Function at 0x18000e870
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x10], rcx
mov ecx, dword [0x18002ca8c]
mov eax, dword [0x18002ca90]
lea edx, [rcx - 1]
imul edx, ecx
mov ebp, edx
not ebp
mov ecx, ebp
and ecx, 0xec9c0435
and edx, 0x1b808
or edx, ecx
mov ebx, edx
xor ebx, 0x8808
xor edx, 0xdea60300
or ebp, 0xec9dbc3d
mov ecx, ebp
not ecx
and edx, 0xdea73300
and ebx, 0x20188c3d
or ebx, edx
and ebp, 0xdea73300
and ecx, 0x14040c2
or ecx, ebp
xor ecx, ebx
mov edx, ecx
not edx
and edx, 0x7967503b
and ecx, 0x8698afc4
or ecx, edx
mov ebp, ecx
not ebp
xor ecx, 0x95faec06
mov edx, ecx
or edx, 1
mov ebx, edx
not ebx
and ecx, 0xfffffffe
and ebp, 1
or ebp, ecx
mov ecx, ebp
not ecx
mov edi, edx
and edi, 0x7f66a34a
and ebx, 0x80995cb4
or ebx, edi
or edx, ecx
and ecx, 0x7f66a34a
and ebp, 0x80995cb5
or ebp, ecx
xor ebp, ebx
not edx
or edx, ebp
mov ecx, edx
not ecx
mov ebp, ecx
and ebp, 0x4803dde2
and ecx, edx
and edx, 0xb7fc221d
or edx, ebp
xor edx, 0xb7fc221d
mov ebp, edx
and ebp, ecx
xor edx, ecx
or edx, ebp
mov ecx, edx
not ecx
and ecx, 0x9a3e93a5
and edx, 0x65c16c5a
or edx, ecx
mov ecx, edx
xor ecx, 0x4180445a
xor edx, 0x81e11a4
and edx, 0x2c5f39a4
and ecx, 0xd3a0c65b
or ecx, edx
xor ecx, 0xd3a0c65b
setne cl
sete r8b
cmp eax, 0xa
setl bl
cmp eax, 9
setg dl
xor r8b, dl
xor bl, cl
mov eax, edx
xor al, cl
or dl, cl
xor dl, 1
or dl, al
mov ecx, ebx
xor cl, dl
or dl, bl
xor dl, 1
or dl, cl
mov ebx, r8d
or bl, dl
mov ecx, ebx
not cl
and cl, 1
xor dl, r8b
mov eax, edx
and al, 1
cmp cl, al
jne 0x18000e9f2
xor dl, 1
or bl, dl
xor bl, 1
test bl, 1
jne 0x18000e9f2
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x18000e9f0
mov rax, qword gs:[0x60]
mov r10, qword [rax + 0x18]
add r10, 0x10
mov ecx, dword [0x18002ca74]
mov r8d, dword [0x18002ca78]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edi, ebx
not edi
mov ebp, edi
and ebp, 0xa092e4d4
mov ecx, ebx
and ecx, 0x5f6d1b2a
or ecx, ebp
mov ebp, ecx
xor ebp, 0x454c0100
xor ecx, 0xa092e4d5
mov edx, ebx
xor edx, 0xfffffffe
and edx, ebx
mov esi, ecx
and esi, 0x1aa3ba6b
and ebp, 0xe55c4594
or ebp, esi
mov esi, edx
not esi
or ecx, esi
and esi, 0x1aa3ba6b
and edx, 0xe55c4594
or edx, esi
xor edx, ebp
not ecx
or ecx, edx
mov edx, ecx
not edx
and edi, edx
and ecx, ebx
or ecx, edi
xor edx, ecx
test edx, ecx
sete cl
setne al
cmp r8d, 0xa
setl r9b
cmp r8d, 9
setg r8b
mov edx, eax
and dl, r8b
mov ebx, r9d
and bl, cl
or bl, dl
xor bl, 1
or bl, r8b
or al, r9b
xor cl, r9b
and cl, r9b
xor cl, 1
mov edx, eax
xor dl, cl
or cl, al
xor cl, 1
or cl, dl
mov eax, ebx
xor al, cl
xor cl, 1
or cl, bl
xor cl, 1
xor al, 1
mov r8d, ecx
and r8b, al
xor al, cl
mov ecx, dword [0x18002ca94]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ebp, ebx
not ebp
mov ecx, ebp
and ecx, 0xcd3e4490
mov esi, ebx
and esi, 0x32c1bb6f
or esi, ecx
mov ecx, esi
xor ecx, 0x80004a
xor esi, 0xc9160490
mov edx, ebx
xor edx, 0xc9d696fa
and edx, ebx
or esi, 0x36296905
mov edi, esi
and edi, 0xcb47ff34
and ecx, 0x9000ca
or ecx, edi
mov edi, edx
not edi
or esi, edi
and edi, 0xcb47ff34
and edx, 0x34b800cb
or edx, edi
xor edx, ecx
not esi
or esi, edx
mov ecx, esi
not ecx
and ecx, 0x36296904
and esi, 0xc9d696fb
or esi, ecx
mov ecx, esi
not ecx
mov edx, ecx
and edx, 0x15e326f9
and esi, 0xea1cd906
or esi, edx
and ebx, 0x15e326f9
and ebp, 0xea1cd906
or ebp, ebx
xor ebp, esi
or al, r8b
mov byte [rsp + 7], al
xor ecx, ebp
test ecx, ebp
mov ecx, dword [0x18002ca98]
sete dl
cmp ecx, 0xa
setl al
cmp ecx, 9
setg r9b
mov ecx, r9d
xor cl, dl
not cl
and cl, dl
or r9b, dl
xor r9b, 1
mov ebx, ecx
and bl, r9b
xor r9b, cl
or r9b, bl
mov ecx, eax
or cl, dl
xor al, dl
mov edx, ecx
xor dl, al
xor al, 1
xor dl, 1
or al, cl
xor al, 1
or al, dl
mov ecx, eax
xor cl, 1
mov edx, ecx
and dl, al
xor cl, dl
xor dl, 1
or dl, al
xor dl, 1
or dl, cl
xor dl, r9b
xor dl, 1
and r9b, dl
xor r9b, 1
mov eax, r9d
xor al, dl
or r9b, dl
xor r9b, 1
or r9b, al
movabs r14, 0x1bf104c1719eab1a
movabs r15, 0xdfd6e8c9e6d7832
mov rax, qword [rsp + 0x10]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x18], rax
mov qword [rsp + 0x20], r10
mov qword [rsp + 8], r10
mov rbx, qword [rsp + 8]
mov rbx, qword [rbx]
cmp rbx, qword [rsp + 0x20]
je 0x18000ee42
mov rax, qword [rsp + 0x18]
test byte [rsp + 7], 1
je 0x18000ee40
nop
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000ec40
movabs rdx, 0x2d3a8e12868dc52a
mov rcx, rdx
sub rcx, rax
movabs rax, 0xbbaaaf48a611157b
mov rbp, rax
sub rcx, rax
sub rcx, rdx
movabs r8, 0xf24aaa3999a4ea7e
add rcx, r8
movabs rax, 0xd988ca8d04cb4269
mov rdx, rax
add rcx, rax
sub r8, rcx
movabs rax, 0xe6f54340c50a1174
sub r8, rax
sub r8, qword [rsp + 0x10]
add r8, rax
movabs rcx, 0x9f2ab90c743f327b
mov rax, rcx
sub rax, rbp
sub rax, rcx
add r8, rdx
movabs rcx, 0x5f50def6ac8abac3
add r8, rcx
add r8, rax
sub r8, rcx
mov qword [rsp + 8], rbx
je 0x18000ee46
mov r12, qword [rbx + 0x60]
xor edi, edi
mov rbp, r8
nop
movzx ecx, word [r12 + rdi*2]
mov rax, qword [rsp + 0x10]
movsx esi, byte [rax + rdi]
cmp ecx, 0x41
jb 0x18000ed10
test r9b, 1
je 0x18000ee20
lea r11d, [rcx + 0x20]
cmp cx, 0x5b
cmovae r11d, ecx
jmp 0x18000ed1d
mov r11d, ecx
test r9b, 1
je 0x18000ee30
lea edx, [rsi - 0x41]
lea ebx, [rsi + 0x20]
cmp dl, 0x1a
cmovae ebx, esi
sub r11d, ebx
setne sil
sete r10b
test cx, cx
setne dl
sete bl
mov eax, r10d
or al, bl
xor al, 1
mov ecx, edx
or cl, sil
xor cl, 1
mov r13d, eax
and r13b, cl
xor cl, al
or cl, r13b
and r10b, bl
or bl, sil
and dl, sil
or dl, r10b
mov eax, ebx
xor al, dl
xor dl, 1
xor al, 1
or dl, bl
xor dl, 1
or dl, al
mov ebx, edx
xor bl, cl
xor cl, 1
or cl, dl
xor cl, 1
xor bl, 1
mov eax, ecx
and al, bl
test al, 1
jne 0x18000ee10
xor cl, bl
test cl, 1
jne 0x18000ee10
movabs rax, 0xc5dadf241cc096f3
sub rbp, rax
movabs rcx, 0xab597496a7e398e3
sub rbp, rcx
add rbp, r14
add rbp, rcx
movabs rcx, 0x25cc1dc1a859fda3
sub rbp, rcx
add rbp, rax
add rbp, rcx
sub rbp, r15
movabs rax, 0x5f42ed4d3b2744d9
mov rcx, rax
sub rbp, rax
add rbp, r15
movabs rax, 0xe731d7f5c470b740
add rbp, rax
sub rbp, r14
sub rbp, rax
add rbp, rcx
add rbp, 0xffffffffffffffff
add rdi, 1
cmp r8, rdi
jne 0x18000ece0
jmp 0x18000ee4c
test r11d, r11d
jne 0x18000ec1c
jmp 0x18000ee4c
jmp 0x18000ee20
jmp 0x18000ee30
jmp 0x18000ee40
xor eax, eax
jmp 0x18000ee55
test r9b, 1
je 0x18000ee70
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000ee70