Function at 0x14006f710
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
jmp 0x14006f710
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x190
lea rdi, [rsp + 0x30]
mov ecx, 0x58
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x1a0]
mov rax, qword [0x140095240]
xor rax, rsp
mov qword [rsp + 0x188], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rax], 0
mov rax, qword [rsp + 0x1a8]
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movzx eax, word [rax]
cmp eax, 0x5a4d
je 0x14006f789
lea rcx, str._error__Corrupted_magic_value_in_DOS_header_n
call fcn.1400015fa
jmp 0x140070125
mov rax, qword [rsp + 0x30]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x1a8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x38]
cmp dword [rax], 0x4550
je 0x14006f7c3
lea rcx, str._error__Corrupted_signature_value_in_NT_header_n
call fcn.1400015fa
jmp 0x140070125
mov rax, qword [rsp + 0x38]
add rax, 0x108
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 4]
cmp eax, 0x8664
je 0x14006f812
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 4]
cmp eax, 0x14c
jne 0x14006f801
lea rcx, str._error__Tried_to_open_a_32_bit_executable_n
call fcn.1400015fa
jmp 0x14006f80d
lea rcx, str._error__Unsupported_machine_type_n
call fcn.1400015fa
jmp 0x140070125
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 0x18]
cmp eax, 0x20b
je 0x14006f833
lea rcx, str._error__Corrupted_magic_value_in_optional_header_n
call fcn.1400015fa
jmp 0x140070125
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x50]
mov dword [rsp + 0x50], eax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x28]
mov dword [rsp + 0x54], eax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x54]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0x38]
movzx eax, word [rax + 6]
mov word [rsp + 0x5c], ax
movzx eax, word [rsp + 0x5c]
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x54]
mov r8d, dword [rsp + 0x50]
mov rdx, qword [rsp + 0x48]
lea rcx, str._info__hdr_image_base:0x_llx_n____________size_of_image:0x_lx_n____________entry_point_RVA:0x_lx_n____________size_of_headers:_lu_n____________num_of_sections:_i_n
call fcn.1400015fa
mov eax, dword [rsp + 0x50]
mov r9d, 4
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call fcn.140001bd6
mov qword [0x1400956f0], rax
cmp qword [0x1400956f0], 0
jne 0x14006f8ce
jmp 0x140070125
mov eax, dword [rsp + 0x58]
mov r8d, eax
mov rdx, qword [rsp + 0x1a8]
mov rcx, qword [0x1400956f0]
call sub.VCRUNTIME140D.dll_memcpy
mov dword [rsp + 0x60], 0
jmp 0x14006f8fd
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
movzx eax, word [rsp + 0x5c]
cmp dword [rsp + 0x60], eax
jge 0x14006f9a9
movsxd rax, dword [rsp + 0x60]
imul rax, rax, 0x28
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 0xc]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x68], rax
movsxd rax, dword [rsp + 0x60]
imul rax, rax, 0x28
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 0x10]
mov dword [rsp + 0x70], eax
cmp dword [rsp + 0x70], 0
jbe 0x14006f983
mov eax, dword [rsp + 0x70]
movsxd rcx, dword [rsp + 0x60]
imul rcx, rcx, 0x28
mov rdx, qword [rsp + 0x40]
mov ecx, dword [rdx + rcx + 0x14]
mov rdx, qword [rsp + 0x1a8]
add rdx, rcx
mov rcx, rdx
mov r8d, eax
mov rdx, rcx
mov rcx, qword [rsp + 0x68]
call sub.VCRUNTIME140D.dll_memcpy
jmp 0x14006f9a4
movsxd rax, dword [rsp + 0x60]
imul rax, rax, 0x28
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 8]
mov r8d, eax
xor edx, edx
mov rcx, qword [rsp + 0x68]
call sub.VCRUNTIME140D.dll_memset
jmp 0x14006f8f3
lea rcx, str._info__Handle_Import_Table_n
call fcn.1400015fa
mov rax, qword [rsp + 0x38]
add rax, 0x88
mov qword [rsp + 0x78], rax
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + rax]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x88], 0
jmp 0x14006fa08
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
movsxd rax, dword [rsp + 0x88]
imul rax, rax, 0x14
mov rcx, qword [rsp + 0x80]
cmp dword [rcx + rax], 0
je 0x14006fc90
movsxd rax, dword [rsp + 0x88]
imul rax, rax, 0x14
mov rcx, qword [rsp + 0x80]
mov eax, dword [rcx + rax + 0xc]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x90]
call fcn.140001af5
mov qword [rsp + 0x98], rax
mov rdx, qword [rsp + 0x90]
lea rcx, str._info__Module_Name:__s_n
call fcn.1400015fa
cmp qword [rsp + 0x98], 0
jne 0x14006faa0
mov rdx, qword [rsp + 0x90]
lea rcx, str._error__Import_Module_could_not_be_found__s__continue..._n
call fcn.1400015fa
jmp 0x14006f9f8
movsxd rax, dword [rsp + 0x88]
imul rax, rax, 0x14
mov rcx, qword [rsp + 0x80]
mov eax, dword [rcx + rax]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa0], rax
movsxd rax, dword [rsp + 0x88]
imul rax, rax, 0x14
mov rcx, qword [rsp + 0x80]
mov eax, dword [rcx + rax + 0x10]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0xb0], 0
jmp 0x14006fb16
mov eax, dword [rsp + 0xb0]
inc eax
mov dword [rsp + 0xb0], eax
movsxd rax, dword [rsp + 0xb0]
mov rcx, qword [rsp + 0xa0]
cmp qword [rcx + rax*8], 0
je 0x14006fc8b
movsxd rax, dword [rsp + 0xb0]
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx + rax*8]
mov qword [rsp + 0xc0], rax
movabs rax, 0x8000000000000000
mov rcx, qword [rsp + 0xc0]
and rcx, rax
mov rax, rcx
test rax, rax
jne 0x14006fbf5
mov rax, qword [rsp + 0xc0]
mov rcx, qword [0x1400956f0]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
add rax, 2
mov qword [rsp + 0xd0], rax
mov rdx, qword [rsp + 0xd0]
lea rcx, str._info__Import__s_n
call fcn.1400015fa
mov rdx, qword [rsp + 0xd0]
lea rcx, [rsp + 0xd8]
call fcn.1400015b9
nop
lea rdx, [rsp + 0xd8]
mov rcx, qword [rsp + 0x98]
call fcn.14000170d
mov qword [rsp + 0xb8], rax
lea rcx, [rsp + 0xd8]
call fcn.140001212
jmp 0x14006fc46
movabs rax, 0x7fffffffffffffff
mov rcx, qword [rsp + 0xc0]
and rcx, rax
mov rax, rcx
mov qword [rsp + 0x100], rax
mov rdx, qword [rsp + 0x100]
lea rcx, str._info__Import_by_ordinal__llu_directly_n
call fcn.1400015fa
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x98]
call fcn.14000160e
mov qword [rsp + 0xb8], rax
cmp qword [rsp + 0xb8], 0
jne 0x14006fc6a
mov rdx, qword [rsp + 0x90]
lea rcx, str._error__Function_could_not_be_found_in_module__s_n
call fcn.1400015fa
jmp 0x14006fb06
movsxd rax, dword [rsp + 0xb0]
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xb8]
mov qword [rcx + rax*8], rdx
jmp 0x14006fb06
jmp 0x14006f9f8
mov r8, qword [0x1400956f0]
mov rax, qword [rsp + 0x38]
mov rdx, qword [rax + 0x30]
lea rcx, str._info__Handle_Relocations__0x_llx____0x_llx__n
call fcn.1400015fa
mov rax, qword [rsp + 0x38]
mov rax, qword [rax + 0x30]
mov rcx, qword [0x1400956f0]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x108], rax
mov eax, 8
imul rax, rax, 5
mov rcx, qword [rsp + 0x78]
cmp dword [rcx + rax], 0
je 0x14006ff1c
cmp qword [rsp + 0x108], 0
je 0x14006ff1c
mov eax, 8
imul rax, rax, 5
mov rcx, qword [rsp + 0x78]
mov eax, dword [rcx + rax]
mov rcx, qword [0x1400956f0]