Function at 0x14005b0d4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov r12, qword [rcx]
xor ebp, ebp
mov qword [rsp + 0x48], r12
mov r13d, r9d
mov dword [rsp + 0x40], ebp
mov rbx, r8
mov dword [rsp + 0x38], ebp
mov rsi, rdx
mov dword [rsp + 0x34], ebp
mov rdi, rcx
mov r15d, ebp
test r8, r8
je 0x14005ba32
cmp qword [rcx + 0x178], rbp
jne 0x14005ba32
cmp qword [r8 + 0x68], rbp
jne 0x14005ba32
call fcn.140068c6c
test rax, rax
jne 0x14005ba32
cmp dword [rsi + 0x54], ebp
jne 0x14005ba32
cmp r13d, 0xb
jne 0x14005b161
cmp word [rsi + 0x44], bp
jl 0x14005b15b
movzx r13d, byte [rsi + 0x4c]
cmp r13d, 0xb
jne 0x14005b161
mov r13d, 2
mov r8, qword [rbx + 0x28]
mov ecx, 1
cmp dword [r8], ecx
jne 0x14005ba32
cmp qword [r8 + 0x30], rbp
jne 0x14005ba32
cmp qword [rbx + 0x30], rbp
jne 0x14005ba32
cmp qword [rbx + 0x48], rbp
jne 0x14005ba32
cmp qword [rbx + 0x38], rbp
jne 0x14005ba32
cmp qword [rbx + 0x60], rbp
jne 0x14005ba32
cmp qword [rbx + 0x50], rbp
jne 0x14005ba32
test byte [rbx + 0xc], cl
jne 0x14005ba32
mov rax, qword [rbx]
cmp dword [rax], ecx
jne 0x14005ba32
mov rax, qword [rax + 8]
cmp byte [rax], 0xaf
jne 0x14005ba32
add r8, 8
xor edx, edx
mov rcx, rdi
call fcn.14004c428
xor r9d, r9d
mov r14, rax
test rax, rax
je 0x14005ba32
mov ecx, dword [rsi + 0x38]
cmp dword [rax + 0x38], ecx
jne 0x14005b203
mov rcx, qword [rsi + 0x70]
cmp qword [rax + 0x70], rcx
je 0x14005ba32
mov eax, dword [rax + 0x40]
mov r10d, 1
mov ecx, dword [rsi + 0x40]
shr ecx, 5
shr eax, 5
not ecx
not eax
xor ecx, eax
test r10b, cl
jne 0x14005ba32
cmp dword [r14 + 0x54], r9d
jne 0x14005ba32
cmp qword [r14 + 0x18], r9
jne 0x14005ba32
movzx ecx, word [rsi + 0x46]
cmp cx, word [r14 + 0x46]
jne 0x14005ba32
movzx eax, word [r14 + 0x44]
cmp word [rsi + 0x44], ax
jne 0x14005ba32
cmp r9w, cx
jge 0x14005b32b
mov r11, qword [rsi + 8]
mov rbx, qword [r14 + 8]
add r11, 0x10
add rbx, 0x10
movsx r12, cx
mov al, byte [rbx + 9]
cmp byte [r11 + 9], al
jne 0x14005ba32
mov rcx, qword [r11]
mov rdx, qword [rbx]
test rcx, rcx
jne 0x14005b293
neg rdx
sbb eax, eax
jmp 0x14005b2a8
test rdx, rdx
je 0x14005ba32
call fcn.14001832c
xor r9d, r9d
lea r10d, [r9 + 1]
test eax, eax
jne 0x14005ba32
cmp byte [r11 + 8], r9b
je 0x14005b2c0
cmp byte [rbx + 8], r9b
je 0x14005ba32
test rbp, rbp
jle 0x14005b312
mov rdx, qword [r11 - 8]
mov ecx, r9d
mov r8, qword [rbx - 8]
test rdx, rdx
mov eax, r9d
sete cl
test r8, r8
sete al
cmp ecx, eax
jne 0x14005ba32
test rdx, rdx
je 0x14005b312
mov rax, qword [rdx + 8]
mov r8, qword [r8 + 8]
sub r8, rax
movzx ecx, byte [rax]
movzx edx, byte [rax + r8]
sub ecx, edx
jne 0x14005b30a
add rax, r10
test edx, edx
jne 0x14005b2f7
test ecx, ecx
jne 0x14005ba32
add rbp, r10
add r11, 0x20
add rbx, 0x20
cmp rbp, r12
jl 0x14005b274
mov r12, qword [rsp + 0x48]
mov rbp, qword [rsi + 0x10]
jmp 0x14005b392
cmp byte [rbp + 0x62], r9b
mov rbx, qword [r14 + 0x10]
cmovne r15d, r10d
mov dword [rsp + 0x34], r15d
test rbx, rbx
je 0x14005ba32
mov rdx, rbx
mov rcx, rbp
call fcn.14005afc0
test eax, eax
jne 0x14005b363
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14005b34b
mov r12, qword [rsp + 0x48]
test rbx, rbx
je 0x14005ba32
mov eax, dword [rbp + 0x58]
cmp dword [rbx + 0x58], eax
jne 0x14005b387
mov rax, qword [rsi + 0x70]
cmp qword [r14 + 0x70], rax
je 0x14005ba32
mov rbp, qword [rbp + 0x28]
xor r9d, r9d
lea r10d, [r9 + 1]
test rbp, rbp
jne 0x14005b331
mov rdx, qword [rsi + 0x30]
test rdx, rdx
je 0x14005b3b8
mov rcx, qword [r14 + 0x30]
or r8d, 0xffffffff
call fcn.140047088
xor r9d, r9d
test eax, eax
jne 0x14005ba32
test qword [r12 + 0x30], 0x4000
je 0x14005b3cd
cmp qword [rsi + 0x20], r9
jne 0x14005ba32
test byte [r12 + 0x30], 0x80
jne 0x14005ba32
mov rcx, qword [r14 + 0x70]
mov dword [rsp + 0x30], 0xfff0bdc0
test rcx, rcx
je 0x14005b417
mov rax, qword [r12 + 0x20]
mov edx, r9d
add rax, 0x18
mov dword [rsp + 0x30], edx
mov r12d, 1
cmp qword [rax], rcx
je 0x14005b41d
add edx, r12d
lea rax, [rax + 0x20]
cmp qword [rax], rcx
jne 0x14005b405
mov dword [rsp + 0x30], edx
jmp 0x14005b41d
mov r12d, 1
mov rcx, rdi
call fcn.140063028
mov edx, dword [rsp + 0x30]
mov rcx, rdi
mov rbp, rax
call fcn.140051bc8
mov ebx, dword [rdi + 0x34]
mov r8, rsi
mov edx, dword [rsp + 0xc0]
mov dword [rsp + 0xa0], ebx
lea r15d, [rbx + 1]
lea ecx, [r15 + 1]
mov dword [rdi + 0x34], ecx
mov rcx, rdi
call fcn.140058678
mov cl, byte [rdi + 0x1f]
mov dword [rsp + 0x44], eax
test cl, cl
jne 0x14005b476
add dword [rdi + 0x38], r12d
mov ecx, dword [rdi + 0x38]
mov dword [rsp + 0xb0], ecx
jmp 0x14005b491
sub cl, r12b
movzx eax, cl
mov byte [rdi + 0x1f], al
mov ecx, dword [rdi + rax*4 + 0xbc]
mov dword [rsp + 0xb0], ecx
test al, al
jne 0x14005b49b
add dword [rdi + 0x38], r12d
mov r12d, dword [rdi + 0x38]
jmp 0x14005b4ac
sub al, r12b
movzx eax, al
mov byte [rdi + 0x1f], al
mov r12d, dword [rdi + rax*4 + 0xbc]
mov r8d, dword [rsp + 0xc0]
mov r9, rsi
mov edx, r15d
mov dword [rsp + 0x3c], r12d
mov rcx, rdi
mov dword [rsp + 0x20], 0x62
call fcn.140058324
mov rax, qword [rsp + 0x48]
test byte [rax + 0x2c], 4
jne 0x14005b548
xor ecx, ecx
cmp word [rsi + 0x44], cx
jge 0x14005b4e8
cmp qword [rsi + 0x10], rcx
jne 0x14005b4fb
cmp dword [rsp + 0x34], ecx
jne 0x14005b4fb
lea eax, [r13 - 1]
mov edx, 1
cmp eax, edx
jbe 0x14005b548
xor r9d, r9d
mov dword [rsp + 0x20], ecx
mov r8d, r15d
mov rcx, rbp
lea edx, [r9 + 0x24]
call fcn.140031158
xor ecx, ecx
xor r9d, r9d
mov dword [rsp + 0x20], ecx
xor r8d, r8d
mov ebx, eax
lea edx, [rcx + 0xb]
mov rcx, rbp
call fcn.140031158
mov edx, ebx
mov dword [rsp + 0x40], eax
mov rcx, rbp
call fcn.140031b34
mov ecx, dword [rbp + 0x90]
mov ebx, dword [rsp + 0xa0]
mov dword [rax + 8], ecx
test byte [r14 + 0x40], 0x20
jne 0x14005b737
mov r8d, dword [rsp + 0x30]
mov r9, r14
mov edx, ebx
mov dword [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_97
mov rcx, rdi
call fcn.140058324
xor eax, eax
xor r9d, r9d
mov r8d, ebx
mov dword [rsp + 0x20], eax
mov rcx, rbp
lea edx, [rax + 0x24]
call fcn.140031158
xor ecx, ecx
mov dword [rsp + 0x38], eax
cmp word [rsi + 0x44], cx
jl 0x14005b661
mov dword [rsp + 0x20], ecx
mov r9d, r12d
mov rcx, rbp
mov r8d, ebx
mov edx, 0x80
call fcn.140031158
xor r9d, r9d
mov dword [rsp + 0x34], eax
mov r8d, r15d
mov dword [rsp + 0x20], r12d
mov rcx, rbp
lea edx, [r9 + 0x1f]
call fcn.140031158
mov r8, rsi
mov edx, r13d
mov rcx, rdi
mov ebx, eax
call fcn.140051f2c
mov edx, ebx
mov rcx, rbp
call fcn.140031b34
mov ecx, dword [rbp + 0x90]
mov dword [rax + 8], ecx
xor ecx, ecx
mov eax, dword [rsp + 0x44]
test eax, eax
jle 0x14005b60b
mov dword [rsp + 0x20], ecx
mov r9d, r12d
mov rcx, qword [rdi + 0x10]
mov r8d, eax
mov edx, 0x97
call fcn.140031158
mov ebx, dword [rsp + 0xa0]
mov r13d, dword [rsp + 0x34]
mov r9d, dword [rsp + 0xb0]
mov eax, 1
mov r8d, ebx
mov dword [rsp + 0x20], eax
mov rcx, rbp
lea edx, [rax + 0x7e]
call fcn.140031158
mov rax, qword [rsp + 0x48]
test byte [rax + 0x2c], 4
je 0x14005b698
xor eax, eax
xor r9d, r9d
mov r8d, r15d
mov dword [rsp + 0x20], eax
mov edx, Ordinal_133
mov rcx, rbp
call fcn.140031158
mov ebx, 0x39
jmp 0x14005b69d
cmp qword [rsi + 0x10], rcx
jne 0x14005b68e
mov rax, qword [rsp + 0x48]
test byte [rax + 0x2c], 8
jne 0x14005b68e
mov r8d, r15d
mov edx, Ordinal_122
mov dword [rsp + 0x20], ecx
mov r9d, r12d
mov rcx, rbp
call fcn.140031158
mov r13d, eax
jmp 0x14005b617
mov r8d, ebx
mov edx, 0x80
jmp 0x14005b67a
mov ebx, reloc.WLDAP32.dll_Ordinal_41
mov r9d, dword [rsp + 0xb0]
mov r8d, r15d
mov edx, reloc.WLDAP32.dll_Ordinal_122
mov dword [rsp + 0x20], r12d
mov rcx, rbp
call fcn.140031158
mov r9d, 0xfffffffa
mov r8, rsi
mov edx, eax
mov rcx, rbp
call fcn.140031a48
movsxd rax, dword [rbp + 0x90]
test eax, eax
jle 0x14005b6e8
lea rcx, [rax + rax*2]
mov rax, qword [rbp + 0x88]
mov word [rax + rcx*8 - 0x16], bx
mov r12d, dword [rsp + 0xa0]
xor ebx, ebx
mov r9d, r13d
mov dword [rsp + 0x20], ebx
mov r8d, r12d
mov rcx, rbp
lea edx, [rbx + 5]
call fcn.140031158
lea r13d, [rbx + 0x75]
mov dword [rsp + 0x20], ebx
mov edx, r13d
xor r9d, r9d
mov r8d, r12d
mov rcx, rbp
call fcn.140031158
xor r9d, r9d
mov dword [rsp + 0x20], ebx
mov r8d, r15d
mov edx, r13d
mov rcx, rbp
call fcn.140031158
jmp 0x14005b73f
mov r12d, dword [rsp + 0xa0]
mov r13, qword [rsi + 0x10]
xor esi, esi
mov qword [rsp + 0x50], r13
test r13, r13
je 0x14005b978
mov rbx, qword [r14 + 0x10]
test rbx, rbx
je 0x14005b779
mov rdx, rbx
mov rcx, r13
call fcn.14005afc0
test eax, eax
jne 0x14005b774
mov rbx, qword [rbx + 0x28]
test rbx, rbx
jne 0x14005b75c
lea r15d, [r12 + 1]
mov eax, dword [rsp + 0x30]
mov r8d, r12d
mov r9d, dword [rbx + 0x58]
mov edx, reloc.WLDAP32.dll_Ordinal_97
mov rcx, rbp
mov dword [rsp + 0x20], eax
call fcn.140031158
mov rdx, rbx
mov rcx, rdi
call fcn.140031b08
mov eax, dword [rsp + 0xc0]
mov r8d, r15d
mov r9d, dword [r13 + 0x58]
mov edx, 0x62
mov rcx, rbp
mov dword [rsp + 0x20], eax
call fcn.140031158
mov rdx, r13
mov rcx, rdi
call fcn.140031b08
movsxd rax, dword [rbp + 0x90]
xor edx, edx
test eax, eax
jle 0x14005b7ec
lea rcx, [rax + rax*2]
mov rax, qword [rbp + 0x88]
lea r8d, [rdx + 1]
mov word [rax + rcx*8 - 0x16], r8w
xor r9d, r9d
mov dword [rsp + 0x20], edx
mov r8d, r12d
mov rcx, rbp
lea edx, [r9 + 0x24]
call fcn.140031158
mov r9d, dword [rsp + 0xb0]
mov r8d, r12d
mov dword [rsp + 0x44], eax
mov rcx, rbp
mov eax, 1
mov dword [rsp + 0x20], eax
lea edx, [rax + 0x7e]
call fcn.140031158
mov rax, qword [rsp + 0x48]
test byte [rax + 0x2c], 4
je 0x14005b8ad
movzx r13d, word [rbx + 0x60]
xor r8d, r8d
mov eax, r8d
mov r12d, r8d
mov dword [rsp + 0x34], eax
test r13d, r13d
je 0x14005b880
mov r11, qword [rbx + 0x40]
mov rdx, qword [r11]
test rdx, rdx
je 0x14005b880
lea rcx, [0x1400ef4b4]
call fcn.14001832c
xor r8d, r8d
test eax, eax
mov eax, dword [rsp + 0x34]
jne 0x14005b880
lea ecx, [r8 + 1]
add r11, 8
add eax, ecx
add r12, rcx
mov dword [rsp + 0x34], eax
cmp r12, r13
jl 0x14005b84b
cmp eax, r13d
jne 0x14005b8a0
mov dword [rsp + 0x20], r8d
xor r9d, r9d
mov r8d, r15d
mov edx, Ordinal_133
mov rcx, rbp
mov sil, 0x10
call fcn.140031158
mov r12d, dword [rsp + 0xa0]
mov r13, qword [rsp + 0x50]
test byte [r14 + 0x40], 0x20
je 0x14005b8c2
mov eax, dword [r13 + 0x64]
and al, 3
cmp al, 2
jne 0x14005b8c2
or sil, 1
mov ebx, dword [rsp + 0xb0]
xor eax, eax
mov r9d, ebx
mov dword [rsp + 0x20], eax
mov r8d, r15d
mov edx, Ordinal_133
mov rcx, rbp
call fcn.140031158
movsxd rax, dword [rbp + 0x90]
xor r8d, r8d
test eax, eax
jle 0x14005b908
lea rcx, [rax + rax*2]
or sil, 8
mov rax, qword [rbp + 0x88]
movzx edx, sil
mov word [rax + rcx*8 - 0x16], dx
mov esi, dword [rsp + 0x44]
mov edx, 5
mov dword [rsp + 0x20], r8d
mov rcx, rbp
mov r8d, r12d
lea r9d, [rsi + 1]
call fcn.140031158
mov edx, esi
mov rcx, rbp
call fcn.140031b34
mov ecx, dword [rbp + 0x90]
xor esi, esi
xor r9d, r9d
mov dword [rsp + 0x20], esi
mov r8d, r12d
mov dword [rax + 8], ecx
mov rcx, rbp
lea edx, [rsi + 0x75]
call fcn.140031158
xor r9d, r9d
mov dword [rsp + 0x20], esi
mov r8d, r15d
lea edx, [rsi + 0x75]
mov rcx, rbp
call fcn.140031158
mov r13, qword [r13 + 0x28]
mov qword [rsp + 0x50], r13
test r13, r13
jne 0x14005b753
jmp 0x14005b97f
mov ebx, dword [rsp + 0xb0]
mov eax, dword [rsp + 0x38]
test eax, eax
je 0x14005b99a
mov edx, eax
mov rcx, rbp
call fcn.140031b34
mov ecx, dword [rbp + 0x90]
mov dword [rax + 8], ecx
mov ecx, dword [rsp + 0x3c]
test ecx, ecx
je 0x14005b9bd
cmp byte [rdi + 0x1f], 8
jae 0x14005b9bd
movzx eax, byte [rdi + 0x1f]
mov dword [rdi + rax*4 + 0xbc], ecx
mov ecx, 1
add byte [rdi + 0x1f], cl
jmp 0x14005b9c2
mov ecx, 1
test ebx, ebx
je 0x14005b9da
cmp byte [rdi + 0x1f], 8
jae 0x14005b9da
movzx eax, byte [rdi + 0x1f]
mov dword [rdi + rax*4 + 0xbc], ebx
add byte [rdi + 0x1f], cl
mov ebx, dword [rsp + 0x40]
test ebx, ebx
je 0x14005ba4c
cmp qword [rdi + 0x88], rsi
je 0x14005b9f3
mov rcx, rdi
call fcn.140058888
xor r9d, r9d
mov dword [rsp + 0x20], esi
xor r8d, r8d
mov rcx, rbp
lea edx, [r9 + 0x45]
call fcn.140031158
mov edx, ebx
mov rcx, rbp
call fcn.140031b34
mov ecx, dword [rbp + 0x90]
xor r9d, r9d
mov r8d, r15d
mov dword [rsp + 0x20], esi
mov dword [rax + 8], ecx
mov rcx, rbp
lea edx, [r9 + 0x75]
call fcn.140031158
xor eax, eax
mov rbx, qword [rsp + 0xa8]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov eax, ecx
jmp 0x14005ba34