Function at 0x140185ad0
Capabilities:
Access peb ldr_data
Hash data using djb2

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x228
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x1a0], 0xfffffffffffffffe
mov dword [rbp + 0x124], edx
mov rax, qword gs:[0x30]
mov rax, qword [rax + 0x60]
mov rax, qword [rax + 0x18]
add rax, 0x10
jmp 0x140185b2f
mov r8d, 0x1505
cmp r8d, 0x1edab0ed
je 0x140185ba3
mov rax, qword [rax]
mov rdx, qword [rax + 0x30]
test rdx, rdx
je 0x1401867a3
movzx edi, word [rax + 0x58]
test rdi, rdi
je 0x140185b20
mov r9, qword [rax + 0x60]
mov r8d, 0x1505
xor r10d, r10d
nop word cs:[rax + rax]
movzx r11d, byte [r9 + r10]
test r11b, r11b
jne 0x140185b74
inc r10
cmp r10, rdi
jb 0x140185b60
jmp 0x140185b26
lea esi, [r11 - 0x20]
cmp r11b, 0x61
movzx r11d, r11b
movzx esi, sil
cmovb esi, r11d
mov r11d, r8d
shl r11d, 5
add r11d, r8d
movzx r8d, sil
add r8d, r11d
inc r10
cmp r10, rdi
jb 0x140185b60
jmp 0x140185b26
mov qword [rbp + 0x128], rcx
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x98], 0
mov byte [rbp + 0x19f], 1
lea rcx, [rbp + 0xb0]
call fcn.140186f40
mov rax, qword [rbp + 0xb0]
mov rcx, qword [rbp + 0xb8]
xor edx, edx
mov r8, rax
test rax, rax
setne dl
je 0x140185bf5
mov r8, qword [rbp + 0xc0]
mov qword [rbp + 0x40], rdx
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rcx
mov qword [rbp + 0x60], rdx
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x70], rax
mov qword [rbp + 0x78], rcx
mov qword [rbp + 0x80], r8
jmp 0x140185c43
test rdx, rdx
je 0x140185c43
mov r8d, 1
mov rcx, r10
call fcn.1400402f0
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0x40]
call fcn.1401874d0
mov rax, qword [rbp + 0xb0]
test rax, rax
je 0x1401863dc
mov rcx, qword [rbp + 0xc0]
lea r9, [rcx + rcx*2]
mov rdx, qword [rax + r9*8 + 8]
movabs r8, 0x8000000000000000
cmp rdx, r8
je 0x1401863dc
mov r10, qword [rax + r9*8 + 0x10]
mov r8, qword [rax + r9*8 + 0x18]
cmp r8, 2
jb 0x140185c30
movzx r9d, word [r10]
cmp r9d, 0x775a
jne 0x140185c30
mov qword [rbp + 0xa8], rdx
mov rax, qword [rax + rcx*8 + 0x110]
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x150], 1
mov qword [rbp + 0x158], 0
mov qword [rsp + 0x20], 2
lea rcx, [rbp + 0xb0]
mov qword [rbp + 0x170], r10
mov rdx, r10
mov qword [rbp + 0x30], r8
lea r9, [0x14025da00]
call fcn.1401bb970
mov rax, qword [rbp + 0xb0]
mov qword [rbp + 0x10], rax
mov rdi, qword [rbp + 0xb8]
mov rcx, qword [rbp + 0xc8]
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0xa0], rax
mov r15, qword [rbp + 0xd8]
mov r12, qword [rbp + 0xe8]
mov rax, qword [rbp + 0xf8]
mov qword [rbp + 0x190], rax
mov rsi, qword [rbp + 0x100]
mov r14, qword [rbp + 0x108]
mov rbx, qword [rbp + 0x110]
mov eax, ecx
shr eax, 0x10
mov dword [rbp + 0x18c], eax
lea rax, [rbx - 1]
mov qword [rbp + 0x178], rax
mov rax, rcx
mov qword [rbp + 0x180], rcx
and rax, 0xffffffffff00ff00
mov qword [rbp + 0x18], rax
lea rax, [r14 - 1]
mov qword [rbp + 0x28], rax
mov ecx, 1
xor edx, edx
xor eax, eax
jmp 0x140185dc6
mov r12, qword [rbp + 0x130]
mov rcx, qword [rbp + 0x150]
mov word [rcx + rdx], 0x744e
add rdx, 2
mov qword [rbp + 0x158], rdx
mov rax, qword [rbp + 0x168]
mov qword [rbp + 0x138], rax
mov qword [rbp + 0x160], rcx
mov qword [rbp + 0x140], rdx
cmp qword [rbp + 0x10], 0
je 0x140185f10
mov rax, qword [rbp + 0x178]
lea rdx, [r15 + rax]
cmp rdx, rsi
jae 0x14018631e
movzx eax, byte [rbp + 0x18c]
shl rax, 0x10
movzx ecx, byte [rbp + 0x180]
or rcx, qword [rbp + 0x18]
or rcx, rax
cmp r12, 0xffffffffffffffff
je 0x140185f60
mov r9, rbx
mov r13, rcx
sub r9, rcx
mov r10, rdi
neg r10
nop dword [rax]
mov r8, qword [rbp + 0x190]
movzx eax, byte [r8 + rdx]
mov rcx, qword [rbp + 0xa0]
bt rcx, rax
jae 0x140185e90
cmp rdi, r12
mov rcx, r12
mov rax, r12
cmova rax, rdi
lea rdx, [r8 + r15]
mov r11, rax
nop dword [rax]
cmp r11, rbx
jae 0x140185eb0
lea r8, [r15 + r11]
cmp r8, rsi
jae 0x140186771
lea r12, [r11 + 1]
movzx r8d, byte [r14 + r11]
cmp r8b, byte [rdx + r11]
mov r11, r12
je 0x140185e60
add r15, r10
add r15, r12
jmp 0x140185e93
add r15, rbx
xor r12d, r12d
mov rax, qword [rbp + 0x178]
lea rdx, [r15 + rax]
cmp rdx, rsi
jb 0x140185e30
jmp 0x14018631e
mov rax, rdi
mov r11, qword [rbp + 0x190]
nop word [rax + rax]
cmp rcx, rax
jae 0x140185f50
dec rax
cmp rax, rbx
jae 0x14018678f
lea rdx, [rax + r15]
cmp rdx, rsi
jae 0x140186757
movzx r8d, byte [r14 + rax]
cmp r8b, byte [r11 + rdx]
je 0x140185ec0
add r15, r13
mov r12, r9
mov rax, qword [rbp + 0x178]
lea rdx, [r15 + rax]
cmp rdx, rsi
jb 0x140185e30
jmp 0x14018631e
cmp byte [rbp + 0x18c], 0
jne 0x14018631e
mov rax, rsi
test rdi, rdi
je 0x140186087
mov rax, rsi
sub rax, rdi
jbe 0x140186081
mov rcx, qword [rbp + 0x190]
cmp byte [rcx + rdi], 0xc0
jge 0x140186087
jmp 0x1401867be
xor r12d, r12d
jmp 0x14018606b
mov qword [rbp + 0x20], rcx
lea rax, [rdi - 1]
cmp rax, rbx
setb byte [rbp + 0x130]
mov rcx, qword [rbp + 0x190]
lea r10, [rcx + rdi]
lea r11, [r14 + rdi]
mov rcx, qword [rbp + 0x28]
add rcx, rdi
mov qword [rbp + 0x168], rcx
jmp 0x140185fbd
add r15, rbx
mov r13, r15
mov rcx, qword [rbp + 0x178]
lea rdx, [rcx + r13]
mov r15, r13
cmp rdx, rsi
jae 0x14018631e
mov rcx, qword [rbp + 0x190]
movzx edx, byte [rcx + rdx]
mov rcx, qword [rbp + 0xa0]
bt rcx, rdx
jae 0x140185fa0
xor edx, edx
mov r12, r15
nop word [rax + rax]
lea r13, [rdi + rdx]
cmp r13, rbx
jae 0x140186010
lea r8, [rdi + r12]
cmp r8, rsi
jae 0x14018676e
movzx r8d, byte [r11 + rdx]
lea r13, [r12 + 1]
inc rdx
cmp r8b, byte [r10 + r12]
mov r12, r13
je 0x140185fe0
jmp 0x140185fa6
test byte [rbp + 0x130], 1
je 0x140186309
lea rdx, [rax + r15]
mov r13, qword [rbp + 0x168]
mov r12, rdi
nop dword [rax + rax]
sub r12, 1
jb 0x140186064
cmp rdx, rsi
jae 0x140186757
movzx r9d, byte [r13]
dec r13
lea r8, [rdx - 1]
mov rcx, qword [rbp + 0x190]
cmp r9b, byte [rcx + rdx]
mov rdx, r8
je 0x140186030
add r15, qword [rbp + 0x20]
jmp 0x140185fa3
mov r12, 0xffffffffffffffff
lea rax, [r15 + rbx]
mov r13, r15
mov qword [rbp + 0x168], rax
mov r15, rax
jmp 0x14018611b
jne 0x1401867be
test rax, rax
je 0x1401860ea
mov r10, qword [rbp + 0x190]
movzx r8d, byte [r10 + rdi]
movzx edx, r8b
test dl, dl
js 0x1401861cb
mov eax, edx
mov rcx, qword [rbp + 0x160]
cmp byte [rbp + 0x180], 0
je 0x14018623b
mov r13, rdi
mov rdx, qword [rbp + 0x140]
mov rax, qword [rbp + 0x180]
xor al, 1
mov qword [rbp + 0x180], rax
mov dword [rbp + 0x18c], 0
mov rdi, r13
mov qword [rbp + 0x168], r13
jmp 0x140186129
cmp byte [rbp + 0x180], 0
je 0x14018631e
mov rax, qword [rbp + 0x180]
xor al, 1
mov qword [rbp + 0x180], rax
mov dword [rbp + 0x18c], 0
mov qword [rbp + 0x168], rdi
mov r13, rdi
mov rdx, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x160]
sub r13, qword [rbp + 0x138]
mov rax, qword [rbp + 0x148]
sub rax, rdx
cmp rax, r13
mov qword [rbp + 0x130], r12
jae 0x140186163
lea rcx, [rbp + 0x148]
mov r8, r13
call fcn.1401c2500
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp + 0x158]
mov rax, qword [rbp + 0x170]
mov r8, qword [rbp + 0x138]
add r8, rax
add rcx, rdx
mov r12, rdx
mov rdx, r8
mov r8, r13
call fcn.1401bf140
mov rdx, r12
add rdx, r13
mov qword [rbp + 0x158], rdx
mov rax, qword [rbp + 0x148]
sub rax, rdx
cmp rax, 1
ja 0x140185da0
mov r8d, 2
lea rcx, [rbp + 0x148]
call fcn.1401c2500
mov r12, qword [rbp + 0x130]
mov rdx, qword [rbp + 0x158]
jmp 0x140185da7
mov eax, edx
and eax, 0x1f
movzx r9d, byte [r10 + rdi + 1]
and r9d, 0x3f
cmp dl, 0xe0
mov rcx, qword [rbp + 0x160]
jb 0x140186228
movzx edx, byte [r10 + rdi + 2]
shl r9d, 6
and edx, 0x3f
or edx, r9d
cmp r8b, 0xf0
jb 0x1401862f2
movzx r8d, byte [r10 + rdi + 3]
and eax, 7
shl eax, 0x12
shl edx, 6
and r8d, 0x3f
or r8d, edx
or eax, r8d
cmp byte [rbp + 0x180], 0
jne 0x1401860ba
jmp 0x14018623b
shl eax, 6
or eax, r9d
cmp byte [rbp + 0x180], 0
jne 0x1401860ba
cmp eax, 0x110000
je 0x14018631e
mov r13d, 1
cmp eax, 0x80
jb 0x14018626f
mov r13d, 2
cmp eax, 0x800
jb 0x14018626f
cmp eax, 0x10000
mov r13d, 4
sbb r13, 0
mov rax, rsi
add r13, rdi
je 0x140186298
mov rax, rsi
sub rax, r13
jbe 0x140186292
mov rcx, qword [rbp + 0x190]
cmp byte [rcx + r13], 0xbf
jg 0x140186298
jmp 0x1401867bb
jne 0x1401867bb
test rax, rax
mov rdx, qword [rbp + 0x140]
mov rcx, qword [rbp + 0x160]
je 0x1401862d0
mov rax, qword [rbp + 0x190]
movzx eax, byte [rax + r13]
mov r8b, 1
mov qword [rbp + 0x180], r8
test al, al
jns 0x1401860c4
cmp al, 0xe0
jmp 0x1401860c4
mov dword [rbp + 0x18c], 0
mov rdi, r13
mov qword [rbp + 0x168], r13
xor eax, eax
mov qword [rbp + 0x180], rax
jmp 0x140186129
shl eax, 0xc
or eax, edx
cmp byte [rbp + 0x180], 0
jne 0x1401860ba
jmp 0x14018623b
mov r12, 0xffffffffffffffff
test rdi, rdi
je 0x14018606b
jmp 0x14018678f
mov r8, qword [rbp + 0x30]
sub r8, qword [rbp + 0x138]
mov rax, qword [rbp + 0x148]
mov rdx, qword [rbp + 0x140]
sub rax, rdx
cmp rax, r8
jae 0x140186368
lea rcx, [rbp + 0x148]
mov rsi, r8
call fcn.1401c2500
mov rcx, qword [rbp + 0x150]
mov rdx, qword [rbp + 0x158]
mov rax, qword [rbp + 0x170]
mov r8, rsi
jmp 0x140186376
mov rax, qword [rbp + 0x170]
mov rcx, qword [rbp + 0x160]
mov r9, qword [rbp + 0x138]
add r9, rax
add rcx, rdx
mov rdi, rdx
mov rdx, r9
mov rsi, r8
call fcn.1401bf140
add rdi, rsi
mov qword [rbp + 0xc0], rdi
movups xmm0, xmmword [rbp + 0x148]
movaps xmmword [rbp + 0xb0], xmm0
lea rcx, [rbp + 0x88]
lea rdx, [rbp + 0xb0]
mov r8, qword [rbp + 0x38]
call fcn.140187210
mov rdx, qword [rbp + 0xa8]
mov r10, qword [rbp + 0x170]
test rdx, rdx
jne 0x140185c35
jmp 0x140185c43
mov byte [rbp + 0x19f], 1
lea rcx, [rbp + 0xb0]
lea rdx, [rbp + 0x40]
call fcn.1401874d0
mov rax, qword [rbp + 0xb0]
test rax, rax
je 0x14018645a
lea rsi, [rbp + 0xb0]
lea rdi, [rbp + 0x40]
nop word [rax + rax]
mov rcx, qword [rbp + 0xc0]
lea rcx, [rcx + rcx*2]
mov rdx, qword [rax + rcx*8 + 8]
test rdx, rdx
je 0x14018643c
lea rax, [rax + rcx*8]
add rax, 8
mov rcx, qword [rax + 8]
mov r8d, 1
call fcn.1400402f0
mov byte [rbp + 0x19f], 1
mov rcx, rsi
mov rdx, rdi
call fcn.1401874d0
mov rax, qword [rbp + 0xb0]
test rax, rax
jne 0x140186410
mov rcx, qword [rbp + 0x88]
test rcx, rcx
je 0x1401864ad
mov rdx, qword [rbp + 0x90]
mov rax, qword [rbp + 0x98]
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xc0], rcx
mov qword [rbp + 0xc8], rdx
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe0], rcx
mov qword [rbp + 0xe8], rdx
mov ecx, 1
jmp 0x1401864b1
xor ecx, ecx
xor eax, eax
mov qword [rbp + 0xb0], rcx
mov qword [rbp + 0xd0], rcx
mov qword [rbp + 0xf0], rax
mov byte [rbp + 0x19f], 0
lea rcx, [rbp + 0x40]
lea rdx, [rbp + 0xb0]
call fcn.140187a10
mov rsi, qword [rbp + 0x48]
mov rbx, qword [rbp + 0x50]
lea rax, [rbp + 0x148]
mov qword [rbp + 0xb0], rax
mov byte [rbp + 0x19e], 1
lea r8, [rbp + 0xb0]
mov rcx, rsi
mov rdx, rbx
call fcn.140187e70
mov rdi, qword [rbp + 0x40]
mov r15, rbx
shl r15, 5
lea r14, [rsi + r15]
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xc0], rdi
mov qword [rbp + 0xc8], r14
mov r12, rsi
test rbx, rbx
je 0x140186633
lea rbx, [rsi + 0x28]
add r15, 0xffffffffffffffe0
xor r13d, r13d
mov rax, rsi
jmp 0x140186567
inc r13d
add rbx, 0x20
add r15, 0xffffffffffffffe0
mov rax, r12
cmp r12, r14
je 0x140186674
lea r12, [rax + 0x20]
mov rdx, qword [rax]
movabs rcx, 0x8000000000000000
cmp rdx, rcx
je 0x140186633
mov qword [rbp + 0x178], rdx
mov rcx, qword [rax + 8]
mov qword [rbp + 0x190], rcx
mov rdx, qword [rax + 0x10]
mov ecx, 0x1505
test rdx, rdx
je 0x140186600
xor r8d, r8d
nop word cs:[rax + rax]
mov r9, qword [rbp + 0x190]
movzx r9d, byte [r9 + r8]
test r9b, r9b
jne 0x1401865cb
inc r8
cmp r8, rdx
jb 0x1401865b0
jmp 0x140186600
lea r10d, [r9 - 0x20]
cmp r9b, 0x61
movzx r9d, r9b
movzx r10d, r10b
cmovb r10d, r9d
mov r9d, ecx
shl r9d, 5
add r9d, ecx
movzx ecx, r10b
add ecx, r9d
inc r8
cmp r8, rdx
jb 0x1401865b0
nop dword [rax + rax]
cmp ecx, dword [rbp + 0x124]
je 0x1401866a1
mov rdx, qword [rbp + 0x178]
test rdx, rdx
je 0x140186550
mov r8d, 1
mov rcx, qword [rbp + 0x190]
call fcn.1400402f0
jmp 0x140186550
mov qword [rbp + 0xb8], r12
sub r14, r12
je 0x140186674
shr r14, 5
add r12, 8
jmp 0x140186659
add r12, 0x20
dec r14
je 0x140186674
mov rdx, qword [r12 - 8]
test rdx, rdx
je 0x140186650
mov rcx, qword [r12]
mov r8d, 1
call fcn.1400402f0
jmp 0x140186650
test rdi, rdi
je 0x14018668e
shl rdi, 5
mov r8d, 8
mov rcx, rsi
mov rdx, rdi
call fcn.1400402f0
mov rax, qword [rbp + 0x128]
mov qword [rax], 0
jmp 0x140186743
mov rcx, qword [rax + 0x18]
mov qword [rbp + 0xb8], r12
call fcn.140186b00
test rax, rax
je 0x1401867e1
mov rax, qword [rbp + 0x128]
mov word [rax + 8], r13w
mov qword [rax + 0x10], rdx
mov qword [rax], 1
mov rdx, qword [rbp + 0x178]
test rdx, rdx
je 0x1401866ef
mov r8d, 1
mov rcx, qword [rbp + 0x190]
call fcn.1400402f0
cmp r14, r12
je 0x140186722
shr r15, 5
jmp 0x140186709
add rbx, 0x20
dec r15
je 0x140186722
mov rdx, qword [rbx - 8]
test rdx, rdx
je 0x140186700
mov rcx, qword [rbx]
mov r8d, 1
call fcn.1400402f0
jmp 0x140186700
test rdi, rdi
je 0x14018673c
shl rdi, 5
mov r8d, 8
mov rcx, rsi
mov rdx, rdi
call fcn.1400402f0
mov rax, qword [rbp + 0x128]
add rsp, 0x228
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea r8, [0x14025d8c0]
mov rcx, rdx
mov rdx, rsi
call fcn.1401c8c10
jmp 0x1401867f9
mov rax, rdi
add r15, rax
cmp rsi, r15
cmova r15, rsi
lea r8, [0x14025d8d8]
mov rcx, r15
mov rdx, rsi
call fcn.1401c8c10
jmp 0x1401867f9
lea r8, [0x14025d8a8]
mov rcx, rax
mov rdx, rbx
call fcn.1401c8c10
jmp 0x1401867f9
lea rcx, str.Failed_to_get_loaded_module_by_nameC:Users_alrev.cargogitcheckouts_syscalls_rs_2ef22f7ace249b7a_b3868d8_syscalls_src_syscall_resolve.rs
lea r8, [0x14025d998]
mov edx, 0x23
call fcn.1401c8a30
mov rdi, r13
lea rax, [0x14025d8f0]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x190]
mov rdx, rsi
mov r8, rdi
mov r9, rsi
call fcn.1401c9200
jmp 0x1401867f9
lea rcx, str.Failed_to_get_syscall_instruction_address_from_ntdll
lea r8, [0x14025d9e8]
mov edx, 0x34
call fcn.1401c8a30
ud2