Function at 0x18000cd40
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
movabs r10, 0xe7f6928d6bd61ca5
movabs r11, 0xc209e90532638a57
mov rbp, qword gs:[0x60]
mov rax, qword [rbp + 0x18]
add rax, 0x10
mov edi, dword [0x18002ba94]
mov r8d, dword [0x18002ba98]
lea ebx, [rdi - 1]
imul ebx, edi
mov esi, ebx
not esi
mov edi, esi
and edi, ebx
mov ebp, edi
not ebp
mov r9d, ebx
and r9d, 0x185a1cc
and esi, 0xfe7a5e33
or esi, r9d
or ebx, ebp
and ebp, 0x185a1cc
and edi, 0xfe7a5e33
or edi, ebp
xor edi, esi
not ebx
or ebx, edi
mov ebp, ebx
not ebp
mov edi, ebx
and edi, 0xfffffffe
and ebp, 0xfffffffe
and ebx, 1
or ebx, ebp
mov ebp, edi
and ebp, ebx
xor ebx, edi
or ebx, ebp
mov ebp, ebx
not ebp
and ebp, 0xf116be4e
and ebx, 0xee941b1
or ebx, ebp
mov ebp, ebx
not ebp
and ebp, 0x18ba2960
and ebx, 0xe745d69f
or ebx, ebp
mov ebp, ebx
xor ebp, 0x14402040
xor ebx, 0xe9ac972e
mov edi, ebx
and edi, 0x6a1bd999
and ebp, 0x95e42666
or ebp, edi
xor ebp, 0x6a1bd999
xor ebx, ebp
test ebx, ebp
setne dil
sete r9b
cmp r8d, 0xa
setl sil
cmp r8d, 9
setg r8b
and r8b, r9b
and dil, sil
or dil, r8b
or sil, r9b
mov edx, edi
xor dl, 1
or dl, sil
xor sil, dil
xor sil, 1
xor dl, 1
or dl, sil
mov ebx, edi
xor bl, dl
xor dl, 1
xor bl, 1
or dl, dil
xor dl, 1
or dl, bl
xor dl, 1
mov r8d, ebx
and r8b, dl
xor dl, bl
mov ebp, dword [0x18002ba7c]
lea r14d, [rbp - 1]
imul r14d, ebp
mov ebp, r14d
or ebp, 1
mov r9d, ebp
not r9d
mov ebx, r14d
xor ebx, 0xfffffffe
and ebx, r14d
mov edi, ebp
and edi, 0xc0f44d27
and r9d, 0x3f0bb2d8
or r9d, edi
mov edi, ebx
not edi
or ebp, edi
and edi, 0xc0f44d27
and ebx, 0x3f0bb2d8
or ebx, edi
movabs rdi, 0x41245f8ec9e754f0
or dl, r8b
mov byte [rsp + 5], dl
xor ebx, r9d
mov r8d, r14d
not r8d
not ebp
or ebp, ebx
and r8d, 0xe035d575
and r14d, 0x1fca2a8a
or r14d, r8d
mov r8d, ebp
not r8d
mov ebx, r8d
and ebx, 0x336a0a8b
and ebp, 0xcc95f574
or ebp, ebx
mov esi, r14d
xor esi, 0xc802000
xor r14d, 0x20200001
and r14d, 0x336a0a8b
and esi, 0xcc95f574
or esi, r14d
mov ebx, dword [0x18002ba80]
xor esi, ebp
not esi
or esi, r8d
cmp esi, 0xffffffff
sete dl
cmp ebx, 0xa
setl r8b
cmp ebx, 9
setg r9b
mov ebx, r9d
xor bl, dl
xor bl, 1
or r9b, bl
and bl, dl
xor dl, r8b
and dl, r8b
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
mov ebx, r9d
xor bl, dl
xor dl, 1
or dl, r9b
mov r8d, edx
xor r8b, bl
or dl, bl
xor dl, 1
or dl, r8b
mov byte [rsp + 7], dl
mov ebx, dword [0x18002ba9c]
lea ebp, [rbx - 1]
imul ebp, ebx
mov esi, ebp
xor esi, 0xaf35da60
and esi, ebp
or ebp, 0x50ca259f
mov r9d, ebp
not r9d
mov r8d, ebp
and r8d, 0xdb2dbb8e
and r9d, 0x24104060
or r9d, r8d
mov ebx, esi
not ebx
or ebp, ebx
and ebx, 0xdb2dbb8e
and esi, 0x24d24471
or esi, ebx
mov r8d, dword [0x18002baa0]
xor esi, r9d
not ebp
or ebp, esi
mov ebx, ebp
not ebx
and ebx, 0x50ca259f
and ebp, 0xaf35da60
or ebp, ebx
mov ebx, ebp
not ebx
mov r9d, ebp
and r9d, 0xfffffffe
and ebx, 0x2b9e2b43
and ebp, 0xd461d4bc
or ebp, ebx
xor ebp, 0xd461d4bd
mov esi, r9d
and esi, ebp
xor ebp, r9d
or ebp, esi
mov ebx, ebp
not ebx
and ebx, 0xc4011008
and ebp, 0x3bfeeff7
or ebp, ebx
mov ebx, ebp
not ebx
and ebx, 0x9038caea
and ebp, 0x6fc73515
or ebp, ebx
xor ebp, 0xabc6251d
sete r14b
setne bpl
cmp r8d, 0xa
setl r9b
cmp r8d, 9
setg r8b
mov r15d, r8d
xor r15b, r9b
and r15b, r8b
mov edx, r15d
xor dl, 1
mov esi, r15d
and sil, dl
mov ebx, esi
xor bl, 1
xor sil, r15b
or bl, dl
xor bl, 1
or bl, sil
or dl, r15b
xor dl, 1
mov r15d, ebx
and r15b, dl
xor dl, bl
movabs rsi, 0x1babc17bb4cc3a77
or dl, r15b
mov ebx, edx
xor bl, 1
and bl, bpl
and dl, r14b
or dl, bl
and bpl, r9b
or r9b, r14b
and r8b, r14b
xor r9b, 1
or r8b, bpl
mov ebx, r9d
and bl, r8b
xor r8b, r9b
or r8b, bl
mov ebx, r8d
xor bl, dl
xor dl, 1
or dl, r8b
mov r8d, ebx
xor r8b, dl
or dl, bl
xor dl, 1
or dl, r8b
mov byte [rsp + 6], dl
lea rdx, [rcx - 1]
mov qword [rsp + 0x18], rdx
mov rdx, rax
mov qword [rsp + 0x10], rax
mov rdx, qword [rdx]
cmp rdx, rax
je 0x18000d2b2
test byte [rsp + 5], 1
je 0x18000d2b0
mov qword [rsp + 8], rdx
jmp 0x18000d11e
xor r9d, r9d
test byte [rsp + 5], 1
jne 0x18000d270
mov r14, qword [rsp + 0x18]
test byte [rsp + 7], 1
je 0x18000d290
nop
cmp byte [r14 + 1], 0
lea r14, [r14 + 1]
jne 0x18000d130
test byte [rsp + 6], 1
je 0x18000d2a0
movabs rdx, 0x1e955089129620e
mov rbp, rdx
sub rbp, rcx
movabs rax, 0xc15758c4314807d0
add rbp, rax
sub rbp, rdx
sub rbp, rax
movabs rax, 0xb28669ef24e22670
add r14, rax
movabs rdx, 0x4ca4a4d40c48eff1
sub r14, rdx
sub r14, rax
add r14, rbp
add r14, rdx
je 0x18000d110
mov rax, qword [rsp + 8]
mov r12, qword [rax + 0x60]
xor r13d, r13d
mov rbp, r14
nop dword [rax]
movzx ebx, word [r12 + r13*2]
test ebx, ebx
setne r15b
movsx eax, byte [rcx + r13]
lea edx, [rbx - 0x41]
lea r9d, [rbx + 0x20]
cmp dx, 0x1a
cmovae r9d, ebx
lea edx, [rax - 0x41]
lea ebx, [rax + 0x20]
cmp dl, 0x1a
cmovae ebx, eax
sub r9d, ebx
setne al
xor al, r15b
xor r15b, al
and r15b, al
mov r8d, r15d
xor r8b, al
and r8b, r15b
mov edx, r15d
and r15b, al
not al
xor dl, 1
and dl, al
or r15b, dl
test r8b, r15b
jne 0x18000d113
xor r8b, r15b
test r8b, 1
jne 0x18000d113
lea rax, [r10 + rdi]
mov rdx, r10
sub rdx, rax
add rbp, rsi
sub rdx, rbp
add rdx, rsi
add rdx, r11
movabs rax, 0xa7114812e261a127
mov rbp, rax
add rdx, rax
mov rax, r11
sub rax, rdx
movabs rdx, 0x58f1ae2eba88b952
sub rax, rdx
sub rax, rdi
add rax, rdx
add rbp, rax
add rbp, 0xffffffffffffffff
add r13, 1
cmp r14, r13
jne 0x18000d1a0
jmp 0x18000d110
test r9d, r9d
mov rax, qword [rsp + 0x10]
mov rdx, qword [rsp + 8]
jne 0x18000d0ef
mov rax, qword [rdx + 0x30]
jmp 0x18000d2bb
jmp 0x18000d290
jmp 0x18000d2a0
jmp 0x18000d2b0
test byte [rsp + 5], 1
je 0x18000d2d0
xor eax, eax
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000d2d0