Function at 0x70b98060
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
xor eax, eax
mov rbx, rdx
mov rbp, rcx
mov ecx, 6
mov qword [rsp + 0x88], 0
lea rdx, [rsp + 0x90]
mov rsi, r8
mov qword [rsp + 0x68], 0
lea r9, [rsp + 0x60]
mov rdi, rdx
mov qword [rsp + 0x60], rbx
rep stosq qword [rdi], rax
movsxd rax, dword [r8 + 0x18]
lea rdx, [rsp + 0x68]
mov rcx, qword [r8 + 0x10]
xor r8d, r8d
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x1000
lea rdi, [rsp + 0x58]
mov qword [rsp + 0x80], rax
call qword [0x70bcbb58]
mov rcx, qword [rsi + 0x28]
mov qword [rsp + 0x58], 0
call fcn.70b97f50
mov rax, qword [0x70bca1a0]
mov rcx, rsi
mov qword [rsp + 0x78], rsi
add rax, 0x10
mov qword [0x70bcbba0], rax
mov rax, qword [0x70bcb420]
add rax, 0x10
mov qword [0x70bc9f28], rax
lea rax, [fcn.70b949e0]
mov qword [rsp + 0x70], rax
call fcn.70b949e0
mov rax, qword [rsp + 0x60]
mov r8, rbp
mov qword [rsp + 0x20], rdi
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsi + 0x10]
lea r9, [rax - 1]
call qword [0x70bcac10]
mov rcx, rbx
call fcn.70b947e0
mov rcx, qword [0x70bc9f28]
mov r8, rbx
lea rdx, [rax + 0x10]
call fcn.70b820e0
mov rax, qword [rsp + 0x68]
mov edx, 0x8c5c26e
mov qword [rsp + 0x50], 0
lea rcx, [0x70ba3f40]
mov dword [rsp + 0x3c], 0
mov qword [rsp + 0x48], rax
call fcn.70b8a680
test rax, rax
je 0x70b98522
mov rdx, qword [rax]
lea rcx, [rax + 0x10]
call fcn.70b947f0
test rax, rax
mov rbx, rax
je 0x70b984ea
mov rax, qword [rax]
lea rbp, [rsp + 0x40]
xor r8d, r8d
mov dword [rsp + 0x28], 4
lea rdx, [rsp + 0x50]
mov rcx, qword [rsi + 0x10]
mov dword [rsp + 0x20], 0x3000
mov r9, rbp
mov qword [rsp + 0x40], rax
call qword [0x70bcbb58]
mov rdx, qword [rbx]
test rdx, rdx
jle 0x70b9840c
xor eax, eax
jmp 0x70b98209
add rax, 1
cmp rdx, rax
je 0x70b98283
cmp byte [rbx + rax + 0x10], 0x88
jne 0x70b98200
cmp byte [rbx + rax + 0x11], 0x88
jne 0x70b98200
cmp byte [rbx + rax + 0x12], 0x88
jne 0x70b98200
cmp byte [rbx + rax + 0x13], 0x88
jne 0x70b98200
cmp byte [rbx + rax + 0x14], 0x88
jne 0x70b98200
cmp byte [rbx + rax + 0x15], 0x88
jne 0x70b98200
movzx edx, byte [rsp + 0x68]
lea rax, [rbx + rax + 0x10]
mov byte [rax], dl
movzx edx, byte [rsp + 0x69]
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x6a]
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x6b]
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x6c]
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x6d]
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x6e]
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x6f]
mov byte [rax + 7], dl
mov rdx, qword [rbx]
test rdx, rdx
jle 0x70b9840c
lea rcx, [rdx + 2]
mov eax, 2
jmp 0x70b9829d
add rax, 1
cmp rax, rcx
je 0x70b98348
cmp byte [rbx + rax + 0xe], 0x49
jne 0x70b98290
cmp byte [rbx + rax + 0xf], 0xba
jne 0x70b98290
cmp byte [rbx + rax + 0x10], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x11], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x12], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x13], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x14], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x15], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x16], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x17], 0
jne 0x70b98290
cmp byte [rbx + rax + 0x18], 0x41
jne 0x70b98290
cmp byte [rbx + rax + 0x19], 0xff
jne 0x70b98290
cmp byte [rbx + rax + 0x1a], 0xd2
jne 0x70b98290
movzx edx, byte [rsp + 0x68]
lea rax, [rbx + rax + 0x10]
mov byte [rax], dl
movzx edx, byte [rsp + 0x69]
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x6a]
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x6b]
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x6c]
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x6d]
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x6e]
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x6f]
mov byte [rax + 7], dl
mov rdx, qword [rbx]
test rdx, rdx
jle 0x70b9840c
add rdx, 2
mov eax, 2
jmp 0x70b9836d
add rax, 1
cmp rax, rdx
je 0x70b9840c
cmp byte [rbx + rax + 0xe], 0x49
jne 0x70b98360
cmp byte [rbx + rax + 0xf], 0xba
jne 0x70b98360
cmp byte [rbx + rax + 0x10], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x11], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x12], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x13], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x14], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x15], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x16], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x17], 0
jne 0x70b98360
cmp byte [rbx + rax + 0x18], 0x41
jne 0x70b98360
cmp byte [rbx + rax + 0x19], 0xff
jne 0x70b98360
cmp byte [rbx + rax + 0x1a], 0xe2
jne 0x70b98360
movzx edx, byte [rsp + 0x68]
lea rax, [rbx + rax + 0x10]
mov byte [rax], dl
movzx edx, byte [rsp + 0x69]
mov byte [rax + 1], dl
movzx edx, byte [rsp + 0x6a]
mov byte [rax + 2], dl
movzx edx, byte [rsp + 0x6b]
mov byte [rax + 3], dl
movzx edx, byte [rsp + 0x6c]
mov byte [rax + 4], dl
movzx edx, byte [rsp + 0x6d]
mov byte [rax + 5], dl
movzx edx, byte [rsp + 0x6e]
mov byte [rax + 6], dl
movzx edx, byte [rsp + 0x6f]
mov byte [rax + 7], dl
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x20], rdi
lea r8, [rbx + 0x10]
mov r9, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x50]
call qword [0x70bcac10]
test eax, eax
jne 0x70b984e0
mov rax, qword [rsp + 0x50]
lea rdx, [rsp + 0x48]
mov r9d, 0x20
mov r8, rbp
mov rcx, qword [rsi + 0x10]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
call qword [0x70bc6e00]
test eax, eax
jne 0x70b984e0
mov rax, qword [rsp + 0x50]
mov edx, 0x7e07caee
lea rcx, [0x70ba3f20]
mov qword [rsp + 0x68], rax
call fcn.70b8a680
mov edx, 0x17af4bca
lea rcx, [0x70ba3f00]
mov rbx, rax
call fcn.70b8abe0
test rbx, rbx
je 0x70b985dd
test rax, rax
mov rcx, qword [rbx]
je 0x70b985d6
mov rdx, qword [rax]
cmp rdx, rcx
je 0x70b9852b
lea rcx, [0x70ba3f20]
mov edx, 0x7e07caee
call fcn.70b8a680
mov rcx, qword [rsi + 0x10]
mov rdx, rax
call fcn.70b89970
test rax, rax
mov rbx, rax
jne 0x70b985ed
nop word cs:[rax + rax]
mov ecx, 1
call sub.msvcrt.dll_exit
lea rbp, [rsp + 0x40]
mov rcx, qword [rsi + 0x10]
mov dword [rsp + 0x28], 4
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x20], 0x3000
mov r9, rbp
mov qword [rsp + 0x40], 0
call qword [0x70bcbb58]
jmp 0x70b9840c
xor edx, edx
xor ecx, ecx
jmp 0x70b981a1
test rcx, rcx
jle 0x70b9855a
xor edx, edx
movzx edi, byte [rbx + 0x10]
cmp byte [rax + 0x10], dil
je 0x70b98551
jmp 0x70b984ad
movzx edi, byte [rax + rdx + 0x10]
cmp byte [rbx + rdx + 0x10], dil
jne 0x70b984ad
add rdx, 1
cmp rdx, rcx
jne 0x70b98541
lea rcx, [0x70ba3f20]
mov edx, 0x7e07caee
call fcn.70b8a680
mov rcx, rax
call fcn.70b88180
mov rcx, rax
call qword [0x70bca2e8]
test rax, rax
mov rbx, rax
je 0x70b984e0
lea rcx, [0x70ba3ec0]
mov edx, 0x544474aa
call fcn.70b8a680
mov rcx, rax
call fcn.70b823f0
mov rcx, rbx
mov rdx, rax
call qword [0x70bca8d8]
test rax, rax
je 0x70b984e0
mov rcx, qword [rsi + 0x10]
mov r8, rax
mov rdx, qword [rsp + 0x68]
call fcn.70b93430
test al, al
je 0x70b984e0
xor ecx, ecx
call sub.msvcrt.dll_exit
xor edx, edx
jmp 0x70b984a8
xor ecx, ecx
test rax, rax
jne 0x70b984a5
jmp 0x70b9855a
lea rcx, [0x70ba3ec0]
mov edx, 0x544474aa
call fcn.70b8a680
mov rcx, qword [rsi + 0x10]
mov rdx, rbx
mov r8, rax
call fcn.70b96470
test rax, rax
jne 0x70b985b6
jmp 0x70b984e0