Function at 0x140002950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rbx, qword [0x1400b8618]
test rbx, rbx
je 0x1400029c3
movsxd rax, dword [rbx + 0x3c]
xor edi, edi
mov ecx, dword [rax + rbx + 0x88]
add rcx, rbx
mov r14d, dword [rcx + 0x1c]
mov esi, dword [rcx + 0x20]
add r14, rbx
mov r15d, dword [rcx + 0x24]
add rsi, rbx
mov ebp, dword [rcx + 0x18]
add r15, rbx
test ebp, ebp
je 0x1400029c3
nop
mov ecx, dword [rsi]
lea rdx, str.CreateThread
add rcx, rbx
call fcn.140061560
test eax, eax
je 0x140002b63
inc edi
add rsi, 4
cmp edi, ebp
jb 0x1400029a0
xor eax, eax
mov qword [0x1400b8608], rax
test rbx, rbx
je 0x140002a23
movsxd rax, dword [rbx + 0x3c]
xor edi, edi
mov ecx, dword [rax + rbx + 0x88]
add rcx, rbx
mov r14d, dword [rcx + 0x1c]
mov esi, dword [rcx + 0x20]
add r14, rbx
mov r15d, dword [rcx + 0x24]
add rsi, rbx
mov ebp, dword [rcx + 0x18]
add r15, rbx
test ebp, ebp
je 0x140002a23
nop dword [rax]
mov ecx, dword [rsi]
lea rdx, str.WaitForSingleObject
add rcx, rbx
call fcn.140061560
test eax, eax
je 0x140002b74
inc edi
add rsi, 4
cmp edi, ebp
jb 0x140002a00
xor eax, eax
mov qword [0x1400b8600], rax
test rbx, rbx
je 0x140002a83
movsxd rax, dword [rbx + 0x3c]
xor edi, edi
mov ecx, dword [rax + rbx + 0x88]
add rcx, rbx
mov r14d, dword [rcx + 0x1c]
mov esi, dword [rcx + 0x20]
add r14, rbx
mov r15d, dword [rcx + 0x24]
add rsi, rbx
mov ebp, dword [rcx + 0x18]
add r15, rbx
test ebp, ebp
je 0x140002a83
nop dword [rax]
mov ecx, dword [rsi]
lea rdx, str.VirtualAlloc
add rcx, rbx
call fcn.140061560
test eax, eax
je 0x140002b85
inc edi
add rsi, 4
cmp edi, ebp
jb 0x140002a60
xor eax, eax
mov qword [0x1400b85f0], rax
test rbx, rbx
je 0x140002ae3
movsxd rax, dword [rbx + 0x3c]
xor edi, edi
mov ecx, dword [rax + rbx + 0x88]
add rcx, rbx
mov r14d, dword [rcx + 0x1c]
mov esi, dword [rcx + 0x20]
add r14, rbx
mov r15d, dword [rcx + 0x24]
add rsi, rbx
mov ebp, dword [rcx + 0x18]
add r15, rbx
test ebp, ebp
je 0x140002ae3
nop dword [rax]
mov ecx, dword [rsi]
lea rdx, [0x140072a20]
add rcx, rbx
call fcn.140061560
test eax, eax
je 0x140002b96
inc edi
add rsi, 4
cmp edi, ebp
jb 0x140002ac0
xor eax, eax
mov qword [0x1400b85f8], rax
test rbx, rbx
je 0x140002b3f
movsxd rax, dword [rbx + 0x3c]
xor edi, edi
mov ecx, dword [rax + rbx + 0x88]
add rcx, rbx
mov r14d, dword [rcx + 0x1c]
mov esi, dword [rcx + 0x20]
add r14, rbx
mov r15d, dword [rcx + 0x24]
add rsi, rbx
mov ebp, dword [rcx + 0x18]
add r15, rbx
test ebp, ebp
je 0x140002b3f
nop dword [rax]
mov ecx, dword [rsi]
lea rdx, [0x140072a38]
add rcx, rbx
call fcn.140061560
test eax, eax
je 0x140002ba7
inc edi
add rsi, 4
cmp edi, ebp
jb 0x140002b20
mov qword [0x1400b8610], 0
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
ret
movzx ecx, word [r15 + rdi*2]
mov eax, dword [r14 + rcx*4]
add rax, rbx
jmp 0x1400029c5
movzx ecx, word [r15 + rdi*2]
mov eax, dword [r14 + rcx*4]
add rax, rbx
jmp 0x140002a25
movzx ecx, word [r15 + rdi*2]
mov eax, dword [r14 + rcx*4]
add rax, rbx
jmp 0x140002a85
movzx ecx, word [r15 + rdi*2]
mov eax, dword [r14 + rcx*4]
add rax, rbx
jmp 0x140002ae5
movzx ecx, word [r15 + rdi*2]
mov eax, dword [r14 + rcx*4]
add rax, rbx
mov qword [0x1400b8610], rax
jmp 0x140002b4a