140003e9f:	48 89 84 24 60 03 00 	mov    %rax,0x360(%rsp)
140003ea6:	00
140003ea7:	c7 84 24 b8 02 00 00 	movl   $0x74726f50,0x2b8(%rsp)
140003eae:	50 6f 72 74
140003eb2:	48 c7 84 24 a8 02 00 	movq   $0xc,0x2a8(%rsp)
140003eb9:	00 0c 00 00 00
140003ebe:	c6 84 24 bc 02 00 00 	movb   $0x0,0x2bc(%rsp)
140003ec5:	00
140003ec6:	c6 84 24 d8 02 00 00 	movb   $0x31,0x2d8(%rsp)
140003ecd:	31
140003ece:	48 c7 84 24 c8 02 00 	movq   $0x9,0x2c8(%rsp)
140003ed5:	00 09 00 00 00
140003eda:	c6 84 24 d9 02 00 00 	movb   $0x0,0x2d9(%rsp)
140003ee1:	00
140003ee2:	c6 84 24 f8 02 00 00 	movb   $0x32,0x2f8(%rsp)
140003ee9:	32
140003eea:	48 c7 84 24 e8 02 00 	movq   $0x9,0x2e8(%rsp)
140003ef1:	00 09 00 00 00
140003ef6:	c6 84 24 f9 02 00 00 	movb   $0x0,0x2f9(%rsp)
140003efd:	00
140003efe:	c6 84 24 18 03 00 00 	movb   $0x33,0x318(%rsp)
140003f05:	33
140003f06:	48 c7 84 24 08 03 00 	movq   $0x9,0x308(%rsp)
140003f0d:	00 09 00 00 00
140003f12:	c6 84 24 19 03 00 00 	movb   $0x0,0x319(%rsp)
140003f19:	00
140003f1a:	c6 84 24 38 03 00 00 	movb   $0x34,0x338(%rsp)
140003f21:	34
140003f22:	48 c7 84 24 28 03 00 	movq   $0x9,0x328(%rsp)
140003f29:	00 09 00 00 00
140003f2e:	c6 84 24 39 03 00 00 	movb   $0x0,0x339(%rsp)
140003f35:	00
140003f36:	c7 84 24 58 03 00 00 	movl   $0x6e6f6974,0x358(%rsp)
140003f3d:	74 69 6f 6e
140003f41:	48 c7 84 24 48 03 00 	movq   $0xc,0x348(%rsp)
140003f48:	00 0c 00 00 00
140003f4d:	c6 84 24 5c 03 00 00 	movb   $0x0,0x35c(%rsp)
140003f54:	00
140003f55:	c7 84 24 70 03 00 00 	movl   $0x656c6946,0x370(%rsp)
140003f5c:	46 69 6c 65
140003f60:	48 c7 84 24 68 03 00 	movq   $0x4,0x368(%rsp)
140003f67:	00 04 00 00 00
140003f6c:	c6 84 24 74 03 00 00 	movb   $0x0,0x374(%rsp)
140003f73:	00
140003f74:	66 45 89 04 24       	mov    %r8w,(%r12)
140003f79:	e8 3a 1f 00 00       	call   140005eb8 <.text+0x4eb8>
140003f7e:	48 89 c5             	mov    %rax,%rbp
140003f81:	eb 2e                	jmp    140003fb1 <.text+0x2fb1>
140003f83:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
140003f8a:	00 00 00 00
140003f8e:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
140003f95:	00 00 00 00
140003f99:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
140003fa0:	83 c6 01             	add    $0x1,%esi
140003fa3:	48 83 c3 20          	add    $0x20,%rbx
140003fa7:	66 83 fe 1b          	cmp    $0x1b,%si
140003fab:	0f 84 87 00 00 00    	je     140004038 <.text+0x3038>
140003fb1:	48 39 6b 08          	cmp    %rbp,0x8(%rbx)
140003fb5:	75 e9                	jne    140003fa0 <.text+0x2fa0>
140003fb7:	48 85 ed             	test   %rbp,%rbp
140003fba:	74 12                	je     140003fce <.text+0x2fce>
140003fbc:	48 8b 0b             	mov    (%rbx),%rcx
140003fbf:	49 89 e8             	mov    %rbp,%r8
140003fc2:	4c 89 ea             	mov    %r13,%rdx
140003fc5:	e8 ce 1e 00 00       	call   140005e98 <.text+0x4e98>
140003fca:	85 c0                	test   %eax,%eax
140003fcc:	75 d2                	jne    140003fa0 <.text+0x2fa0>
140003fce:	66 41 89 34 24       	mov    %si,(%r12)
140003fd3:	bd 01 00 00 00       	mov    $0x1,%ebp
140003fd8:	48 8d 9c 24 80 03 00 	lea    0x380(%rsp),%rbx
140003fdf:	00
140003fe0:	48 8d 74 24 20       	lea    0x20(%rsp),%rsi
140003fe5:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
140003fec:	00 00 00 00
140003ff0:	48 83 eb 20          	sub    $0x20,%rbx
140003ff4:	48 8b 0b             	mov    (%rbx),%rcx
140003ff7:	48 8d 43 10          	lea    0x10(%rbx),%rax
140003ffb:	48 39 c1             	cmp    %rax,%rcx
140003ffe:	74 0d                	je     14000400d <.text+0x300d>
140004000:	48 8b 43 10          	mov    0x10(%rbx),%rax
140004004:	48 8d 50 01          	lea    0x1(%rax),%rdx
140004008:	e8 db 1e 00 00       	call   140005ee8 <.text+0x4ee8>
14000400d:	48 39 f3             	cmp    %rsi,%rbx
140004010:	75 de                	jne    140003ff0 <.text+0x2ff0>
140004012:	48 8b 84 24 88 03 00 	mov    0x388(%rsp),%rax
140004019:	00
14000401a:	48 2b 07             	sub    (%rdi),%rax
14000401d:	75 1d                	jne    14000403c <.text+0x303c>
14000401f:	89 e8                	mov    %ebp,%eax
140004021:	48 81 c4 98 03 00 00 	add    $0x398,%rsp
140004028:	5b                   	pop    %rbx
140004029:	5e                   	pop    %rsi
14000402a:	5f                   	pop    %rdi
14000402b:	5d                   	pop    %rbp
14000402c:	41 5c                	pop    %r12
14000402e:	41 5d                	pop    %r13
140004030:	c3                   	ret
140004031:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
140004038:	31 ed                	xor    %ebp,%ebp
14000403a:	eb 9c                	jmp    140003fd8 <.text+0x2fd8>
14000403c:	e8 6f 30 00 00       	call   1400070b0 <.text+0x60b0>
140004041:	90                   	nop
140004042:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
140004049:	00 00 00 00
14000404d:	0f 1f 00             	nopl   (%rax)
140004050:	55                   	push   %rbp
140004051:	57                   	push   %rdi
140004052:	56                   	push   %rsi
140004053:	53                   	push   %rbx
140004054:	48 83 ec 58          	sub    $0x58,%rsp
140004058:	48 8b 3d 81 be 00 00 	mov    0xbe81(%rip),%rdi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
14000405f:	31 c0                	xor    %eax,%eax
140004061:	48 8b 1f             	mov    (%rdi),%rbx
140004064:	48 89 5c 24 48       	mov    %rbx,0x48(%rsp)
140004069:	48 8d 5c 24 20       	lea    0x20(%rsp),%rbx
14000406e:	66 89 02             	mov    %ax,(%rdx)
140004071:	48 89 d6             	mov    %rdx,%rsi
140004074:	48 8d 6c 24 30       	lea    0x30(%rsp),%rbp
140004079:	48 89 6c 24 20       	mov    %rbp,0x20(%rsp)
14000407e:	48 c7 44 24 28 00 00 	movq   $0x0,0x28(%rsp)
140004085:	00 00
140004087:	c6 44 24 30 00       	movb   $0x0,0x30(%rsp)
14000408c:	48 89 da             	mov    %rbx,%rdx
14000408f:	e8 4c f3 ff ff       	call   1400033e0 <.text+0x23e0>
140004094:	89 c3                	mov    %eax,%ebx
140004096:	85 c0                	test   %eax,%eax
140004098:	74 0f                	je     1400040a9 <.text+0x30a9>
14000409a:	48 8b 4c 24 20       	mov    0x20(%rsp),%rcx
14000409f:	48 89 f2             	mov    %rsi,%rdx
1400040a2:	e8 c9 f8 ff ff       	call   140003970 <.text+0x2970>
1400040a7:	89 c3                	mov    %eax,%ebx
1400040a9:	48 8b 4c 24 20       	mov    0x20(%rsp),%rcx
1400040ae:	48 39 e9             	cmp    %rbp,%rcx
1400040b1:	74 0e                	je     1400040c1 <.text+0x30c1>
1400040b3:	48 8b 44 24 30       	mov    0x30(%rsp),%rax
1400040b8:	48 8d 50 01          	lea    0x1(%rax),%rdx
1400040bc:	e8 27 1e 00 00       	call   140005ee8 <.text+0x4ee8>
1400040c1:	48 8b 44 24 48       	mov    0x48(%rsp),%rax
1400040c6:	48 2b 07             	sub    (%rdi),%rax
1400040c9:	75 20                	jne    1400040eb <.text+0x30eb>
1400040cb:	89 d8                	mov    %ebx,%eax
1400040cd:	48 83 c4 58          	add    $0x58,%rsp
1400040d1:	5b                   	pop    %rbx
1400040d2:	5e                   	pop    %rsi
1400040d3:	5f                   	pop    %rdi
1400040d4:	5d                   	pop    %rbp
1400040d5:	c3                   	ret
1400040d6:	48 89 d9             	mov    %rbx,%rcx
1400040d9:	48 89 c6             	mov    %rax,%rsi
1400040dc:	e8 7f 1e 00 00       	call   140005f60 <.text+0x4f60>
1400040e1:	48 8b 44 24 48       	mov    0x48(%rsp),%rax
1400040e6:	48 2b 07             	sub    (%rdi),%rax
1400040e9:	74 05                	je     1400040f0 <.text+0x30f0>
1400040eb:	e8 c0 2f 00 00       	call   1400070b0 <.text+0x60b0>
1400040f0:	48 89 f1             	mov    %rsi,%rcx
1400040f3:	e8 68 2f 00 00       	call   140007060 <.text+0x6060>
1400040f8:	90                   	nop
1400040f9:	90                   	nop
1400040fa:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
140004100:	41 54                	push   %r12
140004102:	55                   	push   %rbp
140004103:	57                   	push   %rdi
140004104:	56                   	push   %rsi
140004105:	53                   	push   %rbx
140004106:	48 83 ec 70          	sub    $0x70,%rsp
14000410a:	48 8b 35 cf bd 00 00 	mov    0xbdcf(%rip),%rsi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
140004111:	48 8b 06             	mov    (%rsi),%rax
140004114:	48 89 44 24 68       	mov    %rax,0x68(%rsp)
140004119:	31 c0                	xor    %eax,%eax
14000411b:	48 89 d7             	mov    %rdx,%rdi
14000411e:	48 89 cd             	mov    %rcx,%rbp
140004121:	44 89 c3             	mov    %r8d,%ebx
140004124:	ff 15 76 03 01 00    	call   *0x10376(%rip)        # 1400144a0 <__imp_GetCurrentProcessId>
14000412a:	8b 15 00 ef 00 00    	mov    0xef00(%rip),%edx        # 140013030 <_head_lib64_libadvapi32_a-0xfd0>
140004130:	85 d2                	test   %edx,%edx
140004132:	0f 84 d8 00 00 00    	je     140004210 <.text+0x3210>
140004138:	39 d8                	cmp    %ebx,%eax
14000413a:	75 34                	jne    140004170 <.text+0x3170>
14000413c:	31 d2                	xor    %edx,%edx
14000413e:	41 b9 1c 00 00 00    	mov    $0x1c,%r9d
140004144:	4c 8d 44 24 40       	lea    0x40(%rsp),%r8
140004149:	48 89 e9             	mov    %rbp,%rcx
14000414c:	48 c7 44 24 20 00 00 	movq   $0x0,0x20(%rsp)
140004153:	00 00
140004155:	ff 15 ed ee 00 00    	call   *0xeeed(%rip)        # 140013048 <_head_lib64_libadvapi32_a-0xfb8>
14000415b:	85 c0                	test   %eax,%eax
14000415d:	0f 85 a6 00 00 00    	jne    140004209 <.text+0x3209>
140004163:	8b 44 24 4c          	mov    0x4c(%rsp),%eax
140004167:	89 07                	mov    %eax,(%rdi)
140004169:	e9 9b 00 00 00       	jmp    140004209 <.text+0x3209>
14000416e:	66 90                	xchg   %ax,%ax
140004170:	41 89 d8             	mov    %ebx,%r8d
140004173:	ba 01 00 00 00       	mov    $0x1,%edx
140004178:	b9 40 00 00 00       	mov    $0x40,%ecx
14000417d:	ff 15 85 03 01 00    	call   *0x10385(%rip)        # 140014508 <__imp_OpenProcess>
140004183:	48 89 c3             	mov    %rax,%rbx
140004186:	48 85 c0             	test   %rax,%rax
140004189:	0f 84 81 00 00 00    	je     140004210 <.text+0x3210>
14000418f:	48 c7 44 24 40 00 00 	movq   $0x0,0x40(%rsp)
140004196:	00 00
140004198:	4c 8d 64 24 40       	lea    0x40(%rsp),%r12
14000419d:	ff 15 f5 02 01 00    	call   *0x102f5(%rip)        # 140014498 <__imp_GetCurrentProcess>
1400041a3:	48 89 ea             	mov    %rbp,%rdx
1400041a6:	4d 89 e1             	mov    %r12,%r9
1400041a9:	48 89 d9             	mov    %rbx,%rcx
1400041ac:	49 89 c0             	mov    %rax,%r8
1400041af:	c7 44 24 30 02 00 00 	movl   $0x2,0x30(%rsp)
1400041b6:	00
1400041b7:	c7 44 24 28 00 00 00 	movl   $0x0,0x28(%rsp)
1400041be:	00
1400041bf:	c7 44 24 20 00 00 00 	movl   $0x0,0x20(%rsp)
1400041c6:	00
1400041c7:	ff 15 b3 02 01 00    	call   *0x102b3(%rip)        # 140014480 <__imp_DuplicateHandle>
1400041cd:	48 8b 6c 24 40       	mov    0x40(%rsp),%rbp
1400041d2:	31 d2                	xor    %edx,%edx
1400041d4:	4d 89 e0             	mov    %r12,%r8
1400041d7:	48 c7 44 24 20 00 00 	movq   $0x0,0x20(%rsp)
1400041de:	00 00
1400041e0:	41 b9 1c 00 00 00    	mov    $0x1c,%r9d
1400041e6:	48 89 e9             	mov    %rbp,%rcx
1400041e9:	ff 15 59 ee 00 00    	call   *0xee59(%rip)        # 140013048 <_head_lib64_libadvapi32_a-0xfb8>
1400041ef:	85 c0                	test   %eax,%eax
1400041f1:	74 3d                	je     140004230 <.text+0x3230>
1400041f3:	48 89 d9             	mov    %rbx,%rcx
1400041f6:	48 8b 1d 73 02 01 00 	mov    0x10273(%rip),%rbx        # 140014470 <__imp_CloseHandle>
1400041fd:	ff d3                	call   *%rbx
1400041ff:	48 85 ed             	test   %rbp,%rbp
140004202:	74 05                	je     140004209 <.text+0x3209>
140004204:	48 89 e9             	mov    %rbp,%rcx
140004207:	ff d3                	call   *%rbx
140004209:	b8 01 00 00 00       	mov    $0x1,%eax
14000420e:	eb 02                	jmp    140004212 <.text+0x3212>
140004210:	31 c0                	xor    %eax,%eax
140004212:	48 8b 54 24 68       	mov    0x68(%rsp),%rdx
140004217:	48 2b 16             	sub    (%rsi),%rdx
14000421a:	75 1c                	jne    140004238 <.text+0x3238>
14000421c:	48 83 c4 70          	add    $0x70,%rsp
140004220:	5b                   	pop    %rbx
140004221:	5e                   	pop    %rsi
140004222:	5f                   	pop    %rdi
140004223:	5d                   	pop    %rbp
140004224:	41 5c                	pop    %r12
140004226:	c3                   	ret
140004227:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
14000422e:	00 00
140004230:	8b 44 24 4c          	mov    0x4c(%rsp),%eax
140004234:	89 07                	mov    %eax,(%rdi)
140004236:	eb bb                	jmp    1400041f3 <.text+0x31f3>
140004238:	e8 73 2e 00 00       	call   1400070b0 <.text+0x60b0>
14000423d:	90                   	nop
14000423e:	66 90                	xchg   %ax,%ax
140004240:	41 55                	push   %r13
140004242:	41 54                	push   %r12
140004244:	55                   	push   %rbp
140004245:	57                   	push   %rdi
140004246:	56                   	push   %rsi
140004247:	53                   	push   %rbx
140004248:	48 81 ec 88 00 00 00 	sub    $0x88,%rsp
14000424f:	48 8b 3d 8a bc 00 00 	mov    0xbc8a(%rip),%rdi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
140004256:	48 89 d3             	mov    %rdx,%rbx
140004259:	48 89 cd             	mov    %rcx,%rbp
14000425c:	4c 8d 6c 24 50       	lea    0x50(%rsp),%r13
140004261:	44 89 c6             	mov    %r8d,%esi
140004264:	48 8b 07             	mov    (%rdi),%rax
140004267:	48 89 44 24 78       	mov    %rax,0x78(%rsp)
14000426c:	31 c0                	xor    %eax,%eax
14000426e:	ff 15 2c 02 01 00    	call   *0x1022c(%rip)        # 1400144a0 <__imp_GetCurrentProcessId>
140004274:	8b 15 b6 ed 00 00    	mov    0xedb6(%rip),%edx        # 140013030 <_head_lib64_libadvapi32_a-0xfd0>
14000427a:	66 0f ef c0          	pxor   %xmm0,%xmm0
14000427e:	c7 03 00 00 00 00    	movl   $0x0,(%rbx)
140004284:	0f 11 44 24 50       	movups %xmm0,0x50(%rsp)
140004289:	0f 11 44 24 60       	movups %xmm0,0x60(%rsp)
14000428e:	85 d2                	test   %edx,%edx
140004290:	74 29                	je     1400042bb <.text+0x32bb>
140004292:	39 f0                	cmp    %esi,%eax
140004294:	75 4a                	jne    1400042e0 <.text+0x32e0>
140004296:	31 d2                	xor    %edx,%edx
140004298:	41 b9 20 00 00 00    	mov    $0x20,%r9d
14000429e:	4d 89 e8             	mov    %r13,%r8
1400042a1:	48 89 e9             	mov    %rbp,%rcx
1400042a4:	48 c7 44 24 20 00 00 	movq   $0x0,0x20(%rsp)
1400042ab:	00 00
1400042ad:	ff 15 85 ed 00 00    	call   *0xed85(%rip)        # 140013038 <_head_lib64_libadvapi32_a-0xfc8>
1400042b3:	85 c0                	test   %eax,%eax
1400042b5:	0f 84 c5 00 00 00    	je     140004380 <.text+0x3380>
1400042bb:	31 f6                	xor    %esi,%esi
1400042bd:	48 8b 44 24 78       	mov    0x78(%rsp),%rax
1400042c2:	48 2b 07             	sub    (%rdi),%rax
1400042c5:	0f 85 d2 00 00 00    	jne    14000439d <.text+0x339d>
1400042cb:	89 f0                	mov    %esi,%eax
1400042cd:	48 81 c4 88 00 00 00 	add    $0x88,%rsp
1400042d4:	5b                   	pop    %rbx
1400042d5:	5e                   	pop    %rsi
1400042d6:	5f                   	pop    %rdi
1400042d7:	5d                   	pop    %rbp
1400042d8:	41 5c                	pop    %r12
1400042da:	41 5d                	pop    %r13
1400042dc:	c3                   	ret
1400042dd:	0f 1f 00             	nopl   (%rax)
1400042e0:	41 89 f0             	mov    %esi,%r8d
1400042e3:	ba 01 00 00 00       	mov    $0x1,%edx
1400042e8:	b9 40 00 00 00       	mov    $0x40,%ecx
1400042ed:	ff 15 15 02 01 00    	call   *0x10215(%rip)        # 140014508 <__imp_OpenProcess>
1400042f3:	49 89 c4             	mov    %rax,%r12
1400042f6:	48 85 c0             	test   %rax,%rax
1400042f9:	74 c0                	je     1400042bb <.text+0x32bb>
1400042fb:	48 c7 44 24 48 00 00 	movq   $0x0,0x48(%rsp)
140004302:	00 00
140004304:	31 f6                	xor    %esi,%esi
140004306:	ff 15 8c 01 01 00    	call   *0x1018c(%rip)        # 140014498 <__imp_GetCurrentProcess>
14000430c:	48 89 ea             	mov    %rbp,%rdx
14000430f:	4c 8d 4c 24 48       	lea    0x48(%rsp),%r9
140004314:	4c 89 e1             	mov    %r12,%rcx
140004317:	49 89 c0             	mov    %rax,%r8
14000431a:	c7 44 24 30 02 00 00 	movl   $0x2,0x30(%rsp)
140004321:	00
140004322:	c7 44 24 28 00 00 00 	movl   $0x0,0x28(%rsp)
140004329:	00
14000432a:	c7 44 24 20 00 00 00 	movl   $0x0,0x20(%rsp)
140004331:	00
140004332:	ff 15 48 01 01 00    	call   *0x10148(%rip)        # 140014480 <__imp_DuplicateHandle>
140004338:	48 8b 6c 24 48       	mov    0x48(%rsp),%rbp
14000433d:	4d 89 e8             	mov    %r13,%r8
140004340:	31 d2                	xor    %edx,%edx
140004342:	48 c7 44 24 20 00 00 	movq   $0x0,0x20(%rsp)
140004349:	00 00
14000434b:	41 b9 20 00 00 00    	mov    $0x20,%r9d
140004351:	48 89 e9             	mov    %rbp,%rcx
140004354:	ff 15 de ec 00 00    	call   *0xecde(%rip)        # 140013038 <_head_lib64_libadvapi32_a-0xfc8>
14000435a:	85 c0                	test   %eax,%eax
14000435c:	74 32                	je     140004390 <.text+0x3390>
14000435e:	48 8b 1d 0b 01 01 00 	mov    0x1010b(%rip),%rbx        # 140014470 <__imp_CloseHandle>
140004365:	4c 89 e1             	mov    %r12,%rcx
140004368:	ff d3                	call   *%rbx
14000436a:	48 85 ed             	test   %rbp,%rbp
14000436d:	0f 84 4a ff ff ff    	je     1400042bd <.text+0x32bd>
140004373:	48 89 e9             	mov    %rbp,%rcx
140004376:	ff d3                	call   *%rbx
140004378:	e9 40 ff ff ff       	jmp    1400042bd <.text+0x32bd>
14000437d:	0f 1f 00             	nopl   (%rax)
140004380:	8b 44 24 68          	mov    0x68(%rsp),%eax
140004384:	be 01 00 00 00       	mov    $0x1,%esi
140004389:	89 03                	mov    %eax,(%rbx)
14000438b:	e9 2d ff ff ff       	jmp    1400042bd <.text+0x32bd>
140004390:	8b 44 24 68          	mov    0x68(%rsp),%eax
140004394:	be 01 00 00 00       	mov    $0x1,%esi
140004399:	89 03                	mov    %eax,(%rbx)
14000439b:	eb c1                	jmp    14000435e <.text+0x335e>
14000439d:	e8 0e 2d 00 00       	call   1400070b0 <.text+0x60b0>
1400043a2:	90                   	nop