Function at 0x180014780
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbx
push rdi
push r13
sub rsp, 0x80
mov rax, qword [0x1800760b0]
xor rax, rsp
mov qword [rsp + 0x58], rax
xor ebx, ebx
mov r13, rdx
mov rdi, rcx
test rcx, rcx
jne 0x1800147b6
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
test rax, rax
je 0x1800147dc
cmp rdi, 0xffffffffffffffff
je 0x1800147dc
mov edx, 0x40
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x1800147e3
lea rdx, str.77CaJXykRKiJILOiWnDEXG1qJcow2kEt7q7XkjBnDeec70YZvUVS1CKg808sPQ
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
jmp 0x180014aec
mov eax, 0x5a4d
cmp word [rdi], ax
je 0x180014802
lea rdx, str.7GCeb7eO4CRUXf3XXprHZku6AUx7L2W_1KF0hylAO8ObvYaSEiarcZgyrm_jQ
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
jmp 0x180014aec
mov qword [rsp + 0x78], rsi
movsxd rsi, dword [rdi + 0x3c]
add rsi, rdi
cmp dword [rsi], 0x4550
je 0x18001482b
lea rdx, str.7GCeb7eO4CRUXf3XXprHZku6AUx7L2W_1KF0hac7wUYP8VXUmduv9SpDGR
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
jmp 0x180014ae7
mov eax, 0x14c
cmp word [rsi + 4], ax
je 0x180014cd6
mov eax, 0x10b
cmp word [rsi + 0x18], ax
je 0x180014cd6
mov qword [rsp + 0x68], r14
mov r14d, dword [rsi + 0x88]
test r14d, r14d
jne 0x18001486f
lea rdx, str.7GCeb7eO4CRUXf3XXprHZku6AU27euS60uOgCzKJ64fa_QoRzxFqQ
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
jmp 0x180014ae2
mov eax, dword [rsi + 0x8c]
mov qword [rsp + 0x60], r15
lea r15, [rdi + r14]
mov dword [rsp + 0x30], eax
mov eax, dword [r15 + 0x14]
cmp eax, dword [r15 + 0x18]
jae 0x180014893
xor eax, eax
jmp 0x180014add
mov ecx, dword [r15 + 0x1c]
mov qword [rsp + 0xb0], rbp
mov ebp, dword [r15 + 0x20]
mov qword [rsp + 0x70], r12
mov r12d, dword [r15 + 0x24]
mov rdx, rax
add rcx, rdi
shl rdx, 2
add rbp, rdi
mov qword [rsp + 0x38], rcx
add r12, rdi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180014ace
mov edx, dword [r15 + 0x18]
mov rcx, rbp
shl rdx, 2
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180014ace
mov edx, dword [r15 + 0x18]
mov rcx, r12
add rdx, rdx
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x180014ace
mov r10d, dword [rsi + 0x50]
movzx eax, byte [rdi + 0xff0]
mov ecx, ebx
mov dword [rsp + 0x50], ebx
mov edx, ebx
mov dword [rsp + 0x48], ebx
lea r11, [rdi + r10]
mov qword [rsp + 0x40], r10
cmp al, 0x7a
jne 0x18001494c
cmp byte [rdi + 0xff1], 0x9c
jne 0x18001494c
cmp byte [rdi + 0xff2], 0x77
jne 0x18001494c
cmp byte [rdi + 0xff3], 0xb2
jne 0x18001494c
mov eax, 1
mov ecx, eax
mov dword [rsp + 0x50], eax
jmp 0x180014972
test al, al
jne 0x180014972
cmp byte [rdi + 0xff1], cl
jne 0x180014972
cmp byte [rdi + 0xff2], cl
jne 0x180014972
cmp byte [rdi + 0xff3], cl
mov eax, 1
cmove edx, eax
mov dword [rsp + 0x48], edx
mov rax, r13
shr rax, 0x20
test eax, eax
jne 0x180014aba
mov eax, r13d
shr eax, 0x10
test ax, ax
jne 0x180014aba
mov edx, dword [r15 + 0x14]
mov esi, r13d
sub esi, dword [r15 + 0x10]
cmp esi, edx
jae 0x180014cce
test ecx, ecx
je 0x1800149fc
mov rdx, qword [rdi + 0xff4]
test rdx, rdx
je 0x180014cce
movabs rcx, 0x47396824afcd32b9
xor rdx, rcx
mov ecx, dword [rdx + rsi*4]
test ecx, ecx
je 0x180014cce
cmp ecx, r14d
jb 0x180014b9e
mov eax, dword [rsp + 0x30]
add eax, r14d
cmp ecx, eax
jae 0x180014b9e
mov edx, ecx
mov r8, r13
mov rcx, rdi
call fcn.180013e30
mov rbx, rax
jmp 0x180014ad0
mov r8, qword [rsp + 0x38]
mov r9d, dword [r8 + rsi*4]
test r9d, r9d
je 0x180014cce
cmp r9d, r14d
jb 0x180014a28
mov ebp, dword [rsp + 0x30]
add ebp, r14d
cmp r9d, ebp
jb 0x180014bc4
cmp r9d, r10d
jae 0x180014a3f
lea rbx, [rdi + r9]
mov rcx, rdi
mov r9, r11
call fcn.180013c60
mov rax, rbx
jmp 0x180014ad0
lea rdx, str.5bhhS_FcakkKhT70QTzwroTgZsGdKoM0phNm_VRGWomsxkiE1DZ3gaMTXqUY3Y5v8rsXSNg5oys
mov r8d, esi
xor ecx, ecx
call fcn.180011fa0
mov r9d, dword [rsp + 0x48]
mov r8d, dword [r15 + 0x14]
lea rax, [rsp + 0x50]
mov edx, esi
mov rcx, rdi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x50], rbx
call fcn.180014010
mov esi, eax
test eax, eax
je 0x180014cce
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x180014cac
lea r9, [rsp + 0x48]
mov edx, 0x1000
mov r8d, 4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x180014c9b
mov r8d, dword [rsp + 0x48]
lea r9, [rsp + 0x48]
jmp 0x180014c6d
cmp dword [r15 + 0x20], ebx
jne 0x180014b05
lea rdx, str.3iO1AvJALNK5mPB6hZYqjyC8ICfYOWh7qoDmZPT2C0e3gTNphHOstB2O2QRV0l1MNrsOCPeQFyKrINV15k3xnQUvzO0q9U
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
mov rbp, qword [rsp + 0xb0]
mov r12, qword [rsp + 0x70]
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.18001a840
add rsp, 0x80
pop r13
pop rdi
pop rbx
ret
mov eax, dword [r15 + 0x18]
mov r9d, ebx
test eax, eax
je 0x180014cce
nop dword [rax]
nop dword [rax + rax]
mov r10d, dword [rbp]
movzx esi, word [r12]
add r10, rdi
cmp r10, rdi
jb 0x180014b5b
cmp r11, r10
jb 0x180014b5b
mov r8, r10
mov rax, r13
sub r8, r13
nop
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180014b53
inc rax
test ecx, ecx
jne 0x180014b40
test edx, edx
je 0x180014b73
mov eax, dword [r15 + 0x18]
inc r9d
add r12, 2
add rbp, 4
cmp r9d, eax
jb 0x180014b20
mov rax, rbx
jmp 0x180014ad0
cmp dword [rsp + 0x50], ebx
je 0x180014baa
mov rdx, qword [rdi + 0xff4]
test rdx, rdx
je 0x180014baa
movabs rcx, 0x47396824afcd32b9
xor rdx, rcx
mov ecx, dword [rdx + rsi*4]
cmp ecx, r14d
jae 0x1800149d8
lea rbx, [rdi + rcx]
mov rax, rbx
jmp 0x180014ad0
mov r8, qword [rsp + 0x38]
mov r9d, dword [r8 + rsi*4]
cmp r9d, r14d
jb 0x180014be1
mov ebp, dword [rsp + 0x30]
add ebp, r14d
cmp r9d, ebp
jae 0x180014bda
mov r8, r13
mov edx, r9d
mov rcx, rdi
call fcn.180013e30
mov rbx, rax
jmp 0x180014ad0
cmp r9d, dword [rsp + 0x40]
jae 0x180014bfc
mov edx, dword [r15 + 0x14]
lea rbx, [rdi + r9]
mov rcx, rdi
mov r9, r11
call fcn.180013c60
mov rax, rbx
jmp 0x180014ad0
lea rdx, str.OpunpAiyZ25t2VpfN6wPIuKHfBGArcpbXdc434kXhTvHQCyip79RWIebNo7rfW5q1KgNXXHfb7U
mov r8, r10
mov ecx, 4
call fcn.180011fa0
mov r9d, dword [rsp + 0x48]
mov r8d, dword [r15 + 0x14]
lea rax, [rsp + 0x38]
mov edx, esi
mov rcx, rdi
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], rbx
call fcn.180014010
mov esi, eax
test eax, eax
je 0x180014cce
mov rbx, qword [rsp + 0x38]
test rbx, rbx
je 0x180014cac
lea r9, [rsp + 0x50]
mov edx, 0x1000
mov r8d, 4
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x180014c9b
mov r8d, dword [rsp + 0x50]
lea r9, [rsp + 0x50]
movabs rcx, 0x47396824afcd32b9
mov edx, 0x1000
xor rbx, rcx
mov rcx, rdi
mov qword [rdi + 0xff4], rbx
mov dword [rdi + 0xff0], 0xb2779c7a
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
jmp 0x180014cac
mov r8d, 0x8000
xor edx, edx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
cmp esi, r14d
jb 0x180014cca
cmp esi, ebp
jae 0x180014cca
mov r8, r13
mov edx, esi
mov rcx, rdi
call fcn.180013e30
mov rbx, rax
jmp 0x180014ad0
lea rbx, [rdi + rsi]
mov rax, rbx
jmp 0x180014ad0
lea rdx, str.rSYYzrdERbtzF_l3T3BfQuQAJRgLuek90FUjoc0gosx4lPCB2nxa_sqWSYH4K467UREkWynSIOfywMSWXQsjLAWXuFFipIqpMNKe5ZeW21YjmXQBTnmr4X2SJLCsKQ
xor ecx, ecx
call fcn.180011fa0
xor eax, eax
jmp 0x180014ae7