Function at 0x18000f110
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r9, rcx
mov rax, qword gs:[0x60]
mov r11, qword [rax + 0x18]
add r11, 0x10
mov eax, dword [0x18002da8c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf1b78c4f
and eax, 0xe4873b0
or eax, ecx
mov ecx, eax
xor ecx, 0xf1b78c4f
mov edx, eax
xor edx, 0x4001030
and edx, 0xd4161870
xor eax, 0x807e2cc4
and eax, ecx
and ecx, 0x2be9e78f
or ecx, edx
mov edx, ecx
xor edx, 0x2be9e78f
mov ebp, ecx
xor ebp, 0xa5dfb8fb
and ebp, edx
mov ebx, ebp
and ebx, eax
xor eax, ebp
or eax, ebx
mov ebp, eax
not ebp
and ebp, 0x26e7a8bf
and eax, 0xd9185740
or eax, ebp
xor eax, 0xa8d1f7ca
and edx, 1
xor ecx, 0x2be9e78e
or ecx, edx
not ecx
mov edx, eax
and edx, ecx
xor ecx, eax
or ecx, edx
mov edx, ecx
not edx
mov ebp, edx
or ebp, 0x4a6f7640
mov eax, ebp
not eax
or ecx, 0x5900130
and ecx, 0xfbb4730
and edx, 0x40443040
or edx, ecx
and ebp, 0xfbb4730
and eax, 0xb000888f
or eax, ebp
xor eax, edx
mov ecx, eax
not ecx
and ecx, 0xb59089bf
and eax, 0x4a6f7640
or eax, ecx
mov ecx, eax
not ecx
and eax, 0xd16babcc
and ecx, 0x2e945433
or ecx, eax
xor ecx, 0xd16babcc
cmp ecx, 0xffffffff
sete al
cmp dword [0x18002da90], 0xa
setl bl
mov ecx, ebx
or cl, al
xor cl, 1
xor bl, al
or cl, bl
xor bl, 1
mov eax, ecx
or al, bl
xor bl, cl
mov r8d, eax
xor r8b, bl
xor bl, 1
or bl, al
mov ecx, dword [0x18002da74]
lea esi, [rcx - 1]
imul esi, ecx
mov eax, esi
not eax
mov ecx, esi
xor ecx, 0xaaaaecf8
and ecx, esi
mov edx, esi
or edx, 0x55551307
mov edi, edx
and edi, 0xb9e2ae67
mov ebp, eax
and ebp, 0x2084098
or ebp, edi
mov edi, ecx
not edi
or edx, edi
and edi, 0xb9e2ae67
and ecx, 0x461d5198
or ecx, edi
xor r8b, 1
xor bl, 1
or bl, r8b
mov byte [rsp + 5], bl
xor ecx, ebp
not edx
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0x3e0651e9
and edx, 0xc1f9ae16
or edx, ecx
mov ecx, edx
xor ecx, 0x2812426e
and eax, 0xb231905a
and esi, 0x4dce6fa5
or esi, eax
mov eax, esi
xor eax, 0xc824224
xor edx, 0x94acbd10
mov ebp, edx
and ebp, 0x536dbd91
and ecx, 0xac92426e
or ecx, ebp
xor esi, 0x12219010
and esi, 0x536dbd91
and eax, 0xac92426e
or eax, esi
xor eax, ecx
xor edx, eax
test edx, eax
setne al
cmp dword [0x18002da78], 0xa
setl bl
mov ecx, ebx
xor cl, al
mov edx, ecx
not dl
and cl, bl
or al, bl
and dl, bl
xor dl, 1
mov ebx, eax
xor bl, dl
or dl, al
xor dl, 1
or dl, bl
mov eax, ecx
xor al, dl
or dl, cl
xor dl, 1
or dl, al
xor al, 1
mov ecx, eax
xor cl, dl
or dl, al
xor dl, 1
or dl, cl
mov byte [rsp + 7], dl
mov ecx, dword [0x18002da94]
lea eax, [rcx - 1]
imul eax, ecx
mov ecx, eax
not ecx
and ecx, 0x81201180
mov ebp, eax
and ebp, 0xc00209
or ebp, ecx
xor ebp, 0xc00209
and eax, 0x7e1fec76
or eax, ebp
mov ecx, eax
not ecx
and ecx, 0xaa29ddcb
and eax, 0x55d62234
or eax, ecx
mov ecx, eax
xor ecx, 0xd43631bd
mov ebp, eax
xor ebp, 0x2940cc42
and ebp, 0x6d54dd53
xor eax, 0xeb64e990
and eax, ecx
and ecx, 0x92ab22ac
or ecx, ebp
mov esi, ecx
xor esi, 0x92ab22ac
mov ebp, ecx
xor ebp, 0x5206057e
and ebp, esi
mov ebx, ebp
and ebx, eax
xor eax, ebp
or eax, ebx
mov ebp, eax
not ebp
and ebp, 0xca732fff
and eax, 0x358cd000
or eax, ebp
xor ecx, 0xd000551
and ecx, 0x1d010751
mov ebp, esi
and ebp, 0xe2fef8ae
or ebp, ecx
xor eax, 0xade082c
xor ebp, 0x1d010750
and esi, 1
or esi, ebp
not esi
mov ecx, eax
and ecx, esi
xor esi, eax
or esi, ecx
mov eax, esi
not eax
and eax, 0x46011680
mov ecx, esi
and ecx, 0x10880141
or ecx, eax
mov edi, dword [0x18002da98]
xor ecx, 0x10880141
and esi, 0xa976e83e
or esi, ecx
mov ecx, esi
not ecx
and ecx, 0xd1b8f6a9
and esi, 0x2e470956
or esi, ecx
mov ecx, esi
xor ecx, 0x208e0811
xor esi, 0x86014100
and esi, 0xde415786
and ecx, 0x21bea879
or ecx, esi
mov ebp, ecx
xor ebp, 0x16a830
xor ecx, 0xc414084
and ecx, 0x2de940cd
and ebp, 0xd216bf32
or ebp, ecx
mov ecx, ebp
xor ecx, 0x1690040
xor ebp, 0xd0163402
and ebp, 0xfc96748f
and ecx, 0x3698b70
or ecx, ebp
xor ecx, 0x3698b70
setne cl
sete bl
cmp edi, 9
setg r8b
cmp edi, 0xa
setl al
mov edx, eax
and cl, al
xor al, bl
or dl, bl
xor dl, 1
or dl, al
and r8b, bl
mov ebx, edx
not bl
or cl, r8b
mov eax, ecx
xor al, 1
and cl, dl
or dl, al
and al, bl
or al, cl
mov ecx, edx
xor cl, al
xor al, 1
or al, dl
xor cl, 1
xor al, 1
or al, cl
mov byte [rsp + 6], al
movabs r10, 0x500f0664647f9cb
mov rsi, r9
lea rax, [r9 - 1]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r11
mov qword [rsp + 8], r11
mov rbx, qword [rsp + 8]
mov rbx, qword [rbx]
cmp rbx, qword [rsp + 0x18]
je 0x18000f722
test byte [rsp + 5], 1
je 0x18000f700
mov rbp, qword [rsp + 0x10]
test byte [rsp + 7], 1
je 0x18000f710
nop dword [rax + rax]
cmp byte [rbp + 1], 0
lea rbp, [rbp + 1]
jne 0x18000f530
movabs rax, 0x2f38669a7b16f446
mov rdx, rax
sub rbp, rax
movabs rax, 0xc51c25e1871b8816
sub rbp, rax
movabs rcx, 0xafd799462ab24da7
add rbp, rcx
add rbp, rax
movabs rax, 0x9d34aedc107ff4fb
sub rbp, rax
add rbp, rdx
add rbp, rax
movabs rax, 0x95a649a3c9e11c65
add rbp, rax
movabs rdx, 0x58e2ac7f8d3ec014
add rbp, rdx
sub rbp, rax
sub rbp, rsi
sub rbp, rdx
movabs rax, 0x5c3d928c957e8ec2
mov r9, rax
sub r9, rcx
sub r9, rax
add r9, rbp
mov qword [rsp + 8], rbx
je 0x18000f732
test byte [rsp + 6], 1
je 0x18000f720
mov r12, qword [rbx + 0x60]
xor r8d, r8d
mov r15, r9
nop word cs:[rax + rax]
nop dword [rax]
movzx edi, word [r12 + r8*2]
test edi, edi
sete r13b
setne bpl
movsx ecx, byte [rsi + r8]
lea ebx, [rdi - 0x41]
lea r11d, [rdi + 0x20]
cmp bx, 0x1a
cmovae r11d, edi
lea ebx, [rcx - 0x41]
lea edx, [rcx + 0x20]
cmp bl, 0x1a
cmovae edx, ecx
sub r11d, edx
sete bl
setne cl
mov edx, ebp
xor dl, cl
not dl
and dl, cl
mov r14d, edx
xor r14b, 1
or edi, r11d
setne dil
sete al
xor dl, al
or dil, r14b
xor dil, 1
or dil, dl
or bl, bpl
and bpl, cl
or bpl, al
xor r13b, cl
xor bl, 1
or bl, r13b
xor bl, 1
mov eax, ebp
and al, bl
xor bl, bpl
or bl, al
xor dil, 1
mov ecx, edi
or cl, bl
mov eax, ecx
not al
and al, 1
xor dil, bl
mov edx, edi
and dl, 1
cmp al, dl
jne 0x18000f6f0
xor dil, 1
or cl, dil
xor cl, 1
test cl, 1
jne 0x18000f6f0
movabs rcx, 0x7923a1f996141525
mov rax, rcx
sub rax, r15
sub rax, rcx
movabs rdx, 0xe1ec187f77728221
movabs rcx, 0x9ba921ffe17a06de
mov rbp, rcx
add rcx, rdx
sub rdx, rcx
add rdx, rax
add rdx, r10
movabs rcx, 0x3b0301f68de10026
mov rax, rcx
sub rax, rdx
sub rax, rbp
sub rax, rcx
lea r15, [rax + r10]
add r15, 0xffffffffffffffff
add r8, 1
cmp r9, r8
jne 0x18000f5e0
jmp 0x18000f739
test r11d, r11d
jne 0x18000f4fd
jmp 0x18000f739
jmp 0x18000f700
jmp 0x18000f710
jmp 0x18000f720
test byte [rsp + 5], 1
je 0x18000f730
xor eax, eax
jmp 0x18000f749
jmp 0x18000f730
test byte [rsp + 6], 1
je 0x18000f770
test byte [rsp + 5], 1
je 0x18000f760
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000f760
jmp 0x18000f770