Function at 0x140002950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x40
lea rdx, str.CreateThread
lea rcx, [rsp + 0x20]
call fcn.140008fc0
mov rcx, rax
mov r11, rax
call fcn.14000bf60
mov rbx, qword [0x1400bba18]
test rbx, rbx
je 0x140002a15
test r11, r11
je 0x140002a15
movsxd rcx, dword [rbx + 0x3c]
xor r14d, r14d
mov r9d, r14d
mov edx, dword [rcx + rbx + 0x88]
add rdx, rbx
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, rbx
mov ebp, dword [rdx + 0x24]
add r10, rbx
mov edi, dword [rdx + 0x18]
add rbp, rbx
test edi, edi
je 0x140002a18
nop dword [rax]
mov eax, dword [r10]
mov r8, r11
add rax, rbx
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400029f3
inc rax
test ecx, ecx
jne 0x1400029e0
test edx, edx
je 0x140002a05
inc r9d
add r10, 4
cmp r9d, edi
jb 0x1400029d0
jmp 0x140002a18
mov eax, r9d
movzx ecx, word [rbp + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, rbx
jmp 0x140002a1b
xor r14d, r14d
mov rax, r14
lea rcx, [rsp + 0x20]
mov qword [0x1400bba08], rax
call fcn.140008be0
mov rcx, rax
mov r11, rax
call fcn.14000bbf0
test rbx, rbx
je 0x140002aa7
test r11, r11
je 0x140002aa7
movsxd rcx, dword [rbx + 0x3c]
mov r9d, r14d
mov edx, dword [rcx + rbx + 0x88]
add rdx, rbx
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, rbx
mov ebp, dword [rdx + 0x24]
add r10, rbx
mov edi, dword [rdx + 0x18]
add rbp, rbx
test edi, edi
je 0x140002aa7
nop dword [rax]
mov eax, dword [r10]
mov r8, r11
add rax, rbx
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002a93
inc rax
test ecx, ecx
jne 0x140002a80
test edx, edx
je 0x140002c95
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002a70
mov rax, r14
lea rdx, str.CommandLineToArgvW
mov qword [0x1400bba00], rax
lea rcx, [rsp + 0x20]
call fcn.140008830
mov rcx, rax
call fcn.14000b8b0
lea rdx, str.VirtualAlloc
lea rcx, [rsp + 0x20]
call fcn.140008fc0
mov rcx, rax
mov r11, rax
call fcn.14000bf60
test rbx, rbx
je 0x140002b57
test r11, r11
je 0x140002b57
movsxd rcx, dword [rbx + 0x3c]
mov r9d, r14d
mov edx, dword [rcx + rbx + 0x88]
add rdx, rbx
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, rbx
mov ebp, dword [rdx + 0x24]
add r10, rbx
mov edi, dword [rdx + 0x18]
add rbp, rbx
test edi, edi
je 0x140002b57
nop dword [rax + rax]
mov eax, dword [r10]
mov r8, r11
add rax, rbx
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002b43
inc rax
test ecx, ecx
jne 0x140002b30
test edx, edx
je 0x140002ca8
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002b20
mov rax, r14
lea rdx, [0x140075a20]
mov qword [0x1400bb9f0], rax
lea rcx, [rsp + 0x20]
call fcn.140008830
mov rcx, rax
mov r11, rax
call fcn.14000b8b0
test rbx, rbx
je 0x140002bf7
test r11, r11
je 0x140002bf7
movsxd rcx, dword [rbx + 0x3c]
mov r9d, r14d
mov edx, dword [rcx + rbx + 0x88]
add rdx, rbx
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, rbx
mov ebp, dword [rdx + 0x24]
add r10, rbx
mov edi, dword [rdx + 0x18]
add rbp, rbx
test edi, edi
je 0x140002bf7
nop dword [rax]
nop word [rax + rax]
mov eax, dword [r10]
mov r8, r11
add rax, rbx
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002be3
inc rax
test ecx, ecx
jne 0x140002bd0
test edx, edx
je 0x140002cbb
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002bc0
mov rax, r14
lea rcx, [rsp + 0x20]
mov qword [0x1400bb9f8], rax
call fcn.1400084d0
mov rcx, rax
mov r11, rax
call fcn.14000b5c0
test rbx, rbx
je 0x140002cdd
test r11, r11
je 0x140002cdd
movsxd rcx, dword [rbx + 0x3c]
mov r9d, r14d
mov edx, dword [rcx + rbx + 0x88]
add rdx, rbx
mov esi, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add rsi, rbx
mov ebp, dword [rdx + 0x24]
add r10, rbx
mov edi, dword [rdx + 0x18]
add rbp, rbx
test edi, edi
je 0x140002cdd
nop word [rax + rax]
mov eax, dword [r10]
mov r8, r11
add rax, rbx
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002c83
inc rax
test ecx, ecx
jne 0x140002c70
test edx, edx
je 0x140002cce
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002c60
jmp 0x140002cdd
mov eax, r9d
movzx ecx, word [rbp + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, rbx
jmp 0x140002aaa
mov eax, r9d
movzx ecx, word [rbp + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, rbx
jmp 0x140002b5a
mov eax, r9d
movzx ecx, word [rbp + rax*2]
mov eax, dword [rsi + rcx*4]
add rax, rbx
jmp 0x140002bfa
mov eax, r9d
movzx ecx, word [rbp + rax*2]
mov r14d, dword [rsi + rcx*4]
add r14, rbx
lea rcx, [rsp + 0x20]
mov qword [0x1400bba10], r14
call fcn.140008230
mov rcx, rax
call fcn.14000b350
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x40
pop r14
ret