Function at 0x18000ebd0
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov eax, dword [0x18002da8c]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
and eax, 0x5ba3beae
and edx, 0xa45c4151
or edx, eax
mov eax, edx
xor eax, 0x84544141
xor edx, 0x13222226
and edx, 0x332a2236
and eax, 0xccd5ddc9
or eax, edx
mov edx, eax
xor edx, 0x332a2236
mov ebp, eax
xor ebp, 0xcc18d49
and ebp, 0xcc18d7b
xor eax, 0x1833a933
and eax, edx
and edx, 0xf33e7284
or edx, ebp
mov ebx, edx
xor ebx, 0xf33e7284
mov ebp, ebx
and ebp, 0x2b198b05
mov edi, ebp
and edi, eax
xor eax, ebp
or eax, edi
mov ebp, eax
not ebp
and ebp, 0xd4e674fb
and eax, 0x2b198b04
or eax, ebp
and ebx, 1
xor edx, 0xf33e7285
or edx, ebx
mov ebx, edx
not ebx
mov ebp, eax
not ebp
mov edi, ebp
and edi, 0xe0cd117e
and eax, 0x1f32ee81
or eax, edi
or ebp, edx
and edx, 0xe0cd117e
and ebx, 0x1f32ee81
or ebx, edx
xor ebx, eax
not ebp
or ebp, ebx
mov edx, ebp
not edx
mov ebx, edx
or ebx, 0xc1b1fa34
mov eax, ebx
not eax
or ebp, 0x3008040b
and ebp, 0x31987e1f
and edx, 0xc0218020
or edx, ebp
and ebx, 0x31987e1f
and eax, 0xe4601c0
or eax, ebx
xor eax, edx
mov edx, eax
not edx
and edx, 0xb878ee3d
and eax, 0x478711c2
or eax, edx
mov edx, eax
xor edx, 0x8014cb02
xor eax, 0x31c90401
and edx, 0xc814db0a
and eax, 0x37eb24f5
or eax, edx
mov edx, eax
xor edx, 0x10d808
xor eax, 0x24832400
and eax, 0xec872702
and edx, 0x1378d8fd
or edx, eax
xor edx, 0x1378d8fd
sete bl
cmp dword [0x18002da90], 0xa
mov qword [rsp + 0x10], rcx
setl dl
mov eax, edx
xor al, bl
or dl, bl
xor dl, 1
or dl, al
mov r8d, edx
xor r8b, 1
and dl, al
xor al, 1
mov ebx, r8d
xor bl, al
and bl, r8b
and al, r8b
or al, dl
mov edx, ebx
xor dl, 1
xor bl, al
xor al, 1
or al, dl
xor al, 1
or al, bl
test al, 1
jne 0x18000ed6e
mov rcx, qword gs:[0x60]
jmp 0x18000ed83
mov rdx, qword gs:[0x60]
mov rdx, qword [rdx + 0x18]
add rdx, 0x10
test al, 1
jne 0x18000ed8e
mov rcx, qword gs:[0x60]
jmp 0x18000ed6e
mov ebp, dword [0x18002da74]
lea eax, [rbp - 1]
imul eax, ebp
mov r8d, eax
not r8d
mov ebx, r8d
and ebx, 0x6e4d5c60
mov ebp, eax
and ebp, 0x91b2a39f
or ebp, ebx
mov ebx, ebp
xor ebx, 0x1000030a
xor ebp, 0x6e4d5c60
mov esi, eax
xor esi, 0xfffffffe
and esi, eax
or ebp, 1
mov edi, esi
not edi
mov r9d, ebp
and r9d, 0xcdfea0b4
and ebx, 0x32015f4a
or ebx, r9d
or ebp, edi
and edi, 0xcdfea0b4
and esi, 0x32015f4b
or esi, edi
xor esi, ebx
not ebp
or ebp, esi
and r8d, 0x201bf899
and eax, 0xdfe40766
or eax, r8d
mov ebx, eax
xor ebx, 0xdfe40766
xor eax, 0x201bf899
and eax, ebp
not ebp
and ebx, ebp
or eax, ebx
not eax
or eax, ebp
cmp eax, 0xffffffff
setne r10b
cmp dword [0x18002da78], 9
setg r8b
mov eax, dword [0x18002da94]
lea ebp, [rax - 1]
imul ebp, eax
mov eax, ebp
not eax
mov ebx, eax
and ebx, 0x1b2a2397
and eax, ebp
and ebp, 0xe4d5dc68
or ebp, ebx
xor ebp, 0xe4d5dc68
mov ebx, ebp
and ebx, eax
xor ebp, eax
or ebp, ebx
mov eax, ebp
xor eax, 1
and eax, ebp
mov ebx, ebp
not ebx
and ebx, 0x15803b35
and ebp, 0xea7fc4ca
or ebp, ebx
xor ebp, 0xea7fc4cb
mov ebx, eax
and ebx, ebp
xor ebp, eax
or ebp, ebx
mov eax, ebp
mov ebx, ebp
xor ebx, 0xe421df3
and ebx, ebp
not ebp
and ebp, 0xa4219e1
and eax, 0x4000412
or eax, ebp
xor eax, 0x4000412
mov ebp, eax
and ebp, ebx
xor ebx, eax
or ebx, ebp
mov eax, ebx
not eax
and eax, 0xf47bf6ec
and ebx, 0xb840913
or ebx, eax
xor ebx, 0x5c614e0
sete r11b
setne dil
cmp dword [0x18002da98], 9
setg sil
mov rax, qword [rdx]
mov qword [rsp + 8], rax
cmp rax, rdx
je 0x18000f12d
mov ebx, r8d
and bl, r10b
xor r8b, r10b
or bl, r8b
xor r8b, 1
mov eax, ebx
xor al, r8b
mov r10d, eax
xor r10b, 1
and r8b, bl
or r8b, al
xor al, r8b
xor al, 1
or r8b, r10b
xor r8b, 1
or r8b, al
mov eax, esi
and al, dil
xor dil, sil
or dil, al
xor dil, 1
mov r10d, esi
xor r10b, r11b
not r10b
and r10b, r11b
or sil, r11b
xor r10b, 1
mov eax, r10d
xor al, sil
or r10b, sil
xor r10b, 1
or r10b, al
mov eax, edi
xor al, r10b
or r10b, dil
xor r10b, 1
or r10b, al
xor al, 1
mov ebx, eax
xor bl, r10b
or r10b, al
xor r10b, 1
or r10b, bl
movabs r12, 0xf6828ebca3a32637
movabs rsi, 0xb7b512d00ebfb342
movabs r11, 0xa2d16be619d160ab
movabs r9, 0x971dab56dfada0e3
movabs r14, 0x95d492cfa1e4827b
movabs rbx, 0x6b3116575fbd369a
movabs rdi, 0x3924ad00186fadb2
movabs r13, 0x255d93b0dc94d924
mov rcx, qword [rsp + 0x10]
add rcx, 0xffffffffffffffff
mov byte [rsp + 7], r8b
mov qword [rsp + 0x18], rcx
mov r15, rcx
test r8b, 1
je 0x18000f110
nop
cmp byte [r15 + 1], 0
lea r15, [r15 + 1]
jne 0x18000efe0
test r10b, 1
je 0x18000f120
mov rbp, rsi
sub rbp, r9
sub rbp, rsi
add r15, rbp
add r15, rbx
sub r15, r12
sub r15, qword [rsp + 0x10]
add r15, r12
add r15, r13
sub r15, rbx
sub r15, r13
sub r15, r14
add r15, r9
add r15, r14
movabs rax, 0xfe2ac82d74708ea6
je 0x18000f122
mov rcx, qword [rsp + 8]
mov r12, qword [rcx + 0x60]
xor r13d, r13d
mov r14, r15
movzx ebp, word [r12 + r13*2]
mov rcx, qword [rsp + 0x10]
movsx esi, byte [rcx + r13]
lea r9d, [rbp - 0x41]
lea r8d, [rbp + 0x20]
cmp r9w, 0x1a
cmovae r8d, ebp
lea ecx, [rsi - 0x41]
lea ebx, [rsi + 0x20]
cmp cl, 0x1a
cmovae ebx, esi
cmp r8d, ebx
jne 0x18000f0a0
test bp, bp
je 0x18000f122
add r14, rdi
sub r14, rax
sub r14, rdi
sub r14, r11
add r14, rax
add r14, r11
add r14, 0xffffffffffffffff
add r13, 1
cmp r15, r13
jne 0x18000f040
jmp 0x18000f122
mov rcx, qword [rsp + 8]
mov rcx, qword [rcx]
mov qword [rsp + 8], rcx
cmp rcx, rdx
mov r8b, byte [rsp + 7]
movabs rbx, 0xf6828ebca3a32637
mov r12, rbx
movabs rsi, 0xb7b512d00ebfb342
mov eax, 0
movabs r9, 0x971dab56dfada0e3
movabs r14, 0x95d492cfa1e4827b
movabs rbx, 0x6b3116575fbd369a
movabs r13, 0x255d93b0dc94d924
mov rcx, qword [rsp + 0x18]
jne 0x18000efd2
jmp 0x18000f12f
jmp 0x18000f110
jmp 0x18000f120
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
jmp 0x18000f12f
xor eax, eax
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret