Function at 0x66208f80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x120
mov qword [rbp - 0x18], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov r15, r9
mov r13, r8
mov rsi, rdx
mov r14, rcx
movzx eax, word [rdx + 0x14]
mov edx, 0x10b
cmp ax, 2
jb 0x66208fd4
cmp word [rsi + 0x18], dx
jne 0x66208fd4
mov r8d, dword [rsi + 0x74]
jmp 0x66208fdb
mov r8d, dword [rsi + 0x84]
cmp r8d, 1
jbe 0x662093db
cmp ax, 2
jb 0x66208ff5
cmp word [rsi + 0x18], dx
lea rcx, [rsi + 0x78]
je 0x66208ffc
lea rcx, [rsi + 0x88]
add rcx, 8
je 0x662093db
mov ebx, dword [rcx]
test ebx, ebx
je 0x662093db
cmp byte [rsi + 0x118], 0
jne 0x66209055
mov eax, dword [rsi + 0x54]
cmp ebx, eax
jb 0x66209055
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.6620aac0
test eax, eax
js 0x662093e0
mov eax, dword [rbp - 0x34]
mov edi, dword [rbp - 0x2c]
sub rdi, rax
add rdi, rbx
mov edx, 0x10b
jmp 0x66209058
mov rdi, rbx
add rdi, qword [rsi + 0x110]
mov qword [rsp + 0x50], rdi
cmp word [rsi + 0x14], 2
jb 0x66209076
cmp word [rsi + 0x18], dx
jne 0x66209076
mov r12b, 1
jmp 0x66209079
xor r12b, r12b
mov byte [rbp + 0x68], r12b
nop dword [rax]
cmp byte [r14 + 0x70], 0
je 0x6620909c
mov r8d, 0x14
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.6620e700
jmp 0x6620910b
call fcn.66209a30
test rax, rax
je 0x662090d5
cmp byte [rax + 0x3c], 0
je 0x662090d5
lea rcx, [rsp + 0x58]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], 0x14
lea r9, [rsp + 0x60]
mov r8, rdi
mov rdx, qword [r14 + 0x58]
mov rcx, rax
call fcn.66209ef0
jmp 0x662090f7
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9d, 0x14
lea r8, [rsp + 0x60]
mov rdx, rdi
mov rcx, qword [r14 + 0x58]
call qword [sym.imp.ntdll.dll_NtReadVirtualMemory]
test eax, eax
js 0x662093e0
cmp qword [rsp + 0x58], 0x14
jne 0x662093d4
cmp dword [rsp + 0x60], 0
je 0x662093d0
mov ebx, dword [rsp + 0x6c]
cmp byte [rsi + 0x118], 0
jne 0x66209166
cmp word [rsi + 0x14], 2
jb 0x6620912f
mov eax, 0x10b
mov eax, dword [rsi + 0x54]
cmp ebx, eax
jb 0x66209166
lea rax, [rbp - 0x10]
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.6620aac0
test eax, eax
js 0x662093e0
mov eax, dword [rbp - 4]
mov edi, dword [rbp + 4]
sub rdi, rax
add rdi, rbx
jmp 0x66209169
mov rdi, rbx
add rdi, qword [rsi + 0x110]
xor edx, edx
lea rcx, [rsp + 0x78]
call fcn.662080d0
nop
lea r9, [rbp - 0x50]
lea r8, [rsp + 0x78]
mov rdx, rdi
mov rcx, r14
call fcn.6620a070
mov ebx, eax
test eax, eax
js 0x662093c2
mov rcx, qword [rsp + 0x78]
mov r8, rcx
mov rdx, qword [rbp - 0x50]
call fcn.66208000
test r13, r13
je 0x662091e6
mov r8, qword [rbp + 0x80]
mov rdx, rdi
mov rcx, qword [rsp + 0x78]
call r13
mov ebx, eax
cmp eax, 0x4000000f
jne 0x662091db
lea rcx, [rsp + 0x78]
call fcn.662081d0
jmp 0x662093a5
cmp eax, 0xc0000271
jne 0x662093c2
test r15, r15
jne 0x662091fa
lea rcx, [rsp + 0x78]
call fcn.662081d0
jmp 0x662093a5
lea r9, [rbp - 0x60]
mov r8d, dword [rsp + 0x60]
mov rdx, rsi
mov rcx, r14
call fcn.6620ac10
mov ebx, eax
test eax, eax
js 0x662093c2
lea r9, [rbp - 0x58]
mov r8d, dword [rsp + 0x70]
mov rdx, rsi
mov rcx, r14
call fcn.6620ac10
mov ebx, eax
test eax, eax
js 0x662093c2
xor r15d, r15d
mov eax, 8
test r12b, r12b
mov ecx, 4
cmovne eax, ecx
mov qword [rbp - 0x48], rax
nop dword [rax]
mov r12, rax
imul r12, r15
mov r13, qword [rbp - 0x60]
add r13, r12
mov r9, rax
lea r8, [rsp + 0x48]
mov rdx, r13
mov rcx, r14
call fcn.66209e30
mov ebx, eax
test eax, eax
js 0x662093c2
movzx ebx, byte [rbp + 0x68]
test bl, bl
mov eax, dword [rsp + 0x48]
jne 0x6620928c
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x6620938e
xor edx, edx
lea rcx, [rbp - 0x40]
call fcn.662080d0
nop
xor edi, edi
mov rax, qword [rsp + 0x48]
test bl, bl
je 0x662092b3
mov ecx, eax
shr ecx, 0x1f
jmp 0x662092c5
movabs rcx, 0x8000000000000000
test rcx, rax
mov ecx, edi
setne cl
test ecx, ecx
je 0x662092d0
mov word [rsp + 0x40], ax
jmp 0x6620932f
lea r9, [rbp - 0x68]
mov r8d, eax
mov rdx, rsi
mov rcx, r14
call fcn.6620ac10
mov ebx, eax
test eax, eax
js 0x662093b8
lea r8, [rsp + 0x40]
mov rdi, qword [rbp - 0x68]
mov rdx, rdi
mov rcx, r14
call fcn.6620a290
mov ebx, eax
test eax, eax
js 0x662093b8
add rdi, 2
xor r9d, r9d
lea r8, [rbp - 0x40]
mov rdx, rdi
mov rcx, r14
call fcn.6620a070
mov ebx, eax
test eax, eax
js 0x662093b8
movzx eax, word [rsp + 0x40]
mov rcx, qword [rbp - 0x58]
add rcx, r12
mov rdx, qword [rbp + 0x80]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rcx
movzx r9d, ax
mov r8, rdi
mov rdx, qword [rbp - 0x40]
mov rcx, qword [rsp + 0x78]
call qword [rbp + 0x78]
mov ebx, eax
cmp eax, 0x4000000f
je 0x66209384
cmp eax, 0xc0000271
jne 0x662093b8
lea rcx, [rbp - 0x40]
call fcn.662081d0
inc r15
mov rax, qword [rbp - 0x48]
jmp 0x66209250
lea rcx, [rbp - 0x40]
call fcn.662081d0
nop
lea rcx, [rsp + 0x78]
call fcn.662081d0
movzx r12d, byte [rbp + 0x68]
mov r15, qword [rbp + 0x78]
mov r13, qword [rbp + 0x70]
mov rdi, qword [rsp + 0x50]
add rdi, 0x14
mov qword [rsp + 0x50], rdi
jmp 0x66209080
lea rcx, [rbp - 0x40]
call fcn.662081d0
nop
lea rcx, [rsp + 0x78]
call fcn.662081d0
mov eax, ebx
jmp 0x662093e0
xor eax, eax
jmp 0x662093e0
mov eax, 0xc0000004
jmp 0x662093e0
mov eax, 0xc000007a
mov rbx, qword [rsp + 0x160]
add rsp, 0x120
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret