Function at 0x1400011e0
Capabilities:
Access peb ldr_data
Resolve function by djb2 hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x250
mov r15d, edx
mov rdi, rcx
test rcx, rcx
je 0x140001562
test edx, edx
je 0x140001562
movsxd rax, dword [rcx + 0x3c]
cmp dword [rax + rcx], 0x4550
jne 0x140001601
mov esi, dword [rax + rcx + 0x88]
xor ebp, ebp
mov eax, dword [rax + rcx + 0x8c]
add rsi, rcx
mov ebx, ebp
mov dword [rsp + 0x290], eax
mov r12d, dword [rsi + 0x20]
mov r13d, dword [rsi + 0x1c]
add r12, rcx
mov edx, dword [rsi + 0x24]
add r13, rcx
add rdx, rcx
mov qword [rsp + 0x2a0], rdx
cmp dword [rsi + 0x14], ebx
jbe 0x140001292
nop dword [rax]
mov eax, ebx
mov ecx, dword [r12 + rax*4]
movzx eax, word [rdx + rax*2]
add rcx, rdi
mov r14d, dword [r13 + rax*4]
add r14, rdi
call fcn.140001650
cmp eax, r15d
je 0x140001312
mov rdx, qword [rsp + 0x2a0]
inc ebx
cmp ebx, dword [rsi + 0x14]
jb 0x140001260
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0x208
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x140001601
lea rbx, str.C:Users_adm_consultantDesktopMaldevAcademyLdr.1_mainMaldevAcademyLdr.1_mainLoaderApiHashing.c
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
test rax, rax
je 0x1400012e2
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
lea rbx, [rax + 1]
mov r9, rbx
mov dword [rsp + 0x20], 0x4e
mov r8d, r15d
lea rdx, str.____GetProcAddressH_Failed:_Function_Of_Hash_0x_08X_Was_Not_Found____s._d_n
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
mov ecx, 0xfffffff5
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
jmp 0x1400015d6
cmp r14, rsi
jb 0x14000155a
mov eax, dword [rsp + 0x290]
add rax, rsi
cmp r14, rax
jae 0x14000155a
mov r15d, 0x104
lea rcx, [rsp + 0x30]
mov r8d, r15d
xor edx, edx
call fcn.140001e80
mov rbx, 0xffffffffffffffff
mov edi, ebp
mov r8, rbx
nop
inc r8
cmp byte [r14 + r8], dil
jne 0x140001350
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.140001e10
mov ecx, ebp
lea rax, [rsp + 0x30]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], cl
jne 0x140001370
test rbx, rbx
je 0x1400013a0
lea rdx, [rsp + 0x30]
cmp byte [rdx], 0x2e
je 0x140001396
inc ecx
inc rdx
movsxd rax, ecx
cmp rax, rbx
jb 0x140001382
jmp 0x1400013a0
movsxd rax, ecx
mov edi, ecx
mov byte [rsp + rax + 0x30], bpl
mov eax, edi
lea rsi, [rsp + 0x31]
add rsi, rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbx, qword [rcx + 0x20]
test rbx, rbx
je 0x140001476
cmp qword [rbx + 0x50], rbp
je 0x14000146a
cmp word [rbx + 0x48], r15w
jae 0x14000146a
mov r8, r15
lea rcx, [rsp + 0x140]
xor edx, edx
call fcn.140001e80
mov rax, qword [rbx + 0x50]
mov r9d, ebp
cmp word [rax], bp
je 0x140001433
mov r10, rbp
mov rcx, rbp
nop dword [rax]
movzx r8d, byte [rcx + rax]
lea eax, [r8 + 0x20]
movzx ecx, al
lea edx, [r8 - 0x41]
cmp dl, 0x19
cmova ecx, r8d
inc r9d
mov byte [rsp + r10 + 0x140], cl
mov rax, qword [rbx + 0x50]
mov r10d, r9d
lea rcx, [r9 + r9]
cmp word [rcx + rax], bp
jne 0x140001400
mov eax, r9d
mov byte [rsp + rax + 0x140], bpl
mov rcx, qword [rbx + 0x50]
call fcn.140001650
cmp eax, 0x7040ee75
je 0x140001554
lea rcx, [rsp + 0x140]
call fcn.140001650
cmp eax, 0x7040ee75
je 0x140001554
mov rbx, qword [rbx]
test rbx, rbx
jne 0x1400013c4
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0x208
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x14000151f
lea rbx, str.C:Users_adm_consultantDesktopMaldevAcademyLdr.1_mainMaldevAcademyLdr.1_mainLoaderApiHashing.c
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
test rax, rax
je 0x1400014c6
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
lea rbx, [rax + 1]
mov r9, rbx
mov dword [rsp + 0x20], 0x84
mov r8d, 0x7040ee75
lea rdx, str.____GetModuleHandleH_Failed:_Module_Of_Hash_0x_08X_Was_Not_Found____s._d_n
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
mov ecx, 0xfffffff5
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor r9d, r9d
mov qword [rsp + 0x20], rbp
mov rcx, rax
mov r8d, ebx
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov edx, 0x5fbff0fb
mov rcx, rbp
call fcn.1400011e0
mov rdi, rax
test rax, rax
je 0x14000155a
mov rcx, rsi
call fcn.140001650
lea rcx, [rsp + 0x30]
mov ebx, eax
call rdi
mov rcx, rax
mov edx, ebx
call fcn.1400011e0
jmp 0x140001603
mov rbp, qword [rbx + 0x20]
jmp 0x14000151f
mov rax, r14
jmp 0x140001603
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov r8d, 0x208
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
je 0x140001601
lea rbx, str.C:Users_adm_consultantDesktopMaldevAcademyLdr.1_mainMaldevAcademyLdr.1_mainLoaderApiHashing.c
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
test rax, rax
je 0x1400015ae
mov edx, 0x5c
mov rcx, rbx
call fcn.140001eb0
lea rbx, [rax + 1]
mov r9d, 0x15
lea rdx, str.____GetProcAddressH_Failed:_Invalid_Parameters____s._d_n
mov r8, rbx
mov rcx, rdi
call qword [sym.imp.USER32.dll_wsprintfA]
mov ecx, 0xfffffff5
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
xor ebp, ebp
xor r9d, r9d
mov qword [rsp + 0x20], rbp
mov r8d, ebx
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_WriteConsoleA]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rdi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
mov rbx, qword [rsp + 0x298]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret