Function at 0x1800019c0
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xf8
mov qword [rsp + 0xb0], r9
mov qword [rsp + 0xd0], r8
mov qword [rsp + 0xa8], rcx
lea rax, [rsp + 0xc0]
mov qword [rsp + 0xd8], rax
mov rax, qword [rsp + 0xd8]
movzx eax, dx
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r8, qword [rax + 0x10]
mov qword [rsp + 0x50], r8
mov r10d, 0x18b438c7
mov r13d, 0x684ac286
jmp 0x180001a50
mov r10d, 0xe16dc643
xor r14d, r14d
nop word [rax + rax]
cmp r10d, 0x18b438c6
jle 0x180001ad0
cmp r10d, 0x54af57b9
jg 0x180001b20
cmp r10d, 0x18b438c7
je 0x180001b92
cmp r10d, 0x389845c6
je 0x180001bec
cmp r10d, 0x3e1dd1b7
jne 0x180001a50
mov qword [rsp + 0xb8], rbx
mov dword [rsp + 0x78], edi
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov ebp, dword [rdx + rax*4]
add rbp, rcx
mov ecx, 0x72193ca4
mov edi, 0xa7f259f3
mov r10d, 0x72193ca4
jmp 0x180001c2d
cmp r10d, 0xe16dc642
jg 0x180001b58
cmp r10d, 0x8c9912e7
je 0x180001cf3
cmp r10d, 0x9de9327f
je 0x180001d11
cmp r10d, 0xabff0485
jne 0x180001a50
mov r10d, 0x389845c6
xor edi, edi
mov r12, qword [rsp + 0x68]
jmp 0x180001a50
cmp r10d, 0x54af57ba
je 0x180001a41
cmp r10d, 0x589239e4
je 0x180001d25
cmp r10d, 0x684ac286
jne 0x180001a50
mov r10d, 0xfea28d57
xor r15d, r15d
mov r11, rbx
jmp 0x180001a50
cmp r10d, 0xfea28d57
je 0x180001d5b
cmp r10d, 0xff2675a1
jne 0x180001db5
mov r8, qword [r8]
mov qword [rsp + 0x50], r8
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov r10d, 0x18b438c7
jmp 0x180001a50
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [r8 + 0x30]
mov qword [rsp + 0x38], rax
movsxd rcx, dword [rax + 0x3c]
mov edx, dword [rax + rcx + 0x88]
mov ecx, dword [rax + rcx + 0x8c]
add rax, rdx
test rdx, rdx
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], ecx
mov r10d, 0x9de9327f
cmove r10d, r13d
mov rbx, qword [rsp + 0x68]
jmp 0x180001a50
test edi, edi
mov r10d, 0xfea28d57
cmove r10d, r13d
mov r15d, edi
mov r11, r12
mov rbx, r12
jmp 0x180001a50
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor edx, edx
lea rax, [rsp + 0x34]
mov eax, dword [rax]
mov ecx, 0x3707e23a
test edx, edx
mov ebx, 0xa64a100c
cmove ebx, r10d
lea rdx, [rbp + 1]
nop dword [rax]
cmp ecx, 0xebeed698
jle 0x180001ca0
cmp ecx, 0xebeed699
je 0x180001c10
cmp ecx, 0x3707e23a
je 0x180001cc0
cmp ecx, 0x72193ca4
jne 0x180001c40
mov dword [rsp + 0x34], r9d
mov dword [rsp + 0x2c], edi
mov qword [rsp + 0x88], rdx
movzx ecx, byte [rbp]
mov byte [rsp + 0x27], cl
cmp byte [rsp + 0x27], 0
mov ecx, 0xebeed699
mov r13, r11
mov r11d, 0x9ec80f04
cmove ecx, r11d
mov r11, r13
jmp 0x180001c40
cmp ecx, 0x9ec80f04
je 0x180001ce0
cmp ecx, 0xa64a100c
jne 0x180001c40
jmp 0x180001d81
mov dword [rsp + 0x30], eax
mov rbp, qword [rsp + 0x88]
mov r9d, dword [rsp + 0x30]
mov edi, esi
mov ecx, ebx
jmp 0x180001c38
mov edx, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x180001c26
mov eax, r9d
sub eax, 1
mov dword [rsp + 0x28], eax
mov r10d, 0x3e1dd1b7
mov eax, 0xabff0485
cmovb r10d, eax
jmp 0x180001a50
mov rax, qword [rsp + 0x40]
mov r9d, dword [rax + 0x18]
mov r10d, 0x8c9912e7
jmp 0x180001a50
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov ebp, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rbp, rcx
add rdx, rcx
movzx eax, word [rdx + rax*2]
mov r12d, dword [rbp + rax*4]
add r12, rcx
mov r10d, 0x389845c6
mov edi, 1
jmp 0x180001a50
mov qword [rsp + 0x70], r11
mov rax, qword [rsp + 0x60]
test r15d, r15d
mov r10d, 0xe16dc643
mov eax, 0xff2675a1
cmove r10d, eax
mov r14, qword [rsp + 0x70]
jmp 0x180001a50
mov eax, dword [rsp + 0x30]
cmp eax, 0xf1789429
mov r10d, 0x8c9912e7
mov eax, 0x589239e4
cmove r10d, eax
mov r9d, dword [rsp + 0x28]
mov r13d, 0x684ac286
mov edi, dword [rsp + 0x78]
mov rbx, qword [rsp + 0xb8]
jmp 0x180001a50
cmp r10d, 0xe16dc643
jne 0x180001a50
mov rax, qword [rsp + 0x58]
mov r8d, 0xa
mov rcx, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0x98]
call r14
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xc0], rax
mov eax, 0x85df81fd
jmp 0x180001e10
mov ecx, 0x224673cc
cmove eax, ecx
nop word [rax + rax]
cmp eax, 0xf420767e
jg 0x1800021c0
cmp eax, 0xd5d3176b
jg 0x180002210
cmp eax, 0xb30e7ac3
jle 0x180002690
cmp eax, 0xb30e7ac4
je 0x1800026b6
cmp eax, 0xc5e80a72
jne 0x180001e10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r14, qword [rax + 0x10]
mov qword [rsp + 0x50], r14
mov esi, 0x8fe405ce
jmp 0x180001e80
mov esi, 0xaf57cff2
xor r10d, r10d
nop word [rax + rax]
cmp esi, 0x1e418895
jle 0x180001ef0
cmp esi, 0x58ddb6c3
jg 0x180001f30
cmp esi, 0x1e418896
je 0x180001f99
cmp esi, 0x21c54fe8
je 0x180001fb8
cmp esi, 0x48951306
jne 0x180001e80
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov ebx, dword [rbp + 0x1c]
mov ebp, dword [rbp + 0x24]
add rbx, rcx
add rbp, rcx
movzx eax, word [rbp + rax*2]
mov r12d, dword [rbx + rax*4]
add r12, rcx
mov esi, 0xa993606c
mov ebx, 1
jmp 0x180001e80
cmp esi, 0xd6d2eb78
jle 0x180001f64
cmp esi, 0xd6d2eb79
je 0x180001fd4
cmp esi, 0xdc8382c
je 0x180001e6f
cmp esi, 0x1cb806df
jne 0x180001e80
mov rax, qword [rsp + 0x40]
mov r8d, dword [rax + 0x18]
mov esi, 0x21c54fe8
jmp 0x180001e80
cmp esi, 0x58ddb6c4
je 0x180001fe5
cmp esi, 0x5d048491
je 0x180002012
cmp esi, 0x751026eb
jne 0x180001e80
mov esi, 0x5d048491
xor r11d, r11d
mov r15, r13
jmp 0x180001e80
cmp esi, 0x8fe405ce
je 0x180002036
cmp esi, 0xa993606c
jne 0x180002197
test ebx, ebx
mov esi, 0x5d048491
mov eax, 0x751026eb
cmove esi, eax
mov r11d, ebx
mov r15, r12
mov r13, r12
jmp 0x180001e80
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov esi, 0x8fe405ce
jmp 0x180001e80
mov eax, r8d
sub eax, 1
mov dword [rsp + 0x28], eax
mov esi, 0x58ddb6c4
mov eax, 0xd6d2eb79
cmovb esi, eax
jmp 0x180001e80
mov esi, 0xa993606c
xor ebx, ebx
mov r12, qword [rsp + 0x68]
jmp 0x180001e80
mov dword [rsp + 0x78], ebx
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov edx, dword [rdx + rax*4]
add rdx, rcx
mov ecx, 0x72193ca4
mov edi, 0x9365b264
jmp 0x1800020bd
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x60]
test r11d, r11d
mov esi, 0xaf57cff2
mov eax, 0x1e418896
cmove esi, eax
mov r10, qword [rsp + 0x70]
jmp 0x180001e80
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x38], rax
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rax + rcx + 0x88]
mov ecx, dword [rax + rcx + 0x8c]
add rax, rbp
test rbp, rbp
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], ecx
mov esi, 0x1cb806df
mov eax, 0x751026eb
cmove esi, eax
mov r13, qword [rsp + 0x68]
jmp 0x180001e80
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor ebx, ebx
lea rax, [rsp + 0x34]
mov eax, dword [rax]
mov ecx, 0x3707e23a
test ebx, ebx
mov ebx, 0xa64a100c
mov ebp, 0x72193ca4
cmove ebx, ebp
lea r8, [rdx + 1]
cmp ecx, 0xebeed698
jle 0x180002120
cmp ecx, 0xebeed699
je 0x1800020a0
cmp ecx, 0x3707e23a
je 0x180002140
cmp ecx, 0x72193ca4
jne 0x1800020d0
mov dword [rsp + 0x34], r9d
mov dword [rsp + 0x2c], edi
mov qword [rsp + 0x88], r8
movzx ecx, byte [rdx]
mov byte [rsp + 0x27], cl
cmp byte [rsp + 0x27], 0
mov ecx, 0xebeed699
mov ebp, 0x9ec80f04
cmove ecx, ebp
jmp 0x1800020d0
cmp ecx, 0x9ec80f04
je 0x180002160
cmp ecx, 0xa64a100c
jne 0x1800020d0
jmp 0x180002173
mov dword [rsp + 0x30], eax
mov rdx, qword [rsp + 0x88]
mov r9d, dword [rsp + 0x30]
mov edi, esi
mov ecx, ebx
jmp 0x1800020cc
mov ebx, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x1800020b6
mov eax, dword [rsp + 0x30]
cmp eax, 0xaac2f372
mov esi, 0x21c54fe8
mov eax, 0x48951306
cmove esi, eax
mov r8d, dword [rsp + 0x28]
mov ebx, dword [rsp + 0x78]
jmp 0x180001e80
cmp esi, 0xaf57cff2
jne 0x180001e80
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xa0]
call r10
mov eax, 0xf420767f
jmp 0x180001e10
cmp eax, 0x224673cb
jg 0x180002620
cmp eax, 0xf420767f
je 0x180002a39
cmp eax, 0x4f290b8
je 0x180002a4e
cmp eax, 0x1b0d7faa
jne 0x180001e10
mov edx, dword [rsp + 0x94]
test edx, edx
mov eax, 0xd5d3176c
mov ecx, 0xc5e80a72
cmove eax, ecx
mov dword [rsp + 0x98], edx
jmp 0x180001e10
cmp eax, 0xd5d3176c
je 0x180002e6f
cmp eax, 0xed73d89e
je 0x180002e9c
cmp eax, 0xf071002d
jne 0x180001e10
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rbp, qword [rax + 0x10]
mov qword [rsp + 0x50], rbp
mov esi, 0x96d0c9b6
jmp 0x180002280
mov esi, 0x99d2f6dc
xor r11d, r11d
mov r10, rdi
cmp esi, 0x17ef4d79
jg 0x1800022e0
cmp esi, 0xf3824fe6
jg 0x180002330
cmp esi, 0x90ca9624
je 0x18000238a
cmp esi, 0x96d0c9b6
je 0x1800023a6
cmp esi, 0x99d2f6dc
jne 0x180002280
mov qword [rsp + 0x70], r10
mov rax, qword [rsp + 0x60]
test r11d, r11d
mov esi, 0x79f8252a
mov eax, 0x41244281
cmove esi, eax
mov r9, qword [rsp + 0x70]
jmp 0x180002280
cmp esi, 0x6686011e
jg 0x180002365
cmp esi, 0x17ef4d7a
je 0x180002403
cmp esi, 0x19c034da
je 0x18000243e
cmp esi, 0x41244281
jne 0x180002280
mov rbp, qword [rbp]
mov qword [rsp + 0x50], rbp
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov esi, 0x96d0c9b6
jmp 0x180002280
cmp esi, 0xf3824fe7
je 0x180002451
cmp esi, 0xfe7fba57
je 0x180002275
cmp esi, 0x24b5f0f
jne 0x180002280
mov esi, 0x6686011f
xor ecx, ecx
mov rbx, qword [rsp + 0x68]
jmp 0x180002280
cmp esi, 0x6686011f
je 0x180002484
cmp esi, 0x7f9fdb5d
jne 0x1800025d2
mov esi, 0x79f8252a
xor r9d, r9d
jmp 0x180002280
mov eax, r8d
sub eax, 1
mov dword [rsp + 0x28], eax
mov esi, 0x17ef4d7a
mov eax, 0x24b5f0f
cmovb esi, eax
jmp 0x180002280
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rbp + 0x30]
mov qword [rsp + 0x38], rax
movsxd rdx, dword [rax + 0x3c]
mov edi, dword [rax + rdx + 0x88]
mov edx, dword [rax + rdx + 0x8c]
add rax, rdi
test rdi, rdi
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], edx
mov esi, 0x19c034da
mov eax, 0xfe7fba57
cmove esi, eax
mov rdi, qword [rsp + 0x68]
jmp 0x180002280
mov qword [rsp + 0xb8], rdi
mov dword [rsp + 0x78], ecx
mov rcx, rbp
mov eax, dword [rsp + 0x28]
mov rdx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov ebp, dword [rbp + 0x20]
add rbp, rdx
mov ebp, dword [rbp + rax*4]
add rbp, rdx
mov r14d, 0x72193ca4
mov r15d, 0xd4b1955d
jmp 0x1800024cf
mov rax, qword [rsp + 0x40]
mov r8d, dword [rax + 0x18]
mov esi, 0x90ca9624
jmp 0x180002280
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov ebx, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rbx, rcx
add rdx, rcx
movzx eax, word [rdx + rax*2]
mov ebx, dword [rbx + rax*4]
add rbx, rcx
mov esi, 0x6686011f
mov ecx, 1
jmp 0x180002280
test ecx, ecx
mov esi, 0x99d2f6dc
mov eax, 0xfe7fba57
cmove esi, eax
mov r11d, ecx
mov r10, rbx
mov rdi, rbx
jmp 0x180002280
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor edi, edi
lea rax, [rsp + 0x34]
mov r13d, dword [rax]
mov r14d, 0x3707e23a
test edi, edi
mov r12d, 0xa64a100c
mov eax, 0x72193ca4
cmove r12d, eax
lea r8, [rbp + 1]
nop word cs:[rax + rax]
nop
cmp r14d, 0xebeed698
jle 0x180002550
cmp r14d, 0xebeed699
je 0x1800024b0
cmp r14d, 0x3707e23a
je 0x180002570
cmp r14d, 0x72193ca4
jne 0x1800024f0
mov dword [rsp + 0x34], edx
mov dword [rsp + 0x2c], r15d
mov qword [rsp + 0x88], r8
movzx eax, byte [rbp]
mov byte [rsp + 0x27], al
cmp byte [rsp + 0x27], 0
mov r14d, 0xebeed699
mov eax, 0x9ec80f04
cmove r14d, eax
jmp 0x1800024f0
cmp r14d, 0x9ec80f04
je 0x180002590
cmp r14d, 0xa64a100c
jne 0x1800024f0
jmp 0x1800025a3
mov dword [rsp + 0x30], r13d
mov rbp, qword [rsp + 0x88]
mov edx, dword [rsp + 0x30]
mov r15d, esi
mov r14d, r12d
jmp 0x1800024e0
mov edi, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x1800024c6
mov eax, dword [rsp + 0x30]
cmp eax, 0x10cd3ba1
mov esi, 0x90ca9624
mov eax, 0xf3824fe7
cmove esi, eax
mov r8d, dword [rsp + 0x28]
mov rbp, rcx
mov ecx, dword [rsp + 0x78]
mov rdi, qword [rsp + 0xb8]
jmp 0x180002280
cmp esi, 0x79f8252a
jne 0x180002280
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xa8]
call r9
mov qword [rsp + 0xa0], rax
test rax, rax
mov eax, 0xb30e7ac4
mov ecx, 0xf420767f
cmove eax, ecx
jmp 0x180001e10
cmp eax, 0x224673cc
je 0x180003268
cmp eax, 0x51f1101a
je 0x18000327d
cmp eax, 0x72ea897c
jne 0x180001e10
mov rax, qword [rsp + 0xb0]
mov edi, dword [rax]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rcx, rax
mov edx, 8
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rsp + 0xd0]
mov qword [rcx], rax
cmp qword [rsp + 0xc8], 0
mov eax, 0xed73d89e
jmp 0x180001dff
cmp eax, 0x85df81fd
jne 0x180003292
cmp qword [rsp + 0xe0], 0
mov eax, 0xf071002d
mov ecx, 0x51f1101a
cmove eax, ecx
jmp 0x180001e10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r14, qword [rax + 0x10]
mov qword [rsp + 0x50], r14
mov esi, 0xaa47893f
jmp 0x1800026f0
mov esi, 0x28a4a625
xor r10d, r10d
nop word [rax + rax]
cmp esi, 0x24f8ba
jg 0x180002740
cmp esi, 0xe35f4608
jg 0x1800027a0
cmp esi, 0xaa47893f
je 0x18000281c
cmp esi, 0xbd6c68bb
je 0x180002879
cmp esi, 0xcf2d5e13
jne 0x1800026f0
test ebx, ebx
mov esi, 0x3ad7ad59
mov eax, 0xbd6c68bb
cmove esi, eax
mov r11d, ebx
mov r15, r12
mov r13, r12
jmp 0x1800026f0
cmp esi, 0x28a4a624
jg 0x1800027e0
cmp esi, 0x24f8bb
je 0x180002889
cmp esi, 0x19325fad
je 0x18000289a
cmp esi, 0x23927632
jne 0x1800026f0
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov ebx, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rbx, rcx
add rdx, rcx
movzx eax, word [rdx + rax*2]
mov r12d, dword [rbx + rax*4]
add r12, rcx
mov esi, 0xcf2d5e13
mov ebx, 1
jmp 0x1800026f0
cmp esi, 0xe35f4609
je 0x1800028b9
cmp esi, 0xf2a20f0b
je 0x1800026e2
cmp esi, 0xfbcfd7c5
jne 0x1800026f0
mov eax, r8d
sub eax, 1
mov dword [rsp + 0x28], eax
mov esi, 0x3047a32b
mov eax, 0x24f8bb
cmovb esi, eax
jmp 0x1800026f0
cmp esi, 0x3047a32b
je 0x1800028cc
cmp esi, 0x3ad7ad59
jne 0x1800029f7
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x60]
test r11d, r11d
mov esi, 0x28a4a625
mov eax, 0x19325fad
cmove esi, eax
mov r10, qword [rsp + 0x70]
jmp 0x1800026f0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x38], rax
movsxd rcx, dword [rax + 0x3c]
mov edx, dword [rax + rcx + 0x88]
mov ecx, dword [rax + rcx + 0x8c]
add rax, rdx
test rdx, rdx
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], ecx
mov esi, 0xe35f4609
mov eax, 0xbd6c68bb
cmove esi, eax
mov r13, qword [rsp + 0x68]
jmp 0x1800026f0
mov esi, 0x3ad7ad59
xor r11d, r11d
mov r15, r13
jmp 0x1800026f0
mov esi, 0xcf2d5e13
xor ebx, ebx
mov r12, qword [rsp + 0x68]
jmp 0x1800026f0
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov esi, 0xaa47893f
jmp 0x1800026f0
mov rax, qword [rsp + 0x40]
mov r8d, dword [rax + 0x18]
mov esi, 0xfbcfd7c5
jmp 0x1800026f0
mov dword [rsp + 0x78], ebx
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov ebp, dword [rdx + rax*4]
add rbp, rcx
mov ecx, 0x72193ca4
mov edi, 0xc9bc1168
jmp 0x18000291d
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor ebx, ebx
lea rax, [rsp + 0x34]
mov eax, dword [rax]
mov ecx, 0x3707e23a
test ebx, ebx
mov ebx, 0xa64a100c
mov edx, 0x72193ca4
cmove ebx, edx
lea r8, [rbp + 1]
cmp ecx, 0xebeed698
jle 0x180002980
cmp ecx, 0xebeed699
je 0x180002900
cmp ecx, 0x3707e23a
je 0x1800029a0
cmp ecx, 0x72193ca4
jne 0x180002930
mov dword [rsp + 0x34], r9d
mov dword [rsp + 0x2c], edi
mov qword [rsp + 0x88], r8
movzx ecx, byte [rbp]
mov byte [rsp + 0x27], cl
cmp byte [rsp + 0x27], 0
mov ecx, 0xebeed699
mov edx, 0x9ec80f04
cmove ecx, edx
jmp 0x180002930
cmp ecx, 0x9ec80f04
je 0x1800029c0
cmp ecx, 0xa64a100c
jne 0x180002930
jmp 0x1800029d3
mov dword [rsp + 0x30], eax
mov rbp, qword [rsp + 0x88]
mov r9d, dword [rsp + 0x30]
mov edi, esi
mov ecx, ebx
jmp 0x18000292c
mov ebx, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x180002916
mov eax, dword [rsp + 0x30]
cmp eax, 0x27d30b30
mov esi, 0xfbcfd7c5
mov eax, 0x23927632
cmove esi, eax
mov r8d, dword [rsp + 0x28]
mov ebx, dword [rsp + 0x78]
jmp 0x1800026f0
cmp esi, 0x28a4a625
jne 0x1800026f0
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0xa8]
call r10
mov rcx, qword [rsp + 0xb0]
mov dword [rcx], eax
test eax, eax
mov eax, 0x4f290b8
mov ecx, 0xc5e80a72
cmove eax, ecx
jmp 0x180001e10
mov eax, 0xd5d3176c
mov dword [rsp + 0x98], 0
jmp 0x180001e10
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r14, qword [rax + 0x10]
mov qword [rsp + 0x50], r14
mov esi, 0xf86efd10
jmp 0x180002aa0
mov eax, dword [0x180034a70]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0xa2c1eff4
mov eax, 0x4d270d0d
cmove esi, eax
cmp dword [0x180034a74], 0xa
cmovl esi, eax
cmp esi, 0xf1bfa5de
jle 0x180002af0
cmp esi, 0x4938c844
jle 0x180002b40
cmp esi, 0x4c243d75
jg 0x180002bc4
cmp esi, 0x4938c845
je 0x180002c4e
cmp esi, 0x4b723c8b
jne 0x180002aa0
mov eax, r8d
sub eax, 1
mov dword [rsp + 0x28], eax
mov esi, 0x4938c845
mov eax, 0xf0f270a2
cmovb esi, eax
jmp 0x180002aa0
cmp esi, 0xc37c3d94
jle 0x180002b90
cmp esi, 0xe984da42
jg 0x180002bfa
cmp esi, 0xc37c3d95
je 0x180002c7c
cmp esi, 0xc7f4af09
jne 0x180002aa0
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov esi, 0xf86efd10
jmp 0x180002aa0
cmp esi, 0xf86efd0f
jle 0x180002c24
cmp esi, 0xf86efd10
je 0x180002c8f
cmp esi, 0x224e4fee
jne 0x180002aa0
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x60]
test r11d, r11d
mov esi, 0xf1bfa5df
mov eax, 0xc7f4af09
cmove esi, eax
mov r10, qword [rsp + 0x70]
jmp 0x180002aa0
cmp esi, 0xa2c1eff4
je 0x180002cec
cmp esi, 0xa811731c
je 0x180002cf6
cmp esi, 0xbfd2257d
jne 0x180002aa0
mov esi, 0x224e4fee
xor r11d, r11d
mov r15, r13
jmp 0x180002aa0
cmp esi, 0x4c243d76
je 0x180002d2b
cmp esi, 0x4d270d0d
jne 0x180002aa0
mov eax, dword [0x180034a70]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov esi, 0xa2c1eff4
mov eax, 0x4c243d76
jmp 0x180002a93
cmp esi, 0xe984da43
je 0x180002a7a
cmp esi, 0xf0f270a2
jne 0x180002aa0
mov esi, 0xf73213cc
xor r12d, r12d
mov rdi, qword [rsp + 0x68]
jmp 0x180002aa0
cmp esi, 0xf73213cc
jne 0x180002e38
test r12d, r12d
mov esi, 0x224e4fee
mov eax, 0xbfd2257d
cmove esi, eax
mov r11d, r12d
mov r15, rdi
mov r13, rdi
jmp 0x180002aa0
mov qword [rsp + 0x78], rdi
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov edx, dword [rdx + rax*4]
add rdx, rcx
mov ecx, 0x72193ca4
mov ebp, 0x74eb8ef0
jmp 0x180002d5d
mov rax, qword [rsp + 0x40]
mov r8d, dword [rax + 0x18]
mov esi, 0x4b723c8b
jmp 0x180002aa0
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x38], rax
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rax + rcx + 0x88]
mov ecx, dword [rax + rcx + 0x8c]
add rax, rbp
test rbp, rbp
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], ecx
mov esi, 0xc37c3d95
mov eax, 0xbfd2257d
cmove esi, eax
mov r13, qword [rsp + 0x68]
jmp 0x180002aa0
mov esi, 0x4d270d0d
jmp 0x180002aa0
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov ebx, dword [rbp + 0x1c]
mov ebp, dword [rbp + 0x24]
add rbx, rcx
add rbp, rcx
movzx eax, word [rbp + rax*2]
mov edi, dword [rbx + rax*4]
add rdi, rcx
mov esi, 0xf73213cc
mov r12d, 1
jmp 0x180002aa0
mov esi, 0xf1bfa5df
xor r10d, r10d
jmp 0x180002aa0
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor ebx, ebx
lea rax, [rsp + 0x34]
mov eax, dword [rax]
mov ecx, 0x3707e23a
test ebx, ebx
mov ebx, 0xa64a100c
mov edi, 0x72193ca4
cmove ebx, edi
lea r8, [rdx + 1]
cmp ecx, 0xebeed698
jle 0x180002dc0
cmp ecx, 0xebeed699
je 0x180002d40
cmp ecx, 0x3707e23a
je 0x180002de0
cmp ecx, 0x72193ca4
jne 0x180002d70
mov dword [rsp + 0x34], r9d
mov dword [rsp + 0x2c], ebp
mov qword [rsp + 0x88], r8
movzx ecx, byte [rdx]
mov byte [rsp + 0x27], cl
cmp byte [rsp + 0x27], 0
mov ecx, 0xebeed699
mov edi, 0x9ec80f04
cmove ecx, edi
jmp 0x180002d70
cmp ecx, 0x9ec80f04
je 0x180002e00
cmp ecx, 0xa64a100c
jne 0x180002d70
jmp 0x180002e13
mov dword [rsp + 0x30], eax
mov rdx, qword [rsp + 0x88]
mov r9d, dword [rsp + 0x30]
mov ebp, esi
mov ecx, ebx
jmp 0x180002d6c
mov ebx, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x180002d56
mov eax, dword [rsp + 0x30]
cmp eax, 0x4745883
mov esi, 0x4b723c8b
mov eax, 0xa811731c
cmove esi, eax
mov r8d, dword [rsp + 0x28]
mov rdi, qword [rsp + 0x78]
jmp 0x180002aa0
cmp esi, 0xf1bfa5df
jne 0x180002aa0
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xa0]
call r10
mov qword [rsp + 0xf0], rax
cmp qword [rsp + 0xf0], 0
mov eax, 0x72ea897c
jmp 0x180001dff
mov rax, qword [rsp + 0xe8]
cmp dword [rsp + 0x98], 0
mov eax, 0x8bedefec
mov ecx, 0x51f1101a
cmove eax, ecx
mov dword [rsp + 0x90], 1
jmp 0x180001e10
mov rsi, qword [rsp + 0xb0]
mov r8d, dword [rsi]
mov rdx, qword [rsp + 0xf0]
mov rcx, qword [rsp + 0xc8]
call fcn.180005d60
lea rdi, str.TPdWWe1ztEFKgTdnohr5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_lstrlenA]
mov r8d, dword [rsi]
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx]
mov rdx, rdi
mov r9d, eax
call section..text
lea rax, [rsp + 0x50]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov r14, qword [rax + 0x10]
mov qword [rsp + 0x50], r14
mov esi, 0x3b185e29
jmp 0x180002f30
mov r14, qword [r14]
mov qword [rsp + 0x50], r14
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x80], rax
mov esi, 0x3b185e29
nop dword [rax + rax]
cmp esi, 0x1e821261
jle 0x180002f80
cmp esi, 0x48bd6deb
jg 0x180002fd0
cmp esi, 0x1e821262
je 0x18000302a
cmp esi, 0x3b185e29
je 0x18000305f
cmp esi, 0x3f2f5ac6
jne 0x180002f30
mov esi, 0x1d65e432
xor r11d, r11d
mov r15, r13
jmp 0x180002f30
cmp esi, 0xbc627eea
jle 0x180003005
cmp esi, 0xbc627eeb
je 0x1800030bc
cmp esi, 0xfa839a0
je 0x1800030cf
cmp esi, 0x1d65e432
jne 0x180002f30
mov qword [rsp + 0x70], r15
mov rax, qword [rsp + 0x60]
test r11d, r11d
mov esi, 0x8cf52c48
mov eax, 0x48bd6dec
cmove esi, eax
mov r10, qword [rsp + 0x70]
jmp 0x180002f30
cmp esi, 0x48bd6dec
je 0x180002f11
cmp esi, 0x5470030a
je 0x1800030f9
cmp esi, 0x7b751c67
jne 0x180002f30
mov esi, 0x5470030a
xor ebx, ebx
mov r12, qword [rsp + 0x68]
jmp 0x180002f30
cmp esi, 0x9bd7219e
je 0x180003116
cmp esi, 0xb7128f6b
jne 0x180003237
mov esi, 0x8cf52c48
xor r10d, r10d
jmp 0x180002f30
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x40]
mov ebx, dword [rbp + 0x1c]
mov ebp, dword [rbp + 0x24]
add rbx, rcx
add rbp, rcx
movzx eax, word [rbp + rax*2]
mov r12d, dword [rbx + rax*4]
add r12, rcx
mov esi, 0x5470030a
mov ebx, 1
jmp 0x180002f30
mov rax, qword [rsp + 0x80]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [r14 + 0x30]
mov qword [rsp + 0x38], rax
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rax + rcx + 0x88]
mov ecx, dword [rax + rcx + 0x8c]
add rax, rbp
test rbp, rbp
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x48], ecx
mov esi, 0xbc627eeb
mov eax, 0x3f2f5ac6
cmove esi, eax
mov r13, qword [rsp + 0x68]
jmp 0x180002f30
mov rax, qword [rsp + 0x40]
mov r8d, dword [rax + 0x18]
mov esi, 0x9bd7219e
jmp 0x180002f30
mov dword [rsp + 0x78], ebx
mov eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
mov edx, dword [rdx + 0x20]
add rdx, rcx
mov edx, dword [rdx + rax*4]
add rdx, rcx
mov ecx, 0x72193ca4
mov edi, 0x648a62c3
jmp 0x18000315d
test ebx, ebx
mov esi, 0x1d65e432
mov eax, 0x3f2f5ac6
cmove esi, eax
mov r11d, ebx
mov r15, r12
mov r13, r12
jmp 0x180002f30
mov eax, r8d
sub eax, 1
mov dword [rsp + 0x28], eax
mov esi, 0xfa839a0
mov eax, 0x7b751c67
cmovb esi, eax
jmp 0x180002f30
movsx eax, byte [rsp + 0x27]
xor eax, dword [rsp + 0x2c]
imul esi, eax, 0x1000193
xor ebx, ebx
lea rax, [rsp + 0x34]
mov eax, dword [rax]
mov ecx, 0x3707e23a
test ebx, ebx
mov ebx, 0xa64a100c
mov ebp, 0x72193ca4
cmove ebx, ebp
lea r8, [rdx + 1]
cmp ecx, 0xebeed698
jle 0x1800031c0
cmp ecx, 0xebeed699
je 0x180003140
cmp ecx, 0x3707e23a
je 0x1800031e0
cmp ecx, 0x72193ca4
jne 0x180003170
mov dword [rsp + 0x34], r9d
mov dword [rsp + 0x2c], edi
mov qword [rsp + 0x88], r8
movzx ecx, byte [rdx]
mov byte [rsp + 0x27], cl
cmp byte [rsp + 0x27], 0
mov ecx, 0xebeed699
mov ebp, 0x9ec80f04
cmove ecx, ebp
jmp 0x180003170
cmp ecx, 0x9ec80f04
je 0x180003200
cmp ecx, 0xa64a100c
jne 0x180003170
jmp 0x180003213
mov dword [rsp + 0x30], eax
mov rdx, qword [rsp + 0x88]
mov r9d, dword [rsp + 0x30]
mov edi, esi
mov ecx, ebx
jmp 0x18000316c
mov ebx, 1
mov esi, dword [rsp + 0x2c]
lea rax, [rsp + 0x2c]
jmp 0x180003156
mov eax, dword [rsp + 0x30]
cmp eax, 0x3b7c9959
mov esi, 0x9bd7219e
mov eax, 0x1e821262
cmove esi, eax
mov r8d, dword [rsp + 0x28]
mov ebx, dword [rsp + 0x78]
jmp 0x180002f30
cmp esi, 0x8cf52c48
jne 0x180002f30
mov rax, qword [rsp + 0x58]
mov rcx, qword [rsp + 0xa0]
call r10
mov eax, 0x1b0d7faa
mov dword [rsp + 0x94], 1
jmp 0x180001e10
mov eax, 0x1b0d7faa
mov dword [rsp + 0x94], 0
jmp 0x180001e10
mov eax, 0x8bedefec
mov dword [rsp + 0x90], 0
jmp 0x180001e10
cmp eax, 0x8bedefec
jne 0x180001e10
mov rax, qword [rsp + 0xd8]
mov eax, dword [rsp + 0x90]
add rsp, 0xf8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret