Function at 0x18003fdbc
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x110]
sub rsp, 0x210
mov rdi, rdx
mov r15, rcx
mov qword [rsp + 0x58], rcx
mov eax, 0x5a4d
cmp word [rdx], ax
jne 0x180041a3d
movsxd r12, dword [rdx + 0x3c]
add r12, rdx
mov qword [rsp + 0x50], r12
cmp dword [r12], 0x4550
jne 0x180041a3d
mov eax, 0x20b
cmp word [r12 + 0x18], ax
jne 0x180041a3d
mov ebx, dword [r12 + 0x50]
mov edx, ebx
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
mov qword [rsp + 0x60], rax
xor eax, eax
test rsi, rsi
je 0x180041a3d
movzx ecx, word [r12 + 0x14]
mov r13d, dword [rcx + r12 + 0x24]
mov dword [rsp + 0x40], r13d
sub ebx, r13d
mov r14d, ebx
mov qword [rsp + 0x68], r14
test ebx, 0x1fffff
mov edx, eax
setne dl
mov eax, ebx
shr rax, 0x16
inc rax
add rdx, rax
shl rdx, 0x15
or r8, 0xffffffffffffffff
mov rcx, r15
call fcn.18003aee4
mov rbx, rax
xor eax, eax
test rbx, rbx
jne 0x18003fead
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x180041a3d
mov qword [rsp + 0x48], rax
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, r15
call fcn.18003b9c0
mov rax, qword [rsp + 0x48]
and eax, 0x1fffff
mov ecx, 0x200000
sub rcx, rax
lea rax, [rcx + rbx]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x48], rax
mov r8d, dword [r12 + 0x54]
mov rdx, rdi
mov rcx, rsi
call fcn.1800b3790
movzx eax, word [r12 + 0x14]
add r12, 0x18
add r12, rax
xor eax, eax
mov esi, eax
mov rbx, qword [rsp + 0x50]
cmp ax, word [rbx + 6]
jae 0x18003ffdb
lea rbx, [r12 + 0x10]
mov r13, qword [rsp + 0x60]
test dword [rbx + 0x14], 0x80
ja 0x18003ffb5
mov r14d, dword [rbx - 4]
add r14, r13
mov r8d, dword [rbx]
mov edx, dword [rbx + 4]
add rdx, rdi
mov rcx, r14
call fcn.1800b3790
movsxd rax, esi
lea rcx, [rax + rax*4]
lea r15, [r12 + rcx*8]
mov rdx, r15
lea rcx, str._i__copying_section:__s_n
call fcn.1800030cc
lea rdx, [0x18010eabc]
mov rcx, r15
call fcn.18008227c
test rax, rax
je 0x18003ff88
lea rcx, str.___nulled_.rdata_n
call fcn.1800030cc
mov r8d, dword [rbx]
xor edx, edx
mov rcx, r14
call fcn.1800b3e30
lea rdx, [0x18010eadc]
mov rcx, r15
call fcn.18008227c
test rax, rax
je 0x18003ffb5
lea rcx, str.___nulled_.pdata_n
call fcn.1800030cc
mov r8d, dword [rbx]
xor edx, edx
mov rcx, r14
call fcn.1800b3e30
inc esi
add rbx, 0x28
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
cmp esi, eax
jl 0x18003ff1c
mov r13d, dword [rsp + 0x40]
mov r14, qword [rsp + 0x68]
mov r15, qword [rsp + 0x58]
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov esi, r13d
sub rax, rsi
mov qword [rsp + 0x48], rax
mov rbx, rax
mov r13, qword [rsp + 0x50]
sub rbx, qword [r13 + 0x30]
mov r12, qword [rsp + 0x60]
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.18004223c
mov r10, rax
mov r11, qword [rax + 8]
mov rdx, qword [rax]
cmp rdx, r11
je 0x180040067
xor edi, edi
mov r8d, edi
cmp dword [rdx + 0x10], edi
jbe 0x18004005e
mov ecx, r8d
mov rax, qword [rdx + 8]
movzx r9d, word [rax + rcx*2]
movzx eax, r9w
shr ax, 0xc
mov ecx, 0xfff
and r9w, cx
cmp ax, 0xa
jne 0x180040055
movzx ecx, r9w
mov rax, qword [rdx]
add qword [rcx + rax], rbx
inc r8d
cmp r8d, dword [rdx + 0x10]
jb 0x180040027
add rdx, 0x18
cmp rdx, r11
jne 0x18004001f
mov rcx, r10
call fcn.180041d08
mov eax, 0x5a4d
cmp word [r12], ax
jne 0x180041a3d
movsxd rax, dword [r12 + 0x3c]
cmp dword [rax + r12], 0x4550
jne 0x180041a3d
mov ecx, dword [rax + r12 + 0xd8]
test ecx, ecx
je 0x1800400fa
mov rdi, qword [rcx + r12 + 0x58]
test rdi, rdi
je 0x1800400fa
mov rax, r12
sub rax, qword [rsp + 0x48]
add rdi, rax
movabs rax, 0x2b992ddfa232
cmp qword [rdi], rax
jne 0x180041a3d
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
xor rcx, rbx
movabs rdx, 0x2b992ddfa232
xor rcx, rdx
movabs rax, 0x2b992ddfa233
cmp rcx, rdx
cmove rcx, rax
mov qword [rdi], rcx
mov rdx, r12
lea rcx, [rsp + 0x20]
call fcn.180042390
mov rdx, rax
mov rcx, r15
call fcn.180041b88
xor ecx, ecx
test al, al
je 0x180041a1f
lea rdi, [rsi + r12]
mov ebx, ecx
mov rsi, qword [rsp + 0x40]
test r14, r14
je 0x18004015b
sub rdi, rsi
mov rax, r14
sub rax, rbx
mov r9d, 0x4f
cmp rax, r9
cmovb r9, rax
lea rdx, [rbx + rsi]
lea r8, [rdi + rdx]
mov rcx, r15
call fcn.18003b930
add rbx, 0x4f
cmp rbx, r14
jb 0x18004012f
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.IoCreateDriver
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127140], rax
mov ebx, 0x1000
mov edi, 0x27
lea r14d, [rdi - 8]
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800401e4
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800401df
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a60
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.IofCompleteRequest
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127148], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004025f
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004025a
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a66
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.IoCreateSymbolicLink
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127150], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800402da
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800402d5
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a6c
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.IoCreateDevice
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127158], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040355
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040350
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a72
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, [0x18010eb50]
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127160], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800403d0
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800403cb
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a78
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x18
lea rdx, str.ZwQuerySystemInformation
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127168], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004044b
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040446
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a7e
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.ZwFreeVirtualMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127170], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800404c6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800404c1
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a84
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.ZwProtectVirtualMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127178], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040541
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004053c
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a8a
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.ZwAllocateVirtualMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127180], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800405bc
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800405b7
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a90
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.ZwQueryVirtualMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127188], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040637
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040632
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a96
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.ExAllocatePool
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127190], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800406b2
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800406ad
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a9c
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x1a
lea rdx, str.PsLookupProcessByProcessId
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127198], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004072d
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040728
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041aa2
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.MmCopyVirtualMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271a0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800407a8
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800407a3
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041aa8
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.ObfDereferenceObject
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271a8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040823
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004081e
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041aae
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.PsGetProcessPeb
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271b0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004089e
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040899
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ab4
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.KeAttachProcess
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271b8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040919
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040914
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041aba
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.KeDetachProcess
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271c0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040994
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004098f
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ac0
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, recv
lea rdx, str.IoAllocateMdl
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271c8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040a0f
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040a0a
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ac6
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.MmProbeAndLockPages
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271d0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040a8a
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040a85
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041acc
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x1c
lea rdx, str.MmMapLockedPagesSpecifyCache
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271d8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040b05
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040b00
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ad2
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x19
lea rdx, str.MmProtectMdlSystemAddress
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271e0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040b80
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040b7b
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ad8
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.MmUnmapLockedPages
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271e8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040bfb
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040bf6
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ade
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, recv
lea rdx, str.MmUnlockPages
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271f0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040c76
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040c71
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041ae4
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 9
lea rdx, str.IoFreeMdl
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801271f8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040cf1
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040cec
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041aea
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.IoGetCurrentProcess
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127200], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040d6c
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040d67
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041af0
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, recv
lea rdx, str.MmCopyMemory
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127208], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040de7
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040de2
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041af6
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.MmMapIoSpaceEx
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127210], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040e62
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040e5d
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041afc
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.MmUnmapIoSpace
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127218], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040edd
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040ed8
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b02
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.ExFreePoolWithTag
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127220], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040f58
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040f53
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b08
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x19
lea rdx, str.MmGetPhysicalMemoryRanges
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127228], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180040fd3
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180040fce
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b0e
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.MmGetVirtualForPhysical
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127230], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004104e
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041049
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b14
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x1e
lea rdx, str.PsGetProcessSectionBaseAddress
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127238], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800410c9
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800410c4
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b1a
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x18
lea rdx, str.IoGetDeviceObjectPointer
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127240], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041144
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004113f
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b20
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.MmIsAddressValid
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127248], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800411bf
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800411ba
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b26
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.PsGetProcessId
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127250], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004123a
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041235
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b2c
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_socket
lea rdx, str.ObReferenceObjectByName
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127258], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800412b5
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800412b0
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b32
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.IoDriverObjectType
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127260], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041330
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004132b
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b38
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x1b
lea rdx, str.RtlCreateSecurityDescriptor
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127268], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800413ab
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800413a6
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b3e
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, recv
lea rdx, str.RtlLengthSid
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127270], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041426
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041421
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b44
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, recv
lea rdx, str.RtlCreateAcl
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127278], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800414a1
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004149c
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b4a
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.RtlAddAccessAllowedAce
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127280], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004151c
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041517
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b50
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 0x1c
lea rdx, str.RtlSetDaclSecurityDescriptor
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127288], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041597
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041592
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b56
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.ZwCreateSection
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127290], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041612
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004160d
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b5c
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 7
lea rdx, str.ZwClose
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x180127298], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004168d
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041688
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b62
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, send
lea rdx, str.ZwMapViewOfSection
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272a0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041708
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041703
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b68
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.KeLowerIrql
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272a8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041783
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004177e
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b6e
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, str.KfRaiseIrql
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272b0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800417fe
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800417f9
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b74
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.KeDelayExecutionThread
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272b8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x180041879
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x180041874
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b7a
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, 9
lea rdx, str.SeExports
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272c0], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x1800418f4
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x1800418ef
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041b80
call fcn.18007ff20
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x30], xmm1
mov r8d, socket
lea rdx, str.MmGetPhysicalAddress
lea rcx, [rsp + 0x20]
call fcn.180002a0c
nop
lea r8, [rsp + 0x20]
mov rdx, qword [0x180127138]
mov rcx, r15
call fcn.18003bca0
mov qword [0x1801272c8], rax
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18004196f
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rbx
jb 0x18004196a
add rdx, rdi
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, r14
ja 0x180041a5a
call fcn.18007ff20
mov r8d, dword [r13 + 0x28]
add r8, qword [rsp + 0x48]
and dword [rsp + 0x40], 0
lea rax, [rbp - 0x80]
lea rcx, [0x180127140]
mov edx, 3
lea r9d, [rdx + 0x7d]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r9
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r9
sub rdx, 1
jne 0x180041991
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
lea r9, [rbp - 0x80]
lea rdx, [rsp + 0x40]
mov rcx, r15
call fcn.180041dc4
test al, al
je 0x180041a1f
mov edx, dword [rsp + 0x40]
mov r8d, edx
lea rcx, str.__driver_returned_0x_x____d__n
call fcn.1800030cc
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, rsi
jmp 0x180041a3f
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rdx, qword [rsp + 0x70]
mov rcx, r15
call fcn.18003bb90
xor eax, eax
mov rbx, qword [rsp + 0x260]
add rsp, 0x210
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3
call fcn.18008a8b4
int3