Function at 0x18000f880
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov rax, qword gs:[0x60]
mov r14, qword [rax + 0x18]
add r14, 0x10
mov eax, dword [0x18002da84]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
and eax, 0xb46ea232
and edx, 0x4b915dcd
or edx, eax
mov ebp, edx
xor ebp, 0x41104049
xor edx, 0x30440232
and edx, 0x3ac51fb6
and ebp, 0xc53ae049
or ebp, edx
mov eax, ebp
xor eax, 0x3ac51fb6
xor ebp, 0xc53ae048
mov edx, eax
and edx, 0xfffffffe
and ebp, 0xfffffffe
and eax, 1
or eax, ebp
mov ebp, edx
and ebp, eax
xor eax, edx
or eax, ebp
mov edx, eax
not edx
and edx, 0xd76c7268
and eax, 0x28938d97
or eax, edx
mov edx, eax
xor edx, 0x28920c03
xor eax, 0x43601200
and edx, 0xbc9e6c6b
and eax, 0x43619394
or eax, edx
mov edx, eax
xor edx, 0x88880022
xor eax, 0x40209180
and eax, 0x7436fdc9
and edx, 0x8bc90236
or edx, eax
xor edx, 0x8bc90236
sete r8b
setne dl
cmp dword [0x18002da88], 0xa
setl al
mov ebx, eax
xor bl, dl
not bl
and bl, dl
or dl, al
xor dl, 1
mov r9d, ebx
and r9b, dl
xor dl, bl
or dl, r9b
mov r9d, eax
or r9b, r8b
xor al, r8b
mov ebx, r9d
xor bl, al
xor al, 1
xor bl, 1
or al, r9b
xor al, 1
or al, bl
mov ebx, eax
xor bl, 1
and al, bl
mov r8d, ebx
and r8b, al
xor al, bl
or al, r8b
mov r9d, eax
xor r9b, 1
mov r10d, edx
xor r10b, 1
and dl, r10b
and al, r9b
mov r8d, r10d
and r8b, dl
xor dl, r10b
or dl, r8b
mov r8d, r9d
and r8b, al
xor al, r9b
or al, r8b
mov ebx, edx
xor bl, 1
and bl, al
xor al, 1
and al, dl
or al, bl
mov edx, r10d
and dl, r9b
xor r10b, r9b
or r10b, dl
xor r10b, 1
mov ebx, eax
and bl, r10b
xor r10b, al
or r10b, bl
mov byte [rsp + 7], r10b
mov edx, dword [0x18002da6c]
lea eax, [rdx - 1]
imul eax, edx
mov edx, eax
not edx
mov ebp, edx
and ebp, 0x765e5c2f
and edx, eax
and eax, 0x89a1a3d0
or eax, ebp
xor eax, 0x89a1a3d0
mov ebp, eax
and ebp, edx
xor eax, edx
or eax, ebp
mov ebp, eax
xor ebp, 1
and ebp, eax
mov edx, eax
not edx
and edx, 0x1e780214
and eax, 0xe187fdeb
or eax, edx
mov ebx, eax
xor ebx, 0xa00399a8
mov edx, ebp
not edx
xor eax, 0x1e780215
mov edi, edx
and edi, 0x43dc6652
and ebp, 0xbc2399ad
or ebp, edi
or edx, eax
and eax, 0x43dc6652
and ebx, 0xbc2399ad
or ebx, eax
xor ebx, ebp
not edx
or edx, ebx
mov eax, edx
not eax
mov ebp, edx
and ebp, 0xd92976ef
and eax, 0x26d68910
or eax, ebp
xor eax, 0x26d68910
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x18002da70], 0xa
setl bl
mov edx, ebx
xor dl, al
or bl, al
xor bl, 1
or bl, dl
mov r15d, ebx
xor r15b, 1
mov eax, ebx
and al, dl
xor dl, 1
and r15b, dl
or r15b, al
mov eax, ebx
and al, dl
xor dl, bl
or dl, al
mov eax, edx
xor al, r15b
xor r15b, 1
or r15b, dl
mov edx, dword [0x18002da8c]
lea ebp, [rdx - 1]
imul ebp, edx
mov ebx, ebp
mov edx, ebp
xor edx, 0xda487814
and edx, ebp
not ebp
and ebp, 0x79a2c164
and ebx, 0x865d3e9b
or ebx, ebp
mov ebp, ebx
xor ebp, 0x2401010
xor ebx, 0x58004004
or ebx, 0x25b787eb
mov edi, edx
not edi
mov esi, ebx
and esi, 0xe83eec21
and ebp, 0x12401014
or ebp, esi
or ebx, edi
and edi, 0xe83eec21
and edx, 0x17c113de
or edx, edi
xor edx, ebp
not ebx
or ebx, edx
mov edx, ebx
not edx
and edx, 0xe8bdd445
and ebx, 0x17422bba
or ebx, edx
mov edx, ebx
xor edx, 0xcd0a53ae
mov ebp, ebx
xor ebp, 0x32f5ac51
xor ebx, 0x2edce53d
and ebx, ebp
mov edi, edx
and edi, 0x1c29496c
mov esi, ebx
and esi, edi
xor edi, ebx
or edi, esi
mov ebx, edi
not ebx
and ebx, 0x7e52c424
and edi, 0x81ad3bdb
or edi, ebx
and edx, 0xfc4e4b3c
mov ebx, ebp
and ebx, 0x3b1b4c3
or ebx, edx
movabs rsi, 0x1dd763326ba8ae7
xor al, 1
xor r15b, 1
or r15b, al
xor edi, 0x627b8d49
xor ebx, 0xfc4e4b3d
and ebp, 1
or ebp, ebx
mov eax, ebp
not eax
and eax, 0x564d1f45
and ebp, 0xa9b2e0ba
or ebp, eax
xor ebp, 0xa9b2e0ba
mov eax, edi
and eax, ebp
xor ebp, edi
or ebp, eax
mov eax, ebp
xor eax, 0xb8942ed8
and eax, ebp
not ebp
and ebp, 0xb8942ed8
mov edx, ebp
and edx, eax
xor eax, ebp
mov ebp, dword [0x18002da90]
or eax, edx
mov edx, eax
not edx
and edx, 0x476bd127
and eax, 0xb8942ed8
or eax, edx
setne r8b
sete dl
cmp ebp, 0xa
setl bl
cmp ebp, 9
setg bpl
mov eax, ebx
or bl, dl
and dl, bpl
and al, r8b
or al, dl
xor bpl, r8b
xor bpl, 1
mov edx, ebx
xor dl, bpl
or bpl, bl
xor bpl, 1
or bpl, dl
mov edx, ebp
xor dl, 1
and bpl, dl
mov ebx, edx
and bl, bpl
xor bpl, dl
or bpl, bl
mov edx, ebp
xor dl, 1
xor bpl, al
xor al, 1
or al, dl
xor al, 1
mov edx, eax
and dl, bpl
xor bpl, al
or bpl, dl
lea rax, [rcx - 1]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], r14
test byte [rsp + 7], 1
je 0x18000fe10
mov r14, qword [r14]
cmp r14, qword [rsp + 0x10]
je 0x18000fe32
mov r10, qword [rsp + 8]
test r15b, 1
je 0x18000fe20
nop dword [rax + rax]
cmp byte [r10 + 1], 0
lea r10, [r10 + 1]
jne 0x18000fca0
test bpl, 1
je 0x18000fe30
movabs rax, 0x1068685429132ddd
mov rdx, rax
sub r10, rax
movabs rax, 0xb10512d90a59b2c5
sub r10, rax
add r10, rdx
movabs rdx, 0x4a06194c304761c3
mov rbx, rdx
sub r10, rdx
add r10, rax
movabs rax, 0xfa815b55eece5d1c
mov rdx, rax
sub rdx, rcx
sub rdx, rax
movabs rax, 0x9968b21299162c1e
add r10, rax
add r10, rdx
sub r10, rax
add r10, rbx
je 0x18000fdf9
mov r11, qword [r14 + 0x60]
xor r8d, r8d
mov r13, r10
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx edi, word [r11 + r8*2]
movsx edx, byte [rcx + r8]
lea ebx, [rdi - 0x41]
lea r9d, [rdi + 0x20]
cmp bx, 0x1a
cmovae r9d, edi
cmp edx, 0x41
jl 0x18000fd59
lea ebx, [rdx + 0x20]
cmp dl, 0x5b
cmovge ebx, edx
mov edx, ebx
sub r9d, edx
setne dl
sete bl
test di, di
setne dil
sete r12b
mov eax, r12d
xor al, bl
xor al, 1
or al, dil
and dl, dil
and r12b, bl
or r12b, dl
mov edx, r12d
and r12b, al
xor al, 1
xor dl, 1
mov ebx, eax
xor bl, dl
and bl, al
and dl, al
or dl, r12b
cmp bl, dl
jne 0x18000fdf0
xor bl, 1
xor dl, 1
or dl, bl
xor dl, 1
test dl, 1
jne 0x18000fdf0
mov rax, rsi
movabs rdx, 0x25e270a5768ee26b
sub rax, rdx
sub rax, rsi
add rax, rdx
movabs rdx, 0xd7c9fcbc382a491a
add r13, rdx
sub r13, rax
mov rax, rdx
not rax
add r13, rax
add r8, 1
cmp r10, r8
jne 0x18000fd30
jmp 0x18000fdf9
test r9d, r9d
jne 0x18000fc73
mov rax, qword [r14 + 0x30]
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000fe10
jmp 0x18000fe20
jmp 0x18000fe30
xor eax, eax
jmp 0x18000fdfd