Function at 0x140180300
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x490]
sub rsp, 0x590
mov rax, qword [0x1402bb040]
xor rax, rsp
mov qword [rbp + 0x480], rax
mov eax, 0x5a4d
movzx r11d, r8w
mov rsi, rdx
mov r9, rcx
cmp word [rcx], ax
jne 0x1401806d0
mov ecx, dword [rcx + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7ffffffd
ja 0x1401806d0
cmp dword [r9 + rcx], 0x4550
lea r8, [r9 + rcx]
jne 0x1401806d0
mov eax, dword [r8 + 0x88]
test eax, eax
je 0x1401806d0
cmp dword [r8 + 0x8c], 0
je 0x1401806d0
cmp r11d, dword [r9 + rax + 0x18]
lea r10, [r9 + rax]
jae 0x140180788
lfence
mov ecx, dword [r10 + 0x20]
mov r14d, r11d
mov ebx, dword [r10 + 0x1c]
add rcx, r9
mov edi, dword [r10 + 0x24]
add rbx, r9
add rdi, r9
mov rax, rdx
mov r11d, dword [rcx + r11*4]
add r11, r9
sub r11, rdx
movzx edx, byte [rax]
movzx ecx, byte [rax + r11]
sub edx, ecx
jne 0x1401803d3
inc rax
test ecx, ecx
jne 0x1401803c0
test edx, edx
jne 0x140180788
lfence
movzx eax, word [rdi + r14*2]
mov ebx, dword [rbx + rax*4]
add rbx, r9
cmp rbx, r10
jb 0x140180780
mov eax, dword ds:[r8 + 0x8c]
add rax, r10
cmp rbx, rax
jae 0x140180780
lfence
xor r12d, r12d
lea rcx, [rbp + 0x62]
mov r8d, 0x206
mov word [rbp + 0x60], r12w
call fcn.14020c410
mov rdx, 0xffffffffffffffff
nop dword [rax]
inc rdx
cmp byte [rbx + rdx], r12b
jne 0x140180430
lea r8, [rbp + 0x60]
mov rcx, rbx
call sym.SystemInformer.exe_Ordinal_1461
lea rdx, [rbp + 0x60]
xorps xmm1, xmm1
and rdx, 0xfffffffffffffff1
lea rcx, [rbp + 0x60]
and ecx, 0xf
je 0x140180476
xorps xmm0, xmm0
pcmpeqw xmm0, xmmword [rdx]
pmovmskb eax, xmm0
shr eax, cl
bsf ecx, eax
je 0x140180472
mov edx, ecx
shr rdx, 1
jmp 0x1401804b7
add rdx, 0x10
xorps xmm0, xmm0
pcmpeqw xmm0, xmmword [rdx]
pmovmskb eax, xmm0
bsf ecx, eax
jne 0x1401804a5
nop word [rax + rax]
add rdx, 0x10
movdqa xmm0, xmm1
pcmpeqw xmm0, xmmword [rdx]
pmovmskb eax, xmm0
bsf ecx, eax
je 0x140180490
lea rax, [rbp + 0x60]
sub rdx, rax
mov eax, ecx
shr rax, 1
sar rdx, 1
add rdx, rax
movabs rax, 0x7fffffffffffffff
lea r15, [rdx + rdx]
and rdx, rax
lea rcx, [rbp + 0x60]
mov r8, rdx
mov r9, rdx
shr r9, 3
and r8d, 7
test r9, r9
je 0x14018050c
movdqa xmm1, xmmword [0x140293bf0]
lea rcx, [rbp + 0x60]
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx]
pcmpeqw xmm0, xmm1
pmovmskb eax, xmm0
bsf r10d, eax
jne 0x14018052e
add rcx, 0x10
sub r9, 1
jne 0x1401804f0
test r8, r8
je 0x140180780
cmp word [rcx], 0x2e
je 0x140180544
add rcx, 2
sub r8, 1
jne 0x140180515
mov rax, rbx
jmp 0x1401806d2
shl r9, 4
