Function at 0x1400021e0
Capabilities:
Enumerate pe sections
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r13, rcx
test rcx, rcx
je 0x140002781
mov rax, qword [rcx + 0x10]
xor edi, edi
mov qword [r11 + 0x10], rdi
lea rcx, [0x140005178]
mov edx, dword [rax + 0x50]
mov qword [r11 + 0x18], rdx
call qword [0x140005138]
mov rdx, qword [0x1400050c8]
mov ecx, dword [0x1400050c0]
call fcn.1400032e0
lea r9, [rsp + 0xb0]
mov dword [rsp + 0x28], 4
xor r8d, r8d
mov dword [rsp + 0x20], 0x3000
lea rdx, [rsp + 0xa8]
mov rcx, 0xffffffffffffffff
call fcn.14000330c
test eax, eax
js 0x140002781
mov rax, qword [r13 + 0x10]
mov esi, edi
mov rbx, qword [rsp + 0xa8]
mov r15d, dword [rax + 0x28]
add r15, rbx
mov qword [rsp + 0xa0], r15
cmp di, word [rax + 6]
jae 0x1400022c7
nop dword [rax]
mov rax, qword [r13 + 0x18]
mov edx, dword [rax + rdi + 0x14]
mov ecx, dword [rax + rdi + 0xc]
add rdx, qword [r13]
add rcx, rbx
mov r8d, dword [rax + rdi + 0x10]
call fcn.140001640
mov rax, qword [r13 + 0x10]
lea rdi, [rdi + 0x28]
mov rbx, qword [rsp + 0xa8]
inc esi
movzx ecx, word [rax + 6]
cmp esi, ecx
jl 0x140002290
mov r12, qword [r13 + 0x20]
xor esi, esi
mov ebp, esi
cmp dword [r12 + 4], esi
jbe 0x1400023ac
nop word [rax + rax]
mov eax, dword [r12]
add rax, rbp
mov r8d, dword [rax + rbx]
lea rdx, [rax + 0x10]
add rdx, rbx
test r8d, r8d
jne 0x140002300
cmp dword [rdx], r8d
je 0x14000239a
mov ecx, dword [rax + rbx + 0xc]
mov r14, r8
mov r15d, dword [rdx]
add rcx, rbx
call qword [0x140005130]
mov rdi, rax
test rax, rax
je 0x140002781
lea rsi, [r15 + rbx]
sub r14, r15
mov rdx, qword [r14 + rsi]
test rdx, rdx
jne 0x140002337
cmp qword [rsi], rdx
je 0x140002388
test rdx, rdx
jns 0x140002360
movsxd rax, dword [rdi + 0x3c]
cmp dword [rax + rdi], 0x4550
jne 0x140002781
mov eax, dword [rax + rdi + 0x88]
mov eax, dword [rax + rdi + 0x1c]
add rax, rdi
mov eax, dword [rax + rdx*4]
add rax, rdi
jmp 0x140002379
lea rcx, [rdx + 2]
add rcx, rbx
call fcn.1400012b0
mov edx, eax
mov rcx, rdi
call fcn.140001130
test rax, rax
je 0x140002781
mov qword [rsi], rax
add rsi, 8
jmp 0x140002326
mov eax, dword [r12 + 4]
add rbp, 0x14
cmp rbp, rax
jb 0x1400022e0
mov rbx, qword [rsp + 0xa8]
xor esi, esi
mov r15, qword [rsp + 0xa0]
mov rax, qword [r13 + 0x28]
mov r11, rbx
mov r8d, dword [rax]
mov rax, qword [r13 + 0x10]
add r8, rbx
sub r11, qword [rax + 0x30]
cmp dword [r8], 0
je 0x140002497
nop dword [rax + rax]
mov eax, dword [r8 + 4]
lea r10, [r8 + 8]
add rax, r8
cmp r10, rax
je 0x140002482
nop dword [rax]
nop dword [rax + rax]
movzx r9d, word [r10]
mov eax, r9d
movzx edx, r9w
shr eax, 0xc
test eax, eax
je 0x14000246e
sub eax, 1
je 0x140002455
sub eax, 1
je 0x140002441
sub eax, 1
je 0x14000242e
cmp eax, 7
jne 0x140002781
mov ecx, dword [r8]
and r9d, 0xfff
lea rax, [rbx + r9]
add qword [rcx + rax], r11
jmp 0x14000246e
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rbx + rdx]
add dword [rcx + rax], r11d
jmp 0x14000246e
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rbx + rdx]
add word [rcx + rax], r11w
jmp 0x14000246e
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rbx
mov rax, r11
add rdx, rcx
shr rax, 0x10
add word [rdx], ax
mov eax, dword [r8 + 4]
add r10, 2
add rax, r8
cmp r10, rax
jne 0x1400023f0
cmp dword [r10], 0
mov r8, r10
jne 0x1400023d0
mov rbx, qword [rsp + 0xa8]
mov rbp, qword [r13 + 0x10]
mov edi, esi
mov r14, qword [r13 + 0x18]
cmp si, word [rbp + 6]
jae 0x140002608
mov r8d, 2
mov r9d, 0x10
mov r10d, 0x80
mov r12d, 0x40
mov eax, edi
mov dword [rsp + 0xa0], esi
lea rcx, [rax + rax*4]
lea rdx, [r14 + rcx*8]
mov ecx, dword [r14 + rcx*8 + 0xc]
lea rax, [rbx + rcx]
mov qword [rsp + 0x40], rax
mov eax, dword [rdx + 0x10]
mov qword [rsp + 0xb8], rax
test eax, eax
je 0x1400025fa
test ecx, ecx
je 0x1400025fa
mov ecx, dword [rdx + 0x24]
mov esi, ecx
sar esi, 0x1f
mov eax, ecx
and esi, 8
bt ecx, 0x1e
cmovb esi, r8d
and eax, 0xc0000000
cmp eax, 0xc0000000
mov eax, 4
cmove esi, eax
bt ecx, 0x1d
mov eax, ecx
cmovb esi, r9d
and eax, 0xa0000000
cmp eax, 0xa0000000
cmove esi, r10d
and ecx, 0x60000000
cmp ecx, 0x60000000
jne 0x14000258a
cmp qword [0x140005150], 0
jne 0x140002569
mov eax, edi
lea rcx, [rax + rax*4]
mov eax, dword [r14 + rcx*8 + 0xc]
add rax, rbx
mov qword [0x140005150], rax
cmp qword [0x140005158], 0
jne 0x140002585
mov eax, edi
lea rcx, [rax + rax*4]
mov eax, dword [r14 + rcx*8 + 0x10]
mov qword [0x140005158], rax
mov esi, 0x20
mov rdx, qword [0x1400050d8]
mov eax, edi
lea rcx, [rax + rax*4]
mov eax, dword [r14 + rcx*8 + 0x24]
mov ecx, dword [0x1400050d0]
and eax, 0xe0000000
cmp eax, 0xe0000000
cmove esi, r12d
call fcn.1400032e0
lea rax, [rsp + 0xa0]
mov r9d, esi
lea r8, [rsp + 0xb8]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffffffffffff
call fcn.14000330c
test eax, eax
js 0x140002781
xor esi, esi
mov r8d, 2
mov r9d, 0x10
mov r10d, 0x80
movzx eax, word [rbp + 6]
inc edi
cmp edi, eax
jb 0x1400024c3
cmp qword [0x140005150], 0
je 0x140002781
cmp qword [0x140005158], 0
je 0x140002781
lea rdx, [0x140003230]
mov ecx, 1
call qword [0x140005110]
mov rbx, rax
test rax, rax
je 0x140002781
call fcn.140002e00
mov rcx, rbx
call qword [0x140005118]
test eax, eax
je 0x140002781
mov r8, qword [r13 + 0x38]
mov eax, dword [r8 + 4]
test eax, eax
je 0x14000268d
mov ecx, eax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
mov ecx, dword [r8]
mov r8, qword [rsp + 0xa8]
shr rdx, 3
add rcx, r8
dec edx
call qword [0x140005120]
lea rdx, [0x1400027c0]
mov ecx, 1
call qword [0x140005110]
mov rdx, qword [0x1400050e8]
mov ecx, dword [0x1400050e0]
call fcn.1400032e0
xor r8d, r8d
xor edx, edx
mov rcx, 0xffffffffffffffff
call fcn.14000330c
test eax, eax
js 0x140002781
mov rax, qword [r13 + 0x30]
cmp dword [rax + 4], 0
je 0x140002711
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa8]
mov rbx, qword [rax + rcx + 0x18]
mov rax, qword [rbx]
test rax, rax
je 0x140002711
nop dword [rax + rax]
xor r8d, r8d
mov edx, 1
call rax
mov rax, qword [rbx + 8]
lea rbx, [rbx + 8]
test rax, rax
je 0x140002711
mov rcx, qword [rsp + 0xa8]
jmp 0x1400026f0
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_LocalFree]
call qword [0x140005108]
mov qword [0x140005168], rax
test rax, rax
je 0x140002781
mov dword [rsp + 0x30], esi
lea r8, [0x1400027a0]
mov dword [rsp + 0x28], esi
lea rcx, [0x140005160]
xor r9d, r9d
mov dword [rsp + 0x20], 0x1f4
mov rdx, rax
call qword [0x140005100]
test eax, eax
je 0x140002781
test r15, r15
je 0x140002783
cmp dword [r13 + 0x48], 0
je 0x14000277c
mov rcx, qword [rsp + 0xa8]
xor r8d, r8d
mov edx, 1
call r15
jmp 0x140002783
call r15
jmp 0x140002783
xor eax, eax
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret