Function at 0x14000b1b0
Capabilities:
Delete file
Execute command
Set console window title
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5f0]
sub rsp, 0x6f0
mov rax, qword [0x140029040]
xor rax, rsp
mov qword [rbp + 0x5e0], rax
mov r12d, 1
mov dword [rbp + 0x5c], r12d
lea rcx, str.Kernel_Tools__INIT_Release_Driver_
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
call fcn.140008520
lea rdx, str.__INIT__Release_Driver_File_To_C:Kernel_Tools_Driver.sys
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
call fcn.1400089b0
lea rdx, str.__INIT__Release_Driver_File_To_C:DDF.sys
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rcx, str.Kernel_Tools__INIT_Load_Driver_
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdx, str.Kernel_Tools
lea rcx, str.C:Kernel_Tools_Driver.sys
call fcn.140007120
lea rdx, str.__INIT__Load_Kernel_Tools_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, [0x14001d458]
lea rcx, str.C:DDF.sys
call fcn.140007120
lea rdx, str.__INIT__Load_DDF_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, [0x14001d458]
lea rcx, [rbp + 0x1a8]
call fcn.140013470
nop
lea rcx, [rbp + 0x1a8]
call fcn.140007570
lea rcx, [0x14001d478]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.14000a9c0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [0x14001d478]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rcx, str.Color_E
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.1400079b0
xor r13d, r13d
movzx ebx, byte [rsp + 0x40]
movzx edi, byte [rsp + 0x40]
movzx esi, byte [rsp + 0x40]
lea r14, [0x140000000]
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_TerminateProcess
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._2_ForceTerminateProcess
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._3_HiddenProcess
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._4_KillAllThreads
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._5_ZeroProcessMemory
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._6_HiddenProcess_Win8_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._7_ControlHidden
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._8_ControlHidden0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._9_HardWareInfo
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._10_SuspendProcess
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._11_ResumeProcess
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._12_PP_PPL
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._13_Set_System_Critical_Process
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._14_ProcessList
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._15_KernelDisassembly
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._16_ProcessProtection
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._17_ExportTable
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._18_Process_Escalation
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._19_AntiHidden
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._20_AntiHidden_PID_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._21_AntiHidden_Thread_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._22_MiniFilter
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._23_RemoveMiniFilter
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._24_ObCallBacks
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._25_RemoveObCallBacks
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._26_HiddenDriver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._27_ForceUnloadDriver
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._28_CallBacks_Notify_View
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._100_MISC
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
movsxd rax, dword [rbp + 0x58]
cmp eax, 0x64
ja case.0x14000b799.30
movzx eax, byte [r14 + rax + 0x11ce8]
mov ecx, dword [r14 + rax*4 + 0x11c6c]
add rcx, r14
jmp rcx
lea rdx, str.Kernel_Tools
lea rcx, [rbp - 0x68]
call fcn.140013470
nop
lea rcx, [rbp - 0x68]
call fcn.140007570
lea rdx, str.__EXIT__Unload_Driver_Success
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
call fcn.140007bc0
lea rdx, str.__EXIT__EXIT_To_Program
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, [0x14001d758]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.140001d70
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001070c
lea rcx, str.Enter_PID_To_Terminate:
call fcn.140001180
lea rdx, [rbp + 0x38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x198]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x38]
mov edx, 0x222000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x38]
lea rcx, str.PID__ld_Terminate_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001074a
lea rcx, str.Enter_PID_To_Terminate:
call fcn.140001180
lea rdx, [rsp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x22208c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222018
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
je 0x14000bbdf
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
je 0x14000bbdf
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x22201c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222000
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
je 0x14000bbdf
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222018
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x222010
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
je 0x14000bbdf
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x22200c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
je 0x14000bbdf
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rsp + 0x68]
mov edx, 0x2220e0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov ecx, dword [rsp + 0x68]
call fcn.140007cc0
test al, al
jne 0x14000bbdf
mov edx, dword [rsp + 0x68]
lea rcx, str.PID__ld_Terminate_successfully._n
call fcn.140001180
mov edx, dword [rsp + 0x68]
lea rcx, str.PID__ld_Terminate_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001078a
lea rcx, str.Enter_PID_To_Hidden:
call fcn.140001180
lea rdx, [rbp + 0x60]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x19c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x60]
mov edx, 0x22200c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x60]
lea rcx, str.PID__ld_Hidden_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400107ca
lea rcx, str.Enter_PID_To_Terminate:
call fcn.140001180
lea rdx, [rbp + 0x64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x1a0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x64]
mov edx, 0x222010
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x64]
lea rcx, str.PID__ld_Terminate_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001080a
lea rcx, str.Enter_PID_To_Terminate:
call fcn.140001180
lea rdx, [rbp - 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x6c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x48]
mov edx, 0x222004
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x48]
lea rcx, str.PID__ld_Terminate_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001084a
lea rcx, str.Enter_PID_To_Hidden:
call fcn.140001180
lea rdx, [rbp - 0x44]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x70]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x44]
mov edx, 0x222014
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x44]
lea rcx, str.PID__ld_Hidden_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001088a
lea rcx, str.Enter_PID_To_Hidden:
call fcn.140001180
lea rdx, [rbp - 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x74]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x40]
mov edx, 0x222090
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x40]
lea rcx, str.PID__ld_Hidden_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400108ca
lea rcx, str.Enter_PID_To_Hidden:
call fcn.140001180
lea rdx, [rbp - 0x3c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x78]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x3c]
mov edx, 0x222094
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x3c]
lea rcx, str.PID__ld_Hidden_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
lea rdx, str.CPU:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Name_FROM_Win32_Processor
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.RAM:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Capacity_FROM_Win32_PhysicalMemory
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.Inc:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Manufacturer_FROM_Win32_BaseBoard
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.SYS:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Caption_FROM_Win32_OperatingSystem
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.Graphics:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Name_FROM_Win32_VideoController
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.CPUInc:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Manufacturer_FROM_Win32_Processor
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.RAMInc:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_Manufacturer_FROM_Win32_PhysicalMemory
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
lea rdx, str.HWID:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov r14, rax
lea rdx, str.SELECT_SerialNumber_FROM_Win32_DiskDrive
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x68]
call fcn.140006cd0
nop
mov rdx, rax
mov rcx, r14
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001090a
lea rcx, str.Enter_PID_To_Suspend:
call fcn.140001180
lea rdx, [rbp - 0x38]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x7c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x38]
mov edx, 0x222018
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x38]
lea rcx, str.PID__ld_Suspend_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001094a
lea rcx, str.Enter_PID_To_Resume:
call fcn.140001180
lea rdx, [rbp - 0x34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x80]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x34]
mov edx, 0x22201c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp - 0x34]
lea rcx, str.PID__ld_Resume_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_PPL_System
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._2_PPL_WinTcb
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._3_PPL_Windwos
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._4_PPL_Lsa
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._5_PPL_Antimalware
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._6_PPL_CodeGen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._7_PPL_Authenticode
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._8_PPL_None
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._9_PP_System
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._10_PP_WinTcb
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._11_PP_Windwos
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._12_PP_Lsa
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._13_PP_Antimalware
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._14_PP_CodeGen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._15_PP_Authenticode
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._16_PP_None
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x10]
dec eax
cmp eax, 0xf
ja case.default.0x14000c7cf
cdqe
mov ecx, dword [r14 + rax*4 + 0x11d50]
add rcx, r14
jmp rcx
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x14001098a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x84]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x30]
mov edx, 0x222020
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x30]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400109ca
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x88]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x2c]
mov edx, 0x222024
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x2c]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010a0a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x8c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x28]
mov edx, 0x222040
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x28]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010a4a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x24]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x90]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x24]
mov edx, 0x222044
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x24]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010a8a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x94]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x20]
mov edx, 0x222048
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x20]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010aca
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x1c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x98]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x1c]
mov edx, 0x22204c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x1c]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010b0a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x18]
mov edx, 0x222050
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x18]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010b4a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x14]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xa0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x14]
mov edx, 0x222054
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x14]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010b8a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0x10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xa4]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0x10]
mov edx, 0x222058
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0x10]
lea rcx, str.PID__ld_SetPP_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010bca
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 0xc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 0xc]
mov edx, 0x22205c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 0xc]
lea rcx, str.PID__ld_SetPP_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010c0a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xac]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 8]
mov edx, 0x222060
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 8]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010c4a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp - 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp - 4]
mov edx, 0x222064
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp - 4]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010c8a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xb4]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp]
mov edx, 0x222080
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010cca
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp + 4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xb8]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 4]
mov edx, 0x222084
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp + 4]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010d0a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp + 8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xbc]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 8]
mov edx, 0x222088
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp + 8]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010d4a
lea rcx, str.Enter_PID_To_SetPPL:
call fcn.140001180
lea rdx, [rbp + 0xc]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xc0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0xc]
mov edx, 0x22208c
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d31a
mov edx, dword [rbp + 0xc]
lea rcx, str.PID__ld_SetPPL_successfully._n
jmp 0x14000d329
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rcx, str.Failed._Error__ld_n
mov edx, eax
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r14, [0x140000000]
cmp dword [rbp + 0x10], 0
jne case.0x14000b799.12
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010d8a
lea rcx, str.Enter_PID_To_Set:
call fcn.140001180
lea rdx, [rbp + 0x14]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xc4]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x14]
mov edx, 0x222008
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x14]
lea rcx, str.PID__ld_Set_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140010e15
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xc8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2220cc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d5e7
lea rdx, [0x14001dbf8]
lea rcx, [rbp - 0x68]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x140010dca
lea rdx, str.PIDProcessNameEPROCESS
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rsp + 0x70]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000d5b7
nop word [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000d550
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
jmp 0x14000d5fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsProcess
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
cmp rax, 0xffffffffffffffff
je 0x140010e9a
lea rcx, str.Enter_PID_To_Disassembly:
call fcn.140001180
lea rdx, [rbp + 0x5c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xcc]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x5c]
mov edx, 0x2220d8
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000d835
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14001dc80]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x140010e4d
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000d805
nop dword [rax]
nop dword [rax + rax]
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000d7a0
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000d849
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsDisassembly
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14000d892
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140010eda
lea rcx, str.Enter_PID_To_Protection:
call fcn.140001180
lea rdx, [rbp + 0x18]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xd0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x18]
mov edx, 0x2220e4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x18]
lea rcx, str.PID__ld_Protection_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_ntoskrnl
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._2_CI
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._3_ntdll
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x1c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x1c]
sub ecx, 1
je 0x14000ddeb
sub ecx, 1
je 0x14000dc18
cmp ecx, 1
je 0x14000da3f
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
jmp 0x14000e012
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140010f67
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xd4]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222110
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000dfc5
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14001dd38]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
cmp qword [rbp + 0x260], 0
je 0x140010f1a
movzx edx, dil
lea rcx, [rsp + 0x70]
call fcn.140015250
lea rcx, [rsp + 0x70]
call fcn.1400141a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000dbd7
nop dword [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000db70
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x280]
call fcn.1400131f0
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000dfd9
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140010fec
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xd8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22210c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000dfc5
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14001dd38]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
cmp qword [rbp + 0x260], 0
je 0x140010f9f
movzx edx, bl
lea rcx, [rsp + 0x70]
call fcn.140015250
lea rcx, [rsp + 0x70]
call fcn.1400141a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000ddaa
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000dd43
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x280]
call fcn.1400131f0
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000dfd9
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011071
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xdc]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222108
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000dfc5
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rdx, [0x14001dd38]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
xor edx, edx
mov r8d, 0x110
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
cmp qword [rbp + 0x260], 0
je 0x140011024
movzx edx, sil
lea rcx, [rsp + 0x70]
call fcn.140015250
lea rcx, [rsp + 0x70]
call fcn.1400141a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000df87
nop word [rax + rax]
lea rdx, [rsp + 0x70]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000df20
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rsp + 0x70]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x280]
call fcn.1400131f0
lea rcx, [rbp + 0x280]
call qword [sym.imp.MSVCP140.dll_public_virtual:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::destructor_void____ptr64]
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000dfd9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsExportTable
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14000e022
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x1c], 0
jne case.0x14000b799.17
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400110a9
lea rcx, str.Enter_PID_To_Set:
call fcn.140001180
lea rdx, [rbp + 0x20]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xe0]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x20]
mov edx, 0x222114
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x20]
lea rcx, str.PID__ld_Set_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011136
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xe4]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222118
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000e2a5
lea rdx, [0x14001dd90]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x1400110e9
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000e275
nop dword [rax + rax]
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000e210
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000e2b9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsAntiHidden
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400111bb
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22218c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000e4a5
lea rdx, [0x14001ddd8]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x14001116e
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000e475
nop
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000e410
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000e4b9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsAntiHiddenPID
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011240
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xec]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222190
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000e6a5
lea rdx, [0x14001de30]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x1400111f3
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000e675
nop
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000e610
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000e6b9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsAntiHiddenThread
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400112c5
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xf0]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2221dc
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000e8a5
lea rdx, [0x14001de88]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x140011278
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000e875
nop
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000e810
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000e8b9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsMiniFilter
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400112fd
lea rcx, str.Enter_Filter_To_Remove:
call fcn.140001180
lea rdx, [rbp + 0x24]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xf4]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x24]
mov edx, 0x2221e0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x24]
lea rcx, str.MiniFilter__ld_Remove_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001133d
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0xf8]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22220c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000ea32
call fcn.140007d60
call fcn.140008140
lea rcx, str.C:WindowsThreadCallBack
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x14000ea7b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, str.C:WindowsProcessCallBack
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140011375
lea rcx, str.Enter_CallBack_To_Remove:
call fcn.140001180
lea rdx, [rbp + 0x28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0xfc]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x28]
mov edx, 0x222218
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x28]
lea rcx, str.ObCallBack__ld_Remove_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400113b5
lea rcx, str.Enter_DriverObject_To_Hidden:
call fcn.140001180
lea rdx, [rbp + 0x2c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x100]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x2c]
mov edx, 0x222244
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x2c]
lea rcx, str.Driver__ld_Hidden_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x1400113f5
lea rcx, str.Enter_DriverObject_To_Unload:
call fcn.140001180
lea rdx, [rbp + 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x104]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x30]
mov edx, 0x222248
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000b8f9
mov edx, dword [rbp + 0x30]
lea rcx, str.Driver__ld_Unload_successfully._n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400106c0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011482
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0x108]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x22224c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000eeb5
lea rdx, [0x14001e060]
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
mov edx, 0x110
lea rcx, [rbp + 0x1d0]
call fcn.140003440
mov dword [rsp + 0x20], r12d
mov r9d, 0x40
mov r8d, r12d
lea rdx, [rsp + 0x48]
lea rcx, [rbp + 0x1d0]
call fcn.1400132b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.1400131e0
test al, al
je 0x140011435
lea rcx, [rbp - 0x68]
call fcn.1400137a0
nop
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
je 0x14000ee85
nop word [rax + rax]
lea rdx, [rbp - 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword [rbp + 0x1d0]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x1d0]
add rcx, rax
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
movzx r8d, al
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x1d0]
call fcn.140015cb0
mov rcx, qword [rax]
movsxd rcx, dword [rcx + 4]
add rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_bool___cdecl_std::ios_base::operator_bool_void_const___ptr64]
test al, al
jne 0x14000ee20
lea rcx, [rbp + 0x1d0]
call fcn.1400131a0
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x14000eec9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
lea rcx, str.C:WindowsCallBacks
call qword [sym.imp.KERNEL32.dll_DeleteFileW]
test eax, eax
jne 0x1400106c0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
lea rdx, str.ERROR:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
mov edx, r14d
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
jmp 0x1400106b0
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0b8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0c8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0d8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0e8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e0f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e108]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e128]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e140]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e150]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._11_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._12_Intel_VT_AMD_V
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._13_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._14_BlueScreen
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._15_ForceShutDown
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._16_ForceREBOOT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._17_ProcessView_GUI
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._100_ANTI_AntiVirus
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x54]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x54]
dec eax
cmp eax, 0x63
ja case.0x14000f1de.19
cdqe
movzx eax, byte [r14 + rax + 0x11ddc]
mov ecx, dword [r14 + rax*4 + 0x11d90]
add rcx, r14
jmp rcx
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400114ba
lea rcx, [rbp + 0x10c]
mov edx, 0x22209c
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rcx
xor r9d, r9d
mov dword [rsp + 0x28], r13d
xor r8d, r8d
mov qword [rsp + 0x20], r13
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000f25b
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x140010691
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
jmp 0x140010691
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400114f2
lea rcx, [rbp + 0x110]
mov edx, 0x2220a0
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001152a
lea rcx, [rbp + 0x114]
mov edx, 0x2220a4
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011562
lea rcx, [rbp + 0x118]
mov edx, 0x2220c0
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001159a
lea rcx, [rbp + 0x11c]
mov edx, 0x2220c4
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400115d2
lea rcx, [rbp + 0x120]
mov edx, 0x2220c8
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001160a
lea rcx, [rbp + 0x124]
mov edx, 0x2220d0
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011642
lea rcx, [rbp + 0x128]
mov edx, 0x2220d4
jmp 0x14000f223
xor edx, edx
mov r8d, 0x208
lea rcx, [rbp + 0x3d0]
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0x200
lea rcx, [rbp + 0x1d0]
call sub.VCRUNTIME140.dll_memset
lea rdx, str.Enter_Driver_File_Path:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140014af0
lea rdx, [rbp + 0x3d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call fcn.140014d10
lea rdx, str.Enter_Service_Name:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140014af0
lea rdx, [rbp + 0x1d0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
call fcn.140014d10
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400116b2
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0x12c]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2220c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
lea rcx, str.__successfully._n
jne 0x14000f558
lea rcx, str.__DisableDSE_Success._n
call fcn.140001180
lea rdx, [rbp + 0x1d0]
lea rcx, [rbp + 0x3d0]
call fcn.140007120
test al, al
jne 0x14000f597
lea rdx, str.___Failed_to_load_the_driver.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcerr]
call fcn.140014af0
lea rdx, [0x140014cd0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001167a
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0x130]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x2220c8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000f612
lea rcx, str.__successfully._n
call fcn.140001180
jmp 0x140010691
lea rcx, str.__Successfully._n
call fcn.140001180
jmp 0x140010691
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400116ea
lea rcx, [rbp + 0x134]
mov edx, 0x222100
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011722
lea rcx, [rbp + 0x138]
mov edx, 0x222104
jmp 0x14000f223
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_Intel
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._2_AMD
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x3c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x3c]
sub ecx, 1
je 0x14000f990
cmp ecx, 1
je 0x14000f780
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000fef3
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e3e0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e3f8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._3_Hook_KiSystemCall64_MSR
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x34]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x34]
sub ecx, 1
je 0x14000f8e8
sub ecx, 1
je 0x14000f8a3
cmp ecx, 1
je 0x14000f85b
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000f974
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001175a
lea rcx, [rbp + 0x13c]
mov edx, 0x222240
jmp 0x14000f92b
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011792
lea rcx, [rbp + 0x140]
mov edx, 0x222224
jmp 0x14000f92b
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400117ca
lea rcx, [rbp + 0x144]
mov edx, 0x222220
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000f960
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x14000f974
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
cmp dword [rbp + 0x34], 0
jne 0x14000f780
jmp 0x14000fef3
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e328]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e338]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e348]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e358]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e368]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e378]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e388]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e398]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e3a8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._10_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._11_Disabled_PatchGuard
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x50]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov eax, dword [rbp + 0x50]
dec eax
cmp eax, 0xa
ja case.default.0x14000fb60
cdqe
mov ecx, dword [r14 + rax*4 + 0x11e40]
add rcx, r14
jmp rcx
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011802
lea rcx, [rbp + 0x148]
mov edx, 0x222194
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
xor r9d, r9d
mov qword [rsp + 0x20], r13
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x14000fbdd
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x14000fee9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
jmp 0x14000fee9
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001183a
lea rcx, [rbp + 0x14c]
mov edx, 0x222198
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011872
lea rcx, [rbp + 0x150]
mov edx, 0x22219c
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400118aa
lea rcx, [rbp + 0x154]
mov edx, 0x2221a0
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400118e2
lea rcx, [rbp + 0x158]
mov edx, 0x2221a4
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001191a
lea rcx, [rbp + 0x15c]
mov edx, 0x2221c0
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011952
lea rcx, [rbp + 0x160]
mov edx, 0x2221c4
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x14001198a
lea rcx, [rbp + 0x164]
mov edx, 0x2221c8
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400119c2
lea rcx, [rbp + 0x168]
mov edx, 0x2221e4
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x1400119fa
lea rcx, [rbp + 0x16c]
mov edx, 0x222200
jmp 0x14000fba5
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011a32
lea rcx, [rbp + 0x170]
mov edx, 0x22221c
jmp 0x14000fba5
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x50], 0
jne 0x14000f990
cmp dword [rbp + 0x3c], 0
jne case.0x14000f1de.12
jmp 0x140010691
lea rcx, str.This_Module_Is_Disabled__n
call fcn.140001180
lea rdx, str.__WARNING__This_Module_Is_Disabled_
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x140010691
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_WHEA_UNCORRECTABLE_ERROR
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001e490]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x44]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x44]
sub ecx, 1
je 0x1400100ce
cmp ecx, 1
jne 0x1400100a6
lea rcx, str.0x00000001_tAPC_INDEX_MISMATCH_n0x00000002_tDEVICE_QUEUE_NOT_BUSY_n0x00000003_tINVALID_AFFINITY_SET_n0x00000004_tINVALID_DATA_ACCESS_TRAP_n0x00000005_tINVALID_PROCESS_ATTACH_ATTEMPT_n0x00000006_tINVALID_PROCESS_DETACH_ATTEMPT_n0x00000007_tINVALID_SOFTWARE_INTERRUPT_n0x00000008_tIRQL_NOT_DISPATCH_LEVEL_n0x00000009_tIRQL_NOT_GREATER_OR_EQUAL_n0x0000000A_tIRQL_NOT_LESS_OR_EQUAL_n0x0000000B_tNO_EXCEPTION_HANDLING_SUPPORT_n0x0000000C_tMAXIMUM_WAIT_OBJECTS_EXCEEDED_n0x0000000D_tMUTEX_LEVEL_NUMBER_VIOLATION_n0x0000000E_tNO_USER_MODE_CONTEXT_n0x0000000F_tSPIN_LOCK_ALREADY_OWNED_n0x00000010_tSPIN_LOCK_NOT_OWNED_n0x00000011_tTHREAD_NOT_MUTEX_OWNER_n0x00000012_tTRAP_CAUSE_UNKNOWN_n0x00000013_tEMPTY_THREAD_REAPER_LIST_n0x00000014_tCREATE_DELETE_LOCK_NOT_LOCKED_n0x00000015_tLAST_CHANCE_CALLED_FROM_KMODE_n0x00000016_tCID_HANDLE_CREATION_n0x00000017_tCID_HANDLE_DELETION_n0x00000018_tREFERENCE_BY_POINTER_n0x00000019_tBAD_POOL_HEADER_n0x0000001A_tMEMORY_MANAGEMENT_n0x0000001B_tPFN_SHARE_COUNT_n0x0000001C_tPFN_REFERENCE_COUNT_n0x0000001D_tNO_SPIN_LOCK_AVAILABLE_n0x0000001E_tKMODE_EXCEPTION_NOT_HANDLED_n0x0000001F_tSHARED_RESOURCE_CONV_ERROR_n0x00000020_tKERNEL_APC_PENDING_DURING_EXIT_n0x00000021_tQUOTA_UNDERFLOW_n0x00000022_tFILE_SYSTEM_n0x00000023_tFAT_FILE_SYSTEM_n0x00000024_tNTFS_FILE_SYSTEM_n0x00000025_tNPFS_FILE_SYSTEM_n0x00000026_tCDFS_FILE_SYSTEM_n0x00000027_tRDR_FILE_SYSTEM_n0x00000028_tCORRUPT_ACCESS_TOKEN_n0x00000029_tSECURITY_SYSTEM_n0x0000002A_tINCONSISTENT_IRP_n0x0000002B_tPANIC_STACK_SWITCH_n0x0000002C_tPORT_DRIVER_INTERNAL_n0x0000002D_tSCSI_DISK_DRIVER_INTERNAL_n0x0000002E_tDATA_BUS_ERROR_n0x0000002F_tINSTRUCTION_BUS_ERROR_n0x00000030_tSET_OF_INVALID_CONTEXT_n0x00000031_tPHASE0_INITIALIZATION_FAILED_n0x00000032_tPHASE1_INITIALIZATION_FAILED_n0x00000033_tUNEXPECTED_INITIALIZATION_CALL_n0x00000034_tCACHE_MANAGER_n0x00000035_tNO_MORE_IRP_STACK_LOCATIONS_n0x00000036_tDEVICE_REFERENCE_COUNT_NOT_ZERO_n0x00000037_tFLOPPY_INTERNAL_ERROR_n0x00000038_tSERIAL_DRIVER_INTERNAL_n0x00000039_tSYSTEM_EXIT_OWNED_MUTEX_n0x0000003A_tSYSTEM_UNWIND_PREVIOUS_USER_n0x0000003B_tSYSTEM_SERVICE_EXCEPTION_n0x0000003C_tINTERRUPT_UNWIND_ATTEMPTED_n0x0000003D_tINTERRUPT_EXCEPTION_NOT_HANDLED_n0x0000003E_tMULTIPROCESSOR_CONFIGURATION_NOT_SUPPORTED_n0x0000003F_tNO_MORE_SYSTEM_PTES_n0x00000040_tTARGET_MDL_TOO_SMALL_n0x00000041_tMUST_SUCCEED_POOL_EMPTY_n0x00000042_tATDISK_DRIVER_INTERNAL_n0x00000043_tNO_SUCH_PARTITION_n0x00000044_tMULTIPLE_IRP_COMPLETE_REQUESTS_n0x00000045_tINSUFFICIENT_SYSTEM_MAP_REGS_n0x00000046_tDEREF_UNKNOWN_LOGON_SESSION_n0x00000047_tREF_UNKNOWN_LOGON_SESSION_n0x00000048_tCANCEL_STATE_IN_COMPLETED_IRP_n0x00000049_tPAGE_FAULT_WITH_INTERRUPTS_OFF_n0x0000004A_tIRQL_GT_ZERO_AT_SYSTEM_SERVICE_n0x0000004B_tSTREAMS_INTERNAL_ERROR_n0x0000004C_tFATAL_UNHANDLED_HARD_ERROR_n0x0000004D_tNO_PAGES_AVAILABLE_n0x0000004E_tPFN_LIST_CORRUPT_n0x0000004F_tNDIS_INTERNAL_ERROR_n0x00000050_tPAGE_FAULT_IN_NONPAGED_AREA_n0x00000051_tREGISTRY_ERROR_n0x00000052_tMAILSLOT_FILE_SYSTEM_n0x00000053_tNO_BOOT_DEVICE_n0x00000054_tLM_SERVER_INTERNAL_ERROR_n0x00000055_tDATA_COHERENCY_EXCEPTION_n0x00000056_tINSTRUCTION_COHERENCY_EXCEPTION_n0x00000057_tXNS_INTERNAL_ERROR_n0x00000058_tFTDISK_INTERNAL_ERROR_n0x00000059_tPINBALL_FILE_SYSTEM_n0x0000005A_tCRITICAL_SERVICE_FAILED_n0x0000005B_tSET_ENV_VAR_FAILED_n0x0000005C_tHAL_INITIALIZATION_FAILED_n0x0000005D_tUNSUPPORTED_PROCESSOR_n0x0000005E_tOBJECT_INITIALIZATION_FAILED_n0x0000005F_tSECURITY_INITIALIZATION_FAILED_n0x00000060_tPROCESS_INITIALIZATION_FAILED_n0x00000061_tHAL1_INITIALIZATION_FAILED_n0x00000062_tOBJECT1_INITIALIZATION_FAILED_n0x00000063_tSECURITY1_INITIALIZATION_FAILED_n0x00000064_tSYMBOLIC_INITIALIZATION_FAILED_n0x00000065_tMEMORY1_INITIALIZATION_FAILED_n0x00000066_tCACHE_INITIALIZATION_FAILED_n0x00000067_tCONFIG_INITIALIZATION_FAILED_n0x00000068_tFILE_INITIALIZATION_FAILED_n0x00000069_tIO1_INITIALIZATION_FAILED_n0x0000006A_tLPC_INITIALIZATION_FAILED_n0x0000006B_tPROCESS1_INITIALIZATION_FAILED_n0x0000006C_tREFMON_INITIALIZATION_FAILED_n0x0000006D_tSESSION1_INITIALIZATION_FAILED_n0x0000006E_tSESSION2_INITIALIZATI
call fcn.1400011e0
movups xmm0, xmmword [str..KDriver]
movups xmmword [rsp + 0x70], xmm0
movsd xmm0, qword [0x14001bfd8]
movsd qword [rbp - 0x80], xmm0
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x140011a6a
lea rcx, str.Enter_Code_To_BSOD:
call fcn.140001180
lea rdx, [rbp + 0x40]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64____ptr64]
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x174]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
mov r9d, 4
lea r8, [rbp + 0x40]
mov edx, 0x222208
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140010089
mov edx, dword [rbp + 0x40]
lea rcx, str.Code__ld_BSOD_successfully._n
jmp 0x140010098
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14001015a
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011aaa
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0x178]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222098
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140010146
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x14001015a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
cmp dword [rbp + 0x44], 0
jne case.0x14000f1de.14
lea r14, [0x140000000]
jmp 0x140010691
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011ae2
lea rcx, [rbp + 0x17c]
mov edx, 0x2220dc
jmp 0x14000f223
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011b1a
lea rcx, [rbp + 0x180]
mov edx, 0x2220e0
jmp 0x14000f223
call fcn.14000afd0
jmp 0x140010691
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_Huorong_Sysdiag_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._2_Kaspersky
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x68]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x68]
sub ecx, 1
je 0x1400103f0
cmp ecx, 1
je 0x1400102d0
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140010662
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140021b58]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x48]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
cmp dword [rbp + 0x48], 1
je 0x140010355
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x1400103e1
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011b52
mov qword [rsp + 0x38], r13
lea rcx, [rbp + 0x184]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov edx, 0x222260
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x1400103cd
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x1400103e1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
cmp dword [rbp + 0x48], 0
jne 0x1400102d0
jmp 0x140010662
lea rdx, str._0_EXIT
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._1_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140021b10]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x140021b28]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str._4_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x4c]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov ecx, dword [rbp + 0x4c]
sub ecx, 1
je 0x1400105cc
sub ecx, 1
je 0x140010587
sub ecx, 1
je 0x14001053f
cmp ecx, 1
je 0x1400104f7
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140010658
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011b8a
lea rcx, [rbp + 0x188]
mov edx, 0x22225c
jmp 0x14001060f
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011bc2
lea rcx, [rbp + 0x18c]
mov edx, 0x222258
jmp 0x14001060f
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011bfa
lea rcx, [rbp + 0x190]
mov edx, 0x222254
jmp 0x14001060f
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, str..KDriver
call qword [sym.imp.KERNEL32.dll_CreateFileW]
cmp rax, 0xffffffffffffffff
je 0x140011c32
lea rcx, [rbp + 0x194]
mov edx, 0x222250
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x140010644
lea rcx, str.successfully._n
call fcn.140001180
jmp 0x140010658
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed._Error__ld_n
call fcn.140001180
cmp dword [rbp + 0x4c], 0
jne 0x1400103f0
cmp dword [rbp + 0x68], 0
jne case.0x14000f1de.18
jmp 0x140010691
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x54], 0
jne case.0x14000b799.29
jmp 0x1400106c0
lea rdx, [0x14001dd80]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400148d0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
cmp dword [rbp + 0x58], 0
jne 0x14000b346
mov r12d, r13d
lea rcx, [rbp + 0x1a8]
call fcn.140001d70
mov eax, r12d
mov rcx, qword [rbp + 0x5e0]
xor rcx, rsp
call fcn.140018b40
lea r11, [rsp + 0x6f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rbp - 0x68]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rbp - 0x68]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rdx, str.Failed_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400148d0
mov rcx, rax
lea rdx, [rsp + 0x48]
call fcn.1400148b0
lea rdx, [0x140014ab0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x1d0]
call fcn.140003380
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.Failed_to_open_device._Error__ld_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd
lea rcx, str.Failed_to_open_device_n
call fcn.140001180
lea rdx, str.__FAILED___Failed_To_Open_Driver
lea rcx, [rsp + 0x48]
call fcn.140013640
nop
lea rcx, [rsp + 0x48]
call fcn.140006900
nop
lea rcx, [rsp + 0x48]
call fcn.1400135b0
jmp 0x1400106cd