Function at 0x18000cad0
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov rax, qword gs:[0x60]
mov r10, qword [rax + 0x18]
add r10, 0x10
mov edx, dword [0x18002ba9c]
mov r8d, dword [0x18002baa0]
lea ebp, [rdx - 1]
imul ebp, edx
mov ebx, ebp
not ebx
mov edi, ebx
and edi, 0xfffffffe
mov edx, ebp
xor edx, 0xfffffffe
and edx, ebp
mov esi, edi
and esi, edx
xor edx, edi
or edx, esi
and ebx, 0x992371b6
and ebp, 0x66dc8e49
or ebp, ebx
mov ebx, ebp
xor ebx, 0x64c88801
mov edi, edx
not edi
mov esi, edi
and esi, 0x9a3426ec
and edx, 0x65cbd913
or edx, esi
xor ebp, 0x982020a4
and ebp, 0x9a3426ec
and ebx, 0x65cbd913
or ebx, ebp
xor ebx, edx
xor edi, ebx
test edi, ebx
sete al
setne dl
cmp r8d, 0xa
setl r9b
cmp r8d, 9
setg r8b
mov r11d, edx
and r11b, r8b
mov esi, r9d
and sil, al
or sil, r11b
xor sil, 1
or sil, r8b
or dl, r9b
xor dl, 1
xor al, r9b
and al, r9b
mov r8d, edx
and r8b, al
xor al, dl
or al, r8b
mov ebx, eax
xor bl, 1
mov edx, ebx
and dl, al
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
mov r8d, edx
xor dl, 1
and dl, sil
mov ebx, esi
xor bl, 1
and r8b, bl
or dl, r8b
mov r8d, ebx
xor r8b, al
or al, bl
xor al, 1
or al, r8b
xor al, 1
mov ebx, edx
and bl, al
xor al, dl
or al, bl
mov byte [rsp + 7], al
mov eax, dword [0x18002ba84]
lea ebx, [rax - 1]
imul ebx, eax
mov eax, ebx
mov edx, ebx
xor edx, 0x50a2b8cb
and edx, ebx
not ebx
and ebx, 0x901a978a
and eax, 0x6fe56875
or eax, ebx
mov ebx, eax
xor ebx, 0x40200041
xor eax, 0x1002908a
or eax, 0xaf5d4734
mov edi, edx
not edi
mov esi, eax
and esi, 0x219f2b0a
and ebx, 0x502090c1
or ebx, esi
or eax, edi
and edi, 0x219f2b0a
and edx, 0xde60d4f5
or edx, edi
xor edx, ebx
not eax
or eax, edx
mov edx, eax
not edx
and edx, 0xaf5d4734
and eax, 0x50a2b8cb
or eax, edx
mov edx, eax
not edx
mov ebx, edx
and ebx, 0x28da4064
mov edi, eax
and edi, 0xd725bf9b
or edi, ebx
mov ebx, edi
not ebx
and ebx, 0xd725bf9a
and edi, 0x28da4065
or edi, ebx
and eax, 0x844eb31e
mov ebx, edx
and ebx, 0x7bb14ce1
or ebx, eax
xor ebx, 0x844eb31f
and edx, 1
or edx, ebx
not edx
mov eax, edi
and eax, edx
xor edx, edi
or edx, eax
mov edi, edx
not edi
or edx, 0x22e47bc
mov ebx, edx
not ebx
or edi, 0xfdd1b843
mov eax, edi
not eax
and edx, 0x331d0ba6
and ebx, 0xccc0b041
or ebx, edx
and edi, 0x331d0ba6
and eax, 0x224418
or eax, edi
xor eax, ebx
mov edx, eax
not edx
and edx, 0x22e47bc
and eax, 0xfdd1b843
or eax, edx
sete r8b
setne bl
cmp dword [0x18002ba88], 9
setg dl
mov eax, edx
and al, bl
xor bl, dl
or bl, al
mov eax, edx
xor al, r8b
not al
and al, r8b
or dl, r8b
xor dl, 1
mov r8d, eax
and r8b, dl
xor dl, al
or dl, r8b
xor dl, 1
mov r8d, ebx
or r8b, dl
xor dl, bl
mov eax, r8d
xor al, dl
xor dl, 1
xor al, 1
or dl, r8b
xor dl, 1
or dl, al
mov byte [rsp + 6], dl
mov edx, dword [0x18002baa4]
lea eax, [rdx - 1]
imul eax, edx
mov edx, eax
not edx
mov ebx, edx
and ebx, 0x89983a34
and edx, eax
and eax, 0x7667c5cb
or eax, ebx
xor eax, 0x7667c5cb
mov ebx, eax
and ebx, edx
xor eax, edx
or eax, ebx
mov edi, eax
not edi
mov edx, eax
xor edx, 0xb3a23569
mov ebx, edx
and ebx, edi
and edx, eax
mov esi, ebx
not esi
mov ebp, esi
and ebp, 0x11d02721
and ebx, 0xee2fd8de
or ebx, ebp
mov ebp, edx
not ebp
or esi, ebp
and ebp, 0x11d02721
and edx, 0xee2fd8de
or edx, ebp
xor edx, ebx
not esi
or esi, edx
mov edx, esi
not edx
and edx, 0x4c5dca97
and esi, 0xb3a23568
or esi, edx
and edi, 1
xor eax, 0xfffffffe
or eax, edi
mov edx, eax
not edx
and edx, 0x49260a6e
and eax, 0xb6d9f591
or eax, edx
mov ebx, esi
not ebx
mov edx, ebx
and edx, 0xd3a93fff
and esi, 0x2c56c000
or esi, edx
mov edx, eax
xor edx, 0x2450c000
xor eax, 0x49260a6e
or ebx, eax
and eax, 0xd3a93fff
and edx, 0x2c56c000
or edx, eax
xor edx, esi
not ebx
or ebx, edx
mov ebp, ebx
not ebp
or ebx, 0xf80413a1
mov edx, ebx
not edx
or ebp, 0x7fbec5e
and ebx, 0xaae321e0
and edx, 0x518cc1e
or edx, ebx
mov eax, ebp
not eax
and ebp, 0xaae321e0
and eax, 0x50041201
or eax, ebp
mov ebp, dword [0x18002baa8]
xor eax, edx
mov edx, eax
not edx
and edx, 0xb71a2952
and eax, 0x48e5d6ad
or eax, edx
xor eax, 0x4f1e3af3
setne r8b
sete al
cmp ebp, 0xa
setl dl
cmp ebp, 9
setg bpl
mov ebx, ebp
xor bl, al
xor bl, 1
or bl, bpl
or dl, r8b
or bpl, al
mov eax, edx
xor al, bpl
or bpl, dl
xor bpl, 1
or bpl, al
xor bpl, 1
mov eax, ebx
or al, bpl
xor al, 1
xor bpl, bl
mov edx, eax
and dl, bpl
xor bpl, al
or bpl, dl
mov r11, rcx
lea rax, [rcx - 1]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], r10
mov rdi, r10
test byte [rsp + 7], 1
je 0x18000d0d0
mov rdi, qword [rdi]
cmp rdi, qword [rsp + 0x10]
je 0x18000d0f2
mov r8, qword [rsp + 8]
test byte [rsp + 6], 1
je 0x18000d0e0
nop word [rax + rax]
cmp byte [r8 + 1], 0
lea r8, [r8 + 1]
jne 0x18000cef0
test bpl, 1
je 0x18000d0f0
movabs rcx, 0x850cc0eadd06714e
movabs rax, 0x269db35f7fcd2cc5
mov rdx, rax
add rax, rcx
sub rcx, rax
movabs rax, 0x1a156fb4b47726e9
sub rcx, rax
sub rcx, r11
add rcx, rax
add rcx, rdx
movabs rax, 0x27b37ae328512ff8
add r8, rax
movabs rdx, 0x11edc8320599aa6c
sub r8, rdx
sub r8, rax
movabs rax, 0xb834ae2ecb213266
add r8, rax
add r8, rcx
sub r8, rax
movabs rax, 0xad58ab3f8f6bfcd1
sub r8, rax
add r8, rdx
add r8, rax
je 0x18000d0b9
mov r10, qword [rdi + 0x60]
xor r15d, r15d
mov r12, r8
nop dword [rax + rax]
movzx eax, word [r10 + r15*2]
test eax, eax
setne r14b
sete r13b
movsx ecx, byte [r11 + r15]
lea esi, [rax - 0x41]
lea r9d, [rax + 0x20]
cmp si, 0x1a
cmovae r9d, eax
lea eax, [rcx - 0x41]
lea esi, [rcx + 0x20]
cmp al, 0x1a
cmovae esi, ecx
sub r9d, esi
sete al
setne cl
xor r14b, r13b
and r14b, r13b
mov ebx, r14d
xor bl, 1
or r14b, bl
mov edx, ebx
xor dl, r14b
or r14b, bl
xor r14b, 1
or r14b, dl
mov edx, r14d
xor dl, 1
and dl, cl
and r14b, al
or r14b, dl
mov eax, r13d
or al, cl
xor al, 1
xor r13b, cl
mov ecx, eax
and cl, r13b
xor r13b, al
or r13b, cl
mov eax, r13d
xor al, 1
mov ecx, r14d
xor cl, 1
mov edx, ecx
and dl, r14b
and r13b, al
xor cl, dl
xor dl, 1
or dl, r14b
xor dl, 1
or dl, cl
xor r13b, 1
mov ecx, eax
xor cl, r13b
or r13b, al
xor r13b, 1
or r13b, cl
mov ecx, edx
xor cl, 1
and cl, r13b
xor r13b, 1
and r13b, dl
or r13b, cl
mov ecx, r14d
xor cl, al
or al, r14b
xor al, 1
or al, cl
xor al, 1
mov ecx, r13d
and cl, al
test cl, 1
jne 0x18000d0b0
xor r13b, al
test r13b, 1
jne 0x18000d0b0
movabs rax, 0x82f740e719a98077
mov rcx, rax
movabs rax, 0x4cceeb567b64007a
mov rdx, rax
add rax, rcx
sub rax, r12
sub rax, rcx
sub rax, rdx
not rax
add r15, 1
mov r12, rax
cmp r8, r15
jne 0x18000cf90
jmp 0x18000d0b9
test r9d, r9d
jne 0x18000cec1
mov rax, qword [rdi + 0x30]
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000d0d0
jmp 0x18000d0e0
jmp 0x18000d0f0
xor eax, eax
jmp 0x18000d0bd