Function at 0x140001dc0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
test rcx, rcx
je 0x14000229b
mov r11, rsp
push rbp
push r12
sub rsp, 0xb8
xor r12d, r12d
mov rbp, rcx
test rdx, rdx
je 0x140002291
mov eax, 0x5a4d
cmp word [rcx], ax
jne 0x140002291
mov qword [r11 - 0x30], r14
movsxd r14, dword [rcx + 0x3c]
add r14, rcx
mov qword [r11 + 8], r14
cmp dword [r14], 0x4550
jne 0x140002289
mov qword [r11 + 0x10], rbx
lea rcx, [r14 + 0xd0]
mov qword [r11 - 0x28], r13
lea r13, [r14 + 0xb0]
mov qword [r11 - 0x38], r15
lea r15, [r14 + 0x90]
mov qword [rsp + 0x30], r15
lea rax, [r14 + 0xa0]
mov qword [r11 + 0x20], r13
lea rbx, [r14 + 0x108]
test r14, r14
je 0x140002271
test r15, r15
je 0x140002271
test rcx, rcx
je 0x140002271
test r13, r13
je 0x140002271
test rax, rax
je 0x140002271
test rbx, rbx
je 0x140002271
mov rdx, qword [r14 + 0x30]
xor r8d, r8d
xor ecx, ecx
mov qword [r11 - 0x20], rdi
call fcn.140004d60
mov r8d, dword [r14 + 0x50]
xor r9d, r9d
mov rdx, qword [r14 + 0x30]
xor ecx, ecx
mov qword [rsp + 0x28], r12
mov dword [rsp + 0x20], r12d
call fcn.1400048d0
mov rdi, rax
test rax, rax
jne 0x140001eca
mov ecx, dword [r14 + 0x50]
xor edx, edx
call fcn.140004a00
mov rdi, rax
test rax, rax
je 0x140002269
mov r8d, dword [r14 + 0x54]
mov rdx, rbp
mov rcx, rdi
mov qword [rsp + 0xb0], rsi
call fcn.1400010d0
mov esi, r12d
cmp r12w, word [r14 + 6]
jae 0x140001f13
add rbx, 0x14
nop
mov edx, dword [rbx]
mov ecx, dword [rbx - 8]
add rdx, rbp
mov r8d, dword [rbx - 4]
add rcx, rdi
call fcn.1400010d0
movzx eax, word [r14 + 6]
lea rbx, [rbx + 0x28]
inc esi
cmp esi, eax
jl 0x140001ef0
cmp dword [r15 + 4], r12d
jbe 0x140001ff0
nop dword [rax]
mov eax, dword [r15]
add rax, r12
mov ebp, dword [rax + rdi]
lea rsi, [rax + rdi]
test ebp, ebp
jne 0x140001f3a
cmp dword [rsi + 0x10], ebp
je 0x140001fe0
mov ecx, dword [rax + rdi + 0xc]
mov r13d, dword [rsi + 0x10]
add rcx, rdi
call fcn.140001900
mov rbx, rax
test rax, rax
je 0x140002261
test ebp, ebp
jne 0x140001f5d
mov ebp, dword [rsi + 0x10]
cmp qword [rdi + r13], 0
lea r14, [rdi + r13]
mov r15d, ebp
lea rdx, [r15 + rdi]
je 0x140001fca
mov rsi, r14
sub r15, r13
mov rdx, qword [rdx]
test rdx, rdx
jns 0x140001f97
movsxd rax, dword [rbx + 0x3c]
mov ecx, dword [rax + rbx + 0x88]
mov ecx, dword [rcx + rbx + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
add rax, rbx
jmp 0x140001fad
lea rcx, [rdx + 2]
add rcx, rdi
call fcn.1400014b0
mov edx, eax
mov rcx, rbx
call fcn.140001730
test rax, rax
je 0x140002261
add rsi, 8
mov qword [r14], rax
mov r14, rsi
cmp qword [rsi], 0
lea rdx, [r15 + rsi]
jne 0x140001f75
mov r15, qword [rsp + 0x30]
add r12, 0x14
mov eax, dword [r15 + 4]
cmp r12, rax
jb 0x140001f20
mov r13, qword [rsp + 0xe8]
mov r14, qword [rsp + 0xd0]
mov rax, qword [r14 + 0x30]
cmp rdi, rax
je 0x1400020df
mov r8d, dword [r13]
mov r11, rdi
add r8, rdi
sub r11, rax
cmp dword [r8], 0
je 0x1400020df
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [r8 + 4]
lea r10, [r8 + 8]
add rax, r8
cmp r10, rax
je 0x1400020d2
nop dword [rax]
nop dword [rax + rax]
movzx r9d, word [r10]
mov eax, r9d
movzx edx, r9w
shr eax, 0xc
test eax, eax
je 0x1400020be
sub eax, 1
je 0x1400020a5
sub eax, 1
je 0x140002091
sub eax, 1
je 0x14000207e
cmp eax, 7
jne 0x140002261
mov ecx, dword [r8]
and r9d, 0xfff
lea rax, [rdi + r9]
add qword [rcx + rax], r11
jmp 0x1400020be
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add dword [rcx + rax], r11d
jmp 0x1400020be
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add word [rcx + rax], r11w
jmp 0x1400020be
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rdi
mov rax, r11
add rdx, rcx
shr rax, 0x10
add word [rdx], ax
mov eax, dword [r8 + 4]
add r10, 2
add rax, r8
cmp r10, rax
jne 0x140002040
cmp dword [r10], 0
mov r8, r10
jne 0x140002020
cmp dword [r14 + 0xa4], 0
je 0x140002137
mov ebx, dword [r14 + 0xa0]
lea rcx, str.KERNEL32.DLL
add rbx, rdi
call fcn.140001650
mov rcx, rax
mov edx, 0x9219585c
call fcn.140001730
mov r9, rax
test rax, rax
je 0x140002137
mov edx, dword [r14 + 0xa4]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rdx
mov r8, rdi
mov rcx, rbx
shr rdx, 3
dec edx
call r9
call fcn.1400019c0
xor r10d, r10d
mov ebx, r10d
cmp r10w, word [r14 + 6]
jae 0x140002210
lea esi, [r10 + 2]
lea ebp, [rsi + 2]
lea r12d, [rsi + 0x7e]
lea r15d, [r10 + 0x10]
lea r13d, [r10 + 0x20]
lea r8d, [r10 + 0x40]
nop dword [rax]
nop dword [rax + rax]
mov eax, ebx
mov qword [rsp + 0x20], r10
lea rcx, [rax + rax*4]
lea rdx, [r14 + rcx*8]
mov ecx, dword [rdx + 0x12c]
mov r9d, ecx
sar r9d, 0x1f
mov eax, ecx
and r9d, 8
bt ecx, 0x1e
cmovb r9d, esi
and eax, 0xc0000000
cmp eax, 0xc0000000
mov eax, ecx
cmove r9d, ebp
bt ecx, 0x1d
cmovb r9d, r15d
and eax, 0xa0000000
cmp eax, 0xa0000000
mov eax, ecx
cmove r9d, r12d
and eax, 0x60000000
cmp eax, 0x60000000
cmove r9d, r13d
and ecx, 0xe0000000
cmp ecx, 0xe0000000
cmove r9d, r8d
mov r8d, dword [rdx + 0x118]
mov edx, dword [rdx + 0x114]
xor ecx, ecx
add rdx, rdi
call fcn.140004c70
movzx eax, word [r14 + 6]
mov r8d, 0x40
inc ebx
lea r10d, [r8 - 0x40]
cmp ebx, eax
jb 0x140002170
cmp dword [r14 + 0xd4], 0
je 0x140002249
mov eax, dword [r14 + 0xd0]
mov rbx, qword [rax + rdi + 0x18]
mov rax, qword [rbx]
test rax, rax
je 0x140002249
nop
xor r8d, r8d
mov rcx, rdi
lea edx, [r8 + 1]
call rax
mov rax, qword [rbx + 8]
lea rbx, [rbx + 8]
test rax, rax
jne 0x140002230
mov ebx, dword [r14 + 0x28]
mov rcx, rdi
mov edx, dword [r14 + 0x114]
add rbx, rdi
call fcn.1400015a0
call rbx
mov rsi, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa8]
mov r13, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0xd8]
mov r15, qword [rsp + 0x90]
mov r14, qword [rsp + 0x98]
add rsp, 0xb8
pop r12
pop rbp
ret