Function at 0x140095b40
Capabilities:
Access peb ldr_data

Disassembly:
and al, 0x48
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], r15
ja 0x140095d9b
jmp 0x140095bfa
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0xb0], rax
mov cx, word [rsp + 0x4e]
mov word [rsp + 0x19e], cx
mov rax, qword [rsp + 0x50]
sub rax, 0x74381efb
mov dx, word [rsp + 0x86]
mov r8w, word [rsp + 0x18c]
add r8w, 0xad3c
mov qword [rsp + 0x1a0], rax
cmp dx, r8w
jbe 0x140095fa9
mov al, byte [rsp + 0x4d]
mov byte [rsp + 0x1af], al
mov rcx, qword [rsp + 0xb0]
mov rdx, qword [rsp + 0x50]
or rdx, 0x154f1d6c
mov qword [rsp + 0x1a0], rdx
mov rdx, qword [rsp + 0x50]
xor rdx, 0x54be65a7
mov qword [rsp + 0x1a0], rdx
mov rax, rcx
add rsp, 0x1b8
pop r12
pop rbx
pop r13
pop r15
pop rsi
pop r14
pop rdi
pop rbp
ret
mov rax, qword [rsp + 0x40]
mov word [rax + 0x18], 0
mov qword [rax + 0x10], 0
mov qword [rax + 8], 0
mov qword [rax], 0
mov ecx, dword [rsp + 0x48]
xor ecx, 0x69553f77
mov rdx, qword [rsp + 0x38]
movsx r8d, byte [rdx]
mov r9w, r8w
mov dword [rsp + 0x1b4], ecx
mov dword [rsp + 0x1b4], 0x7e563bd3
mov word [rsp + 0x136], r9w
mov r10, qword [rsp + 0x50]
xor r10, 0x39cf9420
mov qword [rsp + 0x1a0], r10
mov ecx, dword [rsp + 0x1b0]
movsx r8d, byte [rsp + 0x16c]
mov r9w, r8w
mov r10, qword [rsp + 0x50]
mov qword [rsp + 0x1a0], r10
add ecx, 0x96e64dcf
mov word [rsp + 0x138], r9w
mov r8d, dword [rsp + 0x48]
mov dword [rsp + 0x1b4], r8d
mov dword [rsp + 0x1b4], 0x309e78aa
movsx r11d, byte [rsp + 0x16d]
mov r9w, r11w
mov word [rsp + 0x13a], r9w
movsx r11d, byte [rsp + 0x16e]
mov r9w, r11w
mov word [rsp + 0x13c], r9w
or r10, 0x2c327333
mov qword [rsp + 0x1a0], r10
mov bl, byte [rsp + 0x16f]
movsx r11d, bl
mov r9w, r11w
mov bl, byte [rsp + 0x4d]
add bl, 0x41
mov byte [rsp + 0x1af], bl
mov word [rsp + 0x13e], r9w
mov r10, qword gs:[ecx]
mov rax, qword [r10 + 0x60]
mov rax, qword [rax + 0x18]
add rax, 0x20
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x1a0], 0x1bbc801d
mov rax, qword [rsp + 0xa8]
mov r9w, word [rsp + 0x4e]
mov word [rsp + 0x19e], r9w
mov rax, qword [rax]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0xa8]
mov r10, qword [rsp + 0x50]
and r10, 0x6da814bc
mov qword [rsp + 0x1a0], r10
mov r10, qword [rsp + 0xd0]
mov dword [rsp + 0x1b4], 0x23c33716
mov qword [rsp + 0x88], 0
cmp r10, rax
je 0x140095b57
jmp 0x14009608f
mov ax, 0x4220
sub ax, word [rsp + 0x18c]
mov qword [rsp + 0x1a0], 0x40624d10
mov rcx, qword [rsp + 0xb8]
mov edx, dword [rsp + 0x48]
or edx, 0x3d2020f
mov dword [rsp + 0x1b4], edx
mov r8w, word [rsp + 0x4e]
sub r8w, 0x4d99
mov r9w, word [rsp + rcx*2 + 0x100]
mov word [rsp + 0x19e], r8w
mov edx, dword [rsp + 0x48]
and edx, 0x6b3669d7
mov dword [rsp + 0x1b4], edx
mov rcx, qword [rsp + 0x148]
mov qword [rsp + 0x88], rcx
cmp r9w, ax
je 0x140095b57
jmp 0x140095eac
mov word [rsp + 0x19e], 0x8dab
mov rax, qword [rsp + 0xb8]
mov cl, byte [rsp + 0x4d]
or cl, 0x7b
mov rdx, qword [rsp + 0x190]
add rdx, 0xffffffff853011b0
movzx r8d, word [rsp + 0xc6]
mov byte [rsp + 0x37], cl
mov ecx, r8d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdx
call fcn.140096280
mov r9b, byte [rsp + 0x37]
mov byte [rsp + 0x1af], r9b
mov r9b, byte [rsp + 0x4d]
xor r9b, 0xff
mov rdx, qword [rsp + 0x28]
mov r10w, word [rsp + rdx*2 + 0x100]
mov byte [rsp + 0x1af], r9b
mov r11, qword [rsp + 0x20]
add r11, qword [rsp + 0xb8]
mov qword [rsp + 0xc8], r11
cmp r10w, ax
je 0x140095f42
mov al, 0xeb
mov rcx, qword [rsp + 0x50]
mov qword [rsp + 0x1a0], rcx
or rcx, 0x3ec77fd9
mov rdx, qword [rsp + 0xe0]
mov qword [rsp + 0x1a0], rcx
mov r8w, word [rsp + 0x4e]
imul r9w, r8w, 0xfe8
mov rcx, qword [rsp + 0x190]
xor rcx, 0x71768ba1
mov word [rsp + 0x19e], r9w
sub al, byte [rsp + 0x18f]
mov qword [rsp + 0x180], rdx
sub r8w, 0x278e
mov word [rsp + 0x19e], r8w
mov byte [rsp + 0xf7], al
mov al, byte [rsp + 0xf7]
mov byte [rsp + 0x85], al
mov word [rsp + 0x19e], 0x169b
cmp rcx, qword [rsp + 0xe8]
je 0x140095fa9
jmp 0x140095feb
mov ax, word [rsp + 0x4e]
xor ax, 0xffff
mov word [rsp + 0x19e], ax
mov ax, word [rsp + 0x4e]
xor ax, ax
mov rcx, qword [rsp + 0xc8]
mov rdx, qword [rsp + 0xf8]
mov word [rsp + 0x19e], ax
mov r8, qword [rsp + 0xc8]
mov r9, qword [rsp + 0x148]
mov qword [rsp + 0xd8], r8
mov qword [rsp + 0x88], r9
mov byte [rsp + 0x1af], 0x45
cmp rcx, rdx
jb 0x1400960a4
jmp 0x140095b57
mov eax, dword [rsp + 0x48]
add eax, 0x46de19d
mov cx, word [rsp + 0x18c]
mov dword [rsp + 0x1b4], eax
xor cx, 0x4220
mov dx, word [rsp + 0xc6]
mov r8w, word [rsp + 0x4e]
mov word [rsp + 0x19e], r8w
cmp dx, cx
je 0x140095d9b
jmp 0x140095e1a
mov al, 0x7c
mov cl, byte [rsp + 0x4d]
xor cl, 0xff
mov byte [rsp + 0x1af], cl
sub al, byte [rsp + 0x18f]
cmp al, byte [rsp + 0x85]
ja 0x140095d9b
mov rax, qword [rsp + 0x180]
mov rax, qword [rax]
mov rcx, qword [rsp + 0xa8]
mov qword [rsp + 0x178], rax
mov qword [rsp + 0x88], 0
cmp rax, rcx
je 0x140095b57
jmp 0x140096166
movzx eax, word [rsp + 0x96]
mov ecx, eax
mov rdx, qword [rsp + 0x190]
mov r8w, word [rsp + 0x4e]
and r8w, 0x6e68
mov word [rsp + 0x19e], r8w
add rdx, 0xffffffff853011af
mov qword [rsp + 0xf8], rcx
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x1b4], eax
mov qword [rsp + 0xd8], rdx
jmp 0x1400960a4
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x178], rax
jmp 0x140096166
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xb8], rax
mov cx, word [rsp + 0x4e]
imul dx, cx, 0x2c7e
mov word [rsp + 0x19e], dx
mov r8b, byte [rsp + 0x4d]
add r8b, 0xc7
mov r9b, byte [rsp + 0xa7]
mov byte [rsp + 0x1af], r8b
mov r10d, dword [rsp + 0x48]
or r10d, r10d
mov rax, qword [rsp + 0x98]
mov dword [rsp + 0x1b4], r10d
mov r11, qword [rsp + 0xb8]
mov word [rsp + 0x19e], cx
mov r8b, byte [rsp + 0x4d]
add r8b, 0xdf
mov bl, byte [rsp + 0x18f]
add bl, 0x76
mov byte [rsp + 0x1af], r8b
mov dx, word [rax + r11*2]
mov word [rsp + 0xc6], dx
xor cx, 0xffff
mov word [rsp + 0x19e], cx
mov rax, qword [rsp + 0x50]
xor rax, 0xffffffffffffffff
mov qword [rsp + 0x1a0], rax
mov qword [rsp + 0x88], 0
cmp bl, r9b
jb 0x140095fa9
jmp 0x140095b57
mov eax, dword [rsp + 0x48]
sub eax, 0x37660bac
mov dword [rsp + 0x1b4], eax
mov rcx, qword [rsp + 0x178]
mov qword [rsp + 0xe0], rcx
mov dl, byte [rsp + 0x4d]
xor dl, dl
mov byte [rsp + 0x1af], dl
mov dl, byte [rsp + 0x4d]
add dl, dl
mov rcx, qword [rsp + 0xe0]
mov byte [rsp + 0x1af], dl
mov rcx, qword [rcx + 0x20]
mov eax, dword [rsp + 0x48]
mov dword [rsp + 0x1b4], eax
mov qword [rsp + 0x148], rcx
mov r8w, word [rsp + 0x18c]
mov rcx, qword [rsp + 0x50]
xor rcx, 0x8c31aa4
mov qword [rsp + 0x1a0], rcx
xor r8w, 0x4220
mov rcx, qword [rsp + 0xe0]
mov dl, byte [rsp + 0x4d]
mov byte [rsp + 0x1af], dl
imul eax, eax
mov dword [rsp + 0x1b4], eax
mov r9w, word [rcx + 0x48]
mov word [rsp + 0x19e], 0xa3b8
mov rcx, qword [rsp + 0xe0]
mov r10w, word [rsp + 0x18c]
mov rcx, qword [rcx + 0x50]
add r10w, 0xbde1
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x50]
xor rcx, 0xdf52ea6
mov qword [rsp + 0x1a0], rcx
mov cx, r10w
shr r9w, cl
mov word [rsp + 0x96], r9w
mov eax, dword [rsp + 0x48]
xor eax, 0x2c215030
mov r9w, word [rsp + 0x96]
mov dword [rsp + 0x1b4], eax
cmp r9w, r8w
je 0x140095eac
jmp 0x140096044