Function at 0x1400c6ef0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rdi
push r14
push r15
sub rsp, 0x3f0
mov qword [r11 - 0x210], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rsi
mov rax, qword [0x140001640]
xor rax, rsp
mov qword [rsp + 0x3e8], rax
mov edi, edx
mov dword [r11 - 0x80], edx
xor r15d, r15d
mov dword [rsp + 0x20], r15d
mov ecx, edx
call fcn.14006e790
test al, al
jne 0x1400c7872
mov dword [rsp + 0x360], r15d
lea rdx, [rsp + 0x360]
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
mov ecx, edi
call fcn.14006daa0
test al, al
je 0x1400c6f80
lea rcx, [rsp + 0xb0]
call fcn.14003d660
mov rsi, rax
mov qword [rsp + 0x40], rax
mov ebx, 1
jmp 0x1400c6f97
lea rcx, [rsp + 0x50]
call fcn.14003d5d0
mov rsi, rax
mov qword [rsp + 0x40], rax
mov ebx, 2
mov dword [rsp + 0x20], ebx
mov cl, 1
call fcn.1400cc1e4
mov qword [rsp + 0x30], rax
lea r8, [rsp + 0x30]
mov rdx, rsi
lea rcx, [rsp + 0x390]
call fcn.1400451c0
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400c6fe9
mov rax, qword [rcx]
call qword [rax + select]
mov qword [rsp + 0x208], rax
test rax, rax
je 0x1400c6fe9
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
nop
test bl, 2
je 0x1400c701b
and ebx, 0xfffffffd
mov dword [rsp + 0x20], ebx
cmp qword [rsp + 0x68], 8
jb 0x1400c7007
mov rcx, qword [rsp + 0x50]
call fcn.1400ed78c
mov qword [rsp + 0x68], 7
mov qword [rsp + 0x60], r15
mov word [rsp + 0x50], r15w
test bl, 1
je 0x1400c705c
and ebx, 0xfffffffe
mov dword [rsp + 0x20], ebx
cmp qword [rsp + 0xc8], 8
jb 0x1400c703f
mov rcx, qword [rsp + 0xb0]
call fcn.1400ed78c
mov qword [rsp + 0xc8], 7
mov qword [rsp + 0xc0], r15
mov word [rsp + 0xb0], r15w
xor eax, eax
mov qword [rsp + 0x378], rax
mov qword [rsp + 0x380], rax
mov edx, edi
lea rcx, [rsp + 0x378]
call fcn.14006dbb0
nop
mov rbx, qword [rsp + 0x378]
lea r8, [rsp + 0x390]
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x378]
call fcn.1400c6e80
mov qword [rsp + 0x210], rax
cmp qword [rax], rbx
je 0x1400c7227
mov rdi, qword [rsp + 0x378]
mov rbx, qword [rdi]
mov qword [rsp + 0x368], rbx
cmp rbx, rbx
jne 0x1400c7160
mov r14, qword [rdi + 8]
mov rsi, r14
cmp byte [rsi + 0x19], 0
jne 0x1400c7133
mov rdx, qword [rsi + 0x10]
lea rcx, [rsp + 0x378]
call fcn.14006ef70
mov rsi, qword [rsi]
lea rbx, [r14 + 0x20]
cmp qword [rbx + 0x18], 8
jb 0x1400c7104
mov rcx, qword [rbx]
call fcn.1400ed78c
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
cmp qword [rbx + 0x18], 8
jb 0x1400c711a
mov rbx, qword [rbx]
mov word [rbx], r15w
mov rcx, r14
call fcn.1400ed78c
mov r14, rsi
mov rdi, qword [rsp + 0x378]
jmp 0x1400c70d7
mov qword [rdi + 8], rdi
mov rax, qword [rsp + 0x378]
mov qword [rax], rax
mov rax, qword [rsp + 0x378]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x380], r15
jmp 0x1400c71df
cmp rbx, rdi
je 0x1400c71df
mov r8, rbx
mov qword [rsp + 0x228], rbx
cmp byte [rbx + 0x19], 0
jne 0x1400c71c8
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1400c71a0
mov rbx, rax
mov rax, qword [rbx]
cmp byte [rax + 0x19], 0
jne 0x1400c7191
mov rbx, rax
jmp 0x1400c7183
mov qword [rsp + 0x368], rbx
jmp 0x1400c71c8
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400c71bd
cmp rbx, qword [rax + 0x10]
jne 0x1400c71bd
mov rbx, rax
mov qword [rsp + 0x368], rax
jmp 0x1400c71a0
mov rbx, rax
mov qword [rsp + 0x368], rax
lea rdx, [rsp + 0x238]
lea rcx, [rsp + 0x378]
call fcn.14006ebb0
jmp 0x1400c7160
mov rcx, qword [rsp + 0x378]
call fcn.1400ed78c
nop
cmp qword [rsp + 0x3a8], 8
jb 0x1400c7205
mov rcx, qword [rsp + 0x390]
call fcn.1400ed78c
mov qword [rsp + 0x3a8], 7
mov qword [rsp + 0x3a0], r15
mov word [rsp + 0x390], r15w
jmp 0x1400c7872
mov ecx, edi
call fcn.14006daa0
test al, al
je 0x1400c723e
lea rcx, [rsp + 0x24]
call fcn.1400c6b70
jmp 0x1400c7248
lea rcx, [rsp + 0x25]
call fcn.1400c6d80
mov qword [rsp + 0x48], rax
mov rsi, rax
lea rdx, [0x140182c68]
lea rcx, [rsp + 0x260]
call fcn.140019c00
mov rbx, rax
mov qword [rsp + 0x248], rax
cmp byte [rax + 0x44], 0
je 0x1400c727d
mov rcx, rax
call fcn.14001c7c0
lea rdx, [rsp + 0x388]
mov rcx, rbx
call fcn.140030d20
inc dword [rbx + 0x3c]
mov rax, qword [rbx + 0x30]
mov qword [rsp + 0x1f0], rax
test rax, rax
je 0x1400c72ed
movsxd r9, dword [rbx + 0x3c]
cmp r9d, dword [rbx + 0x40]
jge 0x1400c72ed
mov rcx, r9
mov qword [rsp + 0x220], rcx
mov rdx, qword [rbx + 0x18]
mov rax, r9
shr rax, 5
lea r8, [rdx + rax*4]
mov qword [rsp + 0x250], r8
and ecx, 0x1f
mov qword [rsp + 0x218], rcx
mov eax, 1
shl eax, cl
test dword [r8], eax
je 0x1400c72ed
lea eax, [r9 + 1]
mov dword [rbx + 0x3c], eax
jmp 0x1400c72a1
lea rdx, [rsp + 0x130]
mov rcx, rbx
call fcn.14001b710
nop
mov rdx, rax
lea rcx, [rsp + 0x1d0]
call fcn.14003ccc0
mov rdi, rax
call fcn.14003d500
mov rdx, rax
mov r8, rsi
lea rcx, [rsp + 0x190]
call fcn.1400453a0
nop
mov edx, 0x22
mov r8, rax
lea rcx, [rsp + 0x150]
call fcn.1400c67d0
mov rbx, rax
lea rcx, [rsp + 0x26]
call fcn.1400c6a50
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x110]
call fcn.140087390
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0xd0]
call fcn.14009f060
mov rbx, rax
lea rcx, [rsp + 0x29]
call fcn.1400c6950
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x90]
call fcn.140087390
mov rbx, rax
call fcn.14003d520
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400452c0
mov rbx, rax
lea rcx, [rsp + 0x28]
call fcn.1400c6c70
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x170]
call fcn.140087390
mov rbx, rax
call fcn.14003d530
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0xf0]
call fcn.1400452c0
mov rbx, rax
lea rcx, [rsp + 0x27]
call fcn.1400c6840
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x1b0]
call fcn.140087390
mov rbx, rax
call fcn.14003d510
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x3c0]
call fcn.1400452c0
nop
cmp qword [rsp + 0x1c8], 8
jb 0x1400c743a
mov rcx, qword [rsp + 0x1b0]
call fcn.1400ed78c
mov qword [rsp + 0x1c8], 7
mov qword [rsp + 0x1c0], r15
mov word [rsp + 0x1b0], r15w
cmp qword [rsp + 0x108], 8
jb 0x1400c746f
mov rcx, qword [rsp + 0xf0]
call fcn.1400ed78c
mov qword [rsp + 0x108], 7
mov qword [rsp + 0x100], r15
mov word [rsp + 0xf0], r15w
cmp qword [rsp + 0x188], 8
jb 0x1400c74a4
mov rcx, qword [rsp + 0x170]
call fcn.1400ed78c
mov qword [rsp + 0x188], 7
mov qword [rsp + 0x180], r15
mov word [rsp + 0x170], r15w
cmp qword [rsp + 0x88], 8
jb 0x1400c74d6
mov rcx, qword [rsp + 0x70]
call fcn.1400ed78c
mov qword [rsp + 0x88], 7
mov qword [rsp + 0x80], r15
mov word [rsp + 0x70], r15w
cmp qword [rsp + 0xa8], 8
jb 0x1400c7508
mov rcx, qword [rsp + 0x90]
call fcn.1400ed78c
mov qword [rsp + 0xa8], 7
mov qword [rsp + 0xa0], r15
mov word [rsp + 0x90], r15w
cmp qword [rsp + 0xe8], 8
jb 0x1400c753d
mov rcx, qword [rsp + 0xd0]
call fcn.1400ed78c
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r15
mov word [rsp + 0xd0], r15w
cmp qword [rsp + 0x128], 8
jb 0x1400c7572
mov rcx, qword [rsp + 0x110]
call fcn.1400ed78c
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], r15
mov word [rsp + 0x110], r15w
cmp qword [rsp + 0x168], 8
jb 0x1400c75a7
mov rcx, qword [rsp + 0x150]
call fcn.1400ed78c
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x160], r15
mov word [rsp + 0x150], r15w
cmp qword [rsp + 0x1a8], 8
jb 0x1400c75dc
mov rcx, qword [rsp + 0x190]
call fcn.1400ed78c
mov qword [rsp + 0x1a8], 7
mov qword [rsp + 0x1a0], r15
mov word [rsp + 0x190], r15w
cmp qword [rsp + 0x1e8], 8
jb 0x1400c7611
mov rcx, qword [rsp + 0x1d0]
call fcn.1400ed78c
mov qword [rsp + 0x1e8], 7
mov qword [rsp + 0x1e0], r15
mov word [rsp + 0x1d0], r15w
cmp qword [rsp + 0x148], 0x10
jb 0x1400c7646
mov rcx, qword [rsp + 0x130]
call fcn.1400ed78c
mov qword [rsp + 0x148], select
mov qword [rsp + 0x140], r15
mov byte [rsp + 0x130], 0
lea rcx, [rsp + 0x260]
call fcn.1400178d0
xor eax, eax
mov qword [rsp + 0x3b0], rax
mov qword [rsp + 0x3b8], rax
mov r8d, dword [rsp + 0x360]
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0x3b0]
call fcn.14006e100
nop
mov rcx, qword [rsp + 0x3b8]
test rcx, rcx
je 0x1400c76d6
mov qword [rsp + 0x38], rcx
lock dec dword [rcx + 8]
jne 0x1400c76d6
mov rbx, qword [rsp + 0x38]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock dec dword [rbx + 0xc]
jne 0x1400c76d6
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + ioctlsocket]
nop
cmp qword [rsp + 0x3d8], 8
jb 0x1400c76ee
mov rcx, qword [rsp + 0x3c0]
call fcn.1400ed78c
mov qword [rsp + 0x3d8], 7
mov qword [rsp + 0x3d0], r15
mov word [rsp + 0x3c0], r15w
mov rdi, qword [rsp + 0x378]
mov rbx, qword [rdi]
mov qword [rsp + 0x370], rbx
cmp rbx, rbx
jne 0x1400c77b1
mov r14, qword [rdi + 8]
mov rsi, r14
nop
cmp byte [rsi + 0x19], 0
jne 0x1400c778c
mov rdx, qword [rsi + 0x10]
lea rcx, [rsp + 0x378]
call fcn.14006ef70
mov rsi, qword [rsi]
lea rbx, [r14 + 0x20]
cmp qword [rbx + 0x18], 8
jb 0x1400c775d
mov rcx, qword [rbx]
call fcn.1400ed78c
mov qword [rbx + 0x18], 7
mov qword [rbx + 0x10], r15
cmp qword [rbx + 0x18], 8
jb 0x1400c7773
mov rbx, qword [rbx]
mov word [rbx], r15w
mov rcx, r14
call fcn.1400ed78c
mov r14, rsi
mov rdi, qword [rsp + 0x378]
jmp 0x1400c7730
mov qword [rdi + 8], rdi
mov rax, qword [rsp + 0x378]
mov qword [rax], rax
mov rax, qword [rsp + 0x378]
mov qword [rax + 0x10], rax
mov qword [rsp + 0x380], r15
jmp 0x1400c782f
cmp rbx, rdi
je 0x1400c782f
mov r8, rbx
mov qword [rsp + 0x200], rbx
cmp byte [rbx + 0x19], 0
jne 0x1400c7818
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x1400c77f0
mov rbx, rax
mov rax, qword [rbx]
cmp byte [rax + 0x19], 0
jne 0x1400c77e2
mov rbx, rax
jmp 0x1400c77d4
mov qword [rsp + 0x370], rbx
jmp 0x1400c7818
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x1400c780d
cmp rbx, qword [rax + 0x10]
jne 0x1400c780d
mov rbx, rax
mov qword [rsp + 0x370], rax
jmp 0x1400c77f0
mov rbx, rax
mov qword [rsp + 0x370], rax
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x378]
call fcn.14006ebb0
jmp 0x1400c77b1
mov rcx, qword [rsp + 0x378]
call fcn.1400ed78c
nop
cmp qword [rsp + 0x3a8], 8
jb 0x1400c7855
mov rcx, qword [rsp + 0x390]
call fcn.1400ed78c
mov qword [rsp + 0x3a8], 7
mov qword [rsp + 0x3a0], r15
mov word [rsp + 0x390], r15w
mov rcx, qword [rsp + 0x3e8]
xor rcx, rsp
call fcn.1400efba0
lea r11, [rsp + 0x3f0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret