Function at 0x18000bd00
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov qword [rsp + 0x18], rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
add rax, 0x10
cmp rcx, rax
je 0x18000bf72
mov qword [rsp + 8], rcx
mov qword [rsp + 0x28], rax
mov ebp, dword [0x18002aa6c]
mov r8d, dword [0x18002aa70]
lea edx, [rbp - 1]
imul edx, ebp
mov ebp, edx
not ebp
mov ebx, ebp
and ebx, 0xfffffffe
mov edi, edx
xor edi, 0xfffffffe
and edi, edx
mov esi, ebx
and esi, edi
xor edi, ebx
or edi, esi
and ebp, 0xb8f828f4
and edx, 0x4707d70b
or edx, ebp
mov ebp, edx
xor ebp, 0x4707d70b
xor edx, 0xb8f828f4
and edx, edi
not edi
and ebp, edi
or edx, ebp
xor edi, edx
test edi, edx
sete al
setne dl
cmp r8d, 9
setg r14b
cmp r8d, 0xa
setl bl
mov r9d, edx
xor r9b, bl
xor r9b, 1
and dl, bl
and r14b, al
or r14b, dl
mov edx, ebx
and dl, al
xor bl, al
or bl, dl
mov eax, ebx
xor al, r14b
xor r14b, 1
xor al, 1
or r14b, bl
xor r14b, 1
or r14b, al
xor r14b, r9b
mov r15d, r14d
not r15b
and r15b, 1
and r9b, r14b
mov ebx, dword [0x18002aa84]
mov r8d, dword [0x18002aa88]
lea ebp, [rbx - 1]
imul ebp, ebx
mov ebx, ebp
not ebx
mov edi, ebx
and edi, 0xa5ab8f7c
mov eax, ebp
and eax, 0x5a547082
or eax, edi
xor eax, 0x5a547082
mov edi, ebp
and edi, 1
or edi, eax
mov eax, edi
not eax
and ebx, 0x15179df8
and ebp, 0xeae86207
or ebp, ebx
mov ebx, ebp
xor ebx, 0xc2e02200
xor ebp, 0x15179df8
mov esi, edi
and esi, 0x2d0dc837
and eax, 0xd2f237c8
or eax, esi
or edi, ebp
and ebp, 0x2d0dc837
and ebx, 0xd2f237c8
or ebx, ebp
xor ebx, eax
not edi
or edi, ebx
cmp edi, 0xffffffff
sete r13b
setne byte [rsp + 7]
cmp r8d, 9
setg byte [rsp + 0x10]
cmp r8d, 0xa
setl r10b
mov eax, dword [0x18002aa8c]
mov ecx, dword [0x18002aa90]
lea ebp, [rax - 1]
imul ebp, eax
mov ebx, ebp
not ebx
mov r8d, ebp
or r8d, 0x9dd15584
mov esi, r8d
not esi
mov eax, ebp
xor eax, 0x622eaa7b
and eax, ebp
mov edi, eax
not edi
mov edx, r8d
and edx, 0x4fe3b1de
and esi, 0x200c0a21
or esi, edx
or r8d, edi
and edi, 0x4fe3b1de
and eax, 0xb01c4e21
or eax, edi
xor eax, esi
not r8d
or r8d, eax
mov eax, r8d
not eax
and eax, 0x9dd15585
and r8d, 0x622eaa7a
or r8d, eax
mov eax, r8d
not eax
mov edx, r8d
and edx, 0xf438f227
and eax, 0xbc70dd8
or eax, edx
or r8d, ebp
and ebp, 0xf438f227
and ebx, 0xbc70dd8
or ebx, ebp
xor ebx, eax
not r8d
or r8d, ebx
mov eax, r8d
not eax
and eax, 0xab81ba2a
and r8d, 0x547e45d5
or r8d, eax
xor r8d, 0x547e45d5
sete al
setne bpl
cmp ecx, 0xa
setl r12b
mov dword [rsp + 0x24], ecx
cmp ecx, 9
setg r11b
cmp r9b, r15b
jne 0x18000c042
xor r9b, 1
or r9b, r14b
xor r9b, 1
test r9b, 1
jne 0x18000c042
nop dword [rax]
jmp 0x18000bf70
mov eax, dword [0x18002aa8c]
mov ebx, dword [0x18002aa90]
lea ecx, [rax - 1]
imul ecx, eax
mov ebp, ecx
not ebp
mov edx, ebp
and edx, 0x10094053
mov eax, ecx
and eax, 0x801420a8
or eax, edx
xor eax, 0x801420a8
mov r8d, ecx
xor r8d, 0x901d60fb
and r8d, ecx
mov edx, eax
and edx, r8d
xor r8d, eax
or r8d, edx
mov eax, r8d
not eax
and eax, 0xcec9496
and r8d, 0xf3136b69
or r8d, eax
mov eax, r8d
xor eax, 0x630e0b93
xor r8d, 0x9cf1f46c
and ebp, r8d
and eax, ecx
or eax, ebp
xor r8d, eax
and r8d, eax
test r8d, r8d
setne dl
cmp ebx, 0xa
setl al
cmp ebx, 9
setg cl
mov ebx, ecx
and bl, dl
xor cl, dl
or cl, bl
xor cl, 1
mov ebx, edx
or bl, al
xor bl, 1
xor dl, al
not dl
and dl, al
mov eax, ebx
and al, dl
xor dl, bl
or dl, al
xor dl, cl
mov ebx, edx
xor bl, 1
and cl, bl
xor eax, eax
cmp cl, dl
jne 0x18000c2ab
xor cl, 1
or cl, bl
xor cl, 1
test cl, 1
jne 0x18000c2ab
nop dword [rax]
jmp 0x18000c040
mov ebx, r10d
mov cl, byte [rsp + 7]
xor bl, cl
xor bl, 1
mov dl, byte [rsp + 0x10]
or bl, dl
xor bl, 1
and r13b, dl
and r10b, cl
or r10b, r13b
xor r10b, bl
mov edx, r10d
not dl
and dl, bl
mov ecx, edx
and cl, r10b
xor dl, r10b
or dl, cl
mov ecx, r11d
xor cl, bpl
or bpl, r12b
or r12b, al
xor r12b, 1
or r12b, cl
or r11b, al
mov eax, ebp
xor al, r11b
or r11b, bpl
xor r11b, 1
or r11b, al
mov eax, r12d
xor al, r11b
xor r11b, 1
or r11b, r12b
mov ecx, r11d
xor cl, al
or r11b, al
xor r11b, 1
or r11b, cl
movabs r9, 0xf92f3e8a64d525ba
movabs rdi, 0xcb70b66be8a3eb31
movabs rbp, 0x823100d105db2155
movabs rsi, 0x7ce712775e58b21e
movabs rbx, 0x73952c10f38ff916
movabs r10, 0x66eaf07b47e0eda9
movabs r14, 0x50e7884e64e16c7d
movabs r15, 0x505dc2e84e99ab84
movabs r12, 0x3fb3b4d0becee0c4
movabs r13, 0x159b6e53869fdc36
mov rax, qword [rsp + 0x18]
add rax, 0xffffffffffffffff
mov rcx, qword [rsp + 8]
mov byte [rsp + 7], dl
mov qword [rsp + 0x10], rax
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000c130
test dl, 1
je 0x18000c290
mov qword [rsp + 8], rcx
add rax, rdi
mov rdx, r14
sub rdx, rax
add rdx, r15
sub r14, rdx
add r14, rsi
sub r14, rdi
sub r14, rsi
mov rax, rbp
sub rax, qword [rsp + 0x18]
sub rax, rbp
add r14, r10
add r14, rax
sub r14, r10
add r14, r9
add r14, r15
sub r14, r9
movabs rsi, 0xa668c41da3cf45fe
je 0x18000c2a2
mov rax, qword [rsp + 8]
mov r15, qword [rax + 0x60]
xor ebp, ebp
mov rax, r14
nop dword [rax + rax]
movzx r9d, word [r15 + rbp*2]
mov rcx, qword [rsp + 0x18]
movsx edx, byte [rcx + rbp]
lea ecx, [r9 - 0x41]
lea edi, [r9 + 0x20]
cmp cx, 0x1a
cmovae edi, r9d
lea ecx, [rdx - 0x41]
lea r10d, [rdx + 0x20]
cmp cl, 0x1a
cmovae r10d, edx
cmp edi, r10d
jne 0x18000c21a
test r9w, r9w
je 0x18000c2a2
movabs rcx, 0xf1bcb68a37e30009
sub rax, rcx
sub rax, rsi
add rax, rcx
sub rax, r13
mov rcx, rbx
not rcx
add rcx, rbx
add rcx, rax
add rcx, r13
add rcx, r12
add rcx, rsi
sub rcx, r12
add rbp, 1
mov rax, rcx
cmp r14, rbp
jne 0x18000c1a0
jmp 0x18000c2a2
test r11b, 1
mov rcx, qword [rsp + 8]
je 0x18000c2a0
mov rcx, qword [rcx]
cmp rcx, qword [rsp + 0x28]
mov dl, byte [rsp + 7]
movabs rbp, 0xf92f3e8a64d525ba
mov r9, rbp
movabs rdi, 0xcb70b66be8a3eb31
movabs rbp, 0x823100d105db2155
movabs rsi, 0x7ce712775e58b21e
movabs r10, 0x66eaf07b47e0eda9
movabs r14, 0x50e7884e64e16c7d
movabs r15, 0x505dc2e84e99ab84
mov rax, qword [rsp + 0x10]
jne 0x18000c130
mov ebx, dword [rsp + 0x24]
jmp 0x18000bfe6
jmp 0x18000c290
jmp 0x18000c2a0
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret