Function at 0x1400011d0
Capabilities:
Access peb ldr_data
Check os version
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x20
mov r14, rdx
mov ebp, ecx
test ecx, ecx
je 0x1400015ca
mov rdi, qword [0x140006020]
mov r12d, 0x5a4d
test rdi, rdi
jne 0x140001303
cmp qword [0x140006040], rdi
je 0x140001226
cmp qword [0x140006048], rdi
je 0x140001226
cmp qword [0x140006050], rdi
jne 0x140001303
xor eax, eax
lea rdi, [0x140006020]
mov ecx, 0x38
rep stosb byte [rdi], al
mov rax, qword gs:[0x60]
test rax, rax
je 0x1400015ca
cmp dword [rax + 0x118], 0xa
jne 0x1400015ca
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x20]
mov rdi, qword [rcx]
sub rdi, 0x10
je 0x1400015ca
mov rdi, qword [rdi + 0x30]
mov qword [0x140006020], rdi
mov qword [0x140006028], rdi
cmp word [rdi], r12w
jne 0x1400015ca
movsxd rcx, dword [rdi + 0x3c]
add rcx, rdi
mov qword [0x140006030], rcx
cmp dword [rcx], 0x4550
jne 0x1400015ca
mov edx, dword [rcx + 0x88]
add rdx, rdi
mov qword [0x140006038], rdx
je 0x1400015ca
cmp dword [rdx + 0x10], 0
je 0x1400015ca
mov ecx, dword [rdx + 0x1c]
add rcx, rdi
mov qword [0x140006040], rcx
mov r8d, dword [rdx + 0x20]
add r8, rdi
mov qword [0x140006048], r8
mov edx, dword [rdx + 0x24]
add rdx, rdi
mov qword [0x140006050], rdx
test rcx, rcx
je 0x1400015ca
test r8, r8
je 0x1400015ca
test rdx, rdx
je 0x1400015ca
mov rax, qword [0x140006038]
mov qword [rsp + 0x40], rbx
xor ebx, ebx
lea r15d, [rbx + 1]
cmp dword [rax + 0x14], ebx
jbe 0x1400014fc
mov qword [rsp + 0x48], rsi
mov rax, qword [0x140006048]
mov ecx, dword [rax + rbx*4]
add rcx, rdi
call fcn.140003e50
cmp eax, ebp
jne 0x14000139c
mov dword [r14], ebp
mov rax, qword [0x140006050]
movzx ecx, word [rax + rbx*2]
mov rax, qword [0x140006040]
mov edx, dword [rax + rcx*4]
add rdx, qword [0x140006020]
mov qword [r14 + 8], rdx
movzx eax, byte [rdx]
cmp al, 0x4c
jne 0x14000138e
cmp byte [rdx + 1], 0x8b
jne 0x140001396
cmp byte [rdx + 2], 0xd1
jne 0x140001396
cmp byte [rdx + 3], 0xb8
jne 0x140001396
cmp byte [rdx + 6], 0
jne 0x14000139c
cmp byte [rdx + 7], 0
jne 0x14000139c
movzx ecx, byte [rdx + 5]
movzx eax, byte [rdx + 4]
jmp 0x1400014ee
cmp al, 0xe9
je 0x14000145f
cmp byte [rdx + 3], 0xe9
je 0x1400013ba
mov rax, qword [0x140006038]
inc ebx
cmp ebx, dword [rax + 0x14]
jae 0x1400014f7
mov rdi, qword [0x140006020]
jmp 0x140001323
movzx ecx, r15w
mov r8d, 0x1f4
nop dword [rax]
nop dword [rax + rax]
movzx edi, cx
mov eax, edi
shl eax, 5
add rax, rdx
cmp byte [rax], 0x4c
jne 0x1400013fe
cmp byte [rax + 1], 0x8b
jne 0x1400013fe
cmp byte [rax + 2], 0xd1
jne 0x1400013fe
cmp byte [rax + 3], 0xb8
jne 0x1400013fe
cmp byte [rax + 6], 0
jne 0x1400013fe
cmp byte [rax + 7], 0
je 0x14000143b
mov eax, edi
neg eax
shl eax, 5
cdqe
add rax, rdx
cmp byte [rax], 0x4c
jne 0x14000142d
cmp byte [rax + 1], 0x8b
jne 0x14000142d
cmp byte [rax + 2], 0xd1
jne 0x14000142d
cmp byte [rax + 3], 0xb8
jne 0x14000142d
cmp byte [rax + 6], 0
jne 0x14000142d
cmp byte [rax + 7], 0
je 0x14000144d
inc cx
cmp cx, r8w
jbe 0x1400013d0
jmp 0x1400014f7
movzx ecx, byte [rax + 4]
movzx eax, byte [rax + 5]
sub ecx, edi
shl eax, 8
jmp 0x1400014f1
movzx ecx, byte [rax + 4]
movzx eax, byte [rax + 5]
add ecx, edi
shl eax, 8
jmp 0x1400014f1
movzx ecx, r15w
mov r8d, 0x1f4
nop dword [rax]
movzx edi, cx
mov eax, edi
shl eax, 5
add rax, rdx
cmp byte [rax], 0x4c
jne 0x14000149e
cmp byte [rax + 1], 0x8b
jne 0x14000149e
cmp byte [rax + 2], 0xd1
jne 0x14000149e
cmp byte [rax + 3], 0xb8
jne 0x14000149e
cmp byte [rax + 6], 0
jne 0x14000149e
cmp byte [rax + 7], 0
je 0x1400014d8
mov eax, edi
neg eax
shl eax, 5
cdqe
add rax, rdx
cmp byte [rax], 0x4c
jne 0x1400014cd
cmp byte [rax + 1], 0x8b
jne 0x1400014cd
cmp byte [rax + 2], 0xd1
jne 0x1400014cd
cmp byte [rax + 3], 0xb8
jne 0x1400014cd
cmp byte [rax + 6], 0
jne 0x1400014cd
cmp byte [rax + 7], 0
je 0x1400014e4
inc cx
cmp cx, r8w
jbe 0x140001470
jmp 0x1400014f7
movzx ecx, byte [rax + 5]
movzx eax, byte [rax + 4]
sub eax, edi
jmp 0x1400014ee
movzx ecx, byte [rax + 5]
movzx eax, byte [rax + 4]
add eax, edi
shl ecx, 8
or ecx, eax
mov dword [r14 + 4], ecx
mov rsi, qword [rsp + 0x48]
cmp qword [r14 + 8], 0
mov rbx, qword [rsp + 0x40]
je 0x1400015ca
cmp dword [r14 + 4], 0
je 0x1400015ca
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x20]
test rdi, rdi
je 0x1400015a9
nop dword [rax]
cmp word [rdi + 0x48], 0
je 0x1400015a9
mov rcx, qword [rdi + 0x50]
call fcn.140003e50
cmp eax, 0x1caf0b12
je 0x140001557
mov rcx, qword [rdi + 0x50]
call fcn.140003e50
cmp eax, 0x27f12bda
jne 0x1400015a1
mov rcx, qword [rdi + 0x20]
cmp word [rcx], r12w
jne 0x1400015c2
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x1400015c2
mov edx, dword [rax + rcx + 0x2c]
mov r8d, dword [rax + rcx + 0x1c]
add rdx, rcx
test r8, r8
je 0x1400015a1
mov rcx, rdx
cmp byte [rcx], 0xf
jne 0x140001593
cmp byte [rcx + 1], 5
jne 0x140001593
cmp byte [rcx + 2], 0xc3
je 0x1400015b9
inc rcx
mov rax, rcx
sub rax, rdx
cmp rax, r8
jb 0x140001582
mov rdi, qword [rdi]
test rdi, rdi
jne 0x140001530
xor r15d, r15d
cmp qword [r14 + 0x10], r15
setne r15b
mov eax, r15d
jmp 0x1400015cc
mov qword [r14 + 0x10], rcx
mov eax, r15d
jmp 0x1400015cc
xor r15d, r15d
mov eax, r15d
jmp 0x1400015cc
xor eax, eax
mov rbp, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop r12
ret