Function at 0x7fff25e2d4f0
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x160
mov rax, qword [0x7fff25fcfe70]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rdi, qword gs:[0x60]
mov r14, rcx
cmp qword [0x7fff25fd24d8], 0
jne 0x7fff25e2d53b
mov eax, 0x3d54
jmp 0x7fff25e2d758
lea r13, [0x7fff25fd2e08]
test r14, r14
je 0x7fff25e2d58f
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlAcquireSRWLockShared]
nop dword [rax + rax]
mov rax, qword [0x7fff25fd24c8]
mov rdx, r14
mov rcx, qword [rax + 0x58]
call 0x7fff25e2b9b8
mov rcx, r13
test al, al
je 0x7fff25e2d583
call qword [sym.imp.ntdll.dll_RtlReleaseSRWLockShared]
nop dword [rax + rax]
xor eax, eax
jmp 0x7fff25e2d758
call qword [sym.imp.ntdll.dll_RtlReleaseSRWLockShared]
nop dword [rax + rax]
mov rax, qword [0x7fff25fd24c8]
cmp qword [rax + 8], 0
je 0x7fff25e2d5a7
mov eax, 0x32
jmp 0x7fff25e2d758
lea rdx, [rsp + 0x50]
mov dword [rsp + 0x30], 0x80
lea rcx, [rsp + 0x30]
call sym.KERNELBASE.dll_GetCurrentPackageFullName
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlAcquireSRWLockExclusive]
nop dword [rax + rax]
and qword [rsp + 0x38], 0
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x50]
xor ecx, ecx
call fcn.7fff25d9cf14
mov rbx, qword [rsp + 0x38]
mov esi, eax
test eax, eax
jns 0x7fff25e2d5f6
mov edx, 0x156
jmp 0x7fff25e2d622
mov r15, qword [rdi + 0x20]
lea rdx, [rsp + 0x40]
and qword [rsp + 0x40], 0
xor r9d, r9d
mov rcx, rbx
lea r8, [r15 + 0x400]
call fcn.7fff25d7b2fc
mov esi, eax
test eax, eax
jns 0x7fff25e2d63e
mov edx, 0x159
mov rcx, qword [rsp + 0x188]
lea r8, [0x7fff25fa22f8]
mov r9d, eax
call fcn.7fff25d81fe8
jmp 0x7fff25e2d73f
mov r15, qword [r15 + 0x400]
mov rdx, qword [rsp + 0x40]
mov rcx, r15
call fcn.7fff25d7b47c
mov esi, eax
test eax, eax
jns 0x7fff25e2d685
test rbx, rbx
mov qword [rsp + 0x28], r15
mov r8, rdx
mov dword [rsp + 0x20], 0x38495241
lea rcx, str._PEB_
mov edx, eax
cmovne rcx, rbx
xor r9d, r9d
call fcn.7fff25e2bc80
jmp 0x7fff25e2d73f
mov ecx, 0xa8
call fcn.7fff25d7acf8
test rax, rax
je 0x7fff25e2d6a1
mov rcx, rax
call fcn.7fff25d7c5b4
mov rbp, rax
jmp 0x7fff25e2d6a3
xor ebp, ebp
mov rdi, rbp
test rbp, rbp
jne 0x7fff25e2d6b5
mov esi, 0x8007000e
jmp 0x7fff25e2d737
test rbx, rbx
lea rdx, str._PEB_
mov r8, rbp
mov rcx, r15
cmovne rdx, rbx
call fcn.7fff25da0c08
mov esi, eax
test eax, eax
jns 0x7fff25e2d6f2
mov rcx, qword [rsp + 0x188]
lea r8, [0x7fff25fa22f8]
mov r9d, eax
mov edx, 0x165
call fcn.7fff25d81fe8
jmp 0x7fff25e2d737
mov rcx, qword [rbp + 0x58]
mov rdx, r14
call 0x7fff25e2b9b8
test al, al
jne 0x7fff25e2d709
mov esi, 0x3d54
jmp 0x7fff25e2d737
mov rcx, qword [0x7fff25fd24c8]
call fcn.7fff25d7b4b0
xor edi, edi
mov qword [0x7fff25fd24c8], rbp
call fcn.7fff25e30eb8
mov esi, eax
test eax, eax
jns 0x7fff25e2d735
mov edx, eax
mov rcx, rbx
call 0x7fff25e2bfb0
jmp 0x7fff25e2d737
xor esi, esi
mov rcx, rdi
call fcn.7fff25d7b4f4
mov rcx, rbx
call fcn.7fff25d7b4f4
mov rcx, r13
call qword [sym.imp.ntdll.dll_RtlReleaseSRWLockExclusive]
nop dword [rax + rax]
mov eax, esi
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.7fff25dce640
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret