Function at 0x18000e600
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov qword [rsp + 0x10], rcx
mov eax, dword [0x18002ca94]
mov r8d, dword [0x18002ca98]
lea ebp, [rax - 1]
imul ebp, eax
mov r9d, ebp
not r9d
mov edx, ebp
xor edx, 0x3e5b0e6c
and edx, ebp
mov esi, ebp
or esi, 0xc1a4f193
mov edi, edx
not edi
mov eax, esi
and eax, 0x3357c2cd
mov ebx, r9d
and ebx, 0xc080c20
or ebx, eax
or esi, edi
and edi, 0x3357c2cd
and edx, 0xcca83d32
or edx, edi
xor edx, ebx
not esi
or esi, edx
mov edx, esi
not edx
and edx, 0xf643515f
and esi, 0x9bcaea0
or esi, edx
mov edx, esi
xor edx, 0x24472001
xor esi, 0x80004202
and esi, 0x93a0c2ce
and edx, 0x6c5f3d31
or edx, esi
xor edx, 0x6c5f3d31
and r9d, 0xe89e930d
and ebp, 0x17616cf2
or ebp, r9d
xor ebp, 0x17616cf2
mov eax, edx
and eax, ebp
xor ebp, edx
or ebp, eax
mov eax, ebp
not eax
and eax, 0xefdd008c
and ebp, 0x1022ff73
or ebp, eax
xor ebp, 0x1022ff73
sete al
setne dl
cmp r8d, 0xa
setl bl
cmp r8d, 9
setg r8b
and al, bl
xor bl, dl
and dl, r8b
or al, dl
xor r8b, al
and r8b, al
xor bl, 1
mov eax, r8d
xor al, bl
mov edx, eax
xor dl, 1
or bl, r8b
xor bl, 1
or bl, al
xor al, bl
xor al, 1
or bl, dl
xor bl, 1
or bl, al
test bl, 1
je 0x18000e734
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
add r9, 0x10
test bl, 1
jne 0x18000e73f
mov rax, qword gs:[0x60]
jmp 0x18000e71e
mov eax, dword [0x18002ca74]
mov r8d, dword [0x18002ca78]
lea edx, [rax - 1]
imul edx, eax
mov r10d, edx
not r10d
mov eax, r10d
and eax, 0xf1da1f10
mov ebp, edx
and ebp, 0xe25e0ee
or ebp, eax
mov edi, ebp
xor edi, 0x825008a
xor ebp, 0xf1da1f11
mov eax, edx
xor eax, 0xfffffffe
and eax, edx
mov esi, eax
not esi
mov ebx, ebp
and ebx, 0xe6c2f475
and edi, 0x193d0b8a
or edi, ebx
or ebp, esi
and esi, 0xe6c2f475
and eax, 0x193d0b8a
or eax, esi
xor eax, edi
not ebp
or ebp, eax
and r10d, 0xcaeb2e63
and edx, 0x3514d19c
or edx, r10d
mov eax, edx
xor eax, 0x3514d19c
xor edx, 0xcaeb2e63
and edx, ebp
not ebp
and eax, ebp
or edx, eax
xor ebp, edx
test ebp, edx
sete r15b
setne r10b
cmp r8d, 0xa
setl r14b
cmp r8d, 9
setg r11b
mov eax, dword [0x18002ca9c]
mov r8d, dword [0x18002caa0]
lea ebx, [rax - 1]
imul ebx, eax
mov eax, ebx
not eax
and ebx, eax
mov edi, eax
and edi, ebx
xor ebx, eax
or ebx, edi
mov r12d, ebx
not r12d
mov eax, ebx
or eax, 0x44cdc2d7
mov esi, eax
not esi
mov ebp, ebx
xor ebp, 0xbb323d28
and ebp, ebx
mov edx, ebp
not edx
mov edi, eax
and edi, 0x2225d578
and esi, 0x99122800
or esi, edi
or eax, edx
and edx, 0x2225d578
and ebp, 0xddda2a87
or ebp, edx
xor ebp, esi
not eax
or eax, ebp
mov edx, eax
not edx
and edx, 0x44cdc2d6
and eax, 0xbb323d29
or eax, edx
and r12d, 1
xor ebx, 0xfffffffe
or ebx, r12d
mov edx, ebx
not edx
and edx, 0x52041d73
and ebx, 0xadfbe28c
or ebx, edx
xor ebx, 0xadfbe28c
mov edx, eax
and edx, ebx
xor ebx, eax
or ebx, edx
mov eax, ebx
not eax
and ebx, eax
mov edx, eax
and edx, ebx
xor ebx, eax
or ebx, edx
mov eax, ebx
not eax
and eax, 0x77ff147d
and ebx, 0x8800eb82
or ebx, eax
mov eax, ebx
xor eax, 0x88004800
xor ebx, 0x64521000
and ebx, 0x6452b382
and eax, 0x9bad4c7d
or eax, ebx
xor eax, 0x6452b382
cmp eax, 0xffffffff
sete cl
setne bpl
cmp r8d, 9
setg r12b
cmp r8d, 0xa
setl dil
mov r13, qword [r9]
cmp r13, r9
je 0x18000eb6e
mov eax, r11d
and al, r10b
mov ebx, r11d
xor bl, r10b
or bl, al
or r14b, r10b
xor r14b, 1
or r15b, r11b
xor r15b, 1
mov eax, r14d
and al, r15b
xor r15b, r14b
or r15b, al
mov eax, r15d
xor al, 1
mov r10d, eax
mov edx, ebx
xor al, bl
xor bl, 1
and r10b, bl
and dl, r15b
or dl, r10b
or r15b, bl
xor r15b, 1
or r15b, al
xor dl, 1
mov eax, edx
xor al, r15b
or dl, r15b
xor dl, 1
or dl, al
mov eax, ebp
or al, dil
xor al, 1
mov ebx, ebp
xor bl, dil
not bl
and bl, dil
mov r8d, eax
and r8b, bl
xor bl, al
or bl, r8b
mov eax, r12d
xor al, cl
and al, r12b
and bpl, dil
and r12b, cl
or r12b, bpl
mov r8d, eax
and r8b, r12b
xor r12b, al
or r12b, r8b
mov r11d, r12d
xor r11b, 1
mov r10d, ebx
xor r10b, 1
mov eax, r10d
and al, bl
mov r8d, r10d
xor r8b, al
xor al, 1
or al, bl
xor al, 1
or al, r8b
mov ebx, eax
xor bl, 1
and bl, r12b
and al, r11b
or al, bl
mov ebx, r10d
and bl, r12b
xor r10b, r12b
or r10b, bl
xor r10b, 1
mov ebx, eax
and bl, r10b
xor r10b, al
or r10b, bl
movabs rax, 0xf41429fd2d13761c
movabs rdi, 0xeb2b26357a579a87
movabs rbx, 0xe94e13db4d3d0684
movabs rcx, 0xcfe830cc1e6c56b2
movabs rsi, 0xb8a5a46eab4c3bcb
movabs r11, 0x38a49d64f2f6f33e
movabs rbp, 0x24eeb490dc1d1328
mov r15, qword [rsp + 0x10]
mov r14b, byte [r15]
mov byte [rsp + 7], r14b
mov r8, r15
test r14b, r14b
je 0x18000ea50
nop word cs:[rax + rax]
test dl, 1
je 0x18000ea30
cmp byte [r8 + 1], 0
lea r8, [r8 + 1]
jne 0x18000ea30
jmp 0x18000ea53
mov r8, r15
sub r8, rbx
sub r8, rcx
add r8, rbx
add r8, rdi
add r8, rax
sub r8, r15
sub r8, rax
sub r8, rsi
sub r8, rdi
add r8, rsi
add r8, rcx
mov qword [rsp + 8], r13
je 0x18000eb82
mov r12, qword [r13 + 0x60]
movabs rcx, 0xa975714a579f7352
nop dword [rax]
movzx edi, word [r12]
mov r13d, edi
cmp edi, 0x41
jb 0x18000eab3
test r10b, 1
je 0x18000eb80
lea r13d, [rdi + 0x20]
cmp di, 0x5b
cmovae r13d, edi
add r12, 2
add r15, 1
nop dword [rax + rax]
test r10b, 1
je 0x18000eac0
movsx eax, r14b
lea ebx, [rax - 0x41]
lea esi, [rax + 0x20]
cmp bl, 0x1a
cmovae esi, eax
cmp r13d, esi
jne 0x18000eb20
test di, di
je 0x18000eb88
sub r8, rbp
add r8, r11
add r8, rbp
sub r8, rcx
movabs rax, 0xf5ab07e4e6eec100
add r8, rax
sub r8, r11
sub r8, rax
add r8, rcx
add r8, 0xffffffffffffffff
je 0x18000eb88
mov r14b, byte [r15]
jmp 0x18000ea90
mov r13, qword [rsp + 8]
mov r13, qword [r13]
cmp r13, r9
mov r15, qword [rsp + 0x10]
movabs rax, 0xf41429fd2d13761c
movabs rdi, 0xeb2b26357a579a87
movabs rbx, 0xe94e13db4d3d0684
movabs rcx, 0xcfe830cc1e6c56b2
movabs rsi, 0xb8a5a46eab4c3bcb
mov r14b, byte [rsp + 7]
jne 0x18000ea1e
xor eax, eax
jmp 0x18000eb91
jmp 0x18000eb80
test r10b, 1
je 0x18000ebb0
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000ebb0