Function at 0x18000f690
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x10], rcx
mov edx, dword [0x18002da8c]
mov r8d, dword [0x18002da90]
lea edi, [rdx - 1]
imul edi, edx
mov r9d, edi
not r9d
mov ebx, r9d
and ebx, 0xfc830ac8
mov edx, edi
and edx, 0x37cf536
or edx, ebx
mov ebx, edx
xor ebx, 0x3305100
xor edx, 0xfc830ac9
mov ebp, edi
xor ebp, 0xfffffffe
and ebp, edi
mov eax, ebp
not eax
mov esi, edx
and esi, 0x78cfacf6
and ebx, 0x87305308
or ebx, esi
or edx, eax
and eax, 0x78cfacf6
and ebp, 0x87305309
or ebp, eax
xor ebp, ebx
not edx
or edx, ebp
mov eax, edx
not eax
and eax, 0x9e8dcfd6
and edx, 0x61723029
or edx, eax
mov eax, edx
xor eax, 0x20302008
xor edx, 0x9e8dcfd6
mov ebp, edx
and ebp, 0x47ced561
and eax, 0xb8312a9e
or eax, ebp
or edx, edi
and edi, 0x47ced561
and r9d, 0xb8312a9e
or r9d, edi
xor r9d, eax
not edx
or edx, r9d
mov eax, edx
not eax
and eax, 0x4b551b8c
and edx, 0xb4aae473
or edx, eax
xor edx, 0xb4aae473
sete bl
cmp r8d, 9
setg r9b
cmp r8d, 0xa
setl r8b
mov edx, r8d
xor dl, bl
or r8b, bl
xor r8b, 1
or r8b, dl
mov eax, r8d
xor al, 1
and dl, bl
or r9b, bl
xor dl, 1
mov ebx, edx
xor bl, r9b
or dl, r9b
xor dl, 1
or dl, bl
and al, r8b
mov ebx, r8d
and bl, al
xor al, r8b
or al, bl
mov r9d, eax
and al, dl
mov ebx, edx
xor bl, 1
xor r9b, 1
and r9b, bl
or al, r9b
mov r9d, eax
and r9b, 1
mov edx, r8d
and dl, bl
xor bl, r8b
or bl, dl
mov edx, ebx
not dl
and dl, 1
cmp r9b, dl
jne 0x18000f802
xor al, 1
or al, bl
xor al, 1
test al, 1
jne 0x18000f802
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x18000f800
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov eax, dword [0x18002da74]
mov ebp, dword [0x18002da78]
lea ebx, [rax - 1]
imul ebx, eax
mov eax, ebx
mov edx, ebx
xor edx, 0x4abd5938
and edx, ebx
not ebx
and ebx, 0x394930
and eax, 0x4a841008
or eax, ebx
xor eax, 0x4a841008
mov ebx, eax
and ebx, edx
xor edx, eax
or edx, ebx
mov eax, edx
not eax
and eax, 0xb27d1fae
and edx, 0x4d82e051
or edx, eax
mov ebx, edx
xor ebx, 0x73fb969
xor edx, 0xf8c04696
mov eax, ebx
and eax, 0xfffffffe
and edx, 0xfffffffe
and ebx, 1
or ebx, edx
mov edx, eax
and edx, ebx
xor ebx, eax
or ebx, edx
mov edx, ebx
mov eax, ebx
xor eax, 0xf4902b65
and eax, ebx
not ebx
and ebx, 0x10802244
and edx, 0xe4100921
or edx, ebx
xor edx, 0xe4100921
mov ebx, edx
and ebx, eax
xor eax, edx
or eax, ebx
mov edx, eax
not edx
and edx, 0xf346526e
and eax, 0xcb9ad91
or eax, edx
mov edx, eax
xor edx, 0x180886c0
xor eax, 0x6c04002
and eax, 0xe6e14036
and edx, 0x191ebfc9
or edx, eax
mov eax, edx
xor eax, 0x19188a00
xor edx, 0xc0e04000
and edx, 0xc0e675c9
and eax, 0x3f198a36
or eax, edx
xor eax, 0xc0e675c9
cmp eax, 0xffffffff
sete r8b
setne r10b
cmp ebp, 0xa
setl dil
cmp ebp, 9
setg r11b
mov eax, dword [0x18002da94]
lea edx, [rax - 1]
imul edx, eax
mov ebp, edx
mov eax, edx
xor eax, 0xbd1090ef
and eax, edx
not edx
and edx, 0xd2892ae
and ebp, 0xf2d76d51
or ebp, edx
mov edx, ebp
xor edx, 0xa0000041
xor ebp, 0xd0090ae
or ebp, 0x42ef6f10
mov ebx, eax
not ebx
mov esi, ebp
and esi, 0x1870c698
and edx, 0xa5001067
or edx, esi
or ebp, ebx
and ebx, 0x1870c698
and eax, 0xe78f3967
or eax, ebx
xor eax, edx
not ebp
or ebp, eax
mov eax, ebp
not eax
and eax, 0xaee98cb0
and ebp, 0x5116734f
or ebp, eax
mov eax, ebp
xor eax, 0xec06e3a0
mov edx, ebp
xor edx, 0x11054
and edx, 0x4405d074
xor ebp, 0xafd1624b
and ebp, eax
and eax, 0xbbfa2f8b
or eax, edx
mov edx, eax
xor edx, 0xbbfa2f8b
mov esi, eax
xor esi, 0x7d2519f
and esi, edx
mov ebx, esi
and ebx, ebp
xor ebp, esi
or ebp, ebx
mov esi, ebp
not esi
and esi, 0xba5ca20c
and ebp, 0x45a35df3
or ebp, esi
mov esi, ebp
xor esi, 0x614d410
and edx, 1
xor eax, 0xbbfa2f8a
or eax, edx
mov edx, eax
not edx
xor ebp, 0xf98b23e6
mov ebx, ebp
and ebx, 0x29692b8d
and esi, 0xd696d472
or esi, ebx
or ebp, eax
and eax, 0x29692b8d
and edx, 0xd696d472
or edx, eax
xor edx, esi
not ebp
or ebp, edx
mov eax, ebp
not eax
and eax, 0xc19e7806
and ebp, 0x3e6187f9
or ebp, eax
mov eax, ebp
xor eax, 0x34400451
xor ebp, 0x1040800
and ebp, 0xb258ba8
and eax, 0xf4da7457
or eax, ebp
xor eax, 0xb258ba8
sete r14b
setne bpl
cmp dword [0x18002da98], 0xa
lea r9, [rcx + 0x10]
setl sil
mov rax, qword [rcx + 0x10]
mov qword [rsp + 8], rax
cmp rax, r9
je 0x18000fd2d
mov edx, r10d
and dl, r11b
mov eax, edi
and al, r8b
or al, dl
mov edx, eax
xor dl, r11b
and dl, al
and r8b, r11b
and dil, r10b
or dil, r8b
mov r8d, edx
xor r8b, 1
mov ecx, edi
xor cl, 1
mov ebx, edx
and bl, r8b
mov eax, edi
and al, cl
mov r11d, ebx
and r11b, dl
xor bl, dl
or bl, r11b
mov edx, eax
xor dl, 1
xor al, dil
or dl, cl
xor dl, 1
or dl, al
mov eax, ebx
xor al, 1
and al, dl
xor dl, 1
and dl, bl
or dl, al
mov eax, r8d
and al, cl
xor cl, r8b
or cl, al
xor cl, 1
mov eax, edx
and al, cl
xor cl, dl
or cl, al
xor bpl, sil
xor bpl, 1
mov eax, esi
or al, r14b
xor al, 1
or al, bpl
mov r8d, eax
not r8b
mov edx, r14d
xor dl, sil
and r14b, dl
and dl, sil
mov ebx, r14d
and bl, dl
xor dl, r14b
or dl, bl
mov ebx, edx
xor bl, 1
and dl, al
or al, bl
xor al, 1
and bl, r8b
or bl, dl
mov edx, eax
and dl, bl
xor bl, al
or bl, dl
movabs r8, 0xe6da0925032748a9
movabs rdx, 0xe6b6c75a85eb6998
movabs rsi, 0xe602468fdeee84d9
movabs r10, 0xccd3f4b1866e58b7
movabs r11, 0xbc349848078c8314
movabs rdi, 0xb1a3fd98e99279b1
movabs r14, 0x4fd9580867e1cc8a
movabs r13, 0x338644034c2df68c
movabs r12, 0x2a1c4f14f390dd8e
movabs r15, 0x1c210ef333024ad0
mov rax, qword [rsp + 0x10]
lea rbp, [rax - 1]
mov byte [rsp + 7], cl
mov byte [rsp + 6], bl
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], rbp
test cl, 1
je 0x18000fd10
nop word cs:[rax + rax]
nop dword [rax]
cmp byte [rbp + 1], 0
lea rbp, [rbp + 1]
jne 0x18000fbb0
test bl, 1
je 0x18000fd20
movabs rax, 0xee9ef52c5a799cc
sub rbp, rax
sub rbp, r14
sub rbp, rdi
add rbp, rax
add rbp, rdi
sub rbp, rdx
movabs rax, 0x289bb8e7192b9546
sub rbp, rax
add rbp, rdx
sub rbp, qword [rsp + 0x10]
add rbp, rax
mov rdx, rsi
sub rdx, rbp
add rdx, r11
sub rsi, rdx
add rsi, r8
add rsi, r14
sub rsi, r8
movabs rax, 0x1f622914b5f83f4e
mov rcx, rax
sub rsi, rax
add rsi, r11
add rsi, rax
je 0x18000fd22
mov rax, r11
mov rcx, qword [rsp + 8]
mov r11, qword [rcx + 0x60]
xor r14d, r14d
mov rbp, rsi
nop word [rax + rax]
movzx r8d, word [r11 + r14*2]
mov rcx, qword [rsp + 0x10]
movsx edx, byte [rcx + r14]
lea r9d, [r8 - 0x41]
lea ecx, [r8 + 0x20]
cmp r9w, 0x1a
cmovae ecx, r8d
lea ebx, [rdx - 0x41]
lea edi, [rdx + 0x20]
cmp bl, 0x1a
cmovae edi, edx
cmp ecx, edi
jne 0x18000fca9
test r8w, r8w
je 0x18000fd22
mov rcx, r15
sub rcx, r13
add rcx, rbp
mov rdx, r15
sub rdx, rcx
mov rbp, r12
sub rbp, r10
sub rbp, r12
add rbp, r10
add rbp, rdx
not rbp
add rbp, r13
add r14, 1
cmp rsi, r14
jne 0x18000fc40
jmp 0x18000fd22
mov rdx, qword [rsp + 8]
mov rdx, qword [rdx]
mov r9, qword [rsp + 0x20]
mov qword [rsp + 8], rdx
cmp rdx, r9
mov cl, byte [rsp + 7]
mov bl, byte [rsp + 6]
movabs r8, 0xe6da0925032748a9
movabs rdx, 0xe6b6c75a85eb6998
movabs rsi, 0xe602468fdeee84d9
mov r11, rax
movabs rdi, 0xb1a3fd98e99279b1
movabs r14, 0x4fd9580867e1cc8a
mov eax, 0
mov rbp, qword [rsp + 0x18]
jne 0x18000fb9a
jmp 0x18000fd2f
jmp 0x18000fd10
jmp 0x18000fd20
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
jmp 0x18000fd2f
xor eax, eax
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret