Function at 0x14019a1e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x68
mov rax, qword [0x1402b5020]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rdi, qword [rsp + 0xb0]
lea eax, [r8 - 0x401]
mov rsi, r9
mov rbx, rdx
mov rbp, rcx
cmp eax, 0x31
ja case.0x14019a22a.1026
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x19aac0]
add rcx, rdx
jmp rcx
mov qword [rbx + 0xb8], rdi
mov qword [rbx + 0xc0], rsi
test rdi, rdi
jne 0x14019a273
lea rcx, [sym.SystemInformer.exe_PhIsExecutingInWow64]
mov qword [rbx + 0xb8], rcx
lea eax, [rdi + 1]
jmp 0x14019a460
cmp dword [rbx + 0x244], 0
jg 0x14019a27d
or dword [rbx + 0x40], 0xc00000
mov rcx, qword [rbx]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_InvalidateRect]
mov eax, 1
jmp 0x14019a460
mov rcx, rbx
call fcn.14019c820
mov rcx, rbx
call fcn.14019b220
jmp 0x14019a265
mov rdx, rdi
mov rcx, rbx
call fcn.14019b6c0
movzx eax, al
jmp 0x14019a460
cmp esi, dword [rbx + 0xd4]
jae 0x14019a317
mov rax, qword [rbx + 0xc8]
mov ecx, esi
mov rsi, qword [rax + rcx*8]
test rsi, rsi
je 0x14019a317
mov edi, dword [rsi]
mov rdx, rsi
mov rcx, rbx
call fcn.14019c020
mov ecx, dword [rsi + 4]
xor edx, edx
mov rax, qword [rbx + 0xc8]
mov r8, rsi
mov qword [rax + rcx*8], rdx
mov rcx, qword [0x1402bfe50]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rcx, rbx
call fcn.14019bd20
test dil, 1
je 0x14019a305
mov rcx, rbx
call fcn.14019b220
dec dword [rbx + 0xd8]
mov edx, 1
mov eax, edx
jmp 0x14019a460
xor edx, edx
mov eax, edx
jmp 0x14019a460
mov r8, rdi
mov edx, esi
mov rcx, rbx
call fcn.14019b890
movzx eax, al
jmp 0x14019a460
mov r8d, dword [rdi + 4]
mov r9, rdi
mov edx, esi
mov rcx, rbx
call fcn.14019b8e0
movzx eax, al
jmp 0x14019a460
cmp esi, dword [rbx + 0xec]
jne case.0x14019a22a.1026
nop
test esi, esi
je 0x14019a273
xor edx, edx
mov r9d, esi
mov r8d, edx
mov rax, qword [rbx + 0xe0]
lea rdx, [rdx + 4]
lea r8, [r8 + 8]
mov rcx, qword [r8 + rax - 8]
mov eax, dword [rcx + 4]
mov dword [rdx + rdi - 4], eax
sub r9, 1
jne 0x14019a370
lea eax, [r9 + 1]
jmp 0x14019a460
mov qword ss:[rsp + 0x60], r14
test esi, esi
je 0x14019a446
mov rcx, qword [0x1402bfe50]
mov edx, 4
mov r14d, esi
lea r8, [r14*4]
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
xor edx, edx
mov rbp, rax
test esi, esi
je 0x14019a416
mov r8d, edx
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [rdi + r8]
cmp ecx, dword [rbx + 0xd4]
jae 0x14019a476
lfence
mov rax, qword [rbx + 0xc8]
mov rax, qword [rax + rcx*8]
test rax, rax
je 0x14019a476
mov eax, dword [rax + 0x28]
inc edx
mov dword [r8 + rbp], eax
add r8, 4
cmp edx, esi
jb 0x14019a3e0
mov rcx, qword [rbx + 0x18]
mov r9, rbp
mov r8, r14
mov edx, 0x1212
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1402bfe50]
xor edx, edx
mov r8, rbp
test eax, eax
je 0x14019a485
nop dword [rax + rax]
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov rcx, rbx
call fcn.14019c0a0
mov rcx, rbx
call fcn.14019bd20
mov eax, 1
mov r14, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1401dd6a0
add rsp, 0x68
pop rdi
pop rsi
pop rbp
pop rbx
ret
lfence
mov rcx, qword [0x1402bfe50]
mov r8, rbp
xor edx, edx
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
xor eax, eax
jmp 0x14019a45b
mov qword [rbx + 0x58], rdi
mov eax, 1
jmp 0x14019a460
test rsi, rsi
je 0x14019a4a8
mov eax, dword [rbx + 0x130]
mov dword [r9], eax
test rdi, rdi
je 0x14019a273
mov eax, dword ds:[rbx + 0x134]
mov dword [rdi], eax
mov eax, 1
jmp 0x14019a460
test edi, edi
je 0x14019a4ec
cmp esi, dword [rbx + 0xd4]
jae case.0x14019a22a.1026
lfence
mov rax, qword [rbx + 0xc8]
mov ecx, esi
mov rdx, qword [rax + rcx*8]
test rdx, rdx
jne 0x14019a4f0
xor eax, eax
jmp 0x14019a460
xor edx, edx
mov esi, edx
mov rcx, rbx
mov dword [rbx + 0x130], esi
mov dword [rbx + 0x134], edi
call fcn.14019c180
mov rax, qword [rbx + 0xb8]
lea rcx, [sym.SystemInformer.exe_PhIsExecutingInWow64]
cmp rax, rcx
je 0x14019a273
mov rcx, qword [rbx + 0xc0]
xor r9d, r9d
mov qword [rsp + 0x20], rcx
xor r8d, r8d
mov rcx, qword [rbx]
lea edx, [r9 + 0xa]
call qword [str.PB__]
mov eax, 1
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
neg rsi
sbb ecx, ecx
btr eax, 0xa
and ecx, 0x400
or ecx, eax
mov eax, 1
mov dword [rbx + 0x40], ecx
jmp 0x14019a460
mov edx, dword [rdi + 0x2c]
mov rcx, rbx
call fcn.14019d8a0
movzx eax, al
jmp 0x14019a460
mov r8d, edi
mov edx, esi
mov rcx, rbx
call fcn.14019eca0
mov eax, 1
jmp 0x14019a460
test dword [rbx + 0x40], 0x400000
jne case.0x14019a22a.1026
mov rax, qword [rbx + 0x128]
mov eax, dword [rax]
jmp 0x14019a460
mov rax, qword [rbx + 0x128]
cmp esi, dword [rax]
jae case.0x14019a22a.1026
lfence
mov rcx, qword [rbx + 0x128]
mov edx, esi
mov rax, qword [rcx + 8]
mov rax, qword [rax + rdx*8]
jmp 0x14019a460
mov r8d, dword [rdi + 0x10]
lea r9, [rdi + 0x18]
mov rdx, qword [rdi + 8]
mov rcx, rbx
call fcn.14019c740
movzx eax, al
jmp 0x14019a460
test rsi, rsi
mov rdx, rdi
mov rcx, rbx
setne r8b
call fcn.14019caa0
mov eax, 1
jmp 0x14019a460
mov eax, dword [rbx + 0xd0]
dec eax
jmp 0x14019a460
inc esi
cmp dword [rbx + 0xd0], esi
jae 0x14019a273
mov dword [rbx + 0xd0], esi
cmp dword [rbx + 0xd4], esi
jae 0x14019a273
mov rcx, rbx
call fcn.14019bc40
mov eax, 1
jmp 0x14019a460
test byte [rdi], 1
je case.0x14019a22a.1026
mov edx, dword [rdi + 0x2c]
mov r8d, edx
lea rax, [rsp + 0x38]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14019cee0
test al, al
je case.0x14019a22a.1026
xor r8d, r8d
lea rdx, [rsp + 0x38]
mov rcx, rbp
jmp 0x14019a26d
mov r8d, edi
mov edx, esi
jmp 0x14019a65f
mov rax, qword [rbx + 0x10]
jmp 0x14019a460
mov rax, qword [rbx + 0x18]
jmp 0x14019a460
mov rax, qword [rbx + 0x38]
jmp 0x14019a460
xor edx, edx
lea rax, [rsp + 0x30]
cmp r8d, 0x41d
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x38]
mov r8d, edi
sete dl
mov qword [rsp + 0x20], rax
mov r9d, edx
mov rcx, rbx
mov edx, esi
call fcn.14019d240
mov r8d, dword [rsp + 0x30]
lea rax, [rsp + 0x48]
mov edx, dword [rsp + 0x38]
mov r9b, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14019cee0
nop dword [rax]
test al, al
je 0x14019a273
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov rcx, rbp
jmp 0x14019a26d
mov eax, dword ds:[rbx + 0xd8]
jmp 0x14019a460
mov eax, dword ds:[rbx + 0x244]
lea ecx, [rax - 1]
inc eax
test rsi, rsi
cmove eax, ecx
mov dword [rbx + 0x244], eax
cmp eax, 1
jne 0x14019a7e7
test dword [rbx + 0x40], 0x400000
je 0x14019a75a
mov rcx, rbx
call fcn.14019c820
test dword [rbx + 0x40], 0x800000
je 0x14019a76b
mov rcx, rbx
call fcn.14019b220
test dword [rbx + 0x40], 0x1000000
je 0x14019a7af
mov rdi, qword [rbx]
call qword [sym.imp.USER32.dll_GetMessagePos]
movsx edx, ax
mov rcx, rdi
shr eax, 0x10
cwde
mov dword [rsp + 0x38], edx
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x3c], eax
call qword [sym.imp.USER32.dll_ScreenToClient]
mov r8, qword [rsp + 0x38]
mov rcx, rbx
mov edx, dword [rsp + 0x38]
shr r8, 0x20
call fcn.14019d940
and dword ds:[rbx + 0x40], 0xfe3fffff
mov rdx, qword [rbx + 0x248]
test rdx, rdx
je 0x14019a7e7
mov rcx, qword [rbx]
xor r8d, r8d
call qword [sym.imp.USER32.dll_InvalidateRgn]
mov rcx, qword [rbx + 0x248]
call qword [sym.imp.GDI32.dll_DeleteObject]
xor edx, edx
mov qword [rbx + 0x248], rdx
movsxd rax, dword [rbx + 0x244]
jmp 0x14019a460
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [rdi], xmm0
mov eax, dword [rbx + 0x70]
mov dword [rdi + 0x10], eax
mov eax, dword [rbx + 0x74]
mov dword [rdi + 0x14], eax
test byte [rbx + 0x40], 4
je 0x14019a811
mov edx, dword [rbx + 0x78]
jmp 0x14019a813
xor edx, edx
mov dword [rdi + 0x18], edx
mov eax, dword [rbx + 0x7c]
mov dword [rdi + 0x1c], eax
mov eax, dword [rbx + 0x80]
mov dword [rdi + 0x20], eax
mov eax, dword [rbx + 0x84]
mov dword [rdi + 0x24], eax
mov eax, dword [rbx + 0x88]
mov dword [rdi + 0x28], eax
mov eax, dword [rbx + 0x90]
mov dword [rdi + 0x2c], eax
mov eax, dword [rbx + 0xf0]
mov dword [rdi + 0x30], eax
mov eax, 1
jmp 0x14019a460
mov rax, qword [rbx + 0xf8]
jmp 0x14019a460
mov rax, qword [rbx + 0x100]
jmp 0x14019a460
mov qword [rbx + 0x98], rdi
mov eax, 1
jmp 0x14019a460
mov eax, dword [rdi + 0x2c]
mov dword [rbx + 0xa4], eax
mov eax, 1
jmp 0x14019a460
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
call fcn.14019d420
mov eax, 1
jmp 0x14019a460
mov eax, esi
and edi, esi
not eax
and eax, dword [rbx + 0x4c]
or eax, edi
mov dword [rbx + 0x4c], eax
mov eax, 1
jmp 0x14019a460
nop
test rdi, rdi
je 0x14019a8df
mov rax, qword [rbx + 0xb8]
lea rcx, [sym.SystemInformer.exe_PhIsExecutingInWow64]
xor edx, edx
cmp rax, rcx
cmovne rdx, rax
mov qword [rdi], rdx
nop
test rsi, rsi
je 0x14019a273
mov rax, qword [rbx + 0xc0]
mov qword [r9], rax
mov eax, 1
jmp 0x14019a460
mov rdx, rdi
mov rcx, rbx
call fcn.14019cfc0
mov eax, 1
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
shr eax, 4
and eax, 1
add eax, dword [rbx + 0xec]
jmp 0x14019a460
cmp esi, dword [rbx + 0xd4]
jae case.0x14019a22a.1026
lfence
mov rax, qword [rbx + 0xc8]
mov ecx, esi
mov r8, qword [rax + rcx*8]
test r8, r8
je case.0x14019a22a.1026
mov eax, dword [r8]
test al, 1
je case.0x14019a22a.1026
test al, 4
je 0x14019a973
mov rdx, qword [rbx + 0x10]
mov r9d, edi
mov rcx, rbx
call fcn.14019c440
mov eax, 1
jmp 0x14019a460
mov rdx, qword ds:[rbx + 0x18]
mov r9d, edi
mov rcx, rbx
call fcn.14019c440
mov eax, 1
jmp 0x14019a460
movups xmm0, xmmword ds:[rdi]
mov eax, 1
movups xmmword [rbx + 0x250], xmm0
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
test esi, esi
je 0x14019a9c5
bts eax, 0x1b
mov dword [rbx + 0x74], esi
mov dword [rbx + 0x40], eax
mov eax, 1
jmp 0x14019a460
btr eax, 0x1b
mov rcx, rbx
mov dword [rbx + 0x40], eax
call fcn.14019af40
mov eax, 1
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
shr eax, 0x16
not eax
and eax, 1
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
neg rsi
sbb ecx, ecx
btr eax, 0x1e
and ecx, 0x40000000
or ecx, eax
mov eax, 1
mov dword [rbx + 0x40], ecx
jmp 0x14019a460
mov rax, rsi
mov qword [rbx + 0x270], rsi
neg rax
mov eax, dword [rbx + 0x40]
sbb ecx, ecx
btr eax, 0x1f
and ecx, 0x80000000
or ecx, eax
mov eax, 1
mov dword [rbx + 0x40], ecx
jmp 0x14019a460
mov eax, dword ds:[r9]
mov dword [rbx + 0x2b8], eax
mov rax, qword [r9 + 8]
mov qword [rbx + 0x2c0], rax
mov rax, qword [r9 + 0x10]
mov qword [rbx + 0x2c8], rax
mov eax, 1
jmp 0x14019a460
mov edx, edi
mov rcx, rbx
call fcn.14019d8a0
movzx eax, al
jmp 0x14019a460
mov eax, dword [rbx + 0x40]
shr eax, 4
and eax, 1
add eax, dword [rbx + 0xec]
cmp esi, eax
jae case.0x14019a22a.1026
lfence
mov eax, dword [rbx + 0x40]
mov r8, rdi
shr eax, 4
and eax, 1
sub esi, eax
mov rax, qword [rbx + 0xe0]
mov rcx, qword [rax + rsi*8]
mov edx, dword [rcx + 4]
mov rcx, rbx
call fcn.14019b890
movzx eax, al
jmp 0x14019a460