Function at 0x18000d110
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x10], rcx
mov edx, dword [0x18002ba8c]
mov r8d, dword [0x18002ba90]
lea ebx, [rdx - 1]
imul ebx, edx
mov edi, ebx
not edi
mov ebp, edi
and ebp, 0x10a4c841
mov edx, ebx
and edx, 0x8030182
or edx, ebp
mov ebp, edx
xor ebp, 0x182
xor edx, 0xf7fcfe7d
mov ecx, ebx
xor ecx, 0x18a7c9c3
and ecx, ebx
mov esi, ecx
not esi
mov eax, edx
and eax, 0xcbb75e5c
and ebp, 0x10008183
or ebp, eax
or edx, esi
and esi, 0xcbb75e5c
and ecx, 0x3448a1a3
or ecx, esi
xor ecx, ebp
not edx
or edx, ecx
mov eax, edx
not eax
and eax, 0xf54739e8
and edx, 0xab8c617
or edx, eax
mov eax, edx
xor eax, 0x121f0fd5
and edi, 0x5e8e1c92
and ebx, 0xa171e36d
or ebx, edi
mov ecx, ebx
xor ecx, 0xa171e36d
xor edx, 0xede0f02a
and ecx, edx
xor ebx, 0x5e8e1c92
and ebx, eax
or ebx, ecx
not ebx
or ebx, edx
cmp ebx, 0xffffffff
setne dl
sete al
cmp r8d, 0xa
setl cl
cmp r8d, 9
setg bl
and bl, al
and dl, cl
or dl, bl
or cl, al
xor dl, 1
mov eax, ecx
xor al, dl
or cl, dl
xor cl, 1
or cl, al
mov eax, edx
or al, cl
xor al, 1
xor cl, dl
mov edx, eax
and dl, cl
test dl, 1
jne 0x18000d222
xor al, cl
test al, 1
jne 0x18000d222
nop word [rax + rax]
jmp 0x18000d220
mov rax, qword gs:[0x60]
mov r11, qword [rax + 0x18]
add r11, 0x10
mov ecx, dword [0x18002ba74]
lea esi, [rcx - 1]
imul esi, ecx
mov edx, esi
not edx
mov eax, esi
xor eax, 0xfffffffe
and eax, esi
mov ecx, esi
or ecx, 1
mov ebx, ecx
and ebx, 0x882670e0
mov ebp, edx
and ebp, 0x77d98f1e
or ebp, ebx
mov ebx, eax
not ebx
or ecx, ebx
and ebx, 0x882670e0
and eax, 0x77d98f1f
or eax, ebx
xor eax, ebp
not ecx
or ecx, eax
mov eax, ecx
not eax
and eax, 0x2ddae97c
and ecx, 0xd2251683
or ecx, eax
mov eax, ecx
xor eax, 0x82251602
and edx, 0x3da631e5
and esi, 0xc259ce1a
or esi, edx
mov edx, esi
xor edx, 0x8249c602
xor ecx, 0x2ddae97c
xor esi, 0x3da631e5
mov ebp, ecx
and ebp, 0x781228d9
and eax, 0x87edd726
or eax, ebp
or ecx, esi
and esi, 0x781228d9
and edx, 0x87edd726
or edx, esi
xor edx, eax
not ecx
or ecx, edx
cmp ecx, 0xffffffff
setne r10b
sete cl
cmp dword [0x18002ba78], 0xa
setl r8b
mov edx, r8d
xor dl, cl
or cl, r8b
xor cl, 1
or cl, dl
mov r9d, ecx
xor r9b, 1
xor r10b, r8b
mov r8d, r10d
xor r8b, 1
mov ebx, r9d
and bl, cl
mov edx, r8d
and dl, r10b
mov eax, ebx
and al, r9b
xor bl, r9b
or bl, al
xor dl, 1
mov eax, edx
xor al, r10b
or dl, r10b
xor dl, 1
or dl, al
mov eax, ebx
xor al, 1
and al, dl
xor dl, 1
and dl, bl
or dl, al
xor r10b, cl
or r8b, r9b
xor r8b, 1
or r8b, r10b
xor r8b, 1
mov eax, edx
and al, r8b
xor r8b, dl
mov edx, dword [0x18002ba94]
lea ebp, [rdx - 1]
imul ebp, edx
mov ecx, ebp
not ecx
mov ebx, ecx
and ebx, 0xfb4a055e
mov edx, ebp
and edx, 0x4b5faa1
or edx, ebx
mov ebx, edx
not ebx
and ebx, 0x4b5faa0
and edx, 0xfb4a055f
or edx, ebx
and ecx, 0xc0d006a
and ebp, 0xf3f2ff95
or ebp, ecx
mov ebx, edx
not ebx
mov ecx, ebx
and ecx, 0x62af97c4
and edx, 0x9d50683b
or edx, ecx
mov ecx, ebp
xor ecx, 0x91506811
xor ebp, 0xd0040
and ebp, 0x62af97c4
and ecx, 0x9d50683b
or ecx, ebp
or r8b, al
mov byte [rsp + 7], r8b
xor ecx, edx
mov eax, dword [0x18002ba98]
not ecx
or ecx, ebx
cmp ecx, 0xffffffff
sete r8b
setne bl
cmp eax, 9
setg dil
cmp eax, 0xa
setl r9b
mov eax, ebx
mov edx, edi
xor dl, bl
or dil, bl
or bl, r9b
xor al, r9b
not al
and al, r9b
mov ecx, ebx
xor cl, al
xor al, 1
xor cl, 1
or al, bl
xor al, 1
or al, cl
movabs r10, 0x4dd1b26eaec09560
xor r8b, r9b
xor dil, 1
or dil, r8b
xor dil, 1
mov ecx, edx
and cl, dil
xor dil, dl
or dil, cl
mov ecx, edi
xor cl, 1
mov edx, eax
xor dl, 1
and cl, dl
or dl, dil
and dil, al
movabs r8, 0x468e276c50157268
xor dl, 1
or dil, cl
mov eax, edx
and al, dil
xor dil, dl
or dil, al
mov rax, qword [rsp + 0x10]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], r11
mov qword [rsp + 8], r11
mov rax, qword [rsp + 8]
mov rax, qword [rax]
mov qword [rsp + 8], rax
cmp rax, qword [rsp + 0x20]
je 0x18000d6d2
mov rax, qword [rsp + 0x18]
test byte [rsp + 7], 1
je 0x18000d6c0
nop dword [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000d4b0
test dil, 1
je 0x18000d6d0
movabs rbp, 0x63e949bd1b999dc1
mov rcx, rbp
movabs rdx, 0xd31afa5c45341628
sub rcx, rdx
sub rcx, qword [rsp + 0x10]
sub rcx, rbp
movabs r13, 0xe9a01cd88337bc4c
add rcx, r13
add rcx, rdx
movabs rdx, 0x862e3ec4da7aeed9
add rax, rdx
sub rdx, rax
sub r13, rcx
add r13, rdx
neg r13
je 0x18000d699
mov rax, qword [rsp + 8]
mov r12, qword [rax + 0x60]
xor r14d, r14d
mov r15, r13
nop word cs:[rax + rax]
nop
movzx ecx, word [r12 + r14*2]
test ecx, ecx
sete bl
setne dl
lea ebp, [rcx - 0x41]
lea r9d, [rcx + 0x20]
cmp bp, 0x1a
cmovae r9d, ecx
mov rax, qword [rsp + 0x10]
movsx ecx, byte [rax + r14]
lea ebp, [rcx - 0x41]
lea esi, [rcx + 0x20]
cmp bpl, 0x1a
cmovae esi, ecx
sub r9d, esi
setne cl
sete sil
mov eax, esi
and al, dl
mov r11d, ebx
and r11b, cl
or r11b, al
xor r11b, 1
or r11b, dl
mov eax, r11d
xor al, 1
or sil, bl
xor cl, bl
and cl, bl
xor cl, 1
mov edx, esi
xor dl, cl
or cl, sil
xor cl, 1
or cl, dl
mov ebp, ecx
xor bpl, 1
mov edx, eax
and dl, r11b
and cl, bpl
mov ebx, edx
xor bl, 1
xor dl, al
or bl, r11b
xor bl, 1
or bl, dl
xor cl, 1
mov eax, ecx
xor al, bpl
or cl, bpl
xor cl, 1
or cl, al
xor cl, bl
mov eax, ecx
and al, 1
mov edx, r11d
and dl, bpl
xor bpl, r11b
or bpl, dl
mov edx, ebp
not dl
and dl, 1
cmp al, dl
jne 0x18000d690
xor cl, 1
or cl, bpl
xor cl, 1
test cl, 1
jne 0x18000d690
movabs rax, 0xa15fcae1770eafa3
mov rcx, rax
movabs rdx, 0x5de6762d1eb75bae
sub rcx, rdx
sub rcx, r15
sub rcx, rax
sub rcx, r8
add rcx, rdx
add rcx, r8
movabs rbp, 0xab9bae68600b540f
mov rax, rbp
movabs rdx, 0xced9f1539df036df
sub rax, rdx
sub rax, rbp
add rax, rdx
movabs rdx, 0xe5eaf6a3cfc84dcc
mov rbp, rdx
add rcx, rdx
movabs rdx, 0xf3562cf068543ed9
add rcx, rdx
sub rcx, rbp
sub rcx, r10
add rcx, rax
add rcx, r10
sub rcx, rdx
not rcx
add r14, 1
mov r15, rcx
cmp r13, r14
jne 0x18000d530
jmp 0x18000d699
test r9d, r9d
jne 0x18000d480
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000d6c0
jmp 0x18000d6d0
xor eax, eax
jmp 0x18000d6a2