Function at 0x1400bceb0
Capabilities:
Access peb ldr_data

Disassembly:
xchg r12, rbx
mov qword [rsp + 0x18], r12
xchg rbx, r12
mov qword [rsp + 0x20], rsi
nop
sub rsp, 8
mov qword [rsp], rbp
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rbx, rcx
xor r14d, r14d
mov qword [rcx + 0x10], r14
xchg r13, r14
mov qword [rcx + 0x20], r13
xchg r14, r13
xchg r14, r8
mov qword [rcx + 0x30], r8
xchg r14, r8
mov qword [rcx + 0x40], r14
mov qword [rcx + 0x50], r14
xchg r14, r15
mov qword [rcx + 0x60], r15
xchg r14, r15
xchg r15, r14
mov qword [rcx + 0x70], r15
xchg r14, r15
mov qword [rcx + 0x80], r14
xchg r15, r14
mov qword [rcx + 0x90], r15
xchg r14, r15
mov qword [rcx + 0xa0], r14
xchg r14, rdi
mov qword [rcx + 0xb0], rdi
xchg rdi, r14
xchg r14, r10
mov qword [rcx + 0xc0], r10
xchg r14, r10
xchg r10, r14
mov qword [rcx + 0xd0], r10
xchg r10, r14
xchg rbp, r14
mov qword [rcx + 0xe0], rbp
xchg r14, rbp
mov qword [rcx + 0xf0], r14
mov qword [rcx + 0x100], r14
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rax + 0x20]
mov rax, qword [rcx]
mov rdx, qword [rax + 0x20]
mov qword [rbx], rdx
lea r15, [0x140003138]
mov qword [rbp - 0x70], r15
lea r12, [0x1400be4d0]
xchg rdx, r12
mov qword [rbp - 0x68], rdx
xchg r12, rdx
lea rax, [rbp - 0x70]
xchg rcx, rax
mov qword [rbp - 0x38], rcx
xchg rcx, rax
lea r9, [rbp - 0x70]
xor r8d, r8d
xchg rcx, rbx
mov rbx, rcx
xchg rcx, rbx
call fcn.1400be260
mov dword [rsp + 0x30], 0x532ae13e
xor dword [rsp + 0x30], 0xed945f80
mov dword [rsp + 0x50], 0x42d11021
add dword [rsp + 0x50], 0xbcc4ef7d
mov dword [rsp + 0x54], 0x6ffe7406
add dword [rsp + 0x54], 0x8fb78bb5
mov dword [rsp + 0x34], 0x536d3d75
xor dword [rsp + 0x34], 0xedd383cb
mov dword [rsp + 0x58], 0x18bfc74
add dword [rsp + 0x58], 0xfe1c0342
mov dword [rsp + 0x5c], 0x103792d9
xor dword [rsp + 0x5c], 0xefa36d76
mov dword [rsp + 0x38], 0x41efdf3c
add dword [rsp + 0x38], 0x7ccedf82
mov dword [rsp + 0x60], 0x2a53dd02
add dword [rsp + 0x60], 0xd55e22af
mov dword [rsp + 0x64], 0x79c7483b
xor dword [rsp + 0x64], 0x8659b78d
mov dword [rsp + 0x3c], 0x346a4886
add dword [rsp + 0x3c], 0x8a547638
mov dword [rsp + 0x68], 0x68401dba
add dword [rsp + 0x68], 0x977be1fb
mov dword [rsp + 0x6c], 0x10a0fe23
xor dword [rsp + 0x6c], 0xef160196
mov dword [rsp + 0x40], 0x5325dfec
add dword [rsp + 0x40], 0x6b98ded2
mov dword [rsp + 0x70], 0x67219f17
add dword [rsp + 0x70], 0x988e6090
mov dword [rsp + 0x74], 0x744d4068
add dword [rsp + 0x74], 0x8b27bf0d
mov dword [rsp + 0x44], 0x5674378e
add dword [rsp + 0x44], 0x684a8730
mov dword [rsp + 0x78], 0x11b1914c
xor dword [rsp + 0x78], 0xee016ed2
mov dword [rsp + 0x7c], 0x7ec1e465
add dword [rsp + 0x7c], 0x80e51b51
mov dword [rsp + 0x48], 0x45b2e960
xor dword [rsp + 0x48], 0xfb0c57de
mov dword [rbp - 0x80], 0x5514d853
xor dword [rbp - 0x80], 0xaaba27fd
mov dword [rbp - 0x7c], 0x1810bc4e
add dword [rbp - 0x7c], 0xe7964322
mov word [rsp + 0x4c], 0x70d2
add word [rsp + 0x4c], 0x4dec
mov dword [rbp - 0x78], 0x1ccb0672
xor dword [rbp - 0x78], 0xe365f9dc
xor eax, eax
mov word [rbp - 0x74], ax
nop word [rax + rax]
movzx edx, word [rsp + rax*2 + 0x50]
movzx ecx, byte [rsp + rax + 0x30]
add cx, dx
mov word [rsp + rax*2 + 0x50], cx
mov byte [rsp + rax + 0x30], r14b
inc rax
cmp rax, 0x1e
jb 0x1400bd150
xor r8d, r8d
lea rdx, [rsp + 0x50]
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call fcn.1400bed10
xchg rsi, rax
mov rdi, rsi
xchg rsi, rax
xchg rcx, rsi
mov rsi, r14
xchg rcx, rsi
nop word [rax + rax]
mov byte [rsp + rcx + 0x50], 0x67
sub byte [rsp + rcx + 0x50], 0x67
inc rcx
cmp rcx, 0x3c
jb 0x1400bd1a4
xchg r11, r14
mov qword [rsp + 0x28], r11
xchg r14, r11
mov byte [rsp + 0x20], 5
xor byte [rsp + 0x20], 5
xor r9d, r9d
xor r8d, r8d
xchg rdi, rdx
mov rdi, rdx
xchg rdi, rdx
xchg rbx, r12
mov rcx, r12
xchg r12, rbx
call fcn.1400bf7c0
xchg r12, rax
mov qword [rbx + 8], r12
xchg r12, rax
mov qword [rbp + 0x40], rdi
test rdi, rdi
je 0x1400bd226
mov dword [rsp + 0x20], 0x34339442
xor dword [rsp + 0x20], 0x34331442
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rdx, [r9 - 1]
lea rcx, [rbx + 0x70]
call fcn.1400bd4f0
xchg r15, r8
mov qword [rbp - 0x30], r8
xchg r15, r8
mov qword [rbp - 0x28], r12
lea rax, [rbp - 0x30]
mov qword [rbp + 8], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
xchg rdx, r13
mov r13, qword [rbx + 8]
xchg rdx, r13
xchg r13, rcx
mov r13, rbx
xchg rcx, r13
call fcn.1400be260
xchg r15, rbx
mov rax, r15
xchg r15, rbx
lea r11, [rsp + 0x110]
xchg r8, rbx
mov r8, qword [r11 + 0x40]
xchg r8, rbx
mov rsi, qword [r11 + 0x48]
mov rsp, r11
nop
mov r15, qword [rsp]
add rsp, 8
push rdx
push rcx
push rax
push rax
push rcx
push rax
xchg qword [rsp + 0x30], r14
pop rax
pop rcx
pop rax
pop rax
pop rcx
pop rdx
add rsp, 8
push rcx
push rdx
xchg qword [rsp + 0x10], r12
add rsp, 0x18
nop
xchg qword [rsp], rdi
add rsp, 8
push rax
push rcx
xchg qword [rsp + 0x10], rbp
add rsp, 0x18
ret