Function at 0x1800213d0
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xaf0
mov rax, qword [0x1800a2de8]
xor rax, rsp
mov qword [rsp + 0xae0], rax
mov qword [rsp + 0x78], rsp
movsxd r12, edx
mov dword [rsp + 0x50], r12d
mov r15, rcx
xor r13d, r13d
mov dword [rsp + 0x58], r13d
mov dword [rsp + 0x54], r13d
mov word [rsp + 0x8d0], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x8d2]
call fcn.180056c20
mov word [rsp + 0x4c0], r13w
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x4c2]
call fcn.180056c20
mov r14d, r13d
mov qword [rsp + 0x68], r13
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov qword [rsp + 0xa0], r13
mov ecx, 0x1000a
call fcn.180053ad4
mov rsi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rsi, rsi
je 0x180021558
test rax, rax
je 0x180021558
imul r9, r12, 0x420
add r9, qword [r15 + 0x4240]
mov dword [rsp + 0x20], r12d
lea r8, str.Stopping_Injection_in_all_process_with_application:__s____d
mov edx, 0xffff
mov rcx, rax
call fcn.180053a4c
test eax, eax
jle 0x180021541
mov word [rbx + 0x1fffe], r13w
lea rdx, [r13 - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rsi
lea rcx, [rsp + 0xa0]
call fcn.180054798
test eax, eax
je 0x180021518
mov r8d, edi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rsi
lea r9, str.StopProcessInjection
mov edx, 0x2e7
mov r8d, 3
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x180021571
mov edx, edi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x18002156b
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rsi, rsi
je 0x18002157e
mov rcx, rsi
call fcn.180053a94
test rbx, rbx
je 0x18002158b
mov rcx, rbx
call fcn.180053a94
lea rcx, str.ESProtectionDriver
call fcn.1800482d0
test eax, eax
jne 0x1800215be
mov dword [rsp + 0x80], r13d
lea rdx, [0x1800215b7]
mov rcx, qword [rsp + 0x78]
call fcn.180057580
nop
nop
nop
xor eax, eax
jmp 0x180021df0
lea r9, str.mbae.dll
lea r8, [0x1800a7170]
lea rdx, str._s_s
lea rcx, [rsp + 0x8d0]
call fcn.180003d50
lea r9, str.mbae64.dll
lea r8, [0x1800a7170]
lea rdx, str._s_s
lea rcx, [rsp + 0x4c0]
call fcn.180003d50
xor ebx, ebx
mov word [rsp + 0x2b0], bx
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x2b2]
call fcn.180056c20
mov word [rsp + 0x6d0], bx
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rsp + 0x6d2]
call fcn.180056c20
mov word [rsp + 0xb0], bx
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rsp + 0xb2]
call fcn.180056c20
lea edx, [rbx + 1]
call fcn.180022860
mov r13d, ebx
mov dword [rsp + 0x60], ebx
nop word [rax + rax]
cmp r13d, dword [r15 + 0x4248]
jge 0x180021b2d
movsxd rax, r13d
imul r12, rax, 0x62c
mov rcx, qword [r15 + 0x4250]
add rcx, 0x20c
add rcx, r12
mov qword [rsp + 0x40], 0x100
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0x100
lea rax, [rsp + 0x6d0]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call fcn.1800533b8
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x6d0]
lea r8, str._s_s
mov edx, 0x104
lea rcx, [rsp + 0x2b0]
call fcn.180053a4c
mov rax, qword [r15 + 0x4250]
cmp dword [r12 + rax + 0x624], 0
je 0x180021b20
movsxd rax, dword [rsp + 0x50]
imul rdx, rax, 0x420
add rdx, 0x208
add rdx, qword [r15 + 0x4240]
lea rcx, [rsp + 0x2b0]
call fcn.180052ca8
test eax, eax
jne 0x180021b20
test r14, r14
je 0x180021757
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rsp + 0x68], rbx
mov rax, qword [r15 + 0x4250]
mov r8d, dword [r12 + rax + 0x414]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r14, rax
mov qword [rsp + 0x68], rax
test rax, rax
jne 0x1800218e2
call qword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x1e
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x54], eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov qword [rsp + 0x70], rbx
mov ecx, 0x1000a
call fcn.180053ad4
mov rsi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rsi, rsi
je 0x180021899
test rax, rax
je 0x180021899
call qword [sym.imp.KERNEL32.dll_GetLastError]
add eax, 0x1e
mov rcx, qword [r15 + 0x4250]
mov dword [rsp + 0x20], eax
mov r9d, dword [r12 + rcx + 0x414]
lea r8, str.OpenProcess:__d____d
mov edx, 0xffff
mov rcx, rbx
call fcn.180053a4c
test eax, eax
jle 0x180021882
xor eax, eax
mov word [rbx + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rsi
lea rcx, [rsp + 0x70]
call fcn.180054798
test eax, eax
je 0x180021859
mov r8d, edi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rsi
lea r9, str.StopProcessInjection
mov edx, 0x309
mov r8d, 3
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x1800218b2
mov edx, edi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x1800218ac
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rsi, rsi
je 0x1800218bf
mov rcx, rsi
call fcn.180053a94
test rbx, rbx
je 0x1800218cc
mov rcx, rbx
call fcn.180053a94
mov rax, qword [r15 + 0x4250]
xor ebx, ebx
mov dword [r12 + rax + 0x624], ebx
jmp 0x180021b20
mov rcx, rax
call fcn.1800416b0
xor r8d, r8d
mov rdx, r14
test eax, eax
je 0x1800219ce
lea rcx, [rsp + 0x4c0]
call fcn.18003eca0
test eax, eax
jne 0x180021b0b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov qword [rsp + 0x88], rbx
mov ecx, 0x1000a
call fcn.180053ad4
mov rsi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rsi, rsi
je 0x180021ad6
test rax, rax
je 0x180021ad6
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9d, [rax + 0x1e]
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rbx
call fcn.180053a4c
test eax, eax
jle 0x180021abf
xor eax, eax
mov word [rbx + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rsi
lea rcx, [rsp + 0x88]
call fcn.180054798
test eax, eax
je 0x1800219c4
mov r8d, edi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edx, 0x319
jmp 0x180021a9b
lea rcx, [rsp + 0x8d0]
call fcn.18003eca0
test eax, eax
jne 0x180021b0b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea edi, [rax + 0x1e]
mov qword [rsp + 0x90], rbx
mov ecx, 0x1000a
call fcn.180053ad4
mov rsi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rsi, rsi
je 0x180021ad6
test rax, rax
je 0x180021ad6
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r9d, [rax + 0x1e]
lea r8, [0x180088b38]
mov edx, 0xffff
mov rcx, rbx
call fcn.180053a4c
test eax, eax
jle 0x180021abf
xor eax, eax
mov word [rbx + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rsi
lea rcx, [rsp + 0x90]
call fcn.180054798
test eax, eax
je 0x180021a96
mov r8d, edi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov edx, 0x320
mov dword [rsp + 0x28], edi
lea r9, str.StopProcessInjection
mov qword [rsp + 0x20], rsi
mov r8d, 3
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x180021aef
mov edx, edi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180021ae9
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rsi, rsi
je 0x180021afc
mov rcx, rsi
call fcn.180053a94
test rbx, rbx
je 0x180021b09
mov rcx, rbx
call fcn.180053a94
xor ebx, ebx
mov rax, qword [r15 + 0x4250]
mov dword [r12 + rax + 0x624], 2
jmp 0x180021b20
inc r13d
mov dword [rsp + 0x60], r13d
jmp 0x180021670
xor edx, edx
call fcn.180022860
mov edi, dword [rsp + 0x58]
test edi, edi
je 0x180021bfc
mov ecx, 0x1000a
call fcn.180053ad4
mov rbx, rax
test rax, rax
jne 0x180021b6d
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
jmp 0x180021bd8
lea r8, [0x180088a64]
mov edx, 0xffff
mov rcx, rax
call fcn.180053a70
test eax, eax
jle 0x180021bb5
mov byte [rbx + 0xffff], 0
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbx
lea r9, str.StopProcessInjection
mov edx, 0x341
mov r8d, 1
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x180021bd0
mov edx, edi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov rcx, rbx
call fcn.180053a94
mov dword [rsp + 0x98], edi
lea rdx, [0x180021bf3]
mov rcx, qword [rsp + 0x78]
call fcn.180057580
nop
nop
nop
mov eax, dword [rsp + 0x54]
jmp 0x180021df0
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea esi, [rax + 0x1e]
mov qword [rsp + 0x58], rbx
mov ecx, 0x1000a
call fcn.180053ad4
mov rdi, rax
mov ecx, 0x2000a
call fcn.180053ad4
mov rbx, rax
test rdi, rdi
je 0x180021cf6
test rax, rax
je 0x180021cf6
movsxd rax, dword [rsp + 0x50]
imul r9, rax, 0x420
add r9, qword [r15 + 0x4240]
mov dword [rsp + 0x20], eax
lea r8, str.Process_Injection_has_been_successfully_stopped___s____d
mov edx, 0xffff
mov rcx, rbx
call fcn.180053a4c
test eax, eax
jle 0x180021cdf
xor eax, eax
mov word [rbx + 0x1fffe], ax
lea rdx, [rax - 2]
mov rcx, rbx
call fcn.180053398
lea r8, [rax + 1]
mov qword [rsp + 0x20], 0xffffffffffffffff
mov r9, rbx
mov rdx, rdi
lea rcx, [rsp + 0x58]
call fcn.180054798
test eax, eax
je 0x180021cb6
mov r8d, esi
mov rdx, rbx
lea rcx, str.wcstombs_s_error_in_log_file:__s____d_n
call fcn.180053f50
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, str.StopProcessInjection
mov edx, 0x344
mov r8d, 3
lea rcx, str...ProtectionNA.cpp
call fcn.180001b40
jmp 0x180021d0f
mov edx, esi
lea rcx, str.Error__d_in_swprintf_s_n
call fcn.180053f50
lea rcx, str.Error_in_swprintf_s_n
jmp 0x180021d09
lea rcx, str.Memory_allocation_error_in_log_file_n
call fcn.180053f50
lea rcx, str.Memory_allocation_error_in_log_file_n
call qword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test rdi, rdi
je 0x180021d1c
mov rcx, rdi
call fcn.180053a94
test rbx, rbx
je 0x180021d2a
mov rcx, rbx
call fcn.180053a94
nop
test r14, r14
je 0x180021d38
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
xor eax, eax
jmp 0x180021df0
mov rcx, qword [rsp + 0xae0]
xor rcx, rsp
call fcn.180052be0
lea r11, [rsp + 0xaf0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret