Function at 0x140001050
Capabilities:
Access peb ldr_data
Parse pe header

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x258]
sub rsp, 0x330
and qword [rsp + 0x50], 0
lea r15, [0x14002e70a]
xor r14d, r14d
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rsp + 0x40], xmm0
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
lea r13d, [r14 + 4]
lea r12d, [r14 + 0x28]
mov dword [rsp + 0x58], r14d
cmp rbx, qword [rsp + 0x50]
je 0x1400010bb
mov dword [rbx], r14d
add rbx, r13
mov qword [rsp + 0x48], rbx
jmp 0x1400010d7
lea r8, [rsp + 0x58]
mov rdx, rbx
lea rcx, [rsp + 0x40]
call fcn.140005764
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rax, rbx
sub rax, rdi
sar rax, 2
cmp rax, 0x100000
jbe 0x140001191
mov rdx, qword [rsp + 0x50]
cmp rdi, rbx
mov rax, rbx
mov rcx, rdi
cmovne rbx, rdi
cmove rcx, rax
mov qword [rsp + 0x48], rbx
cmp rcx, rdx
je 0x140001191
cmp rdi, rcx
jne 0x14000116c
test rdi, rdi
je 0x140001191
sub rdx, rdi
mov rax, rdi
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x140001147
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001ded
mov rcx, rdi
call fcn.1400098ac
and qword [rsp + 0x50], 0
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rsp + 0x40], xmm0
vpextrq rbx, xmm0, 1
vmovq rdi, xmm0
jmp 0x140001191
sub rcx, rdi
lea rdx, [rsp + 0x78]
sar rcx, 2
mov qword [rsp + 0x78], rcx
lea rcx, [rsp + 0x40]
call fcn.14000472c
mov rbx, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rax, rbx
sub rax, rdi
cmp rax, 0x1000000
jne 0x1400013fd
and qword [rsp + 0x68], 0
mov rcx, r12
and qword [rsp + 0x70], 0
call fcn.1400098b4
and dword [rbp + 8], 0
mov rsi, rax
mov qword [rbp], rax
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rsp + 0x68], rax
cmp byte [rax + 0x19], 0
jne 0x1400011e4
cmp dword [rax + 0x1c], 0
jle 0x140001237
movabs rax, 0x666666666666666
cmp qword [rsp + 0x70], rax
je 0x140001de7
mov rcx, r12
call fcn.1400098b4
vmovups xmm0, xmmword [rbp]
mov r8, rax
lea rdx, [rbp - 0x10]
lea rcx, [rsp + 0x68]
and dword [rax + 0x1c], 0
and dword [rax + 0x20], 0
mov qword [rax], rsi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rsi
and word [rax + 0x18], 0
vmovdqu xmmword [rbp - 0x10], xmm0
call fcn.140005248
mov rsi, rax
lea rcx, [rbp + 0x110]
mov dword [rsi + 0x20], r14d
call fcn.140003a18
lea rcx, [rbp + 0x120]
call fcn.1400043a4
and qword [rbp - 0x60], 0
mov cl, 1
call fcn.1400089b8
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x40], rax
call fcn.140004c50
lea rcx, [rbp - 0x48]
mov qword [rbp - 0x58], rax
call fcn.14000429c
mov rdx, qword [rbp - 0x60]
mov qword [rbp - 0x50], rax
test rdx, rdx
je 0x14000136d
mov ecx, dword [rdx + 0x28]
lea r9, [rbp - 0x58]
mov eax, dword [rdx + 0x20]
mov r8, r15
mov dword [rsp + 0x38], 0x10
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], ecx
lea rcx, [rbp + 0x20]
mov qword [rsp + 0x20], rdx
lea rdx, str.___n_n
call fcn.140005bd0
lea rcx, [rbp + 0x20]
call fcn.140005fc8
test al, al
jne 0x140001321
mov eax, dword [rbp + 0xdc]
lea rdx, [0x14002e705]
btr eax, 0xd
bts eax, 8
mov dword [rbp + 0xdc], eax
jmp 0x1400012fa
mov qword [rbp + 0xc8], rsi
call fcn.140005fc8
test al, al
jne 0x140001321
lea rdx, [rsi + 1]
xor r9d, r9d
lea rcx, [rbp + 0x20]
mov r8, r15
call fcn.140005d54
lea rcx, [rbp + 0x20]
mov rsi, rax
cmp rax, r15
jne 0x1400012e6
mov qword [rbp + 0xc8], r15
call fcn.140005fc8
lea rcx, [rbp + 0x20]
call fcn.140005aa8
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14000136d
or eax, 0xffffffff
lock xadd dword [rcx + 0x2c], eax
cmp eax, 1
jne 0x140001363
mov rbx, qword [rbp - 0x60]
test rbx, rbx
je 0x140001363
mov rcx, rbx
lea rax, [rbx + 0x10]
mov rbx, qword [rax]
mov edx, 1
and qword [rax], 0
mov rax, qword [rcx]
call qword [rax]
jmp 0x140001344
mov rdi, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x48]
and qword [rbp - 0x60], 0
mov rcx, qword [rbp - 0x40]
test rcx, rcx
je 0x140001394
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x140001394
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8]
lea rcx, [rbp + 0x1c8]
call fcn.14000393c
lea rax, [0x14002e878]
lea rcx, [rbp + 0x1c8]
mov qword [rbp + 0x1c8], rax
call fcn.140008c84
mov rcx, qword [rsp + 0x68]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x1400013f5
mov r8, qword [rsi + 0x10]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x68]
call fcn.140005710
mov rcx, rsi
mov rdx, r12
mov rsi, qword [rsi]
call fcn.1400098ac
cmp byte [rsi + 0x19], 0
je 0x1400013c9
mov rcx, qword [rsp + 0x68]
mov rdx, r12
call fcn.1400098ac
inc r14
cmp r14, 0x400000
jl 0x1400010a2
mov r9d, 0x2010
lea r8, str.Error_encountered
lea rdx, str.An_error_was_encountered_performing_the_requested_operation:_n_nIO_Error:_The_Network_Adapter_could_not_establish_the_connection._n_nVendor_Code:_0x80004005_n
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword gs:[0x30]
mov r8d, 5
mov rcx, qword [rax + 0x60]
and dword [rbp - 0x80], 0
mov dword [rbp - 0x7c], r13d
mov rbx, qword [rcx + 0x18]
mov ecx, 0x1046c2c1
add rbx, 0x20
mov rax, qword [rbx]
mov rdx, qword [rax + 0x50]
call fcn.140008200
mov r8d, 0xc2f7ba7
mov edx, eax
mov ecx, 0x9137268c
mov edi, eax
call fcn.140002000
mov r8d, eax
mov edx, 0x77f7e9c
mov rcx, rbx
call fcn.140007ed0
mov rsi, rax
test rax, rax
je 0x140001d88
mov r8d, 0xf116ccf
mov edx, edi
mov ecx, 0x70184c69
call fcn.140002000
mov r8d, eax
mov edx, 0x49482e14
mov rcx, rbx
call fcn.140007ed0
test rax, rax
je 0x140001d88
xor edx, edx
mov rcx, rsi
call fcn.140001000
mov r8d, 0xd3a59232
mov edx, edi
mov ecx, 0xa365f18b
mov r15, rax
call fcn.140002000
mov r9d, eax
mov r8d, 0x2dc51a75
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
test rax, rax
je 0x140001d88
mov r8d, 0xaefb0f9f
mov edx, edi
mov ecx, 0x9e05ce96
call fcn.140002000
mov r9d, eax
mov r8d, 0x91d165cd
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140001d88
mov r8d, 0x11793279
mov edx, edi
mov ecx, 0x2f6e719d
call fcn.140002000
mov r9d, eax
mov r8d, 0xb127f58f
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140001d88
mov r8d, 0xe1fe340b
mov edx, edi
mov ecx, 0xe850b31c
call fcn.140002000
mov r9d, eax
mov r8d, 0xcdc16f2a
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
test rax, rax
je 0x140001d88
call rax
mov r14, rax
test rax, rax
je 0x140001d88
mov r8d, 0xf4b9228c
mov edx, edi
mov ecx, 0x7f01fb4f
call fcn.140002000
mov r8d, eax
mov edx, 0x84238d84
mov rcx, rbx
call fcn.140007ed0
mov r12, rax
test rax, rax
je 0x140001d88
xor edx, edx
mov rcx, rax
call fcn.140001000
mov r8d, 0x3cede108
mov edx, edi
mov ecx, 0xbad4ad92
mov rbx, rax
call fcn.140002000
mov r9d, eax
mov r8d, 0x25c972d9
mov rdx, rbx
mov rcx, r12
call fcn.140001f28
mov rbx, rax
test rax, rax
je 0x140001d88
mov r8, r13
mov rcx, r14
mov r13d, 8
mov edx, r13d
call rbx
mov qword [rsp + 0x78], rax
test rax, rax
je 0x140001d88
mov r8d, r13d
mov edx, r13d
mov rcx, r14
call rbx
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140001d88
mov r8d, 0x104
mov edx, r13d
mov rcx, r14
call rbx
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140001d88
lea r8d, [r13 + 4]
mov edx, r13d
mov rcx, r14
call rbx
mov r12, rax
test rax, rax
je 0x140001d88
lea r8d, [r13 + 0x38]
mov edx, r13d
mov rcx, r14
call rbx
mov r13, rax
test rax, rax
je 0x140001d88
lea rcx, [rax + 0x30]
mov r9d, 0x398d331c
mov r8d, edi
mov edx, 0x12f1cd75
call fcn.140001df4
lea rcx, [r13 + 0x2c]
mov r9d, 0x57a0cd15
mov r8d, edi
mov edx, 0x3eaaad39
call fcn.140001df4
lea rcx, [r13 + 0x1c]
mov r9d, 0xaa306f00
mov r8d, edi
mov edx, 0xaa1100da
call fcn.140001df4
lea rcx, [r13 + 0x20]
mov r9d, 0x7fb891b8
mov r8d, edi
mov edx, 0x4db34f14
call fcn.140001df4
mov r9d, 0x5992f1fb
mov r8d, edi
mov edx, 0x87886b9e
mov rcx, r13
call fcn.140001df4
lea rcx, [r13 + 0x24]
mov r9d, 0x39063759
mov r8d, edi
mov edx, 0xc0f8c5eb
call fcn.140001df4
lea rcx, [r13 + 8]
mov r9d, 0x1818f321
mov r8d, edi
mov edx, 0xd716b857
call fcn.140001df4
lea rcx, [r13 + 0x18]
mov r9d, 0xb264e5f6
mov r8d, edi
mov edx, 0x384a429b
call fcn.140001df4
lea rcx, [r13 + 0x34]
mov r9d, 0x4f7fd99a
mov r8d, edi
mov edx, 0x5344ef03
call fcn.140001df4
lea rcx, [r13 + 0x3c]
mov r9d, 0xb2a9f676
mov r8d, edi
mov edx, 0xb7a7fb5d
call fcn.140001df4
mov rax, qword [rsp + 0x58]
mov edx, 8
mov rcx, r14
lea r8d, [rdx + 0xc]
mov byte [rax], 0
call rbx
mov qword [rbp - 0x28], rax
mov r14, rax
test rax, rax
je 0x140001d88
lea rcx, [r13 + 4]
mov r9d, 0x79725875
mov r8d, edi
mov edx, 0x8a318cc3
call fcn.140001df4
lea rcx, [r13 + 0x28]
mov r9d, 0xca2136d0
mov r8d, edi
mov edx, 0x451bc5e4
call fcn.140001df4
lea rcx, [r13 + 0xc]
mov r9d, 0x96a0e1b4
mov r8d, edi
mov edx, 0x3f4904c4
call fcn.140001df4
lea rcx, [r13 + 0x14]
mov r9d, 0x5099d836
mov r8d, edi
mov edx, 0x4b139ff1
call fcn.140001df4
lea rcx, [r13 + 0x38]
mov r9d, 0x778e0027
mov r8d, edi
mov edx, 0x313b843c
call fcn.140001df4
lea rcx, [r13 + 0x10]
mov r9d, 0x536dc5b0
mov r8d, edi
mov edx, 0x65afe827
call fcn.140001df4
lea rax, [rbp - 0x30]
mov r9d, 0x20019
xor r8d, r8d
mov qword [rsp + 0x20], rax
mov rdx, r13
mov rcx, 0xffffffff80000001
call qword [rbp - 0x78]
test eax, eax
jne 0x140001d88
mov r8d, 0x2bcd497a
mov edx, edi
mov ecx, 0xc23587e
call fcn.140002000
mov r8, qword [rsp + 0x58]
mov r9d, 0xbac9a06a
mov rdx, qword [rbp - 0x70]
mov rcx, qword [rbp - 0x30]
mov dword [rsp + 0x20], eax
call fcn.140008110
mov rdx, qword [rsp + 0x58]
or r8d, 0xffffffff
mov ecx, 0x430c11e4
call fcn.140001e30
lea rcx, [r12 + 4]
mov r8d, eax
mov r9d, 0x72b5b19f
mov ebx, eax
mov edx, 0xf4271a02
call fcn.140001df4
mov rcx, qword [rsp + 0x78]
mov r9d, 0x44280e3
mov r8d, ebx
mov edx, 0x8990be2
call fcn.140001df4
lea rcx, [r14 + 0x10]
mov r9d, 0xb4837294
mov r8d, ebx
mov edx, 0x3050e128
call fcn.140001df4
mov r9d, 0xa8ccb84e
mov r8d, ebx
mov edx, 0xab4430a0
mov rcx, r14
call fcn.140001df4
mov rdi, qword [rbp - 0x68]
mov r9d, 0x758ba488
mov r8d, ebx
mov edx, 0x8794d887
lea rcx, [rdi + 4]
call fcn.140001df4
mov r8d, 0xee30a3dc
mov edx, ebx
mov ecx, 0x8ecf1fa4
call fcn.140002000
mov r9d, eax
mov r8d, 0x1973de69
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
mov qword [rbp - 0x78], rax
test rax, rax
je 0x140001d88
lea rcx, [r12 + 8]
mov r9d, 0xb7321d1a
mov r8d, ebx
mov edx, 0xd4cc2af6
call fcn.140001df4
mov r8d, 0xb55393be
mov edx, ebx
mov ecx, 0xfc30fe1e
call fcn.140002000
mov r9d, eax
mov r8d, 0x8601ec26
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
mov qword [rbp - 0x10], rax
test rax, rax
je 0x140001d88
mov r9d, 0x49c43b2a
mov r8d, ebx
mov edx, 0x2bc3c202
mov rcx, rdi
call fcn.140001df4
lea rcx, [r14 + 0xc]
mov r9d, 0x50846502
mov r8d, ebx
mov edx, 0x2bf356bd
call fcn.140001df4
mov r8d, 0xa781a305
mov edx, ebx
mov ecx, 0x89b1fb1f
call fcn.140002000
mov r9d, eax
mov r8d, 0x267df23d
mov rdx, r15
mov rcx, rsi
call fcn.140001f28
mov qword [rsp + 0x68], rax
mov rsi, rax
test rax, rax
je 0x140001d88
lea rcx, [r14 + 4]
mov r9d, 0x4b892873
mov r8d, ebx
mov edx, 0xa008363f
call fcn.140001df4
lea rcx, [r14 + 8]
mov r9d, 0xc8854e5
mov r8d, ebx
mov edx, 0xc2e2501f
call fcn.140001df4
mov rcx, rdi
call rsi
mov rdi, rax
test rax, rax
je 0x140001d88
mov r9d, 0x80ccda9b
mov r8d, ebx
mov edx, 0xdd6fc3fb
mov rcx, r12
call fcn.140001df4
xor edx, edx
mov rcx, rdi
call fcn.140001000
mov r8d, 0x3fa2009
mov edx, ebx
mov ecx, 0xc0b51556
mov rsi, rax
call fcn.140002000
mov r9d, eax
mov r8d, 0xc05a2e8a
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov qword [rbp - 0x70], rax
test rax, rax
je 0x140001d88
mov r8d, 0x8c1b7617
mov edx, ebx
mov ecx, 0xdbc8ea60
call fcn.140002000
mov r9d, eax
mov r8d, 0x5e5c40b2
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov qword [rbp - 0x68], rax
test rax, rax
je 0x140001d88
mov r8d, 0x6e484f23
mov edx, ebx
mov ecx, 0x1c3a73f2
call fcn.140002000
mov r9d, eax
mov r8d, 0x5356e4a0
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov qword [rsp + 0x58], rax
test rax, rax
je 0x140001d88
mov r8d, 0x8120ed6a
mov edx, ebx
mov ecx, 0xf4c27c83
call fcn.140002000
mov r9d, eax
mov r8d, 0x648790de
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov r14, rax
test rax, rax
je 0x140001d88
mov r8d, 0xf802d6e2
mov edx, ebx
mov ecx, 0x4b24e9c7
call fcn.140002000
mov r9d, eax
mov r8d, 0x6e84e4cc
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov r13, rax
test rax, rax
je 0x140001d88
mov r8d, 0x102ccc
mov edx, ebx
mov ecx, 0x9fb735e4
call fcn.140002000
mov r9d, eax
mov r8d, 0xad3fc052
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
mov r15, rax
test rax, rax
je 0x140001d88
mov r8d, 0x24a680ff
mov edx, ebx
mov ecx, 0xbc21ef52
call fcn.140002000
mov r9d, eax
mov r8d, 0xcbde33b4
mov rdx, rsi
mov rcx, rdi
call fcn.140001f28
xor edi, edi
mov rbx, rax
test rax, rax
je 0x140001d88
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor r8d, r8d
lea edx, [rdi + 1]
xor ecx, ecx
call r15
mov rdx, qword [rbp - 0x28]
mov r8d, 0x1bb
mov qword [rsp + 0x38], rdi
xor r9d, r9d
mov dword [rsp + 0x30], edi
mov rcx, rax
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rdi
mov qword [rbp - 0x20], rax
call rbx
mov r15, rax
test rax, rax
je 0x140001d88
mov rdx, qword [rsp + 0x78]
xor r9d, r9d
mov qword [rsp + 0x38], rdi
mov r8, r12
mov dword [rsp + 0x30], 0x80800000
mov rcx, rax
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
call r13
mov rsi, rax
test rax, rax
je 0x140001d88
and dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [rbp - 0x68]
test eax, eax
je 0x140001d88
lea rax, [rbp - 0x80]
mov edx, 0x20000005
lea r9, [rbp - 0x7c]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x60]
mov rcx, rsi
call qword [rbp - 0x70]
test eax, eax
je 0x140001d88
mov edx, dword [rsp + 0x60]
lea r9d, [rdi + 4]
mov r12, qword [rbp - 0x78]
mov r13d, 0x3000
mov r8d, r13d
xor ecx, ecx
call r12
mov rdi, rax
test rax, rax
je 0x140001d88
mov r8d, dword [rsp + 0x60]
lea r9, [rbp - 0x38]
mov rdx, rax
mov rcx, rsi
call qword [rsp + 0x58]
test eax, eax
je 0x140001d88
mov eax, 0x5a4d
cmp ax, word [rdi]
jne 0x140001d88
movsxd rbx, dword [rdi + 0x3c]
mov rcx, r15
add rbx, rdi
call r14
mov eax, 0x8664
cmp ax, word [rbx + 4]
jne 0x140001d88
cmp dword [rbx], 0x4550
jne 0x140001d88
mov rcx, rsi
call r14
mov eax, 0x20b
cmp ax, word [rbx + 0x18]
jne 0x140001d88
mov rcx, qword [rbp - 0x20]
movzx r15d, word [rbx + 0x14]
call r14
mov edx, dword [rbx + 0x50]
mov r9d, 0x40
mov r8d, r13d
xor ecx, ecx
call r12
mov rsi, rax
test rax, rax
je 0x140001d88
mov ecx, dword [rbx + 0x54]
test rcx, rcx
je 0x140001d35
mov r9, rdi
lea rdx, [rcx + rax]
sub r9, rax
dec rdx
mov al, byte [r9 + rdx]
mov byte [rdx], al
sub rcx, 1
jne 0x140001d26
lea r8, [rbx + 0x18]
mov r9, rsi
add r8, r15
mov rdx, rbx
mov rcx, rdi
call fcn.140007f80
mov rdx, qword [rbp - 0x10]
mov r9, rbx
mov rcx, qword [rsp + 0x68]
mov r8, rdi
mov qword [rsp + 0x20], rsi
call fcn.140007ff8
mov r8, rsi
mov rdx, rbx
mov rcx, rdi
call fcn.1400080a0
mov r9d, 0x83a0616e
mov r8d, 0x14887e1d
mov rdx, rsi
mov rcx, rbx
call fcn.140001e90
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140001dc4
mov rdx, qword [rsp + 0x50]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x140001dbf
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001ded
call fcn.1400098ac
lea r11, [rsp + 0x330]
xor eax, eax
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002c68
int3
call fcn.140011f44
int3