Function at 0x140002360
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
lea rbp, [rsp - 0x8b0]
sub rsp, 0x9b0
xor r13d, r13d
movsxd rdi, ecx
mov ebx, r13d
mov rsi, rdx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea edx, [r13 + 8]
mov r8d, 0xff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
test rax, rax
je 0x1400023a9
mov dword [rax], 0xc6
mov rbx, rax
cmp dword [rbx], 0x15e
jle 0x14000240d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
xor ecx, ecx
call qword [sym.imp.USER32.dll_RegisterClassW]
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
xor r9d, r9d
mov dword [rsp + 0x28], r13d
xor r8d, r8d
mov qword [rsp + 0x20], r13
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.USER32.dll_IsDialogMessageW]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8, rbx
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0x367dc15a
call fcn.140001aa0
mov rcx, rax
mov edx, 0x19f0eeaf
call fcn.140001bc0
mov qword [section..data], rax
test rax, rax
jne 0x140002452
add rsp, 0x9b0
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov qword [rsp + 0x9e0], r12
mov ecx, 0x367dc15a
mov qword [rsp + 0x9e8], r14
mov qword [rsp + 0x9f0], r15
call fcn.140001aa0
mov r15, rax
test rax, rax
je 0x140002779
xor edx, edx
mov dword [rsp + 0x40], 0x4c36465c
mov r8d, 0x800
mov dword [rsp + 0x44], 0x175eaa8e
lea rcx, [rbp + 0xb0]
mov dword [rsp + 0x48], 0x8d084fa2
mov dword [rsp + 0x4c], 0x481c6d21
mov r12, r13
mov dword [rsp + 0x50], 0x61f084f
mov dword [rsp + 0x54], 0x4fa97200
mov dword [rsp + 0x58], 0x581911ad
mov dword [rsp + 0x5c], 0x288762c7
mov dword [rsp + 0x30], 0x6acee5cc
mov dword [rsp + 0x34], 0x376ac2bc
mov dword [rsp + 0x38], 0xfb7402b4
mov dword [rsp + 0x3c], 0x4cd58703
call fcn.1400027b0
mov ebx, r13d
test edi, edi
jle 0x1400025c5
movzx eax, word [0x14000329c]
mov r10, r13
nop dword [rax]
lea ecx, [rbx + 1]
cmp ecx, edi
jge 0x1400025b7
mov rdx, qword [rsi + r10*8 + 8]
lea r8, [rbp + 0xb0]
inc r10
lea r12, [rbp + 0xb0]
sub r8, rdx
mov ebx, ecx
nop word [rax + rax]
movzx ecx, byte [rdx]
mov byte [r8 + rdx], cl
lea rdx, [rdx + 1]
test cl, cl
jne 0x140002540
lea r11d, [rbx + 1]
cmp r11d, edi
jge 0x1400025b7
nop dword [rax + rax]
lea rcx, [rbp + 0xb0]
dec rcx
nop word [rax + rax]
cmp byte [rcx + 1], r13b
lea rcx, [rcx + 1]
jne 0x140002570
mov word [rcx], ax
inc ebx
lea rcx, [rbp + 0xb0]
inc r11d
inc r10
dec rcx
nop
cmp byte [rcx + 1], r13b
lea rcx, [rcx + 1]
jne 0x140002590
mov r9, qword [rsi + r10*8]
xor r8d, r8d
movzx edx, byte [r9 + r8]
mov byte [rcx + r8], dl
lea r8, [r8 + 1]
test dl, dl
jne 0x1400025a1
cmp r11d, edi
jl 0x140002560
inc ebx
inc r10
cmp r10, rdi
jl 0x140002510
mov edx, 0x586d9338
mov rcx, r15
call fcn.140001bc0
mov rbx, rax
test rax, rax
je 0x140002779
mov edx, 0x761c19ca
mov rcx, r15
call fcn.140001bc0
mov rdi, rax
test rax, rax
je 0x140002779
mov edx, 0x72187fe1
mov rcx, r15
call fcn.140001bc0
mov rsi, rax
test rax, rax
je 0x140002779
mov edx, 0x26c5601c
mov rcx, r15
call fcn.140001bc0
mov r14, rax
test rax, rax
je 0x140002779
mov edx, 0x65
xor ecx, ecx
lea r8d, [rdx - 0x5b]
call rbx
mov rbx, rax
test rax, rax
je 0x140002779
mov rdx, rax
xor ecx, ecx
call rdi
test rax, rax
je 0x140002779
mov rcx, rax
call rsi
mov rsi, rax
test rax, rax
je 0x140002779
mov rdx, rbx
xor ecx, ecx
call r14
mov edi, eax
test eax, eax
je 0x140002779
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov r8d, edi
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
je 0x1400026b4
mov edx, r13d
test rdi, rdi
je 0x1400026b4
mov rcx, rax
sub rsi, rax
nop
movzx eax, byte [rsi + rcx]
inc edx
mov byte [rcx], al
lea rcx, [rcx + 1]
movsxd rax, edx
cmp rax, rdi
jb 0x1400026a0
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.1400010a0
mov r8, rdi
lea rcx, [rbp - 0x50]
mov rdx, rbx
call fcn.140001000
mov qword [rsp + 0x6c], r13
mov dword [rsp + 0x74], r13d
mov dword [rbp - 0x54], r13d
test rbx, rbx
je 0x140002779
movsxd r8, dword [rbx + 0x3c]
add r8, rbx
mov qword [rsp + 0x60], rbx
mov dword [rsp + 0x68], 8
mov qword [rsp + 0x70], r8
cmp dword [r8], 0x4550
jne 0x140002779
movzx eax, word [r8 + 0x16]
mov rdx, r12
movzx ecx, word [r8 + 0x14]
shr eax, 0xd
add rcx, 0x18
and eax, 1
add rcx, r8
mov dword [rbp - 0x58], eax
lea rax, [r8 + 0x90]
mov qword [rbp - 0x80], rax
lea rax, [r8 + 0xb0]
mov qword [rbp - 0x78], rax
lea rax, [r8 + 0xd0]
mov qword [rbp - 0x70], rax
lea rax, [r8 + 0xa0]
mov qword [rbp - 0x68], rax
lea rax, [r8 + 0x88]
mov qword [rsp + 0x78], rcx
mov r8, r15
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x60], rax
call fcn.140001e20
xor eax, eax
jmp 0x14000277e
mov eax, 0xffffffff
mov r14, qword [rsp + 0x9e8]
mov r12, qword [rsp + 0x9e0]
mov r15, qword [rsp + 0x9f0]
add rsp, 0x9b0
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret