Function at 0x180010540
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r11, rcx
mov rax, qword gs:[0x60]
mov r14, qword [rax + 0x18]
add r14, 0x10
mov ecx, dword [0x18002ea94]
mov r8d, dword [0x18002ea98]
lea ebp, [rcx - 1]
imul ebp, ecx
mov ecx, ebp
mov edx, ebp
xor edx, 0x476a73c2
and edx, ebp
not ebp
and ebp, 0x2240c0
and ecx, 0x47483302
or ecx, ebp
xor ecx, 0x47483302
mov ebp, ecx
and ebp, edx
xor edx, ecx
or edx, ebp
mov ecx, edx
not ecx
and ecx, 0xb8958c3d
and edx, 0x476a73c2
or edx, ecx
mov ebx, edx
not ebx
mov ecx, ebx
and ecx, 0x13f19fed
and edx, 0xec0e6012
or edx, ecx
mov eax, edx
xor eax, 0xec0e6012
xor edx, 0x13f19fed
mov edi, edx
or edi, 0xfe8f2f87
mov esi, edi
not esi
or ebx, 0x170d078
mov ebp, ebx
not ebp
and edi, 0x53915cc7
and esi, 0x608038
or esi, edi
and ebx, 0x53915cc7
and ebp, 0xac0e2300
or ebp, ebx
xor ebp, esi
mov ebx, ebp
not ebx
and ebx, 0xfe8f2f86
and ebp, 0x170d079
or ebp, ebx
and edx, 0x8578e502
mov ecx, eax
and ecx, 0x7a871afd
or ecx, edx
xor ecx, 0x8578e503
and eax, 1
or eax, ecx
not eax
mov ecx, ebp
and ecx, eax
xor eax, ebp
or eax, ecx
mov ecx, eax
mov edx, eax
xor edx, 0xac38d8c2
and edx, eax
not eax
and eax, 0xa0208802
and ecx, 0xc1850c0
or ecx, eax
xor ecx, 0xc1850c0
mov eax, ecx
and eax, edx
xor edx, ecx
or edx, eax
mov eax, edx
not eax
and eax, 0x53c7273d
and edx, 0xac38d8c2
or edx, eax
sete r9b
cmp r8d, 0xa
setl cl
cmp r8d, 9
setg bl
mov eax, ebx
xor al, r9b
not al
and al, r9b
or bl, r9b
mov edx, ebx
xor dl, al
xor al, 1
xor dl, 1
or al, bl
xor al, 1
or al, dl
mov edx, r9d
xor dl, cl
and cl, r9b
or cl, dl
xor cl, 1
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
mov ebx, ecx
xor bl, 1
mov edx, eax
xor dl, 1
and bl, dl
or dl, cl
xor dl, 1
and cl, al
or cl, bl
mov eax, edx
and al, cl
xor cl, dl
or cl, al
mov byte [rsp + 7], cl
mov ecx, dword [0x18002ea7c]
lea edi, [rcx - 1]
imul edi, ecx
mov ebx, edi
not ebx
mov ecx, ebx
or ecx, 0x30302bf3
mov edx, ecx
not edx
mov ebp, edi
or ebp, 0x4ccb5400
and ebp, 0x7cdb5522
mov eax, ebx
and eax, 0x202ad1
or eax, ebp
and ecx, 0x7cdb5522
and edx, 0x8304800c
or edx, ecx
xor edx, eax
mov eax, edx
not eax
and eax, 0xcfcfd40d
and edx, 0x30302bf2
or edx, eax
mov eax, edx
not eax
and ebx, eax
and edx, edi
or edx, ebx
xor eax, edx
test eax, edx
sete bl
cmp dword [0x18002ea80], 9
setg al
xor bl, al
mov r8d, ebx
xor r8b, 1
or al, r8b
mov ecx, eax
xor cl, 1
and cl, al
mov edx, eax
and dl, cl
xor cl, al
or cl, dl
mov edx, ecx
xor dl, 1
and dl, bl
and cl, r8b
or cl, dl
mov edx, eax
and dl, bl
xor al, bl
or al, dl
mov edx, eax
xor dl, cl
xor cl, 1
xor dl, 1
or cl, al
xor cl, 1
or cl, dl
mov byte [rsp + 6], cl
mov eax, dword [0x18002ea9c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov ebp, eax
and ebp, 0x49cbf95c
mov edx, ecx
and edx, 0xb63406a3
or edx, ebp
mov ebp, edx
not ebp
and ebp, 0x5fb42c5f
and edx, 0xa04bd3a0
or edx, ebp
mov ebp, edx
xor ebp, 0x400008dd
xor edx, 0x6205002
and edx, 0xafa07222
and ebp, 0x505f8ddd
or ebp, edx
mov edx, ebp
xor edx, 0x401388c9
xor ebp, 0xafa07222
mov ebx, ebp
and ebx, 0x976c6736
and edx, 0x689398c9
or edx, ebx
or ebp, ecx
and ecx, 0x976c6736
and eax, 0x689398c9
or eax, ecx
mov edi, dword [0x18002eaa0]
xor eax, edx
not ebp
or ebp, eax
cmp ebp, 0xffffffff
setne r8b
sete r9b
cmp edi, 9
setg cl
cmp edi, 0xa
setl r10b
mov eax, r9d
xor al, r8b
and al, r9b
mov ebx, eax
xor bl, 1
or al, bl
mov edx, ebx
xor dl, al
or al, bl
xor al, 1
or al, dl
xor al, 1
mov edx, eax
or dl, r10b
xor dl, 1
xor al, r10b
not al
and al, r10b
mov ebx, edx
and bl, al
xor al, dl
or al, bl
mov edx, ecx
xor dl, r9b
and dl, cl
and r8b, r10b
and cl, r9b
or cl, r8b
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
mov edx, ecx
not dl
and dl, cl
xor dl, 1
mov ebx, ecx
xor bl, dl
or dl, cl
xor dl, 1
or dl, bl
mov ecx, eax
xor cl, 1
mov ebx, edx
xor bl, 1
and dl, cl
and al, bl
or al, dl
mov edx, ecx
and dl, bl
xor bl, cl
or bl, dl
xor bl, 1
mov ecx, eax
and cl, bl
xor bl, al
or bl, cl
mov byte [rsp + 5], bl
mov r15, r11
lea rax, [r11 - 1]
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r14
mov qword [rsp + 8], r14
test byte [rsp + 7], 1
je 0x180010b30
mov rdi, qword [rsp + 8]
mov rdi, qword [rdi]
cmp rdi, qword [rsp + 0x18]
je 0x180010b52
mov rax, qword [rsp + 0x10]
test byte [rsp + 6], 1
je 0x180010b40
nop dword [rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x180010900
movabs rcx, 0x89c1352735526ba0
mov rdx, rcx
sub rax, rcx
movabs rbx, 0x2be57bb94a56e281
add rax, rbx
movabs rcx, 0x7ac8cf63b24f271f
mov rbp, rcx
add rax, rcx
mov rcx, rbx
sub rcx, rax
sub rcx, rdx
add rcx, r15
movabs rax, 0xe90f742f7117f85f
add rcx, rax
movabs rdx, 0x839e052f63945a21
mov r13, rdx
sub r13, rcx
add r13, rax
movabs rax, 0x6c07fdf1c57480cf
sub r13, rax
sub r13, rbp
add r13, rax
movabs rax, 0x7afe1ab71180610e
add r13, rax
sub r13, rdx
sub r13, rax
mov qword [rsp + 8], rdi
je 0x180010b56
test byte [rsp + 5], 1
je 0x180010b50
mov r9, qword [rdi + 0x60]
xor r14d, r14d
mov r11, r13
nop dword [rax]
movzx edi, word [r9 + r14*2]
test edi, edi
setne bl
sete dl
movsx esi, byte [r15 + r14]
lea ebp, [rdi - 0x41]
lea r10d, [rdi + 0x20]
cmp bp, 0x1a
cmovae r10d, edi
lea ebp, [rsi - 0x41]
lea edi, [rsi + 0x20]
cmp bpl, 0x1a
cmovae edi, esi
sub r10d, edi
sete dil
mov eax, edx
xor al, bl
and al, dl
xor dl, dil
mov r8d, eax
xor r8b, 1
mov esi, eax
and sil, r8b
mov ecx, esi
xor cl, 1
xor sil, al
or cl, r8b
xor cl, 1
or cl, sil
or r8b, al
xor r8b, 1
mov eax, ecx
and al, r8b
xor r8b, cl
or r8b, al
mov r12d, edi
mov eax, ebx
xor al, dil
or bl, dil
or dil, r8b
xor dil, 1
xor r12b, r8b
xor r12b, 1
and r12b, r8b
mov ecx, edi
and cl, r12b
xor r12b, dil
or r12b, cl
xor dl, 1
xor bl, 1
or bl, dl
xor bl, 1
mov ecx, eax
and cl, bl
xor bl, al
or bl, cl
mov eax, ebx
xor al, 1
mov edx, r12d
xor dl, 1
and al, dl
or dl, bl
mov ecx, edx
not cl
and cl, 1
and bl, r12b
or bl, al
mov eax, ebx
and al, 1
cmp cl, al
jne 0x180010b20
xor bl, 1
or dl, bl
xor dl, 1
test dl, 1
jne 0x180010b20
movabs rcx, 0xf51ac7f4094383fd
mov rax, rcx
movabs rdx, 0x5374812cc3ad4278
sub rax, rdx
sub rax, rcx
add rax, rdx
movabs rcx, 0x55ddf070faa89d31
add r11, rcx
movabs rdx, 0x1aa0ab80a80aad62
mov rbx, rdx
add r11, rdx
sub rcx, r11
movabs rbp, 0x3c482c6694b55a60
add rcx, rbp
add rcx, rax
movabs rax, 0x99fc1ac557afdab
mov rdi, rax
movabs rdx, 0x7605381964a8c7e
add rax, rdx
sub rdx, rax
mov rax, rbp
sub rax, rcx
sub rax, rbx
add rax, rdx
lea r11, [rdi + rax]
add r11, 0xffffffffffffffff
add r14, 1
cmp r13, r14
jne 0x1800109b0
jmp 0x180010b5d
test r10d, r10d
jne 0x1800108ce
jmp 0x180010b5d
jmp 0x180010b30
jmp 0x180010b40
jmp 0x180010b50
xor eax, eax
jmp 0x180010b66
test byte [rsp + 5], 1
je 0x180010b80
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x180010b80