Function at 0x18009aaf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
movaps xmmword [rsp + 0x90], xmm6
mov rax, qword [0x18012d028]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rcx + 8], rdx
mov r14, rdx
mov r12d, r8d
xor ebx, ebx
mov dword [rcx + 0x10], r12d
lea r8, str.cmap
mov qword [rcx + 0x40], rbx
mov rdi, rcx
mov qword [rcx + 0x48], rbx
mov edx, r12d
mov rcx, r14
call fcn.18009a790
mov edx, r12d
mov r15d, eax
mov rcx, r14
lea r8, str.loca
call fcn.18009a790
mov edx, r12d
mov dword [rdi + 0x18], eax
mov rcx, r14
lea r8, str.head
mov r13d, eax
call fcn.18009a790
mov edx, r12d
mov dword [rdi + 0x1c], eax
mov rcx, r14
lea r8, str.glyf
mov esi, eax
call fcn.18009a790
mov edx, r12d
mov dword [rbp - 0x19], eax
mov rcx, r14
mov dword [rdi + 0x20], eax
lea r8, str.hhea
call fcn.18009a790
mov edx, r12d
mov dword [rbp - 0x31], eax
mov rcx, r14
mov dword [rdi + 0x24], eax
lea r8, str.hmtx
call fcn.18009a790
mov edx, r12d
mov dword [rbp - 0x15], eax
mov rcx, r14
mov dword [rdi + 0x28], eax
lea r8, str.kern
call fcn.18009a790
mov edx, r12d
mov dword [rdi + 0x2c], eax
mov rcx, r14
lea r8, str.GPOS
call fcn.18009a790
mov dword [rdi + 0x30], eax
test r15d, r15d
je 0x18009ac79
test esi, esi
je 0x18009ac79
cmp dword [rbp - 0x31], ebx
je 0x18009ac79
cmp dword [rbp - 0x15], ebx
je 0x18009ac79
cmp dword [rbp - 0x19], ebx
je 0x18009ac20
test r13d, r13d
je 0x18009ac79
mov eax, r12d
add r12d, 0xc
jmp 0x18009af82
movzx eax, byte [r14 + r12 + 4]
mov edx, ebx
movzx r8d, byte [r14 + r12 + 5]
mov qword [rbp - 0x49], r12
add r12d, 0xc
shl eax, 8
mov dword [rbp + 7], 2
mov dword [rbp - 0x19], ebx
mov dword [rbp - 0x15], ebx
mov dword [rbp - 0x31], ebx
add r8d, eax
je 0x18009ac79
nop
mov ecx, edx
shl ecx, 4
add ecx, r12d
add rcx, r14
cmp byte [rcx], 0x43
jne 0x18009ac72
cmp byte [rcx + 1], 0x46
jne 0x18009ac72
cmp byte [rcx + 2], 0x46
jne 0x18009ac72
cmp byte [rcx + 3], 0x20
je 0x18009acaa
inc edx
cmp edx, r8d
jl 0x18009ac50
xor eax, eax
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1800ed870
mov rbx, qword [rsp + 0xf8]
movaps xmm6, xmmword [rsp + 0x90]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx edx, byte [rcx + 9]
movzx eax, byte [rcx + 0xa]
shl eax, 8
shl edx, 0x10
add edx, eax
movzx eax, byte [rcx + 8]
shl eax, 0x18
add edx, eax
movzx eax, byte [rcx + 0xb]
add edx, eax
je 0x18009ac79
mov qword [rdi + 0x80], rbx
mov qword [rdi + 0x88], rbx
mov qword [rdi + 0x90], rbx
mov qword [rdi + 0x98], rbx
mov eax, edx
add rax, r14
mov qword [rdi + 0x40], rax
mov dword [rdi + 0x48], ebx
mov dword [rdi + 0x4c], 0x20000000
movups xmm2, xmmword [rdi + 0x40]
mov ecx, dword [rdi + 0x48]
mov rax, qword [rdi + 0x48]
add ecx, 2
movdqa xmm0, xmm2
shr rax, 0x20
psrldq xmm0, 0xc
movd edx, xmm0
movaps xmmword [rbp - 0x29], xmm2
cmp ecx, eax
jg 0x18009ad38
test ecx, ecx
js 0x18009ad38
cmp ecx, edx
jge 0x18009ad38
movsxd rcx, ecx
movq rax, xmm2
movzx r8d, byte [rcx + rax]
jmp 0x18009ad3b
xor r8b, r8b
movzx eax, r8b
lea rcx, [rbp - 0x59]
cmp eax, edx
cmovle edx, eax
mov dword [rbp - 0x21], edx
lea rdx, [rbp - 0x29]
call fcn.18009a150
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x59]
call fcn.18009a150
xor r8d, r8d
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 9]
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 0x59], xmm0
call fcn.18009a640
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x59]
movups xmm0, xmmword [rax]
movaps xmmword [rbp - 9], xmm0
call fcn.18009a150
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x59]
call fcn.18009a150
mov r8d, 0x11
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x59]
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x60], xmm0
call fcn.18009a4b0
mov rsi, rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
nop dword [rax]
mov eax, dword [rbp - 0x4d]
cmp dword [rbp - 0x51], eax
jge 0x18009adde
lea rcx, [rbp - 0x59]
call fcn.18009a270
mov dword [rbp + rsi*4 - 0x19], eax
inc rsi
cmp rsi, 1
jl 0x18009adc0
mov r8d, 0x106
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x59]
call fcn.18009a4b0
mov rsi, rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
nop dword [rax + rax]
mov eax, dword [rbp - 0x4d]
cmp dword [rbp - 0x51], eax
jge 0x18009ae1e
lea rcx, [rbp - 0x59]
call fcn.18009a270
mov dword [rbp + rsi*4 + 7], eax
inc rsi
cmp rsi, 1
jl 0x18009ae00
mov r8d, 0x124
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x59]
call fcn.18009a4b0
mov rsi, rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
nop dword [rax + rax]
mov eax, dword [rbp - 0x4d]
cmp dword [rbp - 0x51], eax
jge 0x18009ae5e
lea rcx, [rbp - 0x59]
call fcn.18009a270
mov dword [rbp + rsi*4 - 0x15], eax
inc rsi
cmp rsi, 1
jl 0x18009ae40
mov r8d, 0x125
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x59]
call fcn.18009a4b0
mov rsi, rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x59], xmm0
nop dword [rax + rax]
mov eax, dword [rbp - 0x4d]
cmp dword [rbp - 0x51], eax
jge 0x18009ae9e
lea rcx, [rbp - 0x59]
call fcn.18009a270
mov dword [rbp + rsi*4 - 0x31], eax
inc rsi
cmp rsi, 1
jl 0x18009ae80
movaps xmm0, xmmword [rbp - 9]
lea r8, [rbp - 0x59]
movaps xmm6, xmmword [rbp - 0x29]
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x41]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmmword [rbp - 9], xmm6
call fcn.18009a980
cmp dword [rbp + 7], 2
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x70], xmm0
jne 0x18009ac79
mov r13d, dword [rbp - 0x19]
test r13d, r13d
je 0x18009ac79
mov eax, dword [rbp - 0x15]
test eax, eax
je 0x18009af56
movsxd rsi, dword [rbp - 0x31]
test esi, esi
je 0x18009ac79
psrldq xmm6, 0xc
movd ecx, xmm6
cmp eax, ecx
jg 0x18009af06
mov dword [rbp - 0x21], eax
test eax, eax
jns 0x18009af09
mov dword [rbp - 0x21], ecx
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x41]
call fcn.18009a150
mov ecx, dword [rbp - 0x1d]
mov edx, ecx
sub edx, esi
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
movups xmm0, xmmword [rax]
movups xmmword [rdi + 0x80], xmm0
test esi, esi
js 0x18009af49
test edx, edx
js 0x18009af49
cmp esi, ecx
jg 0x18009af49
mov rax, rsi
mov dword [rbp + 3], edx
add rax, qword [rbp - 0x29]
mov qword [rbp - 9], rax
movups xmm0, xmmword [rbp - 9]
movups xmmword [rdi + 0x90], xmm0
jmp 0x18009af59
mov ecx, dword [rbp - 0x1d]
cmp r13d, ecx
jg 0x18009af67
mov dword [rbp - 0x21], r13d
test r13d, r13d
jns 0x18009af6a
mov dword [rbp - 0x21], ecx
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 0x41]
call fcn.18009a150
movups xmm0, xmmword [rax]
mov rax, qword [rbp - 0x49]
movups xmmword [rdi + 0x50], xmm0
movzx r8d, byte [r14 + rax + 5]
mov edx, ebx
movzx eax, byte [r14 + rax + 4]
shl eax, 8
add r8d, eax
je 0x18009afcd
nop dword [rax + rax]
mov ecx, edx
shl ecx, 4
add ecx, r12d
add rcx, r14
cmp byte [rcx], 0x6d
jne 0x18009afc6
cmp byte [rcx + 1], 0x61
jne 0x18009afc6
cmp byte [rcx + 2], 0x78
jne 0x18009afc6
cmp byte [rcx + 3], 0x70
je 0x18009b0a1
inc edx
cmp edx, r8d
jl 0x18009afa0
mov ecx, 0xffff
mov dword [rdi + 0x14], ecx
mov dword [rdi + 0x34], 0xffffffff
movzx r9d, byte [r15 + r14 + 2]
movzx eax, byte [r15 + r14 + 3]
shl r9d, 8
mov dword [rdi + 0x38], ebx
add r9d, eax
je 0x18009b075
nop dword [rax + rax]
lea eax, [r15 + 4]
lea eax, [rax + rbx*8]
movzx r8d, byte [rax + r14]
mov ecx, eax
movzx eax, byte [rax + r14 + 1]
shl r8d, 8
add r8d, eax
je 0x18009b03e
cmp r8d, 3
jne 0x18009b06e
movzx edx, byte [rcx + r14 + 2]
movzx eax, byte [rcx + r14 + 3]
shl edx, 8
add edx, eax
sub edx, 1
je 0x18009b03e
cmp edx, 9
jne 0x18009b06e
movzx eax, byte [rcx + r14 + 4]
movzx r8d, byte [rcx + r14 + 5]
movzx edx, byte [rcx + r14 + 7]
shl eax, 8
add r8d, eax
movzx eax, byte [rcx + r14 + 6]
shl r8d, 8
add eax, r8d
shl eax, 8
add eax, r15d
add edx, eax
mov dword [rdi + 0x38], edx
inc ebx
cmp ebx, r9d
jl 0x18009b000
cmp dword [rdi + 0x38], 0
je 0x18009ac79
movsxd rax, dword [rdi + 0x1c]
movzx ecx, byte [rax + r14 + 0x32]
movzx eax, byte [rax + r14 + 0x33]
shl ecx, 8
add ecx, eax
mov eax, 1
mov dword [rdi + 0x3c], ecx
jmp 0x18009ac7b
movzx edx, byte [rcx + 9]
movzx eax, byte [rcx + 0xa]
shl eax, 8
shl edx, 0x10
add edx, eax
movzx eax, byte [rcx + 8]
shl eax, 0x18
add edx, eax
movzx eax, byte [rcx + 0xb]
add edx, eax
je 0x18009afcd
movzx ecx, byte [rdx + r14 + 4]
movzx eax, byte [rdx + r14 + 5]
shl ecx, 8
add ecx, eax
jmp 0x18009afd2