Function at 0x18006c030
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, qword [rsp + 0x20]
mov rsi, r8
mov edi, dword [rsp + 0x78]
mov r10d, edx
imul r12d, edx, 0x24e
mov r11, rcx
mov qword [rsp + 0x20], rbx
mov r14d, edx
mov r13, qword [rsp + 0x20]
movabs rbp, 0xff000000000000
movabs r15, 0xff0000000000
movabs r9, 0xff00000000
cmp edx, r12d
mov ecx, 0xff000000
ja 0x18006c2a0
cmp r14d, 0x7bc4
ja 0x18006c223
je 0x18006c1a3
mov eax, r14d
sub eax, 0x87
je 0x18006c10f
sub eax, 0x2b
je 0x18006c100
sub eax, 0x1ef2
je 0x18006c865
sub eax, 0xa14
je 0x18006c0f2
cmp eax, 0x2906
jne 0x18006c291
imul eax, r10d, 0x3b
add edi, 8
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
imul eax, r10d, 0x3b
xor edi, edi
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
imul eax, r10d, 0x3b
mov r13, r11
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
mov rbp, qword [rsi]
mov r15, qword [rsi + 8]
cmp rbp, r15
je 0x18006c179
nop dword [rax + rax]
mov r8, rbp
mov edx, 0xf6
xor ecx, ecx
call fcn.18003c700
mov r11, qword [rsp + 0x70]
cmp eax, dword [r11]
jne 0x18006c161
mov eax, 0x29
nop
cmp eax, 0x29
je 0x18006c152
cmp eax, 0x4f7
je 0x18006c865
jmp 0x18006c155
mov rbx, rbp
add eax, 0x4ce
cmp eax, 0x99c
jbe 0x18006c140
add rbp, 0x10
cmp rbp, r15
jne 0x18006c120
mov r10d, dword [rsp + 0x78]
movabs r9, 0xff00000000
imul eax, r10d, 0x3b
xor ebx, ebx
mov qword [rsp + 0x20], rbx
movabs rbp, 0xff000000000000
movabs r15, 0xff0000000000
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
cmp dword [rsi + 8], edi
jb 0x18006c865
mov rdx, qword [r13]
mov rax, rdx
mov r8, rdx
and eax, 0xff00
shl r8, 0x10
or r8, rax
mov rax, rdx
and eax, 0xff0000
shl r8, 0x10
or r8, rax
mov rax, rdx
and rax, rcx
shl r8, 0x10
or r8, rax
mov rcx, rdx
and rcx, rbp
shl r8, 8
mov rax, rdx
shr rax, 0x10
or rcx, rax
mov rax, rdx
shr rcx, 0x10
and rax, r15
or rcx, rax
and rdx, r9
shr rcx, 0x10
imul eax, r10d, 0x3b
or rcx, rdx
shr rcx, 8
or r8, rcx
mov qword [r13], r8
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
cmp r14d, 0xa4ca
je 0x18006c28e
cmp r14d, 0xcdd0
je 0x18006c27c
cmp r14d, 0xf6d6
je 0x18006c264
cmp r14d, 0x11fdc
jne 0x18006c291
movzx eax, word [r13 + 0xc]
rol ax, 8
mov word [r13 + 0xc], ax
imul eax, r10d, 0x3b
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
cmp dword [rsi + 8], edi
jb 0x18006c865
imul eax, r10d, 0x3b
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
imul eax, r10d, 0x3b
add edi, 2
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
add edi, 4
imul eax, r10d, 0x3b
add r14d, eax
cmp r14d, r12d
jmp 0x18006c099
lea r12d, [r10 + 0x3c8]
cmp r10d, r12d
jae 0x18006c865
mov r9, qword [rsp + 0x20]
lea rdx, [0x180000000]
mov rbx, qword [rsp + 0x88]
nop dword [rax]
nop dword [rax + rax]
cmp r10d, 0x26a
ja 0x18006c426
je 0x18006c3e4
mov eax, r10d
sub eax, 0xb2
je 0x18006c3dc
sub eax, 0x58
je 0x18006c3cb
sub eax, 0x58
je 0x18006c354
sub eax, 0x58
je 0x18006c312
cmp eax, 0x58
jne 0x18006c829
jmp 0x18006c826
cmp dword [rsi + 8], edi
jb 0x18006c860
mov r8d, dword [r13 + 0x18]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x18], edx
jmp 0x18006c829
mov rdx, qword [r13 + 0x10]
mov rax, rdx
mov r8, rdx
and eax, 0xff00
shl r8, 0x10
or r8, rax
mov rax, rdx
and eax, 0xff0000
shl r8, 0x10
or r8, rax
mov rax, rdx
and rax, rcx
shl r8, 0x10
or r8, rax
mov rcx, rdx
and rcx, rbp
shl r8, 8
mov rax, rdx
shr rax, 0x10
or rcx, rax
mov rax, rdx
shr rcx, 0x10
and rax, r15
or rcx, rax
movabs rax, 0xff00000000
shr rcx, 0x10
and rdx, rax
or rcx, rdx
shr rcx, 8
or r8, rcx
mov qword [r13 + 0x10], r8
jmp 0x18006c826
add edi, 8
cmp dword [rsi + 8], edi
jb 0x18006c860
jmp 0x18006c829
add edi, 2
jmp 0x18006c829
cmp dword [rsi + 8], edi
jb 0x18006c860
mov r8d, dword [r13 + 0x1c]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x1c], edx
jmp 0x18006c829
mov eax, r10d
sub eax, 0x2c2
je 0x18006c826
sub eax, 0x58
je 0x18006c3ce
sub eax, 0x58
je 0x18006c7fc
sub eax, 0x58
je 0x18006c7c7
cmp eax, 0x58
jne 0x18006c829
cmp byte [r13 + 9], 0
jne 0x18006c52f
mov r10d, 0x59
cmp r10d, 0x59
je 0x18006c510
cmp r10d, 0x5d
je 0x18006c4d1
cmp r10d, 0x61
je 0x18006c510
cmp r10d, 0x65
je 0x18006c4c6
cmp r10d, 0x69
jne 0x18006c513
mov r8d, dword [r13 + 0x2c]
mov edx, r8d
and edx, 0xff00
mov eax, r8d
shl eax, 0x10
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x2c], edx
jmp 0x18006c513
cmp dword [rsi + 8], edi
jb 0x18006c860
jmp 0x18006c513
cmp dword [rsi + 8], edi
jb 0x18006c860
mov r8d, dword [r13 + 0x28]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x28], edx
jmp 0x18006c513
add edi, 4
add r10d, 4
cmp r10d, 0x6d
jb 0x18006c465
mov r10d, dword [rsp + 0x78]
lea rdx, [0x180000000]
jmp 0x18006c532
add edi, 8
cmp dword [rbx], 0
je 0x18006c829
mov r15d, 0x47
xor r14d, r14d
cmp r14d, 9
ja case.default.0x18006c559
mov ecx, dword [rdx + r14*4 + 0x6c880]
add rcx, rdx
jmp rcx
mov ecx, dword [r13 + 0x38]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r13 + 0x38], edx
jmp case.default.0x18006c559
mov ecx, dword [r13 + 0x3c]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r13 + 0x3c], edx
jmp case.default.0x18006c559
cmp dword [rsi + 8], edi
jb 0x18006c860
mov r8d, dword [r13 + 0x30]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x30], edx
jmp case.default.0x18006c559
add edi, 4
cmp dword [rsi + 8], edi
jb 0x18006c860
jmp case.default.0x18006c559
cmp byte [r13 + 9], 0
jne case.default.0x18006c559
mov ebp, SHTestTokenMembership
cmp ebp, 0xf4
je 0x18006c74e
cmp ebp, 0x19c
jne 0x18006c754
xor r11d, r11d
cmp dword [r13 + 0x3c], r11d
jbe 0x18006c754
nop word [rax + rax]
xor r10d, r10d
cmp r10d, 7
ja case.default.0x18006c668
mov ecx, dword [rdx + r10*4 + 0x6c8a8]
add rcx, rdx
jmp rcx
mov ecx, dword [r9 + 4]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r9 + 4], edx
jmp 0x18006c723
add edi, 4
jmp case.default.0x18006c668
add edi, 4
cmp dword [rsi + 8], edi
jb 0x18006c860
jmp case.default.0x18006c668
add r9, 0x10
jmp case.default.0x18006c668
cmp dword [rsi + 8], edi
jb 0x18006c860
mov ecx, dword [r9 + 8]
mov edx, ecx
and edx, 0xff0000
mov eax, ecx
shr eax, 0x10
or edx, eax
mov eax, ecx
shl eax, 0x10
and ecx, 0xff00
or eax, ecx
shr edx, 8
shl eax, 8
or edx, eax
mov dword [r9 + 8], edx
jmp 0x18006c723
mov r8d, dword [r9]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
shl edx, 8
sar eax, 0x18
sar r8d, 8
and r8d, 0xff00
movzx ecx, al
or edx, ecx
or edx, r8d
mov dword [r9], edx
add edi, 4
lea rdx, [0x180000000]
inc r10d
lea eax, [r10 + 0xe6]
cmp eax, 0xee
jb 0x18006c653
inc r11d
cmp r11d, dword [r13 + 0x3c]
jb 0x18006c650
jmp 0x18006c754
mov r9d, edi
add r9, r11
mov r11, qword [rsp + 0x70]
add ebp, 0xa8
cmp ebp, 0x244
jb 0x18006c620
jmp case.default.0x18006c559
mov r8d, dword [r13 + 0x34]
mov edx, r8d
shl edx, 0x10
mov eax, r8d
and eax, 0xff00
or edx, eax
mov eax, r8d
sar eax, 0x18
shl edx, 8
sar r8d, 8
movzx ecx, al
and r8d, 0xff00
or edx, ecx
or edx, r8d
mov dword [r13 + 0x34], edx
add edi, 4
mov r11, qword [rsp + 0x70]
lea rdx, [0x180000000]
inc r15d
inc r14d
cmp r15d, 0x51
jb 0x18006c544
mov r10d, dword [rsp + 0x78]
jmp 0x18006c829
cmp dword [rsi + 8], edi
jb 0x18006c860
mov ecx, dword [r13 + 0x24]
mov edx, ecx
shl edx, 0x10
mov eax, ecx
and eax, 0xff00
or edx, eax
mov eax, ecx
and eax, 0xff0000
shr ecx, 0x10
or eax, ecx
shl edx, 8
shr eax, 8
or edx, eax
mov dword [r13 + 0x24], edx
jmp 0x18006c829
mov ecx, dword [r13 + 0x20]
mov edx, ecx
shl edx, 0x10
mov eax, ecx
and eax, 0xff00
or edx, eax
mov eax, ecx
and eax, 0xff0000
shr ecx, 0x10
or eax, ecx
shl edx, 8
shr eax, 8
or edx, eax
mov dword [r13 + 0x20], edx
add edi, 4
mov r11, qword [rsp + 0x70]
lea rdx, [0x180000000]
add r10d, 0x58
mov ecx, 0xff000000
mov dword [rsp + 0x78], r10d
movabs rbp, 0xff000000000000
movabs r15, 0xff0000000000
cmp r10d, r12d
jb 0x18006c2d0
mov rbx, qword [rsp + 0x20]
mov rax, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret