Function at 0x14000af30
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1401387c0]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r13, rcx
mov qword [rbp - 0x71], rcx
mov qword [rbp - 0x79], rcx
xor r12d, r12d
mov dword [rcx], r12d
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
lfence
mov ecx, 0x50
call fcn.1400bc930
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [r13 + 8], rax
lea rcx, [r13 + 0x18]
mov qword [rcx], r12
mov qword [rcx + 8], r12
mov qword [rcx + 0x10], r12
mov qword [r13 + 0x30], 7
mov qword [r13 + 0x38], 8
mov dword [r13], 0x3f800000
mov r8, qword [r13 + 8]
mov edx, reloc.WS2_32.dll_recv
call fcn.14000b680
nop
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x68]
mov qword [rbp - 0x79], r15
mov esi, r12d
mov dword [rsp + 0x20], r12d
cmp dword [r15 + 0xc], r12d
jbe 0x14000b3bb
mov r14d, r12d
mov qword [rsp + 0x28], r12
nop dword [rax]
nop dword [rax + rax]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov qword [rbp - 0x21], r12
lfence
mov ecx, 0x200
call fcn.140001d80
mov rdx, rax
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x29], 0xff
mov qword [rbp - 0x21], 0xff
movzx eax, r12w
mov rdi, rdx
mov ecx, 0xff
rep stosw word [rdi], ax
mov word [rdx + 0x1fe], r12w
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], r12
lfence
mov ecx, 0x200
call fcn.140001d80
mov rdx, rax
mov qword [rbp - 0x59], rax
mov qword [rbp - 0x49], 0xff
mov qword [rbp - 0x41], 0xff
movzx eax, r12w
mov rdi, rdx
mov ecx, 0xff
rep stosw word [rdi], ax
mov word [rdx + 0x1fe], r12w
mov eax, dword [r15 + 0x14]
add rax, r14
mov eax, dword [rax + r15 + 4]
lea rbx, [rax + rax*2]
mov edi, dword [r15 + 0x10]
add rdi, r15
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rcx, qword [rbp - 0x39]
mov r8d, dword [rdi + rbx*8 + 0xc]
mov edx, dword [rdi + rbx*8 + 4]
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rdi + rbx*8 + 0x10]
lea rcx, [rbp - 0x59]
cmp qword [rbp - 0x41], 7
cmova rcx, qword [rbp - 0x59]
mov r8d, dword [rax + r15 + 0x10]
mov edx, dword [rax + r15 + 0xc]
add rdx, r15
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rdx, qword [rbp - 0x39]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000b103
lea rcx, [rbp - 0x39]
call fcn.14000ba30
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 7
cmova rdx, qword [rbp - 0x59]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000b130
lea rcx, [rbp - 0x59]
call fcn.14000ba30
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 7]
call fcn.14000d1b0
nop
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x19]
call fcn.14000d1b0
nop
lea r8, [rbp + 7]
lea rdx, [rbp - 0x69]
mov rcx, r13
call fcn.14000abc0
mov rdi, qword [rax]
add rdi, 0x30
lea rax, [rbp - 0x19]
cmp rdi, rax
je 0x14000b27f
mov rsi, qword [rbp - 9]
lea r12, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova r12, qword [rbp - 0x19]
mov r14, qword [rdi + 0x18]
cmp rsi, r14
ja 0x14000b1c6
mov rbx, rdi
cmp r14, 0xf
jbe 0x14000b1ab
mov rbx, qword [rdi]
mov qword [rdi + 0x10], rsi
mov r8, rsi
mov rdx, r12
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rsi], 0
jmp 0x14000b273
movabs rdx, 0x7fffffffffffffff
cmp rsi, rdx
ja 0x14000b40e
mov rbx, rsi
or rbx, 0xf
cmp rbx, rdx
jbe 0x14000b1ea
mov rbx, rdx
jmp 0x14000b20b
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r14, rax
jbe 0x14000b200
mov rbx, rdx
jmp 0x14000b20b
lea rax, [rcx + r14]
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
call fcn.140001d80
mov r15, rax
mov qword [rdi + 0x10], rsi
mov qword [rdi + 0x18], rbx
mov r8, rsi
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov byte [r15 + rsi], 0
cmp r14, 0xf
jbe 0x14000b26c
mov rcx, qword [rdi]
lea rdx, [r14 + 1]
cmp rdx, 0x1000
jb 0x14000b264
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000b3eb
mov rcx, r8
lfence
call fcn.1400bc96c
mov qword [rdi], r15
mov r15, qword [rbp - 0x79]
mov esi, dword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
xor r12d, r12d
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14000b2ba
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b2b5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b3f2
call fcn.1400bc96c
mov qword [rbp - 9], r12
mov qword [rbp - 1], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x19], 0
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14000b305
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b300
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b3f9
call fcn.1400bc96c
mov qword [rbp + 0x17], r12
mov qword [rbp + 0x1f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 7], 0
mov rdx, qword [rbp - 0x41]
cmp rdx, 7
jbe 0x14000b355
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b350
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b400
call fcn.1400bc96c
mov qword [rbp - 0x49], r12
mov qword [rbp - 0x41], 7
mov word [rbp - 0x59], r12w
mov rdx, qword [rbp - 0x21]
cmp rdx, 7
jbe 0x14000b3a2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b39d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000b407
call fcn.1400bc96c
inc esi
mov dword [rsp + 0x20], esi
add r14, 8
mov qword [rsp + 0x28], r14
cmp esi, dword [r15 + 0xc]
jb 0x14000b000
mov rax, r13
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400bc910
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140007fd0
int3