Function at 0x180001ab0
Capabilities:
Access peb ldr_data

Disassembly:
push rbx
push rdi
sub rsp, 0x38
movzx eax, byte [0x185b66ff8]
xor word [0x185b65748], ax
movzx eax, byte [0x185b66ff9]
xor word [0x185b6574a], ax
movzx eax, byte [0x185b66ffa]
xor word [0x185b6574c], ax
movzx eax, byte [0x185b66ffb]
xor word [0x185b6574e], ax
movzx eax, byte [0x185b66ffc]
xor word [0x185b65750], ax
movzx eax, byte [0x185b66ffd]
xor word [0x185b65752], ax
movzx eax, byte [0x185b66ffe]
xor word [0x185b65754], ax
movzx eax, byte [0x185b66fff]
xor word [0x185b65756], ax
movzx eax, byte [0x185b67000]
xor word [0x185b65758], ax
mov rax, qword gs:[0x60]
mov rdi, qword [rax + 0x18]
add rdi, 0x20
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x180001b71
nop
mov rcx, qword [rbx + 0x40]
lea rdx, [0x185b65748]
call fcn.180004550
test rax, rax
jne 0x1800023a4
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x180001b50
xor eax, eax
mov qword [rsp + 0x58], rbp
xor ecx, ecx
mov qword [rsp + 0x60], rsi
xorps xmm0, xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x50], rax
mov dword [0x185b65758], ecx
movups xmmword [0x185b65748], xmm0
test rax, rax
je 0x1800023ad
movzx r13d, byte [0x185b66ff9]
movzx r12d, byte [0x185b66ffa]
movzx eax, byte [0x185b66ff8]
movzx r15d, byte [0x185b66ffb]
movzx r14d, byte [0x185b66ffc]
movzx ebp, byte [0x185b66ffd]
movzx esi, byte [0x185b66ffe]
movzx edi, byte [0x185b66fff]
movzx ebx, byte [0x185b67000]
movzx r11d, byte [0x185b67001]
movzx r10d, byte [0x185b67002]
movzx r9d, byte [0x185b67003]
movzx r8d, byte [0x185b67004]
xor byte [0x185b656dc], r8b
movzx r8d, byte [0x185b66ff8]
xor byte [0x185b656e0], r8b
xor byte [0x185b65658], r8b
xor byte [0x185b65718], al
xor byte [0x185b656b0], al
xor byte [0x185b64e78], al
xor byte [0x185b656d0], al
movzx edx, byte [0x185b67005]
movzx r8d, byte [0x185b67004]
movzx ecx, byte [0x185b67006]
movzx eax, byte [0x185b67007]
xor byte [0x185b65664], r8b
xor byte [0x185b65719], r13b
xor byte [0x185b6571a], r12b
xor byte [0x185b6571b], r15b
xor byte [0x185b6571c], r14b
xor byte [0x185b6571d], bpl
xor byte [0x185b6571e], sil
xor byte [0x185b6571f], dil
xor byte [0x185b65720], bl
xor byte [0x185b65721], r11b
xor byte [0x185b65722], r10b
xor byte [0x185b65723], r9b
xor byte [0x185b656b1], r13b
xor byte [0x185b656b2], r12b
xor byte [0x185b656b3], r15b
xor byte [0x185b656b4], r14b
xor byte [0x185b656b5], bpl
xor byte [0x185b656b6], sil
xor byte [0x185b656b7], dil
xor byte [0x185b656b8], bl
xor byte [0x185b656b9], r11b
xor byte [0x185b656ba], r10b
xor byte [0x185b64e79], r13b
xor byte [0x185b64e7a], r12b
xor byte [0x185b64e7b], r15b
xor byte [0x185b64e7c], r14b
xor byte [0x185b64e7d], bpl
xor byte [0x185b64e7e], sil
xor byte [0x185b656d1], r13b
xor byte [0x185b656d2], r12b
xor byte [0x185b656d3], r15b
xor byte [0x185b656d4], r14b
xor byte [0x185b656d5], bpl
xor byte [0x185b656d6], sil
xor byte [0x185b656d7], dil
xor byte [0x185b656d8], bl
xor byte [0x185b656d9], r11b
xor byte [0x185b656da], r10b
xor byte [0x185b656db], r9b
xor byte [0x185b656dd], dl
xor byte [0x185b656de], cl
xor byte [0x185b656df], al
xor byte [0x185b656e1], r13b
xor byte [0x185b656e2], r12b
xor byte [0x185b65659], r13b
xor byte [0x185b6565a], r12b
xor byte [0x185b6565b], r15b
xor byte [0x185b6565c], r14b
xor byte [0x185b6565d], bpl
xor byte [0x185b6565e], sil
xor byte [0x185b6565f], dil
xor byte [0x185b65660], bl
xor byte [0x185b65661], r11b
xor byte [0x185b65662], r10b
xor byte [0x185b65663], r9b
xor byte [0x185b65665], dl
xor byte [0x185b65667], al
xor byte [0x185b6576f], al
movzx eax, byte [0x185b66ff8]
movzx r8d, byte [0x185b66ff8]
xor byte [0x185b65760], r8b
movzx r8d, byte [0x185b67004]
xor byte [0x185b6576c], r8b
xor byte [0x185b656f4], r8b
xor byte [0x185b65734], r8b
xor byte [0x185b65770], al
xor byte [0x185b656e8], al
xor byte [0x185b65788], al
xor byte [0x185b65728], al
movzx r8d, byte [0x185b66ff8]
movzx eax, byte [0x185b67007]
xor byte [0x185b65738], r8b
xor byte [0x185b65666], cl
xor byte [0x185b65761], r13b
xor byte [0x185b65762], r12b
xor byte [0x185b65763], r15b
xor byte [0x185b65764], r14b
xor byte [0x185b65765], bpl
xor byte [0x185b65766], sil
xor byte [0x185b65767], dil
xor byte [0x185b65768], bl
xor byte [0x185b65769], r11b
xor byte [0x185b6576a], r10b
xor byte [0x185b6576b], r9b
xor byte [0x185b6576d], dl
xor byte [0x185b6576e], cl
xor byte [0x185b65771], r13b
xor byte [0x185b65772], r12b
xor byte [0x185b65773], r15b
xor byte [0x185b65774], r14b
xor byte [0x185b656e9], r13b
xor byte [0x185b656ea], r12b
xor byte [0x185b656eb], r15b
xor byte [0x185b656ec], r14b
xor byte [0x185b656ed], bpl
xor byte [0x185b656ee], sil
xor byte [0x185b656ef], dil
xor byte [0x185b656f0], bl
xor byte [0x185b656f1], r11b
xor byte [0x185b656f2], r10b
xor byte [0x185b656f3], r9b
xor byte [0x185b656f5], dl
xor byte [0x185b656f6], cl
xor byte [0x185b65789], r13b
xor byte [0x185b6578a], r12b
xor byte [0x185b6578b], r15b
xor byte [0x185b6578c], r14b
xor byte [0x185b6578d], bpl
xor byte [0x185b6578e], sil
xor byte [0x185b6578f], dil
xor byte [0x185b65790], bl
xor byte [0x185b65791], r11b
xor byte [0x185b65792], r10b
xor byte [0x185b65729], r13b
xor byte [0x185b6572a], r12b
xor byte [0x185b6572b], r15b
xor byte [0x185b6572c], r14b
xor byte [0x185b6572d], bpl
xor byte [0x185b6572e], sil
xor byte [0x185b6572f], dil
xor byte [0x185b65730], bl
xor byte [0x185b65731], r11b
xor byte [0x185b65732], r10b
xor byte [0x185b65733], r9b
xor byte [0x185b65735], dl
xor byte [0x185b65736], cl
xor byte [0x185b65737], al
xor byte [0x185b65739], r13b
xor byte [0x185b6573a], r12b
xor byte [0x185b6573b], r15b
xor byte [0x185b6573c], r14b
xor byte [0x185b6573d], bpl
xor byte [0x185b6573e], sil
xor byte [0x185b6573f], dil
xor byte [0x185b65740], bl
xor byte [0x185b65741], r11b
xor byte [0x185b65742], r10b
xor byte [0x185b656ff], dil
xor byte [0x185b6570f], dil
xor byte [0x185b656c7], dil
xor byte [0x185b6577f], dil
xor byte [0x185b656f8], r8b
xor byte [0x185b65707], al
movzx eax, byte [0x185b66ff8]
movzx r8d, byte [0x185b67004]
xor byte [0x185b65705], dl
lea rdx, [0x185b65718]
xor byte [0x185b65706], cl
mov rdi, qword [rsp + 0x50]
xor byte [0x185b65743], r9b
mov rcx, rdi
xor byte [0x185b656f9], r13b
xor byte [0x185b656fa], r12b
xor byte [0x185b656fb], r15b
xor byte [0x185b656fc], r14b
xor byte [0x185b656fd], bpl
xor byte [0x185b656fe], sil
xor byte [0x185b65700], bl
xor byte [0x185b65701], r11b
xor byte [0x185b65702], r10b
xor byte [0x185b65703], r9b
xor byte [0x185b65704], r8b
xor byte [0x185b65708], al
xor byte [0x185b65709], r13b
xor byte [0x185b6570a], r12b
xor byte [0x185b6570b], r15b
xor byte [0x185b6570c], r14b
xor byte [0x185b6570d], bpl
xor byte [0x185b6570e], sil
xor byte [0x185b65710], bl
xor byte [0x185b65711], r11b
xor byte [0x185b65712], r10b
xor byte [0x185b656c0], al
xor byte [0x185b656c1], r13b
xor byte [0x185b656c2], r12b
xor byte [0x185b656c3], r15b
xor byte [0x185b656c4], r14b
xor byte [0x185b656c5], bpl
xor byte [0x185b656c6], sil
xor byte [0x185b656c8], bl
xor byte [0x185b656c9], r11b
xor byte [0x185b65778], al
xor byte [0x185b65779], r13b
xor byte [0x185b6577a], r12b
xor byte [0x185b6577b], r15b
xor byte [0x185b6577c], r14b
xor byte [0x185b6577d], bpl
xor byte [0x185b6577e], sil
xor byte [0x185b65780], bl
xor byte [0x185b65781], r11b
xor byte [0x185b65782], r10b
xor byte [0x185b65783], r9b
call fcn.180002820
lea rdx, [0x185b656b0]
mov qword [0x185b67058], rax
mov rcx, rdi
mov rbx, rax
call fcn.180002820
lea rdx, [0x185b64e78]
mov qword [0x185b67018], rax
mov rcx, rdi
mov r14, rax
call fcn.180002820
lea rdx, [0x185b656d0]
mov qword [0x185b67048], rax
mov rcx, rdi
mov r12, rax
call fcn.180002820
lea rdx, [0x185b65658]
mov qword [0x185b67038], rax
mov rcx, rdi
call fcn.180002820
lea rdx, [0x185b65760]
mov qword [0x185b67040], rax
mov rcx, rdi
call fcn.180002820
mov qword [0x185b67060], rax
lea rdx, [0x185b656e8]
mov rcx, rdi
call fcn.180002820
lea rdx, [0x185b65788]
mov qword [0x185b67010], rax
mov rcx, rdi
call fcn.180002820
lea rdx, [0x185b65728]
mov qword [0x185b67050], rax
mov rcx, rdi
mov r13, rax
call fcn.180002820
lea rdx, [0x185b656f8]
mov qword [0x185b67008], rax
mov rcx, rdi
mov r15, rax
call fcn.180002820
lea rdx, [0x185b656c0]
mov qword [0x185b67030], rax
mov rcx, rdi
mov rbp, rax
call fcn.180002820
lea rdx, [0x185b65778]
mov qword [0x185b67028], rax
mov rcx, rdi
mov rsi, rax
call fcn.180002820
xor ecx, ecx
mov qword [0x185b67020], rax
mov qword [0x185b65718], rcx
xorps xmm1, xmm1
mov dword [0x185b65720], ecx
mov byte [0x185b65724], cl
mov qword [0x185b656b0], rcx
mov dword [0x185b656b8], ecx
mov qword [0x185b64e78], rcx
mov dword [0x185b656e0], ecx
mov byte [0x185b65668], cl
mov dword [0x185b65770], ecx
mov word [0x185b65774], cx
mov qword [0x185b65788], rcx
mov dword [0x185b65790], ecx
mov qword [0x185b65738], rcx
mov dword [0x185b65740], ecx
mov byte [0x185b65744], cl
mov qword [0x185b65708], rcx
mov dword [0x185b65710], ecx
mov qword [0x185b656c0], rcx
mov word [0x185b656c8], cx
mov byte [0x185b656ca], cl
mov qword [0x185b65778], rcx
mov dword [0x185b65780], ecx
mov byte [0x185b65784], cl
movups xmmword [0x185b656d0], xmm0
movups xmmword [0x185b65658], xmm1
movups xmmword [0x185b65760], xmm0
movups xmmword [0x185b656e8], xmm0
movups xmmword [0x185b65728], xmm0
movups xmmword [0x185b656f8], xmm0
test rbx, rbx
je 0x1800023ad
test r14, r14
je 0x1800023ad
test r12, r12
je 0x1800023ad
cmp qword [0x185b67038], rcx
je 0x1800023ad
cmp qword [0x185b67040], rcx
je 0x1800023ad
cmp qword [0x185b67060], rcx
je 0x1800023ad
cmp qword [0x185b67010], rcx
je 0x1800023ad
test r13, r13
je 0x1800023ad
test r15, r15
je 0x1800023ad
test rbp, rbp
je 0x1800023ad
test rsi, rsi
je 0x1800023ad
test rax, rax
setne al
jmp 0x1800023af
mov rax, qword [rbx + 0x20]
jmp 0x180001b73
xor al, al
mov r15, qword [rsp + 0x20]
mov r14, qword [rsp + 0x28]
mov r13, qword [rsp + 0x30]
mov r12, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x58]
add rsp, 0x38
pop rdi
pop rbx
ret