Function at 0x180051c90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov rdx, qword [rcx + 0x80]
mov rbp, rcx
lea rcx, [rsp + 0x30]
call fcn.180053e20
mov r13d, dword [rsp + 0x3c]
xor r12d, r12d
mov rdi, qword [rsp + 0x30]
mov esi, r12d
mov ebx, 0x10b
movabs r15, 0x2492492492492493
nop dword [rax]
nop dword [rax + rax]
mov r9b, 1
mov edx, 0x40
movzx r8d, r9b
mov rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x180051d67
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0xa8], ecx
jmp 0x180051dab
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0xb8], ecx
setne cl
test ecx, ecx
jne 0x180051dba
mov rcx, r12
jmp 0x180051f0b
mov r9b, 1
mov edx, 0x40
movzx r8d, r9b
mov rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x180051e48
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0xa8
jmp 0x180051e93
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0xb8
mov r9b, 1
mov edx, 8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ebx, dword [rax]
mov r14d, dword [rax + 4]
test ebx, ebx
jne 0x180051eb6
mov r8, r12
jmp 0x180051ede
test r13b, 1
jne 0x180051ed8
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.18008b790
mov rcx, rax
test rax, rax
je 0x180051ed8
mov eax, dword [rax + 0x14]
sub eax, dword [rcx + 0xc]
add ebx, eax
mov r8d, ebx
add r8, rdi
mov rax, r15
mov rcx, r14
mul r14
mov ebx, 0x10b
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 4
cmp esi, ecx
jb 0x180051f02
mov rcx, r12
jmp 0x180051f0b
mov eax, esi
imul rcx, rax, 0x1c
add rcx, r8
mov r9b, 1
mov edx, 0x1c
movzx r8d, r9b
call fcn.180025540
test rax, rax
je 0x180051f28
inc esi
jmp 0x180051ce0
mov r9b, 1
cmp esi, 1
movzx r8d, r9b
mov edx, 0x40
sbb eax, eax
mov rcx, rdi
and eax, 0x8000ffff
mov dword [rsp + 0xb8], eax
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x180051fc0
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0x88], ecx
jmp 0x180052004
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0x98], ecx
setne cl
mov r15d, 0x1000
mov r14d, 0xffffffff
test ecx, ecx
je 0x1800522aa
mov r9b, 1
mov edx, 0x40
movzx r8d, r9b
mov rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x1800520a9
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0x88
jmp 0x1800520f4
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0x98
mov r9b, 1
mov edx, 8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ebx, dword [rax]
mov esi, dword [rax + 4]
test ebx, ebx
je 0x180052296
test r13b, 1
jne 0x180052137
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.18008b790
mov rcx, rax
test rax, rax
je 0x180052137
mov eax, dword [rax + 0x14]
sub eax, dword [rcx + 0xc]
add ebx, eax
mov r13d, ebx
mov rbx, rsi
add r13, rdi
lea rax, [r13 - 1]
cmp rax, 0xfffffffffffffffd
ja 0x180052291
test esi, esi
je 0x180052291
cmp rbx, 0x400
jb 0x18005222b
xor edx, edx
mov rax, 0xffffffffffffffff
div rbx
xor r8b, r8b
cmp rax, 1
jae 0x180052188
mov r8b, 1
mov qword [rsp + 0xc8], r12
mov rcx, r12
jmp 0x180052193
mov rcx, rbx
mov qword [rsp + 0xc8], rbx
test r8b, r8b
jne 0x180052769
mov rax, r13
not rax
cmp rax, rcx
jb 0x180052769
mov r14, r13
mov rsi, r15
mov rcx, qword [rbp + 0x70]
lea rdx, [rsp + 0xc0]
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0xb0]
mov r9d, 1
mov rdx, r14
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [0x180102408]
test eax, eax
jne 0x180052291
cmp dword [rsp + 0xc0], 1
jb 0x180052291
mov rcx, qword [rsp + 0xc8]
add rcx, r13
mov rax, rcx
sub rax, r14
cmp rax, 1
jbe 0x180052225
test rsi, rsi
je 0x18005221f
cmp rsi, rax
jae 0x18005221f
add r14, rsi
add rsi, rsi
jmp 0x1800521b1
lea r14, [rcx - 1]
jmp 0x1800521b1
mov r14d, 0xffffffff
cmp rbx, 0x3ffffd
jbe 0x18005224e
test dword [rbp + 0x26c0], 0xfffffffd
jne 0x18005224e
mov ebx, 0x3ffffd
add qword [rbp + 0x26d8], rbx
jmp 0x180052260
add qword [rbp + 0x26d8], rbx
test rbx, rbx
je 0x180052291
nop word [rax + rax]
mov rcx, qword [rbp + 0x26a8]
cmp rbx, r14
mov esi, ebx
mov rdx, r13
cmova esi, r14d
mov r8d, esi
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x180102408]
test eax, eax
jne 0x18005229d
mov eax, esi
add r13, rax
sub rbx, rax
jne 0x180052260
mov r13d, dword [rsp + 0x3c]
mov ebx, 0x10b
jmp 0x1800522b5
cmp eax, 0x8013153b
je 0x180052759
jmp 0x180052291
mov dword [rsp + 0xb8], 0x8000ffff
mov r9b, 1
mov edx, 0x40
movzx r8d, r9b
mov rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x180052339
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0x78], ecx
jmp 0x18005237d
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ecx, r12d
cmp dword [rax + 0x88], ecx
setne cl
test ecx, ecx
je 0x180052743
mov r9b, 1
mov edx, 0x40
movzx r8d, r9b
mov rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov r9b, 1
mov edx, 0x40
mov rcx, rdi
movzx r8d, r9b
cmp word [rax + 0x18], bx
jne 0x180052414
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, 0xf8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0x78
jmp 0x18005245f
call fcn.180025540
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
movsxd rcx, dword [rax + 0x3c]
add rcx, rdi
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
mov r9b, 1
mov edx, pe_nt_image_headers64
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov dl, 1
mov rcx, rax
call fcn.180026630
add rax, 0x88
mov r9b, 1
mov edx, 8
movzx r8d, r9b
mov rcx, rax
call fcn.180025540
mov ebx, dword [rax]
mov esi, dword [rax + 4]
test ebx, ebx
je 0x1800525f1
test r13b, 1
jne 0x1800524a2
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.18008b790
mov rcx, rax
test rax, rax
je 0x1800524a2
mov eax, dword [rax + 0x14]
sub eax, dword [rcx + 0xc]
add ebx, eax
mov r14d, ebx
mov rbx, rsi
add r14, rdi
lea rcx, [r14 - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1800525f1
test esi, esi
je 0x1800525f1
cmp rbx, 0x400
jb 0x18005257c
xor edx, edx
mov rax, 0xffffffffffffffff
div rbx
xor r8b, r8b
cmp rax, 1
jae 0x1800524eb
mov r8b, 1
mov rcx, r12
jmp 0x1800524f1
mov r12, rbx
mov rcx, rbx
test r8b, r8b
jne 0x180052769
mov rax, r14
not rax
cmp rax, r12
jb 0x180052769
lea r13, [r14 + rcx]
mov rsi, r14
mov rdi, r15
mov rcx, qword [rbp + 0x70]
lea rdx, [rsp + 0xc0]
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0xb0]
mov r9d, 1
mov rdx, rsi
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [0x180102408]
test eax, eax
jne 0x1800525f1
cmp dword [rsp + 0xc0], 1
jb 0x1800525f1
mov rax, r13
sub rax, rsi
cmp rax, 1
jbe 0x18005257c
test rdi, rdi
je 0x180052576
cmp rdi, rax
jae 0x180052576
add rsi, rdi
add rdi, rdi
jmp 0x180052513
lea rsi, [r13 - 1]
jmp 0x180052513
cmp rbx, 0x3ffffd
jbe 0x18005259f
test dword [rbp + 0x26c0], 0xfffffffd
jne 0x18005259f
mov ebx, 0x3ffffd
add qword [rbp + 0x26d8], rbx
jmp 0x1800525ab
add qword [rbp + 0x26d8], rbx
test rbx, rbx
je 0x1800525f1
mov r12d, 0xffffffff
mov rcx, qword [rbp + 0x26a8]
cmp rbx, r12
mov edi, ebx
mov rdx, r14
cmova edi, r12d
mov r8d, edi
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x180102408]
test eax, eax
jne 0x1800525e4
mov eax, edi
add r14, rax
sub rbx, rax
jne 0x1800525b1
jmp 0x1800525f7
cmp eax, 0x8013153b
je 0x180052761
jmp 0x1800525f7
mov r12d, 0xffffffff
lea r8, str.DotNetRuntimeInfo
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.18008bb10
mov rbx, qword [rsp + 0xb0]
mov rcx, rbx
call fcn.180026230
test rbx, rbx
je 0x18005264b
lea rdx, str.DotNetRuntimeInfo
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcmp]
test eax, eax
jne 0x18005264b
mov r9b, 1
lea r8d, [rax + 0x60]
mov rdx, rbx
mov rcx, rbp
call fcn.180009040
lea r8, str.g_dacTable
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.18008bb10
mov rsi, qword [rax]
test rsi, rsi
je 0x180052731
mov ebx, 0x5a0
cmp rsi, 0xffffffffffffffff
je 0x180052731
mov rax, rsi
not rax
cmp rax, rbx
jb 0x180052769
mov rdi, rsi
mov rcx, qword [rbp + 0x70]
lea rdx, [rsp + 0xc0]
mov qword [rsp + 0x20], rdx
lea r8, [rsp + 0xb0]
mov r9d, 1
mov rdx, rdi
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [0x180102408]
test eax, eax
jne 0x180052731
cmp dword [rsp + 0xc0], 1
jb 0x180052731
lea rax, [rsi + 0x5a0]
sub rax, rdi
cmp rax, 1
jbe 0x1800526f9
test r15, r15
je 0x1800526f0
cmp r15, rax
jae 0x1800526f0
add rdi, r15
add r15, r15
jmp 0x180052691
lea rdi, [rsi + 0x59f]
jmp 0x180052691
add qword [rbp + 0x26d8], rbx
mov rcx, qword [rbp + 0x26a8]
cmp rbx, r12
mov edi, ebx
mov rdx, rsi
cmova edi, r12d
mov r8d, edi
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [0x180102408]
test eax, eax
jne 0x18005273a
mov eax, edi
add rsi, rax
sub rbx, rax
jne 0x180052700
mov eax, dword [rsp + 0xb8]
jmp 0x180052748
cmp eax, 0x8013153b
je 0x180052774
jmp 0x180052731
mov eax, 0x8000ffff
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov ecx, eax
call fcn.18008a810
int3
mov ecx, eax
call fcn.18008a810
int3
mov ecx, 0x80131c36
call fcn.180025310
int3
mov ecx, eax
call fcn.18008a810
int3