Function at 0x1408a6d78
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov qword [rsp + 0x10], rbx
xor al, dil
sar al, cl
push rbp
clc
movzx ebp, r12w
push rdi
lahf
push r14
sub bpl, 0x74
shl di, cl
lea rbp, [rsp - 0x47]
xadd al, al
sub rsp, 0xd0
sbb di, r10w
movsx ebx, cx
xchg di, di
mov eax, dword [rcx + 0xf8]
sub r14d, r14d
movsxd rdi, r15d
shr rbx, cl
mov rdi, rdx
and bx, 0x729a
btc bx, 0xab
mov rbx, rcx
cmc
cmp cx, 0x4d6f
test al, 1
jmp 0x1408a6dd8
je 0x1408a6efd
sub edx, edx
mov r8b, 0x8e
movzx rcx, r15w
movzx r8w, bpl
lea r8d, [r14 + 0x40]
bswap cx
lea rcx, [rbp + 7]
jmp 0x1408a6dfc
call fcn.1408c78c6
mov rcx, qword [rbx]
ror r8b, cl
lea r9d, [r14 + 0x40]
lea r8, [rbp + 7]
mov qword [rbp - 0x59], r14
cmp al, 0xe6
test r10b, sil
sub edx, edx
jmp 0x1408a6e1f
mov qword [rbp + 7], 0x40
mov qword [rsp + 0x20], r14
jmp 0x1408a6e31
call fcn.1402af98a
mov edx, eax
test eax, eax
jmp 0x1408a6e3f
js 0x1408a6e5e
mov ecx, dword [rbp + 0x3f]
shr ecx, 1
cmp dl, r13b
clc
test r9b, spl
and cl, 1
jmp 0x1408a6e59
jmp 0x1408a6ea3
mov rcx, qword [rbx]
lea r8, [rbp - 0x59]
mov r9b, spl
cmovae edx, r10d
mov r9d, 8
movzx dx, r10b
jmp 0x1408a6e80
mov qword [rsp + 0x20], r14
movsx edx, di
lea edx, [r9 + 0x12]
call fcn.1402a261e
cmp qword [rbp - 0x59], r14
mov edx, r14d
jmp 0x1408a6ea0
setne cl
test edx, edx
jmp 0x1408a6eaa
js 0x1408a70d6
test cl, cl
jmp 0x1408a6eb7
je 0x1408a707f
mov edx, dword [rbx + 0xe0]
movzx ax, r11b
lea rax, [rbp + 0x67]
sets r8b
lea r8, [0x14001319c]
jmp 0x1408a6ee2
mov qword [rsp + 0x20], rax
mov rcx, rdi
jmp 0x1408a6eef
call fcn.1408a2be9
mov eax, dword [rbx + 0xf8]
test dl, 0xa8
test al, 2
jmp 0x1408a6f04
je 0x1408a6fae
mov rax, qword gs:[0x60]
setge ch
lea r9, [rbp - 0x51]
mov edx, 0xbb2e4322
movzx cx, r8b
mov qword [rbp - 0x51], r14
mov rcx, qword [rax + 0x18]
movsx ax, r15b
movzx eax, r14w
mov rax, qword [rcx + 0x10]
movzx cx, r12b
mov cl, r12b
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x30]
jmp 0x1408a6f4d
call fcn.140007fc0
mov rdx, qword [rbp - 0x51]
add r8b, 0xe8
lea r8, [0x1400132d8]
shrd rcx, rdx, 0x75
shr cl, cl
test eax, eax
cmove eax, r9d
mov ax, 0x88b
mov rcx, rdi
mov ah, cl
bswap eax
movsx rax, sp
lea rax, [rbp + 0x77]
jmp 0x1408a6f86
cmovs rdx, r14
jmp 0x1408a6f8f
mov qword [rsp + 0x20], rax
jmp 0x1408a6f99
call fcn.1408a2be9
mov eax, dword [rbx + 0xf8]
test r13b, 0x69
cmp r13w, 0x32a1
test al, 4
je 0x1408a7057
mov rax, qword gs:[0x60]
lea r9, [rbp - 0x49]
cwd
mov ch, 0x2d
movsx edx, di
mov edx, 0xf3f8a463
mov qword [rbp - 0x49], r14
not cl
cmovae cx, r13w
movzx rcx, r14w
mov rcx, qword [rax + 0x18]
cwde
movzx eax, r14w
mov rax, qword [rcx + 0x10]
mov rcx, 0x34e52cf2
movzx ecx, bp
mov cx, r9w
mov rcx, qword [rax]
jmp 0x1408a7002
mov rcx, qword [rcx + 0x30]
jmp 0x1408a700b
call fcn.140007fc0
mov rdx, qword [rbp - 0x49]
sbb cl, r9b
and cl, bpl
cmovl cx, bx
lea r8, [0x1400133c0]
sbb rcx, r15
not ch
test eax, eax
movzx eax, r12w
setl ah
mov rcx, rdi
lea rax, [rbp + 0x7f]
jmp 0x1408a703f
cmovs rdx, r14
jmp 0x1408a7048
mov qword [rsp + 0x20], rax
jmp 0x1408a7052
call fcn.1408a2be9
mov rbx, qword [rsp + 0xf8]
add rsp, 0xd0
xchg r14b, dil
movsxd rdi, r10d
pop r14
pop rdi
movsxd rbp, r9d
not bpl
xchg bpl, bpl
pop rbp
jmp 0x1408a707e
ret
xor eax, eax
mov dword [rbp - 9], 0xd000100a
mov qword [rbp - 0x19], rax
bswap edx
movsx cx, dil
lea rdx, [0x140068a88]
movsxd rcx, r10d
movsx rcx, r12w
mov qword [rbp - 0x11], rax
lea rcx, [rbp - 0x21]
cmova eax, r9d
lea rax, [0x14005b4d8]
jmp 0x1408a70b9
mov dword [rbp - 5], r14d
jmp 0x1408a70c2
mov qword [rbp - 0x21], rax
jmp 0x1408a70cb
call 0x14035846c
int3
xor eax, eax
xchg ch, cl
mov dword [rbp - 0x25], edx
movzx dx, r15b
movsx rdx, si
mov qword [rbp - 0x39], rax
lea rdx, [0x140068a88]
mov qword [rbp - 0x31], rax
jmp 0x1408a7100
lea rcx, [rbp - 0x41]
lea rax, [0x14005b4d8]
jmp 0x1408a7110
mov dword [rbp - 0x29], 0xd0001b15
mov qword [rbp - 0x41], rax
jmp 0x1408a7120
call 0x140654fd3
int3