Function at 0x18004ce20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1800b4040]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov r11d, ecx
mov dword [rsp + 0x2c], ecx
mov r15, qword [0x1800b72e0]
test ecx, ecx
je 0x18004cef8
mov r8, qword [r15 + 0x5538]
movsxd rdx, dword [r15 + 0x5530]
mov r9, rdx
shl r9, 4
add r9, r8
test rdx, rdx
je 0x18004ceb1
nop
mov rcx, rdx
shr rcx, 1
mov rax, rcx
add rax, rax
cmp dword [r8 + rax*8], r11d
jae 0x18004cea9
lea r8, [r8 + rax*8]
add r8, 0x10
mov rax, 0xffffffffffffffff
sub rax, rcx
add rdx, rax
jmp 0x18004ceac
mov rdx, rcx
test rdx, rdx
jne 0x18004ce80
xor edi, edi
cmp r8, r9
je 0x18004cec3
cmp dword [r8], r11d
jne 0x18004cec3
mov rbx, qword [r8 + 8]
jmp 0x18004cec6
mov rbx, rdi
mov qword [rsp + 0x30], rbx
test rbx, rbx
je 0x18004d2ca
xor dl, dl
mov eax, dword [rbx + 0xc4]
shl eax, 0x1d
sar eax, 0x1d
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + 0xc4]
shl eax, 0x1a
sar eax, 0x1d
mov dword [rsp + 0x24], eax
jmp 0x18004cf0b
xor edi, edi
mov ebx, edi
mov qword [rsp + 0x30], rbx
xor dl, dl
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x24], edi
mov dword [rsp + 0x20], edx
mov ebp, edi
mov dword [rsp + 0x3c], edi
mov esi, edi
mov dword [rsp + 0x38], esi
mov r10, rdi
mov qword [rsp + 0x40], rdi
mov r12d, edi
cmp dword [r15 + 0x5530], 0
jle 0x18004d0b5
mov r13, rdi
mov r8d, 1
nop dword [rax]
mov rax, qword [r15 + 0x5538]
mov r14, qword [rax + r13 + 8]
test r14, r14
je 0x18004d09d
test r11d, r11d
je 0x18004cf85
cmp dword [r14], r11d
je 0x18004d09d
mov rax, qword [r14 + 0x18]
test rax, rax
je 0x18004d09d
lea rcx, [rax]
mov rax, qword [rax + 0x18]
test rax, rax
jne 0x18004cf70
cmp dword [rcx], r11d
jne 0x18004d09d
mov eax, dword [r14 + 0x10]
shr eax, 0xb
test al, 1
movzx edx, dl
cmovne edx, r8d
mov dword [rsp + 0x20], edx
test r11d, r11d
je 0x18004cfd0
mov edx, edi
cmp dword [r15 + 0x5540], 0
jle 0x18004cfd0
mov rcx, rdi
nop dword [rax]
mov rax, qword [r15 + 0x5548]
cmp qword [rcx + rax + 0x10], r14
jne 0x18004cfc1
mov dword [rcx + rax], edi
inc edx
add rcx, 0x40
cmp edx, dword [r15 + 0x5540]
jl 0x18004cfb0
test rbx, rbx
je 0x18004cfef
mov rdx, r14
mov rcx, rbx
call fcn.1800478b0
mov edx, dword [rbx]
mov ecx, dword [r14]
call fcn.18004ded0
mov r10, qword [rsp + 0x40]
cmp esi, ebp
jne 0x18004d085
lea ebx, [rsi + 1]
test ebp, ebp
je 0x18004d009
mov eax, ebp
cdq
sub eax, edx
sar eax, 1
add eax, ebp
jmp 0x18004d00e
mov eax, 8
cmp eax, ebx
cmovg ebx, eax
cmp ebx, ebp
jle 0x18004d080
mov rax, qword [0x1800b72e0]
test rax, rax
je 0x18004d029
inc dword [rax + 0xf4]
movsxd rcx, ebx
shl rcx, 3
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rbp, rax
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x18004d072
movsxd r8, esi
shl r8, 3
mov rdx, rax
mov rcx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [0x1800b72e0]
test rdx, rdx
je 0x18004d067
dec dword [rdx + 0xf4]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov r10, rbp
mov qword [rsp + 0x40], rbp
mov ebp, ebx
mov dword [rsp + 0x3c], ebx
mov rbx, qword [rsp + 0x30]
movsxd rax, esi
mov qword [r10 + rax*8], r14
inc esi
mov dword [rsp + 0x38], esi
mov r11d, dword [rsp + 0x2c]
mov r8d, 1
inc r12d
add r13, 0x10
cmp r12d, dword [r15 + 0x5530]
mov edx, dword [rsp + 0x20]
jl 0x18004cf40
test rbx, rbx
je 0x18004d0e5
mov ecx, dword [rsp + 0x24]
lea ecx, [rcx*8]
mov edx, dword [rsp + 0x28]
xor edx, dword [rbx + 0xc4]
and edx, 0xffffffc0
mov eax, ecx
xor eax, dword [rsp + 0x28]
and eax, 0xffffffc7
xor edx, eax
xor edx, ecx
mov dword [rbx + 0xc4], edx
mov rcx, qword [r15 + 0x5598]
lea rax, [rcx + 4]
mov r9, rdi
test rcx, rcx
cmovne r9, rax
test r9, r9
je 0x18004d155
nop
mov r8d, dword [r9 + 0x14]
test r8d, r8d
je 0x18004d12a
mov edx, edi
test esi, esi
jle 0x18004d12a
mov rcx, r10
mov rax, qword [rcx]
cmp dword [rax], r8d
je 0x18004d126
inc edx
add rcx, 8
cmp edx, esi
jl 0x18004d112
jmp 0x18004d12a
mov dword [r9 + 0x14], r11d
movsxd r8, dword [r9 - 4]
add r8, r9
movsxd rcx, dword [r15 + 0x5590]
mov rdx, qword [r15 + 0x5598]
add rdx, 4
add rdx, rcx
mov r9, rdi
cmp r8, rdx
cmovne r9, r8
test r9, r9
jne 0x18004d100
cmp esi, 1
jle 0x18004d179
movsxd rdx, esi
cmp rdx, 1
jbe 0x18004d179
lea r9, [0x180045eb0]
mov r8d, 8
mov rcx, r10
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_qsort]
mov r12, qword [rsp + 0x40]
test esi, esi
jle 0x18004d211
mov r14, r12
nop dword [rax]
mov rbx, qword [r14]
mov rax, qword [rbx + 0x88]
test rax, rax
je 0x18004d1a6
mov qword [rax + 0x428], rdi
mov rdx, qword [rbx + 0x18]
test rdx, rdx
je 0x18004d1ce
mov eax, 0x20
cmp rax, 0x30
jge 0x18004d1ce
cmp qword [rax + rdx], rbx
jne 0x18004d1c8
mov rcx, qword [rbx + 0x18]
mov qword [rax + rcx], rdi
add rax, 8
jmp 0x18004d1b4
xor r8d, r8d
mov edx, dword [rbx]
lea rcx, [r15 + 0x5530]
call fcn.18002d8c0
mov rcx, rbx
call fcn.180047190
mov rax, qword [0x1800b72e0]
test rax, rax
je 0x18004d1f9
dec dword [rax + 0xf4]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add r14, 8
sub rsi, 1
jne 0x18004d190
mov rbx, qword [rsp + 0x30]
cmp dword [rsp + 0x2c], 0
jne 0x18004d286
mov rcx, qword [r15 + 0x5538]
test rcx, rcx
je 0x18004d24e
mov qword [r15 + 0x5530], 0
mov rax, qword [0x1800b72e0]
test rax, rax
je 0x18004d241
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5538], rdi
mov rcx, qword [r15 + 0x5548]
test rcx, rcx
je 0x18004d2a9
mov qword [r15 + 0x5540], 0
mov rax, qword [0x1800b72e0]
test rax, rax
je 0x18004d277
dec dword [rax + 0xf4]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [r15 + 0x5548], rdi
jmp 0x18004d2a9
cmp byte [rsp + 0x20], 0
je 0x18004d2a9
mov qword [rbx + 0x98], rbx
mov ecx, dword [rbx + 8]
bts ecx, 0xb
mov dword [rbx + 8], ecx
mov eax, dword [rbx + 0xc]
or eax, dword [rbx + 4]
or eax, ecx
mov dword [rbx + 0x10], eax
test r12, r12
je 0x18004d2ca
mov rax, qword [0x1800b72e0]
test rax, rax
je 0x18004d2c0
dec dword [rax + 0xf4]
mov rcx, r12
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.180077b90
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret