Function at 0x14000a480
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x140024040]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r14, rdx
mov qword [rbp - 0x70], rdx
movsxd r12, ecx
lea rcx, [0x14000a130]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov esi, 1
mov r13d, esi
lea rbx, [r14 + 8]
cmp r12d, esi
jle 0x14000a579
mov rdi, rbx
mov rcx, qword [rdi]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a4f0
cmp rax, 5
jne 0x14000a522
add rcx, 2
lea rdx, [0x14001d788]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a522
mov rax, qword [rdi]
cmp word [rax], 0x2f
je 0x14000a85f
mov rcx, qword [rdi]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a530
cmp rax, 6
jne 0x14000a569
add rcx, 4
lea rdx, [0x14001d788]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a569
mov rax, qword [rdi]
cmp word [rax], 0x2d
jne 0x14000a569
cmp word [rax + 2], 0x2d
je 0x14000a85f
inc r13d
add rdi, 8
cmp r13d, r12d
jl 0x14000a4e1
xor r15b, r15b
lea r8, [0x14001d798]
mov rdx, r14
mov ecx, r12d
call fcn.14000a1e0
mov r14d, eax
mov edi, esi
mov r13d, 0xffffffff
cmp r12d, esi
jle 0x14000a634
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a5b0
cmp rax, 9
jne 0x14000a5de
add rcx, 2
lea rdx, str.indPages
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a5de
mov rax, qword [rbx]
cmp word [rax], 0x2f
je 0x14000a642
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a5f0
cmp rax, 0xa
jne 0x14000a625
add rcx, 4
lea rdx, str.indPages
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a625
mov rax, qword [rbx]
cmp word [rax], 0x2d
jne 0x14000a625
cmp word [rax + 2], 0x2d
je 0x14000a642
inc edi
add rbx, 8
cmp edi, r12d
jl 0x14000a5a2
mov edi, 0xffffffff
cmp r12d, esi
jle 0x14000a6e4
mov rbx, qword [rbp - 0x70]
add rbx, 8
nop word [rax + rax]
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a660
cmp rax, 0x12
jne 0x14000a68e
add rcx, 2
lea rdx, str.PassAllocationPtr
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a68e
mov rax, qword [rbx]
cmp word [rax], 0x2f
je 0x14000a6e9
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a6a0
cmp rax, 0x13
jne 0x14000a6d5
add rcx, 4
lea rdx, str.PassAllocationPtr
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a6d5
mov rax, qword [rbx]
cmp word [rax], 0x2d
jne 0x14000a6d5
cmp word [rax + 2], 0x2d
je 0x14000a6e9
inc esi
add rbx, 8
cmp esi, r12d
jl 0x14000a650
mov esi, 0xffffffff
test esi, esi
setg byte [rsp + 0x51]
test r13d, r13d
jle 0x14000a718
lea rdx, str.__Ember___Free_pool_memory_after_usage_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test r14d, r14d
jle 0x14000a740
lea rdx, str.__Ember___Mdl_memory_usage_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test edi, edi
jle 0x14000a767
lea rdx, str.__Ember___Allocate_Independent_Pages_mode_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test esi, esi
jle 0x14000a78e
lea rdx, str.__Ember___Pass_Allocation_Ptr_as_first_param_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 1
mov dword [rsp + 0x54], ecx
mov qword [rbp - 0x68], r12
cmp r12, rcx
jle 0x14000aa54
mov eax, ecx
mov qword [rbp - 0x58], rcx
xor r12d, r12d
mov esi, 4
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rcx + rax*8]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000a7c1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea rcx, [rbp - 0x50]
call fcn.140008650
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140009760
cmp rax, rdx
je 0x14000a82c
nop dword [rax + rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14000a82c
cmp cx, 0x2f
je 0x14000a82c
mov rbx, r8
cmp rax, r8
jne 0x14000a810
mov r8d, 0x3a
mov rcx, rbx
call fcn.14000fc20
cmp rbx, rax
je 0x14000a89f
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x14000a89f
cmp word [rdx], 0x2e
jne 0x14000a882
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x14000a8a2
cmp word [rcx], 0x2e
jne 0x14000a8a2
jmp 0x14000a89f
test r13d, r13d
setg r15b
lea r8, [0x14001d798]
mov rdx, r14
mov ecx, r12d
call fcn.14000a1e0
mov r14d, eax
mov edi, esi
jmp 0x14000a5a2
sub rdx, 2
cmp rbx, rdx
je 0x14000a89f
nop dword [rax + rax]
cmp word [rdx], 0x2e
je 0x14000a8a2
sub rdx, 2
cmp rbx, rdx
jne 0x14000a890
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8, rax
lea rcx, [rsp + 0x58]
call fcn.140008650
nop
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rax, qword [rsp + 0x58]
mov qword [rbp - 0x30], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x28], rax
call fcn.14000f684
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.14000b1d0
lea rcx, [rbp + 0x10]
mov r13, qword [rbp + 0x28]
cmp r13, 0xf
seta byte [rsp + 0x50]
mov rbx, qword [rbp + 0x10]
cmova rcx, rbx
mov r12, qword [rbp + 0x20]
mov r8, r12
cmp r12, 4
cmova r8, rsi
lea rdx, str..sys
call sub.VCRUNTIME140.dll_memcmp
mov esi, eax
test eax, eax
jne 0x14000a952
cmp r12, 4
jae 0x14000a948
lea esi, [rax - 1]
jmp 0x14000a952
xor esi, esi
cmp r12, 4
seta sil
cmp byte [rsp + 0x50], 0
je 0x14000a98a
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000a982
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aacc
mov rcx, rbx
call fcn.14000fd20
xor r12d, r12d
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], r12b
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000a9df
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a9da
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aad3
call fcn.14000fd20
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14000aa33
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aada
call fcn.14000fd20
test esi, esi
je 0x14000aae1
inc dword [rsp + 0x54]
mov rax, qword [rbp - 0x58]
inc rax
mov qword [rbp - 0x58], rax
cmp rax, qword [rbp - 0x68]
jl 0x14000a7ad
lea rdx, str._r_r__Ember___Incorrect_Usage_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.__Ember___Usage:_kdmapper.exe____free____mdl____PassAllocationPtr__driver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14000fd00
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd rax, dword [rsp + 0x54]
test eax, eax
jle 0x14000aa54
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rcx + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000ab10
lea rcx, [rbp - 0x10]
call fcn.140008650
nop
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8, qword [rbp]
lea rcx, [rsp + 0x58]
call fcn.140008650
nop
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x10]
call fcn.14000f89c
mov r8d, eax
test eax, eax
jne 0x14000abb6
mov edx, dword [rbp + 0x20]
bt edx, 0xa
jae 0x14000aba8
mov eax, dword [rbp + 0x24]
cmp eax, 0xa000000c
jne 0x14000ab9a
lea eax, [r8 + 4]
jmp 0x14000abd9
cmp eax, 0xa0000003
jne 0x14000aba8
mov eax, 0xa
jmp 0x14000abd9
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x14000abd9
mov dword [rbp - 0x64], 0xffff
sub eax, 2
je 0x14000abd4
sub eax, 1
je 0x14000abd4
sub eax, 0x32
je 0x14000abd4
cmp eax, 0x46
mov eax, r12d
jne 0x14000abd9
mov eax, 1
mov dword [rbp - 0x30], r8d
lea rcx, [0x1400240b8]
mov qword [rbp - 0x28], rcx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
test eax, eax
je 0x14000ac3b
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000ac4d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ac48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000ac48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test r8d, r8d
jne 0x14000afc1
jmp 0x14000abfb
call fcn.14000fd20
test bl, bl
je 0x14000aca7
lea rdx, str.__Ember___File
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rax
call fcn.140008e80
lea rdx, str._doesnt_exist
mov rcx, rax
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call fcn.14000a3e0
jmp 0x14000ae06
call fcn.1400017d0
mov qword [0x140024c10], rax
cmp rax, 0xffffffffffffffff
jne 0x14000acc3
call fcn.14000a3e0
jmp 0x14000ae06
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov ecx, 1
call fcn.14000fe48
mov qword [rbp - 0x30], rax
lea rcx, [rax + 1]
mov qword [rbp - 0x20], rcx
mov byte [rax], 0
mov qword [rbp - 0x28], rcx
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x10]
call fcn.14000ecb0
mov rbx, qword [rbp - 0x30]
test al, al
jne 0x14000ad14
lea rdx, str.__Ember___Failed_to_read_image_to_memory
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
jmp 0x14000adaa
test r14d, r14d
jle 0x14000ad39
test edi, edi
jle 0x14000ad32
lea rdx, str.__Ember___Too_many_allocation_modes
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
jmp 0x14000adaa
mov eax, 1
jmp 0x14000ad46
mov eax, r12d
mov ecx, 2
test edi, edi
cmovg eax, ecx
mov dword [rbp - 0x80], r12d
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x48], rcx
movzx ecx, byte [rsp + 0x51]
mov byte [rsp + 0x38], cl
mov dword [rsp + 0x30], eax
mov byte [rsp + 0x20], r15b
mov rdx, rbx
mov rcx, qword [0x140024c10]
call fcn.14000c010
test rax, rax
jne 0x14000ae4f
lea rdx, str.__Ember___Failed_to_map
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rax
call fcn.140008e80
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, qword [0x140024c10]
call fcn.140002430
call fcn.14000a3e0
nop
test rbx, rbx
je 0x14000ae06
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000adfd
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000af67
mov rcx, rbx
call fcn.14000fd20
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x14000aa9a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14000ae45
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14000afae
call fcn.14000fd20
jmp 0x14000aa9a
mov rcx, qword [0x140024c10]
call fcn.140002430
test al, al
jne 0x14000ae87
lea rdx, str.__Ember___Warning_failed_to_fully_unload_vulnerable_driver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call fcn.14000a3e0
lea rdx, str.__Ember___success
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
cmp byte [0x140024c04], 0
sete byte [0x140024c04]
lea rcx, [0x14001db3c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
cmp byte [0x140024c04], 1
jne 0x14000af0d
lea rdx, [0x14001db40]
call fcn.140006150
lea rdx, [0x140006330]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.Press_Enter_to_Close.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rcx, str.pause__nul
jmp 0x14000af33
lea rdx, str.Driver_Failed_to_Load.
call fcn.140006150
lea rdx, str.Press_Enter_to_Close.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006150
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
nop
test rbx, rbx
je 0x14000af77
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000af6e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000af6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000fd20
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x14000afba
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000afb5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000afb5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000fd20
xor eax, eax
jmp 0x14000aa9f
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x30]
call fcn.14000a0d0
int3