Function at 0x14008bcf0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
xchg rbp, rbx
mov qword [rsp + 8], rbp
xchg rbx, rbp
mov dword [rsp + 0x18], r8d
mov dword [rsp - 0xc], ecx
push rdi
neg rsp
sub rsp, 0xfffffffffffffdc0
neg rsp
xchg rbx, rdx
mov rdx, rbx
xchg rdx, rbx
xchg rdi, rcx
mov rcx, rdi
xchg rdi, rcx
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x37cc5bc8
sub r8d, 0x120a4a92
add r8d, 0x32dce983
sub r8d, 0x1353b744
xor r8d, 0x454b417d
call fcn.14009a370
mov dword [rsp - 0x14], 0x480937ba
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
mov rax, qword [r8 + 0x10]
mov dword [rsp - 0x44], ecx
xchg r10, r8
mov r10, qword [rax]
xchg r8, r10
test r8, r8
mov dword [rsp - 0x20], ecx
je 0x14008c047
mov r8, qword [r8 + 0x50]
test r8, r8
mov r13, r13
je 0x14008c047
mov edx, 0x140423ef
sub edx, 0x44a5c38
add edx, 0x606f9ba7
sub edx, 0x567b1407
sub edx, 0x19ae4e53
lea rcx, [rsp + 0x30]
mov dword [rsp - 0x34], edi
lea r9d, [rdx - 1]
call fcn.14009ae60
mov edx, 0x40c36086
sub edx, 0x23a8f131
sub edx, 0xa73aad2
add edx, 0x11540838
sub edx, 0x23facc5f
lea rcx, [rsp + 0x30]
call fcn.14009af60
mov dword [rsp - 0x1c], 0x3ff7e1c1
test rax, rax
je 0x14008c00b
xor ecx, ecx
mov rdx, rdi
mov rsp, rsp
mov word [rax], cx
movabs rcx, 0x2da1ad7a23230977
sub rcx, 0x1f49da22
add rcx, 0x6c35d0ec
sub rcx, 0x630f10cb
mov rax, qword [0x140143690]
xor rax, rcx
mov dword [rsp - 0x28], edi
movabs rcx, 0x59c9404c692772b9
sub rcx, 0x4ba1b85a
xor rcx, 0x403890cd
add rcx, 0x1099c362
rol rax, 4
rol rax, 0x14
rol rax, 3
rol rax, 2
rol rax, 2
rol rax, 1
xor rax, rcx
mov r10, r10
movabs rcx, 0x59cf9e3462f959d7
sub rcx, 0x1ef111b6
sub rcx, 0x37175723
add rcx, 0x7fffffff
add rcx, 0x29bb8ee6
add rax, rcx
mov dword [rsp - 0x34], 0x296ce71d
movabs rcx, 0xbbc8bdc14639cb85
xor rcx, 0x354e573e
sub rcx, 0x2968244
sub rcx, 0x537da584
xor rax, rcx
movabs rcx, 0x4d1eb62c215e5cd8
sub rcx, 0x177bb995
add rcx, 0x3f4997c2
add rcx, 0x5816b047
sub rax, rcx
mov dword [rsp - 0x44], 0x5571d95c
lea rcx, [rsp + 0x20]
call rax
mov rax, qword [0x140143680]
lea r8, [rsp + 0x20]
mov r8, r8
movabs rcx, 0x73f0c25e73d0219b
xor rcx, 0x38f3a4d9
xor rcx, 0x69b6a1da
sub rcx, 0x593a770
sub rcx, 0x4a20a23
lea rdx, [rsp + 0x260]
xchg rsp, rsp
xor rax, rcx
xchg r9, rbx
mov rbx, r9
xchg rbx, r9
not rax
mov dword [rsp - 0x3c], edx
movabs rcx, 0x185292d37cefad32
xor rcx, 0x7ab70274
add rcx, 0x5e26001a
sub rcx, 0x4f3e94f0
add rcx, 0x114eb1a2
add rax, rcx
mov dword [rsp - 0x20], 0x6233417f
movabs rcx, 0x4260c7b91c31fbaf
xor rcx, 0x1c489c36
add rcx, 0xb883b3f
add rcx, 0x31fdcf76
xor rcx, 0xed0d951
xor rax, rcx
xchg r11, r11
movabs rcx, 0x58741aa104ab035f
add rcx, 0x594bd0ae
sub rcx, 0x1fa75c82
add rcx, 0x23c42735
add rcx, 0x7fffffff
add rcx, 0x1d019ee4
ror rax, 0x1a
ror rax, 7
ror rax, 1
ror rax, 1
add rax, rcx
xchg r15, r15
lea rcx, [rsp + 0x30]
call rax
mov rbx, qword [rsp + 0x250]
neg rsp
add rsp, 0xfffffffffffffdc0
neg rsp
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov eax, 0x1b9eb3ea
add eax, 0x354d4998
sub eax, 0x20726b94
xor eax, 0x32005451
xor eax, 0xc279c5be
mov rbx, qword [rsp + 0x250]
xchg rsi, rsi
add rsp, 0x439ae250
sub rsp, 0x439ae010
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov rbx, qword [rsp + 0x250]
mov eax, 0xa8e0e89
xor eax, 0x43e3bd7
add eax, 0x58f26ce0
add eax, 0x2d22f33
xor eax, 0xaa74d044
neg rsp
add rsp, 0xfffffffffffffdc0
neg rsp
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret