Function at 0x18000bf00
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov eax, dword [0x18002aa94]
mov edx, dword [0x18002aa98]
lea ebp, [rax - 1]
imul ebp, eax
mov ecx, ebp
mov eax, ebp
xor eax, 0xe6f0a9c9
and eax, ebp
not ebp
and ebp, 0xe0002108
and ecx, 0x6f088c1
or ecx, ebp
xor ecx, 0x6f088c1
mov ebp, ecx
and ebp, eax
xor eax, ecx
or eax, ebp
mov ecx, eax
not ecx
and ecx, 0x190f5636
and eax, 0xe6f0a9c9
or eax, ecx
mov ecx, eax
not ecx
mov ebp, eax
and ebp, 0xfffffffe
and ecx, 0x9294f53f
and eax, 0x6d6b0ac0
or eax, ecx
xor eax, 0x6d6b0ac1
mov ecx, ebp
and ecx, eax
xor eax, ebp
or eax, ecx
mov ecx, eax
not ecx
and eax, 0xa72510e1
and ecx, 0x58daef1e
or ecx, eax
xor ecx, 0xa72510e1
setne r8b
sete r10b
cmp edx, 9
setg al
cmp edx, 0xa
setl r9b
mov ecx, r9d
xor cl, al
and cl, r9b
mov r11d, r10d
xor r11b, r8b
and r11b, r10b
mov edx, ecx
xor dl, 1
mov ebx, edx
and bl, cl
mov esi, edx
and sil, bl
xor bl, dl
or bl, sil
or dl, cl
mov ecx, ebx
xor cl, dl
or dl, bl
xor dl, 1
or dl, cl
xor dl, 1
mov ecx, edx
xor cl, r11b
not cl
and cl, r11b
or dl, r11b
xor dl, 1
mov ebx, ecx
and bl, dl
xor dl, cl
or dl, bl
mov ecx, eax
xor cl, r10b
and cl, al
and r8b, r9b
and al, r10b
or al, r8b
mov ebx, ecx
xor bl, 1
xor cl, al
xor al, 1
or al, bl
xor al, 1
or al, cl
mov ecx, eax
xor cl, 1
and al, cl
mov ebx, ecx
and bl, al
xor al, cl
or al, bl
mov ebx, edx
xor bl, 1
and bl, al
xor al, 1
mov ecx, edx
xor cl, al
and cl, dl
mov r8d, ecx
and r8b, 1
and al, dl
or al, bl
mov edx, eax
and dl, 1
cmp r8b, dl
jne 0x18000c062
xor cl, 1
xor al, 1
or al, cl
xor al, 1
test al, 1
jne 0x18000c062
nop dword [rax + rax]
jmp 0x18000c060
mov rax, qword gs:[0x60]
mov r13, qword [rax + 0x18]
add r13, 0x10
mov eax, dword [0x18002aa7c]
mov edx, dword [0x18002aa80]
lea ebp, [rax - 1]
imul ebp, eax
mov eax, ebp
not eax
mov ecx, eax
and ecx, ebp
mov ebx, ecx
not ebx
mov edi, ebp
and edi, 0x1890cb53
and eax, 0xe76f34ac
or eax, edi
or ebp, ebx
and ebx, 0x1890cb53
and ecx, 0xe76f34ac
or ecx, ebx
xor ecx, eax
not ebp
or ebp, ecx
mov ecx, ebp
not ecx
mov ebx, ebp
xor ebx, 0x74f3c51c
and ebx, ecx
mov eax, ebp
and eax, 0x8b0c3ae3
mov edi, ebx
and edi, eax
xor eax, ebx
or eax, edi
mov ebx, eax
not ebx
and ebx, 0x8e399270
and eax, 0x71c66d8f
or eax, ebx
xor eax, 0x535a892
and ecx, 1
xor ebp, 0xfffffffe
or ebp, ecx
mov ecx, ebp
not ecx
and ecx, 0xb0872a29
and ebp, 0x4f78d5d6
or ebp, ecx
xor ebp, 0x4f78d5d6
mov ecx, eax
and ecx, ebp
xor ebp, eax
or ebp, ecx
mov eax, ebp
not eax
mov ecx, eax
and ecx, ebp
mov ebx, ecx
not ebx
mov edi, ebp
and edi, 0xecd2f117
and eax, 0x132d0ee8
or eax, edi
or ebp, ebx
and ebx, 0xecd2f117
and ecx, 0x132d0ee8
or ecx, ebx
xor ecx, eax
not ebp
or ebp, ecx
mov eax, ebp
not eax
and ebp, 0xe5e28a5
and eax, 0xf1a1d75a
or eax, ebp
xor eax, 0xe5e28a5
cmp eax, 0xffffffff
sete r8b
setne bl
cmp edx, 9
setg al
cmp edx, 0xa
setl cl
mov r10d, ecx
xor r10b, bl
mov r9d, r10d
xor r9b, 1
and bl, cl
or cl, r8b
and al, r8b
or al, bl
mov edx, ecx
xor dl, al
xor al, 1
xor dl, 1
or al, cl
xor al, 1
or al, dl
mov ecx, eax
xor cl, 1
mov ebx, r9d
and bl, r10b
mov r8d, ecx
and r8b, al
mov edx, ebx
xor dl, 1
xor bl, r9b
or dl, r10b
xor dl, 1
or dl, bl
mov ebx, r8d
and bl, cl
xor r8b, cl
or r8b, bl
xor r8b, dl
mov ecx, r10d
and cl, al
xor al, r10b
or al, cl
mov edx, eax
xor dl, r8b
xor r8b, 1
or r8b, al
mov eax, dword [0x18002aa9c]
lea ecx, [rax - 1]
imul ecx, eax
mov ebp, ecx
xor ebp, 0x74eeab83
and ebp, ecx
not ecx
and ecx, 0x74eeab83
mov eax, ecx
and eax, ebp
xor ebp, ecx
or ebp, eax
mov eax, ebp
not eax
and eax, 0x8b11547c
and ebp, 0x74eeab83
or ebp, eax
mov eax, ebp
mov ecx, ebp
xor ecx, 0x67dc12c0
and ecx, ebp
not ebp
and ebp, 0xc5220e87
and eax, 0x3addf178
or eax, ebp
mov ebp, eax
xor ebp, 0x3addf178
mov ebx, eax
xor ebx, 0xa2fe1c47
and ebx, ebp
mov esi, ebx
and esi, ecx
xor ecx, ebx
movabs r14, 0x2b83c9c8551bf49a
or ecx, esi
mov ebx, ecx
not ebx
and ebx, 0x9823ed3e
and ecx, 0x67dc12c1
or ecx, ebx
movabs rsi, 0x13855f31771aefee
and ebp, 1
xor eax, 0x3addf179
or eax, ebp
not eax
mov ebp, ecx
and ebp, eax
xor eax, ecx
or eax, ebp
mov ecx, eax
not ecx
and eax, ecx
mov ebp, ecx
and ebp, eax
xor eax, ecx
xor dl, 1
xor r8b, 1
or r8b, dl
mov byte [rsp + 7], r8b
or eax, ebp
mov eax, dword [0x18002aaa0]
sete cl
setne dl
cmp eax, 0xa
setl bl
cmp eax, 9
setg r8b
mov eax, r8d
xor al, dl
or dl, bl
or bl, cl
xor bl, 1
or bl, al
mov eax, ebx
xor al, 1
xor dl, 1
or r8b, cl
xor r8b, 1
mov ecx, edx
and cl, r8b
xor r8b, dl
or r8b, cl
mov ecx, ebx
and cl, al
mov edx, ebx
and dl, cl
xor cl, bl
or cl, dl
mov edx, r8d
xor dl, 1
xor cl, dl
xor dl, bl
or r8b, al
movabs r9, 0xad6baf724ce1e3d
xor r8b, 1
or r8b, dl
xor r8b, 1
mov eax, ecx
and al, r8b
xor r8b, cl
or r8b, al
mov rax, qword [rsp + 8]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r13
mov r13, qword [r13]
cmp r13, qword [rsp + 0x18]
je 0x18000c4e2
mov r15, qword [rsp + 0x10]
test byte [rsp + 7], 1
je 0x18000c4d0
nop word [rax + rax]
cmp byte [r15 + 1], 0
lea r15, [r15 + 1]
jne 0x18000c350
test r8b, 1
je 0x18000c4e0
movabs rax, 0xd33af0c06a9108d5
sub r15, rax
movabs rcx, 0xf26c74fbff3dde3
mov rdx, rcx
sub r15, rcx
add r15, rax
mov rax, qword [rsp + 8]
movabs rcx, 0x6699f0fb3a5ee75a
add rax, rcx
sub rcx, rax
movabs rax, 0x7648f07721044da7
sub r15, rax
add r15, rcx
add r15, rax
movabs rax, 0xe4ea55a176dfbb3e
sub r15, rax
movabs rcx, 0x7cc9d078e21918a2
sub r15, rcx
add r15, rax
add r15, rdx
movabs rax, 0xfa0d466c8afba420
add r15, rax
add r15, rcx
sub r15, rax
je 0x18000c4b8
mov r12, qword [r13 + 0x60]
xor ebp, ebp
mov r10, r15
nop
movzx eax, word [r12 + rbp*2]
test eax, eax
setne cl
mov rdx, qword [rsp + 8]
movsx ebx, byte [rdx + rbp]
lea edi, [rax - 0x41]
lea edx, [rax + 0x20]
cmp di, 0x1a
cmovae edx, eax
lea eax, [rbx - 0x41]
lea edi, [rbx + 0x20]
cmp al, 0x1a
cmovae edi, ebx
sub edx, edi
sete bl
mov eax, ecx
and al, bl
xor cl, bl
or al, cl
mov edi, eax
not dil
mov r11d, ecx
xor r11b, 1
and cl, al
or al, r11b
mov ebx, eax
xor bl, 1
and r11b, dil
or r11b, cl
cmp bl, r11b
jne 0x18000c4b0
xor r11b, 1
or al, r11b
xor al, 1
test al, 1
jne 0x18000c4b0
mov rax, rsi
sub rax, r9
sub rax, rsi
add rax, r9
movabs rcx, 0xadf4d8e485a11162
mov rdx, rcx
sub r10, rcx
movabs rcx, 0xc144e15fc7ac6fb7
add r10, rcx
sub r10, rax
sub r10, rcx
add r10, r14
add r10, rdx
mov rax, r14
not rax
add r10, rax
add rbp, 1
cmp r15, rbp
jne 0x18000c3f0
jmp 0x18000c4b8
test edx, edx
jne 0x18000c328
mov rax, qword [r13 + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000c4d0
jmp 0x18000c4e0
xor eax, eax
jmp 0x18000c4bc