Function at 0x7ff6ab294c1d
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
call rax
mov r11, rax
test rax, rax
jne 0x7ff6aaedb313
lea rcx, [rsp + 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov r11, rax
cmp r9d, 0xbd86a24
test rax, rax
je 0x7ff6ab294d70
cmp r11, rsi
jmp 0x7ff6ab2950d4
call rax
jmp 0x7ff6ab295223
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
cmp r12d, 0x7ca22c24
push rbp
bsr bp, sp
push rsi
xchg bpl, bpl
sub rsp, 0x178
sbb bp, 0x1eba
mov rbp, rdx
mov rsi, rcx
test rcx, rcx
jmp 0x7ff6ab294c51
je 0x7ff6ab294c73
test rdx, rdx
je 0x7ff6ab294c73
mov eax, 0x5a4d
cmp word [rcx], ax
jmp 0x7ff6ab294c6d
je 0x7ff6ab294c9a
sub eax, eax
ror bpl, 0x89
btc bp, r12w
add rsp, 0x178
movzx rsi, di
pop rsi
movsx bp, r10b
mov bp, 0xd8f
pop rbp
jmp 0x7ff6ab294c99
ret
movsxd rax, dword [rcx + 0x3c]
cmp r13b, r10b
cmp dword [rax + rcx], 0x4550
jne 0x7ff6ab294c73
mov r8d, dword [rax + rcx + 0x88]
jmp 0x7ff6ab294cbb
mov dword [rsp + 0x30], r8d
cmp dil, r8b
test r8d, r8d
jmp 0x7ff6ab294ccb
je 0x7ff6ab294c73
mov r9d, dword [rax + rcx + 0x8c]
shr ch, 0xa5
lea rdx, [rsi + r8]
or cl, dil
and cl, 0x9c
mov qword [rsp + 0x170], rbx
shr ecx, cl
clc
mov qword [rsp + 0x168], rdi
sal cx, cl
mov ecx, 0xffffffff
test r8b, 0x80
sub edi, edi
stc
cmp bl, dil
mov dword [rsp + 0x20], r9d
test ebp, ebx
cmc
mov qword [rsp + 0x28], rdx
cmp r8b, r15b
mov dword [rsp + 0x190], ecx
jmp 0x7ff6ab294d28
cmp rbp, 0xffff
jmp 0x7ff6ab294d34
ja 0x7ff6ab294d7c
mov ecx, ebp
cmc
sub ecx, dword [rdx + 0x10]
cmc
jmp 0x7ff6ab294d49
cmp ecx, dword [rdx + 0x14]
jae 0x7ff6ab294d70
mov eax, dword [rdx + 0x1c]
shr dh, 0x2d
movsx edx, r13w
lea rax, [rax + rsi]
mov edx, dword [rax + rcx*4]
jmp 0x7ff6ab294d68
test edx, edx
jne 0x7ff6ab294fb6
xor eax, eax
jmp 0x7ff6ab294d77
jmp 0x7ff6ab295223
mov eax, dword [rdx + 0x18]
stc
test eax, eax
jmp 0x7ff6ab294d87
je 0x7ff6ab294f84
mov r9d, dword [rdx + 0x20]
rcl bl, 0x5f
shl bx, 0x76
lea r11d, [rax - 1]
mov ebx, edi
test dl, r11b
jmp 0x7ff6ab294da7
add r9, rsi
mov qword [rsp + 0x40], r9
test bpl, 0xdf
test r11d, r11d
jmp 0x7ff6ab294dbb
js 0x7ff6ab294f7f
nop
stc
mov r10, qword [rsp + 0x198]
bsf rdx, rsi
sub r8d, eax
rcl r8b, cl
lea eax, [r11 + rbx]
shl edx, 0x93
movzx rdx, r8w
cdq
mov rbp, rdi
xadd dl, r8b
rcl dl, cl
rol dl, 0xf
sar eax, 1
sbb dl, r11b
mov dword [rsp + 0x1a8], eax
ror dh, 0xe1
cmovl dx, sp
mov qword [rsp + 0x38], rax
xor r8w, r13w
and edx, esp
mov r8d, dword [r9 + rax*4]
bts dx, r9w
bts dx, bp
mov eax, dword [r9 + rax*4]
btr r9d, r13d
movsx r9w, sil
sub r10, rax
cdqe
sub r9, r15
movzx eax, byte [rsp + 0x1a0]
sal r9w, 0x47
add r8, rsi
btr dx, r15w
sub r10, rsi
nop
movsx rdx, bx
inc r9w
movzx edx, byte [r10 + r8]
movsx r9d, r14w
not r9b
movzx r9d, byte [r8]
jmp 0x7ff6ab294e63
inc r8
stc
test al, al
je 0x7ff6ab294e93
mov ecx, ebp
mov eax, 0x7d71371b
cmc
rol eax, cl
cmp r14b, dl
add al, bpl
xor dl, al
mov al, byte [rsp + 0x1a0]
jmp 0x7ff6ab294e8d
inc rbp
test bl, spl
test dl, dl
jmp 0x7ff6ab294e9a
je 0x7ff6ab294eae
cmp dl, r9b
jmp 0x7ff6ab294ea8
je 0x7ff6ab294e4e
cmp dl, r9b
jb 0x7ff6ab294f2f
cmp dl, r9b
jbe 0x7ff6ab294eeb
mov ebx, dword [rsp + 0x1a8]
not rcx
movzx edx, r8w
jmp 0x7ff6ab294ed3
mov rdx, qword [rsp + 0x28]
mov ecx, dword [rsp + 0x190]
inc ebx
jmp 0x7ff6ab294ee6
jmp 0x7ff6ab294f51
mov rdx, qword [rsp + 0x28]
movzx rax, ax
xchg bx, ax
lea ebx, [r11 + 1]
mov eax, dword [rdx + 0x24]
movsxd rcx, r8d
lea rcx, [rsi + rax]
xchg ah, ah
cbw
setle ah
mov rax, qword [rsp + 0x38]
jmp 0x7ff6ab294f15
movzx ecx, word [rcx + rax*2]
jmp 0x7ff6ab294f1e
mov dword [rsp + 0x190], ecx
jmp 0x7ff6ab294f2a
jmp 0x7ff6ab294f51
mov r11d, dword [rsp + 0x1a8]
mov rdx, qword [rsp + 0x28]
setge ch
movzx ecx, ax
mov ecx, dword [rsp + 0x190]
jmp 0x7ff6ab294f4e
dec r11d
cmp ebx, r11d
mov r9, qword [rsp + 0x40]
jle 0x7ff6ab294dc3
mov rbp, qword [rsp + 0x198]
movsx r9d, ax
mov r8d, dword [rsp + 0x30]
mov r9d, dword [rsp + 0x20]
jmp 0x7ff6ab294f7a
jmp 0x7ff6ab294f84
mov r9d, dword [rsp + 0x20]
cmp ecx, dword [rdx + 0x14]
jae 0x7ff6ab294d70
mov eax, dword [rdx + 0x1c]
mov edx, 0x7d4918ea
sbb rdx, 0x17f76f23
movsx edx, r9w
lea rax, [rax + rsi]
shl dh, cl
mov edx, dword [rax + rcx*4]
test edx, edx
jmp 0x7ff6ab294fb0
je 0x7ff6ab294d70
cmp edx, r8d
jmp 0x7ff6ab294fbe
jb 0x7ff6ab295218
lea eax, [r9 + r8]
cmc
clc
cmp edx, eax
jmp 0x7ff6ab294fd1
jae 0x7ff6ab295218
mov eax, edx
rcl bl, cl
rol bl, cl
mov cx, r9w
add rax, rsi
ror cl, cl
mov rbx, rax
movzx ecx, byte [rax]
clc
stc
jmp 0x7ff6ab294ff3
test cl, cl
jmp 0x7ff6ab294ffa
je 0x7ff6ab294d70
cmp cl, 0x2e
jmp 0x7ff6ab295008
je 0x7ff6ab29502c
mov cl, byte [rbx + 1]
inc rbx
