Function at 0x1400010e0
Capabilities:
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x50
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov ecx, 0x80
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, 0x80
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdx, rdi
lea rcx, [0x140003508]
mov r8, rax
mov rbx, rax
call fcn.140001020
xor r15d, r15d
lea rcx, [0x140003290]
mov dword [rsp + 0x40], r15d
call fcn.140001020
mov rdx, rdi
lea rcx, str._128s
call fcn.140001080
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x140001160
cmp rax, 0x80
je 0x1400011b1
lea rcx, [0x1400032c0]
call fcn.140001020
lea rcx, [0x140003290]
call fcn.140001020
mov rdx, rdi
lea rcx, str._128s
call fcn.140001080
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rdi + rax], r15b
jne 0x1400011a0
cmp rax, 0x80
jne 0x140001171
lea rcx, [0x140003310]
call fcn.140001020
mov rdx, rbx
lea rcx, str._128s
call fcn.140001080
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r15b
jne 0x1400011d3
cmp rax, 0x80
jae 0x1400011ed
lea rcx, [0x140003330]
jmp 0x14000120c
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rbx + rax], r15b
jne 0x1400011f4
cmp rax, 0x80
jbe 0x140001230
lea rcx, [0x1400033d0]
call fcn.140001020
lea rdx, [rsp + 0x40]
lea rcx, [0x1400033c0]
call fcn.140001080
cmp dword [rsp + 0x40], 1
je 0x1400011b1
mov esi, 0x406
jmp 0x140001235
mov esi, 0x405
mov r8, rbx
lea rcx, [0x140003530]
mov rdx, rdi
call fcn.140001020
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov r14, rax
mov dword [rax], esi
lea rsi, [rax + 0x84]
movups xmm0, xmmword [rbx]
movups xmmword [rsi], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rsi + 0x10], xmm1
movups xmm0, xmmword [rbx + 0x20]
movups xmmword [rsi + 0x20], xmm0
movups xmm1, xmmword [rbx + 0x30]
movups xmmword [rsi + 0x30], xmm1
movups xmm0, xmmword [rbx + 0x40]
movups xmmword [rsi + 0x40], xmm0
movups xmm1, xmmword [rbx + 0x50]
movups xmmword [rsi + 0x50], xmm1
movups xmm0, xmmword [rbx + 0x60]
movups xmmword [rsi + 0x60], xmm0
movups xmm1, xmmword [rbx + 0x70]
movups xmmword [rsi + 0x70], xmm1
movups xmm0, xmmword [rdi]
movups xmmword [rax + 4], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rax + 0x14], xmm1
movups xmm0, xmmword [rdi + 0x20]
movups xmmword [rax + 0x24], xmm0
movups xmm1, xmmword [rdi + 0x30]
movups xmmword [rax + 0x34], xmm1
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rax + 0x44], xmm0
movups xmm1, xmmword [rdi + 0x50]
movups xmmword [rax + 0x54], xmm1
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rax + 0x64], xmm0
movups xmm1, xmmword [rdi + 0x70]
movups xmmword [rax + 0x74], xmm1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
lea rcx, [0x140003478]
call fcn.140001020
mov qword [rsp + 0x30], r15
lea rcx, str..My_AGENT_Device
mov dword [rsp + 0x28], r15d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
jne 0x14000136f
nop
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_obtain_handle_to_driver._Error:__d_n
call fcn.140001020
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov qword [rsp + 0x30], r15
lea rcx, str..My_AGENT_Device
mov dword [rsp + 0x28], r15d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140001320
mov qword [rsp + 0x38], r15
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
mov r9d, 0x104
mov dword [rsp + 0x28], 0x104
mov rcx, rax
mov r8, r14
mov qword [rsp + 0x20], r14
mov edx, 0x222004
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
lea rdx, [0x1400034f0]
lea rcx, [0x1400034e0]
cmove rcx, rdx
call fcn.140001020
mov edx, dword [r14]
lea r9, [r14 + 4]
mov r8, rsi
lea rcx, [0x140003568]
call fcn.140001020
lea rcx, str.pause
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
xor eax, eax
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.140001440
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
mov rsi, qword [rsp + 0x80]
add rsp, 0x50
pop r15
pop r14
pop rdi
ret