Function at 0x1400087e0
Capabilities:
Execute command

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1a8]
sub rsp, 0x280
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14004a028]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov r15d, ecx
xor r12b, r12b
mov dword [0x14004ae98], ecx
mov qword [0x14004ae90], rdx
lea rcx, [rsp + 0x38]
call fcn.140006510
mov rbx, rax
lea rax, [0x14004a068]
xor edi, edi
cmp rax, rbx
je 0x1400088d2
mov rdx, qword [0x14004a080]
cmp rdx, 8
jb 0x140008897
mov rcx, qword [0x14004a068]
lea rdx, [rdx*2 + 2]
cmp rdx, 0x1000
jb 0x140008892
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000890b
mov rcx, r8
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [0x14004a078], xmm0
mov word [0x14004a068], di
movups xmm0, xmmword [rbx]
movups xmmword [0x14004a068], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14004a078], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 7
mov word [rbx], di
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140008917
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008912
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008912
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
lea rdx, str.___Kernel_Loader_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
mov ecx, edi
mov rsi, qword [0x14004ae90]
mov ebx, dword [0x14004ae98]
test ebx, ebx
jle 0x14000898d
mov rdx, rsi
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x140008954
cmp byte [rax + 1], 0x69
jne 0x140008954
cmp byte [rax + 2], 0
je 0x140008960
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x140008965
jmp 0x140008940
cmp ecx, 0xffffffff
jne 0x1400089d5
test ebx, ebx
jle 0x14000898d
mov r14, rsi
nop dword [rax]
lea rdx, str.__ignore_signatures
mov rcx, qword [r14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1400089d0
inc edi
add r14, 8
cmp edi, ebx
jl 0x140008970
xor r8b, r8b
mov byte [rsp + 0x31], r8b
test r15d, r15d
je 0x140009e12
xor r15d, r15d
mov ecx, r15d
test ebx, ebx
jle 0x1400089e3
mov rdx, rsi
nop dword [rax + rax]
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x1400089c4
cmp byte [rax + 1], 0x3f
jne 0x1400089c4
cmp byte [rax + 2], r15b
je 0x1400089da
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x1400089e3
jmp 0x1400089b0
cmp edi, 0xffffffff
je 0x14000898d
mov r8b, 1
jmp 0x140008990
cmp ecx, 0xffffffff
jne 0x140009e12
mov ecx, r15d
test ebx, ebx
jle 0x140008a19
mov rdx, rsi
nop dword [rax]
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x140008a04
cmp byte [rax + 1], 0x68
jne 0x140008a04
cmp byte [rax + 2], r15b
je 0x140008a10
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x140008a19
jmp 0x1400089f0
cmp ecx, 0xffffffff
jne 0x140009e12
mov r13, 0xffffffffffffffff
test r8b, r8b
je 0x140008a67
mov r12b, 1
lea rdx, str.___Install_services_to_ignore_kernel_driver_signatures._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
lea rcx, [0x14002532c]
call fcn.1400081b0
test al, al
je 0x140009e25
lea rdx, str.___OK_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
jmp 0x140008c22
mov ecx, r15d
test ebx, ebx
jle 0x140008a96
mov rdx, rsi
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x140008a85
cmp byte [rax + 1], 0x72
jne 0x140008a85
cmp byte [rax + 2], r15b
je 0x140008a91
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x140008a96
jmp 0x140008a71
cmp ecx, r13d
jne 0x140008aec
mov edi, r15d
test ebx, ebx
jle 0x140008abd
mov r14, rsi
lea rdx, str.__uninstall_ignore_signatures
mov rcx, qword [r14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140008ae7
inc edi
add r14, 8
cmp edi, ebx
jl 0x140008aa0
mov edi, r15d
test ebx, ebx
jle 0x140008b20
mov rcx, rsi
mov rax, qword [rcx]
cmp byte [rax], 0x2d
jne 0x140008adb
cmp byte [rax + 1], 0x73
jne 0x140008adb
cmp byte [rax + 2], r15b
je 0x140008b1b
inc edi
add rcx, 8
cmp edi, ebx
jge 0x140008b20
jmp 0x140008ac7
cmp edi, r13d
je 0x140008abd
mov r12b, 1
lea rdx, str.___Uninstall_services_that_ignore_signatures_of_kernel_drivers._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
lea rcx, [0x1400253a4]
call fcn.1400081b0
test al, al
je 0x140009e25
jmp 0x140008c22
cmp edi, r13d
jne 0x140008b5b
mov edi, r15d
test ebx, ebx
jle 0x140008c2f
mov r14, rsi
nop
lea rdx, str.__status
mov rcx, qword [r14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140008b52
