Function at 0x140036c18
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
lea rax, vtable.proc_api.0
mov qword [rbp - 0x10], rax
xor r13d, r13d
mov dword [rbp - 8], r13d
lea rax, vtable.driver_api.0
mov qword [rbp - 0x10], rax
mov ebx, r13d
mov edi, 0xbe3139ee
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x140036cbf
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0xb1a099fc
jmp 0x140036cb1
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x140036c91
cmp r9d, ebx
jne 0x140036dc2
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x140036dc2
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x140036dc2
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0xb1a099fc
jmp 0x140036d25
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x140036d07
cmp r14d, edi
je 0x140036d3d
test esi, esi
jne 0x140036cf2
jmp 0x140036dc2
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x140036dca
lea rax, [r11 + rcx]
cmp r8, rax
jae 0x140036dca
mov ebx, 0xb1a099fc
mov edi, ebx
jmp 0x140036d87
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, ebx
mov ebx, eax
imul ebx, ecx
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140036d6d
jmp 0x140036da7
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r8
mov al, byte [r8]
test al, al
jne 0x140036d90
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140036c65
call r8
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.140032a74
mov qword [rbp + 0x50], r13
movabs rax, 0x747726189c4b8ead
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x40], r13
movabs rax, 0x54970616ccb1a3da
mov qword [rbp + 0x40], rax
movabs rax, 0xf5256a2f5a566a31
sub rax, qword [0x14033e050]
sub rax, qword [0x14033e058]
movabs rcx, 0xf8f8cd985edfb4b3
xor rax, rcx
sub rax, qword [0x14033e048]
movabs rcx, 0x7d654b977c6c642
add rcx, rax
mov rdi, qword [0x14033e040]
add rcx, rdi
movabs rax, 0x5a9179a849fb613b
xor rcx, rax
movabs rax, 0x5f627dc6bede1bfe
sub rcx, rax
movabs rax, 0xea3b3cd254145363
xor rcx, rax
movabs rdx, 0xb483ce44ad2af136
add rdx, rcx
add rdx, rdi
not rdx
movabs rcx, 0x13cce94ad86944ce
mov r10, qword [0x14033e038]
mov rax, r10
xor rax, rcx
sub rdx, rax
movabs rax, 0xec3316b52796bb31
mov r11, qword [0x14033e030]
mov rcx, r11
xor rcx, rax
movabs rax, 0xe0b56d8de946c5a3
add rdx, rax
add rdx, rcx
movabs rax, 0x3cd68438041ca56e
xor rdx, rax
mov qword [rbp + 0x40], rdx
movabs rax, 0x18054a2df9208070
sub rax, qword [0x14033e050]
sub rax, qword [0x14033e058]
movabs rcx, 0xf8f8cd981399c13d
xor rax, rcx
sub rax, qword [0x14033e048]
movabs rcx, 0xc7d654b9132bbe67
add rcx, rax
add rcx, rdi
movabs rax, 0x5a9179a7f571be15
xor rcx, rax
movabs rax, 0x5f627dc6ab21d458
sub rcx, rax
movabs rax, 0xfe3b3cd22f0343b7
xor rcx, rax
movabs rax, 0x3483ce4465144224
add rcx, rax
add rcx, rdi
not rcx
movabs rax, 0x13cce94ad991bac4
xor r10, rax
sub rcx, r10
movabs rax, 0xec3316b5266e453b
xor r11, rax
movabs rax, 0xe0b56d8f13233199
add rcx, rax
add rcx, r11
movabs rax, 0x64b1f3cfc424df2c
xor rcx, rax
mov qword [rbp + 0x50], rcx
and rcx, rdx
mov eax, dword [rbp - 8]
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x50], r13
cmp rax, rcx
jne 0x14003701d
mov dword [rbp + 0x40], r13d
mov dword [rbp + 0x40], 0x3ad10a28
mov eax, 0xccfe56ab
sub eax, dword [0x14033e050]
sub eax, dword [0x14033e058]
xor eax, 0x1b04780f
sub eax, dword [0x14033e048]
mov rcx, qword [0x14033e040]
add eax, 0xdd1572be
add eax, ecx
xor eax, 0xfdc62501
add eax, 0x4fe39919
xor eax, 0x46aa3e8a
lea edx, [rcx - 0x13d15b95]
add edx, eax
not edx
mov eax, dword [0x14033e038]
xor eax, 0xd97484c0
sub edx, eax
mov r8d, dword [0x14033e030]
xor r8d, 0x268b7b3f
add r8d, 0xf591f85b
add r8d, edx
xor r8d, 0x13b4eb40
mov dword [rbp + 0x40], r8d
mov dword [rbp + 0x40], r13d
jmp 0x14003792d
movabs rdi, 0x1f2dd49ec2b0057d
movabs r15, 0xf16c8fb8258ca416
mov rbx, r13
movabs rax, 0x2b16bba2c5b7e0e0
movabs r9, 0x1560b89b9ee8952c
mov r13, qword [0x14033e070]
mov rsi, r13
imul rsi, rax
not rsi
movabs rcx, 0xea9f476466c61d72
mov rax, qword [0x14033e060]
xor rax, rcx
and rsi, rax
ror rsi, 0x24
shr rsi, 8
movabs rax, 0xcec4eff6586c1830
mov r10, r13
imul r10, rax
add r10, rdi
movabs rax, 0x2dd3734f80000000
xor r10, rax
shr r10, 0x1f
not r10
movabs r8, 0xe0d22b613d4ffa83
lea rcx, [r10 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x14033e060]
movzx eax, r10b
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xb9
and ecx, 0x8000003f
jge 0x1400370f3
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rdx, r10
ror rdx, cl
not rdx
movabs rax, 0x8a95beb1568e2628
mov r12, rdx
imul r12, rax
lea r11, [r12 + r8]
mov r8, r10
imul r8, rsi
sub r8, r11
xor r8, r15
movzx r14d, r11b
mov ecx, r14d
xor ecx, 6
and ecx, 0xf
jge 0x140037134
dec ecx
or ecx, 0xffffffc0
inc ecx
rol r8, cl
mov rax, r11
sub rax, qword [0x14033e078]
xor r8, rax
movabs rax, 0xc5b77a9c95a76988
imul rdx, rax
movabs rax, 0x5da0f05b0001e0f7
add rdx, rax
xor r8, rdx
xor r8, r9
mov rax, r8
and eax, 1
xor rax, 2
je 0x140037444
sub rax, 1
je 0x14003734e
sub rax, 1
movabs r14, 0xaaaaaaaaaaaaaaab
je 0x140037283
cmp rax, 1
jne 0x1400374cc
mov r15, r11
imul r15, r10
movabs rax, 0x536c1946b26441b
add rax, r8
xor r15, rax
ror r15, 0x1e
shr r15, 0xc
not r15
movabs rcx, 0x83572d5513ae
mov rdx, qword [0x14033e088]
add rdx, rcx
movabs rax, 0xe050ae195b01c9ab
xor rdx, rax
movzx eax, r15b
movzx ecx, r8b
imul ecx, eax
and cl, 0x3f
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db975b5ff51
sub rax, r10
mov r10, rdx
xor r10, rax
mov rcx, r10
imul rcx, rdi
mov eax, 0xa46e2dbb
add rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x14033e060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rdi, 0x6f2adafecbededc6
sub rdi, r15
shr rdi, cl
movabs rcx, 0xe0da4fe9943a57fb
add rcx, r12
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r13 + rcx*8]
imul rax, r8
sub rax, rsi
xor rdi, rax
jmp 0x1400374cc
movabs rcx, 0xaaaaaa1aa477d085
mov r10, r8
xor r10, rcx
movabs rcx, 0x1206ed667a0cc9
imul r10, rcx
movabs rcx, 0xffff7e8a8267e259
imul r12, rcx
movabs rcx, 0xdf37447d1152c0f
add r10, rcx
add r10, r12
movabs rax, 0x277cd7be76a707e5
mov rcx, r10
xor rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r11, r10
not r11
lea rax, [0x14033e060]
imul r11, qword [rax + rcx*8]
xor r11, 0xfffffffff1220655
lea ecx, [r8 + 7]
and cl, 0x3f
rol r11, cl
movabs rax, 0x784a694400000000
imul r11, rax
mov rcx, r11
ror rcx, 0xe
not rcx
movabs rax, 0x9b2de6b2e52e1708
imul rcx, rax
mov rax, r10
sub rax, r11
lea rdx, [rcx + rax*4]
mov cl, sil
and cl, 0x3f
ror rdx, cl
mov rax, rdi
mov rdi, rdx
imul rdi, rax
jmp 0x1400374cc
movabs rax, 0x2dcbddf2a683e6c9
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0xe937047da735be9
shl rdx, cl
mov rax, r9
mov r9, rdx
xor r9, rax
and r14d, 0x8000003f
jge 0x1400373a1
dec r14d
or r14d, 0xffffffc0
inc r14d
mov cl, r14b
rol r9, cl
movabs rcx, 0xe0d22b613d4ffa83
add rcx, r8
movabs r14, 0xaaaaaaaaaaaaaaab
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0x149ec2b0057d
lea rax, [0x14033e060]
mov rax, qword [rax + rcx*8]
imul rax, rdx
xor r9, rax
movabs rax, 0xffffc7a7f8b3a6a8
or r9, rax
mov rdi, r13
imul rdi, r15
sub rdi, r11
mov rax, rsi
sub rax, r9
xor rdi, rax
movabs rax, 0xc7a7c6a6a9bba6a5
xor rdi, rax
mov rax, r8
imul rax, r11
imul rax, rdi
mov rbx, r10
sub rbx, rax
movabs rax, 0x789589466e9eabf
add rbx, rax
xor rbx, rsi
not rbx
jmp 0x1400374cc
mov rcx, r8
imul rcx, qword [0x14033e080]
and rcx, qword [0x14033e080]
mov rax, r9
mov r9, rcx
xor r9, rax
ror r9, 0x2c
imul r9, r11
mov rbx, rsi
not rbx
imul rbx, r10
movabs rax, 0x7cd8a7de744af744
imul rbx, rax
imul rsi, qword [0x14033e060], 0xfffffffff82e885e
mov rdx, qword [0x14033e068]
sub rsi, rdx
mov al, bl
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x1400374af
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rsi, cl
movabs rax, 0xe0d22b613d4ffa83
add rsi, rax
add rsi, r12
movabs r14, 0xaaaaaaaaaaaaaaab
movabs rax, 0xff055d7b8401fd89
xor r15, rax
mov rax, r14
mul r15
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r15, rax
xor r9, rbx
lea rbx, [0x14033e060]
imul r9, qword [rbx + r15*8]
not r11
imul r11, r8
imul r11, rsi
imul r11, rdi
movabs rcx, 0xf5ed7e8783b2b755
xor rcx, r10
not rcx
xor rcx, r11
sub rcx, r9
call fcn.1400315c0
mov qword [0x14034c9a0], rax
xor r15d, r15d
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], 0x2fc2c726
mov eax, 0xbd2877a
sub eax, dword [0x14033e050]
sub eax, dword [0x14033e058]
xor eax, 0x24d752d0
sub eax, dword [0x14033e048]
mov rcx, qword [0x14033e040]
add eax, 0x18fb9232
add eax, ecx
xor eax, 0xa6585da3
sub eax, 0x2a38c7ef
xor eax, 0x39cf65e4
lea edx, [rcx - 0x40904919]
add edx, eax
not edx
mov eax, dword [0x14033e038]
xor eax, 0xc59c9904
sub edx, eax
mov ecx, dword [0x14033e030]
xor ecx, 0x3a6366fb
add ecx, 0x4a0e110b
add ecx, edx
xor ecx, 0x3a0d9eec
mov dword [rbp + 0x40], ecx
mov dword [rbp + 0x48], ecx
mov dword [rbp + 0x40], r15d
movabs rax, 0xfeefd2a265c196be
mov r11, qword [0x14033e070]
imul r11, rax
not r11
movabs rcx, 0xba2c8f631f0f1f13
mov r14, qword [0x14033e060]
mov rax, r14
xor rax, rcx
and r11, rax
ror r11, 0x37
shr r11, 8
mov rsi, qword [0x14033e068]
movabs rax, 0xdeb04a22bf97e888
mov r10, rsi
imul r10, rax
movabs r13, 0x6b6a5c3f4f5168c4
add r10, r13
movabs rcx, 0xc470bd3b7fffffff
xor r10, rcx
shr r10, 0x1f
not r10
movabs r8, 0x9495a3c0b0ae973c
lea rcx, [r10 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, r10b
movzx ecx, byte [rbx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x93
and ecx, 0x8000003f
jge 0x14003766e
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rax, r10
ror rax, cl
not rax
movabs rcx, 0x7612ea2ec364b5f4
mov rbx, rax
imul rbx, rcx
lea rdx, [rbx + r8]
mov r9, r10
imul r9, r11
sub r9, rdx
movabs rcx, 0x273f9b7d2a1c3e6b
xor r9, rcx
mov cl, dl
xor cl, 0xfc
and cl, 0xf
rol r9, cl
movabs rcx, 0x36eaa93e613a6ed0
imul rax, rcx
movabs r12, 0x4041c9046ee7d610
sub rax, r12
xor r9, rax
mov rax, rdx
sub rax, qword [0x14033e078]
xor r9, rax
movabs rax, 0x45d3709ce2b5569f
xor r9, rax
mov r8, r9
mov rdi, qword [0x14033e080]
imul r8, rdi
and r8, qword [0x14033e078]
xor r8, rax
ror r8, 0x1f
imul r8, rdx
not r11
imul r11, r10
movabs rax, 0x7cd8a7de78decc6e
imul r11, rax
imul rdx, r14, 0xfffffffffdba498c
sub rdx, rsi
mov al, r11b
not al
movzx ecx, al
movzx eax, sil
xor ecx, eax
and ecx, 0x8000003f
jge 0x140037742
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdx, cl
lea rcx, [rbx + rdx]
imul rcx, r13
sub rcx, r12
movabs rax, 0x6b6a5c3f4f5168c3
sub rax, rbx
imul rcx, rax
imul rcx, r9
movabs rax, 0xf5ed7e878f268c7f
xor r10, rax
not r10
xor rcx, r10
xor r8, r11
imul r8, rdi
sub rcx, r8
call fcn.1400316e0
mov qword [0x14034c998], rax
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], 0xedcac184
mov eax, 0xd47a2e4b
sub eax, dword [0x14033e050]
sub eax, dword [0x14033e058]
xor eax, 0x14d7d959
sub eax, dword [0x14033e048]
mov rcx, qword [0x14033e040]
add eax, 0x94d4e38a
add eax, ecx
xor eax, 0xf6d6fc9b
add eax, 0x54fa8797
xor eax, 0xd79fe728
lea edx, [rcx + 0x6644e50a]
add edx, eax
not edx
mov eax, dword [0x14033e038]
xor eax, 0xd98cd5f6
sub edx, eax
mov ebx, dword [0x14033e030]
xor ebx, 0x26732a09
add ebx, 0xe3b3791
add ebx, edx
xor ebx, 0x628fe1a6
mov dword [rbp + 0x40], ebx
mov dword [rbp + 0x50], r15d
mov rax, qword [rbp - 0x10]
mov r9d, 4
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x10]
call qword [rax + 0x20]
mov ecx, dword [rbp + 0x48]
add ecx, ebx
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], r15d
cmp dword [rbp + 0x50], ecx
je 0x1400378b1
mov dword [rbp + 0x40], 0x95790d43
mov eax, 0x27c3d3ef
sub eax, dword [0x14033e050]
sub eax, dword [0x14033e058]
xor eax, 0x14abaee7
sub eax, dword [0x14033e048]
mov rcx, qword [0x14033e040]
add eax, 0xd499dc0b
add eax, ecx
xor eax, 0xf6a56299
add eax, 0x550a74b1
xor eax, 0xf38a278c
lea edx, [rcx - 0x19e5670f]
add edx, eax
not edx
mov eax, dword [0x14033e038]
xor eax, 0xd98d83e8
sub edx, eax
mov r8d, dword [0x14033e030]
xor r8d, 0x26727c17
add r8d, 0xee81f83
add r8d, edx
xor r8d, 0x44eb39d8
mov dword [rbp + 0x40], r8d
jmp 0x140037929
mov dword [rbp + 0x40], 0xbac522fc
mov eax, 0x8e94c8c7
sub eax, dword [0x14033e050]
sub eax, dword [0x14033e058]
xor eax, 0x11aaa48c
sub eax, dword [0x14033e048]
mov rdx, qword [0x14033e040]
lea ecx, [rdx - 0x45916091]
add ecx, eax
xor ecx, 0xd3c3b96e
sub ecx, 0x6fafe98d
xor ecx, 0xbfffb424
mov r8d, dword [0x14033e030]
xor r8d, 0x2276683d
sub r8d, ecx
mov eax, dword [0x14033e038]
xor eax, 0xdd8997c2
sub r8d, eax
sub r8d, edx
sub r8d, 0x5f16ffce
xor r8d, 0x66dbf93a
mov dword [rbp + 0x40], r8d
mov dword [rbp + 0x40], r15d
mov eax, r8d
lea rcx, vtable.proc_api.0
mov qword [rbp - 0x10], rcx
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret