Function at 0x140001a30
Capabilities:
Access peb ldr_data
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x348
xor r13d, r13d
push rdx
pop rbx
push rcx
pop r12
lea rdi, [rsp + 0x30]
mov edx, 0x2e
mov rcx, rbx
lea rsi, [rsp + 0x20]
call sub.msvcrt.dll_strrchr
mov ecx, 0x1e
mov rdx, rbx
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], 0
cmovg r14, r14
cmova r12, r12
nop
nop
cmove r13, r13
cmovb rdx, rdx
xchg rcx, rcx
lea rbp, [rax + 1]
push r13
pop rax
rep stosq qword [rdi], rax
mov r8d, ebp
mov rcx, rsi
sub r8d, ebx
lea rbx, [rsp + 0x130]
mov dword [rdi], 0
mov byte [rdi + 4], 0
lea rdi, [rsp + 0x130]
call sub.msvcrt.dll_strncpy
mov rcx, rsi
call sub.msvcrt.dll_strlen
cmovl rsi, rsi
cmova rax, rax
push r9
pop r9
cmova rdx, rdx
mov ecx, 0x41
mov r8d, 0x104
mov rdx, rsi
mov dword [rsp + rax + 0x20], 0x6c6c64
mov rax, r13
rep stosq qword [rdi], rax
mov rcx, rbx
call sub.msvcrt.dll_mbstowcs
mov rcx, rbx
xor edx, edx
call fcn.140001520
mov rcx, rbp
push rax
pop rbx
test rax, rax
je 0x1400018f0
call fcn.1400102a0
xor r8d, r8d
mov rcx, rbx
mov edx, eax
cmovb r10, r10
nop
nop
push rdi
pop rdi
cmovl r8, r8
call fcn.140001a30
add rsp, 0x348
pop rbx
pop rsi
pop rdi
mov rbp, qword [rsp]
add rsp, 8
pop r12
add rsp, 8
mov r13, qword [rsp - 8]
ret
call fcn.1400102a0
mov esi, eax
xchg rsi, rsi
cmovb rbx, rbx
cmovg r8, r8
cmovl r8, r8
cmovb rbx, rbx
cmove rdx, rdx
xchg rdi, rdi
mov rax, qword gs:[0x60]
cmovl r11, r11
cmovl rdx, rdx
cmovb r8, r8
cmovb rdx, rdx
push rdi
pop rdi
cmovg r8, r8
cmovg r14, r14
cmovl rbx, rbx
cmovb rdi, rdi
cmove r9, r9
mov rax, qword [rax + 0x18]
mov rbx, qword [rax + 0x10]
lea rdi, [rax + 0x10]
cmp rdi, rbx
je 0x140001a01
cmove rsi, rsi
cmovl rax, rax
xchg r11, r11
cmovb r13, r13
mov rcx, qword [rbx + 0x30]
cmovl rsi, rsi
xchg r13, r13
cmovg r10, r10
cmovg r11, r11
cmovl rbx, rbx
xchg rdx, rdx
cmovb rax, rax
cmp r12, rcx
je 0x1400019d1
jmp 0x1400019a8
xor r8d, r8d
mov edx, esi
call fcn.140001a30
test rax, rax
nop
cmova r14, r14
cmovb r13, r13
cmovg r9, r9
cmovg rdx, rdx
nop
cmovb rbx, rbx
jne 0x1400018cd
jmp 0x1400019e2
mov rbx, qword [rbx]
cmp rdi, rbx
jmp 0x1400019fb
jne 0x140001955
jmp 0x140001a21
xor eax, eax
jmp 0x1400018cd
push r15
push r14
push r13
push r12
sub rsp, 8
mov qword [rsp], rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov esi, edx
jmp 0x140001a65
test rcx, rcx
je 0x140001a81
cmove rdi, rdi
cmova rdi, rdi
cmove rdx, rdx
cmovg r9, r9
cmp word [rcx], 0x5a4d
je 0x140001aa8
xor eax, eax
add rsp, 0x38
pop rbx
mov rsi, qword [rsp]
add rsp, 8
pop rdi
pop rbp
pop r12
mov r13, qword [rsp]
add rsp, 8
pop r14
pop r15
ret
movsxd rax, dword [rcx + 0x3c]
add rax, rcx
cmp dword [rax], 0x4550
jne 0x140001a81
test byte [rax + 0x17], 0x20
je 0x140001a81
jmp 0x140001ac8
mov ebp, dword [rax + 0x8c]
test ebp, ebp
je 0x140001a81
mov r15d, dword [rax + 0x88]
test r15d, r15d
je 0x140001a81
add r15, rcx
mov r12d, dword [r15 + 0x1c]
mov edi, dword [r15 + 0x20]
mov r13d, dword [r15 + 0x24]
lea rax, [r12 + rcx]
mov qword [rsp + 0x28], rax
test edx, edx
je 0x140001b90
mov eax, dword [r15 + 0x18]
add rdi, rcx
cmove rdx, rdx
cmove rcx, rcx
cmovb r8, r8
xor r14d, r14d
test eax, eax
jmp 0x140001b37
jne 0x140001b4e
jmp 0x140001a81
add r14d, 1
cmp r14d, dword [r15 + 0x18]
jae 0x140001a81
mov r12d, r14d
jmp 0x140001b69
mov ecx, dword [rdi + r12*4]
add rcx, rbx
call fcn.1400102a0
cmp eax, esi
jne 0x140001b40
lea rax, [rbx + r12*2]
mov rdx, qword [rsp + 0x28]
movzx eax, word [rax + r13]
mov eax, dword [rdx + rax*4]
add rax, rbx
jmp 0x140001bd3
mov rax, qword [rsp + 0x28]
push r8
pop r8
cmove r11, r11
cmova rdx, rdx
movzx r8d, r8w
sub r8d, dword [r15 + 0x10]
mov eax, dword [rax + r8*4]
jmp 0x140001bd0
add rax, rcx
test rax, rax
je 0x140001a81
cmp rax, r15
jb 0x140001a83
add rbp, r15
cmp rax, rbp
jae 0x140001a83
mov rdx, rax
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
add rsp, 8
mov rdi, qword [rsp - 8]
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp 0x1400017d0