Function at 0x1401baf50
Capabilities:
Acquire debug privileges

Disassembly:
jmp 0x1401baf50
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x1405fadb0]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov ebx, 1
xor eax, eax
lock cmpxchg dword [0x1405ffef0], ebx
jne 0x1401bb27c
lea rcx, str.ntdll.dll
mov dword [0x1405ff5e8], 0x11c
call qword [0x1405e8998]
mov rcx, rax
lea rdx, str.RtlGetVersion
call qword [0x1405e89b0]
test rax, rax
je 0x1401bafb3
lea rcx, [0x1405ff5e8]
call rax
mov eax, dword [0x1405ff5ec]
xor edi, edi
test eax, eax
je 0x1401bb0eb
shl eax, 8
or eax, dword [0x1405ff5f0]
sub eax, 0x501
je 0x1401bb0e5
sub eax, 0x100
je 0x1401bb0d9
sub eax, ebx
je 0x1401bb0cd
sub eax, ebx
je 0x1401bb0c1
cmp eax, 0x3fd
je 0x1401bb004
mov dword [0x1405ff5e0], edi
jmp 0x1401bb0eb
mov eax, dword [0x1405ff5f4]
cmp eax, 0x4a61
jb 0x1401bb020
mov dword [0x1405ff5e0], 0xd
jmp 0x1401bb0eb
cmp eax, 0x47bb
jb 0x1401bb036
mov dword [0x1405ff5e0], 0xc
jmp 0x1401bb0eb
cmp eax, 0x47ba
jb 0x1401bb04c
mov dword [0x1405ff5e0], 0xb
jmp 0x1401bb0eb
cmp eax, 0x4563
jb 0x1401bb062
mov dword [0x1405ff5e0], 0xa
jmp 0x1401bb0eb
cmp eax, 0x42ee
jb 0x1401bb075
mov dword [0x1405ff5e0], 9
jmp 0x1401bb0eb
cmp eax, 0x3fab
jb 0x1401bb088
mov dword [0x1405ff5e0], 8
jmp 0x1401bb0eb
cmp eax, 0x3ad7
jb 0x1401bb09b
mov dword [0x1405ff5e0], 7
jmp 0x1401bb0eb
cmp eax, 0x3839
jb 0x1401bb0ae
mov dword [0x1405ff5e0], 6
jmp 0x1401bb0eb
cmp eax, 0x295a
jb 0x1401bb0eb
mov dword [0x1405ff5e0], 5
jmp 0x1401bb0eb
mov dword [0x1405ff5e0], 4
jmp 0x1401bb0eb
mov dword [0x1405ff5e0], 3
jmp 0x1401bb0eb
mov dword [0x1405ff5e0], 2
jmp 0x1401bb0eb
mov dword [0x1405ff5e0], ebx
call fcn.1401ba6e0
xorps xmm0, xmm0
mov dword [0x1405ff5e4], eax
mov edx, 0x18
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x38], 7
movups xmmword [rsp + 0x20], xmm0
call fcn.140178570
movups xmm0, xmmword [str.SeDebugPrivilege]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x30], 0x10
mov qword [rsp + 0x38], 0x17
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1405e4f58]
movups xmmword [rax + 0x10], xmm1
mov word [rax + 0x20], di
call fcn.1401bb2b0
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x1401bb197
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401bb192
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401bb29d
call fcn.140194698
xorps xmm0, xmm0
mov qword [rsp + 0x30], rdi
mov edx, 0x18
mov qword [rsp + 0x38], 7
lea rcx, [rsp + 0x20]
movups xmmword [rsp + 0x20], xmm0
call fcn.140178570
movups xmm0, xmmword [str.SeLoadDriverPrivilege]
mov qword [rsp + 0x20], rax
mov rcx, rax
mov qword [rsp + 0x30], 0x15
mov qword [rsp + 0x38], 0x17
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1405e4f28]
movups xmmword [rax + 0x10], xmm1
movsd xmm0, qword [0x1405e4f38]
movsd qword [rax + 0x20], xmm0
movzx eax, word [0x1405e4f40]
mov word [rcx + 0x28], ax
mov word [rcx + 0x2a], di
lea rcx, [rsp + 0x20]
call fcn.1401bb2b0
mov rdx, qword [rsp + 0x38]
cmp rdx, 8
jb 0x1401bb24f
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401bb24a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401bb297
call fcn.140194698
call fcn.1401bb3d0
lea rcx, [rsp + 0x48]
call fcn.1401cea50
lea rdx, [0x1405fff10]
lea rcx, [rsp + 0x48]
call fcn.1401ceae0
call fcn.1401ac990
mov rcx, rax
call fcn.1401aca70
movzx eax, bl
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1401af7a0
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret
call fcn.1401f6690
int3
call fcn.1401f6690
int3