Function at 0x1400029b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x40
lea rdx, str.CreateThread
lea rcx, [rsp + 0x20]
call fcn.14000c370
mov rcx, rax
mov rbx, rax
call fcn.14000f210
mov r11, qword [0x1400b2198]
test r11, r11
je 0x140002a57
test rbx, rbx
je 0x140002a57
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002a57
nop dword [rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002a43
inc rax
test ecx, ecx
jne 0x140002a30
test edx, edx
je 0x140002d87
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002a20
xor eax, eax
lea rcx, [rsp + 0x20]
mov qword [0x1400b2188], rax
call fcn.14000c0c0
mov rcx, rax
mov rbx, rax
call fcn.14000efa0
test r11, r11
je 0x140002ae7
test rbx, rbx
je 0x140002ae7
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002ae7
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002ad3
inc rax
test ecx, ecx
jne 0x140002ac0
test edx, edx
je 0x140002d98
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002ab0
xor eax, eax
lea rdx, str.CommandLineToArgvW
mov qword [0x1400b2180], rax
lea rcx, [rsp + 0x20]
call fcn.14000be40
mov rcx, rax
call fcn.14000ed50
lea rdx, str.VirtualAlloc
lea rcx, [rsp + 0x20]
call fcn.14000c370
mov rcx, rax
mov rbx, rax
call fcn.14000f210
test r11, r11
je 0x140002b97
test rbx, rbx
je 0x140002b97
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002b97
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002b83
inc rax
test ecx, ecx
jne 0x140002b70
test edx, edx
je 0x140002da9
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002b60
xor eax, eax
lea rdx, [0x14007aa60]
mov qword [0x1400b2170], rax
lea rcx, [rsp + 0x20]
call fcn.14000be40
mov rcx, rax
mov rbx, rax
call fcn.14000ed50
test r11, r11
je 0x140002c37
test rbx, rbx
je 0x140002c37
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002c37
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002c23
inc rax
test ecx, ecx
jne 0x140002c10
test edx, edx
je 0x140002dba
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002c00
xor eax, eax
lea rcx, [rsp + 0x20]
mov qword [0x1400b2178], rax
call fcn.14000bbe0
mov rcx, rax
mov rbx, rax
call fcn.14000eb40
test r11, r11
je 0x140002cc7
test rbx, rbx
je 0x140002cc7
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002cc7
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002cb3
inc rax
test ecx, ecx
jne 0x140002ca0
test edx, edx
je 0x140002dcb
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002c90
xor eax, eax
lea rcx, [rsp + 0x20]
mov qword [0x1400b2190], rax
call fcn.14000ba00
mov rcx, rax
mov rbx, rax
call fcn.14000e980
mov r11, qword [0x1400b21a0]
test r11, r11
je 0x140002d67
test rbx, rbx
je 0x140002d67
movsxd rcx, dword [r11 + 0x3c]
xor r9d, r9d
mov edx, dword [rcx + r11 + 0x88]
add rdx, r11
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, r11
mov ebp, dword [rdx + 0x24]
add r10, r11
mov edi, dword [rdx + 0x18]
add rbp, r11
test edi, edi
je 0x140002d67
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
mov r8, rbx
add rax, r11
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002d53
inc rax
test ecx, ecx
jne 0x140002d40
test edx, edx
je 0x140002ddc
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002d30
mov qword [0x1400b2168], 0
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
add rsp, 0x40
pop rdi
ret
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140002a59
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140002ae9
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140002b99
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140002c39
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
jmp 0x140002cc9
movzx ecx, word [rbp + r9*2]
mov eax, dword [rsi + rcx*4]
add rax, r11
mov qword [0x1400b2168], rax
jmp 0x140002d72