbp + 0xc70], rcx
movzx ecx, byte [r13 + 0x100]
mov byte [rbp + 0xc68], cl
mov rcx, qword [r13 + 0x20]
mov qword [rbp + 0xc58], rcx
mov rcx, qword [r13 + 0x28]
mov qword [rbp + 0xcb0], rcx
jmp 0x140029879
cmp qword [rbp + 0x8c0], 0
je 0x14002ac76
mov r8, qword [rbp + 0x8c8]
mov rcx, qword [0x140061108]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
mov rsi, qword [rbp + 0xc18]
jmp 0x1400297c0
mov rdx, qword [rbp + 0xcc8]
call fcn.14002bf90
mov r10, qword [rbp + 0xca0]
mov r11, qword [rbp + 0xc98]
lea rcx, [rbp + 0x8c8]
mov rax, qword [rbp + 0x8c0]
movups xmm0, xmmword [rcx]
movaps xmmword [rbp + 0x510], xmm0
mov rcx, rax
neg rcx
mov rsi, qword [rbp + 0xc18]
mov rdi, qword [rbp + 0xc60]
jo 0x1400297c0
mov rsi, qword [rbp + 0xc68]
add rsi, rdi
mov rcx, r14
jmp 0x140028e28
lea r8, [0x140059d60]
mov rcx, r15
call fcn.14000622f