Function at 0x140002620
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x98
test rcx, rcx
je 0x1400027ef
mov rsi, rcx
lea rax, [rcx + 0x1c]
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x58]
mov edi, dword [rax]
mov edx, 0xbb
xor ecx, ecx
mov r8d, edi
call fcn.140002bc0
cmp edi, eax
je 0x1400026af
mov rax, qword [rsi]
mov r14, qword [rsi + 8]
mov ebx, dword [rax + 0x28]
mov rdi, rbx
add rdi, r14
mov r8d, 0x99
xor ecx, ecx
mov edx, ebx
call fcn.140002bc0
mov rcx, r14
mov edx, eax
xor r8d, r8d
call rdi
mov qword [rsp + 0x28], 0xa9
mov qword [rsp + 0x20], 0x2b
mov r9d, 0x28
xor ecx, ecx
mov edx, ebx
mov r8d, ebx
call fcn.140002bc0
mov rcx, qword [rsp + 0x58]
mov dword [rcx], eax
lea rax, [rsi + 0x10]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
je 0x140002842
lea rax, [rsi + 0x18]
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
mov eax, dword [rax]
mov dword [rsp + 0x34], eax
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x20], edx
mov qword [rsp + 0x28], 0xb1
mov r9d, 0x9c5c6f
xor ecx, ecx
mov r8d, edx
call fcn.140002bc0
mov ecx, dword [rsp + 0x34]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x48], rdx
cmp ecx, eax
jle 0x140002809
lea rax, [rsi + 0x38]
mov qword [rsp + 0x88], rax
lea rax, [rsi + 0x40]
mov qword [rsp + 0x90], rax
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x3c], eax
mov qword [rsp + 0x50], 0
jmp 0x14000278f
movsxd rdi, dword [rsp + 0x38]
mov qword [rsp + 0x20], 0x86
mov ecx, 1
mov edx, 0x82
mov r8d, 0xd8
mov r9d, 0xae
call fcn.140002bc0
add rax, qword [rsp + 0x80]
mov dword [rsp + 0x3c], edi
mov qword [rsp + 0x50], rax
cmp rax, rdi
jge 0x1400027fc
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x80], rax
mov eax, dword [rsp + 0x3c]
mov rcx, qword [rsp + 0x40]
mov rcx, qword [rcx]
mov rdx, qword [rsp + 0x80]
mov rcx, qword [rcx + rdx*8]
mov qword [rsp + 0x70], rcx
cmp qword [rsp + 0x70], 0
mov dword [rsp + 0x38], eax
je 0x140002750
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x90]
mov rdx, qword [rcx]
mov rcx, qword [rsp + 0x70]
call qword [rax]
mov rax, qword [rsp + 0x68]
mov eax, dword [rax]
mov dword [rsp + 0x38], eax
jmp 0x140002750
add rsp, 0x98
pop rbx
pop rdi
pop rsi
pop r14
ret
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov rdi, qword [rsp + 0x48]
mov edx, 0xf0
mov r8d, 0xd6
mov r9d, 0xdc
xor ecx, ecx
call fcn.140002bc0
mov rbx, rax
mov ecx, 0x8000
call fcn.140002bc0
mov rcx, rdi
mov rdx, rbx
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword [rsi + 8]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
je case.default.0x1400028b7
mov edx, 0xa1
xor ecx, ecx
call fcn.140002bc0
mov rdi, rax
mov ecx, 0x8000
mov edx, 0x46
mov r8d, 0xfa
mov r9d, 0x63
call fcn.140002bc0
mov rcx, qword [rsp + 0x78]
mov rdx, rdi
mov r8d, eax
call qword [sym.imp.KERNEL32.dll_VirtualFree]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov rdi, rax
mov edx, 0x4d
xor ecx, ecx
call fcn.140002bc0
mov rcx, rdi
mov edx, eax
mov r8, rsi
add rsp, 0x98
pop rbx
pop rdi
pop rsi
pop r14
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
or byte [rbx - 0xf824dd4], bl
fiadd word [rbx + 0x5a97f63b]
scasd eax, dword [rdi]
xchg ebx, eax
mov eax, 0x8efcf570
invalid