Function at 0x1400018b8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor r15d, r15d
xor edi, edi
xor esi, esi
mov r14, rdx
mov r13, rcx
test rcx, rcx
je 0x14000212d
test rdx, rdx
je 0x140002147
mov rbx, qword [rdx]
test rbx, rbx
jne 0x140001950
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
lea ebp, [rdi + 1]
mov sil, 0x64
cmp sil, 0x2f
je 0x140001918
cmp sil, 0x5c
jne 0x14000191b
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x14000190c
mov r8d, edx
lea rcx, [0x14005ba90]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x3ce
call fcn.14004705c
mov r15d, 0xc000000d
jmp 0x140001c16
mov eax, dword [rdx + 8]
cmp eax, 0x68
je 0x140001962
cmp eax, 0x98
jne 0x1400019dc
mov rsi, rbx
mov ecx, dword [0x14005ba60]
mov ebp, 0xe8
mov edx, ebp
mov r8d, 0x44334d56
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
xor edx, edx
mov rdi, rax
test rax, rax
jne 0x140001a31
xor ecx, ecx
lea rbx, [0x140047e20]
mov sil, 0x64
lea ebp, [rax + 1]
cmp sil, 0x2f
je 0x1400019a4
cmp sil, 0x5c
jne 0x1400019a7
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001998
mov r8d, edx
lea rcx, [0x14005ba98]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x3ec
call fcn.14004705c
mov r15d, 0xc000009a
jmp 0x140001c16
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov sil, 0x64
lea ebp, [rdx + 1]
cmp sil, 0x2f
je 0x1400019f9
cmp sil, 0x5c
jne 0x1400019fc
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x1400019ed
mov r8d, edx
lea rcx, [0x14005ba94]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x3de
call fcn.14004705c
mov r15d, 0xc000000d
jmp 0x140002105
mov r8, rbp
mov rcx, rdi
call fcn.140047840
lea rax, [rdi + 0xa8]
mov qword [rax + 8], rax
mov qword [rax], rax
movups xmm0, xmmword [rbx]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rdi + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rdi + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rdi + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [rdi + 0x50], xmm1
movsd xmm0, qword [rbx + 0x60]
movsd qword [rdi + 0x60], xmm0
test rsi, rsi
je 0x140001ab3
movups xmm0, xmmword [rsi + 0x68]
movups xmmword [rdi + 0x68], xmm0
movups xmm1, xmmword [rsi + 0x78]
movups xmmword [rdi + 0x78], xmm1
movsd xmm0, qword [rsi + 0x88]
movsd qword [rdi + 0x88], xmm0
mov eax, dword [rsi + 0x90]
mov dword [rdi + 0x90], eax
mov rdx, rdi
mov rcx, r13
call fcn.1400045b0
test al, al
jne 0x140001b17
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov sil, 0x64
lea ebp, [rdx + 1]
cmp sil, 0x2f
je 0x140001adf
cmp sil, 0x5c
jne 0x140001ae2
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001ad3
mov r8d, edx
lea rcx, [0x14005ba9c]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x401
call fcn.14004705c
mov r15d, 0xc000000d
jmp 0x140001c03
mov ebx, dword [rdi + 0xc]
mov rcx, r13
call fcn.1400042a0
test al, al
je 0x140001b30
cmp ebx, 0x20
jne 0x140001b30
lea eax, [rbx + 0x24]
jmp 0x140001b39
xor edx, edx
mov ecx, ebx
call fcn.140003884
mov r12d, dword [rdi + 0x28]
mov dword [rdi + 0xc4], eax
or eax, 0xffffffff
mov dword [rdi + 0xb8], eax
mov dword [rdi + 0xc0], eax
mov dword [rdi + 0xbc], eax
mov eax, dword [r13 + 0x1620]
test eax, eax
je 0x140002161
mov ecx, dword [rdi]
lea rbx, [0x140047e20]
mov sil, 0x64
mov ebp, 1
test ecx, ecx
je 0x140001bc0
cmp ecx, eax
jbe 0x140001c36
xor edx, edx
mov al, sil
xor ecx, ecx
cmp al, 0x2f
je 0x140001b93
cmp al, 0x5c
jne 0x140001b96
lea edx, [rcx + 1]
add ecx, ebp
mov eax, ecx
mov al, byte [rcx + rbx]
test al, al
jne 0x140001b8b
mov r8d, edx
lea rcx, [0x14005ba6c]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x30c
call fcn.14004705c
xor edx, edx
