Function at 0x140001da0
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov esi, ecx
mov rax, qword [0x14001b008]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
mov r14, qword [r15 + 0x20]
add r15, 0x20
movaps xmm0, xmmword [0x140011010]
movaps xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x50], 0x6c
xor edi, edi
lea rbx, [rsp + 0x40]
nop word cs:[rax + rax]
cmp r14, r15
je 0x140001e25
mov r14, qword [r14]
mov rcx, qword [r14 + 0x50]
mov rdx, rbx
call fcn.140005b1c
test eax, eax
jne 0x140001e00
mov rdi, qword [r14 + 0x20]
cmp esi, 5
je 0x140002066
movsxd rax, dword [rdi + 0x3c]
mov r8d, dword [rax + rdi + 0x88]
mov eax, dword [r8 + rdi + 0x14]
test rax, rax
je 0x140001fe5
mov ecx, dword [r8 + rdi + 0x24]
add rcx, rdi
mov edx, dword [r8 + rdi + 0x1c]
add rdx, rdi
mov r8d, dword [r8 + rdi + 0x20]
add r8, rdi
xor r9d, r9d
nop word [rax + rax]
mov r10d, dword [r8 + r9*4]
add r10, rdi
mov r11d, 4
nop dword [rax]
cmp byte [r10 + r11 - 4], 0
je 0x140001ead
cmp byte [r10 + r11 - 3], 0
je 0x140001ebb
cmp byte [r10 + r11 - 2], 0
je 0x140001ec9
cmp byte [r10 + r11 - 1], 0
je 0x140001fba
cmp byte [r10 + r11], 0
je 0x140001ed0
add r11, 5
cmp r11, 0x36
jne 0x140001e70
mov r11d, 0x32
jmp 0x140001ed9
add r11, 0xfffffffffffffffc
test r11, r11
jne 0x140001ed9
jmp 0x140001fd0
add r11, 0xfffffffffffffffd
test r11, r11
jne 0x140001ed9
jmp 0x140001fd0
add r11, 0xfffffffffffffffe
nop dword [rax]
test r11, r11
je 0x140001fd0
lea r14, [r11 - 1]
mov ebx, r11d
and ebx, 3
cmp r14, 3
jae 0x140001f00
mov ebp, 0x498157
xor r14d, r14d
jmp 0x140001f7f
and r11, 0xfffffffffffffffc
lea r15, [r10 + 3]
mov ebp, 0x498157
xor r14d, r14d
imul r12d, ebp, 0x25aecf
movsx r13d, byte [r15 + r14 - 3]
add r13d, r12d
and r13d, 0xbcedfa
add r13d, ebp
imul ebp, r13d, 0x25aecf
movsx r12d, byte [r15 + r14 - 2]
add r12d, ebp
and r12d, 0xbcedfa
add r12d, r13d
imul ebp, r12d, 0x25aecf
movsx r13d, byte [r15 + r14 - 1]
add r13d, ebp
and r13d, 0xbcedfa
add r13d, r12d
imul r12d, r13d, 0x25aecf
movsx ebp, byte [r15 + r14]
add ebp, r12d
and ebp, 0xbcedfa
add ebp, r13d
add r14, 4
cmp r11, r14
jne 0x140001f10
test rbx, rbx
je 0x140001fb1
add r10, r14
xor r11d, r11d
nop word [rax + rax]
imul r14d, ebp, 0x25aecf
movsx r15d, byte [r10 + r11]
add r15d, r14d
and r15d, 0xbcedfa
add ebp, r15d
inc r11
cmp rbx, r11
jne 0x140001f90
cmp ebp, esi
jne 0x140001fd9
jmp 0x140002043
dec r11
test r11, r11
jne 0x140001ed9
nop word cs:[rax + rax]
mov ebp, 0x498157
cmp ebp, esi
je 0x140002043
inc r9
cmp r9, rax
jne 0x140001e60
mov rax, qword [0x14001bae8]
test rax, rax
je 0x140002064
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x30], xmm1
movaps xmmword [rsp + 0x20], xmm0
xor ecx, ecx
jmp 0x14000201a
add rcx, 2
cmp rcx, 0x20
je 0x14000203e
cmp byte [rsp + rcx + 0x21], 5
jne 0x140002028
cmp byte [rsp + rcx + 0x22], 0xc3
je 0x140002039
cmp byte [rsp + rcx + 0x22], 5
jne 0x140002010
cmp byte [rsp + rcx + 0x23], 0xc3
jne 0x140002010
inc rcx
mov ecx, ecx
add rax, rcx
mov rdi, rax
jmp 0x140002066
mov eax, r9d
movzx eax, word [rcx + rax*2]
mov eax, dword [rdx + rax*4]
add rax, rdi
mov qword [0x14001bae8], rax
mov rdi, rax
cmp esi, 0x6af74b3
jne 0x140001fec
jmp 0x140002066
xor edi, edi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400027b0
mov rax, rdi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret