Function at 0x1400cac0c
Capabilities:
Access peb ldr_data
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
lea rax, [rsp + 0x60]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x70]
mov eax, dword [0x14015e618]
mov ecx, dword [0x14015e61c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rsp + 0x48]
mov edx, 0x5021f67c
mov eax, 0x99fbe4b7
cmove eax, edx
cmp ecx, 0xa
setl byte [rsp + 0x38]
cmovl eax, edx
mov edx, 0xfc799188
mov ecx, 0x4adacd4f
cmp edx, 0x4adacd4e
jg 0x1400cac97
cmp edx, 0x99fbe4b7
je 0x1400caca9
cmp edx, 0xfc799188
jne 0x1400cac67
mov bl, byte [rsp + 0x48]
cmp byte [rsp + 0x38], 0
mov edx, 0x99fbe4b7
cmovne edx, ecx
test bl, bl
cmovne edx, ecx
jmp 0x1400cac67
cmp edx, 0x4adacd4f
je 0x1400cacb9
cmp edx, 0x5021f67c
jne 0x1400cac67
jmp 0x1400cacde
mov rdx, qword gs:[0x30]
mov edx, 0x4adacd4f
jmp 0x1400cac67
mov rdx, qword gs:[0x30]
mov rdx, qword [rdx + 0x60]
mov rdx, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x10]
mov rdx, qword [rdx]
mov rdx, qword [rdx + 0x30]
mov qword [rsp + 0x40], rdx
mov edx, eax
jmp 0x1400cac67
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x60], rcx
movsxd rax, dword [rcx + 0x3c]
mov eax, dword [rax + rcx + 0x88]
add rax, rcx
mov ecx, dword [0x14015e620]
mov edx, dword [0x14015e624]
lea ebp, [rcx - 1]
imul ebp, ecx
and ebp, 1
sete cl
sete byte [rsp + 0x48]
cmp edx, 0xa
setl byte [rsp + 0x38]
mov qword [rsp + 0x68], rax
setl dl
mov ebx, edx
or bl, cl
xor bpl, dl
and dl, cl
xor dl, bpl
mov edx, 0x83644916
mov ecx, 0x4f57ea18
cmovne ecx, edx
test bl, bl
mov esi, 0xb2a0bb55
cmove esi, edx
mov ebp, 0xa607f9bb
mov edx, 0xc885dff7
cmove ebp, edx
mov edx, 0x896d677e
mov r8d, 0x8cf77b71
cmp edx, 0xa607f9ba
jle 0x1400cad80
cmp edx, 0xc885dff6
jg 0x1400cad9c
cmp edx, 0xa607f9bb
je 0x1400cadb3
cmp edx, 0xb2a0bb55
jne 0x1400cad5e
jmp 0x1400cade2
cmp edx, 0x83644916
je 0x1400cadb7
cmp edx, 0x896d677e
je 0x1400cadbe
cmp edx, 0x8cf77b71
jne 0x1400cad5e
mov edx, ebp
jmp 0x1400cad5e
cmp edx, 0xc885dff7
je 0x1400cadd8
cmp edx, 0x4f57ea18
jne 0x1400cad5e
mov edi, dword [rax + 0x18]
mov edx, esi
jmp 0x1400cad5e
mov edx, ecx
jmp 0x1400cad5e
mov edx, 0x4f57ea18
jmp 0x1400cad5e
mov bl, byte [rsp + 0x48]
cmp byte [rsp + 0x38], 0
mov edx, 0xc885dff7
cmovne edx, r8d
test bl, bl
cmovne edx, r8d
jmp 0x1400cad5e
mov edx, 0x8cf77b71
jmp 0x1400cad5e
mov dword [rsp + 0x40], edi
mov r14d, dword [rsp + 0x40]
mov eax, 0x9e1ee641
mov r12d, 0x3d26aad5
cmp eax, 0x36e4447
jg 0x1400cae42
cmp eax, 0xc9810800
jle 0x1400caead
cmp eax, 0xea173c07
jg 0x1400caf39
cmp eax, 0xda8e460e
jle 0x1400cb03d
cmp eax, 0xda8e460f
je 0x1400cb1c2
cmp eax, 0xe05eab41
je 0x1400cb1ee
cmp eax, 0xe7dd43c4
jne 0x1400cadf6
mov eax, 0x848f3284
jmp 0x1400cadf6
cmp eax, 0x4879d3b0
jg 0x1400caef3
cmp eax, 0x2ed6f9a9
jle 0x1400caf7c
cmp eax, 0x38cc60b1
jle 0x1400cb06a
cmp eax, 0x38cc60b2
je 0x1400cb211
cmp eax, 0x41edf6e6
je 0x1400cb396
cmp eax, 0x4307b52c
jne 0x1400cadf6
mov qword [rsp + 0x38], r13
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
cmp dword [rax], 0
mov eax, 0x41edf6e6
mov ecx, 0xd10d982b
cmove eax, ecx
jmp 0x1400cadf6
cmp eax, 0xa88a6508
jle 0x1400cafbb
cmp eax, 0xbff8729c
jle 0x1400cb09e
cmp eax, 0xbff8729d
je 0x1400cb442
cmp eax, 0xc11b9118
je 0x1400cb451
cmp eax, 0xc1b6a304
jne 0x1400cadf6
mov eax, 0x4307b52c
mov r13, qword [rsp + 0x48]
jmp 0x1400cadf6
cmp eax, 0x6ce9b18e
jle 0x1400caffa
cmp eax, 0x79d4ceec
jle 0x1400cb0d7
cmp eax, 0x79d4ceed
je 0x1400cb46f
cmp eax, 0x7c79c539
je 0x1400cb4e5
cmp eax, 0x7fbc7d5c
jne 0x1400cadf6
mov r14d, dword [rsp + 0x5c]
mov eax, 0x9e1ee641
jmp 0x1400cadf6
cmp eax, 0xf75e5d26
jle 0x1400cb0f7
cmp eax, 0xf75e5d27
je 0x1400cb50d
cmp eax, 0xff68a787
je 0x1400cb517
cmp eax, 0x1af82f2
jne 0x1400cadf6
cmp byte [rsp + 0x33], 0
mov eax, 0xe05eab41
mov ecx, 0x2ed6f9aa
cmovne eax, ecx
jmp 0x1400cadf6
cmp eax, 0x276574c6
jg 0x1400cb135
cmp eax, 0x184cf1ba
je 0x1400cb549
cmp eax, 0x1b6b5aa2
jne 0x1400cb688
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf75e5d27
mov ecx, 0xc11b9118
jmp 0x1400cb63a
cmp eax, 0x9e1ee640
jg 0x1400cb17b
cmp eax, 0x8107a2f9
je 0x1400cb567
cmp eax, 0x848f3284
jne 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe7dd43c4
mov ecx, 0x36e4448
jmp 0x1400cb63a
cmp eax, 0x5d48756f
jg 0x1400cb19e
cmp eax, 0x4879d3b1
je 0x1400cb585
cmp eax, 0x5279ad9a
jne 0x1400cadf6
mov eax, dword [rsp + 0x34]
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa88a6509
mov ecx, 0xc9810801
jmp 0x1400cb63a
cmp eax, 0xc9810801
je 0x1400cb5a3
cmp eax, 0xd10d982b
jne 0x1400cadf6
cmp dword [rsp + 0x2c], 0
mov eax, 0xa5f3ee32
mov ecx, 0xea173c08
cmove eax, ecx
jmp 0x1400cadf6
cmp eax, 0x2ed6f9aa
je 0x1400cb5ad
cmp eax, 0x341b528d
jne 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2ce3fe41
mov ecx, 0x1af82f2
jmp 0x1400cb63a
cmp eax, 0xa88a6509
je 0x1400cb5c8
cmp eax, 0xbb66c671
jne 0x1400cadf6
mov dword [rsp + 0x34], r15d
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2ce3fe41
mov ecx, 0x5d487570
jmp 0x1400cb63a
cmp eax, 0x6ce9b18f
je 0x1400cb5d6
cmp eax, 0x70ea2179
jne 0x1400cadf6
mov eax, 0x6ce9b18f
jmp 0x1400cadf6
cmp eax, 0xea173c08
je 0x1400cb5f1
cmp eax, 0xeb55cfb2
jne 0x1400cadf6
mov eax, dword [rsp + 0x2c]
dec eax
mov dword [rsp + 0x5c], eax
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x184cf1ba
mov ecx, 0x8107a2f9
jmp 0x1400cb63a
cmp eax, 0x276574c7
je 0x1400cb601
cmp eax, 0x2ce3fe41
jne 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5279ad9a
mov ecx, 0xa88a6509
cmovne eax, ecx
cmp dword [0x14015e62c], 0xa
mov ecx, 0x5279ad9a
cmovl eax, ecx
jmp 0x1400cadf6
cmp eax, 0x9e1ee641
je 0x1400cb60b
cmp eax, 0xa5f3ee32
jne 0x1400cadf6
mov eax, 0xbb66c671
xor r15d, r15d
jmp 0x1400cadf6
cmp eax, 0x5d487570
je 0x1400cb621
cmp eax, 0x698048db
jne 0x1400cadf6
mov eax, dword [rsp + 0x34]
mov eax, 0x7c79c539
jmp 0x1400cadf6
mov rax, qword [rsp + 0x38]
add rax, 4
mov qword [rsp + 0x48], rax
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbff8729d
mov ecx, 0x1b6b5aa2
jmp 0x1400cb63a
mov rax, qword [rsp + 0x70]
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe7dd43c4
mov ecx, 0x848f3284
jmp 0x1400cb63a
mov r8d, dword [rsp + 0x2c]
mov eax, dword [0x14015e630]
mov ecx, dword [0x14015e634]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
sete al
sete byte [rsp + 0x31]
cmp ecx, 0xa
setl byte [rsp + 0x32]
setl cl
setge r9b
or cl, al
xor al, r9b
mov ebx, eax
xor bl, 1
and dl, r9b
or dl, bl
xor dl, al
mov esi, 0xb99fb0d0
mov eax, 0x7ca3b1a2
cmovne esi, eax
test cl, cl
mov edx, 0xe6a66cb2
mov eax, 0xe7cd2a35
cmovne edx, eax
mov r9d, 0xe6a66cb2
mov eax, 0x725bbd98
cmovne r9d, eax
mov rdi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x68]
mov r10d, 0xb99fb0d0
mov eax, 0xbf75594e
cmovne r10d, eax
mov r11d, 0x977f456d
mov eax, 0x9e7569a9
cmovne r11d, eax
mov ecx, 0x8ee4644d
mov ebp, ecx
cmp ecx, 0xe6a66cb1
jg 0x1400cb2e2
cmp ebp, 0x9e7569a8
jle 0x1400cb30c
mov ecx, esi
cmp ebp, 0x9e7569a9
je 0x1400cb2ab
cmp ebp, 0xb99fb0d0
je 0x1400cb365
mov ecx, ebp
cmp ebp, 0xbf75594e
jne 0x1400cb2ab
mov ecx, r9d
jmp 0x1400cb2ab
cmp ebp, 0x725bbd97
jg 0x1400cb325
cmp ebp, 0xe6a66cb2
je 0x1400cb36f
mov ecx, r11d
cmp ebp, 0x3d26aad5
je 0x1400cb2ab
mov ecx, ebp
cmp ebp, 0xe7cd2a35
jne 0x1400cb2ab
jmp 0x1400cb64c
cmp ebp, 0x8ee4644d
je 0x1400cb379
mov ecx, ebp
cmp ebp, 0x977f456d
jne 0x1400cb2ab
mov ecx, 0x3d26aad5
jmp 0x1400cb2ab
mov ecx, edx
cmp ebp, 0x725bbd98
je 0x1400cb2ab
mov ecx, ebp
cmp ebp, 0x7ca3b1a2
jne 0x1400cb2ab
mov eax, dword [rbx + 0x1c]
mov ecx, dword [rbx + 0x24]
add rax, rdi
add rcx, rdi
movzx ecx, word [rcx + r8*2]
mov eax, dword [rax + rcx*4]
add rax, rdi
mov qword [rsp + 0x40], rax
mov ecx, r10d
jmp 0x1400cb2ab
mov ecx, 0x7ca3b1a2
jmp 0x1400cb2ab
mov ecx, 0x725bbd98
jmp 0x1400cb2ab
mov al, byte [rsp + 0x31]
cmp byte [rsp + 0x32], 0
mov ecx, 0x977f456d
cmovne ecx, r12d
test al, al
cmovne ecx, r12d
jmp 0x1400cb2ab
mov edi, dword [rsp + 0x2c]
mov ecx, dword [0x14015e638]
mov edx, dword [0x14015e63c]
lea ebp, [rcx - 1]
imul ebp, ecx
test bpl, 1
sete byte [rsp + 0x31]
mov ebx, 0xca90c2b5
mov eax, 0x76b97736
cmove ebx, eax
cmp edx, 0xa
setl byte [rsp + 0x32]
mov rdx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
cmovl ebx, eax
mov ecx, 0x3e58eae2
cmp ecx, 0x6f6f7fd1
jg 0x1400cb411
cmp ecx, 0xca90c2b5
je 0x1400cb426
cmp ecx, 0x3e58eae2
jne 0x1400cb3dc
mov al, byte [rsp + 0x31]
cmp byte [rsp + 0x32], 0
mov ecx, 0xca90c2b5
mov esi, 0x6f6f7fd2
cmovne ecx, esi
test al, al
cmovne ecx, esi
jmp 0x1400cb3dc
cmp ecx, 0x6f6f7fd2
je 0x1400cb42d
cmp ecx, 0x76b97736
jne 0x1400cb3dc
jmp 0x1400cb665
mov ecx, 0x6f6f7fd2
jmp 0x1400cb3dc
mov eax, dword [rbp + 0x20]
add rax, rdx
mov eax, dword [rax + rdi*4]
add rax, rdx
mov qword [rsp + 0x40], rax
mov ecx, ebx
jmp 0x1400cb3dc
mov rax, qword [rsp + 0x38]
mov eax, 0xda8e460f
jmp 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf75e5d27
mov ecx, 0xc1b6a304
jmp 0x1400cb63a
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, 0xff68a787
jmp 0x1400cadf6
cmp dword [rsp + 0x34], 0
sete byte [rsp + 0x33]
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x698048db
mov ecx, 0x341b528d
jmp 0x1400cb63a
mov eax, 0xc11b9118
jmp 0x1400cadf6
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x2c]
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x79d4ceed
mov ecx, 0x276574c7
jmp 0x1400cb63a
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x79d4ceed
mov ecx, 0xff68a787
jmp 0x1400cb63a
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x70ea2179
mov ecx, 0x6ce9b18f
jmp 0x1400cb63a
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbff8729d
mov ecx, 0xda8e460f
jmp 0x1400cb63a
mov eax, 0x5d487570
jmp 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x184cf1ba
mov ecx, 0xeb55cfb2
jmp 0x1400cb63a
mov eax, dword [rsp + 0x34]
mov eax, 0x5279ad9a
jmp 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x70ea2179
mov ecx, 0x7fbc7d5c
jmp 0x1400cb63a
mov eax, 0xbb66c671
mov r15d, 2
jmp 0x1400cadf6
mov eax, 0xeb55cfb2
jmp 0x1400cadf6
mov dword [rsp + 0x2c], r14d
mov eax, 0x4307b52c
lea r13, [0x14016d004]
jmp 0x1400cadf6
mov eax, dword [0x14015e628]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x698048db
mov ecx, 0x7c79c539
cmove eax, ecx
cmp dword [0x14015e62c], 0xa
cmovl eax, ecx
jmp 0x1400cadf6
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 4]
mov rcx, qword [rsp + 0x50]
mov dword [rcx], eax
mov eax, 0xd10d982b
jmp 0x1400cadf6
mov rcx, qword [rsp + 0x40]
call fcn.1400e60ca
mov rcx, qword [rsp + 0x50]
cmp eax, dword [rcx]
mov eax, 0x4879d3b1
mov ecx, 0x38cc60b2
cmove eax, ecx
jmp 0x1400cadf6
cmp eax, 0x36e4448
jne 0x1400cadf6
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret