Function at 0x140003b00
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x10], rbx
push rsi
sub rsp, 0x270
mov rax, qword [0x140053008]
xor rax, rsp
mov qword [rsp + 0x260], rax
lea rdx, str.Enter_function_void_OnDeviceArrival___n
mov ecx, 2
call fcn.1400197e0
lea rcx, str.Enter_function_void_OnDeviceArrival___n
call fcn.14000e220
call fcn.140002910
call fcn.140009e90
call fcn.140017940
movups xmm0, xmmword [0x140048790]
lea rcx, [rsp + 0x40]
movaps xmmword [rsp + 0x40], xmm0
call fcn.140002310
test eax, eax
je 0x140003c1f
call fcn.140002520
test eax, eax
je 0x140003c1f
mov edx, 1
lea rcx, str.Enter_Function_DisableRadioHandler__disable___d_n
call fcn.14000e220
mov r8d, 1
lea rdx, str.Enter_Function_DisableRadioHandler__disable___d_n
lea ecx, [r8 + 1]
call fcn.1400197e0
call fcn.140009810
cmp eax, 0x32
jl 0x140003bcf
lea rcx, str.DisableRadioHandler__dont_send_check_msg__n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea rdx, str.DisableRadioHandler__dont_send_check_msg_n
mov ecx, 2
call fcn.1400197e0
mov dword [0x140053e94], 1
mov ecx, dword [0x140053e70]
xor r9d, r9d
mov edx, 0x5e5d
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
xor edx, edx
lea rcx, str.Enter_Function_DisableRadioHandler__disable___d_n
call fcn.14000e220
xor r8d, r8d
lea rdx, str.Enter_Function_DisableRadioHandler__disable___d_n
lea ecx, [r8 + 2]
call fcn.1400197e0
mov ecx, dword [0x140053e70]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5e5d
call qword [sym.imp.USER32.dll_PostThreadMessageW]
xor edx, edx
mov qword [rsp + 0x280], rdi
mov r8d, 0x208
lea rcx, [rsp + 0x50]
call fcn.14001d250
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
xor esi, esi
mov rbx, rax
test rax, rax
je 0x140003ca3
mov r8d, 0x208
lea rdx, [rsp + 0x50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rdx, [rsp + 0x50]
lea rcx, str.The_cServPath_is__s__n
call fcn.14000e220
lea rdx, str.System32
lea rcx, [rsp + 0x50]
lea edi, [rsi + 1]
call fcn.14001aea8
test rax, rax
je 0x140003c98
lea rcx, str.This_adminservice_is_for_MSFT_WU_or_3002_Intel._n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, esi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x140003cb5
lea rcx, str.OnDeviceArrival________Error_GetModuleHandle_NULL__
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edi, 1
cmp qword [0x140053e48], rsi
jne 0x140003cdd
lea rcx, str.Enter_condition_pSvc__RegeditCustomHandle__NULL_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
call fcn.1400021b0
cmp qword [0x140053e48], rsi
je 0x140003dae
lea rcx, str.Enter_condition_pSvc__RegeditCustomHandle___NULL_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x140055454]
mov ebx, esi
and eax, 0xfffffffe
mov byte [rsp + 0x30], 1
mov dword [0x140055454], eax
test al, 1
jne 0x140003dae
nop dword [rax + rax]
cmp ebx, 0xa
jge 0x140003dae
mov ecx, 0xfc1e
lea r8, [rsp + 0x30]
mov edx, 1
call fcn.140019390
cmp eax, 2
je 0x140003d64
mov dword [0x140055458], esi
call fcn.140009810
cmp eax, 0xa
jne 0x140003d47
call fcn.140015b30
test rdi, rdi
je 0x140003d57
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
inc ebx
test byte [0x140055454], 1
je 0x140003d10
jmp 0x140003dae
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x140055458]
cmp eax, 3
jg 0x140003da8
inc eax
lea rcx, str.::PostThreadMessage_pSvc__dwThreadID_CUSTOM_THREAD_EVENT_DEVICE_ARRIVAL__0__0___n
mov dword [0x140055458], eax
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [0x140053e70]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x5e5f
call qword [sym.imp.USER32.dll_PostThreadMessageW]
jmp 0x140003dae
mov dword [0x140055458], esi
lea rdx, str.Leave_function_void_OnDeviceArrival___n
mov ecx, 2
call fcn.1400197e0
lea rcx, str.Leave_function_void_OnDeviceArrival___n
call fcn.14000e220
mov rdi, qword [rsp + 0x280]
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.140019ce0
mov rbx, qword [rsp + 0x288]
add rsp, 0x270
pop rsi
ret