Function at 0x1800342a0
Capabilities:
Access peb ldr_data

Disassembly:
test dl, dl
je 0x180034814
sub rsp, 0x58
mov rax, qword [0x1802208c0]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x50], rdi
call fcn.180026540
xor esi, esi
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], reloc.WLDAP32.dll_Ordinal_27
inc dword [rax + 8]
call fcn.180026540
movabs rbx, 0xfe99b66d079cf6bc
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, rbx
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 0xed
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, rbx
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], Ordinal_30
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, rbx
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 0xbc
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 1
mov rcx, rbx
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], 0xbb
inc dword [rax + 8]
call fcn.180026540
mov rcx, rbx
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], 1
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
movss xmm2, dword [0x180261af4]
lea rdx, [rsp + 0x28]
call fcn.1800278b0
lea rdx, [rsp + 0x28]
call fcn.180034030
mov rax, qword gs:[0x58]
mov ecx, dword [0x1802e5e34]
mov ebp, 8
mov rbx, qword [rax + rcx*8]
mov eax, dword [rbx + rbp]
cmp dword [0x1802e6780], eax
jle 0x180034500
lea rcx, [0x1802e6780]
call fcn.180174484
cmp dword [0x1802e6780], 0xffffffff
jne 0x180034500
lea rcx, [0x1802e6788]
call fcn.180032350
lea rcx, [0x1802e6780]
mov qword [0x1802e6790], rsi
call fcn.180174418
mov qword [0x1802e6790], 0x5f5e100
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
movabs rdi, 0xe2587f8cbbd87b1d
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], 0xbc
mov rcx, rdi
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
mov rcx, qword [rax]
cmp dword [rcx], esi
je 0x18003459d
lea rcx, [rsp + 0x20]
call fcn.180032350
mov rcx, qword [rsp + 0x20]
mov rax, rcx
sub rax, qword [0x1802e6788]
cmp rax, qword [0x1802e6790]
jl 0x18003459d
movss xmm0, dword [0x180261af4]
addss xmm0, dword [0x1801e0afc]
mov qword [0x1802e6788], rcx
movss dword [0x180261af4], xmm0
mov eax, dword [rbx + rbp]
cmp dword [0x1802e6798], eax
jle 0x1800345dc
lea rcx, [0x1802e6798]
call fcn.180174484
cmp dword [0x1802e6798], 0xffffffff
jne 0x1800345dc
lea rcx, [0x1802e67a0]
call fcn.180032350
lea rcx, [0x1802e6798]
mov qword [0x1802e67a8], rsi
call fcn.180174418
mov qword [0x1802e67a8], 0x5f5e100
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], esi
inc dword [rax + 8]
call fcn.180026540
mov rcx, rdi
mov r8d, dword [rax + 8]
mov rdx, qword [rax + 0x10]
mov dword [rdx + r8*8], 0xbb
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
mov rcx, qword [rax]
cmp dword [rcx], esi
je 0x180034673
lea rcx, [rsp + 0x20]
call fcn.180032350
mov rcx, qword [rsp + 0x20]
mov rax, rcx
sub rax, qword [0x1802e67a0]
cmp rax, qword [0x1802e67a8]
jl 0x180034673
movss xmm0, dword [0x180261af4]
addss xmm0, dword [0x1801e0c78]
mov qword [0x1802e67a0], rcx
movss dword [0x180261af4], xmm0
mov eax, dword [rbx + rbp]
cmp dword [0x1802e67b0], eax
mov rbp, qword [rsp + 0x68]
jle 0x1800346b7
lea rcx, [0x1802e67b0]
call fcn.180174484
cmp dword [0x1802e67b0], 0xffffffff
jne 0x1800346b7
lea rcx, [0x1802e67b8]
call fcn.180032350
lea rcx, [0x1802e67b0]
mov qword [0x1802e67c0], rsi
call fcn.180174418
mov qword [0x1802e67c0], 0xbebc200
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
lea rdi, str.HeistLocate
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov qword [rcx + rdx*8], rdi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
inc dword [rax + 8]
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], esi
movabs rcx, 0x2206bf9a37b7f724
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
movabs rcx, 0xd80958fc74e988a6
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.1800263e0
call fcn.180026540
mov rcx, qword [rax]
mov ebx, dword [rcx]
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov dword [rcx + rdx*8], ebx
inc dword [rax + 8]
call fcn.180026540
movss xmm0, dword [rsp + 0x28]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm0
inc dword [rax + 8]
call fcn.180026540
movss xmm0, dword [rsp + 0x30]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm0
inc dword [rax + 8]
call fcn.180026540
movss xmm0, dword [rsp + 0x38]
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
movss dword [rcx + rdx*8], xmm0
movabs rcx, 0x9afeff481a85ab2e
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
call fcn.180026540
mov dword [rax + 8], esi
mov dword [rax + 0x18], esi
call fcn.180026540
mov edx, dword [rax + 8]
mov rcx, qword [rax + 0x10]
mov qword [rcx + rdx*8], rdi
movabs rcx, 0x68e835a1d0dc0e3
inc dword [rax + 8]
call fcn.1800263e0
call fcn.180026540
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.180173e20
add rsp, 0x58
ret