Function at 0x1408ae432
Capabilities:
Access peb ldr_data

Disassembly:
mov rax, rsp
clc
cmp di, r8w
mov qword [rax + 8], rcx
stc
cmc
cmp r9b, bpl
push rbp
push rbx
bt rbp, r13
shld bp, di, 5
push rsi
sal bpl, 0x91
sal bpl, cl
push rdi
btc bp, 0x19
movsxd rbp, r9d
push r12
and ebp, 0x72cf5bd3
stc
movsxd rbp, r10d
push r13
bsf bp, r9w
movzx rbp, r11w
sub bp, dx
push r14
sbb bp, r8w
xor bp, 0x358c
test r13b, 0xd1
push r15
lea rbp, [rax - 0xae8]
sub rsp, 0xba8
jmp 0x1408ae49d
mov qword [rbp - 0x40], 0xfffffffffffffffe
jmp 0x1408ae4aa
movaps xmmword [rax - 0x58], xmm6
mov rbx, rcx
cmp r11b, 0x56
bsr rcx, r12
ror r8d, 0xfa
sub edx, edx
not r8b
mov r8, r15
jmp 0x1408ae4ca
mov r8d, 0x248
movzx rcx, r13w
lea rcx, [rbp + 0x160]
call fcn.1408bb5b1
xor r14d, r14d
cwd
not ecx
movzx ecx, r8w
mov qword [rsp + 0x40], r14
movzx rcx, si
cqo
mov rdx, rbx
movsx ecx, r9w
lea rcx, [rbp - 0x50]
jmp 0x1408ae506
call 0x1406ac01f
movaps xmm6, xmmword [rbp - 0x50]
movaps xmmword [rsp + 0x50], xmm6
movd edi, xmm6
movzx edx, di
rol sil, cl
bsf rsi, rbp
shr sil, 0xcd
shr dx, 1
shl si, 0x19
lea esi, [r14 + 1]
clc
sub dx, si
jmp 0x1408ae53b
je 0x1408ae5e3
mov rcx, qword [rbp - 0x48]
lahf
sbb al, 0x88
cmc
movzx eax, dx
cmp r13w, r10w
cmp word [rcx + rax*2], 0x5c
je 0x1408ae585
cmp word [rcx + rax*2], 0x2f
jmp 0x1408ae565
je 0x1408ae585
mov eax, 0xffff
cmp r12b, sil
test r11b, 0xcd
add dx, ax
jne 0x1408ae549
jmp 0x1408ae5e3
movzx eax, dx
cmp sp, sp
jmp 0x1408ae590
lea rcx, [rcx + rax*2]
cmp si, 0x5213
add rcx, 2
cmp dl, 0xf
cmp r14b, spl
mov qword [rsp + 0x58], rcx
jmp 0x1408ae5ad
add dx, dx
cmp ah, 0x38
cmp r13b, spl
sub di, dx
cmp r11b, 0xbc
test di, r13w
sub di, 2
jmp 0x1408ae5ca
mov word [rsp + 0x52], di
jmp 0x1408ae5d4
mov word [rsp + 0x50], di
jmp 0x1408ae5de
movaps xmm6, xmmword [rsp + 0x50]
cmp qword [0x140074d88], r14
jne 0x1408ae673
mov rax, qword gs:[0x60]
xchg r9b, cl
movsx edx, r14w
mov cx, 0xf3d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
cmovge dx, bp
movsx rcx, cx
mov r9d, r8d
mov rcx, qword [rax]
mov qword [rbp + 0xb00], r14
lea r9, [rbp + 0xb00]
movsx rdx, di
not dl
jmp 0x1408ae633
mov edx, 0x1e64b2a0
mov rcx, qword [rcx + 0x30]
jmp 0x1408ae641
call fcn.140007fc0
mov rcx, qword [rbp + 0xb00]
movsx r8, r12w
test eax, eax
movzx r8, r12w
cmovs rcx, r14
mov qword [0x140074d88], rcx
bt r8, 0xce
cmp r11, 0x6a1f263b
bsf dx, r14w
lea r8, [rsp + 0x40]
mov rdx, qword [rsp + 0x58]
sub ecx, ecx
jmp 0x1408ae684
call 0x1404429a7
test eax, eax
jmp 0x1408ae691
je 0x1408ae6a1
mov rax, qword [rsp + 0x40]
jmp 0x1408af191
lea rdx, [0x140047c24]
movzx ecx, r13w
cmovae cx, bx
movsx ecx, r14w
mov ecx, esi
jmp 0x1408ae6bb
call 0x1402a77dc
mov qword [rsp + 0x70], rax
clc
stc
test rax, rax
jmp 0x1408ae6d0
jne 0x1408ae6e3
mov rbx, r14
jmp 0x1408ae6de
jmp 0x1408af16d
mov rdx, rbx
lea rcx, [rbp + 0x10]
jmp 0x1408ae6ef
call fcn.1400020ec
lea rax, [0x1400757e0]
movsx ecx, si
not cx
mov qword [rbp + 0x170], rax
movsxd rcx, r12d
mov rax, qword [rbp + 0x20]
seto cl
mov qword [rbp + 0x178], rax
lea rcx, [rbp + 0x160]
jmp 0x1408ae725
call 0x14075f910
mov r13d, r14d
neg ch
sbb r15w, sp
mov dword [rbp + 0xb00], r14d
or bx, 0x3970
cmp spl, r15b
movzx ebx, word [rsp + 0x50]
shr rbx, 1
xor edi, 0x912ab8
mov qword [rsp + 0x50], rbx
and cl, r15b
jmp 0x1408ae75e
mov r15d, 0x208
movsx di, r11b
add cx, r14w
xadd dil, dil
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
xchg ch, cl
sub eax, eax
mov cl, r12b
movsx ecx, r8w
mov rcx, r15
jmp 0x1408ae78b
rep stosb byte [rdi], al
mov cx, dx
movzx rcx, r8w
mov eax, dword [rbp + 0x40]
not cl
jmp 0x1408ae7a1
mov dword [rsp + 0x60], eax
movzx ecx, bx
not ecx
movzx cx, r15b
mov ecx, 0x9c40
call 0x1404cbe3b
mov r15, rax
cmp r11, 0x314f2b09
stc
test rax, rax
je 0x1408af025
rdtsc
shl rdx, 0x20
or rax, rdx
mov rcx, rax
jmp 0x1408ae7df
call 0x140827960
mov rcx, r15
jmp 0x1408ae7ed
call 0x1408ae288
mov r12, rax
test spl, al
stc
test rax, rax
jmp 0x1408ae801
je 0x1408aed44
mov rdi, r12
sub rdi, r14
jmp 0x1408ae812
call 0x140460fce
cdqe
sbb r13, 0x233029fc
btc r13, r11
xor edx, edx
shl r13, 0x66
sub r13, 0x2a023c3f
div rdi
adc r13w, 0x5c90
or r13d, 0x7d5e0b11
add rdx, r14
bts ax, di
test r8b, 0x5b
mov r13, qword [r15 + rdx*8]
mov rax, qword [r15 + r14*8]
jmp 0x1408ae85f
mov qword [r15 + rdx*8], rax
cmc
cmp r14w, sp
mov qword [r15 + r14*8], r13
clc
or rsi, 0xffffffffffffffff
sub edi, edi
jmp 0x1408ae878
inc rsi
cmc
clc
cmp word [r13 + rsi*2], di
jmp 0x1408ae888
jne 0x1408ae878
cmp rsi, rbx
jbe 0x1408aecf4
mov rcx, r13
jmp 0x1408ae89f
call 0x1407d4827
test rax, rax
jmp 0x1408ae8ad
jne 0x1408aecf4
mov qword [rsp + 0x68], rdi
cmove r9w, r12w
lea r9, [rbp + 0xb08]
movzx r8, r11w
movsxd r8, r9d
movsx r8, di
lea r8, [rsp + 0x68]
call fcn.14000af9c
cmp dword [rbp + 0xb08], edi
jge 0x1408ae8f2
mov al, dil
jmp 0x1408ae8ed
jmp 0x1408ae99e
mov rdx, r13
movsxd rcx, edx
lea rcx, [rbp - 0x38]
call 0x1406bcde7
mov dword [rbp - 0x28], 0x30
movsx rax, si
movzx eax, dx
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x20], rax
mov dword [rbp - 0x10], 0x40
movsx ax, r12b
mov al, r10b
lea rax, [rbp - 0x38]
jmp 0x1408ae931
mov qword [rbp - 0x18], rax
jmp 0x1408ae93a
xorps xmm0, xmm0
movdqu xmmword [rbp - 8], xmm0
lea r8, [rbp - 0x28]
mov edx, 5
movsx cx, r10b
lea rcx, [rsp + 0x78]
jmp 0x1408ae95a
call fcn.1405854e6
mov edi, eax
mov rcx, r10
cmovno cx, r10w
movsxd rcx, ebx
mov dword [rbp + 0xb08], eax
movsx ecx, bx
mov rcx, qword [rsp + 0x78]
jmp 0x1408ae97f
call fcn.140493846
mov rcx, qword [rsp + 0x68]
jmp 0x1408ae98e
call fcn.140492ab9
xor eax, eax
test edi, edi
mov al, 0xe8
setns al
xor edi, edi
test al, al
jmp 0x1408ae9a5
jne 0x1408aecf4
mov ebx, 0x104
cwd
movzx cx, r13b
mov edx, ebx
cmovb cx, bx
movsxd rcx, r12d
mov cx, 0x736a
lea rcx, [rbp + 0x880]
jmp 0x1408ae9d0
call 0x14008879b
lea r8, [0x14005bf70]
movsx rdx, r9w
mov edx, ebx
not cl
bswap cx
lea rcx, [rbp + 0x880]
jmp 0x1408ae9f4
call 0x14031178a
mov r8, r13
movzx edx, si
mov edx, ebx
movsxd rcx, ebp
lea rcx, [rbp + 0x880]
jmp 0x1408aea11
call 0x1402b83b9
mov qword [rsp + 0x30], rdi
neg cl
mov dword [rsp + 0x28], 0x80
mov dl, 0x2b
sbb ch, 0x57
rcl r8w, 0x59
mov dword [rsp + 0x20], 3
movzx edx, r14w
xor r9d, r9d
movsx r8d, bp
mov ch, bl
mov edx, 0x80000000
xchg cl, r8b
setbe r8b
lea r8d, [r9 + 1]
lea rcx, [rbp + 0x880]
call 0x140835b9e
mov rbx, rax
jmp 0x1408aea6a
cmp rax, 0xffffffffffffffff
jmp 0x1408aea73
je 0x1408aecef
xor r9d, r9d
shl ch, cl
xor r8d, r8d
not cx
sub edx, edx
movzx ecx, cx
bswap cx
movsx rcx, si
mov rcx, rax
jmp 0x1408aea98
call 0x14045f239
cmp eax, 0xffffffff
jmp 0x1408aeaa6
je 0x1408aecb0
mov qword [rsp + 0x20], rdi
cwd
cqo
lea r9, [rbp + 0xaf8]
mov r8d, 0x40
movsx cx, bpl
lea rdx, [rbp + 0x50]
not ch
mov rcx, rbx
jmp 0x1408aead5
call 0x1401fe55b
test eax, eax
je 0x1408aecb0
cmp dword [rbp + 0xaf8], 0x40
jmp 0x1408aeaef
jne 0x1408aecb0
mov eax, 0x5a4d
cmp word [rbp + 0x50], ax
jmp 0x1408aeb03
jne 0x1408aecb0
mov edx, dword [rbp + 0x8c]
cmp r15b, dl
jmp 0x1408aeb17
test edx, edx
jmp 0x1408aeb1e
je 0x1408aecb0
sub r9d, r9d
add rcx, rbx
or cl, 0xb2
inc ecx
sub r8d, r8d
xchg cl, ch
movzx ecx, dx
mov rcx, rbx
call 0x14066200e
cmp eax, 0xffffffff
je 0x1408aecb0
mov qword [rsp + 0x20], rdi
bswap r8d
movsx r9, r8w
movsx dx, spl
lea r9, [rbp + 0xaf8]
cwd
mov dh, 0x14
not rcx
mov r8d, 0x108
mov rdx, r8
cdq
movsx ecx, cx
lea rdx, [rbp + 0x50]
movsx ecx, bx
movzx rcx, di
mov rcx, rbx
jmp 0x1408aeb89
call 0x14055ff4b
test eax, eax
jmp 0x1408aeb96
je 0x1408aecb0
cmp dword [rbp + 0xaf8], 0x108
jne 0x1408aecb0
cmp dword [rbp + 0x50], 0x4550
jmp 0x1408aebb8
jne 0x1408aecb0
mov eax, 0x8664
clc
cmp word [rbp + 0x54], ax
jmp 0x1408aebcd
jne 0x1408aecb0
movzx eax, word [rbp + 0x66]
btc cx, 0x71
mov ecx, 0x2022
and ax, cx
test r8b, 0x15
cmp ax, cx
jmp 0x1408aebf0
jne 0x1408aecb0
mov eax, 0x20b
clc
stc
cmp word [rbp + 0x68], ax
jne 0x1408aecb0
movzx eax, word [rbp + 0xac]
xadd ecx, ecx
sub ax, 2
add rcx, r15
mov ecx, 1
clc
cmp ax, cx
jmp 0x1408aec26
ja 0x1408aecb0
test byte [rbp + 0xae], 0x40
je 0x1408aecb0
cmp dword [rbp + 0x78], edi
jmp 0x1408aec41
je 0x1408aecb0
cmp dword [rbp + 0xd4], 0x10
jmp 0x1408aec53
jb 0x1408aecb0
cmp dword [rbp + 0x148], edi
jmp 0x1408aec64
jne 0x1408aecb0
cmp dword [rbp + 0x14c], edi
jne 0x1408aecb0
cmp dword [rbp + 0xf0], edi
je 0x1408aecb0
cmp dword [rbp + 0xf4], edi
jmp 0x1408aec8d
je 0x1408aecb0
mov eax, dword [rsp + 0x60]
jmp 0x1408aec9f
cmp dword [rbp + 0xa0], eax
jmp 0x1408aecaa
jae 0x1408aecc1
mov edi, 1
movzx cx, r12b
setno cl
cmovae cx, di
mov rcx, rbx
jmp 0x1408aecc9
call fcn.140813a1f
test dil, dil
jmp 0x1408aecd6
jne 0x1408aecef
lea eax, [rsi + 1]
cmp eax, 0x104
jmp 0x1408aece9
jb 0x1408aed0f
mov rbx, qword [rsp + 0x50]
mov esi, 1
add r14, rsi
cmp r14, r12
jmp 0x1408aed04
jae 0x1408aed38
jmp 0x1408ae807
mov r8, r13
cwd
mov edx, 0x104
lea rcx, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
jmp 0x1408aed25
call 0x1403c48b4
mov esi, 1
bt di, r15w
and r13b, 0xf8
mov r13d, dword [rbp + 0xb00]
stc
bsr rdi, rcx
sub r14d, r14d
dec dil
mov edi, r14d
test cl, spl
test r12, r12
jmp 0x1408aed59
je 0x1408aed84
mov rcx, qword [r15 + rdi*8]
jmp 0x1408aed68
call 0x1406c152e
add rdi, rsi
jmp 0x1408aed76
cmp rdi, r12
jmp 0x1408aed7e
jb 0x1408aed5f
mov rcx, r15
jmp 0x1408aed8c
call 0x140742200
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
test r13d, r14d
or rdx, 0xffffffffffffffff
jmp 0x1408aeda5
inc rdx
jmp 0x1408aedae
cmp word [rax + rdx*2], r14w
jmp 0x1408aedb8
jne 0x1408aeda5
mov r15d, 0x208
stc
test bx, 0x4226
test edx, edx
jmp 0x1408aedd1
je 0x1408af038
lea rdi, [rbp - 0x80]
or rcx, rax
rol ch, cl
xor eax, eax
lea ecx, [rax + 0x30]
jmp 0x1408aedea
rep stosb byte [rdi], al
movdqu xmmword [rbp - 0x60], xmm6
lea rax, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
mov qword [rbp - 0x78], rax
movzx edi, di
movsx di, cl
add dx, dx
setb cl
mov word [rbp - 0x80], dx
ror di, 0xaf
not ch
btc ecx, r14d
mov word [rbp - 0x7e], r15w
stc
xor dh, 0xd7
lea rdi, [rbp + 0x3b0]
add rdx, 0x14107ce4
sub eax, eax
cwd
mov ecx, 0x4d0
cdq
rep stosb byte [rdi], al
cdq
lahf
cdqe
mov dword [rbp + 0x3e0], 0x100010
cdq
movzx eax, dx
movsx ax, r12b
mov rax, qword [0x140074d88]
xchg cx, dx
cdq
mov qword [rbp + 0x410], rax
mov dh, 0x1a
mov qword [rbp + 0x420], 0x440
movsx ecx, r11w
movsx cx, spl
cdq
lea rdx, [rbp + 0x3b0]
movsx cx, r13b
mov rcx, 0xfffffffffffffffe
jmp 0x1408aee93
call fcn.14051b9b7
test eax, eax
jmp 0x1408aee9f
js 0x1408af038
lea r8, [rbp - 0x80]
lea rdx, [0x140048638]
sub ecx, ecx
jmp 0x1408aeeb7
call 0x1401af255
mov rbx, qword gs:[0x30]
mov rdi, qword [rbx + 0x28]
mov r9w, 0x41a0
rcl r9b, cl
mov qword [rbx + 0x28], r14
dec r8w
lea r9, [rsp + 0x40]
shr r8w, cl
sub r8w, r14w
lea r8, [rbp - 0x80]
test r10, r12
test sil, 0x7b
xor edx, edx
cmp r9w, r11w
cmp r13, 0x682c22ea
sub ecx, ecx
jmp 0x1408aef06
call 0x1406c55cd
mov esi, eax
setp r8b
mov qword [rbx + 0x28], rdi
movsx dx, dil
ror r8b, cl
mov dword [rbp - 0x6c], eax
xadd dh, al
mov eax, 1
mov dword [rbp - 0x70], eax
test r10d, esp
or dx, 0x674f
btr r8d, 0xa4
lea r8, [rbp - 0x80]
movsx rdx, sp
rcl rdx, 0x58
bswap rdx
lea rdx, [0x140048638]
test r12w, 0x18d1
xor ecx, ecx
call 0x1401629ec
lea rdi, [rbp + 0x3b0]
xor eax, eax
movsx ecx, r8w
xchg dl, dl
mov ecx, 0x4d0
rep stosb byte [rdi], al
cwd
movsxd rdx, esp
mov dword [rbp + 0x3e0], 0x100010
movsx dx, sil
seta cl
movzx rdx, r12w
mov qword [rbp + 0x410], r14
cmova ecx, r8d
cwd
movsx dx, dl
mov qword [rbp + 0x420], 0x400
not ch
movzx dx, r13b
jmp 0x1408aefb6
lea rdx, [rbp + 0x3b0]
movzx ecx, r14w
lea rcx, [rax - 2]
jmp 0x1408aefca
call fcn.1400ea4a8
test esi, esi
js 0x1408af038
mov rbx, qword [rsp + 0x40]
test bl, r11b
cmc
cmp dword [rbp + 0x198], r14d
jmp 0x1408aefec
jne 0x1408af075
test rbx, rbx
jmp 0x1408aeffa
je 0x1408af03d
mov rcx, rbx
jmp 0x1408af008
call 0x1405856b7
mov rbx, r14
jmp 0x1408af016
mov qword [rsp + 0x40], rbx
jmp 0x1408af020
jmp 0x1408af03d
mov r15d, 0x208
neg si
adc si, 0x4070
sub si, 0x4c34
mov rbx, qword [rsp + 0x40]
mov esi, 1
test ch, 0x35
jmp 0x1408af04a
add r13d, esi
mov dword [rbp + 0xb00], r13d
test r15b, 0x7f
cmp r10b, 0xd9
cmp r13d, 3
jae 0x1408af075
mov rbx, qword [rsp + 0x50]
jmp 0x1408af070
jmp 0x1408ae771
lea rdi, [rbp + reloc.COMCTL32.dll_RemoveWindowSubclass]
cmc
dec ch
and cx, 0x649a
xor eax, eax
movsx ecx, r15w
mov ch, 0xf0
mov rcx, r15
jmp 0x1408af095
rep stosb byte [rdi], al
inc di
mov rdi, qword [rbp + 0x10]
test rdi, rdi
jmp 0x1408af0a6
je 0x1408af0d3
mov rcx, qword [rbp + 0x18]
cmp ecx, edi
test rcx, rcx
jmp 0x1408af0ba
je 0x1408af0d3
rep stosb byte [rdi], al
xor bh, 0x94
sbb bl, 0xc2
inc rbx
mov rbx, qword [rsp + 0x40]
cmp di, ax
test rbx, rbx
jmp 0x1408af0db
jne 0x1408af108
sub edx, edx
setp r8b
mov r8d, 0x800
mov rcx, qword [rbp + 0xaf0]
jmp 0x1408af0f9
call 0x14070ece2
mov rbx, rax
xchg cl, ch
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x160]
call 0x14026e92b
mov rdx, qword [rbp + 0x10]
test rdx, rdx
jmp 0x1408af122
je 0x1408af15e
mov rcx, qword [rdx - 8]
test rcx, rcx
jmp 0x1408af134
je 0x1408af148
mov rdi, rdx
stc
clc
sub eax, eax
jmp 0x1408af146
rep stosb byte [rdi], al
mov rcx, qword [rdx - 0x10]
jmp 0x1408af151
call 0x1407f4722
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], r14
mov rax, qword [rsp + 0x70]
jmp 0x1408af16d
test rax, rax
jmp 0x1408af175
je 0x1408af188
mov rcx, rax
jmp 0x1408af183
call 0x140499818
mov rax, rbx
jmp 0x1408af191
movaps xmm6, xmmword [rsp + 0xb90]
add rsp, 0xba8
cmovo r14d, r13d
setge sil
not r15b
pop r15
jmp 0x1408af1b2
pop r14
seto bpl
pop r13
cmovg rsi, rdx
mov sil, spl
pop r12
movzx rbp, cx
movzx di, cl
movzx ebp, r13w
pop rdi
pop rsi
movsx rbp, r9w
pop rbx
xchg rbp, rbp
mov bpl, r10b
not rbp
pop rbp
ret