Function at 0x1800cefe0
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r15
sub rsp, 0x80
movabs rax, 0xe5d2f956d4826e
mov r15, rcx
mov qword [rsp + 0xa8], rax
movabs rcx, 0x7f03f0d8bace2788
mov rax, qword [rsp + 0xa8]
movabs rsi, 0x8bd28b56b18205
mov qword [rsp + 0x40], rax
movabs rbp, 0x4ba7b9baa7d09326
movabs rax, 0x4b95b989a7bc9343
xor r11d, r11d
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x48], rax
movabs rax, 0x433697e5fff4c5d9
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0xa8], rcx
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0xa8], rsi
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xa8], rbp
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x68], rax
movabs rax, 0x435a9789ff90c5f7
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xa8], rcx
mov rax, qword [rsp + 0xa8]
movdqa xmm0, xmmword [rsp + 0x40]
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm0, xmmword [rsp + 0x60]
mov qword [rsp + 0x78], rax
mov rax, qword gs:[0x60]
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x40], xmm0
test rax, rax
je 0x1800cf1c1
mov rbx, qword [rax + 0x18]
add rbx, 0x20
mov r10, qword [rbx]
cmp r10, rbx
je 0x1800cf1c1
mov rdi, qword [rsp + 0x40]
mov r8, qword [r10 + 0x50]
test r8, r8
je 0x1800cf1b5
mov ecx, r11d
mov rax, r8
cmp word [r8], cx
je 0x1800cf15c
nop dword [rax + rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], r11w
jne 0x1800cf150
lea rax, [rsp + 0x40]
mov edx, r11d
test di, di
je 0x1800cf17c
nop dword [rax]
inc edx
lea rax, [rax + 2]
cmp word [rax], r11w
jne 0x1800cf170
cmp ecx, edx
jne 0x1800cf1b5
movsxd r9, ecx
mov rdx, r11
test ecx, ecx
je 0x1800cf1af
nop word [rax + rax]
movzx ecx, word [rsp + rdx*2 + 0x40]
movzx eax, word [r8 + rdx*2]
or cx, 0x20
or ax, 0x20
cmp ax, cx
jne 0x1800cf1b5
inc rdx
cmp rdx, r9
jb 0x1800cf190
mov r10, qword [r10 + 0x20]
jmp 0x1800cf1c4
mov r10, qword [r10]
cmp r10, rbx
jne 0x1800cf136
mov r10, r11
movabs rax, 0x72e9bbc732d0ed49
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x20], rax
movabs rax, 0x4ba7b9bae6a9e147
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0xa8], rsi
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0xa8], rbp
mov rax, qword [rsp + 0xa8]
movdqa xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x38], rax
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
test r10, r10
je 0x1800cf2f4
movsxd rax, dword [r10 + 0x3c]
mov r9d, r11d
mov qword [rsp + 0xa0], r14
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
mov ebp, dword [rbx + 0x24]
mov edi, dword [rbx + 0x18]
add rbp, r10
test edi, edi
je 0x1800cf2ec
mov r14d, dword [rbx + 0x20]
mov rsi, qword [rsp + 0x20]
nop word [rax + rax]
mov ecx, r9d
lea rax, [rsp + 0x20]
lea rdx, [r14 + rcx*4]
mov r8d, dword [rdx + r10]
add r8, r10
je 0x1800cf2cd
movzx edx, byte [r8]
cmp dl, sil
jne 0x1800cf2c3
lea rcx, [rsp + 0x20]
sub r8, rcx
test dl, dl
je 0x1800cf2be
cmp byte [rax], 0
je 0x1800cf2c3
movzx edx, byte [r8 + rax + 1]
inc rax
cmp dl, byte [rax]
je 0x1800cf2a6
jmp 0x1800cf2c3
cmp byte [rax], 0
je 0x1800cf2d7
movsx ecx, byte [rax]
movsx eax, dl
cmp eax, ecx
je 0x1800cf2d7
inc r9d
cmp r9d, edi
jb 0x1800cf280
jmp 0x1800cf2ec
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, r9d
movzx edx, word [rbp + rax*2]
mov r11d, dword [rcx + rdx*4]
add r11, r10
mov r14, qword [rsp + 0xa0]
mov rcx, r15
call r11
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop rdi
pop rsi
ret