inc edi
add r14, 8
cmp edi, ebx
jl 0x140008b30
jmp 0x140008c2f
cmp edi, r13d
je 0x140008c2f
mov r12b, 1
test edi, edi
js 0x140009f39
cmp edi, ebx
jge 0x140009f39
movsxd rax, edi
mov rdi, qword [rsi + rax*8 + 8]
test rdi, rdi
je 0x140009f39
mov rbx, r13
inc rbx
cmp byte [rdi + rbx], r15b
jne 0x140008b82
call fcn.1400208f0
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.140003700
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xa8]
call fcn.14000aa70
xor edx, edx
lea rcx, [rbp + 0xa8]
call fcn.1400073e0
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140008c0e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008c09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], r15w
mov ebx, dword [0x14004ae98]
mov rsi, qword [0x14004ae90]
mov edx, r15d
test ebx, ebx
jle 0x140008c65
mov rcx, rsi
nop dword [rax]
mov rax, qword [rcx]
cmp byte [rax], 0x2d
jne 0x140008c54
cmp byte [rax + 1], 0x6c
jne 0x140008c54
cmp byte [rax + 2], 0
je 0x140008c60
inc edx
add rcx, 8
cmp edx, ebx
jge 0x140008c65
jmp 0x140008c40
cmp edx, 0xffffffff
jne 0x140008caa
mov edx, r15d
test ebx, ebx
jle 0x140008cc6
mov r9, rsi
lea r10, str.__load
nop word [rax + rax]
mov r8, qword [r9]
mov rcx, r15
nop word [rax + rax]
movzx eax, byte [r8 + rcx]
inc rcx
cmp al, byte [r10 + rcx - 1]
jne 0x140008cbc
cmp rcx, 7
jne 0x140008c90
cmp edx, 0xffffffff
je 0x140008cc6
test edx, edx
js 0x140008cfc
cmp edx, ebx
jge 0x140008cfc
movsxd rax, edx
mov r15, qword [rsi + rax*8 + 8]
jmp 0x140008cff
inc edx
add r9, 8
cmp edx, ebx
jl 0x140008c80
mov edi, r15d
test ebx, ebx
jle 0x140009de6
mov rcx, rsi
mov rax, qword [rcx]
cmp byte [rax], 0x2d
jne 0x140008cec
cmp byte [rax + 1], 0x75
jne 0x140008cec
cmp byte [rax + 2], 0
je 0x140009ddd
inc edi
add rcx, 8
cmp edi, ebx
jge 0x140009de6
jmp 0x140008cd4
movsxd rax, edx
add edx, 1
js 0x140008d12
cmp edx, ebx
jge 0x140008d12
mov r12, qword [rsi + rax*8 + 0x10]
xor r8d, r8d
jmp 0x140008d18
xor r8d, r8d
mov r12d, r8d
mov ecx, r8d
mov rdx, rsi
nop
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x140008d34
cmp byte [rax + 1], 0x6f
jne 0x140008d34
cmp byte [rax + 2], 0
je 0x140008d40
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x140008d45
jmp 0x140008d20
cmp ecx, 0xffffffff
jne 0x140008d82
mov edi, r8d
mov r14, rsi
nop dword [rax + rax]
lea rdx, str.__overwrite
mov rcx, qword [r14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140008d75
inc edi
add r14, 8
cmp edi, ebx
jl 0x140008d50
xor al, al
mov byte [rsp + 0x30], al
jmp 0x140008d87
cmp edi, 0xffffffff
jne 0x140008d82
xor al, al
mov byte [rsp + 0x30], al
jmp 0x140008d87
mov byte [rsp + 0x30], 1
xor edi, edi
mov ecx, edi
mov rdx, rsi
nop
mov rax, qword [rdx]
cmp byte [rax], 0x2d
jne 0x140008da4
cmp byte [rax + 1], 0x77
jne 0x140008da4
cmp byte [rax + 2], dil
je 0x140008db0
inc ecx
add rdx, 8
cmp ecx, ebx
jge 0x140008db5
jmp 0x140008d90
cmp ecx, 0xffffffff
jne 0x140008dea
mov r8d, edi
lea r9, str.__watch
nop
mov rdx, qword [rsi]
mov rcx, rdi
nop word [rax + rax]
movzx eax, byte [rdx + rcx]
inc rcx
cmp al, byte [r9 + rcx - 1]
jne 0x140008def
cmp rcx, 8
jne 0x140008dd0
cmp r8d, 0xffffffff
je 0x140008dfb
mov sil, 1
jmp 0x140008dfe
inc r8d
add rsi, 8
cmp r8d, ebx
jl 0x140008dc0
xor sil, sil
test r15, r15
jne 0x140008e0f
lea rax, str.driverPath
jmp 0x140009f40
test r12, r12
je 0x140009f39
mov qword [rbp + 0xa8], rdi
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xb8], xmm0
mov word [rbp + 0xa8], di
mov rbx, r13
nop dword [rax]
inc rbx
cmp byte [r12 + rbx], 0
jne 0x140008e40
call fcn.1400208f0
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x70]
mov edx, eax
lea rcx, [rbp + 0xc8]
call fcn.140003700
nop
mov rbx, r13
nop dword [rax]
inc rbx
cmp byte [r15 + rbx], 0
jne 0x140008e70
call fcn.1400208f0
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], rbx
lea r8, [rbp + 0x70]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.140003700
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xe8]
call fcn.140004f00
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140008eef
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008eea
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140008eea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], di
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x88]
call fcn.14000aa70
nop
lea rcx, [rbp + 0x88]
call fcn.140004f60
test al, al
je 0x140009afe
lea rcx, [rbp + 0x88]
call fcn.140005050
test al, al
jne 0x140009afe
test sil, sil
je 0x1400092b8
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 0xf
mov r8d, 0xd
lea rdx, str.kernelLoader_
lea rcx, [rsp + 0x38]
call fcn.14000b340
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xa8]
call fcn.140006070
test al, al
jne 0x140009104
lea rdx, str._x__Unable_to_create_temporary_directory._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x140008fe4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008fdf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009caa
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0x88], di
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140009041
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000903c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d0a
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xf8], xmm0
mov word [rbp + 0xe8], di
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x14000909e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009099
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d6a
call fcn.140021ae8
mov word [rbp + 0xc8], di
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xd8], xmm0
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x140009e25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400090fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009dd6
call fcn.140021ae8
jmp 0x140009e25
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rcx, qword [rbp + 0x88]
mov rax, qword [rbp + 0x98]
lea rbx, [rcx + rax*2]
mov r11, rbx
mov rdx, rbx
call fcn.140003840
cmp rax, rbx
je 0x14000916b
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x140009145
cmp cx, 0x2f
jne 0x140009150
add rax, 2
jmp 0x140009131
lea rdx, [r11 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14000916b
cmp cx, 0x2f
je 0x14000916b
mov r11, rdx
cmp rax, rdx
jne 0x140009150
sub rbx, r11
sar rbx, 1
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 7
mov word [rsp + 0x38], di
mov r8, rbx
mov rdx, r11
lea rcx, [rsp + 0x38]
call fcn.14000b1c0
nop
lea rdx, [rbp + 0xa8]
lea rcx, [rbp - 0x60]
call fcn.14000aa70
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x60]
call fcn.140003970
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14000aa70
nop
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x14000920a
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009205
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009205
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x140009253
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000924e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000924e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movups xmm0, xmmword [rsp + 0x60]
movups xmmword [rbp + 0x88], xmm0
movups xmm1, xmmword [rsp + 0x70]
movups xmmword [rbp + 0x98], xmm1
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400092b0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400092ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400092ab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
mov bl, 1
mov byte [rsp + 0x30], bl
jmp 0x1400092bd
movzx ebx, byte [rsp + 0x30]
xor edx, edx
xor ecx, ecx
lea r8d, [rdx + 2]
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov qword [rbp + 0x60], rax
mov dil, 1
lea r14, [0x140012b40]
movabs r15, 0xd000000000000000
lea rax, [0x14004a058]
nop word [rax + rax]
test sil, sil
je 0x140009442
test dil, dil
jne 0x140009332
lea rdx, [rbp + 0xc8]
lea rcx, [rsp + 0x38]
call fcn.14000aa70
mov r8d, 1
lea rdx, [rbp + 0x60]
lea rcx, [rsp + 0x38]
call fcn.140006e90
test al, al
je 0x1400097e2
lea rax, [0x14004a058]
xor edi, edi
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0x110], xmm0
movups xmmword [rbp + 0x120], xmm0
lea rdx, [rbp + 0xe8]
lea rcx, [rbp + 0x130]
call fcn.14000aa70
mov dword [rbp + 0x70], edi
lea rax, [0x14004a058]
mov qword [rbp + 0x78], rax
lea rcx, [rbp + 0x130]
cmp qword [rbp + 0x148], 8
cmovae rcx, qword [rbp + 0x130]
mov r9d, 0xffffffff
lea r8d, [rdi + 0x3e]
lea rdx, [rbp + 0x110]
call fcn.140021010
test eax, eax
jne 0x1400093be
test dword [rbp + 0x120], 0x400
mov eax, 0x3e
mov ecx, 6
cmovne eax, ecx
mov dword [rbp + 0x12c], eax
jmp 0x1400093c4
mov dword [rbp + 0x12c], edi
cmp dword [rbp + 0x70], 0
jne 0x1400093e2
lea r9, [rbp + 0x70]
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x110]
call fcn.140005880
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 8
jb 0x140009428
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x130]
cmp rdx, 0x1000
mov rax, rcx
jb 0x140009423
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400097ee
call fcn.140021ae8
cmp dword [rbp + 0x70], 0
jne 0x14000a03a
lea rcx, [0x14002546c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
xor dil, dil
lea rax, [rbp - 0x60]
mov qword [rbp + 0x80], rax
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x60]
call fcn.14000aa70
nop
lea rax, [rbp + 0x40]
mov qword [rbp - 0x40], rax
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x40]
call fcn.14000aa70
nop
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x110]
call fcn.14000aa70
nop
mov byte [rsp + 0x20], bl
lea r8, [rbp - 0x60]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x110]
call fcn.140007110
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x38]
test al, al
je 0x140009572
lea rax, str.____driver_loaded_successfully._n
mov qword [rbp + 0x10], rax
mov qword [rbp + 0x18], 0x23
mov qword [rbp - 8], r12
movabs rax, 0xb000000000000000
mov qword [rbp - 0x10], rax
mov qword [rbp], 1
lea rax, [rbp - 0x10]
mov qword [rbp + 8], rax
movaps xmm0, xmmword [rbp]
movdqa xmmword [rbp - 0x70], xmm0
movaps xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x40], xmm1
call fcn.140003260
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14000ff50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x14000961b
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009616
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea rax, str._x__Failed_to_load_driver__n
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x1d
mov qword [rbp + 0x28], r12
movabs rax, 0xb000000000000000
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x30], 1
lea rax, [rbp + 0x20]
mov qword [rbp + 0x38], rax
movaps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x70], xmm0
movaps xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x40], xmm1
call fcn.140003260
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14000ff50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x14000961b
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009616
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400097f5
call fcn.140021ae8
test sil, sil
je 0x140009a8c
lea rax, str._n___Press_the_R_key_to_reload_the_driver._n____Press_the_S_key_to_print_the_service_status._n____Press_the_Q_key_to_exit_the_loop._n____Press_the_X_key_to_delete_the_driver_and_exit_the_loop._n_n:
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0xcb
mov qword [rsp + 0x60], 1
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
movaps xmm6, xmmword [rbp - 0x80]
movaps xmm7, xmmword [rsp + 0x60]
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, [rbp + 0x110]
call fcn.140007f30
nop
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x60], r15
movdqa xmmword [rbp - 0x70], xmm7
movdqa xmmword [rbp - 0x40], xmm6
lea r8, [rbp - 0x70]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x38]
call fcn.140003260
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14000ff50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x1400096eb
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400096e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400097fc
call fcn.140021ae8
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0x10
jb 0x140009743
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000973e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009803
call fcn.140021ae8
call qword [sym.imp.api_ms_win_crt_conio_l1_1_0.dll__getch]
mov ecx, eax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov ebx, eax
lea rdx, [0x14002558c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
cmp ebx, 0x52
je 0x1400097d8
cmp ebx, 0x53
jne 0x1400097a5
lea rcx, [0x14002546c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, [rbp + 0xc8]
lea rcx, [rbp + 0x110]
call fcn.14000aa70
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x110]
call fcn.1400073e0
jmp 0x140009652
cmp ebx, 0x51
je 0x1400098cf
cmp ebx, 0x58
je 0x140009810
lea rcx, [0x14002546c]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str.____Wrong_command_key_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
jmp 0x140009652
movzx ebx, byte [rsp + 0x30]
jmp 0x1400092e3
lea rdx, str._x__Cannot_delete_driver._n
jmp 0x1400098d6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
inc r13
cmp byte [r12 + r13], 0
jne 0x140009810
call fcn.1400208f0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r13
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.140003700
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14000aa70
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140006e90
movzx ebx, al
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1400098a5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400098a0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400098a0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
test bl, bl
je 0x140009a8e
lea rdx, str.___Driver_uninstalled_successfully._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x140009aa9
lea rdx, str.___Exit__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp byte [rsp + 0x31], 0
je 0x140009912
lea rdx, str.___Uninstall_services_that_ignore_signatures_of_kernel_drivers._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
lea rcx, [0x1400253a4]
call fcn.1400081b0
lea rcx, [rbp + 0xa8]
cmp qword [rbp + 0xc0], 8
cmovae rcx, qword [rbp + 0xa8]
call fcn.1400213a0
movzx ecx, al
mov qword [rbp + 0x80], rcx
shr rax, 0x20
mov dword [rsp + 0x60], eax
lea rcx, [0x14004a058]
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x70], xmm0
cmp eax, 0x91
jne 0x140009974
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0xa8]
call fcn.140005460
cmp dword [rbp + 0x70], 0
jne 0x14000a00c
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x1400099c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400099bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009caa
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0x98], xmm0
xor ebx, ebx
mov word [rbp + 0x88], bx
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140009a23
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d0a
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xf8], xmm0
mov word [rbp + 0xe8], bx
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x140009a80
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009a7b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140009d6a
call fcn.140021ae8
mov word [rbp + 0xc8], bx
jmp 0x1400090a5
xor bl, bl
mov rcx, qword [rbp + 0x60]
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
test sil, sil
je 0x1400098ec
test bl, bl
je 0x1400098ec
lea rcx, [rbp + 0x88]
call fcn.140004f60
test al, al
je 0x1400098ec
lea rcx, [rbp + 0x88]
call fcn.140005050
test al, al
jne 0x1400098ec
lea rcx, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rcx, qword [rbp + 0x88]
call fcn.1400213a0
shr rax, 0x20
test eax, eax
jne 0x14000a024
jmp 0x1400098ec
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rax, [rbp + 0x88]
cmp qword [rbp + 0xa0], 8
cmovae rax, qword [rbp + 0x88]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x68], rax
call fcn.1400208f0
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140012800
nop
lea rax, str._x__Driver_files_not_found___n
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], 0x1f
lea rax, [rbp - 0x30]
mov qword [rbp - 0x58], rax
lea r14, [0x140012b40]
mov qword [rbp - 0x50], r14
movabs r15, 0xd000000000000000
mov qword [rbp - 0x60], r15
mov qword [rsp + 0x60], 1
lea rax, [rbp - 0x60]
mov qword [rsp + 0x68], rax
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movaps xmm1, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm1
lea r8, [rsp + 0x60]
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x38]
call fcn.140003260
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14000ff50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140009c1b
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c16
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009c16
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], 0xf
mov byte [rsp + 0x38], 0
mov rdx, qword [rbp - 0x18]
cmp rdx, 0x10
jb 0x140009c6d
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009c67
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009c67
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
nop
mov rdx, qword [rbp + 0xa0]
cmp rdx, 8
jb 0x140009cb6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009cb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009cb1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0x98], xmm0
mov word [rbp + 0x88], di
mov rdx, qword [rbp + 0x100]
cmp rdx, 8
jb 0x140009d16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d11
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xf8], xmm0
mov word [rbp + 0xe8], di
mov rdx, qword [rbp + 0xe0]
cmp rdx, 8
jb 0x140009d76
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009d71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009d71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
movdqa xmm0, xmmword [0x140043540]
movdqu xmmword [rbp + 0xd8], xmm0
mov word [rbp + 0xc8], di
mov rdx, qword [rbp + 0xc0]
cmp rdx, 8
jb 0x140009e25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400090fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400090fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp edi, 0xffffffff
jne 0x140009e66
mov edi, r15d
test ebx, ebx
jle 0x140009e0d
mov r14, rsi
lea rdx, str.__unload
mov rcx, qword [r14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140009e61
inc edi
add r14, 8
cmp edi, ebx
jl 0x140009df0
test r12b, r12b
jne 0x140009e25
lea rdx, str._nUsage:_n___l____load__driver_path___driver_name__n_tLoad_the_driver._n_t_t_n_tOptions:_n_t_t_o____overwrite_n_t_t_tIf_the_driver_already_exists__exit_and_overwrite_it._n_t_t_w____watch_n_t_t_tQuickly_reload_drivers_from_a_prompt_when_needed._n_n___u____unload__driver_name__n_tDelete_the_driver._n_nGlobal_Options:_n___s____status__driver_name__n_tPrint_the_drivers_service_status._n___i____ignore_signatures_n___tInstall_services_to_ignore_kernel_driver_signatures.__powered_by_Wind64__n_n___r____uninstall_ignore_signatures_n_tRemove_services_that_ignore_signatures_of_kernel_drivers.__powered_by_Wind64__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000cf70
xor eax, eax
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140021690
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
cmp edi, 0xffffffff
je 0x140009e0d
test edi, edi
js 0x140009f39
cmp edi, ebx
jge 0x140009f39
movsxd rax, edi
mov rbx, qword [rsi + rax*8 + 8]
test rbx, rbx
je 0x140009f39
nop word [rax + rax]
inc r13
cmp byte [rbx + r13], 0
jne 0x140009e90
call fcn.1400208f0
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], r13
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rsp + 0x38]
call fcn.140003700
nop
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.14000aa70
xor r8d, r8d
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140006e90
movzx ebx, al
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x140009f25
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140009f20
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140009f20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
test bl, bl
je 0x140009e25
lea rdx, str.___Driver_uninstalled_successfully._n
jmp 0x140009e19
lea rax, str.name
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rcx, str.____Parameter__is_missing._n
mov qword [rbp - 0x30], rcx
mov qword [rbp - 0x28], 0x1d
mov qword [rsp + 0x68], rax
movabs rax, 0xb000000000000000
mov qword [rsp + 0x60], rax
mov qword [rbp - 0x80], 1
lea rax, [rsp + 0x60]
mov qword [rbp - 0x78], rax
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movaps xmm1, xmmword [rbp - 0x30]
movdqa xmmword [rbp - 0x30], xmm1
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x30]
lea rcx, [rsp + 0x38]
call fcn.140003260
nop
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae rdx, qword [rsp + 0x38]
mov r8, qword [rsp + 0x48]
mov rcx, rbx
call fcn.14000ff50
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x140009e12
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000a002
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000a002
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140021ae8
jmp 0x140009e12
lea r8, [rbp + 0xa8]
lea rdx, [rbp + 0x70]
lea rcx, str.remove_all
call fcn.1400044e0
int3
lea r8, [rbp + 0x88]
mov edx, eax
lea rcx, str.remove
call fcn.140004470
int3
lea r9, [rbp + 0x88]
lea r8, [rbp + 0xe8]
lea rdx, [rbp + 0x70]
call fcn.140004540
int3