Function at 0x140002380
Capabilities:
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r13, rcx
test rcx, rcx
je 0x1400028f4
mov rax, qword [rcx + 0x10]
xor ebx, ebx
mov qword [r11 + 0x10], rbx
lea rcx, [0x140005178]
mov edx, dword [rax + 0x50]
mov qword [r11 + 0x18], rdx
call qword [0x140005138]
mov rdx, qword [0x1400050c8]
mov ecx, dword [0x1400050c0]
call fcn.1400033a0
lea r9, [rsp + 0xb0]
mov dword [rsp + 0x28], 4
xor r8d, r8d
mov dword [rsp + 0x20], 0x3000
lea rdx, [rsp + 0xa8]
lea rcx, [rbx - 1]
call fcn.1400033cc
test eax, eax
js 0x1400028f4
mov rax, qword [r13 + 0x10]
mov esi, ebx
mov rdi, qword [rsp + 0xa8]
mov r15d, dword [rax + 0x28]
add r15, rdi
mov qword [rsp + 0xa0], r15
cmp bx, word [rax + 6]
jae 0x140002469
nop word [rax + rax]
mov rax, qword [r13 + 0x18]
mov edx, dword [rax + rbx + 0x14]
mov ecx, dword [rax + rbx + 0xc]
add rdx, qword [r13]
add rcx, rdi
mov r8d, dword [rax + rbx + 0x10]
call fcn.140001640
mov rax, qword [r13 + 0x10]
lea rbx, [rbx + 0x28]
mov rdi, qword [rsp + 0xa8]
inc esi
movzx ecx, word [rax + 6]
cmp esi, ecx
jl 0x140002430
xor ebx, ebx
mov r12, qword [r13 + 0x20]
mov rbp, rbx
cmp dword [r12 + 4], 0
jbe 0x14000254c
nop dword [rax]
mov eax, dword [r12]
add rax, rbp
mov r8d, dword [rax + rdi]
lea rdx, [rax + 0x10]
add rdx, rdi
test r8d, r8d
jne 0x1400024a0
cmp dword [rdx], r8d
je 0x14000253a
mov ecx, dword [rax + rdi + 0xc]
mov r14, r8
mov r15d, dword [rdx]
add rcx, rdi
call qword [0x140005130]
mov rbx, rax
test rax, rax
je 0x1400028f4
lea rsi, [r15 + rdi]
sub r14, r15
mov rdx, qword [r14 + rsi]
test rdx, rdx
jne 0x1400024d7
cmp qword [rsi], rdx
je 0x140002528
test rdx, rdx
jns 0x140002500
movsxd rax, dword [rbx + 0x3c]
cmp dword [rax + rbx], 0x4550
jne 0x1400028f4
mov eax, dword [rax + rbx + 0x88]
mov eax, dword [rax + rbx + 0x1c]
add rax, rbx
mov eax, dword [rax + rdx*4]
add rax, rbx
jmp 0x140002519
lea rcx, [rdx + 2]
add rcx, rdi
call fcn.1400012b0
mov edx, eax
mov rcx, rbx
call fcn.140001130
test rax, rax
je 0x1400028f4
mov qword [rsi], rax
add rsi, 8
jmp 0x1400024c6
mov eax, dword [r12 + 4]
add rbp, 0x14
cmp rbp, rax
jb 0x140002480
mov rdi, qword [rsp + 0xa8]
xor ebx, ebx
mov r15, qword [rsp + 0xa0]
mov rax, qword [r13 + 0x28]
mov r11, rdi
mov r8d, dword [rax]
mov rax, qword [r13 + 0x10]
add r8, rdi
sub r11, qword [rax + 0x30]
cmp dword [r8], 0
je 0x140002637
nop dword [rax + rax]
mov eax, dword [r8 + 4]
lea r10, [r8 + 8]
add rax, r8
cmp r10, rax
je 0x140002622
nop dword [rax]
nop dword [rax + rax]
movzx r9d, word [r10]
mov eax, r9d
movzx edx, r9w
shr eax, 0xc
test eax, eax
je 0x14000260e
sub eax, 1
je 0x1400025f5
sub eax, 1
je 0x1400025e1
sub eax, 1
je 0x1400025ce
cmp eax, 7
jne 0x1400028f4
mov ecx, dword [r8]
and r9d, 0xfff
lea rax, [rdi + r9]
add qword [rcx + rax], r11
jmp 0x14000260e
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add dword [rcx + rax], r11d
jmp 0x14000260e
mov ecx, dword [r8]
and edx, 0xfff
lea rax, [rdi + rdx]
add word [rcx + rax], r11w
jmp 0x14000260e
mov ecx, dword [r8]
and edx, 0xfff
add rdx, rdi
mov rax, r11
add rdx, rcx
shr rax, 0x10
add word [rdx], ax
mov eax, dword [r8 + 4]
add r10, 2
add rax, r8
cmp r10, rax
jne 0x140002590
cmp dword [r10], 0
mov r8, r10
jne 0x140002570
mov rdi, qword [rsp + 0xa8]
mov rbp, qword [r13 + 0x10]
mov esi, ebx
mov r14, qword [r13 + 0x18]
cmp bx, word [rbp + 6]
jae 0x140002783
mov r9d, 2
lea r10d, [r9 + 0xe]
lea r11d, [r9 + 0x7e]
lea r12d, [r9 + 0x3e]
nop dword [rax]
mov eax, esi
mov dword [rsp + 0xa0], ebx
lea rcx, [rax + rax*4]
mov eax, dword [r14 + rcx*8 + 0x10]
mov qword [rsp + 0xb8], rax
lea rdx, [r14 + rcx*8]
mov ecx, dword [r14 + rcx*8 + 0xc]
lea r8, [rcx + rdi]
mov qword [rsp + 0x40], r8
test eax, eax
je 0x140002775
test ecx, ecx
je 0x140002775
mov ecx, dword [rdx + 0x24]
mov ebx, ecx
sar ebx, 0x1f
mov eax, ecx
and ebx, 8
bt ecx, 0x1e
cmovb ebx, r9d
and eax, 0xc0000000
cmp eax, 0xc0000000
mov eax, 4
cmove ebx, eax
bt ecx, 0x1d
mov eax, ecx
cmovb ebx, r10d
and eax, 0xa0000000
cmp eax, 0xa0000000
cmove ebx, r11d
and ecx, 0x60000000
cmp ecx, 0x60000000
jne 0x140002713
cmp qword [0x140005150], 0
jne 0x1400026fa
mov qword [0x140005150], r8
cmp qword [0x140005158], 0
jne 0x14000270e
mov eax, dword [rdx + 0x10]
mov qword [0x140005158], rax
mov ebx, 0x20
mov eax, dword [rdx + 0x24]
mov rdx, qword [0x1400050d8]
and eax, 0xe0000000
mov ecx, dword [0x1400050d0]
cmp eax, 0xe0000000
cmove ebx, r12d
call fcn.1400033a0
lea rax, [rsp + 0xa0]
mov r9d, ebx
lea r8, [rsp + 0xb8]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x40]
mov rcx, 0xffffffffffffffff
call fcn.1400033cc
test eax, eax
js 0x1400028f4
xor ebx, ebx
lea r9d, [rbx + 2]
lea r11d, [r9 + 0x7e]
lea r10d, [rbx + 0x10]
movzx eax, word [rbp + 6]
inc esi
cmp esi, eax
jb 0x140002660
cmp qword [0x140005150], 0
je 0x1400028f4
cmp qword [0x140005158], 0
je 0x1400028f4
lea rdx, [0x1400032f0]
mov ecx, 1
call qword [0x140005110]
mov rbx, rax
test rax, rax
je 0x1400028f4
call fcn.140002ec0
mov rcx, rbx
call qword [0x140005118]
test eax, eax
je 0x1400028f4
mov r8, qword [r13 + 0x38]
mov eax, dword [r8 + 4]
test eax, eax
je 0x140002808
mov ecx, eax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
mov ecx, dword [r8]
mov r8, qword [rsp + 0xa8]
shr rdx, 3
add rcx, r8
dec edx
call qword [0x140005120]
lea rdx, [0x140002930]
mov ecx, 1
call qword [0x140005110]
mov rdx, qword [0x1400050e8]
mov ecx, dword [0x1400050e0]
call fcn.1400033a0
xor edx, edx
xor r8d, r8d
lea rcx, [rdx - 1]
call fcn.1400033cc
test eax, eax
js 0x1400028f4
mov rax, qword [r13 + 0x30]
cmp dword [rax + 4], 0
je 0x140002883
mov eax, dword [rax]
mov rcx, qword [rsp + 0xa8]
mov rbx, qword [rax + rcx + 0x18]
mov rax, qword [rbx]
test rax, rax
je 0x140002883
xor r8d, r8d
lea edx, [r8 + 1]
call rax
mov rax, qword [rbx + 8]
lea rbx, [rbx + 8]
test rax, rax
je 0x140002883
mov rcx, qword [rsp + 0xa8]
jmp 0x140002863
mov rcx, qword [r13]
call qword [sym.imp.KERNEL32.dll_LocalFree]
call qword [0x140005108]
mov qword [0x140005168], rax
test rax, rax
je 0x1400028f4
xor ecx, ecx
lea r8, [0x140002910]
mov dword [rsp + 0x30], ecx
xor r9d, r9d
mov dword [rsp + 0x28], ecx
mov rdx, rax
lea rcx, [0x140005160]
mov dword [rsp + 0x20], 0x1f4
call qword [0x140005100]
test eax, eax
je 0x1400028f4
test r15, r15
je 0x1400028f6
cmp dword [r13 + 0x48], 0
je 0x1400028ef
mov rcx, qword [rsp + 0xa8]
xor r8d, r8d
lea edx, [r8 + 1]
call r15
jmp 0x1400028f6
call r15
jmp 0x1400028f6
xor eax, eax
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret