Function at 0x140036c24
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
lea rax, vtable.proc_api.0
mov qword [rbp - 0x10], rax
xor r13d, r13d
mov dword [rbp - 8], r13d
lea rax, vtable.driver_api.0
mov qword [rbp - 0x10], rax
mov ebx, r13d
mov edi, 0xc10139ee
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x140036ccb
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0xd9055ffc
jmp 0x140036cbd
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x140036c9d
cmp r9d, ebx
jne 0x140036dce
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x140036dce
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x140036dce
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0xd9055ffc
jmp 0x140036d31
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x140036d13
cmp r14d, edi
je 0x140036d49
test esi, esi
jne 0x140036cfe
jmp 0x140036dce
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x140036dd6
lea rax, [r11 + rcx]
cmp r8, rax
jae 0x140036dd6
mov ebx, 0xd9055ffc
mov edi, ebx
jmp 0x140036d93
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, ebx
mov ebx, eax
imul ebx, ecx
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140036d79
jmp 0x140036db3
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r8
mov al, byte [r8]
test al, al
jne 0x140036d9c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140036c71
call r8
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.140032a80
mov qword [rbp + 0x50], r13
movabs rax, 0xfefd48d81de1ec29
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x40], r13
movabs rax, 0xc944f17079b153ae
mov qword [rbp + 0x40], rax
movabs rax, 0x3d0b6dc569401d14
sub rax, qword [0x14033d050]
sub rax, qword [0x14033d058]
movabs rcx, 0xf8f8cd9861032d24
xor rax, rcx
sub rax, qword [0x14033d048]
movabs rcx, 0xe7d654b97aa27d63
add rcx, rax
mov rdi, qword [0x14033d040]
add rcx, rdi
movabs rax, 0x5a9179a84c623b34
xor rcx, rax
movabs rax, 0x5f627dc6c0591921
sub rcx, rax
movabs rax, 0x4c3b3cd25521ea5b
xor rcx, rax
movabs rdx, 0xf483ce44af374020
add rdx, rcx
add rdx, rdi
not rdx
movabs rcx, 0x13cce94ad860d89d
mov r10, qword [0x14033d038]
mov rax, r10
xor rax, rcx
sub rdx, rax
movabs rax, 0xec3316b5279f2762
mov r11, qword [0x14033d030]
mov rcx, r11
xor rcx, rax
movabs rax, 0xe0b56d8de111e0f2
add rdx, rax
add rdx, rcx
movabs rax, 0x4acc7fc50a95d71a
xor rdx, rax
mov qword [rbp + 0x40], rdx
movabs rax, 0x7543a96d764a57b1
sub rax, qword [0x14033d050]
sub rax, qword [0x14033d058]
movabs rcx, 0xf8f8cd9811f860aa
xor rax, rcx
sub rax, qword [0x14033d048]
movabs rcx, 0x27d654b910fde72c
add rcx, rax
add rcx, rdi
movabs rax, 0x5a9179a7f39cfeea
xor rcx, rax
movabs rax, 0x5f627dc6aa00ad37
sub rcx, rax
movabs rax, 0x583b3cd22e35bc7f
xor rcx, rax
movabs rax, 0x7483ce4463848a16
add rcx, rax
add rcx, rdi
not rcx
movabs rax, 0x13cce94ad9982697
xor r10, rax
sub rcx, r10
movabs rax, 0xec3316b52667d968
xor r11, rax
movabs rax, 0xe0b56d8f199528ec
add rcx, rax
add rcx, r11
movabs rax, 0x86629d8f4f46ac58
xor rcx, rax
mov qword [rbp + 0x50], rcx
and rcx, rdx
mov eax, dword [rbp - 8]
mov qword [rbp + 0x40], r13
mov qword [rbp + 0x50], r13
cmp rax, rcx
jne 0x140037029
mov dword [rbp + 0x40], r13d
mov dword [rbp + 0x40], 0xf6b8911c
mov eax, 0x56336dac
sub eax, dword [0x14033d050]
sub eax, dword [0x14033d058]
xor eax, 0x18d6ef7c
sub eax, dword [0x14033d048]
mov rcx, qword [0x14033d040]
add eax, 0x3a2c4883
add eax, ecx
xor eax, 0xfb53fdd6
add eax, 0x536fa452
xor eax, 0x9f97b302
lea edx, [rcx + 0x2a18b25d]
add edx, eax
not edx
mov eax, dword [0x14033d038]
xor eax, 0xd97d1893
sub edx, eax
mov r8d, dword [0x14033d030]
xor r8d, 0x2682e76c
add r8d, 0xfe2e17ae
add r8d, edx
xor r8d, 0xee990304
mov dword [rbp + 0x40], r8d
mov dword [rbp + 0x40], r13d
jmp 0x140037939
movabs rdi, 0x1f2dd49ec2b0057d
movabs r15, 0xf16c8fb8258ca416
mov rbx, r13
movabs rax, 0x2b16bba2c5b7e0e0
movabs r9, 0x1560b89b9ee8952c
mov r13, qword [0x14033d070]
mov rsi, r13
imul rsi, rax
not rsi
movabs rcx, 0xea9f476466c61d72
mov rax, qword [0x14033d060]
xor rax, rcx
and rsi, rax
ror rsi, 0x24
shr rsi, 8
movabs rax, 0xcec4eff6586c1830
mov r10, r13
imul r10, rax
add r10, rdi
movabs rax, 0x2dd3734f80000000
xor r10, rax
shr r10, 0x1f
not r10
movabs r8, 0xe0d22b613d4ffa83
lea rcx, [r10 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x14033d060]
movzx eax, r10b
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xb9
and ecx, 0x8000003f
jge 0x1400370ff
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rdx, r10
ror rdx, cl
not rdx
movabs rax, 0x8a95beb1568e2628
mov r12, rdx
imul r12, rax
lea r11, [r12 + r8]
mov r8, r10
imul r8, rsi
sub r8, r11
xor r8, r15
movzx r14d, r11b
mov ecx, r14d
xor ecx, 6
and ecx, 0xf
jge 0x140037140
dec ecx
or ecx, 0xffffffc0
inc ecx
rol r8, cl
mov rax, r11
sub rax, qword [0x14033d078]
xor r8, rax
movabs rax, 0xc5b77a9c95a76988
imul rdx, rax
movabs rax, 0x5da0f05b0001e0f7
add rdx, rax
xor r8, rdx
xor r8, r9
mov rax, r8
and eax, 1
xor rax, 2
je 0x140037450
sub rax, 1
je 0x14003735a
sub rax, 1
movabs r14, 0xaaaaaaaaaaaaaaab
je 0x14003728f
cmp rax, 1
jne 0x1400374d8
mov r15, r11
imul r15, r10
movabs rax, 0x536c1946b26441b
add rax, r8
xor r15, rax
ror r15, 0x1e
shr r15, 0xc
not r15
movabs rcx, 0x83572d5513ae
mov rdx, qword [0x14033d088]
add rdx, rcx
movabs rax, 0xe050ae195b01c9ab
xor rdx, rax
movzx eax, r15b
movzx ecx, r8b
imul ecx, eax
and cl, 0x3f
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db975b5ff51
sub rax, r10
mov r10, rdx
xor r10, rax
mov rcx, r10
imul rcx, rdi
mov eax, 0xa46e2dbb
add rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x14033d060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rdi, 0x6f2adafecbededc6
sub rdi, r15
shr rdi, cl
movabs rcx, 0xe0da4fe9943a57fb
add rcx, r12
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r13 + rcx*8]
imul rax, r8
sub rax, rsi
xor rdi, rax
jmp 0x1400374d8
movabs rcx, 0xaaaaaa1aa477d085
mov r10, r8
xor r10, rcx
movabs rcx, 0x1206ed667a0cc9
imul r10, rcx
movabs rcx, 0xffff7e8a8267e259
imul r12, rcx
movabs rcx, 0xdf37447d1152c0f
add r10, rcx
add r10, r12
movabs rax, 0x277cd7be76a707e5
mov rcx, r10
xor rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r11, r10
not r11
lea rax, [0x14033d060]
imul r11, qword [rax + rcx*8]
xor r11, 0xfffffffff1220655
lea ecx, [r8 + 7]
and cl, 0x3f
rol r11, cl
movabs rax, 0x784a694400000000
imul r11, rax
mov rcx, r11
ror rcx, 0xe
not rcx
movabs rax, 0x9b2de6b2e52e1708
imul rcx, rax
mov rax, r10
sub rax, r11
lea rdx, [rcx + rax*4]
mov cl, sil
and cl, 0x3f
ror rdx, cl
mov rax, rdi
mov rdi, rdx
imul rdi, rax
jmp 0x1400374d8
movabs rax, 0x2dcbddf2a683e6c9
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0xe937047da735be9
shl rdx, cl
mov rax, r9
mov r9, rdx
xor r9, rax
and r14d, 0x8000003f
jge 0x1400373ad
dec r14d
or r14d, 0xffffffc0
inc r14d
mov cl, r14b
rol r9, cl
movabs rcx, 0xe0d22b613d4ffa83
add rcx, r8
movabs r14, 0xaaaaaaaaaaaaaaab
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0x149ec2b0057d
lea rax, [0x14033d060]
mov rax, qword [rax + rcx*8]
imul rax, rdx
xor r9, rax
movabs rax, 0xffffc7a7f8b3a6a8
or r9, rax
mov rdi, r13
imul rdi, r15
sub rdi, r11
mov rax, rsi
sub rax, r9
xor rdi, rax
movabs rax, 0xc7a7c6a6a9bba6a5
xor rdi, rax
mov rax, r8
imul rax, r11
imul rax, rdi
mov rbx, r10
sub rbx, rax
movabs rax, 0x789589466e9eabf
add rbx, rax
xor rbx, rsi
not rbx
jmp 0x1400374d8
mov rcx, r8
imul rcx, qword [0x14033d080]
and rcx, qword [0x14033d080]
mov rax, r9
mov r9, rcx
xor r9, rax
ror r9, 0x2c
imul r9, r11
mov rbx, rsi
not rbx
imul rbx, r10
movabs rax, 0x7cd8a7de744af744
imul rbx, rax
imul rsi, qword [0x14033d060], 0xfffffffff82e885e
mov rdx, qword [0x14033d068]
sub rsi, rdx
mov al, bl
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x1400374bb
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rsi, cl
movabs rax, 0xe0d22b613d4ffa83
add rsi, rax
add rsi, r12
movabs r14, 0xaaaaaaaaaaaaaaab
movabs rax, 0xff055d7b8401fd89
xor r15, rax
mov rax, r14
mul r15
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r15, rax
xor r9, rbx
lea rbx, [0x14033d060]
imul r9, qword [rbx + r15*8]
not r11
imul r11, r8
imul r11, rsi
imul r11, rdi
movabs rcx, 0xf5ed7e8783b2b755
xor rcx, r10
not rcx
xor rcx, r11
sub rcx, r9
call fcn.1400315cc
mov qword [0x14034b9a0], rax
xor r15d, r15d
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], 0x4876a840
mov eax, 0xf0674a35
sub eax, dword [0x14033d050]
sub eax, dword [0x14033d058]
xor eax, 0x26c3d1bd
sub eax, dword [0x14033d048]
mov rcx, qword [0x14033d040]
add eax, 0x7b8dcf87
add eax, ecx
xor eax, 0xa88179f8
sub eax, 0x26a5c2bc
xor eax, 0x94c1eaac
lea edx, [rcx + 0x1475fb9]
add edx, eax
not edx
mov eax, dword [0x14033d038]
xor eax, 0xc5950557
sub edx, eax
mov ecx, dword [0x14033d030]
xor ecx, 0x3a6afaa8
add ecx, 0x427307de
add ecx, edx
xor ecx, 0x1d087718
mov dword [rbp + 0x40], ecx
mov dword [rbp + 0x48], ecx
mov dword [rbp + 0x40], r15d
movabs rax, 0xfeefd2a265c196be
mov r11, qword [0x14033d070]
imul r11, rax
not r11
movabs rcx, 0xba2c8f631f0f1f13
mov r14, qword [0x14033d060]
mov rax, r14
xor rax, rcx
and r11, rax
ror r11, 0x37
shr r11, 8
mov rsi, qword [0x14033d068]
movabs rax, 0xdeb04a22bf97e888
mov r10, rsi
imul r10, rax
movabs r13, 0x6b6a5c3f4f5168c4
add r10, r13
movabs rcx, 0xc470bd3b7fffffff
xor r10, rcx
shr r10, 0x1f
not r10
movabs r8, 0x9495a3c0b0ae973c
lea rcx, [r10 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, r10b
movzx ecx, byte [rbx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x93
and ecx, 0x8000003f
jge 0x14003767a
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rax, r10
ror rax, cl
not rax
movabs rcx, 0x7612ea2ec364b5f4
mov rbx, rax
imul rbx, rcx
lea rdx, [rbx + r8]
mov r9, r10
imul r9, r11
sub r9, rdx
movabs rcx, 0x273f9b7d2a1c3e6b
xor r9, rcx
mov cl, dl
xor cl, 0xfc
and cl, 0xf
rol r9, cl
movabs rcx, 0x36eaa93e613a6ed0
imul rax, rcx
movabs r12, 0x4041c9046ee7d610
sub rax, r12
xor r9, rax
mov rax, rdx
sub rax, qword [0x14033d078]
xor r9, rax
movabs rax, 0x45d3709ce2b5569f
xor r9, rax
mov r8, r9
mov rdi, qword [0x14033d080]
imul r8, rdi
and r8, qword [0x14033d078]
xor r8, rax
ror r8, 0x1f
imul r8, rdx
not r11
imul r11, r10
movabs rax, 0x7cd8a7de78decc6e
imul r11, rax
imul rdx, r14, 0xfffffffffdba498c
sub rdx, rsi
mov al, r11b
not al
movzx ecx, al
movzx eax, sil
xor ecx, eax
and ecx, 0x8000003f
jge 0x14003774e
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdx, cl
lea rcx, [rbx + rdx]
imul rcx, r13
sub rcx, r12
movabs rax, 0x6b6a5c3f4f5168c3
sub rax, rbx
imul rcx, rax
imul rcx, r9
movabs rax, 0xf5ed7e878f268c7f
xor r10, rax
not r10
xor rcx, r10
xor r8, r11
imul r8, rdi
sub rcx, r8
call fcn.1400316ec
mov qword [0x14034b998], rax
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], 0xa060581a
mov eax, 0xcdf1585c
sub eax, dword [0x14033d050]
sub eax, dword [0x14033d058]
xor eax, 0x16c279ea
sub eax, dword [0x14033d048]
mov rcx, qword [0x14033d040]
add eax, 0x7764a187
add eax, ecx
xor eax, 0xf8fdffb4
add eax, 0x548e4664
xor eax, 0x7a918060
lea edx, [rcx - 0x57e53c44]
add edx, eax
not edx
mov eax, dword [0x14033d038]
xor eax, 0xd98549a5
sub edx, eax
mov ebx, dword [0x14033d030]
xor ebx, 0x267ab65a
add ebx, 0x667a2c0
add ebx, edx
xor ebx, 0xd1d93202
mov dword [rbp + 0x40], ebx
mov dword [rbp + 0x50], r15d
mov rax, qword [rbp - 0x10]
mov r9d, 4
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x48]
lea rcx, [rbp - 0x10]
call qword [rax + 0x20]
mov ecx, dword [rbp + 0x48]
add ecx, ebx
mov dword [rbp + 0x40], r15d
mov dword [rbp + 0x40], r15d
cmp dword [rbp + 0x50], ecx
je 0x1400378bd
mov dword [rbp + 0x40], 0xb50cdbd5
mov eax, 0xded41eba
sub eax, dword [0x14033d050]
sub eax, dword [0x14033d058]
xor eax, 0x170e1e54
sub eax, dword [0x14033d048]
mov rcx, qword [0x14033d040]
add eax, 0x37c9bad0
add eax, ecx
xor eax, 0xf952f36e
add eax, 0x5459ddaa
xor eax, 0x4eb6bff4
lea edx, [rcx + 0x286334e3]
add edx, eax
not edx
mov eax, dword [0x14033d038]
xor eax, 0xd9841fbb
sub edx, eax
mov r8d, dword [0x14033d030]
xor r8d, 0x267be044
add r8d, 0x53a46d6
add r8d, edx
xor r8d, 0x63b50dac
mov dword [rbp + 0x40], r8d
jmp 0x140037935
mov dword [rbp + 0x40], 0xc9203f94
mov eax, 0x3063e420
sub eax, dword [0x14033d050]
sub eax, dword [0x14033d058]
xor eax, 0x14173cfd
sub eax, dword [0x14033d048]
mov rdx, qword [0x14033d040]
lea ecx, [rdx - 0x6253ed70]
add ecx, eax
xor ecx, 0xd67cb367
sub ecx, 0x705db108
xor ecx, 0x23314d5c
mov r8d, dword [0x14033d030]
xor r8d, 0x227ff46e
sub r8d, ecx
mov eax, dword [0x14033d038]
xor eax, 0xdd800b91
sub r8d, eax
sub r8d, edx
add r8d, 0x54c13497
xor r8d, 0x36fa2c4e
mov dword [rbp + 0x40], r8d
mov dword [rbp + 0x40], r15d
mov eax, r8d
lea rcx, vtable.proc_api.0
mov qword [rbp - 0x10], rcx
mov rbx, qword [rsp + 0x88]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret