Function at 0x18004c970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1800b3040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r11d, ecx
mov dword [rsp + 0x2c], ecx
mov r15, qword [0x1800b62d0]
test ecx, ecx
je 0x18004ca48
mov r8, qword [r15 + 0x5538]
movsxd rdx, dword [r15 + 0x5530]
mov r9, rdx
shl r9, 4
add r9, r8
test rdx, rdx
je 0x18004ca01
nop
mov rcx, rdx
shr rcx, 1
mov rax, rcx
add rax, rax
cmp dword [r8 + rax*8], r11d
jae 0x18004c9f9
lea r8, [r8 + rax*8]
add r8, 0x10
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x18004c9fc
mov rdx, rcx
test rdx, rdx
jne 0x18004c9d0
xor edi, edi
cmp r8, r9
je 0x18004ca13
cmp dword [r8], r11d
jne 0x18004ca13
mov rbx, qword [r8 + 8]
jmp 0x18004ca16
mov rbx, rdi
mov qword [rsp + 0x30], rbx
test rbx, rbx
je 0x18004ce1a
xor dl, dl
mov eax, dword [rbx + 0xc4]
shl eax, 0x1d
sar eax, 0x1d
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xc4]
shl eax, 0x1a
sar eax, 0x1d
mov dword [rsp + 0x24], eax
jmp 0x18004ca5b
xor edi, edi
mov ebx, edi
mov qword [rsp + 0x30], rbx
xor dl, dl
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x20], edx
mov ebp, edi
mov dword [rsp + 0x3c], edi
mov esi, edi
mov dword [rsp + 0x38], esi
mov r10, rdi
mov qword [rsp + 0x40], rdi
mov r12d, edi
cmp dword [r15 + 0x5530], 0
jle 0x18004cc05
mov r13, rdi
mov r8d, 1
nop dword [rax]
mov rax, qword [r15 + 0x5538]
mov r14, qword [rax + r13 + 8]
test r14, r14
je 0x18004cbed
test r11d, r11d
je 0x18004cad5
cmp dword [r14], r11d
je 0x18004cbed
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x18004cbed
lea rcx, [rax]
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x18004cac0
cmp dword [rcx], r11d
jne 0x18004cbed
mov eax, dword [r14 + 0x10]
shr eax, 0xb
test al, 1
movzx edx, dl
cmovne edx, r8d
mov dword [rsp + 0x20], edx
test r11d, r11d
je 0x18004cb20
mov edx, edi
cmp dword [r15 + 0x5540], 0
jle 0x18004cb20
mov rcx, rdi
nop dword [rax]
mov rax, qword [r15 + 0x5548]
cmp qword [rcx + rax + 0x10], r14
jne 0x18004cb11
mov dword [rcx + rax], edi
inc edx
add rcx, 0x40
cmp edx, dword [r15 + 0x5540]
jl 0x18004cb00
test rbx, rbx
je 0x18004cb3f
mov rdx, r14
mov rcx, rbx
call fcn.180047400
mov edx, dword [rbx]
mov ecx, dword [r14]
call fcn.18004da20
mov r10, qword [rsp + 0x40]
cmp esi, ebp
jne 0x18004cbd5
lea ebx, [rsi + 1]
test ebp, ebp
je 0x18004cb59
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
jmp 0x18004cb5e
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ebp
jle 0x18004cbd0
mov rax, qword [0x1800b62d0]
test rax, rax
je 0x18004cb79
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x18004cbc2
movsxd r8, esi
shl r8, 3
mov rdx, rax
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800b62d0]
test rdx, rdx
je 0x18004cbb7
dec dword [rdx + 0xf4]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, rbp
mov qword [rsp + 0x40], rbp
mov ebp, ebx
mov dword [rsp + 0x3c], ebx
mov rbx, qword [rsp + 0x30]
movsxd rax, esi
mov qword [r10 + rax*8], r14
inc esi
mov dword [rsp + 0x38], esi
mov r11d, dword [rsp + 0x2c]
mov r8d, 1
inc r12d
add r13, 0x10
cmp r12d, dword [r15 + 0x5530]
mov edx, dword [rsp + 0x20]
jl 0x18004ca90
test rbx, rbx
je 0x18004cc35
mov ecx, dword [rsp + 0x24]
lea ecx, [rcx*8]
mov edx, dword [rsp + 0x28]
xor edx, dword [rbx + 0xc4]
and edx, 0xffffffc0
mov eax, ecx
xor eax, dword [rsp + 0x28]
and eax, 0xffffffc7
xor edx, eax
xor edx, ecx
mov dword [rbx + 0xc4], edx
mov rcx, qword [r15 + 0x5598]
lea rax, [rcx + 4]
mov r9, rdi
test rcx, rcx
cmovne r9, rax
test r9, r9
je 0x18004cca5
nop
mov r8d, dword [r9 + 0x14]
test r8d, r8d
je 0x18004cc7a
mov edx, edi
test esi, esi
jle 0x18004cc7a
mov rcx, r10
mov rax, qword [rcx]
cmp dword [rax], r8d
je 0x18004cc76
inc edx
add rcx, 8
cmp edx, esi
jl 0x18004cc62
jmp 0x18004cc7a
mov dword [r9 + 0x14], r11d
movsxd r8, dword [r9 - 4]
add r8, r9
movsxd rcx, dword [r15 + 0x5590]
mov rdx, qword [r15 + 0x5598]
add rdx, 4
add rdx, rcx
mov r9, rdi
cmp r8, rdx
cmovne r9, r8
test r9, r9
jne 0x18004cc50
cmp esi, 1
jle 0x18004ccc9
movsxd rdx, esi
cmp rdx, 1
jbe 0x18004ccc9
lea r9, [0x180045a00]
mov r8d, 8
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov r12, qword [rsp + 0x40]
test esi, esi
jle 0x18004cd61
mov r14, r12
nop dword [rax]
mov rbx, qword [r14]
mov rax, qword [rbx + 0x88]
test rax, rax
je 0x18004ccf6
mov qword [rax + 0x428], rdi
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x18004cd1e
mov eax, 0x20
cmp rax, 0x30
jge 0x18004cd1e
cmp qword [rax + rdx], rbx
jne 0x18004cd18
mov rcx, qword [rbx + 0x18]
mov qword [rax + rcx], rdi
add rax, 8
jmp 0x18004cd04
xor r8d, r8d
mov edx, dword [rbx]
lea rcx, [r15 + 0x5530]
call fcn.18002d4a0
mov rcx, rbx
call fcn.180046ce0
mov rax, qword [0x1800b62d0]
test rax, rax
je 0x18004cd49
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 8
sub rsi, 1
jne 0x18004cce0
mov rbx, qword [rsp + 0x30]
cmp dword [rsp + 0x2c], 0
jne 0x18004cdd6
mov rcx, qword [r15 + 0x5538]
test rcx, rcx
je 0x18004cd9e
mov qword [r15 + 0x5530], 0
mov rax, qword [0x1800b62d0]
test rax, rax
je 0x18004cd91
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5538], rdi
mov rcx, qword [r15 + 0x5548]
test rcx, rcx
je 0x18004cdf9
mov qword [r15 + 0x5540], 0
mov rax, qword [0x1800b62d0]
test rax, rax
je 0x18004cdc7
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5548], rdi
jmp 0x18004cdf9
cmp byte [rsp + 0x20], 0
je 0x18004cdf9
mov qword [rbx + 0x98], rbx
mov ecx, dword [rbx + 8]
bts ecx, 0xb
mov dword [rbx + 8], ecx
mov eax, dword [rbx + 0xc]
or eax, dword [rbx + 4]
or eax, ecx
mov dword [rbx + 0x10], eax
test r12, r12
je 0x18004ce1a
mov rax, qword [0x1800b62d0]
test rax, rax
je 0x18004ce10
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.1800776d0
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret