Function at 0x18004cdb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x180097040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r11d, ecx
mov dword [rsp + 0x2c], ecx
mov r15, qword [0x18009a2e8]
test ecx, ecx
je 0x18004ce88
mov r8, qword [r15 + 0x5538]
movsxd rdx, dword [r15 + 0x5530]
mov r9, rdx
shl r9, 4
add r9, r8
test rdx, rdx
je 0x18004ce41
nop
mov rcx, rdx
shr rcx, 1
mov rax, rcx
add rax, rax
cmp dword [r8 + rax*8], r11d
jae 0x18004ce39
lea r8, [r8 + rax*8]
add r8, 0x10
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x18004ce3c
mov rdx, rcx
test rdx, rdx
jne 0x18004ce10
xor edi, edi
cmp r8, r9
je 0x18004ce53
cmp dword [r8], r11d
jne 0x18004ce53
mov rbx, qword [r8 + 8]
jmp 0x18004ce56
mov rbx, rdi
mov qword [rsp + 0x30], rbx
test rbx, rbx
je 0x18004d25a
xor dl, dl
mov eax, dword [rbx + 0xc4]
shl eax, 0x1d
sar eax, 0x1d
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xc4]
shl eax, 0x1a
sar eax, 0x1d
mov dword [rsp + 0x24], eax
jmp 0x18004ce9b
xor edi, edi
mov ebx, edi
mov qword [rsp + 0x30], rbx
xor dl, dl
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x20], edx
mov ebp, edi
mov dword [rsp + 0x3c], edi
mov esi, edi
mov dword [rsp + 0x38], esi
mov r10, rdi
mov qword [rsp + 0x40], rdi
mov r12d, edi
cmp dword [r15 + 0x5530], 0
jle 0x18004d045
mov r13, rdi
mov r8d, 1
nop dword [rax]
mov rax, qword [r15 + 0x5538]
mov r14, qword [rax + r13 + 8]
test r14, r14
je 0x18004d02d
test r11d, r11d
je 0x18004cf15
cmp dword [r14], r11d
je 0x18004d02d
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x18004d02d
lea rcx, [rax]
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x18004cf00
cmp dword [rcx], r11d
jne 0x18004d02d
mov eax, dword [r14 + 0x10]
shr eax, 0xb
test al, 1
movzx edx, dl
cmovne edx, r8d
mov dword [rsp + 0x20], edx
test r11d, r11d
je 0x18004cf60
mov edx, edi
cmp dword [r15 + 0x5540], 0
jle 0x18004cf60
mov rcx, rdi
nop dword [rax]
mov rax, qword [r15 + 0x5548]
cmp qword [rcx + rax + 0x10], r14
jne 0x18004cf51
mov dword [rcx + rax], edi
inc edx
add rcx, 0x40
cmp edx, dword [r15 + 0x5540]
jl 0x18004cf40
test rbx, rbx
je 0x18004cf7f
mov rdx, r14
mov rcx, rbx
call fcn.180047840
mov edx, dword [rbx]
mov ecx, dword [r14]
call fcn.18004de60
mov r10, qword [rsp + 0x40]
cmp esi, ebp
jne 0x18004d015
lea ebx, [rsi + 1]
test ebp, ebp
je 0x18004cf99
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
jmp 0x18004cf9e
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ebp
jle 0x18004d010
mov rax, qword [0x18009a2e8]
test rax, rax
je 0x18004cfb9
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x18004d002
movsxd r8, esi
shl r8, 3
mov rdx, rax
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x18009a2e8]
test rdx, rdx
je 0x18004cff7
dec dword [rdx + 0xf4]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, rbp
mov qword [rsp + 0x40], rbp
mov ebp, ebx
mov dword [rsp + 0x3c], ebx
mov rbx, qword [rsp + 0x30]
movsxd rax, esi
mov qword [r10 + rax*8], r14
inc esi
mov dword [rsp + 0x38], esi
mov r11d, dword [rsp + 0x2c]
mov r8d, 1
inc r12d
add r13, 0x10
cmp r12d, dword [r15 + 0x5530]
mov edx, dword [rsp + 0x20]
jl 0x18004ced0
test rbx, rbx
je 0x18004d075
mov ecx, dword [rsp + 0x24]
lea ecx, [rcx*8]
mov edx, dword [rsp + 0x28]
xor edx, dword [rbx + 0xc4]
and edx, 0xffffffc0
mov eax, ecx
xor eax, dword [rsp + 0x28]
and eax, 0xffffffc7
xor edx, eax
xor edx, ecx
mov dword [rbx + 0xc4], edx
mov rcx, qword [r15 + 0x5598]
lea rax, [rcx + 4]
mov r9, rdi
test rcx, rcx
cmovne r9, rax
test r9, r9
je 0x18004d0e5
nop
mov r8d, dword [r9 + 0x14]
test r8d, r8d
je 0x18004d0ba
mov edx, edi
test esi, esi
jle 0x18004d0ba
mov rcx, r10
mov rax, qword [rcx]
cmp dword [rax], r8d
je 0x18004d0b6
inc edx
add rcx, 8
cmp edx, esi
jl 0x18004d0a2
jmp 0x18004d0ba
mov dword [r9 + 0x14], r11d
movsxd r8, dword [r9 - 4]
add r8, r9
movsxd rcx, dword [r15 + 0x5590]
mov rdx, qword [r15 + 0x5598]
add rdx, 4
add rdx, rcx
mov r9, rdi
cmp r8, rdx
cmovne r9, r8
test r9, r9
jne 0x18004d090
cmp esi, 1
jle 0x18004d109
movsxd rdx, esi
cmp rdx, 1
jbe 0x18004d109
lea r9, [0x180045e40]
mov r8d, 8
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov r12, qword [rsp + 0x40]
test esi, esi
jle 0x18004d1a1
mov r14, r12
nop dword [rax]
mov rbx, qword [r14]
mov rax, qword [rbx + 0x88]
test rax, rax
je 0x18004d136
mov qword [rax + 0x428], rdi
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x18004d15e
mov eax, 0x20
cmp rax, 0x30
jge 0x18004d15e
cmp qword [rax + rdx], rbx
jne 0x18004d158
mov rcx, qword [rbx + 0x18]
mov qword [rax + rcx], rdi
add rax, 8
jmp 0x18004d144
xor r8d, r8d
mov edx, dword [rbx]
lea rcx, [r15 + 0x5530]
call fcn.18002d850
mov rcx, rbx
call fcn.180047120
mov rax, qword [0x18009a2e8]
test rax, rax
je 0x18004d189
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 8
sub rsi, 1
jne 0x18004d120
mov rbx, qword [rsp + 0x30]
cmp dword [rsp + 0x2c], 0
jne 0x18004d216
mov rcx, qword [r15 + 0x5538]
test rcx, rcx
je 0x18004d1de
mov qword [r15 + 0x5530], 0
mov rax, qword [0x18009a2e8]
test rax, rax
je 0x18004d1d1
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5538], rdi
mov rcx, qword [r15 + 0x5548]
test rcx, rcx
je 0x18004d239
mov qword [r15 + 0x5540], 0
mov rax, qword [0x18009a2e8]
test rax, rax
je 0x18004d207
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5548], rdi
jmp 0x18004d239
cmp byte [rsp + 0x20], 0
je 0x18004d239
mov qword [rbx + 0x98], rbx
mov ecx, dword [rbx + 8]
bts ecx, 0xb
mov dword [rbx + 8], ecx
mov eax, dword [rbx + 0xc]
or eax, dword [rbx + 4]
or eax, ecx
mov dword [rbx + 0x10], eax
test r12, r12
je 0x18004d25a
mov rax, qword [0x18009a2e8]
test rax, rax
je 0x18004d250
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.180077b20
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret