Function at 0x140002600
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x2f8
movaps xmmword [rsp + 0x2c0], xmm6
movaps xmmword [rsp + 0x2d0], xmm7
movaps xmmword [rsp + 0x2e0], xmm8
mov ecx, 8
call fcn.14003cda0
mov ecx, 1
mov qword [rax], 0
mov rsi, rax
call fcn.14003cda0
mov qword [rsi], rax
mov ecx, 8
call fcn.14003cda0
mov qword [rax], 0
mov ecx, 1
mov qword [rsp + 0x38], rax
call fcn.14003cda0
mov rdi, qword [rsp + 0x38]
mov ecx, 0x10
mov qword [rdi], rax
call fcn.14003cda0
pxor xmm0, xmm0
mov rcx, rsi
mov qword [rsp + 0x40], rax
movups xmmword [rax], xmm0
call fcn.140004b10
test al, al
je 0x1400026a9
mov rcx, qword [rsp + 0x38]
call fcn.140003420
test al, al
jne 0x140002cb3
lea rdx, [0x140002600]
lea rax, [0x1400249b0]
movdqa xmm8, xmmword [str.NtProtectVirtualMemory]
movd xmm7, dword [0x14016f6b0]
sub rax, rdx
mov edx, 0xbeefdead
movzx r12d, word [0x14016f6b4]
movq xmm6, qword [0x14016f6b8]
xor rax, rdx
movzx ebp, word [0x14016f6c0]
add rdx, 0x1fbde042
lea rcx, [rsp + 0x150]
add rax, rdx
mov byte [rsp + 0x236], 0
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xc8], rax
mov word [rsp + 0x234], r12w
mov word [rsp + 0x158], bp
movaps xmmword [rsp + 0x220], xmm8
movd dword [rsp + 0x230], xmm7
movq qword [rsp + 0x150], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
mov edi, dword [rax + 0x8c]
test edi, edi
je 0x1400027f5
mov r15d, dword [rax + 0x88]
lea rax, [r15 + rbx]
mov r8d, dword [rax + 0x20]
mov r13d, dword [rax + 0x18]
mov qword [rsp + 0x48], rax
lea r15, [r8 + rbx]
test r13d, r13d
je 0x1400027f5
xor edi, edi
lea r14, [rsp + 0x220]
jmp 0x14000279d
add rdi, 1
add r15, 4
cmp rdi, r13
je 0x1400027f5
mov ecx, dword [r15]
mov rdx, r14
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140002790
mov rdx, qword [rsp + 0x48]
lea rcx, [rbx + rdi*2]
mov eax, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
je 0x1400027f5
lea rcx, [rsp + 0x6c]
lea rdx, [rsp + 0xc0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xc8]
mov ecx, 0x1234567
call rax
lea rcx, [rsp + 0x160]
movabs rax, 0x19d9d9d94
mov qword [rsp + 0xd0], 0
mov qword [rsp + 0xd8], rax
mov word [rsp + 0x254], r12w
mov byte [rsp + 0x256], 0
mov word [rsp + 0x168], bp
movaps xmmword [rsp + 0x240], xmm8
movd dword [rsp + 0x250], xmm7
movq qword [rsp + 0x160], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
mov r9d, dword [rax + 0x8c]
test r9d, r9d
je 0x140002905
mov r15d, dword [rax + 0x88]
lea rax, [r15 + rbx]
mov r8d, dword [rax + 0x20]
mov r13d, dword [rax + 0x18]
mov qword [rsp + 0x48], rax
lea r15, [r8 + rbx]
test r13d, r13d
je 0x140002905
xor edi, edi
lea r14, [rsp + 0x240]
jmp 0x1400028ad
add rdi, 1
add r15, 4
cmp rdi, r13
je 0x140002905
mov ecx, dword [r15]
mov rdx, r14
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400028a0
mov rdx, qword [rsp + 0x48]
lea rcx, [rbx + rdi*2]
mov eax, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
je 0x140002905
lea rcx, [rsp + 0x70]
lea rdx, [rsp + 0xd0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xd8]
mov ecx, 0x1234567
call rax
lea rcx, [rsp + 0x170]
movabs rax, 0x19d9d9d94
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], rax
mov word [rsp + 0x274], r12w
mov byte [rsp + 0x276], 0
mov word [rsp + 0x178], bp
movaps xmmword [rsp + 0x260], xmm8
movd dword [rsp + 0x270], xmm7
movq qword [rsp + 0x170], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
mov r8d, dword [rax + 0x8c]
test r8d, r8d
je 0x140002a15
mov r15d, dword [rax + 0x88]
lea rax, [r15 + rbx]
mov r8d, dword [rax + 0x20]
mov r13d, dword [rax + 0x18]
mov qword [rsp + 0x48], rax
lea r15, [r8 + rbx]
test r13d, r13d
je 0x140002a15
xor edi, edi
lea r14, [rsp + 0x260]
jmp 0x1400029bd
add rdi, 1
add r15, 4
cmp rdi, r13
je 0x140002a15
mov ecx, dword [r15]
mov rdx, r14
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400029b0
mov rdx, qword [rsp + 0x48]
lea rcx, [rbx + rdi*2]
mov eax, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
je 0x140002a15
lea rcx, [rsp + 0x74]
lea rdx, [rsp + 0xe0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xe8]
mov ecx, 0x1234567
call rax
lea rcx, [rsp + 0x180]
movabs rax, 0x19d9d9d94
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], rax
mov word [rsp + 0x294], r12w
mov byte [rsp + 0x296], 0
mov word [rsp + 0x188], bp
movaps xmmword [rsp + 0x280], xmm8
movd dword [rsp + 0x290], xmm7
movq qword [rsp + 0x180], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
mov ecx, dword [rax + 0x8c]
test ecx, ecx
je 0x140002b24
mov r15d, dword [rax + 0x88]
lea rax, [r15 + rbx]
mov r8d, dword [rax + 0x20]
mov r13d, dword [rax + 0x18]
mov qword [rsp + 0x48], rax
lea rdi, [r8 + rbx]
test r13d, r13d
je 0x140002b24
xor r15d, r15d
lea r14, [rsp + 0x280]
jmp 0x140002acd
add r15, 1
add rdi, 4
cmp r15, r13
je 0x140002b24
mov ecx, dword [rdi]
mov rdx, r14
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140002ac0
mov rdi, qword [rsp + 0x48]
lea rcx, [rbx + r15*2]
mov edx, dword [rdi + 0x24]
mov eax, dword [rdi + 0x1c]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
je 0x140002b24
lea rcx, [rsp + 0x78]
lea rdx, [rsp + 0xf0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xf8]
mov ecx, 0x1234567
call rax
lea rcx, [rsp + 0x190]
movabs rax, 0x19d9d9d94
mov qword [rsp + 0x100], 0
mov qword [rsp + 0x108], rax
mov word [rsp + 0x2b4], r12w
mov byte [rsp + 0x2b6], 0
mov word [rsp + 0x198], bp
movaps xmmword [rsp + 0x2a0], xmm8
movd dword [rsp + 0x2b0], xmm7
movq qword [rsp + 0x190], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
mov edx, dword [rax + 0x8c]
test edx, edx
je 0x140002c2a
mov r13d, dword [rax + 0x88]
add r13, rbx
mov r14d, dword [r13 + 0x20]
mov ebp, dword [r13 + 0x18]
add r14, rbx
test ebp, ebp
je 0x140002c2a
xor r15d, r15d
lea r12, [rsp + 0x2a0]
jmp 0x140002bd5
add r15, 1
add r14, 4
cmp rbp, r15
je 0x140002c2a
mov ecx, dword [r14]
mov rdx, r12
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x140002bc8
mov edx, dword [r13 + 0x24]
lea rcx, [rbx + r15*2]
mov eax, dword [r13 + 0x1c]
movzx edx, word [rcx + rdx]
lea rdx, [rbx + rdx*4]
mov eax, dword [rdx + rax]
add rax, rbx
je 0x140002c2a
lea rcx, [rsp + 0x7c]
lea rdx, [rsp + 0x100]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x108]
mov ecx, 0x1234567
call rax
call fcn.1400016a0
mov rcx, qword [rsp + 0x40]
mov edx, 0x10
call fcn.14003cd90
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
test rcx, rcx
je 0x140002c55
mov edx, 1
call fcn.14003cd90
mov rcx, qword [rsp + 0x38]
mov edx, 8
call fcn.14003cd90
mov rcx, qword [rsi]
test rcx, rcx
je 0x140002c76
mov edx, 1
call fcn.14003cd90
mov edx, 8
mov rcx, rsi
call fcn.14003cd90
nop
movaps xmm6, xmmword [rsp + 0x2c0]
movaps xmm7, xmmword [rsp + 0x2d0]
xor eax, eax
movaps xmm8, xmmword [rsp + 0x2e0]
add rsp, 0x2f8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [0x140002600]
lea rax, [0x1400249b0]
movdqa xmm8, xmmword [str.NtProtectVirtualMemory]
movd xmm7, dword [0x14016f6b0]
sub rax, rdx
mov edx, 0xbeefdead
xor r14d, r14d
movzx r12d, word [0x14016f6b4]
xor rax, rdx
movzx ebp, word [0x14016f6c0]
movq xmm6, qword [0x14016f6b8]
add rdx, 0x1fbde042
add rax, rdx
lea rcx, [rsp + 0x110]
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x88], rax
mov word [rsp + 0x1b4], r12w
mov byte [rsp + 0x1b6], 0
mov word [rsp + 0x118], bp
movaps xmmword [rsp + 0x1a0], xmm8
movd dword [rsp + 0x1b0], xmm7
movq qword [rsp + 0x110], xmm6
call fcn.140001550
mov r14, rax
movsxd rax, dword [rax + 0x3c]
add rax, r14
cmp dword [rax + 0x8c], 0
je 0x140002dfc
mov r8d, dword [rax + 0x88]
lea rdi, [r8 + r14]
mov r9d, dword [rdi + 0x20]
mov ebx, dword [rdi + 0x18]
add r9, r14
test ebx, ebx
je 0x140002dfc
xor r15d, r15d
lea r13, [rsp + 0x1a0]
jmp 0x140002d9c
add r15, 1
add r9, 4
cmp rbx, r15
je 0x140002dfc
mov ecx, dword [r9]
mov rdx, r13
mov qword [rsp + 0x48], r9
add rcx, r14
call sub.msvcrt.dll_strcmp
mov r9, qword [rsp + 0x48]
test eax, eax
jne 0x140002d8f
mov ecx, dword [rdi + 0x24]
add r15, r15
mov edx, dword [rdi + 0x1c]
lea rax, [r15 + r14]
movzx eax, word [rax + rcx]
lea rax, [r14 + rax*4]
mov eax, dword [rax + rdx]
add rax, r14
je 0x140002dfc
lea rcx, [rsp + 0x5c]
lea rdx, [rsp + 0x80]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x88]
mov ecx, 0x1234567
call rax
mov eax, 0x67676765
xor r13d, r13d
lea rcx, [rsp + 0x120]
mov word [rsp + 0x1d4], r12w
shl rax, 2
mov qword [rsp + 0x90], r13
mov qword [rsp + 0x98], rax
mov byte [rsp + 0x1d6], 0
mov word [rsp + 0x128], bp
movaps xmmword [rsp + 0x1c0], xmm8
movd dword [rsp + 0x1d0], xmm7
movq qword [rsp + 0x120], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
cmp dword [rax + 0x8c], 0
je 0x140002f09
mov r15d, dword [rax + 0x88]
add r15, rbx
mov r8d, dword [r15 + 0x20]
mov r9d, dword [r15 + 0x18]
add r8, rbx
test r9d, r9d
je 0x140002f09
mov edi, r9d
xor r14d, r14d
lea r13, [rsp + 0x1c0]
jmp 0x140002ea7
add r14, 1
add r8, 4
cmp r14, rdi
je 0x140002f09
mov ecx, dword [r8]
mov rdx, r13
mov qword [rsp + 0x48], r8
add rcx, rbx
call sub.msvcrt.dll_strcmp
mov r8, qword [rsp + 0x48]
test eax, eax
jne 0x140002e9a
mov ecx, dword [r15 + 0x24]
add r14, r14
mov edx, dword [r15 + 0x1c]
lea rax, [r14 + rbx]
movzx eax, word [rax + rcx]
lea rax, [rbx + rax*4]
mov eax, dword [rax + rdx]
add rax, rbx
je 0x140002f09
lea rcx, [rsp + 0x60]
lea rdx, [rsp + 0x90]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x98]
mov ecx, 0x1234567
call rax
mov eax, 0x67676765
xor r11d, r11d
lea rcx, [rsp + 0x130]
mov word [rsp + 0x1f4], r12w
shl rax, 2
mov qword [rsp + 0xa0], r11
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0x1f6], 0
mov word [rsp + 0x138], bp
movaps xmmword [rsp + 0x1e0], xmm8
movd dword [rsp + 0x1f0], xmm7
movq qword [rsp + 0x130], xmm6
call fcn.140001550
mov r14, rax
movsxd rax, dword [rax + 0x3c]
add rax, r14
cmp dword [rax + 0x8c], 0
je 0x140003010
mov r8d, dword [rax + 0x88]
lea rdi, [r8 + r14]
mov r9d, dword [rdi + 0x20]
mov ebx, dword [rdi + 0x18]
add r9, r14
test ebx, ebx
je 0x140003010
xor r15d, r15d
lea r13, [rsp + 0x1e0]
jmp 0x140002fb0
add r15, 1
add r9, 4
cmp rbx, r15
je 0x140003010
mov ecx, dword [r9]
mov rdx, r13
mov qword [rsp + 0x48], r9
add rcx, r14
call sub.msvcrt.dll_strcmp
mov r9, qword [rsp + 0x48]
test eax, eax
jne 0x140002fa3
mov ecx, dword [rdi + 0x24]
add r15, r15
mov edx, dword [rdi + 0x1c]
lea rax, [r15 + r14]
movzx eax, word [rax + rcx]
lea rax, [r14 + rax*4]
mov eax, dword [rax + rdx]
add rax, r14
je 0x140003010
lea rcx, [rsp + 0x64]
lea rdx, [rsp + 0xa0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xa8]
mov ecx, 0x1234567
call rax
mov eax, 0x67676765
xor r10d, r10d
lea rcx, [rsp + 0x140]
mov word [rsp + 0x214], r12w
shl rax, 2
mov qword [rsp + 0xb0], r10
mov qword [rsp + 0xb8], rax
mov byte [rsp + 0x216], 0
mov word [rsp + 0x148], bp
movaps xmmword [rsp + 0x200], xmm8
movd dword [rsp + 0x210], xmm7
movq qword [rsp + 0x140], xmm6
call fcn.140001550
mov rbx, rax
movsxd rax, dword [rax + 0x3c]
add rax, rbx
cmp dword [rax + 0x8c], 0
je 0x140003114
mov r12d, dword [rax + 0x88]
add r12, rbx
mov r15d, dword [r12 + 0x20]
mov r13d, dword [r12 + 0x18]
add r15, rbx
test r13d, r13d
je 0x140003114
xor ebp, ebp
lea r14, [rsp + 0x200]
jmp 0x1400030b9
add rbp, 1
add r15, 4
cmp r13, rbp
je 0x140003114
mov ecx, dword [r15]
mov rdx, r14
add rcx, rbx
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x1400030ac
mov ecx, dword [r12 + 0x24]
add rbp, rbp
mov edx, dword [r12 + 0x1c]
lea rax, [rbp + rbx]
movzx eax, word [rax + rcx]
lea rax, [rbx + rax*4]
mov eax, dword [rax + rdx]
add rax, rbx
je 0x140003114
lea rcx, [rsp + 0x68]
lea rdx, [rsp + 0xb0]
mov r9d, 1
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0xb8]
mov ecx, 0x1234567
call rax
or ecx, 0xffffffff
call sub.msvcrt.dll_exit
mov rcx, qword [rsp + 0x40]
mov edx, 0x10
mov rbx, rax
call fcn.14003cd90
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
test rcx, rcx
je 0x140003145
mov edx, 1
call fcn.14003cd90
mov rcx, qword [rsp + 0x38]
mov edx, 8
call fcn.14003cd90
jmp 0x14000316d
mov rcx, qword [rsi]
test rcx, rcx
je 0x14000317f
mov edx, 1
call fcn.14003cd90
mov rcx, rsi
mov edx, 8
call fcn.14003cd90
mov rcx, rbx
call fcn.14001bde0
mov rbx, rax
jmp 0x14000316d
sub rsp, 0x28
call fcn.14001a6f0
mov rax, qword [0x140173a50]
xor edx, edx
mov rcx, qword [rax]
mov rax, qword [0x140173a70]
mov r9d, dword [rax]
mov rax, qword [0x140173a60]
mov r8, qword [rax]
add rsp, 0x28
jmp 0x140002600