Function at 0x1800023e0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rbp
push r12
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x184e55008]
xor rax, rsp
mov qword [rbp + 0x20], rax
xor r12d, r12d
mov dword [rsp + 0x50], 1
mov qword [rsp + 0x48], r12
mov r15, rdx
mov qword [rsp + 0x40], r12
mov rdx, rcx
mov qword [rsp + 0x38], r12
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x30], r12
xor r9d, r9d
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r8
xor r8d, r8d
mov qword [rsp + 0x60], r12
call qword [0x185b67008]
test eax, eax
jns 0x180002450
xor al, al
jmp 0x180002807
mov rax, qword [rsp + 0x60]
xorps xmm0, xmm0
mov edx, 8
mov qword [rsp + 0x138], rdi
mov r8d, edx
or dword [rax + 0xa4], 1
mov rax, qword [rsp + 0x60]
mov dword [rax + 0xa8], r12d
xor eax, eax
mov qword [rbp - 0x50], rax
mov dword [rbp - 0x78], 0x30
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67010]
mov rdi, rax
test rax, rax
jne 0x1800024c1
mov rcx, qword [rsp + 0x60]
call qword [0x185b67030]
xor al, al
jmp 0x1800027ff
mov rax, qword gs:[0x30]
mov edx, 8
mov qword [rsp + 0x178], rsi
mov rcx, qword [rax + 0x60]
lea r8d, [rdx + 0x18]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67010]
mov rcx, qword gs:[0x30]
mov rsi, rax
mov rcx, qword [rcx + 0x60]
mov rcx, qword [rcx + 0x30]
test rax, rax
jne 0x18000251f
mov r8, rdi
xor edx, edx
call qword [0x185b67050]
mov rcx, qword [rsp + 0x60]
call qword [0x185b67030]
xor al, al
jmp 0x1800027f7
mov edx, 8
mov qword [rsp + 0x130], r14
lea r8d, [rdx + 0x38]
call qword [0x185b67010]
mov rcx, qword gs:[0x30]
mov r14, rax
mov rcx, qword [rcx + 0x60]
mov rcx, qword [rcx + 0x30]
test rax, rax
jne 0x180002588
mov r8, rsi
xor edx, edx
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, rdi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rcx, qword [rsp + 0x60]
call qword [0x185b67030]
xor al, al
jmp 0x1800027ef
mov edx, 8
mov qword [rsp + 0x168], rbx
mov r8d, 0xc8
call qword [0x185b67010]
mov rbx, rax
test rax, rax
jne 0x18000260f
mov rax, qword gs:[0x30]
mov r8, r14
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, rsi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, rdi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rcx, qword [rsp + 0x60]
call qword [0x185b67030]
xor al, al
jmp 0x1800027e7
mov qword [rax], 0xc8
lea rdx, [rsp + 0x70]
mov qword [rax + 8], 0x10003
lea rcx, [rsp + 0x68]
mov qword [rax + 0x10], 0x10
xorps xmm0, xmm0
mov qword [rax + 0x18], rsi
mov r9d, 0x2000000
mov qword [rax + 0x28], 6
mov r8d, r9d
mov qword [rax + 0x30], 0x40
mov qword [rax + 0x38], r14
mov qword [rax + 0x48], 0x20005
movzx eax, word [r15]
mov qword [rbx + 0x50], rax
mov rax, qword [r15 + 8]
mov qword [rbx + 0x58], rax
movabs rax, 0x100000000000
mov qword [rbx + 0x68], 0x2000a
mov qword [rbx + 0x70], 8
mov qword [rbx + 0x78], rdi
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x78]
add qword [rbx], 0xffffffffffffffe0
mov qword [rbx + 0x98], rax
xor eax, eax
mov qword [rbx + 0x88], 0x20010
mov qword [rbx + 0x90], 8
mov qword [rsp + 0x50], rbx
mov qword [rbp + 0x10], rax
lea rax, [rbp - 0x40]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x40], rax
lea rax, [rbp - 0x78]
mov dword [rsp + 0x38], r12d
movups xmmword [rbp - 0x40], xmm0
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x78]
movups xmmword [rbp - 0x30], xmm0
mov qword [rsp + 0x20], rax
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x40], 0x58
movups xmmword [rbp - 0x10], xmm0
mov dword [rbp - 0x38], r12d
movups xmmword [rbp], xmm0
mov dword [rbp - 0x30], 1
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
call qword [0x185b67038]
mov r15d, eax
test eax, eax
js 0x180002766
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x180002756
lea r8, [rbp - 0x80]
mov qword [rbp - 0x80], 0xffffffffee1e5d00
xor edx, edx
call qword [0x185b67060]
mov rcx, qword [rsp + 0x68]
call qword [0x185b67048]
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x180002766
call qword [0x185b67048]
mov rax, qword gs:[0x30]
mov r8, rbx
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, rdi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, rsi
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rax, qword gs:[0x30]
mov r8, r14
xor edx, edx
mov rcx, qword [rax + 0x60]
mov rcx, qword [rcx + 0x30]
call qword [0x185b67050]
mov rcx, qword [rsp + 0x60]
call qword [0x185b67030]
test r15d, r15d
setns al
mov rbx, qword [rsp + 0x168]
mov r14, qword [rsp + 0x130]
mov rsi, qword [rsp + 0x178]
mov rdi, qword [rsp + 0x138]
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.1800028e0
add rsp, 0x140
pop r15
pop r12
pop rbp
ret