Function at 0x6f13c640
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov qword [rsp + 0x68], rcx
mov rax, qword [rsp + 0x68]
cmp qword [rax + 0x10], 0
je 0x6f13caa9
xor eax, eax
mov ecx, dword [0x6f152970]
mov edx, dword [0x6f15298c]
sub eax, 0x5bf1e686
sub eax, 1
add eax, 0x5bf1e686
mov r8d, ecx
add r8d, 0x7118f5f8
add r8d, eax
sub r8d, 0x7118f5f8
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
and r11b, 0
mov bl, 1
mov sil, bl
xor sil, 0
mov dil, r9b
and dil, sil
mov bpl, bl
xor bpl, 1
and bpl, 0
and sil, 1
or r11b, dil
or bpl, sil
xor r11b, bpl
mov sil, r10b
xor sil, 0xff
and sil, 1
mov dil, bl
xor dil, 1
mov bpl, r10b
and bpl, dil
or sil, bpl
mov dil, bl
xor dil, 1
and dil, 0
mov bpl, bl
xor bpl, 0
mov r14b, bpl
and r14b, 1
mov r15b, bl
xor r15b, 1
and r15b, 0
and bpl, 1
or dil, r14b
or r15b, bpl
xor dil, r15b
mov bpl, bl
xor bpl, 1
mov r14b, r11b
xor r14b, bpl
and r14b, r11b
mov bpl, dil
xor bpl, 0xff
mov r15b, r9b
xor r15b, bpl
and r15b, r9b
mov r9b, sil
xor r9b, 0xff
mov bpl, bl
xor bpl, 1
mov r12b, bl
xor r12b, 0
or r9b, bpl
or r12b, 0
xor r9b, 0xff
and r9b, r12b
xor r10b, 0xff
mov bpl, dil
xor bpl, 0xff
mov r12b, bl
xor r12b, 0
or r10b, bpl
or r12b, 0
xor r10b, 0xff
and r10b, r12b
mov bpl, r14b
xor bpl, 0xff
mov r12b, r15b
xor r12b, 0xff
mov r13b, bl
xor r13b, 1
mov al, bpl
and al, 0xff
and r14b, r13b
mov cl, r12b
and cl, 0xff
and r15b, r13b
or al, r14b
or cl, r15b
xor al, cl
or bpl, r12b
xor bpl, 0xff
or r13b, 1
and bpl, r13b
or al, bpl
mov cl, r9b
and cl, r10b
xor r9b, r10b
or cl, r9b
mov r9b, al
xor r9b, 0xff
mov r10b, cl
and r10b, r9b
xor cl, 0xff
and al, cl
or r10b, al
mov al, r11b
xor al, 0xff
mov cl, sil
xor cl, 0xff
mov r9b, bl
xor r9b, 1
mov bpl, al
and bpl, 0xff
and r11b, r9b
mov r14b, cl
and r14b, 0xff
and sil, r9b
or bpl, r11b
or r14b, sil
xor bpl, r14b
or al, cl
xor al, 0xff
or r9b, 1
and al, r9b
or bpl, al
mov al, bpl
xor al, 0xff
and al, 1
mov cl, bl
xor cl, 1
and bpl, cl
or al, bpl
mov cl, dil
and cl, 1
xor dil, 1
or cl, dil
xor cl, 0xff
mov r9b, al
xor r9b, cl
and r9b, al
mov al, r10b
xor al, 0xff
mov cl, r9b
xor cl, 0xff
xor bl, 1
mov r11b, al
and r11b, 0xff
and r10b, bl
mov sil, cl
and sil, 0xff
and r9b, bl
or r11b, r10b
or sil, r9b
xor r11b, sil
or al, cl
xor al, 0xff
or bl, 1
and al, bl
or r11b, al
test r11b, 1
jne 0x6f13c898
jmp 0x6f13d10f
xor eax, eax
mov dword [rsp + 0x74], 1
mov ecx, dword [0x6f152970]
mov edx, dword [0x6f15298c]
sub eax, 0xdf2a4c0f
sub eax, 1
add eax, 0xdf2a4c0f
mov r8d, ecx
sub r8d, 0x9c36fc07
add r8d, eax
add r8d, 0x9c36fc07
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
and r11b, 1
mov bl, 1
mov sil, bl
xor sil, 1
mov dil, r9b
and dil, sil
or r11b, dil
mov sil, r10b
xor sil, 0xff
and sil, 0
mov dil, bl
xor dil, 0
mov bpl, r10b
and bpl, dil
mov r14b, bl
xor r14b, 1
and r14b, 0
and dil, 1
or sil, bpl
or r14b, dil
xor sil, r14b
mov dil, bl
xor dil, 0
and dil, 0
mov bpl, bl
xor bpl, 0
mov r14b, bpl
and r14b, 0
mov r15b, bl
xor r15b, 1
and r15b, 0
and bpl, 1
or dil, r14b
or r15b, bpl
xor dil, r15b
mov bpl, bl
xor bpl, 0
mov r14b, r11b
xor r14b, bpl
and r14b, r11b
mov bpl, dil
xor bpl, 0xff
mov r15b, r9b
xor r15b, bpl
and r15b, r9b
mov r9b, sil
xor r9b, 0xff
mov bpl, bl
xor bpl, 0
mov r12b, bl
xor r12b, 1
or r9b, bpl
or r12b, 1
xor r9b, 0xff
and r9b, r12b
xor r10b, 0xff
mov bpl, dil
xor bpl, 0xff
mov r12b, bl
xor r12b, 0
or r10b, bpl
or r12b, 0
xor r10b, 0xff
and r10b, r12b
mov bpl, r14b
xor bpl, 0xff
mov r12b, r15b
xor r12b, 0xff
mov r13b, bl
xor r13b, 1
mov al, bpl
and al, 0xff
and r14b, r13b
mov cl, r12b
and cl, 0xff
and r15b, r13b
or al, r14b
or cl, r15b
xor al, cl
or bpl, r12b
xor bpl, 0xff
or r13b, 1
and bpl, r13b
or al, bpl
mov cl, r9b
and cl, r10b
xor r9b, r10b
or cl, r9b
mov r9b, al
xor r9b, 0xff
mov r10b, cl
and r10b, r9b
xor cl, 0xff
and al, cl
or r10b, al
mov al, r11b
xor al, 0xff
mov cl, sil
xor cl, 0xff
mov r9b, bl
xor r9b, 1
mov bpl, al
and bpl, 0xff
and r11b, r9b
mov r14b, cl
and r14b, 0xff
and sil, r9b
or bpl, r11b
or r14b, sil
xor bpl, r14b
or al, cl
xor al, 0xff
or r9b, 1
and al, r9b
or bpl, al
mov al, bpl
xor al, 0xff
and al, 1
xor bl, 1
and bpl, bl
or al, bpl
mov cl, dil
and cl, 0
xor dil, 0
or cl, dil
xor cl, 0xff
mov r9b, al
xor r9b, cl
and r9b, al
mov al, r10b
and al, r9b
xor r10b, r9b
or al, r10b
test al, 1
jne 0x6f13caa4
jmp 0x6f13d10f
jmp 0x6f13d0fa
mov rax, qword [rsp + 0x68]
mov rcx, qword [rax + 8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x6f13cad6
mov dword [rsp + 0x74], 0
jmp 0x6f13d0fa
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
movzx ecx, word [rax]
cmp ecx, 0x5a4d
je 0x6f13cb01
mov dword [rsp + 0x74], 0
jmp 0x6f13d0fa
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
movsxd rcx, dword [rcx + 0x3c]
add rax, rcx
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0x4550
je 0x6f13cb35
mov dword [rsp + 0x74], 0
jmp 0x6f13d0fa
mov rax, qword [rsp + 0x50]
movzx ecx, word [rax + 0x16]
mov edx, ecx
xor edx, 0xffffffff
and edx, 0xffffffff
mov r8d, 0xffffffff
mov r9d, r8d
xor r9d, 0xffffffff
and ecx, r9d
or edx, ecx
mov ecx, r8d
xor ecx, 0x2000
and ecx, 0x9562d3b8
mov r9d, r8d
xor r9d, 0x9562d3b8
mov r10d, r9d
and r10d, 0x2000
mov r11d, r8d
xor r11d, 0xffffffff
and r11d, 0x9562d3b8
and r9d, 0xffffffff
or ecx, r10d
or r11d, r9d
xor ecx, r11d
mov r9d, r8d
xor r9d, 0x1ca7df
and r9d, 0x29db88ab
mov r10d, r8d
xor r10d, 0x29db88ab
mov r11d, r10d
and r11d, 0x1ca7df
mov esi, r8d
xor esi, 0xffffffff
and esi, 0x29db88ab
and r10d, 0xffffffff
or r9d, r11d
or esi, r10d
xor r9d, esi
mov r10d, edx
xor r10d, 0xffffffff
mov r11d, ecx
xor r11d, 0xffffffff
mov esi, r8d
xor esi, 0x6fe3a89e
mov edi, r10d
and edi, 0x6fe3a89e
and edx, esi
mov ebx, r11d
and ebx, 0x6fe3a89e
and ecx, esi
or edi, edx
or ebx, ecx
xor edi, ebx
or r10d, r11d
xor r10d, 0xffffffff
or esi, 0x6fe3a89e
and r10d, esi
or edi, r10d
mov ecx, r8d
xor ecx, 0x1ca7df
mov edx, r9d
xor edx, 0xffffffff
mov r10d, r8d
xor r10d, 0x20e430f4
mov r11d, ecx
and r11d, 0x20e430f4
mov esi, r10d
and esi, 0x1ca7df
mov ebx, edx
and ebx, 0x20e430f4
and r9d, r10d
or r11d, esi
or ebx, r9d
xor r11d, ebx
or ecx, edx
xor ecx, 0xffffffff
or r10d, 0x20e430f4
and ecx, r10d
or r11d, ecx
mov ecx, edi
xor ecx, 0xffffffff
and ecx, 0x824e0c0
mov edx, r8d
xor edx, 0x824e0c0
and edi, edx
mov r9d, r8d
xor r9d, 0xffffffff
and r9d, 0x824e0c0
and edx, 0xffffffff
or ecx, edi
or r9d, edx
xor ecx, r9d
xor ecx, 0xffffffff
xor r11d, 0xffffffff
xor r8d, 0x647cf8dd
or ecx, r11d
or r8d, 0x647cf8dd
xor ecx, 0xffffffff
and ecx, r8d
cmp ecx, 0
je 0x6f13ccfe
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x88], 0
je 0x6f13ccfe
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0x8c], 0
jne 0x6f13cd0b
mov dword [rsp + 0x74], 0
jmp 0x6f13d0fa
xor eax, eax
mov ecx, dword [0x6f152970]
mov edx, dword [0x6f15298c]
mov r8d, eax
sub r8d, 1
add r8d, 0
sub eax, r8d
mov r8d, ecx
sub r8d, eax
imul ecx, r8d
and ecx, 1
cmp ecx, 0
sete r9b
cmp edx, 0xa
setl r10b
mov r11b, r9b
xor r11b, 0xff
mov bl, r10b
xor bl, 0xff
mov sil, 1
xor sil, 1
or r11b, bl
or sil, 1
xor r11b, 0xff
and r11b, sil
mov bl, r9b
xor bl, 0xff
mov sil, r10b
and sil, bl
xor r10b, 0xff
and r9b, r10b
or sil, r9b
mov r9b, r11b
and r9b, sil
xor r11b, sil
or r9b, r11b
test r9b, 1
jne 0x6f13cd95
jmp 0x6f13d11c
xor eax, eax
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x50]
mov r8d, dword [rdx + 0x88]
mov edx, r8d
add rcx, rdx
mov qword [rsp + 0x48], rcx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
mov r8d, dword [rdx + 0x1c]
mov edx, r8d
add rcx, rdx
mov qword [rsp + 0x40], rcx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
mov r8d, dword [rdx + 0x20]
mov edx, r8d
add rcx, rdx
mov qword [rsp + 0x38], rcx
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
mov r8d, dword [rdx + 0x24]
mov edx, r8d
add rcx, rdx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x2c], 0
mov r8d, dword [0x6f152970]
mov r9d, dword [0x6f15298c]
sub eax, 0x5075bcf
sub eax, 1
add eax, 0x5075bcf
mov r10d, r8d
add r10d, 0xbe8ef23e
add r10d, eax
sub r10d, 0xbe8ef23e
imul r8d, r10d
and r8d, 1
cmp r8d, 0
sete r11b
cmp r9d, 0xa
setl bl
mov sil, r11b
xor sil, 0xff
and sil, 1
mov dil, 1
mov bpl, dil
xor bpl, 1
mov r14b, r11b
and r14b, bpl
or sil, r14b
mov bpl, bl
xor bpl, 0xff
and bpl, 1
mov r14b, dil
xor r14b, 1
mov r15b, bl
and r15b, r14b
or bpl, r15b
mov r14b, dil
xor r14b, 1
and r14b, 1
mov r15b, dil
xor r15b, 1
mov r12b, r15b
and r12b, 1
mov r13b, dil
xor r13b, 1
and r13b, 0xff
and r15b, 1
or r14b, r12b
or r13b, r15b
xor r14b, r13b
mov r15b, dil
xor r15b, 1
mov r12b, sil
xor r12b, r15b
and r12b, sil
mov r15b, r14b
xor r15b, 0xff
mov r13b, r11b
xor r13b, r15b
and r13b, r11b
mov r11b, bpl
xor r11b, 0xff
mov r15b, dil
xor r15b, 1
mov al, dil
xor al, 0
or r11b, r15b
or al, 0
xor r11b, 0xff
and r11b, al
mov al, r14b
xor al, 0xff
mov r15b, bl
xor r15b, al
and r15b, bl
mov al, r12b
and al, r13b
xor r12b, r13b
or al, r12b
mov bl, r11b
xor bl, 0xff
mov r12b, r15b
xor r12b, 0xff
mov r13b, dil
xor r13b, 0
mov cl, bl
and cl, 0
and r11b, r13b
mov dl, r12b
and dl, 0
and r15b, r13b
or cl, r11b
or dl, r15b
xor cl, dl
or bl, r12b
xor bl, 0xff
or r13b, 0
and bl, r13b
or cl, bl
mov dl, al
xor dl, 0xff
and dl, 0
mov r11b, dil
xor r11b, 0
and al, r11b
mov bl, cl
xor bl, 0xff
and bl, 0
and cl, r11b
or dl, al
or bl, cl
xor dl, bl
mov al, sil
xor al, 0xff
mov cl, bpl
xor cl, 0xff
mov r11b, dil
xor r11b, 0
mov bl, al
and bl, 0
and sil, r11b
mov r15b, cl
and r15b, 0
and bpl, r11b
or bl, sil
or r15b, bpl
xor bl, r15b
or al, cl
xor al, 0xff
or r11b, 0
and al, r11b
or bl, al
mov al, bl
xor al, 0xff
and al, 1
mov cl, dil
xor cl, 1
and bl, cl
or al, bl
mov cl, dil
xor cl, 1
mov r11b, r14b
xor r11b, 0xff
mov bl, dil
xor bl, 1
mov sil, cl
and sil, 0xff
mov bpl, bl
and bpl, 1
mov r15b, r11b
and r15b, 0xff
and r14b, bl
or sil, bpl
or r15b, r14b
xor sil, r15b
or cl, r11b
xor cl, 0xff
or bl, 1
and cl, bl
or sil, cl
xor al, 0xff
xor sil, 0xff
xor dil, 0
or al, sil
or dil, 0
xor al, 0xff
and al, dil
mov cl, dl
and cl, al
xor dl, al
or cl, dl
test cl, 1
jne 0x6f13d026
jmp 0x6f13d11c
jmp 0x6f13d02b
mov eax, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0x48]
cmp eax, dword [rcx + 0x1c]
jae 0x6f13d0f2
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x38]
mov edx, dword [rsp + 0x2c]
mov r8d, edx
mov edx, dword [rcx + r8*4]
mov ecx, edx
add rax, rcx
mov rcx, rax
call fcn.6f13ad70
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x68]
cmp eax, dword [rcx]
jne 0x6f13d0b3
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
mov r9d, r8d
movzx r8d, word [rdx + r9*2]
mov edx, r8d
mov r8d, dword [rcx + rdx*4]
mov ecx, r8d
add rax, rcx
mov rcx, qword [rsp + 0x68]
mov qword [rcx + 0x10], rax
mov dword [rsp + 0x74], 1
jmp 0x6f13d0fa
jmp 0x6f13d0b8
xor eax, eax
mov ecx, dword [rsp + 0x2c]
mov edx, 0xad7700fd
add edx, 0
sub edx, ecx
sub edx, 0xad7700fd
mov ecx, eax
sub ecx, 1
add ecx, 0
add edx, 0x8dc8b712
add edx, ecx
sub edx, 0x8dc8b712
sub eax, edx
add eax, 0
mov dword [rsp + 0x2c], eax
jmp 0x6f13d02b
mov dword [rsp + 0x74], 0
mov eax, dword [rsp + 0x74]
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov dword [rsp + 0x74], 1
jmp 0x6f13c898
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
mov edx, dword [rcx + 0x88]
mov ecx, edx
add rax, rcx
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
mov edx, dword [rcx + 0x1c]
mov ecx, edx
add rax, rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
mov edx, dword [rcx + 0x20]
mov ecx, edx
add rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x48]
mov edx, dword [rcx + 0x24]
mov ecx, edx
add rax, rcx
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x2c], 0
jmp 0x6f13cd95