Function at 0x122a21ed
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push ecx
cmp dword [0x123b03e0], 0
je 0x122a2204
mov eax, 1
jmp 0x122a2954
mov dword [0x123b03e0], 1
mov dword [ebp - 4], 0x123b03e8
push 0x123b03e8
call fcn.122ca717
add esp, 4
test eax, eax
jne 0x122a222d
mov dword [ebp - 4], 0x12398fec
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x123b03e4], eax
cmp dword [0x123b03e4], 0
je 0x122a2948
push str.LoadTsdLogDrv
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02a4], eax
push str.UnloadTsdLogDrv
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02a8], eax
push str.LoadDriver
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02ac], eax
push str.UnloadDriver
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02b0], eax
push str.RegisterSandboxClass
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02b4], eax
push str.UnregisterSandboxClass
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02b8], eax
push str.EnumSandboxClassName
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02bc], eax
push str.QuerySandboxClassInformation
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02c0], eax
push str.CreateSandboxInstance
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02c4], eax
push str.CreateSandboxInstanceEx
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02c8], eax
push str.DestroySandboxInstance
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02cc], eax
push str.EnumSandboxInstanceName
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02d0], eax
push str.QuerySandboxInstanceInformation
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02d4], eax
push str.DeleteSandboxData
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02d8], eax
push str.GetSandboxPolicyLib
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02dc], eax
push str.SetSandboxPolicyLib
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02e0], eax
push str.SetSandboxPolicyLibFile
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02e4], eax
push str.UpdateSystemPolicyLib
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02e8], eax
push str.SetSandboxProcessCommonPolicy
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02ec], eax
push str.SetSandboxProcessCommonPolicyEx
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02f0], eax
push str.GetSandboxProcessCommonPolicy
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02f4], eax
push str.SetSandboxProcessPolicy
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02f8], eax
push str.SetProcessFilePolicy
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b02fc], eax
push str.SetProcessObjectPolicy
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0300], eax
push str.SetProcessRegPolicy
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0304], eax
push str.SetProcessWindowPolicy
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0308], eax
push str.SetProcessAccessPolicy
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b030c], eax
push str.AddSandboxProcess
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0310], eax
push str.DelSandboxProcess
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0314], eax
push str.GetSandboxProcessFlags
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0318], eax
push str.SetSandboxProcessFlags
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b031c], eax
push str.GetSandboxProcessState
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0320], eax
push str.SetSandboxProcessState
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0324], eax
push str.RegisterCallback
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0328], eax
push str.RegisterTSafeDocCallback
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b032c], eax
push str.EnumSandboxRunningProcess
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0330], eax
push str.UpdateSandboxRunningProcess
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0334], eax
push str.UpdateDriveData
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0338], eax
push str.GetSandboxFilePath
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b033c], eax
push str.GetSandboxProcessFilePath
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0340], eax
push str.GenerateSandboxFilePath
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0344], eax
push str.ParseSandboxFilePath
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0348], eax
push str.GenerateSandboxRegPath
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b034c], eax
push str.ParseSandboxRegPath
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0350], eax
push str.ParseSandboxPolicyLib
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0354], eax
push str.GenerateSandboxPolicyLib
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0358], eax
push str.FreeBuffer
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b035c], eax
push str.AddFileControlPolicy
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0360], eax
push str.AddFileControlPolicyByProcessID
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0364], eax
push str.AddFileControlPolicyByProcessSandbox
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0368], eax
push str.DelFileControlPolicyByFile
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b036c], eax
push str.DelFileControlPolicyByProcess
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0370], eax
push str.DelFileControlPolicyByProcessID
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0374], eax
push str.DelFileControlPolicyByProcessSandbox
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0378], eax
push str.EnumFileControlPolicy
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b037c], eax
push str.SetCreateProcessEvent
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0380], eax
push str.GetCreateProcessNotifyData
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0384], eax
push str.GetCreateProcessNotifyDataEx
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0388], eax
push str.GetProcessEventNotifyData
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b038c], eax
push str.SetProcessEventNotifyResult
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0390], eax
push 0x123995d8
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0394], eax
push 0x123995e4
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b0398], eax
push str.GetActualFilePath
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b039c], eax
push str.GetProcessActualFullPath
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03a0], eax
push str.GenerateSandboxPolicyEntry
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03a4], eax
push str.GenerateSandboxFilePolicy
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03a8], eax
push str.SetProcessFilePolicyEx
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03ac], eax
push str.GetDebugConfig
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03b0], eax
push str.SetDebugConfig
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03b4], eax
push str.SandboxFileOperate
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03b8], eax
push str.StartSandboxDrvTimer
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03bc], eax
push str.StopSandboxDrvTimer
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03c0], eax
push str.AddDynamicSandboxPolicy
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03c4], eax
push str.DelDynamicSandboxPolicy
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03c8], eax
push str.EnableFileInfoCache
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03cc], eax
push str.DisableFileInfoCache
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03d0], eax
push str.ResetFileInfoCache
mov edx, dword [0x123b03e4]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03d4], eax
push str.ResetFileInfoCacheOfFile
mov eax, dword [0x123b03e4]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03d8], eax
push str.GetSecObjChanged
mov ecx, dword [0x123b03e4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x123b03dc], eax
xor eax, eax
cmp dword [0x123b02b4], 0
setne al
mov esp, ebp
pop ebp
ret