Function at 0x180001ef0
Capabilities:
Access peb ldr_data

Disassembly:
push rbp
sub rsp, 0xe0
lea rbp, [rsp + 0x80]
mov qword [rbp - 0x30], rcx
mov rax, qword [0x180092380]
xor rax, rbp
mov qword [rbp + 0x58], rax
mov dword [rbp - 0x24], 0xdca760ab
mov eax, dword [rbp - 0x24]
mov dword [rbp - 0x34], eax
sub eax, 0x87fcdb66
je 0x1800023ea
jmp 0x180001f2f
mov eax, dword [rbp - 0x34]
sub eax, 0x89613524
je 0x1800024ef
jmp 0x180001f42
mov eax, dword [rbp - 0x34]
sub eax, 0x926406c9
je 0x1800029a5
jmp 0x180001f55
mov eax, dword [rbp - 0x34]
sub eax, 0x94d35791
je 0x180002559
jmp 0x180001f68
mov eax, dword [rbp - 0x34]
sub eax, 0x98d41c23
je 0x180002618
jmp 0x180001f7b
mov eax, dword [rbp - 0x34]
sub eax, 0xb557871a
je 0x180002445
jmp 0x180001f8e
mov eax, dword [rbp - 0x34]
sub eax, 0xb75bf1be
je 0x180002850
jmp 0x180001fa1
mov eax, dword [rbp - 0x34]
sub eax, 0xbf2c3879
je 0x180002747
jmp 0x180001fb4
mov eax, dword [rbp - 0x34]
sub eax, 0xbfc961e8
je 0x18000282d
jmp 0x180001fc7
mov eax, dword [rbp - 0x34]
sub eax, 0xc05b15c1
je 0x1800026a0
jmp 0x180001fda
mov eax, dword [rbp - 0x34]
sub eax, 0xc1567445
je 0x18000250f
jmp 0x180001fed
mov eax, dword [rbp - 0x34]
sub eax, 0xc714e88c
je 0x1800023f6
jmp 0x180002000
mov eax, dword [rbp - 0x34]
sub eax, 0xcb583f83
je 0x1800029c7
jmp 0x180002013
mov eax, dword [rbp - 0x34]
sub eax, 0xdca760ab
je 0x1800021e0
jmp 0x180002026
mov eax, dword [rbp - 0x34]
sub eax, 0xdd390cce
je 0x180002281
jmp 0x180002039
mov eax, dword [rbp - 0x34]
sub eax, 0xed6c2614
je 0x180002985
jmp 0x18000204c
mov eax, dword [rbp - 0x34]
sub eax, 0xf8c4837e
je 0x180002b57
jmp 0x18000205f
mov eax, dword [rbp - 0x34]
sub eax, 0xfcf72974
je 0x180002920
jmp 0x180002072
mov eax, dword [rbp - 0x34]
sub eax, 0x889f54f
je 0x180002821
jmp 0x180002085
mov eax, dword [rbp - 0x34]
sub eax, 0xc488319
je 0x180002991
jmp 0x180002098
mov eax, dword [rbp - 0x34]
sub eax, 0x15dbe133
je 0x180002943
jmp 0x1800020ab
mov eax, dword [rbp - 0x34]
sub eax, 0x20655aff
je 0x180002796
jmp 0x1800020be
mov eax, dword [rbp - 0x34]
sub eax, 0x226fde5c
je 0x18000289f
jmp 0x1800020d1
mov eax, dword [rbp - 0x34]
sub eax, 0x2381edf9
je 0x180002ae2
jmp 0x1800020e4
mov eax, dword [rbp - 0x34]
sub eax, 0x2f59151a
je 0x180002b67
jmp 0x1800020f7
mov eax, dword [rbp - 0x34]
sub eax, 0x35122a5f
je 0x18000295a
jmp 0x18000210a
mov eax, dword [rbp - 0x34]
sub eax, 0x43333174
je 0x18000292c
jmp 0x18000211d
mov eax, dword [rbp - 0x34]
sub eax, 0x526ab1f6
je 0x1800026f2
jmp 0x180002130
mov eax, dword [rbp - 0x34]
sub eax, 0x577920f0
je 0x180002ad2
jmp 0x180002143
mov eax, dword [rbp - 0x34]
sub eax, 0x57c79f42
je 0x180002624
jmp 0x180002156
mov eax, dword [rbp - 0x34]
sub eax, 0x61699822
je 0x1800024d8
jmp 0x180002169
mov eax, dword [rbp - 0x34]
sub eax, 0x63226643
je 0x1800026fe
jmp 0x18000217c
mov eax, dword [rbp - 0x34]
sub eax, 0x633022fb
je 0x180002971
jmp 0x18000218f
mov eax, dword [rbp - 0x34]
sub eax, 0x6b652fbc
je 0x1800024cc
jmp 0x1800021a2
mov eax, dword [rbp - 0x34]
sub eax, 0x6c116917
je 0x180002b77
jmp 0x1800021b5
mov eax, dword [rbp - 0x34]
sub eax, 0x71c03d59
je 0x180002200
jmp 0x1800021c8
mov eax, dword [rbp - 0x34]
sub eax, 0x773a3e8e
je 0x180002844
jmp 0x1800021db
jmp 0x180002b7e
mov eax, 0x10
call fcn.180058950
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x18], rax
mov dword [rbp - 0x24], 0x71c03d59
jmp 0x180002b7e
mov ecx, dword [0x1800953fc]
mov eax, dword [0x1800953f8]
mov edx, ecx
add edx, 0x6df88ac0
sub edx, 1
sub edx, 0x6df88ac0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcb583f83
mov ecx, 0xdd390cce
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov r9, qword [rbp - 0x30]
mov eax, 0x10
mov qword [rbp - 0x48], rax
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov rdx, rsp
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov rcx, rsp
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov r8, rsp
mov qword [rbp - 0x10], r8
call fcn.180058950
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x40], rax
mov eax, 0x210
mov qword [rbp - 0x50], rax
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x50]
mov r8, rsp
mov qword [rbp - 8], r8
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov r8, rsp
mov qword [rbp], r8
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x48]
mov r8, rsp
mov qword [rbp + 8], r8
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x40]
mov r8, rsp
mov qword [rbp + 0x10], r8
mov r8, qword [rbp - 0x18]
mov qword [r8], r9
mov r8, qword gs:[0x60]
mov qword [rdx], r8
mov rdx, qword [rdx]
mov rdx, qword [rdx + 0x18]
mov qword [rcx], rdx
mov rdx, qword [rcx]
add rdx, 0x20
mov rcx, qword [rbp - 0x10]
mov qword [rcx], rdx
mov rcx, qword [rbp - 0x10]
mov rcx, qword [rcx]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov rcx, qword [rbp - 8]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
add rsp, 0x20
mov rcx, qword [rbp]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
mov rax, qword [rbp - 0x40]
add rsp, 0x20
mov rcx, qword [rax]
mov rax, qword [rbp + 8]
mov qword [rax], rcx
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
mov edx, eax
add edx, 0x324f5dd5
sub edx, 1
sub edx, 0x324f5dd5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb583f83
mov ecx, 0x87fcdb66
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0xc714e88c
jmp 0x180002b7e
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
mov edx, eax
sub edx, 0x4d3370d3
sub edx, 1
add edx, 0x4d3370d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x577920f0
mov ecx, 0xb557871a
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov rax, qword [rax]
mov qword [rbp + 0x18], rax
mov ecx, dword [0x1800953fc]
mov eax, dword [0x1800953f8]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x577920f0
mov ecx, 0x6b652fbc
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0x61699822
jmp 0x180002b7e
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rbp + 0x20], rax
mov dword [rbp - 0x24], 0x89613524
jmp 0x180002b7e
mov rdx, qword [rbp + 0x18]
mov r8, qword [rbp + 0x20]
mov eax, 0x633022fb
mov ecx, 0xc1567445
cmp rdx, r8
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2381edf9
mov ecx, 0x94d35791
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
add rcx, 0xfffffffffffffff0
mov rax, qword [rbp + 0x10]
mov qword [rax], rcx
mov rcx, qword [rbp - 8]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
add rsp, 0x20
mov rcx, qword [rbp]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov r8, qword [rax + 0x50]
mov rcx, qword [rbp - 8]
mov edx, 0x104
sub rsp, 0x20
call fcn.180061b18
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov rax, qword [rax]
mov qword [rbp + 0x28], rax
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
mov edx, eax
sub edx, 0x2d8e88bc
sub edx, 1
add edx, 0x2d8e88bc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2381edf9
mov ecx, 0x98d41c23
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0x57c79f42
jmp 0x180002b7e
mov ecx, dword [0x1800953fc]
mov eax, dword [0x1800953f8]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf8c4837e
mov ecx, 0xc05b15c1
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
xor r8d, r8d
sub r8d, 1
mov edx, eax
add edx, r8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8c4837e
mov ecx, 0x526ab1f6
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0x63226643
jmp 0x180002b7e
mov r8, qword [rbp + 0x28]
mov rcx, qword [rbp + 0x30]
mov edx, 0x104
sub rsp, 0x20
call fcn.180061b18
add rsp, 0x20
mov rdx, qword [rbp - 8]
mov rcx, qword [rbp]
sub rsp, 0x20
call section..text
add rsp, 0x20
mov edx, eax
mov eax, 0xb75bf1be
mov ecx, 0xbf2c3879
cmp edx, 0
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
mov edx, eax
add edx, 0x559c52bd
sub edx, 1
sub edx, 0x559c52bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f59151a
mov ecx, 0x20655aff
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
add rax, 0x30
mov qword [rbp + 0x38], rax
mov ecx, dword [0x1800953fc]
mov eax, dword [0x1800953f8]
xor r8d, r8d
sub r8d, 1
mov edx, ecx
add edx, r8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and r11b, cl
mov r9b, r8b
and r9b, 0
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2f59151a
mov ecx, 0x889f54f
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0xbfc961e8
jmp 0x180002b7e
mov rax, qword [rbp + 0x38]
mov rax, qword [rax]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x24], 0x773a3e8e
jmp 0x180002b7e
mov dword [rbp - 0x24], 0xc488319
jmp 0x180002b7e
mov eax, dword [0x1800953fc]
mov ecx, dword [0x1800953f8]
mov edx, eax
add edx, 0xbe54e3d2
sub edx, 1
sub edx, 0xbe54e3d2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c116917
mov ecx, 0x226fde5c
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov ecx, dword [0x1800953fc]
mov eax, dword [0x1800953f8]
mov edx, ecx
add edx, 0xd28a4ea7
sub edx, 1
sub edx, 0xd28a4ea7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete r11b
cmp eax, 0xa
setl r10b
mov al, r11b
xor al, 0xff
mov r8b, r10b
xor r8b, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and r11b, cl
mov r9b, r8b
and r9b, 0xff
and r10b, cl
or dl, r11b
or r9b, r10b
xor dl, r9b
or al, r8b
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6c116917
mov ecx, 0xfcf72974
test dl, 1
cmovne eax, ecx
mov dword [rbp - 0x24], eax
jmp 0x180002b7e
mov dword [rbp - 0x24], 0x43333174
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov rax, qword [rax]
mov qword [rbp + 0x40], rax
mov dword [rbp - 0x24], 0x15dbe133
jmp 0x180002b7e
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov dword [rbp - 0x24], 0x35122a5f
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov rcx, qword [rbp + 0x48]
mov qword [rax], rcx
mov dword [rbp - 0x24], 0xc714e88c
jmp 0x180002b7e
mov qword [rbp - 0x20], 0
mov dword [rbp - 0x24], 0xed6c2614
jmp 0x180002b7e
mov dword [rbp - 0x24], 0xc488319
jmp 0x180002b7e
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x50], rax
mov dword [rbp - 0x24], 0x926406c9
jmp 0x180002b7e
mov rax, qword [rbp + 0x50]
mov qword [rbp - 0x58], rax
mov rcx, qword [rbp + 0x58]
xor rcx, rbp
sub rsp, 0x20
call fcn.1800589b0
mov rax, qword [rbp - 0x58]
lea rsp, [rbp + 0x60]
pop rbp
ret
mov r11, qword [rbp - 0x30]
mov eax, 0x10
mov qword [rbp - 0x78], rax
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r9, rsp
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r8, rsp
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov rdx, rsp
call fcn.180058950
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x68], rax
mov eax, 0x210
mov qword [rbp - 0x80], rax
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x80]
mov rcx, rsp
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r10, rsp
mov qword [rbp - 0x70], r10
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x78]
mov r10, rsp
mov qword [rbp - 0x60], r10
call fcn.180058950
sub rsp, rax
mov rax, qword [rbp - 0x68]
mov r10, qword [rbp - 0x18]
mov qword [r10], r11
mov r10, qword gs:[0x60]
mov qword [r9], r10
mov r9, qword [r9]
mov r9, qword [r9 + 0x18]
mov qword [r8], r9
mov r8, qword [r8]
add r8, 0x20
mov qword [rdx], r8
mov rdx, qword [rdx]
mov rdx, qword [rdx]
mov qword [rax], rdx
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
mov rcx, qword [rbp - 0x70]
add rsp, 0x20
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
mov rcx, qword [rbp - 0x68]
mov rax, qword [rbp - 0x60]
add rsp, 0x20
mov rcx, qword [rcx]
mov qword [rax], rcx
mov dword [rbp - 0x24], 0xdd390cce
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov dword [rbp - 0x24], 0xb557871a
jmp 0x180002b7e
mov rax, qword [rbp + 8]
mov rcx, qword [rax]
add rcx, 0xfffffffffffffff0
mov rax, qword [rbp + 0x10]
mov qword [rax], rcx
mov rcx, qword [rbp - 8]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
add rsp, 0x20
mov rcx, qword [rbp]
xor edx, edx
mov r8d, 0x208
sub rsp, 0x20
call fcn.18005c4a0
add rsp, 0x20
mov rax, qword [rbp + 0x10]
mov rax, qword [rax]
mov r8, qword [rax + 0x50]
mov rcx, qword [rbp - 8]
mov edx, 0x104
sub rsp, 0x20
call fcn.180061b18
add rsp, 0x20
mov rax, qword [rbp - 0x18]
mov dword [rbp - 0x24], 0x94d35791
jmp 0x180002b7e
mov rax, qword [rbp]
mov dword [rbp - 0x24], 0xc05b15c1
jmp 0x180002b7e
mov rax, qword [rbp + 0x10]
mov dword [rbp - 0x24], 0x20655aff
jmp 0x180002b7e
mov dword [rbp - 0x24], 0x226fde5c
jmp 0x180001f19