Function at 0x1400702ad
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x140076ea0
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbp
push rdi
sub rsp, 0x448
lea rbp, [rsp + 0x20]
lea rcx, [0x1401a30a3]
call fcn.1400730c5
nop
mov qword [rbp + 8], 0
mov qword [rbp + 0x28], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0x108], 0
mov dword [rbp + 0x124], 0
mov dword [rbp + 0x144], 0
xor eax, eax
mov word [rbp + 0x164], ax
xor eax, eax
mov word [rbp + 0x184], ax
mov qword [rbp + 0x1a8], 0
mov dword [rbp + 0x1c4], 0
mov edx, dword [rbp + 0x440]
lea rcx, str.___Resolving_Syscall:__x_n
call fcn.14007172f
nop
call fcn.140070235
mov qword [rbp + 0x88], rax
cmp qword [rbp + 0x88], 0
jne 0x140076f84
jmp 0x1400776ed
mov rax, qword [rbp + 0x88]
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
movsxd rax, dword [rax + 0x3c]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x28], rax
mov eax, 8
imul rax, rax, 0
mov rcx, qword [rbp + 0x28]
mov eax, dword [rcx + rax + 0x88]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x1c]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x20]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xc8], rax
mov rax, qword [rbp + 0x48]
mov eax, dword [rax + 0x24]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x108], rax
xor eax, eax
mov word [rbp + 0x184], ax
jmp 0x14007703a
movzx eax, word [rbp + 0x184]
inc ax
mov word [rbp + 0x184], ax
movzx eax, word [rbp + 0x184]
mov rcx, qword [rbp + 0x48]
cmp eax, dword [rcx + 0x18]
jae 0x1400770d1
movzx eax, word [rbp + 0x184]
mov rcx, qword [rbp + 0xc8]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x1a8], rax
movzx eax, word [rbp + 0x184]
mov rcx, qword [rbp + 0x108]
movzx eax, word [rcx + rax*2]
mov rcx, qword [rbp + 0xe8]
mov eax, dword [rcx + rax*4]
mov rcx, qword [rbp + 0x88]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xa8], rax
mov rcx, qword [rbp + 0x1a8]
call fcn.140071c16
mov dword [rbp + 0x414], eax
mov ecx, dword [rbp + 0x440]
call fcn.1400702fd
mov ecx, dword [rbp + 0x414]
cmp ecx, eax
jne 0x1400770cc
jmp 0x1400770d1
jmp 0x140077029
cmp qword [rbp + 0xa8], 0
jne 0x1400770e0
jmp 0x1400776ed
xor eax, eax
mov word [rbp + 0x164], ax
jmp 0x1400770fc
movzx eax, word [rbp + 0x164]
inc ax
mov word [rbp + 0x164], ax
movzx eax, word [rbp + 0x164]
cmp eax, 0x20
jge 0x140077254
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0xe9
jne 0x140077134
mov dword [rbp + 0x1c4], 1
jmp 0x140077254
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0xc3
jne 0x140077152
jmp 0x1400776ed
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0x4c
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 1]
cmp eax, 0x8b
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 2]
cmp eax, 0xd1
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 3]
cmp eax, 0xb8
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 6]
test eax, eax
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 7]
test eax, eax
jne 0x14007724f
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 4]
mov byte [rbp + 0x1e4], al
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 5]
mov byte [rbp + 0x204], al
movzx eax, byte [rbp + 0x204]
shl eax, 8
movzx ecx, byte [rbp + 0x1e4]
or eax, ecx
mov dword [rbp + 0x124], eax
lea rcx, str._tFound_syscall_using_Hells_Gate_n
call fcn.14007172f
nop
jmp 0x140077254
jmp 0x1400770eb
cmp dword [rbp + 0x1c4], 0
je 0x1400775d7
mov eax, 1
mov word [rbp + 0x184], ax
jmp 0x140077280
movzx eax, word [rbp + 0x184]
inc ax
mov word [rbp + 0x184], ax
movzx eax, word [rbp + 0x184]
mov rcx, qword [rbp + 0x48]
cmp eax, dword [rcx + 0x14]
ja 0x1400775ca
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov rcx, qword [rbp + 0x48]
mov ecx, dword [rcx + 0x14]
dec ecx
mov ecx, ecx
mov rdx, qword [rbp + 0x108]
movzx ecx, word [rdx + rcx*2]
mov rdx, qword [rbp + 0xe8]
mov ecx, dword [rdx + rcx*4]
mov rdx, qword [rbp + 0x88]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jae 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0x4c
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 1]
cmp eax, 0x8b
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 2]
cmp eax, 0xd1
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 3]
cmp eax, 0xb8
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 6]
test eax, eax
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 7]
test eax, eax
jne 0x14007742f
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 5]
mov byte [rbp + 0x224], al
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 4]
mov byte [rbp + 0x244], al
movzx eax, byte [rbp + 0x224]
shl eax, 8
movzx ecx, byte [rbp + 0x244]
movzx edx, word [rbp + 0x184]
sub ecx, edx
or eax, ecx
mov dword [rbp + 0x124], eax
movzx eax, word [rbp + 0x184]
imul eax, eax, 0x20
cdqe
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xa8], rax
jmp 0x1400775ca
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov ecx, 2
imul rcx, rcx, 0
mov rdx, qword [rbp + 0x108]
movzx ecx, word [rdx + rcx]
mov rdx, qword [rbp + 0xe8]
mov ecx, dword [rdx + rcx*4]
mov rdx, qword [rbp + 0x88]
add rdx, rcx
mov rcx, rdx
cmp rax, rcx
jbe 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0x4c
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 1]
cmp eax, 0x8b
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 2]
cmp eax, 0xd1
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 3]
cmp eax, 0xb8
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 6]
test eax, eax
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 7]
test eax, eax
jne 0x1400775c5
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 5]
mov byte [rbp + 0x264], al
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 4]
mov byte [rbp + 0x284], al
movzx eax, byte [rbp + 0x264]
shl eax, 8
movzx ecx, byte [rbp + 0x284]
movzx edx, word [rbp + 0x184]
add ecx, edx
or eax, ecx
mov dword [rbp + 0x124], eax
movzx eax, word [rbp + 0x184]
imul eax, eax, 0xffffffe0
cdqe
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0xa8], rax
jmp 0x1400775ca
jmp 0x14007726f
lea rcx, str._tFound_syscall_using_Halos_gate_n
call fcn.14007172f
nop
cmp qword [rbp + 0xa8], 0
je 0x140077682
cmp dword [rbp + 0x124], 0
je 0x140077682
xor eax, eax
mov word [rbp + 0x164], ax
jmp 0x14007760e
movzx eax, word [rbp + 0x164]
inc ax
mov word [rbp + 0x164], ax
movzx eax, word [rbp + 0x164]
cmp eax, 0x20
jge 0x140077682
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax]
cmp eax, 0xf
jne 0x14007767d
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 1]
cmp eax, 5
jne 0x14007767d
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
movzx eax, byte [rcx + rax + 2]
cmp eax, 0xc3
jne 0x14007767d
movzx eax, word [rbp + 0x164]
mov rcx, qword [rbp + 0xa8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x68], rax
jmp 0x140077682
jmp 0x1400775fd
lea rcx, str._tFound_syscall__ret_instruction_n
call fcn.14007172f
nop
cmp qword [rbp + 0x68], 0
je 0x14007769f
cmp dword [rbp + 0x124], 0
jne 0x1400776a1
jmp 0x1400776ed
mov rax, qword [rbp + 0x448]
mov rcx, qword [rbp + 0x68]
mov qword [rax + 8], rcx
mov rax, qword [rbp + 0x448]
mov ecx, dword [rbp + 0x124]
mov dword [rax], ecx
mov edx, dword [rbp + 0x124]
lea rcx, str._tSyscall_nr:__d_n
call fcn.14007172f
nop
mov rdx, qword [rbp + 0x68]
lea rcx, str._tGate:__p_n
call fcn.14007172f
nop
mov dword [rbp + 0x144], 1
mov eax, dword [rbp + 0x144]
lea rsp, [rbp + 0x428]
pop rdi
pop rbp
ret