Function at 0x18000f220
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r11, qword [rax + 0x10]
add rax, 0x10
mov qword [rsp + 0x20], rax
cmp r11, rax
je 0x18000f7b2
mov r14, rcx
movabs r15, 0xf990be0a360647a7
mov ecx, dword [0x18002da7c]
mov r8d, dword [0x18002da80]
lea esi, [rcx - 1]
imul esi, ecx
mov ebx, esi
not ebx
mov ecx, ebx
and ecx, esi
mov edi, ecx
not edi
mov edx, esi
and edx, 0xa37914ff
and ebx, 0x5c86eb00
or ebx, edx
or esi, edi
and edi, 0xa37914ff
and ecx, 0x5c86eb00
or ecx, edi
xor ecx, ebx
not esi
or esi, ecx
mov ecx, esi
mov ebx, esi
xor ebx, 0x698cedbe
and ebx, esi
not esi
and esi, 0x1212e0bb
and ecx, 0xeded1f44
or ecx, esi
mov edi, ecx
xor edi, 0xeded1f44
mov edx, edi
and edx, 0x698cedbe
mov esi, edx
and esi, ebx
xor ebx, edx
or ebx, esi
mov edx, ebx
not edx
and edx, 0x96731240
and ebx, 0x698cedbf
or ebx, edx
and edi, 1
xor ecx, 0xeded1f45
or ecx, edi
mov edx, ecx
not edx
and edx, 0xc05535a1
and ecx, 0x3faaca5e
or ecx, edx
xor ecx, 0x3faaca5e
mov edx, ebx
and edx, ecx
xor ecx, ebx
or ecx, edx
mov ebx, ecx
not ebx
mov edx, ebx
and edx, 0x1368596e
and ebx, ecx
and ecx, 0xec97a691
or ecx, edx
mov edx, ecx
xor edx, 0xc4058200
xor ecx, 0x1368596e
mov edi, ebx
not edi
mov esi, ecx
and esi, 0x299a3cbf
and edx, 0xd665c340
or edx, esi
or ecx, edi
and edi, 0x299a3cbf
and ebx, 0xd665c340
or ebx, edi
xor ebx, edx
not ecx
or ecx, ebx
mov edx, ecx
not edx
mov ebx, edx
and ebx, 0xfe7384c1
and ecx, 0x18c7b3e
or ecx, ebx
xor ecx, 0xfe7384c1
xor edx, ecx
test edx, ecx
sete cl
setne dl
cmp r8d, 0xa
setl r9b
cmp r8d, 9
setg al
and dl, al
mov ebx, r9d
and bl, cl
or bl, dl
mov edx, ebx
xor dl, al
and dl, bl
xor al, cl
not al
and al, cl
xor cl, r9b
and cl, r9b
mov ebx, eax
xor bl, 1
xor al, cl
xor cl, 1
or cl, bl
xor cl, 1
or cl, al
mov eax, edx
xor al, 1
mov r12d, ecx
xor r12b, 1
and cl, al
or al, r12b
and r12b, dl
or r12b, cl
xor r12b, 1
mov ecx, eax
xor cl, r12b
or r12b, al
xor r12b, 1
or r12b, cl
mov eax, dword [0x18002da94]
lea edi, [rax - 1]
imul edi, eax
mov eax, edi
not eax
mov ecx, eax
and ecx, 0x11aa0f9a
mov edx, edi
and edx, 0xee55f064
or edx, ecx
mov esi, edx
xor esi, 0x6601b044
xor edx, 0x1182038b
mov ecx, eax
or ecx, 0x99d643aa
and edx, 0x99d643ab
and esi, 0x6629bc54
or esi, edx
and ecx, 0x99d643ab
xor ecx, esi
mov esi, ecx
not esi
mov edx, esi
and edx, 0xbd082166
and ecx, 0x42f7de99
or ecx, edx
mov ebp, dword [0x18002da98]
and edi, 0xbd082166
and eax, 0x42f7de99
or eax, edi
xor eax, ecx
not eax
or eax, esi
cmp eax, 0xffffffff
setne al
cmp ebp, 0xa
setl dl
cmp ebp, 9
setg cl
mov ebx, ecx
and bl, al
xor cl, al
or cl, bl
xor cl, 1
xor dl, al
xor dl, cl
mov eax, edx
xor al, 1
and dl, cl
mov ecx, edx
and cl, al
xor dl, al
or dl, cl
mov eax, dword [0x18002da9c]
mov edi, dword [0x18002daa0]
lea ebp, [rax - 1]
imul ebp, eax
mov ebx, ebp
not ebx
mov eax, ebx
and eax, 0xbcc58b96
mov ecx, ebp
and ecx, 0x433a7468
or ecx, eax
mov eax, ecx
xor eax, 0x23a0460
xor ecx, 0x38800886
and ecx, 0x7980788e
and eax, 0x867f8770
or eax, ecx
mov ecx, ebp
or ecx, 0x7980788e
and ecx, 0x7980788f
xor ecx, eax
and ebx, 0x3c0fd0c0
and ebp, 0xc3f02f3f
or ebp, ebx
mov ebx, ecx
not ebx
mov eax, ebx
and eax, 0xbe2a33bd
and ecx, 0x41d5cc42
or ecx, eax
mov eax, ebp
xor eax, 0x41d00c02
xor ebp, 0x3c0a1080
and ebp, 0xbe2a33bd
and eax, 0x41d5cc42
or eax, ebp
xor eax, ecx
xor ebx, eax
and ebx, eax
mov dword [rsp + 8], ebx
sete r8b
setne al
cmp edi, 0xa
setl bl
mov dword [rsp + 0xc], edi
cmp edi, 9
setg r9b
mov ecx, eax
and cl, r9b
and al, bl
and bl, r8b
or bl, cl
xor bl, 1
or bl, r9b
and r9b, r8b
or r9b, al
mov eax, r9d
xor al, 1
mov ecx, eax
and cl, r9b
mov r10d, eax
and r10b, cl
xor cl, al
movabs r8, 0x126cd61f8bff5d0a
xor bl, 1
or cl, r10b
xor cl, bl
mov eax, ebx
xor al, r9b
or r9b, bl
mov bl, byte [r14]
xor r9b, 1
or r9b, al
mov eax, ecx
xor al, r9b
or r9b, cl
xor r9b, 1
or r9b, al
mov qword [rsp + 0x18], r14
mov byte [rsp + 7], r12b
mov byte [rsp + 6], bl
movabs rdi, 0x139f9518e2dc6631
mov r13, r14
test bl, bl
je 0x18000f5e0
test r12b, 1
je 0x18000f790
nop word [rax + rax]
cmp byte [r13 + 1], 0
lea r13, [r13 + 1]
jne 0x18000f5d0
jmp 0x18000f5ea
test r12b, 1
je 0x18000f7b0
add r13, r15
sub r13, r14
sub r13, r15
mov qword [rsp + 0x10], r11
je 0x18000f810
mov rcx, qword [r11 + 0x60]
mov r12, r14
nop word cs:[rax + rax]
nop
test dl, 1
je 0x18000f610
movzx eax, word [rcx]
test eax, eax
setne r15b
sete bl
lea ebp, [rax - 0x41]
lea r10d, [rax + 0x20]
cmp bp, 0x1a
cmovae r10d, eax
movsx eax, byte [r12]
lea ebp, [rax - 0x41]
lea esi, [rax + 0x20]
cmp bpl, 0x1a
cmovae esi, eax
sub r10d, esi
sete al
mov r14d, ebx
xor r14b, al
xor r14b, 1
or r15b, r14b
mov r11d, r15d
xor r11b, 1
or al, bl
and r14b, bl
mov ebx, eax
xor bl, r14b
xor r14b, 1
xor bl, 1
or r14b, al
xor r14b, 1
or r14b, bl
xor r14b, 1
and r11b, r15b
mov eax, r15d
and al, r11b
xor r11b, r15b
or r11b, al
xor r11b, r14b
mov eax, r15d
and al, r14b
xor r14b, r15b
or r14b, al
xor r14b, 1
mov eax, r11d
and al, r14b
test al, 1
jne 0x18000f740
xor r11b, r14b
test r11b, 1
jne 0x18000f740
add rcx, 2
add r12, 1
movabs rax, 0x8e9539b56b4b37c5
mov rbx, rax
movabs rbp, 0x1c8d3ce4b6945765
add rax, rbp
sub rbp, rax
add r13, r8
add r13, rbp
mov rax, r8
sub rax, r13
movabs rbp, 0x2a52d06aa6002770
mov rsi, rbp
add rax, rbp
mov rbp, rdi
sub rbp, rax
add rbp, rsi
movabs rax, 0xe58b2c3fd6cfca76
sub rbp, rax
add rbp, rbx
add rbp, rax
movabs r13, 0x496c99b0b7b2b4bf
add rbp, r13
sub rbp, rdi
not r13
add r13, rbp
jne 0x18000f610
jmp 0x18000f819
test r10d, r10d
je 0x18000f819
test r9b, 1
mov r12b, byte [rsp + 7]
je 0x18000f7a0
mov r11, qword [rsp + 0x10]
mov r11, qword [r11]
cmp r11, qword [rsp + 0x20]
mov r14, qword [rsp + 0x18]
movabs r15, 0xf990be0a360647a7
mov bl, byte [rsp + 6]
jne 0x18000f5b9
mov ebp, dword [rsp + 0xc]
mov edx, dword [rsp + 8]
jmp 0x18000f80c
jmp 0x18000f790
jmp 0x18000f7a0
jmp 0x18000f7b0
mov eax, dword [0x18002da9c]
mov ebp, dword [0x18002daa0]
lea esi, [rax - 1]
imul esi, eax
mov eax, esi
not eax
mov edx, eax
and edx, 0x1186002
mov ecx, esi
and ecx, 0x40a08d64
or ecx, edx
xor ecx, 0x40a08d64
mov edx, esi
and edx, 0xbe471299
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0xbe471298
and edx, 0x41b8ed67
or edx, ecx
mov ecx, edx
not ecx
and eax, ecx
and edx, esi
or edx, eax
not edx
or edx, ecx
not edx
xor eax, eax
jmp 0x18000f834
test dl, 1
je 0x18000f8d0
test r9b, 1
je 0x18000f8c0
mov rax, qword [rsp + 0x10]
mov rax, qword [rax + 0x30]
mov ebp, dword [rsp + 0xc]
mov edx, dword [rsp + 8]
test edx, edx
setne cl
sete dl
cmp ebp, 0xa
setl r8b
cmp ebp, 9
setg bl
and dl, bl
and r8b, cl
or r8b, dl
mov edx, ebx
xor dl, cl
or bl, cl
xor bl, 1
or bl, dl
xor bl, 1
mov ecx, r8d
and cl, bl
xor bl, r8b
or bl, cl
mov edx, ebx
xor dl, 1
and dl, bl
xor dl, 1
mov ecx, ebx
xor cl, dl
or dl, bl
xor dl, 1
or dl, cl
mov ecx, r8d
xor cl, 1
mov ebx, edx
xor bl, 1
and dl, cl
or cl, bl
xor cl, 1
and bl, r8b
or bl, dl
mov edx, ecx
and dl, bl
test dl, 1
jne 0x18000f8d2
xor cl, bl
test cl, 1
jne 0x18000f8d2
nop word cs:[rax + rax]
nop
jmp 0x18000f8b0
jmp 0x18000f8c0
jmp 0x18000f8d0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret