Function at 0x4a7cf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x88
mov rbx, qword [rdx]
movzx eax, byte [rbx]
mov qword [rsp + 0xd8], rdx
lea edx, [rax - 0x2d]
mov r14, r8
and edx, 0xf7
mov qword [rsp + 0xd0], rcx
mov dword [rsp + 0xe8], r9d
je 0x4a7ef0
mov r15, qword [rcx + 0x10]
cmp al, 0x32
je 0x4a84e8
mov rsi, qword [r8 + 0x60]
test byte [rsi + 0x39], 4
je 0x4a7ea8
mov ebp, dword [rsp + 0xe8]
test ebp, ebp
jle 0x4a7d8a
mov edi, dword [rsp + 0xe8]
mov rax, qword [rsi + 0x48]
lea edx, [rdi - 1]
lea rcx, [rax + rdx*8 + 8]
nop dword [rax + rax]
mov rdx, qword [rax]
test rdx, rdx
je 0x4a7d81
cmp qword [rdx], rbx
je 0x4a7f50
add rax, 8
cmp rcx, rax
jne 0x4a7d70
movzx ecx, word [rsi + 0x3c]
cmp dword [rsp + 0xe8], ecx
jge 0x4a874b
mov edx, dword [rsp + 0xe8]
movsxd r9, dword [rsp + 0xe8]
xor r12d, r12d
mov r8, qword [rsi + 0x48]
not edx
add edx, ecx
lea rax, [r8 + r9*8]
add rdx, r9
lea rcx, [r8 + rdx*8 + 8]
nop dword [rax]
mov rdx, qword [rax]
cmp rbx, qword [rdx]
sete dl
add rax, 8
movzx edx, dl
add r12d, edx
cmp rcx, rax
jne 0x4a7dc8
mov eax, dword [rbx + 4]
mov dword [rsp + 0x7c], 0
test ah, 0x10
je 0x4a7f70
mov rdx, qword [rbx + 0x20]
mov rdx, qword [rdx + 0x20]
cmp dword [rdx], 1
je 0x4a7f70
mov edi, dword [rbx + 0x2c]
test edi, edi
je 0x4a8280
test eax, 0x2000000
je 0x4a8280
mov rcx, qword [rbx + 0x10]
movzx edx, byte [rcx]
cmp dl, 0xb0
jne 0x4a7e2b
movzx edx, byte [rcx + 2]
cmp dl, 0xb1
je 0x4a87e5
mov eax, 1
cmp dl, 0x8a
jne 0x4a7e48
mov rax, qword [rcx + 0x20]
mov rax, qword [rax + 0x20]
mov eax, dword [rax]
cmp eax, r12d
cmovl eax, r12d
movsxd rdx, eax
mov rax, qword [rsp + 0xd0]
shl rdx, 2
mov rcx, qword [rax]
call fcn.0042dc60
mov rcx, qword [rsp + 0xd0]
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x30], rax
mov rdi, rax
lea rax, [rsp + 0x7c]
mov r8d, 4
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.00496e60
mov r8d, dword [rsp + 0x7c]
mov dword [rsp + 0x38], eax
jmp 0x4a7fae
mov rax, qword [rsi + 0x20]
test rax, rax
je 0x4a7d4d
movsxd rdx, dword [rsp + 0xe8]
mov rax, qword [rax + 0x38]
cmp byte [rax + rdx], 0
je 0x4a7d4d
mov r12d, dword [rsp + 0xf0]
xor eax, eax
test r12d, r12d
sete al
mov dword [rsp + 0xf0], eax
jmp 0x4a7d4d
mov rdx, qword [rbx + 0x18]
mov r8d, dword [rsp + 0xf8]
call fcn.00498e60
mov r12d, eax
mov rax, qword [r14 + 0x60]
test byte [rax + 0x3a], 0x20
je 0x4a7f1c
mov rax, qword [rsp + 0xd8]
test byte [rax + 0x15], 8
jne 0x4a7f30
mov r8, qword [rsp + 0xd8]
lea rdx, [r14 + 0x68]
mov rcx, r14
call fcn.0040e0f0
mov eax, r12d
add rsp, 0x88
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r8, qword [rsp + 0xd8]
lea rdx, [r14 + 0x68]
mov rcx, r14
call fcn.0040e0f0
mov r12d, dword [rsp + 0xf8]
jmp 0x4a7f30
lea rax, [rsp + 0x7c]
mov r8d, 4
xor r9d, r9d
mov rdx, rbx
mov qword [rsp + 0x28], rax
mov rcx, qword [rsp + 0xd0]
mov qword [rsp + 0x20], 0
call fcn.00496e60
mov r8d, dword [rsp + 0x7c]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x38], eax
cmp dword [rsp + 0x38], 4
jne 0x4a7fcc
mov r10d, dword [rsp + 0xf0]
xor eax, eax
test r10d, r10d
sete al
mov dword [rsp + 0xf0], eax
cmp dword [rsp + 0xf0], 1
movsxd rax, dword [r15 + 0x90]
sbb ecx, ecx
and ecx, 4
add ecx, 0x20
cmp dword [rsp + 0xf0], 1
sbb edx, edx
and edx, 4
add edx, 0x20
cmp eax, dword [r15 + 0x94]
jge 0x4a8590
lea edx, [rax + 1]
xor r9d, r9d
mov dword [r15 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r15 + 0x88]
lea rax, [rax + rdx*8]
mov byte [rax], cl
mov word [rax + 2], r9w
mov dword [rax + 4], r8d
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov byte [rax + 1], 0
movsxd rdi, dword [r14 + 0x50]
or dword [rsi + 0x38], 0x800
test edi, edi
jne 0x4a806f
mov rax, qword [rsp + 0xd0]
mov rdi, qword [rsp + 0xd0]
mov eax, dword [rax + 0x44]
mov dword [rsp + 0x40], eax
sub eax, 1
mov dword [rdi + 0x44], eax
movsxd rdi, dword [r14 + 0x50]
mov dword [r14 + 0x10], eax
mov ecx, dword [rsp + 0xe8]
test ecx, ecx
jle 0x4a808c
mov eax, dword [rsi + 0x38]
test eax, 0x100000
jne 0x4a808c
or eax, 0x40000
mov dword [rsi + 0x38], eax
mov rax, qword [rsp + 0xd8]
add r12d, edi
mov dword [r14 + 0x50], r12d
movsxd r12, r12d
mov rax, qword [rax + 8]
lea rbp, [r12 + r12*4]
mov r12, qword [r14 + 0x58]
shl rbp, 2
mov r13, qword [rax]
lea rdx, [rbp + 0x10]
mov rax, qword [r13]
mov rcx, qword [rax]
call fcn.0042cd60
test rax, rax
je 0x4a8560
mov rdx, qword [r13 + 0x60]
lea rcx, [rax + 0x10]
mov qword [rax + 8], rbp
mov qword [rax], rdx
mov qword [r13 + 0x60], rax
test r12, r12
je 0x4a80f2
mov r8, qword [r12 - 8]
mov rdx, r12
call sub.msvcrt.dll_memcpy
mov rcx, rax
lea rax, [rdi + rdi*4]
mov qword [r14 + 0x58], rcx
movzx edx, word [rsi + 0x3c]
lea r12, [rcx + rax*4]
cmp dword [rsp + 0xe8], edx
jge 0x4a8237
cmp dword [rsp + 0xf0], 1
mov edi, dword [rsp + 0xe8]
mov qword [rsp + 0xe0], r14
mov r14, r15
sbb eax, eax
movsxd rbp, dword [rsp + 0xe8]
xor r13d, r13d
not eax
add eax, 0x27
shl rbp, 3
mov byte [rsp + 0x48], al
mov eax, dword [rsp + 0xf8]
sub eax, edi
mov dword [rsp + 0x40], eax
jmp 0x4a8167
add edi, 1
add rbp, 8
cmp edx, edi
jle 0x4a822c
mov rax, qword [rsi + 0x48]
mov rax, qword [rax + rbp]
cmp qword [rax], rbx
jne 0x4a8158
mov eax, dword [rsp + 0x40]
cmp dword [rsp + 0x38], 1
mov r8d, dword [rsp + 0x7c]
lea r15d, [rax + rdi]
je 0x4a8510
mov rcx, qword [rsp + 0x30]
xor r9d, r9d
test rcx, rcx
je 0x4a81a4
movsxd rax, r13d
add r13d, 1
mov r9d, dword [rcx + rax*4]
mov dword [rsp + 0x20], r15d
mov edx, 0x5e
mov rcx, r14
call fcn.0043e0f0
mov dword [r12 + 4], eax
movsxd rax, dword [r14 + 0x90]
cmp eax, dword [r14 + 0x94]
jge 0x4a8539
lea edx, [rax + 1]
mov dword [r14 + 0x90], edx
lea rdx, [rax + rax*2]
mov rax, qword [r14 + 0x88]
lea rax, [rax + rdx*8]
mov dword [rax + 4], r15d
mov qword [rax + 8], 0
mov qword [rax + 0x10], 0
mov dword [rax], 0x32
cmp dword [rsp + 0xe8], edi
je 0x4a84a0
mov byte [r12 + 0x10], 0xb8
movzx edx, word [rsi + 0x3c]
add edi, 1
add r12, 0x14
add rbp, 8
cmp edx, edi
jg 0x4a8167
mov r15, r14
mov r14, qword [rsp + 0xe0]
mov edx, dword [rsp + 0xe8]
test edx, edx
jle 0x4a824f
test dword [rsi + 0x38], 0x100400
je 0x4a86d5
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x4a826c
mov rdx, rax
mov rax, qword [rsp + 0xd0]
mov rcx, qword [rax]
call fcn.004235b0
mov r12d, dword [rsp + 0xf8]
jmp 0x4a7f04
mov rax, qword [rsp + 0xd0]
mov rdx, rbx
mov rdi, qword [rax]
mov rcx, rdi
mov qword [rsp + 0x40], rdi
call fcn.00436990
cmp byte [rdi + 0x67], 0
mov qword [rsp + 0x30], rax
jne 0x4a85a8
mov rdi, qword [rax + 0x20]
test rdi, rdi
je 0x4a8778
movsxd rax, dword [rsp + 0xe8]
mov qword [rsp + 0x60], r15
mov r15, rdi
xor r10d, r10d
mov dword [rsp + 0x6c], r12d
mov r11, qword [r15 + 0x20]
shl rax, 3
mov qword [rsp + 0xe0], r14
mov qword [rsp + 0x48], rax
mov rax, rdi
cmp r15, rax
je 0x4a848c
movzx edx, word [rsi + 0x3c]
cmp dword [rsp + 0xe8], edx
jge 0x4a8740
mov qword [rsp + 0x38], r15
mov rbp, qword [rsp + 0x48]
xor r14d, r14d
xor r13d, r13d
mov edi, dword [rsp + 0xe8]
mov r12, r10
mov r15, r11
jmp 0x4a832f
add edi, 1
add rbp, 8
cmp edi, edx
jge 0x4a8400
mov rax, qword [rsi + 0x48]
mov rax, qword [rax + rbp]
cmp rbx, qword [rax]
jne 0x4a8320
movsxd r10, dword [rax + 0x24]
shl r10, 5
lea r11, [r15 + r10]
mov r8, qword [r11 - 0x18]
test r8, r8
je 0x4a8320
test r13, r13
je 0x4a8678
movsxd rax, dword [r13]
cmp eax, dword [r13 + 4]
jge 0x4a8610
lea edx, [rax + 1]
shl rax, 5
add rax, r13
mov dword [r13], edx
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0
mov qword [rax + 0x20], 0
mov qword [rax + 8], r8
mov qword [r11 - 0x18], 0
test r12, r12
je 0x4a83ed
add r10, r12
mov r8, qword [r10 - 0x18]
test r14, r14
je 0x4a8753
movsxd rax, dword [r14]
cmp eax, dword [r14 + 4]
jge 0x4a86b0
lea edx, [rax + 1]
shl rax, 5
add rax, r14
mov dword [r14], edx
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0
mov qword [rax + 0x20], 0
mov qword [rax + 8], r8
mov qword [r10 - 0x18], 0
movzx edx, word [rsi + 0x3c]
add edi, 1
add rbp, 8
cmp edi, edx
jl 0x4a832f
mov r11, r15
mov r15, qword [rsp + 0x38]
mov r10, r12
test r11, r11
je 0x4a8427
mov rcx, qword [rsp + 0x40]
mov rdx, r11
mov qword [rsp + 0x38], r10
call fcn.00425030
mov r10, qword [rsp + 0x38]
test r10, r10
je 0x4a8446
mov rcx, qword [rsp + 0x40]
mov rdx, r10
call fcn.00425030
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x10]
mov qword [rax + 0x20], r14
mov qword [r15 + 0x20], r13
test r14, r14
je 0x4a8459
cmp dword [r14], 1
je 0x4a8640
mov rdx, qword [r15 + 0x48]
test rdx, rdx
jne 0x4a85d0
mov r15, qword [r15 + 0x50]
test r15, r15
je 0x4a86f9
mov rax, qword [rsp + 0x30]
mov r11, qword [r15 + 0x20]
xor r10d, r10d
mov rax, qword [rax + 0x20]
cmp r15, rax
jne 0x4a82f0
mov rax, qword [rsp + 0x30]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x20]
jmp 0x4a82f0
mov eax, dword [rsp + 0x7c]
mov dword [r12], eax
movzx eax, byte [rsp + 0x48]
mov byte [r12 + 0x10], al
mov eax, dword [rsp + 0xe8]
test eax, eax
jle 0x4a8578
mov eax, dword [rsp + 0xf8]
sub eax, dword [rsp + 0xe8]
mov dword [r12 + 8], eax
mov eax, dword [rsp + 0xe8]
mov dword [r12 + 0xc], eax
jmp 0x4a8215
mov r9d, dword [rsp + 0xf8]
xor r8d, r8d
mov edx, 0x4b
mov rcx, r15
call fcn.0043e160
mov r12d, dword [rsp + 0xf8]
jmp 0x4a7f04
mov r9d, r15d
mov edx, 0x87
mov rcx, r14
call fcn.0043e160
mov dword [r12 + 4], eax
movsxd rax, dword [r14 + 0x90]
cmp eax, dword [r14 + 0x94]
jl 0x4a81cf
xor r9d, r9d
mov r8d, r15d
mov edx, 0x32
mov rcx, r14
mov dword [rsp + 0x20], 0
call fcn.0043df10
jmp 0x4a8202
mov qword [r14 + 0x58], 0
mov dword [r14 + 0x50], 0
jmp 0x4a824f
mov dword [r12 + 0xc], 0
jmp 0x4a8215
mov dword [rsp + 0x20], 0
xor r9d, r9d
mov rcx, r15
call fcn.0043df10
jmp 0x4a803b
cmp qword [rsp + 0x30], 0
jne 0x4a8716
mov dword [rsp + 0x38], 5
mov r8d, dword [rsp + 0x7c]
jmp 0x4a7fcc
mov ecx, dword [rdx]
test ecx, ecx
jle 0x4a8466
sub ecx, 1
lea rax, [rdx + 0x20]
shl rcx, 5
lea rdx, [rdx + rcx + 0x40]
nop word [rax + rax]
xor r11d, r11d
add rax, 0x20
mov word [rax - 0x20], r11w
cmp rdx, rax
jne 0x4a85f0
jmp 0x4a8466
mov rax, qword [rsp + 0xd0]
mov rdx, r13
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r11
mov rcx, qword [rax]
call fcn.0043ac40
mov r11, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov r13, rax
jmp 0x4a8392
mov rax, qword [rsp + 0x30]
mov rdi, qword [r14 + 8]
mov qword [r14 + 8], 0
mov rdx, qword [rax + 0x10]
test rdx, rdx
je 0x4a8664
mov rcx, qword [rsp + 0x40]
call fcn.00424ea0
mov rax, qword [rsp + 0x30]
mov qword [rax + 0x10], rdi
jmp 0x4a8459
mov rax, qword [rsp + 0xd0]
mov rdx, r8
mov qword [rsp + 0x58], r10
mov qword [rsp + 0x50], r11
mov rcx, qword [rax]
call fcn.00438af0
mov r11, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
mov r13, rax
jmp 0x4a8392
mov rax, qword [rsp + 0xd0]
mov rdx, r14
mov qword [rsp + 0x50], r10
mov rcx, qword [rax]
call fcn.0043ac40
mov r10, qword [rsp + 0x50]
mov r14, rax
jmp 0x4a83e5
mov eax, dword [rsp + 0xe8]
xor r9d, r9d
mov edx, 0x7d
mov rcx, r15
mov dword [rsp + 0x20], eax
mov r8d, dword [r14 + 8]
call fcn.0043e0f0
jmp 0x4a824f
mov rax, qword [rsp + 0x40]
mov r15, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x6c]
mov r14, qword [rsp + 0xe0]
cmp byte [rax + 0x67], 0
je 0x4a8778
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
call fcn.00424ea0
mov dword [rsp + 0x38], 5
mov r8d, dword [rsp + 0x7c]
mov qword [rsp + 0x30], 0
jmp 0x4a7fcc
xor r14d, r14d
xor r13d, r13d
jmp 0x4a840b
xor r12d, r12d
jmp 0x4a7de0
mov rax, qword [rsp + 0xd0]
mov rdx, r8
mov qword [rsp + 0x50], r10
mov rcx, qword [rax]
call fcn.00438af0
mov r10, qword [rsp + 0x50]
mov r14, rax
jmp 0x4a83e5
mov rax, qword [rsp + 0xd0]
movsxd rdx, r12d
shl rdx, 2
mov rcx, qword [rax]
call fcn.0042dc60
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0xd0]
xor r9d, r9d
mov rdi, rax
lea rax, [rsp + 0x7c]
mov r8d, 4
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rdi
call fcn.00496e60
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x40]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0x7c]
mov dword [rbx + 0x2c], eax
call fcn.00424ea0
mov qword [rsp + 0x30], rdi
mov r8d, dword [rsp + 0x7c]
jmp 0x4a7fae
mov rax, qword [rcx + 0x20]
mov eax, dword [rax]
jmp 0x4a7e48