Function at 0x140086160
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x1400ae038]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov dword [rsp + 0x28], r9d
mov qword [rbp - 0x60], r8
xor r12d, r12d
movabs rax, 0x89a2bf6b5a84b994
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x70], rax
movabs rax, 0xcd225f7215c8bbd5
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x78], rax
movabs rax, 0x2fa9fac64b93cc0
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x80], rax
movabs rcx, 0xc731fd6de56b8d7a
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x78], rax
movabs rbx, 0xecd6cc1209f0dcd3
mov qword [rsp + 0x20], rbx
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x60], rax
movabs rdi, 0xbf43281f67a1fdb8
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x68], rax
movabs rax, 0x2fafac006d868a5
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x20], rcx
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x78], rax
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
xorps xmm1, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x80], xmm1
xorps xmm0, xmm0
movups xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], r12
mov qword [rbp + 0x40], r12
lea rax, [rsp + 0x70]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x140086290
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x28]
call fcn.140006aa0
nop
lea rcx, [rbp + 0x28]
cmp qword [rbp + 0x40], 0x10
cmovae rcx, qword [rbp + 0x28]
mov rax, qword [section..data]
movabs r8, 0x90001208c00018be
mov rdx, qword [rbp + 0x38]
call rax
mov qword [rbp - 0x68], rax
mov rax, qword [rbp + 0x38]
mov qword [rbp - 0x70], rax
movabs rax, 0xdee5a0776782b9b8
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x30], rcx
movabs rax, 0xbf43281f0bcd9996
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x20], rbx
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x58], rax
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r12
mov qword [rbp - 0x40], r12
lea rax, [rsp + 0x30]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140086350
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x58]
call fcn.140006aa0
lea rax, [rbp - 0x58]
mov qword [rbp + 0x50], rax
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x18]
call fcn.140005a70
mov r15, rax
mov qword [rsp + 0x30], rax
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rax, qword [rdx + 0x18]
mov qword [rsp + 0x68], rax
mov rcx, rax
movabs r13, 0x7fffffffffffffff
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
cmp qword [rax + 0x30], 0
je 0x140086735
mov rdx, qword [rax + 0x60]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8, r14
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400863d4
lea rcx, [rsp + 0x40]
call fcn.140006960
nop
lea rcx, [rsp + 0x40]
mov r9, qword [rsp + 0x58]
cmp r9, 8
setae dl
mov r8, qword [rsp + 0x40]
cmovae rcx, r8
mov rax, qword [rsp + 0x50]
lea rsi, [rcx + rax*2]
lea rdi, [rsp + 0x40]
test dl, dl
cmovne rdi, r8
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
cmp rdi, rsi
jne 0x14008643e
mov rcx, r12
mov qword [rbp + 0x18], rcx
mov r14d, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x20], r14
mov byte [rbp + 8], 0
jmp 0x140086541
mov rax, rsi
sub rax, rdi
sar rax, 1
mov rdx, r12
mov qword [rbp + 0x18], rdx
mov ebx, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x20], rbx
cmp rax, r13
ja 0x1400869ff
cmp rax, 0x10
jb 0x1400864f0
mov rbx, rax
or rbx, 0xf
cmp rbx, r13
jbe 0x14008647b
mov rbx, r13
jmp 0x140086488
cmp rbx, 0x16
mov eax, reloc.WS2_32.dll_shutdown
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
cmovb rcx, r14
cmp rcx, 0x1000
jb 0x1400864cf
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140086a05
mov rcx, rax
call fcn.14008bba8
mov rcx, rax
test rax, rax
je 0x14008681c
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rbp + 0x18]
jmp 0x1400864e2
test rcx, rcx
je 0x1400864df
call fcn.14008bba8
mov rdx, qword [rbp + 0x18]
jmp 0x1400864e2
mov rax, r12
mov qword [rbp + 8], rax
mov qword [rbp + 0x20], rbx
nop word [rax + rax]
lea rcx, [rbp + 8]
cmp rbx, 0x10
cmovae rcx, qword [rbp + 8]
movzx eax, byte [rdi]
mov byte [rdx + rcx], al
mov rdx, qword [rbp + 0x18]
inc rdx
mov qword [rbp + 0x18], rdx
add rdi, 2
cmp rdi, rsi
je 0x14008651d
mov rbx, qword [rbp + 0x20]
jmp 0x1400864f0
lea rax, [rbp + 8]
cmp qword [rbp + 0x20], 0x10
cmovae rax, qword [rbp + 8]
mov byte [rdx + rax], 0
mov r9, qword [rsp + 0x58]
mov r8, qword [rsp + 0x40]
mov r14, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x18]
cmp r9, 8
jb 0x140086584
lea rdx, [r9*2 + 2]
mov rax, r8
cmp rdx, 0x1000
jb 0x140086574
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400868b2
mov rcx, r8
call fcn.14008bba0
mov r14, qword [rbp + 0x20]
mov rcx, qword [rbp + 0x18]
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r12w
lea rdi, [rbp + 8]
cmp r14, 0x10
setae al
mov r11, qword [rbp + 8]
cmovae rdi, r11
lea rdx, [rbp + 8]
test al, al
je 0x1400865bc
mov rbx, r11
lea rsi, [rcx + r11]
jmp 0x1400865c4
lea rsi, [rcx + rdx]
lea rbx, [rbp + 8]
cmp rbx, rsi
je 0x1400865ec
sub rdi, rbx
nop dword [rax]
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + rdi], al
inc rbx
cmp rbx, rsi
jne 0x1400865d0
mov r14, qword [rbp + 0x20]
mov r11, qword [rbp + 8]
mov rdi, r15
lea r13, [r15 + 0x18]
mov rcx, qword [r13]
lea r12, [r15 + 0x10]
mov qword [rsp + 0x60], r12
cmp rcx, 0x10
jb 0x140086612
mov rdi, qword [r15]
mov rsi, rdi
add rsi, qword [r12]
jmp 0x140086622
mov rsi, qword [r12]
add rsi, r15
mov rbx, r15
cmp rcx, 0x10
jb 0x140086625
mov rbx, qword [r15]
cmp rbx, rsi
je 0x14008664c
sub rdi, rbx
nop dword [rax]
movzx ecx, byte [rbx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_tolower]
mov byte [rbx + rdi], al
inc rbx
cmp rbx, rsi
jne 0x140086630
mov r14, qword [rbp + 0x20]
mov r11, qword [rbp + 8]
mov rbx, r15
cmp qword [r13], 0x10
jb 0x140086659
mov rbx, qword [r15]
lea r10, [rbp + 8]
cmp r14, 0x10
setae dil
cmovae r10, r11
mov qword [0x1400b03c0], r10
cmp byte [r10], 0
je 0x1400866d6
mov r9, r10
nop dword [rax]
mov rcx, rbx
call fcn.140086130
mov ecx, eax
mov rdx, rbx
test eax, eax
je 0x140086823
movzx eax, byte [r9]
test al, al
je 0x1400866ad
cmp al, byte [rdx]
jne 0x1400866ad
inc r9
inc rdx
sub rcx, 1
jmp 0x14008668f
test rcx, rcx
je 0x140086823
mov ecx, eax
movzx eax, byte [rdx]
cmp ecx, eax
je 0x140086823
inc r10
mov qword [0x1400b03c0], r10
mov r9, r10
cmp byte [r10], 0
jne 0x140086680
test dil, dil
je 0x14008670c
lea rdx, [r14 + 1]
mov rax, r11
cmp rdx, 0x1000
jb 0x140086704
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400868b2
mov rcx, r11
call fcn.14008bba0
xor r12d, r12d
mov qword [rbp + 0x18], r12
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], r12b
mov rbx, qword [rsp + 0x60]
mov rax, qword [rsp + 0x20]
lea r14, [r12 - 1]
mov rcx, qword [rsp + 0x68]
jmp 0x14008673d
lea r13, [r15 + 0x18]
lea rbx, [r15 + 0x10]
cmp rcx, rax
jne 0x14008639e
mov rdx, qword [r13]
cmp rdx, 0x10
jb 0x140086780
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x14008677b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400868b9
mov rcx, r8
call fcn.14008bba0
mov rsi, r12
mov r12, rbx
mov qword [r12], 0
mov qword [r13], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
movsxd rax, dword [rsi + 0x3c]
mov r14d, dword [rax + rsi + 0x88]
add r14, rsi
mov r12d, dword [r14 + 0x20]
add r12, rsi
mov r13d, dword [r14 + 0x24]
add r13, rsi
mov rdx, 0xffffffffffffffff
mov qword [rsp + 0x20], rdx
lea rbx, [0x1400931c9]
xor edi, edi
cmp dword [r14 + 0x18], 1
je 0x1400868d2
nop word [rax + rax]
mov ebx, dword [r12 + rdi*4]
add rbx, rsi
mov rax, qword [section..data]
movabs r8, 0x90001208c00018be
mov rdx, qword [rbp - 0x70]
mov rcx, rbx
call rax
cmp qword [rbp - 0x68], rax
je 0x1400868c0
inc edi
mov eax, dword [r14 + 0x18]
dec eax
cmp edi, eax
jb 0x1400867e0
jmp 0x1400868cb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rsi, qword [rsp + 0x20]
mov rsi, qword [rsi + 0x30]
cmp r14, 0x10
jb 0x14008685f
lea rdx, [r14 + 1]
mov rax, r11
cmp rdx, 0x1000
jb 0x140086857
add rdx, 0x27
mov r11, qword [r11 - 8]
sub rax, r11
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400868b2
mov rcx, r11
call fcn.14008bba0
mov qword [rbp + 0x18], 0
mov qword [rbp + 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp + 8], 0
mov rdx, qword [r13]
cmp rdx, 0x10
jb 0x140086786
mov rcx, qword [r15]
inc rdx
cmp rdx, 0x1000
jb 0x1400868a8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400868b9
mov rcx, r8
call fcn.14008bba0
jmp 0x140086786
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movzx eax, word [r13 + rdi*2]
mov qword [rsp + 0x20], rax
mov rdx, 0xffffffffffffffff
mov eax, dword [r14 + 0x1c]
add rax, rsi
mov rcx, qword [rsp + 0x20]
mov edi, dword [rax + rcx*4]
add rdi, rsi
xorps xmm0, xmm0
movups xmmword [rbp - 0x38], xmm0
xor r14d, r14d
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
inc rdx
cmp byte [rbx + rdx], r14b
jne 0x1400868f6
mov r8, rdx
mov rdx, rbx
lea rcx, [rbp - 0x38]
call fcn.140006aa0
mov r8, rdi
lea rdx, [rbp - 0x38]
mov rcx, rsi
call fcn.140088750
mov rbx, r14
test al, al
cmovne rbx, rdi
lea rdi, [rbp - 0x58]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x140086960
mov rcx, qword [rdi]
inc rdx
cmp rdx, 0x1000
jb 0x14008695b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400869c6
mov rcx, r8
call fcn.14008bba0
mov qword [rdi + 0x10], r14
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], 0
mov qword [0x1400b0118], rbx
mov r9d, dword [rsp + 0x28]
mov r8, qword [rbp - 0x60]
xor edx, edx
mov ecx, 0x52534d42
call rbx
test eax, eax
setne bl
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x1400869d2
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400869cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400869cd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14008bba0
movzx eax, bl
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14008bb80
mov rbx, qword [rsp + 0x1d0]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001560
nop
call fcn.1400014c0
int3