Function at 0x18000a800
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [rcx + 0x1c]
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x98]
mov eax, dword [rsp + 0x98]
jmp 0x18000a45b
add rcx, rax
mov rax, rcx
cmp di, di
je 0x18000a434
mov qword [rsp + 0xd8], rax
mov eax, 8
jmp 0x18000a482
add rcx, rax
mov rax, rcx
cmp di, di
je 0x18000a417
movzx eax, word [rcx + rax]
mov word [rsp + 0x60], ax
cmp ch, ch
je 0x18000a492
mov eax, dword [rax + 0x24]
mov rcx, qword [rsp + 0x68]
cmp si, si
je 0x18000a44e
mov eax, dword [rcx + rax + 0x88]
mov dword [rsp + 0x7c], eax
jmp 0x18000a4aa
mov rcx, qword [rsp + 0x68]
add rcx, rax
jmp 0x18000a9d4
imul rax, rax, 0
mov rcx, qword [rsp + 0xd8]
cmp bh, bh
je 0x18000a468
mov rax, qword [rsp + 0x98]
mov eax, dword [rax + 0x1c]
jmp 0x18000a475
mov eax, dword [rsp + 0x7c]
mov rcx, qword [rsp + 0x68]
jmp 0x18000a443
cmp dword [rsp + 0x7c], 0
jne 0x18000a49f
xor eax, eax
jmp 0x18000a623
mov eax, dword [rax + 0x28]
mov dword [rsp + 0x130], eax
cmp al, al
je 0x18000a54b
mov byte [rsp + 0x5e], 0x6c
mov byte [rsp + 0x5f], 0
jmp 0x18000a521
mov eax, dword [rax + 0x24]
mov rcx, qword [rsp + 0x40]
jmp 0x18000a532
mov byte [rsp + 0x5a], 0x78
mov byte [rsp + 0x5b], 0x2e
jmp 0x18000a512
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x30]
jmp 0x18000a4d3
mov byte [rsp + 0x5c], 0x64
mov byte [rsp + 0x5d], 0x6c
cmp bx, bx
je 0x18000a4e1
lea rcx, [rsp + 0x58]
call qword [rsp + 0xd0]
jmp 0x18000a847
add rcx, rax
mov rax, rcx
cmp di, di
je 0x18000a503
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x68]
jmp 0x18000a429
mov byte [rsp + 0x58], 0x64
mov byte [rsp + 0x59], 0x70
cmp dx, dx
je 0x18000a4f7
imul rax, rax, 2
mov rax, qword [rsp + rax + 0x138]
jmp 0x18000a754
add rsp, 0x1b8
pop rdi
jmp 0x18000a8fd
mov r8, qword [rsp + 0x50]
add r8, rdx
cmp ah, ah
je 0x18000a6de
mov rdx, r8
mov qword [rsp + 0xc0], rdx
jmp 0x18000a712
mov eax, dword [rax + 0x10]
mov rcx, qword [rsp + 0x30]
cmp dx, dx
je 0x18000a705
mov rdx, qword [rsp + 0x30]
mov edx, dword [rdx + 8]
cmp dx, dx
je 0x18000a6d2
mov ecx, dword [rcx + 0xc]
mov rdx, qword [rsp + 0x40]
cmp dx, dx
je 0x18000a71a
mov r8d, eax
mov rdx, rcx
jmp 0x18000a730
add rdx, rcx
mov rcx, rdx
cmp bh, bh
je 0x18000a6f8
call fcn.18000b342
mov rax, qword [rsp + 0x30]
jmp 0x18000a73d
mov rax, qword [rsp + 0xc0]
mov rcx, rax
jmp 0x18000a724
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x30]
jmp 0x18000a2e8
mov rdx, qword [rsp + 0x40]
add rdx, rcx
jmp 0x18000a775
mov qword [rsp + 0xa0], rax
mov eax, dword [rsp + 0x78]
cmp bp, bp
je 0x18000a7b2
mov rcx, qword [rsp + 0x30]
mov ecx, dword [rcx + 4]
jmp 0x18000a74a
mov edx, eax
xor ecx, ecx
jmp 0x18000a77f
mov rcx, rdx
mov r8d, eax
cmp ch, ch
je 0x18000a78f
call qword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
cmp dl, dl
je 0x18000a799
mov rdx, rcx
mov rcx, qword [rsp + 0x50]
jmp 0x18000a7a3
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 8]
jmp 0x18000a765
call fcn.18000b342
mov rax, qword [rsp + 0x30]
jmp 0x18000a6eb
mov r9d, 4
mov r8d, 0x3000
cmp cl, cl
je 0x18000a76f
mov rcx, qword [rsp + 0x50]
add rcx, rax
jmp 0x18000a80b
mov dword [rsp + 0x120], eax
mov rax, qword [rsp + 0x30]
jmp 0x18000a4ed
mov rax, rcx
mov qword [rsp + 0x108], rax
jmp 0x18000a83d
add rax, rcx
mov qword [rsp + 0x118], rax
cmp dh, dh
je 0x18000a833
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x100]
cmp ah, ah
je 0x18000a829
mov rax, rcx
mov ecx, dword [rsp + 0x110]
jmp 0x18000a7ea
mov dword [rsp + 0x110], eax
mov eax, dword [rsp + 0x100]
cmp cl, cl
je 0x18000a7c2
mov rcx, qword [rsp + 0x50]
add rcx, rax
jmp 0x18000a7dd
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x20]
jmp 0x18000a7cc
mov rax, qword [rsp + 0x30]
mov eax, dword [rax + 0x10]
jmp 0x18000a817
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
invalid
add byte [rbp + 9], dh
jmp 0x18000a856
xor eax, eax
jmp 0x18000a623
mov rax, qword [rsp + 0x68]
jmp 0x18000a53d
pop rsi
ret
shl ecx, 2
movsxd rcx, ecx
jmp sym.System.IO.Compression.Native.dll_qrotliDecoderDestroyInstance
mov rax, rcx
movzx ecx, word [rsp + 0x60]
jmp 0x18000a9b5