Function at 0x1400ce7f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xa8
mov rbx, rdx
mov rsi, rcx
mov r11, qword [rsp + 0x150]
mov r10, qword [rsp + 0x148]
mov r12d, dword [rsp + 0x140]
movzx r13d, word [rsp + 0x138]
movzx r15d, word [rsp + 0x130]
mov rdx, qword [rsp + 0x128]
mov edi, dword [rsp + 0x120]
mov ebp, dword [rsp + 0x118]
mov ecx, dword [rsp + 0x110]
mov r14d, r9d
lea rax, [r14 + 1]
cmp rax, r12
mov dword [rsp + 0x8c], edi
mov dword [rsp + 0x88], ecx
mov qword [rsp + 0xa0], rdx
jne 0x1400ce89f
mov word [rsp + 0x3e], r15w
mov edi, ebp
mov ebp, r13d
mov r13, qword [rbx + 8]
mov r15, qword [rbx + 0x10]
test r12d, r12d
je 0x1400ce8d4
mov rax, r15
sub rax, r12
jbe 0x1400ce8f3
cmp byte [r13 + r12], 0xbf
jg 0x1400ce8f9
jmp 0x1400cef97
lea rax, [r14 + 3]
cmp rax, r12
jne 0x1400ceaac
mov dword [rsp + 0x54], ebp
mov rbp, r10
mov r10, r11
mov r11, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
test r9d, r9d
je 0x1400ce934
cmp rax, r14
jbe 0x1400ce92e
cmp byte [r11 + r14], 0xc0
jge 0x1400ce934
jmp 0x1400cef97
cmp r15, 2
jb 0x1400ce8eb
movzx eax, word [r13 + r12]
cmp eax, 0x2f2f
je 0x1400ce9f0
xor r12d, r12d
jmp 0x1400cea54
jne 0x1400cef97
cmp rax, 2
jb 0x1400cea54
movzx eax, word [r13 + r12]
cmp eax, 0x2f2f
jne 0x1400cea54
cmp r15, r12
jbe 0x1400ce9ea
cmp byte [r13 + r12], 0xbf
jg 0x1400ce9f0
jmp 0x1400cef97
jne 0x1400cef97
test r12d, r12d
je 0x1400ce950
cmp rax, r12
jbe 0x1400ce94a
cmp byte [r11 + r12], 0xbf
jg 0x1400ce950
jmp 0x1400cef97
jne 0x1400cef97
mov qword [rsp + 0x80], rax
mov rax, r12
sub rax, r14
cmp rax, 3
jne 0x1400ce97c
movzx eax, word [r11 + r14]
xor eax, 0x2f3a
movzx ecx, byte [r11 + r14 + 2]
xor ecx, 0x2e
or cx, ax
je 0x1400ce98b
mov r11, r10
mov r10, rbp
mov ebp, dword [rsp + 0x54]
jmp 0x1400ceaac
mov rax, qword [rsp + 0x80]
cmp rax, r12
jbe 0x1400cef97
mov rdx, r11
cmp byte [r11 + r12], 0x2f
jne 0x1400cef97
mov r11, r10
mov r10, rbp
lea rdi, [r12 + 1]
cmp rdi, rax
mov ebp, dword [rsp + 0x54]
jae 0x1400ce9c8
cmp byte [rdx + rdi], 0x2f
je 0x1400cef5c
test r9d, r9d
je 0x1400ceb9e
cmp rax, r14
jbe 0x1400ceb98
cmp byte [rdx + r14], 0xbf
jg 0x1400ceb9e
jmp 0x1400cef97
jne 0x1400cef97
mov qword [rsp + 0x68], r11
mov qword [rsp + 0x48], r10
mov byte [rsp + 0x3d], r8b
mov dword [rsp + 0x40], r9d
mov rax, qword [rbx]
sub rax, r15
cmp rax, 1
jbe 0x1400cec67
lea rdx, [r12 + r13]
lea rcx, [r12 + r13]
add rcx, 2
mov r8, r15
sub r8, r12
call sub.msvcrt.dll_memmove
mov word [r13 + r12], 0x2e2f
add r15, 2
mov qword [rbx + 0x10], r15
add r12d, 2
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x68]
test r9d, r9d
je 0x1400cea71
sub r15, r14
jbe 0x1400cea6b
cmp byte [r13 + r14], 0xbf
jg 0x1400cea71
jmp 0x1400cef97
jne 0x1400cef97
cmp r15, 3
jae 0x1400cea84
mov r13d, ebp
mov ebp, edi
movzx r15d, word [rsp + 0x3e]
jmp 0x1400ceaac
movzx eax, word [r13 + r14]
xor eax, 0x2f3a
movzx ecx, byte [r13 + r14 + 2]
xor ecx, 0x2f
or cx, ax
mov r13d, ebp
mov ebp, edi
movzx r15d, word [rsp + 0x3e]
je 0x1400cef97
mov qword [rsp + 0x28], r11
mov qword [rsp + 0x20], r10
lea rcx, [rsp + 0x90]
mov rdx, rbx
mov edi, r9d
call fcn.1400d17e0
mov eax, dword [rsp + 0x90]
cmp eax, 2
jne 0x1400ceb1c
movzx eax, byte [rsp + 0x94]
mov byte [rsi + 8], al
movabs rax, 0x8000000000000000
mov qword [rsi], rax
cmp qword [rbx], 0
je 0x1400ceb84
mov r8, qword [rbx + 8]
mov rcx, qword [0x14024a138]
xor edx, edx
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sub.KERNEL32.dll_HeapFree
mov ecx, dword [rsp + 0x9c]
mov rdx, qword [rsp + 0x94]
mov r8, qword [rbx + 0x10]
mov qword [rsi + 0x10], r8
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
mov r8, qword [rsp + 0xa0]
movups xmm0, xmmword [r8]
movups xmmword [rsi + 0x40], xmm0
movzx r8d, byte [r8 + 0x10]
mov byte [rsi + 0x50], r8b
mov dword [rsi + 0x18], eax
mov qword [rsi + 0x1c], rdx
mov dword [rsi + 0x24], ecx
mov word [rsi + 0x28], r15w
mov word [rsi + 0x2a], r13w
mov dword [rsi + 0x2c], edi
mov eax, dword [rsp + 0x88]
mov dword [rsi + 0x30], eax
mov dword [rsi + 0x34], ebp
mov eax, dword [rsp + 0x8c]
mov dword [rsi + 0x38], eax
mov dword [rsi + 0x3c], r12d
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
jne 0x1400cef97
cmp r9d, r12d
ja 0x1400cef97
cmp rax, r12
jb 0x1400cef97
mov qword [rbx + 0x10], r14
mov rcx, rax
sub rcx, r12
jne 0x1400cebd4
mov rax, r14
cmp qword [rbx], r14
je 0x1400cefc3
mov byte [rdx + rax], 0x3a
inc rax
jmp 0x1400cef50
cmp r9d, r12d
mov dword [rsp + 0x40], r9d
mov byte [rsp + 0x3d], r8b
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x68], r11
mov qword [rsp + 0x78], rcx
jne 0x1400cec40
cmp qword [rbx], rax
je 0x1400cf02e
lea rcx, [rdx + r12]
inc rcx
add rdx, r12
mov r8, qword [rsp + 0x78]
call sub.msvcrt.dll_memmove
mov rax, qword [rbx + 8]
mov r8, qword [rbx + 0x10]
cmp r8, rdi
mov qword [rsp + 0x60], rax
jne 0x1400cec81
mov word [rsp + 0x3e], r15w
mov word [rsp + 0x46], r13w
lea r13, [0x140207052]
mov edx, 1
xor eax, eax
jmp 0x1400cecf0
lea rax, [rdx + r14]
lea rcx, [rdx + r12]
mov byte [rax], 0x3a
inc rax
inc qword [rbx + 0x10]
cmp rax, rcx
je 0x1400ced34
mov rax, qword [rbx + 0x10]
mov rdx, r12
jmp 0x1400cef17
mov r8d, 2
mov rcx, rbx
mov rdx, r15
call fcn.1400037d0
mov r13, qword [rbx + 8]
jmp 0x1400cea14
add rax, r8
mov rcx, qword [rbx + 0x10]
inc rcx
mov rdx, r12
sub rdx, r8
inc rdx
xor r10d, r10d
lea r8, [0x140207052]
mov r11, qword [rsp + 0x68]
cmp r10, 1
je 0x1400cef99
mov r9, r10
movzx r10d, byte [r10 + r8]
mov byte [rax + r9], r10b
lea r10, [rcx + r9]
mov qword [rbx + 0x10], r10
lea r10, [r9 + 1]
cmp rdx, r10
jne 0x1400ceca3
mov word [rsp + 0x3e], r15w
mov word [rsp + 0x46], r13w
lea r13, [r9 + r8]
inc r13
lea rdx, [0x140207053]
sub rdx, r13
sete al
je 0x1400cf006
test rdx, rdx
js 0x1400cef97
mov dword [rsp + 0x74], eax
movzx eax, byte [0x14024a149]
xor ecx, ecx
call fcn.140080d30
mov qword [rsp + 0x58], rax
test rax, rax
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x60]
jne 0x1400ced5a
jmp 0x1400cef97
mov word [rsp + 0x3e], r15w
mov word [rsp + 0x46], r13w
mov eax, 1
mov qword [rsp + 0x58], rax
lea r13, [0x140207053]
mov al, 1
mov dword [rsp + 0x74], eax
mov rdi, r12
lea rax, [0x140207052]
sub rax, r13
add rax, 2
xor r15d, r15d
cmp rax, 0x11
mov qword [rsp + 0x60], rdi
jb 0x1400cedcd
mov rcx, qword [rsp + 0x58]
sub rcx, r13
cmp rcx, 0x10
jb 0x1400cedcd
mov rbp, r10
mov r10, r11
mov r11, rdx
mov ecx, eax
and ecx, 0xf
mov edx, 0x10
cmovne rdx, rcx
sub rax, rdx
lea rcx, [rax + r13]
xor edx, edx
mov rdi, qword [rsp + 0x58]
movups xmm0, xmmword [r13 + rdx]
movups xmmword [rdi + rdx], xmm0
add rdx, 0x10
cmp rax, rdx
jne 0x1400ceda9
mov r13, rcx
mov r15, rax
mov rdx, r11
mov r11, r10
mov r10, rbp
jmp 0x1400cedd2
mov rdi, qword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
add rax, r15
mov ebp, 1
sub rbp, rax
lea rax, [0x140207053]
cmp r13, rax
je 0x1400cee07
nop
movzx ecx, byte [r13]
inc r13
mov byte [rdi + r15], cl
inc r15
dec rbp
cmp r13, rax
jne 0x1400cedf0
test r15, r15
je 0x1400cee6b
mov rcx, rdx
mov rdi, qword [rsp + 0x60]
mov r8, qword [rsp + 0x78]
lea rdx, [r8 + rdi]
mov rax, qword [rbx]
sub rax, rdx
cmp rax, r15
movzx r13d, word [rsp + 0x46]
jb 0x1400cf04d
lea rdx, [rcx + rdi]
add rdi, r15
add rcx, rdi
call sub.msvcrt.dll_memmove
mov rdx, qword [rbx + 0x10]
mov qword [rsp + 0x60], rdi
cmp rdx, rdi
jne 0x1400cee73
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x58]
jmp 0x1400ceec9
movzx r13d, word [rsp + 0x46]
jmp 0x1400ceec9
mov rax, qword [rbx + 8]
add rax, rdx
mov rcx, qword [rbx + 0x10]
add rbp, rdx
neg rbp
dec r15
xor r8d, r8d
mov rdi, qword [rsp + 0x58]
mov rdx, r8
movzx r8d, byte [rdi + r8]
mov byte [rax + rdx], r8b
cmp rbp, rdx
je 0x1400ceea9
lea r8, [rdx + 1]
cmp r15, rdx
jne 0x1400cee8f
lea rax, [rcx + rdx]
inc rax
mov qword [rbx + 0x10], rax
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov r11, qword [rsp + 0x68]
cmp byte [rsp + 0x74], 0
mov ebp, dword [rsp + 0x54]
movzx r15d, word [rsp + 0x3e]
jne 0x1400cef01
mov rcx, qword [0x14024a138]
xor edx, edx
mov r8, rdi
mov rdi, r10
call sub.KERNEL32.dll_HeapFree
mov r11, qword [rsp + 0x68]
mov r10, rdi
movzx r8d, byte [rsp + 0x3d]
mov r9d, dword [rsp + 0x40]
mov rax, qword [rsp + 0x80]
mov rdx, qword [rsp + 0x60]
cmp rax, r12
mov rax, qword [rbx + 0x10]
je 0x1400cef54
cmp rdx, rax
je 0x1400cef4b
mov rcx, qword [rbx + 8]
add rdx, rcx
add rcx, rax
mov r8, qword [rsp + 0x78]
mov rdi, rax
call sub.msvcrt.dll_memmove
mov rax, rdi
mov r11, qword [rsp + 0x68]
mov r10, qword [rsp + 0x48]
movzx r8d, byte [rsp + 0x3d]
mov r9d, dword [rsp + 0x40]
add rax, qword [rsp + 0x78]
mov qword [rbx + 0x10], rax
add r12d, 0xfffffffe
mov rdx, qword [rbx + 8]
test r9d, r9d
je 0x1400cef71
sub rax, r14
jbe 0x1400cef6f
cmp byte [rdx + r14], 0xbf
jg 0x1400cef71
jmp 0x1400cef97
jne 0x1400cef97
cmp rax, 3
jb 0x1400ceaac
movzx eax, word [rdx + r14]
xor eax, 0x2f3a
movzx ecx, byte [rdx + r14 + 2]
xor ecx, 0x2f
or cx, ax
jne 0x1400ceaac
ud2
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov rax, qword [rsp + 0x80]
mov rdx, rdi
cmp rax, r12
mov rax, qword [rbx + 0x10]
jne 0x1400cef17
jmp 0x1400cef54
mov byte [rsp + 0x3d], r8b
mov r8d, 1
mov rcx, rbx
mov rdx, r14
mov dword [rsp + 0x40], r9d
mov qword [rsp + 0x48], r10
mov rdi, r11
call fcn.140012ef0
mov r11, rdi
mov r10, qword [rsp + 0x48]
movzx r8d, byte [rsp + 0x3d]
mov r9d, dword [rsp + 0x40]
mov rdx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
jmp 0x1400cebc8
mov dword [rsp + 0x74], eax
mov eax, 1
mov qword [rsp + 0x58], rax
mov r9d, dword [rsp + 0x40]
movzx r8d, byte [rsp + 0x3d]
mov r10, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x60]
jmp 0x1400ced5a
mov r8d, 1
mov rcx, rbx
mov rdx, qword [rsp + 0x80]
call fcn.140012ef0
mov rdx, qword [rbx + 8]
jmp 0x1400cebfb
mov rcx, rbx
mov r8, r15
call fcn.140012ef0
mov r8, qword [rsp + 0x78]
mov rcx, qword [rbx + 8]
jmp 0x1400cee32