Function at 0x140002eb0
Capabilities:
Install driver

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x268]
sub rsp, 0x340
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x210], rax
mov qword [rbp - 0x78], rcx
xor r13d, r13d
mov edi, r13d
mov dword [rbp + 0x10], r13d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r13
mov ecx, 0x9e3f
call fcn.14000c200
test rax, rax
je 0x140003bd4
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
mov qword [rsp + 0x50], rcx
lea rbx, [rcx + 0x9e18]
mov qword [rsp + 0x60], rbx
mov r8d, 0x9e18
lea rdx, [0x140013080]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x58], rbx
lea rdx, [rbp - 0x30]
call fcn.140002710
nop
mov r8d, 4
lea rdx, str..sys
mov rcx, rax
call fcn.140006070
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x70], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x80], xmm6
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], 0xf
mov byte [rax], r13b
or edi, 2
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140002fd3
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002fce
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fce
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000eea0]
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x30], 0
lea rcx, [rbp - 0x10]
call fcn.1400025b0
nop
mov rcx, rax
cmp qword [rax + 0x18], 7
jbe 0x140002ffb
mov rcx, qword [rax]
mov rax, qword [rax + 0x10]
mov qword [rbp + 0x20], rcx
mov qword [rbp + 0x28], rax
call fcn.14000b8ac
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x20], xmm0
lea r8, [rbp + 0x20]
mov edx, eax
lea rcx, [rbp + 0x50]
call fcn.140006f10
or edi, 0x1c
lea r9, [rbp + 0x70]
movq r14, xmm7
movdqa xmm0, xmm6
psrldq xmm0, 8
movq r13, xmm0
cmp r13, 0xf
cmova r9, r14
mov r15, qword [rbp + 0x60]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
sub rax, r15
movq rsi, xmm6
cmp rsi, rax
ja 0x140003091
lea rax, [rsi + r15]
mov qword [rbp + 0x60], rax
lea rbx, [rbp + 0x50]
cmp rcx, 0xf
cmova rbx, qword [rbp + 0x50]
lea rcx, [rbx + r15]
mov r8, rsi
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsi + rbx]
mov byte [rax + r15], 0
lea rax, [rbp + 0x50]
jmp 0x1400030ad
mov qword [rsp + 0x20], rsi
mov rdx, rsi
lea rcx, [rbp + 0x50]
call fcn.140006af0
mov r13, qword [rbp + 0x88]
mov r14, qword [rbp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
xor esi, esi
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], rsi
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x40], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], sil
or edi, 0x20
mov rdx, qword [rbp + 0x68]
cmp rdx, 0xf
jbe 0x14000311d
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003118
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003118
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000eea0]
movdqu xmmword [rbp + 0x60], xmm0
mov byte [rbp + 0x50], 0
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140003171
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000316c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000316c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000ee90]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], si
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0xf0]
call sub.VCRUNTIME140.dll_memset
lea rbx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rbx, qword [rbp + 0x30]
lea rax, [0x14000ed68]
mov qword [rbp + 0xf0], rax
lea rcx, [rbp + 0x198]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::constructor_void____ptr64]
nop
or edi, 0x40
mov dword [rbp + 0x10], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp + 0xf8]
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char______ptr64__bool____ptr64]
nop
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea r15, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rbp + rcx + 0xf0], r15
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xec], edx
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void____ptr64]
lea rax, vtable.std::basic_filebuf_char__struct_std::char_traits_char__.0
mov qword [rbp + 0xf8], rax
mov byte [rbp + 0x174], 0
mov byte [rbp + 0x169], 0
lea rcx, [rbp + 0xf8]
call qword [sym.imp.MSVCP140.dll_protected:_void___cdecl_std::basic_streambuf_char__struct_std::char_traits_char__::_Init_void____ptr64]
mov qword [rbp + 0x178], rsi
mov rax, qword [0x140020a68]
mov qword [rbp + 0x16c], rax
mov qword [rbp + 0x160], rsi
mov r8d, 0x22
mov rdx, rbx
lea rcx, [rbp + 0xf8]
call fcn.140005dd0
test rax, rax
jne 0x1400032a3
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx + 0xf0], r15
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rbp + rcx + 0xec], edx
mov r8, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
sub r8, rdx
lea rcx, [rbp + 0xf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator__void_const___ptr64]
mov r12d, 1
lea rcx, [rbp + 0xf8]
test al, al
je 0x1400034f0
call fcn.140005d10
test rax, rax
jne 0x14000333a
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rax, qword [rbp + 0x30]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x28], rax
call fcn.14000b8ac
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0xe0], xmm0
lea r8, [rbp + 0xe0]
mov edx, eax
lea rcx, [rsp + 0x30]
call fcn.1400019b0
nop
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rcx, qword [rsp + 0x30]
call fcn.14000bf60
mov rdx, rax
shr rax, 0x20
test eax, eax
jne 0x140003be7
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x1400033e3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033de
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033de
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
mov ebx, 0xc0000001
mov dword [rbp + 0x90], ebx
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xa8], xmm1
xor r8d, r8d
lea rdx, [0x14000e8b9]
lea rcx, [rbp + 0x98]
call fcn.1400066a0
nop
lea rcx, [rbp + 0xf0]
call fcn.140002d60
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140003462
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000345d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003a98
call fcn.14000c244
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
cmp r13, 0xf
jbe 0x1400034aa
lea rdx, [r13 + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1400034a1
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003af5
mov rcx, r14
call fcn.14000c244
nop
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x140003b0f
mov rdx, qword [rsp + 0x60]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003afc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003afc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140005d10
test rax, rax
jne 0x14000351d
mov rax, qword [rbp + 0xf0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0xf0]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rdx, str.SeLoadDriverPrivilege
lea rcx, [rsp + 0x30]
call fcn.1400056e0
mov qword [rbp + 0x10], rsi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp + 0x10]
mov edx, 0x28
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x1400035c4
mov qword [rbp + 0x50], rsi
lea rdx, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rdx, qword [rsp + 0x30]
lea r8, [rbp + 0x50]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
test eax, eax
je 0x1400035c4
mov dword [rbp + 0x20], r12d
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x24], rax
mov dword [rbp + 0x2c], 2
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
mov r9d, 0x10
lea r8, [rbp + 0x20]
xor edx, edx
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov ebx, eax
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test ebx, ebx
je 0x1400035c4
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1400035c4
xor bl, bl
jmp 0x1400035c8
movzx ebx, r12b
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x14000360d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003608
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003608
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
test bl, bl
je 0x14000361b
mov ebx, 0xc0000061
jmp 0x140003a42
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 0xf
cmova rax, qword [rbp + 0x30]
mov qword [rbp + 0x20], rax
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x28], rax
call fcn.14000b8ac
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x20], xmm0
lea r8, [rbp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.1400019b0
or edi, 0x600
mov dword [rbp + 0x10], edi
mov qword [rbp + 0x50], rsi
lea rax, [0x14001ffd0]
mov qword [rbp + 0x58], rax
lea r8, [rbp + 0x50]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.140002460
bts edi, 0xb
mov dword [rbp + 0x10], edi
cmp dword [rbp + 0x50], 0
jne 0x140003bf6
lea rax, [rsp + 0x30]
cmp qword [rsp + 0x48], 7
cmova rax, qword [rsp + 0x30]
mov qword [rbp + 0x20], rax
mov rax, qword [rsp + 0x40]
mov qword [rbp + 0x28], rax
call fcn.14000b8ac
movaps xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x20], xmm0
lea r8, [rbp + 0x20]
mov edx, eax
lea rcx, [rbp - 0x70]
call fcn.140006f10
or edi, 0x7000
mov dword [rbp + 0x10], edi
mov r9d, 4
lea r8, str.___
lea rcx, [rbp - 0x70]
call fcn.140006ca0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
bts edi, 0xf
mov dword [rbp + 0x10], edi
lea rdx, [rbp + 0x70]
lea rcx, [rsp + 0x68]
call fcn.140002820
movzx ebx, al
mov rdx, qword [rbp - 0x80]
cmp rdx, 0xf
jbe 0x14000376f
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000376a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000376a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000eea0]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400037c8
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400037bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400037bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000eea0]
movdqu xmmword [rbp - 0x60], xmm0
mov byte [rbp - 0x70], 0
mov rdx, qword [rsp + 0x48]
cmp rdx, 7
jbe 0x140003816
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003811
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003811
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
movdqa xmm0, xmmword [0x14000ee90]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], si
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14000386c
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003867
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
test bl, bl
jne 0x14000387a
mov ebx, 0xc0000001
jmp 0x140003a42
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov rsi, qword [rbp + 0x80]
sub rax, rsi
cmp rax, 0x34
jb 0x140003bdb
lea r15, [rbp + 0x70]
cmp qword [rbp + 0x88], 0xf
cmova r15, qword [rbp + 0x70]
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xc8], xmm1
lea r14, [rsi + 0x34]
mov ebx, 0xf
lea rdi, [rbp + 0xb8]
cmp r14, rbx
jbe 0x14000395a
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x140003916
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000c200
test rax, rax
je 0x140003a34
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140003953
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140003933
xor r13d, r13d
mov edi, r13d
jmp 0x140003953
cmp rcx, 0x1000
jb 0x14000394b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003be1
jmp 0x1400038f7
call fcn.14000c200
mov rdi, rax
mov qword [rbp + 0xb8], rdi
mov qword [rbp + 0xc8], r14
mov qword [rbp + 0xd0], rbx
movups xmm0, xmmword [str.RegistryMachineSystemCurrentControlSetServices_]
movups xmmword [rdi], xmm0
movups xmm1, xmmword [0x14000e9d8]
movups xmmword [rdi + 0x10], xmm1
movups xmm0, xmmword [0x14000e9e8]
movups xmmword [rdi + 0x20], xmm0
mov eax, dword [0x14000e9f8]
mov dword [rdi + 0x30], eax
lea rcx, [rdi + 0x34]
mov r8, rsi
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + r14], 0
lea rdx, [rbp + 0xb8]
cmp qword [rbp + 0xd0], 0xf
cmova rdx, qword [rbp + 0xb8]
lea rcx, [rbp + 0x200]
call qword [sym.imp.ntdll.dll_RtlInitAnsiString]
mov r8b, 1
lea rdx, [rbp + 0x200]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ntdll.dll_RtlAnsiStringToUnicodeString]
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ntdll.dll_NtLoadDriver]
mov ebx, eax
lea rcx, [rbp + 0xe0]
call qword [sym.imp.ntdll.dll_RtlFreeUnicodeString]
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0xf
jbe 0x140003a40
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a3b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
xor esi, esi
mov dword [rbp + 0x90], ebx
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x98]
call fcn.1400059f0
nop
lea rcx, [rbp + 0xf0]
call fcn.140002d60
nop
mov rdx, qword [rbp + 0x48]
cmp rdx, 0xf
jbe 0x140003aa4
inc rdx
mov rcx, qword [rbp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003a9f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003a9f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], 0xf
mov byte [rbp + 0x30], 0
mov rdx, qword [rbp + 0x88]
cmp rdx, 0xf
jbe 0x1400034aa
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400034a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400034a4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14000c244
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], rsi
cmp dword [rbp + 0x90], 0
jl 0x140003b50
lea rcx, [rbp + 0x98]
mov rax, qword [rbp - 0x78]
cmp rax, rcx
je 0x140003b53
lea rdx, [rbp + 0x98]
cmp qword [rbp + 0xb0], 0xf
cmova rdx, qword [rbp + 0x98]
mov r8, qword [rbp + 0xa8]
mov rcx, rax
call fcn.140005f10
jmp 0x140003b53
mov r12d, esi
mov rdx, qword [rbp + 0xb0]
cmp rdx, 0xf
jbe 0x140003b97
inc rdx
mov rcx, qword [rbp + 0x98]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003b92
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003b92
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000c244
mov eax, r12d
mov rcx, qword [rbp + 0x210]
xor rcx, rsp
call fcn.14000c1e0
lea r11, [rsp + 0x340]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.1400011b0
nop
call fcn.140001110
nop
shr rdx, 0x20
lea r8, [rsp + 0x30]
call fcn.140002390
nop
lea r8, [rbp - 0x50]
lea rdx, [rbp + 0x50]
lea rcx, str.absolute
call fcn.140002400
int3