Function at 0x1800096e0
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov rsi, qword [rax + 0x18]
add rsi, 0x10
mov eax, dword [0x180027a9c]
lea edx, [rax - 1]
imul edx, eax
mov edi, edx
not edi
mov eax, edi
or eax, 0xc36e58fa
mov ebx, edx
or ebx, 1
and ebx, 0xc36e58fb
mov ebp, edi
and ebp, 0x3c91a704
or ebp, ebx
and eax, 0xc36e58fb
xor eax, ebp
mov ebp, eax
not ebp
and ebp, 0xbe414b54
and eax, 0x41beb4ab
or eax, ebp
mov ebp, eax
xor ebp, 0x1aa9422
and edi, 0x362647cc
and edx, 0xc9d9b833
or edx, edi
mov ebx, edx
xor ebx, 0x81899822
xor eax, 0xbe414b54
xor edx, 0x362647cc
mov edi, eax
and edi, 0x5e5462d9
and ebp, 0xa1ab9d26
or ebp, edi
or eax, edx
and edx, 0x5e5462d9
and ebx, 0xa1ab9d26
or ebx, edx
xor ebx, ebp
not eax
or eax, ebx
mov edx, eax
not edx
and edx, 0x5729bd30
and eax, 0xa8d642cf
or eax, edx
xor eax, 0xa8d642cf
sete al
setne r9b
cmp dword [0x180027aa0], 0xa
setl r8b
mov ebx, r8d
xor bl, r9b
xor bl, 1
mov r11d, r8d
or r11b, al
xor r11b, 1
or r11b, bl
mov r10d, r11d
xor r10b, 1
or r9b, r8b
xor r9b, 1
xor al, r8b
and al, r8b
mov ebx, r9d
and bl, al
xor al, r9b
or al, bl
mov edx, eax
xor dl, 1
and al, r11b
or r11b, dl
and dl, r10b
or dl, al
xor dl, 1
mov ebx, r11d
xor bl, dl
or dl, r11b
xor dl, 1
or dl, bl
mov byte [rsp + 7], dl
mov edx, dword [0x180027a84]
lea ebp, [rdx - 1]
imul ebp, edx
mov ebx, ebp
not ebx
mov eax, ebx
and eax, 0x5cc42c44
mov edx, ebp
and edx, 0xa33bd3ba
or edx, eax
xor edx, 0xa33bd3ba
mov eax, ebp
xor eax, 0xfffffffe
and eax, ebp
mov edi, edx
and edi, eax
xor eax, edx
mov edx, dword [0x180027a88]
or eax, edi
mov edi, eax
not edi
and ebx, edi
and eax, ebp
or eax, ebx
xor edi, eax
test edi, eax
sete r8b
setne r9b
cmp edx, 0xa
setl r10b
cmp edx, 9
setg dl
mov ebx, edx
xor bl, r9b
and r9b, r10b
or r10b, r8b
xor r10b, 1
or r10b, bl
mov ebx, r10d
not bl
and dl, r8b
or dl, r9b
mov eax, edx
xor al, 1
and dl, r10b
or r10b, al
and al, bl
or al, dl
mov ebx, r10d
xor bl, al
xor al, 1
xor bl, 1
or al, r10b
xor al, 1
or al, bl
mov byte [rsp + 6], al
mov edx, dword [0x180027aa4]
lea eax, [rdx - 1]
imul eax, edx
mov edx, eax
not edx
mov ebp, edx
and ebp, 0x895ce85b
and edx, eax
and eax, 0x76a317a4
or eax, ebp
mov ebp, eax
xor ebp, 0x52220200
xor eax, 0x895ce85b
mov ebx, edx
not ebx
mov edi, eax
and edi, 0x2cd1bdad
and ebp, 0xd32e4252
or ebp, edi
or eax, ebx
and ebx, 0x2cd1bdad
and edx, 0xd32e4252
or edx, ebx
xor edx, ebp
not eax
or eax, edx
mov edi, eax
not edi
mov ebp, eax
or ebp, 0x1bc6b107
mov ebx, ebp
not ebx
mov edx, edi
or edx, 0xe4394ef8
and ebp, 0xb8c45471
and ebx, 0x44390a88
or ebx, ebp
mov ebp, edx
not ebp
and edx, 0xb8c45471
and ebp, 0x302a106
or ebp, edx
xor ebp, ebx
mov edx, ebp
not edx
and edx, 0x1bc6b106
and ebp, 0xe4394ef9
or ebp, edx
and eax, 0x5ed873ac
mov edx, edi
and edx, 0xa1278c53
or edx, eax
xor edx, 0x5ed873ad
and edi, 1
or edi, edx
mov ebx, ebp
not ebx
mov edx, ebx
and edx, 0xeeb7e19d
and ebp, 0x11481e62
or ebp, edx
mov edx, edi
not edx
or ebx, edi
and edi, 0xeeb7e19d
and edx, 0x11481e62
or edx, edi
xor edx, ebp
not ebx
or ebx, edx
mov edx, ebx
mov eax, ebx
xor eax, 0x90c55d64
and eax, ebx
not ebx
and ebx, 0x80814404
and edx, 0x10441960
or edx, ebx
xor edx, 0x10441960
mov ebp, edx
and ebp, eax
xor eax, edx
or eax, ebp
mov edx, eax
not edx
and edx, 0x6f3aa29b
and eax, 0x90c55d64
or eax, edx
mov edx, eax
not edx
and eax, 0x183c03ac
and edx, 0xe7c3fc53
or edx, eax
xor edx, 0xe7c3fc53
sete r10b
setne r8b
cmp dword [0x180027aa8], 9
movabs rdi, 0x5af58f0276eb60f2
setg al
mov edx, r8d
xor dl, r10b
and dl, r8b
mov ebx, edx
not bl
and bl, dl
mov r9d, ebx
and r9b, dl
xor bl, dl
or bl, r9b
xor bl, al
xor r10b, al
and r10b, al
xor al, r8b
mov edx, r10d
and dl, al
xor al, r10b
or al, dl
xor al, bl
mov edx, eax
xor dl, 1
and al, bl
mov ebx, eax
and bl, dl
xor al, dl
movabs r9, 0x24f661a74ed1ca14
or al, bl
mov byte [rsp + 5], al
mov r13, rcx
lea rax, [rcx - 1]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rsi
test byte [rsp + 7], 1
je 0x180009ca0
mov rax, qword [rsp + 8]
mov rax, qword [rax]
mov qword [rsp + 8], rax
cmp rax, qword [rsp + 0x18]
je 0x180009cc2
mov r8, qword [rsp + 0x10]
test byte [rsp + 6], 1
je 0x180009cb0
nop word cs:[rax + rax]
nop dword [rax]
cmp byte [r8 + 1], 0
lea r8, [r8 + 1]
jne 0x180009ab0
test byte [rsp + 5], 1
je 0x180009cc0
movabs rcx, 0x63a9d546942dd81c
mov rax, rcx
movabs rdx, 0x2240d67add6485ae
sub rax, rdx
sub rax, rcx
movabs rcx, 0xa0aaa44f7e401d29
sub r8, rcx
add r8, rax
add r8, rcx
movabs rax, 0xf55511ac696ecbbc
sub r8, rax
movabs rcx, 0x3d0e3b7b5df178ea
add r8, rcx
add r8, rax
movabs rax, 0x1dfba54bc54cdd80
sub r8, rax
sub r8, r13
add r8, rax
sub r8, rcx
movabs rax, 0x775304ebc9185197
mov rcx, rax
add r8, rax
movabs rax, 0x797e7c75861f1e5d
sub r8, rax
sub r8, rcx
add r8, rdx
add r8, rax
je 0x180009c78
mov rax, qword [rsp + 8]
mov r14, qword [rax + 0x60]
xor r15d, r15d
mov r12, r8
nop word cs:[rax + rax]
nop
movzx r11d, word [r14 + r15*2]
test r11d, r11d
setne bpl
sete bl
movsx esi, byte [r13 + r15]
lea edx, [r11 - 0x41]
lea eax, [r11 + 0x20]
cmp dx, 0x1a
cmovae eax, r11d
lea edx, [rsi - 0x41]
lea ecx, [rsi + 0x20]
cmp dl, 0x1a
cmovae ecx, esi
sub eax, ecx
setne r10b
sete cl
mov edx, ecx
or dl, bl
xor dl, 1
mov esi, ecx
xor sil, bl
not sil
and sil, bl
mov ebx, edx
and bl, sil
xor sil, dl
or sil, bl
or r11d, eax
sete dl
and r10b, bpl
or r10b, dl
mov edx, ebp
xor dl, cl
or bpl, cl
xor bpl, 1
or bpl, dl
xor r10b, 1
mov ecx, r10d
xor cl, bpl
or r10b, bpl
xor r10b, 1
or r10b, cl
xor r10b, sil
mov ebx, r10d
xor bl, 1
and r10b, sil
mov ecx, r10d
and cl, bl
test cl, 1
jne 0x180009c70
xor r10b, bl
test r10b, 1
jne 0x180009c70
movabs rax, 0x8c4732b65521c653
add r12, rax
add r12, rdi
sub r12, r9
sub r12, rax
add r12, r9
movabs rax, 0xf2e62271fc3ca799
add r12, rax
sub rax, r12
movabs rcx, 0x7a2716bc25121444
lea r12, [rcx + rdi]
add r12, rax
not r12
add r12, rcx
add r15, 1
cmp r8, r15
jne 0x180009b70
jmp 0x180009c78
test eax, eax
jne 0x180009a70
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x180009ca0
jmp 0x180009cb0
jmp 0x180009cc0
xor eax, eax
jmp 0x180009c81