mov rdx, r15
sub rdx, r9
mov eax, r10d
shr rdx, 1
shr rax, 1
add rdx, rax
sub rdx, r8
cmp rdx, 0xffffffffffffffff
je 0x140180780
lea rdi, [rdx + rdx]
mov word [rbp + 0x270], r12w
sub r15, rdi
lea rsi, [rbp + 0x62]
xor edx, edx
lea rcx, [rbp + 0x272]
mov r8d, 0x206
add rsi, rdi
lea r14, [r15 - 2]
call fcn.14020c410
nop
test rdi, rdi
je 0x1401805a5
lea rcx, [rbp + 0x270]
cmp rdi, 0x208
ja 0x1401806ae
mov r8, rdi
lea rdx, [rbp + 0x60]
call fcn.14020c7e0
xor edx, edx
lea rcx, [rbp + 0x270]
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x140180611
xor edx, edx
lea rcx, [rbp + 0x270]
mov r8d, 0x200
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x140180611
cmp dword [0x1402bbf68], 0x3e
jae 0x14018060e
xor r8d, r8d
lea rcx, [rbp + 0x270]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x140180611
mov rdi, r12
test rdi, rdi
je 0x140180780
xor edx, edx
mov byte [rsp + 0x50], r12b
mov r8d, 0x103
lea rcx, [rsp + 0x51]
call fcn.14020c410
mov r9, rsi
mov dword [rsp + 0x30], r12d
lea r8, [rsp + 0x30]
mov dword [rsp + 0x20], r14d
mov edx, 0x104
lea rcx, [rsp + 0x50]
call qword [sym.imp.ntdll.dll_RtlUnicodeToUTF8N]
test eax, eax
js 0x1401806d0
cmp byte ds:[rsp + 0x50], 0x23
jne 0x14018076d
lea rax, [r15 - 4]
xor bl, bl
mov qword [rsp + 0x40], rax
lea r10, [rsi + 2]
mov qword [rsp + 0x48], r10
mov r9, rax
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
test rax, rax
je 0x1401806f7
movzx ecx, word [r10]
cmp cx, 0x2d
je 0x14018069d
cmp cx, 0x2b
jne 0x1401806f7
add r10, 2
lea r9, [rax - 2]
cmp cx, 0x2d
sete bl
jmp 0x1401806fc
xor edx, edx
mov r8d, 0x208
call fcn.14020c410
nop dword [rax + rax]
call fcn.1401f5db0
mov dword [rax], 0x22
call fcn.1401f5c08
xor eax, eax
mov rcx, qword ds:[rbp + 0x480]
xor rcx, rsp
call fcn.1401e5e40
add rsp, 0x590
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov r10, qword [rsp + 0x48]
shr r9, 1
mov r11b, 1
mov rcx, r12
mov rdx, r12
je 0x14018073b
lea rsi, [0x14028e420]
movzx eax, byte ds:[r10 + rdx*2]
mov r8d, dword [rsi + rax*4]
cmp r8d, 0xa
jae 0x140180730
lea rcx, [rcx + rcx*4]
lea rcx, [r8 + rcx*2]
jmp 0x140180733
xor r11b, r11b
inc rdx
cmp rdx, r9
jb 0x140180711
mov r8, rcx
lea rdx, [rsp + 0x50]
neg r8
test bl, bl
cmove r8, rcx
test r11b, r11b
mov rcx, rdi
cmove r8w, r12w
cmovne rdx, r12
call fcn.14017fae0
mov rbx, rax
jmp 0x1401806d2
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rdi
call fcn.14017fae0
mov rbx, rax
mov rax, rbx
jmp 0x1401806d2
xor r8d, r8d
mov rdx, rsi
mov rcx, r9
call fcn.14017fae0
jmp 0x1401806d2