Function at 0x140002b50
Capabilities:
Access peb ldr_data

Disassembly:
push rbp
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x308
lea rbp, [rsp + 0x80]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [0x14001000c], eax
xor esi, esi
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rsi*4 + 0xd0], eax
inc rsi
cmp rsi, 0x65
jne 0x140002b80
lea rcx, [rbp + 0xd0]
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov eax, dword [0x14001000c]
mov ecx, dword [0x140010008]
mov edx, ecx
sub edx, eax
add edx, 0x60
mov rdx, qword gs:[rdx]
mov rdx, qword [rdx + 0x18]
mov rbx, qword [rdx + 0x10]
add rdx, 0x10
cmp rbx, rdx
je 0x140002c32
neg rax
jmp 0x140002c08
mov rbx, qword [rbx]
cmp rbx, rdx
je 0x140002c32
mov rdi, qword [rbx + 0x60]
lea rdi, [rdi + rax*2]
movzx esi, word [rdi + rcx*2 + 6]
or esi, 0x20
cmp esi, 0x6e
jne 0x140002c00
cmp word [rdi + rcx*2 + 0x10], 0x2e
jne 0x140002c00
mov rdi, qword [rbx + 0x30]
mov qword [0x140010918], rdi
jmp 0x140002c00
movabs rax, 0xcecad0c1d2d1fe
mov qword [rbp + 0x26f], rax
movabs rax, 0xfed4d3c8edc2daf2
mov qword [rbp + 0x268], rax
lea rcx, [rbp + 0x268]
mov edx, 0xf
call fcn.140001250
mov rax, qword [0x140010918]
mov qword [rbp + 0xd0], rax
mov rdx, rcx
mov rcx, qword [rbp + 0xd0]
mov eax, dword [rcx + 0x3c]
add rax, rcx
mov rbx, rax
lea rax, [rbx + 0x18]
mov rax, qword [rax + 0x70]
mov eax, eax
add rax, rcx
mov r10d, dword [rax + 0x20]
add r10, rcx
mov r11d, dword [rax + 0x24]
add r11, rcx
mov r12d, dword [rax + 0x1c]
add r12, rcx
sub rsp, 0x20
mov qword [rsp], r10
mov qword [rsp + 8], r11
mov qword [rsp + 0x10], r12
mov qword [rsp + 0x18], rcx
xor r13, r13
mov ecx, dword [r10 + r13*4]
add rcx, qword [rsp + 0x18]
inc r13
call fcn.140002cd9
cmp al, 1
jne 0x140002cc2
jmp 0x140002d19
sub r13, 1
mov r11, qword [rsp + 8]
mov r12, qword [rsp + 0x10]
mov r11w, word [r11 + r13*2]
xor r13, r13
mov r13w, r11w
mov r13d, dword [r12 + r13*4]
add r13, qword [rsp + 0x18]
mov qword [rbp - 0x60], r13
add rsp, 0x20
mov rax, qword [rbp - 0x60]
mov qword [0x140010928], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xd
lea rdx, [0x14000d212]
lea rcx, [rbp - 0x60]
call fcn.140001a10
xor edi, edi
nop word [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140002d80
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xc
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010920], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140002e10
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
movabs rax, 0x9fc2c5ced0d0dbea
mov qword [rbp + 0x278], rax
mov dword [rbp + 0x280], 0xd0dfd8
mov rsi, qword [0x140010920]
lea rcx, [rbp + 0x278]
mov edx, 0xc
call fcn.140001250
mov rcx, rax
call rsi
mov rsi, rax
mov qword [0x140010958], rax
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xc
lea rdx, [0x14000d21f]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140002ec0
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xb
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010960], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140002f50
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010958]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xf
lea rdx, [0x14000d22b]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140002fd0
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xe
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010968], rax
mov rsi, qword [0x140010958]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0x13
lea rdx, [0x14000d23a]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003080
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0x12
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010970], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003110
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010958]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0x13
lea rdx, [0x14000d24d]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140003190
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0x12
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010978], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xd
lea rdx, [0x14000d260]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003240
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xc
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x1400109c8], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x1400032d0
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xd
lea rdx, [0x14000d26d]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140003350
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xc
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x1400109f8], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0x11
lea rdx, [0x14000d27a]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003400
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0x10
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010a00], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xe
lea rdx, [0x14000d28b]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x1400034b0
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xd
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010a08], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003540
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xe
lea rdx, [0x14000d299]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x1400035c0
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xd
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x1400109e8], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xc
lea rdx, [0x14000d2a7]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003670
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xb
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010a10], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003700
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 6
lea rdx, [0x14000d2b3]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x140003780
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 5
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x1400109d8], rax
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0x13
lea rdx, [0x14000d2b9]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop dword [rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003830
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0x12
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010a18], rax
call fcn.140004f30
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0xd
lea rdx, [0x14000d2cc]
lea rcx, [rbp - 0x60]
call fcn.140001a10
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x1400038e0
lea rcx, [rbp + 0xd0]
xor ebx, ebx
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0xc
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010938], rax
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rbx*4 + 0xd0], eax
inc rbx
cmp rbx, 0x65
jne 0x140003970
lea rcx, [rbp + 0xd0]
xor edi, edi
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov rsi, qword [0x140010918]
mov r8d, dword [0x140010008]
sub r8d, dword [0x14001000c]
add r8d, 0x14
lea rdx, [0x14000d2d9]
lea rcx, [rbp - 0x60]
call fcn.140001a10
nop word cs:[rax + rax]
call fcn.140001230
cdqe
imul rcx, rax, 0x10624dd3
mov rdx, rcx
shr rdx, 0x3f
sar rcx, 0x26
add ecx, edx
imul ecx, ecx, 0x3e8
sub eax, ecx
mov dword [rbp + rdi*4 + 0xd0], eax
inc rdi
cmp rdi, 0x65
jne 0x1400039f0
lea rcx, [rbp + 0xd0]
xor edx, edx
mov r8d, 0x64
call fcn.140004d30
mov r8d, dword [section..data]
sub r8d, dword [0x140010008]
add r8d, dword [0x14001000c]
lea rdi, [rbp - 0x60]
mov rcx, rdi
mov edx, 0x13
call section..text
mov rcx, rsi
mov rdx, rdi
call qword [0x140010928]
mov qword [0x140010940], rax
add rsp, 0x308
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop rbp
ret