Function at 0x180010850
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 8], rcx
mov edx, dword [0x18002ea8c]
mov r8d, dword [0x18002ea90]
lea ebx, [rdx - 1]
imul ebx, edx
mov ebp, ebx
mov edx, ebx
xor edx, 0x7296b8f4
and edx, ebx
not ebx
and ebx, 0x40803854
and ebp, 0x321680a0
or ebp, ebx
xor ebp, 0x321680a0
mov ebx, ebp
and ebx, edx
xor edx, ebp
or edx, ebx
mov ebp, edx
not ebp
and ebp, 0xa249555b
and edx, 0x5db6aaa4
or edx, ebp
mov edi, edx
xor edi, 0x27200200
xor edx, 0xd0dfedaf
mov ebp, edx
and ebp, 0x885c71d8
and edi, 0x77a38e27
or edi, ebp
mov r9d, edi
xor r9d, 0x77a38e27
mov ebx, edi
xor ebx, 0x34900982
and ebx, r9d
or edx, 0xbccc785a
mov eax, edx
not eax
mov ebp, ebx
not ebp
mov esi, ebp
and esi, 0x875f34b2
and ebx, 0x78a0cb4d
or ebx, esi
or ebp, edx
and edx, 0x875f34b2
and eax, 0x40208305
or eax, edx
xor eax, ebx
not ebp
or ebp, eax
mov eax, ebp
not eax
and eax, 0x433387a4
and ebp, 0xbccc785b
or ebp, eax
and r9d, 1
xor edi, 0x77a38e26
or edi, r9d
mov eax, edi
not eax
mov edx, ebp
not edx
mov ebx, edx
and ebx, 0x91663778
and ebp, 0x6e99c887
or ebp, ebx
or edx, edi
and edi, 0x91663778
and eax, 0x6e99c887
or eax, edi
xor eax, ebp
not edx
or edx, eax
mov eax, edx
not eax
and eax, 0xb858ae76
and edx, 0x47a75189
or edx, eax
mov eax, edx
xor eax, 0x4200181
xor edx, 0xa0582202
and edx, 0xe3df720a
and eax, 0x1c208df5
or eax, edx
xor eax, 0xe3df720a
setne r9b
cmp r8d, 9
setg dl
cmp r8d, 0xa
setl r8b
mov eax, r8d
xor al, r9b
not al
and al, r9b
or r8b, r9b
mov ebx, r8d
xor bl, al
xor al, 1
xor bl, 1
or al, r8b
xor al, 1
or al, bl
mov ebx, edx
xor bl, r9b
or dl, r9b
xor dl, 1
or dl, bl
xor dl, 1
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
mov r8d, edx
xor r8b, 1
mov ebx, r8d
and bl, dl
xor r8b, bl
xor bl, 1
or bl, dl
xor bl, 1
or bl, r8b
xor bl, al
mov edx, ebx
xor dl, 1
and dl, al
mov eax, edx
and al, bl
test al, 1
jne 0x180010a22
xor dl, bl
test dl, 1
jne 0x180010a22
nop word cs:[rax + rax]
nop
jmp 0x180010a20
mov rax, qword gs:[0x60]
mov r12, qword [rax + 0x18]
mov r15, qword [r12 + 0x10]
add r12, 0x10
cmp r15, r12
je 0x180010bf2
mov edx, dword [0x18002ea74]
mov r8d, dword [0x18002ea78]
lea ebx, [rdx - 1]
imul ebx, edx
mov edx, ebx
not edx
mov edi, edx
and edi, 0xc35370
mov ebp, ebx
xor ebp, 0xc35370
and ebp, ebx
mov esi, edi
and esi, ebp
xor ebp, edi
or ebp, esi
mov edi, ebp
not edi
and edi, 0x5dc1cdb1
and ebp, 0xa23e324e
or ebp, edi
mov edi, ebp
xor edi, 0xa2fd613f
xor ebp, 0x59021880
mov esi, edi
and esi, 0x86a1e67e
and ebp, 0x795e1981
or ebp, esi
or edi, ebx
and ebx, 0x86a1e67e
and edx, 0x795e1981
or edx, ebx
xor edx, ebp
not edi
or edi, edx
mov edx, edi
not edx
and edx, 0x7837dc2c
and edi, 0x87c823d3
or edi, edx
xor edi, 0x87c823d3
sete r10b
setne r11b
cmp r8d, 0xa
setl al
cmp r8d, 9
setg bl
mov edx, ebx
and dl, r11b
xor bl, r11b
or bl, dl
mov r8d, ebx
xor r8b, 1
xor al, r10b
mov r14d, eax
xor r14b, 1
mov edx, r14d
and dl, al
mov r10d, r14d
xor r10b, dl
xor dl, 1
or dl, al
xor dl, 1
or dl, r10b
and r8b, dl
xor dl, 1
and dl, bl
or dl, r8b
mov eax, ebx
and al, r14b
xor r14b, bl
or r14b, al
xor r14b, 1
mov r10d, edx
and r10b, r14b
mov eax, dword [0x18002ea94]
mov r11d, dword [0x18002ea98]
lea r8d, [rax - 1]
imul r8d, eax
mov ebx, r8d
not ebx
mov eax, r8d
or eax, 0x469e4755
mov ebp, eax
not ebp
mov edi, ebx
or edi, 0xb961b8aa
mov esi, edi
not esi
and eax, 0x3382d4b8
and ebp, 0x88612802
or ebp, eax
and edi, 0x3382d4b8
and esi, 0x441c0345
or esi, edi
xor esi, ebp
mov eax, esi
not eax
and eax, 0x469e4754
and esi, 0xb961b8ab
or esi, eax
mov eax, esi
not eax
mov edi, eax
and edi, 0xfe1b5b47
and esi, 0x1e4a4b8
or esi, edi
and r8d, 0xfe1b5b47
and ebx, 0x1e4a4b8
or ebx, r8d
xor ebx, esi
not ebx
or ebx, eax
cmp ebx, 0xffffffff
sete r8b
setne sil
cmp r11d, 0xa
setl r9b
cmp r11d, 9
setg r11b
test r10b, 1
jne 0x180010bf9
xor dl, r14b
test dl, 1
jne 0x180010bf9
nop word [rax + rax]
jmp 0x180010bf0
xor eax, eax
jmp 0x180010dea
xor r11b, sil
mov eax, r11d
not al
mov ebx, r9d
and bl, r8b
xor r9b, r8b
or bl, r9b
xor bl, 1
mov edx, r9d
and dl, bl
xor bl, r9b
or bl, dl
mov edx, ebx
xor dl, 1
and al, r11b
mov r9d, ebx
and r9b, dl
xor al, 1
mov ecx, r11d
xor cl, al
or al, r11b
xor al, 1
or al, cl
xor bl, r9b
xor r9b, 1
or r9b, dl
xor r9b, 1
or r9b, bl
xor r9b, al
mov eax, r11d
xor al, dl
or dl, r11b
xor dl, 1
or dl, al
mov eax, edx
xor al, r9b
xor r9b, 1
xor al, 1
or r9b, dl
xor r9b, 1
or r9b, al
movabs rax, 0xff3a84a393ccdb07
movabs r10, 0xde524b68386b74e1
movabs r11, 0xbefad7d264797942
movabs rsi, 0xb0b4bc6cbc96d30a
movabs rdi, 0xa266ad903472b400
movabs rbp, 0x9981b31b3123e808
movabs rbx, 0x79c8675ed55f2e64
movabs rdx, 0x50cd75d1b4e4dc7f
movabs r8, 0x1592504b80005044
mov r14, qword [rsp + 8]
lea r13, [r14 - 1]
lea rcx, [r8 + rax]
sub r8, rcx
sub r8, r14
add r8, rax
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], r13
nop dword [rax + rax]
cmp byte [r13 + 1], 0
lea r13, [r13 + 1]
jne 0x180010cf0
test r9b, 1
je 0x180010de0
mov qword [rsp], r15
add r13, rbp
add r13, rdx
sub r13, rbp
add r13, r8
sub r13, rdx
je 0x180010de2
mov rax, qword [rsp]
mov r14, qword [rax + 0x60]
xor r15d, r15d
mov rbp, r13
nop dword [rax]
movzx r8d, word [r14 + r15*2]
mov rax, qword [rsp + 8]
movsx ecx, byte [rax + r15]
lea edx, [r8 - 0x41]
lea r12d, [r8 + 0x20]
cmp dx, 0x1a
cmovae r12d, r8d
lea edx, [rcx - 0x41]
lea eax, [rcx + 0x20]
cmp dl, 0x1a
cmovae eax, ecx
cmp r12d, eax
jne 0x180010d98
test r8w, r8w
je 0x180010de2
sub rbp, rbx
sub rbp, rdi
add rbp, rbx
add rbp, r11
sub rbp, r10
sub rbp, r11
add rbp, rdi
mov rax, rsi
not rax
add rax, rbp
add rax, rsi
add rax, r10
add r15, 1
mov rbp, rax
cmp r13, r15
jne 0x180010d30
jmp 0x180010de2
mov r15, qword [rsp]
mov r15, qword [r15]
mov r12, qword [rsp + 0x20]
cmp r15, r12
movabs rbp, 0x9981b31b3123e808
movabs rdx, 0x50cd75d1b4e4dc7f
mov r8, qword [rsp + 0x18]
mov r13, qword [rsp + 0x10]
mov eax, 0
jne 0x180010cf0
jmp 0x180010dea
jmp 0x180010de0
mov rax, qword [rsp]
mov rax, qword [rax + 0x30]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret