Function at 0x1400b41c0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rax, qword gs:[0x30]
xorps xmm0, xmm0
xorps xmm1, xmm1
mov r12, r9
mov r15, r8
mov r14, rdx
mov rbp, rcx
mov rdi, 0xffffffffffffffff
mov r10, qword [rax + 0x60]
mov rsi, qword [r10 + 0x30]
mov qword [rsp + 0x60], rsi
movups xmmword [r8], xmm0
movups xmmword [r9], xmm1
test rcx, rcx
je 0x1400b42d2
cmp word [rcx], 0
je 0x1400b42d2
xor r13b, r13b
mov rbx, rdi
nop dword [rax]
inc rbx
cmp word [rcx + rbx*2], 0
jne 0x1400b4230
cmp rbx, 4
jbe 0x1400b425e
add rcx, 0xfffffffffffffff8
lea rdx, str..dll
mov r8d, 4
lea rcx, [rcx + rbx*2]
call sub.msvcrt.dll__wcsnicmp
test eax, eax
je 0x1400b4265
add rbx, 4
mov r13b, 1
inc rbx
cmp rbx, 0xffff
jb 0x1400b427f
mov ebx, 0xc0000033
lea rsi, [r15 + 8]
jmp 0x1400b4462
movzx eax, bx
xor edx, edx
add ax, ax
mov rcx, rsi
movzx r8d, ax
mov word [r15 + 2], r8w
lea eax, [r8 - 2]
mov word [r15], ax
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [r15 + 8], rax
lea rsi, [r15 + 8]
test rax, rax
je 0x1400b445d
lea rcx, str._s.dll
test r13b, r13b
lea r8, [0x1400d4b08]
mov r9, rbp
cmovne r8, rcx
mov rdx, rbx
mov rcx, rax
jmp 0x1400b4325
mov r8d, 0x2a
mov dword [r15], 0x2a0028
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [r15 + 8], rax
lea rsi, [r15 + 8]
test rax, rax
je 0x1400b445d
call fcn.1400b826c
mov ebx, eax
call fcn.1400b826c
movzx edx, word [r15 + 2]
lea r8, str._016llX.DLL
mov rcx, qword [rsi]
mov r9d, ebx
shl r9, 0x20
mov eax, eax
or r9, rax
shr rdx, 1
call fcn.1400b45d0
test r14, r14
je 0x1400b442b
cmp word [r14], 0
je 0x1400b442b
movzx edx, word [r15]
xor bpl, bpl
xor r13b, r13b
shr edx, 1
nop word [rax + rax]
inc rdi
cmp word [r14 + rdi*2], 0
jne 0x1400b4350
lea ecx, [rdx + 1]
cmp rdi, rcx
jbe 0x1400b4385
mov eax, edx
mov rcx, rdi
mov rdx, qword [rsi]
sub rcx, rax
lea rbx, [r14 + rcx*2]
mov rcx, rbx
call sub.msvcrt.dll__wcsicmp
test eax, eax
jne 0x1400b4385
cmp word [rbx - 2], 0x5c
je 0x1400b43a9
movzx ecx, word [r14 + rdi*2 - 2]
mov bpl, 1
cmp cx, 0x5c
je 0x1400b4397
inc rdi
movzx eax, word [r15]
shr rax, 1
add rdi, rax
cmp cx, 0x5c
setne r13b
inc rdi
cmp rdi, 0xffff
jb 0x1400b43bf
mov ebx, 0xc0000033
jmp 0x1400b4462
mov rcx, qword [rsp + 0x60]
movzx eax, di
add ax, ax
xor edx, edx
movzx r8d, ax
mov word [r12 + 2], r8w
lea eax, [r8 - 2]
mov word [r12], ax
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [r12 + 8], rax
test rax, rax
je 0x1400b445d
test bpl, bpl
je 0x1400b440b
test r13b, r13b
lea rdx, [0x1400d4b28]
lea rcx, str._s_s
cmovne rcx, rdx
jmp 0x1400b4412
lea rcx, [0x1400d4b08]
mov r9, qword [rsi]
mov r8, rcx
mov qword [rsp + 0x20], r9
mov rdx, rdi
mov r9, r14
mov rcx, rax
jmp 0x1400b44cc
movzx eax, word [r15]
xor edx, edx
mov rcx, qword [rsp + 0x60]
add ax, 0x24
movzx r8d, ax
mov word [r12 + 2], r8w
lea eax, [r8 - 2]
mov word [r12], ax
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
mov qword [r12 + 8], rax
test rax, rax
jne 0x1400b4497
mov ebx, 0xc0000017
mov r8, qword [rsi]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov r8, qword [r12 + 8]
xor edx, edx
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [r15], xmm0
mov eax, ebx
movups xmmword [r12], xmm1
jmp 0x1400b44d3
call fcn.1400b826c
mov ebx, eax
call fcn.1400b826c
movzx edx, word [r12 + 2]
lea r8, str._016llX_s
mov rcx, qword [r12 + 8]
mov r9d, ebx
shl r9, 0x20
mov eax, eax
or r9, rax
mov rax, qword [rsi]
mov qword [rsp + 0x20], rax
shr rdx, 1
call fcn.1400b45d0
xor eax, eax
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret