Function at 0x4ce970
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
movdqa xmmword [rsp + 0xb0], xmm6
mov rsi, rcx
mov eax, dword [rdx + 0x30]
add eax, 0xfffffffd
cmp eax, 2
mov ecx, 2
cmovb ecx, eax
test ecx, ecx
je 0x4cea1a
mov rdi, rdx
cmp ecx, 1
jne 0x4cea27
movups xmm0, xmmword [rdi]
movups xmm1, xmmword [rdi + 0x10]
movaps xmmword [rsp + 0xa0], xmm1
movaps xmmword [rsp + 0x90], xmm0
mov dword [rdi + 0x10], 2
cmp eax, 2
jb 0x4ce9e7
cmp qword [rdi], 0
je 0x4ce9e7
mov r8, qword [rdi + 0x18]
mov rcx, qword [0x00576170]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov dword [rdi + 0x30], 3
movdqa xmm0, xmmword [rsp + 0x90]
movaps xmm1, xmmword [rsp + 0xa0]
movups xmmword [rsi + 0x10], xmm1
movdqu xmmword [rsi], xmm0
mov qword [rsi + 0x20], 0
mov word [rsi + 0x40], 2
jmp 0x4cec1f
mov qword [rsi + 0x20], 2
jmp 0x4cec1f
movdqu xmm0, xmmword [rdi + 0x20]
movups xmm1, xmmword [rdi + 0x30]
movaps xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x50], xmm0
mov dword [rdi + 0x30], 2
mov rax, qword [rdi + 0x10]
cmp rax, qword [rdi + 8]
je 0x4ceb7b
lea rcx, [rax - 8]
mov qword [rdi + 0x10], rcx
mov rbx, qword [rax - 8]
mov r14d, dword [rbx + 0x20]
mov ebp, dword [rbx + 0x24]
xor r15d, r15d
test r14d, r14d
setne r8b
xor r12d, r12d
test ebp, ebp
setne r13b
cmp qword [rbx + 0x18], 0
je 0x4ceb39
mov rcx, qword [rdi + 0x40]
mov rax, qword [rdi + 0x48]
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
cmp dword [rcx + 0x100], 0x2f
je 0x4ceb39
mov byte [rsp + 0x2f], r8b
lea rax, [rcx + 0xd8]
mov qword [rsp + 0x48], rax
add rcx, 0x1d8
lea rax, [rsp + 0x48]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x38]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x78]
call fcn.004d2e20
lea rcx, [rax + 8]
cmp qword [rax], 0
cmovne rcx, rax
jne 0x4ceb11
movzx eax, byte [rcx]
mov edx, dword [rcx + 4]
mov dword [rsp + 0x33], edx
mov edx, dword [rcx + 1]
mov dword [rsp + 0x30], edx
mov rcx, qword [rcx + 8]
cmp al, 0x4b
jne 0x4cec57
movzx r8d, byte [rsp + 0x2f]
test rcx, rcx
je 0x4ceb39
mov rax, qword [rbx + 0x18]
cmp rax, qword [rcx + 8]
jae 0x4ceb39
mov rcx, qword [rcx]
lea rdx, [rax + rax*2]
mov rax, qword [rcx + rdx*8 + 8]
mov rcx, qword [rcx + rdx*8 + 0x10]
jmp 0x4ceb3b
xor eax, eax
mov r15b, r8b
mov r12b, r13b
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x28], rcx
mov dword [rdi + 0x30], r15d
mov dword [rdi + 0x34], r14d
mov dword [rdi + 0x38], r12d
mov dword [rdi + 0x3c], ebp
mov rax, qword [rbx]
mov rcx, qword [rbx + 0x10]
test rax, rax
je 0x4cebec
mov rdx, qword [rbx + 8]
mov r8, qword [rdi + 0x40]
movq xmm0, qword [r8 + 0x228]
jmp 0x4cebf5
mov rax, qword [rdi + 0x50]
mov rbx, qword [rax]
test rbx, rbx
je 0x4cec3b
mov r14, qword [rax + 8]
mov rcx, qword [rdi + 0x40]
movq xmm6, qword [rcx + 0x228]
mov r15, qword [rax + 0x30]
cmp qword [rdi], 0
je 0x4cebb7
mov r8, qword [rdi + 0x18]
mov rcx, qword [0x00576170]
xor edx, edx
call sub.kernel32.dll_HeapFree
mov dword [rdi + 0x30], 3
movdqa xmm0, xmmword [rsp + 0x50]
movaps xmm1, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm1
movdqu xmmword [rsi], xmm0
mov qword [rsi + 0x20], 1
mov qword [rsi + 0x28], r15
mov qword [rsi + 0x30], rbx
mov qword [rsi + 0x38], r14
movd dword [rsi + 0x40], xmm6
jmp 0x4cec1f
mov edx, 2
movd xmm0, edx
movaps xmm1, xmmword [rsp + 0x50]
movaps xmm2, xmmword [rsp + 0x60]
movups xmmword [rsi + 0x10], xmm2
movups xmmword [rsi], xmm1
mov qword [rsi + 0x20], 1
mov qword [rsi + 0x28], rcx
mov qword [rsi + 0x30], rax
mov qword [rsi + 0x38], rdx
movd dword [rsi + 0x40], xmm0
movaps xmm6, xmmword [rsp + 0xb0]
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 2
movd xmm6, ecx
mov r15, qword [rax + 0x30]
cmp qword [rdi], 0
jne 0x4ceba5
jmp 0x4cebb7
mov edx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x33]
mov dword [rsi + 4], r8d
mov dword [rsi + 1], edx
mov byte [rsi], al
mov qword [rsi + 8], rcx
mov qword [rsi + 0x20], 3
jmp 0x4cec1f