Function at 0x18000ad50
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x10], rcx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
add rcx, 0x10
mov qword [rsp + 8], rax
cmp rax, rcx
je 0x18000afc2
mov qword [rsp + 0x20], rcx
mov ecx, dword [0x180029a84]
mov eax, dword [0x180029a88]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, ebx
not edx
mov ecx, edx
and ecx, 0x46908081
mov ebp, ebx
and ebp, 0x10284b20
or ebp, ecx
xor ebp, 0x10284b20
mov ecx, ebx
and ecx, 0xa947345e
or ecx, ebp
mov ebp, ecx
not ebp
and ebp, 0xa947345f
and ecx, 0x56b8cba0
or ecx, ebp
mov ebp, ecx
not ebp
and edx, ebp
and ecx, ebx
or ecx, edx
not ecx
or ecx, ebp
cmp ecx, 0xffffffff
setne r8b
sete dl
cmp eax, 0xa
setl bl
cmp eax, 9
setg al
mov r9d, eax
xor r9b, dl
xor r9b, 1
or r9b, al
mov ecx, r9d
not cl
and dl, al
and bl, r8b
or bl, dl
mov eax, ebx
xor al, 1
and bl, r9b
or r9b, al
mov r11d, r9d
xor r11b, 1
and al, cl
or al, bl
mov ecx, dword [0x180029a9c]
mov r8d, dword [0x180029aa0]
lea edi, [rcx - 1]
imul edi, ecx
mov edx, edi
not edx
mov ecx, edx
and ecx, 0x81210004
mov ebp, edi
and ebp, 0x688018d0
or ebp, ecx
mov ecx, ebp
xor ecx, 0x28000800
xor ebp, 0x801f2707
mov ebx, edx
or ebx, 0xe9a118d4
mov esi, ebx
not esi
and ebp, 0xc09f37d7
and ecx, 0x29200800
or ecx, ebp
and ebx, 0xc09f37d7
and esi, 0x1640c028
or esi, ebx
xor esi, ecx
mov ecx, esi
not ecx
and ecx, 0xf447eec3
and esi, 0xbb8113c
or esi, ecx
mov ecx, esi
xor ecx, 0xc2110868
xor esi, 0x8062604
and esi, 0x280e2785
and ecx, 0xd7f1d87a
or ecx, esi
xor ecx, 0xd7f1d87a
and edx, 0x66b5536e
and edi, 0x994aac91
or edi, edx
xor edi, 0x994aac91
mov edx, ecx
and edx, edi
xor edi, ecx
or edi, edx
cmp edi, 0xffffffff
setne byte [rsp + 2]
sete r14b
cmp r8d, 9
setg sil
cmp r8d, 0xa
setl r10b
mov ecx, dword [0x180029aa4]
mov ebp, dword [0x180029aa8]
lea edx, [rcx - 1]
imul edx, ecx
mov ecx, edx
xor ecx, 0x5cb9103a
and ecx, edx
not edx
and edx, 0x5cb9103a
mov edi, edx
and edi, ecx
xor ecx, edx
or ecx, edi
mov edx, ecx
not edx
and edx, 0x3375aa34
and ecx, 0xcc8a55cb
or ecx, edx
mov r15d, ecx
xor r15d, 0x903345f1
xor ecx, 0x29cc2802
mov edx, r15d
and edx, 0xfffffffe
and ecx, 0xa9cd6d23
and r15d, 0x563292dc
or r15d, ecx
xor r15d, 0x563292dd
mov ecx, edx
and ecx, r15d
xor r15d, edx
or r15d, ecx
mov ecx, r15d
not ecx
mov edx, r15d
and edx, 0xd3c50f99
and ecx, 0x2c3af066
or ecx, edx
xor ecx, 0xd3c50f99
xor r15d, ecx
and r15d, ecx
setne bl
cmp ebp, 0xa
setl r13b
mov dword [rsp + 4], ebp
cmp ebp, 9
setg r12b
cmp r11b, al
jne 0x18000b1c2
xor al, 1
or r9b, al
xor r9b, 1
test r9b, 1
jne 0x18000b1c2
nop
jmp 0x18000afc0
mov eax, dword [0x180029aa4]
mov edi, dword [0x180029aa8]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x42e7f6d
and ecx, 0xfbd18092
or ecx, edx
mov ebp, ecx
xor ebp, 0x18000010
xor ecx, 0x80801
or eax, 0xb95baa57
mov r15d, eax
not r15d
or ecx, 0x2205400
and ecx, 0xa379dc03
and ebp, 0x18022254
or ebp, ecx
and eax, 0xa379dc03
and r15d, 0x448401a8
or r15d, eax
xor r15d, ebp
mov eax, r15d
not eax
and eax, 0x374bb2b5
and r15d, 0xc8b44d4a
or r15d, eax
mov edx, r15d
xor edx, 0x1002831d
mov ebx, r15d
xor ebx, 0x8e1018e2
or edx, 0x61fd7c60
mov ebp, edx
not ebp
mov eax, ebx
or eax, 0x9e02839f
mov ecx, eax
not ecx
and edx, 0xdb80b6b0
and ebp, 0x402010f
or ebp, edx
and eax, 0xdb80b6b0
and ecx, 0x207d4840
or ecx, eax
xor ecx, ebp
mov eax, ecx
not eax
and eax, 0x61fd7c61
and ecx, 0x9e02839e
or ecx, eax
and ebx, 1
xor r15d, 0x8e1018e3
or r15d, ebx
not r15d
mov eax, ecx
and eax, r15d
xor r15d, ecx
or r15d, eax
mov eax, r15d
not eax
mov ecx, r15d
xor ecx, 0x88ae4ec2
and ecx, r15d
or r15d, 0x7751b13d
mov edx, ecx
not edx
mov ebp, r15d
and ebp, 0xc45c1d1a
and eax, 0x8a242c0
or eax, ebp
or r15d, edx
and edx, 0xc45c1d1a
and ecx, 0x3ba3e2e5
or ecx, edx
xor ecx, eax
not r15d
or r15d, ecx
mov eax, r15d
not eax
and eax, 0x7751b13d
and r15d, 0x88ae4ec2
or r15d, eax
mov eax, r15d
not eax
mov ecx, eax
and ecx, 0xd24b5dbd
and r15d, 0x2db4a242
or r15d, ecx
xor r15d, 0x2db4a242
or r15d, eax
not r15d
test r15d, r15d
setne cl
sete r9b
cmp edi, 9
setg r8b
cmp edi, 0xa
setl al
mov ebx, eax
xor bl, r8b
and bl, al
mov eax, r9d
xor al, bl
mov edx, eax
and dl, r9b
and al, bl
mov ebx, edx
xor bl, 1
xor dl, al
xor al, 1
or al, bl
xor al, 1
or al, dl
xor r9b, r8b
and r9b, r8b
xor cl, r8b
mov edx, r9d
and dl, cl
xor cl, r9b
or cl, dl
mov r8d, ecx
xor r8b, 1
mov ebx, eax
xor bl, 1
and r8b, bl
or bl, cl
mov edx, ebx
not dl
and dl, 1
and cl, al
or cl, r8b
mov r8d, ecx
and r8b, 1
xor eax, eax
cmp dl, r8b
jne 0x18000b47f
xor cl, 1
or bl, cl
xor bl, 1
test bl, 1
jne 0x18000b47f
nop word cs:[rax + rax]
nop
jmp 0x18000b1c0
mov eax, r10d
xor al, sil
and al, r10b
mov ecx, r14d
mov r9b, byte [rsp + 2]
xor cl, r9b
and cl, r14b
mov edx, ecx
xor dl, 1
or cl, dl
mov r8d, edx
xor r8b, cl
or cl, dl
xor cl, 1
or cl, r8b
mov r11d, ecx
xor r11b, al
and cl, r11b
and r11b, al
mov eax, ecx
xor al, 1
xor cl, r11b
xor r11b, 1
or r11b, al
xor r11b, 1
or r11b, cl
mov eax, r9d
and al, r10b
mov ecx, esi
and cl, r14b
or cl, al
xor r10b, r14b
or sil, r9b
xor sil, 1
or sil, r10b
xor cl, 1
mov eax, ecx
xor al, sil
or cl, sil
xor cl, 1
or cl, al
xor r11b, 1
mov eax, r11d
or al, cl
xor al, 1
xor r11b, cl
mov ecx, eax
and cl, r11b
xor r11b, al
or r11b, cl
mov eax, r12d
and al, bl
xor r12b, bl
or r12b, al
mov r8d, r12d
xor r8b, 1
mov ecx, ebx
or cl, r13b
xor bl, r13b
not bl
and bl, r13b
xor bl, 1
mov edx, ecx
xor dl, bl
or bl, cl
xor bl, 1
or bl, dl
mov ecx, ebx
xor cl, 1
mov edx, r12d
and dl, r8b
and cl, bl
mov eax, r12d
and al, dl
xor dl, r12b
or dl, al
xor cl, 1
mov eax, ebx
xor al, cl
or cl, bl
xor cl, 1
or cl, al
xor cl, dl
mov edx, r8d
xor dl, bl
or bl, r8b
xor bl, 1
or bl, dl
xor bl, 1
mov eax, ecx
and al, bl
xor bl, cl
or bl, al
movabs rsi, 0x494a786b0c852a9f
movabs rbp, 0x2bf267c5960c0c38
movabs r14, 0x251ea0dccf704128
movabs rcx, 0x23e4d3de53a15330
mov rax, qword [rsp + 0x10]
add rax, 0xffffffffffffffff
mov byte [rsp + 2], bl
mov byte [rsp + 3], r11b
mov qword [rsp + 0x18], rax
mov r9, rax
cmp byte [r9 + 1], 0
lea r9, [r9 + 1]
jne 0x18000b300
test r11b, 1
je 0x18000b460
sub r9, rcx
sub r9, qword [rsp + 0x10]
add r9, rcx
je 0x18000b472
mov rax, qword [rsp + 8]
mov r12, qword [rax + 0x60]
xor r8d, r8d
mov r13, r9
nop word cs:[rax + rax]
nop
movzx ecx, word [r12 + r8*2]
mov rax, qword [rsp + 0x10]
movsx edi, byte [rax + r8]
lea edx, [rcx - 0x41]
lea r10d, [rcx + 0x20]
cmp dx, 0x1a
cmovae r10d, ecx
cmp edi, 0x41
jl 0x18000b36f
lea edx, [rdi + 0x20]
cmp dil, 0x5b
cmovge edx, edi
mov edi, edx
sub r10d, edi
setne r11b
sete dl
test cx, cx
setne cl
sete al
mov ebx, eax
xor bl, dl
xor bl, 1
or bl, cl
and dl, al
and r11b, cl
or r11b, dl
mov ecx, ebx
xor cl, r11b
xor r11b, 1
or r11b, bl
cmp r11b, cl
jne 0x18000b410
or r11b, cl
xor r11b, 1
test r11b, 1
jne 0x18000b410
movabs rax, 0x6e0c6c4dd49ba25d
mov rcx, rax
sub r13, rax
movabs rax, 0xacdd7984f04e8759
sub r13, rax
add r13, r14
add r13, rax
add r13, rcx
movabs rax, 0x5282c9c510fe7881
add r13, rax
add r13, rbp
sub r13, r14
sub r13, rbp
add r13, rsi
sub r13, rax
mov rax, rsi
not rax
add r13, rax
add r8, 1
cmp r9, r8
jne 0x18000b340
jmp 0x18000b472
test r10d, r10d
je 0x18000b472
mov bl, byte [rsp + 2]
test bl, 1
je 0x18000b470
mov rax, qword [rsp + 8]
mov rax, qword [rax]
mov qword [rsp + 8], rax
cmp rax, qword [rsp + 0x20]
mov r11b, byte [rsp + 3]
movabs rcx, 0x23e4d3de53a15330
mov rax, qword [rsp + 0x18]
jne 0x18000b2fd
mov edi, dword [rsp + 4]
jmp 0x18000b128
jmp 0x18000b460
jmp 0x18000b470
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
mov edi, dword [rsp + 4]
test r15d, r15d
sete r8b
setne bl
cmp edi, 9
setg cl
mov r10d, ebx
xor r10b, cl
and bl, r10b
and r10b, cl
mov r9d, ebx
and r9b, r10b
xor r10b, bl
or r10b, r9b
xor r8b, cl
and cl, r8b
mov ebx, r8d
xor bl, cl
xor cl, 1
xor bl, 1
or cl, r8b
xor cl, 1
or cl, bl
mov ebx, ecx
xor bl, 1
and cl, bl
mov r8d, ebx
and r8b, cl
xor cl, bl
or cl, r8b
mov edx, ecx
xor dl, 1
mov ebx, edx
and bl, cl
xor dl, bl
xor bl, 1
or bl, cl
xor bl, 1
or bl, dl
xor bl, r10b
xor bl, 1
mov edx, r10d
xor dl, cl
or cl, r10b
xor cl, 1
or cl, dl
xor cl, 1
mov edx, ebx
and dl, cl
test dl, 1
jne 0x18000b512
xor bl, cl
test bl, 1
jne 0x18000b512
nop dword [rax]
jmp 0x18000b510
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret