Function at 0x18000d560
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov eax, dword [0x18002ba8c]
lea ebp, [rax - 1]
imul ebp, eax
mov edx, ebp
xor edx, 0xe6a0f134
and edx, ebp
not ebp
and ebp, 0xe6a0f134
mov eax, ebp
and eax, edx
xor edx, ebp
or edx, eax
mov eax, edx
not eax
and eax, 0x8c91dc56
and edx, 0x736e23a9
or edx, eax
mov ebx, edx
xor ebx, 0x95ced29d
mov eax, edx
xor eax, 0x48100c02
and eax, 0xc9da5c9a
xor edx, 0x97def19d
and edx, ebx
and ebx, 0x3625a365
or ebx, eax
mov eax, ebx
xor eax, 0x3625a365
xor ebx, 0xc9da5c9a
mov ebp, ebx
or ebp, 0xfdefdcff
mov edi, ebp
not edi
mov esi, edx
not esi
or ebp, esi
and esi, 0x800c4809
and edx, 0x7ff3b7f6
or edx, esi
or edi, 0x800c4809
xor edi, edx
not ebp
or ebp, edi
mov edx, ebp
not edx
and edx, 0x7a2c3163
and ebp, 0x85d3ce9c
or ebp, edx
xor ebp, 0x87c3ed9d
and ebx, 0xa7881bf5
mov edx, eax
and edx, 0x5877e40a
or edx, ebx
xor edx, 0xa7881bf4
and eax, 1
or eax, edx
not eax
mov edx, ebp
and edx, eax
xor eax, ebp
or eax, edx
mov ebp, eax
not ebp
mov edx, ebp
and edx, 0x85cd16c2
and eax, 0x20020035
or eax, edx
mov ebx, eax
xor ebx, 0x30
xor eax, 0xaecf480
or ebp, 0xa5cf16f7
mov edx, ebp
not edx
and eax, 0x2aeef485
and ebx, 0x85010272
or ebx, eax
and ebp, 0x2aeef485
and edx, 0x50100908
or edx, ebp
xor edx, ebx
mov eax, edx
not eax
and eax, 0x708e1b8d
and edx, 0x8f71e472
or edx, eax
mov eax, edx
xor eax, 0x290b081
xor edx, 0xd5410d7a
mov ebp, edx
and ebp, 0x6d2e4226
and eax, 0x92d1bdd9
or eax, ebp
xor eax, 0x6d2e4226
xor edx, eax
test edx, eax
sete al
cmp dword [0x18002ba90], 9
setg dl
mov ebx, edx
xor bl, al
xor bl, 1
mov r8d, ebx
or r8b, dl
and bl, al
or dl, al
xor dl, 1
mov eax, ebx
and al, dl
xor dl, bl
or dl, al
mov eax, edx
and dl, r8b
xor r8b, 1
xor al, 1
mov ebx, r8d
xor bl, al
and bl, r8b
and al, r8b
or al, dl
mov edx, ebx
and dl, al
xor al, bl
or al, dl
test al, 1
je 0x18000d722
mov rdx, qword gs:[0x60]
mov rdx, qword [rdx + 0x18]
add rdx, 0x10
test al, 1
jne 0x18000d72d
mov rcx, qword gs:[0x60]
jmp 0x18000d70d
mov r8, qword [rdx]
cmp r8, rdx
je 0x18000d972
mov ebx, dword [0x18002ba74]
mov r9d, dword [0x18002ba78]
lea esi, [rbx - 1]
imul esi, ebx
mov eax, esi
not eax
mov edi, eax
and edi, 0x6028a146
mov ebp, esi
and ebp, 0x82800489
or ebp, edi
xor ebp, 0x82800489
mov ebx, esi
and ebx, 0x1d575a30
or ebx, ebp
mov ebp, ebx
not ebp
and ebp, 0xaa4ce712
and ebx, 0x55b318ed
or ebx, ebp
mov ebp, ebx
xor ebp, 0x24189120
and eax, 0x7b64b90e
and esi, 0x849b46f1
or esi, eax
mov eax, esi
xor eax, 0x49840f0
xor ebx, 0x48e442dc
mov edi, ebx
and edi, 0xdb472e03
and ebp, 0x24b8d1fc
or ebp, edi
xor esi, 0x5b442802
and esi, 0xdb472e03
and eax, 0x24b8d1fc
or eax, esi
xor eax, ebp
not eax
or eax, ebx
cmp eax, 0xffffffff
setne al
cmp r9d, 9
setg r10b
cmp r9d, 0xa
setl bl
xor bl, al
xor bl, 1
or bl, r10b
xor r10b, al
mov r9d, r10d
xor r9b, 1
mov eax, r10d
and al, r9b
mov r14d, eax
xor r14b, 1
or r14b, r9b
xor r9b, bl
xor bl, 1
xor al, r10b
xor r14b, 1
or r14b, al
xor r14b, bl
mov r11d, r14d
and r11b, 1
or r10b, bl
xor r10b, 1
or r10b, r9b
mov r15d, r10d
not r15b
and r15b, 1
mov eax, dword [0x18002ba94]
mov r9d, dword [0x18002ba98]
lea esi, [rax - 1]
imul esi, eax
mov eax, esi
not eax
mov edi, eax
and edi, esi
mov ebx, edi
not ebx
mov ebp, esi
and ebp, 0x83d2d88
and eax, 0xf7c2d277
or eax, ebp
or esi, ebx
and ebx, 0x83d2d88
and edi, 0xf7c2d277
or edi, ebx
xor edi, eax
not esi
or esi, edi
mov eax, esi
not eax
mov edi, eax
or edi, 1
mov ebx, edi
not ebx
and eax, 0x6baeb3b0
and esi, 0x94514c4f
or esi, eax
mov eax, esi
xor eax, 0x4004402
xor esi, 0x6baeb3b1
mov ebp, edi
and ebp, 0xd2538afc
and ebx, 0x2dac7502
or ebx, ebp
or edi, esi
and esi, 0xd2538afc
and eax, 0x2dac7503
or eax, esi
xor eax, ebx
not edi
or edi, eax
mov esi, edi
mov eax, edi
xor eax, 0x645ad0e
and eax, edi
not edi
and edi, 0x4412108
and esi, 0x2048c06
or esi, edi
mov edi, esi
xor edi, 0x2008806
xor esi, 0xfdfb73f9
mov ebx, eax
not ebx
mov ebp, esi
and ebp, 0xa4ee6528
and edi, 0x2018806
or edi, ebp
or esi, ebx
and ebx, 0xa4ee6528
and eax, 0x5b119ad7
or eax, ebx
xor eax, edi
not esi
or esi, eax
mov eax, esi
not eax
and eax, 0xf9ba52f1
and esi, 0x645ad0e
or esi, eax
mov eax, esi
not eax
and esi, 0xc0c72485
and eax, 0x3f38db7a
or eax, esi
xor eax, 0x3f38db7a
sete sil
setne dil
cmp r9d, 0xa
setl bl
cmp r9d, 9
setg r9b
cmp r11b, r15b
jne 0x18000d979
xor r14b, 1
or r14b, r10b
xor r14b, 1
test r14b, 1
jne 0x18000d979
nop word [rax + rax]
jmp 0x18000d970
xor eax, eax
jmp 0x18000db3a
mov eax, edi
and al, r9b
or dil, bl
and bl, sil
or bl, al
mov r10d, ebx
xor r10b, r9b
and r10b, bl
xor dil, 1
or r9b, sil
xor r9b, 1
mov eax, edi
and al, r9b
xor r9b, dil
or r9b, al
mov r11d, r10d
xor r11b, 1
mov edi, r9d
xor dil, 1
mov ebx, edi
and bl, r9b
mov esi, edi
and sil, bl
xor bl, dil
xor dil, r11b
and r11b, r10b
xor r11b, 1
mov eax, r10d
xor al, r11b
or r11b, r10b
xor r11b, 1
or r11b, al
or bl, sil
mov eax, r11d
xor al, 1
and al, bl
xor bl, 1
and bl, r11b
or bl, al
or r9b, r10b
xor r9b, 1
or r9b, dil
xor r9b, 1
mov eax, ebx
and al, r9b
xor r9b, bl
or r9b, al
movabs r11, 0xbc3d2d0308c15543
movabs rbx, 0x79b4c858f989cccf
movabs r13, 0x4d039674c1b28fb3
movabs r12, 0x1a13f8b2a4ac89bc
movabs rsi, 0xc2a58d1460a22cf
mov rax, qword [rsp + 8]
lea rbp, [rax - 1]
mov rcx, rbx
sub rcx, rax
add rcx, rsi
sub rcx, rbx
sub rcx, rsi
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x10], rcx
mov rdi, rbp
nop dword [rax]
cmp byte [rdi + 1], 0
lea rdi, [rdi + 1]
jne 0x18000da60
test r9b, 1
je 0x18000db30
mov qword [rsp], r8
add rdi, rcx
je 0x18000db32
mov rax, qword [rsp]
mov r10, qword [rax + 0x60]
xor ebx, ebx
mov rbp, rdi
nop
movzx r14d, word [r10 + rbx*2]
mov rax, qword [rsp + 8]
movsx r8d, byte [rax + rbx]
lea r15d, [r14 - 0x41]
lea ecx, [r14 + 0x20]
cmp r15w, 0x1a
cmovae ecx, r14d
lea eax, [r8 - 0x41]
lea esi, [r8 + 0x20]
cmp al, 0x1a
cmovae esi, r8d
cmp ecx, esi
jne 0x18000db04
test r14w, r14w
je 0x18000db32
add rbp, r12
movabs rax, 0xa6a1f3d04f548fff
mov rcx, rax
add rbp, rax
mov rax, r13
sub rax, rbp
add rax, rcx
mov rcx, r13
sub rcx, rax
add rcx, r11
sub rcx, r12
mov rbp, r11
not rbp
add rbp, rcx
add rbx, 1
cmp rdi, rbx
jne 0x18000da90
jmp 0x18000db32
mov r8, qword [rsp]
mov r8, qword [r8]
cmp r8, rdx
mov rbp, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
mov eax, 0
jne 0x18000da59
jmp 0x18000db3a
jmp 0x18000db30
mov rax, qword [rsp]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret