Function at 0x18000b040
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r11, rcx
mov rax, qword gs:[0x60]
mov rsi, qword [rax + 0x18]
add rsi, 0x10
mov ecx, dword [0x180079464]
mov eax, dword [0x180079468]
lea ebx, [rcx - 1]
imul ebx, ecx
mov edx, ebx
not edx
mov ecx, edx
and ecx, 0x995281d2
mov ebp, ebx
xor ebp, 0x995281d2
and ebp, ebx
mov edi, ecx
and edi, ebp
xor ebp, ecx
or ebp, edi
mov ecx, ebp
not ecx
and ecx, 0x66ad7e2c
and ebp, 0x995281d3
or ebp, ecx
mov ecx, ebp
not ecx
and edx, ecx
and ebp, ebx
or ebp, edx
not ebp
or ebp, ecx
cmp ebp, 0xffffffff
setne r9b
sete r10b
cmp eax, 0xa
setl cl
cmp eax, 9
setg al
mov ebx, eax
and bl, r10b
xor r10b, al
mov r8d, r10d
xor r8b, 1
and cl, r9b
or cl, bl
mov ebx, eax
xor bl, r9b
or al, r9b
xor al, 1
or al, bl
mov ebx, eax
xor bl, cl
xor cl, 1
xor bl, 1
or cl, al
xor cl, 1
or cl, bl
mov eax, r10d
and al, r8b
mov edx, r10d
and dl, al
xor al, r10b
or al, dl
mov edx, eax
xor dl, 1
and dl, cl
xor cl, 1
and al, cl
or al, dl
mov edx, r8d
xor dl, cl
or cl, r8b
xor cl, 1
or cl, dl
xor cl, 1
mov edx, eax
and dl, cl
xor cl, al
or cl, dl
mov byte [rsp + 7], cl
mov ecx, dword [0x18007944c]
mov edi, dword [0x180079450]
lea edx, [rcx - 1]
imul edx, ecx
mov ebp, edx
not ebp
mov ecx, ebp
and ecx, edx
mov ebx, edx
and ebx, 0x640b6e72
and ebp, 0x9bf4918d
or ebp, ebx
mov ebx, ecx
not ebx
or edx, ebx
and ebx, 0x640b6e72
and ecx, 0x9bf4918d
or ecx, ebx
xor ecx, ebp
not edx
or edx, ecx
mov ebp, edx
not ebp
mov ecx, ebp
or ecx, 1
mov ebx, ecx
not ebx
and ebp, 0xfffffffe
and edx, 1
or edx, ebp
mov ebp, ecx
and ebp, 0x788b3b9c
and ebx, 0x8774c462
or ebx, ebp
mov ebp, edx
not ebp
or ecx, ebp
and ebp, 0x788b3b9c
and edx, 0x8774c463
or edx, ebp
xor edx, ebx
not ecx
or ecx, edx
mov edx, ecx
xor edx, 0x57a57ed2
and edx, ecx
or ecx, 0xa85a812d
mov ebp, ecx
not ebp
mov ebx, ecx
and ebx, 0x3f3794f3
and ebp, 0x40806a00
or ebp, ebx
mov ebx, edx
not ebx
or ecx, ebx
and ebx, 0x3f3794f3
and edx, 0xc0c86b0c
or edx, ebx
xor edx, ebp
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xa85a812d
and ecx, 0x57a57ed2
or ecx, edx
mov edx, ecx
not edx
and ecx, 0x36a3a32a
and edx, 0xc95c5cd5
or edx, ecx
xor edx, 0x36a3a32a
cmp edx, 0xffffffff
sete al
setne cl
cmp edi, 0xa
setl dl
cmp edi, 9
setg bl
and cl, bl
and dl, al
or dl, cl
mov ecx, edx
xor cl, bl
and cl, dl
mov edx, ebx
xor dl, al
not dl
and dl, al
or bl, al
mov eax, ebx
xor al, dl
xor dl, 1
xor al, 1
or dl, bl
xor dl, 1
or dl, al
xor dl, 1
mov eax, edx
xor al, cl
xor cl, 1
mov ebx, ecx
and bl, dl
xor cl, dl
or cl, bl
mov edx, eax
xor dl, cl
or cl, al
xor cl, 1
or cl, dl
mov byte [rsp + 6], cl
mov eax, dword [0x18007946c]
lea ecx, [rax - 1]
imul ecx, eax
mov edx, ecx
xor edx, 0x9cc83092
and edx, ecx
mov eax, ecx
or eax, 0x6337cf6d
mov ecx, eax
not ecx
mov ebp, edx
not ebp
mov ebx, eax
and ebx, 0x6171ddd4
and ecx, 0x9c882002
or ecx, ebx
or eax, ebp
and ebp, 0x6171ddd4
and edx, 0x9e8e222b
or edx, ebp
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
and ecx, 0x6337cf6d
and eax, 0x9cc83092
or eax, ecx
mov edx, eax
mov ecx, eax
xor ecx, 0x156b620a
and ecx, eax
not eax
and eax, 0x4691da83
and edx, 0xb96e257c
or edx, eax
mov eax, edx
xor eax, 0xb96e257c
mov ebp, eax
and ebp, 0x156b620a
mov ebx, ebp
and ebx, ecx
xor ecx, ebp
xor edx, 0x40101202
or ecx, ebx
mov ebp, ecx
not ebp
and ebp, 0xea949df4
and ecx, 0x156b620b
or ecx, ebp
and edx, 0x493a3646
mov ebp, eax
and ebp, 0xb6c5c9b9
or ebp, edx
xor ebp, 0x493a3647
and eax, 1
or eax, ebp
not eax
mov edx, ecx
and edx, eax
xor eax, ecx
or eax, edx
mov ecx, eax
not ecx
mov edx, ecx
and edx, eax
mov ebp, eax
and ebp, 0xf0c2be72
and ecx, 0xf3d418d
or ecx, ebp
mov ebp, edx
not ebp
or eax, ebp
and ebp, 0xf0c2be72
and edx, 0xf3d418d
or edx, ebp
mov ebp, dword [0x180079470]
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x76deb018
and eax, 0x89214fe7
or eax, edx
xor eax, 0x76deb018
xor ecx, eax
test ecx, eax
sete r8b
setne r9b
cmp ebp, 0xa
setl r10b
cmp ebp, 9
setg al
mov edx, eax
xor dl, r10b
and dl, al
mov r13d, edx
xor r13b, 1
mov ecx, r13d
and cl, dl
xor cl, 1
mov ebx, edx
xor bl, cl
or cl, dl
xor cl, 1
or cl, bl
xor cl, 1
or r13b, dl
xor r13b, 1
mov edx, ecx
and dl, r13b
xor r13b, cl
or r13b, dl
mov ecx, r13d
xor cl, 1
and cl, r9b
and r13b, r8b
or r13b, cl
and r9b, r10b
and al, r8b
or al, r9b
mov ecx, r10d
and cl, r8b
xor r10b, r8b
or r10b, cl
xor al, 1
mov ecx, eax
xor cl, r10b
or al, r10b
xor al, 1
or al, cl
xor al, r13b
and r13b, al
xor r13b, 1
mov ecx, r13d
xor cl, al
or r13b, al
xor r13b, 1
or r13b, cl
movabs rax, 0x22310b6f6522ba1e
movabs r15, 0x1d6531958e43e1f0
mov r10, r11
lea rcx, [r11 - 1]
mov qword [rsp + 0x10], rcx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rsi
test byte [rsp + 7], 1
je 0x18000b680
mov rcx, qword [rsp + 8]
mov rcx, qword [rcx]
mov qword [rsp + 8], rcx
cmp rcx, qword [rsp + 0x18]
je 0x18000b6a2
mov rcx, qword [rsp + 0x10]
test byte [rsp + 6], 1
je 0x18000b690
nop
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18000b490
test r13b, 1
je 0x18000b6a0
movabs rdx, 0x4d380b804bce5c69
mov rbp, rdx
sub rcx, rdx
movabs rdx, 0x780d7257268aadda
mov rbx, rdx
sub rcx, rdx
add rcx, rbp
movabs rdx, 0x8440c5ac1f403878
mov rbp, rdx
sub rbp, r10
sub rbp, rdx
movabs rdx, 0xe317cbb0260eadf5
sub rcx, rdx
add rcx, rbp
add rcx, rdx
movabs rbp, 0xea291f0fb336dfbe
add rcx, rbp
sub rbp, rcx
movabs rdx, 0x5baf581a53469905
lea rcx, [rdx + rbx]
mov rbx, rdx
sub rbx, rcx
movabs rcx, 0x961d3cc16fa0d74e
sub rbp, rcx
add rbp, rbx
add rbp, rcx
movabs rcx, 0x2871a7d509fa84a2
mov r14, rcx
sub r14, rbp
sub r14, rcx
je 0x18000b658
mov rcx, qword [rsp + 8]
mov r8, qword [rcx + 0x60]
xor r12d, r12d
mov r9, r14
nop dword [rax]
movzx ecx, word [r8 + r12*2]
test ecx, ecx
sete r11b
setne bpl
movsx ebx, byte [r10 + r12]
lea edx, [rcx - 0x41]
lea esi, [rcx + 0x20]
cmp dx, 0x1a
cmovae esi, ecx
lea edx, [rbx - 0x41]
lea edi, [rbx + 0x20]
cmp dl, 0x1a
cmovae edi, ebx
sub esi, edi
sete dl
mov ebx, ebp
and bl, dl
xor bpl, dl
or bpl, bl
mov ebx, ebp
xor bl, 1
or r11b, dl
or ecx, esi
setne cl
mov edx, r11d
xor dl, cl
or r11b, cl
xor r11b, 1
or r11b, dl
mov ecx, r11d
not cl
and cl, bl
and bpl, r11b
or bpl, cl
mov ecx, ebx
xor cl, r11b
or r11b, bl
xor r11b, 1
or r11b, cl
xor r11b, 1
mov ecx, ebp
and cl, r11b
test cl, 1
jne 0x18000b650
xor bpl, r11b
test bpl, 1
jne 0x18000b650
mov rcx, r15
sub rcx, r9
movabs rbx, 0x4d398b96aa512718
add rcx, rbx
movabs rdx, 0x913d0929083f3507
mov rbp, rdx
add rcx, rdx
mov rdx, rbx
sub rdx, rcx
add rdx, rbp
movabs rcx, 0x34f8d90f48d0ee9b
mov rbp, rcx
sub rdx, rcx
movabs rcx, 0xc709d9378075f7ea
add rdx, rcx
add rdx, rbp
add rdx, r15
mov r9, rax
sub r9, rdx
add r9, rcx
not r9
add r9, rax
add r12, 1
cmp r14, r12
jne 0x18000b550
jmp 0x18000b658
test esi, esi
jne 0x18000b45c
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000b680
jmp 0x18000b690
jmp 0x18000b6a0
xor eax, eax
jmp 0x18000b661