Function at 0x18000d160
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x18
mov r14, rcx
mov edx, dword [0x18002ba9c]
mov esi, dword [0x18002baa0]
lea ebx, [rdx - 1]
imul ebx, edx
mov ebp, ebx
not ebp
mov edx, ebp
and edx, 0x8ace258
mov eax, ebx
and eax, 0x80110020
or eax, edx
xor eax, 0x80110020
mov edx, ebx
and edx, 0x77421d87
or edx, eax
mov eax, edx
not eax
and eax, 0x71cf3ca0
and edx, 0x8e30c35f
or edx, eax
mov eax, edx
xor eax, 0x52124
and ebp, 0x5017e32b
and ebx, 0xafe81cd4
or ebx, ebp
mov ebp, ebx
xor ebp, 0x89400cc4
xor edx, 0xf972ded9
mov edi, edx
and edi, 0x36aad012
and eax, 0xc9552fed
or eax, edi
xor ebx, 0x1002c002
and ebx, 0x36aad012
and ebp, 0xc9552fed
or ebp, ebx
xor ebp, eax
xor edx, ebp
test edx, ebp
sete cl
setne r8b
cmp esi, 0xa
setl bl
cmp esi, 9
setg r9b
mov eax, ebx
and bl, r8b
and r8b, r9b
and al, cl
or al, r8b
xor al, 1
or al, r9b
mov r8d, eax
xor r8b, 1
and cl, r9b
or bl, cl
mov r9d, ebx
xor r9b, 1
mov edx, eax
and dl, r8b
mov ecx, r9d
and cl, bl
mov r10d, eax
and r10b, dl
xor dl, al
or dl, r10b
mov eax, r9d
and al, cl
xor cl, r9b
or cl, al
mov eax, edx
xor al, 1
and al, cl
xor cl, 1
and cl, dl
or cl, al
mov eax, ecx
and al, 1
mov edx, r8d
xor dl, bl
or bl, r8b
xor bl, 1
or bl, dl
mov edx, ebx
not dl
and dl, 1
cmp al, dl
jne 0x18000d2a2
xor cl, 1
or cl, bl
xor cl, 1
test cl, 1
jne 0x18000d2a2
nop word cs:[rax + rax]
nop
jmp 0x18000d2a0
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
add r8, 0x10
mov ecx, dword [0x18002ba84]
lea eax, [rcx - 1]
imul eax, ecx
mov ebp, eax
not ebp
mov ecx, eax
xor ecx, 0x6fb9e3e4
and ecx, eax
mov edx, ebp
and edx, 0x6fb9e3e4
mov ebx, ecx
and ebx, edx
xor edx, ecx
mov ecx, dword [0x18002ba88]
or edx, ebx
mov ebx, edx
not ebx
and ebx, 0x6fb9e3e5
and edx, 0x90461c1a
or edx, ebx
and ebp, 0x48e6b2e6
mov ebx, eax
and ebx, 0xb7194d19
or ebx, ebp
xor ebx, 0x48e6b2e7
and eax, 1
or eax, ebx
not eax
mov ebp, edx
and ebp, eax
xor eax, edx
or eax, ebp
mov edx, eax
not edx
and edx, 0x74cc9f84
and eax, 0x8b33607b
or eax, edx
xor eax, 0x8b33607b
sete dl
setne bl
cmp ecx, 0xa
setl al
cmp ecx, 9
setg r12b
xor bl, r12b
mov ecx, edx
xor cl, al
or al, dl
xor al, 1
or al, bl
mov r10d, eax
xor r10b, 1
and cl, dl
or r12b, dl
xor r12b, 1
mov edx, ecx
and dl, r12b
xor r12b, cl
or r12b, dl
mov ebx, r12d
xor bl, 1
mov edx, eax
and dl, r10b
mov ecx, ebx
and cl, r12b
mov r11d, eax
and r11b, dl
xor dl, al
or dl, r11b
mov r11d, ebx
and r11b, cl
xor cl, bl
or cl, r11b
xor cl, dl
xor bl, al
or r12b, r10b
xor r12b, 1
or r12b, bl
xor r12b, 1
mov eax, ecx
and al, r12b
xor r12b, cl
mov ecx, dword [0x18002baa4]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
mov edx, ebx
xor edx, 0x6b10d47b
and edx, ebx
not ebx
and ebx, 0x48109018
and ecx, 0x23004463
or ecx, ebx
mov ebx, ecx
xor ebx, 0x21004041
xor ecx, 0xdcffbb9c
mov edi, ecx
and edi, 0x1ecaa7aa
and ebx, 0x61105051
or ebx, edi
mov edi, edx
not edi
or ecx, edi
and edi, 0x1ecaa7aa
and edx, 0xe1355855
or edx, edi
xor edx, ebx
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xf88770fc
and ecx, 0x7788f03
or ecx, edx
mov ebx, ecx
xor ebx, 0x9397a487
mov edx, ebx
or edx, 1
mov edi, edx
not edi
and ebx, 0xfffffffe
and ecx, 1
or ecx, ebx
mov ebx, edx
and ebx, 0x93ed800b
and edi, 0x6c127ff4
or edi, ebx
mov ebx, ecx
not ebx
or edx, ebx
and ebx, 0x93ed800b
and ecx, 0x6c127ff4
or ecx, ebx
movabs r10, 0xd860be8d501fecd
or r12b, al
xor ecx, edi
not edx
or edx, ecx
mov eax, edx
xor eax, 0x90233a4e
and eax, edx
not edx
and edx, 0x90233a4e
mov ecx, edx
and ecx, eax
xor eax, edx
mov edx, dword [0x18002baa8]
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0x8688453c
and eax, 0x7977bac3
or eax, ecx
mov ecx, eax
xor ecx, 0x6944800d
xor eax, 0x16214150
and eax, 0x963141d0
and ecx, 0x69cebe2f
or ecx, eax
xor ecx, 0x69cebe2f
cmp ecx, 0xffffffff
sete r11b
setne sil
cmp edx, 0xa
setl dil
cmp edx, 9
setg dl
mov ebx, esi
xor bl, r11b
and bl, sil
mov eax, ebx
not al
and al, bl
mov ecx, eax
and cl, bl
xor al, bl
or al, cl
mov ecx, eax
xor cl, 1
and al, cl
mov ebx, ecx
and bl, al
xor al, cl
or al, bl
xor al, dl
and sil, dil
or dil, r11b
xor dil, 1
and dl, r11b
or dl, sil
mov ecx, edi
and cl, dl
xor dl, dil
or dl, cl
mov ecx, edx
xor cl, 1
and cl, al
xor al, 1
mov ebx, eax
xor bl, dl
and bl, al
and dl, al
or dl, cl
xor bl, 1
xor dl, 1
mov eax, ebx
xor al, dl
or dl, bl
xor dl, 1
or dl, al
mov qword [rsp], r14
lea rax, [r14 - 1]
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], r8
mov rdi, r8
mov rdi, qword [rdi]
cmp rdi, qword [rsp + 0x10]
je 0x18000d6e2
mov rsi, qword [rsp + 8]
test r12b, 1
je 0x18000d6e0
nop dword [rax + rax]
cmp byte [rsi + 1], 0
lea rsi, [rsi + 1]
jne 0x18000d570
movabs rax, 0xbbcbbe6aa1d0416e
movabs rcx, 0x60527b400f03b2e6
mov rbp, rcx
add rcx, rax
mov r13, qword [rsp]
sub rcx, r13
sub rcx, rax
movabs rax, 0x72e4189c8445a4c4
add rcx, rax
sub rcx, rbp
sub rcx, rax
add rsi, rcx
je 0x18000d6e6
mov r11, qword [rdi + 0x60]
nop
test dl, 1
je 0x18000d5c0
movzx ebx, word [r11]
test ebx, ebx
sete r14b
setne al
movsx r8d, byte [r13]
lea r9d, [rbx - 0x41]
lea r15d, [rbx + 0x20]
cmp r9w, 0x1a
cmovae r15d, ebx
lea ebx, [r8 - 0x41]
lea ebp, [r8 + 0x20]
cmp bl, 0x1a
cmovae ebp, r8d
sub r15d, ebp
setne bl
mov ecx, eax
xor cl, bl
mov r8d, ecx
xor r8b, 1
and cl, al
xor r14b, bl
xor cl, 1
xor r14b, 1
mov eax, ecx
xor al, r14b
or r14b, cl
xor r14b, 1
or r14b, al
mov eax, r14d
xor al, 1
and r14b, al
mov ecx, eax
and cl, r14b
xor r14b, al
or r14b, cl
mov ebx, r14d
xor bl, r8b
or r14b, r8b
xor r14b, 1
or r14b, bl
xor bl, 1
mov eax, ebx
and al, 1
mov ecx, r14d
and cl, 1
cmp al, cl
jne 0x18000d6d0
or bl, r14b
xor bl, 1
test bl, 1
jne 0x18000d6d0
add r11, 2
add r13, 1
movabs rax, 0xf7980eedfa24314d
mov rbp, rax
movabs rcx, 0xf2454fdeb3ba5065
add rax, rcx
sub rcx, rax
add rcx, rsi
movabs rax, 0xcb266123ff23a099
sub rcx, rax
add rcx, r10
add rcx, rax
movabs rax, 0x513a64a350ef63ad
add rcx, rax
add rcx, rbp
sub rcx, rax
mov rsi, r10
not rsi
add rsi, rcx
jne 0x18000d5c0
jmp 0x18000d6eb
test r15d, r15d
jne 0x18000d54e
jmp 0x18000d6eb
jmp 0x18000d6e0
xor eax, eax
jmp 0x18000d6ef
test dl, 1
je 0x18000d700
mov rax, qword [rdi + 0x30]
add rsp, 0x18
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000d700