cmp bl, r9b
cmc
test cl, cl
jne 0x7ff6ab295000
sub eax, eax
jmp 0x7ff6ab295027
jmp 0x7ff6ab295223
mov r8, rbx
test r10b, 0x6a
stc
cmc
sub r8, rax
cmp r8, 0x104
jmp 0x7ff6ab295044
jae 0x7ff6ab294d70
mov rcx, rdi
jmp 0x7ff6ab295056
test r8, r8
jmp 0x7ff6ab29505e
je 0x7ff6ab2950b7
lea r9, [rsp + 0x50]
ror dl, cl
shl edx, cl
sub r9, rax
sar dx, 0x92
cmc
nop
test bx, 0x5f2e
add dx, 0x7830
movzx edx, byte [rax]
jmp 0x7ff6ab295088
test dl, dl
jmp 0x7ff6ab29508f
je 0x7ff6ab2950b7
inc rcx
jmp 0x7ff6ab29509d
mov byte [r9 + rax], dl
inc rax
cmp cx, 0x15b0
cmp rcx, r8
jmp 0x7ff6ab2950b1
jb 0x7ff6ab295080
mov byte [rsp + rcx + 0x50], dil
not cl
movzx cx, r10b
lea rcx, [rsp + 0x50]
mov rax, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x7ff6aaedb2e4
jne 0x7ff6ab29517e
cmp byte [rsp + 0x1a0], dil
jmp 0x7ff6ab2950e7
je 0x7ff6ab295168
lea rax, [rsp + 0x50]
stc
mov rdx, 0x4271545b
sub rbp, rax
mov dh, 0xf8
nop
rcr edx, cl
cwde
lea rdx, [rsp + rdi + 0x50]
bts cx, r8w
mov ecx, edi
btr eax, eax
btr ax, 0x28
mov eax, 0x7d71371b
jmp 0x7ff6ab295123
rol eax, cl
cmc
add al, dil
test r12b, spl
clc
xor al, byte [rdx + rbp]
jmp 0x7ff6ab295135
mov byte [rdx], al
jmp 0x7ff6ab29513c
je 0x7ff6ab29515e
inc rdi
cmp r12, 0x126a02c1
cmp rdi, 0x104
jmp 0x7ff6ab295158
jb 0x7ff6ab295104
lea rbp, [rsp + 0x50]
cwd
xchg rdx, rcx
mov rdx, rbp
mov ecx, eax
not cl
mov rcx, rsi
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
jmp 0x7ff6aaf4732c
cmp byte [rbx + 1], 0x23
jmp 0x7ff6ab295190
lea rdx, [rbx + 1]
jmp 0x7ff6ab295199
jne 0x7ff6ab2951ff
movzx edx, byte [rbx + 2]
cmc
test r11, rdx
add rbx, 2
test dl, dl
je 0x7ff6ab2951f9
nop
dec ax
lea eax, [rdx - 0x30]
jmp 0x7ff6ab2951bf
inc rbx
cmc
stc
cmp al, 9
jmp 0x7ff6ab2951cb
ja 0x7ff6ab2951f9
movsx eax, dl
rcr dl, 0x86
mov dl, byte [rbx]
lea ecx, [rdi + rdi*4]
movsx rdi, r13w
btr rdi, 0xfc
bswap di
lea edi, [rax + rcx*2 - 0x30]
test dl, dl
jmp 0x7ff6ab2951f3
jne 0x7ff6ab2951b7
movsxd rdx, edi
sub cl, dil
xor r8d, r8d
movzx rcx, r11w
jmp 0x7ff6ab29520b
mov rcx, r11
call fcn.7ff6ab294c1d
jmp 0x7ff6ab295223
mov eax, edx
movzx rdi, dx
and bl, bl
add rax, rsi
mov rbx, qword [rsp + 0x170]
cmp dx, 0x77fb
xor sil, 0xf9
stc
mov rdi, qword [rsp + 0x168]
add bpl, dl
bt bp, bx
add rsp, 0x178
pop rsi
movzx rbp, r9w
cmova bp, bx
pop rbp
jmp 0x7ff6ab29525a
ret