Function at 0x14000a4e0
Capabilities:
Access pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x360]
sub rsp, 0x460
mov r12d, ecx
lea rdi, [rsp + 0x40]
mov r15d, edx
xor eax, eax
mov edx, 0x208
xor ebx, ebx
mov ecx, edx
mov dword [rbp + 0x3a0], ebx
rep stosb byte [rdi], al
mov ecx, edx
mov qword [rsp + 0x20], rbx
lea rdi, [rbp + 0x150]
xor r9d, r9d
rep stosb byte [rdi], al
lea rcx, str._list
xor r8d, r8d
xor edx, edx
call fcn.14000dd24
test eax, eax
je 0x14000a556
call fcn.14000ae50
mov ebx, 1
jmp 0x14000a723
xor r9d, r9d
mov qword [rsp + 0x20], rbx
xor r8d, r8d
lea rcx, str._diag
xor edx, edx
call fcn.14000dd24
test eax, eax
je 0x14000a57a
call fcn.1400101c8
jmp 0x14000a54c
mov esi, 0x104
mov qword [rsp + 0x20], rbx
mov edi, 1
lea r8, [rsp + 0x40]
mov r9d, esi
lea rcx, str._dse
mov edx, edi
call fcn.14000dd24
lea r8, [rsp + 0x40]
test eax, eax
je 0x14000a653
movzx edx, word [rsp + 0x40]
mov r14d, ebx
jmp 0x14000a5d6
lea eax, [rdx - 0x30]
cmp ax, 9
ja 0x14000a5db
movzx eax, dx
lea r14d, [r14 + r14*4]
add r8, 2
lea r14d, [r14 - 0x18]
lea r14d, [rax + r14*2]
movzx edx, word [r8]
test dx, dx
jne 0x14000a5b6
xor r9d, r9d
mov dword [rsp + 0x20], 2
mov r8d, r15d
mov edx, r12d
call fcn.14000b4ec
mov rsi, rax
test rax, rax
je 0x14000a723
mov rcx, qword [rax + 0x40]
cmp qword [rcx + 0x40], rbx
je 0x14000a646
mov ecx, r15d
call fcn.140003938
mov r8, rax
test rax, rax
jne 0x14000a637
mov ecx, r15d
call fcn.1400037d8
mov r8, rax
test rax, rax
jne 0x14000a637
lea rdx, str.____Could_not_query_system_variable_address__abort._r_n
mov ecx, edi
call fcn.14000e264
jmp 0x14000a646
mov rax, qword [rsi + 0x40]
mov edx, r14d
mov rcx, rsi
call qword [rax + 0x40]
mov ebx, eax
mov rcx, rsi
call fcn.14000bb20
jmp 0x14000a723
lea rax, [rbp + 0x3a0]
mov r9d, esi
mov edx, edi
mov qword [rsp + 0x20], rax
lea rcx, str._map
call fcn.14000dd24
test eax, eax
je 0x14000a723
cmp dword [rbp + 0x3a0], ebx
jne 0x14000a689
lea rdx, str.____Input_file_not_specified_r_n
jmp 0x14000a69f
lea rcx, [rsp + 0x40]
call qword [sym.imp.ntdll.dll_RtlDoesFileExists_U]
test al, al
jne 0x14000a6a8
lea rdx, str.____Input_file_cannot_be_found__abort._r_n
mov ecx, edi
call fcn.14000e264
jmp 0x14000a723
mov edx, edi
lea rcx, str.___Driver_mapping_using_shellcode_version:__lu_r_n
call fcn.14000220c
lea rdx, [rsp + 0x40]
mov dword [rbp + 0x3a0], 2
lea rcx, [rsp + 0x30]
mov qword [rbp + 0x3a8], rbx
mov rsi, rbx
call qword [sym.imp.ntdll.dll_RtlInitUnicodeString]
lea r9, [rbp + 0x3a8]
xor ecx, ecx
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x3a0]
call qword [sym.imp.ntdll.dll_LdrLoadDll]
test eax, eax
js 0x14000a715
mov rcx, qword [rbp + 0x3a8]
test rcx, rcx
je 0x14000a74c
call qword [sym.imp.ntdll.dll_RtlImageNtHeader]
test rax, rax
jne 0x14000a741
mov eax, 0xc000007b
mov edx, eax
lea rcx, str.____Error_while_loading_input_driver_file
call fcn.14000f0e0
lea r11, [rsp + 0x460]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov rsi, qword [rbp + 0x3a8]
mov eax, ebx
jmp 0x14000a750
test eax, eax
js 0x14000a715
test rsi, rsi
je 0x14000a715
mov r8, rsi
lea rdx, [rsp + 0x40]
lea rcx, str.___Input_driver_file___ws__loaded_at_0x_p_r_n
call fcn.14000220c
mov r9d, edi
mov dword [rsp + 0x20], ebx
mov r8d, r15d
mov edx, r12d
call fcn.14000b4ec
mov r14, rax
test rax, rax
je 0x14000a79a
mov rdi, qword [rax + 0x40]
mov rdx, rsi
mov rcx, rax
call qword [rdi + 0x38]
mov rcx, r14
mov ebx, eax
call fcn.14000bb20
mov rcx, rsi
call qword [sym.imp.ntdll.dll_LdrUnloadDll]
jmp 0x14000a723