Function at 0x35f2f
Capabilities:
Resolve function by parsing pe exports

Disassembly:
call fcn.000321f3
test bl, 0x32
jmp 0x3cc11
push 0xf54d2f3e
lea esp, [esp + 4]
jg 0x36c70
push 0x3bab7
jmp 0x26c7f
push dword [sym.imp.ntoskrnl.exe_KeWaitForMultipleObjects]
push 0xe700c9b4
pushal
pushal
push dword [esp + 0x44]
ret 0x48
bswap cx
lea esp, [esp + 0x30]
js 0x2943e
lea ecx, [ebp - 0xc]
pushfd
jmp 0x40df9
not ecx
lea ecx, [ebp - 0xc]
push ebp
pushal
mov byte [esp + 4], 0xa7
mov dword [esp + 0x20], ecx
pushfd
jmp 0x2ee82
jmp 0x3821c
pushfd
pushal
mov dword [esp + 0x20], 0x34991
call fcn.0003c09d
pushfd
lea esp, [esp + 0xc]
call fcn.00013720
and si, si
sbb si, 0xaa08
mov esi, eax
test ah, ah
pushal
clc
test esi, esi
pushfd
push dword [esp + 4]
lea esp, [esp + 0x28]
jne 0x39713
push ebx
call fcn.0003140d
lea esp, [esp + 0x20]
je fcn.00036bef
mov bl, al
btc bx, 5
pushal
cmp bl, 0x79
mov ebx, dword [ebp - 4]
cmp eax, 0xa3fa0608
cmp ebx, 0x10
pushal
push edi
mov byte [esp], dl
lea esp, [esp + 0x44]
jbe 0x3a882
jmp 0x365ab
lea esp, [esp + 8]
je 0x2b6b1
jmp 0x235fa
pushal
mov dword [esp + 0x1c], esi
pushfd
mov word [esp], ax
call fcn.000410a3
test al, bl
cmp esi, 2
push 0x5791e18a
lea esp, [esp + 4]
jne fcn.0002db87
push 0xb14c54b9
lea edx, [esi*4 - 0x1e227546]
movzx edx, word [ebx]
push dword [esp]
lea esp, [esp + 8]
jno 0x33c5a
push esp
pushfd
mov dword [esp + 4], edx
jmp 0x3ebb3
push dword [esp + 0x10]
push dword [esp]
mov dword [esp + 0x28], 2
lea esp, [esp + 0x28]
jo 0x244a3
push ebx
mov byte [esp], 0xbc
mov dword [esp], 0x3bab7
call fcn.00026467
not dh
movsx dx, dl
push 0x100
jns 0x37840
call fcn.00027960
push dword [esp]
mov dword [esp + 0x20], 0x3bab7
pushal
jmp 0x226c4
pushfd
pushfd
call fcn.000244f3
call fcn.00040828
mov dword [ebp - 0xc], ebx
push 0x7466f338
mov byte [esp], 0x11
mov dword [ebp - 8], eax
mov dword [esp], esp
mov dword [esp + 0x44], 0x328fc
jmp loc.000140db
lea esp, [esp + 0x24]
call sub.ntoskrnl.exe_memset
bt sp, sp
adc ax, 0x1f01
add esp, 0xc
bswap eax
push 0x13
cwde
lea eax, [ebp - 0x138]
pushfd
mov byte [esp], 0x43
mov dword [esp], edi
mov dword [esp], eax
pushfd
pushal
mov byte [esp + 4], 0x28
mov dword [esp + 0x20], 0x1e02c
mov word [esp], 0xa39e
pushfd
lea esp, [esp + 0x24]
call fcn.0001ad20
xchg ch, dl
pushal
pushal
seto ch
mov dword [esp + 0x3c], 0
movzx cx, al
call fcn.00021df6
jmp 0x2d6a2
lea esp, [esp + 0x34]
je 0x39ecd
jmp 0x382cd
push 0x3a97b9de
mov dword [esp], ebx
jmp 0x2ecff
pushal
call fcn.0002c10c
pushal
jmp 0x31744
mov dl, bl
lea edx, [ecx*4 + 0x6290dd32]
bswap dx
lea edx, [ebp - 0x138]
pushal
pushfd
push esi
mov dword [esp + 0x24], 0
mov word [esp + 8], 0x8f92
mov word [esp], bx
pushfd
mov dword [esp + 0x24], edx
jmp 0x33cc6
push 0
pushal
bswap ecx
mov dword [esp + 0x1c], 0
pushfd
mov dword [esp + 0x1c], 0
pop ecx
pushal
mov dword [esp + 0x34], 0
movsx cx, cl
mov dword [esp + 0x30], 0
lea ecx, [ebp + 0x79deac45]
pushfd
pop ecx
push 0xe0e9e98e
mov dword [esp + 0x30], 1
bswap cx
jmp 0x28960
jmp 0x300fb
lea edi, [eax*4 - 0x35d4b31e]
movzx edi, cl
movzx di, dl
mov edi, dword [ebp - 4]
push 0x3a902d2a
pushfd
pushfd
mov dword [esp + 8], edi
jmp 0x3eba0
movzx ax, cl
or ah, cl
shl ah, cl
mov eax, dword [0x1e4f8]
pushal
cmp al, ch
test eax, eax
lea esp, [esp + 0x20]
pushfd
pushfd
jmp 0x34126
pushal
mov dword [esp + 0x1c], 0
mov byte [esp], ah
mov byte [esp], 0x3c
mov dword [esp + 0x18], esi
jmp 0x36adc
pushfd
push esp
mov dword [esp + 0xc], esi
mov byte [esp], 0x2f
mov dword [esp + 8], 0
push ecx
lea esp, [esp + 0xc]
call fcn.0001ad60
shl ch, cl
btc ecx, edi
xor ch, 0xee
mov ecx, dword [0x1e514]
pushfd
mov byte [esp], 0x1e
jmp 0x3c7a6
pushfd
cmp ecx, eax
call fcn.0002e7a5
cmp eax, dword [0x1e2b8]
call fcn.00021643
jmp 0x3b94e
mov byte [esp], 0xff
mov word [esp], ax
call fcn.00013b59
mov dword [esp], ecx
pushfd
mov dword [esp], 2
jmp 0x2ce46