Function at 0x18000fa90
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov qword [rsp], rcx
mov ecx, dword [0x18002da84]
mov eax, dword [0x18002da88]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, edx
not ecx
and ecx, 0xe872a941
and edx, 0x178d56be
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0x44119315
and edx, 0xbbee6cea
or edx, ecx
mov ebp, edx
xor ebp, 0x539cc5ab
mov ecx, edx
xor ecx, 0x539cc5aa
and ecx, ebp
xor edx, 0xa8001010
and edx, 0xea1cd5b3
and ebp, 0x15e32a4c
or ebp, edx
mov edx, ebp
xor edx, 0x15832800
mov ebx, ecx
not ebx
xor ebp, 0xea1cd5b2
mov edi, ebx
and edi, 0xe078024d
and ecx, 0x1f87fdb2
or ecx, edi
or ebx, ebp
and ebp, 0xe078024d
and edx, 0x1f87fdb2
or edx, ebp
xor edx, ecx
not ebx
or ebx, edx
mov edx, ebx
mov ecx, ebx
xor ecx, 0xcada7181
and ecx, ebx
not ebx
and ebx, 0x943eae56
and edx, 0x6bc151a9
or edx, ebx
mov ebp, edx
xor ebp, 0x42805081
xor edx, 0x801a2000
or edx, 0x35258e7e
mov ebx, ecx
not ebx
mov edi, edx
and edi, 0x297d0d64
and ebp, 0xc2827081
or ebp, edi
or edx, ebx
and ebx, 0x297d0d64
and ecx, 0xd682f29b
or ecx, ebx
xor ecx, ebp
not edx
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0x709c2100
and edx, 0x8f63deff
or edx, ecx
mov ecx, edx
xor ecx, 0x40a8a556
xor edx, 0xba465081
mov ebp, edx
and ebp, 0xbd530aa8
and ecx, 0x42acf557
or ecx, ebp
xor ecx, 0x42acf557
or ecx, edx
cmp ecx, 0xffffffff
sete dl
setne cl
cmp eax, 0xa
setl r8b
cmp eax, 9
setg bl
and cl, bl
mov eax, r8d
and al, dl
or al, cl
mov r9d, eax
xor r9b, bl
and r9b, al
xor bl, dl
not bl
and bl, dl
xor dl, r8b
and dl, r8b
mov eax, ebx
and al, dl
xor dl, bl
or dl, al
mov r8d, r9d
xor r8b, 1
mov ebx, edx
xor bl, 1
mov eax, r8d
and al, r9b
mov ecx, ebx
and cl, dl
xor al, 1
mov r10d, r9d
xor r10b, al
or al, r9b
xor al, 1
or al, r10b
xor r8b, bl
xor bl, cl
xor cl, 1
or cl, dl
xor cl, 1
or cl, bl
xor cl, al
or dl, r9b
xor dl, 1
or dl, r8b
xor dl, 1
mov eax, ecx
and al, dl
test al, 1
jne 0x18000fc74
xor cl, dl
test cl, 1
jne 0x18000fc74
nop dword [rax + rax]
mov rax, qword gs:[0x60]
mov rax, qword gs:[0x60]
jmp 0x18000fc60
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x10
mov eax, dword [0x18002da74]
lea ebp, [rax - 1]
imul ebp, eax
mov ecx, ebp
not ecx
mov edx, ebp
or edx, 0x33a5246
mov ebx, ebp
and ebx, 0x33a5246
mov eax, ecx
and eax, 0xfcc5adb8
or eax, ebx
and edx, 0x33a5247
xor edx, eax
mov eax, edx
not eax
and ecx, eax
and edx, ebp
or edx, ecx
xor eax, edx
test eax, edx
setne al
cmp dword [0x18002da78], 9
setg cl
mov edx, ecx
and dl, al
xor cl, al
or dl, cl
mov eax, edx
not al
mov ebx, ecx
xor bl, 1
and cl, dl
or dl, bl
xor dl, 1
and bl, al
or bl, cl
mov r8d, edx
and r8b, bl
xor bl, dl
mov eax, dword [0x18002da8c]
lea ebp, [rax - 1]
imul ebp, eax
mov edi, ebp
not edi
mov ecx, ebp
xor ecx, 0xfffffffe
and ecx, ebp
mov eax, ebp
or eax, 1
mov edx, eax
and edx, 0xae42aa79
mov esi, edi
and esi, 0x51bd5586
or esi, edx
mov edx, ecx
not edx
or eax, edx
and edx, 0xae42aa79
and ecx, 0x51bd5586
or ecx, edx
xor ecx, esi
not eax
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x71f0075
and eax, 0xf8e0ff8a
or eax, ecx
mov ecx, eax
xor ecx, 0x40807a08
and edi, 0x167bbc3c
and ebp, 0xe98443c3
or ebp, edi
xor eax, 0x71f0075
mov edx, eax
and edx, 0xbe7185f3
and ecx, 0x418e7a0c
or ecx, edx
mov edx, ebp
xor edx, 0x41844200
xor ebp, 0x167bbc3c
or eax, ebp
and ebp, 0xbe7185f3
and edx, 0x418e7a0c
or edx, ebp
xor edx, ecx
movabs rbp, 0x25ee072983c43551
or bl, r8b
mov edi, ebx
not eax
or eax, edx
mov ecx, eax
not ecx
and ecx, 0x62483f39
and eax, 0x9db7c0c6
or eax, ecx
mov ecx, dword [0x18002da90]
xor eax, 0x9db7c0c6
setne al
sete dl
cmp ecx, 0xa
setl r8b
cmp ecx, 9
setg cl
and cl, dl
and al, r8b
or al, cl
mov ecx, r8d
or cl, dl
xor r8b, dl
xor r8b, 1
mov edx, ecx
xor dl, r8b
or r8b, cl
xor r8b, 1
or r8b, dl
mov ecx, r8d
not cl
mov edx, eax
xor dl, r8b
and dl, al
and r8b, al
xor al, 1
and al, cl
movabs r9, 0x4df7fc29bf4c8ff
or r8b, al
mov eax, edx
and al, r8b
xor r8b, dl
or r8b, al
mov rax, qword [rsp]
add rax, 0xffffffffffffffff
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], r15
mov r15, qword [r15]
cmp r15, qword [rsp + 0x10]
je 0x18000fff2
mov rax, qword [rsp + 8]
test dil, 1
je 0x18000ffe0
nop word [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000fe60
test r8b, 1
je 0x18000fff0
movabs rcx, 0xaaa62c0912039658
mov rdx, rcx
movabs rcx, 0x75af727143060ccb
mov rbx, rcx
add rcx, rdx
sub rcx, qword [rsp]
sub rcx, rbx
movabs rbx, 0x26a9994045f84a2d
add rcx, rbx
sub rcx, rdx
sub rcx, rbx
movabs rdx, 0xdff34c608f1d3a74
add rax, rdx
movabs rbx, 0x4a3a8370cd11a917
sub rax, rbx
sub rax, rdx
movabs rdx, 0x93bf6cbe57ba0a9f
add rax, rdx
add rax, rcx
sub rax, rdx
add rax, rbx
je 0x18000ffc9
mov r12, qword [r15 + 0x60]
xor r14d, r14d
mov r10, rax
nop
movzx ecx, word [r12 + r14*2]
test ecx, ecx
setne dl
sete r11b
lea ebx, [rcx - 0x41]
lea r13d, [rcx + 0x20]
cmp bx, 0x1a
cmovae r13d, ecx
mov rcx, qword [rsp]
movsx ecx, byte [rcx + r14]
lea ebx, [rcx - 0x41]
lea esi, [rcx + 0x20]
cmp bl, 0x1a
cmovae esi, ecx
sub r13d, esi
sete cl
xor r11b, cl
xor r11b, 1
or r11b, dl
mov ebx, r11d
not bl
xor dl, cl
mov ecx, edx
xor cl, 1
and dl, r11b
or r11b, cl
xor r11b, 1
and cl, bl
or cl, dl
test r11b, cl
jne 0x18000ffc0
xor r11b, cl
test r11b, 1
jne 0x18000ffc0
movabs rdx, 0x49e43f34c0a000f5
lea rcx, [rdx + r9]
sub rdx, rcx
add rdx, r9
movabs rcx, 0x44b23bcb19372e3b
add r10, rcx
add r10, rbp
sub r10, rcx
movabs rcx, 0x6d6714234269b668
add r10, rcx
sub r10, rdx
sub r10, rcx
movabs rcx, 0xa7a490e8084d200a
add r10, rcx
sub r10, rbp
not rcx
add r10, rcx
add r14, 1
cmp rax, r14
jne 0x18000fef0
jmp 0x18000ffc9
test r13d, r13d
jne 0x18000fe3a
mov rax, qword [r15 + 0x30]
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000ffe0
jmp 0x18000fff0
xor eax, eax
jmp 0x18000ffcd