Function at 0x18002c140
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x4c8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x4b0], rax
mov dword [rsp + 0x24], 0
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.180012cb0
movzx eax, byte [rsp + 0x4f0]
test eax, eax
je 0x18002c1ec
lea rdx, [rsp + 0x220]
mov rcx, qword [rsp + 0x4f8]
call fcn.1800045b0
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x1e0]
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0xe8]
call fcn.18001ec60
mov rcx, rax
call fcn.180011be0
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x220]
call fcn.180003020
jmp 0x18002c240
lea rdx, [rsp + 0x200]
mov rcx, qword [rsp + 0x4f8]
call fcn.1800045b0
mov qword [rsp + 0xf0], rax
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xf8], rax
mov rcx, qword [rsp + 0xf8]
call fcn.18001ed80
mov rcx, rax
call fcn.180011be0
mov qword [rsp + 0x48], rax
lea rcx, [rsp + 0x200]
call fcn.180003020
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x28], 0
lea rcx, [rsp + 0x320]
call fcn.180007f60
nop
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x48]
call fcn.180040410
lea rcx, [rsp + 0x2d0]
call fcn.180005f70
nop
lea rdx, [rsp + 0x210]
mov rcx, qword [rsp + 0x4f8]
call fcn.1800045b0
mov qword [rsp + 0x100], rax
mov rax, qword [rsp + 0x100]
mov qword [rsp + 0x108], rax
mov rcx, qword [rsp + 0x108]
call fcn.18001e240
mov qword [rsp + 0xc8], rax
lea rcx, [rsp + 0x210]
call fcn.180003020
lea rcx, [0x1800b21e0]
call fcn.18001dc90
mov qword [rsp + 0x110], rax
lea rcx, [0x1800b21e0]
call fcn.180011be0
mov qword [rsp + 0x118], rax
mov r9, qword [rsp + 0x500]
mov r8, qword [rsp + 0x110]
mov rdx, qword [rsp + 0x118]
mov rcx, qword [rsp + 0xc8]
call fcn.1800409b0
mov qword [rsp + 0x70], 0
jmp 0x18002c32c
mov rax, qword [rsp + 0x70]
inc rax
mov qword [rsp + 0x70], rax
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x18002cffb
cmp qword [rsp + 0x70], 4
jae 0x18002cffb
mov rax, qword [rsp + 0x70]
movzx eax, byte [rsp + rax + 0x80]
mov byte [rsp + 0x5c], al
cmp byte [rsp + 0x5c], 0x20
je 0x18002cf69
cmp byte [rsp + 0x5c], 0x24
je 0x18002c38e
cmp byte [rsp + 0x5c], 0x2b
je 0x18002c68a
cmp byte [rsp + 0x5c], 0x76
je 0x18002ca93
cmp byte [rsp + 0x5c], 0x78
je 0x18002cf69
jmp 0x18002cff6
lea rdx, [rsp + 0x2f8]
mov rcx, qword [rsp + 0x48]
call fcn.1800349a0
nop
lea rcx, [rsp + 0xd0]
call fcn.18001fb50
nop
mov rcx, qword [rsp + 0x4f8]
call fcn.180004520
and eax, 8
test eax, eax
jne 0x18002c411
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002c411
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov dword [rsp + 0xac], eax
lea rcx, [rsp + 0x2f8]
call fcn.1800055a0
movzx eax, word [rax]
mov ecx, dword [rsp + 0xac]
cmp ecx, eax
jne 0x18002c47a
cmp qword [rsp + 0x70], 3
jne 0x18002c489
lea rcx, [rsp + 0x320]
call fcn.180005580
cmp rax, 1
ja 0x18002c489
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002c47a
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov dword [rsp + 0xb0], eax
lea rcx, [rsp + 0x2f8]
call fcn.1800055a0
movzx eax, word [rax]
mov ecx, dword [rsp + 0xb0]
cmp ecx, eax
je 0x18002c489
xor edx, edx
lea rcx, [rsp + 0x2f8]
call fcn.18003fa90
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x2f8]
call fcn.180034890
mov qword [rsp + 0x120], rax
mov rdx, qword [rsp + 0x120]
lea rcx, [rsp + 0xd0]
call fcn.1800213b0
lea rcx, [rsp + 0x230]
call fcn.180020c60
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002c57b
lea rdx, [rsp + 0x248]
lea rcx, [rsp + 0x2f8]
call fcn.18003f8c0
mov qword [rsp + 0x128], rax
mov rax, qword [rsp + 0x128]
mov qword [rsp + 0x130], rax
mov eax, dword [rsp + 0x24]
or eax, 1
mov dword [rsp + 0x24], eax
mov rdx, qword [rsp + 0x130]
lea rcx, [rsp + 0xd0]
call fcn.1800216e0
movzx eax, al
test eax, eax
jne 0x18002c57b
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov dword [rsp + 0xb4], eax
lea rcx, [rsp + 0xd0]
call fcn.180021b20
movzx eax, word [rax]
mov ecx, dword [rsp + 0xb4]
cmp ecx, eax
jne 0x18002c57b
mov dword [rsp + 0x8c], 1
jmp 0x18002c586
mov dword [rsp + 0x8c], 0
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0x38], al
mov eax, dword [rsp + 0x24]
and eax, 1
test eax, eax
je 0x18002c5af
and dword [rsp + 0x24], 0xfffffffe
lea rcx, [rsp + 0x248]
call fcn.180020c60
movzx eax, byte [rsp + 0x38]
test eax, eax
je 0x18002c5d7
lea rcx, [rsp + 0xd0]
call fcn.180021fd0
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
jmp 0x18002c4c8
lea rdx, [rsp + 0x260]
lea rcx, [rsp + 0x2f8]
call fcn.18003f8c0
mov qword [rsp + 0x138], rax
mov rdx, qword [rsp + 0x138]
lea rcx, [rsp + 0xd0]
call fcn.1800216e0
movzx eax, al
test eax, eax
jne 0x18002c61d
mov dword [rsp + 0x90], 1
jmp 0x18002c628
mov dword [rsp + 0x90], 0
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x39], al
lea rcx, [rsp + 0x260]
call fcn.180020c60
movzx eax, byte [rsp + 0x39]
test eax, eax
je 0x18002c64f
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0xd0]
call fcn.180020c40
nop
lea rcx, [rsp + 0x2f8]
call fcn.180005770
jmp 0x18002cff6
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002ca8e
lea rdx, [rsp + 0x398]
mov rcx, qword [rsp + 0x48]
call fcn.180040510
mov qword [rsp + 0x140], rax
mov rax, qword [rsp + 0x140]
mov qword [rsp + 0x148], rax
mov eax, dword [rsp + 0x24]
or eax, 2
mov dword [rsp + 0x24], eax
mov rcx, qword [rsp + 0x148]
call fcn.180005580
test rax, rax
jbe 0x18002c77b
lea rdx, [rsp + 0x370]
mov rcx, qword [rsp + 0x48]
call fcn.180040510
mov qword [rsp + 0x150], rax
mov rax, qword [rsp + 0x150]
mov qword [rsp + 0x158], rax
mov eax, dword [rsp + 0x24]
or eax, 4
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x158]
mov qword [rsp + 0x160], rax
xor edx, edx
mov rcx, qword [rsp + 0x160]
call fcn.1800055c0
movzx eax, word [rax]
mov dword [rsp + 0xb8], eax
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov ecx, dword [rsp + 0xb8]
cmp ecx, eax
jne 0x18002c77b
mov dword [rsp + 0x94], 1
jmp 0x18002c786
mov dword [rsp + 0x94], 0
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x3a], al
mov eax, dword [rsp + 0x24]
and eax, 4
test eax, eax
je 0x18002c7b0
and dword [rsp + 0x24], 0xfffffffb
lea rcx, [rsp + 0x370]
call fcn.180005770
nop
mov eax, dword [rsp + 0x24]
and eax, 2
test eax, eax
je 0x18002c7cd
and dword [rsp + 0x24], 0xfffffffd
lea rcx, [rsp + 0x398]
call fcn.180005770
movzx eax, byte [rsp + 0x3a]
test eax, eax
je 0x18002c824
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
lea rdx, [rsp + 0x3c0]
mov rcx, qword [rsp + 0x48]
call fcn.180040510
mov qword [rsp + 0x168], rax
mov rdx, qword [rsp + 0x168]
lea rcx, [rsp + 0x320]
call fcn.180021550
lea rcx, [rsp + 0x3c0]
call fcn.180005770
jmp 0x18002ca8e
lea rdx, [rsp + 0x410]
mov rcx, qword [rsp + 0x48]
call fcn.180040460
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov qword [rsp + 0x178], rax
mov eax, dword [rsp + 0x24]
or eax, 8
mov dword [rsp + 0x24], eax
mov rcx, qword [rsp + 0x178]
call fcn.180005580
test rax, rax
jbe 0x18002c8f5
lea rdx, [rsp + 0x3e8]
mov rcx, qword [rsp + 0x48]
call fcn.180040460
mov qword [rsp + 0x180], rax
mov rax, qword [rsp + 0x180]
mov qword [rsp + 0x188], rax
mov eax, dword [rsp + 0x24]
or eax, 0x10
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x188]
mov qword [rsp + 0x190], rax
xor edx, edx
mov rcx, qword [rsp + 0x190]
call fcn.1800055c0
movzx eax, word [rax]
mov dword [rsp + 0xbc], eax
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov ecx, dword [rsp + 0xbc]
cmp ecx, eax
jne 0x18002c8f5
mov dword [rsp + 0x98], 1
jmp 0x18002c900
mov dword [rsp + 0x98], 0
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x3b], al
mov eax, dword [rsp + 0x24]
and eax, 0x10
test eax, eax
je 0x18002c92a
and dword [rsp + 0x24], 0xffffffef
lea rcx, [rsp + 0x3e8]
call fcn.180005770
nop
mov eax, dword [rsp + 0x24]
and eax, 8
test eax, eax
je 0x18002c947
and dword [rsp + 0x24], 0xfffffff7
lea rcx, [rsp + 0x410]
call fcn.180005770
movzx eax, byte [rsp + 0x3b]
test eax, eax
je 0x18002c9a3
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
lea rdx, [rsp + 0x438]
mov rcx, qword [rsp + 0x48]
call fcn.180040460
mov qword [rsp + 0x198], rax
mov rdx, qword [rsp + 0x198]
lea rcx, [rsp + 0x320]
call fcn.180021550
lea rcx, [rsp + 0x438]
call fcn.180005770
mov byte [rsp + 0x28], 1
jmp 0x18002ca8e
lea rdx, [rsp + 0x488]
mov rcx, qword [rsp + 0x48]
call fcn.180040510
mov qword [rsp + 0x1a0], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0x1a8], rax
mov eax, dword [rsp + 0x24]
or eax, 0x20
mov dword [rsp + 0x24], eax
mov rcx, qword [rsp + 0x1a8]
call fcn.180005580
test rax, rax
je 0x18002ca2e
lea rdx, [rsp + 0x460]
mov rcx, qword [rsp + 0x48]
call fcn.180040460
mov qword [rsp + 0x1b0], rax
mov eax, dword [rsp + 0x24]
or eax, 0x40
mov dword [rsp + 0x24], eax
mov rcx, qword [rsp + 0x1b0]
call fcn.180005580
test rax, rax
jne 0x18002ca2e
mov dword [rsp + 0x9c], 1
jmp 0x18002ca39
mov dword [rsp + 0x9c], 0
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x3c], al
mov eax, dword [rsp + 0x24]
and eax, 0x40
test eax, eax
je 0x18002ca63
and dword [rsp + 0x24], 0xffffffbf
lea rcx, [rsp + 0x460]
call fcn.180005770
nop
mov eax, dword [rsp + 0x24]
and eax, 0x20
test eax, eax
je 0x18002ca80
and dword [rsp + 0x24], 0xffffffdf
lea rcx, [rsp + 0x488]
call fcn.180005770
movzx eax, byte [rsp + 0x3c]
test eax, eax
je 0x18002ca8e
mov byte [rsp + 0x28], 1
jmp 0x18002cff6
mov dword [rsp + 0x40], 0
mov rcx, qword [rsp + 0x48]
call fcn.18003fad0
mov dword [rsp + 0x68], eax
lea rdx, [rsp + 0x348]
mov rcx, qword [rsp + 0x48]
call fcn.18003fd70
nop
lea rcx, [rsp + 0x348]
call fcn.1800059a0
movzx eax, al
test eax, eax
je 0x18002cad9
xor eax, eax
mov word [rsp + 0x50], ax
jmp 0x18002cae8
mov rcx, qword [rsp + 0x48]
call fcn.1800408d0
mov word [rsp + 0x50], ax
movzx eax, word [rsp + 0x50]
mov word [rsp + 0x54], ax
movzx eax, word [rsp + 0x54]
test eax, eax
je 0x18002cb10
lea rcx, [rsp + 0x348]
call fcn.1800059d0
movzx eax, byte [rax]
cmp eax, 0x7f
jl 0x18002cb89
jmp 0x18002cb1f
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002cb84
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx edx, ax
mov rcx, qword [rsp + 0x500]
call fcn.18001b240
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0xa
jae 0x18002cb84
lea rax, [0x1800b21e0]
mov rcx, qword [rsp + 0x60]
movzx edx, byte [rax + rcx]
lea rcx, [rsp + 0x2d0]
call fcn.180022900
jmp 0x18002cb12
jmp 0x18002ce1b
lea rcx, [rsp + 0x2a8]
call fcn.180005f70
nop
xor edx, edx
lea rcx, [rsp + 0x2a8]
call fcn.180013a80
mov qword [rsp + 0x30], 0
jmp 0x18002cbbe
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002ccc9
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx edx, ax
mov rcx, qword [rsp + 0x500]
call fcn.18001b240
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0xa
jae 0x18002cc72
lea rax, [0x1800b21e0]
mov rcx, qword [rsp + 0x60]
movzx edx, byte [rax + rcx]
lea rcx, [rsp + 0x2d0]
call fcn.180022900
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
movsx eax, byte [rax]
cmp eax, 0x7f
je 0x18002cc70
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
mov qword [rsp + 0xc0], rax
mov rax, qword [rsp + 0xc0]
movzx eax, byte [rax]
inc al
mov rcx, qword [rsp + 0xc0]
mov byte [rcx], al
jmp 0x18002ccc4
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
movsx eax, byte [rax]
test eax, eax
je 0x18002cca4
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
movzx ecx, word [rsp + 0x54]
cmp eax, ecx
je 0x18002cca8
jmp 0x18002ccc9
xor edx, edx
lea rcx, [rsp + 0x2a8]
call fcn.180013a80
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
jmp 0x18002cbb1
cmp qword [rsp + 0x30], 0
je 0x18002ccfe
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
movsx eax, byte [rax]
test eax, eax
jle 0x18002ccf9
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
jmp 0x18002ccfe
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x348]
call fcn.1800059d0
mov qword [rsp + 0x78], rax
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x18002cde5
cmp qword [rsp + 0x30], 0
jbe 0x18002cde5
mov rax, qword [rsp + 0x78]
movsx eax, byte [rax]
cmp eax, 0x7f
jne 0x18002cd3b
jmp 0x18002cde5
mov rax, qword [rsp + 0x30]
dec rax
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jbe 0x18002cd7f
mov rax, qword [rsp + 0x78]
movsx eax, byte [rax]
mov dword [rsp + 0xa0], eax
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
movsx eax, byte [rax]
mov ecx, dword [rsp + 0xa0]
cmp ecx, eax
jne 0x18002cdb6
cmp qword [rsp + 0x30], 0
jne 0x18002cdbd
mov rax, qword [rsp + 0x78]
movsx eax, byte [rax]
mov dword [rsp + 0xa4], eax
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x2a8]
call fcn.1800059f0
movsx eax, byte [rax]
mov ecx, dword [rsp + 0xa4]
cmp ecx, eax
jge 0x18002cdbd
mov byte [rsp + 0x20], 1
jmp 0x18002cde0
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x78]
movsx eax, byte [rcx + rax]
test eax, eax
jle 0x18002cde0
mov rax, qword [rsp + 0x78]
inc rax
mov qword [rsp + 0x78], rax
jmp 0x18002cd10
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x18002ce0e
lea rcx, [rsp + 0x2a8]
call fcn.180005b60
nop
lea rcx, [rsp + 0x348]
call fcn.180005b60
jmp 0x18002cff6
lea rcx, [rsp + 0x2a8]
call fcn.180005b60
mov rcx, qword [rsp + 0x48]
call fcn.180012f40
mov word [rsp + 0x58], ax
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002cf07
movzx eax, word [rsp + 0x58]
test eax, eax
je 0x18002cf07
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
movzx ecx, word [rsp + 0x58]
cmp eax, ecx
jne 0x18002cf07
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
mov rdx, qword [rsp + 0x4e8]
mov rcx, rax
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002cef8
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x40], eax
jge 0x18002cef8
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx edx, ax
mov rcx, qword [rsp + 0x500]
call fcn.18001b240
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0xa
jae 0x18002cef8
lea rax, [0x1800b21e0]
mov rcx, qword [rsp + 0x60]
movzx edx, byte [rax + rcx]
lea rcx, [rsp + 0x2d0]
call fcn.180022900
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
jmp 0x18002ce74
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x40], eax
jge 0x18002cf07
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x2d0]
call fcn.1800059a0
movzx eax, al
test eax, eax
je 0x18002cf22
mov byte [rsp + 0x20], 1
jmp 0x18002cf49
jmp 0x18002cf2e
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x68]
cmp dword [rsp + 0x40], eax
jge 0x18002cf49
mov dl, 0x30
lea rcx, [rsp + 0x2d0]
call fcn.180022900
jmp 0x18002cf24
lea rcx, [rsp + 0x348]
call fcn.180005b60
jmp 0x18002cff6
cmp qword [rsp + 0x70], 3
jne 0x18002cf76
jmp 0x18002cff6
mov byte [rsp + 0x29], 0
jmp 0x18002cf8a
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002cfd6
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx r8d, ax
mov dx, 0x48
mov rcx, qword [rsp + 0xc8]
call fcn.180040030
movzx eax, al
test eax, eax
je 0x18002cfd6
mov byte [rsp + 0x29], 1
jmp 0x18002cf7d
mov rax, qword [rsp + 0x70]
movsx eax, byte [rsp + rax + 0x80]
cmp eax, 0x20
jne 0x18002cff6
movzx eax, byte [rsp + 0x29]
test eax, eax
jne 0x18002cff6
mov byte [rsp + 0x20], 1
jmp 0x18002c31f
movzx eax, byte [rsp + 0x20]
test eax, eax
jne 0x18002d1e3
lea rcx, [rsp + 0x320]
call fcn.180005580
cmp rax, 1
jbe 0x18002d1e3
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x320]
call fcn.180034890
nop
lea rcx, [rsp + 0x1e8]
call fcn.1800221d0
mov qword [rsp + 0x1d0], rax
lea rdx, [rsp + 0x278]
lea rcx, [rsp + 0x320]
call fcn.18003f8c0
mov qword [rsp + 0x1b8], rax
mov rax, qword [rsp + 0x1b8]
mov qword [rsp + 0x1c0], rax
mov eax, dword [rsp + 0x24]
bts eax, 7
mov dword [rsp + 0x24], eax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c8], rax
mov rdx, qword [rsp + 0x1c8]
mov rcx, qword [rsp + 0x1d0]
call fcn.1800216e0
movzx eax, al
test eax, eax
jne 0x18002d10a
mov rdx, qword [rsp + 0x4e8]
mov rcx, qword [rsp + 0x4e0]
call fcn.18001b010
movzx eax, al
test eax, eax
jne 0x18002d10a
mov rcx, qword [rsp + 0x4e0]
call fcn.180021d40
movzx eax, ax
mov dword [rsp + 0xa8], eax
lea rcx, [rsp + 0x1e8]
call fcn.180021d20
movzx eax, word [rax]
mov ecx, dword [rsp + 0xa8]
cmp ecx, eax
jne 0x18002d10a
mov dword [rsp + 0x84], 1
jmp 0x18002d115
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x3d], al
mov eax, dword [rsp + 0x24]
and eax, 0x80
test eax, eax
je 0x18002d143
and dword [rsp + 0x24], 0xffffff7f
lea rcx, [rsp + 0x278]
call fcn.180020c60
movzx eax, byte [rsp + 0x3d]
test eax, eax
je 0x18002d15e
mov rcx, qword [rsp + 0x4e0]
call fcn.1800221f0
jmp 0x18002d035
lea rdx, [rsp + 0x290]
lea rcx, [rsp + 0x320]
call fcn.18003f8c0
mov qword [rsp + 0x1d8], rax
mov rdx, qword [rsp + 0x1d8]
lea rcx, [rsp + 0x1e8]
call fcn.1800216e0
movzx eax, al
test eax, eax
jne 0x18002d1a4
mov dword [rsp + 0x88], 1
jmp 0x18002d1af
mov dword [rsp + 0x88], 0
movzx eax, byte [rsp + 0x88]
mov byte [rsp + 0x3e], al
lea rcx, [rsp + 0x290]
call fcn.180020c60
movzx eax, byte [rsp + 0x3e]
test eax, eax
je 0x18002d1d6
mov byte [rsp + 0x20], 1
lea rcx, [rsp + 0x1e8]
call fcn.180020c60
movzx eax, byte [rsp + 0x20]
test eax, eax
je 0x18002d1fd
xor edx, edx
lea rcx, [rsp + 0x2d0]
call fcn.18003fa10
jmp 0x18002d21e
movzx eax, byte [rsp + 0x28]
test eax, eax
je 0x18002d21e
mov r9b, 0x2d
mov r8d, 1
xor edx, edx
lea rcx, [rsp + 0x2d0]
call fcn.18000b0c0
lea rdx, [rsp + 0x2d0]
mov rcx, qword [rsp + 0x4d8]
call fcn.180005c00
mov eax, dword [rsp + 0x24]
bts eax, 8
mov dword [rsp + 0x24], eax
lea rcx, [rsp + 0x2d0]
call fcn.180005b60
nop
lea rcx, [rsp + 0x320]
call fcn.180005770
mov rax, qword [rsp + 0x4d8]
mov rcx, qword [rsp + 0x4b0]
xor rcx, rsp
call fcn.18000f340
add rsp, 0x4c8
ret