Function at 0x140002009
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x108
movabs rax, 0xaf376b1d81209948
mov qword [rsp + 0xc8], rax
xor rdx, rcx
xor dl, 0xeb
inc rbx
movabs rax, 0xda75f7f0789610e3
mov qword [rsp + 0xd0], rax
and rdx, rcx
mov qword [rsp], rcx
cmp rcx, 0x4191
mov rcx, qword [rsp]
movabs rax, 0x74b99fb6c516283
mov qword [rsp + 0xd8], rax
xor dl, cl
movabs rax, 0x2dcd
dec rcx
movabs rax, 0x5d058b745f1156d4
mov qword [rsp + 0xe0], rax
xor cl, bl
movabs rax, 0xb78bee445b9823b9
mov qword [rsp + 0xe8], rax
xor cl, dl
sub rax, 0x1760
movabs rax, 0xec53d065d48bcdd5
mov qword [rsp + 0xf0], rax
add rcx, rcx
mov cl, 0x4a
cmp rax, 0x6a2b
movabs rax, 0x6bc786bce25edaa7
mov qword [rsp + 0xf8], rax
sub rbx, rcx
add rdx, 0x2699
movabs rax, 0xa85dd3903f5451b1
mov qword [rsp + 0x100], rax
mov bl, 0xb7
sub rcx, 0x6809
movabs rax, 0
push rax
movabs rax, 0x636f6c6c
push rax
movabs rax, 0x416c617574726956
push rax
mov rsi, qword gs:[0x60]
mov qword [rsp + 0xd8], rsi
mov rsi, qword [rsi + 0x18]
mov rsi, qword [rsi + 0x20]
push rsi
movabs rax, 0
push rax
movabs rax, 0x6c6c642e
mov qword [rsp + 0x28], rax
inc rax
mov rax, qword [rsp + 0x28]
push rax
movabs rax, 0x32336c656e72656b
push rax
movabs rax, 0
push rax
movabs rax, 0x4c4c442e
push rax
movabs rax, 0x32334c454e52454b
push rax
mov rax, qword [rsi + 0x20]
cmp rax, 0
je 0x14000220d
mov rax, qword [rsi + 0x48]
cmp ax, 0x18
jne 0x14000220d
movabs rcx, 0
movabs rdx, 0
mov rax, qword [rsi + 0x50]
mov rax, qword [rax + rcx]
mov qword [rsp + 0x50], rax
cmp al, 0x7f
mov rax, qword [rsp + 0x50]
movabs rbx, 0x18
add rbx, rdx
mov rbx, qword [rsp + rbx]
xor bl, 0
cmp al, bl
je 0x1400021f7
movabs rbx, 0
add rbx, rdx
mov rbx, qword [rsp + rbx]
xor bl, 0
cmp al, bl
jne 0x14000220d
inc rdx
add rcx, 2
cmp rcx, 0x18
jl 0x1400021aa
mov rsi, qword [rsi + 0x20]
jmp 0x140002228
mov rsi, qword [rsi]
mov rax, qword [rsp + 0x30]
cmp rsi, rax
jne 0x14000217d
movabs rsi, 0
add rsp, 0x38
mov qword [rsp + 0xd0], rsi
cmp rsi, 0
jne 0x140002242
add rsp, 0x120
ret
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
push rdi
mov eax, dword [rdi + 0x18]
push rax
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x1400022a9
xor bl, 0
cmp al, bl
jne 0x140002335
mov qword [rsp + 0x28], rax
cmp rax, 0x3081
mov rax, qword [rsp + 0x28]
cmp al, 0
je 0x1400022e1
mov qword [rsp + 0x28], rdx
and rdx, 0x2b3d
mov rdx, qword [rsp + 0x28]
inc rcx
jmp 0x140002273
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov rbx, rdx
imul rbx, rbx, 2
add rax, rbx
mov ebx, dword [rax]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov qword [rsp + 0x28], rax
sub rax, 0x7710
mov rax, qword [rsp + 0x28]
mov eax, dword [rax]
add rax, rsi
mov rax, rax
jmp 0x14000234f
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x140002269
movabs rax, 0
mov qword [rsp + 0x28], rbx
add rbx, 0x3bf
mov rbx, qword [rsp + 0x28]
cmp rax, 0
jne 0x14000236e
add rsp, 0x130
ret
add rsp, 0x28
mov qword [rsp + 0xb0], rax
movabs rcx, 0
movabs rdx, 0x5000
movabs r8, 0x3000
movabs r9, 0x40
sub rsp, 0x20
call rax
add rsp, 0x20
mov rdx, rax
cmp rdx, 0
jne 0x1400023bd
add rsp, 0x108
ret
mov qword [rsp + 0xa8], rdx
mov rcx, qword [rsp + 0xc0]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0xa0], rax
add rax, 0x1006
mov rbx, qword [rsp + 0xa8]
mov rsi, rax
mov rdi, rbx
movabs rdx, 0
movabs rcx, 0x80
mov rax, qword [rsi]
mov rbx, rsp
add rbx, 0xc8
add rbx, rdx
mov rbx, qword [rbx]
xor rax, rbx
add rdx, 8
cmp rdx, 0x40
jne 0x140002430
movabs rdx, 0
mov qword [rsp], rdx
xor dl, 0x65
mov rdx, qword [rsp]
mov qword [rdi], rax
mov qword [rsp], rcx
shl rcx, 0x71
mov rcx, qword [rsp]
add rsi, 8
add rdi, 8
dec rcx
cmp rcx, 0
jne 0x140002402
mov rsi, qword [rsp + 0xa0]
add rsi, 0x1006
mov rdi, qword [rsp + 0xa8]
push rsi
push rdi
add rsi, 0x400
add rdi, 0x1000
movabs rdx, 0
movabs rcx, 0x80
mov rax, qword [rsi]
mov rbx, rsp
add rbx, 0xd8
add rbx, rdx
mov rbx, qword [rbx]
xor rax, rbx
add rdx, 8
cmp rdx, 0x40
jne 0x1400024c4
movabs rdx, 0
mov qword [rdi], rax
add rsi, 8
add rdi, 8
dec rcx
cmp rcx, 0
jne 0x140002496
mov rsi, qword [rsp + 8]
mov rdi, qword [rsp]
add rsi, 0x800
add rdi, 0x2000
movabs rdx, 0
movabs rcx, 0x80
mov rax, qword [rsi]
mov rbx, rsp
add rbx, 0xd8
add rbx, rdx
mov rbx, qword [rbx]
xor rax, rbx
add rdx, 8
cmp rdx, 0x40
jne 0x140002531
movabs rdx, 0
mov qword [rdi], rax
add rsi, 8
add rdi, 8
dec rcx
cmp rcx, 0
jne 0x140002503
mov rsi, qword [rsp + 8]
mov rdi, qword [rsp]
add rsi, 0xc00
add rdi, 0x3000
movabs rdx, 0
movabs rcx, 0x40
mov rax, qword [rsi]
mov rbx, rsp
add rbx, 0xd8
add rbx, rdx
mov rbx, qword [rbx]
xor rax, rbx
add rdx, 8
cmp rdx, 0x40
jne 0x14000259e
movabs rdx, 0
mov qword [rdi], rax
add rsi, 8
add rdi, 8
dec rcx
cmp rcx, 0
jne 0x140002570
mov rsi, qword [rsp + 8]
mov qword [rsp + 0x10], rcx
shl rcx, 0xc8
mov rcx, qword [rsp + 0x10]
mov rdi, qword [rsp]
add rsi, 0xe00
add rdi, 0x4000
movabs rdx, 0
movabs rcx, 0x40
mov rax, qword [rsi]
mov rbx, rsp
add rbx, 0xd8
add rbx, rdx
mov rbx, qword [rbx]
xor rax, rbx
add rdx, 8
cmp rdx, 0x40
jne 0x140002619
movabs rdx, 0
mov qword [rdi], rax
add rsi, 8
add rdi, 8
dec rcx
cmp rcx, 0
jne 0x1400025eb
mov rsi, qword [rsp + 8]
mov rdi, qword [rsp]
add rsp, 0x10
push 0
push 0
push 0
push 0
movabs rax, 0
push rax
movabs rax, 0x41797261
push rax
movabs rax, 0x7262694c64616f4c
push rax
mov rsi, qword [rsp + 0xf0]
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
mov qword [rsp + 0x38], rcx
cmp cl, 0x4a
mov rcx, qword [rsp + 0x38]
push rdi
mov eax, dword [rdi + 0x18]
push rax
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x1400026df
xor bl, 0
cmp al, bl
jne 0x140002745
cmp al, 0
je 0x1400026f5
inc rcx
jmp 0x1400026a9
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov qword [rsp + 0x48], rdx
xor dl, 0x29
mov rdx, qword [rsp + 0x48]
mov rbx, rdx
imul rbx, rbx, 2
add rax, rbx
mov ebx, dword [rax]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, rax
jmp 0x14000275f
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x14000269f
movabs rax, 0
cmp rax, 0
jne 0x14000276d
add rsp, 0x150
ret
add rsp, 0x28
mov qword [rsp + 0xb8], rax
cmp rax, 0
jne 0x140002787
add rsp, 0x128
ret
mov qword [rsp + 0x18], rax
movabs rax, 0
push rax
movabs rax, 0x737365726464
push rax
movabs rax, 0x41636f7250746547
mov qword [rsp + 0x30], rbx
mov bl, 0x61
mov rbx, qword [rsp + 0x30]
push rax
mov rsi, qword [rsp + 0xf0]
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
push rdi
mov eax, dword [rdi + 0x18]
mov qword [rsp + 0x40], rcx
mov cl, 0x8f
mov rcx, qword [rsp + 0x40]
push rax
mov qword [rsp + 0x48], rax
and rax, 0x5419
mov rax, qword [rsp + 0x48]
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x140002845
xor bl, 0
cmp al, bl
jne 0x1400028ab
cmp al, 0
je 0x14000285b
inc rcx
jmp 0x14000280f
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov rbx, rdx
imul rbx, rbx, 2
mov qword [rsp + 0x48], rax
dec rax
mov rax, qword [rsp + 0x48]
add rax, rbx
mov ebx, dword [rax]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, rax
jmp 0x1400028c5
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x140002805
movabs rax, 0
cmp rax, 0
jne 0x1400028d3
add rsp, 0x150
ret
add rsp, 0x28
mov qword [rsp + 0xb0], rax
cmp rax, 0
jne 0x1400028ed
add rsp, 0x128
ret
mov qword [rsp + 0x10], rax
mov rcx, qword [rsp + 0xc8]
mov eax, dword [rcx + 0x3c]
mov qword [rsp + 0x20], rbx
shl rbx, 0x8c
mov rbx, qword [rsp + 0x20]
add rax, rcx
mov ebx, dword [rax + 0x94]
cmp rbx, 0
je 0x140002a6d
mov edx, dword [rax + 0x90]
cmp rdx, 0
je 0x140002a6d
add rdx, rcx
movabs rsi, 0
movabs rdi, 0
mov eax, dword [rdx + 0xc]
cmp rax, 0
je 0x140002a6d
push rcx
push rdx
push rsi
push rdi
add rax, rcx
mov rbx, qword [rsp + 0x38]
mov rcx, rax
sub rsp, 0x20
call rbx
add rsp, 0x20
mov rax, rax
pop rdi
pop rsi
pop rdx
pop rcx
cmp rax, 0
je 0x140002a64
mov qword [rsp + 8], rax
mov eax, dword [rdx]
add rax, rcx
mov qword [rsp], rax
mov esi, dword [rdx + 0x10]
add rsi, rcx
mov ebx, dword [rsi]
mov qword [rsp + 0x20], rcx
shr rcx, 0x8b
mov rcx, qword [rsp + 0x20]
cmp rbx, 0
je 0x140002a64
mov rdi, rbx
mov rax, qword [rsp]
movabs rbx, 0
cmp rax, 0
je 0x1400029e0
mov rdi, qword [rax]
add rax, 8
mov qword [rsp], rax
movabs rax, 0x8000000000000000
mov rbx, rdi
and rbx, rax
cmp rdi, 0
je 0x140002a5b
cmp rbx, 0
je 0x140002a12
mov qword [rsp + 0x20], rcx
and rcx, 0x1df4
mov rcx, qword [rsp + 0x20]
add rsp, 0x128
ret
mov rax, rdi
add rax, rcx
add rax, 2
push rcx
push rdx
push rsi
push rdi
mov rdi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
mov rcx, rdi
mov rdx, rax
mov qword [rsp + 0x60], rcx
dec rcx
mov rcx, qword [rsp + 0x60]
sub rsp, 0x20
call rbx
add rsp, 0x20
mov rax, rax
pop rdi
pop rsi
pop rdx
pop rcx
cmp rax, 0
je 0x140002a5b
mov qword [rsi], rax
add rsi, 8
jmp 0x140002990
add rdx, 0x14
jmp 0x140002945
add rsp, 0x20
mov rbx, qword [rsp + 0xa8]
mov rcx, rbx
mov edx, dword [rcx + 0x3c]
add rdx, rcx
add rdx, 0x30
mov qword [rdx], rcx
push 0x77777777
push 0x77777777
push 0x77777777
push 0
movabs rax, 0
push rax
movabs rax, 0x64616572
push rax
movabs rax, 0x6854657461657243
push rax
mov rsi, qword [rsp + 0xf0]
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
push rdi
mov eax, dword [rdi + 0x18]
push rax
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x140002b2a
xor bl, 0
cmp al, bl
jne 0x140002b94
cmp al, 0
je 0x140002b40
inc rcx
jmp 0x140002af4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov rbx, rdx
imul rbx, rbx, 2
add rax, rbx
mov ebx, dword [rax]
mov qword [rsp + 0x48], rbx
sub rbx, 0x1365
mov rbx, qword [rsp + 0x48]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rbx, rax
jmp 0x140002bae
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x140002aea
movabs rbx, 0
cmp rbx, 0
jne 0x140002bd0
mov qword [rsp + 0x48], rdx
movabs rdx, 0x378
mov rdx, qword [rsp + 0x48]
add rsp, 0x150
ret
mov qword [rsp + 0x20], rbx
dec rbx
mov rbx, qword [rsp + 0x20]
add rsp, 0x28
mov qword [rsp + 0xa8], rbx
mov rax, qword [rsp + 0xc8]
movabs rcx, 0x11e0
add rax, rcx
movabs rcx, 0
movabs rdx, 0
mov r8, rax
movabs r9, 0
push 0
push 0
sub rsp, 0x20
call rbx
add rsp, 0x30
cmp rax, 0
jne 0x140002c3b
add rsp, 0x128
ret
mov qword [rsp], rax
mov qword [rsp + 0x20], rdx
shr rdx, 0x3e
mov rdx, qword [rsp + 0x20]
movabs rax, 0
push rax
movabs rax, 0x746365
push rax
mov qword [rsp + 0x30], rcx
cmp cl, 0x45
mov rcx, qword [rsp + 0x30]
movabs rax, 0x6a624f656c676e69
push rax
movabs rax, 0x53726f4674696157
push rax
mov rsi, qword [rsp + 0xf8]
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
push rdi
mov eax, dword [rdi + 0x18]
push rax
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov qword [rsp + 0x50], rdx
shl rdx, 0x95
mov rdx, qword [rsp + 0x50]
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov qword [rsp + 0x50], rcx
sub rcx, 0x7f43
mov rcx, qword [rsp + 0x50]
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x140002d14
xor bl, 0
cmp al, bl
jne 0x140002d6d
cmp al, 0
je 0x140002d2a
inc rcx
jmp 0x140002cbf
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov rbx, rdx
imul rbx, rbx, 2
add rax, rbx
mov ebx, dword [rax]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rbx, rax
jmp 0x140002d87
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x140002cb5
movabs rbx, 0
cmp rbx, 0
jne 0x140002d95
add rsp, 0x158
ret
add rsp, 0x30
mov qword [rsp + 0xa0], rbx
mov rsi, qword [rsp]
mov rcx, rsi
movabs rdx, 0xffffffff
sub rsp, 0x20
call rbx
add rsp, 0x20
mov qword [rsp + 0x20], rbx
cmp rbx, 0x4053
mov rbx, qword [rsp + 0x20]
movabs rax, 0
push rax
movabs rax, 0x7065656c53
push rax
mov rsi, qword [rsp + 0xe8]
mov rdi, rsi
mov edi, dword [rdi + 0x3c]
add rdi, rsi
mov edi, dword [rdi + 0x88]
add rdi, rsi
push rdi
mov eax, dword [rdi + 0x18]
push rax
movabs rdx, 0
mov edi, dword [rdi + 0x20]
add rdi, rsi
movabs rcx, 0
mov rbx, rdx
imul rbx, rbx, 4
mov rax, rdi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rax, qword [rax + rcx]
movabs rbx, 0x10
add rbx, rcx
mov rbx, qword [rsp + rbx]
cmp al, 0
je 0x140002e52
xor bl, 0
cmp al, bl
jne 0x140002eab
cmp al, 0
je 0x140002e68
inc rcx
jmp 0x140002e1c
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x24]
add rax, rsi
mov rbx, rdx
imul rbx, rbx, 2
add rax, rbx
mov ebx, dword [rax]
and rbx, 0xffff
imul rbx, rbx, 4
mov rax, qword [rsp + 8]
mov eax, dword [rax + 0x1c]
add rax, rsi
add rax, rbx
mov eax, dword [rax]
add rax, rsi
mov rbx, rax
jmp 0x140002ec5
inc rdx
mov rax, qword [rsp]
cmp rdx, rax
jl 0x140002e12
movabs rbx, 0
cmp rbx, 0
jne 0x140002ed3
add rsp, 0x148
ret
add rsp, 0x20
mov qword [rsp + 0x98], rbx
movabs rcx, 0x64
sub rsp, 0x20
call rbx
add rsp, 0x20
add rsp, 8
push 0xffffffff88888888
push 0xffffffff88888888
push 0xffffffff88888888
add rsp, 0x138
ret