Function at 0x140211020
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
push rdi
sub rsp, 0x20
lea rdi, [0x140410960]
mov rcx, rdi
call fcn.140210d3c
mov rcx, qword [0x140410968]
lea rax, vtable.sense::DynamicMpEngineModule.0
xorps xmm0, xmm0
mov qword [0x140410960], rax
xorps xmm1, xmm1
movdqa xmmword [0x140410970], xmm0
xor ebx, ebx
movdqa xmmword [0x140410980], xmm1
movdqa xmmword [0x140410990], xmm0
movdqa xmmword [0x1404109a0], xmm1
movdqa xmmword [0x1404109b0], xmm0
movdqa xmmword [0x1404109c0], xmm1
movdqa xmmword [0x1404109d0], xmm0
movdqa xmmword [0x1404109e0], xmm1
movdqa xmmword [0x1404109f0], xmm0
mov byte [0x140410a00], bl
test rcx, rcx
je 0x14021134f
lea rdx, str.MpScanStart
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpManagerVersionQuery
mov qword [0x140410970], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpManagerStatusQueryEx
mov qword [0x140410980], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpManagerOpen
mov qword [0x140410988], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpScanControl
mov qword [0x140410978], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpThreatOpen
mov qword [0x140410990], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpThreatEnumerate
mov qword [0x140410998], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpGenerateThreatReport
mov qword [0x1404109a0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpErrorMessageFormat
mov qword [0x1404109a8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpHandleClose
mov qword [0x1404109b0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpFreeMemory
mov qword [0x1404109b8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpCleanOpen
mov qword [0x1404109c0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpCleanStart
mov qword [0x1404109c8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpCleanControl
mov qword [0x1404109d0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpGenerateSignature
mov qword [0x1404109d8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpGetRunningMode
mov qword [0x1404109f8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpUpdateStart
mov qword [0x1404109e0], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
mov rcx, qword [0x140410968]
lea rdx, str.MpUpdateControl
mov qword [0x1404109e8], rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetProcAddress]
cmp qword [0x140410970], rbx
mov qword [0x1404109f0], rax
je 0x14021134f
cmp qword [0x140410980], rbx
je 0x14021134f
cmp qword [0x140410988], rbx
je 0x14021134f
cmp qword [0x140410978], rbx
je 0x14021134f
cmp qword [0x140410990], rbx
je 0x14021134f
cmp qword [0x140410998], rbx
je 0x14021134f
cmp qword [0x1404109a0], rbx
je 0x14021134f
cmp qword [0x1404109a8], rbx
je 0x14021134f
cmp qword [0x1404109b0], rbx
je 0x14021134f
cmp qword [0x1404109b8], rbx
je 0x14021134f
cmp qword [0x1404109c0], rbx
je 0x14021134f
cmp qword [0x1404109c8], rbx
je 0x14021134f
cmp qword [0x1404109d0], rbx
je 0x14021134f
cmp qword [0x1404109d8], rbx
je 0x14021134f
cmp qword [0x1404109f8], rbx
je 0x14021134f
cmp qword [0x1404109e0], rbx
je 0x14021134f
cmp qword [0x1404109e8], rbx
je 0x14021134f
movzx ecx, byte [0x140410a00]
lea edx, [rbx + 1]
test rax, rax
cmovne ecx, edx
mov byte [0x140410a00], cl
mov rax, rdi
mov rbx, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret