Function at 0x1400d9070
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rdi
push rsi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0xe0]
xorps xmm4, xmm4
movaps xmmword [rbp - 0x60], xmm4
xor eax, eax
mov qword [rbp - 0x50], rax
mov rsi, qword [0x14027a1a8]
mov rax, rsi
cmp word [rax], 0x5a4d
jne 0x1400d90bc
movsxd rdx, dword [rax + 0x3c]
cmp word [rsi + rdx + 0x18], 0x20b
sete dl
movzx edx, dl
jmp 0x1400d90be
xor edx, edx
mov byte [0x14027a1a0], dl
xor edi, edi
xor ebx, ebx
cmp byte [0x14027a1a0], 0
je 0x1400d90da
movsxd rbx, dword [rax + 0x3c]
add rbx, rsi
jmp 0x1400d90e5
movsxd rdi, dword [rax + 0x3c]
add rdi, rsi
mov eax, dword [rdi]
jmp 0x1400d90e7
mov eax, dword [rbx]
cmp eax, 0x4550
jne 0x1400d9640
call fcn.140136ed0
cmp eax, 8
je 0x1400d9103
mov ecx, 0x40
jmp 0x1400d9108
mov ecx, 0x60
call fcn.1400d9770
mov rsi, rax
call fcn.140136ed0
cmp eax, 8
je 0x1400d9121
mov ecx, 0x10
jmp 0x1400d9126
mov ecx, 0x18
movsxd rcx, ecx
call fcn.1400bad30
mov qword [rbp - 0x40], rax
xor ecx, ecx
mov dword [rsp + 0x20], ecx
mov dword [rsp + 0x28], 4
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], rax
mov rcx, qword [0x140278c20]
mov rcx, qword [rcx + 8]
lea rdx, [0x140142480]
xor r8d, r8d
xor r9d, r9d
call fcn.1400d98a0
test eax, eax
je 0x1400d9415
test rsi, 0xffffffffffff0000
je 0x1400d91aa
mov rcx, rsi
mov qword [rbp - 0x68], rcx
lea rcx, [rbp - 0x90]
call fcn.1400028f0
mov rcx, qword [rbp - 0x68]
call sub.KERNEL32.dll_LocalFree
lea rcx, [rbp - 0x90]
call fcn.140002940
cmp byte [0x14027a1a0], 0
jne 0x1400d954a
mov esi, dword [rdi + 0x34]
mov rax, qword [rbp - 0x40]
mov r14, qword [rax]
mov r15, rax
call fcn.140136ed0
cmp eax, 8
je 0x1400d9553
mov ecx, 4
movsxd rcx, ecx
mov r15, qword [r15 + rcx]
mov rcx, r14
mov rdx, rsi
call fcn.1400d9a80
test r14, r14
je 0x1400d951f
test r15, r15
je 0x1400d951f
movzx ecx, byte [0x14027a1a0]
test ecx, ecx
jne 0x1400d955d
mov r8d, dword [rdi + 0x50]
test ecx, ecx
jne 0x1400d9566
mov r12d, dword [rdi + 0x54]
test ecx, ecx
jne 0x1400d956f
movzx edx, word [rdi + 6]
movzx r13d, dx
test ecx, ecx
jne 0x1400d9578
mov eax, dword [rdi + 0x28]
mov dword [rbp - 0x44], eax
mov dword [rsp + 0x20], 0x40
mov rcx, r14
mov rdx, rsi
mov r9d, 0x3000
call fcn.1400d6c80
mov rsi, rax
mov r8, qword [0x14027a1a8]
xor ecx, ecx
mov dword [rbp - 0x50], ecx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
mov rcx, r14
mov rdx, rsi
mov r9d, r12d
call fcn.1400d9af0
test eax, eax
jne 0x1400d94f9
cmp byte [0x14027a1a0], 0
jne 0x1400d9580
add rdi, 0xf8
xor ebx, ebx
test r13d, r13d
jle 0x1400d92d8
mov edx, dword [rdi + 0xc]
add rdx, rsi
mov r8d, dword [rdi + 0x14]
add r8, qword [0x14027a1a8]
mov r9d, dword [rdi + 0x10]
xor ecx, ecx
mov dword [rbp - 0x50], ecx
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
mov rcx, r14
call fcn.1400d9af0
test eax, eax
jne 0x1400d94d3
add rdi, 0x28
inc ebx
cmp ebx, r13d
jl 0x1400d929a
cmp byte [0x14027a1a0], 0
jne 0x1400d958c
mov ecx, 0x2cc
movsxd rcx, ecx
call fcn.1400bad30
mov rdi, rax
cmp byte [0x14027a1a0], 0
je 0x1400d9596
mov dword [rdi + 0x30], 0x10001b
cmp byte [0x14027a1a0], 0
jne 0x1400d95a1
mov rcx, r15
mov rdx, rdi
call fcn.1400d9a00
test eax, eax
je 0x1400d94ad
mov ebx, dword [rdi + 0xa4]
mov r12, qword [rdi + 0x88]
lea rcx, [0x14019d040]
mov edx, 8
call fcn.140002580
mov qword [rax + 0x10], rsi
cmp byte [0x14027a1a0], 0
jne 0x1400d95b9
add ebx, 8
movsxd rdx, ebx
xor ecx, ecx
mov qword [rbp - 0x60], rcx
mov dword [rbp - 0x50], ecx
mov qword [rbp - 0x60], rax
mov rcx, qword [rbp - 0x60]
cmp dword [rcx + 8], 0
jne 0x1400d95c3
xor r8d, r8d
lea rcx, [rbp - 0x50]
mov qword [rsp + 0x20], rcx
mov rcx, r14
mov r9d, 8
call fcn.1400d9af0
xor ecx, ecx
test eax, eax
sete cl
xor edx, edx
mov qword [rbp - 0x60], rdx
test ecx, ecx
je 0x1400d9461
cmp byte [0x14027a1a0], 0
je 0x1400d95df
mov ecx, dword [rbp - 0x44]
add rcx, rsi
mov qword [rdi + 0x80], rcx
cmp byte [0x14027a1a0], 0
jne 0x1400d95f1
mov rcx, r15
mov rdx, rdi
call fcn.1400d6800
test eax, eax
je 0x1400d943b
mov rcx, r15
call fcn.1400d68c0
mov qword [rbp - 0x58], r14
jmp 0x1400d961f
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014ada8]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014aa70]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014ada8]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014ae60]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014ab20]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014ab90]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014aee8]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014adf8]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014aab8]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
call fcn.1400cbd50
mov rsi, qword [rbx + 0x30]
jmp 0x1400d91ba
mov ecx, 8
jmp 0x1400d91d7
mov r8d, dword [rbx + 0x50]
jmp 0x1400d920e
mov r12d, dword [rbx + 0x54]
jmp 0x1400d921a
movzx edx, word [rbx + 6]
jmp 0x1400d9226
mov eax, dword [rbx + 0x28]
jmp 0x1400d9235
lea rdi, [rbx + 0x108]
jmp 0x1400d9293
mov ecx, 0x4d0
jmp 0x1400d92ea
mov dword [rdi], 0x10002
jmp 0x1400d9309
mov rcx, r15
mov rdx, rdi
call fcn.1400d99a0
test eax, eax
je 0x1400d9487
jmp 0x1400d9329
lea rdx, [r12 + 0x10]
jmp 0x1400d935e
mov r8, qword [rbp - 0x60]
cmp dword [r8 + 8], 0
jbe 0x1400d9545
mov r8, qword [rbp - 0x60]
add r8, 0x10
jmp 0x1400d937c
mov ecx, dword [rbp - 0x44]
add rcx, rsi
mov qword [rdi + 0xb0], rcx
jmp 0x1400d93c2
mov rcx, r15
mov rdx, rdi
call fcn.1400d6860
test eax, eax
je 0x1400d93ef
jmp 0x1400d93de
mov rcx, rsp
call fcn.1400d96ba
nop
mov rax, qword [rbp - 0x58]
add rsp, 0xa8
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x140165f80]
call fcn.140002460
mov rsi, rax
mov rcx, rsi
lea rdx, [0x14014c628]
call fcn.14007d550
mov rcx, rsi
call fcn.140002a50
xor eax, eax
jmp 0x1400d962c