Function at 0x1408a03bd
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rdi
push r14
mov di, dx
rcl bh, 0x15
lea rbp, [rsp - 0x47]
sub rsp, 0xd0
btc eax, 0xda
mov eax, dword [rcx + 0xf8]
xchg dil, bl
xor r14d, r14d
mov rdi, rdx
movzx ebx, bp
sal rbx, 0x82
sub bl, 0x23
mov rbx, rcx
stc
cmc
clc
test al, 1
jmp 0x1408a0402
je 0x1408a0526
sub edx, edx
lea r8d, [r14 + 0x40]
movzx rcx, r10w
jmp 0x1408a041b
lea rcx, [rbp + 7]
jmp 0x1408a0424
call fcn.1408c0e31
mov rcx, qword [rbx]
shr r9b, 0x9c
sar r8w, cl
lea r9d, [r14 + 0x40]
lea r8, [rbp + 7]
mov qword [rbp - 0x59], r14
cmp spl, sil
clc
sub edx, edx
jmp 0x1408a044b
mov qword [rbp + 7], 0x40
mov qword [rsp + 0x20], r14
jmp 0x1408a045d
call fcn.14042b9c0
mov edx, eax
jmp 0x1408a0472
test eax, eax
jmp 0x1408a0479
js 0x1408a0496
mov ecx, dword [rbp + 0x3f]
jmp 0x1408a0487
shr ecx, 1
and cl, 1
jmp 0x1408a0491
jmp 0x1408a04d4
mov rcx, qword [rbx]
lea r8, [rbp - 0x59]
movzx r9, r15w
mov dh, 0xdc
cwd
mov r9d, 8
mov qword [rsp + 0x20], r14
lea edx, [r9 + 0x12]
jmp 0x1408a04ba
call fcn.14020c9ed
cmp qword [rbp - 0x59], r14
cmovae dx, r15w
mov edx, r9d
mov edx, r14d
setne cl
cmc
clc
stc
test edx, edx
js 0x1408a0705
test cl, cl
je 0x1408a06a6
mov edx, dword [rbx + 0xe0]
lea rax, [rbp + 0x67]
xchg r8w, cx
movzx ecx, bx
lea r8, [0x14001319c]
jmp 0x1408a0501
mov qword [rsp + 0x20], rax
mov ch, 0x2e
mov rcx, rdi
jmp 0x1408a0511
call fcn.14089c276
mov eax, dword [rbx + 0xf8]
test r10d, 0x57105003
cmp r11d, r9d
test al, 2
jmp 0x1408a052d
je 0x1408a05d1
mov rax, qword gs:[0x60]
cdq
movsx ecx, ax
lea r9, [rbp - 0x51]
setno ch
mov edx, 0xbb2e4322
movsxd rcx, eax
mov qword [rbp - 0x51], r14
mov cx, 0x16e1
movzx rcx, dx
movsx cx, r15b
mov rcx, qword [rax + 0x18]
bswap ax
movsx rax, di
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x30]
jmp 0x1408a057b
call fcn.140007fc0
mov rdx, qword [rbp - 0x51]
sbb cl, r11b
sub r8b, 0x4d
shr r8w, 0
lea r8, [0x1400132d8]
clc
movzx ecx, r15w
and cx, r9w
test eax, eax
mov rcx, rdi
jmp 0x1408a05aa
lea rax, [rbp + 0x77]
jmp 0x1408a05b3
cmovs rdx, r14
jmp 0x1408a05bc
mov qword [rsp + 0x20], rax
jmp 0x1408a05c6
call fcn.14089c276
mov eax, dword [rbx + 0xf8]
test al, 4
jmp 0x1408a05d8
je 0x1408a0670
mov rax, qword gs:[0x60]
xchg ch, ch
movsx cx, r9b
lea r9, [rbp - 0x49]
mov edx, 0xf3f8a463
mov cl, dil
movzx cx, sil
not cl
mov qword [rbp - 0x49], r14
movzx ecx, di
mov rcx, qword [rax + 0x18]
movzx ax, bh
movsxd rax, r13d
movsx rax, bx
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x30]
jmp 0x1408a0627
call fcn.140007fc0
mov rdx, qword [rbp - 0x49]
cmovg r8w, ax
sal cl, 0x9f
xor cx, cx
lea r8, [0x1400133c0]
test eax, eax
movsx rax, r13w
mov rcx, rdi
cmovge rax, r12
movsxd rax, eax
mov ah, dl
lea rax, [rbp + 0x7f]
jmp 0x1408a065d
cmovs rdx, r14
mov qword [rsp + 0x20], rax
jmp 0x1408a066b
call fcn.14089c276
mov rbx, qword [rsp + 0xf8]
sub r14w, sp
add rsp, 0xd0
setno bpl
jmp 0x1408a0691
pop r14
cmovle rbp, r10
bswap rbp
pop rdi
jmp 0x1408a06a4
pop rbp
ret
xor eax, eax
cqo
movsx ecx, di
mov dword [rbp - 9], 0xd000100a
movsx ecx, ax
mov qword [rbp - 0x19], rax
cwd
lea rdx, [0x140068a88]
mov rcx, r8
mov qword [rbp - 0x11], rax
mov cl, bpl
movsx eax, bx
bswap rax
lea rcx, [rbp - 0x21]
mov ah, 0xda
cdqe
movzx rax, r8w
lea rax, [0x14005b4d8]
mov dword [rbp - 5], r14d
jmp 0x1408a06f1
mov qword [rbp - 0x21], rax
jmp 0x1408a06fa
call 0x1402ff4d2
int3
sub eax, eax
xchg ch, ch
cmovp ecx, r8d
mov ch, 0x5f
mov dword [rbp - 0x25], edx
mov qword [rbp - 0x39], rax
xchg edx, edx
lea rdx, [0x140068a88]
mov cl, 0x99
movzx cx, r13b
xchg cx, cx
mov qword [rbp - 0x31], rax
movzx ax, r10b
not cl
lea rcx, [rbp - 0x41]
mov ax, r15w
movsx ax, spl
movsx eax, di
lea rax, [0x14005b4d8]
mov dword [rbp - 0x29], 0xd0001b15
jmp 0x1408a0758
mov qword [rbp - 0x41], rax
jmp 0x1408a0761
call 0x140525b84
int3