Function at 0x1400d98b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xf8
mov rsi, qword [rsp + 0x160]
lea rax, [rsp + 0xd8]
mov dword [rsp + 0x28], r9d
xor r9d, r9d
mov qword [rsp + 0x40], rax
xor eax, eax
mov dword [rsp + 0x38], eax
mov qword [rsp + 0x20], r8
mov r8d, 0x40
mov dword [rsp + 0x30], 0xffffffff
mov qword [rsp + 0x58], rcx
call fcn.1400de430
mov rax, qword [rsp + 0x58]
mov r12, qword [rsp + 0xd8]
cmp dword [rax + 0x3c], 0
jne 0x1400da47f
cmp byte [r12 + 0x14], 0
jne 0x1400da47f
mov rax, qword [r12 + 0x60]
movzx eax, word [rax + 4]
shl rax, 7
cmp qword [r12 + rax + 0xd8], rsi
jge 0x1400d994d
mov rcx, qword [rsp + 0x58]
mov r8, rsi
mov rdx, r12
call fcn.1400deca0
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0x3c], 0
jne 0x1400da47f
cmp byte [r12 + 0x14], 0
jne 0x1400da47f
mov rax, qword [r12 + 0x60]
movzx ebx, word [rax + 4]
mov dword [rsp + 0x64], ebx
shl rbx, 7
add rbx, r12
cmp rsi, qword [rbx + 0xd8]
jne 0x1400da47f
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov r13d, dword [rax + 0x60]
mov rax, qword [rbx + 0x68]
mov eax, dword [rax]
mov dword [rsp + 0x88], eax
mov rax, qword [rbx + 0x78]
mov esi, dword [rax + 8]
mov rbp, qword [rax]
mov eax, dword [rax + 0xc]
mov dword [rsp + 0xa8], esi
mov dword [rsp + 0x68], eax
mov edi, dword [rsp + 0x68]
mov eax, esi
sub eax, edi
mov dword [rsp + 0x78], eax
mov rax, qword [rsp + 0x58]
add rax, 0x3c
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x78]
mov rcx, qword [rsp + 0xa0]
lea edx, [rax + 0x10]
movsxd rdx, edx
call fcn.140120200
mov qword [rsp + 0x80], rax
mov rax, qword [rsp + 0x58]
mov eax, dword [rax + 0x3c]
test eax, eax
mov dword [rsp + 0x60], eax
jne 0x1400da47f
movsxd rsi, dword [rsp + 0x68]
movsxd rcx, dword [rsp + 0x78]
mov rdi, qword [rsp + 0x80]
add rsi, rbp
rep movsb byte [rdi], byte [rsi]
mov r15d, dword [rbx + 0x74]
cmp r15d, dword [rbx + 0xa0]
jne 0x1400d9a36
mov ebx, dword [rbx + 0xa4]
jmp 0x1400d9a3f
mov bx, word [rbp]
xchg bl, bh
movzx ebx, bx
lea rax, [rsp + 0xe0]
movsxd rcx, ebx
add rcx, rbp
mov rdx, rax
mov qword [rsp + 0x70], rax
call fcn.14011e5d0
movzx edi, al
add edi, ebx
dec r13d
jne 0x1400d9af5
movsxd r13, dword [rsp + 0x64]
lea rsi, [r13 + 1]
shl rsi, 7
add rsi, r12
movsxd rax, edi
cmp rax, qword [rsi + 8]
jge 0x1400d9ab0
cmp byte [rbp + rax], 0
mov ebx, edi
jne 0x1400d9a99
inc ebx
movsxd rax, ebx
cmp byte [rbp + rax], 0
jne 0x1400d9a99
lea ebx, [rdi + 2]
mov rdx, qword [rsp + 0x70]
movsxd rcx, ebx
add rcx, rbp
call fcn.14011e5d0
movzx edi, al
add edi, ebx
jmp 0x1400d9a78
shl r13, 7
mov edx, dword [r12 + r13 + 0xac]
mov r13d, edi
cmp edi, edx
jge 0x1400d9b83
cmp byte [rbp + rax], 0
jne 0x1400d9b83
inc r13d
cmp edx, r13d
jle 0x1400d9b83
movsxd rax, r13d
cmp byte [rbp + rax], 0
jne 0x1400d9b83
lea r13d, [rdi + 2]
jmp 0x1400d9b83
movsxd rcx, edi
xor eax, eax
mov r14d, 2
add rcx, rbp
mov dword [rsp + 0xe8], eax
lea rdx, [rsp + 0xe8]
call fcn.14011e770
movsxd r13, dword [rsp + 0x64]
lea ecx, [rdi + rax]
lea rdi, [r13 + 1]
shl rdi, 7
add rdi, r12
mov rdx, qword [rdi + 8]
movsxd rax, ecx
cmp rax, rdx
jge 0x1400d9b71
mov eax, dword [rsp + 0xe8]
cdq
idiv r14d
mov rdx, qword [rsp + 0x70]
lea ebx, [rax + rcx]
movsxd rcx, ebx
add rcx, rbp
call fcn.14011e5d0
lea rdx, [rsp + 0xe8]
movzx esi, al
add esi, ebx
movsxd rcx, esi
add rcx, rbp
call fcn.14011e770
lea ecx, [rsi + rax]
jmp 0x1400d9b2a
mov rax, r13
shl rax, 7
mov r13d, dword [r12 + rax + 0xe0]
add r13d, edx
xor eax, eax
cmp dword [rsp + 0x68], r13d
mov dword [rsp + 0x70], eax
jg 0x1400d9e74
lea eax, [r15 + 1]
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x90], eax
movsxd rax, dword [rsp + 0x64]
movsxd rdi, dword [rsp + 0x90]
shl rax, 7
mov rsi, qword [r12 + rax + 0x68]
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
mov eax, dword [rax + 0x60]
mov dword [rsp + 0xac], eax
lea rax, [rsp + 0xd4]
mov qword [rsp + 0xb0], rax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0x58]
mov r15d, dword [rax + 0x3c]
test r15d, r15d
jne 0x1400d9e64
mov eax, dword [rsp + 0x90]
cmp eax, dword [rsi + 8]
jg 0x1400d9e64
movsxd rax, dword [rsi]
mov rcx, qword [rsp + 0x58]
shl rax, 0x25
add rax, rdi
mov rdx, rax
mov qword [rsp + 0x98], rax
call fcn.1400d7100
test rax, rax
mov r13, rax
je 0x1400d9e67
mov r14, qword [rax]
mov ax, word [r14]
xchg al, ah
movzx eax, ax
test eax, eax
mov dword [rsp + 0xd4], eax
jne 0x1400d9c6f
movsxd rcx, dword [r13 + 0xc]
cmp ecx, dword [r13 + 8]
je 0x1400d9c75
mov rdx, qword [rsp + 0xb0]
add rcx, r14
call fcn.14011e770
jmp 0x1400d9c75
xor eax, eax
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0xd4]
test eax, eax
mov dword [rsp + 0x7c], eax
jne 0x1400d9cd0
cmp dword [rsp + 0xac], 1
mov dword [rsp + 0xe8], 0x4000000
je 0x1400d9cb9
mov r8, qword [rsp + 0xb8]
mov r9d, 4
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x58]
call fcn.1400d7220
mov rcx, r13
inc rdi
call fcn.140150f20
inc dword [rsp + 0x90]
jmp 0x1400d9bef
cmp dword [rsp + 0xac], 1
je 0x1400d9e67
mov esi, dword [r13 + 0xc]
cmp dword [rsp + 0x7c], esi
jge 0x1400d9d4b
cmp dword [rsp + 0x7c], 3
mov r9d, dword [r13 + 8]
jle 0x1400d9d4b
cmp esi, r9d
jg 0x1400d9d4b
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0xac], r9d
sub eax, 4
cmp esi, r9d
mov dword [rsp + 0x90], eax
jge 0x1400d9dc2
lea rdx, [rsp + 0xe8]
movsxd rcx, esi
xor edi, edi
add rcx, r14
mov dword [rsp + 0xe8], edi
call fcn.14011e770
mov edi, dword [rsp + 0xe8]
cmp dword [rsp + 0x7c], edi
mov r15d, eax
mov r9d, dword [rsp + 0xac]
jle 0x1400d9d5c
mov rax, qword [rsp + 0x58]
mov dword [rax + 0x3c], 0x10b
jmp 0x1400d9e67
mov rcx, qword [rsp + 0xa0]
sub r9d, esi
lea edx, [r9 + 2]
movsxd rdx, edx
call fcn.140120200
test rax, rax
mov r11, rax
je 0x1400d9e67
mov eax, dword [rsp + 0x90]
lea r10d, [rsi + r15]
mov rcx, r11
sub edi, eax
movsxd rdx, edi
call fcn.140132eb0
mov ecx, dword [r13 + 8]
mov r15d, eax
cmp r10d, ecx
jge 0x1400d9dc5
cdqe
movsxd rsi, r10d
sub ecx, r10d
add rax, r11
add rsi, r14
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
mov eax, dword [r13 + 8]
sub eax, r10d
add r15d, eax
jmp 0x1400d9dc5
xor r11d, r11d
mov r9d, dword [r13 + 0xc]
lea rcx, [r14 + 4]
mov qword [rsp + 0xa0], r11
mov eax, dword [rsp + 0x90]
movsxd rdx, dword [rsp + 0x7c]
sub r9d, eax
lea r8d, [r9 - 4]
add rdx, r14
mov dword [rsp + 0x90], r9d
movsxd r8, r8d
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov r9d, dword [rsp + 0x90]
mov r11, qword [rsp + 0xa0]
mov eax, r9d
xchg al, ah
cmp word [r14], 0
mov word [r14 + 2], ax
je 0x1400d9e22
mov word [r14], 0x400
test r15d, r15d
jle 0x1400d9e3b
movsxd rax, r9d
mov ecx, r15d
mov rsi, r11
add rax, r14
add r9d, r15d
mov rdi, rax
rep movsb byte [rdi], byte [rsi]
mov rcx, r11
mov dword [rsp + 0x7c], r9d
call fcn.140150f20
mov r9d, dword [rsp + 0x7c]
mov r8, r14
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0x58]
call fcn.1400d7220
jmp 0x1400d9e67
xor r13d, r13d
mov rcx, r13
call fcn.140150f20
mov r13d, dword [rsp + 0x68]
movsxd rax, dword [rsp + 0x64]
shl rax, 7
cmp byte [r12 + rax + 0xe4], 0
jne 0x1400d9f14
cmp dword [rsp + 0x68], r13d
je 0x1400d9ee9
xor r15d, r15d
xor r14d, r14d
mov edi, 1
lea rsi, [rsp + 0xe8]
cmp dword [rsp + 0x78], r14d
jle 0x1400d9ee9
mov rax, qword [rsp + 0x80]
movsxd rcx, r14d
xor r11d, r11d
mov rdx, rsi
mov dword [rsp + 0xe8], r11d
add rcx, rax
call fcn.14011e770
add r15d, dword [rsp + 0xe8]
add r14d, eax
mov eax, dword [rsp + 0x70]
cmp r13d, r15d
cmove eax, edi
mov dword [rsp + 0x70], eax
jmp 0x1400d9ea6
mov ax, word [rbp]
xchg al, ah
movzx eax, ax
cmp eax, ebx
jne 0x1400d9f14
cmp dword [rsp + 0x68], r13d
je 0x1400d9f04
test byte [rsp + 0x70], 1
je 0x1400d9f0c
mov word [rbp], 0
jmp 0x1400d9f14
xor r10d, r10d
mov dword [rsp + 0x70], r10d
movsxd rax, dword [rsp + 0x64]
shl rax, 7
add rax, r12
cmp byte [rax + 0xe4], 0
je 0x1400d9f4d
mov rdx, qword [rsp + 0xe0]
movsxd rcx, ebx
add rcx, rbp
call fcn.140132eb0
add eax, ebx
lea ebx, [rax + 1]
cdqe
mov byte [rbp + rax], 1
jmp 0x1400da34c
cmp dword [rsp + 0x70], 0
jne 0x1400d9fa2
xor r9d, r9d
cmp dword [rsp + 0x68], r13d
mov dword [rsp + 0x60], r9d
je 0x1400da34c
lea rdx, [rsp + 0xe8]
movsxd rcx, r13d
add rcx, rbp
call fcn.14011e5d0
mov rdx, qword [rsp + 0xe8]
movsxd rcx, ebx
add rdx, qword [rsp + 0xe0]
movzx eax, al
add rcx, rbp
add r13d, eax
call fcn.140132eb0
add ebx, eax
jmp 0x1400da34c
mov r15d, dword [rax + 0x74]
cmp r15d, dword [rax + 0xa0]
jne 0x1400da1b5
cmp ebx, dword [rax + 0xa4]
jne 0x1400da1b5
lea rdi, [rsp + 0xe8]
xor esi, esi
xor r14d, r14d
cmp dword [rsp + 0x78], r14d
jle 0x1400da00e
mov rax, qword [rsp + 0x80]
movsxd rcx, r14d
xor r8d, r8d
mov rdx, rdi
mov dword [rsp + 0xe8], r8d
add rcx, rax
call fcn.14011e770
add r14d, eax
mov eax, dword [rsp + 0x60]
add eax, dword [rsp + 0xe8]
cmp ebx, eax
jb 0x1400da00e
mov dword [rsp + 0x60], eax
inc esi
jmp 0x1400d9fcc
cmp dword [rsp + 0x68], r13d
mov ebx, dword [rsp + 0x60]
je 0x1400da34c
lea rdx, [rsp + 0xd4]
xor ecx, ecx
mov dword [rsp + 0xcc], ecx
mov dword [rsp + 0xd4], ecx
mov dword [rsp + 0xe8], ecx
movsxd rcx, r13d
add rcx, rbp
call fcn.14011e770
lea rdx, [rsp + 0xe8]
lea ebx, [r13 + rax]
movsxd rcx, ebx
add rcx, rbp
call fcn.14011e770
movsxd rdi, dword [rsp + 0x60]
add ebx, eax
cmp esi, 1
mov r14d, dword [rsp + 0x60]
lea rax, [rbp + rdi]
mov qword [rsp + 0x70], rax
je 0x1400da092
lea rdx, [rsp + 0xcc]
mov rcx, rax
call fcn.14011e770
mov edi, dword [rsp + 0x60]
lea r14d, [rdi + rax]
lea rdx, [rsp + 0xd0]
movsxd rcx, r14d
add rcx, rbp
call fcn.14011e770
mov r11d, dword [rsp + 0xd4]
mov r10d, dword [rsp + 0xcc]
mov r15d, dword [rsp + 0xe8]
cmp r11d, r10d
cmovle r10d, r11d
add r14d, eax
lea r8d, [r11 + r15]
mov dword [rsp + 0xcc], r10d
mov edi, r8d
sub edi, r10d
add r14d, edi
cmp dword [rsp + 0x68], r14d
mov dword [rsp + 0xd0], edi
jl 0x1400da0f5
lea r14d, [rbx + r15]
cmp dword [rsp + 0x68], r14d
jge 0x1400da109
mov rax, qword [rsp + 0x58]
mov r14d, ebx
mov dword [rax + 0x3c], 0x10b
jmp 0x1400da1a4
dec esi
je 0x1400da11e
mov rcx, qword [rsp + 0x70]
movsxd rdx, r10d
call fcn.140132eb0
add dword [rsp + 0x60], eax
movsxd rcx, dword [rsp + 0x60]
movsxd rdx, edi
add rcx, rbp
call fcn.140132eb0
movsxd rcx, dword [rsp + 0x64]
mov esi, dword [rsp + 0x60]
shl rcx, 7
lea r9d, [rsi + rax]
add rcx, r12
cmp r11d, dword [rcx + 0xd0]
jle 0x1400da159
mov rax, qword [rsp + 0x58]
mov dword [rax + 0x3c], 0x10b
jmp 0x1400da17e
cmp r11d, r10d
jle 0x1400da17e
movsxd rdx, r9d
mov eax, r11d
movsxd rsi, r10d
add rsi, qword [rcx + 0xc8]
sub eax, r10d
add rdx, rbp
mov ecx, eax
mov rdi, rdx
add r9d, eax
rep movsb byte [rdi], byte [rsi]
movsxd rcx, r9d
movsxd rdx, ebx
movsxd r8, r15d
mov dword [rsp + 0x60], r9d
add rdx, rbp
add rcx, rbp
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov r9d, dword [rsp + 0x60]
lea eax, [r15 + r9]
mov dword [rsp + 0x60], eax
mov ebx, dword [rsp + 0x60]
mov dword [rsp + 0x60], r13d
mov r13d, r14d
jmp 0x1400da34c
cmp ebx, 4
jne 0x1400da34c
movsxd rsi, dword [rsp + 0x64]
dec r15d
mov r14, qword [rsp + 0x88]
movsxd rdi, r15d
shl rsi, 7
lea rax, [r12 + rsi]
shl r14, 0x25
add rdi, r14
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
cmp r15d, dword [rax + 0xa0]
jle 0x1400da220
mov rcx, qword [rsp + 0x58]
mov rdx, rdi
xor esi, esi
call fcn.1400d7100
test rax, rax
mov rcx, rax
je 0x1400da214
xor esi, esi
cmp dword [rax + 8], 4
sete sil
call fcn.140150f20
dec rdi
test esi, esi
jne 0x1400da23b
movsxd rdi, dword [rsp + 0x64]
shl rdi, 7
add rdi, r12
cmp r15d, dword [rdi + 0xa0]
jne 0x1400da34c
jmp 0x1400da240
dec r15d
jmp 0x1400da1e5
mov rcx, qword [rsp + 0x58]
movsxd r15, r15d
lea rax, [r15 + r14]
mov rdx, rax
mov qword [rsp + 0x70], rax
call fcn.1400d7100
test rax, rax
mov rsi, rax
je 0x1400da344
mov eax, dword [rax + 0xc]
cmp eax, dword [rdi + 0xa4]
jne 0x1400da344
mov edi, dword [rsi + 8]
movsxd r11, eax
xor r14d, r14d
mov r15, qword [rsi]
sub edi, eax
lea rax, [rsp + 0xe8]
mov dword [rsp + 0x7c], edi
xor edi, edi
mov qword [rsp + 0x90], rax
xor edx, edx
movsxd r8, edi
mov qword [rsp + 0x98], r11
mov dword [rsp + 0xe8], edx
mov rdx, qword [rsp + 0x90]
lea rcx, [r11 + r8]
add rcx, r15
mov qword [rsp + 0xa0], r8
call fcn.14011e770
add r14d, dword [rsp + 0xe8]
add eax, edi
cmp dword [rsp + 0x7c], eax
mov r11, qword [rsp + 0x98]
mov r8, qword [rsp + 0xa0]
jle 0x1400da2ec
mov edi, eax
jmp 0x1400da298
lea rdx, [r15 + r11]
movsxd rax, r14d
lea rcx, [r15 + rax]
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov rax, qword [rsi]
lea r9d, [rdi + r14]
mov edx, r14d
xchg dl, dh
mov rcx, qword [rsp + 0x58]
mov word [rax + 2], dx
mov rdx, qword [rsp + 0x70]
mov r8, qword [rsi]
call fcn.1400d7220
test edi, edi
jne 0x1400da344
movsxd rax, dword [rsp + 0x64]
mov edx, dword [rsp + 0x88]
mov rcx, qword [rsp + 0x58]
shl rax, 7
mov r8d, dword [r12 + rax + 0xa0]
call fcn.1400e07f0
mov rcx, rsi
call fcn.140150f20
mov rax, qword [rsp + 0x58]
cmp dword [rax + 0x3c], 0
jne 0x1400da472
mov r8d, dword [rsp + 0xa8]
movsxd rdx, r13d
movsxd rcx, ebx
mov r14d, r13d
add rdx, rbp
add rcx, rbp
sub r14d, ebx
xor r15d, r15d
sub r8d, r13d
xor r13d, r13d
movsxd r8, r8d
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov esi, dword [rsp + 0x68]
xor r9d, r9d
sub esi, r14d
mov eax, esi
mov edi, esi
xchg al, ah
mov word [rbp + 2], ax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x68], rax
cmp dword [rsp + 0x78], r13d
jle 0x1400da417
xor eax, eax
mov rdx, qword [rsp + 0x68]
movsxd rcx, r13d
mov dword [rsp + 0x70], r9d
mov dword [rsp + 0xe8], eax
mov rax, qword [rsp + 0x80]
add rcx, rax
call fcn.14011e770
add r15d, dword [rsp + 0xe8]
add r13d, eax
mov eax, dword [rsp + 0x60]
mov r9d, dword [rsp + 0x70]
cmp r15d, eax
je 0x1400da3a7
xor eax, eax
cmp ebx, r15d
mov r10d, r15d
cmovl eax, r14d
movsxd rcx, edi
add rcx, rbp
sub r10d, eax
mov edx, r10d
sub edx, r9d
movsxd rdx, edx
call fcn.140132eb0
mov r9d, r10d
add edi, eax
jmp 0x1400da3a7
cmp esi, edi
movsxd rbx, dword [rsp + 0x64]
jne 0x1400da44a
cmp dword [rsp + 0x78], 0
jle 0x1400da44a
mov rax, rbx
shl rax, 7
mov r8d, dword [r12 + rax + 0x74]
cmp r8d, 1
je 0x1400da44a
mov edx, dword [rsp + 0x88]
mov rcx, qword [rsp + 0x58]
call fcn.1400e07f0
shl rbx, 7
mov rcx, qword [rsp + 0x58]
mov r9d, edi
mov r8, rbp
mov rdx, qword [rsp + 0x88]
movsxd rax, dword [r12 + rbx + 0x74]
shl rdx, 0x25
add rdx, rax
call fcn.1400d7220
mov rcx, qword [rsp + 0x80]
call fcn.140150f20
mov rcx, r12
add rsp, 0xf8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400de1d0