Function at 0x7ff7df23ac0e
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
call rax
mov r11, rax
stc
test bp, dx
test rax, rax
jne 0x7ff7df23b0ff
lea rcx, [rsp + 0x50]
not ax
movzx eax, r13w
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x7ff7df22fc38
call rax
mov r11, rax
test bpl, r15b
stc
test rax, rax
jmp 0x7ff7df23b0f9
mov byte [rsp + 0x18], r8b
cmp dil, 0xe9
cmc
test dl, r13b
mov qword [rsp + 0x10], rdx
clc
cmp spl, bpl
push rbp
push rsi
jmp 0x7ff7df23ac33
sub rsp, 0x178
dec sil
shl sil, cl
mov rbp, rdx
test spl, 0x6d
mov rsi, rcx
test rcx, rcx
jmp 0x7ff7df23ac52
je 0x7ff7df23ac75
test rdx, rdx
je 0x7ff7df23ac75
mov eax, 0x5a4d
cmc
cmp word [rcx], ax
jmp 0x7ff7df23ac6f
je 0x7ff7df23ac97
xor eax, eax
add si, 0x3dfd
add rsp, 0x178
movzx rsi, ax
setge bpl
pop rsi
movsx rbp, r14w
pop rbp
jmp 0x7ff7df23ac96
ret
movsxd rax, dword [rcx + 0x3c]
stc
test rcx, rsi
cmc
cmp dword [rax + rcx], 0x4550
jmp 0x7ff7df23acac
jne 0x7ff7df23ac75
mov r8d, dword [rax + rcx + 0x88]
test cl, r10b
cmp cl, 0xd1
jmp 0x7ff7df23acc5
mov dword [rsp + 0x30], r8d
test r8d, r8d
jmp 0x7ff7df23acd2
je 0x7ff7df23ac75
mov r9d, dword [rax + rcx + 0x8c]
bts rdx, rsi
lea rdx, [rsi + r8]
btr rcx, 0x48
mov qword [rsp + 0x170], rbx
sal rcx, 0xa6
ror ch, 0xa
mov qword [rsp + 0x168], rdi
mov ecx, 0xffffffff
cmc
xor edi, edi
stc
cmp r15b, 0xfd
cmp edi, ebx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x28], rdx
test r10b, 0x7f
cmp rsi, 0x5bf66329
mov dword [rsp + 0x190], ecx
cmp rbp, 0xffff
jmp 0x7ff7df23ad3b
ja 0x7ff7df23ad8e
mov ecx, ebp
sub ecx, dword [rdx + 0x10]
cmp ecx, dword [rdx + 0x14]
jae 0x7ff7df23ad82
mov eax, dword [rdx + 0x1c]
not rdx
rcr edx, 0xd9
btr dx, 0x59
lea rax, [rax + rsi]
bsr rdx, r9
shl edx, 0x11
mov edx, dword [rax + rcx*4]
clc
jmp 0x7ff7df23ad75
test edx, edx
jmp 0x7ff7df23ad7c
jne 0x7ff7df23afef
xor eax, eax
jmp 0x7ff7df23ad89
jmp 0x7ff7df23b258
mov eax, dword [rdx + 0x18]
jmp 0x7ff7df23ad97
test eax, eax
jmp 0x7ff7df23ad9e
je 0x7ff7df23afbf
mov r9d, dword [rdx + 0x20]
lea r11d, [rax - 1]
movzx bx, sil
mov ebx, edi
test r11w, 0x34ba
test r13, r10
add r9, rsi
cmp sil, r10b
mov qword [rsp + 0x40], r9
test r13b, 0x3b
test r11d, r11d
jmp 0x7ff7df23add3
js 0x7ff7df23afb7
nop
mov r10, qword [rsp + 0x198]
ror al, 0x6e
sbb al, r12b
cmovle edx, esi
lea eax, [r11 + rbx]
and bpl, bl
mov rbp, rdi
sar eax, 1
mov dword [rsp + 0x1a8], eax
mov qword [rsp + 0x38], rax
shrd r8w, si, 0xaa
mov r8d, dword [r9 + rax*4]
mov eax, dword [r9 + rax*4]
sub r10, rax
sal r9b, 0x98
lahf
sal rdx, cl
movzx eax, byte [rsp + 0x1a0]
and dx, 0x2830
lea r8, [r8 + rsi]
stc
sub r10, rsi
cqo
bswap dx
nop
cdq
movsx r9d, r11w
cmovnp edx, edi
movzx edx, byte [r10 + r8]
movzx r9d, byte [r8]
jmp 0x7ff7df23ae4d
inc r8
clc
test al, al
je 0x7ff7df23ae96
mov ecx, ebp
cmovs ax, sp
btr ax, r15w
bt ax, 0xe7
mov eax, 0x6da47cee
jmp 0x7ff7df23ae74
rol eax, cl
cmp r15b, 0xf1
cmp bx, r13w
add al, bpl
test r14b, al
stc
xor dl, al
mov al, byte [rsp + 0x1a0]
jmp 0x7ff7df23ae93
inc rbp
test dl, dl
jmp 0x7ff7df23ae9d
je 0x7ff7df23aeb1
cmp dl, r9b
jmp 0x7ff7df23aeab
je 0x7ff7df23ae3f
cmp dl, r9b
jb 0x7ff7df23af37
cmp dl, r9b
jmp 0x7ff7df23aec2
jbe 0x7ff7df23aeed
mov ebx, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
movzx ecx, dx
mov cl, dil
mov ecx, dword [rsp + 0x190]
inc ebx
jmp 0x7ff7df23aee8
jmp 0x7ff7df23af73
mov rdx, qword [rsp + 0x28]
cmovg bx, r14w
movzx rcx, cx
movsxd rbx, r12d
lea ebx, [r11 + 1]
bswap ecx
lahf
mov eax, dword [rdx + 0x24]
mov cl, r12b
lea rcx, [rsi + rax]
movsx ax, dl
mov rax, qword [rsp + 0x38]
jmp 0x7ff7df23af1d
movzx ecx, word [rcx + rax*2]
jmp 0x7ff7df23af26
mov dword [rsp + 0x190], ecx
jmp 0x7ff7df23af32
jmp 0x7ff7df23af73
mov r11d, dword [rsp + 0x1a8]
cwd
inc ecx
mov rdx, qword [rsp + 0x28]
cmovo r9w, bp
movzx r9w, r8b
movzx r9d, bp
mov ecx, dword [rsp + 0x190]
movsx r9, cx
movzx r9, si
xchg r9b, r9b
dec r11d
cmovbe r9w, r8w
xor r9b, bl
cmp ebx, r11d
cmovae r9w, r13w
movzx r9, r14w
xchg r9b, r9b
mov r9, qword [rsp + 0x40]
jmp 0x7ff7df23af8c
jle 0x7ff7df23adda
mov rbp, qword [rsp + 0x198]
cmove r9w, dx
not r8w
mov r8d, dword [rsp + 0x30]
mov r9d, dword [rsp + 0x20]
jmp 0x7ff7df23afb2
jmp 0x7ff7df23afbf
mov r9d, dword [rsp + 0x20]
test r10, r9
cmp ecx, dword [rdx + 0x14]
jmp 0x7ff7df23afc7
jae 0x7ff7df23ad82
mov eax, dword [rdx + 0x1c]
rcl rdx, 2
and dx, r9w
add rax, rsi
mov edx, dword [rax + rcx*4]
clc
test ax, dx
test edx, edx
jmp 0x7ff7df23afe9
je 0x7ff7df23ad82
cmp edx, r8d
jmp 0x7ff7df23aff7
jb 0x7ff7df23b246
lea eax, [r9 + r8]
test rdi, 0x22af6b25
jmp 0x7ff7df23b00d
cmp edx, eax
jae 0x7ff7df23b246
mov eax, edx
cmp r9b, 0xa2
ror cl, cl
lea rax, [rax + rsi]
shrd rbx, rdx, 0x13
inc ch
or cx, 0x4600
mov rbx, rax
movzx ecx, byte [rax]
cmp rbx, r14
test cl, cl
je 0x7ff7df23ad82
cmp cl, 0x2e
jmp 0x7ff7df23b046
je 0x7ff7df23b06b
mov cl, byte [rbx + 1]
jmp 0x7ff7df23b054
inc rbx
test cl, cl
jne 0x7ff7df23b03e
xor eax, eax
jmp 0x7ff7df23b066
jmp 0x7ff7df23b258
mov r8, rbx
clc
stc
sub r8, rax
stc
cmp r8, 0x104
jmp 0x7ff7df23b080
jae 0x7ff7df23ad82
mov rcx, rdi
cmp rdi, 0x597b0446
stc
clc
test r8, r8
jmp 0x7ff7df23b09a
je 0x7ff7df23b0d6
lea r9, [rsp + 0x50]
sub r9, rax
nop
bts rdx, r13
mov dl, 0x95
movsxd rdx, eax
movzx edx, byte [rax]
stc
test dl, dl
je 0x7ff7df23b0d6
inc rcx
mov byte [r9 + rax], dl
jmp 0x7ff7df23b0ca
inc rax
cmp rcx, r8
jb 0x7ff7df23b0b2
mov byte [rsp + rcx + 0x50], dil
movzx rax, dx
movzx ax, sil
lea rcx, [rsp + 0x50]
movsx eax, r13w
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x7ff7deec0959
je 0x7ff7df23ad82
cmp r11, rsi
jne 0x7ff7df23b1a8
cmp byte [rsp + 0x1a0], dil
jmp 0x7ff7df23b115
je 0x7ff7df23b183
lea rax, [rsp + 0x50]
sub rbp, rax
cmc
nop
movsx rdx, di
nop
lea rdx, [rsp + rdi + 0x50]
rcr ax, cl
lahf
mov ecx, edi
rcr ax, cl
xchg ah, al
mov eax, 0x6da47cee
rol eax, cl
cmp spl, r11b
add al, dil
xor al, byte [rdx + rbp]
jmp 0x7ff7df23b150
mov byte [rdx], al
jmp 0x7ff7df23b157
je 0x7ff7df23b177
inc rdi
cmp r11b, 0x24
stc
cmp rdi, 0x104
jmp 0x7ff7df23b171
jb 0x7ff7df23b12b
lea rbp, [rsp + 0x50]
rdtsc
movzx ax, r13b
mov rdx, rbp
movsx rax, bx
jmp 0x7ff7df23b18f
mov rcx, rsi
movsx ax, dil
movsxd rax, r10d
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
jmp 0x7ff7df23b258
cmp byte [rbx + 1], 0x23
movsxd rdx, r11d
mov dh, bh
movzx rdx, r9w
lea rdx, [rbx + 1]
jmp 0x7ff7df23b1be
jne 0x7ff7df23b22d
movzx edx, byte [rbx + 2]
cmp r9w, 0x3f51
add rbx, 2
clc
test dl, dl
jmp 0x7ff7df23b1da
je 0x7ff7df23b223
nop
movsxd rax, r9d
lea eax, [rdx - 0x30]
inc rbx
jmp 0x7ff7df23b1f3
cmp al, 9
jmp 0x7ff7df23b1fa
ja 0x7ff7df23b223
movsx eax, dl
mov dl, byte [rbx]
rcr cl, cl
not ch
lea ecx, [rdi + rdi*4]
rcr dil, cl
sal dil, cl
lea edi, [rax + rcx*2 - 0x30]
clc
test dx, r15w
test dl, dl
jne 0x7ff7df23b1e4
movsxd rdx, edi
movzx cx, r13b
shl cl, cl
xor r8d, r8d
movsx cx, ah
mov rcx, r11
jmp 0x7ff7df23b23c
call fcn.7ff7df23ac0e
jmp 0x7ff7df23b258
mov eax, edx
xor rdi, 0x6eaf1232
rcl bx, cl
sbb bl, 0x49
add rax, rsi
mov rbx, qword [rsp + 0x170]
or dil, bl
mov rdi, qword [rsp + 0x168]
mov rsi, rbp
add rsp, 0x178
xchg ebp, ebp
bswap rbp
pop rsi
jmp 0x7ff7df23b280
pop rbp
jmp 0x7ff7df23b286
ret