Function at 0x18000b100
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov edx, dword [0x180029a8c]
mov eax, dword [0x180029a90]
lea ebp, [rdx - 1]
imul ebp, edx
mov edx, ebp
not edx
and edx, 0x22008081
mov ebx, ebp
and ebx, 0x9910160
or ebx, edx
xor ebx, 0x9910160
and ebp, 0xd46e7e1e
or ebp, ebx
mov edx, ebp
not edx
and edx, 0xd294bd7f
and ebp, 0x2d6b4280
or ebp, edx
mov edx, ebp
xor edx, 0x6fac361
xor ebp, 0xe8001802
mov edi, edx
and edi, 0xfffffffe
and ebp, 0xece05843
and edx, 0x131fa7bc
or edx, ebp
xor edx, 0x131fa7bd
mov ebx, edi
and ebx, edx
xor edx, edi
or edx, ebx
mov ebp, edx
not ebp
and edx, 0xdff90f92
and ebp, 0x2006f06d
or ebp, edx
xor ebp, 0x2006f06d
cmp ebp, 0xffffffff
sete r8b
setne r9b
cmp eax, 9
setg dl
cmp eax, 0xa
setl bl
mov r10d, r9d
or r10b, bl
xor r10b, 1
mov eax, r9d
xor al, bl
not al
and al, bl
mov r11d, r10d
and r11b, al
xor al, r10b
or al, r11b
and r9b, bl
or bl, r8b
xor bl, 1
and dl, r8b
or dl, r9b
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
mov ebx, edx
xor bl, 1
and dl, bl
mov r8d, ebx
and r8b, dl
xor dl, bl
or dl, r8b
xor dl, al
mov ebx, edx
not bl
and bl, al
mov eax, ebx
and al, dl
test al, 1
jne 0x18000b222
xor bl, dl
test bl, 1
jne 0x18000b222
nop dword [rax + rax]
jmp 0x18000b220
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
mov rax, qword [r8 + 0x10]
add r8, 0x10
mov qword [rsp + 0x10], rax
cmp rax, r8
je 0x18000b67d
movabs r9, 0xdb2b7ed65027de02
movabs r11, 0xc4be0aa2fc322453
movabs r10, 0x7eaad5835da6f741
mov rax, qword [rsp + 8]
mov r12b, byte [rax]
mov edx, dword [0x180029a74]
mov eax, dword [0x180029a78]
lea esi, [rdx - 1]
imul esi, edx
mov edx, esi
not edx
and esi, edx
mov edi, edx
and edi, esi
xor esi, edx
or esi, edi
mov edi, esi
not edi
mov edx, edi
or edx, 1
mov ebx, edx
not ebx
and edi, 0x4995525
and esi, 0xfb66aada
or esi, edi
mov edi, esi
xor edi, 0x43620a18
xor esi, 0x4995524
mov ebp, edx
and ebp, 0xb88ca5e7
and ebx, 0x47735a18
or ebx, ebp
or edx, esi
and esi, 0xb88ca5e7
and edi, 0x47735a18
or edi, esi
xor edi, ebx
not edx
or edx, edi
mov esi, edx
not esi
and edx, esi
mov edi, esi
and edi, edx
xor edx, esi
or edx, edi
sete bl
setne sil
cmp eax, 9
setg dl
cmp eax, 0xa
setl dil
mov eax, edi
xor al, dl
and al, dil
xor al, sil
mov esi, eax
xor sil, 1
xor bl, dl
and dl, bl
xor bl, 1
mov edi, edx
and dil, bl
xor bl, dl
or bl, dil
mov edx, ebx
xor dl, 1
and bl, dl
mov edi, edx
and dil, bl
xor bl, dl
or bl, dil
mov r14d, ebx
xor r14b, 1
and bl, al
or al, r14b
and r14b, sil
or r14b, bl
xor r14b, 1
mov edx, eax
xor dl, r14b
or r14b, al
xor r14b, 1
or r14b, dl
mov eax, dword [0x180029a94]
mov r13d, dword [0x180029a98]
lea edx, [rax - 1]
imul edx, eax
mov eax, edx
xor eax, 0x56ff11ae
and eax, edx
not edx
and edx, 0x56ff11ae
mov esi, edx
and esi, eax
xor eax, edx
or eax, esi
mov edx, eax
not edx
and edx, 0xa900ee51
and eax, 0x56ff11ae
or eax, edx
mov esi, eax
not esi
and esi, 0xbee8823e
mov edx, eax
and edx, 0x41177dc1
or edx, esi
mov ebx, edx
xor ebx, 0x41177dc1
mov esi, edx
xor esi, 0x61e37176
and esi, ebx
and eax, 0x20f40cb7
mov edi, esi
and edi, eax
xor eax, esi
or eax, edi
mov esi, eax
not esi
and esi, 0x20f40cb6
and eax, 0xdf0bf349
or eax, esi
xor edx, 0x94a88010
and edx, 0x95aa9010
mov esi, ebx
and esi, 0x6a556fef
or esi, edx
xor esi, 0x95aa9011
and ebx, 1
or ebx, esi
mov edx, ebx
not edx
and edx, 0x699c0a8f
and ebx, 0x9663f570
or ebx, edx
mov edx, ebx
xor edx, 0x9240c540
xor ebx, 0x699c0a8f
mov esi, eax
not esi
mov edi, esi
and edi, 0x44ab38b5
and eax, 0xbb54c74a
or eax, edi
or esi, ebx
and ebx, 0x44ab38b5
and edx, 0xbb54c74a
or edx, ebx
xor edx, eax
not esi
or esi, edx
mov eax, esi
not eax
mov edx, eax
and edx, 0xeca018f5
and eax, esi
and esi, 0x135fe70a
or esi, edx
xor esi, 0x135fe70a
mov edx, esi
and edx, eax
xor esi, eax
or esi, edx
mov eax, esi
not eax
and eax, 0x17e251dc
and esi, 0xe81dae23
or esi, eax
mov eax, esi
xor eax, 0x58c22
xor esi, 0x11021000
and esi, 0xf91a3201
and eax, 0x6e5cdfe
or eax, esi
xor eax, 0xf91a3201
cmp eax, 0xffffffff
sete sil
setne bl
cmp r13d, 0xa
setl r15b
cmp r13d, 9
setg al
mov edx, eax
xor dl, bl
or bl, r15b
or r15b, sil
xor r15b, 1
or r15b, dl
mov edx, r15d
xor dl, 1
or al, sil
mov esi, ebx
xor sil, al
or al, bl
xor al, 1
or al, sil
mov esi, eax
xor sil, 1
and r15b, dl
mov ebx, r15d
and bl, dl
xor r15b, dl
or r15b, bl
mov ebx, r15d
xor bl, 1
and bl, al
and r15b, sil
or r15b, bl
mov ebx, edx
xor bl, al
or al, dl
xor al, 1
or al, bl
mov edx, eax
xor dl, r15b
xor r15b, 1
xor dl, 1
or r15b, al
xor r15b, 1
or r15b, dl
mov qword [rsp + 0x18], r8
mov byte [rsp + 7], r12b
test r12b, r12b
je 0x18000b54c
mov rcx, qword [rsp + 8]
test r14b, 1
je 0x18000b660
nop word cs:[rax + rax]
nop dword [rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18000b540
jmp 0x18000b55b
mov rcx, qword [rsp + 8]
test r14b, 1
je 0x18000b670
test r15b, 1
je 0x18000b650
add rcx, r11
add rcx, r10
sub rcx, qword [rsp + 8]
sub rcx, r10
add rcx, r9
sub rcx, r11
sub rcx, r9
je 0x18000b672
mov rax, r10
mov r10, r11
mov r11, r9
mov rdx, qword [rsp + 0x10]
mov r13, qword [rdx + 0x60]
xor ebp, ebp
mov rdx, rcx
nop dword [rax]
movzx ebx, word [r13 + rbp*2]
mov rdi, qword [rsp + 8]
movsx edi, byte [rdi + rbp]
lea r8d, [rbx - 0x41]
lea r9d, [rbx + 0x20]
cmp r8w, 0x1a
cmovae r9d, ebx
lea r8d, [rdi - 0x41]
lea r12d, [rdi + 0x20]
cmp r8b, 0x1a
cmovae r12d, edi
cmp r9d, r12d
jne 0x18000b61f
test bx, bx
je 0x18000b672
movabs rsi, 0xf856c4f8a218f2f1
add rdx, rsi
movabs rbx, 0x3f9375049f6260ee
add rdx, rbx
sub rsi, rdx
movabs rdx, 0xae2cc7b81512eeda
add rsi, rdx
add rsi, rbx
not rsi
add rsi, rdx
add rbp, 1
mov rdx, rsi
cmp rcx, rbp
jne 0x18000b5a0
jmp 0x18000b672
mov rcx, qword [rsp + 0x10]
mov rcx, qword [rcx]
mov qword [rsp + 0x10], rcx
mov r8, qword [rsp + 0x18]
cmp rcx, r8
mov r9, r11
mov r11, r10
mov r10, rax
mov r12b, byte [rsp + 7]
mov eax, 0
jne 0x18000b51d
jmp 0x18000b67f
jmp 0x18000b650
jmp 0x18000b660
jmp 0x18000b670
mov rax, qword [rsp + 0x10]
mov rax, qword [rax + 0x30]
jmp 0x18000b67f
xor eax, eax
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret