Function at 0x1800fda40
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xe8]
sub rsp, 0x1c0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1803c57c0]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov r12, rcx
xor eax, eax
mov dword [rsp + 0x40], eax
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
movaps xmm1, xmmword [0x180282b60]
movups xmmword [rsp + 0x60], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq r8, xmm0
movq rdx, xmm1
lea rcx, [rbp + 0x10]
call fcn.1800b9f50
nop
mov ecx, dword [0x1803c9960]
mov rax, qword gs:[0x58]
mov edx, 0x14
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x1803c7ce4], ecx
jg 0x1800fe126
mov r12, qword [r12]
cmp byte [r12], 1
jne 0x1800fe0b0
mov rax, qword [r12 + 8]
mov rdi, qword [rax]
mov qword [rsp + 0x40], rdi
mov rbx, qword [rdi + 8]
mov r13, rdi
mov r15, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x20]
mov r14, qword [rbp + 0x10]
cmp byte [rbx + 0x19], 0
jne 0x1800fdb7f
nop dword [rax + rax]
lea rcx, [rbx + 0x20]
lea rdx, [rbp + 0x10]
cmp r15, 0xf
cmova rdx, r14
mov rdi, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 0xf
jbe 0x1800fdb3e
mov rcx, qword [rcx]
mov r8, rdi
cmp rsi, rdi
cmovb r8, rsi
call fcn.18020d4e0
test eax, eax
je 0x1800fdb57
jns 0x1800fdb62
mov al, 0xff
jmp 0x1800fdb64
cmp rdi, rsi
jae 0x1800fdb60
mov al, 0xff
jmp 0x1800fdb64
jbe 0x1800fdb6e
mov al, 1
test al, al
jns 0x1800fdb6e
mov rbx, qword [rbx + 0x10]
jmp 0x1800fdb74
mov r13, rbx
mov rbx, qword [rbx]
cmp byte [rbx + 0x19], 0
je 0x1800fdb20
mov rdi, qword [rsp + 0x40]
cmp byte [r13 + 0x19], 0
jne 0x1800fe0b8
lea rdx, [r13 + 0x20]
mov rbx, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1800fdb9c
mov rdx, qword [rdx]
lea rcx, [rbp + 0x10]
cmp r15, 0xf
cmova rcx, r14
mov r8, rsi
cmp rbx, rsi
cmovb r8, rbx
call fcn.18020d4e0
test eax, eax
je 0x1800fdbc1
jns 0x1800fdbcc
mov al, 0xff
jmp 0x1800fdbce
cmp rsi, rbx
jae 0x1800fdbca
mov al, 0xff
jmp 0x1800fdbce
jbe 0x1800fdbd6
mov al, 1
test al, al
js 0x1800fe0b8
cmp r13, rdi
je 0x1800fe0b8
lea rdx, [rbp + 0x10]
mov rcx, r12
call fcn.18011e9e0
mov rdx, rax
lea rcx, [rbp]
call fcn.180116370
nop
cmp byte [rbp], 0
jne 0x1800fdc0f
xor edx, edx
lea rcx, [rbp + 8]
call fcn.18011ede0
nop
jmp 0x1800fe0b0
lea rcx, [rbp]
call fcn.1801120b0
movsxd rsi, eax
movzx edx, byte [rbp]
lea rcx, [rbp + 8]
call fcn.18011ede0
nop
cmp esi, 0xffffffff
je 0x1800fe0b0
mov r8d, 1
lea rdx, [0x180284528]
lea rcx, [rbp - 0x50]
call fcn.1801168b0
mov r11, rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
movdqa xmm1, xmmword [0x180281cf0]
movdqu xmmword [rbp + 0x40], xmm1
mov byte [rbp + 0x30], 0
mov dword [rsp + 0x40], 1
movups xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x180284890]
movdqu xmmword [rbp - 0x10], xmm1
mov word [rbp - 0x20], 0x20
lea rdx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rdx, qword [rbp + 0x10]
mov r9, qword [rbp + 0x20]
add r9, rdx
lea r8, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova r8, qword [rbp + 0x10]
xor r15d, r15d
mov dword [rsp + 0x30], r15d
lea rax, [rbp - 0x20]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r11
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x70]
call fcn.18010ed20
nop
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800fdd05
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fdd00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fe157
call fcn.1801ddb18
mov rdx, qword [rbp + 0x28]
cmp rdx, 0xf
jbe 0x1800fdd40
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fdd3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fe15d
call fcn.1801ddb18
movups xmm0, xmmword [rbp + 0x30]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rbp + 0x40]
movups xmmword [rbp + 0x20], xmm1
movdqa xmm0, xmmword [0x180281cf0]
movdqu xmmword [rbp + 0x40], xmm0
mov byte [rbp + 0x30], 0
mov rdi, 0xffffffffffffffff
mov rcx, qword [rbp - 0x50]
test rcx, rcx
je 0x1800fddac
mov eax, edi
lock xadd dword [rcx + 0x2c], eax
cmp eax, 1
jne 0x1800fddac
mov rbx, qword [rbp - 0x50]
test rbx, rbx
je 0x1800fddac
nop word [rax + rax]
mov rcx, rbx
lea rax, [rbx + 0x10]
mov rbx, qword [rax]
mov qword [rax], r15
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
test rbx, rbx
jne 0x1800fdd90
mov qword [rbp - 0x50], r15
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x1800fddd5
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1800fddd5
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
lea rax, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rax, qword [rbp + 0x10]
movsx ecx, byte [rax]
call fcn.1801e708c
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0xf
cmova rcx, qword [rbp + 0x10]
mov byte [rcx], al
mov qword [rsp + 0x40], rsi
lea rcx, [rsp + 0x40]
call fcn.1801ef278
movdqa xmm1, xmmword [0x1802849b0]
movdqu xmmword [rbp - 0x20], xmm1
mov r8b, 0x53
mov r9b, 0x25
movdqa xmm0, xmm1
psrldq xmm0, 1
movd ecx, xmm0
movd edx, xmm1
xor cl, dl
mov byte [rbp - 0x1f], cl
xor byte [rbp - 0x1e], dl
xor byte [rbp - 0x1d], dl
xor byte [rbp - 0x1c], dl
xor byte [rbp - 0x1b], dl
xor byte [rbp - 0x1a], dl
xor byte [rbp - 0x19], dl
xor byte [rbp - 0x18], dl
xor byte [rbp - 0x17], dl
xor byte [rbp - 0x16], dl
xor byte [rbp - 0x15], dl
xor byte [rbp - 0x14], dl
xor byte [rbp - 0x13], dl
xor byte [rbp - 0x12], dl
xor byte [rbp - 0x11], dl
xor r8b, dl
mov byte [rbp - 0x10], r8b
xor r9b, dl
mov byte [rbp - 0xf], r9b
mov byte [rbp - 0xe], 0
mov r9, rax
lea r8, [rbp - 0x1f]
mov edx, 0x1a
lea rcx, [rbp + 0x30]
call fcn.1801ef6cc
lea rax, [rbp - 0x50]
mov qword [rsp + 0x70], rax
lea rdx, [rbp + 0x10]
lea rcx, [rbp - 0x50]
call fcn.1800ba7d0
mov rsi, rax
mov qword [rbp - 0x28], rax
movups xmm6, xmmword [0x180282530]
mov byte [rbp], 0x43
mov cl, 0x38
mov dl, 0x3e
movzx r8d, cl
movzx r9d, dl
mov r10b, 0x79
mov r11b, 0x63
movzx eax, cl
movzx ebx, dl
xor r14d, r14d
xor cl, 0x43
mov byte [rbp + 1], cl
xor dl, 0x43
mov byte [rbp + 2], dl
xor r8b, 0x43
mov byte [rbp + 3], r8b
xor r9b, 0x43
mov byte [rbp + 4], r9b
xor r10b, 0x43
mov byte [rbp + 5], r10b
xor r11b, 0x43
mov byte [rbp + 6], r11b
xor al, 0x43
mov byte [rbp + 7], al
xor bl, 0x43
mov byte [rbp + 8], bl
mov byte [rbp + 9], r14b
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r15
mov qword [rbp - 8], r15
lea rax, [rbp + 1]
inc rdi
cmp byte [rax + rdi], r14b
jne 0x1800fdf15
mov r8, rdi
lea rdx, [rbp + 1]
lea rcx, [rbp - 0x20]
call fcn.1800b9f50
nop
movq qword [rsp + 0x78], xmm6
psrldq xmm6, 8
movq qword [rbp - 0x80], xmm6
mov rcx, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1800fdf4c
mov rcx, qword [rsi]
mov rax, qword [rsi + 0x10]
mov qword [rbp - 0x78], rcx
mov qword [rbp - 0x70], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x60], rax
movups xmm0, xmmword [rsp + 0x78]
movups xmmword [rbp + 0x70], xmm0
movups xmm1, xmmword [rbp - 0x78]
movups xmmword [rbp + 0x80], xmm1
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp - 0x60], 0xcdd
lea rax, [rbp + 0x70]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x20]
cmp qword [rbp - 8], 0xf
cmova rax, qword [rbp - 0x20]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp - 0x10]
mov qword [rsp + 0x58], rax
movaps xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.1801cae20
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0xf
jbe 0x1800fe010
mov rcx, qword [rsi]
inc rdx
cmp rdx, 0x1000
jb 0x1800fe00b
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1800fe169
mov rcx, r8
call fcn.1801ddb18
mov qword [rsi + 0x10], r15
mov qword [rsi + 0x18], 0xf
mov byte [rsi], 0
lea rcx, [rbp + 0x50]
call fcn.1800bb860
nop
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x1800fe064
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fe05f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fe163
call fcn.1801ddb18
movdqa xmm0, xmmword [0x180281cf0]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0xf
jbe 0x1800fe0b0
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800fe0ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fe16f
call fcn.1801ddb18
mov r15, qword [rbp + 0x28]
mov r14, qword [rbp + 0x10]
cmp r15, 0xf
jbe 0x1800fe0eb
lea rdx, [r15 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800fe0e3
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800fe120
mov rcx, r14
call fcn.1801ddb18
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.1801ddf60
lea r11, [rsp + 0x1c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1801e4b4c
nop
lea rcx, [0x1803c7ce4]
call fcn.1801de054
cmp dword [0x1803c7ce4], 0xffffffff
jne 0x1800fdae3
mov byte [0x1803c7ce0], 0
lea rcx, [0x1803c7ce4]
call fcn.1801ddfe8
jmp 0x1800fdae3
call fcn.1801e4b4c
int3
call fcn.1801e4b4c
nop
call fcn.1801e4b4c
int3
call fcn.1801e4b4c
nop
call fcn.1801e4b4c
int3