Function at 0x6e439ea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x248
test rcx, rcx
mov r13, rcx
mov rbp, rdx
je 0x6e43a900
cmp qword [rcx + 0xd0], 0
je 0x6e43a6f0
lea rbx, [rsp + 0xa0]
mov edx, 1
movabs rsi, 0x200000008
lea rax, [rsp + 0x70]
mov rcx, rbx
mov qword [rsp + 0xa0], rsi
mov qword [rsp + 0xa8], rax
call fcn.6e4406b8
mov edx, dword [r13]
lea rax, [rsp + 0x78]
mov qword [rsp + 0xb8], rsi
lea rcx, [rbx + 0x18]
mov qword [rsp + 0xc0], rax
call fcn.6e4406b8
lea rax, [rsp + 0x64]
mov dword [rsp + 0xd4], 4
mov qword [rsp + 0xd8], rax
mov rax, qword [r13 + 0xd0]
test rax, rax
je 0x6e43a703
cmp dword [r13], 2
mov eax, dword [rax + 0x10]
je 0x6e43a715
mov dword [rsp + 0xd0], 2
rol ax, 8
mov word [rsp + 0x64], ax
mov eax, dword [r13 + 0xc8]
test eax, eax
je 0x6e439f9e
mov byte [rsp + 0x63], al
movabs rax, 0x400000001
mov qword [rsp + 0xe8], rax
lea rax, [rsp + 0x63]
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x104], 4
mov eax, dword [r13 + 0x10]
mov edx, dword [r13 + 0xc4]
mov dword [rsp + 0x11c], 4
mov dword [rsp + 0x134], 4
mov dword [rsp + 0x14c], 4
mov dword [rsp + 0x100], eax
lea rax, [r13 + 0x14]
mov qword [rsp + 0x108], rax
mov eax, dword [r13 + 0x44]
test edx, edx
mov dword [rsp + 0x118], eax
lea rax, [r13 + 0x48]
mov qword [rsp + 0x120], rax
mov eax, dword [r13 + 0x68]
mov dword [rsp + 0x130], eax
lea rax, [r13 + 0x6c]
mov qword [rsp + 0x138], rax
mov eax, dword [r13 + 4]
mov dword [rsp + 0x148], eax
lea rax, [r13 + 8]
mov qword [rsp + 0x150], rax
jne 0x6e43a803
mov edx, dword [r13 + 0xc0]
test edx, edx
jne 0x6e43a7d0
mov edx, dword [r13 + 0xb8]
test edx, edx
jne 0x6e43a795
mov rcx, qword [r13 + 0x108]
test rcx, rcx
je 0x6e43a0a3
cmp byte [rcx], 0
je 0x6e43a740
mov rdx, rcx
xor eax, eax
jmp 0x6e43a078
test eax, eax
js 0x6e43a740
add rdx, 1
add eax, 1
cmp byte [rdx], 0
jne 0x6e43a070
and eax, 0x7fffffff
mov dword [rsp + 0x1a8], eax
mov dword [rsp + 0x1ac], 4
mov qword [rsp + 0x1b0], rcx
mov rax, qword [r13 + 0x130]
test rax, rax
je 0x6e43a0d0
mov rdx, qword [r13 + 0x138]
mov qword [rsp + 0x1e0], rax
mov dword [rsp + 0x1dc], 4
mov dword [rsp + 0x1d8], edx
mov edx, dword [r13 + 0x140]
test edx, edx
jle 0x6e43a109
movabs rax, 0x200000008
mov qword [rsp + 0x1c0], rax
lea rcx, [rbx + 0x120]
lea rax, [rsp + 0x98]
mov qword [rsp + 0x1c8], rax
call fcn.6e4406b8
mov rcx, qword [r13 + 0x90]
test rcx, rcx
je 0x6e43a158
cmp byte [rcx], 0
je 0x6e43a770
mov rdx, rcx
xor eax, eax
jmp 0x6e43a12d
test eax, eax
js 0x6e43a770
add rdx, 1
add eax, 1
cmp byte [rdx], 0
jne 0x6e43a125
and eax, 0x7fffffff
mov dword [rsp + 0x1f0], eax
mov dword [rsp + 0x1f4], 4
mov qword [rsp + 0x1f8], rcx
mov rcx, qword [r13 + 0x98]
test rcx, rcx
je 0x6e43a1a7
cmp byte [rcx], 0
je 0x6e43a760
mov rdx, rcx
xor eax, eax
jmp 0x6e43a17c
test eax, eax
js 0x6e43a760
add rdx, 1
add eax, 1
cmp byte [rdx], 0
jne 0x6e43a174
and eax, 0x7fffffff
mov dword [rsp + 0x208], eax
mov dword [rsp + 0x20c], 4
mov qword [rsp + 0x210], rcx
mov rcx, qword [r13 + 0x148]
test rcx, rcx
je 0x6e43a1f6
cmp byte [rcx], 0
je 0x6e43a750
mov rdx, rcx
xor eax, eax
jmp 0x6e43a1cb
test eax, eax
js 0x6e43a750
add rdx, 1
add eax, 1
cmp byte [rdx], 0
jne 0x6e43a1c3
and eax, 0x7fffffff
mov dword [rsp + 0x220], eax
mov dword [rsp + 0x224], 4
mov qword [rsp + 0x228], rcx
xor edx, edx
mov rcx, rbx
call fcn.6e43fc50
lea rcx, [rbx + 0x18]
xor edx, edx
mov esi, eax
call fcn.6e43fc50
lea rcx, [rbx + 0x30]
xor edx, edx
add esi, eax
call fcn.6e43fc48
lea rcx, [rbx + 0x78]
xor edx, edx
add esi, eax
call fcn.6e43fc48
lea rcx, [rbx + 0x60]
xor edx, edx
add esi, eax
call fcn.6e43fc48
add esi, eax
mov eax, dword [r13 + 4]
test eax, eax
jne 0x6e43a780
mov r15d, dword [r13 + 0xc4]
mov dword [rsp + 0x50], 0
test r15d, r15d
jne 0x6e43a8d0
mov r14d, dword [r13 + 0xc0]
mov dword [rsp + 0x54], 0
test r14d, r14d
jne 0x6e43a8a0
mov rcx, qword [r13 + 0xb0]
xor r15d, r15d
test rcx, rcx
je 0x6e43a29f
xor edx, edx
call fcn.6e43fc38
mov r8d, 3
mov ecx, 1
mov edx, eax
mov r15d, eax
call fcn.6e4406a0
add esi, eax
lea rcx, [rbx + 0x90]
xor edx, edx
call fcn.6e43fc48
mov r8d, 4
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x4c], eax
call fcn.6e4406a0
mov r12d, dword [r13 + 0xb8]
mov dword [rsp + 0x58], 0
add esi, eax
test r12d, r12d
jne 0x6e43a870
mov edi, dword [r13 + 0x140]
mov dword [rsp + 0x48], 0
test edi, edi
jle 0x6e43a316
lea rcx, [rbx + 0x120]
xor edx, edx
call fcn.6e43fc50
mov r8d, 9
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x48], eax
call fcn.6e4406a0
add esi, eax
cmp qword [r13 + 0x130], 0
mov dword [rsp + 0x3c], 0
je 0x6e43a34e
lea rcx, [rbx + 0x138]
xor edx, edx
call fcn.6e43fc48
mov r8d, 0xa
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x3c], eax
call fcn.6e4406a0
add esi, eax
cmp qword [r13 + 0x108], 0
mov dword [rsp + 0x38], 0
je 0x6e43a386
lea rcx, [rbx + 0x108]
xor edx, edx
call fcn.6e43fc48
mov r8d, 6
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x38], eax
call fcn.6e4406a0
add esi, eax
mov r11d, dword [r13 + 0xc8]
mov dword [rsp + 0x5c], 0
test r11d, r11d
jne 0x6e43a840
cmp qword [r13 + 0x90], 0
mov dword [rsp + 0x40], 0
je 0x6e43a3d6
lea rcx, [rbx + 0x150]
xor edx, edx
call fcn.6e43fc48
mov r8d, 7
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x40], eax
call fcn.6e4406a0
add esi, eax
xor r14d, r14d
cmp qword [r13 + 0x98], 0
je 0x6e43a408
lea rcx, [rbx + 0x168]
xor edx, edx
call fcn.6e43fc48
mov r8d, 8
mov ecx, 1
mov edx, eax
mov r14d, eax
call fcn.6e4406a0
add esi, eax
cmp qword [r13 + 0x148], 0
mov dword [rsp + 0x44], 0
je 0x6e43a440
lea rcx, [rbx + 0x180]
xor edx, edx
call fcn.6e43fc48
mov r8d, 0xc
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x44], eax
call fcn.6e4406a0
add esi, eax
mov r8d, 0x10
mov edx, esi
mov ecx, 1
call fcn.6e4406a0
test rbp, rbp
mov r12d, eax
je 0x6e43a6d4
mov rax, qword [rbp]
lea rdi, [rsp + 0x68]
mov r8d, esi
mov edx, 1
mov r9d, 0x10
mov rcx, rdi
mov dword [rsp + 0x20], 0
mov qword [rsp + 0x68], rax
call fcn.6e440698
mov rdx, rdi
mov rcx, rbx
call fcn.6e43fc50
lea rcx, [rbx + 0x18]
mov rdx, rdi
call fcn.6e43fc50
lea rcx, [rbx + 0x30]
mov rdx, rdi
call fcn.6e43fc48
lea rcx, [rbx + 0x78]
mov rdx, rdi
call fcn.6e43fc48
lea rcx, [rbx + 0x60]
mov rdx, rdi
call fcn.6e43fc48
mov r10d, dword [r13 + 4]
test r10d, r10d
jne 0x6e43a9e4
mov r9d, dword [r13 + 0xc4]
test r9d, r9d
jne 0x6e43a9b0
mov r8d, dword [r13 + 0xc0]
test r8d, r8d
jne 0x6e43a975
cmp qword [r13 + 0xb0], 0
je 0x6e43a529
mov edx, 1
mov rcx, rdi
mov r9d, 3
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, r15d
call fcn.6e440698
mov rcx, qword [r13 + 0xb0]
mov rdx, rdi
call fcn.6e43fc38
mov r8d, dword [rsp + 0x4c]
mov r9d, 4
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
call fcn.6e440698
lea rcx, [rbx + 0x90]
mov rdx, rdi
call fcn.6e43fc48
mov ecx, dword [r13 + 0xb8]
test ecx, ecx
jne 0x6e43a941
cmp qword [r13 + 0x108], 0
je 0x6e43a5a0
mov r8d, dword [rsp + 0x38]
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 6
call fcn.6e440698
lea rcx, [rbx + 0x108]
mov rdx, rdi
call fcn.6e43fc48
cmp qword [r13 + 0x90], 0
je 0x6e43a5d9
mov r8d, dword [rsp + 0x40]
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 7
call fcn.6e440698
lea rcx, [rbx + 0x150]
mov rdx, rdi
call fcn.6e43fc48
cmp qword [r13 + 0x98], 0
je 0x6e43a610
mov edx, 1
mov rcx, rdi
mov r9d, 8
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r8d, r14d
call fcn.6e440698
lea rcx, [rbx + 0x168]
mov rdx, rdi
call fcn.6e43fc48
mov edx, dword [r13 + 0x140]
test edx, edx
jle 0x6e43a64a
mov r8d, dword [rsp + 0x48]
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 9
call fcn.6e440698
lea rcx, [rbx + 0x120]
mov rdx, rdi
call fcn.6e43fc50
cmp qword [r13 + 0x130], 0
je 0x6e43a683
mov r8d, dword [rsp + 0x3c]
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 0xa
call fcn.6e440698
lea rcx, [rbx + 0x138]
mov rdx, rdi
call fcn.6e43fc48
mov eax, dword [r13 + 0xc8]
test eax, eax
jne 0x6e43a910
cmp qword [r13 + 0x148], 0
je 0x6e43a6cb
mov r8d, dword [rsp + 0x44]
mov edx, 1
mov rcx, rdi
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 0xc
call fcn.6e440698
lea rcx, [rbx + 0x180]
mov rdx, rdi
call fcn.6e43fc48
mov rax, qword [rsp + 0x68]
mov qword [rbp], rax
mov eax, r12d
add rsp, 0x248
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [rcx + 0xd8]
xor r12d, r12d
test eax, eax
jne 0x6e439ed0
jmp 0x6e43a6d4
cmp dword [r13], 2
mov eax, dword [r13 + 0xd8]
jne 0x6e439f5c
mov dword [rsp + 0xd0], 3
mov edx, eax
rol ax, 8
sar edx, 0x10
mov word [rsp + 0x65], ax
mov byte [rsp + 0x64], dl
jmp 0x6e439f70
xor eax, eax
jmp 0x6e43a089
xor eax, eax
jmp 0x6e43a1dc
xor eax, eax
jmp 0x6e43a18d
xor eax, eax
jmp 0x6e43a13e
lea rcx, [rbx + 0xa8]
xor edx, edx
call fcn.6e43fc48
add esi, eax
jmp 0x6e43a242
movabs rax, 0x200000008
mov qword [rsp + 0x190], rax
lea rcx, [rbx + 0xf0]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x198], rax
call fcn.6e4406b8
jmp 0x6e43a053
movabs rax, 0x200000008
mov qword [rsp + 0x178], rax
lea rcx, [rbx + 0xd8]
lea rax, [rsp + 0x88]
mov qword [rsp + 0x180], rax
call fcn.6e4406b8
jmp 0x6e43a044
movabs rax, 0x200000008
mov qword [rsp + 0x160], rax
lea rcx, [rbx + 0xc0]
lea rax, [rsp + 0x80]
mov qword [rsp + 0x168], rax
call fcn.6e4406b8
jmp 0x6e43a035
lea rcx, [rbx + 0x48]
xor edx, edx
call fcn.6e43fc48
mov r8d, 0xb
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x5c], eax
call fcn.6e4406a0
add esi, eax
jmp 0x6e43a39e
lea rcx, [rbx + 0xf0]
xor edx, edx
call fcn.6e43fc50
mov r8d, 5
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x58], eax
call fcn.6e4406a0
add esi, eax
jmp 0x6e43a2dd
lea rcx, [rbx + 0xd8]
xor edx, edx
call fcn.6e43fc50
mov r8d, 2
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x54], eax
call fcn.6e4406a0
add esi, eax
jmp 0x6e43a272
lea rcx, [rbx + 0xc0]
xor edx, edx
call fcn.6e43fc50
mov r8d, 1
mov ecx, 1
mov edx, eax
mov dword [rsp + 0x50], eax
call fcn.6e4406a0
add esi, eax
jmp 0x6e43a25a
xor r12d, r12d
jmp 0x6e43a6d4
mov r8d, dword [rsp + 0x5c]
mov rcx, rdi
mov edx, 1
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 0xb
call fcn.6e440698
lea rcx, [rbx + 0x48]
mov rdx, rdi
call fcn.6e43fc48
jmp 0x6e43a692
mov r8d, dword [rsp + 0x58]
mov rcx, rdi
mov edx, 1
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 5
call fcn.6e440698
lea rcx, [rbx + 0xf0]
mov rdx, rdi
call fcn.6e43fc50
jmp 0x6e43a567
mov r8d, dword [rsp + 0x54]
mov rcx, rdi
mov edx, 1
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 2
call fcn.6e440698
lea rcx, [rbx + 0xd8]
mov rdx, rdi
call fcn.6e43fc50
jmp 0x6e43a4f2
mov r8d, dword [rsp + 0x50]
mov rcx, rdi
mov edx, 1
mov dword [rsp + 0x20], pe_nt_image_headers64
mov r9d, 1
call fcn.6e440698
lea rcx, [rbx + 0xc0]
mov rdx, rdi
call fcn.6e43fc50
jmp 0x6e43a4e2
mov rsi, qword [rsp + 0x68]
lea rcx, [rbx + 0xa8]
mov rdx, rdi
call fcn.6e43fc48
movzx eax, byte [rsi]
and eax, 0x20
or eax, 0xffffff80
mov byte [rsi], al
jmp 0x6e43a4d2