Function at 0x18000d3f0
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov rdx, qword gs:[0x60]
mov r10, qword [rdx + 0x18]
add r10, 0x10
mov edx, dword [0x18002ba7c]
lea ebx, [rdx - 1]
imul ebx, edx
mov edx, ebx
not edx
and edx, 0x24e1ff55
and ebx, 0xdb1e00aa
or ebx, edx
mov edx, ebx
not edx
and edx, 0xfbd72959
and ebx, 0x428d6a6
or ebx, edx
mov ebp, ebx
xor ebp, 0x204820f3
xor ebx, 0xdf36d60c
mov edx, ebx
and edx, 0xd5955b00
and ebp, 0x2a6aa4ff
or ebp, edx
mov edx, ebp
xor edx, 0x2a6aa4ff
mov edi, ebp
xor edi, 0x5df63a0a
and edi, edx
or ebx, 0x8863610a
mov esi, edi
not esi
mov eax, esi
and eax, 0x1bca907
and edi, 0xfe4356f8
or edi, eax
mov eax, ebx
not eax
or esi, ebx
and ebx, 0x1bca907
and eax, 0x760016f0
or eax, ebx
xor eax, edi
not esi
or esi, eax
mov eax, esi
not eax
and eax, 0x6a2f0b7a
and esi, 0x95d0f485
or esi, eax
xor esi, 0x1db3958e
xor ebp, 0x85101b00
and ebp, 0x87781bd1
mov eax, edx
and eax, 0x7887e42e
or eax, ebp
xor eax, 0x87781bd0
and edx, 1
or edx, eax
not edx
mov eax, esi
and eax, edx
xor edx, esi
or edx, eax
mov eax, edx
not eax
and edx, 0x7d0a956b
and eax, 0x82f56a94
or eax, edx
xor eax, 0x7d0a956b
setne r8b
cmp dword [0x18002ba80], 0xa
setl bl
mov ebp, ebx
xor bpl, r8b
mov edx, ebx
xor dl, bpl
not dl
and dl, bpl
or r8b, bl
not bpl
and bpl, bl
mov eax, r8d
xor al, bpl
xor bpl, 1
xor al, 1
or bpl, r8b
xor bpl, 1
or bpl, al
xor dl, 1
xor bpl, 1
mov eax, edx
or al, bpl
xor bpl, dl
xor bpl, 1
mov r8d, eax
xor r8b, bpl
or bpl, al
mov eax, dword [0x18002ba94]
lea ebx, [rax - 1]
imul ebx, eax
mov edi, ebx
mov eax, ebx
xor eax, 0x59b64170
and eax, ebx
not ebx
and ebx, 0xec59885b
and edi, 0x13a677a4
or edi, ebx
mov ebx, edi
xor ebx, 0x10804100
xor edi, 0x48100050
or edi, 0xa649be8f
mov esi, eax
not esi
mov edx, edi
and edx, 0x6b279861
and ebx, 0x10904110
or ebx, edx
or edi, esi
and esi, 0x6b279861
and eax, 0x94d8679e
or eax, esi
xor eax, ebx
not edi
or edi, eax
mov eax, edi
not eax
and eax, 0xc85ee44d
and edi, 0x37a11bb2
or edi, eax
mov eax, edi
xor eax, 0x6e175ac2
mov ebx, edi
xor ebx, 0x91e8a53d
mov edx, ebx
and edx, 0xf45fc7bf
mov esi, edi
xor esi, 0x9a489d7d
and esi, eax
mov eax, edx
and eax, esi
xor esi, edx
or esi, eax
mov eax, esi
not eax
and eax, 0xba03841
and esi, 0xf45fc7be
or esi, eax
and ebx, 1
xor edi, 0x91e8a53c
or edi, ebx
not edi
mov eax, esi
and eax, edi
xor edi, esi
or edi, eax
mov eax, edi
not eax
and edi, 0xf2bbc11b
and eax, 0xd443ee4
or eax, edi
mov edx, eax
xor edx, 0x70a14110
xor eax, 0xd443ee4
mov ebx, eax
and ebx, 0x871e802b
and edx, 0x78e17fd4
or edx, ebx
xor bpl, 1
or bpl, r8b
xor edx, 0x871e802b
xor eax, edx
test eax, edx
mov eax, dword [0x18002ba98]
sete dl
setne r8b
cmp eax, 9
setg r11b
cmp eax, 0xa
setl al
or dl, al
xor al, r8b
mov r9d, eax
xor r9b, 1
xor r11b, r8b
mov ebx, edx
xor bl, r11b
xor r11b, 1
xor bl, 1
or r11b, dl
xor r11b, 1
or r11b, bl
mov edx, r11d
not dl
and dl, al
or al, r11b
and r11b, r9b
or r11b, dl
mov edx, eax
xor dl, r11b
xor r11b, 1
xor dl, 1
or r11b, al
xor r11b, 1
or r11b, dl
movabs r14, 0x5dc6ec6526fa1c1
lea rax, [rcx - 1]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], r10
mov qword [rsp], r10
mov rax, qword [rsp]
mov rax, qword [rax]
mov qword [rsp], rax
cmp rax, qword [rsp + 0x10]
je 0x18000dac3
mov r15, qword [rsp + 8]
test bpl, 1
je 0x18000daa0
nop word [rax + rax]
cmp byte [r15 + 1], 0
lea r15, [r15 + 1]
jne 0x18000d700
test r11b, 1
je 0x18000dab0
movabs rax, 0x22bd3c4328ee83a3
sub r15, rax
movabs rdx, 0xa6de31de6c1671b
mov rbx, rdx
sub r15, rdx
add r15, rax
movabs rax, 0x260c5ebc65005e38
mov rdx, rax
add r15, rax
movabs rax, 0xa6d782c957d8fda6
add r15, rax
sub r15, rdx
movabs rdx, 0x32d81283c81aa746
add r15, rdx
add r15, rbx
sub r15, rdx
movabs rdx, 0x7d7cf02ea6d6f69c
add r15, rdx
movabs rbx, 0x2859337040acea42
add r15, rbx
sub r15, rdx
movabs rdx, 0x5899b874c2304b6a
add r15, rdx
sub r15, rcx
sub r15, rdx
movabs rdx, 0x849d436d9455a536
sub r15, rdx
sub r15, rbx
add r15, rdx
movabs rdx, 0x44acd6cb2b3232f8
add r15, rdx
sub r15, rax
sub r15, rdx
je 0x18000d8f9
mov rax, qword [rsp]
mov r13, qword [rax + 0x60]
xor r8d, r8d
mov r9, r15
nop word cs:[rax + rax]
nop dword [rax]
movzx edi, word [r13 + r8*2]
movsx esi, byte [rcx + r8]
mov r10d, edi
cmp edi, 0x41
jb 0x18000d7ff
lea r10d, [rdi + 0x20]
cmp di, 0x5b
cmovae r10d, edi
lea eax, [rsi - 0x41]
lea edx, [rsi + 0x20]
cmp al, 0x1a
cmovae edx, esi
sub r10d, edx
setne sil
sete al
test di, di
sete dl
setne bl
mov edi, ebx
or sil, bl
and bl, al
xor dil, al
or dil, bl
or dl, al
mov eax, edx
xor al, sil
or sil, dl
xor sil, 1
or sil, al
mov eax, esi
xor al, 1
mov r12d, eax
and r12b, sil
xor r12b, 1
mov edx, esi
xor dl, r12b
or r12b, sil
xor r12b, 1
or r12b, dl
mov edx, r12d
xor r12b, 1
and r12b, dil
xor al, dil
xor dil, 1
and dl, dil
or r12b, dl
or sil, dil
xor sil, 1
or sil, al
mov eax, esi
not al
and al, 1
cmp r12b, al
jne 0x18000d8f0
xor r12b, 1
or r12b, sil
xor r12b, 1
test r12b, 1
jne 0x18000d8f0
movabs rax, 0x7670ec5f47637fe3
mov rdi, rax
sub r9, rax
movabs rax, 0x88153b32edb0ac9a
mov rbx, rax
sub r9, rax
movabs rdx, 0xbdc1388ce57b707f
mov rax, rdx
not rax
add rax, rdx
add rax, r9
add rax, rbx
add rax, r14
add rax, rdi
sub rax, r14
add r8, 1
mov r9, rax
cmp r15, r8
jne 0x18000d7e0
jmp 0x18000d8f9
test r10d, r10d
jne 0x18000d6d5
mov eax, dword [0x18002ba9c]
mov edi, dword [0x18002baa0]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
not eax
and edx, eax
mov ecx, eax
and ecx, edx
xor edx, eax
or edx, ecx
mov ebp, edx
xor ebp, 1
and ebp, edx
mov eax, edx
not eax
and eax, 0x7e2942c7
and edx, 0x81d6bd38
or edx, eax
mov ecx, edx
xor ecx, 0x8104b511
mov eax, ebp
not eax
xor edx, 0x7e2942c6
mov ebx, eax
and ebx, 0x1efb0828
and ebp, 0xe104f7d7
or ebp, ebx
or eax, edx
and edx, 0x1efb0828
and ecx, 0xe104f7d7
or ecx, edx
xor ecx, ebp
not eax
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x4ccc14
mov edx, eax
and edx, 0x40131320
or edx, ecx
xor edx, 0x40131320
and eax, 0xbfa020cb
or eax, edx
mov ecx, eax
not ecx
and ecx, 0xbfa020cb
and eax, 0x405fdf34
or eax, ecx
mov ebp, eax
not ebp
and eax, 0x78cf897
and ebp, 0xf8730768
or ebp, eax
xor ebp, 0xf8730768
sete cl
setne r8b
cmp edi, 0xa
setl r9b
cmp edi, 9
setg al
mov edx, eax
and cl, al
and al, r8b
xor dl, r8b
or dl, al
mov ebx, edx
not bl
and r9b, r8b
or cl, r9b
mov eax, ecx
xor al, 1
and cl, dl
or dl, al
xor dl, 1
and al, bl
or al, cl
mov ecx, edx
and cl, al
xor al, dl
or al, cl
nop word cs:[rax + rax]
nop dword [rax]
test al, 1
je 0x18000da00
mov rax, qword [rsp]
mov rax, qword [rax + 0x30]
test ebp, ebp
sete dl
setne r10b
cmp edi, 0xa
setl r8b
cmp edi, 9
setg cl
mov r9d, r10d
and r9b, cl
mov ebx, r8d
and bl, dl
or bl, r9b
xor cl, bl
and cl, bl
or r10b, r8b
xor r10b, 1
xor dl, r8b
and dl, r8b
mov ebx, r10d
and bl, dl
xor dl, r10b
or dl, bl
mov r8d, ecx
xor r8b, 1
mov ebx, edx
xor bl, 1
and dl, r8b
and cl, bl
or cl, dl
mov r9d, ecx
and r9b, 1
mov edx, r8d
and dl, bl
xor bl, r8b
or bl, dl
mov edx, ebx
not dl
and dl, 1
cmp r9b, dl
jne 0x18000dab2
xor cl, 1
or cl, bl
xor cl, 1
test cl, 1
jne 0x18000dab2
nop dword [rax + rax]
jmp 0x18000da90
jmp 0x18000daa0
jmp 0x18000dab0
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, dword [0x18002ba9c]
mov edi, dword [0x18002baa0]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe540aa83
mov edx, eax
and edx, 0x1abf557c
or edx, ecx
mov ecx, edx
xor ecx, 0x1abf557c
mov ebp, ecx
and ebp, 0x22d5953d
and eax, 0xdd2a6ac2
or eax, ebp
mov ebp, eax
not ebp
and ebp, 0x5ccf9697
and eax, 0xa3306968
or eax, ebp
mov ebp, eax
xor ebp, 0x1414844
and ecx, 1
xor edx, 0x1abf557d
or edx, ecx
mov ecx, edx
not ecx
xor eax, 0x7e1a03ab
mov ebx, eax
and ebx, 0xa2a4b438
and ebp, 0x5d5b4bc7
or ebp, ebx
or eax, edx
and edx, 0xa2a4b438
and ecx, 0x5d5b4bc7
or ecx, edx
xor ecx, ebp
not eax
or eax, ecx
mov ecx, eax
xor ecx, 0x41d3f2a6
and ecx, eax
or eax, 0xbe2c0d59
mov edx, eax
not edx
mov ebp, ecx
not ebp
mov ebx, eax
and ebx, 0xae5da9dd
and edx, 0x41825222
or edx, ebx
or eax, ebp
and ebp, 0xae5da9dd
and ecx, 0x51a25622
or ecx, ebp
xor ecx, edx
not eax
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0xbe2c0d59
and eax, 0x41d3f2a6
or eax, ecx
mov ebp, eax
not ebp
mov ecx, ebp
and ecx, 0xcaaee4e6
and eax, 0x35511b19
or eax, ecx
xor eax, 0xcaaee4e6
xor ebp, eax
and ebp, eax
sete r8b
setne r10b
cmp edi, 9
setg r9b
cmp edi, 0xa
setl al
mov ecx, r10d
xor cl, r8b
and cl, r10b
mov edx, eax
xor dl, cl
not dl
and dl, cl
or cl, al
xor cl, 1
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
and r10b, al
and r9b, r8b
or r9b, r10b
mov edx, eax
and dl, r8b
xor al, r8b
or al, dl
xor al, 1
mov edx, r9d
and dl, al
xor al, r9b
or al, dl
mov edx, eax
xor dl, 1
and al, dl
mov ebx, edx
and bl, al
xor al, dl
or al, bl
mov edx, eax
xor dl, 1
mov ebx, ecx
xor bl, 1
and al, bl
and cl, dl
or cl, al
mov eax, ebx
and al, dl
xor bl, dl
or bl, al
xor bl, 1
mov edx, ecx
and dl, bl
xor eax, eax
test dl, 1
jne 0x18000da0c
xor cl, bl
test cl, 1
jne 0x18000da0c
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x18000dc60