Function at 0x140001000
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
movsxd rsi, dword [rcx + 0x3c]
xor ebx, ebx
add rsi, rcx
mov r12, rcx
movzx eax, word [rsi + 0x14]
lea rdi, [rsi + 0x18]
mov r8d, dword [rsi + 0x88]
add rdi, rax
mov ebp, dword [rdi + 0x14]
cmp r8d, ebp
jb 0x140001083
movzx r11d, word [rsi + 6]
movzx edx, bx
cmp bx, r11w
jae 0x14000107e
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rdi + rcx*8 + 0xc]
lea r9, [rdi + rcx*8]
cmp r8d, r10d
jb 0x140001075
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x140001166
inc dx
cmp dx, r11w
jb 0x140001050
mov r8d, dword [rsp + 0x50]
mov r13d, r8d
add r13, r12
mov r8d, dword [r13 + 0x20]
cmp r8d, ebp
jb 0x1400010d3
movzx r11d, word [rsi + 6]
movzx edx, bx
cmp bx, r11w
jae 0x1400010ce
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rdi + rcx*8 + 0xc]
lea r9, [rdi + rcx*8]
cmp r8d, r10d
jb 0x1400010c5
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x140001175
inc dx
cmp dx, r11w
jb 0x1400010a0
mov r8d, dword [rsp + 0x50]
mov r14d, r8d
mov r8d, dword [r13 + 0x24]
add r14, r12
cmp r8d, ebp
jb 0x14000111f
movzx r11d, word [rsi + 6]
movzx edx, bx
cmp bx, r11w
jae 0x14000111a
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [rdi + rcx*8 + 0xc]
lea r9, [rdi + rcx*8]
cmp r8d, r10d
jb 0x140001111
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x140001184
inc dx
cmp dx, r11w
jb 0x1400010f0
mov r8d, dword [rsp + 0x50]
mov ebp, dword [r13 + 0x18]
mov r15d, r8d
add r15, r12
test ebp, ebp
je 0x1400011fd
mov edi, dword [rsp + 0x50]
nop word [rax + rax]
movsxd rcx, dword [r12 + 0x3c]
lea rsi, [r12 + 0x18]
mov r10d, dword [r14]
add rsi, rcx
dec ebp
movzx eax, word [rcx + r12 + 0x14]
add rsi, rax
cmp r10d, dword [rsi + 0x14]
jae 0x140001190
mov edi, r10d
jmp 0x1400011d6
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x140001083
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x1400010d3
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x14000111f
movzx r11d, word [rcx + r12 + 6]
movzx edx, bx
cmp bx, r11w
jae 0x1400011d6
nop
movzx eax, dx
lea rcx, [rax + rax*4]
mov r9d, dword [rsi + rcx*8 + 0xc]
lea r8, [rsi + rcx*8]
cmp r10d, r9d
jb 0x1400011c1
mov ecx, dword [r8 + 0x10]
add ecx, r9d
cmp r10d, ecx
jb 0x1400011cc
inc dx
cmp dx, r11w
jb 0x1400011a0
jmp 0x1400011d6
mov edi, dword [r8 + 0x14]
sub edi, r9d
add edi, r10d
mov ecx, edi
lea rdx, str.ReflectiveLoader
add rcx, r12
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14000121c
add r14, 4
add r15, 2
test ebp, ebp
jne 0x140001140
xor eax, eax
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
movsxd rsi, dword [r12 + 0x3c]
mov r8d, dword [r13 + 0x1c]
add rsi, r12
movzx eax, word [rsi + 0x14]
lea r11, [rsi + 0x18]
add r11, rax
mov ebp, dword [r11 + 0x14]
cmp r8d, ebp
jb 0x14000127e
movzx edi, word [rsi + 6]
movzx edx, bx
cmp bx, di
jae 0x140001279
nop dword [rax + rax]
movzx eax, dx
lea rcx, [rax + rax*4]
mov r10d, dword [r11 + rcx*8 + 0xc]
lea r9, [r11 + rcx*8]
cmp r8d, r10d
jb 0x140001271
mov ecx, dword [r9 + 0x10]
add ecx, r10d
cmp r8d, ecx
jb 0x1400012d6
inc dx
cmp dx, di
jb 0x140001250
mov r8d, dword [rsp + 0x50]
movzx edx, word [r15]
mov ecx, r8d
add rcx, r12
mov r8d, dword [rcx + rdx*4]
cmp r8d, ebp
jb 0x1400012ce
movzx r10d, word [rsi + 6]
cmp bx, r10w
jae 0x1400012c9
nop dword [rax]
movzx eax, bx
lea rcx, [rax + rax*4]
mov r9d, dword [r11 + rcx*8 + 0xc]
lea rdx, [r11 + rcx*8]
cmp r8d, r9d
jb 0x1400012c0
mov ecx, dword [rdx + 0x10]
add ecx, r9d
cmp r8d, ecx
jb 0x1400012e2
inc bx
cmp bx, r10w
jb 0x1400012a0
mov r8d, dword [rsp + 0x50]
mov eax, r8d
jmp 0x1400011ff
mov eax, dword [r9 + 0x14]
sub eax, r10d
add r8d, eax
jmp 0x14000127e
mov eax, dword [rdx + 0x14]
sub eax, r9d
add r8d, eax
mov eax, r8d
jmp 0x1400011ff