Function at 0x1400010f0
Capabilities:
Resolve function by fnv-1a hash

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1a98
call fcn.1400021f0
sub rsp, rax
lea rcx, [rsp + 0x260]
mov r8d, 0x82a
lea rdx, [0x140003300]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.___Starting_...
call fcn.140001500
mov rcx, rax
lea rdx, [0x1400016d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rax, str.notepad.exe
mov edx, 0xcd5e8a97
lea rcx, str.kernel32
mov qword [rsp + 0x40], rax
call section..text
mov edx, 0x4105fc56
lea rcx, str.kernel32
mov rbx, rax
call section..text
mov edx, 0x6333ef38
mov qword [rsp + 0x1af0], rax
lea rcx, str.kernel32
call section..text
mov edx, 0x9bfc0a3e
lea rcx, str.psapi
mov r13, rax
call section..text
mov edx, 0xfaba0065
lea rcx, str.kernel32
mov r12, rax
call section..text
lea r8, [rsp + 0x1ae0]
mov edx, 0x1000
lea rcx, [rsp + 0xa90]
mov r15, rax
call rbx
test eax, eax
jne 0x1400011df
lea edi, [rax + 1]
jmp 0x1400012ba
mov r14d, dword [rsp + 0x1ae0]
xor ebp, ebp
shr r14d, 2
test r14d, r14d
je 0x1400012b3
lea rsi, [rsp + 0xa90]
nop
mov edi, dword [rsi]
test edi, edi
je 0x1400012a4
movups xmm0, xmmword [str._unknown_]
mov eax, dword [0x1400032f8]
lea rcx, [rsp + 0x64]
xor edx, edx
mov dword [rsp + 0x60], eax
mov r8d, 0x1f4
movaps xmmword [rsp + 0x50], xmm0
call sub.VCRUNTIME140.dll_memset
mov r8d, edi
xor edx, edx
mov ecx, 0x410
call qword [rsp + 0x1af0]
mov rbx, rax
test rax, rax
je 0x1400012a4
lea r9, [rsp + 0x1ae8]
mov r8d, 8
lea rdx, [rsp + 0x1af8]
mov rcx, rax
call r13
test eax, eax
je 0x140001284
mov rdx, qword [rsp + 0x1af8]
lea r8, [rsp + 0x50]
mov r9d, 0x104
mov rcx, rbx
call r12
lea rdx, [rsp + 0x50]
lea rcx, str.notepad.exe
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
mov rcx, rbx
test eax, eax
je 0x140001464
call r15
inc ebp
add rsi, 4
cmp ebp, r14d
jb 0x140001200
mov edi, dword [rsp + 0x1ae0]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.PID_of
call fcn.140001500
mov rcx, rax
lea rdx, [rsp + 0x40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, str._is_:
call fcn.140001500
mov rcx, rax
mov edx, edi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1400016d0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov edx, 0x4105fc56
lea rcx, str.kernel32
call section..text
mov edx, 0xaeb6049c
lea rcx, str.kernel32
mov rbx, rax
call section..text
mov edx, 0x820621f3
lea rcx, str.kernel32
mov rsi, rax
call section..text
mov edx, 0xc0088eea
lea rcx, str.kernel32
call section..text
mov edx, 0xc398c463
lea rcx, str.kernel32
mov r15, rax
call section..text
mov edx, 0x14c8e
lea rcx, str.kernel32
mov r12, rax
call section..text
mov edx, 0xfaba0065
lea rcx, str.kernel32
call section..text
mov edx, 0xf8d32811
lea rcx, str.kernel32
mov rbp, rax
call section..text
mov r8d, edi
xor edx, edx
mov ecx, 0x1fffff
mov r14, rax
call rbx
mov rbx, rax
test rax, rax
je 0x14000146c
xor edx, edx
mov dword [rsp + 0x20], 0x40
mov r9d, 0x3000
mov r8d, 0x82a
mov rcx, rax
call rsi
mov rdi, rax
test rax, rax
je 0x14000146c
lea rax, [rsp + 0x48]
mov r9d, 0x82a
lea r8, [rsp + 0x260]
mov qword [rsp + 0x20], rax
mov rdx, rdi
mov rcx, rbx
call r15
test eax, eax
je 0x14000146c
cmp qword [rsp + 0x48], 0x82a
jne 0x14000146c
xor eax, eax
mov r9, rdi
mov qword [rsp + 0x30], rax
xor r8d, r8d
mov dword [rsp + 0x28], eax
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x20], rax
call r12
test rax, rax
je 0x14000146c
xor r8d, r8d
mov edx, 0xffffffff
mov rcx, rax
call r14
mov rcx, rbx
call rbp
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.Press__ENTER__to_quit_...
call fcn.140001500
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov eax, 1
jmp 0x140001471
call r15
jmp 0x1400012ba
mov eax, 0xffffffff
add rsp, 0x1a98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret