Function at 0x1402806b4
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
lea rdi, [0x140566770]
mov rcx, rdi
call fcn.140280310
mov rcx, qword [0x140566778]
lea rax, vtable.sense::DynamicMpEngineModule.0
xor ebx, ebx
mov qword [0x140566770], rax
mov qword [0x140566780], rbx
mov qword [0x140566788], rbx
mov qword [0x140566790], rbx
mov qword [0x140566798], rbx
mov qword [0x1405667a0], rbx
mov qword [0x1405667a8], rbx
mov qword [0x1405667b0], rbx
mov qword [0x1405667b8], rbx
mov qword [0x1405667c0], rbx
mov qword [0x1405667c8], rbx
mov qword [0x1405667d0], rbx
mov qword [0x1405667d8], rbx
mov qword [0x1405667e0], rbx
mov qword [0x1405667e8], rbx
mov qword [0x1405667f0], rbx
mov qword [0x1405667f8], rbx
mov qword [0x140566800], rbx
mov qword [0x140566808], rbx
mov qword [0x140566810], rbx
mov qword [0x140566818], rbx
mov byte [0x140566820], bl
test rcx, rcx
je 0x140280ae9
lea rdx, str.MpScanStart
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpManagerVersionQuery
mov qword [0x140566780], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpManagerStatusQueryEx
mov qword [0x140566790], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpManagerOpen
mov qword [0x140566798], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpScanControl
mov qword [0x140566788], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpThreatOpen
mov qword [0x1405667a0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpThreatEnumerate
mov qword [0x1405667a8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpGenerateThreatReport
mov qword [0x1405667b0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpErrorMessageFormat
mov qword [0x1405667b8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpHandleClose
mov qword [0x1405667c0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpFreeMemory
mov qword [0x1405667c8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpCleanOpen
mov qword [0x1405667d0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpCleanStart
mov qword [0x1405667d8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpCleanControl
mov qword [0x1405667e0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpGenerateSignatureEx
mov qword [0x1405667e8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpGetRunningMode
mov qword [0x140566818], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpUpdateStart
mov qword [0x1405667f0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpUpdateControl
mov qword [0x1405667f8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpGetMAPSConnectivityStatusInfo
mov qword [0x140566800], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
mov rcx, qword [0x140566778]
lea rdx, str.MpQuarantineRequest
mov qword [0x140566808], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
nop dword [rax + rax]
cmp qword [0x140566780], rbx
mov qword [0x140566810], rax
je 0x140280ae9
cmp qword [0x140566790], rbx
je 0x140280ae9
cmp qword [0x140566798], rbx
je 0x140280ae9
cmp qword [0x140566788], rbx
je 0x140280ae9
cmp qword [0x1405667a0], rbx
je 0x140280ae9
cmp qword [0x1405667a8], rbx
je 0x140280ae9
cmp qword [0x1405667b0], rbx
je 0x140280ae9
cmp qword [0x1405667b8], rbx
je 0x140280ae9
cmp qword [0x1405667c0], rbx
je 0x140280ae9
cmp qword [0x1405667c8], rbx
je 0x140280ae9
cmp qword [0x1405667d0], rbx
je 0x140280ae9
cmp qword [0x1405667d8], rbx
je 0x140280ae9
cmp qword [0x1405667e0], rbx
je 0x140280ae9
cmp qword [0x1405667e8], rbx
je 0x140280ae9
cmp qword [0x140566818], rbx
je 0x140280ae9
cmp qword [0x1405667f0], rbx
je 0x140280ae9
cmp qword [0x1405667f8], rbx
je 0x140280ae9
cmp qword [0x140566800], rbx
je 0x140280ae9
cmp qword [0x140566808], rbx
je 0x140280ae9
movzx ecx, byte [0x140566820]
lea edx, [rbx + 1]
test rax, rax
cmovne ecx, edx
mov byte [0x140566820], cl
mov rbx, qword [rsp + 0x38]
mov rax, rdi
add rsp, 0x20
pop rdi
ret