Function at 0x299ee6c50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x108
mov rax, qword [rdx + 8]
mov rdi, qword [rdx]
mov qword [rsp + 0x40], rax
mov rsi, rcx
mov rcx, qword [0x299f4c780]
mov qword [rsp + 0xa0], 0
lea r13, [rsp + 0xc0]
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], 0
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0xb8], 0
mov dword [rsp + 0x9c], 0
call sub.libgcc_s_seh_1.dll___emutls_get_address
cmp byte [rax], 0
mov rbx, rax
jne 0x299ee6fb0
mov rax, qword [rsi]
lea rdx, [rsp + 0xa8]
mov rcx, rsi
call qword [rax + 0x18]
cmp byte [rbx], 0
mov r12d, eax
jne 0x299ee6fb0
lea rcx, [0x299f259c0]
call sub.libgcc_s_seh_1.dll___emutls_get_address
test r12d, r12d
mov rbp, rax
mov dword [rax], r12d
jne 0x299ee6ff0
mov rdx, qword [rsp + 0xa8]
movzx r15d, byte [rbx]
movzx r14d, word [rdx + 0x32]
test r14, r14
je 0x299ee6dc8
lea rax, [rsp + 0xb0]
xor r12d, r12d
mov qword [rsp + 0x38], rax
test r15b, r15b
jne 0x299ee6dc0
mov rax, qword [rsi]
mov edx, r12d
mov rcx, rsi
mov r8, qword [rsp + 0x38]
call qword [rax + 0x30]
movzx r15d, byte [rbx]
test r15b, r15b
jne 0x299ee6dc0
test eax, eax
mov dword [rbp], eax
jne 0x299ee6fd0
mov rdx, qword [rsp + 0xb0]
cmp dword [rdx + 0x3c], 2
je 0x299ee6f60
movzx r15d, byte [rbx]
mov byte [rbx], 0
mov rcx, rsi
mov rax, qword [rsi]
call qword [rax + 0xa8]
cmp byte [rbx], 0
jne 0x299ee7037
test r15b, r15b
mov byte [rbx], r15b
jne 0x299ee7037
add r12, 1
cmp r14, r12
jne 0x299ee6d58
mov rdx, qword [rsp + 0xa8]
mov byte [rbx], 0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x98]
cmp byte [rbx], 0
jne 0x299ee6fb0
mov byte [rbx], 0
mov rcx, r13
call fcn.299ee4840
cmp byte [rbx], 0
jne 0x299ee6f42
test r15b, r15b
mov byte [rbx], r15b
jne 0x299ee6f42
lea r13, [rsp + 0x80]
lea rdx, [rdi + 0x14]
mov rcx, r13
call fcn.299e89a40
mov rsi, qword [rsp + 0x80]
movabs rcx, 0x746e6174736e6f63
mov r12, qword [rsp + 0x88]
mov r14, rsi
lea rax, [rsi + r12 + 8]
add r14, 0x14
mov qword [rax], rcx
movabs rcx, 0x756f6620746f6e20
mov qword [rax + 8], rcx
movabs rcx, 0x203a646e756f66
mov qword [rax + 0xd], rcx
jo 0x299ee7240
test rdi, rdi
jle 0x299ee7011
mov rcx, rdi
add rcx, 1
jo 0x299ee7230
test rcx, rcx
js 0x299ee7000
mov rdx, qword [rsp + 0x40]
lea rax, [r14 + r12 + 8]
mov r8, rcx
mov rcx, rax
add rdx, 8
call sub.msvcrt.dll_memcpy
add rdi, r14
jo 0x299ee7230
mov edx, 8
mov ecx, 0x48
mov r14d, dword [rbp]
call fcn.299e89bd0
lea rbp, [0x299f32c0e]
mov rcx, r13
lea rdx, [rsp + 0x50]
mov rsi, rax
lea rax, [0x299f25a40]
mov qword [rsi + 0x10], rbp
mov qword [rsi], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], r12
call fcn.299e8c860
mov rax, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x80]
mov qword [rsi + 8], 0
mov dword [rsi + 0x40], r14d
mov qword [rsi + 0x20], rax
mov qword [rsi + 0x18], rdx
cmp byte [rbx], 0
jne 0x299ee6f2d
mov qword [rsp + 0x20], 0x389
lea r9, [0x299f32bfb]
mov rdx, rbp
mov rcx, rsi
lea r8, str.getValue
call fcn.299e8b270
test r12, r12
je 0x299ee6f42
test byte [r12 + 7], 0x40
jne 0x299ee6f42
mov rcx, r12
call fcn.299e886a0
mov rax, qword [rsp + 0xa0]
add rsp, 0x108
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rcx, [rsp + 0x9c]
mov rax, qword [rsi]
mov r9d, 1
mov edx, dword [rdx]
lea r8, [rsp + 0xb8]
mov qword [rsp + 0x20], rcx
mov rcx, rsi
call qword [rax + 0x38]
cmp byte [rbx], 0
jne 0x299ee7020
test eax, eax
mov dword [rbp], eax
je 0x299ee7050
mov rdx, qword [rsp + 0xb0]
jmp 0x299ee6d8f
mov byte [rbx], 0
mov rcx, r13
call fcn.299ee4840
cmp byte [rbx], 0
jne 0x299ee6f42
mov byte [rbx], 1
jmp 0x299ee6f42
add r12, 1
movzx r15d, byte [rbx]
cmp r12, r14
jne 0x299ee6d53
jmp 0x299ee6dc0
movzx r15d, byte [rbx]
jmp 0x299ee6de0
movabs r8, 0x7fffffffffffffff
xor edx, edx
call fcn.299e88fc0
mov rdi, r14
jmp 0x299ee6ea0
mov byte [rbx], 0
mov rax, qword [rsi]
mov rcx, rsi
mov rdx, qword [rsp + 0xb0]
call qword [rax + 0xa8]
mov rdx, qword [rsp + 0xa8]
mov r15d, 1
jmp 0x299ee6dc8
mov r15, qword [rsp + 0xb8]
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0xf0], 0
mov rcx, r15
call fcn.299ec9840
cmp byte [rbx], 0
mov qword [rsp + 0x48], rax
jne 0x299ee7218
mov rax, qword [0x299f4c120]
mov rcx, r15
call qword [rax]
test eax, eax
js 0x299ee7250
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x80]
movsxd r8, eax
call fcn.299ec9680
mov rdx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x88]
cmp byte [rbx], 0
jne 0x299ee7218
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xb0]
lea r15, [rsp + 0x60]
mov qword [rsp + 0xe0], rdx
mov rcx, r15
mov rax, qword [rax + 0x10]
mov rdx, qword [rax]
mov qword [rsp + 0x60], rdx
mov rdx, qword [rax + 8]
mov qword [rsp + 0x68], rdx
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x70], rax
call fcn.299ee6ae0
cmp byte [rbx], 0
jne 0x299ee7218
mov rcx, qword [rsp + 0xe0]
mov rdx, r15
mov qword [rsp + 0x70], rax
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x60], rcx
mov rcx, qword [rsp + 0xe8]
mov qword [rsp + 0x68], rcx
mov rcx, r13
call fcn.299ee6960
cmp byte [rbx], 0
jne 0x299ee7218
cmp qword [rsp + 0xc0], rdi
mov rax, qword [rsp + 0xc8]
jne 0x299ee7218
test rdi, rdi
je 0x299ee7193
mov rcx, qword [rsp + 0x40]
mov r8, rdi
lea rdx, [rcx + 8]
lea rcx, [rax + 8]
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x299ee7218
mov rdx, qword [rsp + 0xd0]
lea rcx, [rsp + 0xa0]
call fcn.299ee25e0
cmp byte [rbx], 0
jne 0x299ee7218
mov rax, qword [0x299f4c460]
mov qword [rsp + 0xd0], 0
mov rcx, qword [rsp + 0xb8]
call qword [rax]
mov rax, qword [rsi]
mov rcx, rsi
mov rdx, qword [rsp + 0xb0]
call qword [rax + 0xa8]
movzx r15d, byte [rbx]
test r15b, r15b
jne 0x299ee6dc0
mov rax, qword [rsi]
mov rcx, rsi
mov rdx, qword [rsp + 0xa8]
call qword [rax + 0x98]
cmp byte [rbx], 0
jne 0x299ee6fb0
mov rcx, r13
call fcn.299ee4840
jmp 0x299ee6f42
mov rax, qword [0x299f4c460]
mov rcx, qword [rsp + 0xb8]
call qword [rax]
jmp 0x299ee6f9a
call fcn.299e88960
jmp 0x299ee7011
call fcn.299e88960
mov r14, rsi
jmp 0x299ee6e5f
movabs r8, 0x7fffffffffffffff
movsxd rcx, eax
xor edx, edx
call fcn.299e88fc0
xor eax, eax
xor edx, edx
jmp 0x299ee70cb