Function at 0x14008ed70
Capabilities:
Access peb ldr_data

Disassembly:
push rdi
push rsi
push r15
push r12
push rbp
push r13
push rbx
push r14
sub rsp, 0x1a8
lea rax, [rsp + 0xb0]
mov cx, 0xda75
mov dword [rsp + 0x190], 0x6a880e50
mov qword [rsp + 0x180], 0x6859dfca
mov dl, byte [rsp + 0x1a7]
mov byte [rsp + 0x17f], 0x24
mov byte [rsp + 0x1a7], 0x52
mov word [rsp + 0x17c], 0xcd05
mov r8, qword [rsp + 0x198]
mov r9, r8
add r9, 0xffffffff90323605
movzx r10d, word [rsp + 0x17c]
mov r11w, r10w
mov esi, 0x402a
sub esi, r10d
mov di, si
mov qword [rsp + 0x198], r9
mov word [rsp + 0x76], di
mov esi, dword [rsp + 0x194]
mov ebx, esi
not ebx
mov ebp, dword [rsp + 0x190]
xor ebp, 0x76e5b3c
mov dword [rsp + 0x194], ebx
mov dword [rsp + 0x70], ebp
mov r9, qword [rsp + 0x180]
mov ebp, 0x73379899
mov r14d, ebp
sub r14, r9
mov qword [rsp + 0xa8], r14
mov dword [rsp + 0x194], 0
lea r9, [rsp + 0x140]
lea r14, [rsp + 0xb0]
mov r15b, byte [rsp + 0x17f]
mov r12b, 0x92
sub r12b, r15b
mov byte [rsp + 0x140], r12b
mov word [rsp + 0x18e], r11w
mov ebp, r10d
and ebp, 0xa84
mov di, bp
mov word [rsp + 0x18e], di
mov r15b, byte [rsp + 0x17f]
mov ebp, esi
add ebp, 0x68620a8b
mov dword [rsp + 0x194], ebp
xor r15b, 0x50
mov byte [rsp + 0x141], r15b
mov dword [rsp + 0x194], ebx
mov r15b, byte [rsp + 0x17f]
add r15b, 0x40
mov ebp, r10d
and ebp, 0x3948
mov di, bp
mov word [rsp + 0x18e], di
mov byte [rsp + 0x142], r15b
mov byte [rsp + 0x1a7], dl
mov r13, r8
not r13
mov r15b, byte [rsp + 0x17f]
mov qword [rsp + 0x198], r13
add r15b, 0x48
mov byte [rsp + 0x143], r15b
mov qword [rsp + 0x198], 0x6765799f
mov r15b, byte [rsp + 0x17f]
mov qword [rsp + 0x198], r13
xor r15b, 0x48
mov byte [rsp + 0x144], r15b
mov r15b, dl
and r15b, 0x9f
mov byte [rsp + 0x1a7], r15b
mov r15b, byte [rsp + 0x17f]
mov word [rsp + 0x18e], r11w
xor r15b, 0xa
mov byte [rsp + 0x145], r15b
mov qword [rsp + 0x198], r8
mov r15b, byte [rsp + 0x17f]
add r15b, 0x40
mov byte [rsp + 0x146], r15b
mov ebp, r10d
or ebp, 0xbb23
mov di, bp
mov word [rsp + 0x18e], di
mov r15b, byte [rsp + 0x17f]
xor r15b, 0x48
mov byte [rsp + 0x147], r15b
mov r15b, byte [rsp + 0x17f]
imul ebp, r10d, 0xfffffd40
mov di, bp
mov word [rsp + 0x18e], di
add r15b, 0x48
mov byte [rsp + 0x148], r15b
mov dword [rsp + 0x194], esi
mov r15b, byte [rsp + 0x17f]
add r15b, 0xdc
mov byte [rsp + 0x149], r15b
mov ebp, r8d
and ebp, 0x7accad59
mov r13d, ebp
mov qword [rsp + 0x198], r13
mov r15b, byte [rsp + 0x17f]
add r15b, 0xd8
mov byte [rsp + 0x14a], r15b
movaps xmm0, xmmword [0x140099180]
movaps xmmword [rsp + 0xb0], xmm0
mov ebp, r10d
not ebp
mov di, bp
mov word [rsp + 0x18e], di
mov r13, r8
add r13, r13
mov qword [rsp + 0x198], r13
mov bp, word [rsp + 0x17c]
mov dword [rsp + 0x194], 0x872c6501
xor bp, 0xcd69
mov word [rsp + 0xc0], bp
mov bp, word [rsp + 0x17c]
mov r15d, r10d
add r15d, 0xffffc667
mov word [rsp + 0x18e], r15w
xor bp, 0xcd05
mov word [rsp + 0xc2], bp
mov r12b, dl
not r12b
mov byte [rsp + 0x1a7], r12b
mov bp, word [rsp + 0x17c]
mov r15w, 0xcd01
sub r15w, bp
mov dword [rsp + 0x194], esi
mov word [rsp + 0xc4], r15w
mov dword [rsp + 0x194], ebx
mov word [rsp + 0xe6], 0
mov qword [rsp + 0xde], 0
mov qword [rsp + 0xd6], 0
mov qword [rsp + 0xce], 0
mov qword [rsp + 0xc6], 0
mov r13, r8
add r13, 0x408c24ac
mov qword [rsp + 0x198], r13
mov ebx, r10d
add ebx, 0x3da9
mov bp, bx
movsx ebx, byte [rsp + 0x15c]
mov r15w, bx
mov word [rsp + 0x18e], bp
mov r13, r8
add r13, 0x41561ca
mov qword [rsp + 0x198], r13
mov word [rsp + 0xe8], r15w
mov word [rsp + 0x18e], di
mov bl, dl
or bl, 0xb5
mov byte [rsp + 0x1a7], bl
movsx edi, byte [rsp + 0x15d]
mov bp, di
xor r10d, 0xdab9
mov r15w, r10w
mov word [rsp + 0x18e], r15w
mov word [rsp + 0xea], bp
mov r13, r8
xor r13, 0x1def0ad0
mov qword [rsp + 0x198], r13
mov bp, word [rsp + 0x17c]
mov r15w, 0x358d
sub r15w, bp
movsx r10d, byte [rsp + 0x15e]
mov bp, r10w
mov word [rsp + 0xa6], r15w
mov r15w, word [rsp + 0xa6]
mov qword [rsp + 0x198], r8
mov word [rsp + 0x18e], r11w
mov word [rsp + 0xec], bp
mov byte [rsp + 0x1a7], r12b
mov r13, r8
or r13, 0x5de60f27
mov qword [rsp + 0x198], r13
mov bp, word [rsp + 0x17c]
mov bl, byte [rsp + 0x15f]
movsx r10d, bl
sub cx, bp
add rax, 0x3e
mov byte [rsp + 0x1a7], dl
imul edi, esi, 0x48176091
mov dword [rsp + 0x194], edi
cmp r15w, cx
mov qword [rsp + 0x68], r9
mov word [rsp + 0x66], r10w
mov byte [rsp + 0x65], dl
mov qword [rsp + 0x58], r8
mov word [rsp + 0x56], r11w
mov qword [rsp + 0x48], r14
mov dword [rsp + 0x44], esi
mov qword [rsp + 0x38], rax
jbe 0x14008f710
jmp 0x14008f52a
mov rax, qword [rsp + 0x58]
or rax, 0x195e2768
mov rcx, qword [rsp + 0x78]
mov qword [rsp + 0x198], rax
mov dx, word [rsp + 0x56]
xor dx, 0xffff
mov word [rsp + 0x18e], dx
mov word [rsp + 0x18e], 0x7ad9
mov rax, rcx
add rsp, 0x1a8
pop r14
pop rbx
pop r13
pop rbp
pop r12
pop r15
pop rsi
pop rdi
ret
mov ax, word [rsp + 0x56]
sub ax, 0x9234
mov cx, word [rsp + 0x17c]
add cx, 0x32fb
mov word [rsp + 0x18e], ax
mov ax, word [rsp + 0x96]
mov qword [rsp + 0x198], 0x86810e8
mov rdx, qword [rsp + 0x58]
xor rdx, 0x6e129ca5
mov qword [rsp + 0x198], rdx
mov rdx, qword [rsp + 0x108]
mov qword [rsp + 0x110], rdx
cmp ax, cx
jne 0x14008f710
movabs rax, 0x7c1ee7896796258
mov rcx, qword [rsp + 0x180]
mov rdx, qword [rsp + 0x58]
and rdx, 0xc8448e6
mov qword [rsp + 0x198], rdx
mov r8b, byte [rsp + 0x65]
sub r8b, 0xe9
xor rcx, 0x69b94f1b
mov byte [rsp + 0x1a7], r8b
mov rdx, qword [rsp + 0x110]
mov qword [rsp + 0x78], rdx
mov rdx, qword [rsp + 0xa8]
mov qword [rsp + 0x198], rax
cmp rcx, rdx
je 0x14008f66b
jmp 0x14008f24d
mov ax, word [rsp + 0xfe]
mov rcx, qword [rsp + 0x180]
mov byte [rsp + 0x1a7], 0xd9
movzx edx, ax
mov qword [rsp + 0x30], rcx
mov ecx, edx
call fcn.140096280
mov ecx, dword [rsp + 0x44]
xor ecx, 0x76e53e81
mov r8, qword [rsp + 0x30]
xor r8, 0x6859dfcb
mov r9, qword [rsp + 0x88]
mov r10w, word [rsp + r9*2 + 0xb0]
mov dword [rsp + 0x194], ecx
add r8, qword [rsp + 0x88]
mov qword [rsp + 0x128], r8
mov r11b, byte [rsp + 0x65]
and r11b, 0x8c
mov byte [rsp + 0x1a7], r11b
cmp r10w, ax
je 0x14008f773
jmp 0x14008f710
mov ax, 0xdacf
mov rcx, qword [rsp + 0x138]
mov dl, byte [rsp + 0x65]
sub dl, dl
mov byte [rsp + 0x1a7], dl
mov qword [rsp + 0x100], rcx
mov r8w, word [rsp + 0x56]
mov word [rsp + 0x18e], r8w
mov rcx, qword [rsp + 0x100]
mov word [rsp + 0x18e], 0x530a
mov rcx, qword [rcx + 0x20]
mov qword [rsp + 0x108], rcx
mov rcx, qword [rsp + 0x100]
and r8w, 0x4096
mov r9w, word [rsp + 0x76]
sub ax, word [rsp + 0x17c]
mov word [rsp + 0x18e], r8w
mov r8w, word [rcx + 0x48]
mov word [rsp + 0x74], r8w
mov rcx, qword [rsp + 0x58]
add rcx, rcx
mov qword [rsp + 0x198], rcx
mov rcx, qword [rsp + 0x100]
add rcx, 0x50
mov r8w, word [rsp + 0x56]
or r8w, r8w
mov word [rsp + 0x18e], r8w
mov qword [rsp + 0x118], rcx
cmp ax, r9w
jae 0x14008f24d
jmp 0x14008f7d5
mov al, 0x66
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x88], rcx
mov dl, byte [rsp + 0x65]
or dl, 0xa4
mov byte [rsp + 0x1a7], dl
mov rcx, qword [rsp + 0x130]
mov dl, byte [rsp + 0x65]
mov byte [rsp + 0x1a7], dl
mov r8, qword [rsp + 0x88]
mov r9w, word [rsp + 0x17c]
add r9w, 0x32fb
mov r10, qword [rsp + 0x58]
mov qword [rsp + 0x198], r10
mov r11w, word [rcx + r8*2]
mov word [rsp + 0xfe], r11w
sub al, dl
mov byte [rsp + 0x1a7], al
cmp word [rsp + 0xfe], r9w
je 0x14008f66b
jmp 0x14008f35f
mov eax, 0x576b66d9
mov ecx, eax
mov eax, 0x6a880e80
sub eax, dword [rsp + 0x190]
mov rdx, qword [rsp + 0x38]
mov r8w, word [rsp + 0x66]
mov word [rdx], r8w
mov r9b, byte [rsp + 0x65]
and r9b, 0x75
mov dword [rsp + 0x2c], eax
mov r10d, dword [rsp + 0x2c]
mov r11, qword gs:[r10d]
mov byte [rsp + 0x1a7], r9b
mov byte [rsp + 0x1a7], 0xf2
mov rax, qword [r11 + 0x60]
mov r9b, byte [rsp + 0x65]
add r9b, 0x3d
mov byte [rsp + 0x1a7], r9b
mov rax, qword [rax + 0x18]
add rax, 0x20
mov esi, dword [rsp + 0x44]
or esi, 0x4d62f257
mov dword [rsp + 0x194], esi
mov qword [rsp + 0x168], rax
mov di, word [rsp + 0x56]
or di, 0xe2fa
mov rax, qword [rsp + 0x168]
mov word [rsp + 0x18e], di
mov dword [rsp + 0x194], 0xf4780f0e
mov di, word [rsp + 0x56]
xor di, 0x8a51
mov rax, qword [rax]
mov word [rsp + 0x18e], di
mov qword [rsp + 0x170], rax
mov dword [rsp + 0x194], 0x429ccf56
mov rax, qword [rsp + 0x168]
mov esi, dword [rsp + 0x44]
mov dword [rsp + 0x194], esi
mov r11, qword [rsp + 0x170]
mov di, word [rsp + 0x56]
mov word [rsp + 0x18e], di
mov rbx, qword [rsp + 0x58]
sub rcx, rbx
mov qword [rsp + 0x198], rcx
mov qword [rsp + 0x110], 0
cmp r11, rax
je 0x14008f2f6
mov rax, qword [rsp + 0x58]
or rax, 0x637f5d6
mov qword [rsp + 0x198], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x138], rax
jmp 0x14008f3e4
mov eax, 0xcf389851
mov ecx, eax
mov rdx, qword [rsp + 0x180]
mov r8, qword [rsp + 0x180]
xor rdx, 0xd1df30a
mov r9w, word [rsp + 0x56]
xor r9w, 0x220b
mov word [rsp + 0x18e], r9w
sub rcx, r8
mov qword [rsp + 0x120], rcx
mov rcx, qword [rsp + 0x88]
mov r8, qword [rsp + 0x120]
mov r9w, word [rsp + rcx*2 + 0xb0]
mov word [rsp + 0x96], r9w
cmp r8, rdx
jae 0x14008f297
jmp 0x14008f24d
mov eax, dword [rsp + 0x190]
add eax, 0xf4551f90
mov cx, word [rsp + 0x56]
add cx, 0xe156
mov word [rsp + 0x18e], cx
mov edx, dword [rsp + 0x70]
mov dword [rsp + 0x194], 0x405d8aa5
cmp edx, eax
jae 0x14008f865
jmp 0x14008f773
mov al, byte [rsp + 0x65]
xor al, 0xff
mov rcx, qword [rsp + 0x100]
mov byte [rsp + 0x1a7], al
mov rdx, qword [rsp + 0x58]
imul r8, rdx, 0x10c700bd
mov rcx, qword [rcx]
mov qword [rsp + 0x198], r8
mov r8, qword [rsp + 0x168]
mov al, byte [rsp + 0x65]
and al, 0x68
mov byte [rsp + 0x1a7], al
mov qword [rsp + 0x138], rcx
mov qword [rsp + 0x110], 0
cmp rcx, r8
je 0x14008f2f6
jmp 0x14008f3e4
mov rax, qword [rsp + 0x80]
mov ecx, dword [rsp + 0x44]
and ecx, 0xbea00f8
mov rdx, qword [rsp + 0x128]
mov dword [rsp + 0x194], ecx
mov ecx, dword [rsp + 0x44]
imul r8d, ecx, 0x6a97538a
mov r9, qword [rsp + 0x108]
mov r10, qword [rsp + 0x128]
mov dword [rsp + 0x194], r8d
mov qword [rsp + 0x98], r10
mov qword [rsp + 0x110], r9
cmp rdx, rax
jb 0x14008f4a8
jmp 0x14008f2f6
mov ax, 0xcd06
mov ecx, 0x1379effe
mov edx, ecx
mov r8, qword [rsp + 0x58]
sub rdx, r8
mov qword [rsp + 0x198], rdx
mov r9w, word [rsp + 0x17c]
mov r10w, word [rsp + 0x17c]
mov word [rsp + 0x18e], 0x6f94
mov rdx, qword [rsp + 0x118]
mov rdx, qword [rdx]
add r10w, 0x32fb
sub ax, r9w
mov qword [rsp + 0x130], rdx
mov r9w, word [rsp + 0x74]
mov cx, ax
shr r9w, cl
mov word [rsp + 0xfc], r9w
mov ax, word [rsp + 0xfc]
mov r9w, word [rsp + 0x56]
mov word [rsp + 0x18e], r9w
cmp ax, r10w
je 0x14008f710
jmp 0x14008f6d9
mov eax, 0x6859dfca
mov ecx, eax
mov dx, word [rsp + 0xfc]
mov r8, qword [rsp + 0x180]
mov word [rsp + 0x18e], 0xa442
mov r9, qword [rsp + 0x58]
xor r9, 0xffffffffffffffff
sub rcx, r8
mov qword [rsp + 0x198], r9
mov eax, dword [rsp + 0x44]
xor eax, 0xffffffff
movzx r10d, dx
mov r8d, r10d
mov dword [rsp + 0x194], eax
mov qword [rsp + 0x80], r8
mov qword [rsp + 0x98], rcx
mov r11b, byte [rsp + 0x65]
mov byte [rsp + 0x1a7], r11b
jmp 0x14008f4a8