Function at 0x18000bd10
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov ebp, dword [0x18002aa9c]
mov r8d, dword [0x18002aaa0]
lea edx, [rbp - 1]
imul edx, ebp
mov esi, edx
not esi
mov edi, edx
or edi, 1
mov ebx, edi
not ebx
mov ebp, esi
or ebp, 0xd8047bf4
and edi, 0xd8047bf5
and ebx, 0x27fb840a
or ebx, edi
and ebp, 0xd8047bf5
xor ebp, ebx
not ebp
and esi, 0xfce885f2
and edx, 0x3177a0d
or edx, esi
xor edx, 0x3177a0d
mov ebx, ebp
and ebx, edx
xor edx, ebp
or edx, ebx
cmp edx, 0xffffffff
sete r9b
setne al
cmp r8d, 0xa
setl bl
cmp r8d, 9
setg r8b
and al, r8b
mov edx, ebx
and dl, r9b
or dl, al
xor dl, 1
or dl, r8b
xor bl, r9b
mov eax, edx
xor al, bl
xor bl, 1
or bl, dl
xor bl, 1
xor al, 1
mov edx, ebx
and dl, al
test dl, 1
jne 0x18000bdd2
xor bl, al
test bl, 1
jne 0x18000bdd2
nop dword [rax + rax]
jmp 0x18000bdd0
mov rax, qword gs:[0x60]
mov r10, qword [rax + 0x18]
add r10, 0x10
mov edx, dword [0x18002aa84]
mov esi, dword [0x18002aa88]
lea ebp, [rdx - 1]
imul ebp, edx
mov edx, ebp
xor edx, 0x5e3202bd
and edx, ebp
not ebp
mov ebx, ebp
and ebx, 0x5e3202bd
mov edi, ebx
and edi, edx
xor edx, ebx
or edx, edi
mov ebx, edx
not ebx
and ebx, 0xafc35679
and edx, 0x503ca986
or edx, ebx
mov ebx, edx
xor ebx, 0x4062922
xor edx, 0x81a05444
and edx, 0x8ba8d65c
and ebx, 0x745729a3
or ebx, edx
xor ebx, 0x745729a3
mov edx, ebx
and edx, ebp
xor ebx, ebp
or ebx, edx
mov edx, ebx
not edx
and edx, 0x52294b31
and ebx, 0xadd6b4ce
or ebx, edx
xor ebx, 0xadd6b4ce
sete r8b
setne r11b
cmp esi, 0xa
setl r9b
cmp esi, 9
setg cl
mov eax, r11d
xor al, r8b
and al, r11b
mov esi, eax
xor sil, 1
mov ebx, esi
and bl, al
mov edx, ebx
xor dl, 1
xor bl, al
or dl, sil
xor dl, 1
or dl, bl
xor dl, cl
mov eax, ecx
xor al, r8b
and al, cl
and r9b, r11b
and cl, r8b
or cl, r9b
mov ebx, eax
and bl, cl
xor cl, al
or cl, bl
xor cl, dl
mov ebx, ecx
xor bl, 1
and cl, dl
mov eax, ecx
and al, bl
xor cl, bl
mov edx, dword [0x18002aaa4]
lea ebp, [rdx - 1]
imul ebp, edx
mov edi, ebp
not edi
mov edx, edi
and edx, 0x60e7e986
and edi, ebp
and ebp, 0x9f181679
or ebp, edx
mov edx, ebp
xor edx, 0x8181610
xor ebp, 0x60e7e986
mov ebx, ebp
and ebx, 0xb7c5e9ef
and edx, 0x483a1610
or edx, ebx
mov ebx, edi
not ebx
or ebp, ebx
and ebx, 0xb7c5e9ef
and edi, 0x483a1610
or edi, ebx
xor edi, edx
not ebp
or ebp, edi
mov edx, ebp
xor edx, 1
and edx, ebp
mov ebx, ebp
not ebx
and ebx, 0x6926c4ea
and ebp, 0x96d93b15
or ebp, ebx
xor ebp, 0x96d93b14
mov ebx, edx
and ebx, ebp
xor ebp, edx
or ebp, ebx
mov edx, ebp
xor edx, 0xf7e69054
and edx, ebp
not ebp
and ebp, 0xf7e69054
mov ebx, ebp
and ebx, edx
xor edx, ebp
or edx, ebx
mov ebp, edx
not ebp
and ebp, 0x8196fab
and edx, 0xf7e69054
or edx, ebp
mov ebx, edx
not ebx
mov ebp, ebx
and ebp, 0x7d18cf7e
and edx, 0x82e73081
or edx, ebp
movabs rbp, 0x5fa0bb3320ede2cf
or cl, al
mov byte [rsp + 7], cl
xor edx, 0x82e73081
or edx, ebx
cmp edx, 0xffffffff
sete al
setne bl
cmp dword [0x18002aaa8], 9
setg dl
mov ecx, edx
and cl, bl
xor bl, dl
or bl, cl
mov ecx, eax
and cl, dl
or dl, al
xor dl, 1
mov eax, ecx
and al, dl
xor dl, cl
movabs r8, 0x341e18799688b56e
xor bl, 1
or dl, al
xor dl, bl
mov ecx, edx
not cl
and cl, bl
mov eax, ecx
and al, dl
xor cl, dl
or cl, al
mov byte [rsp + 6], cl
movabs r13, 0x70a636603ffd032
mov rax, qword [rsp + 8]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x10], rax
mov qword [rsp + 0x18], r10
mov rdi, r10
mov rdi, qword [rdi]
cmp rdi, qword [rsp + 0x18]
je 0x18000c202
mov r15, qword [rsp + 0x10]
test byte [rsp + 7], 1
je 0x18000c1f0
nop dword [rax]
cmp byte [r15 + 1], 0
lea r15, [r15 + 1]
jne 0x18000c030
movabs rax, 0x24d8d3dee392b198
mov rcx, rax
sub r15, rax
movabs rax, 0xb631fb41c63cb05d
add r15, rax
add r15, rcx
movabs rcx, 0x1db12adc2b709b43
mov rbx, rcx
sub r15, rcx
movabs rcx, 0x2a063df6e46563f5
mov rdx, rcx
sub r15, rcx
add r15, rbx
movabs rcx, 0x8a8984d35c123643
sub r15, rcx
sub r15, rax
add r15, rcx
movabs rax, 0xcf59e909b78b06d1
add r15, rax
movabs rcx, 0x9ec7e0e68d188738
add r15, rcx
sub r15, qword [rsp + 8]
sub r15, rcx
sub r15, rax
movabs rax, 0x783f3797d99c2e8a
mov rcx, rax
add r15, rax
movabs rax, 0x76368606b4cd490f
add r15, rax
add r15, rdx
sub r15, rax
movabs rax, 0xbc8935083bf15358
sub r15, rax
sub r15, rcx
add r15, rax
je 0x18000c206
test byte [rsp + 6], 1
je 0x18000c200
mov r12, qword [rdi + 0x60]
xor r11d, r11d
mov r14, r15
nop word [rax + rax]
movzx r9d, word [r12 + r11*2]
test r9d, r9d
setne dl
sete bl
lea esi, [r9 - 0x41]
lea eax, [r9 + 0x20]
cmp si, 0x1a
cmovae eax, r9d
mov rcx, qword [rsp + 8]
movsx esi, byte [rcx + r11]
lea ecx, [rsi - 0x41]
lea r10d, [rsi + 0x20]
cmp cl, 0x1a
cmovae r10d, esi
sub eax, r10d
setne cl
sete r10b
xor r10b, bl
mov esi, r10d
xor sil, dl
and sil, r10b
or r9d, eax
sete bl
and cl, dl
or cl, bl
xor cl, sil
mov ebx, ecx
xor bl, 1
and sil, bl
cmp sil, cl
jne 0x18000c1e0
xor sil, 1
or sil, bl
xor sil, 1
test sil, 1
jne 0x18000c1e0
sub r14, rbp
movabs rax, 0x7fd7dad524d5ed56
mov rcx, rax
add r14, rax
add r14, rbp
movabs rax, 0xc4c36c4399a0bcda
add r14, rax
add r14, r13
sub r14, rax
add r14, r8
sub r14, rcx
sub r14, r8
movabs rax, 0xfd5b2e36ab88628a
add r14, rax
sub r14, r13
not rax
add r14, rax
add r11, 1
cmp r15, r11
jne 0x18000c110
jmp 0x18000c20d
test eax, eax
jne 0x18000c00b
jmp 0x18000c20d
jmp 0x18000c1f0
jmp 0x18000c200
xor eax, eax
jmp 0x18000c211
test byte [rsp + 6], 1
je 0x18000c230
mov rax, qword [rdi + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000c230