Function at 0x6e6cf940
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm6
mov r13, rcx
mov rdi, rdx
mov edx, 0x6abecb4e
mov dword [rsp + 0x6c], 0
lea rcx, [0x6e6db6c0]
call fcn.6e6cf270
mov edx, 0x464d0fce
mov rcx, rax
call fcn.6e6cf2e0
lea rcx, [0x6e6da096]
test rax, rax
je 0x6e6cf99c
cmp qword [rax], 0
lea rdx, [rax + 0x10]
cmovne rcx, rdx
xor r9d, r9d
mov r8d, 1
mov qword [rsp + 0x30], 0
mov edx, 0x80000000
mov dword [rsp + 0x28], pe_nt_image_headers64
mov dword [rsp + 0x20], 3
call qword [0x6e6ef1a0]
xor edx, edx
mov rbx, rax
mov rcx, rax
call qword [0x6e6eea40]
mov esi, eax
call qword [0x6e6f6490]
xor edx, edx
movsxd r8, esi
mov rcx, rax
call qword [0x6e6ee918]
lea r9, [rsp + 0x6c]
mov rcx, rbx
mov r8d, esi
mov qword [rsp + 0x20], 0
mov r12, rax
mov rdx, rax
call qword [0x6e6eec88]
movsxd r10, dword [r12 + 0x3c]
lea r14, [r12 + r10]
mov eax, dword [r14 + 0x88]
movzx ebx, word [r14 + 0x14]
mov dword [rsp + 0x48], eax
lea rax, [r14 + 0x18]
mov rcx, rax
add rax, rbx
cmp word [r14 + 6], 0
mov qword [rsp + 0x40], rax
je 0x6e6cfe60
mov rbp, rax
xor esi, esi
movdqa xmm6, xmmword [0x6e6dcaa0]
mov r15, rcx
mov qword [rsp + 0xd8], rdi
jmp 0x6e6cfa68
mov rbp, rbx
movzx ebx, word [r14 + 0x14]
lea eax, [rsi + rsi*4]
add rbx, r15
mov edx, 0x19
lea rcx, [0x6e6d9040]
shl eax, 3
movzx eax, ax
add rbx, rax
call fcn.6e6cdfd0
lea rcx, [0x6e6db690]
movups xmmword [rax], xmm6
movzx edx, byte [rbx]
mov rdi, rax
mov byte [rax + 0x10], dl
movzx edx, byte [rbx + 1]
mov byte [rax + 0x11], dl
movzx edx, byte [rbx + 2]
mov byte [rax + 0x12], dl
movzx edx, byte [rbx + 3]
mov byte [rax + 0x13], dl
movzx edx, byte [rbx + 4]
mov byte [rax + 0x14], dl
movzx edx, byte [rbx + 5]
mov byte [rax + 0x15], dl
movzx edx, byte [rbx + 6]
mov byte [rax + 0x16], dl
movzx edx, byte [rbx + 7]
mov byte [rax + 0x17], dl
mov edx, 0x585a0bca
call fcn.6e6cf270
mov edx, 0x794fe14a
mov rcx, rax
call fcn.6e6cf2e0
xor r9d, r9d
xor r8d, r8d
mov rcx, rdi
mov rdx, rax
call fcn.6e6c6130
test rax, rax
cmovs rbx, rbp
add esi, 1
cmp word [r14 + 6], si
ja 0x6e6cfa60
mov rdi, qword [rsp + 0xd8]
movsxd r10, dword [rsp + 0x48]
movsxd rdx, dword [rbx + 0xc]
movsxd rax, dword [rbx + 0x14]
add r10, r12
sub r10, rdx
add r10, rax
movsxd r8, dword [r10 + 0x20]
movsxd r11, dword [r10 + 0x1c]
mov r9d, dword [r10 + 0x18]
add r8, r12
sub r8, rdx
add r11, r12
sub r11, rdx
add r8, rax
test r9d, r9d
lea r15, [r11 + rax]
jle 0x6e6cfe50
lea rcx, [rdi + 0x10]
xor r14d, r14d
xor esi, esi
mov qword [rsp + 0x58], r10
mov dword [rsp + 0x48], r14d
mov r14, r15
mov r15, r8
mov qword [rsp + 0x50], rcx
jmp 0x6e6cfba6
lea ebp, [rsi + 1]
test rcx, rcx
je 0x6e6cfb93
test r13, r13
je 0x6e6cfb93
mov rdx, r13
mov dword [rsp + 0x4c], r9d
call sub.msvcrt.dll_strcmp
mov r9d, dword [rsp + 0x4c]
test eax, eax
je 0x6e6cfbbb
cmp ebp, r9d
mov esi, ebp
jge 0x6e6cfdcc
movsxd rdx, dword [rbx + 0xc]
movsxd rax, dword [rbx + 0x14]
movsxd rcx, esi
movsxd rcx, dword [r15 + rcx*4]
add rcx, r12
sub rcx, rdx
add rcx, rax
cmp r13, rcx
jne 0x6e6cfb70
lea ebp, [rsi + 1]
movsxd rax, ebp
movsxd rdx, dword [r14 + rax*4]
mov rax, qword [rsp + 0x40]
movsxd r11, dword [rax + 0xc]
movsxd rcx, dword [rax + 0x14]
mov eax, dword [0x6e6e1030]
test eax, eax
jne 0x6e6cfdf0
lea rax, [r12 + rdx]
sub rax, r11
lea rax, [rax + rcx]
mov rcx, qword [0x6e6d9080]
test rcx, rcx
jle 0x6e6cfe13
lea rdx, [rax + 0x10]
cmp rdi, rdx
setae r9b
cmp rax, qword [rsp + 0x50]
setae dl
or r9b, dl
je 0x6e6cfe20
lea rdx, [rcx - 1]
cmp rdx, 0xe
jbe 0x6e6cfe20
mov r9, rcx
mov r11, rdi
mov rdx, rax
and r9, 0xfffffffffffffff0
sub r11, rax
add r9, rax
nop dword [rax + rax]
movdqu xmm0, xmmword [rdx]
movups xmmword [r11 + rdx], xmm0
add rdx, 0x10
cmp rdx, r9
jne 0x6e6cfc40
mov rdx, rcx
and rdx, 0xfffffffffffffff0
cmp rdx, rcx
je 0x6e6cfdb0
movzx r9d, byte [rdx + rax]
mov byte [rdi + rdx], r9b
lea r9, [rdx + 1]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 1]
mov byte [rdi + rdx + 1], r9b
lea r9, [rdx + 2]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 2]
mov byte [rdi + rdx + 2], r9b
lea r9, [rdx + 3]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 3]
mov byte [rdi + rdx + 3], r9b
lea r9, [rdx + 4]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 4]
mov byte [rdi + rdx + 4], r9b
lea r9, [rdx + 5]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 5]
mov byte [rdi + rdx + 5], r9b
lea r9, [rdx + 6]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 6]
mov byte [rdi + rdx + 6], r9b
lea r9, [rdx + 7]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 7]
mov byte [rdi + rdx + 7], r9b
lea r9, [rdx + 8]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 8]
mov byte [rdi + rdx + 8], r9b
lea r9, [rdx + 9]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 9]
mov byte [rdi + rdx + 9], r9b
lea r9, [rdx + 0xa]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 0xa]
mov byte [rdi + rdx + 0xa], r9b
lea r9, [rdx + 0xb]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 0xb]
mov byte [rdi + rdx + 0xb], r9b
lea r9, [rdx + 0xc]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 0xc]
mov byte [rdi + rdx + 0xc], r9b
lea r9, [rdx + 0xd]
cmp rcx, r9
jle 0x6e6cfdb0
movzx r9d, byte [rax + rdx + 0xd]
mov byte [rdi + rdx + 0xd], r9b
lea r9, [rdx + 0xe]
cmp rcx, r9
jle 0x6e6cfdb0
movzx eax, byte [rax + rdx + 0xe]
mov byte [rdi + rdx + 0xe], al
nop dword [rax + rax]
nop word cs:[rax + rax]
mov rax, qword [rsp + 0x58]
mov dword [rsp + 0x48], 1
mov esi, ebp
mov r9d, dword [rax + 0x18]
cmp ebp, r9d
jl 0x6e6cfb9e
mov r14d, dword [rsp + 0x48]
movaps xmm6, xmmword [rsp + 0x70]
mov eax, r14d
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
add esi, 8
movsxd rsi, esi
movsxd rax, dword [r14 + rsi*4]
add rax, r12
sub rax, r11
add rax, rcx
mov rcx, qword [0x6e6d9080]
test rcx, rcx
jg 0x6e6cfbfb
mov dword [rsp + 0x48], 1
jmp 0x6e6cfb93
mov r9, rdi
add rcx, rax
sub r9, rax
nop dword [rax]
movzx edx, byte [rax]
mov byte [r9 + rax], dl
add rax, 1
cmp rcx, rax
jne 0x6e6cfe30
jmp 0x6e6cfdb0
xor r14d, r14d
jmp 0x6e6cfdd1
mov rbx, rax
jmp 0x6e6cfb11