Function at 0x14000a450
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x140024040]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov r14, rdx
mov qword [rbp - 0x70], rdx
movsxd r12, ecx
lea rcx, [0x14000a100]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
mov esi, 1
mov r13d, esi
lea rbx, [r14 + 8]
cmp r12d, esi
jle 0x14000a549
mov rdi, rbx
mov rcx, qword [rdi]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a4c0
cmp rax, 5
jne 0x14000a4f2
add rcx, 2
lea rdx, [0x14001d270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a4f2
mov rax, qword [rdi]
cmp word [rax], 0x2f
je 0x14000a750
mov rcx, qword [rdi]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a500
cmp rax, 6
jne 0x14000a539
add rcx, 4
lea rdx, [0x14001d270]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a539
mov rax, qword [rdi]
cmp word [rax], 0x2d
jne 0x14000a539
cmp word [rax + 2], 0x2d
je 0x14000a750
inc r13d
add rdi, 8
cmp r13d, r12d
jl 0x14000a4b1
xor r15b, r15b
lea r8, [0x14001d280]
mov rdx, r14
mov ecx, r12d
call fcn.14000a1b0
mov r14d, eax
mov edi, esi
mov r13d, 0xffffffff
cmp r12d, esi
jle 0x14000a604
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a580
cmp rax, 9
jne 0x14000a5ae
add rcx, 2
lea rdx, str.indPages
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a5ae
mov rax, qword [rbx]
cmp word [rax], 0x2f
je 0x14000a612
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a5c0
cmp rax, 0xa
jne 0x14000a5f5
add rcx, 4
lea rdx, str.indPages
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a5f5
mov rax, qword [rbx]
cmp word [rax], 0x2d
jne 0x14000a5f5
cmp word [rax + 2], 0x2d
je 0x14000a612
inc edi
add rbx, 8
cmp edi, r12d
jl 0x14000a572
mov edi, 0xffffffff
cmp r12d, esi
jle 0x14000a6b4
mov rbx, qword [rbp - 0x70]
add rbx, 8
nop word [rax + rax]
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a630
cmp rax, 0x12
jne 0x14000a65e
add rcx, 2
lea rdx, str.PassAllocationPtr
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a65e
mov rax, qword [rbx]
cmp word [rax], 0x2f
je 0x14000a6b9
mov rcx, qword [rbx]
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rcx + rax*2], 0
jne 0x14000a670
cmp rax, 0x13
jne 0x14000a6a5
add rcx, 4
lea rdx, str.PassAllocationPtr
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
jne 0x14000a6a5
mov rax, qword [rbx]
cmp word [rax], 0x2d
jne 0x14000a6a5
cmp word [rax + 2], 0x2d
je 0x14000a6b9
inc esi
add rbx, 8
cmp esi, r12d
jl 0x14000a620
mov esi, 0xffffffff
test esi, esi
setg byte [rsp + 0x51]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], 0
mov qword [rsp + 0x70], 0
mov r8d, 0x25
lea rdx, str.thare_an_a_existing_sys_applying_now
lea rcx, [rsp + 0x58]
call fcn.140008760
nop
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b9f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14000a778
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a773
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a773
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test r13d, r13d
setg r15b
lea r8, [0x14001d280]
mov rdx, r14
mov ecx, r12d
call fcn.14000a1b0
mov r14d, eax
mov edi, esi
jmp 0x14000a572
call fcn.14000fdb0
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
test r13d, r13d
jle 0x14000a7ab
lea rdx, str.___Free_pool_memory_after_usage_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test r14d, r14d
jle 0x14000a7d3
lea rdx, str.___Mdl_memory_usage_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test edi, edi
jle 0x14000a7fa
lea rdx, str.___Allocate_Independent_Pages_mode_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
test esi, esi
jle 0x14000a821
lea rdx, str.___Pass_Allocation_Ptr_as_first_param_enabled
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov ecx, 1
mov dword [rsp + 0x78], ecx
mov qword [rbp - 0x68], r12
cmp r12, rcx
jle 0x14000aabc
mov eax, ecx
mov qword [rbp - 0x58], rcx
xor r12d, r12d
mov esi, 4
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rcx + rax*8]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000a854
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], r12
lea rcx, [rbp - 0x50]
call fcn.140008620
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 7
cmova rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
lea rdx, [rcx + rax*2]
mov rbx, rdx
call fcn.140009730
cmp rax, rdx
je 0x14000a8bc
nop dword [rax + rax]
lea r8, [rbx - 2]
movzx ecx, word [r8]
cmp cx, 0x5c
je 0x14000a8bc
cmp cx, 0x2f
je 0x14000a8bc
mov rbx, r8
cmp rax, r8
jne 0x14000a8a0
mov r8d, 0x3a
mov rcx, rbx
call fcn.14000fcb0
cmp rbx, rax
je 0x14000a907
lea rdx, [rax - 2]
cmp rbx, rdx
je 0x14000a907
cmp word [rdx], 0x2e
jne 0x14000a8ef
lea rcx, [rdx - 2]
cmp rbx, rcx
jne 0x14000a90a
cmp word [rcx], 0x2e
jne 0x14000a90a
jmp 0x14000a907
sub rdx, 2
cmp rbx, rdx
je 0x14000a907
cmp word [rdx], 0x2e
je 0x14000a90a
sub rdx, 2
cmp rbx, rdx
jne 0x14000a8f8
mov rdx, rax
sub rax, rdx
sar rax, 1
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8, rax
lea rcx, [rsp + 0x58]
call fcn.140008620
nop
lea rax, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rax, qword [rsp + 0x58]
mov qword [rbp - 0x30], rax
mov rax, qword [rsp + 0x68]
mov qword [rbp - 0x28], rax
call fcn.14000f714
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.14000b2a0
lea rcx, [rbp + 0x10]
mov r13, qword [rbp + 0x28]
cmp r13, 0xf
seta byte [rsp + 0x50]
mov rbx, qword [rbp + 0x10]
cmova rcx, rbx
mov r12, qword [rbp + 0x20]
mov r8, r12
cmp r12, 4
cmova r8, rsi
lea rdx, str..sys
call sub.VCRUNTIME140.dll_memcmp
mov esi, eax
test eax, eax
jne 0x14000a9ba
cmp r12, 4
jae 0x14000a9b0
lea esi, [rax - 1]
jmp 0x14000a9ba
xor esi, esi
cmp r12, 4
seta sil
cmp byte [rsp + 0x50], 0
je 0x14000a9f2
lea rdx, [r13 + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000a9ea
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ab34
mov rcx, rbx
call fcn.14000fdb0
xor r12d, r12d
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x28], 0xf
mov byte [rbp + 0x10], r12b
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000aa47
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ab3b
call fcn.14000fdb0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], 7
mov word [rsp + 0x58], r12w
mov rdx, qword [rbp - 0x38]
cmp rdx, 7
jbe 0x14000aa9b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000aa96
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ab42
call fcn.14000fdb0
test esi, esi
je 0x14000ab49
inc dword [rsp + 0x78]
mov rax, qword [rbp - 0x58]
inc rax
mov qword [rbp - 0x58], rax
cmp rax, qword [rbp - 0x68]
jl 0x14000a840
lea rdx, str._r_n_r_n____Incorrect_Usage_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
lea rdx, str.___Usage:_kdmapper.exe____free____mdl____PassAllocationPtr__driver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14000fd90
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
movsxd rax, dword [rsp + 0x78]
test eax, eax
jle 0x14000aabc
mov rcx, qword [rbp - 0x70]
mov rdx, qword [rcx + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r12
mov qword [rbp + 8], r12
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x14000ab74
lea rcx, [rbp - 0x10]
call fcn.140008620
nop
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8, qword [rbp]
lea rcx, [rsp + 0x58]
call fcn.140008620
nop
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 7
cmova rcx, qword [rsp + 0x58]
mov r9d, 0xffffffff
mov r8d, 3
lea rdx, [rbp + 0x10]
call fcn.14000f92c
mov r8d, eax
test eax, eax
jne 0x14000ac1a
mov edx, dword [rbp + 0x20]
bt edx, 0xa
jae 0x14000ac0c
mov eax, dword [rbp + 0x24]
cmp eax, 0xa000000c
jne 0x14000abfe
lea eax, [r8 + 4]
jmp 0x14000ac3d
cmp eax, 0xa0000003
jne 0x14000ac0c
mov eax, 0xa
jmp 0x14000ac3d
movzx eax, dl
and eax, 0x10
or eax, 0x20
shr eax, 4
jmp 0x14000ac3d
mov dword [rbp - 0x64], 0xffff
sub eax, 2
je 0x14000ac38
sub eax, 1
je 0x14000ac38
sub eax, 0x32
je 0x14000ac38
cmp eax, 0x46
mov eax, r12d
jne 0x14000ac3d
mov eax, 1
mov dword [rbp - 0x30], r8d
lea rcx, [0x1400240b8]
mov qword [rbp - 0x28], rcx
movaps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm0
test eax, eax
je 0x14000ac9f
cmp eax, 1
sete bl
mov rdx, qword [rsp + 0x70]
cmp rdx, 7
jbe 0x14000acb1
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000acac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000acac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov bl, 1
test r8d, r8d
jne 0x14000b04f
jmp 0x14000ac5f
call fcn.14000fdb0
test bl, bl
je 0x14000ad0b
lea rdx, str.____File
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rax
call fcn.140008e50
lea rdx, str._doesnt_exist
mov rcx, rax
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call fcn.14000a3b0
jmp 0x14000af23
call fcn.1400017d0
mov qword [0x140024c10], rax
lea rcx, [0x14001d48c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x158
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Beep]
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], r12
mov qword [rsp + 0x70], r12
mov r8d, 7
lea rdx, str.done__3
lea rcx, [rsp + 0x58]
call fcn.140008760
nop
lea rdx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0xf
cmova rdx, qword [rsp + 0x58]
mov r8, qword [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000b9f0
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0xf
jbe 0x14000adcc
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000adc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000adc7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000fdb0
cmp qword [0x140024c10], 0xffffffffffffffff
jne 0x14000ade0
call fcn.14000a3b0
jmp 0x14000af23
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov ecx, 1
call fcn.14000fed8
mov qword [rbp - 0x30], rax
lea rcx, [rax + 1]
mov qword [rbp - 0x20], rcx
mov byte [rax], 0
mov qword [rbp - 0x28], rcx
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x10]
call fcn.14000ed40
mov rbx, qword [rbp - 0x30]
test al, al
jne 0x14000ae31
lea rdx, str.____Failed_to_read_image_to_memory
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
jmp 0x14000aec7
test r14d, r14d
jle 0x14000ae56
test edi, edi
jle 0x14000ae4f
lea rdx, str.____Too_many_allocation_modes
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
jmp 0x14000aec7
mov eax, 1
jmp 0x14000ae63
mov eax, r12d
mov ecx, 2
test edi, edi
cmovg eax, ecx
mov dword [rbp - 0x80], r12d
lea rcx, [rbp - 0x80]
mov qword [rsp + 0x48], rcx
movzx ecx, byte [rsp + 0x51]
mov byte [rsp + 0x38], cl
mov dword [rsp + 0x30], eax
mov byte [rsp + 0x20], r15b
mov rdx, rbx
mov rcx, qword [0x140024c10]
call fcn.14000c2a0
test rax, rax
jne 0x14000af6c
lea rdx, str.____Failed_to_map
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rax
call fcn.140008e50
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov rcx, qword [0x140024c10]
call fcn.140002400
call fcn.14000a3b0
nop
test rbx, rbx
je 0x14000af23
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000af1a
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000aff5
mov rcx, rbx
call fcn.14000fdb0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x14000ab02
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov r8, rcx
cmp rdx, 0x1000
jb 0x14000af62
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x14000b03c
call fcn.14000fdb0
jmp 0x14000ab02
mov rcx, qword [0x140024c10]
call fcn.140002400
test al, al
jne 0x14000afa4
lea rdx, str.____Warning_failed_to_fully_unload_vulnerable_driver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
call fcn.14000a3b0
lea rdx, str.___success
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140006120
lea rdx, [0x140006300]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
test rbx, rbx
je 0x14000b005
mov rdx, qword [rbp - 0x20]
sub rdx, rbx
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000affc
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000affc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.14000fdb0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x14000b048
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000b043
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000b043
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000fdb0
xor eax, eax
jmp 0x14000ab07
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x30]
call fcn.14000a0a0
int3