Function at 0x18000b630
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov qword [rsp + 8], rcx
mov eax, dword [0x180029a94]
mov edx, dword [0x180029a98]
lea edi, [rax - 1]
imul edi, eax
mov ebx, edi
not ebx
mov ebp, edi
or ebp, 1
mov ecx, ebp
not ecx
mov eax, ebx
or eax, 0x7e4ab03c
and ebp, 0x7e4ab03d
and ecx, 0x81b54fc2
or ecx, ebp
and eax, 0x7e4ab03d
xor eax, ecx
mov ebp, eax
not ebp
mov ecx, ebp
and ecx, 0xea53b931
and eax, 0x15ac46ce
or eax, ecx
and edi, 0xea53b931
and ebx, 0x15ac46ce
or ebx, edi
xor ebx, eax
not ebx
or ebx, ebp
cmp ebx, 0xffffffff
sete r8b
setne al
cmp edx, 9
setg r9b
cmp edx, 0xa
setl cl
mov edx, ecx
xor dl, al
not dl
and dl, al
mov ebx, ecx
or bl, al
xor dl, 1
mov r10d, edx
xor r10b, bl
or dl, bl
xor dl, 1
or dl, r10b
and r9b, r8b
and al, cl
or al, r9b
mov ebx, ecx
xor bl, r8b
and cl, r8b
or cl, bl
xor al, 1
mov ebx, eax
xor bl, cl
or al, cl
xor al, 1
or al, bl
mov ecx, eax
xor cl, 1
and al, cl
mov ebx, ecx
and bl, al
xor al, cl
or al, bl
mov ebx, eax
xor bl, 1
mov ecx, edx
xor cl, 1
and al, cl
or cl, bl
mov r8d, ecx
not r8b
and r8b, 1
and bl, dl
or bl, al
mov eax, ebx
and al, 1
cmp r8b, al
jne 0x18000b742
xor bl, 1
or cl, bl
xor cl, 1
test cl, 1
jne 0x18000b742
nop word [rax + rax]
jmp 0x18000b740
mov rax, qword gs:[0x60]
mov rdi, qword [rax + 0x18]
lea r13, [rdi + 0x10]
mov eax, dword [0x180029a7c]
mov edx, dword [0x180029a80]
lea ebp, [rax - 1]
imul ebp, eax
mov eax, ebp
not eax
mov ecx, ebp
xor ecx, 0x4bf45e18
and ecx, ebp
or ebp, 0xb40ba1e7
mov ebx, ecx
not ebx
mov esi, ebp
and esi, 0x4253a608
and eax, 0x9a45810
or eax, esi
or ebp, ebx
and ebx, 0x4253a608
and ecx, 0xbdac59f7
or ecx, ebx
xor ecx, eax
not ebp
or ebp, ecx
mov eax, ebp
not eax
and eax, 0xb40ba1e7
and ebp, 0x4bf45e18
or ebp, eax
mov ecx, ebp
not ecx
mov eax, ecx
and eax, 0x6f5e5951
and ebp, 0x90a1a6ae
or ebp, eax
mov ebx, ebp
xor ebx, 0x4a0e4041
or ebx, 0x25d0bf3a
mov esi, ebx
not esi
or ecx, 0xda2f40c5
mov eax, ecx
not eax
and ebx, 0x1739c98e
and esi, 0xc8060041
or esi, ebx
and ecx, 0x1739c98e
and eax, 0x20c03630
or eax, ecx
xor eax, esi
mov ecx, eax
not ecx
and ecx, 0x25d0bf3b
and eax, 0xda2f40c4
or eax, ecx
mov ecx, ebp
and ecx, 1
xor ebp, 0x90a1a6af
or ebp, ecx
mov ebx, ebp
not ebx
mov esi, eax
not esi
mov ecx, esi
and ecx, 0xa5061f7c
and eax, 0x5af9e083
or eax, ecx
or esi, ebp
and ebp, 0xa5061f7c
and ebx, 0x5af9e083
or ebx, ebp
xor ebx, eax
not esi
or esi, ebx
mov eax, esi
mov ecx, esi
xor ecx, 0x8f29f056
and ecx, esi
not esi
and esi, 0xf099014
and eax, 0x80206042
or eax, esi
xor eax, 0x80206042
mov ebp, eax
and ebp, ecx
xor ecx, eax
or ecx, ebp
mov eax, ecx
not eax
and eax, 0x70d60fa9
and ecx, 0x8f29f056
or ecx, eax
mov eax, ecx
not eax
and eax, 0xceed2aa7
and ecx, 0x3112d558
or ecx, eax
xor ecx, 0x3112d558
cmp ecx, 0xffffffff
setne bl
sete r10b
cmp edx, 0xa
setl r8b
cmp edx, 9
setg r11b
mov eax, dword [0x180029a9c]
mov edx, dword [0x180029aa0]
lea ebp, [rax - 1]
imul ebp, eax
mov ecx, ebp
mov eax, ebp
xor eax, 0xfffffffe
and eax, ebp
not ebp
mov esi, ebp
and esi, 0xa6529230
and ecx, 0x59ad6dce
or ecx, esi
xor ecx, 0x59ad6dce
mov esi, ecx
and esi, eax
xor eax, ecx
or eax, esi
mov ecx, eax
not ecx
and ecx, 0x2e6a2d85
and eax, 0xd195d27a
or eax, ecx
xor eax, 0xd195d27a
mov ecx, eax
and ecx, ebp
xor eax, ebp
or eax, ecx
mov ecx, eax
not ecx
and ecx, 0xa670e6d6
and eax, 0x598f1929
or eax, ecx
xor eax, 0x598f1929
sete r9b
setne bpl
cmp edx, 0xa
setl sil
cmp edx, 9
setg r14b
mov rax, qword [rdi + 0x10]
mov qword [rsp], rax
cmp rax, r13
je 0x18000bc1c
mov eax, r10d
or al, r11b
mov edx, r10d
xor dl, r11b
not dl
and dl, r11b
mov ecx, eax
xor cl, dl
xor dl, 1
xor cl, 1
or dl, al
xor dl, 1
or dl, cl
xor bl, r11b
mov eax, r8d
and al, r10b
xor r8b, r10b
or r8b, al
mov eax, r8d
xor al, bl
xor bl, 1
xor al, 1
or bl, r8b
xor bl, 1
or bl, al
mov eax, ebx
xor al, 1
mov ecx, ebx
and cl, dl
xor dl, 1
and al, dl
or al, cl
mov ecx, edx
and cl, bl
xor dl, bl
or dl, cl
xor dl, 1
mov ecx, eax
and cl, dl
xor dl, al
or dl, cl
mov eax, r14d
and al, bpl
mov r10d, r14d
xor r10b, bpl
or r10b, al
and sil, bpl
and r9b, r14b
or r9b, sil
mov eax, r9d
xor al, 1
mov ecx, r9d
and cl, r10b
xor r10b, 1
and al, r10b
or al, cl
mov ecx, r10d
xor cl, r9b
or r10b, r9b
xor r10b, 1
or r10b, cl
xor r10b, 1
mov ecx, eax
and cl, r10b
xor r10b, al
or r10b, cl
movabs rcx, 0xcf01cc827782b6c7
movabs rbp, 0xafb9a257d78738aa
movabs r8, 0xa10fd8959363cb5c
movabs rdi, 0x81d7bb35c69ab313
movabs r14, 0x296d4748505f9879
movabs r15, 0x282b65a033ffa213
movabs r12, 0x1f8c3e04a4fd8503
movabs rsi, 0x129df0754d24b6e1
mov rax, qword [rsp + 8]
lea rbx, [rax - 1]
mov qword [rsp + 0x18], r13
mov qword [rsp + 0x10], rbx
mov rax, rbx
test dl, 1
je 0x18000bc00
nop word [rax + rax]
cmp byte [rax + 1], 0
lea rax, [rax + 1]
jne 0x18000ba70
test r10b, 1
je 0x18000bc10
add rax, rcx
add rax, rdi
sub rax, rcx
sub rax, rbp
sub rax, qword [rsp + 8]
add rax, rbp
add rax, rsi
mov rcx, r8
sub rcx, rax
add rcx, rdi
mov rax, r8
sub rax, rcx
sub rax, rsi
je 0x18000bc12
mov rcx, qword [rsp]
mov r9, qword [rcx + 0x60]
xor r11d, r11d
mov r13, rax
nop word cs:[rax + rax]
nop dword [rax + rax]
movzx ecx, word [r9 + r11*2]
mov rbp, qword [rsp + 8]
movsx esi, byte [rbp + r11]
lea ebx, [rcx - 0x41]
lea edi, [rcx + 0x20]
cmp bx, 0x1a
cmovae edi, ecx
lea ebx, [rsi - 0x41]
lea r8d, [rsi + 0x20]
cmp bl, 0x1a
cmovae r8d, esi
cmp edi, r8d
jne 0x18000bb9a
test cx, cx
je 0x18000bc12
movabs rbx, 0x959f1087b112d4f5
mov rcx, rbx
movabs rbp, 0xa1cc4f960a8b6884
sub rcx, rbp
add rcx, r13
sub rbx, rcx
sub rbx, rbp
movabs rbp, 0x6ffc9e7190fc3589
lea rcx, [r15 + rbp]
sub rbp, rcx
add rbp, r15
movabs rcx, 0xe355899415cfbd9d
mov rdi, rcx
sub rbx, rcx
movabs rcx, 0x5701ba5f489e305d
sub rbx, rcx
add rbx, rbp
add rbx, rcx
movabs rcx, 0xa8e9b1846a304747
add rbx, rcx
add rbx, rdi
sub rcx, rbx
add rcx, r12
sub rcx, r14
sub rcx, r12
lea r13, [rcx + r14]
add r13, 0xffffffffffffffff
add r11, 1
cmp rax, r11
jne 0x18000bad0
jmp 0x18000bc12
mov rax, qword [rsp]
mov rax, qword [rax]
mov r13, qword [rsp + 0x18]
mov qword [rsp], rax
cmp rax, r13
movabs rcx, 0xcf01cc827782b6c7
movabs rbp, 0xafb9a257d78738aa
movabs rbx, 0xa10fd8959363cb5c
mov r8, rbx
movabs rdi, 0x81d7bb35c69ab313
mov eax, 0
movabs rsi, 0x129df0754d24b6e1
mov rbx, qword [rsp + 0x10]
jne 0x18000ba5b
jmp 0x18000bc1e
jmp 0x18000bc00
jmp 0x18000bc10
mov rax, qword [rsp]
mov rax, qword [rax + 0x30]
jmp 0x18000bc1e
xor eax, eax
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret