Function at 0x140001350
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140006008]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rbx, rcx
mov qword [rsp + 0x28], rcx
mov qword [rbp - 0x59], rcx
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x20
mov qword [rsp + 0x20], r15
mov r13, qword [r15]
mov rdx, rcx
lea rcx, [rbp - 0x11]
call fcn.1400011c0
nop
xor r12d, r12d
cmp r13, r15
je 0x140001800
mov r9d, 0xa
movabs rax, 0x7fffffffffffffff
movabs rdx, 0x7ffffffffffffffe
lea rcx, [r9 - 0xb]
mov r14, qword [r13 + 0x40]
xorps xmm0, xmm0
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], r12
mov rbx, rcx
inc rbx
cmp word [r14 + rbx*2], 0
jne 0x1400013f4
cmp rbx, rdx
ja 0x140001a86
mov qword [rbp - 0x19], 7
cmp rbx, 8
jae 0x140001437
mov qword [rbp - 0x21], rbx
add rbx, rbx
mov r8, rbx
mov rdx, r14
lea rcx, [rbp - 0x31]
call sub.VCRUNTIME140.dll_memcpy
mov word [rbp + rbx - 0x31], r12w
jmp 0x1400014cd
mov rsi, rbx
or rsi, 7
cmp rsi, rdx
jbe 0x14000144c
mov rsi, rdx
lea rcx, [rax + rax]
jmp 0x14000146d
cmp rsi, 0xa
cmovb rsi, r9
lea rcx, [rsi + 1]
cmp rcx, rax
ja 0x140001a98
add rcx, rcx
cmp rcx, 0x1000
jb 0x140001499
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001a98
mov rcx, rax
call fcn.1400021f0
test rax, rax
je 0x140001934
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400014ab
test rcx, rcx
je 0x1400014a8
call fcn.1400021f0
mov rdi, rax
jmp 0x1400014ab
mov rdi, r12
mov qword [rbp - 0x31], rdi
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x19], rsi
add rbx, rbx
mov r8, rbx
mov rdx, r14
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rbx + rdi], r12w
lea rdx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
setae r8b
cmovae rdx, qword [rbp - 0x31]
mov rax, qword [rbp - 0x21]
lea rsi, [rdx + rax*2]
lea rdi, [rbp - 0x31]
test r8b, r8b
cmovne rdi, qword [rbp - 0x31]
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
cmp rdi, rsi
jne 0x140001514
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], 0xf
mov byte [rbp - 0x51], 0
jmp 0x14000161f
mov rax, rsi
sub rax, rdi
sar rax, 1
mov rdx, r12
mov qword [rbp - 0x41], rdx
mov ebx, 0xf
mov qword [rbp - 0x39], rbx
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x140001a92
cmp rax, 0x10
jb 0x1400015e0
mov rbx, rax
or rbx, 0xf
cmp rbx, rcx
jbe 0x14000155b
mov rbx, rcx
jmp 0x140001568
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
mov rcx, rbx
add rcx, 1
mov rax, 0xffffffffffffffff
cmovb rcx, rax
cmp rcx, 0x1000
jb 0x1400015b6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001a8c
mov rcx, rax
call fcn.1400021f0
mov rcx, rax
test rax, rax
je 0x1400018e1
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
mov rdx, qword [rbp - 0x41]
jmp 0x1400015c9
test rcx, rcx
je 0x1400015c6
call fcn.1400021f0
mov rdx, qword [rbp - 0x41]
jmp 0x1400015c9
mov rax, r12
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x39], rbx
nop dword [rax]
nop word [rax + rax]
lea rcx, [rbp - 0x51]
cmp rbx, 0x10
cmovae rcx, qword [rbp - 0x51]
movzx eax, byte [rdi]
mov byte [rdx + rcx], al
mov rdx, qword [rbp - 0x41]
inc rdx
mov qword [rbp - 0x41], rdx
add rdi, 2
cmp rdi, rsi
je 0x14000160d
mov rbx, qword [rbp - 0x39]
jmp 0x1400015e0
lea rax, [rbp - 0x51]
cmp qword [rbp - 0x39], 0x10
cmovae rax, qword [rbp - 0x51]
mov byte [rax + rdx], 0
lea rdx, [rbp - 0x51]
lea rcx, [rbp + 0xf]
call fcn.1400011c0
nop
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x79]
call fcn.1400011c0
mov rsi, rax
lea r14, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae r14, qword [rbp - 0x11]
mov rax, qword [rax + 0x10]
cmp qword [rsi + 0x18], 0x10
jb 0x140001659
mov rsi, qword [rsi]
mov rdi, qword [rbp - 1]
cmp rdi, rax
ja 0x1400016cc
sub rax, rdi
test rdi, rdi
jne 0x14000166f
mov rbx, r12
jmp 0x1400016d3
lea r15, [rsi + rax]
movsx r12d, byte [r14]
lea r8, [r15 + 1]
sub r8, rsi
mov edx, r12d
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
je 0x1400016c4
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x140001846
inc rbx
lea r8, [r15 + 1]
sub r8, rbx
mov edx, r12d
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov rbx, rax
test rax, rax
jne 0x140001691
mov r15, qword [rsp + 0x20]
xor r12d, r12d
mov rbx, 0xffffffffffffffff
mov rdx, qword [rbp - 0x61]
cmp rdx, 0x10
jb 0x14000170e
inc rdx
mov rcx, qword [rbp - 0x79]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001709
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001856
call fcn.140002234
cmp rbx, 0xffffffffffffffff
jne 0x14000185d
mov r13, qword [r13]
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x140001757
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001752
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001893
call fcn.140002234
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 0xf
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1400017a2
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000179d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400018e1
call fcn.140002234
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], 0xf
mov byte [rbp - 0x51], 0
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1400017f2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400017ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001934
call fcn.140002234
cmp r13, r15
jne 0x1400013c0
mov rbx, qword [rsp + 0x28]
mov rax, qword [rbp + 7]
cmp rax, 0x10
jb 0x1400019fb
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400019f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400019f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
sub rbx, rsi
mov r15, qword [rsp + 0x20]
xor r12d, r12d
jmp 0x1400016d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rbx, qword [r13 + 0x20]
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x14000189f
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000189a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000189a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002234
mov qword [rbp + 0x1f], r12
mov qword [rbp + 0x27], 0xf
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 0x10
jb 0x1400018ed
inc rdx
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400018e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400018e8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002234
mov qword [rbp - 0x41], r12
mov qword [rbp - 0x39], 0xf
mov byte [rbp - 0x51], 0
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x140001940
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000193b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000193b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002234
mov qword [rbp - 0x21], r12
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], r12w
mov rax, qword [rbp + 7]
cmp rax, 0x10
jb 0x140001990
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000198b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000198b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140002234
mov qword [rbp - 1], r12
mov qword [rbp + 7], 0xf
mov byte [rbp - 0x11], 0
mov rdi, qword [rsp + 0x28]
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x1400019db
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x1400019d6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400019ef
mov rcx, r8
call fcn.140002234
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
mov rax, rbx
jmp 0x140001a52
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140002234
mov qword [rbp - 1], r12
mov qword [rbp + 7], 0xf
mov byte [rbp - 0x11], 0
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x140001a41
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x140001a3c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140001a7f
mov rcx, r8
call fcn.140002234
mov qword [rbx + 0x10], r12
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400021d0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400011a0
nop
call fcn.140001100
int3
call fcn.1400011a0
nop
call fcn.140001100
int3