xor ecx, ecx
cmp sil, 0x2f
je 0x140001bd0
cmp sil, 0x5c
jne 0x140001bd3
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001bc4
mov r8d, edx
lea rcx, [0x14005baa0]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x40e
call fcn.14004705c
mov r15d, 0xc01e0100
test rdi, rdi
je 0x140001c16
mov edx, 0x44334d56
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov rbx, qword [rsp + 0x60]
mov eax, r15d
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov edx, dword [r13 + 0x1244]
mov ecx, edx
shr ecx, 8
and cl, bpl
je 0x140001c55
mov eax, edx
shr eax, 5
test bpl, al
je 0x1400021fd
test r12d, r12d
js 0x140002113
mov ebx, 2
cmp r12d, ebp
jle 0x140001c8f
cmp r12d, ebx
je 0x140001c8a
cmp r12d, 3
jle 0x140002113
cmp r12d, 5
jle 0x140001c8a
lea eax, [r12 - 7]
cmp eax, ebx
ja 0x140002113
mov al, bpl
jmp 0x140001c91
xor al, al
cmp cl, al
jne 0x14000217b
test cl, cl
je 0x140001d6a
shr edx, 5
test bpl, dl
je 0x1400021fd
test cl, cl
je 0x140001d6a
cmp r12d, 7
jne 0x140001ce5
mov rdx, rdi
mov rcx, r13
call fcn.140002234
cmp dword [rdi + 0xbc], 0xffffffff
mov r15d, eax
jne 0x140001d15
mov edx, 0xc0000000
mov ecx, eax
and ecx, edx
cmp ecx, edx
jne 0x140002195
jmp 0x140001d15
cmp r12d, 5
je 0x140001dd5
mov rdx, rdi
mov rcx, r13
call fcn.140002678
cmp dword [rdi + 0xb8], 0xffffffff
mov r15d, eax
jne 0x140001d15
mov edx, 0xc0000000
and eax, edx
cmp eax, edx
jne 0x1400021af
test r15d, r15d
jns 0x140001dd5
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov sil, 0x64
cmp sil, 0x2f
je 0x140001d38
cmp sil, 0x5c
jne 0x140001d3b
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001d2c
mov r8d, edx
lea rcx, [0x14005baa4]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x41f
call fcn.14004705c
jmp 0x140002105
mov rdx, rdi
mov rcx, r13
call fcn.140002b64
cmp dword [rdi + 0xb8], 0xffffffff
jne 0x140001dd5
test r12d, r12d
je 0x140001dd5
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov r15d, 0xc000009a
mov sil, 0x64
cmp sil, 0x2f
je 0x140001da3
cmp sil, 0x5c
jne 0x140001da6
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001d97
mov r8d, edx
lea rcx, [0x14005baa8]
add r8, rbx
lea rdx, [0x140047e80]
mov r9d, 0x429
call fcn.14004705c
jmp 0x140001c03
xor edx, edx
mov rcx, r14
lea r8d, [rdx + 0x58]
call fcn.140047840
mov ecx, dword [r13 + 0x1244]
mov eax, ecx
shr eax, 8
and al, bpl
je 0x140001e00
shr ecx, 5
test bpl, cl
je 0x1400021fd
test al, al
jne 0x140001eb2
mov rcx, r13
call fcn.1400043b4
test al, al
je 0x140001eb2
cmp dword [rdi + 0x1c], ebp
jne 0x140001eb2
mov eax, dword [rdi + 0x10]
mov ecx, dword [rdi + 0x14]
imul rcx, rax
mov eax, ecx
cmp rcx, rax
je 0x140001e74
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov sil, 0x64
cmp sil, 0x2f
je 0x140001e4c
cmp sil, 0x5c
jne 0x140001e4f
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001e40
mov r8d, 0x43f
add rdx, rbx
lea rcx, [0x140047e80]
call fcn.140047034
jmp 0x140001b0c
mov rcx, rax
shl rcx, 2
mov eax, ecx
cmp rcx, rax
je 0x140001eb4
xor edx, edx
lea rbx, [0x140047e20]
xor ecx, ecx
mov sil, 0x64
cmp sil, 0x2f
je 0x140001e9c
cmp sil, 0x5c
jne 0x140001e9f
lea edx, [rcx + 1]
add ecx, ebp
mov sil, byte [rcx + rbx]
test sil, sil
jne 0x140001e90
mov r8d, 0x447
jmp 0x140001e60
xor ecx, ecx
mov eax, dword [rdi]
mov rdx, rdi
cmp eax, ecx
cmovbe eax, ecx
mov ecx, eax
mov eax, 0x1000
cmp rcx, rax
cmova eax, ecx
mov rcx, r13
mov qword [r14 + 0x10], rax
add rax, 0xfff
and eax, 0xfffff000
mov dword [rdi + 0xd4], eax
call fcn.1400017e0
mov esi, 4
test al, al
je 0x140001f38
cmp dword [rdi + 0x3c], ebp
jne 0x1400021c9
cmp dword [rdi + 0x74], ebp
jne 0x1400021e3
lea rdx, [rdi + 0x40]
mov dword [rsp + 0x28], esi
mov r9d, ebp
mov dword [rsp + 0x20], ebp
mov r8d, ebp
mov ecx, ebx
call fcn.1400392d0
add eax, 0xfff
and eax, 0xfffff000
mov dword [rdi + 0xd8], eax
add eax, dword [rdi + 0xd4]
mov qword [r14 + 0x10], rax
jmp 0x140001f3f
and dword [rdi + 0xd8], 0
mov r8d, dword [r13 + 0x1244]
mov ecx, r8d
mov eax, r8d
shr ecx, 8
shr eax, 5
and cl, bpl
je 0x140001f60
test bpl, al
je 0x1400021fd
test cl, cl
je 0x140001fa3
test bpl, al
je 0x1400021fd
mov eax, dword [rdi + 0x1c]
cmp eax, ebp
jne 0x140001f80
mov rcx, r13
call fcn.140004328
test al, al
je 0x140001f84
mov ecx, ebx
jmp 0x140001f88
mov ecx, ebp
mov ebx, ebp
and dword [rdi + 0x94], 0
mov dword [rdi + 0x98], ecx
mov eax, dword [r14 + 0x24]
and eax, 0xffffffe0
or eax, ecx
jmp 0x1400020d2
mov edx, dword [rdi + 0x1c]
cmp edx, ebp
je 0x140001fdc
cmp dword [rdi], 0
je 0x140001fb7
mov eax, dword [rdi + 4]
test bpl, al
je 0x140001fdc
mov eax, dword [rdi + 4]
test bl, al
jne 0x140002217
and dword [rdi + 0x94], 0
mov dword [rdi + 0x98], esi
mov dword [r14 + 0x28], esi
mov dword [r14 + 0x2c], esi
jmp 0x1400020e2
mov ecx, r8d
cmp edx, ebp
je 0x140002054
test byte [r13 + 0x1244], bpl
jne 0x140002054
cmp edx, ebx
je 0x140001ff5
cmp edx, 3
jne 0x140002054
mov rcx, r13
call fcn.14000441c
test al, al
je 0x140002012
mov ecx, dword [r13 + 0x1244]
mov eax, ecx
shr eax, 3
test bpl, al
je 0x140002054
and dword [rdi + 0x94], 0
mov dword [rdi + 0x98], ebx
or dword [r14 + 0x40], ebp
mov eax, dword [r14 + 0x40]
mov dword [r14 + 0x28], ebx
mov dword [r14 + 0x2c], ebx
mov ecx, dword [rdi + 4]
xor ecx, eax
and ecx, ebx
xor ecx, eax
mov dword [r14 + 0x40], ecx
mov edx, dword [rdi + 4]
add edx, edx
mov dword [r14 + 0x34], ebp
xor edx, ecx
and edx, esi
xor edx, ecx
mov dword [r14 + 0x40], edx
jmp 0x1400020e6
mov eax, dword [rdi + 4]
test al, 8
je 0x140002063
shr ecx, 3
test bpl, cl
jne 0x1400020bc
mov eax, dword [rdi + 0x1c]
sub eax, 6
test eax, 0xfffffffd
je 0x1400020bc
mov dword [rdi + 0x94], ebp
mov dword [rdi + 0x98], ebp
mov eax, dword [r14 + 0x24]
and eax, 0xffffffe1
mov dword [r14 + 0x28], ebp
or eax, ebp
mov dword [r14 + 0x2c], ebp
mov dword [r14 + 0x24], eax
mov ecx, dword [rdi + 0x1c]
lea eax, [rcx - 4]
test eax, 0xfffffffc
jne 0x1400020aa
cmp ecx, 6
je 0x1400020aa
and dword [r14 + 0x40], 0xfffffffe
jmp 0x1400020ae
or dword [r14 + 0x40], ebp
mov edx, dword [r14 + 0x40]
bts edx, 7
mov dword [r14 + 0x40], edx
jmp 0x1400020e6
and dword [rdi + 0x94], 0
mov dword [rdi + 0x98], ebx
mov eax, dword [r14 + 0x24]
and eax, 0xffffffe2
or eax, ebx
or dword [r14 + 0x40], ebp
mov dword [r14 + 0x24], eax
mov dword [r14 + 0x28], ebx
mov dword [r14 + 0x2c], ebx
mov edx, dword [r14 + 0x40]
mov eax, dword [rdi + 4]
shl eax, 6
xor eax, edx
mov qword [r14 + 0x38], rdi
and eax, 0x100
mov dword [r14 + 0x50], 0x78000000
xor eax, edx
mov dword [r14 + 0x40], eax
test r15d, r15d
jns 0x140001c16
jmp 0x140001c03
mov r8d, 0xa33
lea rdx, [0x140047d80]
lea rcx, [0x140047e00]
call fcn.1400388e4
int3
mov r8d, 0x3c6
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x3c7
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x2fd
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x414
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x418
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x41b
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x45a
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x45b
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x686
lea rdx, [0x140047d80]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3
mov r8d, 0x499
lea rdx, [0x140047e20]
lea rcx, [0x140047c80]
call fcn.1400388e4
int3