Function at 0x18001ed10
Capabilities:
Print debug messages

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
lea r12, str.ESProtectionDriver
mov rcx, r12
call fcn.18001f140
mov r14d, eax
test eax, eax
je 0x18001ee5c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
xor r15d, r15d
mov qword [rsp + 0x70], r15
mov ecx, 0x1000a
call fcn.180053ad4
mov rsi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rsi, rsi
je 0x18001ee27
test rax, rax
je 0x18001ee27
mov qword [rsp + 0x20], r12
mov r9d, r14d
lea r8, str.Error_UninstallDriverEx___d_:__s
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18001ee10
mov word [rbx + 0x1fffe], r15w
lea rdx, [r15 - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.180054798
test eax, eax
je 0x18001ede7
mov r8d, edi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rsi
lea r9, str.UninstallDriver
mov edx, 0xd4
mov r8d, 1
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x18001ee40
mov edx, edi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x18001ee3a
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rsi, rsi
je 0x18001ee4d
mov rcx, rsi
call fcn.180053a94
test rbx, rbx
je 0x18001ee5f
mov rcx, rbx
call fcn.180053a94
jmp 0x18001ee5f
xor r15d, r15d
lea r13, str.MBAMAntiExploit
mov rcx, r13
call fcn.18001f140
mov r12d, eax
test eax, eax
je 0x18001ef6c
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x78], r15
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x18001f049
test rax, rax
je 0x18001f049
mov qword [rsp + 0x20], r13
mov r9d, r12d
lea r8, str.Error_UninstallDriverEx___d_:__s
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18001ef52
mov word [rbx + 0x1fffe], r15w
mov rdx, 0xfffffffffffffffe
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.180054798
test eax, eax
je 0x18001ef26
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.UninstallDriver
mov edx, 0xda
mov r8d, 1
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x18001f062
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x18001f05c
test r14d, r14d
jne 0x18001f07d
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x80], r15
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x18001f049
test rax, rax
je 0x18001f049
lea r8, str.Malwarebytes_Anti_Exploit_Driver_has_been_successfully_uninstalled
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x18001ef52
mov word [rbx + 0x1fffe], r15w
mov rdx, 0xfffffffffffffffe
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x80]
call fcn.180054798
test eax, eax
je 0x18001f020
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.UninstallDriver
mov edx, 0xdd
mov r8d, 3
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x18001f062
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x18001f06f
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x18001f07d
mov rcx, rbx
call fcn.180053a94
nop
nop
xor eax, eax
jmp 0x18001f129
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret