Function at 0x1408b3b72
Capabilities:
Access peb ldr_data
Parse pe header

Disassembly:
mov rax, rsp
cmc
stc
test r10, 0x44502b66
mov qword [rax + 8], rcx
cmp bl, r9b
push rbp
rcl ebp, cl
cmovb bp, r11w
push rbx
add rbp, r11
stc
push rsi
movsx ebp, ax
push rdi
push r12
ror bpl, 0xac
sar bpl, 0xf9
push r13
push r14
xchg bpl, bpl
push r15
lea rbp, [rax - 0xae8]
clc
sub rsp, 0xba8
jmp 0x1408b3bbe
mov qword [rbp - 0x40], 0xfffffffffffffffe
jmp 0x1408b3bcb
movaps xmmword [rax - 0x58], xmm6
mov rbx, rcx
xor edx, edx
mov cl, 0xb0
movsx ecx, r12w
movzx ecx, bx
mov r8d, 0x248
lea rcx, [rbp + 0x160]
jmp 0x1408b3bef
call fcn.1408c0f73
xor r14d, r14d
cmove ecx, r13d
jmp 0x1408b3c00
mov qword [rsp + 0x40], r14
sets cl
cdq
mov rdx, rbx
cmovae cx, r10w
xchg cx, cx
lea rcx, [rbp - 0x50]
call 0x1404b08e2
movaps xmm6, xmmword [rbp - 0x50]
movaps xmmword [rsp + 0x50], xmm6
movd edi, xmm6
movzx edx, di
movsxd rsi, r9d
cmovno esi, r14d
shr dx, 1
shl si, cl
movzx esi, si
rcr si, 0xd5
lea esi, [r14 + 1]
sub dx, si
jmp 0x1408b3c4e
je 0x1408b3cfb
mov rcx, qword [rbp - 0x48]
and rax, rax
rol ax, 0xbd
movzx eax, dx
cmc
test r14w, 0x6c17
cmp word [rcx + rax*2], 0x5c
jmp 0x1408b3c73
je 0x1408b3ca9
cmp word [rcx + rax*2], 0x2f
jmp 0x1408b3c83
je 0x1408b3ca9
mov eax, 0xffff
jmp 0x1408b3c96
add dx, ax
jmp 0x1408b3c9e
jne 0x1408b3c5f
jmp 0x1408b3cfb
movzx eax, dx
cmp dl, 0xc9
lea rcx, [rcx + rax*2]
test r8b, sil
add rcx, 2
mov qword [rsp + 0x58], rcx
jmp 0x1408b3cc9
add dx, dx
sub di, dx
cmp r12, 0x7d823b31
test r10d, 0x31d66b24
cmc
sub di, 2
jmp 0x1408b3ce7
mov word [rsp + 0x52], di
mov word [rsp + 0x50], di
jmp 0x1408b3cf6
movaps xmm6, xmmword [rsp + 0x50]
cmp qword [0x140074d88], r14
jmp 0x1408b3d07
jne 0x1408b3d7b
mov rax, qword gs:[0x60]
bswap ecx
mov rcx, qword [rax + 0x18]
bswap r9d
mov rax, qword [rcx + 0x10]
bswap rcx
mov rcx, qword [rax]
setge dh
mov qword [rbp + 0xb00], r14
movsx r9, dx
lea r9, [rbp + 0xb00]
movsx dx, r9b
cmovns dx, r11w
bswap dx
mov edx, 0x1e64b2a0
jmp 0x1408b3d55
mov rcx, qword [rcx + 0x30]
call fcn.140007fc0
mov rcx, qword [rbp + 0xb00]
test eax, eax
cmovs rcx, r14
sbb r8b, r8b
mov qword [0x140074d88], rcx
cmp r11w, si
rcr dl, cl
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
test r14b, 0x20
cmp r14b, sil
cmp bx, 0x4a0b
sub ecx, ecx
jmp 0x1408b3d98
call 0x1406af4d2
test eax, eax
jmp 0x1408b3da5
je 0x1408b3dba
mov rax, qword [rsp + 0x40]
jmp 0x1408b3db5
jmp 0x1408b4864
lea rdx, [0x140047c24]
mov ecx, esi
jmp 0x1408b3dc8
call 0x14037885d
mov qword [rsp + 0x70], rax
test rax, rax
jne 0x1408b3de9
mov rbx, r14
jmp 0x1408b3de4
jmp 0x1408b4845
mov rdx, rbx
movzx ecx, r14w
lea rcx, [rbp + 0x10]
jmp 0x1408b3df9
call fcn.1400020ec
lea rax, [0x1400757e0]
movsx cx, dil
mov qword [rbp + 0x170], rax
movsx ax, r15b
mov rax, qword [rbp + 0x20]
bswap rcx
movzx ecx, r8w
movzx rcx, di
mov qword [rbp + 0x178], rax
bswap ecx
not cx
lea rcx, [rbp + 0x160]
jmp 0x1408b3e3d
call 0x14058f23f
mov r13d, r14d
rcl cx, cl
not cl
sal dil, 0x96
mov dword [rbp + 0xb00], r14d
bsf rbx, r14
movzx ebx, word [rsp + 0x50]
movsx di, bl
shr rbx, 1
adc cl, 0xac
cmc
mov qword [rsp + 0x50], rbx
mov r15d, 0x208
cmc
movsx rcx, sp
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
sub eax, eax
bswap cx
cmovne rcx, r15
mov rcx, r15
jmp 0x1408b3e92
rep stosb byte [rdi], al
nop
jmp 0x1408b3e9b
mov eax, dword [rbp + 0x40]
mov dword [rsp + 0x60], eax
bswap cx
movsx ecx, r9w
mov ecx, 0x9c40
jmp 0x1408b3eb3
call 0x140887a35
mov r15, rax
stc
test rax, rax
jmp 0x1408b3ec5
je 0x1408b46fc
rdtsc
inc ch
xchg ch, cl
shl rdx, 0x20
or rax, rdx
mov rcx, rax
call 0x140432d8c
mov rcx, r15
jmp 0x1408b3ee9
call 0x1408b39b4
mov r12, rax
test rax, rax
je 0x1408b4443
mov rdi, r12
jmp 0x1408b3f03
sub rdi, r14
call 0x140147d24
cdqe
ror r13b, cl
rcr r13b, cl
movzx r13w, r13b
sub edx, edx
sal r13, cl
xchg r13b, r13b
div rdi
btr r13w, 0x95
movsx eax, sp
add rdx, r14
sar r13b, 0xd8
bsr r13d, r13d
mov r13, qword [r15 + rdx*8]
cwde
cdqe
mov rax, qword [r15 + r14*8]
jmp 0x1408b3f4f
mov qword [r15 + rdx*8], rax
mov qword [r15 + r14*8], r13
or rsi, 0xffffffffffffffff
clc
stc
xor edi, edi
jmp 0x1408b3f64
inc rsi
cmp word [r13 + rsi*2], di
jmp 0x1408b3f72
jne 0x1408b3f64
cmp rsi, rbx
jmp 0x1408b3f80
jbe 0x1408b43ea
mov rcx, r13
jmp 0x1408b3f8e
call 0x1405fade1
test rax, rax
jmp 0x1408b3f9c
jne 0x1408b43ea
mov qword [rsp + 0x68], rdi
movzx r8w, dl
mov r8, 0x47f9355a
jmp 0x1408b3fb8
lea r9, [rbp + 0xb08]
lea r8, [rsp + 0x68]
jmp 0x1408b3fc9
call fcn.14000af9c
cmp dword [rbp + 0xb08], edi
jmp 0x1408b3fd9
jge 0x1408b3fec
mov al, dil
jmp 0x1408b3fe7
jmp 0x1408b409b
mov rdx, r13
lea rcx, [rbp - 0x38]
jmp 0x1408b3ff8
call 0x14009bff4
mov dword [rbp - 0x28], 0x30
movsxd rax, r9d
mov ax, r11w
mov rax, qword [rsp + 0x68]
jmp 0x1408b4016
mov qword [rbp - 0x20], rax
cmove ax, di
cwde
mov dword [rbp - 0x10], 0x40
movsx rax, r9w
lea rax, [rbp - 0x38]
mov qword [rbp - 0x18], rax
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
lea r8, [rbp - 0x28]
mov edx, 5
movsx ecx, bx
jmp 0x1408b404b
lea rcx, [rsp + 0x78]
jmp 0x1408b4055
call fcn.140485e18
mov edi, eax
movsx ecx, r15w
mov dword [rbp + 0xb08], eax
movzx rcx, r12w
jmp 0x1408b406f
mov rcx, qword [rsp + 0x78]
jmp 0x1408b4079
call fcn.140199f38
mov rcx, qword [rsp + 0x68]
call fcn.1405c1d25
xor eax, eax
test edi, edi
setns al
clc
test cx, bx
sub edi, edi
cmp r10w, 0x3ea0
test al, al
jmp 0x1408b40a2
jne 0x1408b43ea
mov ebx, 0x104
movsx cx, r15b
jmp 0x1408b40bb
mov edx, ebx
not rcx
cmovge cx, r15w
lea rcx, [rbp + 0x880]
jmp 0x1408b40d1
call 0x14024e6b7
lea r8, [0x14005bf70]
setnp cl
mov edx, ebx
mov cl, 0xf2
movsx rcx, sp
lea rcx, [rbp + 0x880]
call 0x140579ef7
mov r8, r13
not cl
mov edx, ebx
bswap ecx
movsx cx, bpl
lea rcx, [rbp + 0x880]
call 0x14029a98a
mov qword [rsp + 0x30], rdi
dec r8d
adc dl, r9b
mov dword [rsp + 0x28], 0x80
shrd ecx, r10d, 0xf5
mov dword [rsp + 0x20], 3
sub rcx, 0x15a06370
btc r8w, si
rcl dh, cl
xor r9d, r9d
mov edx, 0x80000000
movzx r8d, r9w
lea r8d, [r9 + 1]
movzx ecx, bp
lea rcx, [rbp + 0x880]
jmp 0x1408b415e
call 0x1404d8c2c
mov rbx, rax
clc
cmp rax, 0xffffffffffffffff
jmp 0x1408b4171
je 0x1408b43dc
sub r9d, r9d
neg ch
xor r8d, r8d
sub edx, edx
cmovb cx, r12w
movzx ecx, r8w
mov rcx, rax
call 0x14014d71b
cmp eax, 0xffffffff
je 0x1408b43b2
mov qword [rsp + 0x20], rdi
lea r9, [rbp + 0xaf8]
cqo
xchg dl, r8b
mov r8d, 0x40
bswap rcx
lea rdx, [rbp + 0x50]
setbe cl
movsx ecx, sp
movzx cx, bpl
mov rcx, rbx
call 0x14028863b
test eax, eax
jmp 0x1408b41d5
je 0x1408b43b2
cmp dword [rbp + 0xaf8], 0x40
jmp 0x1408b41e7
jne 0x1408b43b2
mov eax, 0x5a4d
cmc
test r11w, si
jmp 0x1408b41fc
cmp word [rbp + 0x50], ax
jne 0x1408b43b2
mov edx, dword [rbp + 0x8c]
clc
stc
test edx, edx
jmp 0x1408b4215
je 0x1408b43b2
xor r9d, r9d
movzx cx, r15b
seto ch
sub r8d, r8d
mov rcx, rbx
jmp 0x1408b4231
call fcn.14082e248
cmp eax, 0xffffffff
jmp 0x1408b423f
je 0x1408b43b2
mov qword [rsp + 0x20], rdi
cqo
lea r9, [rbp + 0xaf8]
cwd
movsxd rdx, esi
mov r8d, 0x108
cdq
not cl
movzx cx, bl
lea rdx, [rbp + 0x50]
movzx rcx, cx
movzx cx, r11b
cmovae cx, si
mov rcx, rbx
call 0x140452d4a
test eax, eax
jmp 0x1408b4286
je 0x1408b43b2
cmp dword [rbp + 0xaf8], 0x108
jne 0x1408b43b2
cmp dword [rbp + 0x50], 0x4550
jmp 0x1408b42a8
jne 0x1408b43b2
mov eax, 0x8664
test r8w, 0x24c7
cmp r12b, r15b
cmp word [rbp + 0x54], ax
jmp 0x1408b42c5
jne 0x1408b43b2
movzx eax, word [rbp + 0x66]
and cl, 0x49
xchg cl, cl
cmovo cx, cx
mov ecx, 0x2022
and ax, cx
clc
cmp ax, cx
jmp 0x1408b42e9
jne 0x1408b43b2
mov eax, 0x20b
cmp word [rbp + 0x68], ax
jmp 0x1408b42fd
jne 0x1408b43b2
movzx eax, word [rbp + 0xac]
sbb ecx, esp
btr rcx, r9
rcr cl, cl
sub ax, 2
stc
bts cx, r11w
mov ecx, 1
cmp cl, sil
test r11, rdx
cmp ax, cx
ja 0x1408b43b2
test byte [rbp + 0xae], 0x40
jmp 0x1408b433c
je 0x1408b43b2
cmp dword [rbp + 0x78], edi
jmp 0x1408b434a
je 0x1408b43b2
cmp dword [rbp + 0xd4], 0x10
jb 0x1408b43b2
cmp dword [rbp + 0x148], edi
jmp 0x1408b4368
jne 0x1408b43b2
cmp dword [rbp + 0x14c], edi
jmp 0x1408b4379
jne 0x1408b43b2
cmp dword [rbp + 0xf0], edi
je 0x1408b43b2
cmp dword [rbp + 0xf4], edi
jmp 0x1408b4396
je 0x1408b43b2
mov eax, dword [rsp + 0x60]
stc
cmp dword [rbp + 0xa0], eax
jmp 0x1408b43ac
jae 0x1408b43bd
mov edi, 1
mov cl, dh
movsx ecx, r15w
mov rcx, rbx
call fcn.1405e46f9
test dil, dil
jne 0x1408b43dc
lea eax, [rsi + 1]
cmp eax, 0x104
jb 0x1408b4410
mov rbx, qword [rsp + 0x50]
xor esi, 0x238d2c73
sub rsi, r9
mov esi, 1
lea r14, [r14 + rsi]
cmp dil, 0xbf
jmp 0x1408b43fd
cmp r14, r12
jmp 0x1408b4405
jae 0x1408b4437
jmp 0x1408b3efa
mov r8, r13
movsxd rdx, r8d
not ch
mov edx, 0x104
lea rcx, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
jmp 0x1408b4429
call 0x140353781
mov esi, 1
rol rdi, 0x80
mov r13d, dword [rbp + 0xb00]
cmovl di, r9w
xor r14d, r14d
inc edi
shl di, cl
mov edi, r14d
jmp 0x1408b4455
test r12, r12
jmp 0x1408b445d
je 0x1408b4486
mov rcx, qword [r15 + rdi*8]
jmp 0x1408b446c
call 0x140841ab4
add rdi, rsi
test bh, 0xde
cmp rdi, r12
jmp 0x1408b4480
jb 0x1408b4463
mov rcx, r15
jmp 0x1408b448e
call 0x140803a84
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
test r10b, 0x16
or rdx, 0xffffffffffffffff
jmp 0x1408b44a8
inc rdx
cmp r12b, 0xbd
cmp word [rax + rdx*2], r14w
jmp 0x1408b44b9
jne 0x1408b44a8
mov r15d, 0x208
jmp 0x1408b44d1
test edx, edx
jmp 0x1408b44d8
je 0x1408b470e
lea rdi, [rbp - 0x80]
sar cx, cl
sub eax, eax
lea ecx, [rax + 0x30]
jmp 0x1408b44ef
rep stosb byte [rdi], al
jmp 0x1408b44f6
movdqu xmmword [rbp - 0x60], xmm6
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
sal ecx, 0xbc
mov qword [rbp - 0x78], rax
add dx, dx
sete ch
test dh, 0x48
mov word [rbp - 0x80], dx
sub cx, dx
mov word [rbp - 0x7e], r15w
lea rdi, [rbp + 0x3b0]
xor eax, eax
xchg dl, dh
mov ecx, 0x4d0
rep stosb byte [rdi], al
cqo
cmovp cx, di
cwde
mov dword [rbp + 0x3e0], 0x100010
cwd
movzx rdx, bp
mov rax, qword [0x140074d88]
movsx ecx, r15w
mov qword [rbp + 0x410], rax
cwd
setge dh
xchg ch, ch
mov qword [rbp + 0x420], 0x440
xchg dl, cl
lea rdx, [rbp + 0x3b0]
jmp 0x1408b4579
mov rcx, 0xfffffffffffffffe
jmp 0x1408b4585
call fcn.14036b65b
test eax, eax
jmp 0x1408b4591
js 0x1408b470e
lea r8, [rbp - 0x80]
rcr dh, cl
shl dh, 0x1b
not dx
lea rdx, [0x140048638]
test si, 0x48ea
clc
test r15d, esp
sub ecx, ecx
jmp 0x1408b45ba
call 0x140233c73
mov rbx, qword gs:[0x30]
test rdi, 0x2889194e
mov rdi, qword [rbx + 0x28]
mov qword [rbx + 0x28], r14
lea r9, [rsp + 0x40]
lea r8, [rbp - 0x80]
sub edx, edx
xor ecx, ecx
jmp 0x1408b45ea
call 0x1407fdece
mov esi, eax
movsxd r8, r8d
clc
mov qword [rbx + 0x28], rdi
xchg edx, edx
neg r8w
adc dl, bpl
mov dword [rbp - 0x6c], eax
bts r8d, r15d
or ax, 0x3896
sal r8b, cl
mov eax, 1
rcl r8w, 0x90
rcr r8, 0x91
mov dword [rbp - 0x70], eax
lea r8, [rbp - 0x80]
lea rdx, [0x140048638]
cmp bl, sil
clc
xor ecx, ecx
jmp 0x1408b4638
call 0x14058cf20
lea rdi, [rbp + 0x3b0]
shrd rcx, rsi, 0x76
xor eax, eax
cmovae dx, dx
mov ecx, 0x4d0
not dh
xchg edx, edx
rep stosb byte [rdi], al
movzx edx, dx
movsx rcx, r8w
mov dword [rbp + 0x3e0], 0x100010
mov qword [rbp + 0x410], r14
setg cl
mov qword [rbp + 0x420], 0x400
setp cl
movzx rcx, r11w
movzx dx, dil
lea rdx, [rbp + 0x3b0]
movsx ecx, ax
lea rcx, [rax - 2]
jmp 0x1408b46a0
call 0x1403478c5
test esi, esi
jmp 0x1408b46ac
js 0x1408b470e
mov rbx, qword [rsp + 0x40]
jmp 0x1408b46bc
cmp dword [rbp + 0x198], r14d
jmp 0x1408b46c8
jne 0x1408b474f
test rbx, rbx
jmp 0x1408b46d6
je 0x1408b4713
mov rcx, rbx
jmp 0x1408b46e4
call 0x140489491
mov rbx, r14
mov qword [rsp + 0x40], rbx
jmp 0x1408b46f7
jmp 0x1408b4713
mov r15d, 0x208
bt si, 0xf5
shr sil, 0xa
rol bh, 0x20
mov rbx, qword [rsp + 0x40]
mov esi, 1
test sp, 0x2d39
cmp r8b, 0xb7
add r13d, esi
test sil, 0x89
jmp 0x1408b472d
mov dword [rbp + 0xb00], r13d
test r12, 0x767812de
cmp r13d, 3
jae 0x1408b474f
mov rbx, qword [rsp + 0x50]
jmp 0x1408b3e79
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
inc ch
xor eax, eax
movsx rcx, bx
mov rcx, r15
jmp 0x1408b4766
rep stosb byte [rdi], al
and di, di
mov rdi, qword [rbp + 0x10]
test rdi, rdi
jmp 0x1408b4777
je 0x1408b47a0
mov rcx, qword [rbp + 0x18]
test rcx, rcx
jmp 0x1408b4789
je 0x1408b47a0
rep stosb byte [rdi], al
cmp r14w, dx
rol rbx, 0xde
mov rbx, qword [rsp + 0x40]
stc
cmc
test rbx, rbx
jne 0x1408b47d9
xor edx, edx
mov r8w, 0x2463
cmovb cx, si
setno r8b
mov r8d, 0x800
mov rcx, qword [rbp + 0xaf0]
call 0x140194e9a
mov rbx, rax
movzx rcx, sp
mov qword [rsp + 0x40], rax
movzx ecx, bx
lea rcx, [rbp + 0x160]
jmp 0x1408b47e6
call 0x14084f3af
mov rdx, qword [rbp + 0x10]
test r10w, r10w
jmp 0x1408b47f9
test rdx, rdx
je 0x1408b4839
mov rcx, qword [rdx - 8]
stc
cmp esi, r12d
test rcx, rcx
je 0x1408b4823
mov rdi, rdx
sub eax, eax
rep stosb byte [rdi], al
cmovge ecx, r10d
mov ecx, ebp
bswap rcx
mov rcx, qword [rdx - 0x10]
jmp 0x1408b482c
call 0x140393eb8
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov rax, qword [rsp + 0x70]
test r8w, 0x5010
stc
test rax, rax
jmp 0x1408b484e
je 0x1408b4861
mov rcx, rax
jmp 0x1408b485c
call 0x140345490
mov rax, rbx
movaps xmm6, xmmword [rsp + 0xb90]
add rsp, 0xba8
movzx rbx, r11w
pop r15
pop r14
pop r13
pop r12
movsx bx, ah
pop rdi
pop rsi
movzx bp, r13b
pop rbx
pop rbp
jmp 0x1408b4892
ret