Function at 0x18000af50
Capabilities:
Access peb ldr_data

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov qword [rsp + 0x10], rcx
mov rax, qword gs:[0x60]
mov r9, qword [rax + 0x18]
mov edx, dword [0x180029a9c]
mov r8d, dword [0x180029aa0]
lea edi, [rdx - 1]
imul edi, edx
mov ebx, edi
not ebx
mov edx, ebx
and edx, 0x6dc943c2
mov esi, edi
and esi, 0x9236bc3c
or esi, edx
xor esi, 0x9236bc3c
mov edx, edi
xor edx, 0xfffffffe
and edx, edi
mov ebp, esi
and ebp, edx
xor edx, esi
or edx, ebp
and ebx, 0x1e3e2752
and edi, 0xe1c1d8ad
or edi, ebx
mov ebp, edi
xor ebp, 0xc1c804
mov esi, edx
not esi
mov ebx, esi
and ebx, 0xf33c16a9
and edx, 0xcc3e956
or edx, ebx
xor edi, 0x123c0600
and edi, 0xf33c16a9
and ebp, 0xcc3e956
or ebp, edi
xor ebp, edx
not ebp
or ebp, esi
cmp ebp, 0xffffffff
sete r10b
setne bl
cmp r8d, 9
setg dl
cmp r8d, 0xa
setl r14b
and bl, r14b
mov eax, edx
xor al, r10b
and al, dl
and dl, r10b
or dl, bl
xor r14b, r10b
mov ebx, eax
and bl, r14b
xor r14b, al
or r14b, bl
mov eax, r14d
not al
mov ebx, edx
xor bl, 1
and al, bl
or bl, r14b
xor bl, 1
and r14b, dl
or r14b, al
mov eax, ebx
and al, r14b
xor r14b, bl
or r14b, al
mov edx, dword [0x180029a84]
mov eax, dword [0x180029a88]
lea ebp, [rdx - 1]
imul ebp, edx
mov ebx, ebp
not ebx
mov edi, ebx
and edi, 0xfffffffe
mov edx, ebp
and edx, 1
or edx, edi
mov edi, edx
not edi
and ebx, 0x91463aad
and ebp, 0x6eb9c552
or ebp, ebx
mov ebx, ebp
xor ebx, 0x6639c000
xor ebp, 0x91463aad
mov esi, edx
and esi, 0x98801f53
and edi, 0x677fe0ac
or edi, esi
or edx, ebp
and ebp, 0x98801f53
and ebx, 0x677fe0ac
or ebx, ebp
xor ebx, edi
not edx
or edx, ebx
mov ebp, edx
not ebp
and ebp, 0xada9735c
and edx, 0x52568ca3
or edx, ebp
xor edx, 0x52568ca3
sete r11b
setne r12b
cmp eax, 0xa
setl r10b
cmp eax, 9
setg r15b
mov eax, dword [0x180029aa4]
lea esi, [rax - 1]
imul esi, eax
mov r8d, esi
not r8d
mov edi, r8d
and edi, 0x4fd9841
mov eax, esi
and eax, 0x2a020404
or eax, edi
mov edi, eax
xor edi, 0x22020400
xor eax, 0xd5fdfbfb
mov ebp, esi
xor ebp, 0x2eff9c45
and ebp, esi
mov edx, ebp
not edx
mov ebx, eax
and ebx, 0x1829ab7e
and edi, 0x26d61401
or edi, ebx
or eax, edx
and edx, 0x1829ab7e
and ebp, 0xe7d65481
or ebp, edx
xor ebp, edi
not eax
or eax, ebp
mov edx, eax
not edx
and edx, 0x86713e41
and eax, 0x798ec1be
or eax, edx
mov edx, eax
xor edx, 0x57715dfa
and r8d, 0x5572acff
and esi, 0xaa8d5300
or esi, r8d
mov ebp, esi
xor ebp, 0xaa8d5300
xor eax, 0xa88ea205
and ebp, eax
xor esi, 0x5572acff
and esi, edx
or esi, ebp
xor eax, esi
test eax, esi
sete sil
cmp dword [0x180029aa8], 9
lea r13, [r9 + 0x10]
setg al
mov rcx, qword [r9 + 0x10]
mov qword [rsp + 8], rcx
cmp rcx, r13
je 0x18000b413
mov edx, r15d
and dl, r12b
mov ebx, r15d
xor bl, r12b
or bl, dl
xor bl, 1
xor r15b, r11b
not r15b
and r15b, r11b
xor r12b, r10b
not r12b
and r12b, r10b
mov edx, r15d
and dl, r12b
xor r12b, r15b
or r12b, dl
xor r12b, bl
mov ecx, r12d
not cl
and cl, bl
mov edx, ecx
and dl, r12b
xor cl, r12b
or cl, dl
mov ebx, eax
xor bl, sil
xor bl, 1
or bl, al
mov r11d, ebx
xor r11b, 1
mov edx, esi
and dl, al
or al, sil
xor al, 1
mov r8d, edx
and r8b, al
xor al, dl
or al, r8b
mov edx, r11d
and dl, bl
mov r8d, edx
xor r8b, 1
xor dl, r11b
or r8b, bl
xor r8b, 1
or r8b, dl
xor r8b, al
mov edx, r11d
xor dl, al
or al, r11b
xor al, 1
or al, dl
xor r8b, 1
mov edx, r8d
xor dl, al
or r8b, al
xor r8b, 1
or r8b, dl
movabs rdx, 0xe73d213398cda874
movabs r10, 0xdd0a5e7fbaa24805
movabs r11, 0x704c67a83d2c5e07
movabs r9, 0x550bd612cc901b22
movabs rsi, 0x4280204e803fe39a
movabs r15, 0x28dfc1f4021bca30
movabs r12, 0x26a6e54d58204c37
movabs rdi, 0x15a18a805549d604
movabs rbp, 0xe66684f9291d5a6
mov rax, qword [rsp + 0x10]
add rax, 0xffffffffffffffff
mov qword [rsp + 0x20], r13
mov byte [rsp + 7], cl
mov qword [rsp + 0x18], rax
test r14b, 1
je 0x18000b430
mov rbx, rax
test cl, 1
je 0x18000b440
nop dword [rax]
cmp byte [rbx + 1], 0
lea rbx, [rbx + 1]
jne 0x18000b2e0
test r8b, 1
je 0x18000b450
add rbx, rsi
sub rbx, rdx
add rbx, r11
add rbx, rdx
sub rbx, rsi
mov rax, r15
sub rax, qword [rsp + 0x10]
sub rax, r15
add rax, rbx
add rax, r12
sub rax, r9
sub rax, r11
add rax, r9
sub rax, r12
je 0x18000b452
mov rcx, qword [rsp + 8]
mov r15, qword [rcx + 0x60]
xor r12d, r12d
mov rbx, rax
nop word cs:[rax + rax]
nop
movzx r13d, word [r15 + r12*2]
mov rcx, qword [rsp + 0x10]
movsx edx, byte [rcx + r12]
lea r11d, [r13 - 0x41]
lea r9d, [r13 + 0x20]
cmp r11w, 0x1a
cmovae r9d, r13d
lea esi, [rdx - 0x41]
lea ecx, [rdx + 0x20]
cmp sil, 0x1a
cmovae ecx, edx
cmp r9d, ecx
jne 0x18000b3b0
test r13w, r13w
je 0x18000b452
mov rcx, rbp
sub rcx, rdi
sub rcx, rbp
add rcx, rdi
add rbx, r10
sub rbx, rcx
mov rcx, r10
not rcx
add rbx, rcx
add r12, 1
cmp rax, r12
jne 0x18000b340
jmp 0x18000b452
mov rax, qword [rsp + 8]
mov rax, qword [rax]
mov qword [rsp + 8], rax
mov r13, qword [rsp + 0x20]
cmp rax, r13
mov cl, byte [rsp + 7]
movabs rdx, 0xe73d213398cda874
movabs rsi, 0x704c67a83d2c5e07
mov r11, rsi
movabs r9, 0x550bd612cc901b22
movabs rsi, 0x4280204e803fe39a
movabs r15, 0x28dfc1f4021bca30
movabs r12, 0x26a6e54d58204c37
mov rax, qword [rsp + 0x18]
jne 0x18000b2c6
test r14b, 1
je 0x18000b420
xor eax, eax
jmp 0x18000b461
jmp 0x18000b420
jmp 0x18000b430
jmp 0x18000b440
jmp 0x18000b450
test r14b, 1
je 0x18000b480
mov rax, qword [rsp + 8]
mov rax, qword [rax + 0x30]
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jmp 0x18000b480