Function at 0x18000f250
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x10
mov qword [rsp], rcx
mov edx, dword [0x18002da94]
mov r8d, dword [0x18002da98]
lea edi, [rdx - 1]
imul edi, edx
mov r9d, edi
not r9d
mov ebx, r9d
and ebx, 0x4fa3cd85
mov edx, edi
and edx, 0xb05c327a
or edx, ebx
mov ebx, edx
xor ebx, 0x8000200a
xor edx, 0x4880c800
mov ebp, edi
xor ebp, 0xc8d8fa2a
and ebp, edi
or edx, 0x372705d5
mov eax, ebp
not eax
mov esi, edx
and esi, 0x5efa1f21
and ebx, 0x8000e00a
or ebx, esi
or edx, eax
and eax, 0x5efa1f21
and ebp, 0xa105e0de
or ebp, eax
xor ebp, ebx
not edx
or edx, ebp
mov eax, edx
not eax
and eax, 0x2fa7c317
and edx, 0xd0583ce8
or edx, eax
mov eax, edx
xor eax, 0x10004000
xor edx, 0xc57b3004
and edx, 0xcdfbb6c7
and eax, 0x32044938
or eax, edx
xor eax, 0x32044938
and r9d, 0xc8d0a592
and edi, 0x372f5a6d
or edi, r9d
xor edi, 0x372f5a6d
mov edx, eax
and edx, edi
xor edi, eax
or edi, edx
cmp edi, 0xffffffff
sete r9b
setne al
cmp r8d, 9
setg dl
cmp r8d, 0xa
setl bl
mov r8d, ebx
xor r8b, al
and al, bl
or bl, r9b
and dl, r9b
or dl, al
mov eax, ebx
xor al, dl
xor dl, 1
xor al, 1
or dl, bl
xor dl, 1
or dl, al
mov eax, edx
xor al, 1
and dl, al
mov ebx, eax
and bl, dl
xor dl, al
or dl, bl
mov ebx, edx
and dl, r8b
xor r8b, 1
xor bl, 1
mov eax, r8d
xor al, bl
and al, r8b
and bl, r8b
or bl, dl
test al, bl
jne 0x18000f392
xor al, bl
jne 0x18000f392
nop dword [rax]
jmp 0x18000f390
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
lea r12, [r9 + 0x10]
mov eax, dword [0x18002da7c]
mov edx, dword [0x18002da80]
lea ebx, [rax - 1]
imul ebx, eax
mov eax, ebx
not eax
mov ebp, eax
and ebp, 0xc0010020
and ebx, 0x1e403087
or ebx, ebp
mov edi, ebx
xor edi, 0x1e002080
xor ebx, 0x81128c50
or eax, 0xde4130a7
mov ebp, eax
not ebp
and ebx, 0x81529c57
and edi, 0x5e0120a0
or edi, ebx
and eax, 0x81529c57
and ebp, 0x20ac4308
or ebp, eax
xor ebp, edi
mov eax, ebp
not eax
and eax, 0x5e01fc15
and ebp, 0xa1fe03ea
or ebp, eax
mov eax, ebp
xor eax, 0x7fbf334d
xor ebp, 0x4c00
mov edi, eax
and edi, 0xfffffffe
and ebp, 0x52be5c45
and eax, 0xad41a3ba
or eax, ebp
xor eax, 0xad41a3bb
mov ebx, edi
and ebx, eax
xor eax, edi
or eax, ebx
mov ebp, eax
not ebp
and ebp, 0x50407af7
and eax, 0xafbf8508
or eax, ebp
mov ebp, eax
not ebp
and ebp, 0x2097a7d4
and eax, 0xdf68582b
or eax, ebp
xor eax, 0x8f2822dc
sete r10b
cmp edx, 0xa
setl r15b
cmp edx, 9
setg r11b
mov ebp, dword [0x18002da9c]
mov r14d, dword [0x18002daa0]
lea edx, [rbp - 1]
imul edx, ebp
mov ebp, edx
not ebp
and edx, ebp
mov ebx, ebp
and ebx, edx
xor edx, ebp
or edx, ebx
mov r8d, edx
not r8d
mov edi, edx
xor edi, 0x7c944334
and edi, r8d
mov esi, r8d
or esi, 0x7c944334
mov ebx, esi
not ebx
mov ebp, edi
not ebp
mov eax, ebp
and eax, 0x27bc086c
and edi, 0xd843f793
or edi, eax
or ebp, esi
and esi, 0x27bc086c
and ebx, 0x8043b483
or ebx, esi
xor ebx, edi
not ebp
or ebp, ebx
mov eax, ebp
not eax
and eax, 0x836bbcca
and ebp, 0x7c944335
or ebp, eax
and r8d, 1
xor edx, 0xfffffffe
or edx, r8d
mov eax, edx
not eax
and eax, 0x65afd110
and edx, 0x9a502eef
or edx, eax
xor edx, 0x9a502eef
mov eax, ebp
and eax, edx
xor edx, ebp
or edx, eax
mov eax, edx
xor eax, 0x4732aa26
and eax, edx
or edx, 0xb8cd55d9
mov ebp, edx
not ebp
mov ebx, eax
not ebx
mov edi, edx
and edi, 0x64644e33
and ebp, 0x312a004
or ebp, edi
or edx, ebx
and ebx, 0x64644e33
and eax, 0x9b9bb1cc
or eax, ebx
xor eax, ebp
not edx
or edx, eax
mov eax, edx
not eax
and eax, 0x925e9a1c
and edx, 0x6da165e3
or edx, eax
mov eax, edx
xor eax, 0x2920fc0
xor edx, 0x512c000a
and edx, 0x792dc00f
and eax, 0x86d23ff0
or eax, edx
mov edx, eax
xor edx, 0x4002db0
xor eax, 0x7029400f
and eax, 0xf2fb524f
and edx, 0xd04adb0
or edx, eax
mov eax, edx
xor eax, 0x90d05041
xor edx, 0x40c80
and edx, 0x622f0e8e
and eax, 0x9dd0f171
or eax, edx
xor eax, 0x9dd0f171
sete dil
setne r8b
cmp r14d, 9
setg r13b
cmp r14d, 0xa
setl sil
mov rcx, qword [r9 + 0x10]
cmp rcx, r12
je 0x18000f872
mov ebx, r11d
xor bl, r10b
not bl
and bl, r10b
or r11b, r10b
mov eax, r11d
xor al, bl
xor bl, 1
xor al, 1
or bl, r11b
xor bl, 1
or bl, al
mov eax, r10d
xor al, r15b
and r15b, r10b
or r15b, al
xor r15b, 1
mov r10d, eax
and r10b, r15b
xor r15b, al
or r15b, r10b
mov eax, r15d
xor al, 1
and r15b, al
mov r10d, eax
and r10b, r15b
xor r15b, al
or r15b, r10b
mov r10d, r15d
xor r10b, 1
mov eax, ebx
xor al, 1
and r15b, al
or al, r10b
xor al, 1
and r10b, bl
or r10b, r15b
mov ebx, eax
and bl, r10b
xor r10b, al
or r10b, bl
mov eax, esi
xor al, r8b
not al
and al, r8b
mov edx, esi
or dl, r8b
xor dl, 1
mov r11d, eax
and r11b, dl
xor dl, al
or dl, r11b
and r8b, sil
or sil, dil
and r13b, dil
or r13b, r8b
xor r13b, 1
mov eax, esi
xor al, r13b
or r13b, sil
xor r13b, 1
or r13b, al
mov eax, r13d
xor al, 1
mov ebx, edx
xor bl, 1
and al, bl
or bl, r13b
and r13b, dl
or r13b, al
xor r13b, 1
mov eax, ebx
xor al, r13b
or r13b, bl
xor r13b, 1
or r13b, al
movabs r11, 0xebb144ecade73091
movabs r14, 0xe2289d1df90fe5a9
movabs r15, 0xdd6a6527f48f5ff3
movabs rsi, 0xcfac02071b87d25d
movabs rdx, 0x8a91f2f3ed820c5f
movabs rbx, 0x831e34f7aec4ada3
movabs rdi, 0x6bfd02c770f9e175
movabs r8, 0x35144e569c8f491a
mov rax, qword [rsp]
lea rbp, [rax - 1]
xor eax, eax
mov qword [rsp + 8], r12
mov r9, rbp
test r10b, 1
je 0x18000f870
nop
cmp byte [rbp + 1], 0
lea rbp, [rbp + 1]
jne 0x18000f720
add rbp, r14
sub rbp, rbx
add rbp, r11
sub rbp, r14
sub rbp, r11
sub rbp, rdi
add rbp, r15
add rbp, rdi
add rbp, rdx
sub rbp, qword [rsp]
sub rbp, rdx
movabs rdx, 0x4d36c67472c70c3f
sub rbp, rdx
sub rbp, r15
add rbp, rdx
add rbp, rsi
sub rsi, rbp
movabs rdx, 0x3cade1ec1580a53d
mov r14, rdx
sub r14, rbx
sub r14, rdx
add r14, rsi
neg r14
je 0x18000f876
mov r15, qword [rcx + 0x60]
xor r12d, r12d
mov rbp, r14
nop
test r13b, 1
je 0x18000f860
movzx edi, word [r15 + r12*2]
mov rdx, qword [rsp]
movsx esi, byte [rdx + r12]
mov ebx, edi
cmp edi, 0x41
jb 0x18000f7b9
lea ebx, [rdi + 0x20]
cmp di, 0x5b
cmovae ebx, edi
lea edx, [rsi - 0x41]
lea r11d, [rsi + 0x20]
cmp dl, 0x1a
cmovae r11d, esi
cmp ebx, r11d
jne 0x18000f7ef
test di, di
je 0x18000f87c
add rbp, r8
mov rdx, r8
not rdx
add rbp, rdx
add r12, 1
cmp r14, r12
jne 0x18000f790
jmp 0x18000f87c
mov rcx, qword [rcx]
mov r12, qword [rsp + 8]
cmp rcx, r12
movabs rdx, 0xebb144ecade73091
mov r11, rdx
movabs rbx, 0xe2289d1df90fe5a9
mov r14, rbx
movabs rdi, 0xdd6a6527f48f5ff3
mov r15, rdi
movabs rsi, 0xcfac02071b87d25d
movabs rdx, 0x8a91f2f3ed820c5f
movabs rbx, 0x831e34f7aec4ada3
movabs rdi, 0x6bfd02c770f9e175
mov rbp, r9
jne 0x18000f711
jmp 0x18000f880
jmp 0x18000f860
jmp 0x18000f870
xor eax, eax
jmp 0x18000f880
test r13b, 1
je 0x18000f8a0
mov rax, qword [rcx + 0x30]
add rsp, 0x10
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000f8a0