Function at 0x140035730
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x140171140]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov ebx, ecx
mov dword [rsp + 0x24], ecx
mov r15, qword [0x140214df0]
test ecx, ecx
je 0x14003580a
mov r8, qword [r15 + 0x3110]
movsxd rdx, dword [r15 + 0x3108]
mov r9, rdx
shl r9, 4
add r9, r8
test rdx, rdx
je 0x1400357c1
nop dword [rax]
mov rcx, rdx
shr rcx, 1
mov rax, rcx
add rax, rax
cmp dword [r8 + rax*8], ebx
jae 0x1400357b9
lea r8, [r8 + rax*8]
add r8, 0x10
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x1400357bc
mov rdx, rcx
test rdx, rdx
jne 0x140035790
xor edi, edi
cmp r8, r9
je 0x1400357d3
cmp dword [r8], ebx
jne 0x1400357d3
mov r8, qword [r8 + 8]
jmp 0x1400357d6
mov r8, rdi
mov qword [rsp + 0x30], r8
test r8, r8
je 0x140035bb5
xor dl, dl
mov eax, dword [r8 + 0xb0]
shl eax, 0x1d
sar eax, 0x1d
mov dword [rsp + 0x28], eax
mov eax, dword [r8 + 0xb0]
shl eax, 0x1a
sar eax, 0x1d
mov dword [rsp + 0x2c], eax
jmp 0x14003581e
xor edi, edi
mov r8d, edi
mov qword [rsp + 0x30], rdi
xor dl, dl
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x2c], edi
mov dword [rsp + 0x20], edx
mov ebp, edi
mov dword [rsp + 0x3c], edi
mov esi, edi
mov dword [rsp + 0x38], esi
mov r11, rdi
mov qword [rsp + 0x40], rdi
mov r12d, edi
cmp dword [r15 + 0x3108], 0
jle 0x1400359ba
mov r13, rdi
mov r9d, 1
mov rax, qword [r15 + 0x3110]
mov r14, qword [rax + r13 + 8]
test r14, r14
je 0x14003599d
test ebx, ebx
je 0x140035894
cmp dword [r14], ebx
je 0x14003599d
mov rax, qword [r14 + 0x10]
test rax, rax
je 0x14003599d
nop
lea rcx, [rax]
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x140035880
cmp dword [rcx], ebx
jne 0x14003599d
mov eax, dword [r14 + 8]
shr eax, 0xb
test al, 1
movzx edx, dl
cmovne edx, r9d
mov dword [rsp + 0x20], edx
test ebx, ebx
je 0x1400358e0
mov edx, edi
cmp dword [r15 + 0x3118], 0
jle 0x1400358e0
mov rcx, rdi
nop dword [rax + rax]
mov rax, qword [r15 + 0x3120]
cmp qword [rcx + rax + 0x10], r14
jne 0x1400358d1
mov dword [rcx + rax], edi
inc edx
add rcx, 0x40
cmp edx, dword [r15 + 0x3118]
jl 0x1400358c0
test r8, r8
je 0x1400358f5
mov rdx, r14
mov rcx, r8
call fcn.140030480
mov r11, qword [rsp + 0x40]
cmp esi, ebp
jne 0x14003598a
lea ebx, [rsi + 1]
test ebp, ebp
je 0x14003590f
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
jmp 0x140035914
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ebp
jle 0x140035986
mov rax, qword [0x140214df0]
test rax, rax
je 0x14003592f
inc dword [rax + 0x3c8]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x140035978
movsxd r8, esi
shl r8, 3
mov rdx, rax
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x140214df0]
test rdx, rdx
je 0x14003596d
dec dword [rdx + 0x3c8]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r11, rbp
mov qword [rsp + 0x40], rbp
mov ebp, ebx
mov dword [rsp + 0x3c], ebx
mov ebx, dword [rsp + 0x24]
movsxd rax, esi
mov qword [r11 + rax*8], r14
inc esi
mov dword [rsp + 0x38], esi
mov r9d, 1
inc r12d
add r13, 0x10
cmp r12d, dword [r15 + 0x3108]
mov r8, qword [rsp + 0x30]
mov edx, dword [rsp + 0x20]
jl 0x140035850
mov r13, qword [rsp + 0x30]
test r13, r13
je 0x1400359f1
mov edx, dword [rsp + 0x28]
xor edx, dword [r13 + 0xb0]
and edx, 0xfffffff8
xor edx, dword [rsp + 0x28]
mov eax, dword [rsp + 0x2c]
lea eax, [rax*8]
mov ecx, eax
xor ecx, edx
and ecx, 0xffffffc7
xor ecx, eax
mov dword [r13 + 0xb0], ecx
mov r10, qword [r15 + 0x3170]
test r10, r10
je 0x140035a58
add r10, 4
je 0x140035a58
mov r8d, dword [r10 + 0x14]
test r8d, r8d
je 0x140035a2d
mov edx, edi
test esi, esi
jle 0x140035a2d
mov rcx, r11
mov rax, qword [rcx]
cmp dword [rax], r8d
je 0x140035a29
inc edx
add rcx, 8
cmp edx, esi
jl 0x140035a15
jmp 0x140035a2d
mov dword [r10 + 0x14], ebx
movsxd r9, dword [r10 - 4]
add r9, r10
movsxd rcx, dword [r15 + 0x3168]
mov rdx, qword [r15 + 0x3170]
add rdx, 4
add rdx, rcx
mov r10, rdi
cmp r9, rdx
cmovne r10, r9
test r10, r10
jne 0x140035a03
cmp esi, 1
jle 0x140035a76
movsxd rdx, esi
lea r9, [0x14002ea30]
mov r8d, 8
mov rcx, r11
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov r12, qword [rsp + 0x40]
test esi, esi
jle 0x140035b09
mov r14, r12
nop word [rax + rax]
mov rbx, qword [r14]
mov rax, qword [rbx + 0x78]
test rax, rax
je 0x140035aa3
mov qword [rax + 0x450], rdi
mov rdx, qword [rbx + 0x10]
test rdx, rdx
je 0x140035acb
mov eax, Ordinal_26
cmp rax, 0x28
jge 0x140035acb
cmp qword [rax + rdx], rbx
jne 0x140035ac5
mov rcx, qword [rbx + 0x10]
mov qword [rax + rcx], rdi
add rax, 8
jmp 0x140035ab1
xor r8d, r8d
mov edx, dword [rbx]
lea rcx, [r15 + 0x3108]
call fcn.140013420
mov rcx, rbx
call fcn.14002fc90
mov rax, qword [0x140214df0]
test rax, rax
je 0x140035af6
dec dword [rax + 0x3c8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 8
sub rsi, 1
jne 0x140035a90
cmp dword [rsp + 0x24], 0
jne 0x140035b7e
mov rcx, qword [r15 + 0x3110]
test rcx, rcx
je 0x140035b46
mov qword [r15 + 0x3108], 0
mov rax, qword [0x140214df0]
test rax, rax
je 0x140035b39
dec dword [rax + 0x3c8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x3110], rdi
mov rcx, qword [r15 + 0x3120]
test rcx, rcx
je 0x140035b94
mov qword [r15 + 0x3118], 0
mov rax, qword [0x140214df0]
test rax, rax
je 0x140035b6f
dec dword [rax + 0x3c8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x3120], rdi
jmp 0x140035b94
cmp byte [rsp + 0x20], 0
je 0x140035b94
or dword [r13 + 8], 0x800
mov qword [r13 + 0x88], r13
test r12, r12
je 0x140035bb5
mov rax, qword [0x140214df0]
test rax, rax
je 0x140035bab
dec dword [rax + 0x3c8]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140127fa0
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret