Function at 0x140052f60
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x14012c040]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov qword [rbp - 0x29], rdx
mov rbx, rcx
mov qword [rbp - 0x59], rcx
mov qword [rbp - 0x19], rcx
call fcn.140053ac0
nop
xor edi, edi
mov qword [rbx + 0x40], rdi
mov qword [rbx + 0x48], rdi
mov qword [rbx + 0x50], rdi
mov qword [rbx + 0x58], rdi
mov qword [rbx + 0x60], rdi
mov rax, qword gs:[0x60]
test rax, rax
je 0x140053177
mov r13, qword [rax + 0x18]
add r13, 0x20
mov qword [rbp - 0x51], r13
mov r12, qword [r13]
test r12, r12
je 0x140053177
cmp r12, r13
je 0x140053177
mov rax, r13
nop dword [rax]
nop dword [rax + rax]
lea r13, [r12 - 0x10]
test r13, r13
je 0x140053166
mov rdx, qword [r13 + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp - 0x49], xmm0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rdi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140053030
lea rcx, [rbp - 0x49]
call fcn.140054310
nop
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x11]
call fcn.140054800
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 7
jbe 0x140053093
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x49]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005308e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400531a7
call fcn.14007eed0
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], 7
mov word [rbp - 0x49], di
lea rsi, [rbp - 0x11]
mov rdi, qword [rbp - 0x11]
mov r14, qword [rbp + 7]
cmp r14, 0xf
cmova rsi, rdi
lea r15, [rbp - 0x11]
cmova r15, rdi
mov rcx, qword [rbp - 1]
add r15, rcx
lea rbx, [rbp - 0x11]
cmp r14, 0xf
cmova rbx, rdi
cmp rbx, r15
je 0x140053100
sub rsi, rbx
nop word [rax + rax]
movsx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rsi + rbx], al
inc rbx
cmp rbx, r15
jne 0x1400530e0
mov r14, qword [rbp + 7]
mov rcx, qword [rbp - 1]
mov rdi, qword [rbp - 0x11]
lea rdx, [rbp - 0x11]
cmp r14, 0xf
cmova rdx, rdi
mov rsi, qword [rbp - 0x29]
mov r8, qword [rsi + 8]
cmp r8, rcx
jne 0x140053129
mov rcx, qword [rsi]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400531ae
cmp r14, 0xf
jbe 0x140053160
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140053158
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053314
mov rcx, rdi
call fcn.14007eed0
xor edi, edi
mov rax, qword [rbp - 0x51]
mov r12, qword [r12]
cmp r12, rax
jne 0x140053000
mov rbx, qword [rbp - 0x59]
mov rax, rbx
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14007ec10
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [r13 + 0x30]
mov rbx, qword [rbp - 0x59]
mov qword [rbx + 0x60], rdx
movsxd rcx, dword [rdx + 0x3c]
add rcx, rdx
mov qword [rbx + 0x58], rcx
mov esi, dword [rcx + 0x88]
add rsi, rdx
mov eax, dword [rsi + 0x14]
test eax, eax
je 0x1400532d8
mov r13d, dword [rsi + 0x20]
mov r15d, dword [rsi + 0x1c]
add r15, rdx
mov r12d, dword [rsi + 0x24]
add r12, rdx
add r13, rdx
je 0x1400532d8
test r15, r15
je 0x1400532d8
test r12, r12
je 0x1400532d8
xor r8d, r8d
mov ebx, r8d
test eax, eax
je 0x1400532d4
mov r14, qword [rbp - 0x59]
nop dword [rax + rax]
movzx eax, word [r12 + rbx*2]
mov edi, dword [r15 + rax*4]
add rdi, qword [r14 + 0x60]
mov edx, dword [r13 + rbx*4]
add rdx, qword [r14 + 0x60]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf], xmm0
mov qword [rbp + 0x1f], r8
mov qword [rbp + 0x27], r8
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140053250
lea rcx, [rbp + 0xf]
call fcn.140047b20
nop
lea r8, [rbp + 0xf]
lea rdx, [rbp - 0x29]
mov rcx, r14
call fcn.140054050
mov rcx, qword [rax]
mov qword [rcx + 0x30], rdi
mov rdx, qword [rbp + 0x27]
cmp rdx, 0xf
jbe 0x1400532b2
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400532ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400532c5
call fcn.14007eed0
inc rbx
mov eax, dword [rsi + 0x14]
cmp rbx, rax
jae 0x1400532cc
xor r8d, r8d
jmp 0x140053220
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r14, qword [rbp + 7]
mov rdi, qword [rbp - 0x11]
mov rbx, qword [rbp - 0x59]
cmp r14, 0xf
jbe 0x140053177
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140053307
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140053314
mov rcx, rdi
call fcn.14007eed0
jmp 0x140053177
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3