Function at 0x140011933
Capabilities:
Execute command

Disassembly:
jmp 0x140027360
push rbp
push rdi
sub rsp, 0x2b8
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x76
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x14003c040]
xor rax, rbp
mov qword [rbp + 0x288], rax
lea rcx, [0x14004410a]
call fcn.140011d89
nop
lea rdx, str.javaw.exe
lea rcx, [rbp + 8]
call fcn.14001143d
nop
lea rdx, str.Searching_for_process:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.14001169a
lea rdx, [rbp + 8]
mov rcx, rax
call fcn.140011767
lea rdx, [0x14001164f]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
nop
lea rcx, [rbp + 8]
call fcn.140011258
mov dword [rbp + 0x44], eax
cmp dword [rbp + 0x44], 0
jne 0x140027441
lea rdx, str.Process_not_found_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
mov dword [rbp + 0x224], 1
lea rcx, [rbp + 8]
call fcn.140011bbd
mov eax, dword [rbp + 0x224]
jmp 0x1400277a8
lea rdx, str.Found_process_with_PID:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov r8d, dword [rbp + 0x44]
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x1400274dd
lea rdx, str.Failed_to_open_process_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, str.pause
call qword [sym.imp.ucrtbased.dll_system]
nop
mov dword [rbp + 0x244], 1
lea rcx, [rbp + 8]
call fcn.140011bbd
mov eax, dword [rbp + 0x244]
jmp 0x1400277a8
lea rdx, str.Successfully_opened_process._Type_scan_to_start_scanning__or_type_a_partial_name_to_search.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
xor eax, eax
cmp eax, 1
je 0x140027784
lea rcx, [rbp + 0x88]
call fcn.140011d75
nop
lea rdx, [0x1400356a0]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
nop
lea rdx, [rbp + 0x88]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call fcn.140011735
nop
lea rdx, str.scan
lea rcx, [rbp + 0x88]
call fcn.14001152d
movzx eax, al
test eax, eax
je 0x1400275b8
lea rdx, str.Starting_memory_scan_on_the_specific_range...
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
call fcn.140011e97
nop
mov rcx, qword [rbp + 0x68]
call fcn.140011bd6
nop
lea rdx, str.Memory_scan_completed.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x140027772
lea rcx, [rbp + 0x88]
call fcn.140011ba4
test rax, rax
jbe 0x14002774e
mov byte [rbp + 0xc4], 0
lea rax, [0x14003c720]
mov qword [rbp + 0xe8], rax
mov edx, 8
lea rcx, [rbp + 0x108]
call fcn.140011ab9
lea rdx, [rbp + 0x108]
mov rcx, qword [rbp + 0xe8]
call fcn.1400115a5
nop
mov edx, 8
lea rcx, [rbp + 0x128]
call fcn.140011ab9
lea rdx, [rbp + 0x128]
mov rcx, qword [rbp + 0xe8]
call fcn.140011de8
nop
jmp 0x14002763b
lea rcx, [rbp + 0x108]
call fcn.140011235
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x108]
call fcn.140011302
movzx eax, al
test eax, eax
je 0x14002770e
lea rcx, [rbp + 0x108]
call fcn.140011d34
mov qword [rbp + 0x148], rax
mov rax, qword [rbp + 0x148]
xor r8d, r8d
lea rdx, [rbp + 0x88]
mov rcx, rax
call fcn.14001137a
cmp rax, 0xffffffffffffffff
je 0x140027709
mov rax, qword [rbp + 0x148]
add rax, 0x28
mov qword [rbp + 0x278], rax
mov rcx, qword [rbp + 0x148]
mov qword [rbp + 0x280], rcx
lea rdx, str.Name:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
mov rcx, qword [rbp + 0x280]
mov rdx, rcx
mov rcx, rax
call fcn.140011c44
lea rdx, str.__UUID:
mov rcx, rax
call fcn.14001114a
mov rcx, qword [rbp + 0x278]
mov rdx, rcx
mov rcx, rax
call fcn.140011c44
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov byte [rbp + 0xc4], 1
jmp 0x14002762e
movzx eax, byte [rbp + 0xc4]
test eax, eax
jne 0x14002774c
lea rdx, str.No_matching_names_found_with:
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
lea rdx, [rbp + 0x88]
mov rcx, rax
call fcn.140011c44
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
jmp 0x140027772
lea rdx, str.Unknown_command._Type_scan_to_scan_the_memory_or_a_partial_name_to_lookup.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001114a
lea rdx, [0x140011069]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
lea rcx, [rbp + 0x88]
call fcn.14001123a
nop
jmp 0x140027501
mov rcx, qword [rbp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov dword [rbp + 0x264], 0
lea rcx, [rbp + 8]
call fcn.140011bbd
mov eax, dword [rbp + 0x264]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140034240]
call fcn.140011b40
mov rax, rdi
mov rcx, qword [rbp + 0x288]
xor rcx, rbp
call fcn.14001163b
lea rsp, [rbp + 0x298]
pop rdi
pop rbp
ret