Function at 0x1400bace3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
mov r15, rdx
mov rdi, rcx
lea rbx, [rsp + 0xc0]
mov rcx, rbx
call fcn.140105d26
cmp byte [rbx], 0
je 0x1400bad25
mov rax, qword [rsp + 0xc8]
mov qword [rdi], rax
mov byte [rdi + 0x20], 2
jmp 0x1400bb6ca
cmp byte [rsp + 0xc1], 0
je 0x1400bb3af
movzx eax, byte [rsp + 0xc2]
cmp eax, 0x5b
je 0x1400bb15d
cmp eax, 0x7b
jne 0x1400bb47e
dec byte [r15 + 0x30]
je 0x1400bb465
mov qword [rsp + 0xd8], rdi
inc qword [r15 + 0x10]
lea rax, [r15 + 0x18]
mov qword [rsp + 0x30], rax
mov byte [rsp + 0x2f], 2
xor eax, eax
mov qword [rsp + 0xa8], rax
mov dil, 1
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x7c], 0
mov dword [rsp + 0x80], 0
mov dword [rsp + 0x84], 0
xor eax, eax
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x6c], 0
lea rcx, [rsp + 0x90]
mov rdx, r15
call fcn.140105d26
cmp byte [rsp + 0x90], 0
jne 0x1400bb3a2
cmp byte [rsp + 0x91], 0
je 0x1400bb4be
mov al, byte [rsp + 0x92]
movzx ecx, al
cmp ecx, 0x2c
je 0x1400bae04
cmp ecx, 0x7d
je 0x1400bb3c0
test dil, dil
jne 0x1400bae0d
jmp 0x1400bb4e6
test dil, dil
je 0x1400baf51
lea rdi, [rsp + 0x38]
cmp al, 0x22
jne 0x1400bb497
inc qword [r15 + 0x10]
and qword [r15 + 0x28], 0
mov rcx, rdi
mov rdx, r15
mov r8, qword [rsp + 0x30]
call fcn.140104d74
cmp dword [rsp + 0x38], 2
mov rbp, qword [rsp + 0x40]
je 0x1400bb5dc
mov r14d, ebx
mov r13, qword [rsp + 0x48]
mov r9d, 9
mov rcx, rbp
mov rdx, r13
lea r8, str.EtwSizeKbDataRetransmitIntervalSecDataReportTimesBeforeDedupSenseIpcQueueSizeSenseIpcSendTimeoutMsCpuLimitDynamicCpuLimitPercentMemLimitMbstruct_OperationalConfigurationstruct_OperationalConfiguration_with_8_elements_tB
call fcn.140073881
test al, al
je 0x1400bae9b
cmp dword [rsp + 0x6c], 1
je 0x1400bb4f4
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov ebx, dword [rsp + 0x3c]
mov dword [rsp + 0x6c], 1
xor edi, edi
jmp 0x1400badb6
mov r9d, 0x19
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d4169]
call fcn.140073881
test al, al
je 0x1400baefc
cmp qword [rsp + 0xa0], 1
je 0x1400bb505
mov rcx, rdi
mov rdx, r15
call fcn.1400b9253
cmp qword [rsp + 0x38], 0
jne 0x1400bb398
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0xe0], rax
mov eax, 1
mov qword [rsp + 0xa0], rax
jmp 0x1400bafd3
mov r9d, 0x1a
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d4182]
call fcn.140073881
test al, al
je 0x1400baf84
cmp dword [rsp + 0x84], 1
je 0x1400bb540
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov r12d, dword [rsp + 0x3c]
mov dword [rsp + 0x84], 1
jmp 0x1400bafd3
inc qword [r15 + 0x10]
lea rdi, [rsp + 0x38]
mov rcx, rdi
mov rdx, r15
call fcn.140105d26
cmp byte [rsp + 0x38], 0
jne 0x1400bb398
cmp byte [rsp + 0x39], 0
je 0x1400bb527
mov al, byte [rsp + 0x3a]
jmp 0x1400bae12
mov r9d, 0x11
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d419c]
call fcn.140073881
test al, al
je 0x1400bafdd
cmp dword [rsp + 0x80], 1
je 0x1400bb562
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov esi, dword [rsp + 0x3c]
mov dword [rsp + 0x80], 1
xor edi, edi
mov ebx, r14d
jmp 0x1400badb6
mov r9d, 0x15
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d41ad]
call fcn.140073881
test al, al
je 0x1400bb037
cmp dword [rsp + 0x7c], 1
je 0x1400bb570
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov ebx, r14d
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0xbc], eax
mov dword [rsp + 0x7c], 1
xor edi, edi
jmp 0x1400badb6
mov r9d, 0xf
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d41c2]
call fcn.140073881
test al, al
je 0x1400bb086
cmp byte [rsp + 0x2f], 2
jne 0x1400bb5ae
mov rcx, rdi
mov rdx, r15
call fcn.1400bb75e
cmp byte [rsp + 0x38], 0
jne 0x1400bb398
mov ebx, r14d
mov al, byte [rsp + 0x39]
mov byte [rsp + 0x2f], al
xor edi, edi
jmp 0x1400badb6
mov r9d, 0xf
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d41d1]
call fcn.140073881
test al, al
je 0x1400bb0e0
cmp dword [rsp + 0x78], 1
je 0x1400bb5c8
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov ebx, r14d
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0xb8], eax
mov dword [rsp + 0x78], 1
xor edi, edi
jmp 0x1400badb6
mov r9d, 0xa
mov rcx, rbp
mov rdx, r13
lea r8, [0x1401d41e0]
call fcn.140073881
test al, al
je 0x1400bb142
cmp dword [rsp + 0xa8], 1
je 0x1400bb6ee
mov ebx, r14d
mov rcx, rdi
mov rdx, r15
call fcn.1400bb723
cmp dword [rsp + 0x38], 0
jne 0x1400bb398
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0xb4], eax
mov eax, 1
mov qword [rsp + 0xa8], rax
xor edi, edi
jmp 0x1400badb6
mov rcx, r15
call fcn.1400b8f62
xor edi, edi
test rax, rax
mov ebx, r14d
je 0x1400badb6
jmp 0x1400bb5d9
dec byte [r15 + 0x30]
je 0x1400bb465
inc qword [r15 + 0x10]
lea rdx, [rsp + 0x90]
mov qword [rdx], r15
mov byte [rdx + 8], 1
lea rbx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400bb796
cmp dword [rbx], 0
jne 0x1400bb2d7
cmp dword [rsp + 0x3c], 0
je 0x1400bb4b0
lea rbx, [rsp + 0x38]
mov r13d, dword [rbx + 8]
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400b928f
mov rax, qword [rbx]
cmp rax, 2
je 0x1400bb2d7
test rax, rax
je 0x1400bb4d5
lea rbp, [rsp + 0x38]
mov rsi, qword [rbp + 8]
lea rdx, [rsp + 0x90]
mov rcx, rbp
call fcn.1400bb796
cmp dword [rbp], 0
jne 0x1400bb2d7
mov qword [rsp + 0x30], rsi
cmp dword [rsp + 0x3c], 0
je 0x1400bb516
lea rbx, [rsp + 0x38]
mov ebp, dword [rbx + 8]
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400bb796
cmp dword [rbx], 0
jne 0x1400bb2d7
cmp dword [rsp + 0x3c], 0
je 0x1400bb551
lea rbx, [rsp + 0x38]
mov esi, dword [rbx + 8]
lea rdx, [rsp + 0x90]
mov rcx, rbx
call fcn.1400bb796
cmp dword [rbx], 0
jne 0x1400bb2d7
cmp dword [rsp + 0x3c], 0
je 0x1400bb57e
lea r12, [rsp + 0x38]
mov ebx, dword [r12 + 8]
lea rdx, [rsp + 0x90]
mov rcx, r12
call fcn.1400bb8b3
cmp byte [r12], 0
jne 0x1400bb2d7
mov r12b, byte [rsp + 0x39]
cmp r12b, 2
je 0x1400bb5b7
lea r14, [rsp + 0x38]
lea rdx, [rsp + 0x90]
mov rcx, r14
call fcn.1400bb796
cmp dword [r14], 0
jne 0x1400bb2d7
mov dword [rsp + 0xa0], ebx
cmp dword [rsp + 0x3c], 0
je 0x1400bb6ff
mov ebx, ebp
lea rbp, [rsp + 0x38]
mov r14d, dword [rbp + 8]
lea rdx, [rsp + 0x90]
mov rcx, rbp
call fcn.1400bb796
cmp dword [rbp], 0
je 0x1400bb58f
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov r12b, 2
inc byte [r15 + 0x30]
mov eax, dword [rsp + 0x71]
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x5c], ecx
mov dword [rsp + 0x59], eax
mov rcx, r15
call fcn.1401063ce
mov rdx, qword [rsp + 0x30]
mov qword [rsp + 0x38], rdx
mov dword [rsp + 0x40], r13d
mov dword [rsp + 0x44], ebx
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x4c], ebp
mov dword [rsp + 0x50], r14d
mov ecx, dword [rsp + 0x6c]
mov dword [rsp + 0x54], ecx
mov byte [rsp + 0x58], r12b
mov qword [rsp + 0x60], rax
cmp r12b, 2
jne 0x1400bb355
mov r12b, 2
test rax, rax
je 0x1400bb390
lea rcx, [rsp + 0x60]
mov rsi, rdx
call fcn.1400aec60
mov rax, rsi
jmp 0x1400bb691
test rax, rax
jne 0x1400bb657
lea rax, [rsp + 0x40]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xd0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xc0], xmm0
mov eax, dword [rsp + 0x71]
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x8b], ecx
mov rax, rdx
jmp 0x1400bb691
mov rbp, qword [rsp + 0x40]
jmp 0x1400bb5dc
mov rbp, qword [rsp + 0x98]
jmp 0x1400bb5dc
lea rdx, [rsp + 0x38]
mov qword [rdx], 5
jmp 0x1400bb471
cmp dword [rsp + 0x6c], 0
mov r8d, 0x14
cmove ebx, r8d
cmp qword [rsp + 0xa0], 0
mov ecx, 0x15180
mov rbp, qword [rsp + 0xe0]
cmove rbp, rcx
cmp dword [rsp + 0x84], 0
mov ecx, 1
cmove r12d, ecx
mov dword [rsp + 0x30], r12d
cmp dword [rsp + 0x80], 0
mov edx, 0xc8
cmove esi, edx
cmp dword [rsp + 0x7c], 0
mov edx, 0x3e8
mov edi, dword [rsp + 0xbc]
cmove edi, edx
mov al, byte [rsp + 0x2f]
mov edx, eax
and dl, 1
cmp al, 2
movzx r12d, dl
cmove r12d, ecx
cmp dword [rsp + 0x78], 0
mov r14d, dword [rsp + 0xb8]
cmove r14d, r8d
cmp dword [rsp + 0xa8], 0
mov eax, 0x64
mov r13d, dword [rsp + 0xb4]
cmove r13d, eax
jmp 0x1400bb5df
lea rdx, [rsp + 0x38]
mov qword [rdx], 0x15
mov rcx, r15
call fcn.140150fda
jmp 0x1400bad19
lea r8, [0x1401cad40]
lea rdx, [rsp + 0x38]
mov rcx, r15
call fcn.1401500d6
jmp 0x1400bb6de
movzx eax, al
lea rdx, [rsp + 0x38]
cmp eax, 0x7d
jne 0x1400bb4cc
mov qword [rdx], 0x12
jmp 0x1400bb533
lea rdx, [0x1401d4238]
xor ecx, ecx
jmp 0x1400bb719
lea rdx, [rsp + 0x38]
mov qword [rdx], 3
jmp 0x1400bb533
mov qword [rdx], 0x10
jmp 0x1400bb533
lea rdx, [0x1401d4238]
mov ecx, 1
jmp 0x1400bb719
lea rdx, [rsp + 0x38]
mov qword [rdx], 8
jmp 0x1400bb533
lea rcx, str.EtwSizeKbDataRetransmitIntervalSecDataReportTimesBeforeDedupSenseIpcQueueSizeSenseIpcSendTimeoutMsCpuLimitDynamicCpuLimitPercentMemLimitMbstruct_OperationalConfigurationstruct_OperationalConfiguration_with_8_elements_tB
mov edx, 9
jmp 0x1400bb5d4
lea rcx, [0x1401d4169]
mov edx, 0x19
jmp 0x1400bb5d4
lea rdx, [0x1401d4238]
mov ecx, 2
jmp 0x1400bb719
lea rdx, [rsp + 0x38]
mov qword [rdx], 5
mov rcx, r15
call fcn.140150fda
jmp 0x1400bb5d9
lea rcx, [0x1401d4182]
mov edx, 0x1a
jmp 0x1400bb5d4
lea rdx, [0x1401d4238]
mov ecx, 3
jmp 0x1400bb719
lea rcx, [0x1401d419c]
mov edx, 0x11
jmp 0x1400bb5d4
lea rcx, [0x1401d41ad]
mov edx, 0x15
jmp 0x1400bb5d4
lea rdx, [0x1401d4238]
mov ecx, 4
jmp 0x1400bb719
cmp dword [rsp + 0x3c], 0
je 0x1400bb70d
mov eax, dword [rsp + 0x40]
mov dword [rsp + 0x6c], eax
mov ebp, dword [rsp + 0xa0]
jmp 0x1400bb2e4
lea rcx, [0x1401d41c2]
jmp 0x1400bb5cf
lea rdx, [0x1401d4238]
mov ecx, 5
jmp 0x1400bb719
lea rcx, [0x1401d41d1]
mov edx, 0xf
call fcn.140150008
mov rbp, rax
mov r12b, 2
inc byte [r15 + 0x30]
mov eax, dword [rsp + 0x71]
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x5c], ecx
mov dword [rsp + 0x59], eax
mov rcx, r15
call fcn.1401064a6
mov qword [rsp + 0x38], rbp
mov dword [rsp + 0x40], ebx
mov ecx, dword [rsp + 0x30]
mov dword [rsp + 0x44], ecx
mov dword [rsp + 0x48], esi
mov dword [rsp + 0x4c], edi
mov dword [rsp + 0x50], r14d
mov dword [rsp + 0x54], r13d
mov byte [rsp + 0x58], r12b
mov qword [rsp + 0x60], rax
cmp r12b, 2
jne 0x1400bb64a
mov r12b, 2
test rax, rax
mov rdi, qword [rsp + 0xd8]
je 0x1400bb68e
lea rcx, [rsp + 0x60]
call fcn.1400aec60
jmp 0x1400bb68e
test rax, rax
mov rdi, qword [rsp + 0xd8]
je 0x1400bb65c
mov r12b, 2
jmp 0x1400bb691
lea rax, [rsp + 0x40]
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xd0], rcx
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0xc0], xmm0
mov eax, dword [rsp + 0x71]
mov ecx, dword [rsp + 0x74]
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x8b], ecx
mov rax, rbp
cmp r12b, 2
je 0x1400bb6de
mov rcx, qword [rsp + 0xd0]
mov qword [rdi + 0x18], rcx
movaps xmm0, xmmword [rsp + 0xc0]
movups xmmword [rdi + 8], xmm0
mov ecx, dword [rsp + 0x88]
mov edx, dword [rsp + 0x8b]
mov dword [rdi + 0x21], ecx
mov dword [rdi + 0x24], edx
mov qword [rdi], rax
mov byte [rdi + 0x20], r12b
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, rax
mov rdx, r15
call fcn.140151024
jmp 0x1400bad19
lea rcx, [0x1401d41e0]
mov edx, 0xa
jmp 0x1400bb5d4
lea rdx, [0x1401d4238]
mov ecx, 6
jmp 0x1400bb719
lea rdx, [0x1401d4238]
mov ecx, 7
call fcn.14015005e
jmp 0x1400bb2dc