Function at 0x180028ea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1800f50c0]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r11d, ecx
mov dword [rsp + 0x2c], ecx
mov r15, qword [0x1800f6570]
test ecx, ecx
je 0x180028f78
mov r8, qword [r15 + 0x5538]
movsxd rdx, dword [r15 + 0x5530]
mov r9, rdx
shl r9, 4
add r9, r8
test rdx, rdx
je 0x180028f31
nop
mov rcx, rdx
shr rcx, 1
mov rax, rcx
add rax, rax
cmp dword [r8 + rax*8], r11d
jae 0x180028f29
lea r8, [r8 + rax*8]
add r8, 0x10
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x180028f2c
mov rdx, rcx
test rdx, rdx
jne 0x180028f00
xor edi, edi
cmp r8, r9
je 0x180028f43
cmp dword [r8], r11d
jne 0x180028f43
mov rbx, qword [r8 + 8]
jmp 0x180028f46
mov rbx, rdi
mov qword [rsp + 0x30], rbx
test rbx, rbx
je 0x180029349
xor dl, dl
mov eax, dword [rbx + 0xc4]
shl eax, 0x1d
sar eax, 0x1d
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xc4]
shl eax, 0x1a
sar eax, 0x1d
mov dword [rsp + 0x24], eax
jmp 0x180028f8b
xor edi, edi
mov ebx, edi
mov qword [rsp + 0x30], rbx
xor dl, dl
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x20], edx
mov ebp, edi
mov dword [rsp + 0x3c], edi
mov esi, edi
mov dword [rsp + 0x38], esi
mov r10, rdi
mov qword [rsp + 0x40], rdi
mov r12d, edi
cmp dword [r15 + 0x5530], 0
jle 0x180029135
mov r13, rdi
mov r8d, 1
nop dword [rax]
mov rax, qword [r15 + 0x5538]
mov r14, qword [rax + r13 + 8]
test r14, r14
je 0x18002911d
test r11d, r11d
je 0x180029005
cmp dword [r14], r11d
je 0x18002911d
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x18002911d
lea rcx, [rax]
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x180028ff0
cmp dword [rcx], r11d
jne 0x18002911d
mov eax, dword [r14 + 0x10]
shr eax, 0xb
test al, 1
movzx edx, dl
cmovne edx, r8d
mov dword [rsp + 0x20], edx
test r11d, r11d
je 0x180029050
mov edx, edi
cmp dword [r15 + 0x5540], 0
jle 0x180029050
mov rcx, rdi
nop dword [rax]
mov rax, qword [r15 + 0x5548]
cmp qword [rcx + rax + 0x10], r14
jne 0x180029041
mov dword [rcx + rax], edi
inc edx
add rcx, 0x40
cmp edx, dword [r15 + 0x5540]
jl 0x180029030
test rbx, rbx
je 0x18002906f
mov rdx, r14
mov rcx, rbx
call fcn.1800239e0
mov edx, dword [rbx]
mov ecx, dword [r14]
call fcn.18002a000
mov r10, qword [rsp + 0x40]
cmp esi, ebp
jne 0x180029105
lea ebx, [rsi + 1]
test ebp, ebp
je 0x180029089
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
jmp 0x18002908e
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ebp
jle 0x180029100
mov rax, qword [0x1800f6570]
test rax, rax
je 0x1800290a9
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x1800290f2
movsxd r8, esi
shl r8, 3
mov rdx, rax
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800f6570]
test rdx, rdx
je 0x1800290e7
dec dword [rdx + 0xf4]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, rbp
mov qword [rsp + 0x40], rbp
mov ebp, ebx
mov dword [rsp + 0x3c], ebx
mov rbx, qword [rsp + 0x30]
movsxd rax, esi
mov qword [r10 + rax*8], r14
inc esi
mov dword [rsp + 0x38], esi
mov r11d, dword [rsp + 0x2c]
mov r8d, 1
inc r12d
add r13, 0x10
cmp r12d, dword [r15 + 0x5530]
mov edx, dword [rsp + 0x20]
jl 0x180028fc0
test rbx, rbx
je 0x180029165
mov ecx, dword [rsp + 0x24]
lea ecx, [rcx*8]
mov edx, dword [rsp + 0x28]
xor edx, dword [rbx + 0xc4]
and edx, 0xffffffc0
mov eax, ecx
xor eax, dword [rsp + 0x28]
and eax, 0xffffffc7
xor edx, eax
xor edx, ecx
mov dword [rbx + 0xc4], edx
mov rcx, qword [r15 + 0x5598]
lea rax, [rcx + 4]
mov r9, rdi
test rcx, rcx
cmovne r9, rax
test r9, r9
je 0x1800291d5
nop
mov r8d, dword [r9 + 0x14]
test r8d, r8d
je 0x1800291aa
mov edx, edi
test esi, esi
jle 0x1800291aa
mov rcx, r10
mov rax, qword [rcx]
cmp dword [rax], r8d
je 0x1800291a6
inc edx
add rcx, 8
cmp edx, esi
jl 0x180029192
jmp 0x1800291aa
mov dword [r9 + 0x14], r11d
movsxd r8, dword [r9 - 4]
add r8, r9
movsxd rcx, dword [r15 + 0x5590]
mov rdx, qword [r15 + 0x5598]
add rdx, 4
add rdx, rcx
mov r9, rdi
cmp r8, rdx
cmovne r9, r8
test r9, r9
jne 0x180029180
cmp esi, 1
jle 0x1800291f9
movsxd rdx, esi
cmp rdx, 1
jbe 0x1800291f9
lea r9, [0x180022170]
mov r8d, 8
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov r12, qword [rsp + 0x40]
test esi, esi
jle 0x180029291
mov r14, r12
nop dword [rax]
mov rbx, qword [r14]
mov rax, qword [rbx + 0x88]
test rax, rax
je 0x180029226
mov qword [rax + 0x428], rdi
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x18002924e
mov eax, reloc.WLDAP32.dll_Ordinal_32
cmp rax, 0x30
jge 0x18002924e
cmp qword [rdx + rax], rbx
jne 0x180029248
mov rcx, qword [rbx + 0x18]
mov qword [rax + rcx], rdi
add rax, 8
jmp 0x180029234
xor r8d, r8d
mov edx, dword [rbx]
lea rcx, [r15 + 0x5530]
call fcn.180007ef0
mov rcx, rbx
call fcn.180023430
mov rax, qword [0x1800f6570]
test rax, rax
je 0x180029279
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 8
sub rsi, 1
jne 0x180029210
mov rbx, qword [rsp + 0x30]
cmp dword [rsp + 0x2c], 0
jne 0x180029306
mov rcx, qword [r15 + 0x5538]
test rcx, rcx
je 0x1800292ce
mov qword [r15 + 0x5530], 0
mov rax, qword [0x1800f6570]
test rax, rax
je 0x1800292c1
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5538], rdi
mov rcx, qword [r15 + 0x5548]
test rcx, rcx
je 0x180029329
mov qword [r15 + 0x5540], 0
mov rax, qword [0x1800f6570]
test rax, rax
je 0x1800292f7
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5548], rdi
jmp 0x180029329
cmp byte [rsp + 0x20], 0
je 0x180029329
mov qword [rbx + 0x98], rbx
mov ecx, dword [rbx + 8]
bts ecx, 0xb
mov dword [rbx + 8], ecx
mov eax, dword [rbx + 0xc]
or eax, dword [rbx + 4]
or eax, ecx
mov dword [rbx + 0x10], eax
test r12, r12
je 0x180029349
mov rax, qword [0x1800f6570]
test rax, rax
je 0x180029340
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1800c8910
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret