Function at 0x1408add4a
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
stc
cmp r10w, r9w
mov qword [rax + 8], rcx
cmc
push rbp
xchg bp, bp
rcr ebp, cl
rcl bpl, 0xcb
push rbx
and bpl, r9b
sbb bpl, spl
movsx ebp, bp
push rsi
shl bp, 0xd0
shr ebp, cl
push rdi
shrd rbp, r15, 0x1e
bts bp, bp
push r12
bt bp, r14w
test sil, cl
push r13
not bpl
bts bp, si
push r14
push r15
btc rbp, 0x4f
cmc
movsx rbp, ax
lea rbp, [rax - 0xae8]
test sp, r9w
cmp rsp, r8
clc
sub rsp, 0xba8
jmp 0x1408addb8
mov qword [rbp - 0x40], 0xfffffffffffffffe
movaps xmmword [rax - 0x58], xmm6
mov rbx, rcx
xor edx, edx
movsx cx, dil
mov r8d, 0x248
lea rcx, [rbp + 0x160]
jmp 0x1408adde0
call fcn.1408bae9b
xor r14d, r14d
mov qword [rsp + 0x40], r14
mov rdx, rbx
sete cl
jmp 0x1408addf8
lea rcx, [rbp - 0x50]
call 0x1407afc74
movaps xmm6, xmmword [rbp - 0x50]
movaps xmmword [rsp + 0x50], xmm6
movd edi, xmm6
movzx edx, di
and rsi, 0x10c74e38
shr dx, 1
and sil, 0xb5
lea esi, [r14 + 1]
jmp 0x1408ade29
sub dx, si
je 0x1408aded8
mov rcx, qword [rbp - 0x48]
bt rax, rdi
sal ah, cl
shld ax, r9w, 0x8d
movzx eax, dx
clc
cmp word [rcx + rax*2], 0x5c
jmp 0x1408ade50
je 0x1408ade7a
cmp word [rcx + rax*2], 0x2f
je 0x1408ade7a
mov eax, 0xffff
clc
add dx, ax
jmp 0x1408ade6f
jne 0x1408ade42
jmp 0x1408aded8
movzx eax, dx
jmp 0x1408ade83
lea rcx, [rcx + rax*2]
jmp 0x1408ade90
add rcx, 2
test ebp, 0x744b4727
jmp 0x1408ade9f
mov qword [rsp + 0x58], rcx
cmp r9b, 0xa4
add dx, dx
stc
sub di, dx
test r8, 0x45e428a9
sub di, 2
jmp 0x1408adebf
mov word [rsp + 0x52], di
jmp 0x1408adec9
mov word [rsp + 0x50], di
jmp 0x1408aded3
movaps xmm6, xmmword [rsp + 0x50]
cmp qword [0x140074d88], r14
jmp 0x1408adee4
jne 0x1408adf5e
mov rax, qword gs:[0x60]
movsx edx, r14w
movzx r9d, r12w
mov rcx, qword [rax + 0x18]
bswap r9d
movsx dx, ch
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
xchg r9d, edx
seta dh
mov qword [rbp + 0xb00], r14
bswap rdx
lea r9, [rbp + 0xb00]
mov edx, 0x1e64b2a0
jmp 0x1408adf2e
mov rcx, qword [rcx + 0x30]
jmp 0x1408adf37
call fcn.140007fc0
mov rcx, qword [rbp + 0xb00]
bswap r8d
test eax, eax
mov dl, 0xe9
cmovs rcx, r14
mov qword [0x140074d88], rcx
add r8b, 0x22
rcr dh, cl
or dh, 0xab
lea r8, [rsp + 0x40]
bts rdx, r8
movzx edx, di
mov rdx, qword [rsp + 0x58]
xor ecx, ecx
call 0x1407700b9
test eax, eax
jmp 0x1408adf7e
je 0x1408adf93
mov rax, qword [rsp + 0x40]
jmp 0x1408adf8e
jmp 0x1408aea4e
lea rdx, [0x140047c24]
mov ecx, esi
jmp 0x1408adfa1
call 0x14068f2c3
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1408adfc2
mov rbx, r14
jmp 0x1408adfbd
jmp 0x1408aea34
mov rdx, rbx
cmove cx, r9w
jmp 0x1408adfd3
lea rcx, [rbp + 0x10]
call fcn.1400020ec
lea rax, [0x1400757e0]
mov qword [rbp + 0x170], rax
mov rax, qword [rbp + 0x20]
movzx ecx, dx
mov qword [rbp + 0x178], rax
movzx rcx, ax
lea rcx, [rbp + 0x160]
call 0x1405203ee
mov r13d, r14d
or bl, 0x5f
add r15b, spl
mov dword [rbp + 0xb00], r14d
shl rdi, cl
movsx rcx, bp
sar bh, cl
movzx ebx, word [rsp + 0x50]
shr rbx, 1
add r15b, 0x24
mov qword [rsp + 0x50], rbx
sal cx, 0xd2
mov r15d, 0x208
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
movsxd rcx, edi
sub eax, eax
mov ecx, 0x2813184a
mov rcx, r15
jmp 0x1408ae056
rep stosb byte [rdi], al
cwde
lahf
mov ecx, 0x16e21083
mov eax, dword [rbp + 0x40]
mov dword [rsp + 0x60], eax
bswap rcx
setno cl
mov ecx, 0x9c40
jmp 0x1408ae076
call 0x1402428ab
mov r15, rax
test r13w, 0x571a
test spl, r10b
cmc
test rax, rax
je 0x1408ae8ca
rdtsc
stc
sub ch, 0xdb
rol ecx, 0xba
shl rdx, 0x20
and cl, r11b
bsr ecx, ecx
or rax, rdx
movzx rcx, bp
movsx cx, r8b
mov rcx, rax
call 0x140146176
mov rcx, r15
jmp 0x1408ae0c2
call fcn.1408adb7d
mov r12, rax
cmp ah, 0xf6
stc
test rax, rax
jmp 0x1408ae0d6
je 0x1408ae60c
mov rdi, r12
test bpl, 0x18
sub rdi, r14
call 0x1401d107f
cdqe
test r10b, 0xb7
sub edx, edx
sal r13w, 0x8d
div rdi
lea rdx, [rdx + r14]
test dil, 0x5c
xor r13b, 0x88
mov ax, sp
mov r13, qword [r15 + rdx*8]
mov rax, qword [r15 + r14*8]
test si, 0x6070
mov qword [r15 + rdx*8], rax
mov qword [r15 + r14*8], r13
cmp r15b, 0x24
or rsi, 0xffffffffffffffff
test r12b, r15b
stc
sub edi, edi
inc rsi
test r13w, r8w
cmp word [r13 + rsi*2], di
jmp 0x1408ae140
jne 0x1408ae12d
cmp rsi, rbx
jmp 0x1408ae14e
jbe 0x1408ae5a6
mov rcx, r13
jmp 0x1408ae15c
call 0x14046cb95
test rax, rax
jne 0x1408ae5a6
mov qword [rsp + 0x68], rdi
movzx r9w, al
not r8
lea r9, [rbp + 0xb08]
setne r8b
cmovs r8, r13
lea r8, [rsp + 0x68]
jmp 0x1408ae191
call 0x14000af9c
cmp dword [rbp + 0xb08], edi
jmp 0x1408ae1a1
jge 0x1408ae1b4
mov al, dil
jmp 0x1408ae1af
jmp 0x1408ae268
mov rdx, r13
lea rcx, [rbp - 0x38]
jmp 0x1408ae1c0
call 0x1404d8c32
mov dword [rbp - 0x28], 0x30
movzx rax, si
movzx eax, bp
mov rax, qword [rsp + 0x68]
jmp 0x1408ae1de
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x10], 0x40
lea rax, [rbp - 0x38]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
lea r8, [rbp - 0x28]
bswap edx
movsx rdx, ax
movsx dx, r14b
mov edx, 5
bswap cx
seta ch
lea rcx, [rsp + 0x78]
call fcn.140707164
mov edi, eax
not cx
mov dword [rbp + 0xb08], eax
movsx cx, r8b
jmp 0x1408ae232
mov rcx, qword [rsp + 0x78]
jmp 0x1408ae23c
call fcn.14038b25a
mov rcx, qword [rsp + 0x68]
jmp 0x1408ae24b
call fcn.140500431
sub eax, eax
and al, spl
adc al, bl
test edi, edi
mov al, r14b
setns al
sub edi, edi
test edx, r12d
cmp ax, 0x301d
test al, al
jmp 0x1408ae26f
jne 0x1408ae5a6
mov ebx, 0x104
mov edx, ebx
movzx ecx, sp
xchg ecx, ecx
lea rcx, [rbp + 0x880]
call 0x140726415
lea r8, [0x14005bf70]
mov edx, ebx
lea rcx, [rbp + 0x880]
jmp 0x1408ae2a3
call 0x140514a8c
mov r8, r13
movsxd rcx, ebp
mov edx, ebx
lea rcx, [rbp + 0x880]
jmp 0x1408ae2bd
call 0x140587fc4
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
cwd
shr r8b, 0x89
mov dword [rsp + 0x20], 3
not r8
cmp al, 0xe5
xor r9d, r9d
movsx rdx, cx
mov edx, 0x80000000
lea r8d, [r9 + 1]
lea rcx, [rbp + 0x880]
jmp 0x1408ae2ff
call 0x1405b9839
mov rbx, rax
cmp dh, 0x8d
jmp 0x1408ae310
cmp rax, 0xffffffffffffffff
jmp 0x1408ae319
je 0x1408ae596
sub r9d, r9d
add cl, dh
movsx cx, r12b
sub r8d, r8d
shl ch, cl
mov cx, r14w
movsxd rcx, ecx
xor edx, edx
movzx rcx, r11w
mov ecx, 0x709a4a74
cmovo cx, r9w
mov rcx, rax
jmp 0x1408ae34d
call 0x14071233d
cmp eax, 0xffffffff
je 0x1408ae556
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0xaf8]
jmp 0x1408ae374
mov r8d, 0x40
lea rdx, [rbp + 0x50]
movsx cx, r8b
mov rcx, rbx
jmp 0x1408ae38b
call 0x1402d597f
test eax, eax
jmp 0x1408ae398
je 0x1408ae556
cmp dword [rbp + 0xaf8], 0x40
jne 0x1408ae556
mov eax, 0x5a4d
cmp ebx, ecx
cmp word [rbp + 0x50], ax
jmp 0x1408ae3bb
jne 0x1408ae556
mov edx, dword [rbp + 0x8c]
test edx, edx
jmp 0x1408ae3ce
je 0x1408ae556
sub r9d, r9d
xor r8d, r8d
jmp 0x1408ae3e6
mov rcx, rbx
jmp 0x1408ae3ee
call 0x140356bf3
cmp eax, 0xffffffff
jmp 0x1408ae3fc
je 0x1408ae556
mov qword [rsp + 0x20], rdi
setg cl
cwd
mov rcx, 0x6add301f
lea r9, [rbp + 0xaf8]
movsx edx, r9w
mov r8d, 0x108
bswap ecx
lea rdx, [rbp + 0x50]
movsx rcx, r13w
movsx ecx, r10w
xchg ecx, ecx
mov rcx, rbx
call 0x1403c6aa1
test eax, eax
je 0x1408ae556
cmp dword [rbp + 0xaf8], 0x108
jne 0x1408ae556
cmp dword [rbp + 0x50], 0x4550
jmp 0x1408ae461
jne 0x1408ae556
mov eax, 0x8664
stc
cmp word [rbp + 0x54], ax
jne 0x1408ae556
movzx eax, word [rbp + 0x66]
adc cl, r10b
bswap rcx
mov ecx, 0x2022
and ax, cx
cmp ax, cx
jmp 0x1408ae491
jne 0x1408ae556
mov eax, 0x20b
cmc
cmp word [rbp + 0x68], ax
jmp 0x1408ae4a6
jne 0x1408ae556
movzx eax, word [rbp + 0xac]
and cl, 0x78
sub cl, r13b
sub ax, 2
movsx cx, r10b
mov ecx, 1
clc
cmp r10w, r14w
cmp ax, cx
ja 0x1408ae556
test byte [rbp + 0xae], 0x40
jmp 0x1408ae4e1
je 0x1408ae556
cmp dword [rbp + 0x78], edi
jmp 0x1408ae4ef
je 0x1408ae556
cmp dword [rbp + 0xd4], 0x10
jmp 0x1408ae501
jb 0x1408ae556
cmp dword [rbp + 0x148], edi
jmp 0x1408ae512
jne 0x1408ae556
cmp dword [rbp + 0x14c], edi
jne 0x1408ae556
cmp dword [rbp + 0xf0], edi
jmp 0x1408ae52f
je 0x1408ae556
cmp dword [rbp + 0xf4], edi
jmp 0x1408ae540
je 0x1408ae556
mov eax, dword [rsp + 0x60]
cmp dword [rbp + 0xa0], eax
jae 0x1408ae55f
mov edi, 1
movzx cx, dh
mov rcx, rbx
jmp 0x1408ae567
call fcn.14051df5c
test dil, dil
jmp 0x1408ae574
jne 0x1408ae596
lea eax, [rsi + 1]
stc
cmp r15b, r15b
test di, 0x480e
cmp eax, 0x104
jmp 0x1408ae590
jb 0x1408ae5d5
mov rbx, qword [rsp + 0x50]
sal si, cl
movzx si, r15b
or sil, r11b
mov esi, 1
jmp 0x1408ae5b7
add r14, rsi
test rbp, 0x7d3e7f35
stc
cmp r14, r12
jmp 0x1408ae5ca
jae 0x1408ae605
jmp 0x1408ae0dc
mov r8, r13
xchg rdx, rdx
jmp 0x1408ae5e0
mov edx, 0x104
lea rcx, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
jmp 0x1408ae5f1
call 0x1402ccf68
mov esi, 1
rol di, cl
or dil, sil
cmp bpl, 0xff
mov r13d, dword [rbp + 0xb00]
xor r14d, r14d
neg dil
btc di, r11w
movzx di, dl
mov edi, r14d
test rsi, 0x4b3b3e4c
test r12, r12
je 0x1408ae656
mov rcx, qword [r15 + rdi*8]
jmp 0x1408ae638
call 0x1404b1614
lea rdi, [rdi + rsi]
stc
jmp 0x1408ae648
cmp rdi, r12
jmp 0x1408ae650
jb 0x1408ae62e
mov rcx, r15
jmp 0x1408ae65e
call 0x140579ecb
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
test r10d, esp
stc
or rdx, 0xffffffffffffffff
inc rdx
jmp 0x1408ae67f
cmp word [rax + rdx*2], r14w
jne 0x1408ae672
mov r15d, 0x208
test r14d, edx
test edx, edx
jmp 0x1408ae69a
je 0x1408ae8d5
lea rdi, [rbp - 0x80]
shl cx, cl
sub eax, eax
jmp 0x1408ae6ae
lea ecx, [rax + 0x30]
jmp 0x1408ae6b6
rep stosb byte [rdi], al
jmp 0x1408ae6bd
movdqu xmmword [rbp - 0x60], xmm6
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
movsx rcx, r9w
btr edi, r8d
cmp r9b, 0x74
mov qword [rbp - 0x78], rax
btc rdi, rsp
rcr edi, 0x2f
mov rdi, 0x606a19fd
add dx, dx
btc rcx, 0xc1
bsr di, sp
mov word [rbp - 0x80], dx
mov word [rbp - 0x7e], r15w
lea rdi, [rbp + 0x3b0]
xchg ch, dh
bsf edx, r13d
xadd ecx, edx
sub eax, eax
mov ecx, 0x4d0
sets dl
movzx dx, dl
movzx edx, r13w
rep stosb byte [rdi], al
mov dword [rbp + 0x3e0], 0x100010
jmp 0x1408ae72f
mov rax, qword [0x140074d88]
movzx dx, r13b
mov qword [rbp + 0x410], rax
cdq
mov qword [rbp + 0x420], 0x440
jmp 0x1408ae753
lea rdx, [rbp + 0x3b0]
mov cx, 0x14ed
jmp 0x1408ae763
mov rcx, 0xfffffffffffffffe
jmp 0x1408ae76f
call fcn.14084d041
test eax, eax
jmp 0x1408ae77b
js 0x1408ae8d5
lea r8, [rbp - 0x80]
movzx rdx, r11w
adc edx, r11d
lea rdx, [0x140048638]
stc
cmc
test bx, 0x6960
sub ecx, ecx
call 0x1402ae463
mov rbx, qword gs:[0x30]
test bx, 0x6e08
rol r9d, 0x82
mov rdi, qword [rbx + 0x28]
xadd r8w, r9w
mov qword [rbx + 0x28], r14
lea r9, [rsp + 0x40]
xchg r8w, r8w
lea r8, [rbp - 0x80]
xor edx, edx
cmp sil, dil
stc
xor ecx, ecx
jmp 0x1408ae7db
call 0x140778824
mov esi, eax
cmp bpl, r12b
mov qword [rbx + 0x28], rdi
mov dword [rbp - 0x6c], eax
clc
bt rdx, rax
xor edx, ebx
mov eax, 1
sal r8b, cl
mov dword [rbp - 0x70], eax
lea r8, [rbp - 0x80]
cdq
movzx dx, spl
lea rdx, [0x140048638]
sub ecx, ecx
call 0x1406362df
lea rdi, [rbp + 0x3b0]
xor eax, eax
mov ecx, 0x4d0
mov rdx, 0x5c0f3dab
cdq
rep stosb byte [rdi], al
jmp 0x1408ae839
mov dword [rbp + 0x3e0], 0x100010
movzx rdx, bx
not edx
mov qword [rbp + 0x410], r14
movsx edx, r12w
mov qword [rbp + 0x420], 0x400
lea rdx, [rbp + 0x3b0]
movsxd rcx, ebp
lea rcx, [rax - 2]
jmp 0x1408ae872
call fcn.1405fd28f
test esi, esi
js 0x1408ae8d5
mov rbx, qword [rsp + 0x40]
test ecx, 0x7027620
cmp dword [rbp + 0x198], r14d
jmp 0x1408ae896
jne 0x1408ae913
test rbx, rbx
jmp 0x1408ae8a4
je 0x1408ae8e3
mov rcx, rbx
jmp 0x1408ae8b2
call 0x1403329a1
mov rbx, r14
jmp 0x1408ae8c0
mov qword [rsp + 0x40], rbx
jmp 0x1408ae8e3
mov r15d, 0x208
bt si, 0xfc
mov rbx, qword [rsp + 0x40]
cmp rdx, r11
xchg esi, esi
bts si, cx
mov esi, 1
cmc
cmp ebp, 0x5b097d84
add r13d, esi
clc
mov dword [rbp + 0xb00], r13d
cmp r13d, 3
jae 0x1408ae913
mov rbx, qword [rsp + 0x50]
jmp 0x1408ae90e
jmp 0x1408ae03c
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
ror ch, 0xd8
sub ecx, 0x4eb23bb4
sub eax, eax
mov cx, 0xe3f
movzx ecx, r8w
movsx ecx, r9w
mov rcx, r15
jmp 0x1408ae939
rep stosb byte [rdi], al
seta dil
shld edi, r11d, 0x55
mov rdi, qword [rbp + 0x10]
cmp cl, r10b
jmp 0x1408ae950
test rdi, rdi
jmp 0x1408ae958
je 0x1408ae97f
mov rcx, qword [rbp + 0x18]
test rcx, rcx
jmp 0x1408ae96a
je 0x1408ae97f
rep stosb byte [rdi], al
sal bh, 0x44
bsr bx, r15w
mov rbx, qword [rsp + 0x40]
test rbx, rbx
jmp 0x1408ae987
jne 0x1408ae9bd
xor edx, edx
movsxd r8, r8d
xchg r8, rcx
jmp 0x1408ae99a
mov r8d, 0x800
mov rcx, qword [rbp + 0xaf0]
call 0x1405a372e
mov rbx, rax
movzx cx, r9b
xchg cl, cl
mov qword [rsp + 0x40], rax
not ch
lea rcx, [rbp + 0x160]
jmp 0x1408ae9ca
call 0x1401e96b1
mov rdx, qword [rbp + 0x10]
test spl, sil
test rdx, rdx
je 0x1408aea27
mov rcx, qword [rdx - 8]
clc
test rcx, rcx
jmp 0x1408ae9ed
je 0x1408aea10
mov rdi, rdx
test r14d, r9d
jmp 0x1408ae9fe
sub eax, eax
jmp 0x1408aea05
rep stosb byte [rdi], al
movzx cx, r12b
movzx rcx, r8w
mov rcx, qword [rdx - 0x10]
call 0x1406b7f56
mov qword [rbp + 0x10], r14
dec al
bsr ax, dx
mov qword [rbp + 0x18], r14
mov rax, qword [rsp + 0x70]
test r15b, dl
test spl, 0xec
cmc
test rax, rax
je 0x1408aea4b
mov rcx, rax
jmp 0x1408aea46
call 0x1403494fb
mov rax, rbx
movaps xmm6, xmmword [rsp + 0xb90]
add rsp, 0xba8
jmp 0x1408aea6b
pop r15
pop r14
movzx rbp, bp
bswap esi
pop r13
movzx rsi, sp
cmovne bx, bp
bswap edi
pop r12
movzx rsi, si
mov sil, cl
setp bl
pop rdi
pop rsi
movzx bx, ah
pop rbx
bswap bp
movsx rbp, r8w
pop rbp
ret