Function at 0x18000e280
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov ecx, dword [0x18002ca94]
mov esi, dword [0x18002ca98]
lea ebp, [rcx - 1]
imul ebp, ecx
mov edx, ebp
not edx
and ebp, 0xa6f35bc1
mov ecx, edx
and ecx, 0x590ca43e
or ecx, ebp
mov edi, ecx
xor edi, 0x590ca43e
xor ecx, 0xa07111c1
mov ebp, edi
and ebp, 0x727dd3c
and edx, 0xf8d822c3
or edx, ebp
mov ebp, edx
not ebp
and ebp, 0xf8d822c2
and edx, 0x727dd3d
or edx, ebp
and ecx, 0xa97531f9
mov ebx, edi
and ebx, 0x568ace06
or ebx, ecx
xor ebx, 0xa97531f8
and edi, 1
or edi, ebx
mov ecx, edi
not ecx
mov ebp, edx
not ebp
mov ebx, ebp
and ebx, 0xbe745453
and edx, 0x418babac
or edx, ebx
or ebp, edi
and edi, 0xbe745453
and ecx, 0x418babac
or ecx, edi
xor ecx, edx
not ebp
or ebp, ecx
mov ecx, ebp
mov edx, ebp
xor edx, 0x42455ce5
and edx, ebp
not ebp
and ebp, 0x685593f3
and ecx, 0x97aa6c0c
or ecx, ebp
mov ebp, ecx
xor ebp, 0x2000000
xor ecx, 0x404510e1
or ecx, 0xbdbaa31a
mov ebx, edx
not ebx
mov edi, ecx
and edi, 0x6085edbc
and ebp, 0x2401041
or ebp, edi
or ecx, ebx
and ebx, 0x6085edbc
and edx, 0x9f7a1243
or edx, ebx
xor edx, ebp
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xbdbaa31a
and ecx, 0x42455ce5
or ecx, edx
sete cl
setne al
cmp esi, 0xa
setl bl
cmp esi, 9
setg dl
xor dl, al
mov r8d, edx
xor r8b, 1
mov eax, ebx
or al, cl
xor bl, cl
xor bl, 1
mov ecx, eax
xor cl, bl
or bl, al
xor bl, 1
or bl, cl
mov eax, ebx
xor al, 1
and bl, al
mov ecx, eax
and cl, bl
xor bl, al
or bl, cl
mov ecx, ebx
xor cl, 1
and dl, r8b
mov r9d, ebx
and r9b, cl
xor dl, 1
mov eax, edx
xor al, r8b
or dl, r8b
xor dl, 1
or dl, al
mov eax, r9d
xor al, 1
xor r9b, bl
or al, cl
xor al, 1
or al, r9b
xor al, dl
mov edx, r8d
and dl, cl
xor cl, r8b
or cl, dl
xor cl, 1
mov edx, eax
and dl, cl
test dl, 1
jne 0x18000e432
xor al, cl
test al, 1
jne 0x18000e432
nop dword [rax + rax]
jmp 0x18000e430
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x10
mov eax, dword [0x18002ca7c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0xfffffffe
and ecx, 1
or ecx, edx
not ecx
mov edx, ecx
and edx, eax
xor ecx, eax
or ecx, edx
mov eax, ecx
not eax
and eax, 0x4d1b289e
and ecx, 0xb2e4d761
or ecx, eax
xor ecx, 0xb2e4d761
setne cl
cmp dword [0x18002ca80], 9
setg dl
mov eax, edx
and al, cl
xor dl, cl
or al, dl
xor al, 1
xor dl, al
mov ecx, edx
xor cl, 1
and al, cl
mov r8d, eax
xor r8b, 1
xor al, dl
or r8b, cl
mov ecx, dword [0x18002ca9c]
lea edi, [rcx - 1]
imul edi, ecx
mov edx, edi
or edx, 0x6454739a
mov ecx, edx
not ecx
mov ebp, edi
xor ebp, 0x9bab8c65
and ebp, edi
mov esi, edx
and esi, 0x37d3f032
and ecx, 0x88280c45
or ecx, esi
mov esi, ebp
not esi
or edx, esi
and esi, 0x37d3f032
and ebp, 0xc82c0fcd
or ebp, esi
xor ebp, ecx
not edx
or edx, ebp
mov ecx, edx
not ecx
and ecx, 0x6454739b
and edx, 0x9bab8c64
or edx, ecx
mov ecx, edx
not ecx
and ecx, 0xcc989fa0
and edx, 0x3367605f
or edx, ecx
mov ecx, edx
xor ecx, 0x1000201f
xor edx, 0xcc989fa0
mov ebp, edx
and ebp, 0x276f5de0
and ecx, 0xd890a21f
or ecx, ebp
mov ebx, edi
not ebx
or edx, edi
and edi, 0x276f5de0
and ebx, 0xd890a21f
or ebx, edi
xor r8b, 1
or r8b, al
mov byte [rsp + 7], r8b
xor ebx, ecx
mov edi, dword [0x18002caa0]
not edx
or edx, ebx
mov eax, edx
not eax
and eax, 0x1b67df01
and edx, 0xe49820fe
or edx, eax
xor edx, 0xe49820fe
setne r8b
sete r9b
cmp edi, 9
setg al
cmp edi, 0xa
setl r10b
mov ecx, r9d
xor cl, r8b
and cl, r9b
mov edx, ecx
xor dl, 1
or dl, cl
xor dl, 1
mov ebx, ecx
and bl, dl
xor dl, cl
or dl, bl
mov ecx, edx
xor cl, r10b
and dl, cl
and cl, r10b
mov ebx, edx
xor bl, 1
xor dl, cl
xor cl, 1
or cl, bl
xor cl, 1
or cl, dl
mov edx, r10d
xor r10b, r9b
and r9b, al
and dl, r8b
or dl, r9b
or al, r8b
xor al, 1
or al, r10b
xor al, 1
mov ebx, edx
and bl, al
xor al, dl
or al, bl
mov r8d, eax
xor r8b, 1
mov ebx, r8d
and bl, al
mov edx, ebx
xor dl, 1
xor bl, r8b
or dl, al
xor dl, 1
or dl, bl
xor dl, cl
or r8b, cl
xor cl, al
movabs r10, 0x35fbd434768e8679
xor cl, 1
xor r8b, 1
or r8b, cl
xor r8b, 1
mov eax, edx
and al, r8b
xor r8b, dl
or r8b, al
movabs r9, 0x2b569511266757ae
mov rax, qword [rsp + 8]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r15
mov r15, qword [r15]
cmp r15, qword [rsp + 0x18]
je 0x18000e822
mov rax, qword [rsp + 0x10]
test byte [rsp + 7], 1
je 0x18000e810
nop word [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000e670
test r8b, 1
je 0x18000e820
movabs rdx, 0xfa4ea5ccc69841d6
mov rcx, rdx
sub rcx, rax
sub rcx, rdx
movabs rax, 0xdc4c08aab019958e
sub rcx, rax
add rcx, qword [rsp + 8]
movabs rdx, 0xbf96aa9c25721d8c
mov rbp, rdx
add rcx, rdx
movabs rdx, 0xd5acf1c00912289a
mov rsi, rdx
sub rsi, rcx
add rsi, rbp
movabs rcx, 0x4a4e4813b5c03698
add rsi, rcx
sub rsi, rax
sub rsi, rcx
movabs rax, 0xe6182232519069da
add rsi, rax
sub rsi, rdx
sub rsi, rax
je 0x18000e7f8
mov r11, qword [r15 + 0x60]
xor r14d, r14d
mov r13, rsi
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, word [r11 + r14*2]
mov rax, qword [rsp + 8]
movsx ebx, byte [rax + r14]
mov ebp, ecx
cmp ecx, 0x41
jb 0x18000e730
lea ebp, [rcx + 0x20]
cmp cx, 0x5b
cmovae ebp, ecx
lea edi, [rbx - 0x41]
lea r12d, [rbx + 0x20]
cmp dil, 0x1a
cmovae r12d, ebx
sub ebp, r12d
setne bl
sete al
test cx, cx
sete dil
setne cl
and dil, al
xor al, cl
xor al, 1
mov edx, eax
xor dl, cl
and dl, al
and bl, cl
or bl, dil
xor bl, dl
mov ecx, ebx
not cl
and cl, dl
test cl, bl
jne 0x18000e7f0
xor cl, bl
jne 0x18000e7f0
add r13, r9
movabs rax, 0xe4846b8e118f4cc6
sub r13, rax
sub r13, r9
movabs rcx, 0xa94cce1b3a16cbc6
add r13, rcx
movabs rdx, 0x69d6611b99bdb060
mov rdi, rdx
add r13, rdx
sub r13, rcx
add r13, rax
mov rax, r10
not rax
add rax, r13
add rax, r10
movabs rcx, 0x7286582fc344a2a0
sub rax, rcx
movabs rdx, 0x71bc0fd6995444c3
sub rax, rdx
sub rax, rdi
add rax, rdx
add rax, rcx
add r14, 1
mov r13, rax
cmp rsi, r14
jne 0x18000e710
jmp 0x18000e7f8
test ebp, ebp
jne 0x18000e649
mov rax, qword [r15 + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000e810
jmp 0x18000e820
xor eax, eax
jmp 0x18000e7fc