140002e86:	41 54                	push   %r12
140002e88:	55                   	push   %rbp
140002e89:	57                   	push   %rdi
140002e8a:	56                   	push   %rsi
140002e8b:	53                   	push   %rbx
140002e8c:	48 83 ec 58          	sub    $0x58,%rsp
140002e90:	48 8b 3d 49 d0 00 00 	mov    0xd049(%rip),%rdi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
140002e97:	48 8b 37             	mov    (%rdi),%rsi
140002e9a:	48 89 74 24 48       	mov    %rsi,0x48(%rsp)
140002e9f:	48 8b 71 18          	mov    0x18(%rcx),%rsi
140002ea3:	48 89 cb             	mov    %rcx,%rbx
140002ea6:	48 85 f6             	test   %rsi,%rsi
140002ea9:	74 1f                	je     140002eca <.text+0x1eca>
140002eab:	48 8b 4e 18          	mov    0x18(%rsi),%rcx
140002eaf:	e8 cc f6 ff ff       	call   140002580 <.text+0x1580>
140002eb4:	48 89 f1             	mov    %rsi,%rcx
140002eb7:	48 8b 76 10          	mov    0x10(%rsi),%rsi
140002ebb:	ba 30 00 00 00       	mov    $0x30,%edx
140002ec0:	e8 23 30 00 00       	call   140005ee8 <.text+0x4ee8>
140002ec5:	48 85 f6             	test   %rsi,%rsi
140002ec8:	75 e1                	jne    140002eab <.text+0x1eab>
140002eca:	8b 05 60 01 01 00    	mov    0x10160(%rip),%eax        # 140013030 <_head_lib64_libadvapi32_a-0xfd0>
140002ed0:	48 8d 73 10          	lea    0x10(%rbx),%rsi
140002ed4:	48 c7 43 18 00 00 00 	movq   $0x0,0x18(%rbx)
140002edb:	00
140002edc:	48 89 73 20          	mov    %rsi,0x20(%rbx)
140002ee0:	48 89 73 28          	mov    %rsi,0x28(%rbx)
140002ee4:	48 c7 43 30 00 00 00 	movq   $0x0,0x30(%rbx)
140002eeb:	00
140002eec:	48 c7 43 38 00 00 00 	movq   $0x0,0x38(%rbx)
140002ef3:	00
140002ef4:	85 c0                	test   %eax,%eax
140002ef6:	0f 84 01 02 00 00    	je     1400030fd <.text+0x20fd>
140002efc:	48 8b 53 48          	mov    0x48(%rbx),%rdx
140002f00:	48 85 d2             	test   %rdx,%rdx
140002f03:	0f 84 f4 01 00 00    	je     1400030fd <.text+0x20fd>
140002f09:	4c 8b 25 38 16 01 00 	mov    0x11638(%rip),%r12        # 140014548 <__imp_VirtualFree>
140002f10:	48 8b 3d 29 16 01 00 	mov    0x11629(%rip),%rdi        # 140014540 <__imp_VirtualAlloc>
140002f17:	eb 4a                	jmp    140002f63 <.text+0x1f63>
140002f19:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
140002f20:	3d 04 00 00 c0       	cmp    $0xc0000004,%eax
140002f25:	0f 85 b5 01 00 00    	jne    1400030e0 <.text+0x20e0>
140002f2b:	48 8b 4b 48          	mov    0x48(%rbx),%rcx
140002f2f:	41 b8 00 80 00 00    	mov    $0x8000,%r8d
140002f35:	31 d2                	xor    %edx,%edx
140002f37:	41 ff d4             	call   *%r12
140002f3a:	8b 43 40             	mov    0x40(%rbx),%eax
140002f3d:	41 b9 04 00 00 00    	mov    $0x4,%r9d
140002f43:	31 c9                	xor    %ecx,%ecx
140002f45:	41 b8 00 10 00 00    	mov    $0x1000,%r8d
140002f4b:	8d 14 00             	lea    (%rax,%rax,1),%edx
140002f4e:	89 53 40             	mov    %edx,0x40(%rbx)
140002f51:	ff d7                	call   *%rdi
140002f53:	48 89 43 48          	mov    %rax,0x48(%rbx)
140002f57:	48 89 c2             	mov    %rax,%rdx
140002f5a:	48 85 c0             	test   %rax,%rax
140002f5d:	0f 84 5d 02 00 00    	je     1400031c0 <.text+0x21c0>
140002f63:	44 8b 43 40          	mov    0x40(%rbx),%r8d
140002f67:	45 31 c9             	xor    %r9d,%r9d
140002f6a:	b9 05 00 00 00       	mov    $0x5,%ecx
140002f6f:	ff 15 e3 00 01 00    	call   *0x100e3(%rip)        # 140013058 <_head_lib64_libadvapi32_a-0xfa8>
140002f75:	41 89 c5             	mov    %eax,%r13d
140002f78:	85 c0                	test   %eax,%eax
140002f7a:	75 a4                	jne    140002f20 <.text+0x1f20>
140002f7c:	ff 15 1e 15 01 00    	call   *0x1151e(%rip)        # 1400144a0 <__imp_GetCurrentProcessId>
140002f82:	4c 8b 7b 48          	mov    0x48(%rbx),%r15
140002f86:	4c 8d 63 08          	lea    0x8(%rbx),%r12
140002f8a:	89 c7                	mov    %eax,%edi
140002f8c:	48 8d 44 24 30       	lea    0x30(%rsp),%rax
140002f91:	48 89 44 24 28       	mov    %rax,0x28(%rsp)
140002f96:	4d 8b 47 50          	mov    0x50(%r15),%r8
140002f9a:	48 8b 43 18          	mov    0x18(%rbx),%rax
140002f9e:	45 89 c5             	mov    %r8d,%r13d
140002fa1:	48 85 c0             	test   %rax,%rax
140002fa4:	0f 84 e1 00 00 00    	je     14000308b <.text+0x208b>
140002faa:	66 0f 1f 44 00 00    	nopw   0x0(%rax,%rax,1)
140002fb0:	49 89 f6             	mov    %rsi,%r14
140002fb3:	eb 16                	jmp    140002fcb <.text+0x1fcb>
140002fb5:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
140002fbc:	00 00 00 00
140002fc0:	49 89 c6             	mov    %rax,%r14
140002fc3:	48 89 c8             	mov    %rcx,%rax
140002fc6:	48 85 c0             	test   %rax,%rax
140002fc9:	74 16                	je     140002fe1 <.text+0x1fe1>
140002fcb:	48 8b 48 10          	mov    0x10(%rax),%rcx
140002fcf:	48 8b 50 18          	mov    0x18(%rax),%rdx
140002fd3:	44 39 68 20          	cmp    %r13d,0x20(%rax)
140002fd7:	73 e7                	jae    140002fc0 <.text+0x1fc0>
140002fd9:	48 89 d0             	mov    %rdx,%rax
140002fdc:	48 85 c0             	test   %rax,%rax
140002fdf:	75 ea                	jne    140002fcb <.text+0x1fcb>
140002fe1:	49 39 f6             	cmp    %rsi,%r14
140002fe4:	0f 84 a1 00 00 00    	je     14000308b <.text+0x208b>
140002fea:	45 3b 6e 20          	cmp    0x20(%r14),%r13d
140002fee:	73 6c                	jae    14000305c <.text+0x205c>
140002ff0:	b9 30 00 00 00       	mov    $0x30,%ecx
140002ff5:	e8 de 2e 00 00       	call   140005ed8 <.text+0x4ed8>
140002ffa:	44 89 68 20          	mov    %r13d,0x20(%rax)
140002ffe:	48 89 c5             	mov    %rax,%rbp
140003001:	48 c7 40 28 00 00 00 	movq   $0x0,0x28(%rax)
140003008:	00
140003009:	41 8b 46 20          	mov    0x20(%r14),%eax
14000300d:	41 39 c5             	cmp    %eax,%r13d
140003010:	0f 83 1a 01 00 00    	jae    140003130 <.text+0x2130>
140003016:	4c 3b 73 20          	cmp    0x20(%rbx),%r14
14000301a:	74 20                	je     14000303c <.text+0x203c>
14000301c:	4c 89 f1             	mov    %r14,%rcx
14000301f:	e8 ec 2e 00 00       	call   140005f10 <.text+0x4f10>
140003024:	49 89 c0             	mov    %rax,%r8
140003027:	44 39 68 20          	cmp    %r13d,0x20(%rax)
14000302b:	0f 83 7f 01 00 00    	jae    1400031b0 <.text+0x21b0>
140003031:	48 83 78 18 00       	cmpq   $0x0,0x18(%rax)
140003036:	0f 84 bc 01 00 00    	je     1400031f8 <.text+0x21f8>
14000303c:	4d 89 f0             	mov    %r14,%r8
14000303f:	49 89 ee             	mov    %rbp,%r14
140003042:	b9 01 00 00 00       	mov    $0x1,%ecx
140003047:	49 89 f1             	mov    %rsi,%r9
14000304a:	4c 89 f2             	mov    %r14,%rdx
14000304d:	e8 a6 2e 00 00       	call   140005ef8 <.text+0x4ef8>
140003052:	49 83 44 24 28 01    	addq   $0x1,0x28(%r12)
140003058:	4d 8b 47 50          	mov    0x50(%r15),%r8
14000305c:	4d 89 7e 28          	mov    %r15,0x28(%r14)
140003060:	49 39 f8             	cmp    %rdi,%r8
140003063:	75 04                	jne    140003069 <.text+0x2069>
140003065:	4c 89 7b 38          	mov    %r15,0x38(%rbx)
140003069:	41 8b 07             	mov    (%r15),%eax
14000306c:	85 c0                	test   %eax,%eax
14000306e:	0f 84 b4 00 00 00    	je     140003128 <.text+0x2128>
140003074:	49 01 c7             	add    %rax,%r15
140003077:	48 8b 43 18          	mov    0x18(%rbx),%rax
14000307b:	4d 8b 47 50          	mov    0x50(%r15),%r8
14000307f:	45 89 c5             	mov    %r8d,%r13d
140003082:	48 85 c0             	test   %rax,%rax
140003085:	0f 85 25 ff ff ff    	jne    140002fb0 <.text+0x1fb0>
14000308b:	b9 30 00 00 00       	mov    $0x30,%ecx
140003090:	e8 43 2e 00 00       	call   140005ed8 <.text+0x4ed8>
140003095:	48 83 7b 30 00       	cmpq   $0x0,0x30(%rbx)
14000309a:	44 89 68 20          	mov    %r13d,0x20(%rax)
14000309e:	49 89 c6             	mov    %rax,%r14
1400030a1:	48 89 c5             	mov    %rax,%rbp
1400030a4:	48 c7 40 28 00 00 00 	movq   $0x0,0x28(%rax)
1400030ab:	00
1400030ac:	0f 84 be 00 00 00    	je     140003170 <.text+0x2170>
1400030b2:	4c 8b 43 28          	mov    0x28(%rbx),%r8
1400030b6:	45 39 68 20          	cmp    %r13d,0x20(%r8)
1400030ba:	0f 83 b0 00 00 00    	jae    140003170 <.text+0x2170>
1400030c0:	31 c0                	xor    %eax,%eax
1400030c2:	4c 39 c6             	cmp    %r8,%rsi
1400030c5:	74 08                	je     1400030cf <.text+0x20cf>
1400030c7:	84 c0                	test   %al,%al
1400030c9:	0f 84 1e 01 00 00    	je     1400031ed <.text+0x21ed>
1400030cf:	b9 01 00 00 00       	mov    $0x1,%ecx
1400030d4:	e9 6e ff ff ff       	jmp    140003047 <.text+0x2047>
1400030d9:	0f 1f 80 00 00 00 00 	nopl   0x0(%rax)
1400030e0:	b9 02 00 00 00       	mov    $0x2,%ecx
1400030e5:	ff 15 65 af 00 00    	call   *0xaf65(%rip)        # 14000e050 <_head_lib64_libadvapi32_a-0x5fb0>
1400030eb:	45 89 e8             	mov    %r13d,%r8d
1400030ee:	48 8d 15 33 c4 00 00 	lea    0xc433(%rip),%rdx        # 14000f528 <_head_lib64_libadvapi32_a-0x4ad8>
1400030f5:	48 89 c1             	mov    %rax,%rcx
1400030f8:	e8 c3 40 00 00       	call   1400071c0 <.text+0x61c0>
1400030fd:	31 c0                	xor    %eax,%eax
1400030ff:	48 8b 3d da cd 00 00 	mov    0xcdda(%rip),%rdi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
140003106:	48 8b 54 24 48       	mov    0x48(%rsp),%rdx
14000310b:	48 2b 17             	sub    (%rdi),%rdx
14000310e:	0f 85 ec 00 00 00    	jne    140003200 <.text+0x2200>
140003114:	48 83 c4 58          	add    $0x58,%rsp
140003118:	5b                   	pop    %rbx
140003119:	5e                   	pop    %rsi
14000311a:	5f                   	pop    %rdi
14000311b:	5d                   	pop    %rbp
14000311c:	41 5c                	pop    %r12
14000311e:	41 5d                	pop    %r13
140003120:	41 5e                	pop    %r14
140003122:	41 5f                	pop    %r15
140003124:	c3                   	ret
140003125:	0f 1f 00             	nopl   (%rax)
140003128:	b8 01 00 00 00       	mov    $0x1,%eax
14000312d:	eb d0                	jmp    1400030ff <.text+0x20ff>
14000312f:	90                   	nop
140003130:	44 39 e8             	cmp    %r13d,%eax
140003133:	73 60                	jae    140003195 <.text+0x2195>
140003135:	4c 3b 73 28          	cmp    0x28(%rbx),%r14
140003139:	74 1c                	je     140003157 <.text+0x2157>
14000313b:	4c 89 f1             	mov    %r14,%rcx
14000313e:	e8 c5 2d 00 00       	call   140005f08 <.text+0x4f08>
140003143:	49 89 c0             	mov    %rax,%r8
140003146:	44 3b 68 20          	cmp    0x20(%rax),%r13d
14000314a:	73 64                	jae    1400031b0 <.text+0x21b0>
14000314c:	49 83 7e 18 00       	cmpq   $0x0,0x18(%r14)
140003151:	0f 85 e8 fe ff ff    	jne    14000303f <.text+0x203f>
140003157:	31 c9                	xor    %ecx,%ecx
140003159:	45 3b 6e 20          	cmp    0x20(%r14),%r13d
14000315d:	4d 89 f0             	mov    %r14,%r8
140003160:	49 89 ee             	mov    %rbp,%r14
140003163:	0f 92 c1             	setb   %cl
140003166:	e9 dc fe ff ff       	jmp    140003047 <.text+0x2047>
14000316b:	0f 1f 44 00 00       	nopl   0x0(%rax,%rax,1)
140003170:	48 8b 4c 24 28       	mov    0x28(%rsp),%rcx
140003175:	45 89 e8             	mov    %r13d,%r8d
140003178:	4c 89 e2             	mov    %r12,%rdx
14000317b:	e8 80 f2 ff ff       	call   140002400 <.text+0x1400>
140003180:	48 8b 54 24 30       	mov    0x30(%rsp),%rdx
140003185:	48 8b 44 24 38       	mov    0x38(%rsp),%rax
14000318a:	49 89 d6             	mov    %rdx,%r14
14000318d:	49 89 c0             	mov    %rax,%r8
140003190:	48 85 c0             	test   %rax,%rax
140003193:	75 4a                	jne    1400031df <.text+0x21df>
140003195:	ba 30 00 00 00       	mov    $0x30,%edx
14000319a:	48 89 e9             	mov    %rbp,%rcx
14000319d:	e8 46 2d 00 00       	call   140005ee8 <.text+0x4ee8>
1400031a2:	e9 b1 fe ff ff       	jmp    140003058 <.text+0x2058>
1400031a7:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
1400031ae:	00 00
1400031b0:	48 8d 4c 24 30       	lea    0x30(%rsp),%rcx
1400031b5:	45 89 e8             	mov    %r13d,%r8d
1400031b8:	4c 89 e2             	mov    %r12,%rdx
1400031bb:	eb be                	jmp    14000317b <.text+0x217b>
1400031bd:	0f 1f 00             	nopl   (%rax)
1400031c0:	b9 02 00 00 00       	mov    $0x2,%ecx
1400031c5:	ff 15 85 ae 00 00    	call   *0xae85(%rip)        # 14000e050 <_head_lib64_libadvapi32_a-0x5fb0>
1400031cb:	48 8d 15 76 c3 00 00 	lea    0xc376(%rip),%rdx        # 14000f548 <_head_lib64_libadvapi32_a-0x4ab8>
1400031d2:	48 89 c1             	mov    %rax,%rcx
1400031d5:	e8 e6 3f 00 00       	call   1400071c0 <.text+0x61c0>
1400031da:	e9 1e ff ff ff       	jmp    1400030fd <.text+0x20fd>
1400031df:	48 85 d2             	test   %rdx,%rdx
1400031e2:	49 89 ee             	mov    %rbp,%r14
1400031e5:	0f 95 c0             	setne  %al
1400031e8:	e9 d5 fe ff ff       	jmp    1400030c2 <.text+0x20c2>
1400031ed:	4c 89 f5             	mov    %r14,%rbp
1400031f0:	4d 89 c6             	mov    %r8,%r14
1400031f3:	e9 5f ff ff ff       	jmp    140003157 <.text+0x2157>
1400031f8:	49 89 ee             	mov    %rbp,%r14
1400031fb:	e9 c0 fe ff ff       	jmp    1400030c0 <.text+0x20c0>
140003200:	e8 ab 3e 00 00       	call   1400070b0 <.text+0x60b0>
140003205:	90                   	nop
140003206:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
14000320d:	00 00 00
140003210:	56                   	push   %rsi
140003211:	53                   	push   %rbx
140003212:	48 83 ec 28          	sub    $0x28,%rsp
140003216:	48 8d 05 f3 cd 00 00 	lea    0xcdf3(%rip),%rax        # 140010010 <_head_lib64_libadvapi32_a-0x3ff0>
14000321d:	41 b9 04 00 00 00    	mov    $0x4,%r9d
140003223:	41 b8 00 10 00 00    	mov    $0x1000,%r8d
140003229:	48 89 01             	mov    %rax,(%rcx)
14000322c:	48 8d 41 10          	lea    0x10(%rcx),%rax
140003230:	48 89 cb             	mov    %rcx,%rbx
140003233:	89 d6                	mov    %edx,%esi
140003235:	c7 41 10 00 00 00 00 	movl   $0x0,0x10(%rcx)
14000323c:	ba 00 00 01 00       	mov    $0x10000,%edx
140003241:	48 c7 41 18 00 00 00 	movq   $0x0,0x18(%rcx)
140003248:	00
140003249:	48 89 41 20          	mov    %rax,0x20(%rcx)
14000324d:	48 89 41 28          	mov    %rax,0x28(%rcx)
140003251:	48 c7 41 30 00 00 00 	movq   $0x0,0x30(%rcx)
140003258:	00
140003259:	c7 41 40 00 00 01 00 	movl   $0x10000,0x40(%rcx)
140003260:	31 c9                	xor    %ecx,%ecx
140003262:	ff 15 d8 12 01 00    	call   *0x112d8(%rip)        # 140014540 <__imp_VirtualAlloc>
140003268:	48 89 43 48          	mov    %rax,0x48(%rbx)
14000326c:	85 f6                	test   %esi,%esi
14000326e:	75 10                	jne    140003280 <.text+0x2280>
140003270:	48 83 c4 28          	add    $0x28,%rsp
140003274:	5b                   	pop    %rbx
140003275:	5e                   	pop    %rsi
140003276:	c3                   	ret
140003277:	66 0f 1f 84 00 00 00 	nopw   0x0(%rax,%rax,1)
14000327e:	00 00
140003280:	48 89 d9             	mov    %rbx,%rcx
140003283:	e8 f8 fb ff ff       	call   140002e80 <.text+0x1e80>
140003288:	90                   	nop
140003289:	48 83 c4 28          	add    $0x28,%rsp
14000328d:	5b                   	pop    %rbx
14000328e:	5e                   	pop    %rsi
14000328f:	c3                   	ret
140003290:	48 8b 4b 18          	mov    0x18(%rbx),%rcx
140003294:	48 89 c6             	mov    %rax,%rsi
140003297:	e8 e4 f2 ff ff       	call   140002580 <.text+0x1580>
14000329c:	48 89 f1             	mov    %rsi,%rcx
14000329f:	e8 bc 3d 00 00       	call   140007060 <.text+0x6060>
1400032a4:	90                   	nop
1400032a5:	90                   	nop
1400032a6:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
1400032ad:	00 00 00
1400032b0:	56                   	push   %rsi
1400032b1:	53                   	push   %rbx
1400032b2:	48 83 ec 28          	sub    $0x28,%rsp
1400032b6:	48 89 ce             	mov    %rcx,%rsi
1400032b9:	48 8b 49 28          	mov    0x28(%rcx),%rcx
1400032bd:	48 8d 46 38          	lea    0x38(%rsi),%rax
1400032c1:	48 39 c1             	cmp    %rax,%rcx
1400032c4:	74 0d                	je     1400032d3 <.text+0x22d3>
1400032c6:	48 8b 46 38          	mov    0x38(%rsi),%rax
1400032ca:	48 8d 50 01          	lea    0x1(%rax),%rdx
1400032ce:	e8 15 2c 00 00       	call   140005ee8 <.text+0x4ee8>
1400032d3:	48 8b 5e 08          	mov    0x8(%rsi),%rbx
1400032d7:	48 83 c6 08          	add    $0x8,%rsi
1400032db:	48 39 f3             	cmp    %rsi,%rbx
1400032de:	74 15                	je     1400032f5 <.text+0x22f5>
1400032e0:	48 89 d9             	mov    %rbx,%rcx
1400032e3:	48 8b 1b             	mov    (%rbx),%rbx
1400032e6:	ba 28 00 00 00       	mov    $0x28,%edx
1400032eb:	e8 f8 2b 00 00       	call   140005ee8 <.text+0x4ee8>
1400032f0:	48 39 f3             	cmp    %rsi,%rbx
1400032f3:	75 eb                	jne    1400032e0 <.text+0x22e0>
1400032f5:	48 83 c4 28          	add    $0x28,%rsp
1400032f9:	5b                   	pop    %rbx
1400032fa:	5e                   	pop    %rsi
1400032fb:	c3                   	ret
1400032fc:	0f 1f 40 00          	nopl   0x0(%rax)
140003300:	48 8d 41 28          	lea    0x28(%rcx),%rax
140003304:	c3                   	ret
140003305:	90                   	nop
140003306:	66 2e 0f 1f 84 00 00 	cs nopw 0x0(%rax,%rax,1)
14000330d:	00 00 00
140003310:	83 3d 1d fd 00 00 04 	cmpl   $0x4,0xfd1d(%rip)        # 140013034 <_head_lib64_libadvapi32_a-0xfcc>
140003317:	b8 01 00 00 00       	mov    $0x1,%eax
14000331c:	77 20                	ja     14000333e <.text+0x233e>
14000331e:	48 b8 ff ff ff ff ff 	movabs $0xffffffffffff,%rax
140003325:	ff 00 00
140003328:	48 23 02             	and    (%rdx),%rax
14000332b:	48 ba 02 00 00 00 10 	movabs $0x1000000002,%rdx
140003332:	00 00 00
140003335:	48 39 d0             	cmp    %rdx,%rax
140003338:	0f 95 c0             	setne  %al
14000333b:	0f b6 c0             	movzbl %al,%eax
14000333e:	c3                   	ret
14000333f:	90                   	nop
140003340:	ba 01 00 00 00       	mov    $0x1,%edx
140003345:	41 89 c8             	mov    %ecx,%r8d
140003348:	b9 40 00 00 00       	mov    $0x40,%ecx
14000334d:	48 ff 25 b4 11 01 00 	rex.W jmp *0x111b4(%rip)        # 140014508 <__imp_OpenProcess>
140003354:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
14000335b:	00 00 00 00
14000335f:	90                   	nop
140003360:	57                   	push   %rdi
140003361:	56                   	push   %rsi
140003362:	53                   	push   %rbx
140003363:	48 83 ec 50          	sub    $0x50,%rsp
140003367:	48 8b 3d 72 cb 00 00 	mov    0xcb72(%rip),%rdi        # 14000fee0 <_head_lib64_libadvapi32_a-0x4120>
14000336e:	48 c7 44 24 40 00 00 	movq   $0x0,0x40(%rsp)
140003375:	00 00
140003377:	48 89 cb             	mov    %rcx,%rbx
14000337a:	48 89 d6             	mov    %rdx,%rsi
14000337d:	48 8b 07             	mov    (%rdi),%rax
140003380:	48 89 44 24 48       	mov    %rax,0x48(%rsp)
140003385:	31 c0                	xor    %eax,%eax
140003387:	ff 15 0b 11 01 00    	call   *0x1110b(%rip)        # 140014498 <__imp_GetCurrentProcess>
14000338d:	4c 8d 4c 24 40       	lea    0x40(%rsp),%r9
140003392:	48 89 f2             	mov    %rsi,%rdx
140003395:	48 89 d9             	mov    %rbx,%rcx