Function at 0x1800112a0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xc8
mov qword [rsp + 0x80], 0xfffffffffffffffe
mov rsi, rcx
xor ebp, ebp
mov dword [rcx + 0x2a4], ebp
mov dword [rcx + 0x1c], ebp
mov dword [rcx + 0x44], ebp
call fcn.180008fe0
mov qword [rsi + 0x290], rax
call fcn.18000b1c0
mov dword [rsi + 0x258], eax
call fcn.18000b170
mov dword [rsi + 0x44], eax
call fcn.180007c50
inc eax
mov dword [rsi + 0x40], eax
movsxd rbx, eax
mov qword [rsp + 0x110], rbx
mov eax, 0x20
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
add rax, 8
cmovb rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x120], rax
test rax, rax
je 0x18001135f
mov qword [rax], rbx
lea rdi, [rax + 8]
lea rax, [0x18000ef10]
mov qword [rsp + 0x20], rax
lea r9, [0x18000e640]
mov r8, rbx
lea edx, [rbp + 0x20]
mov rcx, rdi
call fcn.18002e520
jmp 0x180011362
mov rdi, rbp
mov qword [rsi + 0x28], rdi
movsxd rcx, dword [rsi + 0x44]
mov eax, 8
mul rcx
mov rdi, 0xffffffffffffffff
cmovo rax, rdi
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x38], rax
movsxd rcx, dword [rsi + 0x44]
mov eax, 8
mul rcx
cmovo rax, rdi
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x30], rax
movsxd r8, dword [rsi + 0x44]
shl r8, 3
xor edx, edx
mov rcx, qword [rsi + 0x38]
call sub.msvcrt.dll_memset
movsxd r8, dword [rsi + 0x44]
shl r8, 3
xor edx, edx
mov rcx, qword [rsi + 0x30]
call sub.msvcrt.dll_memset
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x48]
mov qword [rsi + 0x130], rax
or byte [rax + 0x50], 4
mov ebx, ebp
mov dword [rsp + 0x110], ebx
call fcn.18000adf0
mov r13d, eax
mov dword [rsp + 0x128], eax
mov r12d, ebp
cmp dword [rsi + 0x40], ebx
jle 0x180011549
mov r15, rbp
nop word [rax + rax]
mov r13d, dword [rsi + 0x44]
mov rbx, qword [rsi + 0x28]
add rbx, r15
cmp r13d, dword [rbx]
je 0x1800114a0
lea r14d, [r13 + 0x1f]
shr r14d, 5
mov ecx, r14d
mov eax, 4
mul rcx
cmovo rax, rdi
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov r9d, dword [rbx]
add r9d, 0x1f
shr r9d, 5
test r9d, r9d
je 0x180011474
mov rdx, rbp
mov r8d, r9d
nop dword [rax]
mov rax, qword [rbx + 8]
mov ecx, dword [rdx + rax]
mov dword [rdx + rdi], ecx
lea rdx, [rdx + 4]
sub r8, 1
jne 0x180011460
sub r14d, r9d
mov r8d, r14d
shl r8, 2
lea rcx, [rdi + r9*4]
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, qword [rbx + 8]
call sub.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_
mov qword [rbx + 8], rdi
mov dword [rbx], r13d
mov rdi, 0xffffffffffffffff
mov rbx, qword [rsi + 0x28]
add rbx, r15
mov r13d, dword [rsp + 0x128]
cmp r13d, dword [rbx + 0x10]
je 0x18001152a
lea r14d, [r13 + 0x1f]
shr r14d, 5
mov ecx, r14d
mov eax, 4
mul rcx
cmovo rax, rdi
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov rdi, rax
mov r9d, dword [rbx + 0x10]
add r9d, 0x1f
shr r9d, 5
test r9d, r9d
je 0x180011504
mov rdx, rbp
mov r8d, r9d
nop
mov rax, qword [rbx + 0x18]
mov ecx, dword [rdx + rax]
mov dword [rdx + rdi], ecx
lea rdx, [rdx + 4]
sub r8, 1
jne 0x1800114f0
sub r14d, r9d
mov r8d, r14d
shl r8, 2
lea rcx, [rdi + r9*4]
xor edx, edx
call sub.msvcrt.dll_memset
mov rcx, qword [rbx + 0x18]
call sub.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_
mov qword [rbx + 0x18], rdi
mov dword [rbx + 0x10], r13d
inc r12d
add r15, 0x20
cmp r12d, dword [rsi + 0x40]
mov rdi, 0xffffffffffffffff
jl 0x180011410
mov ebx, dword [rsp + 0x110]
mov rcx, qword [rsi + 0x290]
mov rax, qword [rcx]
call qword [rax + 0x20]
mov rdi, rax
mov qword [rsp + 0x48], rax
test rax, rax
je 0x180011906
lea ecx, [r13 + 0x1f]
shr rcx, 5
mov qword [rsp + 0x78], rcx
nop dword [rax]
nop dword [rax + rax]
mov dword [rsp + 0x50], r13d
mov eax, 4
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x58], rax
mov r8d, dword [rsp + 0x50]
add r8d, 0x1f
shr r8, 5
shl r8, 2
xor edx, edx
mov rcx, rax
call sub.msvcrt.dll_memset
nop
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov r14d, eax
mov dword [rsp + 0x120], r14d
mov rdx, qword [rdi]
mov rcx, rdi
call qword [rdx + 0x10]
mov dword [rsp + 0x34], eax
mov eax, eax
shl rax, 5
mov qword [rsp + 0x60], rax
mov rcx, qword [rsi + 0x28]
mov edx, r14d
mov qword [rsp + 0x70], rdx
shr rdx, 5
mov rcx, qword [rax + rcx + 8]
lea r8, [rcx + rdx*4]
mov ecx, r14d
and ecx, 0x1f
mov edx, 1
shl edx, cl
or dword [r8], edx
mov r12d, ebx
mov dword [rsp + 0x30], ebx
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x20]
mov rdi, rax
mov qword [rsp + 0x68], rax
mov r13, rax
test rax, rax
je 0x180011812
mov edi, dword [rsp + 0x110]
mov ecx, edi
mov r15d, 1
rol r15d, cl
nop dword [rax]
mov rax, qword [r13]
mov rcx, r13
call qword [rax + VariantCopy]
mov ebx, eax
mov dword [rsp + 0x118], ebx
movzx r14d, al
movabs rax, 0xcbf29ce484222325
xor r14, rax
movabs rdx, 0x100000001b3
imul r14, rdx
movzx ecx, byte [rsp + 0x119]
xor r14, rcx
imul r14, rdx
movzx eax, byte [rsp + 0x11a]
xor r14, rax
imul r14, rdx
movzx eax, byte [rsp + 0x11b]
xor r14, rax
imul r14, rdx
movsxd rcx, dword [rsi + 0x238]
xor edx, edx
mov rax, r14
div rcx
movsxd rax, edx
lea r12, [rax*8]
mov rax, qword [rsi + 0x240]
mov rcx, qword [r12 + rax]
test rcx, rcx
je 0x1800116ed
nop dword [rax]
cmp dword [rcx + 8], ebx
je 0x180011738
mov rcx, qword [rcx]
test rcx, rcx
jne 0x1800116e0
mov ecx, 0x10
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x110], rax
test rax, rax
je 0x180011716
mov qword [rax], rbp
mov dword [rax + 8], ebx
mov ecx, dword [rsp + 0x120]
mov dword [rax + 0xc], ecx
jmp 0x180011719
mov rax, rbp
mov rcx, qword [rsi + 0x240]
mov rdx, qword [r12 + rcx]
mov qword [rax], rdx
mov rcx, qword [rsi + 0x240]
mov qword [r12 + rcx], rax
inc dword [rsi + 0x23c]
movsxd rcx, dword [rsi + 0x248]
xor edx, edx
mov rax, r14
div rcx
movsxd rax, edx
lea r14, [rax*8]
mov rax, qword [rsi + 0x250]
mov rax, qword [r14 + rax]
test rax, rax
je 0x18001176f
cmp dword [rax + 8], ebx
je 0x1800117b6
mov rax, qword [rax]
test rax, rax
jne 0x180011762
mov ecx, 0x10
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rdx, rax
mov qword [rsp + 0x110], rax
test rax, rax
je 0x180011794
mov qword [rax], rbp
mov dword [rax + 8], ebx
mov dword [rax + 0xc], edi
jmp 0x180011797
mov rdx, rbp
mov rax, qword [rsi + 0x250]
mov rcx, qword [r14 + rax]
mov qword [rdx], rcx
mov rax, qword [rsi + 0x250]
mov qword [r14 + rax], rdx
inc dword [rsi + 0x24c]
mov eax, edi
shr rax, 5
lea r8, [rax*4]
mov rax, qword [rsp + 0x58]
or dword [r8 + rax], r15d
mov rax, qword [rsi + 0x28]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rax + rcx + 0x18]
or dword [rdx + r8], r15d
inc edi
rol r15d, 1
mov rax, qword [r13]
mov rcx, r13
call qword [rax]
mov r13, rax
test rax, rax
jne 0x180011650
mov dword [rsp + 0x110], edi
mov rdi, qword [rsp + 0x68]
mov r12d, dword [rsp + 0x30]
mov r14d, dword [rsp + 0x120]
mov ecx, 0x130
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x88], rax
test rax, rax
je 0x18001183c
mov r8d, r14d
mov rdx, rsi
mov rcx, rax
call fcn.1800220d0
mov r15, rax
jmp 0x18001183f
mov r15, rbp
mov ecx, 0xd0
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsp + 0x90], rax
test rax, rax
je 0x180011870
mov r9, r15
mov r8d, dword [rsp + 0x34]
lea rdx, [rsp + 0x50]
mov rcx, rax
call fcn.18001ecd0
mov rbx, rax
jmp 0x180011873
mov rbx, rbp
mov qword [r15 + 8], rbx
test rdi, rdi
je 0x1800118b8
nop dword [rax]
mov dword [rsp + 0x38], r12d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + VariantCopy]
mov dword [rsp + 0x40], eax
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x40]
lea rcx, [rbx + 0x20]
call fcn.180011a90
inc r12d
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax]
mov rdi, rax
test rax, rax
jne 0x180011880
mov rax, qword [rsi + 0x38]
mov rcx, qword [rsp + 0x70]
mov qword [rax + rcx*8], r15
mov rax, qword [rsi + 0x30]
mov qword [rax + rcx*8], rbx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
call qword [rax]
mov rdi, rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x58]
call sub.msvcrt.dll_void___cdecl_operator_delete___void____ptr64_
test rdi, rdi
mov ebx, dword [rsp + 0x110]
mov r13d, dword [rsp + 0x128]
mov rcx, qword [rsp + 0x78]
jne 0x180011580
lea rcx, [rsi + 0x60]
mov ebx, dword [rsp + 0x110]
mov edx, ebx
call fcn.1800111b0
lea rcx, [rsi + 0x78]
mov edx, ebx
call fcn.1800111b0
lea rcx, [rsi + 0x90]
mov edx, ebx
call fcn.180011100
lea rcx, [rsi + 0x48]
mov edx, ebx
call fcn.1800111b0
shl ebx, 4
mov eax, 8
mul rbx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new___unsigned_long_long_unsigned___int64__
mov qword [rsi + 0xa0], rax
test ebx, ebx
je 0x180011985
mov rcx, rbp
nop dword [rax + rax]
mov rax, qword [rsi + 0xa0]
mov qword [rcx + rax], rbp
lea rcx, [rcx + 8]
sub rbx, 1
jne 0x180011970
mov rbx, qword [rsi + 0x290]
mov rdi, qword [rbx]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x68]
mov rdx, rax
mov r8d, 0x10000
mov rcx, rbx
call qword [rdi + 0x10]
mov qword [rsi + 0x298], rax
mov r8, qword [rax]
xor edx, edx
mov rcx, rax
call qword [r8]
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax]
mov eax, dword [rcx + 0x12c]
test eax, eax
jne 0x1800119ec
nop word [rax + rax]
lea eax, [rbp + 1]
cdq
idiv dword [rsi + 0x44]
movsxd rbp, edx
mov rax, qword [rsi + 0x38]
mov rcx, qword [rax + rbp*8]
mov eax, dword [rcx + 0x12c]
test eax, eax
je 0x1800119d0
mov dword [rsi + 0x25c], ebp
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0x7fffffff
call qword [sym.imp.KERNEL32.dll_CreateSemaphoreW]
mov qword [rsi + 0x260], rax
test rax, rax
je 0x180011a47
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x98]
mov r9d, dword [rsi + 0x258]
mov r8b, 4
mov edx, 1
mov rcx, rsi
add rsp, 0xc8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.180013a60
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x180011a59
movzx eax, ax
or eax, 0x80070000
mov edx, eax
lea rcx, [rsp + 0x98]
call fcn.1800086e0
lea rdx, [0x18003caf8]
lea rcx, [rsp + 0x98]
call sub.msvcrt.dll__CxxThrowException
int3