Function at 0x180014e0c
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x18004fa38]
xor rax, rsp
mov qword [rbp - 8], rax
mov eax, dword [0x18004f4b4]
mov r15, rdx
mov byte [rbp - 0x60], 0x51
mov r14d, r8d
mov dword [rbp - 0x50], eax
movsxd r8, dword [0x18004f4f0]
mov byte [rbp - 0x60], 0x84
movsx eax, word [0x18004f518]
mov dword [rbp - 0x34], eax
mov eax, 0x5a21
mov word [rbp - 0x5c], ax
mov dword [rbp - 0x38], 0x5f
mov r9d, dword [0x18004f508]
mov rax, qword [0x18004f4c8]
mov dword [rbp - 0x48], eax
mov al, byte [0x18004f3cb]
mov byte [rbp - 0x60], al
mov eax, 0x92f3
mov word [rbp - 0x54], ax
movzx eax, word [0x18004f520]
mov word [rbp - 0x5c], ax
movabs rax, 0x53dcb511f2a42
mov qword [rbp - 0x40], rax
movzx eax, word [0x18004f4b8]
movzx eax, byte [str.NMicrosoft_Corporat]
mov rdx, qword [0x18004f4e0]
mov byte [rbp - 0x60], 0xff
mov word [rbp - 0x50], ax
mov al, byte [0x18004f3ce]
mov byte [rbp - 0x58], 0x39
movzx eax, word [0x18004f4dc]
mov byte [rbp - 0x58], al
movsx eax, byte [0x18004f41e]
mov word [rbp - 0x58], ax
movzx eax, word [0x18004f50c]
mov eax, dword [0x18004f4a8]
mov byte [rbp - 0x58], al
mov dword [rbp - 0x4c], 0x52
mov qword [rbp - 0x40], 0x1e559ed3
movsx eax, word [0x18004f4e8]
mov dword [rbp - 0x4c], eax
mov al, byte [0x18004f3ca]
mov dword [rbp - 0x4c], 0x1c5
movzx eax, word [0x18004f4d0]
mov dword [rbp - 0x4c], eax
movabs rax, 0x74784789d38ed
mov qword [rbp - 0x40], rax
movzx eax, word [0x18004f4e8]
mov word [rbp - 0x58], ax
mov qword [rbp - 0x40], 0x3cf9
mov eax, dword [str.1G_t_Z]
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x40], 0x44
movzx eax, word [0x18004f4d0]
mov eax, dword [0x180700ab0]
mov dword [rbp - 0x58], eax
mov eax, dword [rbp - 0x58]
add eax, 0x3ff
mov dword [rbp - 0x48], eax
movzx eax, word [rbp - 0x50]
add ax, dx
mov word [rbp - 0x50], ax
movzx eax, word [0x18004f50c]
movzx edx, byte [0x18004f3ce]
add edx, eax
not edx
mov dword [0x18004f4d4], edx
xor edx, edx
movzx ecx, word [rbp - 0x54]
movzx eax, byte [0x18004f3cb]
sub ecx, eax
movzx eax, word [rbp - 0x54]
sub cx, ax
mov word [rbp - 0x54], cx
mov eax, dword [rbp - 0x58]
add eax, 0x643
mov dword [rbp - 0x4c], eax
movsx ecx, word [0x18004f4b8]
movzx eax, byte [0x18004f3cf]
cmp ecx, eax
setl dl
movzx eax, word [0x18004f4b8]
xor ecx, ecx
cmp ax, 0x5d
setl cl
cmp edx, ecx
jbe 0x180014ffe
imul eax, dword [0x18004f4c0], 0x1c
mov dword [0x18004f4f0], eax
movzx eax, byte [rbp - 0x60]
sub eax, 0x5dbf4643
mov dword [rbp - 0x50], eax
mov eax, dword [rbp - 0x58]
mov ecx, 0xffffbd2c
add eax, 0x32e
mov dword [rbp - 0x58], eax
movzx eax, word [rbp - 0x5c]
and ax, cx
mov word [0x18004f4b0], ax
mov eax, dword [0x180700ab0]
mov dword [rbp - 0x5c], eax
mov eax, dword [0x18004f4a8]
test eax, eax
mov eax, dword [0x180700ab0]
mov qword [0x18004f4e0], rax
sete cl
add cl, byte [0x18004f3cf]
mov byte [rbp - 0x60], cl
mov eax, dword [rbp - 0x5c]
add eax, 0x637
mov dword [rbp - 0x50], eax
mov eax, dword [rbp - 0x5c]
add eax, 0x652
mov dword [rbp - 0x4c], eax
movzx eax, word [0x18004f4e8]
movzx ecx, word [0x18004f50c]
inc al
add cl, al
mov byte [0x18004f3ca], cl
mov eax, dword [rbp - 0x5c]
add eax, 0x5c9
mov dword [rbp - 0x44], eax
mov eax, dword [0x180700ab0]
mov dword [rbp - 0x5c], eax
mov al, byte [0x18004f41e]
sub al, 0x5e
mov byte [0x18004f3cf], al
mov eax, dword [rbp - 0x5c]
add eax, 0x30db
mov dword [rbp - 0x44], eax
mov rcx, qword [0x18004f4c8]
mov rax, qword [0x18004f4c8]
and ecx, 0x1c
or rax, rcx
mov qword [0x18004f4c8], rax
mov eax, dword [rbp - 0x5c]
add eax, 0xf85
mov dword [rbp - 0x40], eax
mov eax, dword [str.1G_t_Z]
test eax, eax
je 0x1800150ed
mov al, byte [0x18004f3f6]
add al, 0x66
mov byte [0x18004f41e], al
movzx eax, byte [0x18004f3cb]
mov qword [0x18004f500], rax
mov eax, dword [rbp - 0x5c]
movdqa xmm0, xmmword [0x180038800]
add eax, 0x3d6
mov dword [rbp - 0x5c], eax
movdqa xmm1, xmmword [0x1800387f0]
movzx eax, r9b
imul ecx, eax, 0x7e
mov eax, dword [str.1G_t_Z]
sub qword [0x18004f4e0], r8
not cl
add cl, al
mov byte [0x18004f3ce], cl
movzx eax, word [0x18004f4bc]
movzx eax, word [0x18004f518]
mov ecx, dword [rbp - 0x58]
mov eax, dword [rbp - 0x58]
sub ecx, eax
mov edx, dword [rbp - 0x48]
mov eax, dword [rbp - 0x48]
add edx, eax
imul edx, ecx
mov ecx, dword [rbp - 0x5c]
mov eax, dword [rbp - 0x44]
add eax, 0x18cf1ee1
shl ecx, 2
movdqu xmmword [rbp - 0x30], xmm0
sub ecx, edx
mov word [rbp - 0x10], 0x9d
add ecx, eax
xor edx, edx
mov dword [rbp - 0x44], ecx
mov rcx, qword gs:[0x30]
mov eax, dword [0x18004f510]
mov dword [0x18004f4f0], eax
mov eax, dword [0x18004f508]
test eax, eax
movsx eax, byte [rbp - 0x60]
mov r8, qword [rcx + 0x60]
sete dl
add eax, edx
cdqe
mov qword [0x18004f500], rax
movzx eax, word [0x18004f4dc]
mov eax, dword [0x18004f508]
mov rax, qword [r8 + 0x18]
movdqu xmmword [rbp - 0x20], xmm1
mov rcx, qword [rax + 0x20]
mov eax, dword [0x18004f4d4]
mov esi, dword [rbp - 0x44]
mov rdi, qword [rcx]
mov cl, byte [0x18004f3cf]
lea rbx, [rdi - 0x10]
lea eax, [rcx - 0x16]
or cl, al
mov eax, dword [rbp - 0x4c]
mov eax, dword [rbp - 0x50]
mov eax, dword [rbp - 0x50]
mov eax, dword [rbp - 0x50]
cmp dword [rbp - 0x38], 0xf36c
movabs rax, 0xc5c534a747c6a
mov byte [0x18004f3cf], cl
mov rcx, qword [0x18004f4e0]
cmove rcx, rax
mov qword [0x18004f4e0], rcx
jmp 0x18001522d
mov rcx, qword [rbx + 0x60]
call fcn.18001444c
cmp eax, esi
je 0x18001525d
mov eax, 0x5fbb
mov word [rbp - 0x5c], ax
movzx eax, word [rbp - 0x54]
sub al, 0x6d
mov byte [0x18004f3f6], al
mov rbx, qword [rbx]
cmp qword [rbx], rdi
jne 0x180015208
xor eax, eax
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.18002c480
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
movsx edx, byte [rbp - 0x60]
mov r9d, r14d
mov al, byte [rbp - 0x60]
mov r8, r15
imul edx, dword [0x18004f4f0]
mov rcx, qword [rbx + 0x30]
sub al, dl
mov edx, dword [rbx + 0x40]
mov byte [rbp - 0x60], al
call fcn.180013998
mov dword [rbp - 0x48], 3
mov r8, rax
movzx ecx, word [0x18004f50c]
mov edx, dword [rbp - 0x48]
dec edx
sub edx, 1
je 0x1800152af
cmp edx, 1
jne 0x1800152b3
mov eax, dword [rbp - 0x34]
sub al, 0x54
mov byte [0x18004f3cf], al
jmp 0x1800152b3
movzx eax, word [rbp - 0x54]
mov rax, r8
jmp 0x180015234