Function at 0x140036bd0
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
lea rax, vtable.proc_api.0
mov qword [rbp - 0x20], rax
xor r13d, r13d
mov dword [rbp - 0x18], r13d
lea rax, vtable.driver_api.0
mov qword [rbp - 0x20], rax
mov ebx, r13d
mov edi, 0x9cf339ee
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x140036c74
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x626df53c
jmp 0x140036c66
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x140036c46
cmp r9d, ebx
jne 0x140036d7d
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x140036d7d
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x140036d7d
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0x626df53c
jmp 0x140036cda
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x140036cbc
cmp r14d, edi
je 0x140036cf2
test esi, esi
jne 0x140036ca7
jmp 0x140036d7d
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x140036d85
lea rax, [r11 + rcx]
cmp r8, rax
jae 0x140036d85
mov ebx, 0x626df53c
mov edi, ebx
jmp 0x140036d3f
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140036d22
jmp 0x140036d62
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r8
mov al, byte [r8]
test al, al
jne 0x140036d48
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x140036c1a
call r8
mov edx, eax
lea rcx, [rbp - 0x20]
call fcn.140032b24
mov qword [rbp - 0x28], r13
movabs rax, 0x146cc301abc7b950
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x30], r13
movabs rax, 0x8fbc5cafc6649549
mov qword [rbp - 0x30], rax
movabs rax, 0x8c4494882d44d461
sub rax, qword [0x140333050]
sub rax, qword [0x140333058]
movabs rcx, 0xf8f8cd9869f0735b
xor rax, rcx
sub rax, qword [0x140333048]
movabs rcx, 0x7d654b98690d8c5
add rcx, rax
mov rdi, qword [0x140333040]
add rcx, rdi
movabs rax, 0x5a9179a85668c523
xor rcx, rax
movabs rax, 0x5f627dc6c6c68716
sub rcx, rax
movabs rax, 0x3a3b3cd259873f8c
xor rcx, rax
movabs rdx, 0xb483ce44b7c3d710
add rdx, rcx
add rdx, rdi
not rdx
movabs rcx, 0x13cce94ad83db026
mov r10, qword [0x140333038]
mov rax, r10
xor rax, rcx
sub rdx, rax
movabs rax, 0xec3316b527c24fd9
mov r11, qword [0x140333030]
mov rcx, r11
xor rcx, rax
movabs rax, 0xe0b56d8ddd84417b
add rdx, rax
add rdx, rcx
movabs rax, 0x86abec9f9c720a36
xor rdx, rax
mov qword [rbp - 0x30], rdx
movabs rax, 0xe131f5af358212a
sub rax, qword [0x140333050]
sub rax, qword [0x140333058]
movabs rcx, 0xf8f8cd98068153d5
xor rax, rcx
sub rax, qword [0x140333048]
movabs rcx, 0xc7d654b901ab187c
add rcx, rax
add rcx, rdi
movabs rax, 0x5a9179a7e6bcb56d
xor rcx, rax
movabs rax, 0x5f627dc6efb06bc0
sub rcx, rax
movabs rax, 0x2e3b3cd228906f90
xor rcx, rax
movabs rax, 0x3483ce445889aa1a
add rcx, rax
add rcx, rdi
not rcx
movabs rax, 0x13cce94ad9c54e2c
xor r10, rax
sub rcx, r10
movabs rax, 0xec3316b5263ab1d3
xor r11, rax
movabs rax, 0xe0b56d8f46ac2581
add rcx, rax
add rcx, r11
movabs rax, 0x675b6ad26a3da44
xor rcx, rax
mov qword [rbp - 0x28], rcx
and rcx, rdx
mov eax, dword [rbp - 0x18]
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x28], r13
cmp rax, rcx
jne 0x140036fd8
mov dword [rbp + 0x48], r13d
mov dword [rbp + 0x48], 0x66af3fd5
mov eax, 0xca048acd
sub eax, dword [0x140333050]
sub eax, dword [0x140333058]
xor eax, 0x305db2a7
sub eax, dword [0x140333048]
mov rcx, qword [0x140333040]
add eax, 0xf99defd3
add eax, ecx
xor eax, 0x15c00459
add eax, 0x42d4b971
xor eax, 0x812d79b3
lea edx, [rcx + 0xa0a661]
add edx, eax
not edx
mov eax, dword [0x140333038]
xor eax, 0xd9207028
sub edx, eax
mov r8d, dword [0x140333030]
xor r8d, 0x26df8fd7
add r8d, 0xa1670443
add r8d, edx
xor r8d, 0x1bbc8998
mov dword [rbp + 0x48], r8d
mov dword [rbp + 0x48], r13d
jmp 0x1400378f5
movabs rdi, 0x1f2dd49ec2b0057d
movabs r15, 0xf16c8fb8258ca416
mov rbx, r13
movabs rax, 0x2b16bba2c5b7e0e0
movabs r9, 0x1560b89b9ee8952c
mov r13, qword [0x140333070]
mov rsi, r13
imul rsi, rax
not rsi
movabs rcx, 0xea9f476466c61d72
mov rax, qword [0x140333060]
xor rax, rcx
and rsi, rax
ror rsi, 0x24
shr rsi, 8
movabs rax, 0xcec4eff6586c1830
mov r10, r13
imul r10, rax
add r10, rdi
movabs rax, 0x2dd3734f80000000
xor r10, rax
shr r10, 0x1f
not r10
movabs r8, 0xe0d22b613d4ffa83
lea rcx, [r10 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x140333060]
movzx eax, r10b
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xb9
mov edx, 0x8000003f
and ecx, edx
jge 0x1400370af
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rax, r10
ror rax, cl
not rax
movabs rcx, 0x8a95beb1568e2628
mov r12, rax
imul r12, rcx
lea r11, [r12 + r8]
mov r8, r10
imul r8, rsi
sub r8, r11
xor r8, r15
movzx r14d, r11b
mov ecx, r14d
xor ecx, 6
and ecx, 0xf
and ecx, edx
jge 0x1400370f2
dec ecx
or ecx, 0xffffffc0
inc ecx
rol r8, cl
movabs rcx, 0xc5b77a9c95a76988
imul rax, rcx
movabs rcx, 0x5da0f05b0001e0f7
add rax, rcx
xor r8, rax
mov rax, r11
sub rax, qword [0x140333078]
xor r8, rax
xor r8, r9
mov rax, r8
and eax, 1
xor rax, 2
je 0x140037402
sub rax, 1
je 0x14003730c
sub rax, 1
movabs r14, 0xaaaaaaaaaaaaaaab
je 0x140037241
cmp rax, 1
jne 0x14003748a
mov r15, r11
imul r15, r10
movabs rax, 0x536c1946b26441b
add rax, r8
xor r15, rax
ror r15, 0x1e
shr r15, 0xc
not r15
movabs rcx, 0x83572d5513ae
mov rdx, qword [0x140333088]
add rdx, rcx
movabs rax, 0xe050ae195b01c9ab
xor rdx, rax
movzx eax, r8b
movzx ecx, r15b
imul ecx, eax
and cl, 0x3f
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db975b5ff51
sub rax, r10
mov r10, rdx
xor r10, rax
mov rcx, r10
imul rcx, rdi
mov eax, 0xa46e2dbb
add rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x140333060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rdi, 0x6f2adafecbededc6
sub rdi, r15
shr rdi, cl
movabs rcx, 0xe0da4fe9943a57fb
add rcx, r12
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r13 + rcx*8]
imul rax, r8
sub rax, rsi
xor rdi, rax
jmp 0x14003748a
movabs rcx, 0xaaaaaa1aa477d085
mov r10, r8
xor r10, rcx
movabs rcx, 0x1206ed667a0cc9
imul r10, rcx
movabs rcx, 0xffff7e8a8267e259
imul r12, rcx
movabs rcx, 0xdf37447d1152c0f
add r10, rcx
add r10, r12
movabs rax, 0x277cd7be76a707e5
mov rcx, r10
xor rcx, rax
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r11, r10
not r11
lea rdx, [0x140333060]
imul r11, qword [rdx + rcx*8]
xor r11, 0xfffffffff1220655
lea ecx, [r8 + 7]
and cl, 0x3f
rol r11, cl
movabs rax, 0x784a694400000000
imul r11, rax
mov rcx, r11
ror rcx, 0xe
not rcx
movabs rax, 0x9b2de6b2e52e1708
imul rcx, rax
mov rax, r10
sub rax, r11
lea rdx, [rcx + rax*4]
mov cl, sil
and cl, 0x3f
ror rdx, cl
mov rax, rdi
mov rdi, rdx
imul rdi, rax
jmp 0x14003748a
movabs rax, 0x2dcbddf2a683e6c9
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0xe937047da735be9
shl rdx, cl
mov rax, r9
mov r9, rdx
xor r9, rax
and r14d, 0x8000003f
jge 0x14003735f
dec r14d
or r14d, 0xffffffc0
inc r14d
mov cl, r14b
rol r9, cl
movabs rcx, 0xe0d22b613d4ffa83
add rcx, r8
movabs r14, 0xaaaaaaaaaaaaaaab
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0x149ec2b0057d
lea rax, [0x140333060]
mov rax, qword [rax + rcx*8]
imul rax, rdx
xor r9, rax
movabs rax, 0xffffc7a7f8b3a6a8
or r9, rax
mov rdi, r13
imul rdi, r15
sub rdi, r11
mov rax, rsi
sub rax, r9
xor rdi, rax
movabs rax, 0xc7a7c6a6a9bba6a5
xor rdi, rax
mov rax, r8
imul rax, r11
imul rax, rdi
mov rbx, r10
sub rbx, rax
movabs rax, 0x789589466e9eabf
add rbx, rax
xor rbx, rsi
not rbx
jmp 0x14003748a
mov rcx, r8
imul rcx, qword [0x140333080]
and rcx, qword [0x140333080]
mov rax, r9
mov r9, rcx
xor r9, rax
ror r9, 0x2c
imul r9, r11
mov rbx, rsi
not rbx
imul rbx, r10
movabs rax, 0x7cd8a7de744af744
imul rbx, rax
imul rsi, qword [0x140333060], 0xfffffffff82e885e
mov rdx, qword [0x140333068]
sub rsi, rdx
mov al, bl
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x14003746d
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rsi, cl
movabs rax, 0xe0d22b613d4ffa83
add rsi, rax
add rsi, r12
movabs r14, 0xaaaaaaaaaaaaaaab
movabs rax, 0xff055d7b8401fd89
xor r15, rax
mov rax, r14
mul r15
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r15, rax
xor r9, rbx
lea rax, [0x140333060]
imul r9, qword [rax + r15*8]
not r11
imul r11, r8
imul r11, rsi
imul r11, rdi
movabs rcx, 0xf5ed7e8783b2b755
xor rcx, r10
not rcx
xor rcx, r11
sub rcx, r9
call fcn.140031684
mov qword [0x140337f40], rax
xor r12d, r12d
mov dword [rbp + 0x50], r12d
mov dword [rbp + 0x50], 0xd602dfd7
mov eax, 0x67dfdf76
sub eax, dword [0x140333050]
sub eax, dword [0x140333058]
xor eax, 0x19b643e8
sub eax, dword [0x140333048]
mov rcx, qword [0x140333040]
add eax, 0xa1bb1f7
add eax, ecx
xor eax, 0x99d8a77b
sub eax, 0x23245117
xor eax, 0x6454713b
lea edx, [rcx - 0x4b38ce83]
add edx, eax
not edx
mov eax, dword [0x140333038]
xor eax, 0xc5c86dec
sub edx, eax
mov ecx, dword [0x140333030]
xor ecx, 0x3a379213
add ecx, 0x75ccc573
add ecx, edx
xor ecx, 0x1244c084
mov dword [rbp + 0x50], ecx
mov dword [rbp + 0x60], ecx
mov dword [rbp + 0x50], r12d
movabs rax, 0xfeefd2a265c196be
mov rbx, qword [0x140333070]
imul rbx, rax
not rbx
movabs rcx, 0xba2c8f631f0f1f13
mov r15, qword [0x140333060]
mov rax, r15
xor rax, rcx
and rbx, rax
ror rbx, 0x37
shr rbx, 8
mov r14, qword [0x140333068]
movabs rax, 0xdeb04a22bf97e888
mov r11, r14
imul r11, rax
movabs rax, 0x6b6a5c3f4f5168c4
add r11, rax
movabs rcx, 0xc470bd3b7fffffff
xor r11, rcx
shr r11, 0x1f
not r11
movabs r8, 0x9495a3c0b0ae973c
lea rcx, [r11 + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, r11b
lea rdx, [0x140333060]
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x93
and ecx, 0x8000003f
jge 0x140037633
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rdx, r11
ror rdx, cl
not rdx
movabs rax, 0x7612ea2ec364b5f4
mov rdi, rdx
imul rdi, rax
add r8, rdi
mov r9, r11
imul r9, rbx
sub r9, r8
movabs rax, 0x273f9b7d2a1c3e6b
xor r9, rax
mov cl, r8b
xor cl, 0xfc
and cl, 0xf
rol r9, cl
mov rax, r8
sub rax, qword [0x140333078]
xor r9, rax
movabs rax, 0x36eaa93e613a6ed0
imul rdx, rax
movabs r13, 0x4041c9046ee7d610
sub rdx, r13
xor r9, rdx
movabs rax, 0x45d3709ce2b5569f
xor r9, rax
mov r10, r9
mov rsi, qword [0x140333080]
imul r10, rsi
and r10, qword [0x140333078]
xor r10, rax
ror r10, 0x1f
imul r10, r8
not rbx
imul rbx, r11
movabs rax, 0x7cd8a7de78decc6e
imul rbx, rax
imul rdx, r15, 0xfffffffffdba498c
sub rdx, r14
mov al, bl
not al
movzx ecx, al
movzx eax, r14b
xor ecx, eax
and ecx, 0x8000003f
jge 0x140037706
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdx, cl
lea rcx, [rdi + rdx]
movabs rax, 0x6b6a5c3f4f5168c4
imul rcx, rax
sub rcx, r13
movabs rax, 0x6b6a5c3f4f5168c3
sub rax, rdi
imul rcx, rax
imul rcx, r9
movabs rax, 0xf5ed7e878f268c7f
xor r11, rax
not r11
xor rcx, r11
xor r10, rbx
imul r10, rsi
sub rcx, r10
call fcn.1400317a4
mov qword [0x140337f38], rax
mov dword [rbp + 0x48], r12d
mov dword [rbp + 0x48], 0x1e148cc1
mov eax, 0x814f8e65
sub eax, dword [0x140333050]
sub eax, dword [0x140333058]
xor eax, 0x1b9c431
sub eax, dword [0x140333048]
mov rdx, qword [0x140333040]
lea ecx, [rdx + 0x7b47c257]
add ecx, eax
xor ecx, 0xe15e8e33
add ecx, 0x11be16bf
xor ecx, 0x7e35eb91
mov ebx, dword [0x140333030]
xor ebx, 0x2627dee1
sub ebx, ecx
mov eax, dword [0x140333038]
xor eax, 0xd9d8211e
sub ebx, eax
sub ebx, edx
add ebx, 0x5d9d4a8
xor ebx, 0x633f1f5e
mov dword [rbp + 0x48], ebx
mov dword [rbp - 0x38], r12d
mov rax, qword [rbp - 0x20]
mov r9d, 4
lea r8, [rbp - 0x38]
lea rdx, [rbp + 0x60]
lea rcx, [rbp - 0x20]
call qword [rax + 0x20]
mov ecx, dword [rbp + 0x60]
add ecx, ebx
mov dword [rbp + 0x48], r12d
mov dword [rbp + 0x58], r12d
cmp dword [rbp - 0x38], ecx
je 0x140037879
mov dword [rbp + 0x58], 0xe91ae88e
mov eax, 0xc52a7221
sub eax, dword [0x140333050]
sub eax, dword [0x140333058]
xor eax, 0x162f5cf
sub eax, dword [0x140333048]
mov rdx, qword [0x140333040]
lea ecx, [rdx - 0x452c42ba]
add ecx, eax
xor ecx, 0xe0fd10c1
add ecx, 0x11da3959
xor ecx, 0xba0b2ca5
mov r8d, dword [0x140333030]
xor r8d, 0x262688ff
sub r8d, ecx
mov eax, dword [0x140333038]
xor eax, 0xd9d97700
sub r8d, eax
sub r8d, edx
sub r8d, 0x787b9941
xor r8d, 0x30d58900
mov dword [rbp + 0x58], r8d
jmp 0x1400378f1
mov dword [rbp + 0x58], 0x6d4f11d3
mov eax, 0xd1d7b435
sub eax, dword [0x140333050]
sub eax, dword [0x140333058]
xor eax, 0xfc63ff24
sub eax, dword [0x140333048]
mov rdx, qword [0x140333040]
lea ecx, [rdx - 0x6201077c]
add ecx, eax
xor ecx, 0xbbdeb8c6
sub ecx, 0x69eb0ef5
xor ecx, 0xe5859f8d
mov r8d, dword [0x140333030]
xor r8d, 0x22229cd5
sub r8d, ecx
mov eax, dword [0x140333038]
xor eax, 0xdddd632a
sub r8d, eax
sub r8d, edx
add r8d, 0x96a7224
xor r8d, 0x413519f2
mov dword [rbp + 0x58], r8d
mov dword [rbp + 0x58], r12d
mov eax, r8d
lea rcx, vtable.proc_api.0
mov qword [rbp - 0x20], rcx
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret