Function at 0x170010c70
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
lock sub dword [rcx + 4], 1
jne 0x170010e35
mov rdi, rcx
cmp dword [rcx + 0x30], 0
je 0x170010e46
xor ecx, ecx
mov qword [rsp + 0x28], rdi
jmp 0x170010d95
mov rdi, qword gs:[0x30]
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rbx]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x48]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x50]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x80]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
lea rcx, [r12 + r13]
add rcx, 0x70
call fcn.17001c110
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 8]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x10]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x18]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x20]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rdi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r12 + r13 + 0x28]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rcx, qword [rsp + 0x30]
add rcx, 1
mov rdi, qword [rsp + 0x28]
mov eax, dword [rdi + 0x30]
cmp rcx, rax
jae 0x170010e46
mov r12, qword [rdi + 0x28]
mov qword [rsp + 0x30], rcx
imul r13, rcx, 0x98
lea rbx, [r12 + r13]
add rbx, 0x60
cmp dword [r12 + r13 + 0x68], 0
je 0x170010cb0
lea rdi, [r12 + r13]
add rdi, 0x68
mov esi, 0x18
xor ebp, ebp
nop dword [rax + rax]
mov r14, qword [rbx]
lea rcx, [r14 + rsi]
call fcn.17001c110
mov r15, qword gs:[0x30]
mov rax, qword [r15 + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r14 + rsi - 0x18]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [r15 + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r14 + rsi - 0x10]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [r15 + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [r14 + rsi - 8]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
add rbp, 1
mov eax, dword [rdi]
add rsi, 0x28
cmp rbp, rax
jb 0x170010dd0
jmp 0x170010cb0
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rsi, qword gs:[0x30]
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x10]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x20]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x28]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x48]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x40]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x60]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x68]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x70]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x78]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x50]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
mov r8, qword [rdi + 0x58]
xor edx, edx
call sym.ntdll.dll_RtlFreeHeap
mov dword [rdi], 0
mov rax, qword [rsi + 0x60]
mov rcx, qword [rax + 0x30]
xor edx, edx
mov r8, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sym.ntdll.dll_RtlFreeHeap