Function at 0x18000e680
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov ecx, dword [0x18002ca84]
mov r8d, dword [0x18002ca88]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edi, ebx
not edi
mov ecx, edi
and ecx, 0xf48c8ce2
mov edx, ebx
and edx, 0xb73731d
or edx, ecx
mov ecx, edx
xor ecx, 0x226014
xor edx, 0xf48c8ce2
mov ebp, ebx
xor ebp, 0xfffffffe
and ebp, ebx
or edx, 1
mov esi, ebp
not esi
mov eax, edx
and eax, 0x1f5d13a9
and ecx, 0xe0a2ec56
or ecx, eax
or edx, esi
and esi, 0x1f5d13a9
and ebp, 0xe0a2ec56
or ebp, esi
xor ebp, ecx
not edx
or edx, ebp
mov eax, edx
not eax
and eax, 0x45ec63db
and edx, 0xba139c24
or edx, eax
mov eax, edx
xor eax, 0x8100020
and edi, 0xd361802b
and ebx, 0x2c9e7fd4
or ebx, edi
mov ecx, ebx
xor ecx, 0xc140300
xor edx, 0x45ec63db
xor ebx, 0xd361802b
mov ebp, edx
and ebp, 0xf2cbfcd5
and eax, 0xd34032a
or eax, ebp
or edx, ebx
and ebx, 0xf2cbfcd5
and ecx, 0xd34032a
or ecx, ebx
xor ecx, eax
not edx
or edx, ecx
cmp edx, 0xffffffff
setne r10b
sete cl
cmp r8d, 0xa
setl dl
cmp r8d, 9
setg r8b
mov ebx, r8d
xor bl, cl
not bl
and bl, cl
mov r9d, ecx
and r9b, r8b
or r8b, cl
xor r8b, 1
mov eax, ebx
and al, r8b
xor r8b, bl
or r8b, al
and r10b, dl
or r10b, r9b
mov eax, edx
and al, cl
xor dl, cl
or dl, al
xor dl, 1
mov eax, r10d
and al, dl
xor dl, r10b
or dl, al
mov eax, edx
xor al, 1
and dl, al
mov ecx, eax
and cl, dl
xor dl, al
or dl, cl
mov ebx, edx
xor bl, 1
mov eax, r8d
xor al, 1
and dl, al
or al, bl
mov ecx, eax
not cl
and cl, 1
and bl, r8b
or bl, dl
mov edx, ebx
and dl, 1
cmp cl, dl
jne 0x18000e804
xor bl, 1
or al, bl
xor al, 1
test al, 1
jne 0x18000e804
nop
mov rax, qword gs:[0x60]
mov rax, qword gs:[0x60]
jmp 0x18000e7f0
mov rax, qword gs:[0x60]
mov r14, qword [rax + 0x18]
mov r13, qword [r14 + 0x10]
add r14, 0x10
cmp r13, r14
je 0x18000ea32
mov ecx, dword [0x18002ca6c]
mov eax, dword [0x18002ca70]
lea ebp, [rcx - 1]
imul ebp, ecx
mov ecx, ebp
not ecx
or ebp, 0xa78fa1b1
mov ebx, ebp
not ebx
or ecx, 0x58705e4e
mov edx, ecx
not edx
and ebp, 0x4a98e95
and ebx, 0x5850504a
or ebx, ebp
and ecx, 0x4a98e95
and edx, 0xa3062120
or edx, ecx
xor edx, ebx
mov ecx, edx
not ecx
and ecx, 0xdba2be0
and edx, 0xf245d41f
or edx, ecx
mov ebp, edx
xor ebp, 0xaa358a51
mov ecx, edx
xor ecx, 0xaa358a50
and ecx, ebp
xor edx, 0x55ca75ae
and edx, 0xfffffffe
and ebp, 1
or ebp, edx
mov edx, ecx
not edx
mov ebx, ebp
not ebx
mov edi, edx
and edi, 0x4cbaba92
and ecx, 0xb345456d
or ecx, edi
or edx, ebx
and ebx, 0x4cbaba92
and ebp, 0xb345456d
or ebp, ebx
xor ebp, ecx
not edx
or edx, ebp
mov ecx, edx
xor ecx, 0x33459fee
and ecx, edx
or edx, 0xccba6011
mov ebp, edx
not ebp
mov ebx, ecx
not ebx
mov edi, edx
and edi, 0xd6d9a6cf
and ebp, 0x21041920
or ebp, edi
or edx, ebx
and ebx, 0xd6d9a6cf
and ecx, 0x29265930
or ecx, ebx
xor ecx, ebp
not edx
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0xccba6011
and edx, 0x33459fee
or edx, ecx
mov ecx, edx
not ecx
mov ebp, ecx
and ebp, 0x2c35ef4c
and edx, 0xd3ca10b3
or edx, ebp
xor edx, 0xd3ca10b3
or edx, ecx
cmp edx, 0xffffffff
sete r11b
setne cl
cmp eax, 0xa
setl dl
cmp eax, 9
setg al
and cl, al
and dl, r11b
or dl, cl
mov ecx, edx
xor cl, al
and cl, dl
xor r11b, al
xor r11b, cl
mov r8d, r11d
xor r8b, 1
and r11b, cl
mov eax, dword [0x18002ca8c]
mov r10d, dword [0x18002ca90]
lea ebp, [rax - 1]
imul ebp, eax
mov esi, ebp
not esi
mov eax, esi
and eax, 0x35a61362
mov edi, ebp
and edi, 0xca59ec9c
or edi, eax
mov eax, edi
xor eax, 0xc8116804
xor edi, 0x35a61363
mov ecx, ebp
xor ecx, 0xfffffffe
and ecx, ebp
mov edx, ecx
not edx
mov ebx, edi
and ebx, 0x224884b9
and eax, 0xddb77b46
or eax, ebx
or edi, edx
and edx, 0x224884b9
and ecx, 0xddb77b46
or ecx, edx
xor ecx, eax
not edi
or edi, ecx
not edi
and esi, 0xe05dfc8f
and ebp, 0x1fa20370
or ebp, esi
xor ebp, 0x1fa20370
mov eax, edi
and eax, ebp
xor ebp, edi
or ebp, eax
mov eax, ebp
not eax
and eax, 0x6f8d31d3
and ebp, 0x9072ce2c
or ebp, eax
xor ebp, 0x9072ce2c
setne al
sete cl
cmp r10d, 0xa
setl r9b
cmp r10d, 9
setg sil
test r11b, r8b
jne 0x18000ea39
xor r11b, r8b
test r11b, 1
jne 0x18000ea39
nop word [rax + rax]
jmp 0x18000ea30
xor eax, eax
jmp 0x18000ecaa
mov qword [rsp + 0x18], r14
mov ebx, esi
xor bl, cl
mov edx, ebx
xor dl, sil
and dl, bl
and al, r9b
and sil, cl
or sil, al
mov eax, edx
xor al, 1
xor dl, sil
xor sil, 1
or sil, al
xor sil, 1
mov eax, esi
and al, dl
xor sil, dl
or sil, al
movabs r9, 0xded7420759f75ca4
movabs rdx, 0x89597912a3da3b8d
movabs rbp, 0x868f886bd5f8ddff
movabs rdi, 0x79f337066e05485a
movabs rbx, 0x745ff696b6080611
movabs r11, 0x6d63f507100b9d7f
movabs r15, 0x370a743a8ff1dc7c
movabs rcx, 0x369c72c673edacb5
movabs r10, 0x2da5a6585a51f768
movabs r14, 0xcf563d10e8804c8
movabs r12, 0x8472c34e820b83
mov rax, qword [rsp + 8]
lea r8, [rax - 1]
mov qword [rsp + 0x10], r8
mov qword [rsp], r13
mov r13, r8
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp byte [r13 + 1], 0
lea r13, [r13 + 1]
jne 0x18000eb00
test sil, 1
je 0x18000eca0
sub r13, rdi
add r13, r9
add r13, rdi
sub r13, rdx
sub r13, r10
add r13, rdx
sub r13, rbp
sub r13, r9
add r13, rbp
add r13, rbx
movabs rax, 0x6f8ad5d1b602045c
sub r13, rax
sub r13, rbx
sub r13, qword [rsp + 8]
sub r13, rcx
add r13, rax
add r13, rcx
add r13, r10
movabs rbx, 0x6f7540794c63d4db
je 0x18000eca2
mov rax, qword [rsp]
mov r8, qword [rax + 0x60]
xor r9d, r9d
mov r10, r13
nop word cs:[rax + rax]
nop dword [rax]
movzx eax, word [r8 + r9*2]
mov rcx, qword [rsp + 8]
movsx ecx, byte [rcx + r9]
lea edx, [rax - 0x41]
lea edi, [rax + 0x20]
cmp dx, 0x1a
cmovae edi, eax
lea edx, [rcx - 0x41]
lea ebp, [rcx + 0x20]
cmp dl, 0x1a
cmovae ebp, ecx
cmp edi, ebp
jne 0x18000ec38
test ax, ax
je 0x18000eca2
movabs rax, 0x89b201d8f8688d46
mov rcx, rax
add rax, r12
sub rax, r10
sub rax, rcx
movabs rcx, 0x3e5cedd3f8df13e5
add rax, rcx
sub rax, r12
sub rax, rcx
mov rcx, r14
sub rcx, r15
sub rcx, r14
add rcx, r15
movabs rdx, 0xc8049a93bf2fd566
mov rdi, rdx
add rax, rdx
add rax, r11
add rax, rcx
movabs r10, 0xf16b389eede6bd99
mov rcx, r10
sub rcx, rbx
mov rdx, r11
sub rdx, rax
add rdx, rdi
add rdx, rcx
add rdx, rbx
not r10
add r10, rdx
add r9, 1
cmp r13, r9
jne 0x18000eb80
jmp 0x18000eca2
mov r13, qword [rsp]
mov r13, qword [r13]
cmp r13, qword [rsp + 0x18]
movabs rcx, 0xded7420759f75ca4
mov r9, rcx
movabs rdx, 0x89597912a3da3b8d
movabs rbp, 0x868f886bd5f8ddff
movabs rdi, 0x79f337066e05485a
movabs rbx, 0x745ff696b6080611
mov eax, 0
movabs rcx, 0x369c72c673edacb5
movabs r10, 0x2da5a6585a51f768
mov r8, qword [rsp + 0x10]
jne 0x18000eaea
jmp 0x18000ecaa
jmp 0x18000eca0
mov rax, qword [rsp]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret