Function at 0x14008b9d0
Capabilities:
Access peb ldr_data

Disassembly:
xchg r13, rbx
mov qword [rsp + 8], r13
xchg rbx, r13
mov dword [rsp + 0x18], r8d
nop
sub rsp, 8
mov qword [rsp], rdi
sub rsp, 0x240
mov rbx, rdx
mov dword [rsp - 0x30], 0x7dc4a6bc
xchg rcx, r13
mov rdi, r13
xchg r13, rcx
xor edx, edx
mov dword [rsp - 0x38], 0x691f52f
lea rcx, [rsp + 0x30]
mov r8d, 0x2d145762
xor r8d, 0x728fea77
add r8d, 0x114df1db
xor r8d, 0x70e9acf8
call fcn.140099ec0
mov rax, qword gs:[0x60]
mov dword [rsp - 0x34], 0x3e62af56
mov r8, qword [rax + 0x18]
mov rax, qword [r8 + 0x10]
xchg r8, rcx
mov rcx, qword [rax]
xchg r8, rcx
test r8, r8
je 0x14008bd04
mov dword [rsp - 0x10], 0x60d7a787
mov r8, qword [r8 + 0x50]
test r8, r8
je 0x14008bd04
mov dword [rsp - 0x10], ecx
mov edx, 0x67ab7f61
sub edx, 0x3647ee44
add edx, 0x32962407
add edx, 0x41dbefd
sub edx, 0x6817731d
lea rcx, [rsp + 0x30]
lea r9d, [rdx - 1]
mov dword [rsp - 0x30], 0x2e3967ac
call fcn.14009aa00
mov edx, 0x5f50212a
xor edx, 0x355bf100
xor edx, 0x64a067d6
sub edx, 0xeabb7a0
lea rcx, [rsp + 0x30]
call fcn.14009ab20
xchg rsi, rsi
test rax, rax
je 0x14008bcc5
xor ecx, ecx
xchg rdi, rdx
mov rdi, rdx
xchg rdi, rdx
mov word [rax], cx
mov dword [rsp - 0x38], 0x77e384f5
movabs rcx, 0x5288b3a8310cda45
sub rcx, 0x6b5db29
xor rcx, 0x6bb1b4f3
add rcx, 0x16ba07a0
mov rax, qword [0x140143690]
mov dword [rsp - 0x40], 0x4f903917
rol rax, 0xd
rol rax, 0x1a
rol rax, 7
rol rax, 1
rol rax, 4
rol rax, 1
add rcx, rax
mov r12, r12
movabs rax, 0x7cd2e57f491aa23d
xor rax, 0x1d481fc7
sub rax, 0xfc93756
add rax, 0x1dc3dc91
add rax, 0x4dafd814
xor rcx, rax
mov dword [rsp - 0x34], edi
movabs rax, 0x6c2f2c8a4031c070
add rax, 0x2fa7c775
xor rax, 0x54ac6037
add rax, 0x2938fe9e
add rax, 0x29d3b289
sub rcx, rax
xchg r11, r11
movabs rax, 0x9e2a2ff9070c9201
add rax, 0x1c258f51
add rax, 0xdf613c0
sub rax, 0x49abaa2
rol rcx, 4
rol rcx, 0xb
rol rcx, 0x15
rol rcx, 1
rol rcx, 1
rol rcx, 2
rol rcx, 1
add rax, rcx
mov dword [rsp - 0x44], esi
lea rcx, [rsp + 0x20]
not rax
call rax
mov r8, r8
mov r10, qword [0x140143680]
lea r8, [rsp + 0x20]
movabs rcx, 0x606b6ad257ed0248
xor rcx, 0x674742f3
add rcx, 0x1e153654
xor rcx, 0x142f8d1f
sub rcx, 0x2b1b70c
lea rdx, [rsp + 0x260]
mov dword [rsp - 0x18], 0x43233404
add r10, rcx
movabs rax, 0x1e647be07a37909b
xor rax, 0x582d5170
xor rax, 0x372b5378
add rax, 0x14de33ed
add rax, 0xfd35910
xor r10, rax
xchg r13, r13
lea rcx, [rsp + 0x30]
movabs rax, 0x72feda9227083908
xor rax, 0x422b1e0
sub rax, 0x1462a174
add rax, 0x58e58dd0
add rax, 0x6a8207ce
xchg rbx, r12
mov r9, r12
xchg rbx, r12
add r10, rax
mov rdx, rdx
movabs rax, 0x747ca6db56cee33c
xor rax, 0x2ba0b4e7
xor rax, 0x1ab179d7
sub rax, 0x1f3e06cb
add rax, 0x566600ec
not r10
add r10, rax
call r10
mov dword [rsp - 0x34], esp
xchg rbx, r11
mov r11, qword [rsp + 0x250]
xchg rbx, r11
add rsp, 0x240
xchg r8, r8
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov eax, 0x49f5226e
sub eax, 0x53416d2
add eax, 0x115ba11d
xor eax, 0x240915ac
add eax, 0x4dea46ec
xchg r10, rbx
mov r10, qword [rsp + 0x250]
xchg r10, rbx
sub rsp, 0x6b5c993a
add rsp, 0x6b5c9b7a
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov rbx, qword [rsp + 0x250]
mov eax, 0x161e840d
xor eax, 0x3a438088
add eax, 0x37f6abdb
add eax, 0x1af9df39
add eax, 0x40b2719c
add rsp, 0x240
xchg rdx, rdx
nop
mov rdi, qword [rsp]
add rsp, 8
ret