Function at 0x180024570
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x20], r9
mov qword [rax + 0x18], r8
mov dword [rax + 0x10], edx
push rbx
push r13
push r14
sub rsp, 0x80
mov rbx, qword [rcx + 0x10]
mov qword [rax - 0x20], rbp
mov qword [rax - 0x28], rsi
mov qword [rax - 0x30], rdi
mov rbp, r9
mov r14d, edx
mov qword [rsp + 0x48], rcx
mov qword [rax - 0x38], r12
mov rdi, rcx
test rbx, rbx
jne 0x1800245b9
call fcn.180011f90
mov rbx, rax
mov eax, dword [rdi + 0x54]
mov rcx, rbx
dec eax
mov dword [rsp + 0x40], eax
call fcn.180074380
xor r9d, r9d
mov r12d, eax
mov dword [rsp + 0xa0], eax
cmp dword [rsp + 0xd8], r9d
jge 0x180024642
mov rcx, qword [rbx + 0x30]
mov rax, qword [rsp + 0xc0]
movsxd rdx, dword [rbx + 0x3c]
movzx r8d, byte [rax + 0x2c]
cmp dword [rcx + 0x64], edx
jg 0x180024615
mov dword [rsp + 0x20], r9d
mov edx, 0x40
mov rcx, rbx
mov r9d, r12d
call fcn.1800296a0
xor r9d, r9d
jmp 0x180024642
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x40
mov byte [rax + rcx*8 + 3], r9b
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], r12d
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
mov rax, qword [rsp + 0xc0]
mov r13d, dword [rsp + 0xd0]
mov qword [rsp + 0x58], r15
cmp dword [rax + 0x28], 0
mov r15, qword [rsp + 0xc8]
mov esi, r9d
jle 0x180024700
mov r14, r15
mov rbp, rax
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
lea edx, [r13 + 1]
add edx, dword [r14]
cmp dword [rax + 0x64], ecx
jg 0x1800246b1
mov dword [rsp + 0x20], r9d
mov r8d, edx
mov rcx, rbx
mov r9d, r12d
mov edx, 0x22
call fcn.1800296a0
xor r9d, r9d
jmp 0x1800246dd
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x22
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r12d
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
inc esi
add r14, 4
cmp esi, dword [rbp + 0x28]
jl 0x180024680
mov r14d, dword [rsp + 0xa8]
mov rbp, qword [rsp + 0xb8]
mov rax, qword [rsp + 0xc0]
cmp dword [rsp + 0xe0], 0
jne 0x180024e64
test rbp, rbp
jne 0x1800249c0
movzx eax, byte [rdi + 0x1f]
test al, al
jne 0x180024727
inc dword [rdi + 0x58]
mov esi, dword [rdi + 0x58]
jmp 0x180024733
dec al
movzx eax, al
mov byte [rdi + 0x1f], al
mov esi, dword [rdi + rax*4 + 0x28]
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
lea edx, [r13 + 1]
add edx, dword [r15]
cmp dword [rax + 0x64], ecx
jg 0x180024764
mov dword [rsp + 0x20], r9d
mov r8d, edx
mov rcx, rbx
mov r9d, esi
mov edx, 0x54
call fcn.1800296a0
xor r9d, r9d
jmp 0x18002478f
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x54
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], esi
mov dword [rax + rcx*8 + 0xc], r9d
mov qword [rax + rcx*8 + 0x10], r9
mov rax, qword [rbx + 0x30]
movsxd rbp, dword [rbx + 0x3c]
cmp dword [rax + 0x64], ebp
jg 0x1800247b7
mov dword [rsp + 0x20], r9d
xor r9d, r9d
mov r8d, esi
lea edx, [r9 + 0x11]
mov rcx, rbx
call fcn.1800296a0
mov ebp, eax
jmp 0x1800247e9
lea eax, [rbp + 1]
lea rcx, [rbp*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
add rcx, rbp
mov word [rax + rcx*8], 0x11
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], esi
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], r9
mov rax, qword [rsp + 0xc0]
mov r15, qword [rsp + 0xb0]
cmp r15, qword [rax]
jne 0x180024839
cmp dword [rsp + 0xd8], 1
jne 0x180024839
mov r9d, r12d
mov r8d, r13d
mov edx, 0x25
mov rcx, rbx
mov dword [rsp + 0x20], esi
call fcn.18006b510
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
jne 0x180024839
movsxd rax, dword [rbx + 0x3c]
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
mov byte [rax + rcx*8 - 0x15], 0x90
mov r8d, r14d
mov r14d, dword [rsp + 0x40]
mov r9, r15
mov rcx, rdi
mov edx, r14d
mov dword [rsp + 0x20], 0x67
call fcn.180057f80
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
cmp dword [rax + 0x64], ecx
jg 0x18002487f
xor r9d, r9d
mov r8d, r14d
mov rcx, rbx
lea edx, [r9 + 0x21]
mov dword [rsp + 0x20], esi
call fcn.1800296a0
xor r13d, r13d
jmp 0x1800248ae
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
xor r13d, r13d
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x21
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r14d
mov dword [rax + rcx*8 + 8], r13d
mov dword [rax + rcx*8 + 0xc], esi
mov qword [rax + rcx*8 + 0x10], r13
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
cmp dword [rax + 0x64], ecx
jg 0x1800248d4
xor r8d, r8d
mov r9d, r12d
mov rcx, rbx
lea edx, [r8 + 0xd]
mov dword [rsp + 0x20], r13d
call fcn.1800296a0
jmp 0x180024901
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0xd
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r13d
mov dword [rax + rcx*8 + 8], r12d
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov edx, dword [rbx + 0x3c]
mov rax, qword [rbx + 0x30]
lea ecx, [rdx - 1]
mov dword [rax + 0x6c], ecx
mov r8d, dword [rbx + 0x3c]
lea ecx, [rdx - 2]
test ecx, ecx
jns 0x18002491d
lea ecx, [r8 - 1]
mov rax, qword [rbx]
lea rdx, [0x1800bf8b8]
cmp byte [rax + 0x55], 0
je 0x180024932
mov rax, rdx
jmp 0x180024941
movsxd rax, ecx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
lea rax, [rax + rcx*8]
mov dword [rax + 8], r8d
mov ecx, dword [rbx + 0x3c]
mov rax, qword [rbx + 0x30]
dec ecx
mov dword [rax + 0x6c], ecx
mov r8d, dword [rbx + 0x3c]
test ebp, ebp
jns 0x18002495d
lea ebp, [r8 - 1]
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
jne 0x180024975
movsxd rax, ebp
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
lea rdx, [rax + rcx*8]
mov dword [rdx + 8], r8d
test esi, esi
je 0x180024e6c
movzx edx, byte [rdi + 0x1f]
cmp dl, 8
jae 0x180024e6c
mov ecx, r13d
lea rax, [rdi + 0x90]
cmp dword [rax + 0xc], esi
je 0x1800249b7
inc ecx
add rax, 0x14
cmp ecx, 0xa
jl 0x180024998
movzx eax, dl
mov dword [rdi + rax*4 + 0x28], esi
inc byte [rdi + 0x1f]
jmp 0x180024e6c
mov byte [rax + 6], 1
jmp 0x180024e6c
movsxd rbp, dword [rax + 0x28]
mov ecx, dword [rdi + 0x48]
mov r12d, dword [rdi + 0x4c]
cmp ebp, ecx
jg 0x1800249dd
lea eax, [r12 + rbp]
sub ecx, ebp
mov dword [rdi + 0x4c], eax
mov dword [rdi + 0x48], ecx
jmp 0x1800249e9
mov eax, dword [rdi + 0x58]
lea r12d, [rax + 1]
add eax, ebp
mov dword [rdi + 0x58], eax
movzx eax, byte [rdi + 0x1f]
test al, al
jne 0x1800249fa
inc dword [rdi + 0x58]
mov r15d, dword [rdi + 0x58]
jmp 0x180024a07
dec al
movzx eax, al
mov byte [rdi + 0x1f], al
mov r15d, dword [rdi + rax*4 + 0x28]
mov rax, qword [rsp + 0xb8]
movsxd rcx, dword [rbx + 0x3c]
mov r8d, dword [rsp + 0x40]
mov edx, dword [rax + 0x58]
mov rax, qword [rbx + 0x30]
mov dword [rsp + 0xe0], r15d
cmp dword [rax + 0x64], ecx
jg 0x180024a43
mov r9d, edx
mov rcx, rbx
mov edx, 0x67
mov dword [rsp + 0x20], r14d
call fcn.1800296a0
jmp 0x180024a6f
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x67
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], edx
mov dword [rax + rcx*8 + 0xc], r14d
mov qword [rax + rcx*8 + 0x10], r9
mov rdx, qword [rsp + 0xb8]
mov rsi, qword [rdi + 0x10]
mov rcx, rdi
call fcn.180055e10
mov rcx, rax
mov rax, qword [rsi]
cmp byte [rax + 0x55], 0
je 0x180024aa1
mov r8, rcx
mov edx, 0xfffffffa
mov rcx, rax
call fcn.1800264a0
jmp 0x180024adf
mov eax, dword [rsi + 0x3c]
dec eax
cdqe
lea rdx, [rax + rax*2]
mov rax, qword [rsi + 8]
cmp byte [rax + rdx*8 + 1], 0
lea r10, [rax + rdx*8]
je 0x180024ad1
mov r8, rcx
mov r9d, 0xfffffffa
mov rdx, r10
mov rcx, rsi
call fcn.1800816e0
jmp 0x180024adf
test rcx, rcx
je 0x180024adf
mov qword [r10 + 0x10], rcx
mov byte [r10 + 1], 0xfa
xor r10d, r10d
mov r14, rbp
mov esi, r10d
test ebp, ebp
jle 0x180024b6e
mov rdi, qword [rsp + 0xc8]
mov ebp, r12d
nop dword [rax + rax]
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
lea edx, [r13 + 1]
add edx, dword [rdi + rsi*4]
cmp dword [rax + 0x64], ecx
jg 0x180024b31
mov r8d, edx
mov r9d, ebp
mov rcx, rbx
mov edx, 0x53
mov dword [rsp + 0x20], r10d
call fcn.1800296a0
xor r10d, r10d
jmp 0x180024b5c
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x53
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r10d
mov qword [rax + rcx*8 + 0x10], r10
inc rsi
inc ebp
cmp rsi, r14
jl 0x180024b00
mov rdi, qword [rsp + 0x48]
mov ebp, r14d
mov rax, qword [rsp + 0xc0]
mov r9, qword [rsp + 0xb0]
cmp r9, qword [rax]
jne 0x180024cc9
cmp dword [rsp + 0xd8], 1
jne 0x180024cc9
inc ebp
mov rsi, r10
add ebp, dword [rbx + 0x3c]
test r14, r14
jle 0x180024c6b
mov rdi, qword [rsp + 0xc8]
mov r15, qword [rsp + 0xb8]
nop word [rax + rax]
mov rax, qword [r15 + 8]
lea r8d, [r13 + 1]
lea edx, [r13 + 1]
movsx ecx, word [rax + rsi*2]
add r8d, dword [rdi + rsi*4]
mov rax, qword [rbx + 0x30]
add edx, ecx
cmp cx, word [r9 + 0x3c]
movsxd rcx, dword [rbx + 0x3c]
cmove edx, r13d
cmp dword [rax + 0x64], ecx
jg 0x180024c0d
mov dword [rsp + 0x20], edx
mov r9d, ebp
mov rcx, rbx
mov edx, 0x24
call fcn.1800296a0
mov r9, qword [rsp + 0xb0]
xor r10d, r10d
jmp 0x180024c38
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x24
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r8d
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], edx
mov qword [rax + rcx*8 + 0x10], r10
mov rax, qword [rbx]
cmp byte [rax + 0x55], 0
jne 0x180024c52
movsxd rax, dword [rbx + 0x3c]
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
mov byte [rax + rcx*8 - 0x15], 0x10
inc rsi
cmp rsi, r14
jl 0x180024bc0
mov rdi, qword [rsp + 0x48]
mov r15d, dword [rsp + 0xe0]
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov ebp, dword [rsp + 0xa0]
xor r13d, r13d
cmp dword [rax + 0x64], ecx
jg 0x180024c9b
lea edx, [r13 + 0xd]
mov r9d, ebp
xor r8d, r8d
mov rcx, rbx
mov dword [rsp + 0x20], r13d
call fcn.1800296a0
jmp 0x180024cd3
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0xd
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r13d
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
jmp 0x180024cd3
mov ebp, dword [rsp + 0xa0]
xor r13d, r13d
mov rdx, qword [rsp + 0xb8]
mov rcx, qword [rdi]
call fcn.1800536b0
mov dword [rsp + 0x30], r14d
mov r9d, r14d
mov qword [rsp + 0x28], rax
mov r8d, r12d
mov edx, 0x62
mov rcx, rbx
mov esi, r14d
mov dword [rsp + 0x20], r15d
call fcn.18006b590
mov rax, qword [rbx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov r14d, dword [rsp + 0x40]
cmp dword [rax + 0x64], edx
jg 0x180024d36
mov r9d, ebp
mov r8d, r14d
mov edx, 0x1f
mov rcx, rbx
mov dword [rsp + 0x20], r15d
call fcn.1800296a0
mov edx, eax
jmp 0x180024d62
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x1f
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r14d
mov dword [rax + rcx*8 + 8], ebp
mov dword [rax + rcx*8 + 0xc], r15d
mov qword [rax + rcx*8 + 0x10], r13
mov rcx, qword [rbx]
cmp byte [rcx + 0x55], 0
je 0x180024d79
xor r8d, r8d
lea edx, [r8 - 0xe]
call fcn.1800264a0
jmp 0x180024db3
test edx, edx
jns 0x180024d82
mov edx, dword [rbx + 0x3c]
dec edx
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rbx + 8]
cmp byte [rax + rcx*8 + 1], 0
lea rdx, [rax + rcx*8]
je 0x180024dab
mov r9d, 0xfffffff2
xor r8d, r8d
mov rcx, rbx
call fcn.1800816e0
jmp 0x180024db3
mov dword [rdx + 0x10], r13d
mov byte [rdx + 1], 0xf2
test r15d, r15d
je 0x180024df2
movzx edx, byte [rdi + 0x1f]
cmp dl, 8
jae 0x180024df2
mov ecx, r13d
lea rax, [rdi + 0x90]
nop dword [rax + rax]
cmp dword [rax + 0xc], r15d
je 0x180024dee
inc ecx
add rax, 0x14
cmp ecx, 0xa
jl 0x180024dd0
movzx eax, dl
mov dword [rdi + rax*4 + 0x28], r15d
inc byte [rdi + 0x1f]
jmp 0x180024df2
mov byte [rax + 6], 1
test r12d, r12d
jle 0x180024e4e
cmp byte [rdi + 0x25], 0
je 0x180024e4e
lea rcx, [rdi + 0x144]
lea r8, [rdi + 0x90]
nop dword [rax + rax]
mov edx, dword [rcx + 0xc]
cmp edx, r12d
jl 0x180024e43
lea eax, [r12 + rsi]
cmp edx, eax
jge 0x180024e43
cmp byte [rcx + 6], 0
je 0x180024e3c
movzx eax, byte [rdi + 0x1f]
cmp al, 8
jae 0x180024e38
movzx eax, al
mov dword [rdi + rax*4 + 0x28], edx
inc byte [rdi + 0x1f]
mov byte [rcx + 6], 0
mov dword [rcx + 0xc], r13d
dec byte [rdi + 0x25]
cmp rcx, r8
je 0x180024e4e
sub rcx, 0x14
jmp 0x180024e10
cmp esi, dword [rdi + 0x48]
jle 0x180024e5a
mov dword [rdi + 0x48], esi
mov dword [rdi + 0x4c], r12d
mov r12d, dword [rsp + 0xa0]
jmp 0x180024e6c
mov r14d, dword [rsp + 0x40]
xor r13d, r13d
mov rdx, qword [rsp + 0xc0]
mov r15, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x78]
movzx ecx, byte [rdx + 0x2c]
test cl, cl
jne 0x180024f9a
mov rax, qword [rdi]
test dword [rax + 0x2c], 0x2000000
jne 0x180024f9a
cmp qword [rdi + 0x1c8], 0
jne 0x180024f9a
cmp byte [rdi + 0x20], cl
jne 0x180024f9a
mov rsi, qword [rdi + 0x10]
test rsi, rsi
jne 0x180024ec5
mov rcx, rdi
call fcn.180011f90
mov rsi, rax
mov rcx, qword [rdi + 0x1c8]
test rcx, rcx
cmovne rdi, rcx
mov byte [rdi + 0x21], 1
mov rcx, qword [rsi + 0x30]
movsxd rdx, dword [rsi + 0x3c]
cmp dword [rcx + 0x64], edx
jg 0x180024f04
mov edx, 0x4a
mov r8d, 0x313
mov rcx, rsi
lea r9d, [rdx - 0x48]
mov dword [rsp + 0x20], r13d
call fcn.1800296a0
mov edx, eax
jmp 0x180024f33
lea rcx, [rdx + rdx*2]
lea eax, [rdx + 1]
mov dword [rsi + 0x3c], eax
mov rax, qword [rsi + 8]
mov word [rax + rcx*8], 0x4a
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], 0x313
mov qword [rax + rcx*8 + 8], 2
mov qword [rax + rcx*8 + 0x10], r13
mov rcx, qword [rsi]
cmp byte [rcx + 0x55], 0
je 0x180024f4a
xor r8d, r8d
lea edx, [r8 - 2]
call fcn.1800264a0
jmp 0x180024f7a
test edx, edx
jns 0x180024f53
mov edx, dword [rsi + 0x3c]
dec edx
movsxd rax, edx
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 8]
cmp byte [rax + rcx*8 + 1], 0
lea rdx, [rax + rcx*8]
je 0x180024f7a
mov r9d, 0xfffffffe
xor r8d, r8d
mov rcx, rsi
call fcn.1800816e0
mov rax, qword [rsi]
cmp byte [rax + 0x55], 0
jne 0x180025014
movsxd rax, dword [rsi + 0x3c]
lea rcx, [rax + rax*2]
mov rax, qword [rsi + 8]
mov byte [rax + rcx*8 - 0x15], 4
jmp 0x180025014
mov r8d, dword [rsp + 0xd8]
test r8d, r8d
jle 0x180024fbd
test cl, cl
jne 0x180024fbd
mov rax, qword [rdi + 0x1c8]
test rax, rax
cmovne rdi, rax
mov byte [rdi + 0x21], 1
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
movzx edx, byte [rdx + 0x2c]
cmp dword [rax + 0x64], ecx
jg 0x180024fe8
mov r9d, r8d
mov r8d, edx
mov rcx, rbx
mov edx, 0x8f
mov dword [rsp + 0x20], r13d
call fcn.1800296a0
jmp 0x180025014
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x8f
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], edx
mov dword [rax + rcx*8 + 8], r8d
mov dword [rax + rcx*8 + 0xc], r13d
mov qword [rax + rcx*8 + 0x10], r13
mov rdx, qword [rbx + 0x30]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rcx, qword [rdx + 0x88]
test rcx, rcx
je 0x180025041
movsxd rax, r12d
lea rax, [rax*4 + 4]
sub rcx, rax
mov eax, dword [rbx + 0x3c]
mov dword [rcx], eax
mov eax, dword [rbx + 0x3c]
mov r12, qword [rsp + 0x60]
dec eax
mov dword [rdx + 0x6c], eax
mov rax, qword [rbx + 0x30]
movsxd rcx, dword [rbx + 0x3c]
cmp dword [rax + 0x64], ecx
jg 0x180025081
xor r9d, r9d
mov r8d, r14d
mov rcx, rbx
lea edx, [r9 + 0x6e]
mov dword [rsp + 0xc0], r13d
add rsp, 0x80
pop r14
pop r13
pop rbx
jmp fcn.1800296a0
lea eax, [rcx + 1]
lea rcx, [rcx + rcx*2]
mov dword [rbx + 0x3c], eax
mov rax, qword [rbx + 8]
mov word [rax + rcx*8], 0x6e
mov byte [rax + rcx*8 + 3], 0
mov dword [rax + rcx*8 + 4], r14d
mov qword [rax + rcx*8 + 8], 0
mov qword [rax + rcx*8 + 0x10], r13
add rsp, 0x80
pop r14
pop r13
pop rbx
ret