Function at 0x14002b2e0
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by parsing pe exports

Disassembly:
mov rcx, qword [rsp + 0x40]
jmp 0x14002b325
jne 0x140029b7e
jmp 0x140029cd6
mov rax, qword [rsp + 0x28]
jmp 0x14002b36a
jne 0x140029bc6
jmp 0x140029cd6
mov eax, dword [rsp + 0x34]
jmp 0x14002b3b4
jmp 0x140029c2f
mov eax, dword [rsp + 0x20]
jmp 0x14002b444
mov rax, qword [rsp + 0x38]
jmp 0x14002b466
jae 0x140029cd6
jmp 0x14002b47b
jne 0x140029cd1
jmp 0x14002b4ce
jmp 0x140029ce8
jmp 0x140029c25
mov rax, qword [rsp + 0x50]
jmp 0x14002b548
jne 0x140029b47
xor eax, eax
add rsp, 0x98
ret
mov dword [rsp + 8], ecx
sub rsp, 0x98
mov rax, qword gs:[0x60]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x50], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x40], rax
jmp 0x140029b47
call fcn.140029edb
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
push rcx
pop rcx
push rbx
pop rbx
push rdx
pop rdx
push rax
pop rax
jmp 0x140029b77
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
push rbx
push rcx
push rax
push rdx
pop rdx
pop rax
pop rcx
pop rbx
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x70], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rsp + 0x70]
mov eax, dword [rcx + rax + 0x88]
mov dword [rsp + 0x34], eax
cmp dword [rsp + 0x34], 0
jmp 0x140029bbf
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x38], rax
push rcx
pop rcx
push rbx
pop rbx
push rdx
pop rdx
push rax
pop rax
mov rax, qword [rsp + 0x38]
push rcx
pop rcx
push rbx
pop rbx
push rdx
pop rdx
push rax
pop rax
mov eax, dword [rax + 0xc]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x78], rax
push rbx
push rcx
push rax
push rdx
pop rdx
pop rax
pop rcx
pop rbx
mov rcx, qword [rsp + 0x78]
call fcn.140029dbe
mov dword [rsp + 0x48], eax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x20]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x20], 0
jmp 0x140029c23
inc eax
mov dword [rsp + 0x20], eax
jmp 0x140029c2f
mov eax, dword [rax + 0x18]
cmp dword [rsp + 0x20], eax
jmp 0x140029c3b
mov eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x80]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x88], rax
mov rcx, qword [rsp + 0x88]
call fcn.140029dbe
mov ecx, dword [rsp + 0x48]
add ecx, eax
mov eax, ecx
push rbx
push rcx
push rax
push rdx
pop rdx
pop rax
pop rcx
pop rbx
cmp dword [rsp + 0xa0], eax
jmp 0x140029c7f
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x24]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov ecx, dword [rsp + 0x20]
movzx eax, word [rax + rcx*2]
mov word [rsp + 0x30], ax
mov rax, qword [rsp + 0x38]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rsp + 0x28]
add rcx, rax
nop
mov rax, rcx
push rbx
push rcx
push rax
push rdx
pop rdx
pop rax
pop rcx
pop rbx
movzx ecx, word [rsp + 0x30]
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x4c]
push rax
pop rax
push rcx
pop rcx
push rdx
pop rdx
push rbx
pop rbx
mov rcx, qword [rsp + 0x28]
add rcx, rax
nop
mov rax, rcx
jmp 0x140029ccf
cmp qword [rsp + 0x40], rax
jmp 0x140029ce0