Function at 0x7fff25d52700
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x50
mov rsi, qword gs:[0x60]
mov rdi, rcx
mov al, byte [0x7fff25fd0fa8]
mov rbx, qword [rsi + 0x20]
mov byte [rcx + 0x20], al
mov eax, dword [rbx + 0xa4]
mov dword [rcx + 8], eax
mov eax, dword [rbx + 0x408]
mov dword [rcx + 0x1c], eax
test eax, eax
je 0x7fff25ddd1ba
cmp qword [rbx + 0x10], 0xfffffffffffffffd
setne al
mov byte [rdi + 0x21], al
mov rcx, qword [rbx + 0xd8]
test rcx, rcx
je 0x7fff25d527ad
lea rdx, str.dde.
call qword [sym.imp.ntdll.dll_wcsstr]
nop dword [rax + rax]
test rax, rax
jne 0x7fff25ddd1ce
mov dword [rdi], eax
test dword [rbx + 0xa4], 0x200
jne 0x7fff25ddd21c
mov rcx, qword [rbx + 0xd8]
lea rdx, str.hotkey.
call qword [sym.imp.ntdll.dll_wcsstr]
nop dword [rax + rax]
test rax, rax
jne 0x7fff25ddd224
mov dword [rdi + 4], eax
mov eax, dword [rbx + 0xa4]
test al, 0x10
jne 0x7fff25ddd272
test al, 1
jne 0x7fff25d5285f
test al, 8
jne 0x7fff25ddd288
test al, 2
jne 0x7fff25ddd2a9
test al, 4
jne 0x7fff25ddd2ca
cmp qword [rbx + 0xb8], 0
je 0x7fff25ddd2e5
movups xmm0, xmmword [rbx + 0xb0]
movdqu xmmword [rbp - 0x10], xmm0
mov r8d, 0x20a
lea rdx, [rdi + 0x24]
lea rcx, [rdi + 0x22]
lea r9, [rbp - 0x10]
call fcn.7fff25d5287c
mov rax, qword [rsi + 0x18]
lea rdx, [rdi + 0x230]
mov r8d, 0x100
lea rcx, [rdi + 0x22e]
mov r9, qword [rax + 0x10]
add r9, 0x58
call fcn.7fff25d5287c
lea r9, [rbx + 0x38]
mov r8d, 0x20a
lea rdx, [rdi + 0x332]
lea rcx, [rdi + 0x330]
call fcn.7fff25d5287c
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
movzx eax, word [rbx + 0xa8]
mov word [rdi + 0xe], ax
mov eax, dword [rbx + 0xa4]
jmp 0x7fff25d527c3
mov rax, qword gs:[0x30]
mov ecx, dword [rax + 0x40]
mov dword [rdi + 0x1c], ecx
jmp 0x7fff25d52742
add rax, 8
mov qword [rbp - 0x28], rax
cmp word [rax], 0x30
jb 0x7fff25ddd1f2
movzx ecx, word [rax]
cmp cx, 0x39
ja 0x7fff25ddd1f2
add rax, 2
movzx ecx, word [rax]
cmp cx, 0x30
jae 0x7fff25ddd1df
sub ax, word [rbp - 0x28]
lea r8, [rbp + 0x20]
xor edx, edx
mov word [rbp - 0x30], ax
lea rcx, [rbp - 0x30]
mov word [rbp - 0x2e], ax
call qword [sym.imp.ntdll.dll_RtlUnicodeStringToInteger]
nop dword [rax + rax]
mov eax, dword [rbp + 0x20]
jmp 0x7fff25d52775
mov eax, dword [rbx + 0x20]
jmp 0x7fff25d527aa
add rax, 0xe
mov qword [rbp - 0x18], rax
cmp word [rax], 0x30
jb 0x7fff25ddd248
movzx ecx, word [rax]
cmp cx, 0x39
ja 0x7fff25ddd248
add rax, 2
movzx ecx, word [rax]
cmp cx, 0x30
jae 0x7fff25ddd235
sub ax, word [rbp - 0x18]
lea r8, [rbp + 0x28]
xor edx, edx
mov word [rbp - 0x20], ax
lea rcx, [rbp - 0x20]
mov word [rbp - 0x1e], ax
call qword [sym.imp.ntdll.dll_RtlUnicodeStringToInteger]
nop dword [rax + rax]
mov eax, dword [rbp + 0x28]
jmp 0x7fff25d527aa
movzx eax, word [rbx + 0xa0]
mov word [rdi + 0xc], ax
mov eax, dword [rbx + 0xa4]
jmp 0x7fff25d527bb
movzx eax, word [rbx + 0x98]
mov word [rdi + 0x10], ax
movzx eax, word [rbx + 0x9c]
mov word [rdi + 0x12], ax
mov eax, dword [rbx + 0xa4]
jmp 0x7fff25d527cb
movzx eax, word [rbx + 0x90]
mov word [rdi + 0x14], ax
movzx eax, word [rbx + 0x94]
mov word [rdi + 0x16], ax
mov eax, dword [rbx + 0xa4]
jmp 0x7fff25d527d3
movzx eax, word [rbx + 0x88]
mov word [rdi + 0x18], ax
movzx eax, word [rbx + 0x8c]
mov word [rdi + 0x1a], ax
jmp 0x7fff25d527db
lea rdx, [0x7fff25fa4e98]
lea rcx, [rbp - 0x10]
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
nop dword [rax + rax]
nop
jmp 0x7fff25d527f5