Function at 0x14005378c
Capabilities:
Link many functions at runtime

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0xa28]
sub rsp, 0xb20
mov rax, qword [0x14012bd38]
xor rax, rsp
mov qword [rbp + 0xa10], rax
lea rdx, str.AMD_RC2_DLL_Load
lea rcx, [rsp + 0x50]
call fcn.140001340
mov rcx, rax
call fcn.14004b81c
mov ebx, 0x208
lea rcx, [rbp + 0x3e0]
mov r8d, ebx
xor edx, edx
call fcn.1400b15e0
mov r8d, ebx
lea rcx, [rbp + 0x5f0]
xor edx, edx
call fcn.1400b15e0
mov r8d, ebx
lea rcx, [rbp + 0x800]
xor edx, edx
call fcn.1400b15e0
mov r8d, ebx
lea rcx, [rbp + 0x40]
xor edx, edx
call fcn.1400b15e0
mov edi, 0x104
lea rdx, [rbp + 0x3e0]
mov r8d, edi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor ebx, ebx
lea r9, [rbp + 0x800]
mov qword [rsp + 0x40], rbx
lea rdx, [rbp + 0x5f0]
mov qword [rsp + 0x38], rbx
lea rcx, [rbp + 0x3e0]
mov qword [rsp + 0x30], rbx
mov r8d, edi
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rdi
call fcn.1400c5678
lea r8, [rbp + 0x5f0]
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.1400c0a48
lea r8, [rbp + 0x800]
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.1400c0a48
lea r8, str.CdiResourcedll_
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.1400c0a48
lea r8, str.AMD_RC2t7x64.dll
mov edx, edi
lea rcx, [rbp + 0x40]
call fcn.1400c0a48
xor eax, eax
mov dword [rsp + 0x58], 0x20
mov qword [rsp + 0x70], rax
lea r8d, [rbx + 0x48]
xorps xmm0, xmm0
mov dword [rbp - 0x30], 0xaac56b
lea rax, [rbp + 0x40]
mov dword [rbp - 0x2c], 0x11d0cd44
movups xmmword [rsp + 0x60], xmm0
xor edx, edx
mov qword [rsp + 0x60], rax
lea rcx, [rbp - 0x78]
mov dword [rbp - 0x28], 0xc000c28c
mov dword [rbp - 0x24], 0xee95c24f
mov dword [rbp - 0x80], 0x50
call fcn.1400b15e0
lea rax, [rsp + 0x58]
mov qword [rbp - 0x68], 2
lea r8, [rbp - 0x80]
mov qword [rbp - 0x58], rax
lea rdx, [rbp - 0x30]
mov dword [rbp - 0x60], 1
xor ecx, ecx
mov dword [rbp - 0x50], 1
mov dil, bl
call sub.WINTRUST.dll_WinVerifyTrust
test eax, eax
jne 0x1400539dd
mov rcx, qword [rbp - 0x48]
call sub.WINTRUST.dll_WTHelperProvDataFromStateData
test rax, rax
je 0x1400539dd
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call sub.WINTRUST.dll_WTHelperGetProvSignerFromChain
test rax, rax
je 0x1400539dd
xor edx, edx
mov rcx, rax
call sub.WINTRUST.dll_WTHelperGetProvCertFromChain
mov rsi, rax
test rax, rax
je 0x1400539dd
xor edx, edx
lea rcx, [rbp + 0x250]
mov r8d, 0x190
call fcn.1400b15e0
mov rcx, qword [rsi + 8]
lea rax, [rbp + 0x250]
mov dword [rsp + 0x28], 0xc8
lea r9, [rsp + 0x50]
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea edx, [rbx + 4]
mov dword [rsp + 0x50], 3
call qword [sym.imp.CRYPT32.dll_CertGetNameStringW]
cmp word [rbp + 0x250], bx
je 0x1400539dd
lea rdx, str.Gakuto_Matsumura
lea rcx, [rbp + 0x250]
call fcn.1400b7028
test eax, eax
jne 0x1400539dd
mov dil, 1
lea r8, [rbp - 0x80]
mov dword [rbp - 0x50], 2
lea rdx, [rbp - 0x30]
xor ecx, ecx
call sub.WINTRUST.dll_WinVerifyTrust
test dil, dil
je 0x140053bce
lea rcx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [0x14012fab0], rax
test rax, rax
je 0x140053bce
lea rdx, str.AMD_RC2_Init
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab0]
lea rdx, str.AMD_RC2_GetStatus
mov qword [0x14012fab8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab0]
lea rdx, str.AMD_RC2_GetDrives
mov qword [0x14012fac0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab0]
lea rdx, str.AMD_RC2_Reload
mov qword [0x14012fac8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab0]
lea rdx, str.AMD_RC2_GetIdentify
mov qword [0x14012fad0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab0]
lea rdx, str.AMD_RC2_GetSmartData
mov qword [0x14012fad8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x14012fab8]
mov qword [0x14012fae0], rax
test rcx, rcx
je 0x140053bce
cmp qword [0x14012fac0], rbx
je 0x140053bce
cmp qword [0x14012fac8], rbx
je 0x140053bce
cmp qword [0x14012fad0], rbx
je 0x140053bce
cmp qword [0x14012fad8], rbx
je 0x140053bce
test rax, rax
je 0x140053bce
call rcx
cmp eax, 1
sete bl
mov dword [0x14012faac], ebx
je 0x140053bc0
mov ecx, SafeArrayDestroy
cmp eax, ecx
cmova eax, ecx
lea rcx, str.AMD_RC2_uninitial
mov qword [rbp - 0x20], rcx
lea rcx, str.AMD_RC2_loaded
mov qword [rbp - 0x18], rcx
lea rcx, str.AMD_RC2_unloaded
mov qword [rbp - 0x10], rcx
lea rcx, str.AMD_RC2_failed_signature
mov qword [rbp - 8], rcx
lea rcx, str.AMD_RC2_driver_not_found
mov qword [rbp], rcx
lea rcx, str.AMD_RC2_cannot_open
mov qword [rbp + 8], rcx
lea rcx, str.AMD_RC2_failed_memory_alloc
mov qword [rbp + 0x10], rcx
lea rcx, str.AMD_RC2_offset_overflow
mov qword [rbp + 0x18], rcx
lea rcx, str.AMD_RC2_driver_version_old
mov qword [rbp + 0x20], rcx
lea rcx, str.AMD_RC2_not_admin
mov qword [rbp + 0x28], rcx
lea rcx, str.AMD_RC2_name_failed
mov qword [rbp + 0x30], rcx
lea rcx, str.AMD_RC2_unknown
mov qword [rbp + 0x38], rcx
lea rcx, [rsp + 0x50]
mov rdx, qword [rbp + rax*8 - 0x20]
call fcn.140001340
mov rcx, rax
call fcn.14004b81c
mov ebx, dword [0x14012faac]
mov dword [0x14012faa8], 1
mov eax, ebx
jmp 0x140053bd0
xor eax, eax
mov rcx, qword [rbp + 0xa10]
xor rcx, rsp
call fcn.1400b0010
lea r11, [rsp + 0xb20]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret