Function at 0x140002855
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x628
mov rbx, rcx
mov dword [rsp + 0x30], 0x1001
movsxd r14, dword [rdx + 0x3c]
mov rcx, qword [rcx]
mov r8d, dword [r14 + rdx + 0x50]
mov qword [rsp + 0x40], rdx
add r14, rdx
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r9d, 0x3000
call qword [0x141318118]
mov r15, rax
lea rdi, [rsp + 0x150]
cmp dword [rsp + 0x30], 0x1056
jne 0x1400028bc
mov dword [rsp + 0x30], 0x1024
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1055
jne 0x1400028d4
mov esi, dword [rsp + 0x34]
mov dword [rsp + 0x30], 0x1023
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1054
jne 0x1400028ec
mov ebp, dword [rsp + 0x38]
mov dword [rsp + 0x30], 0x1022
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1053
jne 0x14000290a
mov rcx, qword [rbx + 8]
call qword [0x141318180]
mov dword [rsp + 0x30], 0x1021
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1052
je 0x1400028de
cmp dword [rsp + 0x30], 0x1051
jne 0x140002928
mov dword [rsp + 0x30], 0x1020
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1050
jne 0x14000295e
mov eax, dword [r14 + 0x28]
add rax, r15
mov qword [rsp + 0x1d0], rax
mov rcx, qword [rbx + 8]
mov rdx, rdi
call qword [0x141318178]
mov r12d, eax
mov dword [rsp + 0x30], 0x101f
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x104f
je 0x1400028de
cmp dword [rsp + 0x30], 0x104e
jne 0x140002983
mov dword [rsp + 0x30], 0x101e
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x104d
jne 0x1400029c9
mov rcx, qword [rbx]
mov rdx, qword [rsp + 0x1d8]
add rdx, 0x10
mov qword [rsp + 0x20], 0
mov r9d, 8
mov r8, qword [rsp + 0x148]
call qword [0x141318170]
mov r13d, eax
mov dword [rsp + 0x30], 0x101d
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x104c
je 0x1400028de
cmp dword [rsp + 0x30], 0x104b
jne 0x1400029ee
mov dword [rsp + 0x30], 0x101c
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x104a
jne 0x140002a24
mov dword [rsp + 0x180], 0x10000b
mov rcx, qword [rbx + 8]
mov rdx, rdi
call qword [0x141318150]
mov dword [rsp + 0x8c], eax
mov dword [rsp + 0x30], 0x101b
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1049
jne 0x140002a4b
mov r8d, 0x4d0
mov rcx, rdi
xor edx, edx
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov dword [rsp + 0x30], 0x101a
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1048
jne 0x140002a95
mov eax, dword [rsp + 0x48]
mov qword [rsp + 0x140], rax
mov eax, dword [rsp + 0x4c]
mov rcx, qword [rsp + 0x58]
mov ecx, dword [rcx + 0x14]
lea edx, [rax + 2]
mov dword [rsp + 0x88], edx
add rax, qword [rsp + 0x40]
movzx eax, word [rcx + rax]
mov qword [rsp + 0xc8], rax
mov dword [rsp + 0x30], 0x1013
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1047
jne 0x140002ab7
mov eax, dword [rsp + 0x54]
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x30], 0x1011
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1046
jne 0x140002adf
mov rax, qword [rsp + 0x140]
inc eax
mov dword [rsp + 0x80], eax
mov dword [rsp + 0x30], 0x1018
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1045
jne 0x140002af6
mov dword [rsp + 0x30], 0x1017
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1044
jne 0x140002b3f
mov rax, qword [rsp + 0x138]
add qword [rsp + 0x68], rax
mov rcx, qword [rbx]
mov qword [rsp + 0x20], 0
mov r9d, 8
mov rdx, qword [rsp + 0xc0]
lea r8, [rsp + 0x68]
call qword [0x141318170]
mov dword [rsp + 0x30], 0x1016
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1043
jne 0x140002b7e
xor eax, eax
mov qword [rsp + 0x68], rax
mov rcx, qword [rbx]
mov qword [rsp + 0x20], rax
mov r9d, 8
mov rdx, qword [rsp + 0xc0]
lea r8, [rsp + 0x68]
call qword [0x141318158]
mov dword [rsp + 0x30], 0x1015
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1042
jne 0x140002bc4
mov rax, qword [rsp + 0x130]
mov rcx, qword [rsp + 0x128]
mov eax, dword [rax + rcx]
mov rcx, qword [rsp + 0xc8]
and ecx, 0xfff
add rcx, r15
add rcx, rax
mov qword [rsp + 0xc0], rcx
mov dword [rsp + 0x30], 0x1014
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1041
je 0x140002ac1
cmp dword [rsp + 0x30], 0x1040
je 0x140002a55
cmp dword [rsp + 0x30], 0x103f
je 0x140002a9f
cmp dword [rsp + 0x30], 0x103e
jne 0x140002c05
mov dword [rsp + 0x30], 0x1019
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x103d
je 0x140002c19
cmp dword [rsp + 0x30], 0x103c
jne 0x140002c6a
mov eax, dword [rsp + 0x50]
mov rcx, qword [rsp + 0x58]
mov ecx, dword [rcx + 0x14]
lea edx, [rax + 8]
mov dword [rsp + 0x7c], edx
add rax, qword [rsp + 0x40]
mov qword [rsp + 0x130], rcx
mov qword [rsp + 0x128], rax
mov eax, dword [rcx + rax + 4]
movabs rcx, 0x1fffffff8
add rax, rcx
shr rax, 1
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0x30], 0x1012
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x103b
jne 0x140002c81
mov dword [rsp + 0x30], 0x1010
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x103a
je 0x140002bf8
cmp dword [rsp + 0x30], 0x1039
jne 0x140002ca6
mov dword [rsp + 0x30], 0x100f
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1038
je 0x1400028c6
cmp dword [rsp + 0x30], 0x1037
jne 0x140002ceb
mov rax, qword [rsp + 0x120]
inc rax
mov qword [rsp + 0x118], rax
movzx eax, word [r14 + 6]
mov qword [rsp + 0x110], rax
mov dword [rsp + 0x30], 0x1009
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1036
je 0x1400028c6
cmp dword [rsp + 0x30], 0x1035
jne 0x140002d10
mov dword [rsp + 0x30], 0x100d
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1034
je 0x140002d65
cmp dword [rsp + 0x30], 0x1033
jne 0x140002d5b
mov rcx, qword [rsp + 0xb0]
mov eax, dword [rcx + 8]
add eax, dword [rsp + 0x60]
cmp eax, dword [rsp + 0xa0]
mov rax, qword [rsp + 0xa8]
cmova rax, rcx
mov qword [rsp + 0x108], rax
mov dword [rsp + 0x30], 0x100b
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1032
jne 0x140002db3
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x58], rax
mov rcx, qword [rbx]
mov rax, qword [rsp + 0x60]
lea rdx, [rax + r15]
mov rax, qword [rsp + 0xb0]
mov r9d, dword [rax + 0x10]
mov r8d, dword [rax + 0x14]
add r8, qword [rsp + 0x40]
mov qword [rsp + 0x20], 0
call qword [0x141318170]
mov dword [rsp + 0x78], eax
mov dword [rsp + 0x30], 0x100c
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1031
jne 0x140002dca
mov dword [rsp + 0x30], 0x100e
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1030
je 0x140002dde
cmp dword [rsp + 0x30], 0x102f
jne 0x140002e35
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xa8], rax
mov rcx, qword [rsp + 0xe0]
movzx eax, word [r14 + 0x14]
mov qword [rsp + 0x120], rcx
lea rcx, [rcx + rcx*4]
mov rdx, qword [rsp + 0x100]
lea rcx, [rdx + rcx*8]
lea rdx, [rcx + rax]
mov qword [rsp + 0xb0], rdx
mov eax, dword [rax + rcx + 0xc]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x30], 0x100a
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x102e
jne 0x140002e58
lea rax, [r14 + 0x18]
mov qword [rsp + 0x100], rax
mov dword [rsp + 0x30], 0x1008
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x102d
je 0x1400028c6
cmp dword [rsp + 0x30], 0x102c
je 0x140002eb9
cmp dword [rsp + 0x30], 0x102b
jne 0x140002eaf
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x40]
mov eax, dword [rcx + rax + 0xb4]
shl rax, 0x20
add rax, qword [rsp + 0x90]
mov qword [rsp + 0xf0], rax
mov dword [rsp + 0x30], 0x1006
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x102a
jne 0x140002eef
mov rcx, qword [rsp + 0xe8]
mov rax, rcx
mov qword [rsp + 0xa0], rcx
shr rcx, 0x20
mov qword [rsp + 0x98], rcx
movzx eax, word [r14 + 6]
mov word [rsp + 0x3e], ax
mov dword [rsp + 0x30], 0x1007
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1029
jne 0x140002f29
mov rdx, qword [rsp + 0x40]
movsxd rcx, dword [rdx + 0x3c]
mov rax, rcx
mov qword [rsp + 0xf8], rcx
mov eax, dword [rcx + rdx + 0xb0]
mov qword [rsp + 0x90], rax
mov dword [rsp + 0x30], 0x1005
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1028
je 0x1400028c6
cmp dword [rsp + 0x30], 0x1027
jne 0x140002f4e
mov dword [rsp + 0x30], 0x1004
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1026
jne 0x140002fa6
mov rax, r15
sub rax, qword [r14 + 0x30]
mov qword [rsp + 0x138], rax
lea rax, [r14 + 0x30]
mov qword [rsp + 0x148], rax
mov qword [r14 + 0x30], r15
mov rcx, qword [rbx]
mov r9d, dword [r14 + 0x54]
mov qword [rsp + 0x20], 0
mov rdx, r15
mov r8, qword [rsp + 0x40]
call qword [0x141318170]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x30], 0x1003
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1025
je 0x1400028c6
cmp dword [rsp + 0x30], 0x1024
jne 0x140002fcb
mov dword [rsp + 0x30], 0x1002
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1023
je 0x140003533
cmp dword [rsp + 0x30], 0x1022
jne 0x140002ff4
mov dword [rsp + 0x34], ebp
mov dword [rsp + 0x30], 0x1055
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1021
jne 0x140003013
mov dword [rsp + 0x38], 1
mov dword [rsp + 0x30], 0x1054
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1020
jne 0x140003037
mov dword [rsp + 0x38], 0
test r12d, r12d
je 0x140003072
mov dword [rsp + 0x30], 0x1053
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101f
jne 0x14000304e
mov dword [rsp + 0x30], 0x1051
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101e
jne 0x14000307f
mov dword [rsp + 0x38], 0
test r13d, r13d
je 0x1400030bf
mov dword [rsp + 0x30], 0x1050
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1052
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101d
jne 0x140003096
mov dword [rsp + 0x30], 0x104e
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101c
jne 0x1400030cc
mov dword [rsp + 0x38], 0
cmp dword [rsp + 0x8c], 0
je 0x1400030fa
mov dword [rsp + 0x30], 0x104d
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x104f
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101b
jne 0x1400030e3
mov dword [rsp + 0x30], 0x104b
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x101a
jne 0x140003107
mov dword [rsp + 0x30], 0x104a
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x104c
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1019
jne 0x14000311e
mov dword [rsp + 0x30], 0x1049
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1018
jne 0x140003158
mov eax, dword [rsp + 0x88]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x4c], eax
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x48], eax
cmp eax, dword [rsp + 0xb8]
jne 0x14000316f
mov dword [rsp + 0x30], 0x1047
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1017
jne 0x14000317c
mov dword [rsp + 0x30], 0x1046
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1048
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1016
jne 0x140003193
mov dword [rsp + 0x30], 0x1045
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1015
jne 0x1400031aa
mov dword [rsp + 0x30], 0x1044
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1014
jne 0x1400031c1
mov dword [rsp + 0x30], 0x1043
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1013
jne 0x1400031e7
movzx eax, word [rsp + 0xc8]
cmp eax, 0x1000
jae 0x14000321c
mov dword [rsp + 0x30], 0x1041
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1012
jne 0x140003229
mov eax, dword [rsp + 0x7c]
mov dword [rsp + 0x54], eax
mov dword [rsp + 0x4c], eax
mov dword [rsp + 0x48], 0
cmp dword [rsp + 0xb8], 0
je 0x140003254
mov dword [rsp + 0x30], 0x1040
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1042
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1011
jne 0x140003261
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x50], eax
cmp eax, dword [rsp + 0x98]
jae 0x140003280
mov dword [rsp + 0x30], 0x103d
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x103f
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1010
jne 0x14000328d
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x30], 0x103c
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x103e
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100f
jne 0x1400032ae
cmp dword [rsp + 0x98], 0
je 0x1400032d5
mov dword [rsp + 0x30], 0x103b
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100e
jne 0x1400032e2
mov dword [rsp + 0x34], 0
cmp qword [rsp + 0x58], 0
je 0x140003308
mov dword [rsp + 0x30], 0x1039
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x103a
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100d
jne 0x140003315
mov dword [rsp + 0x34], 0
cmp dword [rsp + 0x78], 0
je 0x14000332c
mov dword [rsp + 0x30], 0x1037
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1038
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100c
jne 0x140003339
mov dword [rsp + 0x30], 0x1035
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1036
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100b
jne 0x140003360
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0xd0], rax
mov dword [rsp + 0x30], 0x1034
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x100a
jne 0x140003395
mov rax, qword [rsp + 0xa8]
mov qword [rsp + 0xd0], rax
mov rax, qword [rsp + 0x60]
cmp eax, dword [rsp + 0xa0]
jbe 0x1400033d3
mov dword [rsp + 0x30], 0x1032
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1009
jne 0x1400033e0
mov rax, qword [rsp + 0x118]
mov qword [rsp + 0xe0], rax
mov rcx, qword [rsp + 0x58]
mov qword [rsp + 0xd8], rcx
cmp rax, qword [rsp + 0x110]
jae 0x140003409
mov dword [rsp + 0x30], 0x1030
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1033
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1008
jne 0x140003416
xor eax, eax
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0xd8], rax
mov dword [rsp + 0x30], 0x102f
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1031
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1007
jne 0x14000343d
mov dword [rsp + 0x34], 0
cmp word [rsp + 0x3e], 0
je 0x140003464
mov dword [rsp + 0x30], 0x102e
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1006
jne 0x140003471
mov rax, qword [rsp + 0xf0]
mov qword [rsp + 0xe8], rax
mov dword [rsp + 0x30], 0x102c
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x102d
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1005
jne 0x14000349e
mov qword [rsp + 0xe8], 0
cmp dword [rsp + 0x90], 0
je 0x1400034c4
mov dword [rsp + 0x30], 0x102b
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1004
jne 0x1400034d1
mov dword [rsp + 0x34], 0
cmp dword [rsp + 0x74], 0
je 0x1400034e8
mov dword [rsp + 0x30], 0x1029
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x102a
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1003
jne 0x1400034f5
mov dword [rsp + 0x30], 0x1027
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1028
jmp 0x1400028a8
cmp dword [rsp + 0x30], 0x1002
jne 0x140003519
mov dword [rsp + 0x34], 0
test r15, r15
je 0x140003526
mov dword [rsp + 0x30], 0x1026
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1056
jmp 0x1400028a8
mov dword [rsp + 0x30], 0x1025
jmp 0x1400028a8
mov eax, esi
add rsp, 0x628
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret