Function at 0x180005630
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], r9
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
movsxd rbx, dword [rcx + 0x3c]
mov rdi, rcx
mov rcx, qword [0x18002ba00]
mov r14, r8
mov rbp, rdx
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0xf8]
call fcn.180002ff0
mov rcx, qword [0x18002ba00]
xor edx, edx
mov qword [rsp + 0x28], 0x120
mov r9, rax
mov dword [rsp + 0x20], 8
mov rcx, qword [rcx + 0x20]
lea r8d, [rdx + 3]
call fcn.180002ff0
mov r15d, 1
xor r8d, r8d
xor edx, edx
mov rsi, rax
mov qword [rax + 0x30], rdi
mov qword [rax + 0xf8], rdi
mov ecx, dword [rbx + rdi + 0x50]
mov dword [rax + 0x40], ecx
mov ecx, dword [rbx + rdi + 8]
mov dword [rax + 0x80], ecx
mov dword [rax + 0x114], r15d
mov word [rax + 0x6c], r15w
mov ecx, dword [rbx + rdi + 0x28]
add rcx, rdi
mov qword [rax + 0x38], rcx
mov rcx, qword [0x18002ba00]
mov rcx, qword [rcx + 0xf8]
call fcn.180002ff0
mov rcx, qword [0x18002ba00]
lea r8d, [r15 + 2]
mov qword [rsp + 0x28], 0x50
mov r9, rax
xor edx, edx
mov dword [rsp + 0x20], 8
mov rcx, qword [rcx + 0x20]
call fcn.180002ff0
xor r13d, r13d
mov qword [rsi + 0x98], rax
mov r12d, r13d
mov dword [rax + 0x18], r15d
mov r15d, r13d
mov rax, qword [rsi + 0x98]
lea rbx, [r13 - 1]
mov dword [rax + 0x38], 2
test r14, r14
je 0x1800057c8
mov rdi, rbx
nop dword [rax]
cmp word [r14 + rdi*2 + 2], r12w
lea rdi, [rdi + 1]
jne 0x180005750
mov rcx, qword [0x18002ba00]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0xf8]
call fcn.180002ff0
lea rcx, [rdi*2 + 2]
xor edx, edx
mov qword [rsp + 0x28], rcx
mov r9, rax
mov rcx, qword [0x18002ba00]
mov dword [rsp + 0x20], 8
lea r8d, [rdx + 3]
mov rcx, qword [rcx + 0x20]
call fcn.180002ff0
mov r15, rax
mov rdx, rbx
nop dword [rax + rax]
inc rdx
cmp word [r14 + rdx*2], r12w
jne 0x1800057b0
inc rdx
mov r8, r14
mov rcx, rax
call fcn.18000eb40
test rbp, rbp
je 0x180005849
mov rdi, rbx
cmp word [rbp + rdi*2 + 2], r12w
lea rdi, [rdi + 1]
jne 0x1800057d0
mov rcx, qword [0x18002ba00]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rcx + 0xf8]
call fcn.180002ff0
lea rcx, [rdi*2 + 2]
xor edx, edx
mov qword [rsp + 0x28], rcx
mov r9, rax
mov rcx, qword [0x18002ba00]
mov dword [rsp + 0x20], 8
lea r8d, [rdx + 3]
mov rcx, qword [rcx + 0x20]
call fcn.180002ff0
mov r12, rax
mov rdx, rbx
nop dword [rax + rax]
inc rdx
cmp word [rbp + rdx*2], r13w
jne 0x180005830
inc rdx
mov r8, rbp
mov rcx, rax
call fcn.18000eb40
test r15, r15
je 0x180005863
mov rax, rbx
inc rax
cmp word [r15 + rax*2], r13w
jne 0x180005851
add ax, ax
lea ecx, [rax + 2]
jmp 0x18000586a
movzx eax, r13w
mov ecx, r13d
mov word [rsi + 0x4a], cx
mov word [rsi + 0x48], ax
mov qword [rsi + 0x50], r15
test r12, r12
je 0x180005893
nop dword [rax + rax]
inc rbx
cmp word [r12 + rbx*2], r13w
jne 0x180005880
add bx, bx
lea r13d, [rbx + 2]
jmp 0x180005897
movzx ebx, r13w
mov word [rsi + 0x58], bx
lea r8, [rsi + 0x10]
mov word [rsi + 0x5a], r13w
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov qword [rsi + 0x60], r12
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r9, qword [rcx + 0x18]
mov rax, qword [r9 + 0x18]
lea rcx, [r9 + 0x10]
mov qword [rsi], rcx
mov qword [rsi + 8], rax
lea rdx, [r9 + 0x20]
mov qword [rax], rsi
mov eax, 1
mov qword [rcx + 8], rsi
mov rcx, qword [rdx + 8]
mov qword [r8], rdx
mov qword [r8 + 8], rcx
mov qword [rcx], r8
mov rcx, qword [r9 + 0x38]
mov qword [rdx + 8], r8
lea r8, [rsi + 0x20]
lea rdx, [r9 + 0x30]
mov qword [r8 + 8], rcx
mov qword [r8], rdx
mov qword [rcx], r8
mov rcx, qword [rsp + 0x78]
mov qword [rdx + 8], r8
mov qword [rcx], rsi
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret