Function at 0x1800445e0
Capabilities:
Access peb ldr_data
Get ntdll base address
Resolve function by hash
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x80
mov qword [rax - 0x10], rbx
xor r9d, r9d
mov qword [rax - 0x18], rbp
mov rbx, rdx
mov qword [rax - 0x20], rsi
xor ebp, ebp
mov qword [rax - 0x28], r12
xor r12d, r12d
mov qword [rax - 0x30], r13
xor r13d, r13d
mov qword [rax - 0x38], r14
mov qword [rax - 0x40], r15
xor r15d, r15d
mov rax, qword gs:[0x60]
mov qword [rsp + 0x20], rbp
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0x30], rbp
mov r8, qword [rax + 0x18]
mov qword [rsp + 0xa0], r9
mov r14, qword [r8 + 0x20]
mov qword [rsp + 0x28], r14
test r14, r14
je 0x1800448b0
mov esi, 0xffff
lea ebx, [rbp + 4]
lea edi, [rbp + 2]
nop dword [rax]
nop dword [rax + rax]
mov rdx, qword [r14 + 0x50]
xor ecx, ecx
movzx r8d, word [r14 + 0x48]
nop dword [rax + rax]
movzx eax, byte [rdx]
ror ecx, 0xd
cmp al, 0x61
jb 0x180044694
movzx eax, al
sub eax, 0x20
cdqe
jmp 0x180044697
movzx eax, al
add rcx, rax
inc rdx
add r8w, si
jne 0x180044680
cmp ecx, 0x6a4abc5b
jne 0x180044791
mov r9, qword [r14 + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov edi, dword [rax + r9 + 0x88]
mov r10d, dword [rdi + r9 + 0x20]
mov r11d, dword [rdi + r9 + 0x24]
add r10, r9
add r11, r9
nop
mov ecx, dword [r10]
add rcx, r9
xor r8d, r8d
movzx eax, byte [rcx]
nop dword [rax]
ror r8d, 0xd
lea rcx, [rcx + 1]
movsx eax, al
add r8d, eax
movzx eax, byte [rcx]
test al, al
jne 0x1800446e0
cmp r8d, 0xec0e4e8e
je 0x180044719
cmp r8d, 0x7c0dfcaa
je 0x180044719
cmp r8d, 0x91afca54
je 0x180044719
cmp r8d, 0x60e0ceef
jne 0x18004476e
mov eax, dword [rdi + r9 + 0x1c]
movzx edx, word [r11]
lea rcx, [r9 + rax]
cmp r8d, 0xec0e4e8e
jne 0x180044738
mov r13d, dword [rcx + rdx*4]
add r13, r9
jmp 0x18004476b
cmp r8d, 0x7c0dfcaa
jne 0x18004474a
mov r12d, dword [rcx + rdx*4]
add r12, r9
jmp 0x18004476b
cmp r8d, 0x91afca54
jne 0x18004475b
mov ebp, dword [rcx + rdx*4]
add rbp, r9
jmp 0x18004476b
cmp r8d, 0x60e0ceef
jne 0x18004476b
mov r15d, dword [rcx + rdx*4]
add r15, r9
add bx, si
add r10, 4
add r11, 2
test bx, bx
jne 0x1800446d0
mov qword [rsp + 0xa8], r15
mov qword [rsp + 0x20], rbp
jmp 0x18004486e
cmp ecx, 0x3cfa685d
jne 0x18004487e
mov r9, qword [r14 + 0x20]
mov ebp, 0xffff
movsxd rax, dword [r9 + 0x3c]
mov esi, dword [rax + r9 + 0x88]
add rsi, r9
mov r11d, dword [rsi + 0x20]
mov ebx, dword [rsi + 0x24]
add r11, r9
mov r10d, dword [rsi + 0x18]
add rbx, r9
test r10d, r10d
je 0x180044857
mov ecx, dword [r11]
add rcx, r9
xor r8d, r8d
movzx eax, byte [rcx]
nop dword [rax + rax]
ror r8d, 0xd
lea rcx, [rcx + 1]
movsx eax, al
add r8d, eax
movzx eax, byte [rcx]
test al, al
jne 0x1800447e0
cmp r8d, 0x534c0ab8
je 0x180044807
cmp r8d, 0xff7f061a
jne 0x180044843
mov eax, dword [rsi + 0x1c]
movzx edx, word [rbx]
lea rcx, [r9 + rax]
cmp r8d, 0x534c0ab8
jne 0x18004482b
mov r15d, dword [rcx + rdx*4]
add r15, r9
mov qword [rsp + 0xa0], r15
jmp 0x180044840
cmp r8d, 0xff7f061a
jne 0x180044840
mov r14d, dword [rcx + rdx*4]
add r14, r9
mov qword [rsp + 0x30], r14
add di, bp
add r11, 4
add rbx, 2
dec r10d
test di, di
jne 0x1800447c6
mov rbp, qword [rsp + 0x20]
mov esi, 0xffff
mov r14, qword [rsp + 0x28]
mov r15, qword [rsp + 0xa8]
mov r9, qword [rsp + 0xa0]
mov edi, 2
lea ebx, [rdi + 2]
test r13, r13
je 0x180044897
test r12, r12
je 0x180044897
test rbp, rbp
je 0x180044897
test r15, r15
je 0x180044897
test r9, r9
jne 0x1800448a8
mov r14, qword [r14]
mov qword [rsp + 0x28], r14
test r14, r14
jne 0x180044670
mov rbx, qword [rsp + 0x98]
movsxd r15, dword [rbx + 0x3c]
xor ecx, ecx
add r15, rbx
mov r8d, 0x3000
lea r9d, [rcx + 0x40]
mov edx, dword [r15 + 0x50]
call rbp
mov edx, dword [r15 + 0x54]
mov rbp, rax
mov rax, rbx
test rdx, rdx
je 0x1800448f1
mov r8, rbp
sub r8, rbx
nop
movzx ecx, byte [rax]
mov byte [r8 + rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x1800448e0
movzx r10d, word [r15 + 6]
movzx eax, word [r15 + 0x14]
test r10, r10
je 0x18004494b
lea r9, [r15 + 0x2c]
add r9, rax
nop word [rax + rax]
mov ecx, dword [r9 - 8]
dec r10
mov edx, dword [r9]
add rcx, rbp
mov r8d, dword [r9 - 4]
add rdx, rbx
test r8, r8
je 0x180044942
nop dword [rax]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
mov byte [rcx], al
inc rcx
sub r8, 1
jne 0x180044930
add r9, 0x28
test r10, r10
jne 0x180044910
mov r14d, dword [r15 + 0x90]
add r14, rbp
mov eax, dword [r14 + 0xc]
test eax, eax
je 0x1800449ec
mov ecx, eax
add rcx, rbp
call r13
mov edi, dword [r14 + 0x10]
mov rsi, rax
mov ebx, dword [r14]
add rdi, rbp
add rbx, rbp
cmp qword [rdi], 0
je 0x1800449dc
nop
test rbx, rbx
je 0x1800449b1
mov rdx, qword [rbx]
test rdx, rdx
jns 0x1800449b1
movsxd rax, dword [rsi + 0x3c]
movzx edx, dx
mov ecx, dword [rax + rsi + 0x88]
mov eax, dword [rcx + rsi + 0x10]
mov ecx, dword [rcx + rsi + 0x1c]
sub rdx, rax
add rcx, rsi
mov eax, dword [rcx + rdx*4]
add rax, rsi
jmp 0x1800449c1
mov rdx, qword [rdi]
mov rcx, rsi
add rdx, 2
add rdx, rbp
call r12
mov qword [rdi], rax
add rdi, 8
test rbx, rbx
lea rax, [rbx + 8]
cmove rax, rbx
cmp qword [rdi], 0
mov rbx, rax
jne 0x180044980
mov eax, dword [r14 + 0x20]
add r14, 0x14
test eax, eax
jne 0x180044961
mov r14, qword [rsp + 0x50]
mov r8, rbp
sub r8, qword [r15 + 0x30]
cmp dword [r15 + 0xb4], 0
mov r13, qword [rsp + 0x58]
mov r12, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
je 0x180044ac7
mov r11d, dword [r15 + 0xb0]
add r11, rbp
mov eax, dword [r11 + 4]
test eax, eax
je 0x180044ac7
nop dword [rax + rax]
mov edx, dword [r11]
lea r10, [r11 + 8]
mov r9d, eax
add rdx, rbp
sub r9, 8
shr r9, 1
je 0x180044ab4
nop word [rax + rax]
movzx eax, word [r10]
dec r9
movzx ecx, ax
shr cx, 0xc
cmp cx, 0xa
jne 0x180044a6f
and eax, 0xfff
add qword [rax + rdx], r8
jmp 0x180044aab
cmp cx, 3
jne 0x180044a80
and eax, 0xfff
add dword [rax + rdx], r8d
jmp 0x180044aab
cmp cx, 1
jne 0x180044a9b
and eax, 0xfff
lea rcx, [rax + rdx]
mov rax, r8
shr rax, 0x10
add word [rcx], ax
jmp 0x180044aab
cmp cx, 2
jne 0x180044aab
and eax, 0xfff
add word [rax + rdx], r8w
add r10, 2
test r9, r9
jne 0x180044a50
mov eax, dword [r11 + 4]
add r11, rax
mov eax, dword [r11 + 4]
test eax, eax
jne 0x180044a30
mov ebx, dword [r15 + 0x28]
xor r8d, r8d
xor edx, edx
or rcx, 0xffffffffffffffff
add rbx, rbp
call qword [rsp + 0xa0]
mov rdi, qword [rsp + 0x90]
mov edx, 1
mov r8, rdi
mov rcx, rbp
call rbx
mov r15, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x78]
test rdi, rdi
je 0x180044b2a
cmp byte [rdi], 0
je 0x180044b2a
mov rax, qword [rsp + 0x30]
xor ecx, ecx
test rax, rax
je 0x180044b23
add rsp, 0x80
pop rdi
jmp rax
call qword [rsp + 0xa8]
add rsp, 0x80
pop rdi
ret