Function at 0x180009350
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r10, rcx
mov rax, qword gs:[0x60]
mov r11, qword [rax + 0x18]
add r11, 0x10
mov edx, dword [0x180027a94]
mov esi, dword [0x180027a98]
lea ebp, [rdx - 1]
imul ebp, edx
mov edx, ebp
not edx
mov ebx, edx
and ebx, 0x89055668
and edx, ebp
and ebp, 0x76faa997
or ebp, ebx
xor ebp, 0x76faa997
mov ebx, ebp
and ebx, edx
xor ebp, edx
or ebp, ebx
mov edx, ebp
not edx
and edx, 0x9404d490
mov ebx, ebp
and ebx, 0x6bfb2b6f
or ebx, edx
mov edx, ebx
xor edx, 0x6bfb2b6f
xor ebx, 0x90000490
mov edi, edx
and edi, 0xb41228a6
and ebp, 0x4bedd759
or ebp, edi
mov edi, ebp
not edi
and edi, 0x4bedd758
and ebp, 0xb41228a7
or ebp, edi
and ebx, 0x91620ef2
mov edi, edx
and edi, 0x6e9df10d
or edi, ebx
xor edi, 0x91620ef3
and edx, 1
or edx, edi
not edx
mov ebx, ebp
and ebx, edx
xor edx, ebp
or edx, ebx
mov ebp, edx
not ebp
and ebp, 0x8692cf33
and edx, 0x796d30cc
or edx, ebp
mov ebp, edx
xor ebp, 0x116000cc
xor edx, 0x86100f33
and ebp, 0x11e2c0cc
and edx, 0xee1d3f33
or edx, ebp
mov ebp, edx
xor ebp, 0x114200c8
xor edx, 0xa001911
and edx, 0xaa0d915
and ebp, 0xf55f26ea
or ebp, edx
xor ebp, 0xf55f26ea
setne dl
sete r9b
cmp esi, 9
setg al
cmp esi, 0xa
setl bl
mov ecx, ebx
xor cl, r9b
or dl, bl
or bl, r9b
xor bl, 1
or bl, cl
mov r8d, ebx
xor r8b, 1
or al, r9b
mov ecx, edx
xor cl, al
or al, dl
xor al, 1
or al, cl
mov r9d, eax
xor r9b, 1
mov edx, ebx
and dl, r8b
mov ecx, ebx
and cl, dl
xor dl, bl
or dl, cl
mov ecx, edx
xor cl, 1
and cl, r9b
and dl, al
or dl, cl
mov ecx, r8d
xor cl, al
or al, r8b
xor al, 1
or al, cl
xor al, 1
mov ecx, edx
and cl, al
xor al, dl
or al, cl
mov byte [rsp + 7], al
mov ecx, dword [0x180027a7c]
mov eax, dword [0x180027a80]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ebp, ebx
not ebp
mov edx, ebx
and edx, 0x2f44be0c
mov ecx, ebp
and ecx, 0xd0bb41f2
or ecx, edx
mov edx, ebx
or edx, 0x2f44be0c
and edx, 0x2f44be0d
xor edx, ecx
mov ecx, edx
not ecx
and ebp, 0x2fad88d0
and ebx, 0xd052772f
or ebx, ebp
mov ebp, edx
and ebp, 0x712e7120
and ecx, 0x8ed18edf
or ecx, ebp
mov ebp, ebx
xor ebp, 0x8050060f
xor ebx, 0x2fad88d0
or edx, ebx
and ebx, 0x712e7120
and ebp, 0x8ed18edf
or ebp, ebx
xor ebp, ecx
not edx
or edx, ebp
mov ecx, edx
not ecx
and ecx, 0xca41f6cd
and edx, 0x35be0932
or edx, ecx
xor edx, 0x35be0932
setne r8b
sete r9b
cmp eax, 0xa
setl bl
cmp eax, 9
setg cl
mov eax, ecx
xor al, r9b
mov edx, eax
xor dl, cl
and dl, al
and r9b, cl
and bl, r8b
or bl, r9b
mov eax, edx
xor al, 1
mov ecx, ebx
xor cl, 1
and bl, al
or al, cl
xor al, 1
and cl, dl
or cl, bl
mov edx, eax
and dl, cl
xor cl, al
or cl, dl
mov byte [rsp + 6], cl
mov eax, dword [0x180027a9c]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
mov ecx, edx
xor ecx, 0xfab54ccd
and ecx, edx
not edx
mov ebp, edx
and ebp, 0xfa354c84
and eax, 0x800049
or eax, ebp
mov ebp, eax
xor ebp, 0x41
xor eax, 0xff7fffb6
mov ebx, eax
and ebx, 0x47b7b40e
and ebp, 0xb80048c1
or ebp, ebx
mov ebx, ecx
not ebx
or eax, ebx
and ebx, 0x47b7b40e
and ecx, 0xb8484bf1
or ecx, ebx
xor ecx, ebp
not eax
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x54ab333
and eax, 0xfab54ccc
or eax, ecx
not eax
mov ecx, eax
and ecx, edx
xor eax, edx
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x85a08770
and eax, 0x7a5f788f
or eax, ecx
mov ecx, dword [0x180027aa0]
xor eax, 0x7a5f788f
setne al
cmp ecx, 9
setg dl
cmp ecx, 0xa
setl bl
xor bl, al
xor bl, 1
or bl, dl
xor dl, al
mov eax, edx
xor al, bl
xor bl, 1
mov ecx, edx
xor cl, bl
xor al, 1
or bl, dl
xor bl, 1
or bl, al
xor bl, 1
mov eax, ecx
and al, bl
xor bl, cl
or bl, al
mov byte [rsp + 5], bl
mov r8, r10
lea rax, [r10 - 1]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r11
mov qword [rsp + 8], r11
test byte [rsp + 7], 1
je 0x180009910
mov rax, qword [rsp + 8]
mov rax, qword [rax]
mov qword [rsp + 8], rax
cmp rax, qword [rsp + 0x18]
je 0x180009932
mov rax, qword [rsp + 0x10]
test byte [rsp + 6], 1
je 0x180009920
nop dword [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x1800096d0
test byte [rsp + 5], 1
je 0x180009930
movabs rcx, 0xcaef70c2c8ca86cc
mov rdx, rcx
add rax, rcx
movabs rcx, 0x7bfb4c8ce99cd79a
sub rax, rcx
movabs rbp, 0x45c557c45f122b6
add rax, rbp
add rax, rcx
movabs rcx, 0xfdc1a93bae8530ac
add rax, rcx
sub rax, r8
sub rax, rcx
sub rax, rbp
movabs rcx, 0xb80d43e87d98a27
mov r10, rcx
sub r10, rdx
sub r10, rcx
add r10, rax
je 0x1800098e9
mov rax, qword [rsp + 8]
mov r13, qword [rax + 0x60]
xor r14d, r14d
mov rdi, r10
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, word [r13 + r14*2]
test ecx, ecx
setne r9b
sete r15b
lea edx, [rcx - 0x41]
lea r11d, [rcx + 0x20]
cmp dx, 0x1a
cmovae r11d, ecx
movsx edx, byte [r8 + r14]
lea esi, [rdx - 0x41]
lea ebp, [rdx + 0x20]
cmp sil, 0x1a
cmovae ebp, edx
sub r11d, ebp
setne bl
sete dl
or dl, r15b
xor dl, 1
or ecx, r11d
sete cl
mov eax, edx
and al, cl
xor dl, cl
or dl, al
mov eax, r9d
xor al, bl
and al, r9b
and r9b, bl
or r9b, cl
xor al, 1
xor r9b, 1
mov ecx, eax
xor cl, r9b
or r9b, al
xor r9b, 1
or r9b, cl
mov r15d, r9d
xor r15b, 1
mov r12d, edx
xor r12b, 1
and dl, r12b
and r15b, r9b
xor dl, 1
mov eax, edx
xor al, r12b
or dl, r12b
xor dl, 1
or dl, al
xor r15b, 1
mov eax, r15d
xor al, r9b
or r15b, r9b
xor r15b, 1
or r15b, al
mov eax, edx
xor al, 1
and al, r15b
xor r15b, 1
and r15b, dl
or r15b, al
mov eax, r15d
and al, 1
mov ecx, r12d
and cl, r9b
xor r12b, r9b
or r12b, cl
mov ecx, r12d
not cl
and cl, 1
cmp al, cl
jne 0x1800098e0
xor r15b, 1
or r15b, r12b
xor r15b, 1
test r15b, 1
jne 0x1800098e0
movabs rax, 0xcabc093dfc19d601
mov rdx, rax
add rdi, rax
movabs rax, 0xd8da34f52778d826
sub rdi, rax
movabs rcx, 0xb4125ba22f57f298
mov rbp, rcx
add rdi, rcx
add rdi, rax
movabs rcx, 0xc53233fe284ad9f
mov rax, rcx
sub rax, rdi
add rax, rbp
sub rcx, rax
movabs rax, 0xca7e51fe5542a619
mov rbp, rax
add rcx, rax
movabs rax, 0xe51d7080933a0b18
add rcx, rax
sub rcx, rdx
sub rcx, rax
movabs rdi, 0xc4d275a94b7d8a45
add rcx, rdi
sub rcx, rbp
not rdi
add rdi, rcx
add r14, 1
cmp r10, r14
jne 0x180009760
jmp 0x1800098e9
test r11d, r11d
jne 0x180009695
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x180009910
jmp 0x180009920
jmp 0x180009930
xor eax, eax
jmp 0x1800098f2