Function at 0x18000ab60
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x10
mov rsi, rcx
mov rax, qword gs:[0x60]
mov r11, qword [rax + 0x18]
add r11, 0x10
mov eax, dword [0x180029a94]
mov ecx, dword [0x180029a98]
lea edx, [rax - 1]
imul edx, eax
mov ebp, edx
not ebp
mov eax, ebp
and eax, 0x40948480
and edx, 0x82602808
or edx, eax
mov ebx, edx
xor ebx, 0x82600000
xor edx, 0x44950107
or ebp, 0xc2f4ac88
mov eax, ebp
not eax
and edx, 0x4495290f
and ebx, 0x82608480
or ebx, edx
and ebp, 0x4495290f
and eax, 0x390a5270
or eax, ebp
xor eax, ebx
mov edx, eax
not edx
and edx, 0xc53e4106
and eax, 0x3ac1bef9
or eax, edx
mov ebp, eax
xor ebp, 0xf0001210
xor eax, 0x7caed8e
mov edx, eax
or edx, 1
mov ebx, edx
not ebx
and eax, 0xf35c0eb
and ebp, 0xf0ca3f14
or ebp, eax
mov eax, ebp
xor eax, 0x70ca3704
xor ebp, 0xf35c0ea
mov edi, edx
and edi, 0x8e218873
and ebx, 0x71de778c
or ebx, edi
or edx, ebp
and ebp, 0x8e218873
and eax, 0x71de778c
or eax, ebp
xor eax, ebx
not edx
or edx, eax
cmp edx, 0xffffffff
setne r8b
sete r10b
cmp ecx, 0xa
setl al
cmp ecx, 9
setg bl
mov ecx, ebx
xor cl, r10b
not cl
and cl, r10b
mov r9d, r10d
and r9b, bl
or bl, r10b
mov edx, ebx
xor dl, cl
xor cl, 1
xor dl, 1
or cl, bl
xor cl, 1
or cl, dl
and r8b, al
or r8b, r9b
mov edx, eax
and dl, r10b
xor al, r10b
or al, dl
xor al, 1
mov edx, r8d
and dl, al
xor al, r8b
or al, dl
mov edx, eax
xor dl, 1
and al, dl
mov ebx, edx
and bl, al
xor al, dl
or al, bl
mov r8d, eax
xor r8b, 1
mov r10d, ecx
xor r10b, 1
mov edx, r10d
and dl, cl
xor dl, 1
mov r9d, ecx
xor r9b, dl
or dl, cl
xor dl, 1
or dl, r9b
mov ebx, edx
xor bl, 1
and bl, r8b
and dl, al
or dl, bl
xor r10b, r8b
or al, cl
xor al, 1
or al, r10b
xor dl, 1
mov ecx, edx
xor cl, al
or dl, al
xor dl, 1
or dl, cl
mov byte [rsp + 7], dl
mov ecx, dword [0x180029a7c]
lea ebx, [rcx - 1]
imul ebx, ecx
mov ecx, ebx
or ecx, 0x2dc397cc
mov ebp, ecx
not ebp
mov eax, ebx
xor eax, 0xd23c6833
and eax, ebx
mov edx, ecx
and edx, 0x7c386b72
and ebp, 0x82040001
or ebp, edx
mov edx, eax
not edx
or ecx, edx
and edx, 0x7c386b72
and eax, 0x83c7948d
or eax, edx
mov edx, dword [0x180029a80]
xor eax, ebp
mov ebp, ebx
not ebp
not ecx
or ecx, eax
mov eax, ecx
not eax
and eax, 0x9c8669d7
and ecx, 0x63799628
or ecx, eax
mov eax, ecx
xor eax, 0xb145fe1a
and ebp, 0xdc76645b
and ebx, 0x23899ba4
or ebx, ebp
mov ebp, ebx
xor ebp, 0x23899ba4
xor ecx, 0x4eba01e5
and ebp, ecx
xor ebx, 0xdc76645b
and ebx, eax
or ebx, ebp
xor ecx, ebx
test ecx, ebx
sete r8b
setne al
cmp edx, 9
setg cl
cmp edx, 0xa
setl dl
mov r10d, eax
or r10b, dl
mov r9d, edx
and r9b, al
xor al, dl
not al
and al, dl
mov ebx, r10d
xor bl, al
xor al, 1
xor bl, 1
or al, r10b
xor al, 1
or al, bl
and cl, r8b
or cl, r9b
mov ebx, edx
and bl, r8b
xor dl, r8b
or dl, bl
mov ebx, edx
xor bl, cl
xor cl, 1
xor bl, 1
or cl, dl
xor cl, 1
or cl, bl
mov edx, ecx
xor dl, 1
mov r14d, edx
and r14b, cl
xor r14b, 1
mov ebx, r14d
xor bl, cl
or r14b, cl
xor r14b, 1
or r14b, bl
mov ebx, r14d
xor r14b, 1
and r14b, al
or dl, al
xor al, 1
and bl, al
or r14b, bl
xor al, cl
xor dl, 1
or dl, al
mov eax, edx
xor al, r14b
xor r14b, 1
xor al, 1
or r14b, dl
xor r14b, 1
or r14b, al
mov eax, dword [0x180029a9c]
lea ecx, [rax - 1]
imul ecx, eax
mov eax, ecx
not eax
mov edx, eax
and edx, 0x2aca9ac
and eax, ecx
and ecx, 0xfd535653
or ecx, edx
mov edx, ecx
xor edx, 0x79100053
xor ecx, 0x2aca9ac
mov ebx, eax
not ebx
mov edi, ecx
and edi, 0x86e35e20
and edx, 0x791ca1df
or edx, edi
or ecx, ebx
and ebx, 0x86e35e20
and eax, 0x791ca1df
or eax, ebx
xor eax, edx
not ecx
or ecx, eax
mov eax, ecx
mov edx, ecx
xor edx, 0x3df18ca8
and edx, ecx
not ecx
and ecx, 0x200dbb4d
and eax, 0xdff244b2
or eax, ecx
mov ecx, eax
xor ecx, 0x20018808
or ecx, 0xc20e7357
mov ebx, ecx
not ebx
mov edi, ecx
and edi, 0x4fa98fb7
and ebx, 0x30500008
or ebx, edi
mov edi, edx
not edi
or ecx, edi
and edi, 0x4fa98fb7
and edx, 0xb0567048
or edx, edi
xor edx, ebx
not ecx
or ecx, edx
mov edx, ecx
not edx
and edx, 0xf58e69d7
and ecx, 0xa719628
or ecx, edx
xor ecx, 0x37801a81
mov edx, eax
and edx, 1
xor eax, 0xdff244b3
or eax, edx
mov edx, eax
not edx
and edx, 0xe41f1328
and eax, 0x1be0ecd7
or eax, edx
xor eax, 0x1be0ecd7
mov edx, ecx
and edx, eax
xor eax, ecx
mov ecx, dword [0x180029aa0]
or eax, edx
cmp eax, 0xffffffff
setne al
sete dl
cmp ecx, 9
setg r9b
cmp ecx, 0xa
setl cl
or cl, dl
xor r9b, al
mov eax, r9d
xor al, 1
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov edx, ecx
xor dl, 1
and cl, dl
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
mov edx, ecx
xor dl, 1
and cl, al
mov eax, r9d
xor al, dl
and al, r9b
and dl, r9b
mov rdi, rsi
or dl, cl
xor al, 1
xor dl, 1
mov ecx, eax
xor cl, dl
or dl, al
xor dl, 1
or dl, cl
mov byte [rsp + 6], dl
mov qword [rsp + 8], r11
test byte [rsp + 7], 1
jne 0x18000afc4
jmp 0x18000b2d0
mov rdi, r8
nop word cs:[rax + rax]
nop dword [rax]
test r12d, r12d
je 0x18000b2f2
test byte [rsp + 7], 1
je 0x18000b2d0
mov r11, qword [r11]
cmp r11, qword [rsp + 8]
je 0x18000b307
test r14b, 1
je 0x18000b2e0
movsx ebp, byte [rdi]
mov rcx, rdi
test ebp, ebp
je 0x18000affa
nop word cs:[rax + rax]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x18000aff0
test byte [rsp + 6], 1
je 0x18000b2f0
movabs rax, 0x1cd7d817170d7bb5
mov rdx, rax
add rcx, rax
movabs rax, 0xe3591be7dc9972f9
add rcx, rax
sub rcx, rdx
movabs rdx, 0x27e7b7dcb013ed3a
mov rsi, rdx
add rcx, rdx
movabs rdx, 0xde4b665d7901e8c9
mov rbx, rdx
sub rcx, rdx
sub rcx, rsi
sub rcx, rax
movabs rax, 0x1ca778af07030390
mov rdx, rax
sub rcx, rax
movabs rax, 0xed991f4984de8309
sub rcx, rax
add rcx, rdx
sub rcx, rdi
add rcx, rax
movabs r10, 0xf580bbb1e69b6b06
mov rdx, r10
sub rdx, rcx
movabs rax, 0x79bb5380cd4e7c0
mov rcx, rax
add rdx, rax
sub r10, rdx
add r10, rbx
movabs rax, 0xd2bb85b2e566c42c
sub r10, rax
add r10, rcx
add r10, rax
je 0x18000b2f2
mov r15, qword [r11 + 0x60]
movzx ecx, word [r15]
test ecx, ecx
setne al
lea edx, [rcx - 0x41]
lea r12d, [rcx + 0x20]
cmp dx, 0x1a
cmovae r12d, ecx
lea edx, [rbp - 0x41]
lea ebx, [rbp + 0x20]
cmp dl, 0x1a
cmovae ebx, ebp
sub r12d, ebx
setne bl
mov edx, eax
xor dl, bl
xor dl, 1
or dl, al
mov r9d, edx
xor r9b, 1
and bl, al
or ecx, r12d
sete al
or al, bl
mov ebx, eax
xor bl, 1
and dl, r9b
mov ecx, ebx
and cl, al
xor dl, 1
mov r13d, r9d
xor r13b, dl
or dl, r9b
xor dl, 1
or dl, r13b
mov r13d, ebx
and r13b, cl
xor cl, bl
or cl, r13b
mov ebx, edx
xor bl, 1
and bl, cl
xor cl, 1
and cl, dl
or cl, bl
mov edx, ecx
and dl, 1
mov ebx, r9d
xor bl, al
or al, r9b
xor al, 1
or al, bl
mov ebx, eax
not bl
and bl, 1
cmp dl, bl
jne 0x18000afb0
xor cl, 1
or cl, al
xor cl, 1
test cl, 1
jne 0x18000afb0
mov r13d, 1
mov rsi, r10
nop dword [rax]
cmp r10, r13
je 0x18000b2f2
mov r8, rdi
movsx ecx, byte [rdi + r13]
movzx ebx, word [r15 + r13*2]
test ebx, ebx
setne dl
lea edi, [rbx - 0x41]
lea r12d, [rbx + 0x20]
cmp di, 0x1a
cmovae r12d, ebx
lea edi, [rcx - 0x41]
lea r9d, [rcx + 0x20]
cmp dil, 0x1a
cmovae r9d, ecx
sub r12d, r9d
sete cl
setne dil
or ebx, r12d
sete bl
and dil, dl
or dil, bl
mov ebx, edx
xor bl, cl
or dl, cl
xor dl, 1
or dl, bl
mov ecx, edi
xor cl, 1
mov ebx, ecx
xor bl, dl
or cl, dl
xor cl, 1
or cl, bl
mov edx, ecx
xor dl, 1
and cl, dl
mov ebx, edx
and bl, cl
xor cl, dl
or cl, bl
mov ebx, ecx
xor bl, 1
mov edx, ecx
and dl, bl
xor dl, 1
mov eax, edx
xor al, bl
or dl, bl
xor dl, 1
or dl, al
xor dl, dil
mov eax, edi
xor al, cl
or cl, dil
xor cl, 1
or cl, al
xor cl, 1
mov eax, edx
and al, cl
test al, 1
jne 0x18000afa0
movabs rax, 0xb5d774cd80f654bc
mov rbx, rax
movabs rdi, 0x7656663957a90419
add rax, rdi
sub rdi, rax
movabs rax, 0x30f3b8108ac24ddb
sub rdi, rax
sub rdi, rsi
add rdi, rax
add rdi, rbx
movabs rax, 0xc2fab569a5ad324e
add rdi, rax
movabs rbx, 0x3e7a8e6a88aae7d8
mov rbp, rbx
add rdi, rbx
sub rdi, rax
movabs rsi, 0x271d0ad6db2c8a48
mov rax, rsi
movabs rbx, 0x80f8b030247c3e1b
sub rax, rbx
sub rax, rsi
movabs rsi, 0x625765d091e17844
add rax, rsi
not rdi
add rdi, rbp
add rdi, rax
sub rdi, rsi
add rdi, rbx
xor dl, cl
add r13, 1
mov rsi, rdi
test dl, 1
mov rdi, r8
je 0x18000b170
jmp 0x18000afb0
jmp 0x18000b2d0
jmp 0x18000b2e0
jmp 0x18000b2f0
mov rax, qword [r11 + 0x30]
add rsp, 0x10
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
xor eax, eax
jmp 0x18000b2f6