Function at 0x140001010
Capabilities:
Access peb ldr_data
Check os version
Get number of processors
Hash data using fnv
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb8
mov dword [rsp + 0x50], 0x53b2070f
mov dword [rsp + 0x60], 0xf8f45725
mov dword [rsp + 0x70], 0x3285501
lea rax, [rsp + 0x48]
mov dword [rsp + 0x20], 0x29cdd463
mov dword [rsp + 0x24], 6
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x40]
mov r13d, 1
mov qword [rsp + 0x68], rax
lea rax, [r11 + 0x20]
mov dword [r11 - 0x78], 0x820621f3
mov qword [r11 - 0x80], rax
lea rax, [r11 + 0x10]
mov dword [r11 - 0x68], 0x3a9acc72
mov qword [r11 - 0x70], rax
lea rax, [r11 + 0x18]
mov dword [r11 - 0x58], 0x38791528
mov qword [r11 - 0x60], rax
lea rax, [rsp + 0x30]
mov qword [r11 - 0x50], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
call fcn.140001000
mov edx, 0x5a4d
mov r15, rax
mov r8d, 0x4548
movzx ecx, word [r15]
cmp cx, dx
je 0x1400010d1
cmp cx, r8w
jne 0x1400010f4
movsxd rcx, dword [r15 + 0x3c]
lea rax, [rcx - 0x40]
cmp rax, 0x3bf
ja 0x1400010f4
add rcx, r15
mov eax, dword [rcx]
cmp eax, 0x4550
je 0x1400010f9
cmp eax, 0xb15b00b5
je 0x1400010f9
dec r15
jmp 0x1400010c2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbp, qword [rcx + 0x20]
test rbp, rbp
je 0x140001266
test r13d, r13d
je 0x140001266
movzx ecx, word [rbp + 0x48]
mov r8, qword [rbp + 0x50]
mov edx, 0x811c9dc5
test ecx, ecx
je 0x140001154
nop dword [rax]
movzx eax, byte [r8]
dec ecx
inc r8
test al, al
je 0x140001150
cmp al, 0x61
jb 0x140001143
add al, 0xe0
movzx eax, al
xor eax, edx
mov edx, eax
imul edx, edx, 0x1000193
test ecx, ecx
jne 0x140001130
mov r9d, edx
xor edx, edx
lea rcx, [rsp + 0x20]
xor r8d, r8d
mov eax, dword [rcx]
cmp r9, rax
je 0x14000117b
inc edx
inc r8
add rcx, 0x10
cmp edx, 1
jb 0x140001161
jmp 0x140001259
add r8, r8
dec r13d
mov rsi, qword [rsp + r8*8 + 0x28]
mov r9d, dword [rsp + r8*8 + 0x24]
mov edi, r9d
test rsi, rsi
je 0x140001259
mov rbx, qword [rbp + 0x20]
movsxd rax, dword [rbx + 0x3c]
mov r12d, dword [rax + rbx + 0x88]
mov r10d, dword [r12 + rbx + 0x20]
mov r11d, dword [r12 + rbx + 0x24]
add r10, rbx
add r11, rbx
test r9d, r9d
je 0x140001259
mov ecx, dword [r10]
mov r8d, 0x811c9dc5
add rcx, rbx
je 0x140001200
movzx eax, byte [rcx]
test al, al
je 0x140001200
cmp al, 0x5f
jne 0x1400011dc
inc rcx
movzx eax, byte [rcx]
test al, al
je 0x140001200
cmp al, 0x40
je 0x140001200
movzx eax, al
inc rcx
xor eax, r8d
mov r8d, eax
mov al, byte [rcx]
imul r8d, r8d, 0x1000193
test al, al
jne 0x1400011e3
xor ecx, ecx
xor edx, edx
test r9d, r9d
je 0x140001249
mov rax, rsi
nop dword [rax]
cmp r8d, dword [rax]
je 0x140001225
inc ecx
inc rdx
add rax, 0x10
cmp ecx, r9d
jb 0x140001210
jmp 0x140001249
add rdx, rdx
mov r8, qword [rsi + rdx*8 + 8]
test r8, r8
je 0x140001249
mov eax, dword [r12 + rbx + 0x1c]
movzx ecx, word [r11]
add rax, rbx
mov edx, dword [rax + rcx*4]
add rdx, rbx
dec edi
mov qword [r8], rdx
add r10, 4
add r11, 2
test edi, edi
jne 0x1400011c0
mov rbp, qword [rbp]
test rbp, rbp
jne 0x140001113
movsxd r13, dword [r15 + 0x3c]
mov r9d, 4
mov r8d, 0x3000
add r13, r15
xor ecx, ecx
mov r14d, dword [r13 + 0x50]
mov rdx, r14
call qword [rsp + 0x118]
mov r8d, dword [r13 + 0x54]
mov rdx, r15
mov r12, rax
test r8, r8
je 0x1400012b1
mov r9, rax
sub r9, r15
nop
movzx ecx, byte [rdx]
inc rdx
sub r8, 1
mov byte [r9 + rdx - 1], cl
jne 0x1400012a0
movzx r10d, word [r13 + 6]
movzx eax, word [r13 + 0x14]
test r10, r10
je 0x14000130b
lea r9, [rax + r13 + 0x2c]
nop word [rax + rax]
mov ecx, dword [r9 - 8]
mov edx, dword [r9]
mov r8d, dword [r9 - 4]
add rcx, r12
add rdx, r15
dec r10
test r8, r8
je 0x140001302
nop dword [rax]
movzx eax, byte [rdx]
inc rcx
inc rdx
sub r8, 1
mov byte [rcx - 1], al
jne 0x1400012f0
add r9, 0x28
test r10, r10
jne 0x1400012d0
mov ebp, dword [r13 + 0x90]
add rbp, r12
mov eax, dword [rbp + 0xc]
test eax, eax
je 0x1400013b6
movabs r15, 0x8000000000000000
nop word [rax + rax]
mov ecx, eax
add rcx, r12
call qword [rsp + 0x48]
mov edi, dword [rbp + 0x10]
mov ebx, dword [rbp]
add rdi, r12
add rbx, r12
mov rsi, rax
cmp qword [rdi], 0
je 0x1400013a7
nop
test rbx, rbx
je 0x140001382
mov rdx, qword [rbx]
test r15, rdx
je 0x140001382
movsxd rax, dword [rsi + 0x3c]
movzx edx, dx
mov ecx, dword [rax + rsi + 0x88]
mov eax, dword [rcx + rsi + 0x10]
sub rdx, rax
mov eax, dword [rcx + rsi + 0x1c]
lea rcx, [rsi + rax]
mov eax, dword [rcx + rdx*4]
add rax, rsi
jmp 0x140001391
mov rax, qword [rdi]
mov rcx, rsi
lea rdx, [r12 + rax + 2]
call qword [rsp + 0x40]
mov qword [rdi], rax
add rdi, 8
test rbx, rbx
je 0x1400013a1
add rbx, 8
cmp qword [rdi], 0
jne 0x140001350
mov eax, dword [rbp + 0x20]
add rbp, 0x14
test eax, eax
jne 0x140001330
mov rdi, r12
sub rdi, qword [r13 + 0x30]
cmp dword [r13 + 0xb4], 0
je 0x140001476
mov r10d, dword [r13 + 0xb0]
add r10, r12
mov eax, dword [r10 + 4]
test eax, eax
je 0x140001476
mov edx, dword [r10]
mov r8d, eax
lea r9, [r10 + 8]
sub r8, 8
add rdx, r12
shr r8, 1
je 0x140001463
nop word [rax + rax]
mov cx, word [r9]
dec r8
movzx eax, cx
shr ax, 0xc
cmp ax, 0xa
jne 0x140001420
and ecx, 0xfff
add qword [rcx + rdx], rdi
jmp 0x14000145a
cmp ax, 3
jne 0x140001431
and ecx, 0xfff
add dword [rcx + rdx], edi
jmp 0x14000145a
cmp ax, 1
jne 0x14000144a
mov rax, rdi
and ecx, 0xfff
shr rax, 0x10
add word [rcx + rdx], ax
jmp 0x14000145a
cmp ax, 2
jne 0x14000145a
and ecx, 0xfff
add word [rcx + rdx], di
add r9, 2
test r8, r8
jne 0x140001400
mov eax, dword [r10 + 4]
add r10, rax
mov eax, dword [r10 + 4]
test eax, eax
jne 0x1400013e1
mov eax, dword [r13 + 0xd0]
test eax, eax
je 0x1400014ac
mov rbx, qword [rax + r12 + 0x18]
test rbx, rbx
je 0x1400014ac
mov rax, qword [rbx]
test rax, rax
je 0x1400014ac
xor r8d, r8d
mov rcx, r12
lea edx, [r8 + 1]
call rax
mov rax, qword [rbx + 8]
add rbx, 8
test rax, rax
jne 0x140001493
mov r8d, dword [r13 + 0xa0]
mov ecx, dword [r13 + 0xa4]
test r8, r8
je 0x1400014eb
test rcx, rcx
je 0x1400014eb
mov r9, qword [rsp + 0x30]
test r9, r9
je 0x1400014eb
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
lea rcx, [r8 + r12]
mov r8, r12
shr rdx, 3
dec edx
call r9
movzx esi, word [r13 + 6]
movzx eax, word [r13 + 0x14]
test rsi, rsi
je 0x14000154c
lea rbx, [rax + r13 + 0x3c]
nop
mov ecx, dword [rbx - 0x18]
mov eax, dword [rbx]
mov edx, dword [rbx - 0x14]
add rcx, r12
dec rsi
bt rax, 0x19
jae 0x140001524
mov r8d, 0x4000
call qword [rsp + 0x110]
jmp 0x140001543
bt rax, 0x1d
lea r9, [rsp + 0x38]
mov r8d, 0x20
jb 0x14000153c
mov r8d, 4
call qword [rsp + 0x108]
add rbx, 0x28
test rsi, rsi
jne 0x140001500
mov r8d, 0x4000
mov rdx, r14
mov rcx, rdi
call qword [rsp + 0x110]
mov ebx, dword [r13 + 0x28]
mov r8, qword [rsp + 0x100]
add rbx, r12
mov edx, 1
mov rcx, r12
call rbx
mov rax, rbx
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret