Function at 0x180001160
Capabilities:
Access peb ldr_data

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x10], xmm6
mov qword [rbp + 8], 0xfffffffffffffffe
mov r15, rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r13, qword [rax + 0x10]
movaps xmm6, xmmword [section..rdata]
lea r12, [rbp - 0x58]
mov esi, 0x616d585
nop dword [rax + rax]
mov r14, qword [r13 + 0x30]
test r14, r14
je 0x180001493
mov rbx, qword [r13 + 0x60]
movups xmmword [rbp - 0x48], xmm6
mov word [rbp - 0x58], 0
mov rcx, rbx
call fcn.18000a5d0
mov rcx, r12
mov rdx, rbx
mov r8, rax
call fcn.1800031a0
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp - 8], rax
cmp qword [rbp - 0x40], 7
mov edi, 0xdcc427ce
cmova edi, esi
mov ecx, 0xa706dccc
nop
cmp ecx, 0x616d585
je 0x180001220
cmp ecx, 0xdcc427ce
je 0x180001230
cmp ecx, 0xa706dccc
jne 0x180001200
mov rbx, qword [rbp - 8]
mov ecx, edi
jmp 0x180001200
mov rax, qword [rbp]
mov rbx, qword [rax]
mov ecx, 0xdcc427ce
jmp 0x180001200
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp - 8], rax
mov ecx, 0xa706dccc
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp ecx, 0x616d585
je 0x180001270
cmp ecx, 0xdcc427ce
je 0x180001280
cmp ecx, 0xa706dccc
jne 0x180001250
mov rdx, qword [rbp - 8]
mov ecx, edi
jmp 0x180001250
mov rax, qword [rbp]
mov rdx, qword [rax]
mov ecx, 0xdcc427ce
jmp 0x180001250
mov rsi, qword [rbp - 0x48]
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp - 8], rax
mov eax, 0xa706dccc
nop word cs:[rax + rax]
nop
cmp eax, 0x616d585
je 0x1800012bd
cmp eax, 0xdcc427ce
je 0x1800012d0
cmp eax, 0xa706dccc
jne 0x1800012a0
mov rcx, qword [rbp - 8]
mov eax, edi
jmp 0x1800012a0
mov rax, qword [rbp]
mov rcx, qword [rax]
mov eax, 0xdcc427ce
jmp 0x1800012a0
lea rax, [rdx + rsi*2]
lea rdx, [rbp - 0x10]
mov qword [rbp - 0x30], rdx
mov rdx, qword [rbp - 0x30]
mov qword [rbp - 0x10], rcx
lea rdx, [rbp - 0x28]
mov qword [rbp - 0x38], rdx
mov rdx, qword [rbp - 0x38]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x20]
mov qword [rbp], rax
mov rax, qword [rbp]
mov esi, 0x616d585
mov qword [rbp - 0x20], rbx
mov edx, 0x44f852ca
mov rax, qword [rbp - 0x28]
nop word cs:[rax + rax]
nop dword [rax]
cmp edx, 0x2d7f15e5
je 0x180001390
cmp edx, 0x2ff4912e
je 0x180001360
cmp edx, 0x44f852ca
jne 0x180001320
mov qword [rbp - 8], rcx
mov rdx, qword [rbp - 8]
cmp rdx, rax
mov edx, 0x2ff4912e
mov edi, 0x2d7f15e5
cmove edx, edi
jmp 0x180001320
mov rax, qword [rbp - 8]
movzx ecx, word [rax]
call fcn.18000a3d4
mov word [rbx], ax
mov rcx, qword [rbp - 0x10]
add rcx, 2
mov qword [rbp - 0x10], rcx
mov rbx, qword [rbp - 0x20]
add rbx, 2
jmp 0x180001305
mov rax, qword [rbp]
mov rax, qword [rbp - 0x38]
mov rax, qword [rbp - 0x30]
mov rcx, r12
mov rdx, r15
call fcn.180003820
mov ebx, eax
test al, al
je 0x180001400
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp - 8], rax
cmp qword [rbp - 0x40], 7
mov eax, 0xdcc427ce
cmova eax, esi
mov edx, 0xa706dccc
nop dword [rax + rax]
cmp edx, 0x616d585
je 0x1800013f0
cmp edx, 0xdcc427ce
je 0x180001450
cmp edx, 0xa706dccc
jne 0x1800013d0
mov rcx, qword [rbp - 8]
mov edx, eax
jmp 0x1800013d0
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov edx, 0xdcc427ce
jmp 0x1800013d0
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp - 8], rax
cmp qword [rbp - 0x40], 7
mov eax, 0xdcc427ce
cmova eax, esi
mov edx, 0xa706dccc
nop
cmp edx, 0x616d585
je 0x180001440
cmp edx, 0xdcc427ce
je 0x180001470
cmp edx, 0xa706dccc
jne 0x180001420
mov rcx, qword [rbp - 8]
mov edx, eax
jmp 0x180001420
mov rcx, qword [rbp]
mov rcx, qword [rcx]
mov edx, 0xdcc427ce
jmp 0x180001420
mov qword [rbp - 0x48], 0
mov word [rcx], 0
mov qword [rbp - 0x18], r14
jmp 0x180001481
mov qword [rbp - 0x48], 0
mov word [rcx], 0
mov r13, qword [r13]
mov rcx, r12
call fcn.180003010
test bl, bl
je 0x1800011b0
jmp 0x180001499
xor eax, eax
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
movaps xmm6, xmmword [rbp + 0x10]
add rsp, 0xa8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret