Function at 0x14014a260
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rsi
push rdi
sub rsp, 0x198
mov rsi, rcx
mov eax, dword [0x140474184]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 0x20], 0
je 0x14014a28c
xor eax, eax
jmp 0x14014a2af
xor ecx, ecx
call fcn.140102e10
mov eax, dword [0x140474184]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
movzx eax, byte [rax + 0x20]
xor al, 1
mov ecx, dword [0x140474184]
mov rdx, qword gs:[0x58]
mov rdx, qword [rdx + rcx*8]
mov rcx, qword [rdx + 0x28]
mov r8, rcx
shr r8, 0xc
xor r8, rcx
mov r9, r8
shl r9, 0x19
xor r9, r8
mov rcx, r9
shr rcx, 0x1b
xor rcx, r9
mov qword [rdx + 0x28], rcx
movabs rdi, 0x2545f4914f6cdd1d
mov rdx, rcx
imul rdx, rdi
mov qword [rsp + 0x28], rdx
test al, 1
je 0x14014a334
xor ecx, ecx
call fcn.140102e10
mov eax, dword [0x140474184]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x20]
xor al, 1
jmp 0x14014a336
xor eax, eax
mov rdx, rcx
shr rdx, 0xc
xor rdx, rcx
mov r8, rdx
shl r8, 0x19
xor r8, rdx
mov rcx, r8
shr rcx, 0x1b
xor rcx, r8
mov edx, dword [0x140474184]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov qword [rdx + 0x28], rcx
mov rdx, rcx
imul rdx, rdi
mov qword [rsp + 0x30], rdx
test al, 1
je 0x14014a3aa
xor ecx, ecx
call fcn.140102e10
mov eax, dword [0x140474184]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x28]
movzx eax, byte [rax + 0x20]
xor al, 1
jmp 0x14014a3ac
xor eax, eax
mov rdx, rcx
shr rdx, 0xc
xor rdx, rcx
mov r8, rdx
shl r8, 0x19
xor r8, rdx
mov rcx, r8
shr rcx, 0x1b
xor rcx, r8
mov edx, dword [0x140474184]
mov r8, qword gs:[0x58]
mov rdx, qword [r8 + rdx*8]
mov qword [rdx + 0x28], rcx
mov rdx, rcx
imul rdx, rdi
mov qword [rsp + 0x38], rdx
test al, 1
je 0x14014a415
xor ecx, ecx
call fcn.140102e10
mov eax, dword [0x140474184]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rcx, qword [rax + 0x28]
mov rax, rcx
shr rax, 0xc
xor rax, rcx
mov rcx, rax
shl rcx, 0x19
xor rcx, rax
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
mov ecx, dword [0x140474184]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov qword [rcx + 0x28], rax
imul rax, rdi
mov qword [rsp + 0x40], rax
lea rax, [rsp + 0x28]
mov qword [rsp + 0x78], rax
lea rax, [fcn.1401fa450]
mov qword [rsp + 0x80], rax
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x88], rcx
mov qword [rsp + 0x90], rax
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x98], rcx
mov qword [rsp + 0xa0], rax
lea rcx, [rsp + 0x40]
mov qword [rsp + 0xa8], rcx
mov qword [rsp + 0xb0], rax
mov qword [rsp + 0xb8], 2
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0x10
mov qword [rsp + 0xd8], 0
movabs rax, 0x800000020
mov qword [rsp + 0xe0], rax
mov byte [rsp + 0xe8], 3
mov qword [rsp + 0xf0], 2
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], 0x10
mov qword [rsp + 0x110], 1
mov qword [rsp + 0x118], rax
mov byte [rsp + 0x120], 3
mov qword [rsp + 0x128], 2
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 0x10
mov qword [rsp + 0x148], 2
mov qword [rsp + 0x150], rax
mov byte [rsp + 0x158], 3
mov qword [rsp + 0x160], 2
mov qword [rsp + 0x170], 0
mov qword [rsp + 0x178], 0x10
mov qword [rsp + 0x180], 3
mov qword [rsp + 0x188], rax
mov byte [rsp + 0x190], 3
lea rax, [0x1403d03e0]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], 4
lea rax, [rsp + 0xb8]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 4
lea rax, [rsp + 0x78]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], 4
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.1401ed1c0
mov qword [rsi + 0x18], 0
mov qword [rsi + 0x20], 8
xorps xmm0, xmm0
movups xmmword [rsi + 0x28], xmm0
mov qword [rsi + 0x38], 8
mov qword [rsi + 0x40], 0
mov byte [rsi + 0x48], 0
mov rax, rsi
add rsp, 0x198
pop rdi
pop rsi
ret