Function at 0x14007c180
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov qword [rsp + 8], rbx
mov rsp, rsp
mov dword [rsp + 0x18], r8d
push rdi
sub rsp, 0x3f09bfac
add rsp, 0x3f09bd6c
xchg rdx, rbx
mov rdx, rbx
xchg rbx, rdx
xchg r12, rdi
mov r12, rcx
xchg r12, rdi
xor edx, edx
mov dword [rsp - 0xc], 0x37901f9b
lea rcx, [rsp + 0x30]
mov r8d, 0x5d1f29e1
sub r8d, 0xa2a7dc5
sub r8d, 0x330bf2c8
sub r8d, 0xc8093ae
sub r8d, 0x1368239e
call fcn.140099800
mov dword [rsp - 0x10], 0x533ca639
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
xchg rdx, rax
mov rdx, qword [r8 + 0x10]
xchg rdx, rax
mov r8, qword [rax]
test r8, r8
xchg rdx, rdx
je 0x14007c49b
mov r8, qword [r8 + 0x50]
test r8, r8
je 0x14007c49b
mov dword [rsp - 0x1c], ebp
mov edx, 0x3525d2ac
add edx, 0x3d893079
sub edx, 0x50483d4d
add edx, 0x41cca2a4
sub edx, 0x64336778
lea rcx, [rsp + 0x30]
lea r9d, [rdx - 1]
call fcn.14009a230
mov r13, r13
mov edx, 0x311c29c
xor edx, 0x5dab8b26
sub edx, 0x1bde296d
xor edx, 0x42dc2011
lea rcx, [rsp + 0x30]
call fcn.14009a300
xchg r12, r12
test rax, rax
je 0x14007c45c
xor ecx, ecx
xchg rdi, r10
mov rdx, r10
xchg r10, rdi
mov word [rax], cx
mov rbp, rbp
movabs rcx, 0x209e6857c95a1ab
xor rcx, 0x11a085b5
xor rcx, 0x1642a9a9
sub rcx, 0x62ee5f85
mov rax, qword [0x1404a3800]
xchg r10, r10
xor rax, rcx
movabs rcx, 0x85fe2a968fa0432
xor rcx, 0x31e91444
sub rcx, 0x2a73eb0a
xor rcx, 0x162ceb5e
add rcx, 0x778282d3
not rax
mov dword [rsp - 0x10], edi
add rax, rcx
movabs rcx, 0x452bff4e3265b3e7
add rcx, 0x3d1122b1
xor rcx, 0x4e30dd5d
xor rcx, 0x5177b79f
sub rcx, 0x6c24cab4
rol rax, 0xd
rol rax, 0x12
rol rax, 2
rol rax, 1
rol rax, 1
rol rax, 1
xor rax, rcx
mov r14, r14
movabs rcx, 0x705098de76196179
sub rcx, 0x19249b2a
xor rcx, 0x741276ca
xor rcx, 0x2f0b041a
add rax, rcx
lea rcx, [rsp + 0x20]
mov dword [rsp - 0x20], ebp
call rax
mov r10, qword [0x1404a37f0]
lea r8, [rsp + 0x20]
movabs rcx, 0xc141b4da29feb225
add rcx, 0x3b703641
sub rcx, 0x242869ad
add rcx, 0x7fffffff
add rcx, 0x3e6db3d4
lea rdx, [rsp + 0x260]
xchg r11, r11
add r10, rcx
movabs rax, 0x6c07067478c260c5
xor rax, 0x7191a16c
sub rax, 0x29ece69
add rax, 0x764e7483
add rax, 0x7fffffff
sub rax, 0x52007eeb
not r10
mov dword [rsp - 0x18], 0x1fbe3941
lea rcx, [rsp + 0x30]
add r10, rax
xchg r9, rbx
mov rbx, r9
xchg rbx, r9
movabs rax, 0x5ff38d6b3e788368
xor rax, 0x15f079e3
add rax, 0x4d00d3
add rax, 0x26cdcf33
sub rax, 0x41f6490a
xor r10, rax
movabs rax, 0x423ed8bc6b6cc456
sub rax, 0x3889a4f7
xor rax, 0xa2f3063
add rax, 0x15c2b888
add rax, 0x33eb6c6
rol r10, 6
rol r10, 2
rol r10, 2
rol r10, 1
xor r10, rax
call r10
mov rbx, qword [rsp + 0x250]
mov dword [rsp - 0x28], ebx
add rsp, 0x56cfcab8
sub rsp, 0x56cfc878
nop
add rsp, 8
mov rdi, qword [rsp - 8]
ret
mov eax, 0x3b8ede8e
add eax, 0x5ad2b00
sub eax, 0x366b7e85
xor eax, 0x6bd0f765
xor eax, 0xa1007c6d
xchg rbx, r8
mov r8, qword [rsp + 0x250]
xchg r8, rbx
sub rsp, 0x79e4abb2
add rsp, 0x79e4adf2
nop
mov rdi, qword [rsp]
add rsp, 8
ret
mov rbx, qword [rsp + 0x250]
mov dword [rsp - 0x18], edx
mov eax, 0x7d76ed4c
sub eax, 0x5845d5e9
add eax, 0x2c9212df
add eax, 0x6500cd5
xor eax, 0x98133622
neg rsp
add rsp, 0xfffffffffffffdc0
neg rsp
pop rdi
ret