Function at 0x1400c03f0
Capabilities:
Acquire debug privileges

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x2c0]
sub rsp, 0x3c0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x410], rbx
mov rax, qword [0x1401b4048]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
mov rbx, rdx
mov dword [rsp + 0x40], ecx
xor r14d, r14d
xor edx, edx
lea r8d, [r14 + 1]
lea rcx, [rbp + 0x70]
call fcn.14004f690
nop
lea r8, str.dbghelp.dll
lea rdx, [rbp + 0x70]
lea rcx, [rbp + 0x50]
call fcn.140050700
nop
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rcx, qword [rbp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r13, rax
mov qword [rbp - 0x80], rax
test rax, rax
jne 0x1400c0740
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x1400c0495
movzx edi, ax
or edi, 0x80070000
lea rdx, str.LoadLibrary__1__
lea rcx, [rbp + 0x1a0]
call fcn.140008a10
nop
lea rcx, str.dbghelp.dll
mov qword [rbp - 0x70], rcx
lea rcx, [fcn.140005090]
mov qword [rbp - 0x68], rcx
lea rcx, [0x140070030]
mov qword [rbp - 0x60], rcx
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x30]
call fcn.140018cb0
nop
lea rax, [rbp + 0x290]
mov qword [rsp + 0x48], rax
cmp byte [rbp + 0x290], 0
je 0x1400c0527
mov rcx, qword [rbp + 0x2a0]
test rcx, rcx
je 0x1400c0520
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1400c0520
mov rcx, qword [rax]
mov r8, qword [rcx]
mov edx, 1
mov rcx, rax
call r8
mov byte [rbp + 0x290], 0
lea rcx, [rbp + 0x210]
call fcn.14000ab20
nop
lea rcx, [rbp + 0x1e8]
call fcn.1400122c0
nop
lea rax, [rbp + 0x1b8]
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0x1b8]
call fcn.14000b3d0
nop
lea rcx, [rbp + 0x1a0]
call fcn.14000b440
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140058300
nop
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x90]
call fcn.140008a10
nop
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x70], rcx
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400c060e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0609
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c12f9
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp], xmm0
xor r14d, r14d
mov word [rbp - 0x10], r14w
lea rax, [rbp + 0x180]
mov qword [rsp + 0x48], rax
cmp byte [rbp + 0x180], r14b
je 0x1400c0666
mov rcx, qword [rbp + 0x190]
test rcx, rcx
je 0x1400c065f
mov rax, qword [rcx]
call qword [rax + 0x10]
test rax, rax
je 0x1400c065f
mov rcx, qword [rax]
mov r8, qword [rcx]
lea edx, [r14 + 1]
mov rcx, rax
call r8
mov byte [rbp + 0x180], 0
lea rcx, [rbp + 0x100]
call fcn.14000ab20
nop
lea rcx, [rbp + 0xd8]
call fcn.1400122c0
nop
lea rax, [rbp + 0xa8]
mov qword [rsp + 0x48], rax
lea rcx, [rbp + 0xa8]
call fcn.14000b3d0
nop
lea rcx, [rbp + 0x90]
call fcn.14000b440
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400c06e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c06e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c12ff
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400c0978
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0973
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c12f3
jmp 0x1400c0973
lea rdx, str.MiniDumpWriteDump
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
test rax, rax
jne 0x1400c098f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x1400c0771
movzx edi, ax
or edi, 0x80070000
lea rdx, str.GetProcAddress__1__
lea rcx, [rbp + 0x90]
call fcn.140008a10
mov rbx, rax
lea rdx, str.MiniDumpWriteDump
lea rcx, [rbp - 0x10]
call fcn.14004c4a0
nop
mov qword [rbp - 0x70], rax
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x30]
call fcn.140018cb0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 8
jb 0x1400c080b
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0806
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1305
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp], xmm0
xor eax, eax
mov word [rbp - 0x10], ax
lea rcx, [rbp + 0x90]
call fcn.14000ac40
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140058300
nop
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x1a0]
call fcn.140008a10
nop
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], rsi
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400c08c4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c08bf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c130b
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x20], xmm0
xor r14d, r14d
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x1a0]
call fcn.14000ac40
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400c0926
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0921
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1311
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400c0978
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0973
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1317
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r14w
jmp 0x1400c1254
call fcn.140110e80
test al, al
je 0x1400c0bdb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x60], xmm1
mov word [rbp - 0x70], r14w
mov r8d, 0x10
lea rdx, str.SeDebugPrivilege
lea rcx, [rbp - 0x70]
call fcn.140012d60
nop
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.140110bd0
mov edi, eax
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400c0a1d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0a18
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c131d
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], r14w
test edi, edi
jns 0x1400c0bdb
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x60], xmm1
mov word [rbp - 0x70], r14w
mov r8d, 0x19
lea rdx, str.AdjustCurProcessPrivilege
lea rcx, [rbp - 0x70]
call fcn.140012d60
nop
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x70]
lea rcx, [rbp - 0x50]
call fcn.140058300
nop
mov rdx, qword [rbp - 0x58]
cmp rdx, 8
jb 0x1400c0abc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0ab7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1323
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x60], xmm0
mov word [rbp - 0x70], r14w
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x90]
call fcn.140008a10
nop
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x70], rcx
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400c0b62
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0b5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1329
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x20], xmm0
xor r14d, r14d
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x90]
call fcn.14000ac40
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400c0bc4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0bbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c132f
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
jmp 0x1400c1254
mov r8d, dword [rsp + 0x40]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov r12, rax
mov qword [rsp + 0x48], rax
test rax, rax
jne 0x1400c0dde
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x1400c0c13
movzx edi, ax
or edi, 0x80070000
lea rdx, str.OpenProcess_PID_1__
lea rcx, [rbp + 0x90]
call fcn.140008a10
nop
lea rcx, [rsp + 0x40]
mov qword [rbp - 0x70], rcx
lea rcx, [fcn.140005090]
mov qword [rbp - 0x68], rcx
lea rcx, [0x1400410f0]
mov qword [rbp - 0x60], rcx
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x30]
call fcn.140018cb0
nop
lea rcx, [rbp + 0x90]
call fcn.14000ac40
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140058300
nop
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x1a0]
call fcn.140008a10
nop
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x70], rcx
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400c0d13
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1335
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x20], xmm0
xor r14d, r14d
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x1a0]
call fcn.14000ac40
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400c0d75
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0d70
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c133b
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400c0dc7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0dc2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1341
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r14w
jmp 0x1400c1245
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x1400c0deb
mov rcx, qword [rbx]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1f01ff
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov r15, rax
mov qword [rbp - 0x78], rax
test rax, rax
jne 0x1400c0fe1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x1400c0e36
movzx edi, ax
or edi, 0x80070000
lea rdx, str.CreateFile___1__
lea rcx, [rbp + 0x90]
call fcn.140008a10
nop
mov rdx, rbx
mov rcx, rax
call fcn.140040a40
lea rdx, [rbp - 0x30]
mov rcx, rax
call fcn.140018cb0
nop
lea rcx, [rbp + 0x90]
call fcn.14000ac40
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x30]
lea rcx, [rbp - 0x50]
call fcn.140058300
nop
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x1a0]
call fcn.140008a10
nop
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x70], rcx
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp + 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x1400c0f16
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0f11
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c1347
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x20], xmm0
xor r14d, r14d
mov word [rbp + 0x10], r14w
lea rcx, [rbp + 0x1a0]
call fcn.14000ac40
nop
mov rdx, qword [rbp - 0x38]
cmp rdx, 8
jb 0x1400c0f78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0f73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c134d
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
mov rdx, qword [rbp - 0x18]
cmp rdx, 8
jb 0x1400c0fca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c0fc5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c12ed
call fcn.1400bece8
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r14w
jmp 0x1400c1236
mov edx, dword [rsp + 0x40]
lea rcx, [rbp + 0x30]
call fcn.1400c15d0
nop
mov eax, dword [rbp + 0x40]
add eax, eax
mov dword [rsp + 0x68], 0xb
mov dword [rsp + 0x6c], eax
lea rax, [rbp + 0x30]
cmp qword [rbp + 0x48], 8
cmovae rax, qword [rbp + 0x30]
mov qword [rsp + 0x70], rax
mov dword [rsp + 0x58], 1
lea rax, [rsp + 0x68]
mov qword [rsp + 0x5c], rax
mov qword [rsp + 0x30], r14
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
mov r9d, 0x1377
mov r8, r15
mov edx, dword [rsp + 0x40]
mov rcx, r12
call rsi
test eax, eax
jne 0x1400c1208
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test eax, eax
jle 0x1400c1068
movzx edi, ax
or edi, 0x80070000
lea rdx, str._1__PID_2__
lea rcx, [rbp + 0x90]
call fcn.140008a10
mov rbx, rax
lea rdx, str.MiniDumpWriteDump
lea rcx, [rbp - 0x10]
call fcn.14004c4a0
nop
mov rdx, rax
mov rcx, rbx
call fcn.140040a40
lea rcx, [rsp + 0x40]
mov qword [rbp - 0x70], rcx
lea rcx, [fcn.140005090]
mov qword [rbp - 0x68], rcx
lea rcx, [0x1400410f0]
mov qword [rbp - 0x60], rcx
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x50]
call fcn.140018cb0
nop
mov r8, qword [rbp + 8]
cmp r8, 8
jb 0x1400c10ec
inc r8
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp], xmm0
mov word [rbp - 0x10], r14w
lea rcx, [rbp + 0x90]
call fcn.14000ac40
mov r9b, 1
mov r8d, edi
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x30]
call fcn.140058300
nop
lea rdx, str.DumpProcess:___1_
lea rcx, [rbp + 0x90]
call fcn.140008a10
nop
lea rcx, [rbp - 0x30]
mov qword [rbp - 0x70], rcx
lea rsi, [fcn.140005090]
mov qword [rbp - 0x68], rsi
lea r14, [0x1400050b0]
mov qword [rbp - 0x60], r14
lea rdx, [rbp - 0x70]
mov rcx, rax
call fcn.140005380
mov rcx, rax
lea rdx, [rbp - 0x10]
call fcn.140018cb0
nop
mov rcx, rax
call fcn.1400c3050
nop
mov r8, qword [rbp + 8]
cmp r8, 8
jb 0x1400c118c
inc r8
mov rdx, qword [rbp - 0x10]
lea rcx, [rbp - 0x10]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp], xmm0
xor r14d, r14d
mov word [rbp - 0x10], r14w
lea rcx, [rbp + 0x90]
call fcn.14000ac40
nop
mov r8, qword [rbp - 0x18]
cmp r8, 8
jb 0x1400c11c8
inc r8
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x30], r14w
mov r8, qword [rbp - 0x38]
cmp r8, 8
jb 0x1400c11f4
inc r8
mov rdx, qword [rbp - 0x50]
lea rcx, [rbp - 0x50]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x50], r14w
jmp 0x1400c120b
mov edi, r14d
mov r8, qword [rbp + 0x48]
cmp r8, 8
jb 0x1400c1225
inc r8
mov rdx, qword [rbp + 0x30]
lea rcx, [rbp + 0x30]
call fcn.140013990
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], 7
mov word [rbp + 0x30], r14w
test r15, r15
je 0x1400c1245
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r12, r12
je 0x1400c1254
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test r13, r13
je 0x1400c1263
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov r8, qword [rbp + 0x68]
cmp r8, 8
jb 0x1400c127d
inc r8
mov rdx, qword [rbp + 0x50]
lea rcx, [rbp + 0x50]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x60], xmm0
mov word [rbp + 0x50], r14w
mov r8, qword [rbp + 0x88]
cmp r8, 8
jb 0x1400c12ac
inc r8
mov rdx, qword [rbp + 0x70]
lea rcx, [rbp + 0x70]
call fcn.140013990
movdqa xmm0, xmmword [0x14013b000]
movdqu xmmword [rbp + 0x80], xmm0
mov word [rbp + 0x70], r14w
mov eax, edi
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.1400bf400
mov rbx, qword [rsp + 0x410]
add rsp, 0x3c0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
int3
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
nop
call fcn.1400e9e3c
int3