Function at 0x1800023b0
Capabilities:
Access peb ldr_data
Parse pe header
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x28
xor r15d, r15d
xor r13d, r13d
xor r12d, r12d
mov qword [rsp + 0x88], r15
xor esi, esi
xor ebp, ebp
call fcn.1800023a0
mov rdi, rax
mov edx, 0x5a4d
cmp word [rdi], dx
jne 0x180002405
movsxd rcx, dword [rdi + 0x3c]
lea rax, [rcx - 0x40]
cmp rax, 0x3bf
ja 0x180002405
cmp dword [rcx + rdi], 0x4550
je 0x18000240a
dec rdi
jmp 0x1800023e7
mov rax, qword gs:[0x60]
mov r11d, 1
mov qword [rsp + 0x78], rdi
mov rcx, qword [rax + 0x18]
mov r14, qword [rcx + 0x20]
mov qword [rsp + 0x80], r14
test r14, r14
je 0x180002635
mov edi, 0xffff
lea ebx, [r11 + 3]
mov rdx, qword [r14 + 0x50]
xor ecx, ecx
movzx r8d, word [r14 + 0x48]
nop dword [rax + rax]
movzx eax, byte [rdx]
ror ecx, 0xd
cmp al, 0x61
jb 0x180002464
movzx eax, al
sub eax, 0x20
cdqe
jmp 0x180002467
movzx eax, al
add rcx, rax
inc rdx
add r8w, di
jne 0x180002450
cmp ecx, 0x6a4abc5b
jne 0x180002571
mov r9, qword [r14 + 0x20]
mov r14d, 0xffff
movsxd rax, dword [r9 + 0x3c]
mov edi, dword [rax + r9 + 0x88]
mov r10d, dword [rdi + r9 + 0x20]
mov r11d, dword [rdi + r9 + 0x24]
add r10, r9
add r11, r9
nop word [rax + rax]
mov ecx, dword [r10]
add rcx, r9
xor r8d, r8d
movzx eax, byte [rcx]
nop dword [rax]
ror r8d, 0xd
lea rcx, [rcx + 1]
movsx eax, al
add r8d, eax
movzx eax, byte [rcx]
test al, al
jne 0x1800024c0
cmp r8d, 0xec0e4e8e
je 0x1800024f9
cmp r8d, 0x7c0dfcaa
je 0x1800024f9
cmp r8d, 0x91afca54
je 0x1800024f9
cmp r8d, 0xef632f2
jne 0x18000254e
mov eax, dword [rdi + r9 + 0x1c]
movzx edx, word [r11]
lea rcx, [r9 + rax]
cmp r8d, 0xec0e4e8e
jne 0x180002518
mov r13d, dword [rcx + rdx*4]
add r13, r9
jmp 0x18000254a
cmp r8d, 0x7c0dfcaa
jne 0x18000252a
mov r12d, dword [rcx + rdx*4]
add r12, r9
jmp 0x18000254a
cmp r8d, 0x91afca54
jne 0x18000253b
mov esi, dword [rcx + rdx*4]
add rsi, r9
jmp 0x18000254a
cmp r8d, 0xef632f2
jne 0x18000254a
mov ebp, dword [rcx + rdx*4]
add rbp, r9
add bx, r14w
add r10, 4
add r11, 2
test bx, bx
jne 0x1800024b0
mov r14, qword [rsp + 0x80]
mov edi, 0xffff
jmp 0x1800025f9
cmp ecx, 0x3cfa685d
jne 0x180002603
mov r10, qword [r14 + 0x20]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov r8d, dword [rbx + r10 + 0x20]
mov r9d, dword [rbx + r10 + 0x24]
add r8, r10
add r9, r10
nop dword [rax]
mov edx, dword [r8]
add rdx, r10
xor ecx, ecx
movzx eax, byte [rdx]
nop dword [rax + rax]
ror ecx, 0xd
lea rdx, [rdx + 1]
movsx eax, al
add ecx, eax
movzx eax, byte [rdx]
test al, al
jne 0x1800025b0
cmp ecx, 0x534c0ab8
jne 0x1800025e3
mov eax, dword [rbx + r10 + 0x1c]
movzx edx, word [r9]
lea rcx, [r10 + rax]
mov r15d, dword [rcx + rdx*4]
add r15, r10
add r11w, di
add r8, 4
add r9, 2
test r11w, r11w
jne 0x1800025a0
mov qword [rsp + 0x88], r15
mov r11d, 1
lea ebx, [r11 + 3]
test r13, r13
je 0x18000261c
test r12, r12
je 0x18000261c
test rsi, rsi
je 0x18000261c
test rbp, rbp
je 0x18000261c
test r15, r15
jne 0x180002630
mov r14, qword [r14]
mov qword [rsp + 0x80], r14
test r14, r14
jne 0x180002440
mov rdi, qword [rsp + 0x78]
movsxd r15, dword [rdi + 0x3c]
xor ecx, ecx
add r15, rdi
mov r8d, 0x3000
lea r9d, [rcx + 0x40]
mov edx, dword [r15 + 0x50]
call rsi
mov edx, dword [r15 + 0x50]
mov rcx, rax
mov r14, rax
call rbp
mov edx, dword [r15 + 0x54]
mov rcx, rdi
test rdx, rdx
je 0x180002680
mov r8, r14
sub r8, rdi
nop dword [rax]
movzx eax, byte [rcx]
mov byte [r8 + rcx], al
inc rcx
sub rdx, 1
jne 0x180002670
movzx r10d, word [r15 + 6]
movzx eax, word [r15 + 0x14]
test r10, r10
je 0x1800026db
lea r9, [r15 + 0x2c]
add r9, rax
nop word [rax + rax]
mov ecx, dword [r9 - 8]
dec r10
mov edx, dword [r9]
add rcx, r14
mov r8d, dword [r9 - 4]
add rdx, rdi
test r8, r8
je 0x1800026d2
nop dword [rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
inc rcx
sub r8, 1
jne 0x1800026c0
add r9, 0x28
test r10, r10
jne 0x1800026a0
mov ebp, dword [r15 + 0x90]
add rbp, r14
cmp dword [rbp], 0
je 0x180002782
nop
mov ecx, dword [rbp + 0xc]
add rcx, r14
call r13
mov rsi, rax
test rax, rax
je 0x18000276f
mov edi, dword [rbp + 0x10]
mov ebx, dword [rbp]
add rdi, r14
add rbx, r14
cmp qword [rdi], 0
je 0x18000276f
test rbx, rbx
je 0x180002744
mov rdx, qword [rbx]
test rdx, rdx
jns 0x180002744
movsxd rax, dword [rsi + 0x3c]
movzx edx, dx
mov ecx, dword [rax + rsi + 0x88]
mov eax, dword [rcx + rsi + 0x10]
mov ecx, dword [rcx + rsi + 0x1c]
sub rdx, rax
add rcx, rsi
mov eax, dword [rcx + rdx*4]
add rax, rsi
jmp 0x180002754
mov rdx, qword [rdi]
mov rcx, rsi
add rdx, 2
add rdx, r14
call r12
mov qword [rdi], rax
add rdi, 8
test rbx, rbx
lea rax, [rbx + 8]
cmove rax, rbx
cmp qword [rdi], 0
mov rbx, rax
jne 0x180002713
add rbp, 0x14
cmp dword [rbp], 0
jne 0x1800026f0
mov rdi, qword [rsp + 0x78]
mov r8, r14
sub r8, qword [r15 + 0x30]
cmp dword [r15 + 0xb4], 0
je 0x180002847
mov r11d, dword [r15 + 0xb0]
add r11, r14
mov eax, dword [r11 + 4]
test eax, eax
je 0x180002847
nop dword [rax]
mov edx, dword [r11]
lea r10, [r11 + 8]
mov r9d, eax
add rdx, r14
sub r9, 8
shr r9, 1
je 0x180002834
nop word [rax + rax]
movzx eax, word [r10]
dec r9
movzx ecx, ax
shr cx, 0xc
cmp cx, 0xa
jne 0x1800027ef
and eax, 0xfff
add qword [rax + rdx], r8
jmp 0x18000282b
cmp cx, 3
jne 0x180002800
and eax, 0xfff
add dword [rax + rdx], r8d
jmp 0x18000282b
cmp cx, 1
jne 0x18000281b
and eax, 0xfff
lea rcx, [rax + rdx]
mov rax, r8
shr rax, 0x10
add word [rcx], ax
jmp 0x18000282b
cmp cx, 2
jne 0x18000282b
and eax, 0xfff
add word [rax + rdx], r8w
add r10, 2
test r9, r9
jne 0x1800027d0
mov eax, dword [r11 + 4]
add r11, rax
mov eax, dword [r11 + 4]
test eax, eax
jne 0x1800027b0
mov ebx, dword [r15 + 0x28]
xor r8d, r8d
xor edx, edx
or rcx, 0xffffffffffffffff
add rbx, r14
call qword [rsp + 0x88]
mov r8, qword [rsp + 0x70]
mov edx, 1
mov rcx, r14
call rbx
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call rbx
mov rax, rbx
add rsp, 0x28
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret