Function at 0x18000b490
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 8], rcx
mov edx, dword [0x18007946c]
mov r8d, dword [0x180079470]
lea ebp, [rdx - 1]
imul ebp, edx
mov ebx, ebp
not ebx
mov edx, ebx
and edx, 0x26600886
and ebp, 0x8828230
or ebp, edx
mov edi, ebp
xor edi, 0x8820030
xor ebp, 0xa1605802
or ebx, 0x2ee28ab6
mov edx, ebx
not edx
and ebp, 0xa160da02
and edi, 0xe8200b4
or edi, ebp
and ebx, 0xa160da02
and edx, 0x501d2549
or edx, ebx
xor edx, edi
mov ebp, edx
not ebp
and ebp, 0xd11d7549
and edx, 0x2ee28ab6
or edx, ebp
mov ebp, edx
not ebp
and ebp, 0xdd6e5f03
mov eax, edx
and eax, 0x2291a0fc
or eax, ebp
mov esi, eax
xor esi, 0x2291a0fc
mov edi, eax
xor edi, 0xd3e4e32d
and edi, esi
and edx, 0xf17543d1
mov ebx, edi
and ebx, edx
xor edx, edi
or edx, ebx
mov ebx, edx
not ebx
and ebx, 0xeeb1bc10
and edx, 0x114e43ef
or edx, ebx
mov ebx, edx
xor ebx, 0x484da80
xor eax, 0x9d2a4403
and eax, 0x9dab4473
mov ebp, esi
and ebp, 0x6254bb8c
or ebp, eax
xor ebp, 0x9dab4472
and esi, 1
or esi, ebp
mov eax, esi
not eax
and eax, 0xe9823bc1
and esi, 0x167dc43e
or esi, eax
mov eax, esi
xor eax, 0x41cc006
xor esi, 0xe9823bc1
xor edx, 0xe03b003f
mov ebp, edx
and ebp, 0xbb632579
and ebx, 0x449cda86
or ebx, ebp
or edx, esi
and esi, 0xbb632579
and eax, 0x449cda86
or eax, esi
xor eax, ebx
not edx
or edx, eax
mov eax, edx
not eax
mov ebx, eax
or ebx, 0x1c410b69
mov ebp, ebx
not ebp
or edx, 0x219a6086
and edx, 0x3d9b62c7
and eax, 0x400928
or eax, edx
and ebx, 0x3d9b62c7
and ebp, 0xc2249410
or ebp, ebx
xor ebp, eax
mov eax, ebp
not eax
and eax, 0xe3bef496
and ebp, 0x1c410b69
or ebp, eax
mov eax, ebp
not eax
and eax, 0x978db376
and ebp, 0x68724c89
or ebp, eax
mov eax, ebp
xor eax, 0x40020881
xor ebp, 0x8504b256
and ebp, 0xad74f65e
and eax, 0x528b09a1
or eax, ebp
xor eax, 0xad74f65e
cmp eax, 0xffffffff
sete r9b
setne r10b
cmp r8d, 0xa
setl dl
cmp r8d, 9
setg r11b
and r10b, r11b
mov ebx, edx
and bl, r9b
or bl, r10b
xor r11b, bl
and r11b, bl
xor dl, r9b
mov ebx, edx
xor bl, 1
and dl, bl
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
mov r8d, edx
and r8b, r11b
xor r11b, 1
xor dl, 1
and dl, r11b
or dl, r8b
mov r8d, edx
and r8b, 1
mov r9d, r11d
and r9b, bl
xor r11b, bl
or r11b, r9b
mov eax, r11d
not al
and al, 1
cmp r8b, al
jne 0x18000b6c2
xor dl, 1
or dl, r11b
xor dl, 1
test dl, 1
jne 0x18000b6c2
nop dword [rax]
jmp 0x18000b6c0
mov rax, qword gs:[0x60]
mov r13, qword [rax + 0x18]
mov r9, qword [r13 + 0x10]
add r13, 0x10
cmp r9, r13
je 0x18000b8a2
mov ebp, dword [0x180079454]
mov edx, dword [0x180079458]
lea eax, [rbp - 1]
imul eax, ebp
mov ebp, eax
not ebp
and eax, ebp
mov ebx, ebp
and ebx, eax
xor eax, ebp
or eax, ebx
mov ebp, eax
xor ebp, 1
and ebp, eax
mov ebx, eax
not ebx
and ebx, 0xfffffffe
and eax, 1
or eax, ebx
mov ebx, ebp
and ebx, eax
xor eax, ebp
or eax, ebx
mov ebp, eax
not ebp
and ebp, 0xbdced5d9
and eax, 0x42312a26
or eax, ebp
mov ebp, eax
xor ebp, 0x2012a00
xor eax, 0x8c4845c8
and eax, 0xcc7845ee
and ebp, 0x3387ba11
or ebp, eax
mov eax, ebp
xor eax, 0x8860056e
xor ebp, 0x13851a10
and ebp, 0x579d5a90
and eax, 0xa862a56f
or eax, ebp
mov ebp, eax
xor ebp, 0xa8008446
xor eax, 0x56904810
and eax, 0x56f26939
and ebp, 0xa90d96c6
or ebp, eax
xor ebp, 0x56f26939
cmp ebp, 0xffffffff
sete al
setne r8b
cmp edx, 0xa
setl r11b
cmp edx, 9
setg r10b
mov edx, r10d
or al, r10b
and r10b, r8b
xor dl, r8b
or dl, r10b
mov r15d, edx
xor r15b, 1
or r11b, r8b
mov ebx, eax
xor bl, r11b
or al, r11b
xor al, 1
or al, bl
xor al, 1
and r15b, dl
mov ebx, edx
and bl, r15b
xor r15b, dl
or r15b, bl
xor r15b, al
mov ebx, edx
and bl, al
xor al, dl
or al, bl
xor al, 1
mov r10d, r15d
and r10b, al
mov edx, dword [0x180079474]
mov r14d, dword [0x180079478]
lea ebx, [rdx - 1]
imul ebx, edx
mov edx, ebx
not edx
and edx, 0x86061c97
and ebx, 0x79f9e368
or ebx, edx
mov esi, ebx
xor esi, 0x61588268
xor ebx, 0x86061c97
mov edx, ebx
or edx, 1
mov ebp, edx
not ebp
and ebx, 0x98a16911
and esi, 0x675e96ee
or esi, ebx
mov ebx, esi
xor ebx, 0x25461424
xor esi, 0x98a16910
mov edi, edx
and edi, 0xc2388acb
and ebp, 0x3dc77534
or ebp, edi
or edx, esi
and esi, 0xc2388acb
and ebx, 0x3dc77534
or ebx, esi
xor ebx, ebp
not edx
or edx, ebx
mov ebp, edx
not ebp
and ebp, 0x417c6611
and edx, 0xbe8399ee
or edx, ebp
xor edx, 0xbe8399ee
sete r8b
setne sil
cmp r14d, 0xa
setl r11b
cmp r14d, 9
setg bl
test r10b, 1
jne 0x18000b8a9
xor r15b, al
test r15b, 1
jne 0x18000b8a9
nop dword [rax]
jmp 0x18000b8a0
xor eax, eax
jmp 0x18000ba76
mov eax, ebx
xor al, sil
mov edx, ebx
xor dl, r8b
and dl, bl
and r11b, sil
and bl, r8b
or bl, r11b
mov r8d, edx
and r8b, bl
xor bl, dl
or bl, r8b
mov edx, ebx
xor dl, 1
and bl, dl
mov r8d, edx
and r8b, bl
xor bl, dl
or bl, r8b
xor bl, al
mov edx, ebx
xor dl, 1
and al, dl
mov ecx, eax
xor cl, 1
xor al, bl
or cl, dl
xor cl, 1
or cl, al
movabs r12, 0xbfe51c1f8180c5bd
movabs r11, 0xbe0f16e19c8610f3
movabs rdx, 0x7e3910b5cd0b0864
movabs r8, 0x77c04d646e56a2a4
movabs rsi, 0x4ccc27f7880915d0
movabs rbx, 0x287643e6d0756305
movabs rdi, 0x17dc473024b5815c
movabs rax, 0x57a5ee88f6adf9e
mov rbp, qword [rsp + 8]
lea r10, [rbp - 1]
add rbp, rax
sub rax, rbp
add rax, rdx
sub rdx, rax
mov qword [rsp + 0x20], r13
mov byte [rsp + 7], cl
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x10], r10
mov rbp, r10
nop dword [rax]
cmp byte [rbp + 1], 0
lea rbp, [rbp + 1]
jne 0x18000b970
test cl, 1
je 0x18000ba70
mov rax, r9
add rbp, rsi
sub rdx, rbp
add rdx, rsi
add rdx, r8
mov r13, r8
sub r13, rdx
movabs rsi, 0xf52825893d741358
je 0x18000ba72
mov r14, qword [rax + 0x60]
xor r15d, r15d
mov rbp, r13
nop word cs:[rax + rax]
nop dword [rax]
movzx r8d, word [r14 + r15*2]
mov rcx, qword [rsp + 8]
movsx edx, byte [rcx + r15]
lea ecx, [r8 - 0x41]
lea r9d, [r8 + 0x20]
cmp cx, 0x1a
cmovae r9d, r8d
lea ecx, [rdx - 0x41]
lea r10d, [rdx + 0x20]
cmp cl, 0x1a
cmovae r10d, edx
cmp r9d, r10d
jne 0x18000ba25
test r8w, r8w
je 0x18000ba72
add rbp, r11
sub rbp, rsi
sub rbp, r12
add rbp, rsi
add rbp, r12
sub rbp, rbx
add rbp, rdi
sub rbp, r11
sub rbp, rdi
add rbp, rbx
add rbp, 0xffffffffffffffff
add r15, 1
cmp r13, r15
jne 0x18000b9c0
jmp 0x18000ba72
mov r9, rax
mov r9, qword [rax]
mov r13, qword [rsp + 0x20]
cmp r9, r13
mov cl, byte [rsp + 7]
mov rdx, qword [rsp + 0x18]
movabs r8, 0x77c04d646e56a2a4
movabs rsi, 0x4ccc27f7880915d0
mov r10, qword [rsp + 0x10]
mov eax, 0
jne 0x18000b96a
jmp 0x18000ba76
jmp 0x18000ba70
mov rax, qword [rax + 0x30]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret