Function at 0x14010c980
Capabilities:
Access peb ldr_data
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r13, qword [rcx + 0x18]
add r13, 0x10
mov r12, qword [r13]
cmp r12, r13
je 0x14010cd89
mov rdx, qword [0x14023e0e0]
nop dword [rax]
nop word [rax + rax]
movzx eax, word [r12 + 0x58]
mov rdi, qword [r12 + 0x60]
nop dword [rax + rax]
cmp rax, rdx
jb 0x14010cb78
cmp byte [0x140244611], 1
mov r14, qword [str.dbgcore.dll]
jb 0x14010ca51
mov rsi, rdx
shr rsi, 4
test rsi, rsi
je 0x14010ca36
nop word [rax + rax]
movdqu xmm1, xmmword [r14]
movdqu xmm0, xmmword [rdi]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x14010ca42
add rdi, 0x10
add r14, 0x10
sub rsi, 1
jne 0x14010ca10
mov rsi, rdx
shr rsi, 1
and esi, 7
jmp 0x14010ca83
shl rsi, 4
and edx, 0xf
add rsi, rdx
shr rsi, 1
jmp 0x14010ca83
mov rcx, rdx
shr rcx, 3
test rcx, rcx
je 0x14010ca7a
nop dword [rax]
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x14010cb62
add rdi, 8
add r14, 8
sub rcx, 1
jne 0x14010ca60
mov rsi, rdx
shr rsi, 1
and esi, 3
test rsi, rsi
je 0x14010cac6
sub r14, rdi
nop dword [rax + rax]
movzx ecx, word [rdi]
movzx r15d, word [r14 + rdi]
cmp cx, r15w
je 0x14010cabc
nop
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ecx, r15w
movzx ebx, ax
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp bx, ax
jne 0x14010cb71
add rdi, 2
sub rsi, 1
jne 0x14010ca90
test r12, r12
je 0x14010cd89
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r13, qword [rcx + 0x18]
add r13, 0x10
mov r12, qword [r13]
cmp r12, r13
je 0x14010cd89
mov rdx, qword [0x14023e140]
nop dword [rax + rax]
movzx eax, word [r12 + 0x58]
mov rdi, qword [r12 + 0x60]
cmp rax, rdx
jb 0x14010ccd8
cmp byte [0x140244611], 1
mov r14, qword [str.dbghelp.dll]
jb 0x14010cb9d
mov rsi, rdx
shr rsi, 4
test rsi, rsi
je 0x14010cb56
movdqu xmm1, xmmword [r14]
movdqu xmm0, xmmword [rdi]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x14010cb8e
add rdi, 0x10
add r14, 0x10
sub rsi, 1
jne 0x14010cb30
mov rsi, rdx
shr rsi, 1
and esi, 7
jmp 0x14010cbd3
and edx, 7
lea rsi, [rdx + rcx*8]
shr rsi, 1
jmp 0x14010ca83
mov rdx, qword [0x14023e0e0]
mov r12, qword ds:[r12]
cmp r12, r13
jne 0x14010c9d0
jmp 0x14010cd89
shl rsi, 4
and edx, 0xf
add rsi, rdx
shr rsi, 1
jmp 0x14010cbd3
mov rcx, rdx
shr rcx, 3
test rcx, rcx
je 0x14010cbca
nop dword [rax]
mov rax, qword [r14]
cmp qword [rdi], rax
jne 0x14010ccc2
add rdi, 8
add r14, 8
sub rcx, 1
jne 0x14010cbb0
mov rsi, rdx
shr rsi, 1
and esi, 3
test rsi, rsi
je 0x14010cc19
sub r14, rdi
nop dword [rax + rax]
movzx ecx, word [rdi]
movzx r15d, word [r14 + rdi]
cmp cx, r15w
je 0x14010cc0f
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ecx, r15w
movzx ebx, ax
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp bx, ax
jne 0x14010ccd1
add rdi, 2
sub rsi, 1
jne 0x14010cbe0
nop dword [rax]
test r12, r12
je 0x14010cd89
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r13, qword [rcx + 0x18]
add r13, 0x10
mov r12, qword [r13]
cmp r12, r13
je 0x14010cd89
mov rdx, qword [0x14023e150]
movzx eax, word [r12 + 0x58]
mov rbx, qword [r12 + 0x60]
nop dword [rax]
cmp rax, rdx
jb 0x14010d3d2
cmp byte [0x140244611], 1
mov r14, qword [str.symsrv.dll]
jb 0x14010ccfd
mov rsi, rdx
shr rsi, 4
test rsi, rsi
je 0x14010ccb6
nop dword [rax]
movdqu xmm1, xmmword [r14]
movdqu xmm0, xmmword [rbx]
pcmpeqd xmm1, xmm0
pmovmskb eax, xmm1
cmp eax, 0xffff
jne 0x14010ccee
add rbx, 0x10
add r14, 0x10
sub rsi, 1
jne 0x14010cc90
mov rsi, rdx
shr rsi, 1
and esi, 7
jmp 0x14010cd33
and edx, 7
lea rsi, [rdx + rcx*8]
shr rsi, 1
jmp 0x14010cbd3
mov rdx, qword [0x14023e140]
mov r12, qword ds:[r12]
cmp r12, r13
jne 0x14010cb00
jmp 0x14010cd89
shl rsi, 4
and edx, 0xf
add rsi, rdx
shr rsi, 1
jmp 0x14010cd33
mov rcx, rdx
shr rcx, 3
test rcx, rcx
je 0x14010cd2a
nop dword [rax]
mov rax, qword [r14]
cmp qword [rbx], rax
jne 0x14010d3bc
add rbx, 8
add r14, 8
sub rcx, 1
jne 0x14010cd10
mov rsi, rdx
shr rsi, 1
and esi, 3
test rsi, rsi
je 0x14010cd79
sub r14, rbx
nop dword [rax + rax]
movzx ecx, word [rbx]
movzx r15d, word [r14 + rbx]
cmp cx, r15w
je 0x14010cd6f
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
movzx ecx, r15w
movzx edi, ax
call qword [sym.imp.ntdll.dll_RtlUpcaseUnicodeChar]
cmp di, ax
jne 0x14010d3cb
add rbx, 2
sub rsi, 1
jne 0x14010cd40
nop dword [rax]
test r12, r12
jne 0x14010dcc6
mov rcx, qword [0x14023e100]
xor r12d, r12d
mov word [rbp - 0x69], cx
mov esi, r12d
mov edi, r12d
mov r13d, r12d
lea eax, [rcx + 2]
mov word [rbp - 0x67], ax
lea r14d, [r12 - 1]
mov rax, qword [str.SoftwareMicrosoftWindows_KitsInstalled_Roots]
mov qword [rbp - 0x61], rax
cmp rcx, 0xfffe
ja 0x14010cec9
lea rax, [rbp + 0x77]
xor r8d, r8d
lea r9, [rbp - 0x49]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x69]
lea rcx, [r12 - 3]
call fcn.14011ab40
test eax, eax
js 0x14010cec9
lea r8, [rbp - 0x49]
mov edx, 0x20019
lea rcx, [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtOpenKey]
mov rcx, qword [rbp + 0x77]
mov ebx, eax
test rcx, rcx
je 0x14010ce17
call qword [sym.imp.ntdll.dll_NtClose]
test ebx, ebx
js 0x14010cec9
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot10
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rbx, rax
mov rsi, rax
test rax, rax
je 0x14010ce3f
cmp qword [rax], rdi
jne 0x14010ce72
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot81
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rsi, rax
test rbx, rbx
je 0x14010ce6d
lea rcx, [rbx - 0x10]
mov edx, r14d
lock xadd dword [rcx + 8], edx
cmp edx, 1
jne 0x14010ce6d
call fcn.1400fbcc0
test rsi, rsi
je 0x14010ce77
cmp qword [rsi], rdi
jne 0x14010ceaa
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rcx, rsi
mov rsi, rax
test rcx, rcx
je 0x14010ceaa
add rcx, 0xfffffffffffffff0
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010ceaa
call fcn.1400fbcc0
mov rcx, qword [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtClose]
test rsi, rsi
je 0x14010cec9
nop dword [rax]
cmp qword [rsi], rdi
jne 0x14010d00f
mov rdx, qword [0x14023e130]
mov word [rbp - 0x59], dx
lea eax, [rdx + 2]
mov word [rbp - 0x57], ax
mov rax, qword [str.SoftwareWow6432NodeMicrosoftWindows_KitsInstalled_Roots]
mov qword [rbp - 0x51], rax
cmp rdx, 0xfffe
ja 0x14010d006
xor r8d, r8d
lea rax, [rbp + 0x7f]
lea r9, [rbp - 0x19]
mov qword [rsp + 0x20], rax
lea rdx, [rbp - 0x59]
lea rcx, [r8 - 3]
call fcn.14011ab40
test eax, eax
js 0x14010d006
lea r8, [rbp - 0x19]
mov edx, 0x20019
lea rcx, [rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtOpenKey]
mov rcx, qword [rbp + 0x7f]
mov ebx, eax
test rcx, rcx
je 0x14010cf3c
call qword [sym.imp.ntdll.dll_NtClose]
nop dword [rax]
test ebx, ebx
js 0x14010d006
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot10
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rcx, rsi
mov rbx, rax
mov rsi, rax
test rcx, rcx
je 0x14010cf7e
add rcx, 0xfffffffffffffff0
mov r8d, r14d
lock xadd dword [rcx + 8], r8d
cmp r8d, 1
jne 0x14010cf7e
call fcn.1400fbcc0
nop
test rbx, rbx
je 0x14010cf8a
cmp qword [rbx], rdi
jne 0x14010cfc5
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot81
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rsi, rax
test rbx, rbx
je 0x14010cfbb
lea rcx, [rbx - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010cfbb
call fcn.1400fbcc0
nop dword [rax + rax]
test rsi, rsi
je 0x14010cfca
cmp qword [rsi], rdi
jne 0x14010cffb
mov rcx, qword [rbp + 0x6f]
lea rdx, str.KitsRoot
call sym.ProcessHacker.exe_PhQueryRegistryString
mov rcx, rsi
mov rsi, rax
test rcx, rcx
je 0x14010cffb
add rcx, 0xfffffffffffffff0
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010cffb
call fcn.1400fbcc0
mov rcx, qword ds:[rbp + 0x6f]
call qword [sym.imp.ntdll.dll_NtClose]
test rsi, rsi
je 0x14010d292
mov rbx, qword [rsi]
mov rdx, qword [0x1402418e8]
add rbx, 0x1e
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov r15, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], r12w
mov r8, qword [rsi]
mov rdx, qword [rsi + 8]
mov rcx, qword [rax + 8]
call fcn.140188690
mov rcx, qword [rsi]
mov rdx, qword [r15 + 8]
movups xmm0, xmmword [str.Debuggersx64_]
movups xmmword [rdx + rcx], xmm0
movsd xmm1, qword [0x1401f0798]
movsd qword [rdx + rcx + 0x10], xmm1
mov eax, dword [0x1401f07a0]
mov dword [rdx + rcx + 0x18], eax
movzx eax, word [0x1401f07a4]
mov word [rdx + rcx + 0x1c], ax
lea rcx, [rsi - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010d095
call fcn.1400fbcc0
mov rbx, qword [0x14023e0e0]
add rbx, qword [r15]
mov rdx, qword [0x1402418e8]
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rdi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], r12w
mov r8, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, qword [rax + 8]
call fcn.140188690
mov rcx, qword [rdi + 8]
add rcx, qword [r15]
mov r8, qword [0x14023e0e0]
mov rdx, qword [str.dbgcore.dll]
call fcn.140188690
mov rbx, qword ds:[rdi + 8]
xor edx, edx
mov rcx, rbx
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r12, rax
test rax, rax
jne 0x14010d122
xor edx, edx
mov r8d, 0xa00
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r12, rax
lea rcx, [rdi - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010d138
call fcn.1400fbcc0
mov rbx, qword [0x14023e140]
add rbx, qword [r15]
mov rdx, qword [0x1402418e8]
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rsi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], r13w
mov r8, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, qword [rax + 8]
call fcn.140188690
mov rcx, qword [r15]
add rcx, qword [rsi + 8]
mov r8, qword [0x14023e140]
mov rdx, qword [str.dbghelp.dll]
call fcn.140188690
mov rbx, qword ds:[rsi + 8]
xor edx, edx
mov rcx, rbx
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x14010d1c2
xor edx, edx
mov r8d, 0xa00
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
lea rcx, [rsi - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010d1d8
call fcn.1400fbcc0
mov rbx, qword [0x14023e150]
add rbx, qword [r15]
mov rdx, qword [0x1402418e8]
lea rcx, [rbx + 0x12]
call sym.ProcessHacker.exe_PhCreateObject
mov rsi, rax
lea rcx, [rax + 0x10]
mov qword [rax], rbx
mov qword [rax + 8], rcx
mov word [rcx + rbx], r13w
mov r8, qword [r15]
mov rdx, qword [r15 + 8]
mov rcx, qword [rax + 8]
call fcn.140188690
mov rcx, qword [r15]
add rcx, qword [rsi + 8]
mov r8, qword [0x14023e150]
mov rdx, qword [str.symsrv.dll]
call fcn.140188690
mov rbx, qword ds:[rsi + 8]
xor edx, edx
mov rcx, rbx
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
test rax, rax
jne 0x14010d262
xor edx, edx
mov r8d, 0xa00
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov r13, rax
lea rcx, [rsi - 0x10]
mov eax, r14d
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x14010d278
call fcn.1400fbcc0
lea rcx, [r15 - 0x10]
lock xadd dword [rcx + 8], r14d
cmp r14d, 1
jne 0x14010d28d
call fcn.1400fbcc0
test r12, r12
jne 0x14010d2c6
xor edx, edx
lea rcx, str.dbgcore.dll
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rax, rax
jne 0x14010d2c6
xor edx, edx
lea rcx, str.dbgcore.dll
mov r8d, 0xa00
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rdi, rdi
jne 0x14010d309
xor edx, edx
lea rcx, str.dbghelp.dll
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test rax, rax
jne 0x14010d309
xor edx, edx
lea rcx, str.dbghelp.dll
mov r8d, 0xa00
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rdi, rax
test r13, r13
jne 0x14010d346
xor edx, edx
lea rcx, str.symsrv.dll
mov r8d, 0x800
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rax, rax
jne 0x14010d346
xor edx, edx
lea rcx, str.symsrv.dll
mov r8d, 0xa00
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rdi, rdi
je 0x14010dcc6
movzx ecx, word ds:[rdi]
mov esi, 0x5a4d
cmp cx, si
jne 0x14010d3f0
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d3f0
cmp dword [rdx + rdi], 0x4550
jne 0x14010d3f0
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d3e5
cmp dword [rdx + 4], 0
je 0x14010d3e5
xor ebx, ebx
lea r8, [rdi + rax]
lea r9, str.SymInitializeW
mov word [rsp + 0x20], bx
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d3f4
and edx, 7
lea rsi, [rdx + rcx*8]
shr rsi, 1
jmp 0x14010cd33
mov rdx, qword [0x14023e150]
mov r12, qword [r12]
cmp r12, r13
jne 0x14010cc52
nop
jmp 0x14010cd89
xor ebx, ebx
mov qword [0x140241ae8], rbx
jmp 0x14010d405
xor ebx, ebx
mov eax, ebx
mov qword [0x140241ae8], rax
nop dword [rax + rax]
cmp cx, si
jne 0x14010d44e
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d44e
cmp dword [rdx + rdi], 0x4550
jne 0x14010d44e
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d44e
cmp dword [rdx + 4], 0
je 0x14010d44e
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymCleanup
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d451
mov rax, rbx
mov qword [0x140241af8], rax
nop dword [rax + rax]
cmp cx, si
jne 0x14010d518
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d4b9
cmp dword [rdx + rdi], 0x4550
jne 0x14010d4b9
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d4b9
cmp dword [rdx + 4], 0
je 0x14010d4b9
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymEnumSymbolsW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
cmp cx, si
jne 0x14010d518
mov edx, dword ds:[rdi + 0x3c]
movzx eax, cx
test edx, edx
je 0x14010d51b
cmp edx, 0x7fffffff
jae 0x14010d51b
cmp dword [rdx + rdi], 0x4550
jne 0x14010d51b
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d50f
cmp dword [rdx + 4], 0
je 0x14010d50f
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymFromAddrW
mov rcx, rdi
call fcn.1400fa1a0
mov rdx, rax
movzx eax, word [rdi]
jmp 0x14010d51e
mov qword [0x140241b48], rbx
jmp 0x14010d52d
movzx eax, cx
mov rdx, rbx
mov qword [0x140241b48], rdx
movzx ecx, ax
cmp ax, si
jne 0x14010d57f
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d57f
cmp dword [rdx + rdi], 0x4550
jne 0x14010d57f
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d576
cmp dword [rdx + 4], 0
je 0x14010d576
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymFromNameW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d582
mov qword [0x140241b08], rbx
jmp 0x14010d58e
mov rax, rbx
mov qword [0x140241b08], rax
cmp cx, si
jne 0x14010d5e2
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d5e2
cmp dword [rdx + rdi], 0x4550
jne 0x14010d5e2
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d5d7
cmp dword [rdx + 4], 0
je 0x14010d5d7
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetLineFromAddrW64
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d5e5
mov qword [0x140241b00], rbx
nop
jmp 0x14010d5f1
mov rax, rbx
mov qword [0x140241b00], rax
cmp cx, si
jne 0x14010d643
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d643
cmp dword [rdx + rdi], 0x4550
jne 0x14010d643
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d63a
cmp dword [rdx + 4], 0
je 0x14010d63a
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymLoadModuleExW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d646
mov qword [0x140241b10], rbx
jmp 0x14010d652
mov rax, rbx
mov qword [0x140241b10], rax
cmp cx, si
jne 0x14010d6a4
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d6a4
cmp dword [rdx + rdi], 0x4550
jne 0x14010d6a4
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d69b
cmp dword [rdx + 4], 0
je 0x14010d69b
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetOptions
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d6a7
mov qword [0x140241b60], rbx
jmp 0x14010d6b3
mov rax, rbx
mov qword [0x140241b60], rax
cmp cx, si
jne 0x14010d713
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d713
cmp dword [rdx + rdi], 0x4550
jne 0x14010d713
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d70a
cmp dword [rdx + 4], 0
je 0x14010d70a
lea r8, ds:[rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymSetOptions
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d716
mov qword [0x140241b30], rbx
jmp 0x14010d729
mov rax, rbx
mov qword [0x140241b30], rax
nop dword [rax]
cmp cx, si
jne 0x14010d7d8
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d779
cmp dword [rdx + rdi], 0x4550
jne 0x14010d779
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d779
cmp dword [rdx + 4], 0
je 0x14010d779
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetSearchPathW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
cmp cx, si
jne 0x14010d7d8
mov edx, dword ds:[rdi + 0x3c]
movzx eax, cx
test edx, edx
je 0x14010d7db
cmp edx, 0x7fffffff
jae 0x14010d7db
cmp dword [rdx + rdi], 0x4550
jne 0x14010d7db
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d7cf
cmp dword [rdx + 4], 0
je 0x14010d7cf
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymSetSearchPathW
mov rcx, rdi
call fcn.1400fa1a0
mov rdx, rax
movzx eax, word [rdi]
jmp 0x14010d7de
mov qword [0x140241b68], rbx
jmp 0x14010d7f1
movzx eax, cx
mov rdx, rbx
mov qword [0x140241b68], rdx
movzx ecx, ax
cmp ax, si
jne 0x14010d8a7
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d849
cmp dword [rdx + rdi], 0x4550
jne 0x14010d849
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d849
cmp dword [rdx + 4], 0
je 0x14010d849
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymUnloadModule64
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word ds:[rdi]
cmp cx, si
jne 0x14010d8a7
mov edx, dword [rdi + 0x3c]
movzx eax, cx
test edx, edx
je 0x14010d8aa
cmp edx, 0x7fffffff
jae 0x14010d8aa
cmp dword [rdx + rdi], 0x4550
jne 0x14010d8aa
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d89e
cmp dword [rdx + 4], 0
je 0x14010d89e
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymFunctionTableAccess64
mov rcx, rdi
call fcn.1400fa1a0
mov rdx, rax
movzx eax, word [rdi]
jmp 0x14010d8ad
mov qword [0x140241b58], rbx
jmp 0x14010d8c9
movzx eax, cx
mov rdx, rbx
mov qword [0x140241b58], rdx
movzx ecx, ax
cmp ax, si
jne 0x14010d91b
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d91b
cmp dword [rdx + rdi], 0x4550
jne 0x14010d91b
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d912
cmp dword [rdx + 4], 0
je 0x14010d912
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetModuleBase64
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d91e
mov qword [0x140241af0], rbx
jmp 0x14010d92e
mov rax, rbx
mov qword [0x140241af0], rax
cmp cx, si
jne 0x14010d982
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d982
cmp dword [rdx + rdi], 0x4550
jne 0x14010d982
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d977
cmp dword [rdx + 4], 0
je 0x14010d977
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymRegisterCallbackW64
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d985
mov qword [0x140241b20], rbx
nop
jmp 0x14010d995
mov rax, rbx
mov qword [0x140241b20], rax
cmp cx, si
jne 0x14010d9f3
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010d9f3
cmp dword [rdx + rdi], 0x4550
jne 0x14010d9f3
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010d9ea
cmp dword [rdx + 4], 0
je 0x14010d9ea
lea r8, ds:[rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.StackWalk64
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010d9f6
mov qword [0x140241b28], rbx
jmp 0x14010da09
mov rax, rbx
mov qword [0x140241b28], rax
nop dword [rax]
cmp cx, si
jne 0x14010da5f
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010da5f
cmp dword [rdx + rdi], 0x4550
jne 0x14010da5f
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010da56
cmp dword [rdx + 4], 0
je 0x14010da56
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.StackWalkEx
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010da62
mov qword [0x140241b38], rbx
jmp 0x14010da72
mov rax, rbx
mov qword [0x140241b38], rax
cmp cx, si
jne 0x14010dad4
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010dad4
cmp dword [rdx + rdi], 0x4550
jne 0x14010dad4
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010dacb
cmp dword [rdx + 4], 0
je 0x14010dacb
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymFromInlineContextW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010dad7
mov qword [0x140241b18], rbx
jmp 0x14010dae9
mov rax, rbx
mov qword [0x140241b18], rax
nop
cmp cx, si
jne 0x14010db3f
mov edx, dword [rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010db3f
cmp dword [rdx + rdi], 0x4550
jne 0x14010db3f
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010db36
cmp dword [rdx + 4], 0
je 0x14010db36
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetLineFromInlineContextW
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010db42
mov qword [0x140241b50], rbx
jmp 0x14010db52
mov rax, rbx
mov qword [0x140241b50], rax
cmp cx, si
jne 0x14010dbb4
mov edx, dword ds:[rdi + 0x3c]
lea eax, [rdx - 1]
cmp eax, 0x7ffffffd
ja 0x14010dbb4
cmp dword [rdx + rdi], 0x4550
jne 0x14010dbb4
add rdx, 0x88
add rdx, rdi
mov eax, dword [rdx]
test eax, eax
je 0x14010dbab
cmp dword [rdx + 4], 0
je 0x14010dbab
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.MiniDumpWriteDump
mov rcx, rdi
call fcn.1400fa1a0
movzx ecx, word [rdi]
jmp 0x14010dbb7
mov qword [0x140241b40], rbx
jmp 0x14010dbc9
mov rax, rbx
mov qword [0x140241b40], rax
nop
cmp cx, si
jne 0x14010dcc6
mov ecx, dword [rdi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7ffffffd
ja 0x14010dc1e
cmp dword [rcx + rdi], 0x4550
jne 0x14010dc1e
lea rdx, [rdi + 0x88]
add rdx, rcx
mov eax, dword [rdx]
test eax, eax
je 0x14010dc1e
cmp dword [rdx + 4], 0
je 0x14010dc1e
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.UnDecorateSymbolNameW
mov rcx, rdi
call fcn.1400fa1a0
cmp word [rdi], si
jne 0x14010dcc6
mov ecx, dword [rdi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7ffffffd
ja 0x14010dc73
cmp dword [rcx + rdi], 0x4550
jne 0x14010dc73
lea rdx, [rdi + 0x88]
add rdx, rcx
mov eax, dword [rdx]
test eax, eax
je 0x14010dc73
cmp dword [rdx + 4], 0
je 0x14010dc73
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymGetDiaSession
mov rcx, rdi
call fcn.1400fa1a0
cmp word [rdi], si
jne 0x14010dcc6
mov ecx, dword ds:[rdi + 0x3c]
lea eax, [rcx - 1]
cmp eax, 0x7ffffffd
ja 0x14010dcc6
cmp dword [rcx + rdi], 0x4550
jne 0x14010dcc6
lea rdx, [rdi + 0x88]
add rdx, rcx
mov eax, dword [rdx]
test eax, eax
je 0x14010dcc6
cmp dword [rdx + 4], 0
je 0x14010dcc6
lea r8, [rdi + rax]
mov word [rsp + 0x20], bx
lea r9, str.SymFreeDiaString
mov rcx, rdi
call fcn.1400fa1a0
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret