Function at 0x180019100
Capabilities:
Access peb ldr_data
Get process filename

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x1800b94b8]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r12, rcx
mov qword [rbp - 0x69], rcx
mov qword [rbp - 0x71], rcx
xor r14d, r14d
mov dword [rcx], r14d
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
lea ecx, [r14 + 0x50]
call fcn.180077ac8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [r12 + 8], rax
lea rcx, [r12 + 0x18]
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov qword [r12 + 0x30], 7
mov qword [r12 + 0x38], 8
mov dword [r12], 0x3f800000
mov r8, qword [r12 + 8]
lea edx, [r14 + 0x10]
call fcn.18001aaf0
nop
mov rax, qword gs:[0x60]
mov rsi, qword [rax + 0x68]
mov qword [rbp - 0x71], rsi
mov r13d, r14d
cmp dword [rsi + 0xc], r14d
jbe 0x180019710
mov ebx, r14d
mov qword [rbp - 0x79], rbx
nop
mov qword [rbp - 0x31], r14
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x19], 7
mov word [rbp - 0x31], r14w
mov ecx, 0x200
call fcn.180077ac8
mov rdx, rax
mov qword [rbp - 0x21], 0xff
mov qword [rbp - 0x19], 0xff
movzx eax, r14w
mov rdi, rdx
mov ecx, 0xff
rep stosw word [rdi], ax
mov word [rdx + 0x1fe], r14w
mov qword [rbp - 0x31], rdx
mov qword [rbp - 0x51], r14
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], 7
mov word [rbp - 0x51], r14w
mov ecx, 0x200
call fcn.180077ac8
mov rdx, rax
mov qword [rbp - 0x41], 0xff
mov qword [rbp - 0x39], 0xff
movzx eax, r14w
mov rdi, rdx
mov ecx, 0xff
rep stosw word [rdi], ax
mov word [rdx + 0x1fe], r14w
mov qword [rbp - 0x51], rdx
mov ecx, dword [rsi + 0x14]
add rcx, rsi
mov eax, dword [rcx + rbx*8 + 4]
lea rbx, [rax + rax*2]
mov edi, dword [rsi + 0x10]
add rdi, rsi
lea rcx, [rbp - 0x31]
cmp qword [rbp - 0x19], 8
cmovae rcx, qword [rbp - 0x31]
mov r8d, dword [rdi + rbx*8 + 0xc]
mov edx, dword [rdi + rbx*8 + 4]
add rdx, rsi
call fcn.180078bfa
mov eax, dword [rdi + rbx*8 + 0x10]
lea rcx, [rbp - 0x51]
cmp qword [rbp - 0x39], 8
cmovae rcx, qword [rbp - 0x51]
mov r8d, dword [rax + rsi + 0x10]
mov edx, dword [rax + rsi + 0xc]
add rdx, rsi
call fcn.180078bfa
lea r15, [rbp - 0x31]
mov r14, qword [rbp - 0x19]
cmp r14, 8
setae cl
mov rax, qword [rbp - 0x31]
cmovae r15, rax
mov r8, 0xffffffffffffffff
mov rdi, r8
inc rdi
cmp word [r15 + rdi*2], 0
jne 0x1800192d1
cmp rdi, r14
ja 0x18001930b
lea rbx, [rbp - 0x31]
test cl, cl
cmovne rbx, rax
mov qword [rbp - 0x21], rdi
add rdi, rdi
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call fcn.180078c00
xor edx, edx
mov word [rdi + rbx], dx
jmp 0x180019419
movabs rdx, 0x7ffffffffffffffe
cmp rdi, rdx
ja 0x180019762
mov rbx, rdi
or rbx, 7
cmp rbx, rdx
jbe 0x18001932f
mov rbx, rdx
jmp 0x180019350
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r14, rax
jbe 0x180019345
mov rbx, rdx
jmp 0x180019350
lea rax, [r14 + rcx]
cmp rbx, rax
cmovb rbx, rax
mov rax, rbx
add rax, 1
cmovb rax, r8
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x18001975c
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x1800193a7
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001975c
mov rcx, rax
call fcn.180077ac8
test rax, rax
je 0x180019747
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1800193b8
test rcx, rcx
je 0x1800193b3
call fcn.180077ac8
jmp 0x1800193b5
xor eax, eax
mov rsi, rax
mov qword [rbp - 0x21], rdi
mov qword [rbp - 0x19], rbx
add rdi, rdi
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call fcn.180078bfa
xor edx, edx
mov word [rdi + rsi], dx
cmp r14, 8
jb 0x180019415
lea rdx, [r14*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001940e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019747
call fcn.180077e84
xor edx, edx
mov qword [rbp - 0x31], rsi
lea r15, [rbp - 0x51]
mov r14, qword [rbp - 0x39]
cmp r14, 8
setae cl
mov rax, qword [rbp - 0x51]
cmovae r15, rax
mov r9, 0xffffffffffffffff
mov rdi, r9
nop word [rax + rax]
inc rdi
cmp word [r15 + rdi*2], 0
jne 0x180019440
cmp rdi, r14
ja 0x18001947c
lea rbx, [rbp - 0x51]
test cl, cl
cmovne rbx, rax
mov qword [rbp - 0x41], rdi
add rdi, rdi
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call fcn.180078c00
xor r14d, r14d
mov word [rdi + rbx], r14w
jmp 0x18001958c
movabs r8, 0x7ffffffffffffffe
cmp rdi, r8
ja 0x180019762
mov rbx, rdi
or rbx, 7
cmp rbx, r8
jbe 0x1800194a0
mov rbx, r8
jmp 0x1800194c1
mov rcx, r14
shr rcx, 1
mov rax, r8
sub rax, rcx
cmp r14, rax
jbe 0x1800194b6
mov rbx, r8
jmp 0x1800194c1
lea rax, [rcx + r14]
cmp rbx, rax
cmovb rbx, rax
mov rax, rbx
add rax, 1
cmovb rax, r9
movabs rcx, 0x7fffffffffffffff
cmp rax, rcx
ja 0x18001975c
lea rcx, [rax + rax]
cmp rcx, 0x1000
jb 0x180019518
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001975c
mov rcx, rax
call fcn.180077ac8
test rax, rax
je 0x180019747
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x18001952a
test rcx, rcx
je 0x180019527
call fcn.180077ac8
mov rsi, rax
jmp 0x18001952a
mov rsi, rdx
mov qword [rbp - 0x41], rdi
mov qword [rbp - 0x39], rbx
add rdi, rdi
mov r8, rdi
mov rdx, r15
mov rcx, rsi
call fcn.180078bfa
xor eax, eax
mov word [rdi + rsi], ax
cmp r14, 8
jb 0x180019585
lea rdx, [r14*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019580
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019747
call fcn.180077e84
xor r14d, r14d
mov qword [rbp - 0x51], rsi
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0xf]
call fcn.180018f00
nop
lea rdx, [rbp - 0x51]
lea rcx, [rbp - 0x11]
call fcn.180018f00
nop
lea r8, [rbp + 0xf]
lea rdx, [rbp - 0x61]
mov rcx, r12
call fcn.18001b250
mov rcx, qword [rax]
add rcx, 0x30
lea rax, [rbp - 0x11]
cmp rcx, rax
je 0x1800195e0
lea rdx, [rbp - 0x11]
cmp qword [rbp + 7], 0x10
cmovae rdx, qword [rbp - 0x11]
mov r8, qword [rbp - 1]
call fcn.180002f70
nop
mov rdx, qword [rbp + 7]
cmp rdx, 0x10
jb 0x18001961c
inc rdx
mov rcx, qword [rbp - 0x11]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019740
call fcn.180077e84
nop
mov rdx, qword [rbp + 0x27]
cmp rdx, 0x10
jb 0x180019657
inc rdx
mov rcx, qword [rbp + 0xf]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180019652
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019747
call fcn.180077e84
mov qword [rbp + 0x1f], r14
mov qword [rbp + 0x27], send
mov byte [rbp + 0xf], 0
mov rdx, qword [rbp - 0x39]
cmp rdx, 8
jb 0x1800196a7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x51]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800196a2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001974e
call fcn.180077e84
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], 7
mov word [rbp - 0x51], r14w
mov rdx, qword [rbp - 0x19]
cmp rdx, 8
jb 0x1800196f4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800196ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180019755
call fcn.180077e84
inc r13d
mov rbx, qword [rbp - 0x79]
inc rbx
mov qword [rbp - 0x79], rbx
mov rsi, qword [rbp - 0x71]
cmp r13d, dword [rsi + 0xc]
jb 0x1800191c0
mov rax, r12
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.180077810
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [0x1800846f0]
nop
call qword [0x1800846f0]
nop
call qword [0x1800846f0]
nop
call qword [0x1800846f0]
nop
call fcn.180002cf0
int3
call fcn.180002d90
int3