Function at 0x140001e00
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
test rcx, rcx
je 0x1400022eb
mov r11, rsp
push rbp
push r12
sub rsp, 0xb8
xor r12d, r12d
mov rbp, rcx
test rdx, rdx
je 0x1400022e1
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x1400022e1
mov qword [r11 - 0x30], r14
movsxd r14, dword [rcx + 0x3c]
add r14, rcx
mov qword [r11 + 8], r14
cmp dword [r14], 0x4550
jne 0x1400022d9
mov qword [r11 + 0x10], rbx
lea rcx, [r14 + 0xd0]
mov qword [r11 - 0x28], r13
lea r13, [r14 + 0xb0]
mov qword [r11 - 0x38], r15
lea r15, [r14 + 0x90]
mov qword [rsp + 0x30], r15
lea rax, [r14 + 0xa0]
mov qword [r11 + 0x20], r13
lea rbx, [r14 + 0x108]
test r14, r14
je 0x1400022c1
test r15, r15
je 0x1400022c1
test rcx, rcx
je 0x1400022c1
test r13, r13
je 0x1400022c1
test rax, rax
je 0x1400022c1
test rbx, rbx
je 0x1400022c1
mov rdx, qword [r14 + 0x30]
xor r8d, r8d
xor ecx, ecx
mov qword [r11 - 0x20], rdi
call fcn.140004db0
mov r8d, dword [r14 + 0x50]
xor r9d, r9d
mov rdx, qword [r14 + 0x30]
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
call fcn.140004920
mov rdi, rax
test rax, rax
jne 0x140001f0a
mov ecx, dword [r14 + 0x50]
xor edx, edx
call fcn.140004a50
mov rdi, rax
test rax, rax
je 0x1400022b9
mov r8d, dword [r14 + 0x54]
mov rdx, rbp
mov rcx, rdi
mov qword [rsp + 0xb0], rsi
call fcn.1400010d0
mov esi, r12d
cmp r12w, word [r14 + 6]
jae 0x140001f53
add rbx, 0x14
nop
mov edx, dword [rbx]
mov ecx, dword [rbx - 8]
add rdx, rbp
mov r8d, dword [rbx - 4]
add rcx, rdi
call fcn.1400010d0
movzx eax, word [r14 + 6]
lea rbx, [rbx + 0x28]
inc esi
cmp esi, eax
jl 0x140001f30
cmp dword [r15 + 4], r12d
jbe 0x140002030
nop dword [rax]
mov eax, dword [r15]
add rax, r12
mov ebp, dword [rax + rdi]
lea rsi, [rax + rdi]
test ebp, ebp
jne 0x140001f7a
cmp dword [rsi + 0x10], ebp
je 0x140002020
mov ecx, dword [rax + rdi + 0xc]
mov r13d, dword [rsi + 0x10]
add rcx, rdi
call fcn.140001900
mov rbx, rax
test rax, rax
je 0x1400022b1
test ebp, ebp
jne 0x140001f9d
mov ebp, dword [rsi + 0x10]
cmp qword [rdi + r13], 0
lea r14, [rdi + r13]
mov r15d, ebp
lea rdx, [r15 + rdi]
je 0x14000200a
mov rsi, r14
sub r15, r13
mov rdx, qword [rdx]
test rdx, rdx
jns 0x140001fd7
movsxd rax, dword [rbx + 0x3c]
mov ecx, dword [rax + rbx + 0x88]
mov ecx, dword [rcx + rbx + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
add rax, rbx
jmp 0x140001fed
lea rcx, [rdx + 2]
add rcx, rdi
call fcn.1400014b0
mov edx, eax
mov rcx, rbx
call fcn.140001730
test rax, rax
je 0x1400022b1
add rsi, 8
mov qword [r14], rax
mov r14, rsi
cmp qword [rsi], 0
lea rdx, [r15 + rsi]
jne 0x140001fb5
mov r15, qword [rsp + 0x30]
add r12, 0x14
mov eax, dword [r15 + 4]
cmp r12, rax
jb 0x140001f60
mov r13, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xd0]
mov rax, qword [r14 + 0x30]
cmp rdi, rax
je 0x14000211f
mov r8d, dword [r13]
mov r11, rdi
add r8, rdi
sub r11, rax
cmp dword [r8], 0
je 0x14000211f
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r8 + 4]
lea r10, [r8 + 8]
add rax, r8
cmp r10, rax
je 0x140002112
nop dword [rax]
nop dword [rax + rax]
movzx r9d, word [r10]
mov eax, r9d
movzx edx, r9w
shr eax, 0xc
test eax, eax
je 0x1400020fe
sub eax, 1
je 0x1400020e5
sub eax, 1
je 0x1400020d1
sub eax, 1
je 0x1400020be
cmp eax, 7
jne 0x1400022b1
mov ecx, dword [r8]
and r9d, 0xfff
lea rax, [rdi + r9]
add qword [rcx + rax], r11
jmp 0x1400020fe
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add dword [rcx + rax], r11d
jmp 0x1400020fe
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add word [rcx + rax], r11w
jmp 0x1400020fe
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rdi
mov rax, r11
add rdx, rcx
shr rax, 0x10
add word [rdx], ax
mov eax, dword [r8 + 4]
add r10, 2
add rax, r8
cmp r10, rax
jne 0x140002080
cmp dword [r10], 0
mov r8, r10
jne 0x140002060
cmp dword [r14 + 0xa4], 0
je 0x140002183
mov ebx, dword [r14 + 0xa0]
lea rcx, str.KERNEL32.DLL
add rbx, rdi
call fcn.140001650
mov rcx, rax
mov edx, 0x9219585c
call fcn.140001730
mov r9, rax
test rax, rax
je 0x1400022b1
mov edx, dword [r14 + 0xa4]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdi
mov rcx, rbx
shr rdx, 3
dec edx
call r9
test al, al
je 0x1400022b1
call fcn.1400019c0
test eax, eax
je 0x1400022b1
xor r10d, r10d
mov ebx, r10d
cmp r10w, word [r14 + 6]
jae 0x140002260
lea esi, [r10 + 2]
lea ebp, [rsi + 2]
lea r12d, [rsi + 0x7e]
lea r15d, [r10 + 0x10]
lea r13d, [r10 + 0x20]
lea r8d, [r10 + 0x40]
nop dword [rax + rax]
mov eax, ebx
mov qword [rsp + 0x20], r10
lea rcx, [rax + rax*4]
lea rdx, [r14 + rcx*8]
mov ecx, dword [rdx + 0x12c]
mov r9d, ecx
sar r9d, 0x1f
mov eax, ecx
and r9d, 8
bt ecx, 0x1e
cmovb r9d, esi
and eax, 0xc0000000
cmp eax, 0xc0000000
mov eax, ecx
cmove r9d, ebp
bt ecx, 0x1d
cmovb r9d, r15d
and eax, 0xa0000000
cmp eax, 0xa0000000
mov eax, ecx
cmove r9d, r12d
and eax, 0x60000000
cmp eax, 0x60000000
cmove r9d, r13d
and ecx, 0xe0000000
cmp ecx, 0xe0000000
cmove r9d, r8d
mov r8d, dword [rdx + 0x118]
mov edx, dword [rdx + 0x114]
xor ecx, ecx
add rdx, rdi
call fcn.140004cc0
movzx eax, word [r14 + 6]
mov r8d, 0x40
inc ebx
lea r10d, [r8 - 0x40]
cmp ebx, eax
jb 0x1400021c0
cmp dword [r14 + 0xd4], 0
je 0x140002299
mov eax, dword [r14 + 0xd0]
mov rbx, qword [rax + rdi + 0x18]
mov rax, qword [rbx]
test rax, rax
je 0x140002299
nop
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call rax
mov rax, qword [rbx + 8]
lea rbx, [rbx + 8]
test rax, rax
jne 0x140002280
mov ebx, dword [r14 + 0x28]
mov rcx, rdi
mov edx, dword [r14 + 0x114]
add rbx, rdi
call fcn.1400015a0
call rbx
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xd8]
mov r15, qword [rsp + 0x90]
mov r14, qword [rsp + 0x98]
add rsp, 0xb8
pop r12
pop rbp
ret