Function at 0x140052430
Capabilities:
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x228
movaps xmmword [rsp + 0x210], xmm6
mov rbx, rdx
mov rax, qword [0x1401e3a38]
xor rax, rsp
mov qword [rsp + 0x208], rax
mov qword [rdx], 0
cmp byte [r9], 0
je 0x140052ebf
mov r13, r9
mov r12d, r8d
mov r14, rcx
lea rbp, [rcx + 0x338]
mov rcx, rbp
call fcn.14004fc00
test rax, rax
jne 0x140052ebf
mov qword [rsp + 0x78], rbx
mov edi, dword [rsp + 0x2c8]
mov rsi, qword [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
mov r15, qword [rsp + 0x2a0]
mov rcx, rbp
mov rdx, rbp
call fcn.14004fc40
test dil, 4
mov qword [rsp + 0x88], rbp
je 0x1400524e0
xor eax, eax
test edi, 0x300
mov rcx, qword [r14 + 0x208]
cmovne rax, rcx
xor rsi, rax
xor r15, rcx
mov rcx, qword [r14 + 0x218]
mov rax, qword [rsp + 0x2b8]
mov rdx, qword [rax]
call fcn.14004ff40
mov rbp, rax
call fcn.14005dbb0
test al, al
je 0x140052512
lea rcx, [rsp + 0xc8]
call fcn.14005d8f0
jmp 0x14005251e
mov qword [rsp + 0xc8], 0
test byte [r13], 1
mov qword [rsp + 0x98], rsi
jne 0x140052531
xor eax, eax
jmp 0x140052545
mov rcx, r14
call fcn.140051330
lea rcx, [r14 + 0x328]
call fcn.14004fc00
mov qword [rsp + 0x90], rax
mov esi, dword [rsp + 0x2b0]
call sub.KERNEL32.dll_GetCurrentThreadId
cmp esi, eax
jne 0x140052936
call fcn.1400a1f20
mov edx, dword [rsp + 0x2b0]
mov rcx, rax
call fcn.1400a1f80
mov rsi, rax
mov eax, dword [0x1401e8130]
mov ecx, dword [0x1401ea448]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x18]
jg 0x140052eee
mov rcx, qword [0x1401e8128]
call fcn.14004fc00
test rsi, rsi
je 0x140052936
cmp rsi, rax
je 0x140052936
cmp byte [rsi], 0
je 0x140052936
mov qword [rsp + 0x80], rbp
mov qword [rsp + 0x70], r15
mov byte [rsp + 0x67], r12b
mov rcx, qword [0x1401e8128]
mov qword [rsp + 0x68], rsi
mov rdx, rsi
call fcn.14004fc40
lea rcx, [r14 + 0x10]
mov qword [rsp + 0xa0], rcx
call fcn.14004ebd0
lea rcx, [r14 + 0x138]
movzx eax, byte [rsp + 0x2b0]
movabs rdx, 0xcbf29ce484222325
xor rdx, rax
movabs rax, 0x100000001b3
imul rdx, rax
movzx ebp, byte [rsp + 0x2b1]
xor rbp, rdx
imul rbp, rax
movzx edx, byte [rsp + 0x2b2]
xor rdx, rbp
imul rdx, rax
movzx ebp, byte [rsp + 0x2b3]
xor rbp, rdx
imul rbp, rax
and rbp, qword [r14 + 0x168]
mov rax, qword [r14 + 0x140]
mov rdx, qword [r14 + 0x150]
lea rbx, [rbp + 1]
add rbx, rbp
shl rbp, 4
mov rbp, qword [rdx + rbp]
mov edi, dword [rsp + 0x2b0]
mov r12, rbp
jmp 0x140052694
mov r12, qword [r12]
mov rsi, rbp
cmp rbp, rax
je 0x1400526a3
mov rsi, qword [rdx + rbx*8]
mov rsi, qword [rsi]
cmp rsi, r12
je 0x1400527a9
cmp dword [r12 + 0x10], edi
jne 0x140052690
cmp rax, r12
je 0x1400527a9
lea rax, [0x14019a064]
mov qword [rsp + 0xb8], rax
mov qword [rsp + 0xc0], 1
lea r15, [r12 + 0x18]
cmp qword [r12 + 0x30], 0xf
mov rax, r15
jbe 0x1400526ec
mov rax, qword [r12 + 0x18]
mov qword [rsp + 0xa8], rax
mov rax, qword [r12 + 0x28]
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0x20], 1
lea rcx, [rsp + 0xd0]
lea rdx, [rsp + 0xa8]
lea r8, [rsp + 0xb8]
xor r9d, r9d
call fcn.1400484a0
mov rbx, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xd8]
cmp rbx, rsi
je 0x140052850
mov rcx, qword [rsp + 0x68]
call fcn.140186380
mov rdi, rax
cmp qword [rbx + 8], rdi
jne 0x14005276d
mov rcx, qword [rbx]
mov rdx, qword [rsp + 0x68]
mov r8, rdi
call fcn.14016f170
test eax, eax
je 0x1400528b2
add rbx, 0x10
cmp rsi, rbx
jne 0x14005274f
mov rax, qword [r12 + 0x28]
mov rcx, qword [r12 + 0x30]
cmp rax, rcx
jae 0x140052840
lea rdx, [rax + 1]
mov qword [r12 + 0x28], rdx
mov rdx, r15
cmp rcx, 0x10
jb 0x14005279e
mov rdx, qword [r15]
mov word [rdx + rax], 0x2c
jmp 0x140052850
lea rdx, [rsp + 0xd0]
lea r8, [rsp + 0x2b0]
call fcn.140054de0
mov rsi, qword [rsp + 0xd0]
lea rdi, [rsi + 0x18]
mov rbp, qword [rsp + 0x68]
mov rcx, rbp
call fcn.140186380
mov rbx, rax
mov rax, qword [rsi + 0x30]
cmp rax, rbx
jae 0x140052808
mov rcx, rdi
mov rdx, rbx
mov r9, rbp
call fcn.140006900
mov r12b, byte [rsp + 0x67]
mov r15, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
jmp 0x140052928
cmp rax, 0x10
mov r15, qword [rsp + 0x70]
jb 0x140052816
mov rdi, qword [rdi]
mov qword [rsi + 0x28], rbx
mov rcx, rdi
mov rdx, qword [rsp + 0x68]
mov r8, rbx
call fcn.14016f270
mov byte [rdi + rbx], 0
mov r12b, byte [rsp + 0x67]
mov rbp, qword [rsp + 0x80]
jmp 0x140052928
mov edx, 1
mov rcx, r15
mov r9b, 0x2c
call fcn.140013990
mov rsi, qword [rsp + 0x68]
mov rcx, rsi
call fcn.140186380
mov rcx, qword [r12 + 0x28]
mov rbp, qword [r12 + 0x30]
mov rdx, rbp
sub rdx, rcx
cmp rdx, rax
jae 0x140052887
mov qword [rsp + 0x20], rax
mov rcx, r15
mov rdx, rax
mov r9, rsi
call fcn.140009a80
jmp 0x1400528bb
mov rsi, rax
add rsi, rcx
mov qword [r12 + 0x28], rsi
cmp rbp, 0x10
jb 0x14005289b
mov r15, qword [r15]
add rcx, r15
mov rdx, qword [rsp + 0x68]
mov r8, rax
call fcn.14016f270
mov byte [r15 + rsi], 0
jmp 0x1400528bb
cmp rsi, rbx
je 0x140052776
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
mov r12b, byte [rsp + 0x67]
mov r15, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x80]
je 0x140052928
mov rdx, qword [rsp + 0xe0]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14005290a
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x140052f49
add rdx, 0x27
mov rcx, rax
call fcn.14014b210
pxor xmm0, xmm0
movdqa xmmword [rsp + 0xd0], xmm0
mov qword [rsp + 0xe0], 0
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rbx, qword [rsp + 0x2c0]
mov rdi, qword [rsp + 0x290]
test byte [r13], 8
je 0x140052966
mov qword [rsp + 0x20], rbx
mov ecx, r12d
mov rdx, r13
mov rsi, rdi
mov r8, rdi
mov r9, r15
call fcn.1400a6de0
mov rcx, qword [rsp + 0x298]
neg rbp
mov rsi, qword [r14 + 0x3b8]
test rsi, rsi
je 0x140052a07
mov r9, qword [rsp + 0xc8]
mov edx, dword [rsp + 0x2b0]
mov eax, dword [rsp + 0x2c8]
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r13
mov byte [rsp + 0x20], r12b
lea rdi, [rsp + 0xd0]
mov rcx, rdi
mov r8, rbp
call fcn.1400a6610
cmp qword [rsp + 0x90], 0
setne dl
mov rcx, rdi
mov rbx, qword [rsp + 0x78]
mov r8, rbx
call rsi
mov rcx, rdi
call fcn.1400a66e0
mov r15, qword [rsp + 0x88]
jmp 0x140052eb5
mov qword [rsp + 0x70], r15
mov eax, 0xf
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0x1f0], xmm0
mov byte [rsp + 0x1e0], 0
mov al, byte [r13]
test al, 0x10
jne 0x140052a55
xor edx, edx
mov qword [rsp + 0x68], rdx
mov rbx, qword [rsp + 0x78]
test al, 1
jne 0x140052c58
mov r15, qword [rsp + 0x88]
jmp 0x140052de1
mov rsi, rcx
mov ecx, 0x88
call fcn.14014b1a0
mov rcx, rax
mov r9, qword [rsp + 0xc8]
mov edx, dword [rsp + 0x2b0]
mov eax, dword [rsp + 0x2c8]
mov dword [rsp + 0x58], eax
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r13
mov byte [rsp + 0x67], r12b
mov byte [rsp + 0x20], r12b
mov r12, rcx
mov qword [rsp + 0x80], rbp
mov r8, rbp
call fcn.1400a6610
mov rcx, r13
call fcn.1400151e0
mov esi, dword [rax + 4]
test esi, esi
mov r15, qword [rsp + 0x88]
mov rbx, qword [rsp + 0x78]
je 0x140052c13
mov bpl, 1
xor edi, edi
xorps xmm6, xmm6
jmp 0x140052b80
lea rcx, [0x1401e8140]
call fcn.14014b390
mov eax, dword [0x1401e8140]
cmp eax, 0xffffffff
jne 0x140052bab
mov ecx, 0x18
call fcn.14014b1a0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov qword [0x1401e8138], rax
lea rcx, [0x1401e8140]
call fcn.14014b400
jmp 0x140052bab
lea rcx, [0x1401e8140]
call fcn.14014b390
mov eax, dword [0x1401e8140]
cmp eax, 0xffffffff
jne 0x140052be1
mov ecx, 0x18
call fcn.14014b1a0
movups xmmword [rax], xmm6
mov qword [rax + 0x10], 0
mov qword [0x1401e8138], rax
lea rcx, [0x1401e8140]
call fcn.14014b400
jmp 0x140052be1
test sil, 1
je 0x140052c00
mov eax, dword [0x1401e8140]
mov ecx, dword [0x1401ea448]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x18]
jg 0x140052af4
mov rax, qword [0x1401e8138]
mov rax, qword [rax]
cmp qword [rax + rdi], 0
je 0x140052c00
mov eax, dword [0x1401e8140]
mov ecx, dword [0x1401ea448]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x18]
jg 0x140052b39
mov rax, qword [0x1401e8138]
mov rax, qword [rax]
mov rcx, qword [rax + rdi]
mov rax, qword [rcx]
mov rdx, r12
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test al, al
je 0x140052c00
xor ebp, ebp
nop
shr esi, 1
add rdi, 8
test esi, esi
jne 0x140052b80
test bpl, bpl
je 0x140052c2a
mov rcx, r12
call fcn.1400a66e0
mov rcx, r12
call fcn.14014b200
xor ebp, ebp
jmp 0x140052de6
mov qword [rsp + 0x68], r12
mov al, byte [r13]
mov r12b, byte [rsp + 0x67]
mov rbp, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x290]
mov rcx, qword [rsp + 0x298]
test al, 1
je 0x140052a48
mov rsi, rcx
lea r15, [r14 + 8]
mov rcx, qword [rsp + 0x90]
test rcx, rcx
je 0x140052c89
mov rdx, rbx
call fcn.1400503a0
mov rcx, rax
mov dword [rsp + 0x78], 0
test rcx, rcx
jne 0x140052cad
jmp 0x140052d21
mov rcx, r15
call fcn.14004ebd0
mov al, 1
mov dword [rsp + 0x78], eax
mov rcx, r14
mov rdx, rbx
mov r8b, 1
call fcn.1400521c0
mov rcx, rax
test rcx, rcx
je 0x140052d21
mov rdx, qword [rsp + 0x68]
test rdx, rdx
je 0x140052cc1
mov rsi, rcx
call fcn.1400a6750
jmp 0x140052d1e
mov r9, qword [rsp + 0xc8]
mov edx, dword [rsp + 0x2b0]
mov eax, dword [rsp + 0x2c8]
mov dword [rsp + 0x58], eax
mov rax, qword [rsp + 0x2c0]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x28], r13
mov byte [rsp + 0x20], r12b
mov rsi, rcx
mov r8, rbp
call fcn.1400a6800
mov rcx, rsi
mov rsi, r15
mov rax, qword [r14 + 0x220]
test dword [reloc.OLEAUT32.dll_VariantClear], eax
mov r15, qword [rsp + 0x88]
je 0x140052dd1
mov r8b, 0x42
cmp r12b, 0x58
je 0x140052d4b
mov r8d, r12d
mov qword [rsp + 0x20], rcx
lea rdx, [rsp + 0xd0]
mov rcx, r14
mov r9, qword [rsp + 0x2b8]
call fcn.140052f50
mov rax, qword [rsp + 0x1f8]
cmp rax, 0x10
jb 0x140052daf
mov rcx, qword [rsp + 0x1e0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140052daa
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140052f49
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14014b210
movdqu xmm0, xmmword [rsp + 0xd0]
movups xmm1, xmmword [rsp + 0xe0]
movaps xmmword [rsp + 0x1f0], xmm1
movdqa xmmword [rsp + 0x1e0], xmm0
cmp byte [rsp + 0x78], 0
je 0x140052de1
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReleaseSRWLockExclusive]
mov rbp, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x1f0]
test rdi, rdi
je 0x140052e59
mov ecx, 2
call fcn.14003be50
test al, al
je 0x140052e59
lea rdx, str..._.._base_trace_event_trace_log.cc
lea rsi, [rsp + 0xd0]
mov rcx, rsi
mov r8d, 0x502
mov r9d, 2
call fcn.14003bf00
lea rcx, [rsp + 0xd8]
cmp qword [rsp + 0x1f8], 0xf
jbe 0x140052e41
mov rdx, qword [rsp + 0x1e0]
jmp 0x140052e49
lea rdx, [rsp + 0x1e0]
mov r8, rdi
call fcn.140009ce0
mov rcx, rsi
call fcn.14003c3a0
test rbp, rbp
je 0x140052e6e
mov rcx, rbp
call fcn.1400a66e0
mov rcx, rbp
call fcn.14014b200
mov rax, qword [rsp + 0x1f8]
cmp rax, 0x10
jb 0x140052eb5
mov rcx, qword [rsp + 0x1e0]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140052eb0
mov rbp, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rbp
cmp rcx, 0x20
jae 0x140052f49
add rax, 0x28
mov rdx, rax
mov rcx, rbp
call fcn.14014b210
mov rcx, r15
xor edx, edx
call fcn.14004fc40
mov rcx, qword [rsp + 0x208]
xor rcx, rsp
call fcn.14014b5e0
mov rax, rbx
movaps xmm6, xmmword [rsp + 0x210]
add rsp, 0x228
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [0x1401e8130]
call fcn.14014b390
mov eax, dword [0x1401e8130]
cmp eax, 0xffffffff
jne 0x14005259d
mov ecx, 8
call fcn.14014b1a0
mov qword [rsp + 0x68], rsi
mov rdi, rax
mov qword [rax], 0
mov rcx, rax
xor edx, edx
call fcn.14004fc90
mov qword [0x1401e8128], rdi
mov rsi, qword [rsp + 0x68]
lea rcx, [0x1401e8130]
call fcn.14014b400
jmp 0x14005259d
call fcn.140179190
ud2